chore(deps): bump the rust-dependencies group with 3 updates

[dependabot]

Bumps the rust-dependencies group with 3 updates: regex, ryu-js and bytemuck.

Updates regex from 1.12.4 to 1.13.0

Changelog

Sourced from regex's changelog.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

• #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

Commits

• 926af2e 1.13.0
• 7d941a9 regex-automata-0.4.15
• e358341 api: add regex! macro for lazy compilation
• c420333 automata: disable miri on a couple doc tests
• b9d2cf7 github: add FUNDING link
• 0858006 docs: add AI policy for contributors
• 468fc64 automata: reject dense DFA start states that are match states
• See full diff in compare view

Updates ryu-js from 1.0.2 to 1.0.3

Release notes

Sourced from ryu-js's releases.

v1.0.3

Breaking Changes

• Minimum rust version has been bumped from 1.64.0 to 1.71.0.

Bug Fixes

• [BUG #56](boa-dev/ryu-js#2): Fix panic in format64_to_fixed when rounding carries past all integer digits. (@​Ansh-699)

Internal Improvements

• [INTERNAL #57](boa-dev/ryu-js#57): Sync upstream/main. (@​jedel1043)
• [INTERNAL #63](boa-dev/ryu-js#63): Make Cursor store unsigned integer len and index. (@​HalidOdat)

New Contributors

• @​Ansh-699 made their first contribution in boa-dev/ryu-js#56

Full Changelog: boa-dev/ryu-js@v1.0.2...v1.0.3

Changelog

Sourced from ryu-js's changelog.

# 1.0.3 (2026-07-05)

Breaking Changes

• Minimum rust version has been bumped from 1.64.0 to 1.71.0.

Bug Fixes

• [BUG #56](boa-dev/ryu-js#2): Fix panic in format64_to_fixed when rounding carries past all integer digits. (@​Ansh-699)

Internal Improvements

• [INTERNAL #57](boa-dev/ryu-js#57): Sync upstream/main. (@​jedel1043)
• [INTERNAL #63](boa-dev/ryu-js#63): Make Cursor store unsigned integer len and index. (@​HalidOdat)

Commits

• f8d6626 Release v1.0.3 (#64)
• 9a936cb Make Cursor store unsigned integer len and index (#63)
• 97e8180 Bump actions/cache from 4 to 6 (#62)
• 4beec89 Fix panic in format64_to_fixed when rounding carries past all integer digits ...
• 03bf0f3 Sync upstream/main (#57)
• See full diff in compare view

Updates bytemuck from 1.25.0 to 1.25.1

Changelog

Sourced from bytemuck's changelog.

1.25.1

• Don't impl core::error::Error on spirv, which was causing a build error on that target.
• Added a reminder on try_cast_slice that empty slices must still be aligned.

1.25

• Remove extern "stdcall" fn ptr impls on non-x86-32 windows.
• Fix nightly_portable_simd after LaneCount removal.

1.24

• use new stable avx512 types from rust 1.89
• impl AnyBitPattern for [MaybeUninit<T: AnyBitPattern>; N]
• bump derive minimum version.

1.23.2

• bump derive minimum version.

1.23.1

• Added a windows-only ZeroableInOption impl for "stdcall" functions.

1.23

• impl_core_error crate feature adds core::error::Error impl.
• More ZeroableInOption impls.

1.22

• Add the pod_saturating feature, which adds Pod impls for Saturating<T> when T is already Pod.
• A bump in the minimum bytemuck_derive dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient cargo.lock file sitting around.
• Adds Send and Sync impls to BoxBytes.

1.21

• Implement Pod and Zeroable for core::arch::{x86, x86_64}::__m512, __m512d and __m512i without nightly. Requires Rust 1.72, and is gated through the avx512_simd cargo feature.
• Allow the use of must_cast_mut and must_cast_slice_mut in const contexts. Requires Rust 1.83, and is gated through the must_cast_extra cargo feature.
• internal: introduced the maybe_const_fn macro that allows defining some function to be const depending upon some cfg predicate.

1.20

• New functions to allocate zeroed Arc and Rc. Requires Rust 1.82
• TransparentWrapper impls for core::cmp::Reverse and core::num::Saturating.

... (truncated)

Commits

• cabc8e7 chore: Release bytemuck version 1.25.1
• 2d4d8ca changelog
• 946e7a9 chore: Release bytemuck_derive version 1.11.0
• 8a8f7cf changelog derive
• ee6742e changelog
• e2d1c7f Don't impl core::error::Error on spirv (#348)
• 7dd7174 make the note more terse
• 24b1b71 Update Rust version in CI workflow to 1.71.0
• f0dfc1b docs: note that an empty slice must still satisfy target alignment in cast_sl...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Test262 conformance changes

Test result	main count	PR count	difference
Total	53,125	53,125	0
Passed	51,072	51,072	0
Ignored	1,482	1,482	0
Failed	571	571	0
Panics	0	0	0
Conformance	96.14%	96.14%	0.00%

Tested main commit: 4f98f6446812f1c5923153f8c7e1beda3a891bfe
Tested PR commit: 03e2196f737debf0608bdd4e5f97e4246b729341
Compare commits: 4f98f64...03e2196