chore(deps): bump the rust-dependencies group with 6 updates

[dependabot]

Bumps the rust-dependencies group with 6 updates:

Package	From	To
clap	4.6.6	4.6.7
jsonwebtoken	11.0.0	11.1.0
object_store	0.14.1	0.14.2
aws-sdk-s3	1.146.1	1.148.0
aws-smithy-types	1.6.3	1.6.4
jiff	0.2.35	0.2.37

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates jsonwebtoken from 11.0.0 to 11.1.0

Changelog

Sourced from jsonwebtoken's changelog.

11.1.0 (2026-09-16)

• Add dangerous::insecure_decode_claims

Commits

• 4c0ae75 Ready for release
• 46690b5 Add insecure_decode_claims (#539)
• See full diff in compare view

Updates object_store from 0.14.1 to 0.14.2

Release notes

Sourced from object_store's releases.

object_store v0.14.2

Changelog

v0.14.2 (2026-09-11)

Full Changelog

Implemented enhancements:

• Implement Clone for MicrosoftAzure #824
• Support URLs for jurisdiction-restricted buckets on R2 #814
• Lightweight DNS cache with shuffle to prevent DNS flooding #726
• Allow presigning object_store multipart uploads #271
• Allow specifying Content-Type when signing object_store PUT requests #270

Fixed bugs:

• Incomplete ASF license header in src/client/s3.rs (caused -1 vote on 0.14.2 RC1) #853
• WriteMultipart::finish should abort after part upload failure #818
• The 1.85 MSRV is inaccurate with all features #811
• When the backend service returns an HTTP 500, the object store panics #414

Documentation updates:

• Docs: point users uploading large objects at the multipart API #839 (alamb)
• [object-store]: update release schedule #834 (alamb)
• Add doc example for multipart upload to GoogleCloudStorage::create_multipart #803 (alamb)
• Add doc example for multipart upload to MicrosoftAzure::create_multipart #802 (alamb)
• Add doc example for multipart upload to AmazonS3::create_multipart #801 (alamb)

Closed issues:

... (truncated)

Changelog

Sourced from object_store's changelog.

Historical Changelog

Commits

• 279572e Update CHANGELOG for latest main (#855)
• 4ff7d04 Restore missing first line of ASF license header in src/client/s3.rs (#854)
• 25fa079 Update version to 0.14.2 and add CHANGELOG (#850)
• c37db72 feat: retry failed multipart part uploads (#849)
• 135984f Add doc hints pointing large-object uploads at the multipart API (#839)
• b07471e [object-store]: update release schedule (#834)
• 978fb48 Fix MSRV violation in parse.rs test, check --all-targets in MSRV CI (#837)
• e2a4934 Speed up MSRV CI check by installing cargo-msrv via taiki-e/install-action (#...
• e28807d feat: presigned URLs with extra query params and signed headers (SignedUrlOpt...
• 5c74363 Restore UnwindSafe/RefUnwindSafe on ClientOptions by bounding DnsResolver (#836)
• Additional commits viewable in compare view

Updates aws-sdk-s3 from 1.146.1 to 1.148.0

Commits

• See full diff in compare view

Updates aws-smithy-types from 1.6.3 to 1.6.4

Commits

• See full diff in compare view

Updates jiff from 0.2.35 to 0.2.37

Changelog

Sourced from jiff's changelog.

0.2.37 (2026-09-12)

This is a redux release of 0.2.36 that fixes a compilation bug.

Bug fixes:

• #647: Fixes a compilation bug due to incorrect include paths.

0.2.36 (2026-09-12)

This release has a couple bug fixes and adds opt-in integration with the arbitrary crate.

Enhancements:

• #631: Add optional Arbitrary trait implementations from the arbitrary crate.

Bug fixes:

• #617: Fixes a bug in jiff_core::tz::Offset checked subtraction routine.
• #627: Use serialize_some for optional Serde helpers in jiff::fmt::serde.

Commits

• 4100a7c 0.2.37
• c1febcb changelog: 0.2.37
• 7bd0c36 doc: fix include paths, redux
• aa8008e Revert "doc: fix include paths"
• 8c2585c doc: fix include paths
• 7e81331 0.2.36
• d2f10b1 jiff-core-0.1.1
• 189c390 changelog: 0.2.36
• ab6e8c8 jiff: remove duplicated docs
• eabd531 jiff: add optional arbitrary::Arbitrary implementations
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 854cec81-a948-490e-af71-5544a715a61b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}