deps: bump the rust-dependencies group with 4 updates

[dependabot]

Bumps the rust-dependencies group with 4 updates: anyhow, rand, tempfile and rmcp.

Updates anyhow from 1.0.100 to 1.0.101

Release notes

Sourced from anyhow's releases.

1.0.101

• Add #[inline] to anyhow::Ok helper (#437, thanks @​Ibitier)

Commits

• 80bfe29 Release 1.0.101
• dff8c43 Merge pull request #437 from Ibitier/inline-ok-helper
• 85d9ea9 Add #[inline] to anyhow::Ok helper
• 54036cc Update ui test suite to nightly-2026-01-21
• cce0579 Update actions/upload-artifact@v5 -> v6
• f2c598c Update actions/upload-artifact@v4 -> v5
• 2c0bda4 Update to 2021 edition
• 0d82268 Remove rustc version requirement from readme
• 67df012 Merge pull request #436 from dtolnay/up
• c898488 Raise required compiler to Rust 1.68
• Additional commits viewable in compare view

Updates rand from 0.9.2 to 0.10.0

Changelog

Sourced from rand's changelog.

[0.10.0] - 2026-02-08

Changes

• The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
• Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
• Use Edition 2024 and MSRV 1.85 (#1653)
• Let Fill be implemented for element types, not sliceable types (#1652)
• Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
• Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
• Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
• Remove Clone support for StdRng, ReseedingRng (#1677)
• Use postcard instead of bincode to test the serde feature (#1693)
• Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
• Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
• Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

• Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
• Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
• Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
• Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

• Removed ReseedingRng (#1722)
• Removed unused feature "nightly" (#1732)
• Removed feature small_rng (#1732)

#1632: rust-random/rand#1632 #1642: rust-random/rand#1642 #1649: rust-random/rand#1649 #1652: rust-random/rand#1652 #1653: rust-random/rand#1653 #1659: rust-random/rand#1659 #1665: rust-random/rand#1665 #1669: rust-random/rand#1669 #1674: rust-random/rand#1674 #1677: rust-random/rand#1677 #1693: rust-random/rand#1693 #1695: rust-random/rand#1695 #1697: rust-random/rand#1697 #1717: rust-random/rand#1717 #1722: rust-random/rand#1722 #1732: rust-random/rand#1732 #1734: rust-random/rand#1734

Commits

• acc5f24 Prepare v0.10.0 releases (#1729)
• 95c5165 Add fn rand::make_rng (#1734)
• 146da58 CHANGELOG: add PR links (#1738)
• 8cacd6d README tweaks (#1737)
• 28e3df8 Update chacha20: use ChaChaCore directly; remove bytes_until_reseed field (#1...
• 03db311 Replace fn reseed_and_generate with try_to_reseed
• b14483e Apply inline attr to fn generate
• fda8f74 Remove bytes_until_reseed field
• 213bb3b Bump chacha20 to 0.10.0-rc.11
• 72afe1e Minor tweaks; prepare v0.10.0-rc.9 (#1736)
• Additional commits viewable in compare view

Updates tempfile from 3.24.0 to 3.25.0

Changelog

Sourced from tempfile's changelog.

3.25.0

• Allow getrandom 0.4.x while retaining support for getrandom 0.3.x.

Commits

• See full diff in compare view

Updates rmcp from 0.14.0 to 0.15.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v0.15.0

Fixed

• (tasks) avoid dropping completed task results during collection (#639)
• (tasks) expose execution.taskSupport on tools (#635)

rmcp-v0.15.0

Added

• (elicitation) add support URL elicitation. SEP-1036 (#605)
• enforce SEP-1577 MUST requirements for sampling with tools (#646)
• add native-tls as an optional TLS backend (#631)
• (capabilities) add extensions field for SEP-1724 (#643)

Fixed

• (tasks) avoid dropping completed task results during collection (#639)
• (auth) oauth metadata discovery (#641)
• compilation with --no-default-features (#593)
• (tasks) expose execution.taskSupport on tools (#635)
• (tasks) correct enum variant ordering for deserialization (#634)

Other

• Add optional description field to Implementation struct (#649)
• Implement SEP-1577: Sampling With Tools (#628)

Commits

• 9cfc905 chore: release v0.15.0 (#636)
• 07028bc Add optional description field to Implementation struct (#649)
• 187597b feat(elicitation): add support URL elicitation. SEP-1036 (#605)
• edd5b1d feat: enforce SEP-1577 MUST requirements for sampling with tools (#646)
• 8bd3fcb Implement SEP-1577: Sampling With Tools (#628)
• be23334 fix(tasks): avoid dropping completed task results during collection (#639)
• f6ebc7a fix(auth): oauth metadata discovery (#641)
• bfd9cc0 feat: add native-tls as an optional TLS backend (#631)
• 53b64a9 fix: compilation with --no-default-features (#593)
• df6c3f0 fix(tasks): expose execution.taskSupport on tools (#635)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Note

Medium Risk
Primarily dependency upgrades, but rand has a major version bump and rmcp update could introduce API/behavior changes in randomness and MCP client interactions.

Overview
Bumps workspace dependencies: anyhow to 1.0.101, rand to 0.10 (used by api, services, and database), tempfile to 3.25 (dev dependency in config), and rmcp to 0.15 in services.

Regenerates Cargo.lock, pulling in new transitive crates/versions (e.g., chacha20, getrandom 0.4, wit-bindgen/WASI/WASM-related crates) and introducing parallel versions of some deps (e.g., cpufeatures 0.3.0, hashbrown 0.15.x).

^{Written by Cursor Bugbot for commit f69f4aa. This will update automatically on new commits. Configure here.}