chore(deps): bump the rust-minor group with 2 updates

[dependabot]

Bumps the rust-minor group with 2 updates: log and blake3.

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

• 8034743 Merge pull request #738 from rust-lang/cargo/0.4.34
• 7d1e24e prepare for 0.4.34 release
• 3b939b6 Merge pull request #737 from malezjaa/master
• b88266c Add alloc support for boxed loggers
• 037d7a5 doc: Add context-logger utility to README
• See full diff in compare view

Updates blake3 from 1.8.6 to 1.8.7

Release notes

Sourced from blake3's releases.

1.8.7

version 1.8.7

Changes since 1.8.6:

• Remove the arrayref dependency. Unfortunately the crates.io owner was compromised.

Commits

• f3149ec version 1.8.7
• b65bcb7 add #[allow(deprecated)] annotations to fix nightly/beta warnings
• 483a220 fix warnings related to not using MAX constants
• ba02549 Codex: remove arrayref
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

This pull request aims to update the 'log' and 'blake3' dependencies, the latter specifically to address a security concern regarding a compromised upstream dependency ('arrayref'). However, there is a fundamental misalignment between the PR's intent and the file changes: while 'Cargo.lock' is updated, 'Cargo.toml' remains unchanged.

If the objective is to ensure specific versions are used across the project, the manifest file must be updated. The current state prevents full verification of the security fix and could lead to inconsistent environments. This discrepancy should be resolved before merging.

About this PR

• The 'blake3' update is a critical security fix. The absence of corresponding changes in 'Cargo.toml' prevents verification that the compromised 'arrayref' dependency is correctly mitigated and excluded from future builds.
• There is a discrepancy between the PR intent and the modified files. 'Cargo.toml' is missing modifications required to implement the version bumps described in the PR title and description. Relying solely on 'Cargo.lock' does not guarantee the required version constraints are maintained.

Test suggestions

• Verify successful compilation of the project with the updated dependencies.
• Verify that cryptographic hashing remains consistent and correct using blake3 v1.8.7.
• Verify that logging functionality operates as expected with log v0.4.34.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify successful compilation of the project with the updated dependencies.
2. Verify that cryptographic hashing remains consistent and correct using blake3 v1.8.7.
3. Verify that logging functionality operates as expected with log v0.4.34.

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}