Build(deps): Bump the rust-dependencies group with 4 updates

[dependabot]

Bumps the rust-dependencies group with 4 updates: thiserror, rand, redis and tiktoken-rs.

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

• Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
• Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
• Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

• Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

• 9e7d328 Prepare rand 0.10.3 (#1840)
• f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
• ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
• c994eb1 docs: fix angle unit in quick start example (#1839)
• 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
• 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
• bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
• 521fab6 Stop pinning dependencies (#1820)
• 3f7c433 Stop pinning dependencies
• cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
• Additional commits viewable in compare view

Updates redis from 1.7.0 to 1.7.1

Release notes

Sourced from redis's releases.

redis-1.7.1

Changes & Bug fixes

• Add the remaining simple field types for FT.CREATE [3/8] (#2317 by @​StefanPalashev)
• Fix READONLY being sent to servers that don't support it. (#2414 by @​nihohit)
• fix: async cluster client deadlock when refresh_slots() race with rec… (#2419 by @​virratanasangpunth)

CI & operational improvements

• docs: Fix casing of Valkey (#2412 by @​somechris)
• ci: Bump Redis 8.8 to Redis 8.10 (#2402 by @​somechris)
• ci: Bump Valkey patch versions (#2405 by @​somechris)
• ci: Build servers in parallel (#2408 by @​somechris)
• doc: Add PROTOCOL variable (#2409 by @​somechris)

Full Changelog: redis-rs/redis-rs@redis-1.7.0...redis-1.7.1

Commits

• 9e9e62a Prepare version (#2421)
• 2ec6907 fix: async cluster client deadlock when refresh_slots() race with reconnect_l...
• 9ec91d1 docs: Fix casing of Valkey (#2412)
• b3d0850 Fix READONLY being sent to servers that don't support it. (#2414)
• 1d9fdc2 doc: Add PROTOCOL variable (#2409)
• 2420b84 ci: Build servers in parallel (#2408)
• 984e7c6 ci: Bump Valkey patch versions (#2405)
• 532d66b ci: Bump Redis 8.8 to Redis 8.10 (#2402)
• 68629b3 Add the remaining simple field types for FT.CREATE [3/8] (#2317)
• See full diff in compare view

Updates tiktoken-rs from 0.12.0 to 0.12.1

Release notes

Sourced from tiktoken-rs's releases.

v0.12.1

A maintenance release that refreshes upstream tiktoken and restores compatibility with the declared Rust 1.85 minimum. Existing public function signatures are unchanged.

Changes

• Refresh the vendor snapshot to OpenAI tiktoken 0.14.0 and align regex dependencies. GPT-5 tokenizer lookup follows upstream's family-prefix matching. (#173)
• Use a 1,050,000-token context-window default for gpt-6* names. This adds context metadata only; GPT-6 tokenizer lookup and token-budget helpers remain unsupported. (#174)
• Fix Rust 1.85 compilation and the default-feature README doctest; test both default and all features across supported platforms. (#170)
• Replace lazy_static with the standard library's LazyLock. (#165)
• Clarify README instructions and remove release-specific wording. (#172)
• Fail release detection on registry errors and remove inactive upload jobs. (#171)

The minimum supported Rust version remains 1.85.

Thanks to @​Expyron for their first contribution in #165.

Full changelog: zurawiki/tiktoken-rs@v0.12.0...v0.12.1

Commits

• 72a5a80 Release tiktoken-rs 0.12.1 (#175)
• bd5afd0 Add a default context window for GPT-6 models (#174)
• 8759c56 Refresh vendored tiktoken to 0.14.0 (#173)
• f1d1dc3 Clarify README wording and remove release-specific prose (#172)
• 8364775 Fail release detection on registry errors and remove empty upload jobs (#171)
• c0961ee Fix and test Rust 1.85 and default-feature support (#170)
• a79050e Replace lazy_static dependency (#165)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 55bdb300-a4f6-4dbf-bd51-1c843ce5cc0c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}