chore(deps): bump the rust-minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the rust-minor-and-patch group with 3 updates in the /analyzers directory: clap, rawzip and serde_json.

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates rawzip from 0.5.1 to 0.5.2

Changelog

Sourced from rawzip's changelog.

v0.5.2 - October 4th, 2026

Fix central directory iteration that did not end after a parse error. The slice Iterator and the reader next_entry returned the same error forever, so callers that skip errors (for example, filter_map(Result::ok)) did not stop. An error now ends iteration, and ZipSliceEntries implements FusedIterator.

Fix incorrect local header reads stemming from a u64::MAX overflow summing a Zip64 local header offset with prelude data. Debug builds panicked and release builds wrapped silently. An Eof is now returned.

Fix 32-bit targets (eg: wasm32) with zip data of 4 GiB or more. In a few instances, a u64 was narrowed to a usize in arithmetic.

• Reading an entry with 4 GiB or more remaining returned short reads, or a false EOF at exactly 4 GiB (#198, thanks @​MarSoft)
• A local header offset of 4 GiB or more read from the wrong position instead of returning an error
• Central directory iteration with 4 GiB or more remaining returned a false Eof
• A max_search_space of 4 GiB or more could miss the end of central directory record, or not stop the search

64-bit targets are not affected.

Fix timestamps outside the supported date range. When writing, dates after 2106-02-07 06:28:15 UTC now use the maximum extended timestamp instead of wrapping to an earlier date. UtcDateTime::from_unix also clamps values outside years 1 through 65535. Reading standard ZIP timestamp fields is unchanged.

Commits

• b04fa8f chore: Release rawzip version 0.5.2
• d9fe016 update changelog to latest
• 6bf9361 Merge pull request #202 from nickbabcock/fix/fuse-entry-iteration
• 5c95c7d End central directory iteration after a parse error
• d43b830 Merge pull request #201 from nickbabcock/fix/zip-timestamp-overflow
• a69553c Clamp out-of-range timestamps when writing ZIPs
• 20ef3a1 Merge pull request #200 from nickbabcock/fix/local-header-offset-overflow
• 3383644 Fix local header offset overflow
• 03561c7 Merge pull request #199 from nickbabcock/fix/32bit-truncation-audit
• 7562574 Fix 32 bit target truncation paths
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions