chore(deps): bump the production-dependencies group across 2 directories with 3 updates

[dependabot]

Bumps the production-dependencies group with 2 updates in the / directory: serde-saphyr and open.
Bumps the production-dependencies group with 1 update in the /acdc-parser/fuzz directory: serde.

Updates serde-saphyr from 1.1.0 to 1.2.0

Release notes

Sourced from serde-saphyr's releases.

1.2.0 It's all about !!tags this time

This release focuses on enhanced tag support.

• Implemented tag capturing (#183). Applications can use custom tags to express units, priorities, accessibility, or other application-specific semantics for a node. This is supported by new Tagged<T> wrapper that is similar to Commented<T>.
• Unsupported tags can now be rejected rather than ignored (new option reject_unsupported_tags, #180). This aligns the behavior with ruamel.yaml that rejects tags for which it has no constructor (serde-saphyr does not construct this way) that caused discussion on prek.
• Clearly wrongly placed tags like !!int [1] or !!map [1] are now an error.
• Documentation was revised to make sure all examples compile (are not fragments).

Changelog

Sourced from serde-saphyr's changelog.

1.2.0 Maintenance release

Changed

• Folded property-interpolation depth and work limits into Budget; property resource-limit failures are now reported through Error::Budget and BudgetBreach.
• Added the opt-in Options::reject_unsupported_tags strict mode. It rejects explicitly tagged scalar, sequence, and mapping nodes when their tag is unknown to serde-saphyr; the default remains permissive for compatibility with custom tagged enums. YAML 1.1 !!merge and !!value are accepted in this mode only as the exact scalar mapping keys << and =, respectively, while robotics-only !degrees and !radians require both the robotics crate feature and angle_conversions, and !include requires both the include crate feature and a configured resolver.
• Enforced the scalar, sequence, or mapping node kinds required by recognized tags even when reject_unsupported_tags is disabled.
• Hardened serializer indentation handling: indent_step is now limited to 1..=64, all serializer entry points validate it, and indentation arithmetic returns an error instead of overflowing. We do not consider this breaking because values outside this range does not look sane.
• Validated custom anchor-generator names before emission. Names must be 1–256 bytes and cannot contain whitespace, control characters, or YAML flow punctuation; unsupported names now return a serialization error.

Fixes

• Recognized explicit YAML 1.1 !!merge keys, including verbatim tags and %TAG-expanded handles, everywhere implicit << merge keys are supported.
• Recognized the YAML 1.1 !!value tag while intentionally treating it as a no-op annotation.
• Accepted valid zero-indented root folded block scalars, including #-prefixed content lines.
• Fixed externally tagged typetag trait-object deserialization by consuming the closing mapping event when a Serde map visitor returns after its final key/value pair, preventing a false "multiple YAML documents" error.
• Rejected non-UTF-8 canonical include and root-file paths before resolver policy checks and source identity handling, preventing lossy path collisions and policy bypasses on Unix.
• Reported alias-use locations as primary for unsupported-tag and budget failures during replay, while retaining the anchor-definition locations as secondary context.

Testing

• Reviewed yaml test suite, made sure all 350 active IDs and all 402 active cases are represented and documented we use YAML Test Suite v2022-01-17.
• property test with 1,024 generated cases to check the round trip.
• added tests for typetag.

Commits

• 4504205 Disable test miri cannot run
• db2ce54 Formatting fix
• d7e0a6d Formatting fix
• 34b008c Last README.md tweaks
• cb230e8 Last README.md tweaks
• d3f1d38 Last README.md tweaks
• e54e52a Merge remote-tracking branch 'origin/master'
• 4279ed4 Prepare for release 1.2.0
• 99262cc Improve test coverage
• ea3333b Bump granit-parser from 07e0097 to 53104a5 (#187)
• Additional commits viewable in compare view

Updates open from 5.4.2 to 5.4.3

Release notes

Sourced from open's releases.

v5.4.3

Bug Fixes

• wait for intermediate child to terminate when double-forking

Commit Statistics

• 3 commits contributed to the release.
• 9 days passed between releases.
• 1 commit was understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Commit Details

• Uncategorized
  • Merge pull request #131 from ncfavier/reap (136d4d0)
  • Review (43e601d)
  • Wait for intermediate child to terminate when double-forking (a78c0ca)

Changelog

Sourced from open's changelog.

5.4.3 (2026-09-02)

Bug Fixes

• wait for intermediate child to terminate when double-forking

Commit Statistics

• 3 commits contributed to the release.
• 9 days passed between releases.
• 1 commit was understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Commit Details

• Uncategorized
  • Merge pull request #131 from ncfavier/reap (136d4d0)
  • Review (43e601d)
  • Wait for intermediate child to terminate when double-forking (a78c0ca)

Commits

• 9551952 Release open v5.4.3
• 136d4d0 Merge pull request #131 from ncfavier/reap
• 43e601d review
• a78c0ca fix: wait for intermediate child to terminate when double-forking
• See full diff in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions