Bump the rust-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the rust-dependencies group with 4 updates in the / directory: syn, quote, proc-macro2 and duckdb.

Updates syn from 2.0.117 to 3.0.0

Release notes

Sourced from syn's releases.

3.0.0

This release contains adjustments to the syntax tree to account for ongoing Rust language development from the 3 years since syn 2.0.0 and to anticipate some in-flight Rust language RFCs.

These include: default values in fields, pinned type sugar, raw lifetimes, generator blocks and functions, unnamed enum variants, attributes in tuple types and tuple patterns, named arguments in parenthesized generic argument lists, lightweight clones, const traits, const function pointers, mutability restricted fields, supertrait auto implementation, final associated functions, trait implementability restrictions, const blocks in path arguments, item-level const blocks, return type notation, never patterns, function delegation, mutable by-reference bindings, in-place initialization, field projections, explicitly dyn-compatible traits, view types, file-level frontmatter, generic const arguments, guard patterns, lazy type aliases, explicitly safe foreign items, super let, unsafe fields, pattern types, heterogeneous try-blocks, function contracts, async function trait bounds, static closure coroutine syntax, unsafe binder types, move expressions, for-await loops, and postfix keywords.

Breaking changes

Modifiers

To reserve more room for language evolution, there are 10 new non-exhaustive structs in the syntax tree having the following commonality:

• Name ending in Modifiers. {BlockModifiers, ClosureModifiers, ConstModifiers, FieldModifiers, FnModifiers, ImplModifiers, LocalModifiers, TraitBoundModifiers, TraitModifiers, TypeModifiers}

• Each implements Default. The default value is guaranteed to comprise no tokens.

• Non-exhaustive. Can only be instantiated by Syn's parser or by creating and then mutating ▁▁Modifiers::default().

• Does not implement Parse. When parsing, they are parsed by the enclosing syntax tree node.

• Does not implement ToTokens. In some cases the syntax that these nodes might hold in the future is not necessarily contiguous tokens.

• Provides .require_empty() -> Result<()> which returns a meaningfully spanned error if the modifiers are different from the empty default. This enables a caller to reject syntax it does not recognize without knowing what that syntax may be.

Types

• Type::BareFn has been renamed to Type::FnPtr to mirror the compiler's terminology. Together with this, BareVariadic is renamed to FnPtrVariadic.

• The mutually exclusive const_token and mutability fields of Type::Ptr have been unified into an enum of type PointerMutability, which was already previously used by Expr::RawAddr.

• Every Type variant now holds attributes, which can represent the attributes of element types inside a tuple type, or attributes for a function return type.

• BareFnArg is renamed to NamedArg and is used in ParenthesizedGenericArguments, in addition to the existing use in Type::FnPtr.

Expressions

• In Expr::Closure, the fields or1_token and or2_token have been renamed to inputs_begin and inputs_end to indicate the beginning and ending | token of the closure inputs.

Statements

• Attributes are now preserved on all expression kinds in statement position. Previously, parsing would silently lose attributes on some expression statements without a dedicated Expr variant, such as tail-call expressions.

Patterns

• The guard field of Arm is replaced by a new Pat::Guard variant held in the arm's pat.

Items

... (truncated)

Commits

• 51d6959 Release 3.0.0
• d63e2e1 More concise dependency version requirements
• deb8c8a Merge pull request #2054 from dtolnay/fielddefault
• f2e874d Parse field default values
• 6718d21 Merge pull request #2053 from dtolnay/kwlifetime
• 4dcc5d7 Permit keyword lifetimes in most positions
• 063f2ef Update test suite to nightly-2026-07-18
• efdbb0f Use new safe keyword type in peek_signature
• 480ddca Merge pull request #2051 from dtolnay/optiontuple
• 6ebb4c7 Align GenericParam defaults with option-of-tuple convention
• Additional commits viewable in compare view

Updates quote from 1.0.45 to 1.0.47

Release notes

Sourced from quote's releases.

1.0.47

• Documentation improvements

1.0.46

• Avoid repeated get_span in quote_spanned (#329, thanks @​Noratrieb)

Commits

• 723dcb4 Release 1.0.47
• 86e2967 Update documentation links to syn 3
• b56db87 Update ui test suite to nightly-2026-07-14
• cba5d96 Update actions/upload-artifact@v6 -> v7
• bc4caf2 Release 1.0.46
• dc0e304 Format with rustfmt
• 712114c Drop arrow from syntax of quote_spanned_with_expanded_span
• f93ab8a Eliminate quote_spanned_with_expanded_span_as_expr macro
• 1ff3951 Eliminate __quote_spanned macro
• 64e913a Unify quote_spanned definitions
• Additional commits viewable in compare view

Updates proc-macro2 from 1.0.106 to 1.0.107

Release notes

Sourced from proc-macro2's releases.

1.0.107

• Documentation improvements

Commits

• ed8a549 Release 1.0.107
• d2550fb Update documentation links to syn 3
• 0bf387d Resolve redundant_else pedantic clippy lint
• 949d696 Update actions/upload-artifact@v6 -> v7
• 294a2bb Update actions/checkout@v6 -> v7
• cd46c1b Lint clippy::from_iter_instead_of_collect has been removed
• bb38d83 Update afl fuzzer from 0.17 to 0.18
• 0f510db Unpin CI miri toolchain
• b3c5fe3 Pin CI miri to nightly-2026-02-11
• 7e2a990 Raise required compiler to Rust 1.71
• Additional commits viewable in compare view

Updates duckdb from 1.10501.0 to 1.10504.0

Release notes

Sourced from duckdb's releases.

v1.10504.0

What's Changed

• Slice large RecordBatches in ArrowVTab by @​mlafeldt in duckdb/duckdb-rs#770
• Harden ArrowVTab batch slicing by @​mlafeldt in duckdb/duckdb-rs#771
• Overhaul developer documentation by @​mlafeldt in duckdb/duckdb-rs#772
• Update Rust to 1.96 by @​mlafeldt in duckdb/duckdb-rs#775
• I see dead code by @​mlafeldt in duckdb/duckdb-rs#776
• Build script cleanups by @​mlafeldt in duckdb/duckdb-rs#777
• Expose Arrow C Data ABI structs in libduckdb-sys by @​mlafeldt in duckdb/duckdb-rs#778
• Implement Sync for Appender by @​mlafeldt in duckdb/duckdb-rs#779
• Add vscalar example by @​mlafeldt in duckdb/duckdb-rs#780
• Add vtab example covering complex column types by @​mlafeldt in duckdb/duckdb-rs#781
• Rebuild when pregenerated bindings change by @​mlafeldt in duckdb/duckdb-rs#782
• Fix bundled builds on Windows/MSVC by @​mlafeldt in duckdb/duckdb-rs#783
• Make VScalar::invoke safe to align with VTab by @​mlafeldt in duckdb/duckdb-rs#785
• Enable pre-release testing by @​mlafeldt in duckdb/duckdb-rs#787
• Update DuckDB to v1.5.4 by @​mlafeldt in duckdb/duckdb-rs#788

Full Changelog: duckdb/duckdb-rs@v1.10503.1...v1.10504.0

v1.10503.1

What's Changed

• Avoid Windows mtime restore in bundled builds by @​mlafeldt in duckdb/duckdb-rs#766
• Add patch-release mode to upgrade script by @​mlafeldt in duckdb/duckdb-rs#767
• Crate patch release v1.10503.1 by @​mlafeldt in duckdb/duckdb-rs#768

Full Changelog: duckdb/duckdb-rs@v1.10503.0...v1.10503.1

v1.10503.0

Highlights

• New ergonomic named parameter binding: named_params! macro, &[(&str, &dyn ToSql)] slices, and a generic HashMap Params impl.
• New build env vars: DUCKDB_DISABLE_EXTENSION_LOAD=1 disables extension install/load, and DUCKDB_DISABLE_JEMALLOC=1 opts bundled-cmake builds out of jemalloc (now re-enabled by default on supported targets).
• FFI soundness: typed vector slice/set_child APIs are now unsafe; DuckDB-owned C strings use RAII; binding unsupported Value variants errors instead of panicking.
• ArrowVTab view rebinds no longer dereference freed Arrow FFI memory.
• vtab::Value gains typed primitive getters and to_list() -> Option<Vec<Value>>.
• Bundled DuckDB upgraded to v1.5.3 (adds VARIANT metadata).

What's Changed

• Fix unsound vector slice API by @​mlafeldt in duckdb/duckdb-rs#745
• Refine vtab::Value API from #676 by @​mlafeldt in duckdb/duckdb-rs#747
• Build out vtab::Value to enable more diverse parameters to Table Functions by @​marksomething in duckdb/duckdb-rs#676
• Bump rustls-webpki from 0.103.11 to 0.103.13 by @​dependabot[bot] in duckdb/duckdb-rs#744
• Add ergonomic named parameter binding by @​mlafeldt in duckdb/duckdb-rs#748
• Implement Params for HashMap and serde_json::Value by @​ryanschneider in duckdb/duckdb-rs#615
• Harden DuckDB-owned string handling at FFI boundaries by @​mlafeldt in duckdb/duckdb-rs#750
• Update Rust to 1.95 by @​mlafeldt in duckdb/duckdb-rs#751
• Stop panicking when binding/appending unsupported Value variants by @​mlafeldt in duckdb/duckdb-rs#749

... (truncated)

Commits

• 452fc0b Update DuckDB to v1.5.4 (#788)
• 0e2aed9 cargo update
• ac898d4 Update DuckDB to v1.5.4
• fab0cea Enable pre-release testing (#787)
• d31d50e Enable pre-release testing
• 21d6d83 Make VScalar::invoke safe to align with VTab (#785)
• 4791524 Make VScalar::invoke safe to align with VTab
• 01953d2 Fix bundled builds on Windows/MSVC (#783)
• a9c5f6a Trim verbose comments in build scripts
• d5a7ab1 Document Windows MAX_PATH limitation in bundled-cmake build
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions