chore(deps): bump the patch-minor group across 1 directory with 7 updates

crates/thetadatadx/Cargo.toml

@@ -71,7 +71,7 @@ futures-core = "0.3"
 percent-encoding = "2"
 
 # Async runtime
-tokio = { version = "1.52.1", features = ["rt-multi-thread", "macros", "time", "net", "io-util", "sync", "fs"] }
+tokio = { version = "1.52.3", features = ["rt-multi-thread", "macros", "time", "net", "io-util", "sync", "fs"] }
 tokio-stream = "0.1.18"
 tokio-rustls = "0.26.4"
 rustls = { version = "0.23.40", features = ["ring"] }
@@ -116,7 +116,7 @@ toml = { version = "1.1.2", optional = true }
 regex = "1.12.3"
 
 # Lock-free ring buffer (LMAX Disruptor pattern) for FPSS event dispatch
-disruptor = "4.1.0"
+disruptor = "4.2.0"
 
 # Lock-free MPMC bounded queue used by the pull-iter delivery mode
 # (`ThetaDataDxClient::start_streaming_iter`). The Disruptor consumer
@@ -134,7 +134,7 @@ polars = { version = "0.53", optional = true, default-features = false }
 # arrow-array + arrow-schema cover RecordBatch construction for the
 # optional `frames` feature only. Kept optional so the default dep
 # graph stays slim — FLATFILES does not pull in arrow.
-arrow-array = { version = "58.1.0", optional = true }
+arrow-array = { version = "58.3.0", optional = true }
 arrow-schema = { version = "58.1.0", optional = true }
 # JSON encoder for the FLATFILES `Format::Jsonl` output. One serde_json
 # Value per row; `to_writer` emits compact form, then we append `\n`.
@@ -183,7 +183,7 @@ toml = "1.1.2"
 # same patch as the Python SDK shim under `sdks/python/` so the
 # dev-dependency graph stays consistent. dev-only — never enters the
 # published crate graph.
-pyo3 = { version = "=0.28.2", features = ["auto-initialize"] }
+pyo3 = { version = "=0.28.3", features = ["auto-initialize"] }
 
 [build-dependencies]
 # `prost-build` compiles `proto/mdds.proto` into Rust message types;

ffi/Cargo.toml

@@ -32,9 +32,9 @@ testing-panic-boundary = []
 [dependencies]
 thetadatadx = { path = "../crates/thetadatadx", features = ["arrow"] }
 tdbe = { version = "0.13.1", path = "../crates/tdbe" }
-tokio = { version = "1.52.1", features = ["rt-multi-thread"] }
-arrow-array = "58.1.0"
-arrow-ipc = "58.1.0"
+tokio = { version = "1.52.3", features = ["rt-multi-thread"] }
+arrow-array = "58.3.0"
+arrow-ipc = "58.3.0"
 arrow-schema = "58.1.0"
 # Used by the FPSS streaming callback silent-drop observability path
 # (see `tdx_fpss_dropped_events` / `tdx_unified_dropped_events`). Keep
@@ -48,4 +48,4 @@ tracing = "0.1.44"
 # consumer thread directly (`ffi_callback_queued_runs_on_consumer_thread`).
 # Pinned to the same version the core crate consumes through
 # `crates/thetadatadx/Cargo.toml`.
-disruptor = "4.1.0"
+disruptor = "4.2.0"

tools/cli/Cargo.toml

@@ -23,6 +23,6 @@ path = "src/main.rs"
 thetadatadx = { path = "../../crates/thetadatadx" }
 tdbe = { version = "0.13.1", path = "../../crates/tdbe" }
 clap = { version = "4.6.1", features = ["derive"] }
-tokio = { version = "1.52.1", features = ["rt-multi-thread", "macros"] }
+tokio = { version = "1.52.3", features = ["rt-multi-thread", "macros"] }
 sonic-rs = "0.5.8"
 comfy-table = "7.2.2"