chore(deps): update several dependencies to their latest versions

.github/workflows/ci.yml

@@ -168,13 +168,13 @@ jobs:
 
       - name: 🧰 Install nextest
         if: startsWith(matrix.target, 'x86_64-') || contains(matrix.target, '-linux-')
-        uses: taiki-e/install-action@e659bf85ee986e37e35cc1c53bfeebe044d8133e # v2
+        uses: taiki-e/install-action@47d27149ff6b3422864ec504071d5cc7873d642e# v2
         with:
           tool: nextest
 
       - name: 🧰 Install cargo-deb
         if: endsWith(matrix.target, '-linux-gnu')
-        uses: taiki-e/install-action@e659bf85ee986e37e35cc1c53bfeebe044d8133e # v2
+        uses: taiki-e/install-action@47d27149ff6b3422864ec504071d5cc7873d642e # v2
         with:
           tool: cargo-deb
 

Cargo.toml

@@ -3,10 +3,6 @@ members = ["packages/*"]
 resolver = "2"
 
 [patch.crates-io]
-# Use a newer commit of oxipng that has a PR that adds a more performant raw image API merged.
-# Related PR: https://github.com/shssoichiro/oxipng/pull/482
-oxipng = { git = "https://github.com/shssoichiro/oxipng", rev = "1f002df0" }
-
 # Use our fork of glsl-lang that allows it to parse #moj_import directives
 glsl-lang = { git = "https://github.com/ComunidadAylas/glsl-lang" }
 glsl-lang-lexer = { git = "https://github.com/ComunidadAylas/glsl-lang" }

deny.toml

@@ -91,10 +91,6 @@ ignore = true
 multiple-versions = "warn"
 highlight = "all"
 skip = [
-	# Some parts of the ecosystem have already updated aho-corasick to v1 (e.g., the
-	# regex crate), but others didn't (e.g., globset). Let's ignore that for now,
-	# globset shouldn't stay that way for long
-	{ name = "aho-corasick", version = "=0.7.20" },
 	# This older version is pulled by the GLSL macro machinery on build-time.
 	# It should not affect final executables
 	{ name = "darling", version = "=0.14.4" },
@@ -107,14 +103,16 @@ skip-tree = [
 	# affect the final user executables at all
 	{ name = "perfcnt" },
 	# Criterion itself also pulls some older dependencies
-	{ name = "criterion" }
+	{ name = "criterion" },
+	# The build-time winresource dependency pulls slightly older toml
+	# crate versions. They don't affect final executables
+	{ name = "winresource" }
 ]
 
 [sources]
 unknown-registry = "deny"
 unknown-git = "deny"
 allow-git = [
-	"https://github.com/shssoichiro/oxipng",
 	"https://github.com/RustAudio/ogg"
 ]
 

packages/packsquash/Cargo.toml

@@ -27,7 +27,7 @@ tokio-util = { version = "0.7.9", default-features = false, features = ["codec",
 tokio-stream = { version = "0.1.14", default-features = false }
 futures = { version = "0.3.28", default-features = false }
 
-serde = { version = "1.0.188", features = ["derive"] }
+serde = { version = "1.0.189", features = ["derive"] }
 
 serde_json = "1.0.107"
 json_comments = "0.2.1"
@@ -36,7 +36,7 @@ jsonpath_lib = "0.3.0"
 spng = { version = "0.2.0-alpha.2", default-features = false }
 rgb = "0.8.36"
 imagequant = { version = "4.2.2", default-features = false }
-oxipng = { version = "8.0.0", default-features = false, features = ["zopfli"] }
+oxipng = { version = "9.0.0", default-features = false, features = ["zopfli"] }
 
 symphonia = { version = "0.5.3", default-features = false, features = ["wav", "isomp4", "flac", "pcm", "mp3", "aac"] }
 vorbis_rs = { version = "0.5.0", default-features = false }
@@ -64,7 +64,7 @@ fpe = "0.6.1"
 uuid = "1.4.1"
 entropy = "0.4.1"
 rand_xoshiro = "0.6.0"
-regex = "1.10.0"
+regex = "1.10.1"
 aho-corasick = "1.1.2"
 
 [target.'cfg(unix)'.dependencies]