chore(deps): bump the patch group with 7 updates

[dependabot]

Bumps the patch group with 7 updates:

Package	From	To
hjkl-config	0.2.0	0.2.1
clap_complete	4.6.3	4.6.5
tokio	1.52.1	1.52.3
rpassword	7.5.1	7.5.2
hjkl-clipboard	0.5.0	0.5.3
hjkl-form	0.3.2	0.3.5
hjkl-ratatui	0.3.2	0.3.5

Updates hjkl-config from 0.2.0 to 0.2.1

Changelog

Sourced from hjkl-config's changelog.

0.2.1 - 2026-05-10

Changed

• XDG resolver moved to the new shared hjkl-xdg crate. loader.rs now re-exports config_dir, data_dir, cache_dir from hjkl_xdg instead of inlining the resolve_xdg / xdg_base helpers. Behavior is byte-for-byte identical: env-first, absolute-path-only, ~/.config / ~/.local/share / ~/.cache fallbacks across every platform.
• ConfigError gained From<hjkl_xdg::Error> so ? in config_path keeps working.
• Dropped direct dirs dep — hjkl-xdg owns home-dir resolution now.
• Added Dependabot config (cargo + github-actions, weekly).
• Collapsed ci.yml + release.yml into a single ci.yml.

Removed

• Five tests covering the now-deleted private resolve_xdg logic. Equivalent coverage lives in hjkl-xdg.

Commits

• 2983e9e chore: bump version
• 5bd2a20 refactor(xdg): replace inlined resolver with hjkl-xdg dep
• d728089 ci: add dependabot config (cargo + github-actions, weekly)
• be5c69c chore(ci): collapse ci.yml + release.yml into single ci.yml
• See full diff in compare view

Updates clap_complete from 4.6.3 to 4.6.5

Commits

• c8c9355 chore: Release
• af74def docs: Update changelog
• c96f222 Merge pull request #6368 from truffle-dev/fix/fish-env-escaping
• 49a05cd fix(complete): Two-pass quote fish env-completer
• e791004 test(complete): Snapshot fish env quoting cases
• 87ec1ad chore: Release
• 78f2529 docs: Update changelog
• b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
• 74c6666 fix(complete): Keep zsh candidate order
• d142d8f Merge pull request #6360 from epage/string
• Additional commits viewable in compare view

Updates tokio from 1.52.1 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

• sync: fix underflow in mpsc channel len() (#8062)
• sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
• sync: require that an RwLock has max_readers != 0 (#8076)
• sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Commits

• d875691 chore: prepare Tokio v1.52.3 (#8130)
• e1aebb0 Merge 'tokio-1.51.3' into 'tokio-1.52.x' (#8129)
• fd63094 chore: prepare Tokio v1.51.3 (#8127)
• 8c600d0 Merge 'tokio-1.47.5' into 'tokio-1.51.x' (#8123)
• 11bfc13 chore: prepare Tokio v1.47.5 (#8122)
• f085b62 sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
• 30d25cc sync: require that an RwLock has max_readers != 0 (#8076)
• 9fccf53 sync: return Empty from try_recv() when mpsc is closed with outstanding p...
• ebf61b4 sync: fix underflow in mpsc channel len() (#8062)
• 4abe9d7 chore: prepare Tokio v1.52.2 (#8115)
• Additional commits viewable in compare view

Updates rpassword from 7.5.1 to 7.5.2

Release notes

Sourced from rpassword's releases.

v7.5.2

Fixes a Unicode parsing bug which could lead to unwarranted panic (conradkleinespel/rpassword@6c19a1e).

Backwards compatible. No breaking change.

Commits

• e176edc bump to 7.5.2
• 6c19a1e make reading utf8 chars more reliable
• See full diff in compare view

Updates hjkl-clipboard from 0.5.0 to 0.5.3

Changelog

Sourced from hjkl-clipboard's changelog.

[0.5.3] - 2026-05-05

Fixed

• Wayland self-paste no longer deadlocks. When the consumer owns the clipboard data_source and then calls get(Clipboard, …) (e.g. CEF reading the system clipboard during a Ctrl+V into a contentEditable), the bg thread previously issued offer.receive(write_fd) and blocked in read_fd_to_end(read_fd), but the matching data_source.send event for our own source could not be dispatched while the bg thread was stuck in that read. do_get now short-circuits when state.clipboard_source is Some and returns the cached payload directly, bypassing the pipe round-trip entirely. Same for Selection::Primary via state.primary_source. Closes kryptic-sh/buffr#34 (issue #4 follow-up — 0.5.2 only fixed the inverse direction where an external app pasted from us).

[0.5.2] - 2026-05-05

Fixed

• Wayland data_source.send callback no longer performs a blocking write() on the bg thread. The write fd received via SCM_RIGHTS is immediately set to O_NONBLOCK; if the pipe buffer is full (EAGAIN) the write is deferred as a PendingWrite entry and drained on the next poll(2) iteration via POLLOUT. A 5-second deadline closes abandoned fds to prevent leaks. Both the ext_data_control_source_v1.send and zwp_primary_selection_source_v1.send paths are fixed. Previously, a slow paste receiver (e.g. CEF 147 OSR on Wayland, kryptic-sh/buffr#34) could stall the bg thread indefinitely, causing any subsequent set_text() call from the UI thread to block on a Condvar for 7+ seconds until the watchdog killed the process (issue #4).

[0.5.1] - 2026-05-04

Docs

• Internal CHANGELOG hygiene: backfilled missing release entries and added reference link definitions for all version headings. No functional changes.

Commits

• 3b003f3 chore: bump version
• 7102012 fix(wayland): self-paste deadlock — short-circuit do_get when we own the source
• 90770df fix(wayland): non-blocking data_source send to prevent UI deadlock (#4)
• 9624a28 chore: bump version
• 6ea5ef3 docs: add reference link defs to all CHANGELOG version headings
• See full diff in compare view

Updates hjkl-form from 0.3.2 to 0.3.5

Changelog

Sourced from hjkl-form's changelog.

[0.3.5] - 2026-05-10

Changed

• Bumped hjkl-buffer dep requirement from ^0.5 to ^0.6 and hjkl-engine from ^0.4 to ^0.5.

[0.3.4] - 2026-05-06

Changed

• Bumped hjkl-buffer dep requirement to ^0.5 and hjkl-engine to ^0.4.

[0.3.3] - 2026-05-04

Docs

• Internal CHANGELOG hygiene: backfilled missing release entries and added reference link definitions for all version headings. No functional changes.

Commits

• 4008e5a chore: bump version
• 4b40df3 chore: bump version
• 67f7aa3 chore(ci): collapse ci.yml + release.yml into single ci.yml
• 9d6d89b chore(deps): bump hjkl-buffer to ^0.5
• 4f19085 chore(deps): bump hjkl-buffer + hjkl-engine to ^0.4
• a1b0697 chore: bump version
• 2707fe5 docs: add reference link defs to all CHANGELOG version headings
• d634872 docs: backfill CHANGELOG for missing release entries
• See full diff in compare view

Updates hjkl-ratatui from 0.3.2 to 0.3.5

Changelog

Sourced from hjkl-ratatui's changelog.

[0.3.5] - 2026-05-10

Changed

• Bumped hjkl-engine dep requirement from ^0.4 to ^0.5.

[0.3.4] - 2026-05-06

Changed

• Bumped hjkl-engine dep requirement to ^0.4.

[0.3.3] - 2026-05-04

Docs

• Internal CHANGELOG hygiene: backfilled missing release entries and added reference link definitions for all version headings. No functional changes.

Commits

• e7d0470 chore: bump version
• 75ad49e chore: bump version
• 5fbc9ea chore(ci): collapse ci.yml + release.yml into single ci.yml
• 024959f chore(deps): bump hjkl-engine to ^0.4
• 93b0795 chore: bump version
• abaed5f docs: add reference link defs to all CHANGELOG version headings
• c863419 docs: backfill CHANGELOG for missing release entries
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.