chore: update dependencies

[github-actions]

Dependency Updates

Automated weekly bump of Rust dependencies.

• cargo update ran (Cargo.lock refreshed)
• cargo upgrade --incompatible ran (Cargo.toml may have changed)

Verification

• tests pass
• cargo audit clean

This PR was created automatically by the dependency update workflow.

[github-actions]

Octomind — developer:brief (octohub:glm)

All five updated crates are transitive dependencies only. The change is isolated and low-risk.

📦 Brief: Dependency lockfile bump — 5 transitive crate updates

Overall risk: 🟢 LOW · Cards: 1

#	Change	Risk	Confidence
1	Bump 5 transitive dependencies in Cargo.lock	🟢	●●●

Card 1/1: Transitive dependency version bumps · 🟢 · ●●●

INTENT
Routine dependency update to pull latest patch/minor versions of transitive crates.

WHAT CHANGED

• cc 1.2.63 → 1.2.64 (C/C++ build tooling — transitive via blake3)
• memchr 2.8.1 → 2.8.2 (string search primitive — transitive via regex/aho-corasick)
• regex-syntax 0.8.10 → 0.8.11 (regex parser — transitive via regex)
• smallvec 1.15.1 → 1.15.2 (small-vector optimization — transitive via tokio/notify)
• wasip2 1.0.3+wasi-0.2.9 → 1.0.4+wasi-0.2.12 (WASI preview 2 bindings — transitive via blake3)

IMPACT RADIUS
Isolated change — no source code modifications, no Cargo.toml changes, no API surface affected. All five crates are transitive dependencies; none are direct dependencies of this project.

RISK
🟢 LOW. Patch-level bumps to well-maintained transitive crates with no source code changes. No behavioral surface exposed to the application.

QUESTIONS
None.

DIVERGENCE
None.

📎 Source

• Cargo.lock#L134-L142 — cc version bump
• Cargo.lock#L536-L544 — memchr version bump
• Cargo.lock#L717-L725 — regex-syntax version bump
• Cargo.lock#L808-L816 — smallvec version bump
• Cargo.lock#L1019-L1027 — wasip2 version bump

📂 Files changed (1 file, ~20 lines)

• Cargo.lock — Lockfile with 5 transitive dependency version bumps

---

_{{tokens:206411,cost:0.2099178}}