Bump dependencies to clear different rustsecs (#540)

* build: Bump dependencies

* build: Bump msrv

* docs: Update changelog

.github/workflows/ci.yaml

@@ -63,6 +63,6 @@ jobs:
       - name: Setup Rust toolchain
         uses: dtolnay/rust-toolchain@stable
         with:
-          toolchain: 1.85.0
+          toolchain: 1.88.0
       - name: Cargo check
         run: cargo check

CHANGELOG.md

@@ -12,6 +12,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 ### Changed
+- Bump dependencies to fix several RUSTSECs (#540)
+- Update MSRV to 1.88 (#540)
 
 ### Removed
 

Cargo.toml

@@ -11,7 +11,7 @@ Tool for installing and maintaining Espressif Rust ecosystem.
 """
 keywords = ["cli", "embedded", "esp", "esp-rs", "xtensa"]
 categories = ["command-line-utilities", "development-tools", "embedded"]
-rust-version = "1.85.0"
+rust-version = "1.88.0"
 
 [dependencies]
 async-trait          = "0.1.89"
@@ -29,19 +29,19 @@ lazy_static          = "1.5.0"
 log                  = "0.4.28"
 miette               = { version = "7.6.0", features = ["fancy"] }
 regex                = "1.11.3"
-reqwest              = { version = "0.12.23", features = ["blocking", "socks", "stream"] }
+reqwest              = { version = "0.13.2", features = ["blocking", "socks", "stream"] }
 retry                = "2.1.0"
 serde_json           = "1.0.145"
 strum                = { version = "0.27.2", features = ["derive"] }
 tar                  = "0.4.44"
 tempfile             = "3.23.0"
-thiserror            = "2.0.16"
+thiserror            = "2.0.18"
 tokio                = { version = "1.47.1", features = ["full"] }
 tokio-retry          = "0.3.0"
 tokio-stream         = "0.1.17"
 update-informer      = "1.3.0"
 xz2                  = "0.1.7"
-zip                  = "5.1.1"
+zip                  = "7.4.0"
 
 [target.'cfg(unix)'.dependencies]
 openssl = { version = "0.10.73", features = ["vendored"] }

README.md

@@ -1,7 +1,7 @@
 # espup
 
 [![Crates.io](https://img.shields.io/crates/v/espup.svg)](https://crates.io/crates/espup)
-![MSRV](https://img.shields.io/badge/MSRV-1.85.0-blue?labelColor=1C2C2E&logo=Rust&style=flat-square)
+![MSRV](https://img.shields.io/badge/MSRV-1.88.0-blue?labelColor=1C2C2E&logo=Rust&style=flat-square)
 [![Continuous Integration](https://github.com/esp-rs/espup/actions/workflows/ci.yaml/badge.svg)](https://github.com/esp-rs/espup/actions/workflows/ci.yaml)
 [![Security audit](https://github.com/esp-rs/espup/actions/workflows/audit.yaml/badge.svg)](https://github.com/esp-rs/espup/actions/workflows/audit.yaml)
 [![Matrix](https://img.shields.io/matrix/esp-rs:matrix.org?label=join%20matrix&color=BEC5C9&labelColor=1C2C2E&logo=matrix&style=flat-square)](https://matrix.to/#/#esp-rs:matrix.org)