Bump the cargo group across 1 directory with 2 updates

[dependabot]

Bumps the cargo group with 2 updates in the / directory: rgb and serde.

Updates rgb from 0.8.37 to 0.8.48

Changelog

Sourced from rgb's changelog.

0.8.48

• Deprecated alt::GRAY8-alt::GRAYA16 type aliases, because they will be moved in the next major version.

0.8.47

• Renamed map_c to map_colors
• Added rgb::prelude::* for imoporting traits without naming them (for forward-compatibilty)

0.8.46

• Changed AsRef to dereference as arrays instead of slices (AsRef`)

0.8.45

• Added From for 1-tuples

0.8.43/0.8.44

• Reverted changes to ComponentBytes. bytemuck is still recommended instead.
• Disabling as-bytes feature fixes soundness issues with RGBA<T, AddsPadding> types.

0.8.42

• breaking: added Copy trait bound on fn new functions.

• Enabled all unusual pixel types by default (they have minimal impact on compile times).

• Added new_bgra/new_argb functions to pixel types with non-RGB component order.

• Changed ComponentBytes to defer to bytemuck. You can use bytemuck::cast_slice(), etc. directly.

0.8.41

• Renamed .alpha(new_val) method to .with_alpha(new_val).
• Added Rust-idiomatic name aliases Rgb/Rgba for the RGB/RGBA structs.

0.8.40

• Added .checked_add/sub methods.

• Added a Deref trick that makes GrayAlpha tuple type have .v (value) and .a (alpha) fields. You should migrate to the new field names wherever possible. Unfortunately, Gray can't have that in a backward-compatible way, since it already derefs to the only field it has.

• The Pod trait is implemented for RGBA<T, A> types where T != A, but this is unsound if the fields have a different size or alignment that causes padding. In the future only RGBA<T, T> will support casting from/to raw bytes.

Commits

• d6afb5b Bump
• f0fb5d4 Future-proof GRAY8 imports
• b744a92 Changelog
• 043d8fe Backport examples
• 51d0fc3 Add forward-compatible AsRef
• a534116 Add missing bytemuck
• 802828b Deprecate map_c
• 7bf2145 Prelude
• 0d2c9d3 Bump
• 72ff921 Allow use of GrayA in v0.8
• Additional commits viewable in compare view

Updates serde from 1.0.203 to 1.0.209

Release notes

Sourced from serde's releases.

v1.0.209

• Fix deserialization of empty structs and empty tuples inside of untagged enums (#2805, thanks @​Mingun)

v1.0.208

• Support serializing and deserializing unit structs in a flatten field (#2802, thanks @​jonhoo)

v1.0.207

• Improve interactions between flatten attribute and skip_serializing/skip_deserializing (#2795, thanks @​Mingun)

v1.0.206

• Improve support for flatten attribute inside of enums (#2567, thanks @​Mingun)

v1.0.205

• Use serialize_entry instead of serialize_key + serialize_value when serialize flattened newtype enum variants (#2785, thanks @​Mingun)
• Avoid triggering a collection_is_never_read lint in the deserialization of enums containing flattened fields (#2791)

v1.0.204

• Apply #[diagnostic::on_unimplemented] attribute on Rust 1.78+ to suggest adding serde derive or enabling a "serde" feature flag in dependencies (#2767, thanks @​weiznich)

Commits

• 30752ac Release 1.0.209
• b84e6ca Improve wording of PR 2805 comments
• 87a2fb0 Wrap comments from PR 2805 to 80 columns
• 9eaf7b9 Merge pull request #2805 from Mingun/untagged-tests
• 7bde100 Replace MapRefDeserializer with value::MapDeserializer
• da7fc79 Fix deserialization of empty struct variant in untagged enums
• 4c5fec1 Test special cases that reaches SeqRefDeserializer::deserialize_any len==0 co...
• 6588b0a Cover Content::Seq case in VariantRefDeserializer::struct_variant
• 0093f74 Split test newtype_enum into four tests for each variant
• 171c6da Complete coverage of ContentRefDeserializer::deserialize_newtype_struct
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions