Upgrade Rawkit library Rust dependencies (#3124)

* Upgrade Rawkit library Rust dependencies

* Continue on sccache failures

* Update again

.github/workflows/library-rawkit.yml

@@ -38,6 +38,13 @@ jobs:
 
       - name: 📦 Run sccache-cache
         uses: mozilla-actions/sccache-action@v0.0.6
+        continue-on-error: true
+
+      - name: 🔧 Fallback if sccache fails
+        if: failure()
+        run: |
+          echo "sccache failed, disabling it"
+          echo "RUSTC_WRAPPER=" >> $GITHUB_ENV
 
       - name: 🔬 Check Rust formatting
         run: |
@@ -56,4 +63,4 @@ jobs:
 
       - name: 📈 Run sccache stat for check
         shell: bash
-        run: sccache --show-stats
+        run: sccache --show-stats || echo "sccache stats unavailable"

deny.toml

@@ -39,8 +39,6 @@ db-urls = ["https://github.com/rustsec/advisory-db"]
 # A list of advisory IDs to ignore. Note that ignored advisories will still
 # output a note when they are encountered.
 ignore = [
-	"RUSTSEC-2024-0370", # Unmaintained but still fully functional crate `proc-macro-error`
-	"RUSTSEC-2024-0388", # Unmaintained but still fully functional crate `derivative`
 	"RUSTSEC-2024-0436", # Unmaintained but still fully functional crate `paste`
 ]
 # Threshold for security vulnerabilities, any vulnerability with a CVSS score

libraries/rawkit/Cargo.toml

@@ -3,8 +3,8 @@ members = ["rawkit-proc-macros"]
 resolver = "2"
 
 [workspace.dependencies]
-quote = "1.0.37"
-syn = "2.0.87"
+quote = "1.0"
+syn = "2.0"
 
 [package]
 name = "rawkit"
@@ -28,12 +28,12 @@ rawkit-tests = ["dep:image", "dep:libraw-rs", "dep:reqwest", "dep:rayon"]
 rawkit-proc-macros = { version = "0.1.0", path = "rawkit-proc-macros" }
 
 # Required dependencies
-bitstream-io = "2.5.3"
-num_enum = "0.7.3"
-thiserror = "1.0.66"
+bitstream-io = "4.9.0"
+num_enum = "0.7.5"
+thiserror = "2.0.17"
 
 # Optional dependencies (should be dev dependencies, but Cargo currently doesn't allow optional dev dependencies)
-image = { version = "0.25.4", optional = true }
-reqwest = { version = "0.12.9", optional = true, features = ["blocking"] }
+image = { version = "0.25.9", optional = true }
+reqwest = { version = "0.12.26", optional = true, features = ["blocking"] }
 libraw-rs = { version = "0.0.4", optional = true }
-rayon = { version = "1.10.0", optional = true }
+rayon = { version = "1.11.0", optional = true }

libraries/rawkit/rawkit-proc-macros/Cargo.toml

@@ -19,5 +19,5 @@ quote = { workspace = true }
 syn = { workspace = true }
 
 # Required dependencies
-toml = "0.8.19"
-proc-macro2 = "1.0.89"
+toml = "0.9.10+spec-1.1.0"
+proc-macro2 = "1.0.103"

libraries/rawkit/src/decoder/arw1.rs

@@ -38,7 +38,7 @@ fn read_and_huffman_decode_file<R: Read + Seek, E: Endianness>(huff: &[u16], fil
 	let huffman_table = &huff[1..];
 
 	// `number_of_bits` will be no more than 32, so the result is put into a u32
-	let bits: u32 = file.read(number_of_bits).unwrap();
+	let bits: u32 = file.read_var(number_of_bits).unwrap();
 	let bits = bits as usize;
 
 	let bits_to_seek_from = huffman_table[bits].to_le_bytes()[1] as i64 - number_of_bits as i64;
@@ -49,7 +49,7 @@ fn read_and_huffman_decode_file<R: Read + Seek, E: Endianness>(huff: &[u16], fil
 
 fn read_n_bits_from_file<R: Read + Seek, E: Endianness>(number_of_bits: u32, file: &mut BitReader<R, E>) -> u32 {
 	// `number_of_bits` will be no more than 32, so the result is put into a u32
-	file.read(number_of_bits).unwrap()
+	file.read_var(number_of_bits).unwrap()
 }
 
 /// ljpeg is a lossless variant of JPEG which gets used for decoding the embedded (thumbnail) preview images in raw files