From 522faa1a59aa94e4adfd4a4afe0202d1126e187d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Aug 2026 17:32:06 -0500
Subject: [PATCH] deps: bump rusqlite from 0.32.1 to 0.40.1 (#2287)

Bumps [rusqlite](https://github.com/rusqlite/rusqlite) from 0.32.1 to
0.40.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rusqlite/rusqlite/releases">rusqlite's
releases</a>.</em></p>
<blockquote>
<h2>0.40.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix clippy warnings <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1852">#1852</a></li>
<li>Bump bundled SQLite version to 3.53.2 <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1853">#1853</a></li>
<li>Bump hashlink version <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1855">#1855</a></li>
<li>Fix SQL injection when SAVEPOINT name is tainted <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1854">#1854</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rusqlite/rusqlite/compare/v0.40.0...v0.40.1">https://github.com/rusqlite/rusqlite/compare/v0.40.0...v0.40.1</a></p>
<h2>0.40.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Breaking changes: Replace VTab macros by constructors <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1823">#1823</a></li>
<li>Breaking changes: Fix VTab::best_index <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1824">#1824</a></li>
<li>Asserts on VTab::connect aux and args <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1825">#1825</a></li>
<li>Breaking changes: Fix VTab::connect / create <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1826">#1826</a></li>
<li>Breaking changes: Allow opting out of using sqlite-wasm-rs on
wasm32-unknown-unknown <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1828">#1828</a>,
<a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1829">#1829</a></li>
<li>Derive Default for SeriesTabCursor/ArrayTabCursor <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1830">#1830</a></li>
<li>Update link to pre-update hook <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1831">#1831</a></li>
<li>Breaking changes: Fix VTab::connect <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1832">#1832</a></li>
<li>impl From<!-- raw HTML omitted --> for FromSqlError <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1833">#1833</a></li>
<li>Breaking changes: Fix vtab::dequote <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1835">#1835</a></li>
<li>Bump bundled SQLCipher to version 4.14.0 <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1837">#1837</a></li>
<li>sqlite3_set_errmsg <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1752">#1752</a></li>
<li>Bump sqlite3-parser version <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1838">#1838</a></li>
<li>Fix UB in ToSqlOutput::from_rc <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1839">#1839</a></li>
<li>Ensure miri doesn't complain <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1840">#1840</a></li>
<li>Bump to actions/checkout@v6 <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1842">#1842</a></li>
<li>Add support to UtcDateTime <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1843">#1843</a>,
<a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1844">#1844</a></li>
<li>Bump bundled SQLite version to 3.53.1 <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1848">#1848</a></li>
<li>Replace some cfg(not by cfg_select <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1850">#1850</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rusqlite/rusqlite/compare/v0.39.0...v0.40.0">https://github.com/rusqlite/rusqlite/compare/v0.39.0...v0.40.0</a></p>
<h2>0.39.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix constraints on VTab Aux data <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1778">#1778</a>,
<a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1771">#1771</a></li>
<li>Fix docs.rs generation <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1779">#1779</a></li>
<li>Fix a small typo in <code>rollback_hook</code> docstring <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1780">#1780</a></li>
<li>Fix some warnings from Intellij <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1781">#1781</a></li>
<li>Minimal doc for features <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1783">#1783</a></li>
<li>Clear hooks only for owning connections <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1785">#1785</a>,
<a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1784">#1784</a></li>
<li>Fix link to SQLite C Interface, Prepare Flags <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1787">#1787</a></li>
<li>Comment functions which are not usable from a loadable extension <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1789">#1789</a></li>
<li>Factorize code <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1792">#1792</a></li>
<li>Update getrandom to 0.4 <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1798">#1798</a></li>
<li>Update Cargo.toml <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1800">#1800</a></li>
<li>Fix appveyor <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1807">#1807</a></li>
<li>Add support to unix timestamp for chrono, jiff and time <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1808">#1808</a>,
<a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1803">#1803</a></li>
<li>fix(trace): check that the sql string pointer is not NULL <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1805">#1805</a></li>
<li>Bump bundled SQLite version to 3.51.3 <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1818">#1818</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/6d3c282dc5531a57eb4e22ece3207f00c95d0fb0"><code>6d3c282</code></a>
Merge pull request <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1856">#1856</a>
from gwenn/0.40.1</li>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/2ba28b7469acc41c528ad1963327815d63b9cab9"><code>2ba28b7</code></a>
Prepare next release</li>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/a021dc730d4207212906e77c39bc2ed66b23f1aa"><code>a021dc7</code></a>
Merge pull request <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1854">#1854</a>
from gwenn/savepoint</li>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/534a149f8dbb55bba9beb45b279a4f13e20b13a8"><code>534a149</code></a>
Merge pull request <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1855">#1855</a>
from gwenn/hashlink</li>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/6d9764f26920f54db54b0f24f3f026f6a2c24a7c"><code>6d9764f</code></a>
Bump hashlink version</li>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/fa574ebb1ca4586a5d4d4a7175b0aa447628532e"><code>fa574eb</code></a>
Use <code>sqlite3_keyword_check</code></li>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/15385cc046364b68c9d7e65d2644dc86c0980f25"><code>15385cc</code></a>
Fix SQL injection when SAVEPOINT name is tainted</li>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/e5e48f2d0cd60504020b2def110ca790fc8711b4"><code>e5e48f2</code></a>
Merge pull request <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1853">#1853</a>
from gwenn/3.53.2</li>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/ac222923ff13216a71aa23363fb5e4ccb1819ad5"><code>ac22292</code></a>
Bump bundled SQLite version to 3.53.2</li>
<li><a
href="https://github.com/rusqlite/rusqlite/commit/c5f8828f72b4276ab2ae8504cd57b75dd80bcde7"><code>c5f8828</code></a>
Merge pull request <a
href="https://redirect.github.com/rusqlite/rusqlite/issues/1852">#1852</a>
from gwenn/clippy</li>
<li>Additional commits viewable in <a
href="https://github.com/rusqlite/rusqlite/compare/v0.32.1...v0.40.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rusqlite&package-manager=cargo&previous-version=0.32.1&new-version=0.40.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 Cargo.lock                      | 42 ++++++++++++++++++++++++---------
 crates/headroom-core/Cargo.toml |  2 +-
 2 files changed, 32 insertions(+), 12 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 5959d3596..7be07cbd2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1831,9 +1831,6 @@ name = "hashbrown"
 version = "0.14.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
-dependencies = [
- "ahash",
-]
 
 [[package]]
 name = "hashbrown"
@@ -1861,11 +1858,11 @@ dependencies = [
 
 [[package]]
 name = "hashlink"
-version = "0.9.1"
+version = "0.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ba4ff7128dee98c7dc9794b6a411377e1404dba1c97deb8d1a55297bd25d8af"
+checksum = "32069d97bb81e38fa67eab65e3393bf804bb85969f2bc06bf13f64aef5aba248"
 dependencies = [
- "hashbrown 0.14.5",
+ "hashbrown 0.17.1",
 ]
 
 [[package]]
@@ -2610,9 +2607,9 @@ dependencies = [
 
 [[package]]
 name = "libsqlite3-sys"
-version = "0.30.1"
+version = "0.38.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2e99fb7a497b1e3339bc746195567ed8d3e24945ecd636e3619d20b9de9e9149"
+checksum = "f6c19a05435c21ac299d71b6a9c13db3e3f47c520517d58990a462a1397a61db"
 dependencies = [
  "cc",
  "pkg-config",
@@ -3724,10 +3721,20 @@ dependencies = [
 ]
 
 [[package]]
-name = "rusqlite"
-version = "0.32.1"
+name = "rsqlite-vfs"
+version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7753b721174eb8ff87a9a0e799e2d7bc3749323e773db92e0984debb00019d6e"
+checksum = "c51c9ae4df8a7fba42103df5c621fa3c37eccf3a3c650879e90fc48b11cc192c"
+dependencies = [
+ "hashbrown 0.16.1",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "rusqlite"
+version = "0.40.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11438310b19e3109b6446c33d1ed5e889428cf2e278407bc7896bc4aaea43323"
 dependencies = [
  "bitflags",
  "fallible-iterator",
@@ -3735,6 +3742,7 @@ dependencies = [
  "hashlink",
  "libsqlite3-sys",
  "smallvec",
+ "sqlite-wasm-rs",
 ]
 
 [[package]]
@@ -4105,6 +4113,18 @@ dependencies = [
  "unicode-segmentation",
 ]
 
+[[package]]
+name = "sqlite-wasm-rs"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc3efc0da82635d7e1ced0053bbbfa8c7ab9645d0bf36ceb4f7127bb85315d75"
+dependencies = [
+ "cc",
+ "js-sys",
+ "rsqlite-vfs",
+ "wasm-bindgen",
+]
+
 [[package]]
 name = "stable_deref_trait"
 version = "1.2.1"
diff --git a/crates/headroom-core/Cargo.toml b/crates/headroom-core/Cargo.toml
index c47d2a88b..534a41b78 100644
--- a/crates/headroom-core/Cargo.toml
+++ b/crates/headroom-core/Cargo.toml
@@ -125,7 +125,7 @@ blake3 = "1"
 # image may lag behind. Sub-1 MB binary cost. WAL is enabled at
 # connection-open time (see `ccr/backends/sqlite.rs`); no extra feature
 # flags required.
-rusqlite = { version = "0.32", features = ["bundled"] }
+rusqlite = { version = "0.40", features = ["bundled"] }
 # `redis` for the optional multi-worker CCR backend. Cfg-gated behind
 # the `redis` feature so deploys that don't need it pay no compile
 # cost. Default features include the sync `Connection` API used in