From ea3ec0e6f4191c267862f9cd2be103bfd7eb5860 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 19 Oct 2026 10:31:32 +0000
Subject: [PATCH 1/2] chore(deps): bump cc from 1.6.0 to 1.8.0

Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.6.0 to 1.8.0.
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/cc-rs/compare/cc-v1.6.0...cc-v1.8.0)

---
updated-dependencies:
- dependency-name: cc
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 22d1240eb..31771bfe9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -273,7 +273,7 @@ dependencies = [
  "proc-macro-crate",
  "proc-macro2",
  "quote",
- "syn 3.0.6",
+ "syn 3.0.8",
 ]
 
 [[package]]
@@ -387,9 +387,9 @@ dependencies = [
 
 [[package]]
 name = "cc"
-version = "1.6.0"
+version = "1.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f74872d07caf508b30a21f6836e7d7016a2eaf7d9ff4f48deaa58cd8a0407630"
+checksum = "6651c9ed80effdc7db0ff72512157f901af5e3549e341e24b1dd4887d836d838"
 dependencies = [
  "find-msvc-tools",
  "jobserver",

From 9cee86921f0ff63cfa15927674e450b3c0e321a9 Mon Sep 17 00:00:00 2001
From: James Sturtevant <jsturtevant@gmail.com>
Date: Mon, 19 Oct 2026 15:35:48 -0700
Subject: [PATCH 2/2] ci: pin jaq installation

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>
---
 dev/verify-msrv.sh    | 2 +-
 dev/verify-version.sh | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/verify-msrv.sh b/dev/verify-msrv.sh
index acaf67cce..167587417 100755
--- a/dev/verify-msrv.sh
+++ b/dev/verify-msrv.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 set -Eeuo pipefail
-cargo install -q jaq
+cargo install -q --locked --version 3.1.1 jaq
 for CRATE in "$@"; do
     VERSION=$(cargo metadata --format-version=1 2>/dev/null | jaq --raw-output '.packages[] | select(.name == "'$CRATE'").rust_version')
     if ! rustup toolchain list | grep -q "$VERSION"; then
diff --git a/dev/verify-version.sh b/dev/verify-version.sh
index f2ff9e002..92713c579 100755
--- a/dev/verify-version.sh
+++ b/dev/verify-version.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 set -Eeuo pipefail
-cargo install -q jaq
+cargo install -q --locked --version 3.1.1 jaq
 
 EXPECTED="$1"
 EXPECTED="${EXPECTED#refs/heads/release/}"