chore(deps): bump the rust-dependencies group with 5 updates

[chaliy]

What changed

Takes the rust-dependencies group bump from #2294 and adds the supply-chain exemption updates that PR was missing, so it can actually go green. Supersedes #2294.

Crate	From	To
async-trait	0.1.91	0.1.92
napi	3.12.0	3.12.1
napi-build	2.4.0	2.4.1
napi-derive	3.6.2	3.6.3
napi-derive-backend	6.1.1	6.1.2
thiserror / thiserror-impl	2.0.19	2.0.20

No source changes — lockfile plus the matching supply-chain/config.toml exemptions.

Why

supply-chain/config.toml pins every exemption to an exact version, so any dependency bump that doesn't carry a matching exemption bump fails cargo vet --locked. Dependabot doesn't know about that file, so #2294's Audit job went red.

Worth noting for anyone reading #2294's CI log: it looks like only thiserror is missing, because the surrounding log grep matches on the substring error — which thiserror happens to contain. Running cargo vet directly shows all seven.

Before / After

Before (on #2294's head):

$ cargo vet --locked
Vetting Failed!

7 unvetted dependencies:
  async-trait:0.1.92 missing ["safe-to-deploy"]
  napi:3.12.1 missing ["safe-to-deploy"]
  napi-build:2.4.1 missing ["safe-to-deploy"]
  napi-derive:3.6.3 missing ["safe-to-deploy"]
  napi-derive-backend:6.1.2 missing ["safe-to-deploy"]
  thiserror:2.0.20 missing ["safe-to-deploy"]
  thiserror-impl:2.0.20 missing ["safe-to-deploy"]

After:

$ cargo vet --locked
Vetting Succeeded (27 fully audited, 6 partially audited, 590 exempted)

$ cargo build --workspace
    Finished `dev` profile [unoptimized + debuginfo] target(s)

$ cargo audit
warning: 2 allowed warnings found        # the two already-suppressed unmaintained advisories
                                         # no vulnerabilities

Risk

• Low
• Patch-level bumps within existing semver ranges, no source changes. The exemptions were bumped to track the locked versions rather than widened or loosened, so supply-chain coverage is unchanged in kind.

Checklist

• Tests added or updated — n/a, dependency-only; covered by the existing suite and the cargo vet / cargo audit gates
• Backward compatibility considered

---

Generated by Claude Code

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	bashkit	b231f7f	Commit Preview URL Branch Preview URL	Aug 14 2026, 09:36 AM