bump misc dep versions

Some deps require manual upgrade - will cycle back

Cargo.toml

@@ -281,30 +281,30 @@ actix-web-lab = "0.20.2"
 anyhow = "1.0.102"
 base64 = "0.22.1"
 bstr = "1.12.1"
-bytes = "1.10.1"
-chrono = { version = "0.4.41", features = ["serde"] }
-clap = { version = "4.5.60", features = ["derive"] }
+bytes = "1.11.1"
+chrono = { version = "0.4.44", features = ["serde"] }
+clap = { version = "4.6.0", features = ["derive"] }
 cookie = "0.18.1"
 env = "1.0.1"
 env_logger = "0.11.9"
-futures = { version = "0.3.31" }
-hex-literal = "1.0.0"
-indexmap = "2.9.0"
+futures = { version = "0.3.32" }
+hex-literal = "1.1.0"
+indexmap = "2.13.0"
 log = "0.4.29"
 md-5 = "0.10.6" # insecure but used for gravatar
-once_cell = "1.21.3"
+once_cell = "1.21.4"
 r2d2 = "0.8.10"
 rand = "0.9.1"
 redis = { version = "1.0.2", features = ["r2d2", "tokio-rustls-comp", "tokio-comp", "cluster-async", "aio"] }
 regex = "1.12.3"
 reqwest = { version = "0.12.23", default-features = false, features = [ "charset", "http2", "system-proxy", "json", "cookies", "rustls-tls", "gzip" ] }
 reqwest-websocket = {  version = "0.5.0" }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_derive = "1.0.219"
-serde_json = "1.0.140"
+serde = { version = "1.0.228", features = ["derive"] }
+serde_derive = "1.0.228"
+serde_json = "1.0.149"
 serde_yaml = "0.9.34+deprecated"
-sha2 = "0.11.0-rc.2"
-sha3 = "0.10.8"
+sha2 = "0.11.0-rc.5"
+sha3 = "0.11.0-rc.8"
 strum = { version = "0.28.0", features = ["derive"] }
 tauri = { version = "2.8.3", features = ["unstable", "devtools"] } # NB: "devtools" prevents App Store distribution; "ubstable" is needed for window access
 tauri-plugin-dialog = "2.3.3"
@@ -312,12 +312,12 @@ tauri-plugin-fs = "2.4.2"
 tauri-plugin-log = "2.6.0"
 tauri-plugin-upload = "2.3.1"
 tempdir = "0.3.7"
-tempfile = "3.20.0"
-thiserror = "2.0.12"
-tokio = { version = "1.45.1", features = ["macros"] }
-toml = "0.8.23"
-url = { version = "2.5.4", features = ["serde"] }
-uuid = "1.18.1"
+tempfile = "3.27.0"
+thiserror = "2.0.18"
+tokio = { version = "1.50.0", features = ["macros"] }
+toml = "1.0.7+spec-1.1.0"
+url = { version = "2.5.8", features = ["serde"] }
+uuid = "1.22.0"
 
 # NB: wreq gets past fingerprinting, but we have to deal with platform-specific build issues.
 #