chore(deps): update backend dependencies (#421)

## Summary
- update pinned backend dependencies and regenerate Cargo.lock
- keep intentional compatibility pins for bincode, testcontainers,
rand/sha2 aliases, and the combine patch
- update streaming encoder configuration and resolve current Clippy
compatibility

## Validation
- cargo check --workspace --all-targets
- cargo test --workspace --lib
- make nextest-default
- make clippy-check
- make proto-freshness
- make check-all-targets
- cargo fmt --all -- --check
- cargo audit --quiet
- cargo deny check
- cargo update --dry-run

All backend checks passed.

Cargo.toml

@@ -159,7 +159,7 @@ sqlx = { version = "=0.9.0", default-features = false, features = [
 ] }
 
 # Redis
-redis = { version = "=1.5.0", default-features = false, features = [
+redis = { version = "=1.6.0", default-features = false, features = [
     "tokio-comp",
     "connection-manager",
     "streams",
@@ -177,8 +177,8 @@ aes-gcm = "=0.11.0"
 aes = "=0.9.2"
 cbc = { version = "=0.2.1", features = ["alloc", "block-padding"] }
 ammonia = "=4.1.4"
-http-acl = "=0.11.0"
-http-acl-reqwest = "=0.11.0"
+http-acl = "=0.13.0"
+http-acl-reqwest = "=0.13.0"
 hkdf = "=0.13.0"
 sha1 = "=0.11.0"
 sha2 = "=0.11.0"
@@ -199,21 +199,22 @@ serde_urlencoded = "=0.7.1"
 serde_html_form = "=0.4.1"
 serde_path_to_error = "=0.1.20"
 indexmap = "=2.14.0"
+# bincode 3.0.0 is an intentionally unbuildable placeholder release.
 bincode = { version = "=2.0.1", features = ["serde"] }
 
 # Caching
-moka = { version = "=0.12.15", features = ["future", "sync"] }
+moka = { version = "=0.12.16", features = ["future", "sync"] }
 dashmap = "=7.0.0-rc2"
 lru = "=0.18.2"
 
 # IDs & Crypto
 nanoid = "=0.5.0"
-uuid = { version = "=1.24.0", features = ["v4", "v5", "serde"] }
+uuid = { version = "=1.24.1", features = ["v4", "v5", "serde"] }
 sqids = "=0.4.2"
 rand = "=0.10.2"
 rand_08 = { package = "rand", version = "=0.8.6" }
 rand_chacha_08 = { package = "rand_chacha", version = "=0.3.1" }
-base64 = "=0.23.0"
+base64 = "=0.23.1"
 humantime = "=2.4.0"
 hex = "=0.4.3"
 chrono-tz = "=0.10.4"
@@ -222,10 +223,10 @@ iana-time-zone = "=0.1.65"
 
 # Streaming (consolidated xiu crate)
 synctv-xiu = { path = "synctv-xiu", default-features = false }
-retina = "=0.4.19"
+retina = "=0.4.20"
 rust_h265 = "=0.1.0"
-rusty_aac = { version = "=0.1.1", default-features = false }
-rusty_h264 = { version = "=0.7.0", default-features = false }
+rusty_aac = { version = "=0.5.0", default-features = false }
+rusty_h264 = { version = "=0.10.0", default-features = false }
 ffmpeg-next = { version = "=9.0.0", default-features = false, features = ["build", "format"] }
 ffmpeg-sys-next = { version = "=9.0.0", features = ["build-portable"] }
 
@@ -249,26 +250,26 @@ dotenvy = "=0.15.7"
 
 # Configuration
 config = { version = "=0.15.25", default-features = false, features = ["yaml", "json", "toml"] }
-clap = { version = "=4.6.5", features = ["wrap_help", "derive"] }
-clap_complete = "=4.6.8"
+clap = { version = "=4.6.6", features = ["wrap_help", "derive"] }
+clap_complete = "=4.6.9"
 
 # Utilities
 anyhow = "=1.0.104"
-thiserror = "=2.0.19"
+thiserror = "=2.0.20"
 bytes = { version = "=1.12.1", features = ["serde"] }
 parking_lot = "=0.12.5"
-async-trait = "=0.1.91"
-futures = "=0.3.33"
-futures-util = "=0.3.33"
+async-trait = "=0.1.92"
+futures = "=0.3.34"
+futures-util = "=0.3.34"
 hostname = "=0.4.2"
 url = "=2.5.8"
 percent-encoding = "=2.3.2"
 urlencoding = "=2.1.3"
 regex = "=1.13.1"
-oxc_allocator = "=0.143.0"
-oxc_ast = "=0.143.0"
-oxc_parser = "=0.143.0"
-oxc_span = "=0.143.0"
+oxc_allocator = "=0.144.0"
+oxc_ast = "=0.144.0"
+oxc_parser = "=0.144.0"
+oxc_span = "=0.144.0"
 boa_engine = { version = "=0.21.1", default-features = false }
 paste = "=1.0.15"
 byteorder = "=1.5.0"
@@ -309,7 +310,7 @@ lettre = { version = "=0.11.23", default-features = false, features = [
     "hostname",
     "tokio1",
 ] }
-handlebars = { version = "=6.4.3", features = ["no_logging"] }
+handlebars = { version = "=6.4.4", features = ["no_logging"] }
 
 # Compression
 flate2 = { version = "=1.1.9", default-features = false, features = ["zlib-rs"] }
@@ -321,7 +322,7 @@ lz4_flex = { version = "=0.14.0", default-features = false, features = [
 ] }
 zstd = { version = "=0.13.3", default-features = false }
 image = { version = "=0.25.10", default-features = false, features = ["jpeg", "png", "webp", "gif"] }
-symphonia = { version = "=0.6.0", default-features = false, features = ["opt-simd", "all-formats", "aac", "flac", "mp3", "vorbis"] }
+symphonia = { version = "=0.6.1", default-features = false, features = ["opt-simd", "all-formats", "aac", "flac", "mp3", "vorbis"] }
 
 # Resilience
 governor = "=0.10.4"
@@ -334,7 +335,7 @@ async_singleflight = "=0.6.2"
 rayon = "=1.12.0"
 
 # HTTP Body
-http-body-util = "=0.1.4"
+http-body-util = "=0.1.5"
 utoipa = { version = "=5.5.0", default-features = false, features = [
     "macros",
     "axum_extras",
@@ -350,6 +351,7 @@ utoipa-swagger-ui = { version = "=9.0.2", default-features = false, features = [
 mockall = "=0.15.0"
 wiremock = "=0.6.5"
 tempfile = "=3.27.0"
+# testcontainers-modules 0.15.0 still requires testcontainers ^0.27.
 testcontainers = { version = "=0.27.3", default-features = false }
 testcontainers-modules = { version = "=0.15.0", default-features = false, features = [
     "postgres",
@@ -386,7 +388,7 @@ synctv-proxy = { path = "synctv-proxy", default-features = false }
 synctv-livestream = { path = "synctv-livestream", default-features = false }
 synctv-common = { path = "synctv-common", default-features = false }
 
-# Redis 1.4.1 expands combine 4.6.7's `opaque!` macro and triggers Rust's
+# Redis 1.6.0 expands combine 4.6.7's `opaque!` macro and triggers Rust's
 # `semicolon_in_expressions_from_macros` future-incompatibility report. Redis
 # #2217/#2218 only suppress the lint; combine #372/#373 removes the offending
 # semicolon. Remove this patch after crates.io publishes that combine fix.

synctv-xiu/tests/streaming_e2e_tests.rs

@@ -353,6 +353,7 @@ fn aac_fixture() -> Result<AudioFixture> {
     }
     let mut encoder = AacEncoder::new(AacEncoderConfig {
         bitrate_bps: 96_000,
+        ..AacEncoderConfig::default()
     });
     encoder.push_pcm(&pcm, CHANNELS, SAMPLE_RATE)?;
     encoder.finish();

synctv/src/cli/execute/settings.rs

@@ -36,7 +36,7 @@ impl crate::cli::human_output::ToHuman for SettingsImportOutput {
 }
 
 fn settings_json_value<T: serde::Serialize>(value: &T) -> serde_json::Value {
-    serde_json::to_value(value).unwrap_or_else(|_| serde_json::Value::Null)
+    serde_json::to_value(value).unwrap_or(serde_json::Value::Null)
 }
 
 #[derive(Debug, Clone, Copy)]