Bump the rust-minor-and-patch group with 3 updates

[dependabot]

Bumps the rust-minor-and-patch group with 3 updates: serde_json, winresource and midir.

Updates serde_json from 1.0.152 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• e759c5b Report invalid UTF-8 at the first bad byte.
• 35ca8ef Support preserve_order in no_std builds
• See full diff in compare view

Updates winresource from 0.1.31 to 0.1.34

Commits

• See full diff in compare view

Updates midir from 0.11.0 to 0.11.1

Changelog

Sourced from midir's changelog.

[0.11.1] 2026-10-10

• Allow alsa 0.12 (bump upper bound to <0.13) (#199 - thanks @​gulbrand)
• fix(android): stop re-delivering the last message when receive() returns 0 (#200 - thanks @​Guillaume-Fortin)
• Stop the CoreMIDI input handler reading past a truncated packet (#206 - thanks @​semnil)
• winmm: return InvalidPort from port_name() for disconnected ports (#204 - thanks @​yottanami)
• Fixes for WinMM and WinRT backend suggested by Microsoft's review (#207/#208 - thanks @​Psychlist1972)

Commits

• db32c3f Prepare release of 0.11.1 (#209)
• 4fe3641 winrt: Fixes suggested by Microsoft's review (#208)
• 0ca01d4 winmm: Fixes suggested by Microsoft's review (#207)
• 117506b winmm: return InvalidPort from port_name() for disconnected ports (#204)
• 3f9cbbc Stop the CoreMIDI input handler reading past a truncated packet (#206)
• 8d00b6f fix(android): stop re-delivering the last message when receive() returns 0 (#...
• e5a60b5 Allow alsa 0.12 (bump upper bound to <0.13) (#199)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions