chore: cargo-upgrades, add todo comment

Author: bitfl0wer

Cargo.toml

@@ -10,5 +10,5 @@ tokio-tungstenite = { version = "0.26.2", features = [
     "rustls-tls-webpki-roots",
     "url",
 ] }
-sqlx = "0.8.5"
+sqlx = "0.8.6"
 sqlx-pg-uint = { version = "0.10.1", features = ["serde"] }

crates/sonata

@@ -8,7 +8,7 @@ edition = "2024"
 [dependencies]
 base64 = "0.22.1"
 bigdecimal = "0.4.8"
-bitflags = { version = "2.9.0", features = ["serde"] }
+bitflags = { version = "2.9.1", features = ["serde"] }
 chrono = { version = "0.4.41", features = ["serde"] }
 futures = "0.3.31"
 hostname = "0.4.1"
@@ -23,11 +23,11 @@ log4rs = { version = "1.3.0", features = [
 ] }
 num-bigint = "0.4.6"
 num-traits = "0.2.19"
-openssl = "0.10.72"
-poem = "3.1.9"
+openssl = "0.10.73"
+poem = "3.1.11"
 rand = "0.8.5"
 regex = "1.11.1"
-reqwest = { version = "0.12.15", default-features = false, features = [
+reqwest = { version = "0.12.20", default-features = false, features = [
     "http2",
     "macos-system-configuration",
     "charset",
@@ -43,7 +43,7 @@ sqlx = { workspace = true, features = [
     "any",
 ] }
 thiserror = "1.0.69"
-tokio = { version = "1.44.2", features = ["full"] }
+tokio = { version = "1.45.1", features = ["full"] }
 sentry = { version = "0.34.0", default-features = false, features = [
     "backtrace",
     "contexts",
@@ -63,9 +63,9 @@ tokio-tungstenite = { version = "0.23.1", features = [
     "tokio-rustls",
 ] }
 pubserve = { version = "1.1.0", features = ["async", "send"] }
-parking_lot = { version = "0.12.3", features = ["deadlock_detection"] }
+parking_lot = { version = "0.12.4", features = ["deadlock_detection"] }
 sqlx-pg-uint = { workspace = true }
-toml = "0.8.22"
+toml = "0.8.23"
 argon2 = "0.5.3"
 
 [profile.release]

crates/symfonia-api/Cargo.toml

@@ -8,7 +8,7 @@ edition = "2024"
 [dependencies]
 base64 = "0.22.1"
 bigdecimal = "0.4.8"
-bitflags = { version = "2.9.0", features = ["serde"] }
+bitflags = { version = "2.9.1", features = ["serde"] }
 chrono = { version = "0.4.41", features = ["serde"] }
 futures = "0.3.31"
 jsonwebtoken = "9.3.1"
@@ -22,11 +22,11 @@ log4rs = { version = "1.3.0", features = [
 ] }
 num-bigint = "0.4.6"
 num-traits = "0.2.19"
-openssl = "0.10.72"
-poem = "3.1.9"
+openssl = "0.10.73"
+poem = "3.1.11"
 rand = "0.8.5"
 regex = "1.11.1"
-reqwest = { version = "0.12.15", default-features = false, features = [
+reqwest = { version = "0.12.20", default-features = false, features = [
     "http2",
     "macos-system-configuration",
     "charset",
@@ -42,16 +42,16 @@ sqlx = { workspace = true, features = [
     "any",
 ] }
 thiserror = "1.0.69"
-tokio = { version = "1.44.2", features = ["full"] }
+tokio = { version = "1.45.1", features = ["full"] }
 chorus = { workspace = true }
 util = { path = "../util", version = "0" }
 serde_path_to_error = "0.1.17"
 percent-encoding = "2.3.1"
 hex = "0.4.3"
 tokio-tungstenite = { workspace = true }
 pubserve = { version = "1.1.0", features = ["async", "send"] }
-parking_lot = { version = "0.12.3", features = ["deadlock_detection"] }
-toml = "0.8.22"
+parking_lot = { version = "0.12.4", features = ["deadlock_detection"] }
+toml = "0.8.23"
 argon2 = "0.5.3"
 
 [profile.release]

crates/symfonia-gateway/Cargo.toml

@@ -5,13 +5,13 @@ edition = "2024"
 license = "MPL-2.0"
 
 [dependencies]
-clap = { version = "4.5.37", features = ["derive"] }
+clap = { version = "4.5.40", features = ["derive"] }
 lazy_static = "1.5.0"
 log = "0.4.27"
 log4rs = "1.3.0"
 serde = { version = "1.0.219", features = ["derive"] }
-tokio = { version = "1.44.2", features = ["macros", "rt-multi-thread"] }
-toml = "0.8.22"
+tokio = { version = "1.45.1", features = ["macros", "rt-multi-thread"] }
+toml = "0.8.23"
 util = { version = "0.1.0", path = "../util" }
 sqlx = { workspace = true }
 symfonia-api = { version = "0.1.0", path = "../symfonia-api" }

crates/symfonia/Cargo.toml

@@ -21,22 +21,22 @@ jsonwebtoken = "9.3.1"
 log = "0.4.27"
 log4rs = "1.3.0"
 num-traits = "0.2.19"
-parking_lot = "0.12.3"
-poem = { version = "3.1.9", optional = true }
+parking_lot = "0.12.4"
+poem = { version = "3.1.11", optional = true }
 pubserve = "1.1.0"
 rand = "0.8.5"
-reqwest = "0.12.15"
+reqwest = "0.12.20"
 secrecy = "0.10.3"
 serde = "1.0.219"
 serde_json = "1.0.140"
 serde_path_to_error = "0.1.17"
-serde_with = "3.12.0"
+serde_with = "3.13.0"
 sqlx = { workspace = true }
 sqlx-pg-uint = { workspace = true }
 thiserror = "2.0.12"
-tokio = { version = "1.44.2", features = ["net", "rt-multi-thread", "sync"] }
+tokio = { version = "1.45.1", features = ["net", "rt-multi-thread", "sync"] }
 tokio-tungstenite = { workspace = true }
-toml = "0.8.22"
+toml = "0.8.23"
 zeroize = { version = "1.8.1", features = ["derive"] }
 
 [dev-dependencies]

crates/util/Cargo.toml

@@ -2,6 +2,9 @@
 // License, v. 2.0. If a copy of the MPL was not distributed with this
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
+// TODO: symfonia-gateway should include a `lib` target. Files in this directory
+// should then be moved there.
+
 use std::{
 	collections::{HashMap, HashSet},
 	fmt::Display,