build(deps): update oneio requirement from 0.25 to 0.26

[dependabot]

Updates the requirements on oneio to permit the latest version.

Release notes

Sourced from oneio's releases.

v0.26.0

Added

• oneio s3 delete (alias rm) CLI subcommand for deleting a single S3 object, mirroring the existing s3_upload/s3_delete library API

Changelog

Sourced from oneio's changelog.

v0.26.0 -- 2026-08-31

Added

• oneio s3 delete (alias rm) CLI subcommand for deleting a single S3 object, mirroring the existing s3_upload/s3_delete library API

v0.25.0 -- 2026-08-11

Added

• get_resumable_http_reader (oneio::get_resumable_http_reader and OneIo::get_resumable_http_reader): an opt-in HTTP(S) reader that transparently resumes with Range requests if the connection is dropped mid-transfer, continuing from the last byte read instead of failing. Default readers (get_reader/get_reader_raw) and download are unchanged. Resumed responses are validated (Content-Range start offset, ETag and Last-Modified when the original response provided it) to avoid splicing mismatched data; a 416 Range Not Satisfiable below the declared content length is surfaced as an error rather than a silent truncation. Requests pin Accept-Encoding: identity, so resumed byte ranges always refer to the stored representation (safe to combine with the reqwest-gzip feature). Thanks @​JustinLoye (#76).

Fixed

• Removed Content-Length: 0 from default HTTP headers. This header was sent on every request including GETs, where it incorrectly declared a zero-length request body. Some servers and proxies may reject or mishandle requests with an explicit Content-Length header on bodyless methods (#82).

v0.24.2 -- 2026-07-26

Fixed

• S3 multipart upload now retries individual parts on transient transport errors (connection reset, timeout) with exponential backoff. Previously, a single transient failure on any part aborted the entire upload, wasting all successfully uploaded parts. This caused large file backups (~1 GB) to fail intermittently on constrained network paths such as Railway to Cloudflare R2.
• Added a 300-second per-request timeout to S3 upload operations (previously only connect timeout was set).

Added

• ONEIO_S3_MAX_RETRIES environment variable to configure retry attempts after the initial request for transient S3 transport errors (default: 3).
• ONEIO_S3_RETRY_BACKOFF_MS environment variable to configure initial retry backoff in milliseconds (default: 1000, doubles each attempt).

v0.24.1 -- 2026-07-23

Fixed

• CLI no longer buffers multi-GB single-line files into memory before output. Default mode now streams decompressed bytes directly to stdout via io::copy instead of line-by-line reading. --stats mode uses byte-chunk scanning to count lines and characters without building full-line String allocations.
  • Behavior change: the default mode now outputs raw decompressed bytes with no UTF-8 decoding or line-based rewriting. This means --strict-utf8 has no effect outside --stats mode (it issues a warning and continues), and files without a trailing newline are no longer rewritten to add one.

v0.24.0 -- 2026-07-22

Bug fixes

• Preserve leading-slash S3 object keys when using path-style endpoints such as Cloudflare R2.

Added

• Re-exported reqwest as oneio::reqwest (under the http feature) so downstream crates can name HTTP types (StatusCode, header, blocking::Response) without declaring their own reqwest dependency and risking version skew. Note: this makes reqwest part of oneio's public API contract; a reqwest major-version bump is a breaking oneio change.
• New opt-in reqwest-gzip feature: advertises Accept-Encoding: gzip and transparently decodes Content-Encoding: gzip responses (e.g. ~97 MB to ~4.6 MB for rpki.cloudflare.com/rpki.json). Distinct from the gz family, which is URL-suffix-based file decompression. Off by default; no dependency-tree change unless enabled.

v0.23.0 -- 2026-05-12

Added

• OneIo::to_lines_lossy — lossy line iterator from any Box<dyn Read + Send>
• read_lines_lossy / OneIo::read_lines_lossy — line iteration with invalid UTF-8 replaced by U+FFFD
• read_to_string_lossy / OneIo::read_to_string_lossy / read_to_string_lossy_async — full-file read with lossy UTF-8
• read_to_bytes / OneIo::read_to_bytes / read_to_bytes_async — byte-perfect read without UTF-8 validation
• --strict-utf8 CLI flag for strict UTF-8 validation in the CLI

Changed

• CLI now defaults to lossy UTF-8 reading; no longer exits on invalid byte sequences

... (truncated)

Commits

• a6b9b8f docs(readme): bump dependency examples to 0.26
• 43407a0 chore(release): prepare v0.26.0
• 212f6c1 feat(cli): add oneio s3 delete subcommand
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)