chore(deps): master dependency bump — consolidate all 14 Dependabot PRs

.github/ISSUE_TEMPLATE/bug_report.md

@@ -35,7 +35,7 @@ If applicable, add screenshots to help explain your problem.
 
 - **OS**: [e.g. Ubuntu 22.04, Windows 11, macOS 13]
 - **RustIRC Version**: [e.g. 0.1.0, git commit hash]
-- **Rust Version**: [e.g. 1.75.0]
+- **Rust Version**: [e.g. 1.89.0]
 - **Interface**: [GUI/TUI]
 
 ## IRC Server Details

.github/copilot-instructions.md

@@ -11,7 +11,7 @@ RustIRC is a modern IRC client built in Rust that combines the best features fro
 
 ## Technology Stack
 
-- **Language**: Rust (MSRV: 1.75+)
+- **Language**: Rust (MSRV: 1.89+)
 - **Async Runtime**: Tokio for network I/O
 - **GUI Framework**: Iced 0.13.1 with Material Design 3 components
 - **TUI Framework**: ratatui for terminal interface

.github/dependency-review-config.yml

@@ -72,6 +72,10 @@ allow-dependencies-licenses:
   - pkg:cargo/iced_core
   - pkg:cargo/iced_widget
   - pkg:cargo/iced_runtime
+  # Notification backend (macOS-only). Genuinely MIT/Apache-2.0, but its
+  # crate metadata uses a non-SPDX "MIT/Apache-2.0" string that GitHub's
+  # license parser cannot resolve (rendered as LicenseRef-bad-mitapache-2.0).
+  - pkg:cargo/mac-notification-sys
 
 # Deny specific packages using purl format
 deny-packages: []

.github/workflows/ci.yml

@@ -132,7 +132,7 @@ jobs:
 
     # Setup sccache with comprehensive GitHub cache service resilience
     - name: Run sccache-cache
-      uses: mozilla-actions/sccache-action@v0.0.9
+      uses: mozilla-actions/sccache-action@v0.0.10
       continue-on-error: true
       id: sccache
       with:
@@ -475,7 +475,7 @@ jobs:
     # Upload test results to Codecov for Test Analytics
     - name: Upload test results to Codecov
       if: ${{ !cancelled() }}
-      uses: codecov/codecov-action@v5
+      uses: codecov/codecov-action@v6
       continue-on-error: true
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
@@ -526,7 +526,7 @@ jobs:
 
     - uses: dtolnay/rust-toolchain@master
       with:
-        toolchain: 1.75.0
+        toolchain: 1.89.0
     - uses: Swatinem/rust-cache@v2
     - name: Check MSRV with sccache fallback
       shell: bash

.github/workflows/master-pipeline.yml

@@ -88,7 +88,7 @@ jobs:
 
       # Setup sccache with comprehensive resilience for GitHub cache service outages
       - name: Run sccache-cache
-        uses: mozilla-actions/sccache-action@v0.0.9
+        uses: mozilla-actions/sccache-action@v0.0.10
         continue-on-error: true
         id: sccache
         with:
@@ -463,7 +463,7 @@ jobs:
           RUSTC_WRAPPER: ""  # Disable sccache for coverage to avoid conflicts
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           files: ./cobertura.xml
           use_oidc: true

.github/workflows/security-audit.yml

@@ -225,7 +225,7 @@ jobs:
     - name: Comment audit summary on PR
       if: github.event_name == 'pull_request' && github.event.pull_request
       continue-on-error: true
-      uses: actions/github-script@v8
+      uses: actions/github-script@v9
       with:
         script: |
           const fs = require('fs');
@@ -255,7 +255,7 @@ jobs:
       uses: actions/checkout@v6
 
     - name: Dependency Review
-      uses: actions/dependency-review-action@v4
+      uses: actions/dependency-review-action@v5
       with:
         config-file: './.github/dependency-review-config.yml'
         comment-summary-in-pr: true