Bump gix from 0.86.0 to 0.87.0 in the deps group

[dependabot]

Bumps the deps group with 1 update: gix.

Updates gix from 0.86.0 to 0.87.0

Release notes

Sourced from gix's releases.

gix v0.87.0

Bug Fixes (BREAKING)

• remove need-more-recent-msrv as it's not required anymore It was mostly meant to be internal, but the name didn't indicate this, hence the breaking change.

Test

• assert fetched pack contents rather than pack checksums fetch_pack and fetch_pack_without_local_destination asserted the data_hash/index_hash of a pack produced by the host git. Those cover the pack's compressed bytes, so they silently encode which zlib implementation that git is linked against: with a zlib-ng-linked git (Arch, among others) the 219-byte commit in that pack deflates to 152 bytes where stock zlib produces 153, making the pack 268 bytes instead of 269 and changing both checksums.

  Nothing about the fetch itself differs — re-deflating the very same object payloads with stock zlib and re-hashing reproduces the expected checksum byte for byte, and every other assertion in both tests already passes.

  Assert the pack's object ids instead, read back from the index that was just written. They hash uncompressed content, so they are identical on every host, and they are what the checksums were standing in for. num_objects, pack_version and index_version are untouched; Entry::crc32 is deliberately not used, as it too is computed over compressed bytes.

New Features (BREAKING)

• add Git-compatible commit signature verification with Commit::verify() Breaking because it also adds config::tree::Key::default_value(), which gives Any a default_value field.

  Expose repository-aware verification on commits while delegating verifier execution and result parsing to gix-object plumbing. Resolve supported signature formats, configured programs, trust thresholds, SSH allowed signers and revocations, repository-relative paths, and commit verification time according to Git configuration.

• add commit::Info::generation That way it's evident if a commit-graph was present for this node. Breaking, as it adds a new public field to a structure.

Changed (BREAKING)

• remove the tree-editor feature toggle The workspace MSRV now exceeds Rust 1.75, which stabilized the language feature that originally required tree editing to be gated.

... (truncated)

Commits

• 0c541c7 Release gix-note v0.1.0, gix-pack v0.74.0, gix-odb v0.84.0, gix-refspec v0.45...
• 94aa28e Make gix-note compile on docs.rs
• d2af4ed Release gix-error v0.3.0, gix-date v0.16.0, gix-actor v0.42.0, gix-validate v...
• ebe9095 update manifests prior to release
• 68c263b report proofing
• 0d8bd1d Report August 2026
• 7424676 Merge pull request #2930 from GitoxideLabs/gix-notes
• 5c8d935 thanks clippy
• d934f5b feat: expose git notes in gix::Repository
• dc556e4 feat(gix-glob): add Pattern::has_wildcard()
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions