build(deps): bump html-escape from 0.2.15 to 0.3.0

Bumps [html-escape](https://github.com/magiclen/html-escape) from 0.2.15 to 0.3.0.
- [Commits](https://github.com/magiclen/html-escape/compare/v0.2.15...v0.3.0)

---
updated-dependencies:
- dependency-name: html-escape
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/ci.yml

@@ -124,7 +124,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: clippy, rustfmt
-      - uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
       # `--locked` on every cargo invocation: the version bump edits
       # Cargo.lock by hand (AGENTS.md), so a stale lock must fail here instead
       # of being silently re-resolved — otherwise CI tests a different
@@ -162,7 +162,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
       # All #[ignore]d live tests, by the "live" name filter, in both crates:
       # the bot crate has two of its own (repair refetch, text-only link)
       # whose fetches are network-bound but whose sends go through MockSender.

Cargo.lock

@@ -717,9 +717,9 @@ checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
 
 [[package]]
 name = "html-escape"
-version = "0.2.15"
+version = "0.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c9356095b4b41197bba32173600e1582792cda618f65d12f68e2e77d273413c5"
+checksum = "491194d601b4fa9fac3c9571e014070a0ad1bc3392d1bc10419695196a8b3cc3"
 
 [[package]]
 name = "http"

crates/x-media/Cargo.toml

@@ -8,7 +8,7 @@ reqwest = { version = "0.12", default-features = false, features = ["json", "rus
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 regex = "1.12"
-html-escape = "0.2"
+html-escape = "0.3"
 url = "2.5.2"
 bytes = "1"
 # ugoira frame zips are stored/deflate only; everything in zip's default

crates/xmedia-bot/Cargo.toml

@@ -12,7 +12,7 @@ log = "0.4"
 pretty_env_logger = "0.5"
 dotenv = "0.15"
 url = "2.5.2"
-html-escape = "0.2"
+html-escape = "0.3"
 rusqlite = { version = "0.40", features = ["bundled"] }
 rand = "0.10"
 tempfile = "3"