chore(deps): bump tokio-util from 0.7.18 to 0.7.19 in /crates/atlas-review

[dependabot]

Bumps tokio-util from 0.7.18 to 0.7.19.

Commits

• f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
• 52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
• ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
• 75fef53 chore: prepare Tokio v1.53.1 (#8303)
• ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
• eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
• 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
• a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
• be689a3 chore: prepare Tokio v1.53.0 (#8294)
• 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[uzayer]

Closing in favour of the regrouped Dependabot config merged in #145.

This PR is one of 36 opened by the 2026-08-10 run, 23 of which were five shared dependencies replayed once per crate — crates/* are standalone packages with their own Cargo.lock, so Dependabot saw them as unrelated projects. #145 collapses the 16 Cargo entries into one using directories with a glob, and adds group-by: dependency-name so a dependency is one PR across every crate that uses it.

Nothing here was rejected on its merits — CI was green. The reason not to merge it is the conflict fan-out: five of these PRs touch src-tauri/Cargo.lock and eight crates have three apiece, so landing them individually means each merge conflicts the rest, and every auto-rebase fires a fresh 17-job CI run. Grouped, the same updates arrive as roughly 13 PRs with versions consistent across crates.

Caveat worth recording: closing unmerged may mark these exact versions as dismissed, in which case they return on the next release of each dependency rather than immediately. For patch bumps of this kind that is a matter of weeks, and the grouped form is worth the wait.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.