chore(deps): bump dash-mpd from 0.18.3 to 0.19.1

[dependabot]

Bumps dash-mpd from 0.18.3 to 0.19.1.

Changelog

Sourced from dash-mpd's changelog.

[0.19.1] - 2025-11-11

• Re-enable the unicode-perl option on the regex crate, to allow parsing of timestamps.

• The deprecated trust-dns crate build option (replaced by hickory-dns) has been deleted.

• The DashDownloader functions with_authentication, with_auth_bearer take &str arguments instead of String arguments.

• Decryption using MP4Box: delete the temporary file used to pass decryption information to MP4Box once the file has been decrypted.

[0.19.0] - 2025-11-09

• Performance: do not recompute regex for each parse_xs_duration call (from @​sbuzzard).

• The Latency and PlaybackRate elements in a ServiceDescription element has been changed from an Option to a Vec, as per the DASH XSD. This is a breaking change, leading to a minor version update.

• In PlaybackRate elements, the attributes min and max have been changed from type f64 to Option<f64>, following the DASH XSD.

• Definitions are provided for DASH elements OperatingQuality, OperatingBandwidth, ContentSteering, CMCDParameters, ClientDataRecording.

• The definition of the ServiceDescription element now includes elements OperatingQuality, OperationBandwidth, ContentSteering, ClientDataReporting, and Playback. The order of these elements matches the DASH XSD (issue reported by @​jyiu-harmonicinc).

• Remove the use of italics and colored text in logging, and the dependency on the colored crate. The tracing crate has disabled the use of ANSI terminal codes in logged messages, for security reasons.

[0.18.4] - 2025-06-22

• Downloading: the calculation of segment numbers for $Number$-based dynamic streams now accounts for the difference between @availabilityStartTime and the current time.

• Add support for decrypting streams with ContentProtection using the MP4Box commandline application from GPAC. This provides an alternative to using mp4decrypt and Shaka packager. The MP4Box application does not support decryption of content in WebM containers, and sometimes rejects content which is accepted by mp4decrypt and Shaka packager.

Commits

• 6e02985 Prepare for v0.19.1 release
• e59f55f Downloading: delete temporary MP4Box temp file used when decrypting.
• 3e421fc Downloading: print rewritten stylesheet after each XSLT pass.
• 8b88512 Tests: fix rewrite-rickroll test.
• c9dc590 Fix non-Unix path through ensure_permissions_readable()
• 2ebce11 with_authentication, with_auth_bearer: String args -> &str
• 7463bad Update hex-literal dependency
• 1e0104e Add just recipe for pedantic clippy
• 153240a Tests: add further MPD fixtures for parsing test
• 2908abf Tests: add HbbTV test fixture
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)