Update oneio requirement from 0.17.0 to 0.18.2

[dependabot]

Updates the requirements on oneio to permit the latest version.

Release notes

Sourced from oneio's releases.

v0.18.2

Hot Fix

• Make rustls_sys dependency optional and exclude from rustls feature flag

Changelog

Sourced from oneio's changelog.

v0.18.2 -- 2025-06-06

Hot Fix

• Make rustls_sys dependency optional and exclude from rustls feature flag

v0.18.1 -- 2025-05-31

✨ Added

• New build script: Added build.rs to enforce that at least one TLS backend (rustls or native-tls) is enabled if any of the remote features (http, ftp, or remote) are enabled.
• Module documentation: Added detailed Rust doc comments to the compression modules (gzip, bzip2, lz4, xz, zstd) and utils.rs for improved usability and understanding.
• get_protocol function: Utility for extracting protocol from file paths, now used across remote file access functions.

🛠️ Changed

• Feature dependencies: The ftp feature now explicitly depends on the http feature in Cargo.toml.
• Error handling: Updated OneIoError enum to more accurately gate error variants with corresponding features ( http, ftp).
• Module structure:
  • compressions is now a public module.
  • Refactored how the crate distinguishes between local and remote file access, using get_protocol.
  • get_reader_raw and related functions now determine protocol and select the appropriate file reader accordingly.
• Compression interface:
  • Added a unified trait OneIOCompression and get_compression_reader/get_compression_writer utilities for consistent handling of all supported compression algorithms.
  • Updated file open logic to use these helpers based on file suffix.

🧹 Cleaned up and Improved

• Removed legacy or redundant code paths (e.g., get_reader_raw_remote, old error gates).
• Moved protocol detection and remote file reading logic into more modular and maintainable forms.
• Several function signatures and internal APIs have been updated for clarity and maintainability.

---

📝 Developer Notes

• All compression modules (gzip, bzip2, lz4, xz, zstd) now include clear documentation and consistent interfaces for reading and writing compressed files.
• Users enabling remote protocol features must ensure at least one TLS backend is also enabled.

v0.18.0 -- 2025-05-30

Highlights

• split remote features into http and ftp, allowing users who only need HTTP or FTP support to use the

... (truncated)

Commits

• d603b41 make rustls_sys optional and release v0.18.2
• 111f795 Merge pull request #60 from bgpkit/remove-unnecessary-rustls-sys
• 9584b60 fix: remove unused rustls_sys dependency and related code
• f7dd30b prepare v0.18.1 release
• 9c8b8d3 Merge pull request #58 from bgpkit/fixes/feature-flags-fixes
• 6adcb1e clippy: simplify return statements in exists function
• ca97170 fix: improve feature flag handling in exists function
• de7332c add note on why ftp feature relies on http feature at the moment
• dc94381 fix exists incorrect feature gate
• 4cc87ee update docs across the library
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.