chore(deps): update cql2 requirement from 0.4.0 to 0.5.0 (#905)

Updates the requirements on
[cql2](https://github.com/developmentseed/cql2-rs) to permit the latest
version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/developmentseed/cql2-rs/blob/main/CHANGELOG.md">cql2's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/developmentseed/cql2-rs/compare/cql2-v0.4.2...cql2-v0.5.0">0.5.0</a>
- 2025-12-08</h2>
<h3>Added</h3>
<ul>
<li>add <strong>str</strong> and <strong>repr</strong> (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/122">#122</a>)</li>
<li>add <strong>version</strong> to python module (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/121">#121</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li><em>(ci)</em> remove locked check (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/125">#125</a>)</li>
<li>it wasn't used anywhere and it was broken (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/124">#124</a>)</li>
<li><em>(ci)</em> update to latest npm for publishing</li>
<li><em>(ci)</em> remove clean install from npm publish</li>
</ul>
<h3>Other</h3>
<ul>
<li>use release bot for releasing (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/145">#145</a>)</li>
<li><em>(deps)</em> bump the production-dependencies group across 1
directory with 3 updates (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/144">#144</a>)</li>
<li>fix ci config (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/143">#143</a>)</li>
<li><em>(deps)</em> bump the production-dependencies group with 3
updates (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/142">#142</a>)</li>
<li>add release-plz workflow (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/140">#140</a>)</li>
<li><em>(deps)</em> bump the production-dependencies group with 6
updates (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/138">#138</a>)</li>
<li><em>(deps)</em> bump actions/checkout from 5 to 6 (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/134">#134</a>)</li>
<li>try groups (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/136">#136</a>)</li>
<li>group dependencies (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/135">#135</a>)</li>
<li><em>(ci)</em> actually keep the locked check (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/127">#127</a>)</li>
<li><em>(deps)</em> bump actions/setup-node from 4 to 6 (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/126">#126</a>)</li>
<li><em>(wasm)</em> [<strong>breaking</strong>] Make WASM module
interface more like Python module (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/120">#120</a>)</li>
<li>update cargo lock</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Normalized WASM interface to match Python API (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/120">#120</a>)
<ul>
<li>Renamed <code>CQL2</code> to <code>Expr</code> for consistency with
Python</li>
<li>Changed <code>Expr.matches()</code> and <code>Expr.reduce()</code>
to accept JS objects instead of strings</li>
<li>Changed <code>Expr.to_json()</code> to return JS objects instead of
strings</li>
</ul>
</li>
</ul>
<h2>[0.4.2] - 2025-11-12</h2>
<h3>Changed</h3>
<ul>
<li>Better package metadata and automated releasing</li>
</ul>
<h2>[0.4.1] - 2025-10-31</h2>
<h2>Changed</h2>
<ul>
<li>Deploy abi3 wheels (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/94">#94</a>)</li>
</ul>
<h2>Removed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/311ffb9414ecce42141144e96ea4edc3acd7ddea"><code>311ffb9</code></a>
ci: add id-token: write (<a
href="https://redirect.github.com/developmentseed/cql2-rs/issues/146">#146</a>)</li>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/fa226e36b7369a314fd1024049254feefe286efc"><code>fa226e3</code></a>
chore: release v0.5.0 (<a
href="https://redirect.github.com/developmentseed/cql2-rs/issues/141">#141</a>)</li>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/d37055f8b689d43af8a4bb774c971df817561bf6"><code>d37055f</code></a>
ci: use release bot for releasing (<a
href="https://redirect.github.com/developmentseed/cql2-rs/issues/145">#145</a>)</li>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/bbc8b919f42c6fb0e2d29ed6cc20b007a51b65a2"><code>bbc8b91</code></a>
chore(deps): bump the production-dependencies group across 1 directory
with 3...</li>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/47c08803f08c1784cc1e677d314fb54e71f867f0"><code>47c0880</code></a>
chore: fix ci config (<a
href="https://redirect.github.com/developmentseed/cql2-rs/issues/143">#143</a>)</li>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/f261474a6b8ec8e4d99e96dc07081319feddf1a8"><code>f261474</code></a>
chore(deps): bump the production-dependencies group with 3 updates (<a
href="https://redirect.github.com/developmentseed/cql2-rs/issues/142">#142</a>)</li>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/a840e64cc0c7374bcb56aac701e4253691005fe7"><code>a840e64</code></a>
chore: add release-plz workflow (<a
href="https://redirect.github.com/developmentseed/cql2-rs/issues/140">#140</a>)</li>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/529a46a79874d76989c0f4eb0425f0be254e74fa"><code>529a46a</code></a>
chore(deps): bump the production-dependencies group with 6 updates (<a
href="https://redirect.github.com/developmentseed/cql2-rs/issues/138">#138</a>)</li>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/41bff0f2c84e4a03b62e3eaf45bbcce83ce2d74e"><code>41bff0f</code></a>
chore(deps): bump the production-dependencies group with 2 updates (<a
href="https://redirect.github.com/developmentseed/cql2-rs/issues/137">#137</a>)</li>
<li><a
href="https://github.com/developmentseed/cql2-rs/commit/cdf4c03ab8b209665f224014914301ef3e6919f0"><code>cdf4c03</code></a>
chore(deps): bump actions/checkout from 5 to 6 (<a
href="https://redirect.github.com/developmentseed/cql2-rs/issues/134">#134</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/developmentseed/cql2-rs/compare/v0.4.0...cql2-v0.5.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

Cargo.toml

@@ -50,7 +50,7 @@ bytes = "1.7"
 chrono = "0.4.39"
 clap = "4.5"
 clap_complete = "4.5"
-cql2 = "0.4.0"
+cql2 = "0.5.0"
 duckdb = "1.4.0"
 fluent-uri = "0.4.1"
 futures = "0.3.31"