chore(deps): update cql2 requirement from 0.3.8 to 0.4.0 (#801)

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Updates the requirements on
[cql2](https://github.com/developmentseed/cql2-rs) to permit the latest
version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/developmentseed/cql2-rs/releases">cql2's
releases</a>.</em></p>
<blockquote>
<h2>v0.3.8</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: docs build by <a
href="https://github.com/gadomski"><code>@​gadomski</code></a> in <a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/85">developmentseed/cql2-rs#85</a></li>
<li>chore: bump dependencies by <a
href="https://github.com/gadomski"><code>@​gadomski</code></a> in <a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/87">developmentseed/cql2-rs#87</a></li>
<li>release: v0.3.8 by <a
href="https://github.com/gadomski"><code>@​gadomski</code></a> in <a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/88">developmentseed/cql2-rs#88</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/developmentseed/cql2-rs/compare/v0.3.6...v0.3.8">https://github.com/developmentseed/cql2-rs/compare/v0.3.6...v0.3.8</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/developmentseed/cql2-rs/blob/main/CHANGELOG.md">cql2's
changelog</a>.</em></p>
<blockquote>
<h2>[0.3.8] - 2025-09-09</h2>
<h3>Changed</h3>
<ul>
<li>Bump some dependencies (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/87">#87</a>)</li>
</ul>
<h2>[0.3.7] - 2025-03-28</h2>
<h3>Added</h3>
<ul>
<li>Experimental DuckDB SQL (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/70">#70</a>)</li>
</ul>
<h2>[0.3.6] - 2025-03-27</h2>
<h3>Changed</h3>
<ul>
<li>Update examples (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/75">#75</a>)</li>
<li>Further reductions for and/or (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/78">#78</a>)</li>
</ul>
<h3>Added</h3>
<ul>
<li>Expose <code>Expr.matches()</code> in Python (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/76">#76</a>)</li>
<li>Expose <code>Expr.reduce()</code> in Python (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/79">#79</a>)</li>
</ul>
<h2>[0.3.5] - 2025-03-12</h2>
<h3>Fixed</h3>
<ul>
<li>Timestamp math (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/67">#67</a>)</li>
</ul>
<h2>[0.3.4] - 2025-02-21</h2>
<h3>Added</h3>
<ul>
<li>Enable combining expressions via addition (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/68">#68</a>)</li>
</ul>
<h2>[0.3.3] - 2024-02-18</h2>
<h3>Added</h3>
<ul>
<li>WASM (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/59">#59</a>)</li>
<li>Match cql2 against JSON (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/55">#55</a>)</li>
</ul>
<h2>[0.3.2] - 2024-12-09</h2>
<h3>Fixed</h3>
<ul>
<li>Packaging (<a
href="https://redirect.github.com/developmentseed/cql2-rs/pull/51">#51</a>)</li>
</ul>
<h2>[0.3.1] - 2024-11-14</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/developmentseed/cql2-rs/compare/v0.3.8...cql2-cli-v0.3.8">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Pete Gadomski <[email protected]>

Author: dependabot[bot]

Cargo.toml

@@ -49,7 +49,7 @@ bb8-postgres = "0.9.0"
 bytes = "1.7"
 chrono = "0.4.39"
 clap = "4.5"
-cql2 = "0.3.8"
+cql2 = "0.4.0"
 duckdb = "1.4.0"
 fluent-uri = "0.3.2"
 futures = "0.3.31"

crates/duckdb/src/client.rs

@@ -401,6 +401,7 @@ fn expr_properties_match(expr: &Expr, properties: &[String]) -> bool {
         BBox { bbox } => bbox
             .iter()
             .all(|expr| expr_properties_match(expr, properties)),
+        Null => expr_properties_match(expr, properties),
     }
 }