chore(deps): remove unused dependencies and upgrade to latest versions

Remove rayon (parallel feature), bytemuck, criterion, and anyhow
(from recast-common) which had zero usage in source. Upgrade glam
0.29->0.31, bitflags 2.9->2.10, ordered-float 5.0->5.1, tokio
1.45->1.49, lz4_flex 0.11->0.12, tempfile 3.20->3.24. Update bytes
to 1.11.1 (RUSTSEC-2026-0007) and socket2 to 0.6.2. Remove unused
Zlib license allowance and add windows-sys skip in deny.toml.

Author: danielsreichenbach

.github/ISSUE_TEMPLATE/bug_report.md

@@ -29,7 +29,7 @@ What actually happened.
 - OS: [e.g., Ubuntu 22.04, Windows 11, macOS 14]
 - Rust version: [e.g., 1.92.0]
 - recast-rs version: [e.g., 0.1.0]
-- Feature flags enabled: [e.g., parallel, serialization]
+- Feature flags enabled: [e.g., serialization, tokio]
 
 ## Minimal Reproduction
 

CHANGELOG.md

@@ -7,8 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Removed
+
+- Removed unused `rayon` dependency and `parallel` feature from recast crate
+- Removed unused `bytemuck` dependency from recast-common and recast crates
+- Removed unused `criterion` workspace dependency (no benchmarks exist)
+- Removed unused `anyhow` dependency from recast-common crate
+- Removed unused `Zlib` license allowance from `deny.toml`
+
 ### Changed
 
+- Upgraded `glam` from 0.29 to 0.31
+- Upgraded `bitflags` from 2.9 to 2.10
+- Upgraded `ordered-float` from 5.0 to 5.1
+- Upgraded `tokio` from 1.45 to 1.49
+- Upgraded `lz4_flex` from 0.11 to 0.12
+- Upgraded `tempfile` from 3.20 to 3.24
+- Updated `bytes` to 1.11.1 (fixes RUSTSEC-2026-0007)
+- Updated `socket2` to 0.6.2
+
 #### recast-common
 
 - Added `std` feature flag (enabled by default) to gate file I/O operations
@@ -76,7 +93,6 @@ Initial release. This is a Rust port of [RecastNavigation][recast-cpp].
 - Detail mesh generation (`PolyMeshDetail`)
 - Configurable build parameters (`RecastConfig`)
 - Context for logging and timing (`RecastContext`)
-- Optional parallel processing via `parallel` feature
 
 #### detour
 

Cargo.lock

@@ -35,21 +35,17 @@ thiserror = "2.0"
 anyhow = "1.0"
 
 # Math
-glam = { version = "0.29", features = ["serde"] }
+glam = { version = "0.31", features = ["serde"] }
 
 # Utilities
-bitflags = { version = "2.9", features = ["serde"] }
-bytemuck = "1.23"
+bitflags = { version = "2.10", features = ["serde"] }
 byteorder = "1.5"
 log = "0.4"
-ordered-float = "5.0"
+ordered-float = "5.1"
 web-time = "1.1"
 
-# Parallel processing
-rayon = "1.10"
-
 # Async runtime (optional)
-tokio = { version = "1.45", features = ["full"] }
+tokio = { version = "1.49", features = ["full"] }
 
 # Runtime-agnostic async primitives
 async-lock = "3.4"
@@ -61,12 +57,11 @@ serde_json = "1.0"
 postcard = { version = "1.1", features = ["alloc"] }
 
 # Compression
-lz4_flex = "0.11"
+lz4_flex = "0.12"
 
 # Testing
-criterion = { version = "0.6", features = ["html_reports"] }
 assert_approx_eq = "1.1"
-tempfile = "3.20"
+tempfile = "3.24"
 fastrand = "2.3"
 
 [profile.release]

Cargo.toml

@@ -119,7 +119,6 @@ cargo build --release
 ### Feature Flags
 
 - `serialization` - Save/load navigation meshes
-- `parallel` - Multi-threaded mesh generation (not WASM-compatible)
 - `tokio` - Tokio runtime integration for `detour-dynamic` (not WASM-compatible)
 
 ### Platform Support
@@ -147,7 +146,6 @@ cargo build --target wasm32-unknown-unknown -p recast -p detour
 | Dynamic obstacles | Yes | Yes | Full support |
 | Async operations | Yes | Yes | Runtime-agnostic via `async-lock` |
 | File I/O | Yes | No | Use `std` feature to disable |
-| Parallel processing | Yes | No | Disable `parallel` feature |
 | Serialization | Yes | Yes | In-memory only on WASM |
 
 ### WASM Usage Notes

README.md

@@ -13,9 +13,7 @@ categories = ["game-development", "algorithms"]
 [dependencies]
 glam = { workspace = true }
 thiserror = { workspace = true }
-bytemuck = { workspace = true }
 log = { workspace = true }
-anyhow = { workspace = true }
 tokio = { workspace = true, optional = true }
 
 [dev-dependencies]

crates/recast-common/Cargo.toml

@@ -15,16 +15,13 @@ recast-common = { workspace = true }
 glam = { workspace = true }
 thiserror = { workspace = true }
 log = { workspace = true }
-rayon = { workspace = true, optional = true }
-bytemuck = { workspace = true }
 web-time = { workspace = true }
 
 [dev-dependencies]
 assert_approx_eq = { workspace = true }
 
 [features]
 default = []
-parallel = ["rayon"]
 
 [lints]
 workspace = true

crates/recast/Cargo.toml

@@ -26,10 +26,6 @@ This is a Rust port of the Recast component from [RecastNavigation][recast-cpp].
 - **Polygon Mesh**: Generate navigation polygon meshes
 - **Detail Mesh**: Create detailed height meshes for accurate positioning
 
-## Optional Features
-
-- `parallel` - Multi-threaded mesh generation using Rayon (not WASM-compatible)
-
 ## WASM Support
 
 This crate is fully compatible with WebAssembly. Build for WASM with:
@@ -38,8 +34,7 @@ This crate is fully compatible with WebAssembly. Build for WASM with:
 cargo build --target wasm32-unknown-unknown -p recast
 ```
 
-Note: The `parallel` feature is not available on WASM. Timing uses `web-time`
-for cross-platform compatibility.
+Timing uses `web-time` for cross-platform compatibility.
 
 ## Example
 

crates/recast/README.md

@@ -30,7 +30,6 @@ allow = [
     "Apache-2.0",
     "Unicode-3.0",
     "Unlicense",
-    "Zlib",
 ]
 confidence-threshold = 0.8
 
@@ -52,7 +51,10 @@ external-default-features = "allow"
 # Banned crates
 deny = []
 
-skip = []
+# socket2 0.6.2 still depends on windows-sys 0.60 while rest of tree uses 0.61
+skip = [
+    { crate = "windows-sys@0.60", reason = "transitive dep via socket2; awaiting upstream update" },
+]
 skip-tree = []
 
 # Source restrictions