chore(deps): bump VRL for query performance improvements

[gwenaskell]

Summary

Bring the recent VRL query performance improvements into Vector by updating the locked revision from 09f1cd85 to deef5c37.

• Read variable subpaths without cloning the whole variable.
• Reuse cached paths when reading event and metadata fields.
• Adapt set_semantic_meaning to the borrowed Query::external_path() API.
• Replace deprecated Value::as_str() calls with its equivalent, to_str_lossy().

References

• enhancement(compiler): avoid cloning variables for subpath reads vrl#1984
• enhancement(compiler): cache external query paths vrl#1987

Vector configuration

Used tests/behavior/transforms/remap.yaml to derive the feature set for Clippy.

How did you test this PR?

• Passed make check-clippy with FEATURES=transforms-remap,vector-vrl-functions/dnstap,vrl-functions-crypto,vrl-functions-env,vrl-functions-network,vrl-functions-system.
• Passed make fmt, make check-fmt, and make check-markdown.
• Ran make build-licenses; retained existing license entries since the bump adds no packages and regeneration only removed unrelated entries.
• Tests left to CI, as requested. The local test command stopped before running tests because cargo-nextest is not installed.

Does this PR include user facing changes?

• Yes. Added a performance changelog fragment.
• No. A maintainer will apply the no-changelog label to this PR.

Contributor Guidelines

Followed the repository contribution guidance. PR opened as a draft.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-13T18:24:53.097317Z	fd0ef87	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[datadoghq-integration]

The VRL bump introduces deprecation errors in Kubernetes log source and Splunk HEC sink builds because their remaining Value::as_str() calls conflict with Vector’s deny-warnings policy.

_{Open Bits AI session}

_{🤖 Bits Code Review · Commit b98028a}

[github-actions]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[jackie8c]

I have read the CLA Document and I hereby sign the CLA

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fd0ef87cdc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".