Skip to content

chore(deps): bump the rust-desktop group in /src-tauri with 10 updates - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/rust-desktop-c7571ed36c
Open

chore(deps): bump the rust-desktop group in /src-tauri with 10 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/rust-desktop-c7571ed36c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-desktop group in /src-tauri with 10 updates:

Package From To
tauri 2.11.1 2.11.6
tauri-plugin-opener 2.5.5 2.6.0
tauri-plugin-dialog 2.7.3 2.8.0
tauri-plugin-store 2.4.4 2.5.0
tauri-plugin-updater 2.11.0 2.13.0
tauri-plugin-single-instance 2.4.4 2.5.0
mdns-sd 0.21.1 0.21.4
getrandom 0.4.2 0.4.3
minisign-verify 0.2.5 0.3.0
tauri-build 2.6.3 2.7.1

Updates tauri from 2.11.1 to 2.11.6

Release notes

Sourced from tauri's releases.

tauri v2.11.6

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1251 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustls-pemfile

Version:   1.0.4

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134


Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134


Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser

</tr></table>

... (truncated)

Commits

Updates tauri-plugin-opener from 2.5.5 to 2.6.0

Release notes

Sourced from tauri-plugin-opener's releases.

deep-link-js v2.6.0

[2.6.0]

  • ecd3273e (#3480 by @​renovate) Updated windows-rs dependencies:

    • deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
    • opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
    • single-instance: updated windows-sys to 0.61
    • updater: updated windows-sys to 0.61
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-deep-link@2.6.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 6.2kB README.md
npm notice 4.7kB dist-js/index.cjs
npm notice 4.0kB dist-js/index.d.ts
npm notice 4.5kB dist-js/index.js
npm notice 801B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-deep-link
npm notice version: 2.6.0
npm notice filename: tauri-apps-plugin-deep-link-2.6.0.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 21.1 kB
npm notice shasum: 42f4e74e87aea6ace90871ad293f4fface5910cc
npm notice integrity: sha512-41rOuYUZjxcEz[...]TsoJQ2R9U5MCA==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005261605
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-deep-link@2.6.0

deep-link v2.6.0

[2.6.0]

... (truncated)

Commits

Updates tauri-plugin-dialog from 2.7.3 to 2.8.0

Release notes

Sourced from tauri-plugin-dialog's releases.

http-js v2.8.0

[2.8.0]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-http@2.8.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 7.7kB dist-js/index.cjs
npm notice 3.4kB dist-js/index.d.ts
npm notice 7.7kB dist-js/index.js
npm notice 655B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-http
npm notice version: 2.8.0
npm notice filename: tauri-apps-plugin-http-2.8.0.tgz
npm notice package size: 5.5 kB
npm notice unpacked size: 23.0 kB
npm notice shasum: 1cf059a5c97cadea0e5f6a07c22931a118c60ffc
npm notice integrity: sha512-cPvZvfUSaBkqG[...]jyXRPNo6Cky6g==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005263804
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-http@2.8.0
Commits
  • 6e2e7e4 publish new versions (#3070)
  • 9a2c98f temp: remove updater changefiles
  • 4a2ecb6 chore(deps): update rkyv, closes #3196
  • 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
  • 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
  • 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
  • d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
  • 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
  • 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
  • 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
  • Additional commits viewable in compare view

Updates tauri-plugin-store from 2.4.4 to 2.5.0

Release notes

Sourced from tauri-plugin-store's releases.

sql-js v2.5.0

[2.5.0]

  • ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.
  • 9b29b601 Update MSRV to 1.90 to match tauri.
  • a87a3c7d Update documentation.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-sql@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 6.2kB README.md
npm notice 6.5kB dist-js/index.cjs
npm notice 6.1kB dist-js/index.d.ts
npm notice 6.5kB dist-js/index.js
npm notice 703B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-sql
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-sql-2.5.0.tgz
npm notice package size: 5.3 kB
npm notice unpacked size: 27.0 kB
npm notice shasum: f2806141a23eab9347aed34efa0efa15930e8dae
npm notice integrity: sha512-wHzfXAgMbn3G1[...]kFZrgTyu8zBkw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2969525463
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-sql@2.5.0

sql v2.5.0

[2.5.0]

  • ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.
  • 9b29b601 Update MSRV to 1.90 to match tauri.
  • a87a3c7d Update documentation.

... (truncated)

Commits
  • d6a3898 Publish New Versions (v2) (#3268)
  • 2e5bcdf chore(deps): fix audits (#3373)
  • 4374b4f chore(notification): remove unused dev-deps (#3372)
  • f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
  • 4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
  • 99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
  • eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
  • 5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
  • 2c0883e chore(deps): update dependency vite to v8 (#3346)
  • 024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
  • Additional commits viewable in compare view

Updates tauri-plugin-updater from 2.11.0 to 2.13.0

Release notes

Sourced from tauri-plugin-updater's releases.

updater-js v2.13.0

[2.13.0]

  • ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.
  • 9b29b601 Update MSRV to 1.90 to match tauri.
  • a87a3c7d Update documentation.

bug

  • 101e1b06 (#3615) On Linux, check() no longer sets SSL_CERT_FILE and SSL_CERT_DIR to Debian paths. The override pointed rustls to files that do not exist on distros with a different layout, such as ALT Linux, and left every TLS client in the app without root certificates.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.13.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 6.7kB dist-js/index.cjs
npm notice 7.1kB dist-js/index.d.ts
npm notice 6.6kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.13.0
npm notice filename: tauri-apps-plugin-updater-2.13.0.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 25.1 kB
npm notice shasum: 309eff1cef34817ad6238c7f78fa4a3385e72b63
npm notice integrity: sha512-9iwTSOlxMPZGI[...]bR+PxQxf2qKMQ==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2969525636
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-updater@2.13.0

updater v2.13.0

[2.13.0]

... (truncated)

Commits

Updates tauri-plugin-single-instance from 2.4.4 to 2.5.0

Release notes

Sourced from tauri-plugin-single-instance's releases.

sql-js v2.5.0

[2.5.0]

  • ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.
  • 9b29b601 Update MSRV to 1.90 to match tauri.
  • a87a3c7d Update documentation.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-sql@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 6.2kB README.md
npm notice 6.5kB dist-js/index.cjs
npm notice 6.1kB dist-js/index.d.ts
npm notice 6.5kB dist-js/index.js
npm notice 703B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-sql
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-sql-2.5.0.tgz
npm notice package size: 5.3 kB
npm notice unpacked size: 27.0 kB
npm notice shasum: f2806141a23eab9347aed34efa0efa15930e8dae
npm notice integrity: sha512-wHzfXAgMbn3G1[...]kFZrgTyu8zBkw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2969525463
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-sql@2.5.0

sql v2.5.0

[2.5.0]

  • ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.
  • 9b29b601 Update MSRV to 1.90 to match tauri.
  • a87a3c7d Update documentation.

... (truncated)

Commits
  • d6a3898 Publish New Versions (v2) (#3268)
  • 2e5bcdf chore(deps): fix audits (#3373)
  • 4374b4f chore(notification): remove unused dev-deps (#3372)
  • f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
  • 4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
  • 99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
  • eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
  • 5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
  • 2c0883e chore(deps): update dependency vite to v8 (#3346)
  • 024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
  • Additional commits viewable in compare view

Updates mdns-sd from 0.21.1 to 0.21.4

Release notes

Sourced from mdns-sd's releases.

v0.21.4

This is a bugfix release with query-handling fixes and internal refactoring.

Bug fixes / improvements

  • Preserve supported questions and records when a message contains unknown question types, instead of dropping the whole message. (#508)
  • Preserve service announcements after an excluded address changes, instead of demoting an already-announced service back to probing. (#507)
  • Encode and send negative (NSEC) answers for absent hostname records, per RFC 6762 section 6.1. (#509)
  • Keep re-querying unresolved service instances while browsing. (#494)
  • Refactor handle_query and insert_ipaddr for readability, with no behavior change. (#510, #511)

What's Changed

New Contributors

Welcome and thank you!

Full Changelog: keepsimple1/mdns-sd@v0.21.3...v0.21.4

v0.21.3

This is a bugfix release that improves RFC 6762 section 6.7 compliance for legacy unicast responses.

Bug fixes

  • Echo the querier's message id in legacy unicast responses, per RFC 6762 section 6.7. (#498)
  • Cap the resource record TTL to 10 seconds in legacy unicast responses, per RFC 6762 section 6.7. (#504)
  • Replace assert with assert_eq in tests where possible for clearer failure output. (#456)

What's Changed

Full Changelog: keepsimple1/mdns-sd@v0.21.2...v0.21.3

v0.21.2

This is a bugfix release.

... (truncated)

Changelog

Sourced from mdns-sd's changelog.

Version 0.21.4 (2026-09-20)

This is a bugfix release with query-handling fixes and internal refactoring.

Bug fixes / improvements

  • Preserve supported questions and records when a message contains unknown question types, instead of dropping the whole message. (#508)
  • Preserve service announcements after an excluded address changes, instead of demoting an already-announced service back to probing. (#507)
  • Encode and send negative (NSEC) answers for absent hostname records, per RFC 6762 section 6.1. (#509)
  • Keep re-querying unresolved service instances while browsing. (#494)
  • Refactor handle_query and insert_ipaddr for readability, with no behavior change. (#510, #511)

All changes

  • 0d2477b 2026-09-20 refactor: extract answer_hostname_question from handle_query (#511) (keepsimple1)
  • 4d2ef74 2026-09-20 refactor: insert_ipaddr and handle_query (#510) (keepsimple1)
  • 7f6a723 2026-09-19 fix: preserve supported questions when unknown types are present (#508) (Joey)
  • 3ba9f03 2026-09-19 fix: preserve announcements after excluded address changes (#507) (Joey)
  • aeb8c71 2026-09-17 fix: encode and send negative answers for absent hostname records (#509) (Joey)
  • 75d1941 2026-09-11 fix: keep re-querying unresolved instances while browsing (#494) (keepsimple1)

Version 0.21.3 (2026-09-07)

This is a bugfix release that improves RFC 6762 section 6.7 compliance for legacy unicast responses.

Bug fixes / improvements

  • Echo the querier's message id in legacy unicast responses, per RFC 6762 section 6.7. (#498)
  • Cap the resource record TTL to 10 seconds in legacy unicast responses, per RFC 6762 section 6.7. (#504)
  • Replace assert with assert_eq in tests where possible for clearer failure output. (#456)

All changes

  • b61fee3 2026-09-07 fix: echo query id in legacy unicast responses (#498) (keepsimple1)
  • 217ed5a 2026-09-07 test: replace assert with assert_eq where possible (#456) (CosminPerRam)
  • d8ab875 2026-09-07 fix: cap TTL to 10s in legacy unicast responses (#504) (keepsimple1)
  • 0ec8df3 2026-09-07 fix clippy (keepsimple1)

Version 0.21.2 (2026-09-05)

This is a bugfix release.

Bug fixes / improvements

... (truncated)

Commits
  • 38395fc prepare for a new release 0.21.4 (#512)
  • 0d2477b refactor: extract answer_hostname_question from handle_query (#511)
  • 4d2ef74 refactor: insert_ipaddr and handle_query (#510)
  • 7f6a723 fix: preserve supported questions when unknown types are present (#508)
  • 3ba9f03 fix: preserve announcements after excluded address changes (#507)
  • aeb8c71 fix: encode and send negative answers for absent hostname records (#509)
  • 75d1941 fix: keep re-querying unresolved instances while browsing (#494)
  • da41a9c prepare for a new release 0.21.3 (#505)
  • d8ab875 fix: cap TTL to 10s in legacy unicast responses (#504)
  • 217ed5a test: replace assert with assert_eq where possible (#456)
  • Additional commits viewable in compare view

Updates getrandom from 0.4.2 to 0.4.3

Changelog

Sourced from getrandom's changelog.

0.4.3 - 2026-06-17

Added

  • wasm64-unknown-unknown target support for wasm_js backend #848

Changed

  • Drop wasip2 and wasip3 dependencies in favor of manual bindings #830

#830: rust-random/getrandom#830 #848: rust-random/getrandom#848

Commits

Updates minisign-verify from 0.2.5 to 0.3.0

Commits

Updates tauri-build from 2.6.3 to 2.7.1

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1277 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134


Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the rust-desktop group in /src-tauri with 10 updates
b4b803a 
Bumps the rust-desktop group in /src-tauri with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [tauri](https://github.com/tauri-apps/tauri) | `2.11.1` | `2.11.6` |
| [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.5` | `2.6.0` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.3` | `2.8.0` |
| [tauri-plugin-store](https://github.com/tauri-apps/plugins-workspace) | `2.4.4` | `2.5.0` |
| [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.11.0` | `2.13.0` |
| [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.4.4` | `2.5.0` |
| [mdns-sd](https://github.com/keepsimple1/mdns-sd) | `0.21.1` | `0.21.4` |
| [getrandom](https://github.com/rust-random/getrandom) | `0.4.2` | `0.4.3` |
| [minisign-verify](https://github.com/jedisct1/rust-minisign-verify) | `0.2.5` | `0.3.0` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.3` | `2.7.1` |


Updates `tauri` from 2.11.1 to 2.11.6
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.11.1...tauri-v2.11.6)

Updates `tauri-plugin-opener` from 2.5.5 to 2.6.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.5.5...fs-v2.6.0)

Updates `tauri-plugin-dialog` from 2.7.3 to 2.8.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@dialog-v2.7.3...log-v2.8.0)

Updates `tauri-plugin-store` from 2.4.4 to 2.5.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.4...fs-v2.5.0)

Updates `tauri-plugin-updater` from 2.11.0 to 2.13.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@updater-v2.11.0...updater-v2.13.0)

Updates `tauri-plugin-single-instance` from 2.4.4 to 2.5.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.4...fs-v2.5.0)

Updates `mdns-sd` from 0.21.1 to 0.21.4
- [Release notes](https://github.com/keepsimple1/mdns-sd/releases)
- [Changelog](https://github.com/keepsimple1/mdns-sd/blob/main/CHANGELOG.md)
- [Commits](keepsimple1/mdns-sd@v0.21.1...v0.21.4)

Updates `getrandom` from 0.4.2 to 0.4.3
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](rust-random/getrandom@v0.4.2...v0.4.3)

Updates `minisign-verify` from 0.2.5 to 0.3.0
- [Commits](jedisct1/rust-minisign-verify@0.2.5...0.3.0)

Updates `tauri-build` from 2.6.3 to 2.7.1
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.6.3...tauri-build-v2.7.1)

---
updated-dependencies:
- dependency-name: tauri
  dependency-version: 2.11.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-desktop
- dependency-name: tauri-plugin-opener
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-desktop
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-desktop
- dependency-name: tauri-plugin-store
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-desktop
- dependency-name: tauri-plugin-updater
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-desktop
- dependency-name: tauri-plugin-single-instance
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-desktop
- dependency-name: mdns-sd
  dependency-version: 0.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-desktop
- dependency-name: getrandom
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-desktop
- dependency-name: minisign-verify
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-desktop
- dependency-name: tauri-build
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-desktop
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants