Skip to content

chore(deps): bump the cargo-minor group with 25 updates - #17

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-4ee393b547
Closed

chore(deps): bump the cargo-minor group with 25 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-4ee393b547

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the cargo-minor group with 25 updates:

Package From To
tauri 2.12.3 2.12.4
tauri-plugin-dialog 2.8.2 2.8.3
tauri-plugin-opener 2.7.1 2.7.2
tauri-build 2.7.2 2.7.4
cc 1.8.0 1.9.0
combine 4.6.8 4.6.9
defmt 1.1.1 1.2.0
defmt-macros 1.1.1 1.2.0
defmt-parser 1.0.0 1.1.0
find-msvc-tools 0.1.14 0.1.15
ico 0.5.0 0.6.0
libc 0.2.190 0.2.191
png 0.17.16 0.18.1
tauri-codegen 2.7.2 2.7.4
tauri-macros 2.7.2 2.7.4
tauri-plugin 2.7.1 2.7.2
tauri-plugin-fs 2.7.0 2.7.1
tauri-runtime 2.12.1 2.12.2
tauri-runtime-wry 2.12.1 2.12.3
tauri-utils 2.10.1 2.10.2
tauri-winres 0.3.6 0.3.7
unicode-normalization 0.1.25 0.1.26
zbus_names 4.3.4 4.3.5
zvariant 5.15.0 5.15.1
zvariant_derive 5.15.0 5.15.1

Updates tauri from 2.12.3 to 2.12.4

Release notes

Sourced from tauri's releases.

tauri v2.12.4

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1314 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1045 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustybuzz
Version:   0.20.1
Warning:   unmaintained
Title:     rustybuzz is unmaintained
Date:      2026-07-11
ID:        RUSTSEC-2026-0206
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     ttf-parser is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 4 allowed warnings found

[2.12.4]

Enhancements

... (truncated)

Commits
  • 59b63ab Apply Version Updates From Current Changes (#16255)
  • 55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
  • 744ff2b chore(deps): bump rustls to 0.23.46
  • c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
  • dc637db chore: add missing api change file (#16260)
  • b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
  • 7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
  • 5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
  • 5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
  • 141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
  • Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.8.2 to 2.8.3

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.3

[2.8.3]

Dependencies

  • Upgraded to fs-js@2.7.1
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.3
npm notice filename: tauri-apps-plugin-dialog-2.8.3.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 1ef5cbd8833d50c911dedc3b50b94c6ba7ec2db5
npm notice integrity: sha512-Hd/yBfk2R5v2M[...]S+gBDNe3nHspw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253692258
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.3

dialog v2.8.3

[2.8.3]

Dependencies

... (truncated)

Commits
  • 44293a5 Publish New Versions (v2) (#3689)
  • 7550f7c chore(deps): bump rustls to 0.23.46
  • 36d8e40 feat(geolocation): support for non-GMS devices (#3377)
  • 57297f3 feat(clipboard-manager): add support for writing secrets (#3376)
  • 1ab9304 fix(opener): avoid blocking-runtime panic in reveal_item_in_dir (#3565)
  • 0e17675 fix(http): decode header values as ISO-8859-1 (#3586)
  • 62b3565 chore(deps): update quinn-proto (lockfile-only) (#3707)
  • d80b1be feat: add torch plugin for iOS and Android (#3551)
  • c91a9e6 feat(sql): add autoCreate option to Database.load (#3702)
  • 0374bec [feat] [biometric] Adding the capability of encrypting/decrypting data using ...
  • Additional commits viewable in compare view

Updates tauri-plugin-opener from 2.7.1 to 2.7.2

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.7.2

[2.7.2]

  • 1ab93046 (#3565 by @​cyclone-mind) Fixed revealItemInDir and the reveal_item_in_dir / reveal_items_in_dir Rust APIs panicking on Linux and the BSDs with Cannot start a runtime from within a runtime when zbus is built with its tokio feature and the call happens inside an async runtime. The blocking D-Bus calls now run on a dedicated thread.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.7.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.7.2
npm notice filename: tauri-apps-plugin-opener-2.7.2.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: 698f34eeb66d167792f7a113f3567c7bdff4294a
npm notice integrity: sha512-LyybP1VSzTMQi[...]jPzHMpv0Sz+TQ==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253696161
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-opener@2.7.2

opener v2.7.2

[2.7.2]

  • 1ab93046 (#3565 by @​cyclone-mind) Fixed revealItemInDir and the reveal_item_in_dir / reveal_items_in_dir Rust APIs panicking on Linux and the BSDs with Cannot start a runtime from within a runtime when zbus is built with its tokio feature and the call happens inside an async runtime. The blocking D-Bus calls now run on a dedicated thread.

... (truncated)

Commits

Updates tauri-build from 2.7.2 to 2.7.4

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.4

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1348 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1044 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustybuzz
Version:   0.20.1
Warning:   unmaintained
Title:     rustybuzz is unmaintained
Date:      2026-07-11
ID:        RUSTSEC-2026-0206
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     ttf-parser is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 4 allowed warnings found

[2.7.4]

Bug Fixes

... (truncated)

Commits

Updates cc from 1.8.0 to 1.9.0

Release notes

Sourced from cc's releases.

cc-v1.9.0

Added

  • pass AddressSanitizer on to the C compiler (#2045)
  • add source root for stable external object names (#2034)
  • emit rerun-if-env-changed for the compiler's own env vars (#2035)
  • (env) read Cargo's variables from the env snapshot (#2028)
  • collect compile commands into a compile_commands.json (#1990)

Fixed

  • don't prefer clang for -Clinker-plugin-lto=no (#2046)
  • keep the order of flag and flag_if_supported (#2044)
  • correct "arbitary" typo in target parser comment (#2039)
  • correct "stablised" typos in TODO comments (#2040)
  • (msvc) pass objects to the archiver relative to the output directory (#2033)
  • honor disabled linker-plugin LTO (#2024)
  • apply RUSTC_WRAPPER to the cl.exe cc finds itself (#2022)

Other

  • (parallel) poll on jobserver helper thread (#2021)
  • (parallel) add jobserver polling for windows (#2020)
  • Regenerate windows sys bindings (#2019)
  • (parallel) add polling for process exit on windows (#2016)
  • (parallel) poll for process exit on macOS/bsd (#2014)
Changelog

Sourced from cc's changelog.

1.9.0 - 2026-10-19

Added

  • pass AddressSanitizer on to the C compiler (#2045)
  • add source root for stable external object names (#2034)
  • emit rerun-if-env-changed for the compiler's own env vars (#2035)
  • (env) read Cargo's variables from the env snapshot (#2028)
  • collect compile commands into a compile_commands.json (#1990)

Fixed

  • don't prefer clang for -Clinker-plugin-lto=no (#2046)
  • keep the order of flag and flag_if_supported (#2044)
  • correct "arbitary" typo in target parser comment (#2039)
  • correct "stablised" typos in TODO comments (#2040)
  • (msvc) pass objects to the archiver relative to the output directory (#2033)
  • honor disabled linker-plugin LTO (#2024)
  • apply RUSTC_WRAPPER to the cl.exe cc finds itself (#2022)

Other

  • (parallel) poll on jobserver helper thread (#2021)
  • (parallel) add jobserver polling for windows (#2020)
  • Regenerate windows sys bindings (#2019)
  • (parallel) add polling for process exit on windows (#2016)
  • (parallel) poll for process exit on macOS/bsd (#2014)
Commits
  • ffbb10d chore: release (#2038)
  • b30f5b4 fix: don't prefer clang for -Clinker-plugin-lto=no (#2046)
  • fb5eb51 feat: pass AddressSanitizer on to the C compiler (#2045)
  • 399d494 fix: keep the order of flag and flag_if_supported (#2044)
  • 53786d5 ci(deps): bump taiki-e/install-action from 2.87.21 to 2.87.28 (#2047)
  • 53d06d3 ci(deps): bump release-plz/action from 0.5.140 to 0.5.141 (#2048)
  • dfef159 ci(deps): bump tombi-toml/setup-tombi from 1.7.3 to 1.8.4 (#2049)
  • fd9c840 feat: add source root for stable external object names (#2034)
  • bf0c5fb feat: emit rerun-if-env-changed for the compiler's own env vars (#2035)
  • 2ba8b6d refactor(target): convert large match into data (#2043)
  • Additional commits viewable in compare view

Updates combine from 4.6.8 to 4.6.9

Changelog

Sourced from combine's changelog.

4.6.9 - 2026-10-15

Bug Fixes

  • Handle partial parsing in parsers based on TokensCmp - (c8742a5) - Markus Westerlind
  • Make count/length_prefix/escaped handle partial parsing correctly - (148333e) - Markus Westerlind
Commits
  • a2da738 chore: Version 4.6.9
  • 12cd53c Merge pull request #383 from Marwes/release
  • 73bffc7 chore: Try to setup a one-click release method
  • 8067353 Merge pull request #382 from Marwes/issue_381
  • 6a74b92 chore: Remove leak from tests
  • 148333e fix: Make count/length_prefix/escaped handle partial parsing correctly
  • c8742a5 fix: Handle partial parsing in parsers based on TokensCmp
  • 96538fe Merge pull request #380 from icecream17/patch-1
  • 72969c9 typo (stream/mod.rs)
  • 21fe1e4 Merge pull request #379 from atouchet/trv
  • Additional commits viewable in compare view

Updates defmt from 1.1.1 to 1.2.0

Changelog

Sourced from defmt's changelog.

[defmt-v1.2.0] (2026-10-15)

  • #1106 Bump the embedded MSRV to Rust 1.81 (Ferrocene 24.11).
  • #1091 Allow inner modules to decrease env filter verbosity
  • #1039 Add support for PanicInfo::message if the message is a static string.
  • #1089 Retain timestamp and bitflags metadata when linking without defmt.x.
  • #1068 Adding Format impl for core::str errors
  • #1096 Implement Format for alloc Errors

[defmt-v0.3.101] (2026-10-15)

  • #1106 Bump the embedded MSRV to Rust 1.81 (Ferrocene 24.11).
Commits
  • 719491c Bump crate versions and update CHANGELOG.md to prepare for release
  • a395e24 Remove upper bound for cortex-m crate
  • 26cb61a Use MSRV-aware stable rust solver to select dependencies for firmware MSRV
  • 0433aeb The type is known - this is a string slice.
  • 09c866a Remove redundant CHANGELOG entry
  • 10b0908 feature gate new panic message
  • 9c9b5ad improve panic printout
  • d6e7e57 fix(defmt-rtt): remove slice panic path
  • d3b6f78 docs: update printers page
  • 66f28e4 build: bump embedded MSRV to Rust 1.81
  • Additional commits viewable in compare view

Updates defmt-macros from 1.1.1 to 1.2.0

Changelog

Sourced from defmt-macros's changelog.

[defmt-v1.2.0] (2026-10-15)

  • #1106 Bump the embedded MSRV to Rust 1.81 (Ferrocene 24.11).
  • #1091 Allow inner modules to decrease env filter verbosity
  • #1039 Add support for PanicInfo::message if the message is a static string.
  • #1089 Retain timestamp and bitflags metadata when linking without defmt.x.
  • #1068 Adding Format impl for core::str errors
  • #1096 Implement Format for alloc Errors

[defmt-v0.3.101] (2026-10-15)

  • #1106 Bump the embedded MSRV to Rust 1.81 (Ferrocene 24.11).
Commits
  • 719491c Bump crate versions and update CHANGELOG.md to prepare for release
  • a395e24 Remove upper bound for cortex-m crate
  • 26cb61a Use MSRV-aware stable rust solver to select dependencies for firmware MSRV
  • 0433aeb The type is known - this is a string slice.
  • 09c866a Remove redundant CHANGELOG entry
  • 10b0908 feature gate new panic message
  • 9c9b5ad improve panic printout
  • d6e7e57 fix(defmt-rtt): remove slice panic path
  • d3b6f78 docs: update printers page
  • 66f28e4 build: bump embedded MSRV to Rust 1.81
  • Additional commits viewable in compare view

Updates defmt-parser from 1.0.0 to 1.1.0

Changelog

Sourced from defmt-parser's changelog.

[defmt-v1.1.0] (2026-05-12)

  • #974 Ensure typechecking is still performed on disabled log statement.
  • #960 Fix Format not accepting multiple helper attribute instances
  • #937 add support for #[defmt(transparent)] on Format derive
  • #959 Missing "unstable-test" cfg in tests module
  • #956 Link LICENSE-* in the crate folder
  • #955 Allow using the defmt/alloc feature on bare metal ESP32-S2
  • #972 Fix logic bug in env_filter
  • #1007 defmt: impl Format for core::fmt::Error
  • #983 Add Format implementation for core::num::Wrapping<T>
  • #1022 Re-fix accidental breaking change in Format macro
  • #1041 Ignore RUSTSEC-2026-0009
  • #1052 Pin UI tests to host MSRV

[defmt-v1.0.1] (2025-04-01)

  • #954 Fix accidental breaking change in Format macro
Commits
  • 719491c Bump crate versions and update CHANGELOG.md to prepare for release
  • a395e24 Remove upper bound for cortex-m crate
  • 26cb61a Use MSRV-aware stable rust solver to select dependencies for firmware MSRV
  • 0433aeb The type is known - this is a string slice.
  • 09c866a Remove redundant CHANGELOG entry
  • 10b0908 feature gate new panic message
  • 9c9b5ad improve panic printout
  • d6e7e57 fix(defmt-rtt): remove slice panic path
  • d3b6f78 docs: update printers page
  • 66f28e4 build: bump embedded MSRV to Rust 1.81
  • Additional commits viewable in compare view

Updates find-msvc-tools from 0.1.14 to 0.1.15

Release notes

Sourced from find-msvc-tools's releases.

find-msvc-tools-v0.1.15

Other

  • Regenerate windows sys bindings (#2019)
Commits
  • ffbb10d chore: release (#2038)
  • b30f5b4 fix: don't prefer clang for -Clinker-plugin-lto=no (#2046)
  • fb5eb51 feat: pass AddressSanitizer on to the C compiler (#2045)
  • 399d494 fix: keep the order of flag and flag_if_supported (#2044)
  • 53786d5 ci(deps): bump taiki-e/install-action from 2.87.21 to 2.87.28 (#2047)
  • 53d06d3 ci(deps): bump release-plz/action from 0.5.140 to 0.5.141 (#2048)
  • dfef159 ci(deps): bump tombi-toml/setup-tombi from 1.7.3 to 1.8.4 (#2049)
  • fd9c840 feat: add source root for stable external object names (#2034)
  • bf0c5fb feat: emit rerun-if-env-changed for the compiler's own env vars (#2035)
  • 2ba8b6d refactor(target): convert large match into data (#2043)
  • Additional commits viewable in compare view

Updates ico from 0.5.0 to 0.6.0

Commits
  • 4362912 Bump version number to 0.6.0
  • 0bbbbf5 Merge pull request #16 from hachispin/master
  • 530177f Respect a non-zero colors_used when reading BMP
  • 820ad89 Merge pull request #15 from SamRodri/upgrade-png
  • addc32d Upgrade png dependency to 0.18
  • bb4c9b7 Merge pull request #13 from Yomihay-qut/master
  • 22ee8da style: apply cargo fmt
  • c0696c9 Update src/icondir.rs
  • 23b2de1 Update src/image.rs
  • 8244deb Update src/icondir.rs
  • Additional commits viewable in compare view

Updates libc from 0.2.190 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)
Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)
Commits
  • ccc2ff4 libc: Release 0.2.191
  • bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
  • ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
  • b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
  • 9c7f568 apple: add ifaliasreq and in6_aliasreq
  • 018c7e9 wasi: Add pthread_condattr_{get,set}clock
  • 2c77185 openbsd: add sensordev structure
  • e10813c hurd: Add missing POSIX_SPAWN_* flags
  • 2ea4bc1 Fix FreeBSD/aarch64
  • 6d666fd dragonfly: Parse version from headers rather than CLI
  • Additional commits viewable in compare view

Updates png from 0.17.16 to 0.18.1

Changelog

Sourced from png's changelog.

0.18.1

Additions

  • Added Filter::MinEntropy for encoding, which selects the filter that minimizes the Shannon entropy of the filtered row. (#647)
  • Made ScaledFloat::SCALING constant public. (#650)
  • Support skipping chunks without loading them into memory. (#630)
  • Allow full unfiltering for partial data, enabling progressive decoding use cases. (#664)

Changes

  • Improved Paeth unfilter auto-vectorization by changing how loop state is maintained. (#635)
  • Added portable_simd Paeth unfiltering for 3bpp and 4bpp images on nightly. (#632, #633)
  • Add early exit for adaptive filter selection when a perfect filter is found. (#646)
  • Ignore duplicate acTL chunks instead of producing errors. (#651)
  • Require IDAT chunk(s) before fdAT chunks, as mandated by PNG specification. (#653)
  • Enforce acTL frame counts to be valid PNG 4-byte integers (capped at 2^31-1). (#673)

Fixes

  • Fixed and improved intra-doc links in documentation comments. (#665)
  • Fixed nightly portable_simd build. (#675)

#630: image-rs/image-png#630 #632: image-rs/image-png#632 #633: image-rs/image-png#633 #635: image-rs/image-png#635 #645: image-rs/image-png#645 #646: image-rs/image-png#646 #647: image-rs/image-png#647 #650: image-rs/image-png#650 #651: image-rs/image-png#651 #653: image-rs/image-png#653 #664: image-rs/image-png#664 #665: image-rs/image-png#665 #673: image-rs/image-png#673 #675: image-rs/image-png#675

0.18.0

API Breaking Changes

  • Removed deprecated Info::encode and Encoder::set_srgb methods.

... (truncated)

Commits

Updates tauri-codegen from 2.7.2 to 2.7.4

Release notes

Sourced from tauri-codegen's releases.

tauri-codegen v2.7.4

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1348 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1044 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustybuzz
Version:   0.20.1
Warning:   unmaintained
Title:     rustybuzz is unmaintained
Date:      2026-07-11
ID:        RUSTSEC-2026-0206
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     ttf-parser is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 4 allowed warnings found

[2.7.4]

Bug Fixes

... (truncated)

Commits

@dependabot
chore(deps): bump the cargo-minor group with 25 updates
e041f5e 
Bumps the cargo-minor group with 25 updates:

| Package | From | To |
| --- | --- | --- |
| [tauri](https://github.com/tauri-apps/tauri) | `2.12.3` | `2.12.4` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.8.2` | `2.8.3` |
| [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.7.1` | `2.7.2` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.7.2` | `2.7.4` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.8.0` | `1.9.0` |
| [combine](https://github.com/Marwes/combine) | `4.6.8` | `4.6.9` |
| [defmt](https://github.com/knurling-rs/defmt) | `1.1.1` | `1.2.0` |
| [defmt-macros](https://github.com/knurling-rs/defmt) | `1.1.1` | `1.2.0` |
| [defmt-parser](https://github.com/knurling-rs/defmt) | `1.0.0` | `1.1.0` |
| [find-msvc-tools](https://github.com/rust-lang/cc-rs) | `0.1.14` | `0.1.15` |
| [ico](https://github.com/mdsteele/rust-ico) | `0.5.0` | `0.6.0` |
| [libc](https://github.com/rust-lang/libc) | `0.2.190` | `0.2.191` |
| [png](https://github.com/image-rs/image-png) | `0.17.16` | `0.18.1` |
| [tauri-codegen](https://github.com/tauri-apps/tauri) | `2.7.2` | `2.7.4` |
| [tauri-macros](https://github.com/tauri-apps/tauri) | `2.7.2` | `2.7.4` |
| [tauri-plugin](https://github.com/tauri-apps/tauri) | `2.7.1` | `2.7.2` |
| [tauri-plugin-fs](https://github.com/tauri-apps/plugins-workspace) | `2.7.0` | `2.7.1` |
| [tauri-runtime](https://github.com/tauri-apps/tauri) | `2.12.1` | `2.12.2` |
| [tauri-runtime-wry](https://github.com/tauri-apps/tauri) | `2.12.1` | `2.12.3` |
| [tauri-utils](https://github.com/tauri-apps/tauri) | `2.10.1` | `2.10.2` |
| [tauri-winres](https://github.com/tauri-apps/winres) | `0.3.6` | `0.3.7` |
| [unicode-normalization](https://github.com/unicode-rs/unicode-normalization) | `0.1.25` | `0.1.26` |
| [zbus_names](https://github.com/z-galaxy/zbus) | `4.3.4` | `4.3.5` |
| [zvariant](https://github.com/z-galaxy/zbus) | `5.15.0` | `5.15.1` |
| [zvariant_derive](https://github.com/z-galaxy/zbus) | `5.15.0` | `5.15.1` |


Updates `tauri` from 2.12.3 to 2.12.4
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.12.3...tauri-v2.12.4)

Updates `tauri-plugin-dialog` from 2.8.2 to 2.8.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.8.2...http-v2.8.3)

Updates `tauri-plugin-opener` from 2.7.1 to 2.7.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.7.1...dialog-v2.7.2)

Updates `tauri-build` from 2.7.2 to 2.7.4
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.7.2...tauri-build-v2.7.4)

Updates `cc` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.8.0...cc-v1.9.0)

Updates `combine` from 4.6.8 to 4.6.9
- [Changelog](https://github.com/Marwes/combine/blob/master/CHANGELOG.md)
- [Commits](Marwes/combine@v4.6.8...v4.6.9)

Updates `defmt` from 1.1.1 to 1.2.0
- [Changelog](https://github.com/knurling-rs/defmt/blob/main/CHANGELOG.md)
- [Commits](knurling-rs/defmt@defmt-v1.1.1...defmt-v1.2.0)

Updates `defmt-macros` from 1.1.1 to 1.2.0
- [Changelog](https://github.com/knurling-rs/defmt/blob/main/CHANGELOG.md)
- [Commits](knurling-rs/defmt@defmt-macros-v1.1.1...defmt-macros-v1.2.0)

Updates `defmt-parser` from 1.0.0 to 1.1.0
- [Changelog](https://github.com/knurling-rs/defmt/blob/main/CHANGELOG.md)
- [Commits](knurling-rs/defmt@defmt-v1.0.0...defmt-parser-v1.1.0)

Updates `find-msvc-tools` from 0.1.14 to 0.1.15
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@find-msvc-tools-v0.1.14...find-msvc-tools-v0.1.15)

Updates `ico` from 0.5.0 to 0.6.0
- [Commits](mdsteele/rust-ico@v0.5.0...v0.6.0)

Updates `libc` from 0.2.190 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.190...0.2.191)

Updates `png` from 0.17.16 to 0.18.1
- [Changelog](https://github.com/image-rs/image-png/blob/master/CHANGES.md)
- [Commits](https://github.com/image-rs/image-png/commits)

Updates `tauri-codegen` from 2.7.2 to 2.7.4
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-codegen-v2.7.2...tauri-codegen-v2.7.4)

Updates `tauri-macros` from 2.7.2 to 2.7.4
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-macros-v2.7.2...tauri-macros-v2.7.4)

Updates `tauri-plugin` from 2.7.1 to 2.7.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-plugin-v2.7.1...tauri-plugin-v2.7.2)

Updates `tauri-plugin-fs` from 2.7.0 to 2.7.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.7.0...fs-v2.7.1)

Updates `tauri-runtime` from 2.12.1 to 2.12.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-runtime-v2.12.1...tauri-runtime-v2.12.2)

Updates `tauri-runtime-wry` from 2.12.1 to 2.12.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-runtime-wry-v2.12.1...tauri-runtime-wry-v2.12.3)

Updates `tauri-utils` from 2.10.1 to 2.10.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-utils-v2.10.1...tauri-utils-v2.10.2)

Updates `tauri-winres` from 0.3.6 to 0.3.7
- [Release notes](https://github.com/tauri-apps/winres/releases)
- [Changelog](https://github.com/tauri-apps/winres/blob/main/CHANGELOG.md)
- [Commits](tauri-apps/winres@winres-v0.3.6...winres-v0.3.7)

Updates `unicode-normalization` from 0.1.25 to 0.1.26
- [Commits](https://github.com/unicode-rs/unicode-normalization/commits/v0.1.26)

Updates `zbus_names` from 4.3.4 to 4.3.5
- [Changelog](https://github.com/z-galaxy/zbus/blob/main/release-plz.toml)
- [Commits](z-galaxy/zbus@zbus_names-4.3.4...zbus_names-4.3.5)

Updates `zvariant` from 5.15.0 to 5.15.1
- [Changelog](https://github.com/z-galaxy/zbus/blob/main/release-plz.toml)
- [Commits](z-galaxy/zbus@zvariant-5.15.0...zvariant-5.15.1)

Updates `zvariant_derive` from 5.15.0 to 5.15.1
- [Changelog](https://github.com/z-galaxy/zbus/blob/main/release-plz.toml)
- [Commits](z-galaxy/zbus@zvariant_derive-5.15.0...zvariant_derive-5.15.1)

---
updated-dependencies:
- dependency-name: tauri
  dependency-version: 2.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-plugin-opener
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-build
  dependency-version: 2.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: cc
  dependency-version: 1.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: combine
  dependency-version: 4.6.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: defmt
  dependency-version: 1.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: defmt-macros
  dependency-version: 1.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: defmt-parser
  dependency-version: 1.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: find-msvc-tools
  dependency-version: 0.1.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: ico
  dependency-version: 0.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: png
  dependency-version: 0.18.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: tauri-codegen
  dependency-version: 2.7.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-macros
  dependency-version: 2.7.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-plugin
  dependency-version: 2.7.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-plugin-fs
  dependency-version: 2.7.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-runtime
  dependency-version: 2.12.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-runtime-wry
  dependency-version: 2.12.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-utils
  dependency-version: 2.10.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-winres
  dependency-version: 0.3.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: unicode-normalization
  dependency-version: 0.1.26
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: zbus_names
  dependency-version: 4.3.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: zvariant
  dependency-version: 5.15.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: zvariant_derive
  dependency-version: 5.15.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 22, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 29, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-minor-4ee393b547 branch October 29, 2026 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants