chore(deps): bump the backend group across 1 directory with 8 updates by dependabot[bot] · Pull Request #5 · SwonDev/Vindexa

dependabot · 2026-10-01T16:20:05Z

Bumps the backend group with 8 updates in the /src-tauri directory:

Package	From	To
keyring	`4.1.6`	`4.2.0`
reqwest	`0.13.4`	`0.13.5`
tauri	`2.11.5`	`2.11.6`
tauri-plugin-dialog	`2.7.2`	`2.7.3`
tauri-plugin-opener	`2.5.4`	`2.5.5`
thiserror	`2.0.20`	`2.0.21`
uuid	`1.24.0`	`1.26.1`
tauri-build	`2.6.3`	`2.7.0`

Updates keyring from 4.1.6 to 4.2.0

Release notes

Sourced from keyring's releases.

v4.2.0: update the CLI dependencies

This release updates the dependencies of the CLI feature so that it builds appropriate credential stores on each platform. In particular, the db-keystore requires 64-bit platforms and the Android keystore is included on Android.

What's Changed

Bump base64 from 0.23.0 to 0.23.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#346

Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#349

Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#348

Remove mimalloc feature from db-keystore. by @brotskydotcom in open-source-cooperative/keyring-rs#350

Restore the android-native-keyring-store dependency for the cli. by @brotskydotcom in open-source-cooperative/keyring-rs#351

Full Changelog: open-source-cooperative/keyring-rs@v4.1.6...v4.2.0

Commits

d18b5c8 Restore the android-native-keyring-store dependency for the cli. (#351)
ef30fb8 Restore the android-native-keyring-store dependency for the cli.
a0a5a7f Remove mimalloc feature from db-keystore. (#350)
36981e5 Remove mimalloc feature from db-keystore.
6db16c4 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#348)
19d5b62 Merge branch 'main' into dependabot/cargo/dbus-secret-service-keyring-store-1...
6ea8273 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#349)
6a3ac80 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1
659caf5 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1
ce7fee7 Bump base64 from 0.23.0 to 0.23.1 (#346)
Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates tauri from 2.11.5 to 2.11.6

Release notes

Sourced from tauri's releases.

tauri v2.11.6

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1251 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1075 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 1.0.4 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206

Crate: ttf-parser </tr></table>

... (truncated)

Commits

9452dde fix audit
7c2fe9f run covector version
7d71a8a add publish-hotfix workflow
5a87bab Merge commit from fork
e901f1d Merge commit from fork
See full diff in compare view

Updates tauri-plugin-dialog from 2.7.2 to 2.7.3

Commits

6aa2854 publish new versions (#3509)
9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
98f8787 ci: fix typo in workflow permissions
1a7b12c ci: add explicit token permissions
2f4c85c chore(deps): bump serde_with (#3490)
c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
db9c599 fix(android): missing consumer-rules.pro (#3531)
9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
685610a fix(fs): default permissions (#3507)
f8053e6 docs: cargo features (#3527)
Additional commits viewable in compare view

Updates tauri-plugin-opener from 2.5.4 to 2.5.5

Commits

6e2e7e4 publish new versions (#3070)
9a2c98f temp: remove updater changefiles
4a2ecb6 chore(deps): update rkyv, closes #3196
31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

Commits

b1827ee Release 2.0.21
58037b5 Merge pull request #459 from dtolnay/turbofish
f82a0cf Keep track of nested turbofish depth
72ea492 Raise required compiler to Rust 1.77
72eea0d Resolve io_other_error clippy lint in tests
07f09a2 Raise required compiler to Rust 1.74
2715388 Update ui test suite to nightly-2026-09-22
5a306c7 Update ui test suite to nightly-2026-09-05
ef9383b Update ui test suite to nightly-2026-08-22
8336b84 Update ui tests for version 2.0.20
See full diff in compare view

Updates uuid from 1.24.0 to 1.26.1

Release notes

Sourced from uuid's releases.

v1.26.1

What's Changed

Seat the v7 counter below the version nibble by @lenamonj in uuid-rs/uuid#907

Don't panic in overflowing Timestamp to SystemTime conversion by @KodrAus in uuid-rs/uuid#909

Prepare for 1.26.1 release by @KodrAus in uuid-rs/uuid#910

New Contributors

@lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

Add ContextV7::with_additional_precision_bits by @ChrisJr404 in uuid-rs/uuid#904

Prepare for 1.26.0 release by @KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

Add a serde::bytes module that encodes a Uuid as a byte string by @ChrisJr404 in uuid-rs/uuid#902

Prepare for 1.25.0 release by @KodrAus in uuid-rs/uuid#903

New Contributors

@ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

Fix non-ASCII character handling in parse diagnostics by @questfever in uuid-rs/uuid#899

Prepare for 1.24.1 release by @KodrAus in uuid-rs/uuid#900

New Contributors

@questfever made their first contribution in uuid-rs/uuid#899

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits

9f92712 Merge pull request #910 from uuid-rs/cargo/v1.26.1
d4df8f0 prepare for 1.26.1 release
5613f23 Merge pull request #909 from uuid-rs/fix/ts-conversion-overflow
fda00eb don't panic in overflowing Timestamp to SystemTime conversion
c82e88c Merge pull request #907 from lenamonj/v7-counter-placement
ac065a6 Align the counter diagram
34ec102 Seat the v7 counter below the version nibble
cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
34e4f49 don't test macros under miri
d9e7242 update nightly used for miri
Additional commits viewable in compare view

Updates tauri-build from 2.6.3 to 2.7.0

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.0

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1271 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1091 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

447fa9f fix(core): tauri-utils publish
4f46cfc fix(ci): pnpm publish should use "debug" loglevel instead of "silly"
726822c apply version updates (#15634)
9f8922a docs(core): extend app_directories_override documentation (#16139)
dc894d4 chore: remove change file for unreleased fix (#16140)
152529e Revert "feat(core): add android activityEmbedding config (#15255)" (#16138)
7456ddd Revert "fix(core): proper unique identifier for menu items on channels store"...
15468de fix(bundler): recognize deb and rpm as self-contained updater targets (#16064)
8e70283 fix(bundler): update linuxdeploy and linuxdeploy-plugin-gtk (#16062)
1b91b7b fix(cli): list all locked crate versions in tauri info (#16102)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the backend group with 8 updates in the /src-tauri directory: | Package | From | To | | --- | --- | --- | | [keyring](https://github.com/open-source-cooperative/keyring-rs) | `4.1.6` | `4.2.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [tauri](https://github.com/tauri-apps/tauri) | `2.11.5` | `2.11.6` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.2` | `2.7.3` | | [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.4` | `2.5.5` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` | | [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.1` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.3` | `2.7.0` | Updates `keyring` from 4.1.6 to 4.2.0 - [Release notes](https://github.com/open-source-cooperative/keyring-rs/releases) - [Commits](open-source-cooperative/keyring-rs@v4.1.6...v4.2.0) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `tauri` from 2.11.5 to 2.11.6 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.11.5...tauri-v2.11.6) Updates `tauri-plugin-dialog` from 2.7.2 to 2.7.3 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@dialog-v2.7.2...dialog-v2.7.3) Updates `tauri-plugin-opener` from 2.5.4 to 2.5.5 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.4...http-v2.5.5) Updates `thiserror` from 2.0.20 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.20...2.0.21) Updates `uuid` from 1.24.0 to 1.26.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.24.0...v1.26.1) Updates `tauri-build` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.6.3...tauri-build-v2.7.0) --- updated-dependencies: - dependency-name: keyring dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: tauri dependency-version: 2.11.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: tauri-plugin-dialog dependency-version: 2.7.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: tauri-plugin-opener dependency-version: 2.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: uuid dependency-version: 1.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: tauri-build dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026

Navigation Menu

Repository navigation

chore(deps): bump the backend group across 1 directory with 8 updates - #5

chore(deps): bump the backend group across 1 directory with 8 updates#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/backend-331b81ceec

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

v4.2.0: update the CLI dependencies

What's Changed

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

tauri v2.11.6

2.0.21

v1.26.1

What's Changed

New Contributors

v1.26.0

What's Changed

1.25.0

What's Changed

New Contributors

v1.24.1

What's Changed

New Contributors

tauri-build v2.7.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants