Skip to content

build(deps): bump glib from 0.18.5 to 0.22.9 in /src-tauri - #12

Closed
dependabot[bot] wants to merge 7 commits into
mainfrom
dependabot/cargo/src-tauri/glib-0.22.9
Closed

dependabot[bot] wants to merge 7 commits into
mainfrom
dependabot/cargo/src-tauri/glib-0.22.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown

Bumps glib from 0.18.5 to 0.22.9.

Release notes

Sourced from glib's releases.

0.22.9

Bilal Elmoussaoui:
      Bump syn to 3.0

Sebastian Dröge:
Update gir / gir-files
Regenerate with latest gir / gir-files
Fix some Rust 1.97 clippy warnings
deny: Allow duplicated syn 2.0 dependency
cairo-sys: Update to system-deps 8
pango: Add new enums
pango: Add bindings for new width attribute
pangocairo: Add new pango RenderComponent API
pango: Add v1_58 feature
pangocairo: Mark cairo context parameter as const
gio: Manually implement new UnixFDList API with correct types
glib: Add new nanosecond timeout source API
glib-macros: Use TypeFlags::empty() instead of ::NONE
glib: Use RegexMatchFlags::empty() instead of DEFAULT
gio: Only require gio 2.89 for v2_90
gio: Only return the result from spawn_blocking() from the task completion callback
glib: Drain any remaining, pending sources after MainContext::block_on()
gio: Fix new 1.98 clippy warning
cairo: Update to system-deps 9
Update Cargo.lock
deny: Remove syn 2 override
glib: Re-add default flags member for RegexMatchFlags / RegexCompileFlags without version guard
Update versions to 0.22.9

Sophie Herold:
security: Update crossbeam-epoch to 0.9.20

Yang Lin:
fix: g_free alignments return from pango_tab_array_get_tabs
fix: call g_free on the return value of g_filename_from_utf8 after the end of its lifetime
fix: Pack the return value early so that the rustc compiler can generate the drop glue on the error path when matches!(status, err)
fix: definitely memory leak happens on the paths of from_glib_none and from_glib_full

Zachary S:
glib: Use Ref(Mut)::filter_map in BoxedAnyObject::try_borrow(_mut).

Ángel Guzmán Maeso:
gio: Don't require the arguments of run() to be valid UTF-8

0.22.8

Alba Mendez:
      fix typo in ObjectExt::property_value docs
</tr></table> 

... (truncated)

Commits
  • 00a448f glib: Re-add default flags member for RegexMatchFlags / RegexCompileFlags wit...
  • c0ce5d1 deny: Remove syn 2 override
  • 1269a10 Update Cargo.lock
  • 84936e9 cairo: Update to system-deps 9
  • fa1e1f8 fix: definitely memory leak happens on the paths of from_glib_none and
  • ac6dcaa fix: Pack the return value early so that the rustc
  • 59869b2 fix: call g_free on the return value of g_filename_from_utf8 after
  • 2b828d7 fix: g_free alignments return from pango_tab_array_get_tabs
  • e2c8591 gio: Fix new 1.98 clippy warning
  • cdd4189 gio: Don't require the arguments of run() to be valid UTF-8
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

eJosR-Coding and others added 7 commits September 11, 2026 23:32
Tray-based desktop app (Tauri v2) that polls the GitHub Events API and
shows native notifications for pushes, pull requests, reviews, issues,
releases and more.

- Rust: tray icon with menu and bell animation, close-to-tray, single
  instance, autostart, freedesktop toasts with click-to-open, token in
  the OS keyring, validated import of custom sounds
- TypeScript: Events API client (ETag, X-Poll-Interval, rate-limit
  backoff), per-target dedupe, event formatter, settings UI, per-category
  sounds. Layered as core / platform / ui
- Security: least-privilege capabilities, opener scoped to github.com,
  asset protocol scoped to the app sounds dir, strict CSP, cargo audit
  and Dependabot
- CI: check + tests on push, Linux/Windows installers on tags
* feat(i18n): spanish and english UI with system language detection

- src/core/i18n.ts: typed dictionary, t() with placeholders, detection
  from navigator.language, "auto" | "es" | "en" setting
- static HTML strings via data-i18n / data-i18n-html, filled on boot
- all toast phrases, status messages, category and sound labels go
  through t()
- Rust: i18n.rs for the tray menu and toast button, seeded from the OS
  locale (sys-locale) and synced from the webview via set_language,
  which rebuilds the tray menu
- language selector in settings; switching reloads the webview
- Vitest added: i18n completeness + detection tests, formatter tests
  with event fixtures; wired into CI
- tsconfig target/lib to ES2022

* fix(i18n): switch language in place instead of reloading the webview

Repaint translated strings, lists and status from the new dictionary and
resync the tray menu via set_language. Scroll position and form state
survive the switch.
A second launch as `gitbell notify "title" [--body t] [--url https://..]`
hands its argv to the running instance through single-instance and exits.
The instance shows the toast, rings the tray and emits external-notice so
the webview adds it to recent activity and plays the new "external"
category sound. With no instance running, the launch stays in the tray
and fires the toast once the webview is up.

- cli.rs: dependency-free arg parsing with unit tests
- notify.rs: show_trusted for local callers (any https url)
- external category: toggle, sound, i18n labels
- README: usage and a Claude Code Stop-hook example
* feat(onboarding): three-step first run with mascot slots and smart defaults

Every step is the real setup, never a slide:
1. Token, with a "create on GitHub" button that opens the new-token page
   with scopes pre-checked. Existing installs see "already connected".
2. What to watch: the user's most recently pushed repos and their orgs
   fetched from GitHub and offered as chips, @me preselected, manual entry.
3. First notification: the target's latest real event shown as a card and
   fired as a toast + bell + sound on "Ring it". Autostart opt-in here,
   where "I live in the tray" is explained.

Skippable from every step, replayable from settings. `onboarded` flag in
settings. Mascot: `.pose[data-pose]` slots (wave, think, celebrate, wait,
error) that show the first bell frame until the pose art exists; swapping
is CSS-only. Empty activity state now shows the mascot waiting.

Also: `[hidden]` hardening against author display rules, themed selection,
focus ring and scrollbar, browser preview mode (`pnpm dev` + #ob=N) with
fake data for inspecting the UI without Tauri, PRODUCT.md capturing
product truth for future UI work.

* feat(onboarding): mascot poses for the three steps

wave (token), think (targets) and celebrate (first notification), trimmed
to square 512px with transparent margins. Originals kept in assets/poses.
Slot enlarged to 172px so the think pose's chips stay legible. wait and
error still fall back to the bell frame.
…le (#9)

The window no longer repeats the onboarding form. Two views behind a
segmented control: Activity (default) shows who you're connected as with
avatar and name, "check now", and recent activity; Settings holds the
rest. Without a token, Activity shows an "I'm asleep" callout with the
mascot and a button that jumps to the token field.

- Account card has two states: connected (change token / disconnect) and
  form. Disconnect clears the keyring and the profile.
- whoAmI returns login, name and avatar; stored in settings.
- "What to notify" and "Sounds" merged into one table: category, toggle,
  sound, play. Off rows dim.
- "What to watch" offers the onboarding suggestions as one-click chips.
- Preview hashes: #view=settings, #notoken.
…lider (#10)

The window is transparent and the app asks the compositor to blur what's
behind it. Linux: reuse GTK's wl_display/wl_surface and bind either
ext_background_effect_v1 (Plasma 6.7+, Niri) or org_kde_kwin_blur_manager
(Plasma <= 6.6), re-requested on every show since GTK recreates the
surface. Windows/macOS: window-vibrancy acrylic / vibrancy. GNOME falls
back to the tint alone.

Settings gain `glass` (0.3..1); a slider in Options applies it live and
persists on release. Body, header, cards, onboarding and callouts take
their opacity from the CSS variable. Preview: #glass=NN over a fake
desktop gradient.
Bumps [glib](https://github.com/gtk-rs/gtk-rs-core) from 0.18.5 to 0.22.9.
- [Release notes](https://github.com/gtk-rs/gtk-rs-core/releases)
- [Changelog](https://github.com/gtk-rs/gtk-rs-core/blob/main/CHANGELOG.md)
- [Commits](gtk-rs/gtk-rs-core@0.18.5...0.22.9)

---
updated-dependencies:
- dependency-name: glib
  dependency-version: 0.22.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/cargo/src-tauri/glib-0.22.9 branch September 13, 2026 03:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant