Skip to content

Bump the rust-minor group across 1 directory with 9 updates - #82

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/rust-minor-097b6f1238
Closed

Bump the rust-minor group across 1 directory with 9 updates#82
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/rust-minor-097b6f1238

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the rust-minor group with 9 updates in the /src-tauri directory:

Package From To
diesel 2.3.12 2.3.13
libsqlite3-sys 0.38.1 0.38.2
uuid 1.24.0 1.26.1
tauri-plugin-dialog 2.7.2 2.7.3
tauri-plugin-opener 2.5.4 2.5.5
tauri-plugin-clipboard-manager 2.3.2 2.3.3
tauri-plugin-log 2.9.0 2.9.1
log 0.4.33 0.4.34
tauri-plugin-updater 2.10.1 2.11.0

Updates diesel from 2.3.12 to 2.3.13

Changelog

Sourced from diesel's changelog.

[2.3.13] 2026-09-4

  • Fixed interaction between then_order_by and distinct_on to reject otherwise broken SQL queries
  • Fix a clippy::redundant_field_names lint warning generated by #[derive(QueryableByName)]
  • MySQL and MariaDB now decode a value according to the signedness the server reports for its column, so a SMALLINT UNSIGNED holding 40000 read as Integer returns 40000 rather than -25536
  • Potential stackoverflow on deeply nested JSONB values for the SQLite backend
  • Fixed a possible null pointer dereference in the custom SQLite aggregate function support when SQLite fails to allocate the aggregate state
  • Fixed undefined behavior in SqliteConnection::serialize_database_to_buffer when SQLite returns a null buffer for an empty deserialized database or an allocation failure. SerializedDatabase::as_slice is deprecated in favor of the new SerializedDatabase::try_as_slice, which reports the allocation failure as an error instead of panicking.
  • Fixed SQLite value reads to panic instead of creating invalid slices or returning incorrect data when SQLite allocation fails. Row iteration reports a failed value duplication as an error instead.
  • Fixed a use after free where reading a SQLite value in a second representation, for example a blob as text, invalidated slices another SqliteValue of the same field had returned. Such a read now works on a copy of the value.
  • Fixed broken prepared statement caching for queries using positional ordering and window functions with frame offset clauses
  • Fixed a potential panic while deserializing a PgInterval type from a too short buffer
  • Fixed encoding floating point values without a decimal part in a roundtrip safe way in SQLite's jsonb encoding
  • Fixed a potential panic while deserializing a PgInterval type from a too short buffer
  • Fixed potential code injections in the generated schema.rs file caused by malicious database identifiers
Commits
  • 9628f5c Fix encoding negative integers
  • 3eb6cf4 Fix old serde
  • d2b770f Fix compilation
  • 1abf780 Merge branch 'main' into fix/rust_code_injections
  • 396ea4a Merge pull request #5195 from LucaCappelletti94/fuzz-sqlite-jsonb-float-writer
  • ba02e3a Merge pull request #5196 from weiznich/fix_bigdecimal_cpu_burn
  • 86ae22e Merge pull request #5194 from weiznich/fix_panic_in_pg_interval
  • b9e01d7 Merge pull request #5193 from weiznich/fix_query_id
  • 529f0bd Merge pull request #5183 from LucaCappelletti94/sqlite-serialize-oom-safety
  • 8bd540d Merge pull request #5182 from LucaCappelletti94/sqlite-value-oom-safety
  • Additional commits viewable in compare view

Updates libsqlite3-sys from 0.38.1 to 0.38.2

Commits

Updates uuid from 1.24.0 to 1.26.1

Release notes

Sourced from uuid's releases.

v1.26.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits
  • 9f92712 Merge pull request #910 from uuid-rs/cargo/v1.26.1
  • d4df8f0 prepare for 1.26.1 release
  • 5613f23 Merge pull request #909 from uuid-rs/fix/ts-conversion-overflow
  • fda00eb don't panic in overflowing Timestamp to SystemTime conversion
  • c82e88c Merge pull request #907 from lenamonj/v7-counter-placement
  • ac065a6 Align the counter diagram
  • 34ec102 Seat the v7 counter below the version nibble
  • cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
  • 34e4f49 don't test macros under miri
  • d9e7242 update nightly used for miri
  • Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.2 to 2.7.3

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.7.3

[2.7.3]

Dependencies

  • Upgraded to fs@2.5.2
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.3
npm notice filename: tauri-apps-plugin-dialog-2.7.3.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: 7e6d375fec8e39d2a90294604a9d77e66c39a072
npm notice integrity: sha512-CRgE+7TP4tvq9[...]oKbMwSI4IEcfA==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662645358
+ @tauri-apps/plugin-dialog@2.7.3

dialog v2.7.3

[2.7.3]

... (truncated)

Commits

Updates tauri-plugin-opener from 2.5.4 to 2.5.5

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.5.5

[2.5.5]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.5.5
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.5.5
npm notice filename: tauri-apps-plugin-opener-2.5.5.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: ef7b9aca07cb3416575e5024b996926c43276b69
npm notice integrity: sha512-xvzGai5aQds8j[...]Fh1MvmDp8QR0g==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662648628
+ @tauri-apps/plugin-opener@2.5.5

opener v2.5.5

[2.5.5]

... (truncated)

Commits
  • 6e2e7e4 publish new versions (#3070)
  • 9a2c98f temp: remove updater changefiles
  • 4a2ecb6 chore(deps): update rkyv, closes #3196
  • 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
  • 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
  • 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
  • d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
  • 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
  • 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
  • 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
  • Additional commits viewable in compare view

Updates tauri-plugin-clipboard-manager from 2.3.2 to 2.3.3

Release notes

Sourced from tauri-plugin-clipboard-manager's releases.

positioner-js v2.3.3

[2.3.3]

  • 4be76900 (#3449 by @​skkap) Replaced a panic in calculate_position with an error return when the window has no associated monitor (e.g. during display sleep or monitor reconfiguration).
npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-positioner@2.3.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.3kB README.md
npm notice 2.3kB dist-js/index.cjs
npm notice 1.1kB dist-js/index.d.ts
npm notice 2.2kB dist-js/index.js
npm notice 728B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-positioner
npm notice version: 2.3.3
npm notice filename: tauri-apps-plugin-positioner-2.3.3.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 11.5 kB
npm notice shasum: 85c671d1aede88cca742ffd4ec6d1383dba15e00
npm notice integrity: sha512-FOUOpd3qIN1dO[...]wJZ+/jeWANfvA==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2165402717
+ @tauri-apps/plugin-positioner@2.3.3

positioner v2.3.3

[2.3.3]

  • 4be76900 (#3449 by @​skkap) Replaced a panic in calculate_position with an error return when the window has no associated monitor (e.g. during display sleep or monitor reconfiguration).

... (truncated)

Commits

Updates tauri-plugin-log from 2.9.0 to 2.9.1

Release notes

Sourced from tauri-plugin-log's releases.

log-js v2.9.1

[2.9.1]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-log@2.9.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.8kB README.md
npm notice 7.0kB dist-js/index.cjs
npm notice 3.0kB dist-js/index.d.ts
npm notice 6.7kB dist-js/index.js
npm notice 715B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-log
npm notice version: 2.9.1
npm notice filename: tauri-apps-plugin-log-2.9.1.tgz
npm notice package size: 5.0 kB
npm notice unpacked size: 22.1 kB
npm notice shasum: 4b7ce1aeb9c4a666159ad76c8c7a1d5638c24f20
npm notice integrity: sha512-8dYNEQOgZcIEq[...]fIfC8lVVEhdlg==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662652241
+ @tauri-apps/plugin-log@2.9.1

log v2.9.1

[2.9.1]

</tr></table>

... (truncated)

Commits

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

Updates tauri-plugin-updater from 2.10.1 to 2.11.0

Release notes

Sourced from tauri-plugin-updater's releases.

updater-js v2.11.0

[2.11.0]

  • f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.
  • 622f02bf (#3516 by @​Legend-Master) On Windows, returns an error if failed to spawn the installer in install through ShellExecuteW
  • ab7489c9 (#3299 by @​Legend-Master) On Windows, add a new option restartAfterInstall/restart_after_install to install an update without the installer re-launching the app
  • 2371be83 (#3526 by @​Legend-Master) Added system-proxy (enabled by default) feature flag to control reqwest/system-proxy feature (Use Windows and macOS system proxy settings automatically)
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.11.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 3.2kB dist-js/index.cjs
npm notice 3.1kB dist-js/index.d.ts
npm notice 3.2kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.11.0
npm notice filename: tauri-apps-plugin-updater-2.11.0.tgz
npm notice package size: 3.9 kB
npm notice unpacked size: 14.3 kB
npm notice shasum: e9c012d8afe85ea28adb764ec5965c7bff5657d3
npm notice integrity: sha512-AE36XkOoSna24[...]Hu28LgrsBwIxQ==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662660526
+ @tauri-apps/plugin-updater@2.11.0

updater v2.11.0

[2.11.0]

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 13, 2026
@dependabot
Bump the rust-minor group across 1 directory with 9 updates
f378f46 
Bumps the rust-minor group with 9 updates in the /src-tauri directory:

| Package | From | To |
| --- | --- | --- |
| [diesel](https://github.com/diesel-rs/diesel) | `2.3.12` | `2.3.13` |
| [libsqlite3-sys](https://github.com/rusqlite/rusqlite) | `0.38.1` | `0.38.2` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.1` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.2` | `2.7.3` |
| [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.4` | `2.5.5` |
| [tauri-plugin-clipboard-manager](https://github.com/tauri-apps/plugins-workspace) | `2.3.2` | `2.3.3` |
| [tauri-plugin-log](https://github.com/tauri-apps/plugins-workspace) | `2.9.0` | `2.9.1` |
| [log](https://github.com/rust-lang/log) | `0.4.33` | `0.4.34` |
| [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.10.1` | `2.11.0` |



Updates `diesel` from 2.3.12 to 2.3.13
- [Release notes](https://github.com/diesel-rs/diesel/releases)
- [Changelog](https://github.com/diesel-rs/diesel/blob/main/CHANGELOG.md)
- [Commits](diesel-rs/diesel@v2.3.12...v2.3.13)

Updates `libsqlite3-sys` from 0.38.1 to 0.38.2
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](https://github.com/rusqlite/rusqlite/commits)

Updates `uuid` from 1.24.0 to 1.26.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.0...v1.26.1)

Updates `tauri-plugin-dialog` from 2.7.2 to 2.7.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@dialog-v2.7.2...dialog-v2.7.3)

Updates `tauri-plugin-opener` from 2.5.4 to 2.5.5
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.5.4...http-v2.5.5)

Updates `tauri-plugin-clipboard-manager` from 2.3.2 to 2.3.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@os-v2.3.2...nfc-v2.3.3)

Updates `tauri-plugin-log` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.9.0...log-v2.9.1)

Updates `log` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.33...0.4.34)

Updates `tauri-plugin-updater` from 2.10.1 to 2.11.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@updater-v2.10.1...updater-v2.11.0)

---
updated-dependencies:
- dependency-name: diesel
  dependency-version: 2.3.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: libsqlite3-sys
  dependency-version: 0.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: tauri-plugin-clipboard-manager
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: tauri-plugin-log
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: tauri-plugin-opener
  dependency-version: 2.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: tauri-plugin-updater
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor
- dependency-name: uuid
  dependency-version: 1.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the rust-minor group in /src-tauri with 9 updates Bump the rust-minor group across 1 directory with 9 updates Sep 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/src-tauri/rust-minor-097b6f1238 branch from aea92e6 to f378f46 Compare September 13, 2026 16:55
@dependabot @github

dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 13, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/src-tauri/rust-minor-097b6f1238 branch September 13, 2026 17:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants