Skip to content

chore(deps): bump the cargo group across 1 directory with 14 updates - #51

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/cargo-1872e0891b
Open

chore(deps): bump the cargo group across 1 directory with 14 updates#51
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/cargo-1872e0891b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the cargo group with 14 updates in the / directory:

Package From To
tauri 2.12.1 2.12.2
tauri-plugin-opener 2.7.0 2.7.2
serde_json 1.0.151 1.0.154
tauri-plugin-deep-link 2.6.1 2.6.2
tauri-plugin-dialog 2.8.1 2.8.3
parking_lot 0.12.5 0.13.0
rusqlite 0.40.2 0.41.0
notify 8.2.0 8.2.1
arboard 3.6.1 3.7.0
plist 1.10.1 1.10.3
uuid 1.27.0 1.29.0
libc 0.2.190 0.2.191
tauri-build 2.7.1 2.7.2
vt100 0.16.2 0.18.1

Updates tauri from 2.12.1 to 2.12.2

Release notes

Sourced from tauri's releases.

tauri v2.12.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1295 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134


Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits

Updates tauri-plugin-opener from 2.7.0 to 2.7.2

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.7.2

[2.7.2]

  • 1ab93046 (#3565 by @​cyclone-mind) Fixed revealItemInDir and the reveal_item_in_dir / reveal_items_in_dir Rust APIs panicking on Linux and the BSDs with Cannot start a runtime from within a runtime when zbus is built with its tokio feature and the call happens inside an async runtime. The blocking D-Bus calls now run on a dedicated thread.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/[email protected]
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.7.2
npm notice filename: tauri-apps-plugin-opener-2.7.2.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: 698f34eeb66d167792f7a113f3567c7bdff4294a
npm notice integrity: sha512-LyybP1VSzTMQi[...]jPzHMpv0Sz+TQ==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253696161
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/[email protected]

opener v2.7.2

[2.7.2]

  • 1ab93046 (#3565 by @​cyclone-mind) Fixed revealItemInDir and the reveal_item_in_dir / reveal_items_in_dir Rust APIs panicking on Linux and the BSDs with Cannot start a runtime from within a runtime when zbus is built with its tokio feature and the call happens inside an async runtime. The blocking D-Bus calls now run on a dedicated thread.

... (truncated)

Commits

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates tauri-plugin-deep-link from 2.6.1 to 2.6.2

Release notes

Sourced from tauri-plugin-deep-link's releases.

deep-link-js v2.6.2

[2.6.2]

  • 2d541bc0 (#3585 by @​vincentkoc) Return an I/O error when an XDG registration, unregistration, or query command exits unsuccessfully on Linux. Match the queried desktop filename exactly, and remove the app's MIME association when unregistering so it is not selected again by fallback. Preserve other schemes, applications, defaults, and desktop command quoting.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/[email protected]
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 6.2kB README.md
npm notice 4.7kB dist-js/index.cjs
npm notice 4.0kB dist-js/index.d.ts
npm notice 4.6kB dist-js/index.js
npm notice 801B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-deep-link
npm notice version: 2.6.2
npm notice filename: tauri-apps-plugin-deep-link-2.6.2.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 21.2 kB
npm notice shasum: 25031e0e6470e0a092c2670e56e5b3ba2a8a3c00
npm notice integrity: sha512-uMsF1VQt1OdYq[...]/j1y1PQqdiMZA==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253687644
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/[email protected]

deep-link v2.6.2

[2.6.2]

  • 2d541bc0 (#3585 by @​vincentkoc) Return an I/O error when an XDG registration, unregistration, or query command exits unsuccessfully on Linux. Match the queried desktop filename exactly, and remove the app's MIME association when unregistering so it is not selected again by fallback. Preserve other schemes, applications, defaults, and desktop command quoting.

... (truncated)

Commits
  • 44293a5 Publish New Versions (v2) (#3689)
  • 7550f7c chore(deps): bump rustls to 0.23.46
  • 36d8e40 feat(geolocation): support for non-GMS devices (#3377)
  • 57297f3 feat(clipboard-manager): add support for writing secrets (#3376)
  • 1ab9304 fix(opener): avoid blocking-runtime panic in reveal_item_in_dir (#3565)
  • 0e17675 fix(http): decode header values as ISO-8859-1 (#3586)
  • 62b3565 chore(deps): update quinn-proto (lockfile-only) (#3707)
  • d80b1be feat: add torch plugin for iOS and Android (#3551)
  • c91a9e6 feat(sql): add autoCreate option to Database.load (#3702)
  • 0374bec [feat] [biometric] Adding the capability of encrypting/decrypting data using ...
  • Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.8.1 to 2.8.3

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.3

[2.8.3]

Dependencies

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/[email protected]
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.3
npm notice filename: tauri-apps-plugin-dialog-2.8.3.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 1ef5cbd8833d50c911dedc3b50b94c6ba7ec2db5
npm notice integrity: sha512-Hd/yBfk2R5v2M[...]S+gBDNe3nHspw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253692258
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/[email protected]

dialog v2.8.3

[2.8.3]

Dependencies

... (truncated)

Commits
  • 44293a5 Publish New Versions (v2) (#3689)
  • 7550f7c chore(deps): bump rustls to 0.23.46
  • 36d8e40 feat(geolocation): support for non-GMS devices (#3377)
  • 57297f3 feat(clipboard-manager): add support for writing secrets (#3376)
  • 1ab9304 fix(opener): avoid blocking-runtime panic in reveal_item_in_dir (#3565)
  • 0e17675 fix(http): decode header values as ISO-8859-1 (#3586)
  • 62b3565 chore(deps): update quinn-proto (lockfile-only) (#3707)
  • d80b1be feat: add torch plugin for iOS and Android (#3551)
  • c91a9e6 feat(sql): add autoCreate option to Database.load (#3702)
  • 0374bec [feat] [biometric] Adding the capability of encrypting/decrypting data using ...
  • Additional commits viewable in compare view

Updates parking_lot from 0.12.5 to 0.13.0

Release notes

Sourced from parking_lot's releases.

parking_lot-v0.13.0

  • Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
  • Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
  • Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
  • Removed the hardware-lock-elision feature. (#533)
  • Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
  • Removed the no-op lock_api/nightly feature. (#533)
  • Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
  • Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
  • Added Once::new_completed for constructing a Once in the completed state. (#520)
  • Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
  • Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
  • Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
  • Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
  • Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
  • Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
  • Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
  • Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
  • Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
  • Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
  • Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
  • Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)
  • Documented that parking-lot-based synchronization primitives must not be used

... (truncated)

Changelog

Sourced from parking_lot's changelog.

0.13.0 (parking_lot), 0.10.0 (parking_lot_core), 0.5.0 (lock_api) - 2026-10-21

  • Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
  • Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
  • Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
  • Removed the hardware-lock-elision feature. (#533)
  • Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
  • Removed the no-op lock_api/nightly feature. (#533)
  • Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
  • Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
  • Added Once::new_completed for constructing a Once in the completed state. (#520)
  • Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
  • Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
  • Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
  • Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
  • Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
  • Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
  • Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
  • Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
  • Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
  • Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
  • Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
  • Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)

... (truncated)

Commits
  • 1a5c3dd Update changelog
  • ec07063 chore: release
  • f369d24 Merge pull request #538 from napi-rs/wasi-threads-parker
  • 2f4103f Remove the WASI backend note from stable restrictions
  • a3e8717 Reuse existing CI jobs for WASI coverage
  • c2bfc7b Merge pull request #549 from Amanieu/fix-l4re-condvar-clock
  • 696f28b Don't use pthread_condattr_setclock on L4RE
  • 52941c0 Share the libc dependency between Unix and WASI
  • 4fde6a7 Align the Rust setup action with existing workflows
  • f0ce547 Reuse the pthread backend for WASI on stable
  • Additional commits viewable in compare view

Updates rusqlite from 0.40.2 to 0.41.0

Release notes

Sourced from rusqlite's releases.

0.41.0

What's Changed

  • Check PRAGMA is valid with the help of pragma_list #1857
  • Fix UtcDateTime #1859
  • Bump sqlite3-parser version #1864
  • Edition 2024 #1863
  • Use u64 for zeroblob #1867
  • Fix virtual table set_result #1868
  • Bump bundled SQLCipher to version 4.17.0 #1870
  • Refactor bind_parameter and set_result #1871
  • Update prettyplease requirement from 0.2.20 to 0.3.0 #1872
  • Update syn requirement from 2.0.89 to 3.0.1 #1873
  • Fix Connection::serialize #1874 (#1875)
  • Make Statement::column_names,columns,columns_with_metadata return Iterator #1877
  • Introduce DEFAULT_NAME #1883
  • Expose sqlite3_file_control #1881 (#1882)
  • Replace assert!(matches! with assert_matches! #1851
  • Lower MSRV to 1.88.0 #1885
  • Fix clippy warnings #1888
  • Apply and check MSRV #1890
  • Bump minimal SQLite version to 3.45.3 #1894
  • sqlite3_set_clientdata / sqlite3_get_clientdata #977, #1708 (#1791)
  • Fix discrepancy between backup and restore #1893
  • Don't enable SQLITE_ENABLE_MEMORY_MANAGEMENT in the bundled build #1900
  • create_aggregate_function / create_window_function are missing a Send bound #1898
  • use-after-free from safe code in trace_v2 / busy_handler / ... #1899
  • feat: add Values::get_subtype to read SQLite value subtype in vtab callbacks #1879
  • Bump bindgen version to 0.73 #1903
  • Bump sqlite-wasm-rs to 0.6.1 #1904
  • Relax sqlite-wasm-rs version #1906
  • Rerun bundled-sqlcipher build when OPENSSL_* env changes #1910
  • Bump bundled SQLite version to 3.54.0 #1913
  • Fix possible memory leak on error in deserialize_read_exact #1909
  • Move sqlite3_wal_checkpoint_v2 binding #1667 (#1915)
  • Bump uuid version to 1.28 #1916

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.41.0

Commits
  • a60e76b Merge pull request #1919 from gwenn/0.41.0
  • f652850 Prepare release
  • 661107f Merge pull request #1917 from LucaCappelletti94/feat/sqlcipher-src
  • dd770f6 Fix the SQLCipher license link and match upstream style
  • 2daf10a Select the SQLCipher source with cfg_select
  • bb40153 Merge pull request #1916 from gwenn/uuid
  • 92a7d49 Bump uuid version to 1.28
  • fb3418c Build bundled-sqlcipher from the sqlcipher-src crate
  • ff59564 Merge pull request #1915 from gwenn/wal_checkpoint
  • e6b7145 Move sqlite3_wal_checkpoint_v2 binding
  • Additional commits viewable in compare view

Updates notify from 8.2.0 to 8.2.1

Release notes

Sourced from notify's releases.

notify v8.2.1

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Changelog

Sourced from notify's changelog.

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Commits

Updates arboard from 3.6.1 to 3.7.0

Release notes

Sourced from arboard's releases.

v3.7.0

What's Changed

New Contributors

Full Changelog: 1Password/arboard@v3.6.1...v3.7.0

Commits
  • 5f5c863 Release 3.7.0
  • ab9663b Add example demonstrating wait_once
  • b9000b1 Add a wait_once to support waiting for just one clipboard request
  • 2ea0ff6 wayland: Factor out option setting into a method
  • b7e47c8 Update lib.rs
  • 2b2050e Bump step-security/setup-rust-toolchain from 1.16.1 to 2.0.0
  • 6b09682 Bump step-security/harden-runner from 2.20.0 to 2.21.1
  • 9f7b05c Bump actions/checkout from 4.3.1 to 7.0.0
  • 890e919 Apply GitHub Actions security best practices
  • d7c6cc9 bump windows-sys lower bound
  • Additional commits viewable in compare view

Updates plist from 1.10.1 to 1.10.3

Changelog

Sourced from plist's changelog.

[1.10.3] - 2026-10-21

Changed

  • Add tests counting I/O operations when reading binary plists, as a baseline for optimisation (#208).
  • Cache small objects of up to 8 bytes when reading binary plists so objects referenced multiple times are only read once (#209).

[1.10.2] - 2026-10-19

Changed

  • Always buffer ASCII plist reads, improving direct ASCII reader performance (#206).

Fixed

  • Accept \' escape in quoted ASCII plist strings (#204).
  • Decode quoted ASCII plist strings as UTF-8 (#203).
Commits

@dependabot
chore(deps): bump the cargo group across 1 directory with 14 updates
a2be0a9 
Bumps the cargo group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tauri](https://github.com/tauri-apps/tauri) | `2.12.1` | `2.12.2` |
| [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.7.0` | `2.7.2` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [tauri-plugin-deep-link](https://github.com/tauri-apps/plugins-workspace) | `2.6.1` | `2.6.2` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.8.1` | `2.8.3` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.5` | `0.13.0` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.40.2` | `0.41.0` |
| [notify](https://github.com/notify-rs/notify) | `8.2.0` | `8.2.1` |
| [arboard](https://github.com/1Password/arboard) | `3.6.1` | `3.7.0` |
| [plist](https://github.com/ebarnard/rust-plist) | `1.10.1` | `1.10.3` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.27.0` | `1.29.0` |
| [libc](https://github.com/rust-lang/libc) | `0.2.190` | `0.2.191` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.7.1` | `2.7.2` |
| [vt100](https://github.com/doy/vt100-rust) | `0.16.2` | `0.18.1` |



Updates `tauri` from 2.12.1 to 2.12.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.12.1...tauri-v2.12.2)

Updates `tauri-plugin-opener` from 2.7.0 to 2.7.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.7.0...dialog-v2.7.2)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `tauri-plugin-deep-link` from 2.6.1 to 2.6.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.6.1...deep-link-v2.6.2)

Updates `tauri-plugin-dialog` from 2.8.1 to 2.8.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.8.1...http-v2.8.3)

Updates `parking_lot` from 0.12.5 to 0.13.0
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@parking_lot-v0.12.5...parking_lot-v0.13.0)

Updates `rusqlite` from 0.40.2 to 0.41.0
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.40.2...v0.41.0)

Updates `notify` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.1/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-8.2.0...notify-8.2.1)

Updates `arboard` from 3.6.1 to 3.7.0
- [Release notes](https://github.com/1Password/arboard/releases)
- [Commits](1Password/arboard@v3.6.1...v3.7.0)

Updates `plist` from 1.10.1 to 1.10.3
- [Release notes](https://github.com/ebarnard/rust-plist/releases)
- [Changelog](https://github.com/ebarnard/rust-plist/blob/master/CHANGELOG.md)
- [Commits](ebarnard/rust-plist@v1.10.1...v1.10.3)

Updates `uuid` from 1.27.0 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.27.0...v1.29.0)

Updates `libc` from 0.2.190 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.190...0.2.191)

Updates `tauri-build` from 2.7.1 to 2.7.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.7.1...tauri-build-v2.7.2)

Updates `vt100` from 0.16.2 to 0.18.1
- [Changelog](https://github.com/doy/vt100-rust/blob/main/CHANGELOG.md)
- [Commits](doy/vt100-rust@v0.16.2...v0.18.1)

---
updated-dependencies:
- dependency-name: tauri
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tauri-plugin-opener
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tauri-plugin-deep-link
  dependency-version: 2.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: parking_lot
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rusqlite
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: notify
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: arboard
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: plist
  dependency-version: 1.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tauri-build
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: vt100
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 1, 2026
@dependabot
dependabot Bot requested a review from THPubs as a code owner November 1, 2026 09:37
@dependabot dependabot Bot added the rust Pull requests that update rust code label Nov 1, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@THPubs THPubs Awaiting requested review from THPubs THPubs is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants