Repository navigation
build(deps): bump the cargo-minor-and-patch group in /src-tauri with 20 updates - #19
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the cargo-minor-and-patch group in /src-tauri with 20 updates: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.34` | | [tauri-plugin-log](https://github.com/tauri-apps/plugins-workspace) | `2.8.0` | `2.9.2` | | [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.10.0` | `2.12.0` | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [tauri-plugin-global-shortcut](https://github.com/tauri-apps/plugins-workspace) | `2.3.1` | `2.3.2` | | [tauri-plugin-devtools](https://github.com/crabnebula-dev/devtools) | `2.0.1` | `2.2.1` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.6.0` | `2.7.3` | | [tauri-plugin-fs](https://github.com/tauri-apps/plugins-workspace) | `2.4.5` | `2.5.2` | | [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.5` | `2.3.6` | | [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.26.1` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` | | [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.3` | `2.5.5` | | [tauri-plugin-deep-link](https://github.com/tauri-apps/plugins-workspace) | `2.4.7` | `2.4.10` | | [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.4.0` | `2.4.5` | | [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.13.1` | | [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.26.0` | `3.27.0` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.5.5` | `2.6.3` | Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `log` from 0.4.29 to 0.4.34 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.29...0.4.34) Updates `tauri-plugin-log` from 2.8.0 to 2.9.2 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@log-v2.8.0...log-v2.9.2) Updates `tauri-plugin-updater` from 2.10.0 to 2.12.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@updater-v2.10.0...updater-v2.12.0) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `tauri-plugin-global-shortcut` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@os-v2.3.1...os-v2.3.2) Updates `tauri-plugin-devtools` from 2.0.1 to 2.2.1 - [Release notes](https://github.com/crabnebula-dev/devtools/releases) - [Changelog](https://github.com/crabnebula-dev/devtools/blob/main/release-plz-v2.toml) - [Commits](crabnebula-dev/devtools@tauri-plugin-devtools-v2.0.1...tauri-plugin-devtools-v2.2.1) Updates `tauri-plugin-dialog` from 2.6.0 to 2.7.3 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@log-v2.6.0...dialog-v2.7.3) Updates `tauri-plugin-fs` from 2.4.5 to 2.5.2 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.5...fs-v2.5.2) Updates `tauri-plugin-shell` from 2.3.5 to 2.3.6 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.5...nfc-v2.3.6) Updates `uuid` from 1.21.0 to 1.26.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.21.0...v1.26.1) Updates `zeroize` from 1.8.2 to 1.9.0 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0) Updates `tauri-plugin-opener` from 2.5.3 to 2.5.5 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.3...http-v2.5.5) Updates `tauri-plugin-deep-link` from 2.4.7 to 2.4.10 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@deep-link-v2.4.7...deep-link-v2.4.10) Updates `tauri-plugin-single-instance` from 2.4.0 to 2.4.5 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.0...fs-v2.4.5) Updates `regex` from 1.12.3 to 1.13.1 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.3...1.13.1) Updates `futures-util` from 0.3.32 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.34) Updates `tempfile` from 3.26.0 to 3.27.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.26.0...v3.27.0) Updates `tauri-build` from 2.5.5 to 2.6.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.5.5...tauri-build-v2.6.3) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: log dependency-version: 0.4.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-log dependency-version: 2.9.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-updater dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-global-shortcut dependency-version: 2.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-devtools dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-dialog dependency-version: 2.7.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-fs dependency-version: 2.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-shell dependency-version: 2.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: uuid dependency-version: 1.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: zeroize dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-opener dependency-version: 2.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-deep-link dependency-version: 2.4.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tauri-plugin-single-instance dependency-version: 2.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: regex dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: futures-util dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tempfile dependency-version: 3.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: tauri-build dependency-version: 2.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
EarMaster
added a commit
that referenced
this pull request
Sep 24, 2026
The rust leg is the whole length of codeql.yml - six to eight minutes, against about one each for actions and javascript-typescript - and almost none of it is this repository's code. The extractor spends it resolving the 799 crates in Cargo.lock, and the queries spend it on one shared pass over the database that builds, which is why all 37 finish within seconds of each other. Caching the cargo registry was measured and saved nothing, so the remaining lever is not running it when it cannot find anything new. A small job now asks the pull request's file list whether anything under src-tauri/, or this workflow itself, changed. When nothing did, the rust leg still runs as a job but skips its steps and says so in its summary, so the check reads as skipped rather than disappearing. Every doubt resolves to analysing: a failed lookup, an empty list, or a list at the endpoint's 3000-file cap. The weekly schedule and a manual dispatch always analyse everything, which keeps the Security tab's baseline for main complete. Checked the lookup against real pull requests: #16 and #18 (npm only) skip, #19 and #21 (cargo) analyse, #23 (develop) analyses, a missing PR analyses, and a scheduled run analyses. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Owner
|
Closing: scheduled npm/cargo version updates are being turned off. Dependencies are now refreshed by hand before each release, and security alerts stay on. |
EarMaster
deleted the
dependabot/cargo/src-tauri/develop/cargo-minor-and-patch-ead1dea849
branch
September 24, 2026 22:55
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the cargo-minor-and-patch group in /src-tauri with 20 updates:
1.0.1491.0.1511.0.2281.0.2290.4.290.4.342.8.02.9.22.10.02.12.00.4.440.4.452.3.12.3.22.0.12.2.12.6.02.7.32.4.52.5.22.3.52.3.61.21.01.26.11.8.21.9.02.5.32.5.52.4.72.4.102.4.02.4.51.12.31.13.10.3.320.3.343.26.03.27.02.5.52.6.3Updates
serde_jsonfrom 1.0.149 to 1.0.151Release notes
Sourced from serde_json's releases.
Commits
de85007Release 1.0.1513b2b3c5Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked0406d96Debug-assert well-formedness and no-whitespace in from_string_uncheckedcf16f75Add RawValue::from_string_unchecked827a315Update actions/upload-artifact@v6 -> v7cea36a5Update actions/checkout@v6 -> v7a1ae73aRelease 1.0.1501a360b0Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys2037b63Reject non-string enum object keys5d30df6Resolve manual_assert_eq pedantic clippy lintUpdates
serdefrom 1.0.228 to 1.0.229Release notes
Sourced from serde's releases.
Commits
7fc3b4cRelease 1.0.2296d6e9a1Merge pull request #3085 from dtolnay/syn36dec3b7Update to syn 3cfe6692Resolve mut_mut pedantic clippy lint1023d07Update actions/upload-artifact@v6 -> v7dd682c2Update actions/checkout@v6 -> v75f0f18bUpdate ui test suite to nightly-2026-06-0163a1498Regenerate stderr with trybuild normalization fixesfa7da4aFix unused_features warning6b1a178Unpin CI miri toolchainUpdates
logfrom 0.4.29 to 0.4.34Release notes
Sourced from log's releases.
... (truncated)
Changelog
Sourced from log's changelog.
... (truncated)
Commits
8034743Merge pull request #738 from rust-lang/cargo/0.4.347d1e24eprepare for 0.4.34 release3b939b6Merge pull request #737 from malezjaa/masterb88266cAdd alloc support for boxed loggers037d7a5doc: Add context-logger utility to READMEf405739Merge pull request #734 from rust-lang/cargo/0.4.336a24abfprepare for 0.4.33 release87e0621Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparisona9b5711Review: fallback to the &str hashcc89cc6Review: fixed other comparisonsUpdates
tauri-plugin-logfrom 2.8.0 to 2.9.2Release notes
Sourced from tauri-plugin-log's releases.
... (truncated)
Commits
5baf71afix: pnpm audit2393188publish new versions (#3591)1198a52Merge commit from fork1308bfaMerge commit from fork690dcfdMerge commit from fork67cd25afix(single-instance): let the first instance come to front on Windows (#3592)2df3d93refactor(log): log webview location after double colon (#3574)4b5c954chore(deps): update dependency typescript-eslint to v8.70.0 (#3536)3c5d267publish new versions (#3567)c050e07fix(store):apply_pending_auto_savecan deadlock (#3572)Updates
tauri-plugin-updaterfrom 2.10.0 to 2.12.0Release notes
Sourced from tauri-plugin-updater's releases.
... (truncated)
Commits
5baf71afix: pnpm audit2393188publish new versions (#3591)1198a52Merge commit from fork1308bfaMerge commit from fork690dcfdMerge commit from fork67cd25afix(single-instance): let the first instance come to front on Windows (#3592)2df3d93refactor(log): log webview location after double colon (#3574)4b5c954chore(deps): update dependency typescript-eslint to v8.70.0 (#3536)3c5d267publish new versions (#3567)c050e07fix(store):apply_pending_auto_savecan deadlock (#3572)Updates
chronofrom 0.4.44 to 0.4.45Release notes
Sourced from chrono's releases.
Commits
1703382Prepare 0.4.45 release881f9abtz_data: fix tzdata locations on Androidf14ead4fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflowc6063e6Update similar-asserts requirement from 1.6.1 to 2.0.0120686cBump codecov/codecov-action from 5 to 6Updates
tauri-plugin-global-shortcutfrom 2.3.1 to 2.3.2Commits
e7a68fapublish new versions (#3068)b5550a3chore: temp delete updater changefile93426f8fix: fix docsrs builds4ee61e0Revert "chore: temp delete updater changefile"06124afpublish new versions (#2972)060219echore(deps): update dependency@rollup/plugin-typescriptto v12.3.0 (#3067)c7e9766chore(deps): update tauri monorepo (v2) (#3058)d4a8ce9chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)cdc7eecchore(deps): update dependency@rollup/plugin-typescriptto v12.2.0 (#3066)6314b00chore: temp delete updater changefileUpdates
tauri-plugin-devtoolsfrom 2.0.1 to 2.2.1Release notes
Sourced from tauri-plugin-devtools's releases.
Commits
e9a8fd6chore: release devtools-core 0.4.0 and tauri-plugin-devtools 2.2.1 (#418)f36f1bechore: release (#385)4fc9ec1fix: dont drop events in buffer (#227)8a148f7chore(deps): update release-plz/action digest to a80d79e (#416)bb82cfbchore(deps): update dtolnay/rust-toolchain digest to d103106 (#415)20d059dchore(deps): update rust crate bytes to v1.12.1 (#393)79dc9b4chore(deps): update dependency eslint-plugin-solid to ^0.18.0 (#392)1423127chore(deps): update rust crate tracing-subscriber to v0.3.23 (#390)c2e6eeechore(deps): update rust crate serde_json to v1.0.151 (#389)601e120chore(deps): update rust crate futures to v0.3.34 (#388)Updates
tauri-plugin-dialogfrom 2.6.0 to 2.7.3Release notes
Sourced from tauri-plugin-dialog's releases.
... (truncated)
Commits
6aa2854publish new versions (#3509)9d6d032chore(deps): update h2 to 0.4.19 (#3556)98f8787ci: fix typo in workflow permissions1a7b12cci: add explicit token permissions2f4c85cchore(deps): bump serde_with (#3490)c546de0chore(deps): update dependency rollup to v4.62.5 (#3520)db9c599fix(android): missingconsumer-rules.pro(#3531)9c93437chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)685610afix(fs): default permissions (#3507)f8053e6docs: cargo features (#3527)Updates
tauri-plugin-fsfrom 2.4.5 to 2.5.2Commits
6aa2854publish new versions (#3509)9d6d032chore(deps): update h2 to 0.4.19 (#3556)98f8787ci: fix typo in workflow permissions1a7b12cci: add explicit token permissions2f4c85cchore(deps): bump serde_with (#3490)c546de0chore(deps): update dependency rollup to v4.62.5 (#3520)db9c599fix(android): missingconsumer-rules.pro(#3531)9c93437chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)685610afix(fs): default permissions (#3507)f8053e6docs: cargo features (#3527)Updates
tauri-plugin-shellfrom 2.3.5 to 2.3.6Commits
6aa2854publish new versions (#3509)9d6d032chore(deps): update h2 to 0.4.19 (#3556)98f8787ci: fix typo in workflow permissions1a7b12cci: add explicit token permissions2f4c85cchore(deps): bump serde_with (#3490)c546de0chore(deps): update dependency rollup to v4.62.5 (#3520)db9c599fix(android): missingconsumer-rules.pro(#3531)9c93437chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)685610afix(fs): default permissions (#3507)f8053e6docs: cargo features (#3527)Updates
uuidfrom 1.21.0 to 1.26.1Release notes
Sourced from uuid's releases.
... (truncated)
Commits
9f92712Merge pull request #910 from uuid-rs/cargo/v1.26.1d4df8f0prepare for 1.26.1 release5613f23Merge pull request #909 from uuid-rs/fix/ts-conversion-overflowfda00ebdon't panic in overflowing Timestamp to SystemTime conversionc82e88cMerge pull request #907 from lenamonj/v7-counter-placementac065a6Align the counter diagram34ec102Seat the v7 counter below the version nibblecdc96a8Merge pull request #905 from uuid-rs/cargo/v1.26.034e4f49don't test macros under mirid9e7242update nightly used for miriUpdates
zeroizefrom 1.8.2 to 1.9.0Commits
0b71573zeroize v1.9.0 (#1494)3e3f18czeroize: always enable AVX-512 support (#1493)1ea42bbzeroize_derive v1.5.0 (#1492)8d785d1zeroize: rustdoc improvements (#1491)d844f36zeroize: incorporate README.md into rustdoc (#1490)c65c09dctutils: usereasoninstead of comment inforbidattribute (#1489)cbd0963Release block-buffer v0.12.1 (#1488)9aa541dblock-buffer: fix exception safety (#1487)5c7e4f9cmov v0.5.4 (#1485)87cadbccmov: fix clippy (#1484)Updates
tauri-plugin-openerfrom 2.5.3 to 2.5.5Commits
6e2e7e4publish new versions (#3070)9a2c98ftemp: remove updater changefiles4a2ecb6chore(deps): update rkyv, closes #319631415efdocs(shell): update example to include Encoding usage inCommand::spawn(#3...04b33eachore(deps): update dependency typescript-eslint to v8.50.1 (#3181)54e21f1chore(deps): update dependency rollup to v4.54.0 (#3179)d528c88chore(deps): update dependency rollup to v4.53.5 (#3172)69146fachore(deps): update dependency rollup to v4.53.4 (#3167)9f68f2dchore(deps): update dependency typescript-eslint to v8.50.0 (#3170)3d0d2e0fix(opener): ignore inAppBrowser on desktop (#3163)Updates
tauri-plugin-deep-linkfrom 2.4.7 to 2.4.10Commits
6aa2854publish new versions (#3509)9d6d032chore(deps): update h2 to 0.4.19 (#3556)98f8787ci: fix typo in workflow permissions1a7b12cci: add explicit token permissions2f4c85cchore(deps): bump serde_with (#3490)c546de0chore(deps): update dependency rollup to v4.62.5 (#3520)db9c599fix(android): missingconsumer-rules.pro(#3531)9c93437chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)685610afix(fs): default permissions (#3507)f8053e6docs: cargo features (#3527)Updates
tauri-plugin-single-instancefrom 2.4.0 to 2.4.5Release notes
Sourced from tauri-plugin-single-instance's releases.