Skip to content

build(deps): bump the cargo-minor-and-patch group in /src-tauri with 20 updates - #19

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/cargo/src-tauri/develop/cargo-minor-and-patch-ead1dea849
Closed

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/cargo/src-tauri/develop/cargo-minor-and-patch-ead1dea849

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown

Bumps the cargo-minor-and-patch group in /src-tauri with 20 updates:

Package From To
serde_json 1.0.149 1.0.151
serde 1.0.228 1.0.229
log 0.4.29 0.4.34
tauri-plugin-log 2.8.0 2.9.2
tauri-plugin-updater 2.10.0 2.12.0
chrono 0.4.44 0.4.45
tauri-plugin-global-shortcut 2.3.1 2.3.2
tauri-plugin-devtools 2.0.1 2.2.1
tauri-plugin-dialog 2.6.0 2.7.3
tauri-plugin-fs 2.4.5 2.5.2
tauri-plugin-shell 2.3.5 2.3.6
uuid 1.21.0 1.26.1
zeroize 1.8.2 1.9.0
tauri-plugin-opener 2.5.3 2.5.5
tauri-plugin-deep-link 2.4.7 2.4.10
tauri-plugin-single-instance 2.4.0 2.4.5
regex 1.12.3 1.13.1
futures-util 0.3.32 0.3.34
tempfile 3.26.0 3.27.0
tauri-build 2.5.5 2.6.3

Updates serde_json from 1.0.149 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

v1.0.150

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • a1ae73a Release 1.0.150
  • 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
  • 2037b63 Reject non-string enum object keys
  • 5d30df6 Resolve manual_assert_eq pedantic clippy lint
  • Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates log from 0.4.29 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

0.4.33

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.32...0.4.33

0.4.32

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

0.4.30

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

... (truncated)

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

[0.4.33] - 2026-06-20

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.32...0.4.33

[0.4.32] - 2026-06-04

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

[0.4.31] - 2026-06-02

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

... (truncated)

Commits
  • 8034743 Merge pull request #738 from rust-lang/cargo/0.4.34
  • 7d1e24e prepare for 0.4.34 release
  • 3b939b6 Merge pull request #737 from malezjaa/master
  • b88266c Add alloc support for boxed loggers
  • 037d7a5 doc: Add context-logger utility to README
  • f405739 Merge pull request #734 from rust-lang/cargo/0.4.33
  • 6a24abf prepare for 0.4.33 release
  • 87e0621 Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparison
  • a9b5711 Review: fallback to the &str hash
  • cc89cc6 Review: fixed other comparisons
  • Additional commits viewable in compare view

Updates tauri-plugin-log from 2.8.0 to 2.9.2

Release notes

Sourced from tauri-plugin-log's releases.

log-js v2.9.2

[2.9.2]

  • 2df3d936 (#3574) Log webview log target locations after 2 colons instead of 1. (e.g. webview:myFunction@http://localhost:5173/src/myFile.ts?t=1787480723620:47:4 to webview::myFunction@http://localhost:5173/src/myFile.ts?t=1787480723620:47:4)
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-log@2.9.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.8kB README.md
npm notice 7.0kB dist-js/index.cjs
npm notice 3.0kB dist-js/index.d.ts
npm notice 6.7kB dist-js/index.js
npm notice 715B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-log
npm notice version: 2.9.2
npm notice filename: tauri-apps-plugin-log-2.9.2.tgz
npm notice package size: 5.0 kB
npm notice unpacked size: 22.1 kB
npm notice shasum: 75f59bbe675d1a4fba91deb055c6cee2e432e50d
npm notice integrity: sha512-QC2uTQyC+4269[...]cBc5bF6u/DUnw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2893837853
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-log@2.9.2

log v2.9.2

[2.9.2]

  • 2df3d936 (#3574) Log webview log target locations after 2 colons instead of 1. (e.g. webview:myFunction@http://localhost:5173/src/myFile.ts?t=1787480723620:47:4 to webview::myFunction@http://localhost:5173/src/myFile.ts?t=1787480723620:47:4)

... (truncated)

Commits

Updates tauri-plugin-updater from 2.10.0 to 2.12.0

Release notes

Sourced from tauri-plugin-updater's releases.

updater-js v2.12.0

[2.12.0]

  • 1308bfa3 Breaking change: the allowDowngrades option was removed from the check command and is now read from the plugin configuration instead.

    Previously any code running in the webview could pass allowDowngrades: true to plugin:updater|check and relax the version check from "the update must be newer" to "the update must be different", overriding the comparator the application had configured on the Rust side. The flag is now an application-level setting:

    {
      "plugins": {
        "updater": {
          "allowDowngrades": true
        }
      }
    }

    It defaults to false, and is ignored when the application provides its own Builder::default_version_comparator, which continues to take precedence.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.12.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 3.2kB dist-js/index.cjs
npm notice 3.0kB dist-js/index.d.ts
npm notice 3.2kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.12.0
npm notice filename: tauri-apps-plugin-updater-2.12.0.tgz
npm notice package size: 3.9 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: f3b47d4bae20f5499efe043f4debb7c85f88b9b3
npm notice integrity: sha512-74+g7rSIHXQje[...]osT+6nphSa8Og==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2893838281
</tr></table> 

... (truncated)

Commits

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

Commits
  • 1703382 Prepare 0.4.45 release
  • 881f9ab tz_data: fix tzdata locations on Android
  • f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
  • c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
  • 120686c Bump codecov/codecov-action from 5 to 6
  • See full diff in compare view

Updates tauri-plugin-global-shortcut from 2.3.1 to 2.3.2

Commits
  • e7a68fa publish new versions (#3068)
  • b5550a3 chore: temp delete updater changefile
  • 93426f8 fix: fix docsrs builds
  • 4ee61e0 Revert "chore: temp delete updater changefile"
  • 06124af publish new versions (#2972)
  • 060219e chore(deps): update dependency @​rollup/plugin-typescript to v12.3.0 (#3067)
  • c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
  • d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
  • cdc7eec chore(deps): update dependency @​rollup/plugin-typescript to v12.2.0 (#3066)
  • 6314b00 chore: temp delete updater changefile
  • Additional commits viewable in compare view

Updates tauri-plugin-devtools from 2.0.1 to 2.2.1

Release notes

Sourced from tauri-plugin-devtools's releases.

tauri-plugin-devtools-v2.2.1

Fixed

  • devtools-core release should have been breaking, upgrade to 0.4.0.

tauri-plugin-devtools-v2.2.0

Changed

  • Raise MSRV to 1.85. Added MSRV policy (#414)
  • Upgrade to tonic/prost 0.14 and http 1. (#407)
  • Simplified CORS handling to mirror the allowed request origin in Access-Control-Allow-Origin, including in local development mode, instead of returning an origin list or *. (#407)

Fixed

  • Increase span buffer size to avoid dropped spans and UX issues. (#227)

Other

  • General dependency updates
  • General CI maintenance
  • Add test coverage for CORS features of the plugin using new test-utils core feature (#402)

tauri-plugin-devtools-v2.1.0

No release notes provided.

Commits
  • e9a8fd6 chore: release devtools-core 0.4.0 and tauri-plugin-devtools 2.2.1 (#418)
  • f36f1be chore: release (#385)
  • 4fc9ec1 fix: dont drop events in buffer (#227)
  • 8a148f7 chore(deps): update release-plz/action digest to a80d79e (#416)
  • bb82cfb chore(deps): update dtolnay/rust-toolchain digest to d103106 (#415)
  • 20d059d chore(deps): update rust crate bytes to v1.12.1 (#393)
  • 79dc9b4 chore(deps): update dependency eslint-plugin-solid to ^0.18.0 (#392)
  • 1423127 chore(deps): update rust crate tracing-subscriber to v0.3.23 (#390)
  • c2e6eee chore(deps): update rust crate serde_json to v1.0.151 (#389)
  • 601e120 chore(deps): update rust crate futures to v0.3.34 (#388)
  • Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.6.0 to 2.7.3

Release notes

Sourced from tauri-plugin-dialog's releases.

http v2.7.0

[2.7.0]

  • 1198a524 Security: Added the scopeRedirects plugin configuration option, which checks the URL scope on every hop of a redirect chain instead of only on the URL requested by the frontend. Without it, a server on an allowed origin can redirect the request to any other origin - including localhost services, internal hosts and cloud metadata endpoints - and the plugin follows it, returning the response to the webview.

    {
      "plugins": {
        "http": {
          "scopeRedirects": true
        }
      }
    }

    It is opt-in because a redirect to a URL that is not allowed by the scope now fails with url not allowed on the configured scope instead of being followed, so applications that rely on being redirected outside of their scope must add the redirect target to the scope. This will become the default in v3.

    Note that tauri_plugin_http::init() now returns TauriPlugin<R, Option<Config>> instead of TauriPlugin<R>.

Updating crates.io index
    Updating crates.io index
   Packaging tauri-plugin-http v2.7.0 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/http)
    Updating crates.io index
    Packaged 26 files, 221.5KiB (57.9KiB compressed)
   Uploading tauri-plugin-http v2.7.0 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/http)
    Uploaded tauri-plugin-http v2.7.0 to registry `crates-io`
note: waiting for tauri-plugin-http v2.7.0 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-http v2.7.0 at registry `crates-io`

http-js v2.6.1

[2.6.1]

  • a21555dd (#3566 by @​followdarko) Fix unhandled promise rejections on every fetch teardown: the request/body cleanup commands were fired as floating promises, and releasing an already-released resource rejects with The resource id N is invalid.. dropBody is now idempotent and both cleanup calls handle their own rejection.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
</tr></table> 

... (truncated)

Commits

Updates tauri-plugin-fs from 2.4.5 to 2.5.2

Commits

Updates tauri-plugin-shell from 2.3.5 to 2.3.6

Commits

Updates uuid from 1.21.0 to 1.26.1

Release notes

Sourced from uuid's releases.

v1.26.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

v1.24.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.5...v1.24.0

v1.23.5

... (truncated)

Commits
  • 9f92712 Merge pull request #910 from uuid-rs/cargo/v1.26.1
  • d4df8f0 prepare for 1.26.1 release
  • 5613f23 Merge pull request #909 from uuid-rs/fix/ts-conversion-overflow
  • fda00eb don't panic in overflowing Timestamp to SystemTime conversion
  • c82e88c Merge pull request #907 from lenamonj/v7-counter-placement
  • ac065a6 Align the counter diagram
  • 34ec102 Seat the v7 counter below the version nibble
  • cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
  • 34e4f49 don't test macros under miri
  • d9e7242 update nightly used for miri
  • Additional commits viewable in compare view

Updates zeroize from 1.8.2 to 1.9.0

Commits

Updates tauri-plugin-opener from 2.5.3 to 2.5.5

Commits
  • 6e2e7e4 publish new versions (#3070)
  • 9a2c98f temp: remove updater changefiles
  • 4a2ecb6 chore(deps): update rkyv, closes #3196
  • 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
  • 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
  • 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
  • d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
  • 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
  • 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
  • 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
  • Additional commits viewable in compare view

Updates tauri-plugin-deep-link from 2.4.7 to 2.4.10

Commits

Updates tauri-plugin-single-instance from 2.4.0 to 2.4.5

Release notes

Sourced from tauri-plugin-single-instance's releases.

store-js v2.4.5

[2.4.5]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "reposi...

Description has been truncated

Bumps the cargo-minor-and-patch group in /src-tauri with 20 updates:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.34` |
| [tauri-plugin-log](https://github.com/tauri-apps/plugins-workspace) | `2.8.0` | `2.9.2` |
| [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.10.0` | `2.12.0` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` |
| [tauri-plugin-global-shortcut](https://github.com/tauri-apps/plugins-workspace) | `2.3.1` | `2.3.2` |
| [tauri-plugin-devtools](https://github.com/crabnebula-dev/devtools) | `2.0.1` | `2.2.1` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.6.0` | `2.7.3` |
| [tauri-plugin-fs](https://github.com/tauri-apps/plugins-workspace) | `2.4.5` | `2.5.2` |
| [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.5` | `2.3.6` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.26.1` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` |
| [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.3` | `2.5.5` |
| [tauri-plugin-deep-link](https://github.com/tauri-apps/plugins-workspace) | `2.4.7` | `2.4.10` |
| [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.4.0` | `2.4.5` |
| [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.13.1` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.26.0` | `3.27.0` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.5.5` | `2.6.3` |


Updates `serde_json` from 1.0.149 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.151)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `log` from 0.4.29 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.29...0.4.34)

Updates `tauri-plugin-log` from 2.8.0 to 2.9.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.8.0...log-v2.9.2)

Updates `tauri-plugin-updater` from 2.10.0 to 2.12.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@updater-v2.10.0...updater-v2.12.0)

Updates `chrono` from 0.4.44 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.44...v0.4.45)

Updates `tauri-plugin-global-shortcut` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@os-v2.3.1...os-v2.3.2)

Updates `tauri-plugin-devtools` from 2.0.1 to 2.2.1
- [Release notes](https://github.com/crabnebula-dev/devtools/releases)
- [Changelog](https://github.com/crabnebula-dev/devtools/blob/main/release-plz-v2.toml)
- [Commits](crabnebula-dev/devtools@tauri-plugin-devtools-v2.0.1...tauri-plugin-devtools-v2.2.1)

Updates `tauri-plugin-dialog` from 2.6.0 to 2.7.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.6.0...dialog-v2.7.3)

Updates `tauri-plugin-fs` from 2.4.5 to 2.5.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.5...fs-v2.5.2)

Updates `tauri-plugin-shell` from 2.3.5 to 2.3.6
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@nfc-v2.3.5...nfc-v2.3.6)

Updates `uuid` from 1.21.0 to 1.26.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.21.0...v1.26.1)

Updates `zeroize` from 1.8.2 to 1.9.0
- [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0)

Updates `tauri-plugin-opener` from 2.5.3 to 2.5.5
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.5.3...http-v2.5.5)

Updates `tauri-plugin-deep-link` from 2.4.7 to 2.4.10
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@deep-link-v2.4.7...deep-link-v2.4.10)

Updates `tauri-plugin-single-instance` from 2.4.0 to 2.4.5
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.0...fs-v2.4.5)

Updates `regex` from 1.12.3 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.3...1.13.1)

Updates `futures-util` from 0.3.32 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.34)

Updates `tempfile` from 3.26.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.26.0...v3.27.0)

Updates `tauri-build` from 2.5.5 to 2.6.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.5.5...tauri-build-v2.6.3)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-log
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-updater
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-global-shortcut
  dependency-version: 2.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-devtools
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-fs
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-shell
  dependency-version: 2.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: uuid
  dependency-version: 1.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: zeroize
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-opener
  dependency-version: 2.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-deep-link
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-plugin-single-instance
  dependency-version: 2.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
- dependency-name: tauri-build
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 23, 2026
EarMaster added a commit that referenced this pull request Sep 24, 2026
The rust leg is the whole length of codeql.yml - six to eight minutes, against
about one each for actions and javascript-typescript - and almost none of it
is this repository's code. The extractor spends it resolving the 799 crates in
Cargo.lock, and the queries spend it on one shared pass over the database that
builds, which is why all 37 finish within seconds of each other. Caching the
cargo registry was measured and saved nothing, so the remaining lever is not
running it when it cannot find anything new.

A small job now asks the pull request's file list whether anything under
src-tauri/, or this workflow itself, changed. When nothing did, the rust leg
still runs as a job but skips its steps and says so in its summary, so the
check reads as skipped rather than disappearing. Every doubt resolves to
analysing: a failed lookup, an empty list, or a list at the endpoint's
3000-file cap. The weekly schedule and a manual dispatch always analyse
everything, which keeps the Security tab's baseline for main complete.

Checked the lookup against real pull requests: #16 and #18 (npm only) skip,
#19 and #21 (cargo) analyse, #23 (develop) analyses, a missing PR analyses,
and a scheduled run analyses.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@EarMaster

Copy link
Copy Markdown
Owner

Closing: scheduled npm/cargo version updates are being turned off. Dependencies are now refreshed by hand before each release, and security alerts stay on.

@EarMaster EarMaster closed this Sep 24, 2026
@EarMaster
EarMaster deleted the dependabot/cargo/src-tauri/develop/cargo-minor-and-patch-ead1dea849 branch September 24, 2026 22:55
@dependabot @github

dependabot Bot commented on behalf of github Sep 24, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant