dependabot: bump the cargo-all group across 1 directory with 8 updates by dependabot[bot] · Pull Request #98 · SoftVentures/Recrest

dependabot · 2026-06-29T00:48:34Z

Bumps the cargo-all group with 7 updates in the /app/src-tauri directory:

Package	From	To
tauri	`2.11.2`	`2.11.3`
sentry	`0.48.2`	`0.48.3`
anyhow	`1.0.102`	`1.0.103`
uuid	`1.23.3`	`1.23.4`
which	`8.0.3`	`8.0.4`
plist	`1.8.0`	`1.9.0`
notify-rust	`4.17.0`	`4.18.0`

Updates tauri from 2.11.2 to 2.11.3

Release notes

Sourced from tauri's releases.

tauri-cli v2.11.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1133 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1085 crate dependencies) Crate: atk Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0413 URL: https://rustsec.org/advisories/RUSTSEC-2024-0413 Crate: atk-sys Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0416 URL: https://rustsec.org/advisories/RUSTSEC-2024-0416 Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: gdk Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0412 URL: https://rustsec.org/advisories/RUSTSEC-2024-0412 Crate: gdk-sys Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0418 URL: https://rustsec.org/advisories/RUSTSEC-2024-0418

Crate: gdkwayland-sys </tr></table>

... (truncated)

Commits

6f6ab12 apply version updates (#15409)
728c8d4 fix(cli): skip building bundles when using tauri android run (#15473)
e25f45c refactor: remove impl clone on inner menus (#15553)
fbcf1b0 chore(deps): update dependency eslint-plugin-security to v4.0.1 (#15545)
828f710 fix(cli): respect src/bin required-features (fix: #15325) (#15427)
ed8fd41 chore(cli): lesser verbose ureq_proto log (#15552)
50b0237 fix(android): escape special characters in strings.xml (#15549)
800223d docs: fix some missing and wrong docs (#15548)
5075c81 fix: check is_maximizable in internal_toggle_maximize (#15550)
532c22a chore(deps-dev): bump vite from 8.0.5 to 8.0.16 (#15547)
Additional commits viewable in compare view

Updates sentry from 0.48.2 to 0.48.3

Release notes

Sourced from sentry's releases.

0.48.3

The Sentry Rust SDK now reports data discarded by the SDK to Sentry’s Stats page. The SDK reports approximate counts for drops from transports, queues, rate-limit backoff, sampling, event processors, and before_send* callbacks, including span counts for dropped transactions and byte counts for dropped logs and metrics.

New Features

Added EnvelopeFilter and EnvelopeFilterCallbacks, which let callers observe envelope items removed by Envelope::filter, including attachments removed after their event or transaction is filtered out. Existing Envelope::filter closure callers continue to work, although some closures may require an explicit item type annotation (#1182).

Added the LossSource trait, which provides the client report data categories and quantities to report when supported Sentry data is dropped (#1170).

Added TransportFactory::create_transport_with_options, which constructs transports from TransportOptions instead of full ClientOptions (#1142).

Added transport-specific options types and with_options constructors for built-in HTTP transports, including ReqwestHttpTransportOptions, CurlHttpTransportOptions, UreqHttpTransportOptions, and EmbeddedSVCHttpTransportOptions (#1142).

Added transport worker options types and deprecated the legacy constructors for built-in background transport workers, including StdTransportThreadOptions and TokioTransportThreadOptions (#1142).

Added client report protocol types in sentry-types, including ClientReport, client_report::Item, client_report::Category, and client_report::Reason, plus support for serializing client_report envelope items (#1144).

Added a client report Recorder type, which modern TransportFactory implementations receive via TransportOptions. Transports can use this recorder to record discarded Sentry data; the SDK aggregates these reported losses and automatically sends them in a future envelope (#1158).

Deprecations

Deprecated Hub::with. Use Hub::current instead (#1126).

Fixes

Fixed ureq transport handling for HTTP error statuses so 429 rate limits and 413 payload-too-large responses are processed correctly (#1177).

Behavior Changes

Custom transport factories that implement TransportFactory::create_transport now receive ClientOptions reconstructed from TransportOptions. The reconstructed options include only transport-relevant fields, such as DSN, user agent, proxy settings, and TLS certificate validation settings. This may affect code that reads non-transport fields in create_transport, but the API remains source-compatible and this change is included in a minor/patch release (#1142).

Changelog

Sourced from sentry's changelog.

0.48.3

The Sentry Rust SDK now reports data discarded by the SDK to Sentry’s Stats page. The SDK reports approximate counts for drops from transports, queues, rate-limit backoff, sampling, event processors, and before_send* callbacks, including span counts for dropped transactions and byte counts for dropped logs and metrics.

New Features

Added EnvelopeFilter and EnvelopeFilterCallbacks, which let callers observe envelope items removed by Envelope::filter, including attachments removed after their event or transaction is filtered out. Existing Envelope::filter closure callers continue to work, although some closures may require an explicit item type annotation (#1182).

Added the LossSource trait, which provides the client report data categories and quantities to report when supported Sentry data is dropped (#1170).

Added TransportFactory::create_transport_with_options, which constructs transports from TransportOptions instead of full ClientOptions (#1142).

Added transport-specific options types and with_options constructors for built-in HTTP transports, including ReqwestHttpTransportOptions, CurlHttpTransportOptions, UreqHttpTransportOptions, and EmbeddedSVCHttpTransportOptions (#1142).

Added transport worker options types and deprecated the legacy constructors for built-in background transport workers, including StdTransportThreadOptions and TokioTransportThreadOptions (#1142).

Added client report protocol types in sentry-types, including ClientReport, client_report::Item, client_report::Category, and client_report::Reason, plus support for serializing client_report envelope items (#1144).

Added a client report Recorder type, which modern TransportFactory implementations receive via TransportOptions. Transports can use this recorder to record discarded Sentry data; the SDK aggregates these reported losses and automatically sends them in a future envelope (#1158).

Deprecations

Deprecated Hub::with. Use Hub::current instead (#1126).

Fixes

Fixed ureq transport handling for HTTP error statuses so 429 rate limits and 413 payload-too-large responses are processed correctly (#1177).

Behavior Changes

Custom transport factories that implement TransportFactory::create_transport now receive ClientOptions reconstructed from TransportOptions. The reconstructed options include only transport-relevant fields, such as DSN, user agent, proxy settings, and TLS certificate validation settings. This may affect code that reads non-transport fields in create_transport, but the API remains source-compatible and this change is included in a minor/patch release (#1142).

Commits

12658ea release: 0.48.3
06d4d5e meta(changelog): Add entry for Hub::with deprecation (#1196)
f22532b chore(client-reports): Prevent client report loss when envelope dropped (#1195)
2c33119 meta(changelog): Prepare for client reports release (#1194)
63525ed chore: Record client reports for dropped logs/metrics (#1193)
a80cf84 chore: Record transaction and span drops in client reports (#1192)
964f17d chore(client-reports): Record event pipeline drops (#1191)
ad1a65a chore(transport): Record tokio thread client report losses (#1186)
4908b0b chore(transport): Record std thread client report losses (#1184)
753e68a chore(ureq): Record envelope losses in the Ureq transport (#1178)
Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
cba53d0 prepare for 1.23.4 release
e347af4 Merge pull request #889 from frostyplanet/main
e9bf55c doc: Fix broken link warnings
5351af4 doc: Enable feature flag label for docs.rs
1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
c9619f6 fix up name of fuzz script in readme
See full diff in compare view

Updates which from 8.0.3 to 8.0.4

Release notes

Sourced from which's releases.

8.0.4

What's Changed

feat: emit NonFatalError on Windows if PATHEXT not populated by @Xaeroxe in harryfei/which-rs#125

Full Changelog: harryfei/which-rs@8.0.3...8.0.4

Changelog

Sourced from which's changelog.

8.0.4

On Windows we now emit a NonFatalError if the PATHEXT environment variable is not populated, and the query did not specify a file extension.

Commits

c9df5ef feat: emit NonFatalError on Windows if PATHEXT not populated (#125)
See full diff in compare view

Updates plist from 1.8.0 to 1.9.0

Changelog

Sourced from plist's changelog.

[1.9.0] - 2026-04-26

Changed

Bump MSRV to v1.88 as required by time v0.3.47.

Update quick-xml to v0.39.2 (#176).

Update time to v0.3.47 to fix RUSTSEC-2026-0009 (#177).

Commits

06a7be6 Release v1.9.0
b6eb799 Bump time to 0.3.47
dea3d3f Bump quick-xml to 0.39.2
c3ce802 Commit Cargo.lock
See full diff in compare view

Updates notify-rust from 4.17.0 to 4.18.0

Release notes

Sourced from notify-rust's releases.

v4.18.0

What's Changed

refactor: rely on lazylock and remove ctor dependency by @hoodie in hoodie/notify-rust#279

Add Windows notification handles by @Peter7896 in hoodie/notify-rust#283

feat: add preview unusernotifcations backend by @hoodie in hoodie/notify-rust#280

feat: add common wait_for_response on all platforms by @hoodie in hoodie/notify-rust#284

docs: improve docs by @hoodie in hoodie/notify-rust#285

ci: add release workflow by @hoodie in hoodie/notify-rust#286

New Contributors

@Peter7896 made their first contribution in hoodie/notify-rust#283

Full Changelog: hoodie/notify-rust@v4.17.0...v4.18.0

Changelog

Sourced from notify-rust's changelog.

v4.18.0 (2026-06-16)

Features

add common wait_for_response on all platforms (b20c59c)

add wait_for_actions and on_close using mac-notification-sys (2627ef7)

macos: add mac-usernotifications backend (602cd5f)

add common response types (25994d5)

add Windows notification handles (eaaa540)

Commits

975d651 chore: bump version
256e287 Merge pull request #286 from hoodie/feature/ci
c9cfe4b ci: add release workflow
20ec544 chore: update mac-notification-sys
c424161 Merge pull request #285 from hoodie/feature/improve-docs
9d11006 docs: improve docs
3a444b6 Merge pull request #284 from hoodie/feature/response-example
26b7223 docs: improve example
fc93326 refactor: clean up warnings
b20c59c feat: add common wait_for_response on all platforms
Additional commits viewable in compare view

Updates tauri-build from 2.6.2 to 2.6.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.6.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1133 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1085 crate dependencies) Crate: atk Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0413 URL: https://rustsec.org/advisories/RUSTSEC-2024-0413 Crate: atk-sys Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0416 URL: https://rustsec.org/advisories/RUSTSEC-2024-0416 Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: gdk Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0412 URL: https://rustsec.org/advisories/RUSTSEC-2024-0412 Crate: gdk-sys Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0418 URL: https://rustsec.org/advisories/RUSTSEC-2024-0418

Crate: gdkwayland-sys </tr></table>

... (truncated)

Commits

6f6ab12 apply version updates (#15409)
728c8d4 fix(cli): skip building bundles when using tauri android run (#15473)
e25f45c refactor: remove impl clone on inner menus (#15553)
fbcf1b0 chore(deps): update dependency eslint-plugin-security to v4.0.1 (#15545)
828f710 fix(cli): respect src/bin required-features (fix: #15325) (#15427)
ed8fd41 chore(cli): lesser verbose ureq_proto log (#15552)
50b0237 fix(android): escape special characters in strings.xml (#15549)
800223d docs: fix some missing and wrong docs (#15548)
5075c81 fix: check is_maximizable in internal_toggle_maximize (#15550)
532c22a chore(deps-dev): bump vite from 8.0.5 to 8.0.16 (#15547)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-all group with 7 updates in the /app/src-tauri directory: | Package | From | To | | --- | --- | --- | | [tauri](https://github.com/tauri-apps/tauri) | `2.11.2` | `2.11.3` | | [sentry](https://github.com/getsentry/sentry-rust) | `0.48.2` | `0.48.3` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.3` | `1.23.4` | | [which](https://github.com/harryfei/which-rs) | `8.0.3` | `8.0.4` | | [plist](https://github.com/ebarnard/rust-plist) | `1.8.0` | `1.9.0` | | [notify-rust](https://github.com/hoodie/notify-rust) | `4.17.0` | `4.18.0` | Updates `tauri` from 2.11.2 to 2.11.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.11.2...tauri-v2.11.3) Updates `sentry` from 0.48.2 to 0.48.3 - [Release notes](https://github.com/getsentry/sentry-rust/releases) - [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-rust@0.48.2...0.48.3) Updates `anyhow` from 1.0.102 to 1.0.103 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) Updates `uuid` from 1.23.3 to 1.23.4 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.3...v1.23.4) Updates `which` from 8.0.3 to 8.0.4 - [Release notes](https://github.com/harryfei/which-rs/releases) - [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md) - [Commits](harryfei/which-rs@8.0.3...8.0.4) Updates `plist` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/ebarnard/rust-plist/releases) - [Changelog](https://github.com/ebarnard/rust-plist/blob/master/CHANGELOG.md) - [Commits](ebarnard/rust-plist@v1.8.0...v1.9.0) Updates `notify-rust` from 4.17.0 to 4.18.0 - [Release notes](https://github.com/hoodie/notify-rust/releases) - [Changelog](https://github.com/hoodie/notify-rust/blob/main/CHANGELOG.md) - [Commits](hoodie/notify-rust@v4.17.0...v4.18.0) Updates `tauri-build` from 2.6.2 to 2.6.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.6.2...tauri-build-v2.6.3) --- updated-dependencies: - dependency-name: tauri dependency-version: 2.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-all - dependency-name: sentry dependency-version: 0.48.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-all - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-all - dependency-name: uuid dependency-version: 1.23.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-all - dependency-name: which dependency-version: 8.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-all - dependency-name: plist dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-all - dependency-name: notify-rust dependency-version: 4.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-all - dependency-name: tauri-build dependency-version: 2.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-06T00:48:26Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Dependency updates (Dependabot) label Jun 29, 2026

dependabot Bot requested a review from EinfachValle as a code owner June 29, 2026 00:48

dependabot Bot added the dependencies Dependency updates (Dependabot) label Jun 29, 2026

dependabot Bot closed this Jul 6, 2026

dependabot Bot deleted the dependabot/cargo/app/src-tauri/develop/cargo-all-b0b732bdaa branch July 6, 2026 00:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

dependabot: bump the cargo-all group across 1 directory with 8 updates#98

dependabot: bump the cargo-all group across 1 directory with 8 updates#98
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/cargo/app/src-tauri/develop/cargo-all-b0b732bdaa

dependabot Bot commented on behalf of github Jun 29, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

tauri-cli v2.11.3

0.48.3

New Features

Deprecations

Fixes

Behavior Changes

0.48.3

New Features

Deprecations

Fixes

Behavior Changes

1.0.103

v1.23.4

What's Changed

New Contributors

8.0.4

What's Changed

8.0.4

[1.9.0] - 2026-04-26

Changed

v4.18.0

What's Changed

New Contributors

v4.18.0 (2026-06-16)

Features

tauri-build v2.6.3

Uh oh!

dependabot Bot commented on behalf of github Jul 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 29, 2026 •

edited

Loading