build(deps): bump the rust-patch group across 1 directory with 5 updates

[dependabot]

Bumps the rust-patch group with 5 updates in the / directory:

Package	From	To
tokio	1.53.1	1.53.2
mdns-sd	0.21.4	0.21.5
ratatui-textarea	0.9.2	0.9.3
tauri	2.12.1	2.12.2
tauri-plugin-updater	2.13.1	2.13.2

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

• fs: handle integer overflow in buffered relative seek (#8574)
• io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
• process: unregister Windows wait before closing child handle (#8564)
• rt: drop blocking pool mutex before shutting down rejected task (#8562)
• sync: fix mpsc index wraparound in block reclamation (#8546)
• sync: forget mpsc Permit before sending value (#8560)
• sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
• sync: wake broadcast Sender::closed outside mutex (#8558)
• task: drop replaced waker outside lock in JoinSet (#8554)
• time: drop timer lock before dropping waker in clear_entry (#8552)
• time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

• fs: clamp io_uring read length to u32::MAX (#8572)
• rt: ignore current_thread task dumps from other runtimes (#8544)
• rt: preserve io_uring context if a completion waker panics (#8566)
• sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
• taskdump: restore deferred leaf wakes during capture (#8445)
• time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits

• ff0c406 chore: prepare Tokio v1.53.2 (#8580)
• a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
• ec31a9f chore: prepare Tokio v1.51.5 (#8579)
• 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
• 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
• 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
• 9a47992 process: unregister Windows wait before closing child handle (#8564)
• 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
• 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
• 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
• Additional commits viewable in compare view

Updates mdns-sd from 0.21.4 to 0.21.5

Release notes

Sourced from mdns-sd's releases.

v0.21.5

This is a bugfix release.

Bug fixes

• Keep the daemon's timers on a monotonic clock. Previously, setting the system clock back stalled announcements, IP checks and other timers. (#516)
• Count system sleep toward cached record TTLs. After the system wakes, records whose TTL ran out during the sleep are removed and refreshed as usual, instead of being kept as if no time had passed. (#518)
• Apply set_ip_check_interval immediately. Setting the interval to 0 now disables the IP check, instead of re-running it in a busy loop. (#517)
• Interfaces sharing an IPv4 address (e.g. the bridge interfaces of VMs and containers on macOS) no longer retry the multicast join on every IP check. (#513)

What's Changed

• refactoring: extract duplicated code into new_multicast_socket by @​keepsimple1 in keepsimple1/mdns-sd#515
• fix: record an interface whose multicast join failed, ending an endless retry by @​vdavid in keepsimple1/mdns-sd#513
• fix: keep the daemon's timers on a monotonic clock by @​lyager in keepsimple1/mdns-sd#516
• fix: apply IP check interval changes immediately by @​keepsimple1 in keepsimple1/mdns-sd#517
• fix: count system sleep toward cached record TTLs by @​keepsimple1 in keepsimple1/mdns-sd#518
• refactor: remove the unused per-answer timestamp from DnsOutgoing by @​keepsimple1 in keepsimple1/mdns-sd#519
• prepare for release 0.21.5 by @​keepsimple1 in keepsimple1/mdns-sd#520

New Contributors, welcome!

• @​vdavid made their first contribution in keepsimple1/mdns-sd#513

Full Changelog: keepsimple1/mdns-sd@v0.21.4...v0.21.5

Changelog

Sourced from mdns-sd's changelog.

Version 0.21.5 (2026-10-04)

This is a bugfix release.

Bug fixes

• Keep the daemon's timers on a monotonic clock. Previously, setting the system clock back stalled announcements, IP checks and other timers. (#516)
• Count system sleep toward cached record TTLs. After the system wakes, records whose TTL ran out during the sleep are removed and refreshed as usual, instead of being kept as if no time had passed. (#518)
• Apply set_ip_check_interval immediately. Setting the interval to 0 now disables the IP check, instead of re-running it in a busy loop. (#517)
• Interfaces sharing an IPv4 address (e.g. the bridge interfaces of VMs and containers on macOS) no longer retry the multicast join on every IP check. (#513)

All changes

• f76eedb 2026-10-04 refactor: remove the unused per-answer timestamp from DnsOutgoing (#519) (keepsimple1)
• 8222d6d 2026-10-04 fix: count system sleep toward cached record TTLs (#518) (keepsimple1)
• 6c50c9c 2026-10-03 fix: apply IP check interval changes immediately (#517) (keepsimple1)
• cba4ab4 2026-10-03 fix: keep the daemon's timers on a monotonic clock (#516) (Jesper L. Nielsen)
• 37c8e24 2026-10-03 fix: interfaces sharing an IPv4 address no longer retry the multicast join (#513) (David Veszelovszki)
• a44e673 2026-10-01 refactoring: extract duplicated code into new_multicast_socket (#515) (keepsimple1)

Commits

• a25148c prepare for release 0.21.5 (#520)
• f76eedb refactor: remove the unused per-answer timestamp from DnsOutgoing (#519)
• 8222d6d fix: count system sleep toward cached record TTLs (#518)
• 6c50c9c fix: apply IP check interval changes immediately (#517)
• cba4ab4 fix: keep the daemon's timers on a monotonic clock (#516)
• 37c8e24 fix: interfaces sharing an IPv4 address no longer retry the multicast join (#...
• a44e673 refactoring: extract duplicated code into new_multicast_socket (#515)
• See full diff in compare view

Updates ratatui-textarea from 0.9.2 to 0.9.3

Release notes

Sourced from ratatui-textarea's releases.

ratatui-textarea-v0.9.3

🚀 Features

• Add scroll_offset and line_number_width public methods. by @​kenianbei in #30

Full Changelog: ratatui/ratatui-textarea@0.9.2...0.9.3

Changelog

Sourced from ratatui-textarea's changelog.

0.9.3 - 2026-07-26

🚀 Features

• Add scroll_offset and line_number_width public methods. by @​kenianbei in #30

Full Changelog: ratatui/ratatui-textarea@0.9.2...0.9.3

Commits

• a9c1ed0 chore: release v0.9.3 (#31)
• bf06674 feat: add scroll_offset and line_number_width public methods. (#30)
• See full diff in compare view

Updates tauri from 2.12.1 to 2.12.2

Release notes

Sourced from tauri's releases.

tauri v2.12.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1295 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits

• 413cbdb Apply Version Updates From Current Changes (#16213)
• 587ae48 chore: disable CODEOWNERS file (#16236)
• a98038e fix: menu append doesn't take options like MenuItemOptions (#16235)
• 7c24f5b fix: store tauri menu items in Menu (#16231)
• a225a18 fix: panic on repeated once listener events (#16222)
• a916205 fix(api): return awaitable cleanup from combined event listeners (#16195)
• 7c87f90 chore: add publiccode.yml file (#16190)
• 79d3537 process: relaunch macOS app via LaunchServices to avoid inheriting dying stdi...
• 61285f6 fix(tauri-utils): doctests (#16142)
• See full diff in compare view

Updates tauri-plugin-updater from 2.13.1 to 2.13.2

Release notes

Sourced from tauri-plugin-updater's releases.

updater-js v2.13.2

[2.13.2]

• 2a9c29e0 (#3578 by @​alii13) On macOS, a failed install no longer deletes the installed app. The bundles are swapped atomically where the file system supports it; otherwise the previous app is restored, or kept as <name> (previous version).app and reported through the new Error::PreviousAppNotRestored. Also fixes installing apps on a volume other than the temp directory's, and the bundle root's permissions (0755).

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.13.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 6.7kB dist-js/index.cjs
npm notice 7.1kB dist-js/index.d.ts
npm notice 6.6kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.13.2
npm notice filename: tauri-apps-plugin-updater-2.13.2.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 25.1 kB
npm notice shasum: d23b7a261022dee1fb74da3e29540a0e49c6ed3b
npm notice integrity: sha512-ekGlOBis1gztz[...]ShdQczCM50SZQ==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3135040742
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-updater@2.13.2

updater v2.13.2

[2.13.2]

• 2a9c29e0 (#3578 by @​alii13) On macOS, a failed install no longer deletes the installed app. The bundles are swapped atomically where the file system supports it; otherwise the previous app is restored, or kept as <name> (previous version).app and reported through the new Error::PreviousAppNotRestored. Also fixes installing apps on a volume other than the temp directory's, and the bundle root's permissions (0755).

... (truncated)

Commits

• 7eb8246 publish new versions (#3673)
• 65ce65b fix(ci): Android e2e flakes, shell Terminated sent before output (#3672)
• cbd691b chore(examples): update Android project for API example
• 974bbdc publish new versions (#3667)
• 3113a54 chore(deps): update urlpattern to 0.6 (#3670)
• b443d6b fix(http): release the request's resources once fetch_send settles (#3669)
• 2a9c29e fix(updater): restore the current app when a macOS install fails (fix #3505, ...
• d4835d0 publish new versions (#3660)
• 569ee82 fix: mobile docs.rs builds
• 25f3874 chore(deps): update dependency eslint-plugin-security to v4.1.0 (#3661)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.