Skip to content

chore(deps): bump the rust-dependencies group in /apps/desktop/src-tauri with 8 updates - #525

Merged
hiqiancheng merged 1 commit into
mainfrom
dependabot/cargo/apps/desktop/src-tauri/rust-dependencies-02185b6ad2
Jul 17, 2026
Merged

chore(deps): bump the rust-dependencies group in /apps/desktop/src-tauri with 8 updates#525
hiqiancheng merged 1 commit into
mainfrom
dependabot/cargo/apps/desktop/src-tauri/rust-dependencies-02185b6ad2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group in /apps/desktop/src-tauri with 8 updates:

Package From To
tauri-plugin-log 2.8.0 2.9.0
tauri-plugin-single-instance 2.4.2 2.4.3
semver 1.0.27 1.0.28
image 0.25.9 0.25.10
clipboard-rs 0.3.4 0.3.5
tauri-build 2.6.1 2.6.3
cc 1.2.65 1.2.67
tauri-codegen 2.6.1 2.6.3

Updates tauri-plugin-log from 2.8.0 to 2.9.0

Release notes

Sourced from tauri-plugin-log's releases.

log-js v2.9.0

[2.9.0]

  • f08980f1 (#3445 by @​bajoca05) Added the FileOpenStrategy for log rotation. It defaults to append into existing file if any (previous behaviour), and brings a new feature to create a new file per session: FileOpenStrategy::Rotate.
  • 254f222e (#3477 by @​bajoca05) Migrated from the log crate's kv_unstable feature flag to the kv feature flag stabilized in 0.4.21.
  • 0c23b8ec (#3446 by @​fee1-dead) Removed an unused dependency byte-unit.
npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-log@2.9.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.8kB README.md
npm notice 7.0kB dist-js/index.cjs
npm notice 3.0kB dist-js/index.d.ts
npm notice 6.7kB dist-js/index.js
npm notice 715B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-log
npm notice version: 2.9.0
npm notice filename: tauri-apps-plugin-log-2.9.0.tgz
npm notice package size: 5.0 kB
npm notice unpacked size: 22.1 kB
npm notice shasum: 47faedfef55b09adae53c90555c6e103f6fd49b6
npm notice integrity: sha512-Ql8okrnsguk0e[...]3IFIAP+wP5qSw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2165401997
+ @tauri-apps/plugin-log@2.9.0

log v2.9.0

[2.9.0]

  • f08980f1 (#3445 by @​bajoca05) Added the FileOpenStrategy for log rotation. It defaults to append into existing file if any (previous behaviour), and brings a new feature to create a new file per session: FileOpenStrategy::Rotate.
  • 254f222e (#3477 by @​bajoca05) Migrated from the log crate's kv_unstable feature flag to the kv feature flag stabilized in 0.4.21.
  • 0c23b8ec (#3446 by @​fee1-dead) Removed an unused dependency byte-unit.

... (truncated)

Commits
  • cad301f publish new versions (#3447)
  • 254f222 chore(log): use kv stable feature rather than unstable (#3477)
  • b1439be chore: ignore cargo audit errors (#3481)
  • d157387 fix(single-instance): Yield unix listener in macos (#3466)
  • 41f6274 docs(log): some builder methods and defaults (#3460)
  • f08980f feat(log): rotate log file on each session (#3445)
  • 78df86f chore(deps): update dependency vite to v8.0.16 [security] (#3458)
  • aecec42 docs(http): fix connectTimeout option in README (#3451)
  • 0767dcb chore(deps): update dependency eslint-plugin-security to v4.0.1 (#3452)
  • 4be7690 fix(positioner): return error instead of panicking when window has no monitor...
  • Additional commits viewable in compare view

Updates tauri-plugin-single-instance from 2.4.2 to 2.4.3

Release notes

Sourced from tauri-plugin-single-instance's releases.

barcode-scanner-js v2.4.3

[2.4.3]

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-barcode-scanner@2.4.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.3kB README.md
npm notice 2.2kB dist-js/index.cjs
npm notice 1.6kB dist-js/index.d.ts
npm notice 2.1kB dist-js/index.js
npm notice 754B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-barcode-scanner
npm notice version: 2.4.3
npm notice filename: tauri-apps-plugin-barcode-scanner-2.4.3.tgz
npm notice package size: 3.4 kB
npm notice unpacked size: 10.9 kB
npm notice shasum: a401570d2698692fa6878bd816122ac3f8d7142d
npm notice integrity: sha512-y5jIRTFqCeUnc[...]cJWhCfKu6qOQA==
npm notice total files: 6
npm notice
npm notice Security Notice: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption. Learn more https://gh.io/all-npm-classic-tokens-revoked
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=804717978
+ @tauri-apps/plugin-barcode-scanner@2.4.3

barcode-scanner v2.4.3

[2.4.3]

... (truncated)

Commits
  • 06124af publish new versions (#2972)
  • 060219e chore(deps): update dependency @​rollup/plugin-typescript to v12.3.0 (#3067)
  • c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
  • d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
  • cdc7eec chore(deps): update dependency @​rollup/plugin-typescript to v12.2.0 (#3066)
  • 6314b00 chore: temp delete updater changefile
  • fb4c8ae chore(deps): update dependency typescript-eslint to v8.46.2 (#3060)
  • fccc1cf chore(deps): update eslint monorepo to v9.38.0 (#3044)
  • 3702308 chore(deps): update dependency rollup to v4.52.5 (#3043)
  • c9c8b39 chore(deps): update dependency typescript-eslint to v8.46.1 (#3025)
  • Additional commits viewable in compare view

Updates semver from 1.0.27 to 1.0.28

Release notes

Sourced from semver's releases.

1.0.28

  • Documentation improvements
Commits
  • 7625c7a Release 1.0.28
  • fd404d0 Merge pull request 351 from czy-29/master
  • f75f26e The doc_auto_cfg and doc_cfg features have been merged
  • 9e2bfa2 Enable serde on docs.rs and automatically add serde flag to the docs
  • 8591f23 Unpin CI miri toolchain
  • 66bdd2c Pin CI miri to nightly-2026-02-11
  • 324ffce Switch from cargo bench to criterion
  • 34133a5 Update actions/upload-artifact@v5 -> v6
  • 7f935ff Update actions/upload-artifact@v4 -> v5
  • c07fb91 Switch from test::black_box to std::hint::black_box
  • Additional commits viewable in compare view

Updates image from 0.25.9 to 0.25.10

Changelog

Sourced from image's changelog.

Version 0.25.10

Features:

  • Added GenericImage::copy_from_samples that can be implemented for images that can be efficiently filled from a matrix-layout of samples. Its default implementation will not defer to copy_from, consider implementing this if you specialized the latter.
  • Added GenericImageView::to_pixel_view that can be implemented to describe the buffer in terms our FlatSamples matrix layout, if applicable. This allows algorithms over generic images to run a specialized version where they can be more efficient over an raw input slice.
  • Added ImageBuffer::from_raw_bgr{,a} to efficiently byte-swap images into the RGBA layout of the buffer (#2596).
  • Added ExtendedColorType::Rgb5x1 to represent 5-bit colors as from TGA (#2609).
  • Added metadata::LoopCount and AnimationDecoder::loop_count to query if animations should repeat in a uniform manner (gif, webp, avif) (#2719, #2786).
  • load_from_memory now utilizes format detection hooks if any are applicable.

Structural changes:

  • Various changes that reduce the compile time of image on codegen by reducing the number of monomorphizations (#2804, #2800, #2807).
  • GenericImage::copy_from's default implementation tries copy_from_samples first if the source can be successfully cast with to_pixel_view.
  • <ImageBuffer as GenericImage>::copy_from is now must faster for ImageBuffer when the source implements GenericImageView::to_pixel_view.
  • <SubImage<_> as GenericImage>::copy_from inherits the previously mentioned optimizations for pixel sources when the inner type provides them. It also provides to_pixel_view based on the inner type.
  • ImageBuffer::as_flat_samples no longer requires AsRef<[P::Subpixel]> for the underlying container, just Deref (#2777).

Bug fixes:

  • Fixed a panic in TGA where indices have more bits than mapped colors (#2673).

Notable decoder changes:

  • Bump tiff to 0.11, supporting planar layout images (#2743).
  • ICC profiles can now be written for TIFF files (#2746)
  • Update ravif to 0.13, supporting EXIF (#2733).
  • Update jpeg-encoder to 0.7 bringing SIMD acceleration (#2736).
  • The pnm decoder decodes binary data quicker with fewer allocations (#2797).
  • The tga decoder handles 5-bit data and colormaps correctly (#2608, #2609).

Compatibility notes (new section):

  • Bump rust-version to 1.88.
  • Registered hooks now normalize the file extension they are registered against to ascii-lowercase. It is no longer necessary to register all such variants. This may conflate two hooks that previously hooked the same format with different casing.
Commits
  • 76e5718 Merge pull request #2836 from image-rs/version-0.25.10
  • 38b81dc Change notes for 0.25.10
  • 2fb9e61 Merge pull request #2835 from image-rs/ravif-tiff-integration
  • 4263471 Bump ravif/dav1d versions
  • a7781b3 Merge pull request #2833 from image-rs/backport-from-bgra
  • 6ea7369 Adjust bounds on from_raw_rgb
  • dd60a60 Add utility from_raw_bgr{,a} for ImageBuffer
  • 933251a Merge pull request #2832 from image-rs/backport-moxcms
  • 02c039e Update to moxcms 0.8.0 per reviewer feedback
  • 6ac2dd6 Allow moxcms 0.8.x versions
  • Additional commits viewable in compare view

Updates clipboard-rs from 0.3.4 to 0.3.5

Changelog

Sourced from clipboard-rs's changelog.

Changelog

Commits

Updates tauri-build from 2.6.1 to 2.6.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.6.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1133 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1085 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413

Crate:     atk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0416

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416


Crate:     fxhash

Version:   0.2.1

Warning:   unmaintained

Title:     fxhash - no longer maintained

Date:      2025-09-05

ID:        RUSTSEC-2025-0057

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057


Crate:     gdk

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0412

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412


Crate:     gdk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0418

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0418


Crate:     gdkwayland-sys

</tr></table>

... (truncated)

Commits

Updates cc from 1.2.65 to 1.2.67

Release notes

Sourced from cc's releases.

cc-v1.2.67

Other

  • Fix clippy warning (#1788)
  • Regenerate target info (#1785)
  • Add support for aarch64-unknown-linux-pauthtest target (#1713)
  • Fix nightly compilation error (#1783)

cc-v1.2.66

Other

  • Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
  • Support new QNX targets (#1775)
  • Add kache to the supported compiler wrappers (#1770)
Changelog

Sourced from cc's changelog.

1.2.67 - 2026-07-11

Other

  • Fix clippy warning (#1788)
  • Regenerate target info (#1785)
  • Add support for aarch64-unknown-linux-pauthtest target (#1713)
  • Fix nightly compilation error (#1783)

1.2.66 - 2026-07-05

Other

  • Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
  • Support new QNX targets (#1775)
  • Add kache to the supported compiler wrappers (#1770)
Commits

Updates tauri-codegen from 2.6.1 to 2.6.3

Release notes

Sourced from tauri-codegen's releases.

tauri-codegen v2.6.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1133 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1085 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413

Crate:     atk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0416

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416


Crate:     fxhash

Version:   0.2.1

Warning:   unmaintained

Title:     fxhash - no longer maintained

Date:      2025-09-05

ID:        RUSTSEC-2025-0057

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057


Crate:     gdk

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0412

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412


Crate:     gdk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0418

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0418


Crate:     gdkwayland-sys

</tr></table>

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the rust-dependencies group
485940d 
Bumps the rust-dependencies group in /apps/desktop/src-tauri with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [tauri-plugin-log](https://github.com/tauri-apps/plugins-workspace) | `2.8.0` | `2.9.0` |
| [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.4.2` | `2.4.3` |
| [semver](https://github.com/dtolnay/semver) | `1.0.27` | `1.0.28` |
| [image](https://github.com/image-rs/image) | `0.25.9` | `0.25.10` |
| [clipboard-rs](https://github.com/ChurchTao/clipboard-rs) | `0.3.4` | `0.3.5` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.1` | `2.6.3` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.65` | `1.2.67` |
| [tauri-codegen](https://github.com/tauri-apps/tauri) | `2.6.1` | `2.6.3` |


Updates `tauri-plugin-log` from 2.8.0 to 2.9.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.8.0...log-v2.9.0)

Updates `tauri-plugin-single-instance` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.2...fs-v2.4.3)

Updates `semver` from 1.0.27 to 1.0.28
- [Release notes](https://github.com/dtolnay/semver/releases)
- [Commits](dtolnay/semver@1.0.27...1.0.28)

Updates `image` from 0.25.9 to 0.25.10
- [Changelog](https://github.com/image-rs/image/blob/v0.25.10/CHANGES.md)
- [Commits](image-rs/image@v0.25.9...v0.25.10)

Updates `clipboard-rs` from 0.3.4 to 0.3.5
- [Release notes](https://github.com/ChurchTao/clipboard-rs/releases)
- [Changelog](https://github.com/ChurchTao/clipboard-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ChurchTao/clipboard-rs/commits)

Updates `tauri-build` from 2.6.1 to 2.6.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.6.1...tauri-build-v2.6.3)

Updates `cc` from 1.2.65 to 1.2.67
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.65...cc-v1.2.67)

Updates `tauri-codegen` from 2.6.1 to 2.6.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-codegen-v2.6.1...tauri-codegen-v2.6.3)

---
updated-dependencies:
- dependency-name: tauri-plugin-log
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tauri-plugin-single-instance
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: semver
  dependency-version: 1.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: image
  dependency-version: 0.25.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clipboard-rs
  dependency-version: 0.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tauri-build
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: cc
  dependency-version: 1.2.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tauri-codegen
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 17, 2026
@github-actions github-actions Bot added the area:tauri Tauri shell or desktop runtime changes label Jul 17, 2026
hiqiancheng
hiqiancheng approved these changes Jul 17, 2026
View reviewed changes

@hiqiancheng hiqiancheng left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Low-risk dependency bump; CI green. Approving as CODEOWNER/maintainer.

@hiqiancheng
hiqiancheng added this pull request to the merge queue Jul 17, 2026
Merged via the queue into main with commit 39d3bce Jul 17, 2026
27 checks passed
@hiqiancheng
hiqiancheng deleted the dependabot/cargo/apps/desktop/src-tauri/rust-dependencies-02185b6ad2 branch July 17, 2026 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hiqiancheng hiqiancheng hiqiancheng approved these changes

Assignees

No one assigned

Labels

area:tauri Tauri shell or desktop runtime changes dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hiqiancheng