build(deps): bump the rust group with 8 updates by dependabot[bot] · Pull Request #163 · agentdesktop-dev/agentdesktop

dependabot · 2026-10-14T21:19:18Z

Bumps the rust group with 8 updates:

Package	From	To
hyper	`1.11.1`	`1.12.0`
protox	`0.9.1`	`0.10.0`
serde_json	`1.0.151`	`1.0.154`
uuid	`1.27.0`	`1.28.0`
rust-embed	`8.12.0`	`8.13.0`
tauri	`2.12.1`	`2.12.3`
tauri-plugin-single-instance	`2.5.2`	`2.5.3`
tauri-build	`2.7.1`	`2.7.3`

Updates hyper from 1.11.1 to 1.12.0

Release notes

Sourced from hyper's releases.

v1.12.0

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Everything

docs: fix typo responsibile -> responsible by @vaibhav8a in hyperium/hyper#4177

style: replace single-character lifetime names with descriptive names by @dox4 in hyperium/hyper#4173

refactor(http1): resolve collapsible_match lint by @nakaryo716 in hyperium/hyper#4178

hyper Improvement Proposals by @seanmonstar in hyperium/hyper#4131

perf(body): simpler custom Incoming channel by @seanmonstar in hyperium/hyper#4168

docs(maintainers): add 0x676e67 as a collaborator by @seanmonstar in hyperium/hyper#4184

fix(ext): remove broken OriginalHeaderOrder doctest by @cratelyn in hyperium/hyper#4188

build(deps): remove unused futures-channel from http1 feature by @0x676e67 in hyperium/hyper#4185

chore(ci): update to cargo-check-external-types 0.5.0 by @tottoto in hyperium/hyper#4189

style(lib): address ignored_unit_patterns lint by @nakaryo716 in hyperium/hyper#4193

Preserve hop-by-hop when setting close or keep-alive by @dtolnay in hyperium/hyper#4196

fix(http2): do not reserve capacity for idle Upgraded streams by @Dev-next-gen in hyperium/hyper#4198

style(lib): Address clippy panics and missing_panics_doc lints by @Siech0 in hyperium/hyper#4191

docs: fix typos in capi README, MSRV and governance docs by @toyeshhm in hyperium/hyper#4204

style(lib): Address trivial, low quantity clippy lints. by @Siech0 in hyperium/hyper#4190

chore(clippy): allow clippy lints following 1.99.0 release by @dswij in hyperium/hyper#4219

style: remove useless_borrows_in_formatting from the clippy allowlist by @ump45nose in hyperium/hyper#4220

style(h1): mark partial Debug impls as non-exhaustive by @badimalex in hyperium/hyper#4218

style(lib): Address cast-possible-truncation clippy findings. by @Siech0 in hyperium/hyper#4192

feat(http1): add max_header_size limit for server and client by @Aditya-9-6 in hyperium/hyper#4183

fix(http1): let a Connection close token win over a later keep-alive by @shoemoney in hyperium/hyper#4201

fix(http1): always remove content-length if transfer-encoding is sent by @seanmonstar in hyperium/hyper#4223

fix(http1): remove invalid content-length if transfer-encoding is auto-added by @seanmonstar in hyperium/hyper#4224

fix(http1): withdraw a stale want when the client dispatcher takes a request by @shodoco in hyperium/hyper#4208

perf(body): skip waking a closed peer when a channel end drops by @0x676e67 in hyperium/hyper#4225

Prepare v1.12.0 by @seanmonstar in hyperium/hyper#4226

New Contributors

@vaibhav8a made their first contribution in hyperium/hyper#4177

@dox4 made their first contribution in hyperium/hyper#4173

@dtolnay made their first contribution in hyperium/hyper#4196

@Dev-next-gen made their first contribution in hyperium/hyper#4198

@Siech0 made their first contribution in hyperium/hyper#4191

@toyeshhm made their first contribution in hyperium/hyper#4204

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.12.0 (2026-10-06)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

Commits

7f67699 v1.12.0
254bf12 perf(body): skip waking a closed peer when a channel end drops (#4225)
c44f1cc fix(http1): withdraw a stale want when the client dispatcher takes a request ...
69396fd fix(http1): remove content-length if transfer-encoding is auto-added (#4224)
a5d7fd7 fix(http1): always remove content-length if transfer-encoding is sent (#4223)
5dadff7 fix(http1): let a Connection close token win over a later keep-alive (#4201)
d1cd14e feat(http1): add max_header_size limit for server and client (#4183)
714c7cf style(lib): address cast-possible-truncation clippy findings (#4192)
0d47440 style(lib): mark partial Debug impls as non-exhaustive (#4218)
da3b1b1 style(lib): remove useless_borrows_in_formatting from the clippy allowlist (#...
Additional commits viewable in compare view

Updates protox from 0.9.1 to 0.10.0

Changelog

Sourced from protox's changelog.

0.10.0 - 2026-10-07

Fixed

Fixed a stack overflow vulnerability when parsing deeply nested proto files. The maximum allowed nesting depth is now limited to 32 (#106).

Other

The MSRV is now 1.85.

Commits

847875c chore: release (#108)
0d85d7a Update changelog
496532c Limit message nesting depth in the parser (#106)
38d3126 Update MSRV (#107)
3e33003 Update MSRV to 1.80
7221880 Fix clippy lints
762d018 Update similar-asserts
8da8909 Bump logos and prost-reflect to newer versions to remove old beef dependency ...
See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates uuid from 1.27.0 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

Add optional serde format adapters by @RanaPriyansh in uuid-rs/uuid#916

Prepare for 1.28.0 release by @KodrAus in uuid-rs/uuid#918

New Contributors

@RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

Commits

276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
4b3b9f5 prepare for 1.28.0 release
cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
784a022 Inline expected tokens in optional compact serde test
a5678c3 Simplify optional serde adapter tests to option tokens
638a518 Refactor optional serde adapter tests and share byte wrapper
654fa5b Add optional serde format adapters
See full diff in compare view

Updates rust-embed from 8.12.0 to 8.13.0

Updates tauri from 2.12.1 to 2.12.3

Release notes

Sourced from tauri's releases.

tauri v2.12.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1296 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1092 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

5b23c82 apply version updates (#16243)
05354a8 chore(deps): update swift-rs to 1.0.9
c48e1ca fix(ios): make @_cdecl entry points public so release builds link on Xcode ...
eeeaa0f fix(nsis): block downgrades in silent, passive and update modes (#16230)
0204f6f fix(api): keep Channel messages flowing after the handler throws (#16244)
7fcd8a7 fix(ci): retry switching to the Android webview context in e2e (#16239)
fd319dd chore(deps): update base64 to 0.23
413cbdb Apply Version Updates From Current Changes (#16213)
587ae48 chore: disable CODEOWNERS file (#16236)
a98038e fix: menu append doesn't take options like MenuItemOptions (#16235)
Additional commits viewable in compare view

Updates tauri-plugin-single-instance from 2.5.2 to 2.5.3

Release notes

Sourced from tauri-plugin-single-instance's releases.

single-instance v2.5.3

[2.5.3]

818d2e04 (#3645) On Windows, a second instance no longer waits indefinitely for a first instance that stopped processing messages: it stops waiting after 10 seconds and exits. The first instance may still receive the arguments once it resumes processing messages.

323fe80d (#3644) A second instance no longer panics when a command-line argument is not valid Unicode: such an argument is forwarded with its invalid parts replaced by U+FFFD. A working directory that is not valid Unicode is now forwarded the same way instead of as an empty string.
Updating crates.io index
   Packaging tauri-plugin-single-instance v2.5.3 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Updating crates.io index
warning: package `yoke-derive v0.8.3` in Cargo.lock is yanked in registry `crates-io`
  |
  = help: consider updating to a version that is not yanked
    Packaged 15 files, 170.3KiB (46.5KiB compressed)
   Uploading tauri-plugin-single-instance v2.5.3 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Uploaded tauri-plugin-single-instance v2.5.3 to registry `crates-io`
note: waiting for tauri-plugin-single-instance v2.5.3 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-single-instance v2.5.3 at registry `crates-io`
barcode-scanner-js v2.5.3

[2.5.3]

d80b1be2 (#3551 by @bizkda) On Android, expose the camera bound by an active scan so the torch plugin can turn the flash on and off during a scan.

b3e52ce0 (#3571 by @ghostshreyash) Fix cancel() on Android leaving the pending scan() promise unsettled: destroy() cleared the saved invoke before it was rejected, so the "cancelled" rejection never reached the caller. The pending scan is now rejected before the camera is torn down, matching iOS.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-barcode-scanner@2.5.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.3kB README.md
npm notice 5.3kB dist-js/index.cjs
npm notice 5.3kB dist-js/index.d.ts
npm notice 5.2kB dist-js/index.js
npm notice 755B package.json
npm notice Tarball Details
</tr></table> 

... (truncated)

Commits

06124af publish new versions (#2972)
060219e chore(deps): update dependency @rollup/plugin-typescript to v12.3.0 (#3067)
c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
cdc7eec chore(deps): update dependency @rollup/plugin-typescript to v12.2.0 (#3066)
6314b00 chore: temp delete updater changefile
fb4c8ae chore(deps): update dependency typescript-eslint to v8.46.2 (#3060)
fccc1cf chore(deps): update eslint monorepo to v9.38.0 (#3044)
3702308 chore(deps): update dependency rollup to v4.52.5 (#3043)
c9c8b39 chore(deps): update dependency typescript-eslint to v8.46.1 (#3025)
Additional commits viewable in compare view

Updates tauri-build from 2.7.1 to 2.7.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1314 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1045 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 4 allowed warnings found

[2.7.3]

Enhancements

... (truncated)

Commits

59b63ab Apply Version Updates From Current Changes (#16255)
55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
744ff2b chore(deps): bump rustls to 0.23.46
c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
dc637db chore: add missing api change file (#16260)
b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust group with 8 updates: | Package | From | To | | --- | --- | --- | | [hyper](https://github.com/hyperium/hyper) | `1.11.1` | `1.12.0` | | [protox](https://github.com/andrewhickman/protox) | `0.9.1` | `0.10.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [uuid](https://github.com/uuid-rs/uuid) | `1.27.0` | `1.28.0` | | rust-embed | `8.12.0` | `8.13.0` | | [tauri](https://github.com/tauri-apps/tauri) | `2.12.1` | `2.12.3` | | [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.5.2` | `2.5.3` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.7.1` | `2.7.3` | Updates `hyper` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.11.1...v1.12.0) Updates `protox` from 0.9.1 to 0.10.0 - [Release notes](https://github.com/andrewhickman/protox/releases) - [Changelog](https://github.com/andrewhickman/protox/blob/main/CHANGELOG.md) - [Commits](andrewhickman/protox@protox-v0.9.1...protox-v0.10.0) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `uuid` from 1.27.0 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.27.0...v1.28.0) Updates `rust-embed` from 8.12.0 to 8.13.0 Updates `tauri` from 2.12.1 to 2.12.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.12.1...tauri-v2.12.3) Updates `tauri-plugin-single-instance` from 2.5.2 to 2.5.3 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.5.2...http-v2.5.3) Updates `tauri-build` from 2.7.1 to 2.7.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.7.1...tauri-build-v2.7.3) --- updated-dependencies: - dependency-name: hyper dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: protox dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: rust-embed dependency-version: 8.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: tauri dependency-version: 2.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: tauri-plugin-single-instance dependency-version: 2.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: tauri-build dependency-version: 2.7.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 14, 2026

peterj approved these changes Oct 15, 2026

View reviewed changes

peterj merged commit c477772 into main Oct 15, 2026
3 checks passed

peterj approved these changes Oct 15, 2026

View reviewed changes

dependabot Bot deleted the dependabot/cargo/rust-67d44cd92c branch October 15, 2026 17:24

Navigation Menu

Repository navigation

build(deps): bump the rust group with 8 updates - #163

build(deps): bump the rust group with 8 updates#163
peterj merged 1 commit into
mainfrom
dependabot/cargo/rust-67d44cd92c

dependabot Bot commented on behalf of github Oct 14, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026

v1.12.0

Features

Bug Fixes

Everything

New Contributors

v1.12.0 (2026-10-06)

Bug Fixes

Features

0.10.0 - 2026-10-07

Fixed

Other

v1.0.154

v1.0.153

v1.0.152

v1.28.0

What's Changed

New Contributors

tauri v2.12.3

single-instance v2.5.3

[2.5.3]

barcode-scanner-js v2.5.3

[2.5.3]

tauri-build v2.7.3

[2.7.3]

Enhancements

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant