[dependabot]

Bumps the minor-and-patch group in /apps/desktop/src-tauri with 2 updates: mongodb and redis.

Updates mongodb from 3.9.1 to 3.10.0

Release notes

Sourced from mongodb's releases.

v3.10.0

The MongoDB Rust driver team is pleased to announce the v3.10.0 release of the mongodb crate, now available for download from crates.io.

[!IMPORTANT] This is a security patch release for CVE-2026-120673. Upgrading is recommended for all users.

Highlighted Changes

Fix: plaintext in Opentelemetry db.query.text attribute

This release fixes a bug that caused query documents to be recorded in Opentelemetry before automatic encryption was applied, potentially exposing the message plaintext.

Required version-to-name mapping in client metadata

Previous versions of the driver would allow the character '|' in client metadata; in order to preserve the mapping between versions and names in the final message, this is now not allowed and attempting to set or add metadata containing this character will result in an error.

MSRV increase to 1.94.1

This version of the driver now requires a minimum Rust compiler version of 1.94.1.

Full Release Notes

Impactful changes are listed below; for a complete list of changes see this GitHub query.

New Features

• RUST-2497 Add a validator callback for SRV DNS queries (#1818)

Improvements

• RUST-2453 Remove unnecessary dependencies (#1798)
• RUST-2517 Reduce buffer usage in OP_MSG parsing (#1801)
• RUST-2478 Enforce version-to-name mapping in client metadata (#1806)
• RUST-2468 Update getMore span nesting and cursor id recording (#1804)
• RUST-2480 Add the 'error.type' attribute to opentelemetry spans (#1811)
• Update to edition 2024 (#1824) (thanks @​FalkWoldmann!)
• minor: avoid allocating unused buffers on connection check-in (#1830) (thanks @​tomerab1!)
• minor: bump MSRV to 1.94.1 (#1839)
• Fix cancelled connection checkouts delaying queued requests (#1838) (thanks @​janvotava!)
• RUST-2535 Implement Clone for InsertManyResult (#1848) (thanks @​connorsmacd!)

Bugfixes

• RUST-2525 encrypt before recording span
• RUST-2479 Report write concern errors for dropIndexes (#1817)
• RUST-2523 Percent-encode URI string components (#1825)
• Fix SCRAM short server nonce panic and cap iteration count (#1833) (thanks @​cozyGarage!)
• RUST-2526 Fix invalid extended JSON deserialization in errInfo field (#1832)
• RUST-2523 Fix more discrepancies between ConnectionString::parse and ::to_string (#1836)

Commits

• 454e128 RUST-2525 encrypt before recording span (#1856)
• 5740cdd RUST-2496 Bump version number to 3.10.0 (#1854)
• 1342ea4 RUST-2528 Update evergreen tasks to macos-15 (#1851)
• 58dffc9 minor: bump clippy to 1.99.1 (#1849)
• 73a08fe RUST-2535 Implement Clone for InsertManyResult (#1848)
• f6a6d1d RUST-2460 Drop prefixPreview / suffixPreview / substringPreview (#1847)
• 17f40ec RUST-2413 remove pre-4.2 references in tests (#1844)
• f4ab4e1 RUST-2527 Test write concern error reporting (#1840)
• 4d4964d RUST-2509 Fix flaky retryable handshake tests (#1845)
• 3beed21 minor: update dependencies past advisories (#1846)
• Additional commits viewable in compare view

Updates redis from 1.8.0 to 1.8.1

Release notes

Sourced from redis's releases.

redis-1.8.1

Changes & Bug fixes

• fix(streams): read radix_tree_keys from XINFO STREAM's radix-tree-keys (#2522 by @​LindseyZ1205)
• Skip pending pubsub messages when leaving RESP2 pubsub mode (#2535 by @​varun3257)
• Apply every key and flush invalidation to the client-side cache (#2536 by @​varun3257)
• Don't let push messages consume skipped replies after a read timeout (#2538 by @​varun3257)

Commits

• d8863e6 Prepare version (#2540)
• f716fd8 build(deps): bump rustls from 0.23.45 to 0.23.46 (#2534)
• 9af617c Don't let push messages consume skipped replies after a read timeout (#2517)
• e358353 Apply every key and flush invalidation to the client-side cache (#2508)
• 055768b skip pending pubsub messages when leaving RESP2 pubsub mode (#2531)
• 164fab9 fix(streams): read radix_tree_keys from XINFO STREAM's radix-tree-keys (#2522)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
mydevtools-tech	Ready	Preview	Nov 9, 2026 8:30am UTC