Skip to content

chore(deps): bump the cargo group across 1 directory with 10 updates#3

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-367cf220f0
Open

chore(deps): bump the cargo group across 1 directory with 10 updates#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-367cf220f0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown

Bumps the cargo group with 10 updates in the /src-tauri directory:

Package From To
tauri 1.5.4 1.6.0
bytes 1.4.0 1.12.1
h2 0.3.24 0.3.27
mio 0.8.8 0.8.11
openssl 0.10.55 0.10.81
rustix 0.37.19 0.37.28
tar 0.4.38 0.4.46
time 0.3.15 0.3.26
tokio 1.28.1 1.29.1
tracing-subscriber 0.3.17 0.3.18

Updates tauri from 1.5.4 to 1.6.0

Release notes

Sourced from tauri's releases.

tauri-build v1.5.7-edition2024.0

Updating crates.io index Locking 644 packages to latest compatible versions Adding aes-gcm v0.10.3 (available: v0.11.0) Adding base64 v0.21.7 (available: v0.22.1) Adding cargo_toml v0.22.3 (available: v1.0.0) Adding clap v3.2.25 (available: v4.6.1) Adding cocoa v0.24.1 (available: v0.26.1) Adding ctor v0.2.9 (available: v1.0.7) Adding generic-array v0.14.7 (available: v0.14.9) Adding getrandom v0.2.17 (available: v0.4.3) Adding glib v0.15.12 (available: v0.22.8) Adding gtk v0.15.5 (available: v0.18.2) Adding html5ever v0.26.0 (available: v0.39.0) Adding http v0.2.12 (available: v1.4.2) Adding hyper v0.14.32 (available: v1.10.1) Adding ico v0.4.0 (available: v0.5.0) Adding indexmap v1.9.3 (available: v2.14.0) Adding infer v0.13.0 (available: v0.19.0) Adding json-patch v2.0.0 (available: v4.2.0) Adding json5 v0.4.1 (available: v1.3.1) Adding mockito v0.31.1 (available: v1.7.2) Adding nix v0.26.4 (available: v0.31.3) Adding open v3.2.0 (available: v5.3.6) Adding phf v0.11.3 (available: v0.14.0) Adding png v0.17.16 (available: v0.18.1) Adding rand v0.8.6 (available: v0.10.1) Adding raw-window-handle v0.5.2 (available: v0.6.2) Adding reqwest v0.11.27 (available: v0.13.4) Adding rfd v0.10.0 (available: v0.17.2) Adding schemars v0.8.22 (available: v1.2.1) Adding serial_test v0.8.0 (available: v3.5.0) Adding sha2 v0.10.9 (available: v0.11.0) Adding state v0.5.3 (available: v0.6.0) Adding syn v1.0.109 (available: v2.0.118) Adding tauri-winres v0.1.1 (available: v0.3.6) Adding thiserror v1.0.69 (available: v2.0.18) Adding toml v0.7.8 (available: v1.1.2+spec-1.1.0) Adding webkit2gtk v0.18.2 (available: v2.0.2) Adding webview2-com v0.19.1 (available: v0.39.1) Adding windows v0.39.0 (available: v0.62.2) Adding wry v0.24.12 (available: v0.55.1) Adding zip v0.6.6 (available: v8.6.0)

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1146 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
</tr></table> 

... (truncated)

Commits

Updates bytes from 1.4.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

  • Fix integer overflow in BytesMut::reserve

Bytes v1.11.0

1.11.0 (November 14th, 2025)

  • Bump MSRV to 1.57 (#788)

Fixed

  • fix: BytesMut only reuse if src has remaining (#803)
  • Specialize BytesMut::put::<Bytes> (#793)
  • Reserve capacity in BytesMut::put (#794)
  • Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

  • Guarantee address in slice() for empty slices. (#780)
  • Rename Vtable::to_* -> Vtable::into_* (#776)
  • Fix latest clippy warnings (#787)
  • Ignore BytesMut::freeze doctest on wasm (#790)
  • Move drop_fn of from_owner into vtable (#801)

Bytes v1.10.1

1.10.1 (March 5th, 2025)

... (truncated)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

1.11.1 (February 3rd, 2026)

  • Fix integer overflow in BytesMut::reserve

1.11.0 (November 14th, 2025)

  • Bump MSRV to 1.57 (#788)

Fixed

  • fix: BytesMut only reuse if src has remaining (#803)
  • Specialize BytesMut::put::<Bytes> (#793)
  • Reserve capacity in BytesMut::put (#794)
  • Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

  • Guarantee address in slice() for empty slices. (#780)
  • Rename Vtable::to_* -> Vtable::into_* (#776)
  • Fix latest clippy warnings (#787)
  • Ignore BytesMut::freeze doctest on wasm (#790)
  • Move drop_fn of from_owner into vtable (#801)

1.10.1 (March 5th, 2025)

Fixed

  • Fix memory leak when using to_vec with Bytes::from_owner (#773)

... (truncated)

Commits

Updates h2 from 0.3.24 to 0.3.27

Release notes

Sourced from h2's releases.

v0.3.26

What's Changed

  • Limit number of CONTINUATION frames for misbehaving connections.

See https://seanmonstar.com/blog/hyper-http2-continuation-flood/ for more info.

v0.3.25

What's Changed

Full Changelog: hyperium/h2@v0.3.24...v0.3.25

Changelog

Sourced from h2's changelog.

0.3.27 (July 11, 2025)

  • Fix notifying wakers when detecting local stream errors.

0.3.26 (April 3, 2024)

  • Limit number of CONTINUATION frames for misbehaving connections.

0.3.25 (March 15, 2024)

  • Improve performance decoding many headers.
Commits
  • f6237ac v0.3.27
  • f61332e refactor: change local reset counter to use type system more
  • 3f1a8e3 style: fix anonymous lifetime syntax
  • 778aa7e fix: notify_recv after send_reset() in reset_on_recv_stream_err() to ensure l...
  • be10b77 ci: pin more deps for MSRV job (#817)
  • c0d9feb ci: pin deps for MSRV
  • 5ccd9cf lints: fix unexpected cfgs warnings
  • e6e3e9c fix: return a WriteZero error if frames cannot be written (#783)
  • 357127e v0.3.26
  • 1a357aa fix: limit number of CONTINUATION frames allowed
  • Additional commits viewable in compare view

Updates mio from 0.8.8 to 0.8.11

Changelog

Sourced from mio's changelog.

0.8.11

0.8.10

Added

0.8.9

Added

Fixed

Commits

Updates openssl from 0.10.55 to 0.10.81

Release notes

Sourced from openssl's releases.

openssl-v0.10.81

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.80...openssl-v0.10.81

openssl-v0.10.80

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80

openssl-v0.10.79

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

... (truncated)

Commits
  • db9c9e2 Release openssl 0.10.81 and openssl-sys 0.9.117 (#2655)
  • 3a7fb56 Bump actions/checkout from 6.0.2 to 6.0.3 (#2653)
  • d059c43 Fix verify_mode() panic on unmodeled verify mode bits (#2651)
  • 8b1519e Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string (#2652)
  • d5713d6 add mldsa.h to the boringssl bindgen (#2650)
  • 9fac317 Merge pull request #2538 from ocdlroux/feat/crl-full
  • 4dae20b x509: adding minimal support for X509CrlBuilder
  • 47f7777 Add brainpoolP224r1 and brainpoolP224t1 NID constants (#2642)
  • 659da17 Bump aws-ls-sys to 0.41 (#2640)
  • 35be7ae Release openssl 0.10.80 and openssl-sys 0.9.116 (#2639)
  • Additional commits viewable in compare view

Updates rustix from 0.37.19 to 0.37.28

Release notes

Sourced from rustix's releases.

0.37.20

  • Fix decoding of abstract unix sockets (#661)
  • Fix the fstat/statat/etc. fallback when statx fails with EPERM. (#666)
  • Add a rustix::pty module. (#673)
  • process: Add aliaseses for parent_process_death_signal (#677)
  • Fix panic on dropping RecvAncillaryBuffer after failed recvmsg (#676)
Commits

Updates tar from 0.4.38 to 0.4.46

Release notes

Sourced from tar's releases.

0.4.46

Security

See also GHSA-3cv2-h65g-fgmm

Other changes

New Contributors

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

Commits
  • fc459c1 Release 0.4.46
  • 43e05a8 ci: Add crates.io trusted publishing workflow
  • bba5666 Update repo links
  • cd94c46 docs: Document TOCTOU / concurrent-mutation threat model
  • 1b4997c builder: Expand docs for follow_symlinks and append_dir_all
  • bab14dd archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm)
  • 2349b49 Add support of absolute paths
  • 39d0311 Update some links
  • 59d803e Update astral-tokio-tar requirement from 0.5 to 0.6
  • 8296b9a ci: Fix and re-enable reverse dependency testing (#444)
  • Additional commits viewable in compare view

Updates time from 0.3.15 to 0.3.26

Release notes

Sourced from time's releases.

v0.3.26

See the changelog for details.

v0.3.25

See the changelog for details.

v0.3.24

See the changelog for details.

v0.3.23

See the changelog for details.

v0.3.22

See the changelog for details.

v0.3.21

See the changelog for details.

v0.3.20

See the changelog for details.

v0.3.19

See the changelog for details.

v0.3.18

See the changelog for details.

v0.3.17

See the changelog for details.

v0.3.16

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.26 [2023-08-18]

This release contains only a single change. serde is required to be a version prior to 1.0.171. This is due to the decision by the maintainer of serde to include pre-built binaries that are executed without the end user's knowledge. As of the time of publishing, the included binary has not even been reproduced. This is a security risk, and the time project strongly opposes this decision. While this may break some users' builds due to conflicting versions, it is a necessary step to ensure the security.

0.3.25 [2023-08-02]

Fixed

  • Methods such as Time::replace_milliseconds would panic on some out-of-range values. This has been fixed.

0.3.24 [2023-07-30]

Added

  • The subsecond component is taken into account when parsing the unix_timestamp component. If data is conflicting, the subsecond value takes precedence.
  • Parsing a Time with only the hour component is now supported. The minute and second, and subsecond components are assumed to be zero.

Changed

  • The minimum supported Rust version is now 1.67.0.
  • The debug output for Parsed has been improved.
  • When parsing, invalid values are now rejected sooner. Previously, the entire input would be parsed before being rejected in the final step. Now, invalid values are rejected as soon as they are encountered. This affects the error variant returned, which may cause minor breakage for any code (incorrectly) relying on the exact error variant.
  • When parsing a Time, an error is returned if components are present but not consecutive. For example, if hours and seconds are present, minutes will not be assumed to be zero.

Fixed

  • The implementation of Duration::checked_div could return a slightly incorrect result in some cases. This has been fixed.

0.3.23 [2023-07-08]

Added

  • Date::next_occurrence
  • Date::prev_occurrence
  • Date::nth_next_occurrence
  • Date::nth_prev_occurrence
  • Weekday::nth_prev

... (truncated)

Commits
  • 500f8e4 Remove support for serde with pre-built binaries
  • a98fe2d v0.3.25 release
  • b74ebe8 Use new feature of deranged
  • d671910 Avoid panicking on out-of-range value
  • cdc85da v0.3.24 release
  • 227b6f8 Gate methods as necessary
  • 8060100 Fix implementation of Duration::checked_div
  • a9fea9f Use ranged integers internally for Duration
  • 04936ee Use ensure_ranged! for UtcOffset
  • 7e95cb2 Use ranged integers internally for Time
  • Additional commits viewable in compare view

Updates tokio from 1.28.1 to 1.29.1

Release notes

Sourced from tokio's releases.

Tokio v1.29.1

Fixed

  • rt: fix nesting two block_in_place with a block_on between (#5837)

#5837: tokio-rs/tokio#5837

Tokio v1.29.0

Technically a breaking change, the Send implementation is removed from runtime::EnterGuard. This change fixes a bug and should not impact most users.

Breaking

  • rt: EnterGuard should not be Send (#5766)

Fixed

  • fs: reduce blocking ops in fs::read_dir (#5653)
  • rt: fix possible starvation (#5686, #5712)
  • rt: fix stacked borrows issue in JoinSet (#5693)
  • rt: panic if EnterGuard dropped incorrect order (#5772)
  • time: do not overflow to signal value (#5710)
  • fs: wait for in-flight ops before cloning File (#5803)

Changed

  • rt: reduce time to poll tasks scheduled from outside the runtime (#5705, #5720)

Added

  • net: add uds doc alias for unix sockets (#5659)
  • rt: add metric for number of tasks (#5628)
  • sync: implement more traits for channel errors (#5666)
  • net: add nodelay methods on TcpSocket (#5672)
  • sync: add broadcast::Receiver::blocking_recv (#5690)
  • process: add raw_arg method to Command (#5704)
  • io: support PRIORITY epoll events (#5566)
  • task: add JoinSet::poll_join_next (#5721)
  • net: add support for Redox OS (#5790)

Unstable

  • rt: add the ability to dump task backtraces (#5608, #5676, #5708, #5717)
  • rt: instrument task poll times with a histogram (#5685)

#5766: tokio-rs/tokio#5766 #5653: tokio-rs/tokio#5653 #5686: tokio-rs/tokio#5686 #5712: tokio-rs/tokio#5712

... (truncated)

Commits
  • 1b1b9dc chore: prepare Tokio v1.29.1 release
  • 012c848 rt: fix nesting block_in_place with block_on (#5837)
  • 48c5576 chore: prepare Tokio v1.29.0 release (#5826)
  • 657fd88 task: add guarantee about when a spawned task may be polled (#5816)
  • 6b076a2 fs: wait for in-flight ops before cloning File (#5803)
  • 910a1e2 io: fix futures_io::AsyncSeek implementaion for Compat (#5783)
  • 6d25a00 fs: update cfg attr in fs::read_dir (#5806)
  • 78bf8a9 sync: replace Poll::Ready with Ready (#5815)
  • b8af5aa task: add spawn_blocking methods to JoinMap (#5797)
  • 2e62374 rt: pad the task struct to avoid false sharing (#5809)
  • Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.17 to 0.3.18

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.18

This release of tracing-subscriber adds support for the NO_COLOR environment variable (an informal standard to disable emitting ANSI color escape codes) in fmt::Layer, reintroduces support for the chrono crate, and increases the minimum supported Rust version (MSRV) to Rust 1.63.0.

It also introduces several minor API improvements.

Added

  • chrono: Add chrono implementations of FormatTime (#2690)
  • subscriber: Add support for the NO_COLOR environment variable in fmt::Layer (#2647)
  • fmt: make format::Writer::new() public (#2680)
  • filter: Implement layer::Filter for Option<Filter> (#2407)

Changed

  • log: bump version of tracing-log to 0.2 (#2772)
  • Increased minimum supported Rust version (MSRV) to 1.63.0+.

#2690: tokio-rs/tracing#2690 #2647: tokio-rs/tracing#2647 #2680: tokio-rs/tracing#2680 #2407: tokio-rs/tracing#2407 #2772: tokio-rs/tracing#2772

Thanks to @​shayne-fletcher, @​dmlary, @​kaifastromai, and @​jsgf for contributing!

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the cargo group with 10 updates in the /src-tauri directory:

| Package | From | To |
| --- | --- | --- |
| [tauri](https://github.com/tauri-apps/tauri) | `1.5.4` | `1.6.0` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.4.0` | `1.12.1` |
| [h2](https://github.com/hyperium/h2) | `0.3.24` | `0.3.27` |
| [mio](https://github.com/tokio-rs/mio) | `0.8.8` | `0.8.11` |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.55` | `0.10.81` |
| [rustix](https://github.com/bytecodealliance/rustix) | `0.37.19` | `0.37.28` |
| [tar](https://github.com/composefs/tar-rs) | `0.4.38` | `0.4.46` |
| [time](https://github.com/time-rs/time) | `0.3.15` | `0.3.26` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.28.1` | `1.29.1` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.17` | `0.3.18` |



Updates `tauri` from 1.5.4 to 1.6.0
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v1.5.4...tauri-v1.6)

Updates `bytes` from 1.4.0 to 1.12.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.4.0...v1.12.1)

Updates `h2` from 0.3.24 to 0.3.27
- [Release notes](https://github.com/hyperium/h2/releases)
- [Changelog](https://github.com/hyperium/h2/blob/v0.3.27/CHANGELOG.md)
- [Commits](hyperium/h2@v0.3.24...v0.3.27)

Updates `mio` from 0.8.8 to 0.8.11
- [Release notes](https://github.com/tokio-rs/mio/releases)
- [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/mio@v0.8.8...v0.8.11)

Updates `openssl` from 0.10.55 to 0.10.81
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.55...openssl-v0.10.81)

Updates `rustix` from 0.37.19 to 0.37.28
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v0.37.19...v0.37.28)

Updates `tar` from 0.4.38 to 0.4.46
- [Release notes](https://github.com/composefs/tar-rs/releases)
- [Commits](composefs/tar-rs@0.4.38...0.4.46)

Updates `time` from 0.3.15 to 0.3.26
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.15...v0.3.26)

Updates `tokio` from 1.28.1 to 1.29.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.28.1...tokio-1.29.1)

Updates `tracing-subscriber` from 0.3.17 to 0.3.18
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.17...tracing-subscriber-0.3.18)

---
updated-dependencies:
- dependency-name: tauri
  dependency-version: 1.6.0
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: bytes
  dependency-version: 1.12.1
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: h2
  dependency-version: 0.3.27
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: mio
  dependency-version: 0.8.11
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: openssl
  dependency-version: 0.10.81
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: rustix
  dependency-version: 0.37.28
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: tar
  dependency-version: 0.4.46
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: time
  dependency-version: 0.3.26
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.29.1
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: tracing-subscriber
  dependency-version: 0.3.18
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants