Skip to content

chore(deps): bump the cargo-minor group across 1 directory with 3 updates - #13

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-c0c73fd0b3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-c0c73fd0b3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor group with 3 updates in the / directory: tauri, tauri-plugin-dialog and tauri-build.

Updates tauri from 2.12.4 to 2.12.5

Release notes

Sourced from tauri's releases.

tauri v2.12.5

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1348 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1044 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206

Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 4 allowed warnings found

[2.12.5]

Bug Fixes

... (truncated)

Commits

Updates tauri-plugin-dialog from 2.8.2 to 2.8.3

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.3

[2.8.3]

Dependencies

  • Upgraded to fs-js@2.7.1
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.3
npm notice filename: tauri-apps-plugin-dialog-2.8.3.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 1ef5cbd8833d50c911dedc3b50b94c6ba7ec2db5
npm notice integrity: sha512-Hd/yBfk2R5v2M[...]S+gBDNe3nHspw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253692258
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.3

dialog v2.8.3

[2.8.3]

Dependencies

... (truncated)

Commits
  • 44293a5 Publish New Versions (v2) (#3689)
  • 7550f7c chore(deps): bump rustls to 0.23.46
  • 36d8e40 feat(geolocation): support for non-GMS devices (#3377)
  • 57297f3 feat(clipboard-manager): add support for writing secrets (#3376)
  • 1ab9304 fix(opener): avoid blocking-runtime panic in reveal_item_in_dir (#3565)
  • 0e17675 fix(http): decode header values as ISO-8859-1 (#3586)
  • 62b3565 chore(deps): update quinn-proto (lockfile-only) (#3707)
  • d80b1be feat: add torch plugin for iOS and Android (#3551)
  • c91a9e6 feat(sql): add autoCreate option to Database.load (#3702)
  • 0374bec [feat] [biometric] Adding the capability of encrypting/decrypting data using ...
  • Additional commits viewable in compare view

Updates tauri-build from 2.7.3 to 2.7.4

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.4

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1348 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1044 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206

Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 4 allowed warnings found

[2.7.4]

Bug Fixes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the cargo-minor group with 3 updates in the / directory: [tauri](https://github.com/tauri-apps/tauri), [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) and [tauri-build](https://github.com/tauri-apps/tauri).


Updates `tauri` from 2.12.4 to 2.12.5
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.12.4...tauri-v2.12.5)

Updates `tauri-plugin-dialog` from 2.8.2 to 2.8.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.8.2...http-v2.8.3)

Updates `tauri-build` from 2.7.3 to 2.7.4
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.7.3...tauri-build-v2.7.4)

---
updated-dependencies:
- dependency-name: tauri
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tauri-build
  dependency-version: 2.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants