Skip to content

chore(deps): bump the rust-minor-and-patch group across 1 directory with 7 updates - #32

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/rust-minor-and-patch-d18e559f8e
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/rust-minor-and-patch-d18e559f8e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown

Bumps the rust-minor-and-patch group with 7 updates in the /src-tauri directory:

Package From To
tauri 2.12.4 2.12.5
tauri-plugin-dialog 2.8.3 2.8.4
tauri-plugin-updater 2.14.0 2.14.1
uuid 1.28.0 1.29.0
webpki-roots 1.0.10 1.0.11
redis 1.7.1 1.8.1
tauri-build 2.7.3 2.7.4

Updates tauri from 2.12.4 to 2.12.5

Release notes

Sourced from tauri's releases.

tauri v2.12.5

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1348 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1044 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206

Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 4 allowed warnings found

[2.12.5]

Bug Fixes

... (truncated)

Commits

Updates tauri-plugin-dialog from 2.8.3 to 2.8.4

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.4

[2.8.4]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.4
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.4
npm notice filename: tauri-apps-plugin-dialog-2.8.4.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 994ee0f6a1a440a1b9f47bd7b03886d082b76c41
npm notice integrity: sha512-+6ZOiXenOaxXw[...]kWGej4a7dC4lw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3529333044
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.4

dialog v2.8.4

[2.8.4]

... (truncated)

Commits
  • 1281906 publish new versions (#3712)
  • 52fa775 chore(deps): update rust crate rand to 0.10 (#3738)
  • 1331ca4 chore(deps): update rust crate rfd to 0.17 (#3737)
  • 385f60c chore(deps): update rust crate base64 to 0.23 (#3515)
  • 8e04d30 chore(deps): update dependency @​tauri-apps/cli to v2.12.4 (#3717)
  • 34ed7d3 chore(deps): update dependency @​rollup/plugin-terser to v1.0.2 (#3733)
  • c75459d chore(deps): update dependency rollup to v4.64.12 (#3715)
  • df59420 chore(deps): update webpki-roots crates (lockfile-only) (#3723)
  • 11211c3 fix(window-state): stop macOS overlay windows changing size on every restore ...
  • f36ba7b feat(notification): add Android chronometer support (#3282)
  • Additional commits viewable in compare view

Updates tauri-plugin-updater from 2.14.0 to 2.14.1

Release notes

Sourced from tauri-plugin-updater's releases.

updater-js v2.14.1

[2.14.1]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.14.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 7.1kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.14.1
npm notice filename: tauri-apps-plugin-updater-2.14.1.tgz
npm notice package size: 4.9 kB
npm notice unpacked size: 25.5 kB
npm notice shasum: f1ae182e36409a7d32cdfbfc897b1c848b7ff94d
npm notice integrity: sha512-Hr7nlBm1wT6xb[...]35UqnbrQxmYQw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3529335775
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-updater@2.14.1

updater v2.14.1

[2.14.1]

... (truncated)

Commits
  • 1281906 publish new versions (#3712)
  • 52fa775 chore(deps): update rust crate rand to 0.10 (#3738)
  • 1331ca4 chore(deps): update rust crate rfd to 0.17 (#3737)
  • 385f60c chore(deps): update rust crate base64 to 0.23 (#3515)
  • 8e04d30 chore(deps): update dependency @​tauri-apps/cli to v2.12.4 (#3717)
  • 34ed7d3 chore(deps): update dependency @​rollup/plugin-terser to v1.0.2 (#3733)
  • c75459d chore(deps): update dependency rollup to v4.64.12 (#3715)
  • df59420 chore(deps): update webpki-roots crates (lockfile-only) (#3723)
  • 11211c3 fix(window-state): stop macOS overlay windows changing size on every restore ...
  • f36ba7b feat(notification): add Android chronometer support (#3282)
  • Additional commits viewable in compare view

Updates uuid from 1.28.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits
  • 4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
  • a3631fd prepare for 1.29.0 release
  • 304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
  • d49f963 Reuse existing version tests for NonNilUuid constructors
  • 2f02404 Add versioned constructors to NonNilUuid
  • See full diff in compare view

Updates webpki-roots from 1.0.10 to 1.0.11

Release notes

Sourced from webpki-roots's releases.

1.0.11

Track CCADB removal of further eMudhra CAs: "emSign Root CA - C1" and "emSign ECC Root CA - C3": https://bugzilla.mozilla.org/show_bug.cgi?id=2083709

What's Changed

New Contributors

Full Changelog: rustls/webpki-roots@v/1.0.10...v/1.0.11

Commits

Updates redis from 1.7.1 to 1.8.1

Release notes

Sourced from redis's releases.

redis-1.8.1

Changes & Bug fixes

redis-1.8.0

Changes & Bug fixes

CI & operational improvements

Commits
  • d8863e6 Prepare version (#2540)
  • f716fd8 build(deps): bump rustls from 0.23.45 to 0.23.46 (#2534)
  • 9af617c Don't let push messages consume skipped replies after a read timeout (#2517)
  • e358353 Apply every key and flush invalidation to the client-side cache (#2508)
  • 055768b skip pending pubsub messages when leaving RESP2 pubsub mode (#2531)
  • 164fab9 fix(streams): read radix_tree_keys from XINFO STREAM's radix-tree-keys (#2522)
  • fec5ef0 Prepare version 1.8.0 (#2507)
  • 9758f38 sentinel: ask the next sentinel when one has no valid master for the name (#2...
  • 1d666d1 fix(connection-manager, cluster): await all confirmations of subscription com...
  • a61f735 fix(types): forward num_of_args and describe_numeric_behavior for Cow (#2500)
  • Additional commits viewable in compare view

Updates tauri-build from 2.7.3 to 2.7.4

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.4

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1348 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1044 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206

Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 4 allowed warnings found

[2.7.4]

Bug Fixes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 7 updates

Bumps the rust-minor-and-patch group with 7 updates in the /src-tauri directory:

| Package | From | To |
| --- | --- | --- |
| [tauri](https://github.com/tauri-apps/tauri) | `2.12.4` | `2.12.5` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.8.3` | `2.8.4` |
| [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.14.0` | `2.14.1` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.28.0` | `1.29.0` |
| [webpki-roots](https://github.com/rustls/webpki-roots) | `1.0.10` | `1.0.11` |
| [redis](https://github.com/redis-rs/redis-rs) | `1.7.1` | `1.8.1` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.7.3` | `2.7.4` |



Updates `tauri` from 2.12.4 to 2.12.5
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.12.4...tauri-v2.12.5)

Updates `tauri-plugin-dialog` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.8.3...dialog-v2.8.4)

Updates `tauri-plugin-updater` from 2.14.0 to 2.14.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@updater-v2.14.0...updater-v2.14.1)

Updates `uuid` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.28.0...v1.29.0)

Updates `webpki-roots` from 1.0.10 to 1.0.11
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/1.0.10...v/1.0.11)

Updates `redis` from 1.7.1 to 1.8.1
- [Release notes](https://github.com/redis-rs/redis-rs/releases)
- [Commits](redis-rs/redis-rs@redis-1.7.1...redis-1.8.1)

Updates `tauri-build` from 2.7.3 to 2.7.4
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.7.3...tauri-build-v2.7.4)

---
updated-dependencies:
- dependency-name: tauri
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: tauri-plugin-updater
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-and-patch
- dependency-name: webpki-roots
  dependency-version: 1.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
- dependency-name: redis
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-and-patch
- dependency-name: tauri-build
  dependency-version: 2.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026
@dependabot
dependabot Bot requested a review from FabioHAraujo as a code owner November 2, 2026 17:12
@dependabot dependabot Bot added the rust Pull requests that update rust code label Nov 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants