chore(deps): bump the cargo-minor-patch group in /src-tauri with 3 updates by dependabot[bot] · Pull Request #922 · MWBMPartners/MeedyaDL

dependabot · 2026-06-08T07:37:22Z

Bumps the cargo-minor-patch group in /src-tauri with 3 updates: configparser, chrono and log.

Updates configparser from 3.1.0 to 3.2.0

Release notes

v3.2.0

What's Changed

Update README.md to include example of overriding defaults by @maggiemoss in QEDK/configparser-rs#55

Enhancement: option to disable inline comments by @mixmastamyk in QEDK/configparser-rs#57

Add support function to read configuration from stream (std::io::Read) by @radkum in QEDK/configparser-rs#58

Add cascading defaults as an IniDefault option by @crustymonkey in QEDK/configparser-rs#59

New Contributors

@maggiemoss made their first contribution in QEDK/configparser-rs#55

@mixmastamyk made their first contribution in QEDK/configparser-rs#57

@radkum made their first contribution in QEDK/configparser-rs#58

@crustymonkey made their first contribution in QEDK/configparser-rs#59

Full Changelog: QEDK/configparser-rs@v3.1.0...v3.2.0

Commits

501c1a8 fix: unbump version, was already bumped
69347b9 chore: update some links
6e42147 feat: bump version and remove changelog
d541e35 Cargo fmt
8365de1 Fix a comment line for set_cascade_defaults()
9d5c558 Add tests after setting cascade_defaults to false
4f8969f Completed the implementation of cascading defaults
624bed3 fix: replace install with action
f3ed2e8 fix: fix doctest for load_from_stream()
948a606 chore: update .gitignore
Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in chronotope/chrono#1787

tz_data: fix tzdata locations on Android by @caruschalalamove in chronotope/chrono#1789

Commits

1703382 Prepare 0.4.45 release
881f9ab tz_data: fix tzdata locations on Android
f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
120686c Bump codecov/codecov-action from 5 to 6
See full diff in compare view

Updates log from 0.4.30 to 0.4.32

Release notes

Sourced from log's releases.

0.4.32

What's Changed

Support Value -> string conversions with kv + std features instead of kv_std by @tisonkun in rust-lang/log#729

Prepare for 0.4.32 release by @KodrAus in rust-lang/log#730

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

fix typos in kv compile errors and log documentation by @Isvane in rust-lang/log#726

Leverage static str key when possible by @tisonkun in rust-lang/log#727

Prepare for 0.4.31 release by @KodrAus in rust-lang/log#728

New Contributors

@Isvane made their first contribution in rust-lang/log#726

Full Changelog: rust-lang/log@0.4.30...0.4.31

Changelog

Sourced from log's changelog.

[0.4.32] - 2026-06-04

What's Changed

Support Value -> string conversions with kv + std features instead of kv_std by @tisonkun in rust-lang/log#729

Full Changelog: rust-lang/log@0.4.31...0.4.32

[0.4.31] - 2026-06-02

What's Changed

Leverage static str key when possible by @tisonkun in rust-lang/log#727

New Contributors

@Isvane made their first contribution in rust-lang/log#726

Full Changelog: rust-lang/log@0.4.30...0.4.31

Commits

a5b5b21 Merge pull request #730 from rust-lang/cargo/0.4.32
c8d3b12 prepare for 0.4.32 release
ce6cd9f Merge pull request #729 from tisonkun/kv-std-support
20b3b05 drop cfg-feature=kv as it is already met
7bc1200 kv::std_support may not need value-bag
5808392 Merge pull request #728 from rust-lang/cargo/0.4.31
86d739f prepare for 0.4.31 release
c906cfb Merge pull request #727 from tisonkun/leverage-static-str-key-when-possible
756c279 leverage str literal as well
3dd250d rename Key::from_static_str to from_str_static
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-minor-patch group in /src-tauri with 3 updates: [configparser](https://github.com/QEDK/configparser-rs), [chrono](https://github.com/chronotope/chrono) and [log](https://github.com/rust-lang/log). Updates `configparser` from 3.1.0 to 3.2.0 - [Release notes](https://github.com/QEDK/configparser-rs/releases) - [Commits](QEDK/configparser-rs@v3.1.0...v3.2.0) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `log` from 0.4.30 to 0.4.32 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.30...0.4.32) --- updated-dependencies: - dependency-name: configparser dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: log dependency-version: 0.4.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-08T07:37:40Z

PR Security Checks

✅ No heuristic or consistency findings on this PR.
_{Generated by .github/workflows/pr-security.yml. Non-blocking — the merge gate is ci.yml. Cross-source checks live in tools/audit-checks/ and run locally. False positives are expected.}

…chrono 0.4.44→0.4.45 + log 0.4.30→0.4.32 Mirrors the upstream dependabot bumps from #921 + #922 (both originally targeted `main`). Applied here to the alpha line so the consolidated CI-fix branch carries the same patch-level versions. #921 + #922 land separately on main via their dependabot PRs.

…) (#919) ## What's in this PR PR #919 grew from a focused CI-stability patch into the full M9 Spotify integration backend + UI. All work landed on this single branch per the consolidated-PR direction; the original CI consolidation is the foundation everything else builds on. ### CI / infrastructure (original PR scope) | Commit | Subject | |---|---| | `849ae6d3` | `release.yml` same-channel `PREV_TAG` + alpha/beta/RC `git push` rebase-on-conflict retry (5 attempts, 0–4 s jitter) — fixes the `body is too long` failure that hit alpha.17/19/20 and the alpha.16↔17 lost-cut race | | `d1fe7216`, `87502f96` | Original `upstream-gamdl-watch.yml` SHA rotation + daily cadence (superseded by M9-1's generalised `upstream-engine-watch.yml`) | | `2760812a` | Merge of original PR #918 (closed as superseded) | | `3f70a0c3` | Dep bumps mirroring dependabot PRs #921 + #922 against alpha: `i18next` 26.3.0→26.3.1, `configparser` 3.1.0→3.2.0, `chrono` 0.4.44→0.4.45, `log` 0.4.30→0.4.32 | | `8681743f` | Merge of alpha (carries M9-1 #920) — resolved by accepting the generalised engine watcher | ### M9 Spotify integration — backend | Commit | Layer | |---|---| | `ac730ab3` | **M9-2** — Full `votify_service` + `VotifyOptions` 35-field CLI table + real `VotifyFeature` gates (`DesktopAacAndMp4Flac` 1.9.5+, `UpcTag` 1.9.7+) | | `16f4f9d1` | **M9-3** — Cross-platform best-cover-art picker (Apple Music + Spotify oEmbed; highest-resolution wins; Apple Music tie-break on equal pixel area) | | `2b72f418` | **M9-4** — Anti-ban backend: `AntiBanSettings` model, `compute_playback_throttle_delay` / `compute_inter_track_delay` (pure functions), `DailyCapCounter` with local-midnight rollover, 4 IPC commands, `DispatchGateOutcome` enum | | `6065fc20` | **M9-5** — `start_download` accepts `open.spotify.com`, runs the dispatch gate at IPC entry, `SpotifySettings` session-type fields, `increment_counter` helper | | `5096fe1e` | **M9-6** — Session-artifact dispatch gate (`MissingSpotifyDll` + `MissingWvd` outcomes), `check_session_artifacts` validator, `.wvd` kept first-class for non-Windows FLAC | | `b3358d82` | **M9-7** — Queue dispatch fork to votify with cancellation polling + queue-aware progress events + partial-success detection + crash-restore gate re-eval. Defensive guards on 3 Apple-Music-only post-dispatch helpers. Best-effort manifest write | ### M9 Spotify integration — frontend | Commit | Layer | |---|---| | `54938230` | **M9-UI** — Spotify Settings tab + first-run consent modal + `RiskPill` 3-tier visual cue. Hybrid design from a 2-agent design tournament + adversarial judge | ## Verification * `cargo check --lib` — clean * `cargo clippy --lib -- -D warnings` — clean * `cargo test --lib` — **1411 passed**, 1 ignored, 0 failed (+~80 new tests across the M9 layers) * `tsc --noEmit` — clean * `npm run lint` — clean * Vitest — **550 / 550 passed** ## Multi-agent quality posture The two largest pieces (M9-7 queue refactor + M9-UI design) shipped via parallel discovery → synthesis → adversarial-critique workflows. The M9-7 critique surfaced three ship-blockers (broken cancel button, frozen queue row, silent partial-success) — all addressed in the final implementation. The M9-UI verdict picked a hybrid design (utilitarian base + targeted safety borrowings) over either pure design. ## Anti-ban posture preserved * Default `playback_speed_throttle_enabled = true` — the flagship mitigation can't be silently regressed. * `daily_download_cap = 100` default; `0` is the explicit "unlimited" sentinel and requires consent + dev access to set. * Dev-access gate + first-run consent modal both required before any Spotify URL can dispatch. * IPC-layer gate + per-item dispatch-time gate re-eval closes the crash-restore loophole. * Settings tab destructive-edit confirmations (throttle off, cap = 0) name the specific risk before applying. ## Deferred to follow-ups | Item | Reason | |---|---| | Per-track throttle integration (`compute_playback_throttle_delay` between tracks) | Needs per-track stdout parsing of votify output — M9-8 | | Per-track counter increment | Same — currently per-batch enforcement allows cap overshoot | | Spotify-aware metadata pre-fetch (queue-row artist/album from track 1) | M9-9 — needs a Spotify metadata API client | | Best-cover-art queue integration | M9-9 alongside Spotify metadata pre-fetch | | Multi-ingest gate wiring (HistoryPage, LibraryScanPage, drag/drop, clipboard) | DownloadForm convergence covers the common case; rest is a polish PR | | `help/spotify-account-risk.md` doc | Separate help-doc PR | | i18n for Spotify copy | Alongside the broader M9 localisation pass | ## Outstanding before merge * Per-PR security review (pre-PR security checklist from the standing memory) — flag any non-trivial findings. * Maintainer review of the consent-modal copy and the Settings UI tab.

dependabot Bot added the dependencies Dependency updates label Jun 8, 2026

Salem874 mentioned this pull request Jun 9, 2026

M9: Spotify integration backend + UI + alpha CI/dep consolidation (#101) #919

Merged

Salem874 merged commit 228c5a7 into main Jun 9, 2026
12 checks passed

Salem874 deleted the dependabot/cargo/src-tauri/main/cargo-minor-patch-9d666e39a4 branch June 9, 2026 08:29

Salem874 mentioned this pull request Jun 15, 2026

chore(deps): mirror PR #930 dependency bumps to alpha #931

Closed

2 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the cargo-minor-patch group in /src-tauri with 3 updates#922

chore(deps): bump the cargo-minor-patch group in /src-tauri with 3 updates#922
Salem874 merged 1 commit into
mainfrom
dependabot/cargo/src-tauri/main/cargo-minor-patch-9d666e39a4

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

github-actions Bot commented Jun 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026

v3.2.0

What's Changed

New Contributors

0.4.45

What's Changed

0.4.32

What's Changed

0.4.31

What's Changed

New Contributors

[0.4.32] - 2026-06-04

What's Changed

[0.4.31] - 2026-06-02

What's Changed

New Contributors

Uh oh!

github-actions Bot commented Jun 8, 2026

PR Security Checks

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant