[dependabot]

Bumps the linux-app group in /apps/linux with 5 updates:

Package	From	To
glib	0.20.12	0.22.10
russh	0.63.1	0.63.3
rand	0.10.2	0.10.3
thiserror	2.0.20	2.0.21
uniffi	0.32.0	0.32.2

Updates glib from 0.20.12 to 0.22.10

Release notes

Sourced from glib's releases.

0.22.10

BiagioFesta:
      gio: Disconnect the cancelled handler when Cancellable::future() is dropped
      gio: Disconnect the cancelled handler when CancellableFuture is done
      gio: Connect the cancelled handler only once per CancellableFuture
Colin Kinloch:

glib: Add From<Cow<'a, B>> for Variant
Sebastian Dröge:

Update gir-files

Regenerate with latest gir-files

glib: Fix allocation size calculation in boxed inline to_glib_full_from_slice()

glib: Fix to_glib_container() to actually work by simply calling g_list_copy()

glib: Fix PtrSlice::from(Slice) on empty ptr slices

ci: Switch to typos main branch from master

Update Cargo.lock

Update versions to 0.22.10
Sungjin Kim:

glib: Fix double-free in StrV::clear() by writing NULL terminator

0.22.9

Bilal Elmoussaoui:
      Bump syn to 3.0
Sebastian Dröge:

Update gir / gir-files

Regenerate with latest gir / gir-files

Fix some Rust 1.97 clippy warnings

deny: Allow duplicated syn 2.0 dependency

cairo-sys: Update to system-deps 8

pango: Add new enums

pango: Add bindings for new width attribute

pangocairo: Add new pango RenderComponent API

pango: Add v1_58 feature

pangocairo: Mark cairo context parameter as const

gio: Manually implement new UnixFDList API with correct types

glib: Add new nanosecond timeout source API

glib-macros: Use TypeFlags::empty() instead of ::NONE

glib: Use RegexMatchFlags::empty() instead of DEFAULT

gio: Only require gio 2.89 for v2_90

gio: Only return the result from spawn_blocking() from the task completion callback

glib: Drain any remaining, pending sources after MainContext::block_on()

gio: Fix new 1.98 clippy warning

cairo: Update to system-deps 9

Update Cargo.lock

</tr></table>

... (truncated)

Commits

• 08a30b9 Update versions to 0.22.10
• 04fb73b Update versions to 0.22.9
• 95a861b Update Cargo.lock
• 9da3959 gio: Connect the cancelled handler only once per CancellableFuture
• b14ab0e gio: Disconnect the cancelled handler when CancellableFuture is done
• 9061f0a gio: Disconnect the cancelled handler when Cancellable::future() is dropped
• 221f7a7 glib: Add From\<Cow<'a, B>> for Variant
• 8a1b9ef ci: Switch to typos main branch from master
• 5258ca2 glib: Fix PtrSlice::from(Slice) on empty ptr slices
• a59c176 glib: Fix to_glib_container() to actually work by simply calling g_list_copy()
• Additional commits viewable in compare view

Updates russh from 0.63.1 to 0.63.3

Release notes

Sourced from russh's releases.

v0.63.3

Fixes

• c13b259: enforce inactivity timeout even during stalled writes (Eugene)

v0.63.2

Security fixes

GHSA-g4mp-vgx3-xrvm - out-of-bounds read in pageant

A malicious Pageant agent could cause an out-of-bounds read / oversized allocation in the pageant library user.

GHSA-35g8-35p8-c8fw - unbounded memory allocation in server

An authenticated client could trigger unbounded memory allocation during rekey phase

Fixes

• client: encode the negotiated hash algorithm for RSA certificates (#764) #764 (Jeongkyu Shin)
• 4206815: Fix pty-req terminal modes: deliver them unpadded, encode the right l… (#755) (tluyben) #755
• b1d3893: fixed #762 - redact sensitive data from debug logging (Eugene)
• 66789f4: fixed #761 - data write split across a kex breaks (Eugene)
• a04e1b5: fixed #758 - fail RSA signing explicitly when RSA feature is not enabled (Eugene)
• 422123c: dedup zlib compress loop into compress_into (Eugene)

Commits

• f33baf4 v0.63.3
• c13b259 enforce inactivity timeout if even during stalled writes
• 8a51a0d v0.63.2
• 422123c dedup zlib compress loop into compress_into
• a04e1b5 fixed #758 - fail RSA signing explicitly when RSA feature is not enabled
• af91598 fmt
• b1d3893 fixed #762 - redact sensitive data from debug logging
• a282af3 fix rekey message queueing
• 5d56698 fix read bounds in pageant
• 675b631 bump num-bigint
• Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

• Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
• Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
• Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

• Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

• 9e7d328 Prepare rand 0.10.3 (#1840)
• f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
• ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
• c994eb1 docs: fix angle unit in quick start example (#1839)
• 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
• 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
• bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
• 521fab6 Stop pinning dependencies (#1820)
• 3f7c433 Stop pinning dependencies
• cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
• Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Updates uniffi from 0.32.0 to 0.32.2

Changelog

Sourced from uniffi's changelog.

v0.32.2 (backend crates: v0.32.2) - (2026-09-22)

What's Fixed

• Kotlin: prevent compiler warnings in generated code (#2949)

All changes in v0.32.2.

v0.32.1 (backend crates: v0.32.1) - (2026-09-08)

What's Fixed

• Kotlin: Fixed checksum failure on aarch64 (#2935)

All changes in v0.32.1.

Commits

• 7bc621e chore: Release
• 0f1506d chore: Release
• 69aa9a1 Merge pull request #2998 from bendk/bdk/push-xtomqpwpszuv
• 3eb8c2d Kotlin: stop emitting unused expressions in generated bindings
• 35a4743 chore: Release
• 1f25db6 chore: Release
• 2a8331b fix(kotlin): Make sure uniffiCheckApiChecksums compares against the rust gene...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions