chore(deps): bump the cargo-minor-patch group across 1 directory with 18 updates by dependabot[bot] · Pull Request #1040 · xiaolai/vmark

dependabot · 2026-06-16T23:06:04Z

Bumps the cargo-minor-patch group with 16 updates in the /src-tauri directory:

Package	From	To
tauri-plugin-opener	`2.5.2`	`2.5.4`
tauri-plugin-fs	`2.4.5`	`2.5.1`
tauri-plugin-dialog	`2.6.0`	`2.7.1`
tauri-plugin-shell	`2.3.4`	`2.3.5`
tauri-plugin-updater	`2.9.0`	`2.10.1`
log	`0.4.29`	`0.4.33`
serde_json	`1.0.147`	`1.0.150`
uuid	`1.19.0`	`1.23.4`
regex	`1.12.2`	`1.12.4`
tokio	`1.48.0`	`1.50.0`
tokio-util	`0.7.17`	`0.7.18`
futures-util	`0.3.31`	`0.3.32`
chrono	`0.4.42`	`0.4.45`
tauri-plugin-store	`2.4.2`	`2.4.3`
tempfile	`3.24.0`	`3.27.0`
objc2	`0.6.3`	`0.6.4`

Updates tauri-plugin-opener from 2.5.2 to 2.5.4

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.5.4

[2.5.4]

c1fd33b3 (#3343 by @Legend-Master) Fix revealItemInDir/reveal_items_in_dir can't reveal network paths like \\wsl.localhost\Ubuntu\etc on Windows

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.5.4
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.5.4
npm notice filename: tauri-apps-plugin-opener-2.5.4.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: b37883e4d36125b8c5a0c74f683395958a65bd7d
npm notice integrity: sha512-1HnPkb+AmgO29[...]aUJtT57lfO9CQ==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1429011743
+ @tauri-apps/plugin-opener@2.5.4

opener v2.5.4

[2.5.4]

c1fd33b3 (#3343 by @Legend-Master) Fix revealItemInDir/reveal_items_in_dir can't reveal network paths like \\wsl.localhost\Ubuntu\etc on Windows

... (truncated)

Commits

e7a68fa publish new versions (#3068)
b5550a3 chore: temp delete updater changefile
93426f8 fix: fix docsrs builds
4ee61e0 Revert "chore: temp delete updater changefile"
06124af publish new versions (#2972)
060219e chore(deps): update dependency @rollup/plugin-typescript to v12.3.0 (#3067)
c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
cdc7eec chore(deps): update dependency @rollup/plugin-typescript to v12.2.0 (#3066)
6314b00 chore: temp delete updater changefile
Additional commits viewable in compare view

Updates tauri-plugin-fs from 2.4.5 to 2.5.1

Release notes

Sourced from tauri-plugin-fs's releases.

fs-js v2.5.1

[2.5.1]

ec054013 (#3323 by @renovate) Updated dependency toml from 0.9 to 1

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-fs@2.5.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.4kB README.md
npm notice 32.8kB dist-js/index.cjs
npm notice 32.6kB dist-js/index.d.ts
npm notice 32.0kB dist-js/index.js
npm notice 697B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-fs
npm notice version: 2.5.1
npm notice filename: tauri-apps-plugin-fs-2.5.1.tgz
npm notice package size: 21.5 kB
npm notice unpacked size: 101.5 kB
npm notice shasum: e1b8643d41c74251699fcdecc800877d18a4a6fc
npm notice integrity: sha512-9Lz+Jopp6QyeE[...]tqPB/XEMS3NhQ==
npm notice total files: 6
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1429011689
+ @tauri-apps/plugin-fs@2.5.1

fs v2.5.1

[2.5.1]

ec054013 (#3323 by @renovate) Updated dependency toml from 0.9 to 1

</tr></table>

... (truncated)

Commits

5c7668b publish new versions (#3397)
ec05401 chore(deps): update rust crate toml to v1 (#3323)
b86e999 chore(deps): update tauri packages to 2.11 (#3407)
c463d8a chore(deps): update rustls-webpki in lockfile, ignore core2 in audit (#3405)
1bb7beb chore(deps): bump openssl (#3402)
3412fa2 docs(readme): fix platform support matrix (opener supports mobile)
af81fda docs(readme): fix platform support matrix (mobile is supported)
c1fd33b fix(opener): allow open network share locations (#3343)
250857b chore(deps): update dependency typescript to v6 (#3363)
964e13f fix(store): dead lock trying to set while exiting (#3395)
Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.6.0 to 2.7.1

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.7.1

[2.7.1]

Dependencies

Upgraded to fs-js@2.5.1

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.1
npm notice filename: tauri-apps-plugin-dialog-2.7.1.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: fc83387de807c8d064d2b64b1b813b84e8286a12
npm notice integrity: sha512-OK1UBXYt+ojcm[...]FmEOjIY9IhzOQ==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1429011725
+ @tauri-apps/plugin-dialog@2.7.1

dialog v2.7.1

[2.7.1]

Dependencies

Upgraded to fs-js@2.5.1

... (truncated)

Commits

e7a68fa publish new versions (#3068)
b5550a3 chore: temp delete updater changefile
93426f8 fix: fix docsrs builds
4ee61e0 Revert "chore: temp delete updater changefile"
06124af publish new versions (#2972)
060219e chore(deps): update dependency @rollup/plugin-typescript to v12.3.0 (#3067)
c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
cdc7eec chore(deps): update dependency @rollup/plugin-typescript to v12.2.0 (#3066)
6314b00 chore: temp delete updater changefile
Additional commits viewable in compare view

Updates tauri-plugin-shell from 2.3.4 to 2.3.5

Release notes

Sourced from tauri-plugin-shell's releases.

persisted-scope v2.3.5

[2.3.5]

Dependencies

Upgraded to fs@2.4.5

Updating crates.io index
   Packaging tauri-plugin-persisted-scope v2.3.5 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/persisted-scope)
    Updating crates.io index
    Packaged 12 files, 185.2KiB (83.8KiB compressed)
   Uploading tauri-plugin-persisted-scope v2.3.5 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/persisted-scope)
    Uploaded tauri-plugin-persisted-scope v2.3.5 to registry `crates-io`
note: waiting for tauri-plugin-persisted-scope v2.3.5 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-persisted-scope v2.3.5 at registry `crates-io`

shell-js v2.3.5

[2.3.5]

bug

d4613ff0 (#3234) Make sidecars work in tests. Executable resolution is aware of the "deps" directory.

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-shell@2.3.5
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 15.4kB dist-js/index.cjs
npm notice 10.0kB dist-js/index.d.ts
npm notice 15.3kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
</tr></table>

... (truncated)

Commits

d6a3898 Publish New Versions (v2) (#3268)
2e5bcdf chore(deps): fix audits (#3373)
4374b4f chore(notification): remove unused dev-deps (#3372)
f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
2c0883e chore(deps): update dependency vite to v8 (#3346)
024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
Additional commits viewable in compare view

Updates tauri-plugin-updater from 2.9.0 to 2.10.1

Release notes

Sourced from tauri-plugin-updater's releases.

updater-js v2.10.1

[2.10.1]

31ab6f8d (#3285 by @hrzlgnm) fix: preserve file extension of updater package, otherwise users may get confused when presented with a sudo dialog suggesting to install a file with the extension .rpm using dpkg -i

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.10.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.1kB README.md
npm notice 2.6kB dist-js/index.cjs
npm notice 2.3kB dist-js/index.d.ts
npm notice 2.6kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.10.1
npm notice filename: tauri-apps-plugin-updater-2.10.1.tgz
npm notice package size: 3.7 kB
npm notice unpacked size: 12.1 kB
npm notice shasum: ea0efd766890394b6c719b9fc21de7da0029c69c
npm notice integrity: sha512-NFYMg+tWOZPJd[...]Y1WVCNHnh3eRA==
npm notice total files: 6
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1235993797
+ @tauri-apps/plugin-updater@2.10.1

updater v2.10.1

[2.10.1]

31ab6f8d (#3285 by @hrzlgnm) fix: preserve file extension of updater package, otherwise users may get confused when presented with a sudo dialog suggesting to install a file with the extension .rpm using dpkg -i

</tr></table>

... (truncated)

Commits

d6a3898 Publish New Versions (v2) (#3268)
2e5bcdf chore(deps): fix audits (#3373)
4374b4f chore(notification): remove unused dev-deps (#3372)
f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
2c0883e chore(deps): update dependency vite to v8 (#3346)
024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
Additional commits viewable in compare view

Updates log from 0.4.29 to 0.4.33

Release notes

Sourced from log's releases.

0.4.32

What's Changed

Support Value -> string conversions with kv + std features instead of kv_std by @tisonkun in rust-lang/log#729

Prepare for 0.4.32 release by @KodrAus in rust-lang/log#730

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

fix typos in kv compile errors and log documentation by @Isvane in rust-lang/log#726

Leverage static str key when possible by @tisonkun in rust-lang/log#727

Prepare for 0.4.31 release by @KodrAus in rust-lang/log#728

New Contributors

@Isvane made their first contribution in rust-lang/log#726

Full Changelog: rust-lang/log@0.4.30...0.4.31

0.4.30

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Changelog

Sourced from log's changelog.

[0.4.33] - 2026-06-20

What's Changed

Fixed key comparison by @matteo-zeggiotti-ok in rust-lang/log#732

New Contributors

@matteo-zeggiotti-ok made their first contribution in rust-lang/log#732

Full Changelog: rust-lang/log@0.4.32...0.4.33

[0.4.32] - 2026-06-04

What's Changed

Support Value -> string conversions with kv + std features instead of kv_std by @tisonkun in rust-lang/log#729

Full Changelog: rust-lang/log@0.4.31...0.4.32

[0.4.31] - 2026-06-02

What's Changed

Leverage static str key when possible by @tisonkun in rust-lang/log#727

New Contributors

@Isvane made their first contribution in rust-lang/log#726

Full Changelog: rust-lang/log@0.4.30...0.4.31

[0.4.30] - 2026-05-21

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Commits

f405739 Merge pull request #734 from rust-lang/cargo/0.4.33
6a24abf prepare for 0.4.33 release
87e0621 Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparison
a9b5711 Review: fallback to the &str hash
cc89cc6 Review: fixed other comparisons
920e7dc Review: fixed comparison on MaybeStaticStr
0d71d3c Fixed key comparison
a5b5b21 Merge pull request #730 from rust-lang/cargo/0.4.32
c8d3b12 prepare for 0.4.32 release
ce6cd9f Merge pull request #729 from tisonkun/kv-std-support
Additional commits viewable in compare view

Updates serde_json from 1.0.147 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

v1.0.149

Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @b41sh)

v1.0.148

Update zmij dependency to 1.0

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates uuid from 1.19.0 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

v1.23.3

What's Changed

Fix up parser panic on empty input by @KodrAus in uuid-rs/uuid#886

Prepare for 1.23.3 release by @KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

v1.23.2

What's Changed

Improve error messages for ambiguous formats by @KodrAus in uuid-rs/uuid#882

Prepare for 1.23.2 release by @KodrAus in uuid-rs/uuid#883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

v1.23.1

What's Changed

Remove deprecated msrv feature from wasm-bindgen dependency by @guybedford in uuid-rs/uuid#877

fix: Timestamp::from_gregorian deprecation note by @aznashwan in uuid-rs/uuid#878

Prepare for 1.23.1 release by @KodrAus in uuid-rs/uuid#879

New Contributors

@guybedford made their first contribution in uuid-rs/uuid#877

@aznashwan made their first contribution in uuid-rs/uuid#878

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

v1.23.0

What's Changed

feat: add support for 'hyphenated' format in the serde module by @FrenchDilettante in uuid-rs/uuid#865

Fix a number of bugs in time-related code by @KodrAus in uuid-rs/uuid#872

Reword invalid char error message by @KodrAus in uuid-rs/uuid#873

Impl cleanups by @KodrAus in uuid-rs/uuid#874

Use LazyLock to synchronize v1/v6 context initialization by @KodrAus in uuid-rs/uuid#875

Prepare for 1.23.0 release by @KodrAus in uuid-rs/uuid#876

New Contributors

@FrenchDilettante made their first contribution in uuid-rs/uuid#865

... (truncated)

Commits

3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
cba53d0 prepare for 1.23.4 release
e347af4 Merge pull request #889 from frostyplanet/main
e9bf55c doc: Fix broken link warnings
5351af4 doc: Enable feature flag label for docs.rs
1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
c9619f6 fix up name of fuzz script in readme
20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
62232ca prepare for 1.23.3 release
2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
Additional commits viewable in compare view

Updates regex from 1.12.2 to 1.12.4

Changelog

Sourced from regex's changelog.

1.12.4 (2025-06-09)

This release includes a performance optimization for compilation of regexes with very large character classes.

Improvements:

#1308: Avoid re-canonicalizing the entire interval set when pushing new class ranges.

1.12.3 (2025-02-03)

This release excludes some unnecessary things from the archive published to crates.io. Specifically, fuzzing data and various shell scripts are now excluded. If you run into problems, please file an issue.

Improvements:

#1319: Switch from a Cargo exclude list to an include list, and exclude some unnecessary stuff.

Commits

7b96fdc 1.12.4
7b89cf0 deps: update to regex-syntax 0.8.11
1401679 regex-syntax-0.8.11
d709000 changelog: 1.12.4
9825c74 syntax: avoid re-canonicalizing the entire IntervalSet on push (#1308)
a7f2ff6 docs: clarify regex-lite word boundaries
2c7b172 docs: clarify unsupported Anchored::Pattern searches
839d16b regex-syntax-0.8.10
c4865a0 syntax: fix negation handling in HIR translation
d8761c0 cargo: also include benches
Additional commits viewable in compare view

Updates tokio from 1.48.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

net: add TcpStream::set_zero_linger (#7837)

rt: add is_rt_shutdown_err (#7771)

Changed

io: add optimizer hint that memchr returns in-bounds pointer (#7792)

io: implement vectored writes for write_buf (#7871)

runtime: panic when event_interval is set to 0 (#7838)

runtime: shorten default thread name to fit in Linux limit (#7880)

signal: remember the result of SetConsoleCtrlHandler (#7833)

signal: specialize windows Registry (#7885)

Fixed

io: always cleanup AsyncFd registration list on deregister (#7773)

macros: remove (most) local use declarations in tokio::select! (#7929)

net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)

runtime: avoid redundant unpark in current_thread scheduler (#7834)

runtime: don't park in current_thread if before_park defers waker (#7835)

io: fix write readiness on ESP32 on short writes (#7872)

runtime: wake deferred tasks before entering block_in_place (#7879)

sync: drop rx waker when oneshot receiver is dropped (#7886)

runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

fs: check for io-uring opcode support (#7815)

runtime: avoid lock acquisition after uring init (#7850)

Documented

docs: update outdated unstable features section (#7839)

io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)

io: explain how to flush stdout/stderr (#7904)

io: fix incorrect and confusing AsyncWrite documentation (#7875)

rt: clarify the documentation of Runtime::spawn (#7803)

rt: fix missing quotation in docs (#7925)

runtime: correct the default thread name in docs (#7896)

runtime: fix event_interval doc (#7932)

sync: clarify RwLock fairness documentation (#7919)

sync: clarify that recv returns None once closed and no more messages (#7920)

task: clarify when to use spawn_blocking vs dedicated threads (#7923)

task: doc that task drops before JoinHandle completion (#7825)

signal: guarantee that listeners never return None (#7869)

task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

0273e45 chore: prepare Tokio v1.50.0 (#7934)
e3ee4e5 chore: prepare tokio-macros v2.6.1 (#7943)
8c980ea io: add write_all_vectored to tokio-util (#7768)
e35fd6d ci: fix patch during clippy step (#7935)
03fe44c runtime: fix event_interval doc (#7932)
d18e5df io: fix race in Mock::poll_write (#7882)
f21f269 runtime: fix race condition during the blocking pool shutdown (#7922)
d81e8f0 macros: remove (most) local use declarations in tokio::select! (#7929)
25e7f26 rt: fix missing quotation in docs (#7925)
e1a91ef util: fix typo in docs (#7926)
Additional commits viewable in compare view

Updates tokio-util from 0.7.17 to 0.7.18

Commits

9cc02cc chore: prepare tokio-util 0.7.18 (#7829)
d2799d7 task: improve the docs of Builder::spawn_local (#7828)
4d4870f task: doc that task drops before JoinHandle completion (#7825)
fdb1509 fs: check for io-uring opcode support (#7815)
426a562 rt: remove allow(dead_code) after JoinSet stabilization (#7826)
e3b89bb chore: prepare Tokio v1.49.0 (#7824)
4f577b8 Merge 'tokio-1.47.3' into 'master'
f320197 chore: prepare Tokio v1.47.3 (#7823)
ea6b144 ci: freeze rustc on nightly-2025-01-25 in netlify.toml (#7652)
264e703 Merge tokio-1.43.4 into tokio-1.47.x (#7822)
Additional commits viewable in compare view

Updates futures-util from 0.3.31 to 0.3.32

Release notes

Sourced from futures-util's releases.

0.3.32

Bump MSRV of utility crates to 1.71. (#2989)

Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#2925)

Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#2929)

Add FuturesOrdered::clear (#2927)

Add mpsc::*Receiver::recv (#2947)

Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#2944)

Implement FusedStream for sink::With (#2948)

Add no_std support for shared (#2868)

Make Mutex::new() const (#2956)

Add #[clippy::has_significant_drop] to guards (#2967)

Remove dependency to pin-utils (#2929)

Remove dependency on num_cpus (#2946)

Performance improvements (#2983)

Documentation improvements (#2925, #2926, #2940, #2971)

Changelog

Sourced from futures-util's changelog.

0.3.32 - 2026-02-15

Bump MSRV of utility crates to 1.71. (#2989)

Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#2925)

Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#2929)

Add FuturesOrdered::clear (#2927)

Add mpsc::*Receiver::recv (#2947)

Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#2944)

Implement FusedStream for sink::With (#2948)

Add no_std support for shared (#2868)

Make Mutex::new() const (

xiaolai · 2026-06-27T01:18:52Z

@dependabot recreate

… 18 updates Bumps the cargo-minor-patch group with 16 updates in the /src-tauri directory: | Package | From | To | | --- | --- | --- | | [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.2` | `2.5.4` | | [tauri-plugin-fs](https://github.com/tauri-apps/plugins-workspace) | `2.4.5` | `2.5.1` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.6.0` | `2.7.1` | | [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.4` | `2.3.5` | | [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.9.0` | `2.10.1` | | [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.33` | | [serde_json](https://github.com/serde-rs/json) | `1.0.147` | `1.0.150` | | [uuid](https://github.com/uuid-rs/uuid) | `1.19.0` | `1.23.4` | | [regex](https://github.com/rust-lang/regex) | `1.12.2` | `1.12.4` | | [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.50.0` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.17` | `0.7.18` | | [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.31` | `0.3.32` | | [chrono](https://github.com/chronotope/chrono) | `0.4.42` | `0.4.45` | | [tauri-plugin-store](https://github.com/tauri-apps/plugins-workspace) | `2.4.2` | `2.4.3` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.24.0` | `3.27.0` | | [objc2](https://github.com/madsmtm/objc2) | `0.6.3` | `0.6.4` | Updates `tauri-plugin-opener` from 2.5.2 to 2.5.4 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.2...http-v2.5.4) Updates `tauri-plugin-fs` from 2.4.5 to 2.5.1 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.5...fs-v2.5.1) Updates `tauri-plugin-dialog` from 2.6.0 to 2.7.1 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@log-v2.6.0...log-v2.7.1) Updates `tauri-plugin-shell` from 2.3.4 to 2.3.5 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.4...nfc-v2.3.5) Updates `tauri-plugin-updater` from 2.9.0 to 2.10.1 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@updater-v2.9.0...updater-v2.10.1) Updates `log` from 0.4.29 to 0.4.33 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.29...0.4.33) Updates `serde_json` from 1.0.147 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.147...v1.0.150) Updates `uuid` from 1.19.0 to 1.23.4 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.19.0...v1.23.4) Updates `regex` from 1.12.2 to 1.12.4 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.2...1.12.4) Updates `tokio` from 1.48.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.50.0) Updates `tokio-util` from 0.7.17 to 0.7.18 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.17...tokio-util-0.7.18) Updates `futures-util` from 0.3.31 to 0.3.32 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.31...0.3.32) Updates `chrono` from 0.4.42 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.42...v0.4.45) Updates `tauri-plugin-store` from 2.4.2 to 2.4.3 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.2...fs-v2.4.3) Updates `tempfile` from 3.24.0 to 3.27.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.24.0...v3.27.0) Updates `libc` from 0.2.178 to 0.2.186 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.186/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.178...0.2.186) Updates `objc2` from 0.6.3 to 0.6.4 - [Commits](madsmtm/objc2@objc2-0.6.3...objc2-0.6.4) Updates `tauri-build` from 2.5.3 to 2.6.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.5.3...tauri-build-v2.6.3) --- updated-dependencies: - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: futures-util dependency-version: 0.3.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: libc dependency-version: 0.2.186 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: log dependency-version: 0.4.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: objc2 dependency-version: 0.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: regex dependency-version: 1.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tauri-build dependency-version: 2.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tauri-plugin-dialog dependency-version: 2.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tauri-plugin-fs dependency-version: 2.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tauri-plugin-opener dependency-version: 2.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tauri-plugin-shell dependency-version: 2.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tauri-plugin-store dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tauri-plugin-updater dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tempfile dependency-version: 3.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tokio-util dependency-version: 0.7.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.23.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

…globals 17) + cargo minor/patch group Verified with full `pnpm check:all` (lint, build, coverage, sidecar, content-server, size) + `cargo check` + 728 Rust tests. - @vitejs/plugin-react 4 → 5, globals 16 → 17: drop-in (dev/build only, no bundle impact). Replaces #1048, #1054. - eslint-plugin-react-hooks 5 → 7: v7 folded the React Compiler rule set into `recommended`, flagging 67 pre-existing sites (set-state-in-effect, refs, manual-memoization, immutability). Adopting those is a deliberate codebase refactor, not a version bump — so they're deferred in eslint.config.js (documented) to preserve the prior enforcement level, and exhaustive-deps is pinned to its historical `warn`. Replaces #1050. - cargo minor/patch updates within semver (`cargo update`): reproduces the cargo-minor-patch group (#1040), which failed as a blind bump against a stale base. Compiles clean + all Rust tests pass. Note: the root npm minor/patch group (#1045) is intentionally NOT swept in here — it carries a mermaid 11.12→11.16 (+~800 kB lazy chunk) and tiptap 3.18→3.27 growth that trips the size gate and warrants a separate, conscious decision rather than an automatic limit bump. Left to dependabot.

xiaolai · 2026-06-27T02:32:38Z

Superseded by #1062, which performs this upgrade correctly (verified: full check:all + cargo tests) and folds it into the consolidated dependency-majors PR.

dependabot · 2026-06-27T02:32:41Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

…h, done correctly) (#1062) * chore(deps): upgrade rust-i18n 3→4, dirs 5→6, toml 0.8→0.9 All three are drop-in for VMark's usage — verified locally with `cargo check` + 728 passing tests: - rust-i18n 4: the 3→4 breaking changes are all trait-level (custom Backend impls + the dropped once_cell re-export). We use only the i18n!/t! macros and set_locale, which are unchanged. MSRV 1.80 is satisfied. - dirs 6: home_dir() is unchanged (our only call); we never use config_dir, so its macOS churn is irrelevant. - toml 0.9: we parse into toml::Table (not Value, sidestepping the FromStr-now-parses-values break) and use to_string_pretty (signature unchanged). Resolves to 0.9.10 — the +spec-1.1.0 suffix is build metadata on the published 0.9.10, not a separate preview track. Completes the intent of dependabot #1044 / #1042 / #1043, which failed as blind bumps, done correctly with verification. * chore(deps): upgrade JS majors — i18next 26, lucide-react 1, zod 4 (mcp), react-i18next 16.6 Done correctly with the code migrations dependabot's blind bumps couldn't do. Verified with the full `pnpm check:all` (tsc, lint, sidecar + content-server tests, build, coverage, size). - i18next 25 → 26: `initImmediate` was removed; renamed back to `initAsync` (same semantics). src/i18n.ts updated. react-i18next bumped 16.5 → 16.6 (peer `>= 25.10.9` admits i18next 26). - lucide-react 0.562 → 1.x: v1 removed all brand icons. AboutSettings imported the now-removed `Github`, so it ships the GitHub mark as a local inline SVG (GithubMark.tsx) matching the lucide render contract. All other 74 icons resolve unchanged. Settings-page size limit nudged 94 → 95 kB for the SVG. - zod 3 → 4 (vmark-mcp-server): single-arg `z.record()` was removed; cli.ts now passes an explicit key schema (`z.record(z.string(), z.unknown())`). The MCP SDK 1.27.1 peers `^3.25 || ^4.0`, so zod 4 is accepted. Completes the intent of dependabot #1052 / #1046 / #1037 / #1047. * chore(deps): dev-tooling majors (vite-plugin-react 5, react-hooks 7, globals 17) + cargo minor/patch group Verified with full `pnpm check:all` (lint, build, coverage, sidecar, content-server, size) + `cargo check` + 728 Rust tests. - @vitejs/plugin-react 4 → 5, globals 16 → 17: drop-in (dev/build only, no bundle impact). Replaces #1048, #1054. - eslint-plugin-react-hooks 5 → 7: v7 folded the React Compiler rule set into `recommended`, flagging 67 pre-existing sites (set-state-in-effect, refs, manual-memoization, immutability). Adopting those is a deliberate codebase refactor, not a version bump — so they're deferred in eslint.config.js (documented) to preserve the prior enforcement level, and exhaustive-deps is pinned to its historical `warn`. Replaces #1050. - cargo minor/patch updates within semver (`cargo update`): reproduces the cargo-minor-patch group (#1040), which failed as a blind bump against a stale base. Compiles clean + all Rust tests pass. Note: the root npm minor/patch group (#1045) is intentionally NOT swept in here — it carries a mermaid 11.12→11.16 (+~800 kB lazy chunk) and tiptap 3.18→3.27 growth that trips the size gate and warrants a separate, conscious decision rather than an automatic limit bump. Left to dependabot. * chore(deps): npm minor/patch sweep (root + mcp + content-server) `pnpm update -r` within semver — reproduces the dependabot minor/patch groups #1045 (root), #1036 (mcp), and #1051 (@eslint/js) as one verified change. Full `pnpm check:all` green. - Size growth accepted (approved): mermaid 11.12 → 11.16 (+~800 kB, lazy chunk — never in cold start) and tiptap 3.18 → 3.27 (+18 kB eager). Both size-limit ceilings bumped with documented reasons in .size-limit.cjs. - schema.ts: vscode-languageserver-types reached LSP 3.18, which widened Diagnostic.message to `string | MarkupContent`; flatten MarkupContent to its text via a messageText() helper. Completes #1045 / #1036 / #1051. * docs(eslint): link react-hooks-7 rule deferral to tracking issue #1063 * fix(deps): reconcile pnpm-lock with dompurify override so --frozen-lockfile passes The minor/patch sweep left pnpm-lock.yaml frozen-inconsistent: the direct dompurify dep (^3.4.11) and the pnpm.overrides entry (>=3.3.2) disagreed in a way non-frozen install tolerates but CI's --frozen-lockfile rejects (ERR_PNPM_OUTDATED_LOCKFILE). Plain pnpm install reconciles it. check:all green. * fix(knip): re-add mermaid + vitepress to website ignore lists The minor/patch sweep shifted node_modules hoisting enough that knip (on a clean --frozen-lockfile install, as CI runs) can no longer statically trace the website's mermaid usage (rendered via vitepress's component system) or resolve the `vitepress` binary — flagging both as error-level (Unused devDependencies / Unlisted binaries). Both are genuinely used; the earlier gate-fix removed these ignore entries as "stale," but they're load-bearing across hoisting states. Verified with a clean install + full check:all.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 16, 2026

dependabot Bot changed the title ~~chore(deps): bump the cargo-minor-patch group in /src-tauri with 18 updates~~ chore(deps): bump the cargo-minor-patch group across 1 directory with 18 updates Jun 17, 2026

dependabot Bot force-pushed the dependabot/cargo/src-tauri/cargo-minor-patch-e4af74bd24 branch from 158688e to 2cd2f78 Compare June 17, 2026 05:16

xiaolai enabled auto-merge (squash) June 27, 2026 01:16

dependabot Bot force-pushed the dependabot/cargo/src-tauri/cargo-minor-patch-e4af74bd24 branch from 4b75f3c to c770e55 Compare June 27, 2026 01:25

xiaolai closed this Jun 27, 2026

auto-merge was automatically disabled June 27, 2026 02:32
Pull request was closed

dependabot Bot deleted the dependabot/cargo/src-tauri/cargo-minor-patch-e4af74bd24 branch June 27, 2026 02:32

xiaolai mentioned this pull request Jun 27, 2026

chore(deps): clear the entire dependabot backlog (majors + minor/patch, done correctly) #1062

Merged

Navigation Menu

chore(deps): bump the cargo-minor-patch group across 1 directory with 18 updates - #1040

chore(deps): bump the cargo-minor-patch group across 1 directory with 18 updates#1040
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-minor-patch-e4af74bd24

dependabot Bot commented on behalf of github Jun 16, 2026 •

edited

Loading

Uh oh!

xiaolai commented Jun 27, 2026

Uh oh!

xiaolai commented Jun 27, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

opener-js v2.5.4

[2.5.4]

opener v2.5.4

[2.5.4]

fs-js v2.5.1

[2.5.1]

fs v2.5.1

[2.5.1]

dialog-js v2.7.1

[2.7.1]

Dependencies

dialog v2.7.1

[2.7.1]

Dependencies

persisted-scope v2.3.5

[2.3.5]

Dependencies

shell-js v2.3.5

[2.3.5]

bug

updater-js v2.10.1

[2.10.1]

updater v2.10.1

[2.10.1]

0.4.32

What's Changed

0.4.31

What's Changed

New Contributors

0.4.30

What's Changed

New Contributors

Notable Changes

[0.4.33] - 2026-06-20

What's Changed

New Contributors

[0.4.32] - 2026-06-04

What's Changed

[0.4.31] - 2026-06-02

What's Changed

New Contributors

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Notable Changes

v1.0.150

v1.0.149

v1.0.148

v1.23.4

What's Changed

New Contributors

v1.23.3

What's Changed

v1.23.2

What's Changed

v1.23.1

What's Changed

New Contributors

v1.23.0

What's Changed

New Contributors

1.12.4 (2025-06-09)

1.12.3 (2025-02-03)

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

Changed

Fixed

Unstable

Documented

0.3.32

0.3.32 - 2026-02-15

Uh oh!

xiaolai commented Jun 27, 2026

Uh oh!

xiaolai commented Jun 27, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 16, 2026 •

edited

Loading