Skip to content

chore(deps): update cargo dependencies - #122

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/cargo-dependencies
Open

chore(deps): update cargo dependencies#122
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/cargo-dependencies

Conversation

@renovate

@renovate renovate Bot commented Mar 23, 2025

Copy link
Copy Markdown
Contributor

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package Type Update Change
amqprs workspace.dependencies patch 2.1.0 -> 2.1.2
anyhow workspace.dependencies patch 1.0.97 -> 1.0.99
async-trait dependencies patch 0.1.87 -> 0.1.89
axum workspace.dependencies patch 0.8.1 -> 0.8.4
clap workspace.dependencies patch 4.5.31 -> 4.5.47
once_cell workspace.dependencies minor 1.20.3 -> 1.21.3
prometheus-client dependencies minor 0.23.0 -> 0.24.0
prost workspace.dependencies minor 0.13 -> 0.14
prost-build workspace.dependencies minor 0.13 -> 0.14
serde (source) workspace.dependencies patch 1.0.218 -> 1.0.225
serde_json workspace.dependencies patch 1.0.140 -> 1.0.145
socketioxide dependencies minor 0.16 -> 0.17
sqlx workspace.dependencies patch 0.8.3 -> 0.8.6
tauri (source) dependencies minor 2.3.1 -> 2.8.5
tauri-build (source) build-dependencies minor 2.0.6 -> 2.4.1
tauri-plugin-dialog dependencies minor 2.2.0 -> 2.4.0
thiserror workspace.dependencies patch 2.0.12 -> 2.0.16
tokio (source) workspace.dependencies minor 1.44.2 -> 1.47.1
tower-http workspace.dependencies patch 0.6.2 -> 0.6.6
uuid dependencies minor =1.15.1 -> =1.18.1
yrs dependencies minor 0.23.0 -> 0.24.0

Release Notes

gftea/amqprs (amqprs)

v2.1.2

Compare Source

v2.1.1

Compare Source

What's Changed

Notes:

  • The serde fix is in amqp_serde v0.4.2
  • The above fixes are not ported to v1 yet.

New Contributors

Full Changelog: gftea/amqprs@v2.1.0...v2.1.1

dtolnay/anyhow (anyhow)

v1.0.99

Compare Source

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#​420)

v1.0.98

Compare Source

dtolnay/async-trait (async-trait)

v0.1.89

Compare Source

v0.1.88

Compare Source

  • Fix lifetime bounding on generic parameters that have cfg (#​289)
tokio-rs/axum (axum)

v0.8.4: axum v0.8.4

Compare Source

  • added: Router::reset_fallback (#​3320)
  • added: WebSocketUpgrade::selected_protocol (#​3248)
  • fixed: Panic location for overlapping method routes (#​3319)
  • fixed: Don't leak a tokio task when using serve without graceful shutdown (#​3129)

v0.8.3: axum v0.8.3

Compare Source

  • added: Implement From<Bytes> for Message (#​3273)
  • added: Implement OptionalFromRequest for Json (#​3142)
  • added: Implement OptionalFromRequest for Extension (#​3157)
  • added: Allow setting the read buffer capacity of WebSocketUpgrade (#​3178)
  • changed: Improved code size / compile time of dependent crates (#​3285, #​3294)

v0.8.2: axum v0.8.2

Yanked from crates.io due to unforeseen breaking change, see #​3190 for details


  • added: Implement OptionalFromRequest for Json (#​3142)
  • added: Implement OptionalFromRequest for Extension (#​3157)
  • changed: Make the status function of rejections a const function, such
    as JsonRejection, QueryRejection and PathRejection (#​3168)
clap-rs/clap (clap)

v4.5.47

Compare Source

Features
  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible
Fixes
  • (derive) Update runtime error text to match clap

v4.5.46

Compare Source

Features
  • Expose StyledStr::push_str

v4.5.45

Compare Source

Fixes
  • (unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

v4.5.44

Compare Source

Features
  • Add Command::mut_subcommands

v4.5.43

Compare Source

Fixes
  • (help) In long help, list Possible Values before defaults, rather than after, for a more consistent look

v4.5.42

Compare Source

Fixes
  • Include subcommand visible long aliases in --help

v4.5.41

Compare Source

Features
  • Add Styles::context and Styles::context_value to customize the styling of [default: value] like notes in the --help

v4.5.40

Compare Source

Features
  • Support quoted ids in arg!() macro (e.g. arg!("check-config": ...))

v4.5.39

Compare Source

Fixes
  • (help) Show short flag aliases before long
  • (help) Merge the short and long flag alias lists

v4.5.38

Compare Source

Fixes
  • (help) When showing aliases, include leading -- or -

v4.5.37

Compare Source

Features
  • Added ArgMatches::try_clear_id()

v4.5.36

Compare Source

Fixes
  • (help) Revert 4.5.35's "Don't leave space for shorts if there are none" for now

v4.5.35

Compare Source

Fixes
  • (help) Align positionals and flags when put in the same help_heading
  • (help) Don't leave space for shorts if there are none

v4.5.34

Compare Source

Fixes
  • (help) Don't add extra blank lines with flatten_help(true) and subcommands without arguments

v4.5.33

Compare Source

Fixes
  • (error) When showing the usage of a suggestion for an unknown argument, don't show the group

v4.5.32

Compare Source

Features
  • Add Error::remove
Documentation
  • (cookbook) Switch from humantime to jiff
  • (tutorial) Better cover required vs optional
Internal
  • Update pulldown-cmark
matklad/once_cell (once_cell)

v1.21.3

Compare Source

v1.21.2

Compare Source

  • Relax success ordering from AcqRel to Release in race: #​278.

v1.21.1

Compare Source

v1.21.0

Compare Source

  • Outline initialization in race: #​273.
  • Add OnceNonZereUsize::get_unchecked: #​274.
  • Add OnceBox::clone and OnceBox::with_value: #​275.
  • Increase MSRV to 1.70
prometheus/client_rust (prometheus-client)

v0.24.0

Compare Source

Added
  • EncodeLabelSet is now implemented for tuples (A: EncodeLabelSet, B: EncodeLabelSet).
    See PR 257.

  • Family::get_or_create_owned can access a metric in a labeled family. This
    method avoids the risk of runtime deadlocks at the expense of creating an
    owned type. See PR 244.

  • impl<T: Collector> Collector for std::sync::Arc<T>.
    See PR 273.

Changed
  • EncodeLabelSet::encode() now accepts a mutable reference to its encoder parameter.
  • Exemplar timestamps can now be passed, which are required for convert_classic_histograms_to_nhcb: true
    in Prometheus scraping. See PR 276.
tokio-rs/prost (prost)

v0.14.1

Compare Source

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

⚠️ Revert emission of rerun commands

Version 0.14.1 reverts the emission of rerun commands. Other than this change, it is identical to 0.14.0.

In version 0.14.0, prost-build began emitting rerun commands. While intended to improve build correctness, this change caused regressions for some users—for example, those generating protos from an includes directory. These edge cases are difficult to address reliably, so the change has been rolled back in 0.14.1.

For more details, see issue #​1296.

Breaking changes

  • prost: Relax Message Debug trait bound (#​1147)

    BREAKING CHANGE: trait Debug was a supertrait of trait Message. This is no longer required by prost. If your code relies on trait Debug being implemented for every impl Message, you must now explicitly state that you require both Debug and Message. For example: where M: Debug + Message

  • prost: Remove prost-derive feature (#​1247)

    BREAKING CHANGE: Feature flag prost-derive is renamed to derive. Please rename any usage of prost-derive feature in your Cargo.toml.

  • prost-build: Prevent repeated fields to be boxed (#​1237)

    BREAKING CHANGE: A repeated field that is manually marked as boxed was typed as Vec<Box<T>>. Those fields are now simply typed as Vec<T> to prevent double indirection. The boxed configuration is effectively ignored for repeated fields.

  • prost-build: Make type_name_domain cumulative (#​1228)

    BREAKING CHANGE: The configuration for domain names of messages is now cumulative. All calls to prost_build::Config::type_name_domain are now concatenated. The previous behavior was that only the arguments of the last call were used. If you do multiple calls to type_name_domain, you need to remove all but the last call to maintain the same behavior.

  • prost-build: Derive Eq and Hash trait for messages where possible (#​1175)

    BREAKING CHANGE: prost-build will automatically derive trait Eq and trait Hash for types where all field support those as well. If you manually impl Eq and/or impl Hash for generated types, then you need to remove the manual implementation. If you use type_attribute to derive(Eq) and/or derive(Hash), then you need to remove those.

Features

  • prost-types: Implement conversion Duration to/from chrono::TimeDelta (#​1236)
  • prost-build: Prepare for 2024 keyword gen (#​1257)

Dependencies

  • (deps) Update pulldown-cmark to 0.13 (#​1259)
  • (deps) update criterion requirement from 0.5 to 0.6 (#​1280)

Documentation

  • Update dead link LICENSE in prost-types/README.md (#​1262)

Styling

Testing

  • Run tests using edition 2024 (#​1254)
  • Run clippy with edition 2024 enabled (#​1256)

v0.14.0

Compare Source

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

Breaking changes

  • prost: Relax Message Debug trait bound (#​1147)

    BREAKING CHANGE: trait Debug was a supertrait of trait Message. This is no longer required by prost. If your code relies on trait Debug being implemented for every impl Message, you must now explicitly state that you require both Debug and Message. For example: where M: Debug + Message

  • prost: Remove prost-derive feature (#​1247)

    BREAKING CHANGE: Feature flag prost-derive is renamed to derive. Please rename any usage of prost-derive feature in your Cargo.toml.

  • prost-build: Emit rerun commands (#​1140)

    BREAKING CHANGE: Previously cargo assumed it had to rerun build.rs if any files in the project changed. prost-build will now emit rerun commands, which means only the explicitly marked files cause a rerun. If your build.rs is dependent on any other file paths than those given to prost-build, then your build.rs needs to emit rerun commands as well.

  • prost-build: Prevent repeated fields to be boxed (#​1237)

    BREAKING CHANGE: A repeated field that is manually marked as boxed was typed as Vec<Box<T>>. Those fields are now simply typed as Vec<T> to prevent double indirection. The boxed configuration is effectively ignored for repeated fields.

  • prost-build: Make type_name_domain cumulative (#​1228)

    BREAKING CHANGE: The configuration for domain names of messages is now cumulative. All calls to prost_build::Config::type_name_domain are now concatenated. The previous behavior was that only the arguments of the last call were used. If you do multiple calls to type_name_domain, you need to remove all but the last call to maintain the same behavior.

  • prost-build: Derive Eq and Hash trait for messages where possible (#​1175)

    BREAKING CHANGE: prost-build will automatically derive trait Eq and trait Hash for types where all field support those as well. If you manually impl Eq and/or impl Hash for generated types, then you need to remove the manual implementation. If you use type_attribute to derive(Eq) and/or derive(Hash), then you need to remove those.

Features

  • prost-types: Implement conversion Duration to/from chrono::TimeDelta (#​1236)
  • prost-build: Prepare for 2024 keyword gen (#​1257)

Dependencies

  • (deps) Update pulldown-cmark to 0.13 (#​1259)
  • (deps) update criterion requirement from 0.5 to 0.6 (#​1280)

Documentation

  • Update dead link LICENSE in prost-types/README.md (#​1262)

Styling

Testing

  • Run tests using edition 2024 (#​1254)
  • Run clippy with edition 2024 enabled (#​1256)
serde-rs/serde (serde)

v1.0.225

Compare Source

  • Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#​2879, thanks @​rcrisanti)

v1.0.224

Compare Source

  • Remove private types being suggested in rustc diagnostics (#​2979)

v1.0.223

Compare Source

v1.0.222

Compare Source

  • Make serialize_with attribute produce code that works if respanned to 2024 edition (#​2950, thanks @​aytey)

v1.0.221

Compare Source

  • Documentation improvements (#​2973)
  • Deprecate serde_if_integer128! macro (#​2975)

v1.0.220

Compare Source

v1.0.219

Compare Source

  • Prevent absolute_paths Clippy restriction being triggered inside macro-generated code (#​2906, thanks @​davidzeng0)
serde-rs/json (serde_json)

v1.0.145

Compare Source

  • Raise serde version requirement to >=1.0.220

v1.0.144

Compare Source

  • Switch serde dependency to serde_core (#​1285)

v1.0.143

Compare Source

v1.0.142

Compare Source

v1.0.141

Compare Source

totodore/socketioxide (socketioxide)

v0.17.2

Compare Source

v0.17.1

Compare Source

v0.17.0

Compare Source

This new release introduce the socketioxide-mongodb adapter crate. This adapter enables horizontal scaling of your Socketioxide servers across distributed deployments by leveraging MongoDB as a message bus.

The Socket::on_fallback method will allow you to set a fallback event handler if you want to handle incoming event dynamically. Extract the associated dynamic event with the Event extractor.

Changelog
socketioxide 0.17.0
  • deps: bump socketioxide-core to 0.17
  • feat: add SocketIo::on_fallback
    and Event extractor to add a fallback event handler and
    dynamically extract the incoming event.
  • MSRV: rust-version is now 1.86 with edition 2024
socketioxide-core 0.17.0
  • feat(breaking): remote-adapter packets are now refactored in the core crate. Any adapter implementation can use
    it through the remote-adapter flag.
  • MSRV: rust-version is now 1.86 with edition 2024
socketioxide-mongodb 0.1.0
  • Initial release!
What's Changed

Full Changelog: Totodore/socketioxide@v0.15.0...socketioxide-v0.17.0

v0.16.3

Compare Source

launchbadge/sqlx (sqlx)

v0.8.6

Compare Source

9 pull requests were merged this release cycle.

Added
Changed
Fixed

v0.8.5

Hotfix release to address two new issues:

  • [#​3823]: sqlx-cli@0.8.4 broke .env default resolution mechanism
  • [#​3825]: sqlx@0.8.4 broke test fixture setup

The 0.8.4 release will be yanked as of publishing this one.

Added
  • In release PR: sqlx-cli now accepts --no-dotenv in subcommand arguments.
  • In release PR: added functionality tests for sqlx-cli to CI.
  • In release PR: test #[sqlx::test] twice in CI to cover cleanup.
Fixed
  • In release PR: sqlx-cli correctly reads .env files by default again.
  • In release PR: fix bugs in MySQL implementation of #[sqlx::test].

v0.8.4

Hotfix release to address two new issues:

  • [#​3823]: sqlx-cli@0.8.4 broke .env default resolution mechanism
  • [#​3825]: sqlx@0.8.4 broke test fixture setup

The 0.8.4 release will be yanked as of publishing this one.

Added
  • In release PR: sqlx-cli now accepts --no-dotenv in subcommand arguments.
  • In release PR: added functionality tests for sqlx-cli to CI.
  • In release PR: test #[sqlx::test] twice in CI to cover cleanup.
Fixed
  • In release PR: sqlx-cli correctly reads .env files by default again.
  • In release PR: fix bugs in MySQL implementation of #[sqlx::test].
tauri-apps/tauri (tauri)

v2.8.5: tauri v2.8.5

Compare Source

Cargo Audit

Updating git repository `https://github.com/tauri-apps/schemars.git`
    Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
     Locking 1042 packages to latest compatible versions
      Adding apple-codesign v0.27.0 (available: v0.29.0)
      Adding borsh v1.3.0 (available: v1.5.7)
      Adding borsh-derive v1.3.0 (available: v1.5.7)
      Adding cargo_metadata v0.19.2 (available: v0.22.0)
      Adding colored v2.2.0 (available: v3.0.0)
      Adding ctor v0.2.9 (available: v0.5.0)
      Adding dialoguer v0.11.0 (available: v0.12.0)
      Adding elf v0.7.4 (available: v0.8.0)
      Adding goblin v0.9.3 (available: v0.10.1)
      Adding html5ever v0.29.1 (available: v0.35.0)
      Adding itertools v0.13.0 (available: v0.14.0)
      Adding json-patch v3.0.1 (available: v4.0.0)
      Adding jsonrpsee v0.24.9 (available: v0.26.0)
      Adding jsonrpsee-client-transport v0.24.9 (available: v0.26.0)
      Adding jsonrpsee-core v0.24.9 (available: v0.26.0)
      Adding jsonrpsee-ws-client v0.24.9 (available: v0.26.0)
      Adding matchit v0.8.4 (available: v0.8.6)
      Adding minisign v0.7.3 (available: v0.7.9)
      Adding object v0.36.7 (available: v0.37.3)
      Adding oxc_allocator v0.36.0 (available: v0.86.0)
      Adding oxc_ast v0.36.0 (available: v0.86.0)
      Adding oxc_parser v0.36.0 (available: v0.86.0)
      Adding oxc_span v0.36.0 (available: v0.86.0)
      Adding phf v0.11.3 (available: v0.13.1)
      Adding png v0.17.16 (available: v0.18.0)
      Adding rpm v0.16.1 (available: v0.18.0)
      Adding schemars v0.8.22 (available: v1.0.4)
      Adding tiny_http v0.11.0 (available: v0.12.0)
      Adding toml v0.8.2 (available: v0.8.23)
      Adding toml_datetime v0.6.3 (available: v0.6.11)
      Adding toml_edit v0.20.2 (available: v0.20.7)
      Adding x509-certificate v0.23.1 (available: v0.25.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 801 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1067 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.53.3
    │   └── tauri-runtime-wry 2.8.1
    │       └── tauri 2.8.5
    │           ├── tauri-plugin-sample 0.1.0
    │           │   └── api 0.1.0
    │           ├── tauri-plugin-log 2.6.0
    │           │   └── api 0.1.0
    │           ├── tauri-file-associations-demo 0.1.0
    │           ├── tauri 2.8.5
    │           ├── restart 0.1.0
    │           ├── resources 0.1.0
    │           ├── bench_helloworld 0.1.0
    │           ├── bench_files_transfer 0.1.0
    │           ├── bench_cpu_intensive 0.1.0
    │           └── api 0.1.0
    ├── webkit2gtk 2.0.1
    │   ├── wry 0.53.3
    │   ├── tauri-runtime-wry 2.8.1
    │   ├── tauri-runtime 2.8.0
    │   │   ├── tauri-runtime-wry 2.8.1
    │   │   └── tauri 2.8.5
    │   └── tauri 2.8.5
    ├── tauri-runtime-wry 2.8.1
    ├── tauri-runtime 2.8.0
    ├── tauri 2.8.5
    ├── tao 0.34.3
    │   └── tauri-runtime-wry 2.8.1
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.1
    │   │   └── tauri 2.8.5
    │   └── tauri 2.8.5
    └── libappindicator 0.9.0
        └── tray-icon 0.21.1

Crate:     atk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0416
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│   ├── webkit2gtk-sys 2.0.1
│   │   ├── wry 0.53.3
│   │   │   └── tauri-runtime-wry 2.8.1
│   │   │       └── tauri 2.8.5
│   │   │           ├── tauri-plugin-sample 0.1.0
│   │   │           │   └── api 0.1.0
│   │   │           ├── tauri-plugin-log 2.6.0
│   │   │           │   └── api 0.1.0
│   │   │           ├── tauri-file-associations-demo 0.1.0
│   │   │           ├── tauri 2.8.5
│   │   │           ├── restart 0.1.0
│   │   │           ├── resources 0.1.0
│   │   │           ├── bench_helloworld 0.1.0
│   │   │           ├── bench_files_transfer 0.1.0
│   │   │           ├── bench_cpu_intensive 0.1.0
│   │   │           └── api 0.1.0
│   │   └── webkit2gtk 2.0.1
│   │       ├── wry 0.53.3
│   │       ├── tauri-runtime-wry 2.8.1
│   │       ├── tauri-runtime 2.8.0
│   │       │   ├── tauri-runtime-wry 2.8.1
│   │       │   └── tauri 2.8.5
│   │       └── tauri 2.8.5
│   ├── webkit2gtk 2.0.1
│   ├── libappindicator-sys 0.9.0
│   │   └── libappindicator 0.9.0
│   │       └── tray-icon 0.21.1
│   │           └── tauri 2.8.5
│   ├── libappindicator 0.9.0
│   └── gtk 0.18.2
│       ├── wry 0.53.3
│       ├── webkit2gtk 2.0.1
│       ├── tauri-runtime-wry 2.8.1
│       ├── tauri-runtime 2.8.0
│       ├── tauri 2.8.5
│       ├── tao 0.34.3
│       │   └── tauri-runtime-wry 2.8.1
│       ├── muda 0.17.1
│       │   ├── tray-icon 0.21.1
│       │   └── tauri 2.8.5
│       └── libappindicator 0.9.0
└── atk 0.18.2
    └── gtk 0.18.2

Crate:     gdk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0412
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│   ├── wry 0.53.3
│   │   └── tauri-runtime-wry 2.8.1
│   │       └── tauri 2.8.5
│   │           ├── tauri-plugin-sample 0.1.0
│   │           │   └── api 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           │   └── api 0.1.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.8.5
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   ├── tauri-runtime-wry 2.8.1
│   ├── tauri-runtime 2.8.0
│   │   ├── tauri-runtime-wry 2.8.1
│   │   └── tauri 2.8.5
│   └── tauri 2.8.5
├── gtk 0.18.2
│   ├── wry 0.53.3
│   ├── webkit2gtk 2.0.1
│   ├── tauri-runtime-wry 2.8.1
│   ├── tauri-runtime 2.8.0
│   ├── tauri 2.8.5
│   ├── tao 0.34.3
│   │   └── tauri-runtime-wry 2.8.1
│   ├── muda 0.17.1
│   │   ├── tray-icon 0.21.1
│   │   │   └── tauri 2.8.5
│   │   └── tauri 2.8.5
│   └── libappindicator 0.9.0
│       └── tray-icon 0.21.1
└── gdkx11 0.18.2
    └── wry 0.53.3

Crate:     gdk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0418
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│   ├── wry 0.53.3
│   │   └── tauri-runtime-wry 2.8.1
│   │       └── tauri 2.8.5
│   │           ├── tauri-plugin-sample 0.1.0
│   │           │   └── api 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           │   └── api 0.1.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.8.5
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   └── webkit2gtk 2.0.1
│       ├── wry 0.53.3
│       ├── tauri-runtime-wry 2.8.1
│       ├── tauri-runtime 2.8.0
│       │   ├── tauri-runtime-wry 2.8.1
│       │   └── tauri 2.8.5
│       └── tauri 2.8.5
├── webkit2gtk 2.0.1
├── gtk-sys 0.18.2
│   ├── webkit2gtk-sys 2.0.1
│   ├── webkit2gtk 2.0.1
│   ├── libappindicator-sys 0.9.0
│   │   └── libappindicator 0.9.0
│   │       └── tray-icon 0.21.1
│   │           └── tauri 2.8.5
│   ├── libappindicator 0.9.0
│   └── gtk 0.18.2
│       ├── wry 0.53.3
│       ├── webkit2gtk 2.0.1
│       ├── tauri-runtime-wry 2.8.1
│       ├── tauri-runtime 2.8.0
│       ├── tauri 2.8.5
│       ├── tao 0.34.3
│       │   └── tauri-runtime-wry 2.8.1
│       ├── muda 0.17.1
│       │   ├── tray-icon 0.21.1
│       │   └── tauri 2.8.5
│       └── libappindicator 0.9.0
├── gdkx11-sys 0.18.2
│   ├── tao 0.34.3
│   └── gdkx11 0.18.2
│       └── wry 0.53.3
├── gdkwayland-sys 0.18.2
│   └── tao 0.34.3
└── gdk 0.18.2
    ├── webkit2gtk 2.0.1
    ├── gtk 0.18.2
    └── gdkx11 0.18.2

Crate:     gdkwayland-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0411
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0411
Dependency tree:
gdkwayland-sys 0.18.2
└── tao 0.34.3
    └── tauri-runtime-wry 2.8.1
        └── tauri 2.8.5
            ├── tauri-plugin-sample 0.1.0
            │   └── api 0.1.0
            ├── tauri-plugin-log 2.6.0
            │   └── api 0.1.0
            ├── tauri-file-associations-demo 0.1.0
            ├── tauri 2.8.5
            ├── restart 0.1.0
            ├── resources 0.1.0
            ├── bench_helloworld 0.1.0
            ├── bench_files_transfer 0.1.0
            ├── bench_cpu_intensive 0.1.0
            └── api 0.1.0

Crate:     gdkx11
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0417
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0417
Dependency tree:
gdkx11 0.18.2
└── wry 0.53.3
    └── tauri-runtime-wry 2.8.1
        └── tauri 2.8.5
            ├── tauri-plugin-sample 0.1.0
            │   └── api 0.1.0
            ├── tauri-plugin-log 2.6.0
            │   └── api 0.1.0
            ├── tauri-file-associations-demo 0.1.0
            ├── tauri 2.8.5
            ├── restart 0.1.0
            ├── resources 0.1.0
            ├── bench_helloworld 0.1.0
            ├── bench_files_transfer 0.1.0
            ├── bench_cpu_intensive 0.1.0
            └── api 0.1.0

Crate:     gdkx11-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0414
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0414
Dependency tree:
gdkx11-sys 0.18.2
├── tao 0.34.3
│   └── tauri-runtime-wry 2.8.1
│       └── tauri 2.8.5
│           ├── tauri-plugin-sample 0.1.0
│           │   └── api 0.1.0
│           ├── tauri-plugin-log 2.6.0
│           │   └── api 0.1.0
│           ├── tauri-file-associations-demo 0.1.0
│           ├── tauri 2.8.5
│           ├── restart 0.1.0
│           ├── resources 0.1.0
│           ├── bench_helloworld 0.1.0
│           ├── bench_files_transfer 0.1.0
│           ├── bench_cpu_intensive 0.1.0
│           └── api 0.1.0
└── gdkx11 0.18.2
    └── wry 0.53.3
        └── tauri-runtime-wry 2.8.1

Crate:     gtk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0415
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0415
Dependency tree:
gtk 0.18.2
├── wry 0.53.3
│   └── tauri-runtime-wry 2.8.1
│       └── tauri 2.8.5
│           ├── tauri-plugin-sample 0.1.0
│           │   └── api 0.1.0
│           ├── tauri-plugin-log 2.6.0
│           │   └── api 0.1.0
│           ├── tauri-file-associations-demo 0.1.0
│           ├── tauri 2.8.5
│           ├── restart 0.1.0
│           ├── resources 0.1.0
│           ├── bench_helloworld 0.1.0
│           ├── bench_files_transfer 0.1.0
│           ├── bench_cpu_intensive 0.1.0
│           └── api 0.1.0
├── webkit2gtk 2.0.1
│   ├── wry 0.53.3
│   ├── tauri-runtime-wry 2.8.1
│   ├── tauri-runtime 2.8.0
│   │   ├── tauri-runtime-wry 2.8.1
│   │   └── tauri 2.8.5
│   └── tauri 2.8.5
├── tauri-runtime-wry 2.8.1
├── tauri-runtime 2.8.0
├── tauri 2.8.5
├── tao 0.34.3
│   └── tauri-runtime-wry 2.8.1
├── muda 0.17.1
│   ├── tray-icon 0.21.1
│   │   └── tauri 2.8.5
│   └── tauri 2.8.5
└── libappindicator 0.9.0
    └── tray-icon 0.21.1

Crate:     gtk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0420
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0420
Dependency tree:
gtk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│   ├── wry 0.53.3
│   │   └── tauri-runtime-wry 2.8.1
│   │       └── tauri 2.8.5
│   │           ├── tauri-plugin-sample 0.1.0
│   │           │   └── api 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           │   └── api 0.1.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.8.5
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   └── webkit2gtk 2.0.1
│       ├── wry 0.53.3
│       ├── tauri-runtime-wry 2.8.1
│       ├── tauri-runtime 2.8.0
│       │   ├── tauri-runtime-wry 2.8.1
│       │   └── tauri 2.8.5
│       └── tauri 2.8.5
├── webkit2gtk 2.0.1
├── libappindicator-sys 0.9.0
│   └── libappindicator 0.9.0
│       └── tray-icon 0.21.1
│           └── tauri 2.8.5
├── libappindicator 0.9.0
└── gtk 0.18.2
    ├── wry 0.53.3
    ├── webkit2gtk 2.0.1
    ├── tauri-runtime-wry 2.8.1
    ├── tauri-runtime 2.8.0
    ├── tauri 2.8.5
    ├── tao 0.34.3
    │   └── tauri-runtime-wry 2.8.1
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.1
    │   └── tauri 2.8.5
    └── libappindicator 0.9.0

Crate:     gtk3-macros
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0419
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0419
Dependency tree:
gtk3-macros 0.18.2
└── gtk 0.18.2
    ├── wry 0.53.3
    │   └── tauri-runtime-wry 2.8.1
    │       └── tauri 2.8.5
    │           ├── tauri-plugin-sample 0.1.0
    │           │   └── api 0.1.0
    │           ├── tauri-plugin-log 2.6.0
    │           │   └── api 0.1.0
    │           ├── tauri-file-associations-demo 0.1.0
    │           ├── tauri 2.8.5
    │           ├── restart 0.1.0
    │           ├── resources 0.1.0
    │           ├── bench_helloworld 0.1.0
    │           ├── bench_files_transfer 0.1.0
    │           ├── bench_cpu_intensive 0.1.0
    │           └── api 0.1.0
    ├── webkit2gtk 2.0.1
    │   ├── wry 0.53.3
    │   ├── tauri-runtime-wry 2.8.1
    │   ├── tauri-runtime 2.8.0
    │   │   ├── tauri-runtime-wry 2.8.1
    │   │   └── tauri 2.8.5
    │   └── tauri 2.8.5
    ├── tauri-runtime-wry 2.8.1
    ├── tauri-runtime 2.8.0
    ├── tauri 2.8.5
    ├── tao 0.34.3
    │   └── tauri-runtime-wry 2.8.1
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.1
    │   │   └── tauri 2.8.5
    │   └── tauri 2.8.5
    └── libappindicator 0.9.0
        └── tray-icon 0.21.1

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Dependency tree:
paste 1.0.15
├── specta 2.0.0-rc.22
│   └── tauri 2.8.5
│       ├── tauri-plugin-sample 0.1.0
│       │   └── api 0.1.0
│       ├── tauri-plugin-log 2.6.0
│       │   └── api 0.1.0
│       ├── tauri-file-associations-demo 0.1.0
│       ├── tauri 2.8.5
│       ├── restart 0.1.0
│       ├── resources 0.1.0
│       ├── bench_helloworld 0.1.0
│       ├── bench_files_transfer 0.1.0
│       ├── bench_cpu_intensive 0.1.0
│       └── api 0.1.0
└── rav1e 0.7.1
    └── ravif 0.11.20
        └── image 0.25.7
            ├── tauri-cli 2.8.4
            │   └── tauri-cli-node 0.0.0
            ├── tauri-bundler 2.6.1
            │   └── tauri-cli 2.8.4
            └── tauri 2.8.5

Crate:     glib
Version:   0.18.5
Warning:   unsound
Title:     Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`
Date:      2024-03-30
ID:        RUSTSEC-2024-0429
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0429
Dependency tree:
glib 0.18.5
├── webkit2gtk 2.0.1
│   ├── wry 0.53.3
│   │   └── tauri-runtime-wry 2.8.1
│   │       └── tauri 2.8.5
│   │           ├── tauri-plugin-sample 0.1.0
│   │           │   └── api 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           │   └── api 0.1.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.8.5
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   ├── tauri-runtime-wry 2.8.1
│   ├── tauri-runtime 2.8.0
│   │   ├── tauri-runtime-wry 2.8.1
│   │   └── tauri 2.8.5
│   └── tauri 2.8.5
├── soup3 0.5.0
│   ├── wry 0.53.3
│   └── webkit2gtk 2.0.1
├── pango 0.18.3
│   ├── gtk 0.18.2
│   │   ├── wry 0.53.3
│   │   ├── webkit2gtk 2.0.1
│   │   ├── tauri-runtime-wry 2.8.1
│   │   ├── tauri-runtime 2.8.0
│   │   ├── tauri 2.8.5
│   │   ├── tao 0.34.3
│   │   │   └── tauri-runtime-wry 2.8.1
│   │   ├── muda 0.17.1
│   │   │   ├── tray-icon 0.21.1
│   │   │   │   └── tauri 2.8.5
│   │   │   └── tauri 2.8.5
│   │   └── libappindicator 0.9.0
│   │       └── tray-icon 0.21.1
│   └── gdk 0.18.2
│       ├── webkit2gtk 2.0.1
│       ├── gtk 0.18.2
│       └── gdkx11 0.18.2
│           └── wry 0.53.3
├── libappindicator 0.9.0
├── javascriptcore-rs 1.1.2
│   ├── wry 0.53.3
│   └── webkit2gtk 2.0.1
├── gtk 0.18.2
├── gio 0.18.4
│   ├── webkit2gtk 2.0.1
│   ├── soup3 0.5.0
│   ├── pango 0.18.3
│   ├── gtk 0.18.2
│   ├── gdkx11 0.18.2
│   ├── gdk-pixbuf 0.18.5
│   │   ├── gtk 0.18.2
│   │   └── gdk 0.18.2
│   └── gdk 0.18.2
├── gdkx11 0.18.2
├── gdk-pixbuf 0.18.5
├── gdk 0.18.2
├── cairo-rs 0.18.5
│   ├── webkit2gtk 2.0.1
│   ├── gtk 0.18.2
│   └── gdk 0.18.2
└── atk 0.18.2
    └── gtk 0.18.2

warning: 12 allowed warnings found
[2.8.5]
Enhancements
  • 07e134f70 (#​14107 by @​lucasfernog) Improve error message for request errors on iOS when local network permission has been denied and the app tries to reach the development server.
Dependencies
  • Upgraded to tauri-build@2.4.1

Cargo Publish

Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
versio

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend before 5:00am" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Ekhorn/spaced).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDcuMSIsInVwZGF0ZWRJblZlciI6IjQxLjk3LjEwIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjYXJnbyIsImRlcGVuZGVuY2llcyJdfQ==-->

@github-actions

github-actions Bot commented Mar 23, 2025

Copy link
Copy Markdown
Your image ghcr.io/ekhorn/spaced/item_socket:d804c926755e21423e1fa2ad03fe57b58bfb5237 critical: 0 high: 0 medium: 0 low: 0
Current base image distroless/static:nonroot critical: 0 high: 0 medium: 0 low: 0

@github-actions

github-actions Bot commented Mar 23, 2025

Copy link
Copy Markdown

🔍 Vulnerabilities of ghcr.io/ekhorn/spaced/item_socket:d804c926755e21423e1fa2ad03fe57b58bfb5237

📦 Image Reference ghcr.io/ekhorn/spaced/item_socket:d804c926755e21423e1fa2ad03fe57b58bfb5237
digestsha256:551c7006d0e6c17ae82f37159281c659db01c7e26a3ba75c10c38cd302a851a4
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size13 MB
packages12
📦 Base Image gcr.io/distroless/static:nonroot
digestsha256:3a31438b71f1e1c7d4210da01a4a5b9bc55deaba115788fdf8b2bf0269ec1d69
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions

github-actions Bot commented Mar 23, 2025

Copy link
Copy Markdown

Recommended fixes for image ghcr.io/ekhorn/spaced/item_socket:d804c926755e21423e1fa2ad03fe57b58bfb5237

Base image is :nonroot

Digest
Vulnerabilities
Size0 B
Packages0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from 9c389d5 to 5517afe Compare March 26, 2025 22:34
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from 5517afe to 90f6a87 Compare March 27, 2025 05:57
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from 90f6a87 to 8d167db Compare March 27, 2025 17:27
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from 8d167db to a3ba47f Compare March 28, 2025 18:57
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 2 times, most recently from b1018db to cf1b46f Compare April 2, 2025 08:29
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from cf1b46f to 96b5808 Compare April 4, 2025 22:00
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from 96b5808 to 4457018 Compare April 5, 2025 17:33
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from 4457018 to 693ca97 Compare April 11, 2025 23:44
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from 693ca97 to 5837098 Compare April 12, 2025 21:15
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from 5837098 to d3e6872 Compare April 14, 2025 01:44
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from d3e6872 to 23827b3 Compare April 14, 2025 06:13
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch from 23827b3 to badd578 Compare April 15, 2025 18:59
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 2 times, most recently from 0ca0b25 to 07b71b6 Compare May 6, 2025 11:34
@renovate
renovate Bot temporarily deployed to review-122 May 6, 2025 11:36 Inactive
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 2 times, most recently from 35adcaa to b2055e7 Compare May 10, 2025 23:05
@renovate
renovate Bot temporarily deployed to review-122 May 10, 2025 23:07 Inactive
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 3 times, most recently from ec4d7f3 to 3efdb89 Compare May 17, 2025 18:53
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 3 times, most recently from 6f77f87 to cf1d39c Compare May 19, 2025 23:47
@renovate
renovate Bot temporarily deployed to review-122 May 19, 2025 23:49 Inactive
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 2 times, most recently from 587da30 to 357fcf7 Compare May 28, 2025 00:33
@renovate
renovate Bot temporarily deployed to review-122 May 28, 2025 00:36 Inactive
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 2 times, most recently from 1940114 to 095378f Compare June 3, 2025 15:44
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 2 times, most recently from ad643c4 to 0f266ee Compare June 9, 2025 19:38
@renovate
renovate Bot temporarily deployed to review-122 June 9, 2025 19:41 Inactive
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 2 times, most recently from 51713cf to 0e7259e Compare June 13, 2025 11:14
@renovate
renovate Bot force-pushed the renovate/cargo-dependencies branch 4 times, most recently from b13f9be to 54997d2 Compare June 26, 2025 13:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants