chore(deps): bump the cargo-minor-patch group across 1 directory with 20 updates by dependabot[bot] · Pull Request #85 · TheDancingDeveloper-org/rustTorrent

dependabot · 2026-10-01T17:05:32Z

Bumps the cargo-minor-patch group with 20 updates in the / directory:

Package	From	To
async-compression	`0.4.43`	`0.4.48`
aws-lc-rs	`1.18.0`	`1.18.1`
clap	`4.6.6`	`4.6.7`
clap_complete	`4.6.9`	`4.6.11`
crc32fast	`1.5.1`	`1.5.2`
encoding_rs	`0.8.35`	`0.8.42`
indexmap	`2.14.0`	`2.14.2`
lru	`0.18.3`	`0.18.5`
rand	`0.10.2`	`0.10.3`
reqwest	`0.13.4`	`0.13.5`
serde_with	`3.22.0`	`3.24.0`
tauri	`2.11.5`	`2.12.0`
tauri-build	`2.6.3`	`2.7.0`
tauri-plugin-shell	`2.3.5`	`2.4.0`
thiserror	`2.0.20`	`2.0.21`
tokio-test	`0.4.5`	`0.4.6`
tower-http	`0.7.0`	`0.7.1`
uuid	`1.26.0`	`1.26.1`
tauri-plugin-notification	`2.3.3`	`2.5.0`
open	`5.4.2`	`5.4.4`

Updates async-compression from 0.4.43 to 0.4.48

Release notes

Sourced from async-compression's releases.

async-compression-v0.4.48

Fixed

(gzip) reject invalid header before the full 10 bytes arrive (#489)

async-compression-v0.4.47

Fixed

(zstd) avoid no-progress errors while awaiting input (#486)

async-compression-v0.4.46

Other

Return UnexpectedEof when deflate64 does not progress (#483)

async-compression-v0.4.45

Other

(deps) update zstd requirement from 0.13 to 0.14 (#481)

async-compression-v0.4.44

Other

updated the following local packages: compression-core, compression-codecs

Commits

0541781 chore: release (#490)
7f2e753 fix(gzip): reject invalid header before the full 10 bytes arrive (#489)
d34d64e chore: release (#487)
2577ac7 fix(zstd): avoid no-progress errors while awaiting input (#486)
3f2a600 chore: release (#484)
b22cd69 Return UnexpectedEof when deflate64 does not progress (#483)
d8c1b47 chore: release (#482)
9ffc96c chore(deps): update zstd requirement from 0.13 to 0.14 (#481)
a867d18 chore: release (#478)
ee526f7 Fix safety contract on assume_init, use asserts (#479)
Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.0 to 1.18.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.1

What's Changed

Add ECDSA P-256 SHA-1 ASN.1 signature verification by @assafvayner in aws/aws-lc-rs#1214

Adds ECDSA_P256_SHA1_ASN1 for verifying ASN.1 DER-encoded ECDSA P-256 signatures over SHA-1, so applications can verify legacy signatures such as CloudFront signed URLs using ECDSA P-256 with the default SHA-1 hash.

SHA-1 remains available for legacy verification only. This release does not add a corresponding signing algorithm.

Tighten AEAD, cipher IV, HKDF, ECDH, and RSA API contracts by @justsmth in aws/aws-lc-rs#1215

In-place AEAD sealing now verifies that Extend produced exactly enough space for the plaintext and authentication tag before passing the buffer to AWS-LC. Non-conforming custom buffers now return Err(Unspecified).

Streaming cipher constructors now reject missing or mismatched IV contexts, matching the validation already performed by the one-shot APIs.

Salt::from(Okm) now uses the output algorithm selected by the Okm, rather than the algorithm from the source PRK.

ECDH shared-secret storage is now zeroized on fallible derive paths.

RSA verify_digest_sig now requires the supplied digest to match the digest configured by RsaParameters, for both parsed and unparsed public keys.

Valid inputs are unaffected. Calls using inconsistent algorithms, IV contexts, or custom AEAD buffers now fail closed with Err(Unspecified).

Upstream AWS-LC

aws-lc-sys v0.45.0 aligns with AWS-LC v5.7.0 (previously v5.5.0). See also the release notes for v5.6.0.

v5.7.0 corrects EVP_DecryptUpdate for padded block ciphers so it modifies only the output range reported through out_len. aws-lc-rs now includes canary-based regression coverage around the documented minimum output-buffer sizes.

aws-lc-fips-sys v0.14.2 moves to AWS-LC FIPS v4.2.0.

Includes the equivalent EVP_DecryptUpdate correction for FIPS builds.

Restores FIPS builds with Clang 20 and newer.

Removes the FIPS compiler wrapper's dependency on /usr/bin/env, fixing builds in Nix and similar sandboxed environments.

Build Improvements

Export cargo:root metadata when linking against a system-installed AWS-LC by @weihanglo in aws/aws-lc-rs#1208

The system-library path now exposes the installation prefix through DEP_AWS_LC_*_ROOT, consistently with the CC and CMake builders, so downstream build scripts can rely on the metadata regardless of how AWS-LC was built.

Fix -Wa,--debug-prefix-map handling with Clang and LTO by @justsmth in aws/aws-lc-rs#1212

Fixes Clang builds when CFLAGS contains -flto or -flto=thin. The assembler-specific flag is now used only with GCC; Clang's integrated assembler uses -ffile-prefix-map directly.

Filter raw target-triple CFLAGS spellings when compiling jitterentropy by @justsmth in aws/aws-lc-rs#1207

Prevents inherited optimization flags from overriding jitterentropy's required -O0, including when environment variables are set by a parent process using raw or legacy-normalized target triples.

Issues Being Closed

aws-lc-fips-sys v0.14.0 fails to build with Clang newer than 19 -- aws/aws-lc-rs#1202

FIPS compiler wrapper fails in Nix build environments -- aws/aws-lc-rs#1204

Raw target-triple CFLAGS should be filtered for jitterentropy -- aws/aws-lc-rs#1205

aws-lc-sys fails to build with Clang when CFLAGS includes -flto -- aws/aws-lc-rs#1211

Other Merged PRs

Prepare aws-lc-fips-sys v0.14.1 by @justsmth in aws/aws-lc-rs#1203

fix(publish): verify packaged crate with cargo build instead of cargo test by @justsmth in aws/aws-lc-rs#1201

fix: address clippy::assert_is_empty lints in ECB cipher modes by @justsmth in aws/aws-lc-rs#1210

ci: replace removed llvm-devel-lite package in FreeBSD jobs by @justsmth in aws/aws-lc-rs#1213

Prepare aws-lc-sys v0.45.0 by @justsmth in aws/aws-lc-rs#1220

Prepare aws-lc-fips-sys v0.14.2 by @justsmth in aws/aws-lc-rs#1221

Prepare v1.18.1 by @justsmth in aws/aws-lc-rs#1224

... (truncated)

Commits

22e629d Prepare v1.18.1 (#1224)
c4fde5c Prepare aws-lc-fips-sys v0.14.2 (#1221)
7943223 Prepare aws-lc-sys v0.45.0 (#1220)
8ea2229 fix: tighten AEAD, cipher IV, and digest API contracts (#1215)
bcca4d1 Add ECDSA P-256 SHA-1 ASN.1 verification algorithm (#1214)
32338a5 fix(builder): filter the raw-triple CFLAGS spelling for jitterentropy (#1207)
af422bd Fix -Wa,--debug-prefix-map probe (#1212)
749b26f ci: replace removed llvm-devel-lite package in FreeBSD jobs (#1213)
36c7a68 fix(publish): verify packaged crate with cargo build, not cargo test (#1201)
c71ab00 fix: address clippy::assert_is_empty lints in ECB cipher modes (#1210)
Additional commits viewable in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates clap_complete from 4.6.9 to 4.6.11

Commits

2cb76fd chore: Release
0b00b8d docs: Update changelog
3443000 Merge pull request #6526 from bonnefoa/fix-completion-escape
a1b6be7 fix(clap_complete): Fix value escape in zsh completion
face9e8 test(complete): Add completion test without arg's help
88053ab test(complete): Re-enable complete tests
e6adcc2 chore(release): Simplify replacements
13f2db5 chore: Release
3304fea docs: Update changelog
7b2ad34 Merge pull request #6521 from r-near/feat/derive-deferred-initialization
Additional commits viewable in compare view

Updates crc32fast from 1.5.1 to 1.5.2

Commits

7eb0b8a release 1.5.2
9272707 perf(baseline): fold whole 16-byte blocks in the tail (#61)
1e291e6 ci: add riscv64gc-unknown-linux-gnu to cross-test matrix (#59)
9d02870 Update license links (#58)
See full diff in compare view

Updates encoding_rs from 0.8.35 to 0.8.42

Commits

a155adc Increment version number to 0.8.42
6603aed Attach the multiversion crate to the std feature instead
f718b07 docs: multiversion is compiled only with simd-accel
4434afa chore: pull in multiversion only when it is actually used
96138f6 Update main branch in URLs
0860491 Increment version number to 0.8.41
2e9ea61 Document multiversion 0.9.0 and syn version
6667988 build(deps): accept multiversion 0.9.0
662cb42 Allow split_u16_stride_mut as dead code
55f2530 Increment version number to 0.8.40
Additional commits viewable in compare view

Updates indexmap from 2.14.0 to 2.14.2

Changelog

Sourced from indexmap's changelog.

2.14.2 (2026-09-04)

Fix item hygiene in map and set macros. Previously, an internal const CAP could shadow the same name in the caller's namespace.

Allow const initialization of empty indexmap_with_default! and indexset_with_default!. The hasher may also be omitted if it's inferrable.

2.14.1 (2026-08-28)

Simplify comparisons where Equivalent isn't needed (Q = K).

Unify index assertions for bounds checks.

Fix (or expect) clippy lints.

Commits

41a8708 Merge pull request #450 from cuviper/macros
0fb7b5c Release 2.14.2
55e6b28 Improve the empty macro cases
c067355 Fix item hygiene in user macros
fdf7e17 Merge pull request #449 from cuviper/release-2.14.1
ada540e Release 2.14.1
af93b43 expect clippy::redundant_slicing in tests
c95da18 fix clippy::derivable_impls
2196365 fix clippy::useless_vec (and more) in tests
1c2be7b use inherent usize::MAX
Additional commits viewable in compare view

Updates lru from 0.18.3 to 0.18.5

Changelog

Sourced from lru's changelog.

v0.18.5 - 2026-09-22

Specify desired hashbrown features to reduce dependencies.

v0.18.4 - 2026-09-02

Add retain method.

Commits

f1e9721 Merge pull request #248 from jeromefroe/jerome/prepare-0-18-5-release
4592b1c Prepare 0.18.5 release
c5efdfd Merge pull request #247 from brunowonka/hashbrown-deps
02bd23f Specify desired hashbrown features
2504ad0 Merge pull request #245 from jeromefroe/jerome/prepare-0-18-4-release
419b047 Prepare 0.18.4 release
05ba36e Merge pull request #241 from ChrisJr404/add-retain
d84bc5e Revert retain to the simpler removal implementation
36a810e Potential fix for pull request finding
e0d578c Merge remote-tracking branch 'up/master' into add-retain
Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)

Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)

Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

9e7d328 Prepare rand 0.10.3 (#1840)
f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
c994eb1 docs: fix angle unit in quick start example (#1839)
33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
521fab6 Stop pinning dependencies (#1820)
3f7c433 Stop pinning dependencies
cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates serde_with from 3.22.0 to 3.24.0

Release notes

Sourced from serde_with's releases.

serde_with v3.24.0

Added

Implement JsonSchemaAs for NoneAsEmptyString, so fields using it compile with the schemars_* features (#1014)

Changed

Make with_prefix! and with_suffix! available with the alloc feature, instead of only with std (#1008)

Fixed

Handle potential panics in deserialization of chrono and time DateTimes. This was privately reported by @NotAFlightRisk.

serde_with v3.23.0

Changed

Update syn and darling dependencies to use syn v3 (#992)

Update dev-dependencies to newer versions (#993)

Update base64 to a newer version. This should not have any API change, but some error messages might change. (#993)

serde_as can now parse cfg_attr(true, ...) and cfg_attr(false, ...) (#995) true/false are new literals as of Rust 1.88 but need to be parsed explicitly with the syn types. This is used when emitting schemars annotations.

Commits

35ac84c Bump version to 3.24 (#1016)
7b8e561 Bump version to 3.24
6e576c8 Bump the github-actions group with 2 updates (#1012)
7b1814b Add schemars support for NoneAsEmptyString (#1014)
92eeedd Handle potential panic during deserialization for large datetimes (#1015)
3404642 Handle potential panic during deserialization for large datetimes
c7073b9 Add schemars support for NoneAsEmptyString
6b32290 Run test with only the alloc feature (#1013)
3361c69 Run test with only the alloc feature
b43bb81 Reduce required feature for with_{prefix,suffix} from std to alloc (#1008)
Additional commits viewable in compare view

Updates tauri from 2.11.5 to 2.12.0

Release notes

Sourced from tauri's releases.

tauri-cli v2.12.0

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1271 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1091 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

447fa9f fix(core): tauri-utils publish
4f46cfc fix(ci): pnpm publish should use "debug" loglevel instead of "silly"
726822c apply version updates (#15634)
9f8922a docs(core): extend app_directories_override documentation (#16139)
dc894d4 chore: remove change file for unreleased fix (#16140)
152529e Revert "feat(core): add android activityEmbedding config (#15255)" (#16138)
7456ddd Revert "fix(core): proper unique identifier for menu items on channels store"...
15468de fix(bundler): recognize deb and rpm as self-contained updater targets (#16064)
8e70283 fix(bundler): update linuxdeploy and linuxdeploy-plugin-gtk (#16062)
1b91b7b fix(cli): list all locked crate versions in tauri info (#16102)
Additional commits viewable in compare view

Updates tauri-build from 2.6.3 to 2.7.0

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.0

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1271 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1091 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

447fa9f fix(core): tauri-utils publish
4f46cfc fix(ci): pnpm publish should use "debug" loglevel instead of "silly"
726822c apply version updates (#15634)
9f8922a docs(core): extend app_directories_override documentation (#16139)
dc894d4 chore: remove change file for unreleased fix (#16140)
152529e Revert "feat(core): add android activityEmbedding config (#15255)" (#16138)
7456ddd Revert "fix(core): proper unique identifier for menu items on channels store"...
15468de fix(bundler): recognize deb and rpm as self-contained updater targets (#16064)
8e70283 fix(bundler): update linuxdeploy and linuxdeploy-plugin-gtk (#16062)
1b91b7b fix(cli): list all locked crate versions in tauri info (#16102)
Additional commits viewable in compare view

Updates tauri-plugin-shell from 2.3.5 to 2.4.0

Release notes

Sourced from tauri-plugin-shell's releases.

stronghold-js v2.4.0

[2.4.0]

ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.

9b29b601 Update MSRV to 1.90 to match tauri.

a87a3c7d Update documentation.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-stronghold@2.4.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.7kB README.md
npm notice 19.4kB dist-js/index.cjs
npm notice 21.1kB dist-js/index.d.ts
npm notice 19.2kB dist-js/index.js
npm notice 750B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-stronghold
npm notice version: 2.4.0
npm notice filename: tauri-apps-plugin-stronghold-2.4.0.tgz
npm notice package size: 8.7 kB
npm notice unpacked size: 66.0 kB
npm notice shasum: 47b370840be057acd7d8f76046a9978a622cfcbe
npm notice integrity: sha512-5FIKueS+4xs66[...]j7Mzwt0NX4r1A==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2969525576
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-stronghold@2.4.0
stronghold v2.4.0

[2.4.0]

ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.

9b29b601 Update MSRV to 1.90 to match tauri.

a87a3c7d Update documentation.

... (truncated)

Commits

a2364a5 fix: integration test
67ebc13 fix(ci): check-publish job should check .changes/pre.json
cbfd428 Publish New Versions (v2) (#3618)
f460570 chore: fmt
a433ec0 fix: mobile clippy warnings
3d8a3c8 chore: edition 2024
b517cc7 fix: actually set rust-version to 1.90
b6a38a5 fix(ci): e2e test error reporting
9b29b60 feat: update to tauri 2.12
3a01943 tests(e2e): fix e2e failures on Linux and Windows (#3642)
Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

Commits

b1827ee Release 2.0.21
Description has been truncated

… 20 updates Bumps the cargo-minor-patch group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [async-compression](https://github.com/Nullus157/async-compression) | `0.4.43` | `0.4.48` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.0` | `1.18.1` | | [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` | | [clap_complete](https://github.com/clap-rs/clap) | `4.6.9` | `4.6.11` | | [crc32fast](https://github.com/srijs/rust-crc32fast) | `1.5.1` | `1.5.2` | | [encoding_rs](https://github.com/hsivonen/encoding_rs) | `0.8.35` | `0.8.42` | | [indexmap](https://github.com/indexmap-rs/indexmap) | `2.14.0` | `2.14.2` | | [lru](https://github.com/jeromefroe/lru-rs) | `0.18.3` | `0.18.5` | | [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.22.0` | `3.24.0` | | [tauri](https://github.com/tauri-apps/tauri) | `2.11.5` | `2.12.0` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.3` | `2.7.0` | | [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.5` | `2.4.0` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` | | [tokio-test](https://github.com/tokio-rs/tokio) | `0.4.5` | `0.4.6` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.7.0` | `0.7.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.26.0` | `1.26.1` | | [tauri-plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.3.3` | `2.5.0` | | [open](https://github.com/Byron/open-rs) | `5.4.2` | `5.4.4` | Updates `async-compression` from 0.4.43 to 0.4.48 - [Release notes](https://github.com/Nullus157/async-compression/releases) - [Commits](Nullus157/async-compression@async-compression-v0.4.43...async-compression-v0.4.48) Updates `aws-lc-rs` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.18.0...v1.18.1) Updates `clap` from 4.6.6 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7) Updates `clap_complete` from 4.6.9 to 4.6.11 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.9...clap_complete-v4.6.11) Updates `crc32fast` from 1.5.1 to 1.5.2 - [Commits](srijs/rust-crc32fast@v1.5.1...v1.5.2) Updates `encoding_rs` from 0.8.35 to 0.8.42 - [Commits](hsivonen/encoding_rs@v0.8.35...v0.8.42) Updates `indexmap` from 2.14.0 to 2.14.2 - [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md) - [Commits](indexmap-rs/indexmap@2.14.0...2.14.2) Updates `lru` from 0.18.3 to 0.18.5 - [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md) - [Commits](jeromefroe/lru-rs@0.18.3...0.18.5) Updates `rand` from 0.10.2 to 0.10.3 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.2...0.10.3) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `serde_with` from 3.22.0 to 3.24.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.22.0...v3.24.0) Updates `tauri` from 2.11.5 to 2.12.0 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.11.5...tauri-v2.12.0) Updates `tauri-build` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.6.3...tauri-build-v2.7.0) Updates `tauri-plugin-shell` from 2.3.5 to 2.4.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.5...os-v2.4.0) Updates `thiserror` from 2.0.20 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.20...2.0.21) Updates `tokio-test` from 0.4.5 to 0.4.6 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-test-0.4.5...tokio-test-0.4.6) Updates `tower-http` from 0.7.0 to 0.7.1 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.7.0...tower-http-0.7.1) Updates `uuid` from 1.26.0 to 1.26.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.26.0...v1.26.1) Updates `tauri-plugin-notification` from 2.3.3 to 2.5.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.3...fs-v2.5.0) Updates `open` from 5.4.2 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.4.2...v5.4.4) --- updated-dependencies: - dependency-name: async-compression dependency-version: 0.4.48 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: aws-lc-rs dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: clap_complete dependency-version: 4.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: crc32fast dependency-version: 1.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: encoding_rs dependency-version: 0.8.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: indexmap dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: lru dependency-version: 0.18.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: rand dependency-version: 0.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_with dependency-version: 3.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tauri dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tauri-build dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tauri-plugin-shell dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio-test dependency-version: 0.4.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tower-http dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.26.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tauri-plugin-notification dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-08T17:00:13Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026

dependabot Bot closed this Oct 8, 2026

dependabot Bot deleted the dependabot/cargo/dev/cargo-minor-patch-93f30c72e8 branch October 8, 2026 17:00

Navigation Menu

Repository navigation

chore(deps): bump the cargo-minor-patch group across 1 directory with 20 updates - #85

chore(deps): bump the cargo-minor-patch group across 1 directory with 20 updates#85
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/cargo-minor-patch-93f30c72e8

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

async-compression-v0.4.48

Fixed

async-compression-v0.4.47

Fixed

async-compression-v0.4.46

Other

async-compression-v0.4.45

Other

async-compression-v0.4.44

Other

aws-lc-rs v1.18.1

What's Changed

Upstream AWS-LC

Build Improvements

Issues Being Closed

Other Merged PRs

v4.6.7

[4.6.7] - 2026-09-14

Features

[4.6.7] - 2026-09-14

Features

2.14.2 (2026-09-04)

2.14.1 (2026-08-28)

v0.18.5 - 2026-09-22

v0.18.4 - 2026-09-02

[0.10.3] — 2026-09-20

Fixes

Changes

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

serde_with v3.24.0

Added

Changed

Fixed

serde_with v3.23.0

Changed

tauri-cli v2.12.0

tauri-build v2.7.0

stronghold-js v2.4.0

[2.4.0]

stronghold v2.4.0

[2.4.0]

2.0.21

Uh oh!

dependabot Bot commented on behalf of github Oct 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading