chore(deps): bump the cargo-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #195 · jeremymcs/patchdeck

dependabot · 2026-10-17T02:33:35Z

Bumps the cargo-dependencies group with 8 updates in the /src-tauri directory:

Package	From	To
tauri-plugin-single-instance	`2.4.2`	`2.5.3`
tauri-plugin-dialog	`2.7.1`	`2.8.2`
tauri-plugin-shell	`2.3.5`	`2.5.0`
tauri-plugin-notification	`2.3.3`	`2.6.0`
serde	`1.0.228`	`1.0.229`
serde_json	`1.0.150`	`1.0.154`
tokio	`1.52.3`	`1.53.3`
tauri-build	`2.6.2`	`2.7.3`

Updates tauri-plugin-single-instance from 2.4.2 to 2.5.3

Release notes

Sourced from tauri-plugin-single-instance's releases.

single-instance v2.5.3

[2.5.3]

818d2e04 (#3645) On Windows, a second instance no longer waits indefinitely for a first instance that stopped processing messages: it stops waiting after 10 seconds and exits. The first instance may still receive the arguments once it resumes processing messages.

323fe80d (#3644) A second instance no longer panics when a command-line argument is not valid Unicode: such an argument is forwarded with its invalid parts replaced by U+FFFD. A working directory that is not valid Unicode is now forwarded the same way instead of as an empty string.
Updating crates.io index
   Packaging tauri-plugin-single-instance v2.5.3 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Updating crates.io index
warning: package `yoke-derive v0.8.3` in Cargo.lock is yanked in registry `crates-io`
  |
  = help: consider updating to a version that is not yanked
    Packaged 15 files, 170.3KiB (46.5KiB compressed)
   Uploading tauri-plugin-single-instance v2.5.3 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Uploaded tauri-plugin-single-instance v2.5.3 to registry `crates-io`
note: waiting for tauri-plugin-single-instance v2.5.3 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-single-instance v2.5.3 at registry `crates-io`
barcode-scanner-js v2.5.3

[2.5.3]

d80b1be2 (#3551 by @bizkda) On Android, expose the camera bound by an active scan so the torch plugin can turn the flash on and off during a scan.

b3e52ce0 (#3571 by @ghostshreyash) Fix cancel() on Android leaving the pending scan() promise unsettled: destroy() cleared the saved invoke before it was rejected, so the "cancelled" rejection never reached the caller. The pending scan is now rejected before the camera is torn down, matching iOS.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-barcode-scanner@2.5.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.3kB README.md
npm notice 5.3kB dist-js/index.cjs
npm notice 5.3kB dist-js/index.d.ts
npm notice 5.2kB dist-js/index.js
npm notice 755B package.json
npm notice Tarball Details
</tr></table> 

... (truncated)

Commits

06124af publish new versions (#2972)
060219e chore(deps): update dependency @rollup/plugin-typescript to v12.3.0 (#3067)
c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
cdc7eec chore(deps): update dependency @rollup/plugin-typescript to v12.2.0 (#3066)
6314b00 chore: temp delete updater changefile
fb4c8ae chore(deps): update dependency typescript-eslint to v8.46.2 (#3060)
fccc1cf chore(deps): update eslint monorepo to v9.38.0 (#3044)
3702308 chore(deps): update dependency rollup to v4.52.5 (#3043)
c9c8b39 chore(deps): update dependency typescript-eslint to v8.46.1 (#3025)
Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.1 to 2.8.2

Release notes

Sourced from tauri-plugin-dialog's releases.

http-js v2.8.2

[2.8.2]

Dependencies

Upgraded to fs-js@2.7.0

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-http@2.8.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 7.7kB dist-js/index.cjs
npm notice 3.4kB dist-js/index.d.ts
npm notice 7.7kB dist-js/index.js
npm notice 655B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-http
npm notice version: 2.8.2
npm notice filename: tauri-apps-plugin-http-2.8.2.tgz
npm notice package size: 5.5 kB
npm notice unpacked size: 23.0 kB
npm notice shasum: 2c9d8f56a25f10bcf19fc3ceca2acd40457487b2
npm notice integrity: sha512-xVHnZdIkPY9+/[...]BWzSjWEVAvvUA==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189625257
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-http@2.8.2

http v2.8.2

[2.8.2]

Dependencies

Upgraded to fs-js@2.7.0

... (truncated)

Commits

6bbd44d publish new versions (#3675)
fc18d05 fix(global-shortcut): release the shortcuts lock before running handlers (#3683)
42ae8b4 fix(ios): make init_plugin_* entry points public so release builds link on ...
818d2e0 fix(single-instance): limit second instance's wait on Windows (#3645)
323fe80 fix(single-instance): forward non-Unicode arguments and cwd (#3644)
6772581 test(e2e): fix __name usage on FS test
46f7c87 chore: fmt
a8acd17 feat(shell): add process group spawn option (fix #1332) (#3351)
e03dca6 fix(fs): accept absolute paths in the iOS security-scope commands (#3628)
3a90001 fix(fs): resolve symlinks of missing paths before checking the scope (#3627)
Additional commits viewable in compare view

Updates tauri-plugin-shell from 2.3.5 to 2.5.0

Release notes

Sourced from tauri-plugin-shell's releases.

shell-js v2.5.0

[2.5.0]

42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-shell@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 21.8kB dist-js/index.cjs
npm notice 22.0kB dist-js/index.d.ts
npm notice 21.7kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-shell
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-shell-2.5.0.tgz
npm notice package size: 8.0 kB
npm notice unpacked size: 69.6 kB
npm notice shasum: 16d0b1a1f5b02689777a01dc78b9d591eec3a3b7
npm notice integrity: sha512-FZ6RtcikCxJ35[...]DcLs7JIfuFkWw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189638540
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-shell@2.5.0

shell v2.5.0

[2.5.0]

42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

... (truncated)

Commits

See full diff in compare view

Updates tauri-plugin-notification from 2.3.3 to 2.6.0

Release notes

Sourced from tauri-plugin-notification's releases.

notification-js v2.6.0

[2.6.0]

42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

feat

46381516 (#3671) Report actions on desktop: a click on a notification (tap) or on one of the actions of its action type reaches onAction and the new Rust Notification::on_action, which also works on mobile. registerActionTypes, removeActive (Linux and the BSDs) and the listener commands no longer fail with "command not found" on desktop.

The onAction callback is now typed with the new ActionPerformed interface, which is what every platform sends, instead of Options. Callbacks annotated with Options must be updated.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-notification@2.6.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 16.6kB dist-js/index.cjs
npm notice 26.1kB dist-js/index.d.ts
npm notice 16.2kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 663B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-notification
npm notice version: 2.6.0
npm notice filename: tauri-apps-plugin-notification-2.6.0.tgz
npm notice package size: 11.1 kB
npm notice unpacked size: 64.7 kB
npm notice shasum: 68f6090e06e17a92fd1803c7b40a01e4ee20cc7c
npm notice integrity: sha512-QvpsQ6L6uSGT/[...]J3c52S+1afsIw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189634908
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-notification@2.6.0

notification v2.6.0

... (truncated)

Commits

a2364a5 fix: integration test
67ebc13 fix(ci): check-publish job should check .changes/pre.json
cbfd428 Publish New Versions (v2) (#3618)
f460570 chore: fmt
a433ec0 fix: mobile clippy warnings
3d8a3c8 chore: edition 2024
b517cc7 fix: actually set rust-version to 1.90
b6a38a5 fix(ci): e2e test error reporting
9b29b60 feat: update to tauri 2.12
3a01943 tests(e2e): fix e2e failures on Linux and Windows (#3642)
Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

io: wake and drop DuplexStream wakers outside the lock (#8618)

macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)

runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)

sync: wake waiters outside the lock when closing a semaphore (#8529)

test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits

a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
482eadd runtime: record time wake when unparking tasks on current thread (#8595)
55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
0448618 sync: make tracing_sync tests synchronous (#8427)
2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
Additional commits viewable in compare view

Updates tauri-build from 2.6.2 to 2.7.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1314 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1045 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 4 allowed warnings found

[2.7.3]

Enhancements

... (truncated)

Commits

59b63ab Apply Version Updates From Current Changes (#16255)
55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
744ff2b chore(deps): bump rustls to 0.23.46
c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
dc637db chore: add missing api change file (#16260)
b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 8 updates Bumps the cargo-dependencies group with 8 updates in the /src-tauri directory: | Package | From | To | | --- | --- | --- | | [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.4.2` | `2.5.3` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.1` | `2.8.2` | | [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.5` | `2.5.0` | | [tauri-plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.3.3` | `2.6.0` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.154` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.3` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.2` | `2.7.3` | Updates `tauri-plugin-single-instance` from 2.4.2 to 2.5.3 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.2...http-v2.5.3) Updates `tauri-plugin-dialog` from 2.7.1 to 2.8.2 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.7.1...http-v2.8.2) Updates `tauri-plugin-shell` from 2.3.5 to 2.5.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.5...fs-v2.5.0) Updates `tauri-plugin-notification` from 2.3.3 to 2.6.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.3...fs-v2.6.0) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.150 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.150...v1.0.154) Updates `tokio` from 1.52.3 to 1.53.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.3) Updates `tauri-build` from 2.6.2 to 2.7.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.6.2...tauri-build-v2.7.3) --- updated-dependencies: - dependency-name: tauri-plugin-single-instance dependency-version: 2.5.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: tauri-plugin-dialog dependency-version: 2.8.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: tauri-plugin-shell dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: tauri-plugin-notification dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: tokio dependency-version: 1.53.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: tauri-build dependency-version: 2.7.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-10-17T02:33:40Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
patchdeck	Ready	Preview	Oct 17, 2026 2:33am UTC

socket-security · 2026-10-17T02:34:04Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/tokio@1.52.3 ⏵ 1.53.3	^-2
	cargo/tauri@2.11.2 ⏵ 2.12.4
	cargo/serde@1.0.228 ⏵ 1.0.229
	cargo/serde_json@1.0.150 ⏵ 1.0.154
	cargo/tauri-plugin-shell@2.3.5 ⏵ 2.5.0
	cargo/tauri-plugin-notification@2.3.3 ⏵ 2.6.0
	cargo/tauri-plugin-dialog@2.7.1 ⏵ 2.8.2
	cargo/tauri-build@2.6.2 ⏵ 2.7.3	⁺¹
	cargo/tauri-plugin-single-instance@2.4.2 ⏵ 2.5.3

View full report

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 17, 2026

vercel Bot deployed to Preview October 17, 2026 02:33

View deployment

Navigation Menu

Repository navigation

chore(deps): bump the cargo-dependencies group across 1 directory with 8 updates - #195

chore(deps): bump the cargo-dependencies group across 1 directory with 8 updates#195
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-dependencies-8a2cee0e07

dependabot Bot commented on behalf of github Oct 17, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Oct 17, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 17, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

single-instance v2.5.3

[2.5.3]

barcode-scanner-js v2.5.3

[2.5.3]

http-js v2.8.2

[2.8.2]

Dependencies

http v2.8.2

[2.8.2]

Dependencies

shell-js v2.5.0

[2.5.0]

shell v2.5.0

[2.5.0]

notification-js v2.6.0

[2.6.0]

feat

notification v2.6.0

v1.0.229

v1.0.154

v1.0.153

v1.0.152

v1.0.151

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

Changed

Fixed

Fixed (unstable)

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

tauri-build v2.7.3

[2.7.3]

Enhancements

Uh oh!

vercel Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Oct 17, 2026

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 17, 2026 •

edited

Loading

vercel Bot commented Oct 17, 2026 •

edited

Loading