chore(deps): bump the cargo-dependencies group with 5 updates

[dependabot]

Bumps the cargo-dependencies group with 5 updates:

Package	From	To
eframe	0.35.0	0.36.1
js-sys	0.3.94	0.3.104
wasm-bindgen	0.2.117	0.2.127
wasm-bindgen-futures	0.4.67	0.4.77
web-sys	0.3.94	0.3.104

Updates eframe from 0.35.0 to 0.36.1

Release notes

Sourced from eframe's releases.

0.36.1 - Sense::drag() bugfix

egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.

Try it now: https://www.egui.rs/

egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.

• Fix Sense::drag detecting drags when clicking widget above it #8396 by @​lucasmerlin

0.36.0 - Improved mobile keyboard support

egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.

Try it now: https://www.egui.rs/

egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.

Highlights ✨

Improved mobile keyboard support

Autocomplete, autocorrect and IMEs now work correctly on iOS and android (on eframe web)!

ScreenRecording_08-05-2026.11-48-49_1.MP4

• via #8045 by @​umajho (and @​rustbasic who helped a lot with testing)

Drag to reopen panels

You can now reopen closed panels by dragging the handle:

Screen.Recording.2026-08-05.at.11.45.10.mov

Window decoration theme is now synced with app theme

Previously, when switching themes, the window chrome (OS titlebar), stayed in the OS theme. Now, it syncs with the app theme:

Screen.Recording.2026-08-05.at.11.45.47.mov

... (truncated)

Changelog

Sourced from eframe's changelog.

0.36.1 - 2026-08-07

• Fix Sense::drag detecting drags when clicking widget above it #8396 by @​lucasmerlin

0.36.0 - 2026-08-05

Highlights ✨

This release drastically improves the mobile keyboard experience (when using eframe web). It also adds drag-to-open panels, window chrome theme sync and a lot of small bug fixes and improvements!

Improved mobile keyboard support

Autocomplete, autocorrect and IMEs now work correctly on iOS and android (on eframe web)!

ScreenRecording_08-05-2026.11-48-49_1.MP4

• via #8045 by @​umajho (and @​rustbasic who helped a lot with testing)

Drag to reopen panels

You can now reopen closed panels by dragging the handle:

Screen.Recording.2026-08-05.at.11.45.10.mov

Window decoration theme is now synced with app theme

Previously, when switching themes, the window chrome (OS titlebar) stayed in the OS theme. Now, it syncs with the app theme:

Screen.Recording.2026-08-05.at.11.45.47.mov

⭐ Added

• Add BoxedWidget: dynamically dispatched widgets #8378 by @​emilk
• Add WidgetText::size #8377 by @​emilk
• Add LayoutJob::clear #8376 by @​emilk
• Sync window theme with egui theme #8299 by @​lucasmerlin
• Add egui::Window::title_frame #8353 by @​Its-Just-Nans
• Add extra_text_line_spacing to control vertical spacing between text lines #8040 by @​rustbasic
• Add drag-to-open for collapsible panels #8363 by @​emilk

🔧 Changed

• Rerun sizing_pass when reopening popup #8315 by @​yay
• Update MSRV from 1.92 to 1.95 #8348 by @​emilk
• Treat a press that leaves a widget as a drag #8365 by @​emilk

🔥 Removed

• Remove Modifiers from RawInput and make it a egui::Event #8336 by @​lucasmerlin
• Remove clip_rect_margin #8366 by @​emilk

... (truncated)

Commits

• 4c1f2fa Release 0.36.1 - Fix Sense::drag bug
• 42cd821 Fix Sense::drag detecting drags when clicking widget above it (#8396)
• 2397194 Release 0.36.0 - Improved mobile keyboard support (#8390)
• e37d44a Never run an egui pass when nothing will be shown (#8387)
• 90e0302 Fix a few nightly clippy lints (#8388)
• 5347b0a Fix window with a Grid being widenable but not shrinkable again (#8386)
• 622bbbe Add drag-to-open for collapsible panels (#8363)
• 98eab50 Treat a press that leaves a widget as a drag (#8365)
• 78c0e39 Fix ScrollArea failure by handling horizontal and vertical scrolling separate...
• 5c0b690 Add extra_text_line_spacing to control vertical spacing between text lines ...
• Additional commits viewable in compare view

Updates js-sys from 0.3.94 to 0.3.104

Commits

• See full diff in compare view

Updates wasm-bindgen from 0.2.117 to 0.2.127

Release notes

Sourced from wasm-bindgen's releases.

0.2.127

Added

• Navigation API to web-sys #5247

• Added riscv64gc-unknown-linux-gnu release artifacts. #5265

• Added JsNullable<T>, modeling WebIDL nullable types (T | null). Both null and undefined are treated as absent, per WebIDL's ECMAScript conversion rules; the canonical empty value produced from Rust is null. web-sys now uses JsNullable<T> instead of JsOption<T> for nullable types nested inside generics (e.g. Promise<GpuError?> from GPUDevice.popErrorScope()), fixing spec-defined null resolutions being treated as present values under JsOption<T>'s strict undefined-only semantics. JsNullable<T> participates in the same upcast lattice as JsOption<T> (including contravariant closure argument casts), and additionally upcasts from Null and from JsOption<T> itself. Imported extern types now also upcast into JsOption<JsValue> and JsNullable<JsValue>, so catch-all nullable closures can be used where a typed callback is expected. #5234

Changed

• Emscripten output now marks public exports (free functions, classes, enums, and namespace roots) with the __export: true and __force: true symbol attributes on their addToLibrary entries, instead of mutating EXPORTED_FUNCTIONS and pushing to extraLibraryFuncs at library-load time. The $initBindgen init closure is kept via __force: true, and private symbols (including namespace leaves) carry neither attribute — they remain reachable through __deps. Requires an emscripten with __export/__force symbol-attribute support.

• Updated WebGPU bindings to the August 2026 spec, including the new GPUCommandEncoder::copy_buffer_to_buffer overloads and setImmediates. #5246

• Unstable API overload names now elide name tokens shared by every overload variant: LockManager::request_with_callback is now request, and request_with_options_and_callback is now request_with_options. #5246

Fixed

• The name property of the JS error thrown for panic=unwind is now set from a string literal instead of PanicError.name, so it survives minification. #5260

... (truncated)

Changelog

Sourced from wasm-bindgen's changelog.

0.2.127

Added

• Navigation API to web-sys #5247

• Added riscv64gc-unknown-linux-gnu release artifacts. #5265

• Added JsNullable<T>, modeling WebIDL nullable types (T | null). Both null and undefined are treated as absent, per WebIDL's ECMAScript conversion rules; the canonical empty value produced from Rust is null. web-sys now uses JsNullable<T> instead of JsOption<T> for nullable types nested inside generics (e.g. Promise<GpuError?> from GPUDevice.popErrorScope()), fixing spec-defined null resolutions being treated as present values under JsOption<T>'s strict undefined-only semantics. JsNullable<T> participates in the same upcast lattice as JsOption<T> (including contravariant closure argument casts), and additionally upcasts from Null and from JsOption<T> itself. Imported extern types now also upcast into JsOption<JsValue> and JsNullable<JsValue>, so catch-all nullable closures can be used where a typed callback is expected. #5234

Changed

• Emscripten output now marks public exports (free functions, classes, enums, and namespace roots) with the __export: true and __force: true symbol attributes on their addToLibrary entries, instead of mutating EXPORTED_FUNCTIONS and pushing to extraLibraryFuncs at library-load time. The $initBindgen init closure is kept via __force: true, and private symbols (including namespace leaves) carry neither attribute — they remain reachable through __deps. Requires an emscripten with __export/__force symbol-attribute support.

• Updated WebGPU bindings to the August 2026 spec, including the new GPUCommandEncoder::copy_buffer_to_buffer overloads and setImmediates. #5246

• Unstable API overload names now elide name tokens shared by every overload variant: LockManager::request_with_callback is now request, and request_with_options_and_callback is now request_with_options. #5246

Fixed

• The name property of the JS error thrown for panic=unwind is now set from a string literal instead of PanicError.name, so it survives minification. #5260

... (truncated)

Commits

• a579ee6 Release 0.2.127 (#5219)
• 30e0200 Add JsNullable for WebIDL nullable types (#5258)
• 01b12ef Update WebGPU API to 2026-08-02 (#5246)
• 2f23baa Add riscv64gc-unknown-linux-gnu release artifacts (#5265)
• bec51f6 slice_to_array fixes (#5261)
• f50896d Use string literal for PanicError name so it survives minification (#5262)
• 389c36d Leave env.memory to the emscripten runtime (#5254)
• 36b07b1 Remove dead WBINDGEN_I_PROMISE_JS_SYNTAX_WORKS_IN_NODE env var from CI (#5259)
• 2baf51c Throw a clear error for non-ok fetch Responses in __wbg_load (#5256)
• 7fa3bc4 Add Navigation API to web-sys (#5247)
• Additional commits viewable in compare view

Updates wasm-bindgen-futures from 0.4.67 to 0.4.77

Commits

• See full diff in compare view

Updates web-sys from 0.3.94 to 0.3.104

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

• New Features

  • Improved browser and local file-drop handling, including asynchronous reading and clearer error reporting.
  • Added validation for file size and session limits during browser uploads.

• Bug Fixes

  • Prevented dropped files without local paths from producing incorrect errors.
  • Improved handling of failed browser file reads and partially invalid drop batches.

• Maintenance

  • Updated the minimum supported Rust version and refreshed desktop and WebAssembly framework components.

[timcogan]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 0931cf7e-1576-49a5-a9c2-8b57cff4441d

📥 Commits

Reviewing files that changed from the base of the PR and between a07ae92 and e9a53fd.

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (3)

• Cargo.toml
• src/app.rs
• src/dicom.rs

---

📝 Walkthrough

Walkthrough

The project now requires Rust 1.95 and eframe 0.36.1. Browser and native file drops use dropped-file handles and owned byte vectors. Browser read errors remain visible to the drop state. DICOM VR divisibility checks use is_multiple_of.

Changes

Platform and file-drop handling

Layer / File(s)	Summary
Platform dependency updates Cargo.toml	The minimum Rust version is 1.95. The direct egui dependency is removed. eframe is upgraded to 0.36.1 for supported targets.
Owned web-drop state and asynchronous reads src/app.rs	Web selections store owned bytes. Browser drops validate handles and limits, read files asynchronously, queue errors, and deliver successful batches.
Dropped-file handle integration and validation src/app.rs	Native drops obtain paths through DroppedFileHandle. Tests use handle-backed fixtures and cover deferred errors and updated native behavior.

DICOM VR checks

Layer / File(s)	Summary
Private VR divisibility checks src/dicom.rs	Malformed private binary VR checks use equivalent is_multiple_of conditions.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Sequence Diagram(s)

sequenceDiagram
  participant Browser
  participant begin_web_drop_read
  participant DroppedFileHandle
  participant WEB_DROP_ERROR
  Browser->>begin_web_drop_read: submit dropped file handles
  begin_web_drop_read->>DroppedFileHandle: read and validate each file
  DroppedFileHandle-->>begin_web_drop_read: bytes or read error
  begin_web_drop_read->>WEB_DROP_ERROR: queue read error
  begin_web_drop_read-->>Browser: deliver successful batch through polling

Loading

Possibly related PRs

• timcogan/perspecta#33: Introduced the file drag-and-drop flow updated in src/app.rs.
• timcogan/perspecta#47: Introduced the private DICOM VR repair logic updated in src/dicom.rs.
• timcogan/perspecta#110: Introduced the browser file-selection behavior refined in src/app.rs.

Suggested reviewers: timcogan

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description explains the dependency updates but omits the required Testing, Screenshots, and Checklist sections.	Add the required Testing, Screenshots, and Checklist sections, including test results and sanitized screenshots for the changed UI behavior.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the grouped Cargo dependency update and matches the main change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/cargo/cargo-dependencies-3f459f19ee

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}