chore(deps): bump the cargo-patch group across 1 directory with 8 updates by dependabot[bot] · Pull Request #129 · Yurken/xiaoyan

dependabot · 2026-09-21T01:19:11Z

Bumps the cargo-patch group with 8 updates in the /apps/desktop/src-tauri directory:

Package	From	To
tauri-plugin-fs	`2.5.1`	`2.5.2`
tauri-plugin-opener	`2.5.4`	`2.5.5`
tauri-plugin-shell	`2.3.5`	`2.3.6`
futures-util	`0.3.33`	`0.3.34`
pdf-extract	`0.12.0`	`0.12.1`
flate2	`1.1.9`	`1.1.10`
tar	`0.4.45`	`0.4.46`
aes-gcm	`0.11.0`	`0.11.1`

Updates tauri-plugin-fs from 2.5.1 to 2.5.2

Release notes

Sourced from tauri-plugin-fs's releases.

fs-js v2.5.2

[2.5.2]

db9c5998 (#3531 by @Legend-Master) Fix missing consumer-rules.pro on Gradle v9.

f8053e65 (#3527 by @Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.

685610ae (#3507 by @Legend-Master) Fix fs:default and fs:read-app-specific-dirs-recursive not giving any command scopes

3fb27bf1 (#3504 by @vasfvitor) Fixed deny-webview-data has no effect, and on Linux, only deny access to the webview data paths instead of the entire $APPLOCALDATA
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-fs@2.5.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.4kB README.md
npm notice 32.8kB dist-js/index.cjs
npm notice 32.6kB dist-js/index.d.ts
npm notice 32.0kB dist-js/index.js
npm notice 697B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-fs
npm notice version: 2.5.2
npm notice filename: tauri-apps-plugin-fs-2.5.2.tgz
npm notice package size: 21.5 kB
npm notice unpacked size: 101.5 kB
npm notice shasum: 262ff39542e50e96f1ee8b6b7d471898736d6609
npm notice integrity: sha512-XXvMSnFiob+G1[...]J5sDsniRyWxlg==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662643742
+ @tauri-apps/plugin-fs@2.5.2
fs v2.5.2

[2.5.2]

db9c5998 (#3531 by @Legend-Master) Fix missing consumer-rules.pro on Gradle v9.

f8053e65 (#3527 by @Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.

685610ae (#3507 by @Legend-Master) Fix fs:default and fs:read-app-specific-dirs-recursive not giving any command scopes

... (truncated)

Commits

6aa2854 publish new versions (#3509)
9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
98f8787 ci: fix typo in workflow permissions
1a7b12c ci: add explicit token permissions
2f4c85c chore(deps): bump serde_with (#3490)
c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
db9c599 fix(android): missing consumer-rules.pro (#3531)
9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
685610a fix(fs): default permissions (#3507)
f8053e6 docs: cargo features (#3527)
Additional commits viewable in compare view

Updates tauri-plugin-opener from 2.5.4 to 2.5.5

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.5.5

[2.5.5]

db9c5998 (#3531 by @Legend-Master) Fix missing consumer-rules.pro on Gradle v9.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.5.5
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.5.5
npm notice filename: tauri-apps-plugin-opener-2.5.5.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: ef7b9aca07cb3416575e5024b996926c43276b69
npm notice integrity: sha512-xvzGai5aQds8j[...]Fh1MvmDp8QR0g==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662648628
+ @tauri-apps/plugin-opener@2.5.5

opener v2.5.5

[2.5.5]

db9c5998 (#3531 by @Legend-Master) Fix missing consumer-rules.pro on Gradle v9.

... (truncated)

Commits

6e2e7e4 publish new versions (#3070)
9a2c98f temp: remove updater changefiles
4a2ecb6 chore(deps): update rkyv, closes #3196
31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
Additional commits viewable in compare view

Updates tauri-plugin-shell from 2.3.5 to 2.3.6

Release notes

Sourced from tauri-plugin-shell's releases.

nfc-js v2.3.6

[2.3.6]

db9c5998 (#3531 by @Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
52672616 (#3419 by @pascalauroboa) Expect a NFCTag as input and return a ScanResponse in the scan function.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-nfc@2.3.6
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.1kB README.md
npm notice 5.0kB dist-js/index.cjs
npm notice 3.7kB dist-js/index.d.ts
npm notice 4.8kB dist-js/index.js
npm notice 679B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-nfc
npm notice version: 2.3.6
npm notice filename: tauri-apps-plugin-nfc-2.3.6.tgz
npm notice package size: 4.6 kB
npm notice unpacked size: 18.2 kB
npm notice shasum: 4c007abebc0ac20e8dcba1eccd70646f6fec9469
npm notice integrity: sha512-H0Fa+M1BSyHtL[...]IMQtv0NZAfggA==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662653270
+ @tauri-apps/plugin-nfc@2.3.6

nfc v2.3.6

[2.3.6]

db9c5998 (#3531 by @Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
52672616 (#3419 by @pascalauroboa) Expect a NFCTag as input and return a ScanResponse in the scan function.

... (truncated)

Commits

6aa2854 publish new versions (#3509)
9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
98f8787 ci: fix typo in workflow permissions
1a7b12c ci: add explicit token permissions
2f4c85c chore(deps): bump serde_with (#3490)
c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
db9c599 fix(android): missing consumer-rules.pro (#3531)
9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
685610a fix(fs): default permissions (#3507)
f8053e6 docs: cargo features (#3527)
Additional commits viewable in compare view

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Commits

705e6b5 Release 0.3.34
616dac7 compat: Inline RawWaker clone function
4176369 Inline remaining RawWaker clone functions
f17a895 Fix cloned FuturesUnordered waker identity
51d62ad macro: bump syn to v3 (#3028)
9e26177 ci: Reduce timeout-minutes
b2d0983 tsan: Enable Adaptive Delay
f733d0e Miri: Ignore compat tests
e5def2f Rename default branch to main
See full diff in compare view

Updates pdf-extract from 0.12.0 to 0.12.1

Commits

47b792b chore: Release pdf-extract version 0.12.1
8ad28bd Reset font cache per page to fix cross-page resource-name reuse
See full diff in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

feat: reuse zlib's decoder buffer by @Vaiz in rust-lang/flate2-rs#532

feat: add reset method for read::GzDecoder and buffered::GzDecoder by @Vaiz in rust-lang/flate2-rs#534

Drop cloudflare-zlib by @kornelski in rust-lang/flate2-rs#539

Add a wrapper for the Crc struct by @MikkelPaulson in rust-lang/flate2-rs#540

Bump miniz_oxide to 0.9 by @oscargus in rust-lang/flate2-rs#543

Upgrade miniz_oxide and add unit tests of the different flush kinds by @fintelia in rust-lang/flate2-rs#498

Fix infinite loop in writing gzip header/footer by @Shnatsel in rust-lang/flate2-rs#547

test: generate corrupt gzip fixture at runtime by @nanookclaw in rust-lang/flate2-rs#550

Reject oversized gzip extra fields by @Byron in rust-lang/flate2-rs#553

Reject incomplete deflate streams at EOF by @Guflly in rust-lang/flate2-rs#556

Include README.md in a private module by @bushrat011899 in rust-lang/flate2-rs#562

Add no_std support using nightly alloc_io by @bushrat011899 in rust-lang/flate2-rs#559

Update get_mut() documentation to make clear how 'inner` can be used by @Byron in rust-lang/flate2-rs#558

New Contributors

@Vaiz made their first contribution in rust-lang/flate2-rs#532

@MikkelPaulson made their first contribution in rust-lang/flate2-rs#540

@oscargus made their first contribution in rust-lang/flate2-rs#543

@nanookclaw made their first contribution in rust-lang/flate2-rs#550

@Guflly made their first contribution in rust-lang/flate2-rs#556

@bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
fb5228d Merge pull request #559 from bushrat011899/no_std
6ed3ba3 Add executable no_std example
faed8a0 Expand CI to test no_std compatibility and correctness
2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
3fe1126 Centralize usage of std for error and io
98e313a Add GzHeader::mtime_as_duration
0642965 Switch to core implicit prelude and only use std where required
454a63c Remove left-over dbg! statement
2a490b7 Add runtime_detection feature
Additional commits viewable in compare view

Updates tar from 0.4.45 to 0.4.46

Release notes

Sourced from tar's releases.

0.4.46

Security

archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm) by @cgwalters in composefs/tar-rs#454

See also GHSA-3cv2-h65g-fgmm

Other changes

ci: Fix and re-enable reverse dependency testing by @cgwalters in composefs/tar-rs#444

Update astral-tokio-tar requirement from 0.5 to 0.6 by @dependabot[bot] in composefs/tar-rs#446

Update some links by @atouchet in composefs/tar-rs#445

Add support of absolute paths by @zxvfc in composefs/tar-rs#426

docs: Expand notes on concurrent mutations and following symlinks by @cgwalters in composefs/tar-rs#453

Update repo links by @cgwalters in composefs/tar-rs#451

ci: Add crates.io trusted publishing workflow by @cgwalters in composefs/tar-rs#456

Release 0.4.46 by @cgwalters in composefs/tar-rs#455

New Contributors

@dependabot[bot] made their first contribution in composefs/tar-rs#446

@atouchet made their first contribution in composefs/tar-rs#445

@zxvfc made their first contribution in composefs/tar-rs#426

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

Commits

fc459c1 Release 0.4.46
43e05a8 ci: Add crates.io trusted publishing workflow
bba5666 Update repo links
cd94c46 docs: Document TOCTOU / concurrent-mutation threat model
1b4997c builder: Expand docs for follow_symlinks and append_dir_all
bab14dd archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm)
2349b49 Add support of absolute paths
39d0311 Update some links
59d803e Update astral-tokio-tar requirement from 0.5 to 0.6
8296b9a ci: Fix and re-enable reverse dependency testing (#444)
See full diff in compare view

Updates aes-gcm from 0.11.0 to 0.11.1

Commits

2eff6cc Cut releases that replace subtle with ctutils (#880)
c90047f Replace subtle with ctutils (#879)
da2169e ocb3: remove unused ctr and zeroize dependencies (#876)
f5374f3 Add missing crates to the root readme table (#877)
e946770 eax v0.6.0 (#875)
88ceb7d deoxys v0.2.0 (#874)
7d22c81 belt-dwp v0.1.0 (#873)
09308ef ascon-aead128 v0.1.0 (#872)
e1b1e6e aes-siv v0.8.0 (#871)
303c27f ccm v0.6.0 (#869)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Bumps the cargo-patch group with 8 updates in the /apps/desktop/src-tauri directory: | Package | From | To | | --- | --- | --- | | [tauri-plugin-fs](https://github.com/tauri-apps/plugins-workspace) | `2.5.1` | `2.5.2` | | [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.4` | `2.5.5` | | [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.5` | `2.3.6` | | [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` | | [pdf-extract](https://github.com/jrmuizel/pdf-extract) | `0.12.0` | `0.12.1` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [tar](https://github.com/composefs/tar-rs) | `0.4.45` | `0.4.46` | | [aes-gcm](https://github.com/RustCrypto/AEADs) | `0.11.0` | `0.11.1` | Updates `tauri-plugin-fs` from 2.5.1 to 2.5.2 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.5.1...fs-v2.5.2) Updates `tauri-plugin-opener` from 2.5.4 to 2.5.5 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.4...http-v2.5.5) Updates `tauri-plugin-shell` from 2.3.5 to 2.3.6 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.5...nfc-v2.3.6) Updates `futures-util` from 0.3.33 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.33...0.3.34) Updates `pdf-extract` from 0.12.0 to 0.12.1 - [Commits](jrmuizel/pdf-extract@v0.12.0...v0.12.1) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `tar` from 0.4.45 to 0.4.46 - [Release notes](https://github.com/composefs/tar-rs/releases) - [Commits](composefs/tar-rs@0.4.45...0.4.46) Updates `aes-gcm` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/AEADs@aes-gcm-v0.11.0...aes-gcm-v0.11.1) --- updated-dependencies: - dependency-name: tauri-plugin-fs dependency-version: 2.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: tauri-plugin-opener dependency-version: 2.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: tauri-plugin-shell dependency-version: 2.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: futures-util dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: pdf-extract dependency-version: 0.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: tar dependency-version: 0.4.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch - dependency-name: aes-gcm dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 21, 2026

Navigation Menu

chore(deps): bump the cargo-patch group across 1 directory with 8 updates - #129

chore(deps): bump the cargo-patch group across 1 directory with 8 updates#129
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/apps/desktop/src-tauri/cargo-patch-5e5681350c

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

fs-js v2.5.2

[2.5.2]

fs v2.5.2

[2.5.2]

opener-js v2.5.5

[2.5.5]

opener v2.5.5

[2.5.5]

nfc-js v2.3.6

[2.3.6]

nfc v2.3.6

[2.3.6]

0.3.34

0.3.34 - 2026-08-11

1.1.10

What's Changed

New Contributors

0.4.46

Security

Other changes

New Contributors

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading