chore(deps): bump the cargo group across 1 directory with 5 updates by dependabot[bot] · Pull Request #47 · Jam-Sw/InstantNotes

dependabot · 2026-07-18T12:44:22Z

Bumps the cargo group with 5 updates in the /src-tauri directory:

Package	From	To
tauri-plugin-single-instance	`2.4.2`	`2.4.3`
uuid	`1.23.3`	`1.24.0`
window-vibrancy	`0.6.0`	`0.8.0`
tauri-build	`2.6.2`	`2.6.3`
rusqlite	`0.32.1`	`0.40.1`

Updates tauri-plugin-single-instance from 2.4.2 to 2.4.3

Release notes

Sourced from tauri-plugin-single-instance's releases.

barcode-scanner-js v2.4.3

[2.4.3]

d8bfe61f (#3121 by @NKIPSC) Remove unnecessary checks on Android when requesting camera permission.
631d0e25 (#2440 by @kingsword09) Fix the cameraView is not removed after scanning in iOS.

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-barcode-scanner@2.4.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.3kB README.md
npm notice 2.2kB dist-js/index.cjs
npm notice 1.6kB dist-js/index.d.ts
npm notice 2.1kB dist-js/index.js
npm notice 754B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-barcode-scanner
npm notice version: 2.4.3
npm notice filename: tauri-apps-plugin-barcode-scanner-2.4.3.tgz
npm notice package size: 3.4 kB
npm notice unpacked size: 10.9 kB
npm notice shasum: a401570d2698692fa6878bd816122ac3f8d7142d
npm notice integrity: sha512-y5jIRTFqCeUnc[...]cJWhCfKu6qOQA==
npm notice total files: 6
npm notice
npm notice Security Notice: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption. Learn more https://gh.io/all-npm-classic-tokens-revoked
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=804717978
+ @tauri-apps/plugin-barcode-scanner@2.4.3

barcode-scanner v2.4.3

[2.4.3]

d8bfe61f (#3121 by @NKIPSC) Remove unnecessary checks on Android when requesting camera permission.
631d0e25 (#2440 by @kingsword09) Fix the cameraView is not removed after scanning in iOS.

... (truncated)

Commits

06124af publish new versions (#2972)
060219e chore(deps): update dependency @rollup/plugin-typescript to v12.3.0 (#3067)
c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
cdc7eec chore(deps): update dependency @rollup/plugin-typescript to v12.2.0 (#3066)
6314b00 chore: temp delete updater changefile
fb4c8ae chore(deps): update dependency typescript-eslint to v8.46.2 (#3060)
fccc1cf chore(deps): update eslint monorepo to v9.38.0 (#3044)
3702308 chore(deps): update dependency rollup to v4.52.5 (#3043)
c9c8b39 chore(deps): update dependency typescript-eslint to v8.46.1 (#3025)
Additional commits viewable in compare view

Updates uuid from 1.23.3 to 1.24.0

Release notes

Sourced from uuid's releases.

v1.24.0

What's Changed

feat(fmt): support encoding into MaybeUninit buffers by @weifanglab in uuid-rs/uuid#892

Prepare for 1.24.0 release by @KodrAus in uuid-rs/uuid#896

New Contributors

@weifanglab made their first contribution in uuid-rs/uuid#892

Full Changelog: uuid-rs/uuid@v1.23.5...v1.24.0

v1.23.5

What's Changed

doc: Fix broken link by @frostyplanet in uuid-rs/uuid#891

perf: Optimize UUID hex parsing and formatting by @geeknoid in uuid-rs/uuid#894

Prepare for 1.23.5 release by @KodrAus in uuid-rs/uuid#895

New Contributors

@geeknoid made their first contribution in uuid-rs/uuid#894

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

6a8aeab Merge pull request #896 from uuid-rs/cargo/v1.24.0
e6db8ec prepare for 1.24.0 release
606f236 Merge pull request #892 from weifanglab/main
ab848db feat(fmt): support encoding into MaybeUninit buffers
5dc6b3d Merge pull request #895 from uuid-rs/cargo/v1.23.5
5a7dfe5 prepare for 1.23.5 release
9b4bfc8 Merge pull request #894 from geeknoid/main
5acc5a5 perf: Optimize UUID hex parsing and formatting
6fa1a1e feat(fmt): support encoding into MaybeUninit buffers
1e5d867 Merge pull request #891 from frostyplanet/doc
Additional commits viewable in compare view

Updates window-vibrancy from 0.6.0 to 0.8.0

Release notes

Sourced from window-vibrancy's releases.

window-vibrancy v0.8.0

[0.8.0]

a3a3ff3 (#205 by @rhysd) propagate errors from DwmSetWindowAttribute() instead of ignoring it.

4b0899a (#199 by @ahonn) Changed the apply_liquid_glass API to use a LiquidGlassOptions struct configured via the Builder pattern. Added content_view and opaque settings.

Cargo Publish

\` Updating crates.io index Packaging window-vibrancy v0.8.0 (/home/runner/work/window-vibrancy/window-vibrancy) Updating crates.io index Packaged 34 files, 1.5MiB (1.3MiB compressed) Uploading window-vibrancy v0.8.0 (/home/runner/work/window-vibrancy/window-vibrancy) Uploaded window-vibrancy v0.8.0 to registry crates-io note: waiting for window-vibrancy v0.8.0 to be available at registry crates-io help: you may press ctrl-c to skip waiting; the crate should be available shortly Published window-vibrancy v0.8.0 at registry crates-io \`

window-vibrancy v0.7.1

[0.7.1]

bug

65f5d28 (#196 by @FabianLars) Increased objc2-app-kit version to 0.3.2. No user facing changes because cargo already resolves to that version because of the enabled features.

Cargo Publish

\` Updating crates.io index Packaging window-vibrancy v0.7.1 (/home/runner/work/window-vibrancy/window-vibrancy) Updating crates.io index warning: package crossbeam-channel v0.5.14 in Cargo.lock is yanked in registry crates-io, consider updating to a version that is not yanked Packaged 34 files, 1.5MiB (1.3MiB compressed) Uploading window-vibrancy v0.7.1 (/home/runner/work/window-vibrancy/window-vibrancy) Uploaded window-vibrancy v0.7.1 to registry crates-io note: waiting for window-vibrancy v0.7.1 to be available at registry crates-io. You may press ctrl-c to skip waiting; the crate should be available shortly. Published window-vibrancy v0.7.1 at registry crates-io \`

window-vibrancy v0.7.0

[0.7.0]

enhance

5178609 (#191 by @ahonn) Introduce macOS liquid glass support with apply_liquid_glass / clear_liquid_glass.

misc

5178609 (#191 by @ahonn) Increased the MSRV to 1.77.

... (truncated)

Changelog

Sourced from window-vibrancy's changelog.

[0.8.0]

a3a3ff3 (#205 by @rhysd) propagate errors from DwmSetWindowAttribute() instead of ignoring it.

4b0899a (#199 by @ahonn) Changed the apply_liquid_glass API to use a LiquidGlassOptions struct configured via the Builder pattern. Added content_view and opaque settings.

[0.7.1]

bug

65f5d28 (#196 by @FabianLars) Increased objc2-app-kit version to 0.3.2. No user facing changes because cargo already resolves to that version because of the enabled features.

[0.7.0]

enhance

5178609 (#191 by @ahonn) Introduce macOS liquid glass support with apply_liquid_glass / clear_liquid_glass.

misc

5178609 (#191 by @ahonn) Increased the MSRV to 1.77.

Commits

4756332 apply version updates (#206)
f8e78af chore(deps): update bytes and crossbeam-channel in lockfile
4b0899a feat!: fix liquid_glass layering and add opaque background option (#199)
a3a3ff3 fix(windows): Propagate errors from DwmSetWindowAttribute() (#205)
5e7ddd7 apply version updates (#197)
65f5d28 chore(deps): explicitly set objc2-app-kit to 0.3.2 (#196)
a1c9b80 ci: refresh lockfile in postversion
d21c932 apply version updates (#195)
ad1dd4b ci: fix workflow syntax
41d8930 ci: use upstream create-pull-request action (#194)
Additional commits viewable in compare view

Updates tauri-build from 2.6.2 to 2.6.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.6.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1133 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1085 crate dependencies) Crate: atk Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0413 URL: https://rustsec.org/advisories/RUSTSEC-2024-0413 Crate: atk-sys Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0416 URL: https://rustsec.org/advisories/RUSTSEC-2024-0416 Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: gdk Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0412 URL: https://rustsec.org/advisories/RUSTSEC-2024-0412 Crate: gdk-sys Version: 0.18.2 Warning: unmaintained Title: gtk-rs GTK3 bindings - no longer maintained Date: 2024-03-04 ID: RUSTSEC-2024-0418 URL: https://rustsec.org/advisories/RUSTSEC-2024-0418

Crate: gdkwayland-sys </tr></table>

... (truncated)

Commits

See full diff in compare view

Updates rusqlite from 0.32.1 to 0.40.1

Release notes

Sourced from rusqlite's releases.

0.40.1

What's Changed

Fix clippy warnings #1852

Bump bundled SQLite version to 3.53.2 #1853

Bump hashlink version #1855

Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

Breaking changes: Replace VTab macros by constructors #1823

Breaking changes: Fix VTab::best_index #1824

Asserts on VTab::connect aux and args #1825

Breaking changes: Fix VTab::connect / create #1826

Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829

Derive Default for SeriesTabCursor/ArrayTabCursor #1830

Update link to pre-update hook #1831

Breaking changes: Fix VTab::connect #1832

impl From for FromSqlError #1833

Breaking changes: Fix vtab::dequote #1835

Bump bundled SQLCipher to version 4.14.0 #1837

sqlite3_set_errmsg #1752

Bump sqlite3-parser version #1838

Fix UB in ToSqlOutput::from_rc #1839

Ensure miri doesn't complain #1840

Bump to actions/checkout@v6 #1842

Add support to UtcDateTime #1843, #1844

Bump bundled SQLite version to 3.53.1 #1848

Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

0.39.0

What's Changed

Fix constraints on VTab Aux data #1778, #1771

Fix docs.rs generation #1779

Fix a small typo in rollback_hook docstring #1780

Fix some warnings from Intellij #1781

Minimal doc for features #1783

Clear hooks only for owning connections #1785, #1784

Fix link to SQLite C Interface, Prepare Flags #1787

Comment functions which are not usable from a loadable extension #1789

Factorize code #1792

Update getrandom to 0.4 #1798

Update Cargo.toml #1800

Fix appveyor #1807

Add support to unix timestamp for chrono, jiff and time #1808, #1803

fix(trace): check that the sql string pointer is not NULL #1805

Bump bundled SQLite version to 3.51.3 #1818

... (truncated)

Commits

6d3c282 Merge pull request #1856 from gwenn/0.40.1
2ba28b7 Prepare next release
a021dc7 Merge pull request #1854 from gwenn/savepoint
534a149 Merge pull request #1855 from gwenn/hashlink
6d9764f Bump hashlink version
fa574eb Use sqlite3_keyword_check
15385cc Fix SQL injection when SAVEPOINT name is tainted
e5e48f2 Merge pull request #1853 from gwenn/3.53.2
ac22292 Bump bundled SQLite version to 3.53.2
c5f8828 Merge pull request #1852 from gwenn/clippy
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 5 updates in the /src-tauri directory: | Package | From | To | | --- | --- | --- | | [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.4.2` | `2.4.3` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.3` | `1.24.0` | | [window-vibrancy](https://github.com/tauri-apps/tauri-plugin-vibrancy) | `0.6.0` | `0.8.0` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.2` | `2.6.3` | | [rusqlite](https://github.com/rusqlite/rusqlite) | `0.32.1` | `0.40.1` | Updates `tauri-plugin-single-instance` from 2.4.2 to 2.4.3 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.2...fs-v2.4.3) Updates `uuid` from 1.23.3 to 1.24.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.3...v1.24.0) Updates `window-vibrancy` from 0.6.0 to 0.8.0 - [Release notes](https://github.com/tauri-apps/tauri-plugin-vibrancy/releases) - [Changelog](https://github.com/tauri-apps/window-vibrancy/blob/dev/CHANGELOG.md) - [Commits](tauri-apps/window-vibrancy@window-vibrancy-v0.6.0...window-vibrancy-v0.8.0) Updates `tauri-build` from 2.6.2 to 2.6.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.6.2...tauri-build-v2.6.3) Updates `rusqlite` from 0.32.1 to 0.40.1 - [Release notes](https://github.com/rusqlite/rusqlite/releases) - [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md) - [Commits](rusqlite/rusqlite@v0.32.1...v0.40.1) --- updated-dependencies: - dependency-name: tauri-plugin-single-instance dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: uuid dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: window-vibrancy dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tauri-build dependency-version: 2.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: rusqlite dependency-version: 0.40.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-18T12:44:32Z

OpenSpec format check failed

This pull request body is missing required OpenSpec sections:

Please edit the body to include them. See the contributing guide for the format.

dependabot · 2026-07-25T12:44:35Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 18, 2026

dependabot Bot requested a review from a team as a code owner July 18, 2026 12:44

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 18, 2026

github-actions Bot added the needs-info Missing required OpenSpec sections label Jul 18, 2026

dependabot Bot closed this Jul 25, 2026

dependabot Bot deleted the dependabot/cargo/src-tauri/cargo-0deea4d8fd branch July 25, 2026 12:44

Navigation Menu

Uh oh!

chore(deps): bump the cargo group across 1 directory with 5 updates - #47

chore(deps): bump the cargo group across 1 directory with 5 updates#47
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-0deea4d8fd

dependabot Bot commented on behalf of github Jul 18, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 18, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

barcode-scanner-js v2.4.3

[2.4.3]

barcode-scanner v2.4.3

[2.4.3]

v1.24.0

What's Changed

New Contributors

v1.23.5

What's Changed

New Contributors

v1.23.4

What's Changed

New Contributors

window-vibrancy v0.8.0

[0.8.0]

Cargo Publish

window-vibrancy v0.7.1

[0.7.1]

bug

Cargo Publish

window-vibrancy v0.7.0

[0.7.0]

enhance

misc

[0.8.0]

[0.7.1]

bug

[0.7.0]

enhance

misc

tauri-build v2.6.3

0.40.1

What's Changed

0.40.0

What's Changed

0.39.0

What's Changed

Uh oh!

github-actions Bot commented Jul 18, 2026

OpenSpec format check failed

Uh oh!

dependabot Bot commented on behalf of github Jul 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 18, 2026 •

edited

Loading