chore(deps): bump the cargo group across 1 directory with 9 updates

[dependabot]

Bumps the cargo group with 9 updates in the /src-tauri directory:

Package	From	To
tauri-plugin-single-instance	2.4.2	2.4.3
serde	1.0.228	1.0.229
serde_json	1.0.150	1.0.151
uuid	1.23.3	1.24.0
tauri-plugin-dialog	2.7.1	2.7.2
window-vibrancy	0.6.0	0.8.0
tauri-build	2.6.2	2.6.3
rusqlite	0.32.1	0.40.1
thiserror	2.0.18	2.0.19

Updates tauri-plugin-single-instance from 2.4.2 to 2.4.3

Release notes

Sourced from tauri-plugin-single-instance's releases.

barcode-scanner-js v2.4.3

[2.4.3]

• d8bfe61f (#3121 by @​NKIPSC) Remove unnecessary checks on Android when requesting camera permission.
• 631d0e25 (#2440 by @​kingsword09) Fix the cameraView is not removed after scanning in iOS.

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-barcode-scanner@2.4.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.3kB README.md
npm notice 2.2kB dist-js/index.cjs
npm notice 1.6kB dist-js/index.d.ts
npm notice 2.1kB dist-js/index.js
npm notice 754B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-barcode-scanner
npm notice version: 2.4.3
npm notice filename: tauri-apps-plugin-barcode-scanner-2.4.3.tgz
npm notice package size: 3.4 kB
npm notice unpacked size: 10.9 kB
npm notice shasum: a401570d2698692fa6878bd816122ac3f8d7142d
npm notice integrity: sha512-y5jIRTFqCeUnc[...]cJWhCfKu6qOQA==
npm notice total files: 6
npm notice
npm notice Security Notice: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption. Learn more https://gh.io/all-npm-classic-tokens-revoked
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=804717978
+ @tauri-apps/plugin-barcode-scanner@2.4.3

barcode-scanner v2.4.3

[2.4.3]

• d8bfe61f (#3121 by @​NKIPSC) Remove unnecessary checks on Android when requesting camera permission.
• 631d0e25 (#2440 by @​kingsword09) Fix the cameraView is not removed after scanning in iOS.

... (truncated)

Commits

• 06124af publish new versions (#2972)
• 060219e chore(deps): update dependency @​rollup/plugin-typescript to v12.3.0 (#3067)
• c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
• d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
• cdc7eec chore(deps): update dependency @​rollup/plugin-typescript to v12.2.0 (#3066)
• 6314b00 chore: temp delete updater changefile
• fb4c8ae chore(deps): update dependency typescript-eslint to v8.46.2 (#3060)
• fccc1cf chore(deps): update eslint monorepo to v9.38.0 (#3044)
• 3702308 chore(deps): update dependency rollup to v4.52.5 (#3043)
• c9c8b39 chore(deps): update dependency typescript-eslint to v8.46.1 (#3025)
• Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates uuid from 1.23.3 to 1.24.0

Release notes

Sourced from uuid's releases.

v1.24.0

What's Changed

• feat(fmt): support encoding into MaybeUninit buffers by @​weifanglab in uuid-rs/uuid#892
• Prepare for 1.24.0 release by @​KodrAus in uuid-rs/uuid#896

New Contributors

• @​weifanglab made their first contribution in uuid-rs/uuid#892

Full Changelog: uuid-rs/uuid@v1.23.5...v1.24.0

v1.23.5

What's Changed

• doc: Fix broken link by @​frostyplanet in uuid-rs/uuid#891
• perf: Optimize UUID hex parsing and formatting by @​geeknoid in uuid-rs/uuid#894
• Prepare for 1.23.5 release by @​KodrAus in uuid-rs/uuid#895

New Contributors

• @​geeknoid made their first contribution in uuid-rs/uuid#894

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

v1.23.4

What's Changed

• Fix up name of fuzz script in readme by @​KodrAus in uuid-rs/uuid#888
• document fixes by @​frostyplanet in uuid-rs/uuid#889
• Prepare for 1.23.4 release by @​KodrAus in uuid-rs/uuid#890

New Contributors

• @​frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

• 6a8aeab Merge pull request #896 from uuid-rs/cargo/v1.24.0
• e6db8ec prepare for 1.24.0 release
• 606f236 Merge pull request #892 from weifanglab/main
• ab848db feat(fmt): support encoding into MaybeUninit buffers
• 5dc6b3d Merge pull request #895 from uuid-rs/cargo/v1.23.5
• 5a7dfe5 prepare for 1.23.5 release
• 9b4bfc8 Merge pull request #894 from geeknoid/main
• 5acc5a5 perf: Optimize UUID hex parsing and formatting
• 6fa1a1e feat(fmt): support encoding into MaybeUninit buffers
• 1e5d867 Merge pull request #891 from frostyplanet/doc
• Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.1 to 2.7.2

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.7.2

[2.7.2]

• 40ae0a7f (#3491 by @​Legend-Master) Use com.google.android.material.dialog.MaterialAlertDialogBuilder instead of AlertDialog so the dialog follows the app's theme

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.2
npm notice filename: tauri-apps-plugin-dialog-2.7.2.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: 322d0874bae71fed6d10c76168fa0f7f4d5dd875
npm notice integrity: sha512-pX0IGm1I3I6wc[...]0jQGQNyOvLrsg==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2194858458
+ @tauri-apps/plugin-dialog@2.7.2

dialog v2.7.2

[2.7.2]

• 40ae0a7f (#3491 by @​Legend-Master) Use com.google.android.material.dialog.MaterialAlertDialogBuilder instead of AlertDialog so the dialog follows the app's theme

... (truncated)

Commits

• 03afae6 publish new versions (#3500)
• 57ac986 chore(deps): update dependency @​tauri-apps/cli to v2.11.4 (#3463)
• 2ed6d6c fix(store): StoreOptions.defaults should not be required (#3499)
• cdfd462 chore(example): set color-cheme (#3493)
• d6e0b6b chore(example): clean up and migrate to ts partially (#3492)
• 40ae0a7 enhance(dialog): use MaterialAlertDialogBuilder (#3491)
• edc52ea chore(deps): bump create-pull-request to v8 (#3489)
• a0d949d chore(deps): update pnpm to v11 (#3487)
• 13c63af chore: fix clippy (#3488)
• cad301f publish new versions (#3447)
• Additional commits viewable in compare view

Updates window-vibrancy from 0.6.0 to 0.8.0

Release notes

Sourced from window-vibrancy's releases.

window-vibrancy v0.8.0

[0.8.0]

• a3a3ff3 (#205 by @​rhysd) propagate errors from DwmSetWindowAttribute() instead of ignoring it.
• 4b0899a (#199 by @​ahonn) Changed the apply_liquid_glass API to use a LiquidGlassOptions struct configured via the Builder pattern. Added content_view and opaque settings.

Cargo Publish

\` Updating crates.io index Packaging window-vibrancy v0.8.0 (/home/runner/work/window-vibrancy/window-vibrancy) Updating crates.io index Packaged 34 files, 1.5MiB (1.3MiB compressed) Uploading window-vibrancy v0.8.0 (/home/runner/work/window-vibrancy/window-vibrancy) Uploaded window-vibrancy v0.8.0 to registry crates-io note: waiting for window-vibrancy v0.8.0 to be available at registry crates-io help: you may press ctrl-c to skip waiting; the crate should be available shortly Published window-vibrancy v0.8.0 at registry crates-io \`

window-vibrancy v0.7.1

[0.7.1]

bug

• 65f5d28 (#196 by @​FabianLars) Increased objc2-app-kit version to 0.3.2. No user facing changes because cargo already resolves to that version because of the enabled features.

Cargo Publish

\` Updating crates.io index Packaging window-vibrancy v0.7.1 (/home/runner/work/window-vibrancy/window-vibrancy) Updating crates.io index warning: package crossbeam-channel v0.5.14 in Cargo.lock is yanked in registry crates-io, consider updating to a version that is not yanked Packaged 34 files, 1.5MiB (1.3MiB compressed) Uploading window-vibrancy v0.7.1 (/home/runner/work/window-vibrancy/window-vibrancy) Uploaded window-vibrancy v0.7.1 to registry crates-io note: waiting for window-vibrancy v0.7.1 to be available at registry crates-io. You may press ctrl-c to skip waiting; the crate should be available shortly. Published window-vibrancy v0.7.1 at registry crates-io \`

window-vibrancy v0.7.0

[0.7.0]

enhance

• 5178609 (#191 by @​ahonn) Introduce macOS liquid glass support with apply_liquid_glass / clear_liquid_glass.

misc

• 5178609 (#191 by @​ahonn) Increased the MSRV to 1.77.

... (truncated)

Changelog

Sourced from window-vibrancy's changelog.

[0.8.0]

• a3a3ff3 (#205 by @​rhysd) propagate errors from DwmSetWindowAttribute() instead of ignoring it.
• 4b0899a (#199 by @​ahonn) Changed the apply_liquid_glass API to use a LiquidGlassOptions struct configured via the Builder pattern. Added content_view and opaque settings.

[0.7.1]

bug

• 65f5d28 (#196 by @​FabianLars) Increased objc2-app-kit version to 0.3.2. No user facing changes because cargo already resolves to that version because of the enabled features.

[0.7.0]

enhance

• 5178609 (#191 by @​ahonn) Introduce macOS liquid glass support with apply_liquid_glass / clear_liquid_glass.

misc

• 5178609 (#191 by @​ahonn) Increased the MSRV to 1.77.

Commits

• 4756332 apply version updates (#206)
• f8e78af chore(deps): update bytes and crossbeam-channel in lockfile
• 4b0899a feat!: fix liquid_glass layering and add opaque background option (#199)
• a3a3ff3 fix(windows): Propagate errors from DwmSetWindowAttribute() (#205)
• 5e7ddd7 apply version updates (#197)
• 65f5d28 chore(deps): explicitly set objc2-app-kit to 0.3.2 (#196)
• a1c9b80 ci: refresh lockfile in postversion
• d21c932 apply version updates (#195)
• ad1dd4b ci: fix workflow syntax
• 41d8930 ci: use upstream create-pull-request action (#194)
• Additional commits viewable in compare view

Updates tauri-build from 2.6.2 to 2.6.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.6.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1133 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1085 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Crate:     atk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0416

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416
Crate:     fxhash

Version:   0.2.1

Warning:   unmaintained

Title:     fxhash - no longer maintained

Date:      2025-09-05

ID:        RUSTSEC-2025-0057

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     gdk

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0412

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412
Crate:     gdk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0418

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0418
Crate:     gdkwayland-sys

</tr></table>

... (truncated)

Commits

• See full diff in compare view

Updates rusqlite from 0.32.1 to 0.40.1

Release notes

Sourced from rusqlite's releases.

0.40.1

What's Changed

• Fix clippy warnings #1852
• Bump bundled SQLite version to 3.53.2 #1853
• Bump hashlink version #1855
• Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

• Breaking changes: Replace VTab macros by constructors #1823
• Breaking changes: Fix VTab::best_index #1824
• Asserts on VTab::connect aux and args #1825
• Breaking changes: Fix VTab::connect / create #1826
• Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829
• Derive Default for SeriesTabCursor/ArrayTabCursor #1830
• Update link to pre-update hook #1831
• Breaking changes: Fix VTab::connect #1832
• impl From for FromSqlError #1833
• Breaking changes: Fix vtab::dequote #1835
• Bump bundled SQLCipher to version 4.14.0 #1837
• sqlite3_set_errmsg #1752
• Bump sqlite3-parser version #1838
• Fix UB in ToSqlOutput::from_rc #1839
• Ensure miri doesn't complain #1840
• Bump to actions/checkout@v6 #1842
• Add support to UtcDateTime #1843, #1844
• Bump bundled SQLite version to 3.53.1 #1848
• Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

0.39.0

What's Changed

• Fix constraints on VTab Aux data #1778, #1771
• Fix docs.rs generation #1779
• Fix a small typo in rollback_hook docstring #1780
• Fix some warnings from Intellij #1781
• Minimal doc for features #1783
• Clear hooks only for owning connections #1785, #1784
• Fix link to SQLite C Interface, Prepare Flags #1787
• Comment functions which are not usable from a loadable extension #1789
• Factorize code #1792
• Update getrandom to 0.4 #1798
• Update Cargo.toml #1800
• Fix appveyor #1807
• Add support to unix timestamp for chrono, jiff and time #1808, #1803
• fix(trace): check that the sql string pointer is not NULL #1805
• Bump bundled SQLite version to 3.51.3 #1818

... (truncated)

Commits

• 6d3c282 Merge pull request #1856 from gwenn/0.40.1
• 2ba28b7 Prepare next release
• a021dc7 Merge pull request #1854 from gwenn/savepoint
• 534a149 Merge pull request #1855 from gwenn/hashlink
• 6d9764f Bump hashlink version
• fa574eb Use sqlite3_keyword_check
• 15385cc Fix SQL injection when SAVEPOINT name is tainted
• e5e48f2 Merge pull request #1853 from gwenn/3.53.2
• ac22292 Bump bundled SQLite version to 3.53.2
• c5f8828 Merge pull request #1852 from gwenn/clippy
• Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

• Update to syn 3

Commits

• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
• c50e387 chore: improve thiserror maintenance path
• d4a2507 Raise minimum tested compiler to rust 1.85
• 99e8a6c Unpin CI miri toolchain
• 9ac165c Pin CI miri to nightly-2026-02-11
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

OpenSpec format check failed

This pull request body is missing required OpenSpec sections:

• Why
• What Changes
• MODIFIED Requirements (RFC 2119)
• RFC 2119 keyword (SHALL/MUST)
• GIVEN/WHEN/THEN scenario
• Verification checklist

Please edit the body to include them. See the contributing guide for the format.