deps-rust: bump html-to-markdown-rs from 3.2.6 to 3.6.6 in /src-tauri

[dependabot]

Bumps html-to-markdown-rs from 3.2.6 to 3.6.6.

Release notes

Sourced from html-to-markdown-rs's releases.

v3.6.6

Swift Package Manager

Add to your Package.swift:

.package(url: "https://github.com/kreuzberg-dev/html-to-markdown", from: "3.6.6")

The Swift binding is distributed as a pre-built artifact bundle. No Rust toolchain required.

Artifact: HtmlToMarkdown-rs.artifactbundle.zip Checksum: 82b01ca2391062fbf5ec7605b71cf45945798cab93d1ac0a4332ec4ca4832aaf

Zig

Add to your build.zig.zon:

.dependencies = .{
    .html-to-markdown-rs-zig = .{\n        .url = \"https://github.com/kreuzberg-dev/html-to-markdown/releases/download/v3.6.6/html-to-markdown-rs-zig-v3.6.6.tar.gz\",\n        .hash = \"html_to_markdown_rs-3.6.6-QtXyWyUzAQDih9OVg4DwLQntyJ9TEXHr0hK1sjdMQcxj\",\n    },\n},\n```\n
v3.6.5
Swift Package Manager
Add to your Package.swift:
.package(url: "https://github.com/kreuzberg-dev/html-to-markdown", from: "3.6.5")
</code></pre>
<p>The Swift binding is distributed as a pre-built artifact bundle. No Rust toolchain required.</p>
<p><strong>Artifact</strong>: <a href="https://github.com/kreuzberg-dev/html-to-markdown/releases/download/v3.6.5/HtmlToMarkdown-rs.artifactbundle.zip">HtmlToMarkdown-rs.artifactbundle.zip</a>
<strong>Checksum</strong>: <code>5ba69988fdcedb97a1a44a8314cfdc844d453d7f37e0ed57bfe4a690a4b71a00</code></p>
<!-- raw HTML omitted -->
<h2>Zig</h2>
<p>Add to your <code>build.zig.zon</code>:</p>
<pre><code>.dependencies = .{
    .html-to-markdown-rs-zig = .{\n        .url = \&quot;https://github.com/kreuzberg-dev/html-to-markdown/releases/download/v3.6.5/html-to-markdown-rs-zig-v3.6.5.tar.gz\&quot;,\n        .hash = \&quot;html_to_markdown_rs-3.6.5-QtXyWyUzAQAevO8UVL_nNfNdQr5r_o-1WI6KQi4mqB2U\&quot;,\n    },\n},\n```\n
v3.6.4
Swift Package Manager
Add to your Package.swift:

&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/kreuzberg-dev/html-to-markdown/blob/main/CHANGELOG.md&quot;&gt;html-to-markdown-rs's changelog</a>.</em></p>

<blockquote>

<h2>[3.6.6] - 2026-06-14</h2>

<h3>Fixed</h3>

<ul>

<li><strong>Bump alef to 0.25.7 — fixes <code>alef publish prepare</code> for non-workspace-member NIF crates (Ruby gem, Elixir NIF).</strong> alef 0.25.4–0.25.6 had a bug where <code>cargo update --locked</code> and <code>cargo metadata --locked</code> would fail for binding crates that are not workspace members (like the Rustler NIF and Magnus gem). The seed lockfile lacked a <code>[[package]]</code> entry for the binding crate, causing cargo to reject it. alef 0.25.7 dropped <code>--locked</code> from the metadata validation step and set <code>.env_remove(&quot;CARGO_BUILD_LOCKED&quot;)</code> to allow cargo to resolve these crates from the registry. This fix restores Ruby (all platforms) and Elixir NIF (all platforms + Hex package) support.</li>

</ul>

<h2>[3.6.5] - 2026-06-14</h2>

<h3>Fixed</h3>

<ul>

<li>

<p><strong>Elixir Hex/NIF + Ruby gem publish: bump alef pin to 0.25.4 so <code>alef publish prepare</code> produces a valid binding lockfile.</strong> alef 0.25.1's <code>vendor::scrub_or_regenerate_lock</code> strict-mode path failed on every v3.6.4 Elixir NIF and macOS/Linux Ruby gem build with <code>cargo update -p &lt;lockfile&gt; (or final cargo metadata validation) failed (exit code 101) ... cannot update the lock file ... because --locked was passed</code> — the seed lockfile's workspace-member path entries collided with the registry-source entries the rewrite added, and the final <code>cargo metadata --locked</code> validation could not reconcile them. alef 0.25.3 added <code>strip_workspace_member_entries</code> to drop the path-source entries from the seed before per-member <code>cargo update -p</code> runs, plus a full registry-URL package-id spec (<code>registry+https://github.com/rust-lang/crates.io-index#NAME@VERSION&lt;/code>) to disambiguate the per-member update. 0.25.4 also escapes Rust reserved keywords in extendr struct fields (relevant to R bindings consuming flat data enums with <code>serde(tag = &quot;type&quot;)</code>).</p>

</li>

<li>

<p><strong>Python sdist on Alpine/musl: <code>actions/rewrite-native-deps</code> v1.8.69 now strips <code>path = &quot;...&quot;</code> from <code>[workspace.dependencies]</code> entries.</strong> The 3.6.4 sdist's root <code>Cargo.toml</code> shipped with <code>[workspace.dependencies] html-to-markdown-rs = { version = &quot;3.6.4&quot;, path = &quot;crates/html-to-markdown&quot; }</code>, and cargo eagerly validates every workspace-dep entry on <code>pip install</code> — bailing with <code>failed to read .../crates/html-to-markdown/Cargo.toml</code> because the workspace crate is not bundled in the sdist. v1.8.66 added <code>[patch.*]</code> stripping for sdist consumers (resolved <a href="https://redirect.github.com/kreuzberg-dev/html-to-markdown/issues/390&quot;&gt;#390&lt;/a>) but missed <code>[workspace.dependencies]</code>. The new step drops <code>path</code> from every workspace-dependency entry, leaving the version so the dep resolves from crates.io on consumer install. Resolves <a href="https://redirect.github.com/kreuzberg-dev/html-to-markdown/issues/402&quot;&gt;#402&lt;/a&gt;.&lt;/p>

</li>

</ul>

<h2>[3.6.4] - 2026-06-14</h2>

<h3>Fixed</h3>

<ul>

<li>

<p><strong>CLI: drop <code>reqwest</code> <code>brotli</code> feature to keep <code>alloc-no-stdlib</code> on 2.x.</strong> The transitive <code>brotli</code> crate (pulled in via <code>async-compression</code>) jumped to 8.x which expects <code>alloc-no-stdlib</code> 3.x, but the workspace resolves the sibling at 2.x. The resulting trait drift broke <code>cargo build</code> on stable rustc with <code>the trait bound 'StandardAlloc: alloc::Allocator&lt;...&gt;' is not satisfied</code>, blocking the ubuntu-latest Python wheel build during the v3.6.3 publish run. The CLI's HTTP client now uses gzip+deflate only.</p>

</li>

<li>

<p><strong>Publish workflow: dispatch <code>publish-pubdev</code> with the release tag, not the branch ref.</strong> When <code>publish.yaml</code> was triggered by <code>release: published</code>, <code>github.ref_name</code> resolved to the branch where the release was authored (e.g. <code>main</code>). The child workflow's OIDC token then carried <code>refType=branch</code>, which pub.dev rejects with <code>publishing is only allowed from 'tag' refType</code>. Dispatch now uses <code>needs.prepare.outputs.tag</code> so the child runs against the tag and the OIDC token is accepted.</p>

</li>

<li>

<p><strong>Taskfile: <code>test-apps:test:zig</code> now grep'd the root <code>Cargo.toml</code> for the workspace version.</strong> The previous grep targeted <code>crates/html-to-markdown/Cargo.toml</code>, which uses <code>version.workspace = true</code> and has no literal version line — <code>H2M_VERSION</code> resolved to empty and the zig-fetch URL collapsed to <code>…/download/v/html-to-markdown-rs-zig-v.tar.gz</code> (404).</p>

</li>

</ul>

<h3>Changed</h3>

<ul>

<li>

<p><strong>Track <code>Cargo.lock</code> for reproducible builds.</strong> <code>Cargo.lock</code> was previously gitignored, defeating <code>cargo build --locked</code> everywhere it was used. Every CI runner resolved deps fresh, allowing semver-compatible drift to silently introduce broken transitives (the brotli/alloc-no-stdlib mismatch above). The root workspace lockfile plus the per-package nested lockfiles (R, Ruby, Elixir NIF, e2e/rust, test_apps/rust) are now tracked.</p>

</li>

<li>

<p><strong>Pass <code>--locked</code> to <code>cargo build</code> in CI, publish, scripts, and <code>alef.toml</code> hooks.</strong> Now that the lockfile is tracked, every CI/publish cargo build runs with <code>--locked</code> so a dirty index can't silently substitute newer transitive deps. Local-dev tasks (<code>.task/languages/rust.yml</code>) intentionally remain without <code>--locked</code> so contributors can pick up dep updates.</p>

</li>

<li>

<p><strong>Regenerated cross-language bindings with alef 0.25.1.</strong> Pulls in: csharp e2e codegen using <code>KreuzbergConverter</code> facade; swift e2e codegen no longer emits <code>?</code> chains on non-Optional <code>RustString</code> returns; C e2e codegen panics on missing <code>fields_c_types</code> keys instead of silently miscompiling; FFI/NAPI/PyO3/Magnus/Rustler test surface cleanup; <code>vendor::scrub_or_regenerate_lock</code> preserves workspace lockfile pins via per-member <code>cargo update</code> + <code>cargo metadata --locked</code> validation; NAPI strips the <code>readonly</code> keyword from emitted <code>service.cjs</code>.</p>

</li>

</ul>

<h2>[3.6.3] - 2026-06-14</h2>

<h3>Changed</h3>

<ul>

<li><strong>alef extension API: <code>[crates.ffi].visitor_callbacks</code> is now backed by the new alef per-extension

config mechanism.</strong> alef's <code>parse_config</code> hook now receives the real <code>[extensions.&lt;name&gt;]</code> section

from <code>alef.toml</code> rather than always <code>None</code>. The <code>visitor_callbacks = true</code> knob in <code>[crates.ffi]</code>

remains the correct way to enable the visitor/callback FFI pattern — it is a general alef feature

shared with Go, Java, C#, and other FFI consumers, not h2m-specific. A new

<code>transform_emitted_files</code> hook on the <code>Extension</code> trait is also available for downstream post-

processing of generated files; h2m does not currently use it but can opt in without alef changes.</li>

</ul>

<h3>Fixed</h3>

<ul>

<li><strong>CI: <code>upload-go-release</code> now gates on <code>release_go == 'true'</code>.</strong> The job's conditional was missing the explicit <code>needs.prepare.outputs.release_go == 'true'</code> check, allowing it to run during partial publishes when Go is intentionally skipped. Without this guard, skipped Go builds would still trigger FFI uploads/finalize-release's go-module-path tagging. Now properly skips when Go release is disabled.</li>

</ul>

<h2>[3.6.2] - 2026-06-13</h2>

<!-- raw HTML omitted -->

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>
<ul>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/d9e1377afca629910e618833b8991e8c1188289c&quot;&gt;&lt;code&gt;d9e1377&lt;/code&gt;&lt;/a> chore(release): substitute Swift checksum for 3.6.6</li>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/d5923942af00463122aeb6efd6f8bcf8ea23f3c0&quot;&gt;&lt;code&gt;d592394&lt;/code&gt;&lt;/a> chore(release): v3.6.6</li>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/a0b2166321e6d9571bf249559e8d0a37fac31bcd&quot;&gt;&lt;code&gt;a0b2166&lt;/code&gt;&lt;/a> chore(deps): bump alef to 0.25.7 and regenerate bindings</li>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/42da7fd976db224bce4314498739b386caaa751f&quot;&gt;&lt;code&gt;42da7fd&lt;/code&gt;&lt;/a> chore(release): v3.6.5</li>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/710330919d2fd60c3f08175d29a68eff406a78c1&quot;&gt;&lt;code&gt;7103309&lt;/code&gt;&lt;/a> docs(changelog): add 3.6.4 release notes</li>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/b609a02fb8efec1151cae42d45868ef0204ac0e5&quot;&gt;&lt;code&gt;b609a02&lt;/code&gt;&lt;/a> chore(deps): upgrade language deps + regenerate bindings with alef 0.25.1</li>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/ade017f972bccb8b913953ddc42f5f0c6292b517&quot;&gt;&lt;code&gt;ade017f&lt;/code&gt;&lt;/a> chore(release): v3.6.4</li>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/62321d0f433d29627dd5b8f9632332b9fb1f0551&quot;&gt;&lt;code&gt;62321d0&lt;/code&gt;&lt;/a> fix(taskfile): grep root Cargo.toml for workspace version in zig test-app</li>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/6aedc55bf49f11236928adb6076e0eb7aedd9c00&quot;&gt;&lt;code&gt;6aedc55&lt;/code&gt;&lt;/a> chore: pass --locked to cargo build in CI/publish/scripts/alef.toml</li>

<li><a href="https://github.com/kreuzberg-dev/html-to-markdown/commit/538b2516e8723603698924aa391ef9c870453b47&quot;&gt;&lt;code&gt;538b251&lt;/code&gt;&lt;/a> fix(publish): dispatch publish-pubdev with the release tag, not branch ref</li>

<li>Additional commits viewable in <a href="https://github.com/kreuzberg-dev/html-to-markdown/compare/v3.2.6...v3.6.6&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #51.