Skip to content

Bump the "tauri" group with 2 updates across multiple ecosystems - #53

Merged
simeonmiteff merged 3 commits into
mainfrom
dependabot/tauri-cdb758d5a1
Nov 5, 2026
Merged

Bump the "tauri" group with 2 updates across multiple ecosystems#53
simeonmiteff merged 3 commits into
mainfrom
dependabot/tauri-cdb758d5a1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited by simeonmiteff
Loading

Copy link
Copy Markdown
Contributor

Updates the Rust and JavaScript dialog plugins to 2.8.4, including rfd 0.17, and regenerates the NPM and Rust third-party notices.

Merge order: #55 → #52 → #53. This branch includes the Wasmtime 48.0.8 security fix from #55 and the watcher updates from #52. Together, the watcher and dialog updates remove the final users of windows-sys 0.60.2 and windows-targets 0.53.5; the obsolete lockfile packages and their notices are pruned so Cargo's --locked checks pass.

Validation: the final stacked branch passed 319 Rust library tests, all 23 frontend test files, and the frontend/offline documentation build. The combined dependency set also passed a Linux release build, three native menu/unsaved-work smoke scenarios, and a native file-selection/scan smoke test (seven-byte target, two compiled rules, one expected match). Windows and macOS interactive dialogs were not manually exercised on the Linux host; CI covers their builds, tests, and packaging.

Bumps the tauri group in /app/src-tauri with 1 update: tauri-plugin-dialog.

Updates tauri-plugin-dialog from 2.8.3 to 2.8.4

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.4

[2.8.4]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.4
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.4
npm notice filename: tauri-apps-plugin-dialog-2.8.4.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 994ee0f6a1a440a1b9f47bd7b03886d082b76c41
npm notice integrity: sha512-+6ZOiXenOaxXw[...]kWGej4a7dC4lw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3529333044
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.4

dialog v2.8.4

[2.8.4]

... (truncated)

Commits
  • 1281906 publish new versions (#3712)
  • 52fa775 chore(deps): update rust crate rand to 0.10 (#3738)
  • 1331ca4 chore(deps): update rust crate rfd to 0.17 (#3737)
  • 385f60c chore(deps): update rust crate base64 to 0.23 (#3515)
  • 8e04d30 chore(deps): update dependency @​tauri-apps/cli to v2.12.4 (#3717)
  • 34ed7d3 chore(deps): update dependency @​rollup/plugin-terser to v1.0.2 (#3733)
  • c75459d chore(deps): update dependency rollup to v4.64.12 (#3715)
  • df59420 chore(deps): update webpki-roots crates (lockfile-only) (#3723)
  • 11211c3 fix(window-state): stop macOS overlay windows changing size on every restore ...
  • f36ba7b feat(notification): add Android chronometer support (#3282)
  • Additional commits viewable in compare view

Bumps the tauri group in /app with 1 update: @tauri-apps/plugin-dialog.

Updates @tauri-apps/plugin-dialog from 2.8.3 to 2.8.4

Release notes

Sourced from @​tauri-apps/plugin-dialog's releases.

dialog-js v2.8.4

[2.8.4]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.4
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.4
npm notice filename: tauri-apps-plugin-dialog-2.8.4.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 994ee0f6a1a440a1b9f47bd7b03886d082b76c41
npm notice integrity: sha512-+6ZOiXenOaxXw[...]kWGej4a7dC4lw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3529333044
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.4

dialog v2.8.4

[2.8.4]

... (truncated)

Commits
  • 1281906 publish new versions (#3712)
  • 52fa775 chore(deps): update rust crate rand to 0.10 (#3738)
  • 1331ca4 chore(deps): update rust crate rfd to 0.17 (#3737)
  • 385f60c chore(deps): update rust crate base64 to 0.23 (#3515)
  • 8e04d30 chore(deps): update dependency @​tauri-apps/cli to v2.12.4 (#3717)
  • 34ed7d3 chore(deps): update dependency @​rollup/plugin-terser to v1.0.2 (#3733)
  • c75459d chore(deps): update dependency rollup to v4.64.12 (#3715)
  • df59420 chore(deps): update webpki-roots crates (lockfile-only) (#3723)
  • 11211c3 fix(window-state): stop macOS overlay windows changing size on every restore ...
  • f36ba7b feat(notification): add Android chronometer support (#3282)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026
@dependabot
dependabot Bot requested a review from simeonmiteff as a code owner November 2, 2026 08:17
@dependabot dependabot Bot added the rust Pull requests that update rust code label Nov 2, 2026
This was referenced Nov 4, 2026
Merged
Merged
simeonmiteff pushed a commit that referenced this pull request Nov 5, 2026
@dependabot Simeon Miteff
Bump the cargo-minor-and-patch group in /app/src-tauri with 3 updates (…
7bc4476 
…#52)

<!-- weekly-dependency-validation -->
Updates globset, notify, and rustix, regenerates the Rust third-party
notices, and includes the Wasmtime 48.0.8 security baseline from #55.

Merge order: #55 → #52 → #53. The dialog PR (#53) now includes this
branch and prunes the Windows lockfile packages that become unused only
after both updates; this keeps Cargo's `--locked` validation working
after the two changes are combined.

Validation: 319 Rust library tests passed for this branch and for the
combined dependency set. The combined Linux release build, three native
menu/unsaved-work smoke scenarios, and native file-selection/scan smoke
test also passed. CI repeats the real watcher regression on both macOS
architectures and checks platform packaging.

<!-- /weekly-dependency-validation -->

---

Bumps the cargo-minor-and-patch group in /app/src-tauri with 3 updates:
[globset](https://github.com/BurntSushi/ripgrep),
[notify](https://github.com/notify-rs/notify) and
[rustix](https://github.com/bytecodealliance/rustix).

Updates `globset` from 0.4.20 to 0.4.21
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/55f2f69ab9f07eeca80b483668e9d7d4beca8e10"><code>55f2f69</code></a>
globset-0.4.21</li>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/65e072fab262fdaaa19ef788bbb468ae6f8e4f8e"><code>65e072f</code></a>
ignore: respect linked worktree excludes without requiring Git</li>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/d19650f4fca84c0f65f4ec024b16200bf3d41c33"><code>d19650f</code></a>
globset: match filename-only regexes against basenames</li>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/9d07a922605313dc47b78b802c7b0616fd76d409"><code>9d07a92</code></a>
ignore: reuse incremental matchers for directories without rules</li>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/6892bc2b7efe5909cbbeec8f757ed2c4c76b1d30"><code>6892bc2</code></a>
ignore: use byte keys for incremental parent lookups</li>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/1752fb78f1735e517f731944707a79eb064e8669"><code>1752fb7</code></a>
globset: reject impossible literal lengths before hashing</li>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/2d4fa85141d91c411352bae3c516608684aeeacc"><code>2d4fa85</code></a>
ignore: skip empty absolute parent matchers (<a
href="https://redirect.github.com/BurntSushi/ripgrep/issues/3557">#3557</a>)</li>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/b5611fc9f5eda7073543e5c900ca515d1e69fc2e"><code>b5611fc</code></a>
ignore: reuse parent repository detection</li>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/c5e744cb436c4d0cc590676551cf1bc08cd1a560"><code>c5e744c</code></a>
ignore: avoid scratch pools for empty matchers</li>
<li><a
href="https://github.com/BurntSushi/ripgrep/commit/fada8f9386df39e7fc9d0e407de764f005900ce0"><code>fada8f9</code></a>
ignore: benchmark Python workspace discovery and matching (<a
href="https://redirect.github.com/BurntSushi/ripgrep/issues/3554">#3554</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/BurntSushi/ripgrep/compare/globset-0.4.20...globset-0.4.21">compare
view</a></li>
</ul>
</details>
<br />

Updates `notify` from 8.2.0 to 8.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/notify-rs/notify/releases">notify's
releases</a>.</em></p>
<blockquote>
<h2>notify v8.2.1</h2>
<h2>notify 8.2.1 (2026-10-25)</h2>
<ul>
<li>CHANGE: raise MSRV from 1.77 to 1.85 <a
href="https://redirect.github.com/notify-rs/notify/issues/719">#719</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/723">#723</a>
<strong>breaking</strong></li>
<li>CHANGE: replace <code>fsevent-sys</code> with
<code>objc2-core-foundation</code> and <code>objc2-core-services</code>
on macOS, preserving the <code>fsevent-sys</code> feature for
compatibility <a
href="https://redirect.github.com/notify-rs/notify/issues/726">#726</a></li>
<li>CHANGE: update <code>windows-sys</code> to 0.61 <a
href="https://redirect.github.com/notify-rs/notify/issues/1045">#1045</a></li>
<li>FIX: prevent <code>FsEventWatcher</code> from crashing when
unwatching an empty path <a
href="https://redirect.github.com/notify-rs/notify/issues/718">#718</a></li>
<li>FIX: clean up deleted paths in <code>INotifyWatcher</code> even when
the kernel has already removed their watch descriptors <a
href="https://redirect.github.com/notify-rs/notify/issues/720">#720</a></li>
<li>FIX: propagate FSEvents stream startup errors from
<code>watch</code>, <code>unwatch</code>, and
<code>PathsMut::commit</code> <a
href="https://redirect.github.com/notify-rs/notify/issues/733">#733</a></li>
<li>MISC: expand watcher backend tests and fix flaky polling tests <a
href="https://redirect.github.com/notify-rs/notify/issues/728">#728</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/732">#732</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/734">#734</a></li>
</ul>
<p><a
href="https://redirect.github.com/notify-rs/notify/issues/718">#718</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/718">notify-rs/notify#718</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/719">#719</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/719">notify-rs/notify#719</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/720">#720</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/720">notify-rs/notify#720</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/723">#723</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/723">notify-rs/notify#723</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/726">#726</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/726">notify-rs/notify#726</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/728">#728</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/728">notify-rs/notify#728</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/732">#732</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/732">notify-rs/notify#732</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/733">#733</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/733">notify-rs/notify#733</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/734">#734</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/734">notify-rs/notify#734</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/1045">#1045</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/1045">notify-rs/notify#1045</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/notify-rs/notify/blob/notify-8.2.1/CHANGELOG.md">notify's
changelog</a>.</em></p>
<blockquote>
<h2>notify 8.2.1 (2026-10-25)</h2>
<ul>
<li>CHANGE: raise MSRV from 1.77 to 1.85 <a
href="https://redirect.github.com/notify-rs/notify/issues/719">#719</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/723">#723</a>
<strong>breaking</strong></li>
<li>CHANGE: replace <code>fsevent-sys</code> with
<code>objc2-core-foundation</code> and <code>objc2-core-services</code>
on macOS, preserving the <code>fsevent-sys</code> feature for
compatibility <a
href="https://redirect.github.com/notify-rs/notify/issues/726">#726</a></li>
<li>CHANGE: update <code>windows-sys</code> to 0.61 <a
href="https://redirect.github.com/notify-rs/notify/issues/1045">#1045</a></li>
<li>FIX: prevent <code>FsEventWatcher</code> from crashing when
unwatching an empty path <a
href="https://redirect.github.com/notify-rs/notify/issues/718">#718</a></li>
<li>FIX: clean up deleted paths in <code>INotifyWatcher</code> even when
the kernel has already removed their watch descriptors <a
href="https://redirect.github.com/notify-rs/notify/issues/720">#720</a></li>
<li>FIX: propagate FSEvents stream startup errors from
<code>watch</code>, <code>unwatch</code>, and
<code>PathsMut::commit</code> <a
href="https://redirect.github.com/notify-rs/notify/issues/733">#733</a></li>
<li>MISC: expand watcher backend tests and fix flaky polling tests <a
href="https://redirect.github.com/notify-rs/notify/issues/728">#728</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/732">#732</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/734">#734</a></li>
</ul>
<p><a
href="https://redirect.github.com/notify-rs/notify/issues/718">#718</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/718">notify-rs/notify#718</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/719">#719</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/719">notify-rs/notify#719</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/720">#720</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/720">notify-rs/notify#720</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/723">#723</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/723">notify-rs/notify#723</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/726">#726</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/726">notify-rs/notify#726</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/728">#728</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/728">notify-rs/notify#728</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/732">#732</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/732">notify-rs/notify#732</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/733">#733</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/733">notify-rs/notify#733</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/734">#734</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/734">notify-rs/notify#734</a>
<a
href="https://redirect.github.com/notify-rs/notify/issues/1045">#1045</a>:
<a
href="https://redirect.github.com/notify-rs/notify/pull/1045">notify-rs/notify#1045</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/notify-rs/notify/commit/7f6995de25f07bf28ab513c64375d94b4ccd08a1"><code>7f6995d</code></a>
[v8] chore: prepare v8.2.1 release (<a
href="https://redirect.github.com/notify-rs/notify/issues/1046">#1046</a>)</li>
<li><a
href="https://github.com/notify-rs/notify/commit/c1639aac84777d2a98db7ccf3de5984e5258a847"><code>c1639aa</code></a>
chore: update windows-sys 0.61.2 (<a
href="https://redirect.github.com/notify-rs/notify/issues/1045">#1045</a>)</li>
<li><a
href="https://github.com/notify-rs/notify/commit/b2fde32f1e95481c181b283f49ea744d51a32f2b"><code>b2fde32</code></a>
feat: support wasm build (<a
href="https://redirect.github.com/notify-rs/notify/issues/673">#673</a>)</li>
<li><a
href="https://github.com/notify-rs/notify/commit/cbf06559f5dbc14747be4044ac5bd5545eb4e789"><code>cbf0655</code></a>
Fix: throw fsevents stream start error properly (<a
href="https://redirect.github.com/notify-rs/notify/issues/733">#733</a>)</li>
<li><a
href="https://github.com/notify-rs/notify/commit/bd7c0ff926863a5d224adf1c8e065edf74abf417"><code>bd7c0ff</code></a>
Update github templates (<a
href="https://redirect.github.com/notify-rs/notify/issues/699">#699</a>)</li>
<li><a
href="https://github.com/notify-rs/notify/commit/35036bf2e3a4942f606b629e9999ad354a328eaa"><code>35036bf</code></a>
Use <code>objc2-core-foundation</code> and
<code>objc2-core-services</code> (<a
href="https://redirect.github.com/notify-rs/notify/issues/726">#726</a>)</li>
<li><a
href="https://github.com/notify-rs/notify/commit/63392789db99877f611cb6176f9a0282c189643f"><code>6339278</code></a>
Fix: INotifyWatcher keeps watching deleted paths (<a
href="https://redirect.github.com/notify-rs/notify/issues/720">#720</a>)</li>
<li><a
href="https://github.com/notify-rs/notify/commit/d4e11fdeb808deadc4bf934454e7c66f5339edfe"><code>d4e11fd</code></a>
Updated Cirrus' FreeBSD image from 14.2 to 14.3, as 14.2 is no longer
availab...</li>
<li><a
href="https://github.com/notify-rs/notify/commit/079d35d221a8f84bd3a28110e74b6142b480cd21"><code>079d35d</code></a>
test: add kqueue tests (<a
href="https://redirect.github.com/notify-rs/notify/issues/734">#734</a>)</li>
<li><a
href="https://github.com/notify-rs/notify/commit/411fbb8210c0533b74bb4bedea8ea03d65d0a64e"><code>411fbb8</code></a>
fix: flaky PollWatcher tests (<a
href="https://redirect.github.com/notify-rs/notify/issues/732">#732</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/notify-rs/notify/compare/notify-8.2.0...notify-8.2.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `rustix` from 1.1.5 to 1.1.6
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/4a563ad698b2c20ff848515821023d2265a788d0"><code>4a563ad</code></a>
chore: Release rustix version 1.1.6</li>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/8e6aaa6713d2bb64b1fdd8c472e3a32a10a76d70"><code>8e6aaa6</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/46868732d2745a48bbc6f2c9c4734ce59178991e"><code>4686873</code></a>
fix: expose additional termios output mode flags (<a
href="https://redirect.github.com/bytecodealliance/rustix/issues/1709">#1709</a>)</li>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/c9ad9d3ee0248d75f63f879b7191879f944ce458"><code>c9ad9d3</code></a>
fix(net): don't trust <code>cmsg_len</code> past the end of a truncated
control buffer (...</li>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/98358afe9501c5f7bedcd79808ccbe589b608d4e"><code>98358af</code></a>
Avoid constructing a zero Pid in tcgetpgrp on non-Linux targets (<a
href="https://redirect.github.com/bytecodealliance/rustix/issues/1710">#1710</a>)</li>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/664aeae372d781f962f2c971bdb689bdbe995c8c"><code>664aeae</code></a>
fix(net): use IPPROTO_IPV6 for IPV6_MULTICAST_HOPS (<a
href="https://redirect.github.com/bytecodealliance/rustix/issues/1692">#1692</a>)</li>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/bf78ee67a24558470a44f05f800053dcb77cbe52"><code>bf78ee6</code></a>
freebsd: Fix cfg gates for FreeBSD 12 (<a
href="https://redirect.github.com/bytecodealliance/rustix/issues/1707">#1707</a>)</li>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/b3d81bde3c2b5fc6befaf61935f6df64a59aae67"><code>b3d81bd</code></a>
Fix <code>fallocate</code> on Apple platforms. (<a
href="https://redirect.github.com/bytecodealliance/rustix/issues/1708">#1708</a>)</li>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/915ab6f7b7f332604669060d3a0809bb1c3f70b5"><code>915ab6f</code></a>
fix(fs): Set proper <code>inotify</code> <code>WatchFlags</code> values
on <code>libc</code> backend (<a
href="https://redirect.github.com/bytecodealliance/rustix/issues/1714">#1714</a>)</li>
<li><a
href="https://github.com/bytecodealliance/rustix/commit/52d5db722bc3492dd537fd00083a7db0c3679af7"><code>52d5db7</code></a>
Use 32-bit UID/GID syscalls on arm, sparc, and x86 (<a
href="https://redirect.github.com/bytecodealliance/rustix/issues/1716">#1716</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/bytecodealliance/rustix/compare/v1.1.5...v1.1.6">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simeon Miteff <simeon.miteff@corelight.com>
dependabot Bot and others added 3 commits November 5, 2026 13:30
@dependabot @simeonmiteff
Bump tauri-plugin-dialog in /app/src-tauri in the tauri group
2a505ab 
Bumps the tauri group in /app/src-tauri with 1 update: [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace).


Updates `tauri-plugin-dialog` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.8.3...dialog-v2.8.4)
Bump @tauri-apps/plugin-dialog in /app in the tauri group

Bumps the tauri group in /app with 1 update: [@tauri-apps/plugin-dialog](https://github.com/tauri-apps/plugins-workspace).


Updates `@tauri-apps/plugin-dialog` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.8.3...dialog-v2.8.4)

---
updated-dependencies:
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tauri
- dependency-name: "@tauri-apps/plugin-dialog"
  dependency-version: 2.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tauri
...

Signed-off-by: dependabot[bot] <support@github.com>
Simeon Miteff @simeonmiteff
Regenerate third-party notices for dependency updates
cc611ce
Simeon Miteff @simeonmiteff
Prune Windows dependencies superseded by dialog and watcher updates
cbbba1d
@simeonmiteff
simeonmiteff force-pushed the dependabot/tauri-cdb758d5a1 branch from da374f6 to cbbba1d Compare November 5, 2026 03:30
@simeonmiteff
simeonmiteff merged commit 81ed3f8 into main Nov 5, 2026
23 checks passed
@simeonmiteff
simeonmiteff deleted the dependabot/tauri-cdb758d5a1 branch November 5, 2026 06:08
simeonmiteff pushed a commit that referenced this pull request Nov 5, 2026
@dependabot
Bump taiki-e/install-action from 2.87.31 to 2.88.1 in the actions gro…
d6c59fa 
…up (#54)

<!-- weekly-dependency-validation -->
Updates the pinned taiki-e/install-action revision and includes the
Wasmtime 48.0.8 security baseline from #55 so the dependency audit
passes.

Merge #55 first. This PR can then land independently of #51–#53.

Validation: the refreshed PR workflow exercises the action while
installing Zola and cargo-about across the Linux, Windows, and macOS
build jobs. The combined dependency set also passed 319 Rust library
tests, a Linux release build, three native menu/unsaved-work smoke
scenarios, and a native file-selection/scan smoke test.

<!-- /weekly-dependency-validation -->

---

Bumps the actions group with 1 update:
[taiki-e/install-action](https://github.com/taiki-e/install-action).

Updates `taiki-e/install-action` from 2.87.31 to 2.88.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's
releases</a>.</em></p>
<blockquote>
<h2>2.88.1</h2>
<ul>
<li>
<p>Update <code>wasmtime@latest</code> to 50.0.1.</p>
</li>
<li>
<p>Update <code>vacuum@latest</code> to 0.36.0.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 1.9.8.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.10.23.</p>
</li>
<li>
<p>Update <code>kingfisher@latest</code> to 2.15.0.</p>
</li>
<li>
<p>Update <code>espup@latest</code> to 0.19.0.</p>
</li>
<li>
<p>Update <code>deepsource@latest</code> to 0.10.2.</p>
</li>
<li>
<p>Update <code>biome@latest</code> to 2.6.4.</p>
</li>
</ul>
<h2>2.88.0</h2>
<ul>
<li>Support <code>similarity-rs</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/2017">#2017</a>,
thanks <a
href="https://github.com/HardMax71"><code>@​HardMax71</code></a>)</li>
</ul>
<h2>2.87.33</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.35.4.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.13.6.</p>
</li>
<li>
<p>Update <code>trunk@latest</code> to 0.22.1.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 1.9.6.</p>
</li>
<li>
<p>Update <code>release-plz@latest</code> to 0.4.2.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.10.21.</p>
</li>
<li>
<p>Update <code>cargo-nextest@latest</code> to 0.9.150.</p>
</li>
<li>
<p>Update <code>cargo-about@latest</code> to 0.9.3.</p>
</li>
</ul>
<h2>2.87.32</h2>
<ul>
<li>
<p>Update <code>wild@latest</code> to 0.11.0.</p>
</li>
<li>
<p>Update <code>vacuum@latest</code> to 0.35.2.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 1.9.5.</p>
</li>
<li>
<p>Update <code>sccache@latest</code> to 0.19.0.</p>
</li>
<li>
<p>Update <code>release-plz@latest</code> to 0.4.1.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.10.19.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>This project adheres to <a href="https://semver.org">Semantic
Versioning</a>.</p>
<!-- raw HTML omitted -->
<h2>[Unreleased]</h2>
<h2>[2.89.0] - 2026-11-01</h2>
<ul>
<li>
<p>Support <code>yq</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/2036">#2036</a>,
thanks <a
href="https://github.com/FirelightFlagboy"><code>@​FirelightFlagboy</code></a>)</p>
</li>
<li>
<p>Support <code>mold</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/2044">#2044</a>,
thanks <a
href="https://github.com/FirelightFlagboy"><code>@​FirelightFlagboy</code></a>)</p>
</li>
<li>
<p>Fix an error when old cargo-binstall had already been installed at
non-standard location. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/2048">#2048</a>)</p>
</li>
<li>
<p>Update <code>wasm-tools@latest</code> to 1.263.0.</p>
</li>
<li>
<p>Update <code>wasm-pack@latest</code> to 0.15.1.</p>
</li>
<li>
<p>Update <code>wasm-bindgen@latest</code> to 0.2.130.</p>
</li>
<li>
<p>Update <code>vacuum@latest</code> to 0.36.1.</p>
</li>
<li>
<p>Update <code>prek@latest</code> to 0.5.9.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.10.25.</p>
</li>
<li>
<p>Update <code>kingfisher@latest</code> to 2.16.0.</p>
</li>
<li>
<p>Update <code>cargo-binstall@latest</code> to 1.26.2.</p>
</li>
</ul>
<h2>[2.88.1] - 2026-10-30</h2>
<ul>
<li>
<p>Update <code>wasmtime@latest</code> to 50.0.1.</p>
</li>
<li>
<p>Update <code>vacuum@latest</code> to 0.36.0.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 1.9.8.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.10.23.</p>
</li>
<li>
<p>Update <code>kingfisher@latest</code> to 2.15.0.</p>
</li>
<li>
<p>Update <code>espup@latest</code> to 0.19.0.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/taiki-e/install-action/commit/68a389c788b2cd04016ce8c80ee23b80d2ab3d68"><code>68a389c</code></a>
Release 2.88.1</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/e31c3b872e201566681b48ba454f70186fa3b4fc"><code>e31c3b8</code></a>
Update wasmtime manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/e30a869f8177ea106e8efbb6ecd8bff87029fbb4"><code>e30a869</code></a>
Update <code>wasmtime@latest</code> to 50.0.1</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/bca775980faa511fec80730091ba0447f3ce666f"><code>bca7759</code></a>
Update <code>tombi@latest</code> to 1.9.8</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/53e7fa7ff2fbade69846ec6c1175fc95745a4de2"><code>53e7fa7</code></a>
ci: Mark deepsource as glibc_pre_2_34_incompat</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/8f5b3ba73c15f257270854557d8bee52e04c6b30"><code>8f5b3ba</code></a>
Update wasmtime manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/c6e228d3476e62dd3757213b100ffc33a54d7b00"><code>c6e228d</code></a>
Update wasm-pack manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/46c9dcf30224d8bd14bc5a5ad158ef60c02bd60f"><code>46c9dcf</code></a>
Update wasm-bindgen manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/4136a697222a69d32d3d21ad4c9dc913ff56613d"><code>4136a69</code></a>
Update <code>vacuum@latest</code> to 0.36.0</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/bf9426fef9eeecafedf81553a3d5bfb78b8edee5"><code>bf9426f</code></a>
Update <code>tombi@latest</code> to 1.9.7</li>
<li>Additional commits viewable in <a
href="https://github.com/taiki-e/install-action/compare/1e29709c0ec63babbe8f266397a465f29a825f91...68a389c788b2cd04016ce8c80ee23b80d2ab3d68">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=taiki-e/install-action&package-manager=github_actions&previous-version=2.87.31&new-version=2.88.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@simeonmiteff simeonmiteff Awaiting requested review from simeonmiteff simeonmiteff is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@simeonmiteff