Skip to content

build(deps): combine the dependabot updates that passed CI - #12

Merged
jost-s merged 5 commits into
mainfrom
deps/combine-dependabot-2026-09-18
Sep 19, 2026
Merged

jost-s merged 5 commits into
mainfrom
deps/combine-dependabot-2026-09-18

Conversation

@zippy

@zippy zippy commented Sep 18, 2026

Copy link
Copy Markdown
Member

Summary

Combines the five dependabot PRs that already passed CI into one branch so CI runs once instead of once per merge. Each PR's commit is cherry-picked verbatim, in PR order, with no conflicts:

Local verification of the combined result:

  • cargo update --workspace --locked reports 0 packages to change, so the merged Cargo.lock is consistent.
  • npm install --package-lock-only reproduces package-lock.json (the only difference is the libc metadata that npm 11 writes and npm 10 does not).

Supersedes #6, #7, #8, #9 and #10; close those once this merges.

Not included:

TODO:

  • CHANGELOG updated with appropriate info (dependency bumps only, no entry added)
  • npm run ci passes

@zippy
zippy requested a review from a team as a code owner September 18, 2026 20:48
@coderabbitai

coderabbitai Bot commented Sep 18, 2026 •

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: c924249b-d793-4ddc-aa9d-8dbf2fd5281c


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Bumps the updates group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [cachix/install-nix-action](https://github.com/cachix/install-nix-action) and [cachix/cachix-action](https://github.com/cachix/cachix-action).


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

Updates `cachix/install-nix-action` from 27 to 31
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md)
- [Commits](cachix/install-nix-action@v27...v31)

Updates `cachix/cachix-action` from 15 to 17
- [Release notes](https://github.com/cachix/cachix-action/releases)
- [Changelog](https://github.com/cachix/cachix-action/blob/master/RELEASE.md)
- [Commits](cachix/cachix-action@v15...v17)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: updates
- dependency-name: cachix/install-nix-action
  dependency-version: '31'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: updates
- dependency-name: cachix/cachix-action
  dependency-version: '17'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: updates
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the nix group with 3 updates: [flake-parts](https://github.com/hercules-ci/flake-parts), [nixpkgs](https://github.com/nixos/nixpkgs) and [rust-overlay](https://github.com/oxalica/rust-overlay).


Updates `flake-parts` from `17c9d6c` to `31729ca`
- [Commits](hercules-ci/flake-parts@17c9d6c...31729ca)

Updates `nixpkgs` from `2f5a153` to `c3eea5b`
- [Commits](NixOS/nixpkgs@2f5a153...c3eea5b)

Updates `rust-overlay` from `b99d484` to `89e99bf`
- [Commits](oxalica/rust-overlay@b99d484...89e99bf)

---
updated-dependencies:
- dependency-name: flake-parts
  dependency-version: 31729ca8cbdb4fa927b34e5f4353e6a83f39e993
  dependency-type: direct:production
  dependency-group: nix
- dependency-name: nixpkgs
  dependency-version: c3eea5b2156db11c7eeeada3dc737711255b253e
  dependency-type: direct:production
  dependency-group: nix
- dependency-name: rust-overlay
  dependency-version: 89e99bf0778a8f2cd18c9360c3f19c1ee47fc739
  dependency-type: direct:production
  dependency-group: nix
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the npm group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@msgpack/msgpack](https://github.com/msgpack/msgpack-javascript) | `3.1.2` | `3.1.3` |
| [@tauri-apps/api](https://github.com/tauri-apps/tauri) | `2.5.0` | `2.11.1` |
| [@rollup/plugin-node-resolve](https://github.com/rollup/plugins/tree/HEAD/packages/node-resolve) | `15.3.1` | `16.0.3` |
| [@rollup/plugin-terser](https://github.com/rollup/plugins/tree/HEAD/packages/terser) | `0.4.4` | `1.0.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.3` | `8.3.0` |


Updates `@msgpack/msgpack` from 3.1.2 to 3.1.3
- [Release notes](https://github.com/msgpack/msgpack-javascript/releases)
- [Changelog](https://github.com/msgpack/msgpack-javascript/blob/main/CHANGELOG.md)
- [Commits](msgpack/msgpack-javascript@v3.1.2...v3.1.3)

Updates `@tauri-apps/api` from 2.5.0 to 2.11.1
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/api-v2.5.0...@tauri-apps/api-v2.11.1)

Updates `@rollup/plugin-node-resolve` from 15.3.1 to 16.0.3
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/node-resolve/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/node-resolve-v16.0.3/packages/node-resolve)

Updates `@rollup/plugin-terser` from 0.4.4 to 1.0.0
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/terser/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/beep-v1.0.0/packages/terser)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v7.0.2)

Updates `vite` from 6.4.3 to 8.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite)

---
updated-dependencies:
- dependency-name: "@msgpack/msgpack"
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@tauri-apps/api"
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/plugin-node-resolve"
  dependency-version: 16.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@rollup/plugin-terser"
  dependency-version: 1.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: vite
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the cargo-minor-patch group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [kitsune2_api](https://github.com/holochain/kitsune2) | `0.5.0` | `0.5.1` |
| [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.45` |
| [tauri-plugin](https://github.com/tauri-apps/tauri) | `2.6.2` | `2.6.3` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.2` | `2.6.3` |
| [log](https://github.com/rust-lang/log) | `0.4.32` | `0.4.34` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.20` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.2` | `1.26.1` |
| [tauri-plugin-log](https://github.com/tauri-apps/plugins-workspace) | `2.8.0` | `2.9.1` |


Updates `kitsune2_api` from 0.5.0 to 0.5.1
- [Release notes](https://github.com/holochain/kitsune2/releases)
- [Changelog](https://github.com/holochain/kitsune2/blob/v0.5.1/CHANGELOG.md)
- [Commits](holochain/kitsune2@v0.5.0...v0.5.1)

Updates `rustls` from 0.23.40 to 0.23.45
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.40...v/0.23.45)

Updates `tauri-plugin` from 2.6.2 to 2.6.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-plugin-v2.6.2...tauri-plugin-v2.6.3)

Updates `tauri-build` from 2.6.2 to 2.6.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.6.2...tauri-build-v2.6.3)

Updates `log` from 0.4.32 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.32...0.4.34)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `thiserror` from 2.0.18 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.20)

Updates `tokio` from 1.52.3 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1)

Updates `uuid` from 1.23.2 to 1.26.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.2...v1.26.1)

Updates `tauri-plugin-log` from 2.8.0 to 2.9.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.8.0...log-v2.9.1)

---
updated-dependencies:
- dependency-name: kitsune2_api
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: rustls
  dependency-version: 0.23.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-build
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-log
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.22.1 to 0.23.1.
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@jost-s
jost-s force-pushed the deps/combine-dependabot-2026-09-18 branch from 0261c16 to b6aace0 Compare September 19, 2026 12:00
@jost-s
jost-s enabled auto-merge (rebase) September 19, 2026 12:00
@jost-s
jost-s merged commit 62497fa into main Sep 19, 2026
5 of 10 checks passed
@jost-s
jost-s deleted the deps/combine-dependabot-2026-09-18 branch September 19, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants