Skip to content

chore: bump the cargo group in /src-tauri with 9 updates#1340

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/src-tauri/cargo-4f0bc68713
Open

chore: bump the cargo group in /src-tauri with 9 updates#1340
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/src-tauri/cargo-4f0bc68713

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group in /src-tauri with 9 updates:

Package From To
sha2 0.10.9 0.11.0
aes 0.8.4 0.9.1
ctr 0.9.2 0.10.1
reqwest 0.12.28 0.13.4
tauri-plugin-devtools 2.0.0 2.1.0
enigo 0.5.0 0.6.1
windows 0.61.3 0.62.2
libloading 0.8.9 0.9.0
jni 0.21.1 0.22.4

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates aes from 0.8.4 to 0.9.1

Commits

Updates ctr from 0.9.2 to 0.10.1

Commits

Updates reqwest from 0.12.28 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

  • Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
  • Add ClientBuilder::http2_keep_alive_* options for the blocking client.
  • Add TLS 1.3 support when using native-tls backend.
  • Fix redirect handling to strip sensitive headers when the scheme changes.
  • Fix HTTP/3 happy-eyeball connection creation.
  • Upgrade hickory-resolver to 0.26.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

v0.13.3

tl;dr

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.4

  • Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
  • Add ClientBuilder::http2_keep_alive_* options for the blocking client.
  • Add TLS 1.3 support when using native-tls backend.
  • Fix redirect handling to strip sensitive headers when the scheme changes.
  • Fix HTTP/3 happy-eyeball connection creation.
  • Upgrade hickory-resolver to 0.26.

v0.13.3

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.

v0.13.2

  • Fix HTTP/2 and native-tls ALPN feature combinations.
  • Fix HTTP/3 to send h3 ALPN.
  • (wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().
Commits
  • 11489b3 v0.13.4
  • d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
  • 79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
  • fb7bf6a fix: remove unwrap in hickory initialization (#3041)
  • 3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
  • c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
  • 9cbb65b chore: clean up minimal-versions CI job (#3039)
  • 17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
  • 03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
  • 4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
  • Additional commits viewable in compare view

Updates tauri-plugin-devtools from 2.0.0 to 2.1.0

Commits
  • aeb1d04 chore(tauri-plugin-devtools): release v2.1.0
  • bceb2f3 Merge pull request #382 from crabnebula-dev/feat/disable-default-feature
  • baa3d3d feat: disable Tauri default features
  • 2fd3ce7 Merge pull request #375 from crabnebula-dev/release-plz-2025-08-05T17-38-29Z
  • dc9202a chore: release v0.3.4
  • 38d8559 Merge pull request #374 from crabnebula-dev/release-plz-2025-08-05T17-34-33Z
  • f290eef chore: release
  • 568ea71 Merge pull request #373 from crabnebula-dev/refactor/change-default-port
  • 8c0229b 3033
  • f35f6e2 refactor: change default port to 3030
  • Additional commits viewable in compare view

Updates enigo from 0.5.0 to 0.6.1

Changelog

Sourced from enigo's changelog.

0.6.1

Fixed

  • docs.rs: Fixed build by only activating the libei_smol feature and not libei_tokio

0.6.0

Changed

  • linux: libei: Replaced libei feature with libei_tokio and libei_smol

Added

  • all: So far only functions that were possible on all platforms were implemented in order to keep every thing cross-platform. The new feature platform_specific allows you to opt-in to functionality that is only available on one or more platforms. At the beginning the only new platform specific function is smooth scrolling on macOS.
  • macos: added smooth scrolling (only available on macos and hidden behind the platform_specific feature)
  • linux: libei: Chose which async runtime you want to use

Removed

Fixed

  • linux: libei: The library can now be used inside a Tokio runtime. Previously that was not possible, because it would attempt to start a runtime from within another runtime.
Commits
  • b297a14 docs.rs: Fixed build by only activating the libei_smol feature and not `lib...
  • 3d0bec0 all: Publish 0.6.0
  • f6fa039 linux: libei: Ensure a safe tokio version is used
  • 2491620 linux: libei: Require at least tokio 1.7 to be secure
  • b4c8465 tests: macos 15 has the same screen dimensions as linux and windows
  • 63d7ab0 build(deps): update ron requirement from 0.10 to 0.11
  • 3729524 build(deps): update ashpd requirement from 0.11 to 0.12
  • 792dcd0 linux: libei: Choose which async runtime you want
  • 5d998de linux: libei: Fix runtime crash if no tokio runtime was started
  • 9396087 linux: libei: Use futures crate to not nest runtimes
  • Additional commits viewable in compare view

Updates windows from 0.61.3 to 0.62.2

Commits

Updates libloading from 0.8.9 to 0.9.0

Commits

Updates jni from 0.21.1 to 0.22.4

Release notes

Sourced from jni's releases.

Release JNI 0.22.4

Added

  • JCharSequence bindings for java.lang.CharSequence (including AsRef<JCharSequence> + .as_char_sequence() for JString) (#793)
  • bind_java_type supports non_null qualifier/property for methods and fields to map null references to Error::NullPtr (#795)
  • bind_java_type supports #[cfg()] attributes on methods and fields, to conditionally compile them based on features or other cfg conditions (#797)
  • JValueOwned::check_null() + ::is_null() methods for ergonomic null checks on owned (returned) values (#798)
  • More readable type accessors for JValueOwned, like .into_bool() instead of .z(), .into_object() instead of .l(), etc (#798)

Fixed

  • jni_mangle now includes docs/macros/jni_mangle.md in the crate documentation, so the macro's documentation is visible on docs.rs and in IDEs (#799)

Full Changelog: jni-rs/jni-rs@v0.22.3...v0.22.4

Release JNI 0.22.3

No functional change in this release but it fixes the docs.rs build by bumping the simd_cesu8 dep to >= 1.1.1 which no longer has an automatically-enabled "nightly" feature that may affect the docs.rs build (1.1.x is now also MSRV compatible).

Note: Technically we shouldn't need this release (since the simd_cesu8 release alone will have fixed the build issue) but the other reason for the release is that the crates.io feature for queuing docs.rs rebuilds is not currently usable in our situation. docs.rs is currently fighting through a huge backlog of low-priority build jobs that will likely to take over a week to clear (we moved about 500 spots in two days, out of ~3k crates queued).

Release JNI 0.22.2

Note: although no breaking API change was made in this release there were some important fixes made, including a few non-trivial changes to how exceptions are handled and some important safety / soundness fixes made in the re-exported jni-macros.

For these reasons I'm going to again yank the previous 0.22.1 release after this is published, again taking into account that 0.22.1 was itself only released very recently and it should still be relatively unlikely that anyone has strictly locked in a 0.22.1 dependency.

Another benefit to yanking 0.22.1 is that it allows me to pin the jni-macros dependency via =0.22.2 in this release so that in future releases I don't need to be worried that a new jni-macros release needs to be backwards compatible with all prior jni releases (so macros can take advantage of new jni features).

Hopefully things will be smoother moving forward, now that more people have been starting to update to 0.22.x and there are more people testing it.

Added

Adds bindings for the following java.lang errors / exceptions (#767):

  • JArrayIndexOutOfBoundsException (java.lang.ArrayIndexOutOfBoundsException)
  • JArrayStoreException (java.lang.ArrayStoreException)
  • JClassCircularityError (java.lang.ClassCircularityError)
  • JClassFormatError (java.lang.ClassFormatError)
  • JExceptionInInitializerError (java.lang.ExceptionInInitializerError)
  • JClassNotFoundException (java.lang.ClassNotFoundException)
  • JIllegalArgumentException (java.lang.IllegalArgumentException)
  • JIllegalMonitorStateException (java.lang.IllegalMonitorStateException)
  • JInstantiationException (java.lang.InstantiationException)
  • JLinkageError (java.lang.LinkageError)
  • JNoClassDefFoundError (java.lang.NoClassDefFoundError)
  • JNoSuchFieldError (java.lang.NoSuchFieldError)
  • JNoSuchMethodError (java.lang.NoSuchMethodError)
  • JNumberFormatException (java.lang.NumberFormatException)
  • JOutOfMemoryError (java.lang.OutOfMemoryError)
  • JRuntimeException (java.lang.RuntimeException)
  • JSecurityException (java.lang.SecurityException)

... (truncated)

Changelog

Sourced from jni's changelog.

[0.22.4] — 2026-03-16

Added

  • JCharSequence bindings for java.lang.CharSequence (including AsRef<JCharSequence> + .as_char_sequence() for JString) (#793)
  • bind_java_type supports non_null qualifier/property for methods and fields to map null references to Error::NullPtr (#795)
  • bind_java_type supports #[cfg()] attributes on methods and fields, to conditionally compile them based on features or other cfg conditions (#797)
  • JValueOwned::check_null() + ::is_null() methods for ergonomic null checks on owned (returned) values (#798)
  • More readable type accessors for JValueOwned, like .into_bool() instead of .z(), .into_object() instead of .l(), etc (#798)

Fixed

  • jni_mangle now includes docs/macros/jni_mangle.md in the crate documentation, so the macro's documentation is visible on docs.rs and in IDEs (#799)

[0.22.3] — 2026-03-05

Fixed

  • docs.rs build: Bumps simd_cesu8 dep to >= 1.1.1 which no longer has an automatically-enabled "nightly" feature that may affect the docs.rs build (1.1.x is now also MSRV compatible) (#790)

[0.22.2] — 2026-03-01

Note: although no breaking API change was made in this release there were some important fixes made, including a few non-trivial changes to how exceptions are handled and some important safety / soundness fixes made in the re-exported jni-macros.

For these reasons I'm going to again yank the previous 0.22.1 release after this is published, again taking into account that 0.22.1 was itself only released very recently and it should still be relatively unlikely that anyone has strictly locked in a 0.22.1 dependency.

Another benefit to yanking 0.22.1 is that it allows me to pin the jni-macros dependency via =0.22.2 in this release so that in future releases I don't need to be worried that a new jni-macros release needs to be backwards compatible with all prior jni releases (so macros can take advantage of new jni features).

Hopefully things will be smoother moving forward, now that more people have been starting to update to 0.22.x and there are more people testing it.

Added

Adds bindings for the following java.lang errors / exceptions (#767):

  • JArrayIndexOutOfBoundsException (java.lang.ArrayIndexOutOfBoundsException)
  • JArrayStoreException (java.lang.ArrayStoreException)
  • JClassCircularityError (java.lang.ClassCircularityError)
  • JClassFormatError (java.lang.ClassFormatError)
  • JExceptionInInitializerError (java.lang.ExceptionInInitializerError)
  • JClassNotFoundException (java.lang.ClassNotFoundException)
  • JIllegalArgumentException (java.lang.IllegalArgumentException)
  • JIllegalMonitorStateException (java.lang.IllegalMonitorStateException)

... (truncated)

Commits
  • 5ae9458 Release jni 0.22.4
  • 2f954cd Fix copy&paste error s/JString::collection/JString::as_char_sequence/
  • 33045a1 Release jni-macros 0.22.4
  • 527703e No longer recommend passing &mut Env as the last argument
  • ce7130b Import docs/macros/jni_mangle.md docs for jni_mangle macro
  • d80bf23 Add more-ergonomic JValueOwned accessors
  • 5ffd96a bind_java_type: Support #[cfg()] guarded methods/fields
  • b498e9f bind_java_type: support non_null methods/fields
  • 1f74e4b Add objects::JCharSequence binding
  • 25f810d Release jni 0.22.3
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: bump the cargo group in /src-tauri with 9 updates
659fee8 
Bumps the cargo group in /src-tauri with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [aes](https://github.com/RustCrypto/block-ciphers) | `0.8.4` | `0.9.1` |
| [ctr](https://github.com/RustCrypto/block-modes) | `0.9.2` | `0.10.1` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.28` | `0.13.4` |
| [tauri-plugin-devtools](https://github.com/crabnebula-dev/devtools) | `2.0.0` | `2.1.0` |
| [enigo](https://github.com/enigo-rs/enigo) | `0.5.0` | `0.6.1` |
| [windows](https://github.com/microsoft/windows-rs) | `0.61.3` | `0.62.2` |
| [libloading](https://github.com/nagisa/rust_libloading) | `0.8.9` | `0.9.0` |
| [jni](https://github.com/jni-rs/jni-rs) | `0.21.1` | `0.22.4` |


Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `aes` from 0.8.4 to 0.9.1
- [Commits](RustCrypto/block-ciphers@aes-v0.8.4...aes-v0.9.1)

Updates `ctr` from 0.9.2 to 0.10.1
- [Commits](RustCrypto/block-modes@ctr-v0.9.2...ctr-v0.10.1)

Updates `reqwest` from 0.12.28 to 0.13.4
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.28...v0.13.4)

Updates `tauri-plugin-devtools` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/crabnebula-dev/devtools/releases)
- [Commits](crabnebula-dev/devtools@tauri-plugin-devtools-v2.0.0...tauri-plugin-devtools-v2.1.0)

Updates `enigo` from 0.5.0 to 0.6.1
- [Changelog](https://github.com/enigo-rs/enigo/blob/main/CHANGES.md)
- [Commits](enigo-rs/enigo@v0.5.0...v0.6.1)

Updates `windows` from 0.61.3 to 0.62.2
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](https://github.com/microsoft/windows-rs/commits)

Updates `libloading` from 0.8.9 to 0.9.0
- [Commits](nagisa/rust_libloading@0.8.9...0.9.0)

Updates `jni` from 0.21.1 to 0.22.4
- [Release notes](https://github.com/jni-rs/jni-rs/releases)
- [Changelog](https://github.com/jni-rs/jni-rs/blob/master/CHANGELOG.md)
- [Commits](jni-rs/jni-rs@v0.21.1...v0.22.4)

---
updated-dependencies:
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: aes
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: ctr
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: reqwest
  dependency-version: 0.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tauri-plugin-devtools
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: enigo
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: windows
  dependency-version: 0.62.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: libloading
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: jni
  dependency-version: 0.22.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the internal label Jul 25, 2026
@dependabot
dependabot Bot requested review from 7w1 and hazre as code owners July 25, 2026 12:40
@dependabot dependabot Bot added the internal label Jul 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@7w1 7w1 Awaiting requested review from 7w1 7w1 is a code owner
@hazre hazre Awaiting requested review from hazre hazre is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

internal

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants