Skip to content

chore(deps): bump the cargo-minor-patch group with 3 updates - #153

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-e12071c014
Open

chore(deps): bump the cargo-minor-patch group with 3 updates#153
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-e12071c014

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 3 updates: notify, tauri and iroh.

Updates notify from 8.2.0 to 8.2.1

Release notes

Sourced from notify's releases.

notify v8.2.1

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Changelog

Sourced from notify's changelog.

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Commits

Updates tauri from 2.12.4 to 2.12.5

Release notes

Sourced from tauri's releases.

tauri v2.12.5

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1348 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1044 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustybuzz
Version:   0.20.1
Warning:   unmaintained
Title:     rustybuzz is unmaintained
Date:      2026-07-11
ID:        RUSTSEC-2026-0206
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     ttf-parser is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 4 allowed warnings found

[2.12.5]

Bug Fixes

... (truncated)

Commits

Updates iroh from 1.3.0 to 1.4.1

Changelog

Sourced from iroh's changelog.

1.4.1 - 2026-10-21

🧪 Testing

  • (iroh) More generous timeouts for slow CI boxes (#4626) - (467bf23)

⚙️ Miscellaneous Tasks

Deps

  • Update rustls-webpki to remove untrusted SPKI (#4624) - (3f4ce2f)

1.4.0 - 2026-10-20

⛰️ Features

  • (iroh-relay) Send X-Iroh-Endpoint-Id header and deprecate X-Iroh-NodeId (#4586) - (f953e82)

🐛 Bug Fixes

  • (dns-server) Stop leaky idle connections (#4620) - (be65184)
  • (iroh) Handle IPv6 literal relay URLs in QAD probes (#4527) - (a152c9b)
  • (iroh) Bound pending_open_paths while a connection is stuck (#4551) - (43e232f)
  • (iroh) Reduce cache startup memory (#4574) - (dce5173)
  • (iroh) Correct tracing span for async context (#4582) - (a03424a)
  • (iroh) Send pkarr requests through the endpoint's proxy (#4595) - (188593d)
  • (iroh) Don't send net_report probes through the environment's proxy (#4592) - (2e3b7bf)
  • (iroh) Update local addresses on network change (#4605) - (86b1242)
  • (iroh) Preserve relay receive outputs and retry after message drops (#4573) - (26dfe1d)
  • (iroh-relay) Send correct Proxy-Authorization credentials (#4591) - (d4490fc)
  • (iroh-relay) Put a timeout on captive portal checks (#4614) - (2624e32)
  • Increase listen backlog on dns server (#4619) - (97941d6)

🚜 Refactor

  • (iroh-dns-server) Update clap usage to modern v4 APIs (#4567) - (12cd62b)

📚 Documentation

  • ()* Add new policies around PR creation and AI use. (#4575) - (b4c8fc6)

🧪 Testing

  • (iroh) Mark some more patchbay tests flaky (#4587) - (41e782a)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo-minor-patch group with 3 updates
d1c1a7c 
Bumps the cargo-minor-patch group with 3 updates: [notify](https://github.com/notify-rs/notify), [tauri](https://github.com/tauri-apps/tauri) and [iroh](https://github.com/n0-computer/iroh).


Updates `notify` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.1/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-8.2.0...notify-8.2.1)

Updates `tauri` from 2.12.4 to 2.12.5
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.12.4...tauri-v2.12.5)

Updates `iroh` from 1.3.0 to 1.4.1
- [Release notes](https://github.com/n0-computer/iroh/releases)
- [Changelog](https://github.com/n0-computer/iroh/blob/main/CHANGELOG.md)
- [Commits](n0-computer/iroh@v1.3.0...v1.4.1)

---
updated-dependencies:
- dependency-name: notify
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: iroh
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates (applied by Dependabot) rust Pull requests that update rust code labels Nov 2, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner November 2, 2026 12:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates (applied by Dependabot) rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants