chore(deps): bump the cargo-minor-and-patch group across 1 directory with 13 updates

[dependabot]

Bumps the cargo-minor-and-patch group with 13 updates in the / directory:

Package	From	To
clap	4.6.6	4.6.7
serde_json	1.0.151	1.0.154
thiserror	2.0.20	2.0.21
tokio	1.53.1	1.53.3
uuid	1.26.1	1.28.0
zeroize	1.9.0	1.9.1
rustix	1.1.4	1.1.5
tauri	2.11.5	2.11.6
tauri-plugin-single-instance	2.4.4	2.4.5
tauri-plugin-dialog	2.7.3	2.8.3
tauri-plugin-wdio	1.4.0	1.5.0
tauri-plugin-wdio-webdriver	1.4.0	1.5.0
tauri-build	2.6.3	2.7.3

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Updates tokio from 1.53.1 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

• io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

• io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

• io: wake and drop DuplexStream wakers outside the lock (#8618)
• macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
• runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
• sync: wake waiters outside the lock when closing a semaphore (#8529)
• test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

• rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

• fs: handle integer overflow in buffered relative seek (#8574)
• io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
• process: unregister Windows wait before closing child handle (#8564)
• rt: drop blocking pool mutex before shutting down rejected task (#8562)
• sync: fix mpsc index wraparound in block reclamation (#8546)
• sync: forget mpsc Permit before sending value (#8560)
• sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
• sync: wake broadcast Sender::closed outside mutex (#8558)
• task: drop replaced waker outside lock in JoinSet (#8554)
• time: drop timer lock before dropping waker in clear_entry (#8552)
• time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits

• a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
• df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
• f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
• 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
• 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
• c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
• 0448618 sync: make tracing_sync tests synchronous (#8427)
• 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
• bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
• 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
• Additional commits viewable in compare view

Updates uuid from 1.26.1 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

• Add optional serde format adapters by @​RanaPriyansh in uuid-rs/uuid#916
• Prepare for 1.28.0 release by @​KodrAus in uuid-rs/uuid#918

New Contributors

• @​RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

• Accept case-insensitive urn:uuid: prefixes when parsing by @​jaideeppyne in uuid-rs/uuid#912
• Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @​KodrAus in uuid-rs/uuid#915
• Prepare for 1.27.0 release by @​KodrAus in uuid-rs/uuid#917

New Contributors

• @​jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits

• 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
• 4b3b9f5 prepare for 1.28.0 release
• cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
• 784a022 Inline expected tokens in optional compact serde test
• a5678c3 Simplify optional serde adapter tests to option tokens
• 638a518 Refactor optional serde adapter tests and share byte wrapper
• b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
• ffd8ec5 prepare for 1.27.0 release
• 654fa5b Add optional serde format adapters
• 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
• Additional commits viewable in compare view

Updates zeroize from 1.9.0 to 1.9.1

Commits

• 34a6ebc zeroize v1.9.1 (#1553)
• e68c684 zeroize: test under cargo miri in CI (#1552)
• 4a53d7d Update Cargo.lock (#1545)
• a2b1713 zeroize: fix fallback code used by optimization_barrier (#1551)
• 3c5aa70 ctutils v0.4.3 (#1550)
• 6f4e70f ctutils: use cast_(un)signed; MSRV 1.87 (#1548)
• 29391e4 ctutils: make Choice::{to_bool, to_u8} into const fn; MSRV 1.86 (#1547)
• f09945d ci: allow triggering workflows manually (#1543)
• 53493df dit v0.0.1-alpha (#1540)
• c89949d Rename aarch64-dit to dit (#1539)
• Additional commits viewable in compare view

Updates rustix from 1.1.4 to 1.1.5

Commits

• 287214b chore: Release rustix version 1.1.5
• 0cea188 fix(bug): ns->us overflow handling (#1655)
• a99fd26 build: Remove OUT_DIR probe artifact (#1628)
• 1e2954a fix build errors for horizon target (#1671)
• 4cecb72 Mangle the name of rustix::runtime to discourage users. (#1633)
• ded795b Fix compile errors for next libc version (#1676)
• 9640071 Expose the O_SYMLINK & O_NOFOLLOW_ANY flags on Apple platforms (#1666)
• cf67411 Fix debug printing of abstract socket addrs (#1615)
• aab9464 Completely remove rustc_attrs. (#1663)
• a9620e8 ci: fix syn pin (#1647)
• Additional commits viewable in compare view

Updates tauri from 2.11.5 to 2.11.6

Commits

• 9452dde fix audit
• 7c2fe9f run covector version
• 7d71a8a add publish-hotfix workflow
• 5a87bab Merge commit from fork
• e901f1d Merge commit from fork
• See full diff in compare view

Updates tauri-plugin-single-instance from 2.4.4 to 2.4.5

Commits

• 6e2e7e4 publish new versions (#3070)
• 9a2c98f temp: remove updater changefiles
• 4a2ecb6 chore(deps): update rkyv, closes #3196
• 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
• 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
• 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
• d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
• 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
• 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
• 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
• Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.3 to 2.8.3

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.3

[2.8.3]

Dependencies

• Upgraded to fs-js@2.7.1

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.3
npm notice filename: tauri-apps-plugin-dialog-2.8.3.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 1ef5cbd8833d50c911dedc3b50b94c6ba7ec2db5
npm notice integrity: sha512-Hd/yBfk2R5v2M[...]S+gBDNe3nHspw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253692258
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.3

dialog v2.8.3

[2.8.3]

Dependencies

... (truncated)

Commits

• 44293a5 Publish New Versions (v2) (#3689)
• 7550f7c chore(deps): bump rustls to 0.23.46
• 36d8e40 feat(geolocation): support for non-GMS devices (#3377)
• 57297f3 feat(clipboard-manager): add support for writing secrets (#3376)
• 1ab9304 fix(opener): avoid blocking-runtime panic in reveal_item_in_dir (#3565)
• 0e17675 fix(http): decode header values as ISO-8859-1 (#3586)
• 62b3565 chore(deps): update quinn-proto (lockfile-only) (#3707)
• d80b1be feat: add torch plugin for iOS and Android (#3551)
• c91a9e6 feat(sql): add autoCreate option to Database.load (#3702)
• 0374bec [feat] [biometric] Adding the capability of encrypting/decrypting data using ...
• Additional commits viewable in compare view

Updates tauri-plugin-wdio from 1.4.0 to 1.5.0

Changelog

Sourced from tauri-plugin-wdio's changelog.

[@​wdio/tauri-plugin@​1.5.0] - 2026-10-07

Full Changelog

Changed

• deps-dev: bump the development-dependencies group with 6 updates (PR #714)
• deps: bump the cargo-dependencies group across 6 directories with 2 updates (PR #715)
• release: revert the unpublished #642 release and fix standing-PR selection (PR #707)
• rust: run the Tauri and Dioxus driver tests in CI and ban Listener::once (PR #705)
• release 17 package(s) (PR #642)
• deps: bump the production-dependencies group across 1 directory with 14 updates (PR #698)
• deps: bump the cargo-dependencies group across 5 directories with 5 updates (PR #700)
• deps-dev: bump the development-dependencies group across 1 directory with 19 updates (PR #699)
• deps: bump the cargo-dependencies group across 2 directories with 1 update (PR #682)
• deps-dev: bump the development-dependencies group with 8 updates (PR #681)
• align engines.node floor with the WDIO v9 requirement (>=18.20.0) (PR #653)
• deps: bump the cargo-dependencies group across 4 directories with 1 update (PR #646)
• update deps (PR #648)

[@​wdio/tauri-service@​1.5.0] - 2026-10-07

Full Changelog

Changed

• release: revert the unpublished #642 release and fix standing-PR selection (PR #707)
• release 17 package(s) (PR #642)
• deps: bump the production-dependencies group across 1 directory with 14 updates (PR #698)
• deps-dev: bump the development-dependencies group across 1 directory with 19 updates (PR #699)
• share standalone teardown helpers (failStartup, safeDeleteSession, boundedOnComplete) (PR #678 · closes #668)
• deps-dev: bump the development-dependencies group with 8 updates (PR #681)
• electron,tauri: remove deprecated logging aliases, reduce test repetition (PR #677)
• add @​repo/test-utils and migrate cold-import/defer/platform helpers (PR #664)
• import once in a beforeAll to fix the index.spec cold-import flake (PR #662)
• update deps (PR #648)

Fixed

• tauri: evaluate tauri.execute on the session's own embedded port (PR #702 · closes #694)
• tauri,electron,dioxus: stop restoring mocks after the session is deleted (PR #686 · closes #685)
• tauri: guarantee teardown on failed standalone startup and await embedded cleanup (PR #636)

[tauri-plugin-wdio-webdriver@1.5.0] - 2026-10-07

Changed

• deps: bump the cargo-dependencies group across 6 directories with 2 updates (#715)
• release: revert the unpublished #642 release and fix standing-PR selection (#707)
• rust: run the Tauri and Dioxus driver tests in CI and ban Listener::once (#705)
• release 17 package(s) (#642)
• deps: bump the cargo-dependencies group across 5 directories with 5 updates (#700)
• deps: bump the cargo-dependencies group across 2 directories with 1 update (#682)
• deps: bump the cargo-dependencies group across 4 directories with 1 update (#646)

... (truncated)

Commits

• f5cf07d chore: release 13 package(s) (#708)
• 320be58 chore(turbo): opt out of agent guidance (#716)
• c8890d1 chore(deps-dev): bump the development-dependencies group with 6 updates (#714)
• 49f2237 chore(deps): bump the cargo-dependencies group across 6 directories with 2 up...
• ce40d2b chore(release): revert the unpublished #642 release and fix standing-PR selec...
• 8316ce1 fix(tauri): wait for the window's actual state after a window change (#706)
• 65415cc ci(rust): run the Tauri and Dioxus driver tests in CI and ban Listener::once ...
• 6a4b91d ci(tauri,dioxus): nightly fresh-dependency build of published crates (#688)
• 790ab91 chore: release 17 package(s) (#642)
• 19ef3c2 fix(tauri): stop the embedded driver panicking when a window event repeats (#...
• Additional commits viewable in compare view

Updates tauri-plugin-wdio-webdriver from 1.4.0 to 1.5.0

Changelog

Sourced from tauri-plugin-wdio-webdriver's changelog.

[@​wdio/tauri-plugin@​1.5.0] - 2026-10-07

Full Changelog

Changed

• deps-dev: bump the development-dependencies group with 6 updates (PR #714)
• deps: bump the cargo-dependencies group across 6 directories with 2 updates (PR #715)
• release: revert the unpublished #642 release and fix standing-PR selection (PR #707)
• rust: run the Tauri and Dioxus driver tests in CI and ban Listener::once (PR #705)
• release 17 package(s) (PR #642)
• deps: bump the production-dependencies group across 1 directory with 14 updates (PR #698)
• deps: bump the cargo-dependencies group across 5 directories with 5 updates (PR #700)
• deps-dev: bump the development-dependencies group across 1 directory with 19 updates (PR #699)
• deps: bump the cargo-dependencies group across 2 directories with 1 update (PR #682)
• deps-dev: bump the development-dependencies group with 8 updates (PR #681)
• align engines.node floor with the WDIO v9 requirement (>=18.20.0) (PR #653)
• deps: bump the cargo-dependencies group across 4 directories with 1 update (PR #646)
• update deps (PR #648)

[@​wdio/tauri-service@​1.5.0] - 2026-10-07

Full Changelog

Changed

• release: revert the unpublished #642 release and fix standing-PR selection (PR #707)
• release 17 package(s) (PR #642)
• deps: bump the production-dependencies group across 1 directory with 14 updates (PR #698)
• deps-dev: bump the development-dependencies group across 1 directory with 19 updates (PR #699)
• share standalone teardown helpers (failStartup, safeDeleteSession, boundedOnComplete) (PR #678 · closes #668)
• deps-dev: bump the development-dependencies group with 8 updates (PR #681)
• electron,tauri: remove deprecated logging aliases, reduce test repetition (PR #677)
• add @​repo/test-utils and migrate cold-import/defer/platform helpers (PR #664)
• import once in a beforeAll to fix the index.spec cold-import flake (PR #662)
• update deps (PR #648)

Fixed

• tauri: evaluate tauri.execute on the session's own embedded port (PR #702 · closes #694)
• tauri,electron,dioxus: stop restoring mocks after the session is deleted (PR #686 · closes #685)
• tauri: guarantee teardown on failed standalone startup and await embedded cleanup (PR #636)

[tauri-plugin-wdio-webdriver@1.5.0] - 2026-10-07

Changed

• deps: bump the cargo-dependencies group across 6 directories with 2 updates (#715)
• release: revert the unpublished #642 release and fix standing-PR selection (#707)
• rust: run the Tauri and Dioxus driver tests in CI and ban Listener::once (#705)
• release 17 package(s) (#642)
• deps: bump the cargo-dependencies group across 5 directories with 5 updates (#700)
• deps: bump the cargo-dependencies group across 2 directories with 1 update (#682)
• deps: bump the cargo-dependencies group across 4 directories with 1 update (#646)

... (truncated)

Commits

• f5cf07d chore: release 13 package(s) (#708)
• 320be58 chore(turbo): opt out of agent guidance (#716)
• c8890d1 chore(deps-dev): bump the development-dependencies group with 6 updates (#714)
• 49f2237 chore(deps): bump the cargo-dependencies group across 6 directories with 2 up...
• ce40d2b chore(release): revert the unpublished #642 release and fix standing-PR selec...
• 8316ce1 fix(tauri): wait for the window's actual state after a window change (#706)
• 65415cc ci(rust): run the Tauri and Dioxus driver tests in CI and ban Listener::once ...
• 6a4b91d ci(tauri,dioxus): nightly fresh-dependency build of published crates (#688)
• 790ab91 chore: release 17 package(s) (#642)
• 19ef3c2 fix(tauri): stop the embedded driver panicking when a window event repeats (#...
• Additional commits viewable in compare view

Updates tauri-build from 2.6.3 to 2.7.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1314 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1045 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustybuzz
Version:   0.20.1
Warning:   unmaintained
Title:     rustybuzz is unmaintained
Date:      2026-07-11
ID:        RUSTSEC-2026-0206
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     ttf-parser is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 4 allowed warnings found

[2.7.3]

Enhancements

... (truncated)

Commits

• 59b63ab Apply Version Updates From Current Changes (#16255)
• 55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
• 744ff2b chore(deps): bump rustls to 0.23.46
• c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
• dc637db chore: add missing api change file (#16260)
• b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
• 7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
• 5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
• 5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
• 141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
• Additional commits viewable in compare view