chore(deps): bump the cargo-minor group across 1 directory with 159 updates

[dependabot]

Bumps the cargo-minor group with 159 updates in the /src-tauri directory:

Package	From	To
tauri	2.11.2	2.12.2
reqwest	0.13.3	0.13.5
serde	1.0.228	1.0.229
tauri-build	2.6.2	2.7.2
aho-corasick	1.1.4	1.1.5
alloc-no-stdlib	2.0.4	3.0.0
alloc-stdlib	0.2.2	0.3.0
android_system_properties	0.1.5	0.1.6
anyhow	1.0.102	1.0.104
autocfg	1.5.0	1.5.1
bitflags	2.11.1	2.13.2
brotli	8.0.2	9.0.0
brotli-decompressor	5.0.0	6.0.1
bumpalo	3.20.2	3.20.3
bytemuck	1.25.0	1.25.2
bytes	1.11.1	1.12.1
camino	1.2.2	1.2.6
cargo_toml	0.22.3	1.0.1
cc	1.2.62	1.6.0
cfb	0.7.3	0.14.0
cfg-if	1.0.4	1.0.5
chrono	0.4.44	0.4.45
combine	4.6.7	4.6.8
cookie	0.18.1	0.18.2
crc32fast	1.5.0	1.5.2
crossbeam-channel	0.5.15	0.5.17
crossbeam-utils	0.8.21	0.8.23
cssparser	0.36.0	0.37.0
cssparser-macros	0.6.1	0.7.1
ctor	0.8.0	1.0.13
dbus	0.9.11	0.9.12
dirs	6.0.0	7.0.0
displaydoc	0.2.5	0.2.7
dom_query	0.27.0	0.28.0
embed-resource	3.0.9	3.0.12
encoding_rs	0.8.35	0.8.42
fastrand	2.4.1	2.5.0
find-msvc-tools	0.1.9	0.1.14
flate2	1.1.9	1.1.10
foreign-types-macros	0.2.3	0.2.4
futures-core	0.3.32	0.3.34
futures-io	0.3.32	0.3.34
futures-sink	0.3.32	0.3.34
futures-task	0.3.32	0.3.34
futures-util	0.3.32	0.3.34
getrandom	0.4.2	0.4.3
glob	0.3.3	0.3.4
h2	0.4.14	0.4.20
html5ever	0.38.0	0.39.0
http	1.4.0	1.5.0
http-body	1.0.1	1.1.0
http-body-util	0.1.3	0.1.5
hyper	1.9.0	1.12.0
hyper-rustls	0.27.9	0.27.10
hyper-util	0.1.20	0.1.21
icu_locale_core	2.2.0	2.3.0
icu_normalizer	2.2.0	2.3.0
icu_normalizer_data	2.2.0	2.3.0
icu_properties	2.2.0	2.3.0
icu_properties_data	2.2.0	2.3.0
icu_provider	2.2.0	2.3.1
indexmap	2.14.0	2.14.2
infer	0.19.0	0.22.0
ipnet	2.12.0	2.12.2
json-patch	3.0.1	4.2.0
jsonptr	0.6.3	0.7.1
keyboard-types	0.7.0	0.8.3
libc	0.2.186	0.2.190
libredox	0.1.16	0.1.25
litemap	0.8.2	0.8.3
log	0.4.29	0.4.34
markup5ever	0.38.0	0.39.0
memchr	2.8.0	2.8.3
mio	1.2.0	1.2.4
muda	0.19.1	0.20.0
objc2	0.6.4	0.6.5
pkg-config	0.3.33	0.3.34
plist	1.9.0	1.10.1
potential_utf	0.1.5	0.1.6
powerfmt	0.2.0	0.2.1
proc-macro2	1.0.106	1.0.107
quick-xml	0.39.4	0.42.0
quote	1.0.45	1.0.47
redox_users	0.5.2	0.5.3
ref-cast	1.0.25	1.0.27
ref-cast-impl	1.0.25	1.0.27
regex	1.12.3	1.13.1
regex-automata	0.4.14	0.4.18
regex-syntax	0.8.10	0.8.11
rustc-hash	2.1.2	2.1.3
rustls-pki-types	1.14.1	1.15.1
rustversion	1.0.22	1.0.23
schemars	1.2.1	1.2.2
selectors	0.36.1	0.38.0
serde_core	1.0.228	1.0.229
serde_derive	1.0.228	1.0.229
serde_repr	0.1.20	0.1.21
serde_spanned	1.1.1	1.1.2
shlex	1.3.0	2.0.1
simd-adler32	0.3.9	0.3.10
siphasher	1.0.3	1.0.4
smallvec	1.15.1	1.16.2
socket2	0.6.3	0.6.5
swift-rs	1.0.7	1.0.9
syn	2.0.117	2.0.119
tao	0.35.2	0.37.1
tao-macros	0.1.3	0.1.4
tauri-codegen	2.6.2	2.7.2
tauri-macros	2.6.2	2.7.2
tauri-runtime	2.11.2	2.12.1
tauri-runtime-wry	2.11.2	2.12.1
tauri-utils	2.9.2	2.10.1
tendril	0.5.0	0.5.1
thiserror	2.0.18	2.0.21
thread_local	1.1.9	1.1.10
time	0.3.47	0.3.55
time-core	0.1.8	0.1.9
time-macros	0.2.27	0.2.32
tinystr	0.8.3	0.8.4
tinyvec	1.11.0	1.13.3
tokio	1.52.3	1.53.2
tokio-rustls	0.26.4	0.26.6
tokio-util	0.7.18	0.7.20
toml	1.1.2+spec-1.1.0	1.1.3+spec-1.1.0
toml_datetime	1.1.1+spec-1.1.0	1.1.2+spec-1.1.0
toml_edit	0.25.11+spec-1.1.0	0.25.13+spec-1.1.0
toml_parser	1.1.2+spec-1.1.0	1.1.5+spec-1.1.0
toml_writer	1.1.1+spec-1.1.0	1.1.3+spec-1.1.0
tray-icon	0.23.1	0.25.1
typenum	1.20.0	1.20.1
unicode-ident	1.0.24	1.0.26
unicode-segmentation	1.13.2	1.13.3
urlpattern	0.3.0	0.6.0
uuid	1.23.1	1.27.0
want	0.3.1	0.3.2
webview2-com	0.38.2	0.39.1
webview2-com-sys	0.38.2	0.39.1
window-vibrancy	0.6.0	0.8.1
windows	0.61.3	0.62.2
windows-collections	0.2.0	0.3.2
windows-core	0.61.2	0.62.2
windows-future	0.2.1	0.3.2
windows-link	0.1.3	0.2.1
windows-numerics	0.2.0	0.3.1
windows-result	0.3.4	0.4.1
windows-strings	0.4.2	0.5.1
windows-threading	0.1.0	0.2.1
winnow	1.0.3	1.0.4
wit-bindgen	0.51.0	0.57.1
writeable	0.6.3	0.6.4
wry	0.55.1	0.57.0
yoke	0.8.2	0.8.3
yoke-derive	0.8.2	0.8.4
zerofrom-derive	0.1.7	0.1.8
zeroize	1.8.2	1.9.1
zerotrie	0.2.4	0.2.5
zerovec	0.11.6	0.11.8
zerovec-derive	0.11.3	0.11.6
zmij	1.0.21	1.0.23

Updates tauri from 2.11.2 to 2.12.2

Release notes

Sourced from tauri's releases.

tauri v2.12.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1295 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits

• 413cbdb Apply Version Updates From Current Changes (#16213)
• 587ae48 chore: disable CODEOWNERS file (#16236)
• a98038e fix: menu append doesn't take options like MenuItemOptions (#16235)
• 7c24f5b fix: store tauri menu items in Menu (#16231)
• a225a18 fix: panic on repeated once listener events (#16222)
• a916205 fix(api): return awaitable cleanup from combined event listeners (#16195)
• 7c87f90 chore: add publiccode.yml file (#16190)
• 79d3537 process: relaunch macOS app via LaunchServices to avoid inheriting dying stdi...
• 61285f6 fix(tauri-utils): doctests (#16142)
• 30da1fd feat(ci): run audit before publishing
• Additional commits viewable in compare view

Updates reqwest from 0.13.3 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

• fix(blocking): preserve version and extensions in TryFromhttp::Request by @​wwhsaber in seanmonstar/reqwest#3050
• Remove unnecessary clones by @​FranciscoTGouveia in seanmonstar/reqwest#3052
• Add Referrer and Referrer Policy methods to WASM Request API by @​Billy-Sheppard in seanmonstar/reqwest#3049
• chore(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in seanmonstar/reqwest#3058
• feat: add Error::is_dns() to identify DNS resolution failures by @​JoakoI98 in seanmonstar/reqwest#3057
• Fix blocking client timeout panic by @​V-Mann-Nick in seanmonstar/reqwest#3060
• Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @​FalkWoldmann in seanmonstar/reqwest#3063
• feat: Add ClientBuilder::http1_max_headers by @​smaeda-ks in seanmonstar/reqwest#3065
• feat: expose the negotiated TLS version via TlsInfo by @​dennisameling in seanmonstar/reqwest#3067
• fix(error): detect timeouts wrapped in body decode errors by @​raphaelroshan in seanmonstar/reqwest#3064
• Remove unnecessary clones and a cast by @​FranciscoTGouveia in seanmonstar/reqwest#3071
• chore(deps): upgrade base64 to 0.23 by @​paolobarbolini in seanmonstar/reqwest#3074
• perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @​spellsaif in seanmonstar/reqwest#3085
• fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @​spellsaif in seanmonstar/reqwest#3084
• src/async_impl/request.rs_improved_doc_for_json_fn: by @​Athleteg in seanmonstar/reqwest#3082
• fix: proxy could use wrong credentials if many matched by @​seanmonstar in seanmonstar/reqwest#3098

New Contributors

• @​wwhsaber made their first contribution in seanmonstar/reqwest#3050
• @​FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052
• @​Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049
• @​JoakoI98 made their first contribution in seanmonstar/reqwest#3057
• @​V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060
• @​FalkWoldmann made their first contribution in seanmonstar/reqwest#3063
• @​smaeda-ks made their first contribution in seanmonstar/reqwest#3065
• @​raphaelroshan made their first contribution in seanmonstar/reqwest#3064
• @​spellsaif made their first contribution in seanmonstar/reqwest#3085
• @​Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

v0.13.4

tl;dr

• Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
• Add ClientBuilder::http2_keep_alive_* options for the blocking client.
• Add TLS 1.3 support when using native-tls backend.
• Fix redirect handling to strip sensitive headers when the scheme changes.
• Fix HTTP/3 happy-eyeball connection creation.
• Upgrade hickory-resolver to 0.26.

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.5

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

v0.13.4

• Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
• Add ClientBuilder::http2_keep_alive_* options for the blocking client.
• Add TLS 1.3 support when using native-tls backend.
• Fix redirect handling to strip sensitive headers when the scheme changes.
• Fix HTTP/3 happy-eyeball connection creation.
• Upgrade hickory-resolver to 0.26.

Commits

• de55373 v0.13.5
• 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
• 9f06fd2 docs: improve description of JSON method (#3082)
• 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
• ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
• 4e9a3c7 chore: add pull request template for human-written content
• 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
• 221abe9 chore: Remove unnecessary clones and a cast (#3071)
• 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
• fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
• Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates tauri-build from 2.6.2 to 2.7.2

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1296 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1092 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits

• 5b23c82 apply version updates (#16243)
• 05354a8 chore(deps): update swift-rs to 1.0.9
• c48e1ca fix(ios): make @_cdecl entry points public so release builds link on Xcode ...
• eeeaa0f fix(nsis): block downgrades in silent, passive and update modes (#16230)
• 0204f6f fix(api): keep Channel messages flowing after the handler throws (#16244)
• 7fcd8a7 fix(ci): retry switching to the Android webview context in e2e (#16239)
• fd319dd chore(deps): update base64 to 0.23
• 413cbdb Apply Version Updates From Current Changes (#16213)
• 587ae48 chore: disable CODEOWNERS file (#16236)
• a98038e fix: menu append doesn't take options like MenuItemOptions (#16235)
• Additional commits viewable in compare view

Updates aho-corasick from 1.1.4 to 1.1.5

Commits

• 5178060 1.1.5
• b68c8d5 api: check for overflow in Match::offset too
• c821786 build(deps): bump actions/checkout in the actions group (#171)
• 8209bb9 Hash-pin all actions, drop persisted credentials (#170)
• 0f3f5da api: document a couple panicking preconditions
• e88e1fc benchmarks: bump dependencies
• 88e4966 ci: use older version of log on pinned build
• See full diff in compare view

Updates alloc-no-stdlib from 2.0.4 to 3.0.0

Commits

• See full diff in compare view

Updates alloc-stdlib from 0.2.2 to 0.3.0

Commits

• See full diff in compare view

Updates android_system_properties from 0.1.5 to 0.1.6

Commits

• See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates autocfg from 1.5.0 to 1.5.1

Commits

• 2799b09 Merge pull request #80 from cuviper/noscript
• 8e7f49a ci: extend the tested versions
• 303aa6a Release 1.5.1
• 73483fb Make tests/wrappers work without a script
• See full diff in compare view

Updates bitflags from 2.11.1 to 2.13.2

Release notes

Sourced from bitflags's releases.

2.13.2

What's Changed

• Flags: adjust order of elements in manual implementation example by @​DanielEScherzer in bitflags/bitflags#494
• Re-pull const declarations outside of nested const by @​KodrAus in bitflags/bitflags#496
• Prepare for 2.13.2 release by @​KodrAus in bitflags/bitflags#497

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

2.13.1

What's Changed

• Lower the LLVM IR output of the generated output by @​bolshoytoster in bitflags/bitflags#492
• Prepare for 2.13.1 release by @​KodrAus in bitflags/bitflags#493

New Contributors

• @​bolshoytoster made their first contribution in bitflags/bitflags#492

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

2.13.0

What's Changed

• add MyFlags::Abc::iter_equal_names() method by @​ssrlive in bitflags/bitflags#489

Full Changelog: bitflags/bitflags@2.12.1...2.13.0

2.12.1

What's Changed

• Rework the #[flag_name] feature and re-stabilize as #[bitflags(flag_name)] by @​KodrAus in bitflags/bitflags#487
• Prepare for 2.12.1 release by @​KodrAus in bitflags/bitflags#488

Full Changelog: bitflags/bitflags@2.12.0...2.12.1

2.12.0

Yanked

This release has been yanked because the #[flag_name] processing noticeably increases macro recursion, hitting the default limit in cases that are already close to it.

What's Changed

• Add a custom #[flag_name] attribute by @​KodrAus in bitflags/bitflags#483
• Add an all_named ctor for filtering out catch-all flags by @​KodrAus in bitflags/bitflags#484
• Prepare for 2.12.0 release by @​KodrAus in bitflags/bitflags#485

Full Changelog: bitflags/bitflags@2.11.1...2.12.0

Changelog

Sourced from bitflags's changelog.

2.13.2

What's Changed

• Flags: adjust order of elements in manual implementation example by @​DanielEScherzer in bitflags/bitflags#494
• Re-pull const declarations outside of nested const by @​KodrAus in bitflags/bitflags#496

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

2.13.1

What's Changed

• Lower the LLVM IR output of the generated output by @​bolshoytoster in bitflags/bitflags#492

New Contributors

• @​bolshoytoster made their first contribution in bitflags/bitflags#492

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

2.13.0

What's Changed

• add MyFlags::Abc::iter_equal_names() method by @​ssrlive in bitflags/bitflags#489

Full Changelog: bitflags/bitflags@2.12.1...2.13.0

2.12.1

What's Changed

• Rework the #[flag_name] feature and re-stabilize as #[bitflags(flag_name)] by @​KodrAus in bitflags/bitflags#487

Full Changelog: bitflags/bitflags@2.12.0...2.12.1

2.12.0

Yanked

This release has been yanked because the #[flag_name] processing noticeably increases macro recursion, hitting the default limit in cases that are already close to it.

What's Changed

• Add a custom #[flag_name] attribute by @​KodrAus in bitflags/bitflags#483
• Add an all_named ctor for filtering out catch-all flags by @​KodrAus in bitflags/bitflags#484

Full Changelog: bitflags/bitflags@2.11.1...2.12.0

Commits

• 80ce9b5 Merge pull request #497 from bitflags/cargo/2.13.2
• 5822493 prepare for 2.13.2 release
• 48f4f1a Merge pull request #496 from bitflags/fix/rustc-ice
• 2c0b042 re-pull const declarations outside of nested const
• c3f8d31 Merge pull request #494 from DanielEScherzer/flags-docs-example
• 0fc3762 Flags: adjust order of elements in manual implementation example
• f92a292 Merge pull request #493 from bitflags/cargo/2.13.1
• c1271c5 prepare for 2.13.1 release
• e077c4a Merge pull request #492 from bolshoytoster/main
• 75d1be4 Bless compile fail stderr
• Additional commits viewable in compare view

Updates brotli from 8.0.2 to 9.0.0

Commits

• a51b65e 9.0.0 release
• fb3104d Add non-default portable-float feature for target-independent encoder output
• c9af3de Fix #257
• 93ea851 fix: handle short empty streams in BroCatli
• 5bf2ed8 fixed simd (.to_int() renamed to .to_simd())
• ac02943 Revert "fixed simd (.to_int() renamed to .to_simd())"
• b4ed6ac fixed simd (.to_int() renamed to .to_simd())
• 3e7adf2 fixed simd (mask.to_int() renamed to mask.to_simd())
• 9651aa3 Fix version bump
• 577dc18 fix: guard BroCatli header byte-source underflow
• Additional commits viewable in compare view

Updates brotli-decompressor from 5.0.0 to 6.0.1

Commits

• e4f3bf3 Release 6.0.1
• 99c8ac3 Update README.md
• f955674 Fix comment
• 2de82ce Drop partially initialized fallback allocations on panic
• 48e9ba0 Handle allocation failure in the FFI default allocator
• f93cd44 Remove UB
• 731d7d5 Give the C test harness its own package name
• 6f0f88b Use aligned dangling pointers for empty no-std blocks
• 6a26082 Harden output and parameter handling in the C API
• c31d20b Validate the complete input cursor range
• Additional commits viewable in compare view

Updates bumpalo from 3.20.2 to 3.20.3

Changelog

Sourced from bumpalo's changelog.

3.20.3

Released 2026-05-22.

Fixed

• Fixed the try_alloc_slice_fill_with, alloc_slice_try_fill_with, alloc_slice_fill_with methods to properly rewind the bump pointer on allocation, initialization, and panic failure and avoid wasting bump capacity.
• Fixed a drop bug in bumpalo::collections::vec::DrainFilter (used by retain and retain_mut) when the predicate panics.

---

Commits

• 84654ac Rewind on slice allocation failure (#324)
• 5325624 Fix a couple bugs (#323)
• fcf8370 Fix UB in Allocator::grow_zeroed (#321)
• 657caf8 test: fix test for OOM instead of overflow (#320)
• 1db9be9 fix: fix typo in comment (#318)
• a47f6d6 fix: bump pointer/bump chunk debug assertion (#313)
• 0b12966 Update Cargo.toml with keywords (#303)
• See full diff in compare view

Updates bytemuck from 1.25.0 to 1.25.2

Changelog

Sourced from bytemuck's changelog.

1.25.2

• implement NoUninit for char, bool, NonZero* arrays

1.25.1

• Don't impl core::error::Error on spirv, which was causing a build error on that target.
• Added a reminder on try_cast_slice that empty slices must still be aligned.

1.25

• Remove extern "stdcall" fn ptr impls on non-x86-32 windows.
• Fix nightly_portable_simd after LaneCount removal.

1.24

• use new stable avx512 types from rust 1.89
• impl AnyBitPattern for [MaybeUninit<T: AnyBitPattern>; N]
• bump derive minimum version.

1.23.2

• bump derive minimum version.

1.23.1

• Added a windows-only ZeroableInOption impl for "stdcall" functions.

1.23

• impl_core_error crate feature adds core::error::Error impl.
• More ZeroableInOption impls.

1.22

• Add the pod_saturating feature, which adds Pod impls for Saturating<T> when T is already Pod.
• A bump in the minimum bytemuck_derive dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient cargo.lock file sitting around.
• Adds Send and Sync impls to BoxBytes.

1.21

• Implement Pod and Zeroable for core::arch::{x86, x86_64}::__m512, __m512d and __m512i without nightly. Requires Rust 1.72, and is gated through the avx512_simd cargo feature.
• Allow the use of must_cast_mut and must_cast_slice_mut in const contexts. Requires Rust 1.83, and is gated through the must_cast_extra cargo feature.
• internal: introduced the maybe_const_fn macro that allows defining some function to be const depending upon some cfg predicate.

... (truncated)

Commits

• f363643 chore: Release bytemuck version 1.25.2
• 3de980b changelog
• 1d05bec implement NoUninit for char,bool,NoZero* array (#350)
• cabc8e7 chore: Release bytemuck version 1.25.1
• 2d4d8ca changelog
• 946e7a9 chore: Release bytemuck_derive version 1.11.0
• 8a8f7cf changelog derive
• ee6742e changelog
• e2d1c7f Don't impl core::error::Error on spirv (#348)
• 7dd7174 make the note more terse
• Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

• 76c0fbb Release bytes v1.12.1 (#838)

[MotherSphere]

Superseded by #38, which does the same lockfile refresh (one step newer where a release landed since) and moves rust-version to 1.90, the floor tauri 2.12 and muda 0.20 require. That is what failed the MSRV job here.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml