[dependabot]

Bumps the cargo-minor-patch group with 4 updates in the /src-tauri directory: tauri, tauri-plugin-shell, serde_json and tauri-build.

Updates tauri from 2.11.5 to 2.11.6

Commits

• 9452dde fix audit
• 7c2fe9f run covector version
• 7d71a8a add publish-hotfix workflow
• 5a87bab Merge commit from fork
• e901f1d Merge commit from fork
• See full diff in compare view

Updates tauri-plugin-shell from 2.3.6 to 2.6.0

Release notes

Sourced from tauri-plugin-shell's releases.

notification-js v2.6.0

[2.6.0]

• 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

feat

• 46381516 (#3671) Report actions on desktop: a click on a notification (tap) or on one of the actions of its action type reaches onAction and the new Rust Notification::on_action, which also works on mobile. registerActionTypes, removeActive (Linux and the BSDs) and the listener commands no longer fail with "command not found" on desktop.

  The onAction callback is now typed with the new ActionPerformed interface, which is what every platform sends, instead of Options. Callbacks annotated with Options must be updated.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-notification@2.6.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 16.6kB dist-js/index.cjs
npm notice 26.1kB dist-js/index.d.ts
npm notice 16.2kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 663B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-notification
npm notice version: 2.6.0
npm notice filename: tauri-apps-plugin-notification-2.6.0.tgz
npm notice package size: 11.1 kB
npm notice unpacked size: 64.7 kB
npm notice shasum: 68f6090e06e17a92fd1803c7b40a01e4ee20cc7c
npm notice integrity: sha512-QvpsQ6L6uSGT/[...]J3c52S+1afsIw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189634908
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-notification@2.6.0

notification v2.6.0

... (truncated)

Commits

• a2364a5 fix: integration test
• 67ebc13 fix(ci): check-publish job should check .changes/pre.json
• cbfd428 Publish New Versions (v2) (#3618)
• f460570 chore: fmt
• a433ec0 fix: mobile clippy warnings
• 3d8a3c8 chore: edition 2024
• b517cc7 fix: actually set rust-version to 1.90
• b6a38a5 fix(ci): e2e test error reporting
• 9b29b60 feat: update to tauri 2.12
• 3a01943 tests(e2e): fix e2e failures on Linux and Windows (#3642)
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates tauri-build from 2.6.3 to 2.7.4

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.4

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1348 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1044 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustybuzz
Version:   0.20.1
Warning:   unmaintained
Title:     rustybuzz is unmaintained
Date:      2026-07-11
ID:        RUSTSEC-2026-0206
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     ttf-parser is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 4 allowed warnings found

[2.7.4]

Bug Fixes

... (truncated)

Commits

• 993038c apply version updates (#16303)
• 0007a43 fix(macos-sign) Also list iPhone Distribution/Developer certs (#14838)
• 97ccd82 chore(deps): update rust crate zip to v9.0.5 (#16346)
• 5b50edd fix(api): type check dev tooling configs (#16353)
• cf40b73 chore(deps): update rust crate ico to 0.6 (#16348)
• d440abf chore(deps): update rust crate shared_child to v1.1.2 (#16308)
• 4c5593c chore(deps): update rust crate tower to v0.5.3 (#16309)
• a376abd chore(deps): update rust crate serde_json to v1.0.154 (#16307)
• 68e60c1 chore(deps): update dependency vitest to v5.0.5 (#16339)
• 9318ab8 chore(deps): update rust crate which to v8.0.6 (#16310)
• Additional commits viewable in compare view