[dependabot]

Bumps the cargo-all group with 23 updates in the /app/src-tauri directory:

Package	From	To
tauri	2.11.5	2.11.6
tauri-plugin-opener	2.5.4	2.5.5
tauri-plugin-store	2.4.4	2.4.5
tauri-plugin-notification	2.3.3	2.4.0
tauri-plugin-shell	2.3.5	2.3.6
tauri-plugin-updater	2.10.1	2.12.0
tauri-plugin-deep-link	2.4.9	2.4.10
tauri-plugin-single-instance	2.4.3	2.4.5
tauri-plugin-dialog	2.7.2	2.7.3
window-vibrancy	0.8.0	0.8.1
sentry	0.49.1	0.49.3
serde_json	1.0.151	1.0.154
thiserror	2.0.20	2.0.21
tokio	1.53.1	1.53.3
zeroize	1.9.0	1.9.1
uuid	1.24.0	1.28.0
which	8.0.5	8.0.6
trash	5.2.6	5.2.9
ignore	0.4.32	0.4.33
objc2	0.6.4	0.6.5
plist	1.10.0	1.10.1
notify-rust	4.18.0	4.18.2
freedesktop-desktop-entry	0.8.1	0.8.3

Updates tauri from 2.11.5 to 2.11.6

Commits

• 9452dde fix audit
• 7c2fe9f run covector version
• 7d71a8a add publish-hotfix workflow
• 5a87bab Merge commit from fork
• e901f1d Merge commit from fork
• See full diff in compare view

Updates tauri-plugin-opener from 2.5.4 to 2.5.5

Commits

• 6e2e7e4 publish new versions (#3070)
• 9a2c98f temp: remove updater changefiles
• 4a2ecb6 chore(deps): update rkyv, closes #3196
• 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
• 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
• 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
• d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
• 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
• 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
• 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
• Additional commits viewable in compare view

Updates tauri-plugin-store from 2.4.4 to 2.4.5

Commits

• 6e2e7e4 publish new versions (#3070)
• 9a2c98f temp: remove updater changefiles
• 4a2ecb6 chore(deps): update rkyv, closes #3196
• 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
• 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
• 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
• d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
• 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
• 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
• 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
• Additional commits viewable in compare view

Updates tauri-plugin-notification from 2.3.3 to 2.4.0

Commits

• a2364a5 fix: integration test
• 67ebc13 fix(ci): check-publish job should check .changes/pre.json
• cbfd428 Publish New Versions (v2) (#3618)
• f460570 chore: fmt
• a433ec0 fix: mobile clippy warnings
• 3d8a3c8 chore: edition 2024
• b517cc7 fix: actually set rust-version to 1.90
• b6a38a5 fix(ci): e2e test error reporting
• 9b29b60 feat: update to tauri 2.12
• 3a01943 tests(e2e): fix e2e failures on Linux and Windows (#3642)
• Additional commits viewable in compare view

Updates tauri-plugin-shell from 2.3.5 to 2.3.6

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates tauri-plugin-updater from 2.10.1 to 2.12.0

Commits

• 5baf71a fix: pnpm audit
• 2393188 publish new versions (#3591)
• 1198a52 Merge commit from fork
• 1308bfa Merge commit from fork
• 690dcfd Merge commit from fork
• 67cd25a fix(single-instance): let the first instance come to front on Windows (#3592)
• 2df3d93 refactor(log): log webview location after double colon (#3574)
• 4b5c954 chore(deps): update dependency typescript-eslint to v8.70.0 (#3536)
• 3c5d267 publish new versions (#3567)
• c050e07 fix(store): apply_pending_auto_save can deadlock (#3572)
• Additional commits viewable in compare view

Updates tauri-plugin-deep-link from 2.4.9 to 2.4.10

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates tauri-plugin-single-instance from 2.4.3 to 2.4.5

Commits

• 6e2e7e4 publish new versions (#3070)
• 9a2c98f temp: remove updater changefiles
• 4a2ecb6 chore(deps): update rkyv, closes #3196
• 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
• 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
• 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
• d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
• 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
• 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
• 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
• Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.2 to 2.7.3

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates window-vibrancy from 0.8.0 to 0.8.1

Release notes

Sourced from window-vibrancy's releases.

window-vibrancy v0.8.1

[0.8.1]

• cf3390e Added the LiquidGlassOptions::interactive option, which sets NSGlassEffectView.effectIsInteractive (macOS 27.0+) to enable the glass' visual response to user interactions. Also added effectIsInteractive, setEffectIsInteractive and supportsEffectIsInteractive methods to NSGlassEffectViewTagged.
• e9f765a (#181) Relaxed windows-sys dependency to >=0.60, <=0.61 instead of 0.60

Cargo Publish

Updating crates.io index
   Packaging window-vibrancy v0.8.1 (/home/runner/work/window-vibrancy/window-vibrancy)
    Updating crates.io index
    Packaged 35 files, 1.5MiB (1.4MiB compressed)
   Uploading window-vibrancy v0.8.1 (/home/runner/work/window-vibrancy/window-vibrancy)
    Uploaded window-vibrancy v0.8.1 to registry `crates-io`
note: waiting for window-vibrancy v0.8.1 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published window-vibrancy v0.8.1 at registry `crates-io`

Changelog

Sourced from window-vibrancy's changelog.

[0.8.1]

• cf3390e Added the LiquidGlassOptions::interactive option, which sets NSGlassEffectView.effectIsInteractive (macOS 27.0+) to enable the glass' visual response to user interactions. Also added effectIsInteractive, setEffectIsInteractive and supportsEffectIsInteractive methods to NSGlassEffectViewTagged.
• e9f765a (#181) Relaxed windows-sys dependency to >=0.60, <=0.61 instead of 0.60

Commits

• 7421685 apply version updates (#226)
• cf3390e feat: add liquid glass interactive property (macOS 27+)
• e9f765a chore(deps): relax windows-sys versions to a range >=0.60, <=0.61 (#181)
• 25331c1 ci: ignore audits and bump actions (#225)
• See full diff in compare view

Updates sentry from 0.49.1 to 0.49.3

Release notes

Sourced from sentry's releases.

0.49.3

Features

• Added the sentry-minidump integration, which captures native crashes as minidumps in a separate process and sends them to Sentry as attachments. Enable it with the minidump feature on sentry. Linux, macOS and Windows only (#1315).
• Added a transport_channel_capacity option to ClientOptions, making the transport's channel capacity configurable. The StdTransportThreadOptions::with_channel_capacity and TokioTransportThreadOptions::with_channel_capacity methods provide the same configuration when constructing transport threads. When unset, each transport uses its own default (currently 30), which is subject to change (#1311).
• The Tower integration's SentryHttpLayer now records the http.response.status_code attribute on transactions (#1253).

Deprecations

• Deprecated Transaction::is_sampled, Span::is_sampled, and TransactionOrSpan::is_sampled. These methods cannot distinguish between an unsampled transaction or span and a deferred sampling decision when tracing is disabled (#1293).

Fixes

• Corrected disabled tracing behavior: transactions and spans are ignored without generating discarded-data client reports, and locally started traces leave the sampling decision unset rather than marking the trace as unsampled. Incoming sampling decisions are preserved in outgoing sentry-trace headers without enabling local capture. An explicit 0.0 trace sample rate remains distinct from disabled tracing and continues to generate client reports for locally unsampled transactions (#1286).

0.49.2

Fixes

• Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#1279).

Deprecations

• Deprecated ClientOptions::enable_logs. The option no longer disables manually captured logs (via the logging APIs); it now only disables automatic log capture by the log-capturing integrations (tracing and log with the logs feature). To stop an integration from sending logs, configure it via its own options (#1299).
• Deprecated ClientOptions::enable_metrics. The option is now a no-op; metrics are always enabled. To stop sending metrics, stop calling the metrics APIs (#1300).

Changelog

Sourced from sentry's changelog.

0.49.3

Features

• Added the sentry-minidump integration, which captures native crashes as minidumps in a separate process and sends them to Sentry as attachments. Enable it with the minidump feature on sentry. Linux, macOS and Windows only (#1315).
• Added a transport_channel_capacity option to ClientOptions, making the transport's channel capacity configurable. The StdTransportThreadOptions::with_channel_capacity and TokioTransportThreadOptions::with_channel_capacity methods provide the same configuration when constructing transport threads. When unset, each transport uses its own default (currently 30), which is subject to change (#1311).
• The Tower integration's SentryHttpLayer now records the http.response.status_code attribute on transactions (#1253).

Deprecations

• Deprecated Transaction::is_sampled, Span::is_sampled, and TransactionOrSpan::is_sampled. These methods cannot distinguish between an unsampled transaction or span and a deferred sampling decision when tracing is disabled (#1293).

Fixes

• Corrected disabled tracing behavior: transactions and spans are ignored without generating discarded-data client reports, and locally started traces leave the sampling decision unset rather than marking the trace as unsampled. Incoming sampling decisions are preserved in outgoing sentry-trace headers without enabling local capture. An explicit 0.0 trace sample rate remains distinct from disabled tracing and continues to generate client reports for locally unsampled transactions (#1286).

0.49.2

Fixes

• Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#1279).

Deprecations

• Deprecated ClientOptions::enable_logs. The option no longer disables manually captured logs (via the logging APIs); it now only disables automatic log capture by the log-capturing integrations (tracing and log with the logs feature). To stop an integration from sending logs, configure it via its own options (#1299).
• Deprecated ClientOptions::enable_metrics. The option is now a no-op; metrics are always enabled. To stop sending metrics, stop calling the metrics APIs (#1300).

Commits

• ad0b3c1 release: 0.49.3
• 31a4c96 meta(changelog): Fix the disabled tracing changelog entry (#1325)
• 5bb564d build(cargo): Bump rustls to 0.23.45 (#1324)
• 3b6d992 feat(core): Make transport channel capacity configurable (#1311)
• cbed0fa feat(minidump): Add sentry-minidump integration (#1315)
• 715a9ec ref(lints): Enforce missing_docs lint globally (#1321)
• abecd69 ref(tests): No integration test crate for shared logic (#1320)
• 70a1205 ref(clippy): Enable impl_trait_in_params lint (#1319)
• 4427186 chore(core): Implement disabled tracing semantics (#1286)
• c0b9a82 chore(core): Deprecate is_sampled methods (#1293)
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Updates tokio from 1.53.1 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

• io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

• io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

• io: wake and drop DuplexStream wakers outside the lock (#8618)
• macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
• runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
• sync: wake waiters outside the lock when closing a semaphore (#8529)
• test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

• rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

• fs: handle integer overflow in buffered relative seek (#8574)
• io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
• process: unregister Windows wait before closing child handle (#8564)
• rt: drop blocking pool mutex before shutting down rejected task (#8562)
• sync: fix mpsc index wraparound in block reclamation (#8546)
• sync: forget mpsc Permit before sending value (#8560)
• sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
• sync: wake broadcast Sender::closed outside mutex (#8558)
• task: drop replaced waker outside lock in JoinSet (#8554)
• time: drop timer lock before dropping waker in clear_entry (#8552)
• time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits

• a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
• df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
• f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
• 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
• 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
• c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
• 0448618 sync: make tracing_sync tests synchronous (#8427)
• 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
• bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
• 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
• Additional commits viewable in compare view

Updates zeroize from 1.9.0 to 1.9.1

Commits

• 34a6ebc zeroize v1.9.1 (#1553)
• e68c684 zeroize: test under cargo miri in CI (#1552)
• 4a53d7d Update Cargo.lock (#1545)
• a2b1713 zeroize: fix fallback code used by optimization_barrier (#1551)
• 3c5aa70 ctutils v0.4.3 (#1550)
• 6f4e70f ctutils: use cast_(un)signed; MSRV 1.87 (#1548)
• 29391e4 ctutils: make Choice::{to_bool, to_u8} into const fn; MSRV 1.86 (#1547)
• f09945d ci: allow triggering workflows manually (#1543)
• 53493df dit v0.0.1-alpha (#1540)
• c89949d Rename aarch64-dit to dit (#1539)
• Additional commits viewable in compare view

Updates uuid from 1.24.0 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

• Add optional serde format adapters by @​RanaPriyansh in uuid-rs/uuid#916
• Prepare for 1.28.0 release by @​KodrAus in uuid-rs/uuid#918

New Contributors

• @​RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

• Accept case-insensitive urn:uuid: prefixes when parsing by @​jaideeppyne in uuid-rs/uuid#912
• Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @​KodrAus in uuid-rs/uuid#915
• Prepare for 1.27.0 release by @​KodrAus in uuid-rs/uuid#917

New Contributors

• @​jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

v1.26.1

What's Changed

• Seat the v7 counter below the version nibble by @​lenamonj in uuid-rs/uuid#907
• Don't panic in overflowing Timestamp to SystemTime conversion by @​KodrAus in uuid-rs/uuid#909
• Prepare for 1.26.1 release by @​KodrAus in uuid-rs/uuid#910

New Contributors

• @​lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

• Add ContextV7::with_additional_precision_bits by @​ChrisJr404 in uuid-rs/uuid#904
• Prepare for 1.26.0 release by @​KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

• Add a serde::bytes module that encodes a Uuid as a byte string by @​ChrisJr404 in uuid-rs/uuid#902
• Prepare for 1.25.0 release by @​KodrAus in uuid-rs/uuid#903

New Contributors

• @​ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

... (truncated)

Commits

• 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
• 4b3b9f5 prepare for 1.28.0 release
• cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
• 784a022 Inline expected tokens in optional compact serde test
• a5678c3 Simplify optional serde adapter tests to option tokens
• 638a518 Refactor optional serde adapter tests and share byte wrapper
• b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
• ffd8ec5 prepare for 1.27.0 release
• 654fa5b Add optional serde format adapters
• 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
• Additional commits viewable in compare view

Updates which from 8.0.5 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

• fix: resolve relative PATH entries against the provided cwd by @​RSS1102 in harryfei/which-rs#128

New Contributors

• @​RSS1102 made their first contribution in harryfei/which-rs#128

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

Changelog

Sourced from which's changelog.

8.0.6

• Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @​RSS1102 for your contribution to which!

Commits

• 17fde4a prepare patch release
• 48e49d5 Resolve relative PATH...

  Description has been truncated