Repository navigation
Bump the "tauri" group with 1 update across multiple ecosystems - #41
Merged
Merged
Conversation
Bumps [vscode-jsonrpc](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/jsonrpc) from 9.0.3 to 10.0.0. - [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases) - [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.0.0/jsonrpc) --- updated-dependencies: - dependency-name: vscode-jsonrpc dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the yara-x group in /app/src-tauri with 3 updates: [yara-x-ls](https://github.com/VirusTotal/yara-x), [yara-x-parser](https://github.com/VirusTotal/yara-x) and [yara-x](https://github.com/VirusTotal/yara-x). Updates `yara-x-ls` from v1.21.0 to v1.22.0 - [Release notes](https://github.com/VirusTotal/yara-x/releases) - [Commits](VirusTotal/yara-x@7b2637d...e27597f) Updates `yara-x-parser` from `7b2637d` to `e27597f` - [Release notes](https://github.com/VirusTotal/yara-x/releases) - [Commits](VirusTotal/yara-x@7b2637d...e27597f) Updates `yara-x` from `7b2637d` to `e27597f` - [Release notes](https://github.com/VirusTotal/yara-x/releases) - [Commits](VirusTotal/yara-x@7b2637d...e27597f) --- updated-dependencies: - dependency-name: yara-x-ls dependency-version: e27597f2c05e13fe1c2bb459781aef8899afc485 dependency-type: direct:production dependency-group: yara-x - dependency-name: yara-x-parser dependency-version: e27597f2c05e13fe1c2bb459781aef8899afc485 dependency-type: direct:production dependency-group: yara-x - dependency-name: yara-x dependency-version: e27597f2c05e13fe1c2bb459781aef8899afc485 dependency-type: direct:production dependency-group: yara-x ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the tauri group in /app with 1 update: [@tauri-apps/cli](https://github.com/tauri-apps/tauri). Updates `@tauri-apps/cli` from 2.12.3 to 2.12.4 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.12.3...@tauri-apps/cli-v2.12.4) --- updated-dependencies: - dependency-name: "@tauri-apps/cli" dependency-version: 2.12.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: tauri ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
Bumps the cargo-minor-and-patch group in /app/src-tauri with 1 update: [tokio](https://github.com/tokio-rs/tokio). Updates `tokio` from 1.53.3 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.3...tokio-1.54.1) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
added 8 commits
October 27, 2026 18:37
# Conflicts: # CHANGELOG.md
# Conflicts: # app/package.json
This was referenced Oct 27, 2026
simeonmiteff
pushed a commit
that referenced
this pull request
Oct 28, 2026
#38) Upgrade Vite 8.3.4 → 8.3.5 and its locked build-tool dependencies. No runtime package versions or license notices change relative to the preceding Tauri CLI branch. This branch includes #41 and the repaired dependency baseline. Merge #40 → #42 → #39 → #41 before this PR; the remaining diff is Vite’s package-lock.json update. Validation: npm ci reports zero vulnerabilities; frontend unit tests, TypeScript/production build, Chromium editor regression (including the patched sanitizer bundle check), and all nine UI harness unit tests pass. CI verifies packaging of the combined stack. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Simeon Miteff <simeon.miteff@corelight.com>
simeonmiteff
pushed a commit
that referenced
this pull request
Oct 28, 2026
Update the pinned install-action (2.87.31), rust-cache (2.9.3), and CodeQL init/analyze (4.39.1) actions. Existing permissions, commands, and explicitly installed tool versions are unchanged. This branch includes #38 and the complete repaired dependency baseline. Merge in order: #40 → #42 → #39 → #41 → #38 → #43. Each PR then reduces to its own dependency update; this branch validates the final combined tree. Validation: reviewed upstream release changes; verified every workflow diff against #38 is confined to SHA pins/comments and all uses remain pinned to full SHAs. Application lockfiles and notices match the locally validated Vite branch. CI is checking the new action versions across frontend, security audits, Linux/Windows/macOS packaging, and native menu smoke tests. Final local integration check: the complete stack builds through Tauri CLI 2.12.4 and Vite 8.3.5, and all four native Xvfb smoke scenarios pass (menu structure, About dialog, save fires once, view toggles/reset) using a temporary profile. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Simeon Miteff <simeon.miteff@corelight.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Upgrade the Tauri CLI and its platform packages from 2.12.3 to 2.12.4. This includes upstream target-validation/NSIS fixes and the CLI’s ZIP security update; it does not change the application’s Rust Tauri runtime packages.
This branch includes #39 and its repaired dependency baseline. Merge #40 → #42 → #39 first; the remaining diff is the CLI update in package-lock.json.
Validation: npm ci reports zero vulnerabilities; the production frontend and a complete Linux debug application build pass using
tauri build --debug --no-bundle --ci -- --locked, Rust 1.95, and the combined dependency stack. Runtime packages/notices are unchanged from #39. CI verifies release packaging on all platforms.