ci(deps): bump the npm-minor-patch group in /apps/desktop with 7 updates by dependabot[bot] · Pull Request #288 · git-agentic/src-control

dependabot · 2026-10-22T07:14:48Z

Bumps the npm-minor-patch group in /apps/desktop with 7 updates:

Package	From	To
@tauri-apps/api	`2.12.3`	`2.12.4`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
@tauri-apps/cli	`2.12.2`	`2.12.3`
@testing-library/user-event	`14.6.7`	`14.6.8`
jsdom	`30.1.2`	`30.1.3`
vitest	`5.0.3`	`5.0.5`

Updates @tauri-apps/api from 2.12.3 to 2.12.4

Release notes

Sourced from @tauri-apps/api's releases.

`@tauri-apps/api` v2.12.4

All found vulnerabilities were already reviewed and decided to be ignored
1 ignored: 1 high

[2.12.4]

What's Changed

dc637db65 (#16260) Improve menu documentation.

$ pnpm build && cd ./dist && pnpm publish --access public --loglevel debug --no-git-checks
$ rollup -c --configPlugin typescript
�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m955ms�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.5s�[22m�[39m
GET https://run-actions-3-azure-eastus.actions.githubusercontent.com/21//idtoken/c37ddb61-7d6d-84f8-af6e-d0b7e7d7955a/56cb7a72-c3b4-5319-90d2-88ed76ba30ee?api-version=2.0&audience=npm%3Aregistry.npmjs.org 200 128ms
📦 @tauri-apps/api@2.12.4 → https://registry.npmjs.org/
GET https://run-actions-3-azure-eastus.actions.githubusercontent.com/21//idtoken/c37ddb61-7d6d-84f8-af6e-d0b7e7d7955a/56cb7a72-c3b4-5319-90d2-88ed76ba30ee?api-version=2.0&audience=sigstore 200 58ms
Signed provenance statement with source and build information
✅ Published package @tauri-apps/api@2.12.4

Commits

59b63ab Apply Version Updates From Current Changes (#16255)
55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
744ff2b chore(deps): bump rustls to 0.23.46
c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
dc637db chore: add missing api change file (#16260)
b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates @tauri-apps/cli from 2.12.2 to 2.12.3

Release notes

Sourced from @tauri-apps/cli's releases.

@tauri-apps/cli v2.12.3

[2.12.3]

Bug Fixes

c95be4615 (#16287) Fix tauri ios xcode-script failing to find the Tauri project when Xcode inherits package manager environment variables from tauri ios dev --open, or when pnpm runs the CLI directly from the gen/apple folder.

d62e5d9c0 (#16184) Fix NSIS installer leaving uninstall.exe and the installation directory behind when uninstalling an existing installation from the installer.

Dependencies

Upgraded to tauri-cli@2.12.3

5a2953e55 (#16237) Updated NSIS to 3.13

Commits

59b63ab Apply Version Updates From Current Changes (#16255)
55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
744ff2b chore(deps): bump rustls to 0.23.46
c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
dc637db chore: add missing api change file (#16260)
b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
Additional commits viewable in compare view

Updates @testing-library/user-event from 14.6.7 to 14.6.8

Release notes

Sourced from @testing-library/user-event's releases.

v14.6.8

14.6.8 (2026-10-13)

Bug Fixes

treat programmatic null input values as empty string (#1329) (1951eb7)

Commits

1951eb7 fix: treat programmatic null input values as empty string (#1329)
See full diff in compare view

Updates jsdom from 30.1.2 to 30.1.3

Release notes

Sourced from jsdom's releases.

v30.1.3

Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@scttcper, @asamuzaK)

Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@scttcper)

Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.

Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.

Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@rnavarro)

Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.

Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.

Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.

Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.

Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.

Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.

Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.

Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.

Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@asamuzaK)

Commits

058c0f5 30.1.3
fcd1fd1 Cascade parsed longhands independently
a3ee786 Cascade computed style properties on demand
f42dc15 Resolve colors before caching or using currentcolor
074b1fb Compute background-position lengths against the final font size
d19598c Apply style rules nested in multiple @media rules
45d626c Rule out attribute selector subjects before matching
3ff0a5b Upgrade Undici and remove abort workarounds
8813bb1 Ignore CSS declarations with unparseable math functions
63712d8 Fix XHR credentials across redirects
Additional commits viewable in compare view

Updates vitest from 5.0.3 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

Keep vite default fs.deny with api token file - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11578 (28dc1)

Handle quoted file names in --changed - by @sheremet-va in vitest-dev/vitest#11583 (14921)

Add data to the import.meta.hot stub - by @sheremet-va in vitest-dev/vitest#11590 (3a828)

Set skip in skipIf, ignore undefined options - by @sheremet-va in vitest-dev/vitest#11591 (d523a)

Skip builtin loading in async leak detector - by @sheremet-va in vitest-dev/vitest#11598 (fe86a)

Keep the import frame in native loader errors - by @sheremet-va in vitest-dev/vitest#11599 (9697b)

Run hook cleanups when a later hook fails - by @sheremet-va in vitest-dev/vitest#11605 (6c5a4)

Release mocks of finished test files - by @sheremet-va in vitest-dev/vitest#11607 (e9c3d)

Abort all running tests on cancel - by @sheremet-va in vitest-dev/vitest#11606 (6621a)

browser:

Ignore synthetic pagehide events - by @sheremet-va in vitest-dev/vitest#11582 (ca081)

Run plugin buildStart on server creation - by @sheremet-va in vitest-dev/vitest#11593 (ea611)

Drop late connections of closed sessions - by @sheremet-va in vitest-dev/vitest#11600 (f161e)

Wait 30s for the browser to close - by @sheremet-va in vitest-dev/vitest#11601 (6498b)

Run global setup once with instances - by @sheremet-va in vitest-dev/vitest#11596 (8dd67)

reporter:

End reason &[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39); on worker crash - by @AriPerkkio in vitest-dev/vitest#11568 (6ae8e)

    View changes on GitHub

v5.0.4

   🚀 Features

experimental:

Tag cache directories with CACHEDIR.TAG - by @lifeiscontent in vitest-dev/vitest#11461 (a8ea3)

Support test.ui.theme option - by @sheremet-va in vitest-dev/vitest#11499 (1da66)

Highlight selector multiple matches in trace view - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11489 (5abba)

Print how many tests were affected and a total when running --changed - by @sheremet-va in vitest-dev/vitest#11424 (a2336)

Add an option to cache dependencies instead of statically parsing them - by @sheremet-va in vitest-dev/vitest#11515 (c0601)

Add fit and zoom controls to trace viewer - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11490 (f5dd9)

   🐞 Bug Fixes

Fail the run on git and location filter errors - by @sheremet-va in vitest-dev/vitest#11430 (30d03)

Enable fsModuleCache by default - by @sheremet-va in vitest-dev/vitest#11435 (ad208)

Track project files and mocks with --changed - by @sheremet-va in vitest-dev/vitest#11432 (b0f2b)

Refactor caching, fix : in project and change the shape of results cache - by @sheremet-va in vitest-dev/vitest#11453 (9673c)

Keep full $ string values when taskTitleValueFormatTruncate is 0 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11485 (4f7e1)

Resolve node builtins in client environments - by @sheremet-va in vitest-dev/vitest#11417 (56b31)

Fix module graph builtin externals after #11421 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11491 and vitest-dev/vitest#11421 (008e1)

Wrap module mocks during in-source testing - by @sheremet-va in vitest-dev/vitest#11505 (36d19)

Handle line endings in snapshot - by @sheremet-va in vitest-dev/vitest#11522 (4c468)

Respect root in projects - by @sheremet-va in vitest-dev/vitest#11521 (26642)

Resolve mocks in directories with spaces - by @sheremet-va in vitest-dev/vitest#11539 (caaef)

api:

Publish the api token atomically - by @umairnawaz333 in vitest-dev/vitest#11323 (6f990)

browser:

... (truncated)

Commits

7a825db chore: release v5.0.5 (#11609)
6621a72 fix: abort all running tests on cancel (#11606)
e9c3d72 fix: release mocks of finished test files (#11607)
8dd67c2 fix(browser): run global setup once with instances (#11596)
6c5a447 fix: run hook cleanups when a later hook fails (#11605)
9697b38 fix: keep the import frame in native loader errors (#11599)
6498b66 fix(browser): wait 30s for the browser to close (#11601)
f161e6d fix(browser): drop late connections of closed sessions (#11600)
fe86a64 fix: skip builtin loading in async leak detector (#11598)
6ae8e89 fix(reporter): end reason 'failed' on worker crash (#11568)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

Chores
- Updated the desktop app’s underlying components to newer versions.

Bumps the npm-minor-patch group in /apps/desktop with 7 updates: | Package | From | To | | --- | --- | --- | | [@tauri-apps/api](https://github.com/tauri-apps/tauri) | `2.12.3` | `2.12.4` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.12.2` | `2.12.3` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.7` | `14.6.8` | | [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` | Updates `@tauri-apps/api` from 2.12.3 to 2.12.4 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/api-v2.12.3...@tauri-apps/api-v2.12.4) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@tauri-apps/cli` from 2.12.2 to 2.12.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.12.2...@tauri-apps/cli-v2.12.3) Updates `@testing-library/user-event` from 14.6.7 to 14.6.8 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.7...v14.6.8) Updates `jsdom` from 30.1.2 to 30.1.3 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.1.2...v30.1.3) Updates `vitest` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) --- updated-dependencies: - dependency-name: "@tauri-apps/api" dependency-version: 2.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@tauri-apps/cli" dependency-version: 2.12.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@testing-library/user-event" dependency-version: 14.6.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: jsdom dependency-version: 30.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-22T07:15:04Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: defaults
Review profile: CHILL
Plan: Advanced
Run ID: 542060a0-09b2-4e3f-afdb-e318257072fb

📥 Commits

Reviewing files that changed from the base of the PR and between 1838e63 and 5469378.

⛔ Files ignored due to path filters: 1

apps/desktop/package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing: 1

apps/desktop/package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Walkthrough

The desktop package manifest now specifies newer version ranges for the Tauri API and CLI, React and React DOM, Testing Library user-event, jsdom, and Vitest.

Changes: Desktop dependency updates

Layer / File(s)	Summary
Update dependency version ranges `apps/desktop/package.json`	Version ranges for the Tauri API and CLI, React and React DOM, Testing Library user-event, jsdom, and Vitest were updated.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 54693

The dependency updates are mergeable with no identified actionable risk.

Architecture risk: 🔵 Low · up to 54693

The change affects 1 system.

Changed systems: apps/desktop

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

observed — apps/desktop (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

observed — Modified behavior in apps/desktop/package.json: Updated the version ranges for @tauri-apps/api, react, react-dom, @tauri-apps/cli, @testing-library/user-event, jsdom, and vitest.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies a dependency update in the desktop application and specifies that seven packages changed. It matches the main change in the pull request.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

Commit to this branch
Create a new PR

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

tonibergholm-codento

Checks green on an up-to-date head; dependency bump.

dependabot Bot requested review from tonibergholm and tonibergholm-codento as code owners October 22, 2026 07:14

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026

tonibergholm-codento approved these changes Oct 22, 2026

View reviewed changes

tonibergholm-codento merged commit 644a7d0 into main Oct 22, 2026
9 checks passed

tonibergholm-codento deleted the dependabot/npm_and_yarn/apps/desktop/npm-minor-patch-af677e4583 branch October 22, 2026 11:56

Navigation Menu

Repository navigation

ci(deps): bump the npm-minor-patch group in /apps/desktop with 7 updates - #288

ci(deps): bump the npm-minor-patch group in /apps/desktop with 7 updates#288
tonibergholm-codento merged 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/desktop/npm-minor-patch-af677e4583

dependabot Bot commented on behalf of github Oct 22, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Oct 22, 2026 •

edited

Loading

Uh oh!

tonibergholm-codento left a comment

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​tauri-apps/api v2.12.4

[2.12.4]

What's Changed

19.3.1 (October 14th, 2026)

React Server Components

19.3.1 (October 14th, 2026)

React Server Components

@​tauri-apps/cli v2.12.3

[2.12.3]

Bug Fixes

Dependencies

v14.6.8

14.6.8 (2026-10-13)

Bug Fixes

v30.1.3

v5.0.5

🐞 Bug Fixes

View changes on GitHub

v5.0.4

🚀 Features

🐞 Bug Fixes

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

tonibergholm-codento left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 22, 2026 •

edited by coderabbitai Bot

Loading

`@tauri-apps/api` v2.12.4

`@tauri-apps/cli` v2.12.3

coderabbitai Bot commented Oct 22, 2026 •

edited

Loading