deps(deps): bump tao from 0.35.3 to 0.37.0

[dependabot]

Bumps tao from 0.35.3 to 0.37.0.

Release notes

Sourced from tao's releases.

tao v0.37.0

Updating crates.io index
     Locking 359 packages to latest compatible versions
      Adding dlopen2 v0.8.2 (available: v0.9.0)
      Adding jni v0.21.1 (available: v0.22.4)
      Adding raw-window-handle v0.4.3 (available: v0.6.2)
      Adding raw-window-handle v0.5.2 (available: v0.6.2)
      Adding syn v2.0.119 (available: v3.0.3)
      Adding toml v0.8.2 (available: v0.8.23)
      Adding toml_datetime v0.6.3 (available: v0.6.11)
      Adding toml_edit v0.20.2 (available: v0.20.7)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1225 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (361 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Crate:     atk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0416
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416
Crate:     gdk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0412
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412
Crate:     gdk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0418
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0418
</tr></table>

... (truncated)

Changelog

Sourced from tao's changelog.

[0.37.0]

• beb88249 (#1304) Fix Android event loop hanging on first IPC call. When the ndk_glue event pipe and the wake fd became ready at the same time, ALooper_pollAll could return the fd event instead of ALOOPER_POLL_WAKE, so the loop never drained the user-event channel and every invoke response sat there forever. The event loop now drains pending user events on every iteration, regardless of what the poll reported.
• 27e4d01e (#1298) Fix a mismatched meta-variable name in the android_binding macro.
• 992909ac On Windows, skip set_skip_taskbar if skip_taskbar is false when creating the window and on taskbar restars.
• 95636d5f (#1301) On iOS, fixed a startup panic in debug builds on iOS versions older than 26, caused by registering the iOS 26-only preferredWindowingControlStyleForScene: method inside the UIWindowSceneDelegate protocol block.
• a3ff3f03 On iOS, always implement application:configurationForConnectingSceneSession:options: on the application delegate, using the role of the connecting session, so the tao scene delegate is installed whenever the system runs the app on the scene lifecycle - which iOS 26 and above does even for apps whose Info.plist does not declare a UIApplicationSceneManifest. Windows are now attached to a scene whenever one is connected instead of only when the Info.plist enables multiple scenes, and windows created before the first scene connects are adopted by it, so they are still displayed.
• eebd58f9 (#1261) On iOS, emit WindowEvent::Destroyed for a scene's windows when the scene disconnects. Previously sceneDidDisconnect: was a no-op, so windows tied to a scene never reported their destruction when the system reclaimed the scene.
• f6671e34 (#1291) Bumped MSRV to 1.85
• 04394e48 (#1313) On Windows, fix Window functions panics after the parent event loop dropped, they log the errors instead
• f8722bd3 (#1292) Updated windows and windows-core to 0.62, this drop Windows 7 support, see microsoft/windows-rs#3808
• 493dc3a8 (#1306) On Windows, delay maximizing the window if it's hidden to avoid it flashing briefly. This also changed the size and position returned to pre-maximized states if you query them with the window being hidden and called maximize
• bd1b990b (#1296) On Windows, fixed flashing title bar on undecorated windows creation
• 36b31b79 (#1157) Exits the process on receiving WM_ENDSESSION message, this fixes the cannot move state from Destroyed crash after receiving the message from Restart Manager

[0.36.0]

• 2b818c4e (#1288 by @​Legend-Master) Breaking Change:

  Changed the names of the Android JNI lifecycle functions exposed by android_binding! as follows:

  • create to onFirstActivityCreate
  • onActivityCreate to onCreate
  • start to onStart
  • resume to onResume
  • pause to onPause
  • stop to onStop
  • Removed onActivitySaveInstanceState
  • onActivityDestroy to onDestroy
  • onActivityLowMemory to onLowMemory

  onLowMemory no longer takes any parameters. onFirstActivityCreate no longer takes any parameters.

• 4d5005ff (#1173 by @​sftse) fn set_min_inner_size, fn set_max_inner_size, fn set_inner_size_constraints, fn set_fullscreen and fn set_theme on Window were not properly thread-safe on Linux.

• 2ff9e3e9 (#1271 by @​Legend-Master) Fix EventLoopProxy::send_event sometimes doesn't deliver the event until the next EventLoopProxy::send_event call

• 14a6dec2 (#1252 by @​Legend-Master) Fix getting the DPI internally leaks HDC handles on Windows. Also only call GetDC when on < Windows 8.1 which improves its performance.

• 47d38f36 (#1228 by @​ushinohama966) fix(linux): map JIS keyboard specific keys (Zenkaku_Hankaku, Hiragana_Katakana, Henkan, Muhenkan) in raw_key_to_key to prevent them from becoming Key::Unidentified.

• 2ada91bf (#1254 by @​tenderdeve) On macOS, re-apply the custom traffic light inset after a title change and after leaving fullscreen, so the buttons no longer jump back to their default position on those events.

• 07f3742b (#1218 by @​dgerhardt) On Linux, multiple issues regarding window decoration handling for Wayland have been fixed (#899, #1046, tauri-apps/tauri#6562, tauri-apps/tauri#13440, tauri-apps/tauri#13749, tauri-apps/tauri#14251, tauri-apps/tauri#14748). Title bar buttons and changing of the title should now work as expected. Furthermore, client-side decorations are no longer applied, when server-side decorations are supported. SSD are no longer applied when decorations are disabled for a window during creation. Toggling of SSD rendering for existing windows is however not supported at this time.

• dad6b990 (#1266 by @​FabianLars) Tao now initializes ndk-context again. This happens in the first onActivityCreate call and uses an Application context instead of an Activity context.

• 729bbcad (#1270 by @​ahirner) Prevent iOS apps from aborting when UIKit lays out a Tao view while it is temporarily detached from its window.

... (truncated)

Commits

• 2f9eecf Publish New Versions (#1293)
• 992909a fix: change file
• a3ff3f0 fix(ios): always implement application:configurationForConnectingSceneSession...
• 493dc3a fix(windows): delay maximize window if hidden (#1306)
• 04394e4 fix(windows): Window functions panics after EventLoop dropped (#1313)
• beb8824 fix(android): drain EventLoopProxy user events on every poll iteration (#1304)
• 4ea070e refactor(windows): only call set_skip_taskbar when needed (#1302)
• 36b31b7 fix(windows): exit process on WM_ENDSESSION (#1157)
• 95636d5 fix(ios): don't register iOS 26 only method in protocol block (#1301)
• 27e4d01 fix(android): fix the android_binding macro (#1298)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
cargo/tao	0.37.0	🟢 5.3	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 9 Found 25/27 approved changesets -- score normalized to 9 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 1 SAST tool is not run on all commits -- score normalized to 1
cargo/tao	>= 0.37.0, < 0.38.0	Unknown	Unknown

Scanned Files

• Cargo.lock
• crates/openpolysphere-app/Cargo.toml