deps(deps): bump wry from 0.55.1 to 0.56.1

[dependabot]

Bumps wry from 0.55.1 to 0.56.1.

Release notes

Sourced from wry's releases.

wry v0.56.1

Updating crates.io index
     Locking 427 packages to latest compatible versions
      Adding base64 v0.22.1 (available: v0.23.1)
      Adding generic-array v0.14.7 (available: v0.14.9)
      Adding getrandom v0.3.4 (available: v0.4.3)
      Adding jni v0.21.1 (available: v0.22.4)
      Adding libloading v0.8.9 (available: v0.9.0)
      Adding sha2 v0.10.9 (available: v0.11.0)
      Adding soup3 v0.5.0 (available: v0.9.0)
      Adding toml v0.8.2 (available: v0.8.23)
      Adding toml_datetime v0.6.3 (available: v0.6.11)
      Adding toml_edit v0.20.2 (available: v0.20.7)
      Adding webview2-com v0.38.2 (available: v0.39.1)
      Adding wgpu v23.0.1 (available: v30.0.0)
      Adding windows v0.61.3 (available: v0.62.2)
      Adding windows-core v0.61.2 (available: v0.62.2)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1216 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (428 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Crate:     atk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0416
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416
Crate:     gdk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0412
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412
Crate:     gdk-sys
</tr></table>

... (truncated)

Changelog

Sourced from wry's changelog.

[0.56.1]

• 62080fa (#1811 by @​gimenete) On Android, cache the asset-loader setting in RustWebViewClient so intercepted requests avoid repeated JNI calls into Rust state.
• a5612a8 (#1812 by @​Legend-Master) On Android, removed unused withAssetLoader binding and assetLoaderDomain can now return null.
• 5ce72b0 (#1772 by @​degant) Don't panic in the IPC handler when the webview's current document URL is not a valid http::Uri (for example a file:// URL, or one containing a raw space or non-ASCII characters). Such invalid IPC requests are now logged (under the tracing feature) and dropped instead of aborting the process, matching the existing behavior of the WKWebView backend.
• b95a7f8 (#1799 by @​Legend-Master) On Windows, ignore set webview focus error on create as it fails if the hosting window is minimized.
• aff28ef (#1781 by @​FabianLars) On macOS in debug mode, don't register requestMediaCapturePermissionForOrigin:initiatedByFrame:type:decisionHandler: delegate method on macOS 11 or older to prevent a debug_assertion startup panic.
• be729e3 (#1804 by @​velocitysystems) Override getDefaultVideoPoster() on Android to return a transparent bitmap instead of null, preventing Chromium from painting its default gray play-button placeholder on <video> elements.
• 3fbf592 (#1795 by @​qwerfunch) Fix a Windows crash when the WebView2 parent subclass is re-entered after its controller reference data is cleared during teardown.

[0.56.0]

• affbb3c (#1720) Updated Android lifecycle JNI calls in WryActivity for Tao 0.36's renames:

  • create to onFirstActivityCreate
  • onActivityCreate to onCreate
  • start to onStart
  • resume to onResume
  • pause to onPause
  • stop to onStop
  • Removed onActivitySaveInstanceState
  • onActivityDestroy to onDestroy
  • onActivityLowMemory to onLowMemory

  onLowMemory no longer takes any parameters. onFirstActivityCreate no longer takes any parameters.

  and also emitting them as window-specific events.

• 145b36f (#1736) Remove Send, Sync bounds from NewWindowOpener.

• 871497a (#1748) Add back/forward navigation APIs (go_back, go_forward, can_go_back, and can_go_forward) to WebView.

• fe52ff9 (#1715) On Android, release REQUEST_HANDLER mutex sooner by cloning the underlying Send + Sync handler.

• 9d0a9fe (#1712) On Windows, Add WebViewExtWindows::hwnd getter to access the child HWND containing the webview.

• 4ee8c38 (#1779) Enable WebView element fullscreen support on macOS 12.3+ and iOS 15.4+ without using private APIs.

• 5bdda32 (#1719) On macOS, avoid an extra copy for owned custom protocol response bodies by transferring the body buffer into NSData.

• 6ef93b3 (#1737) On macOS, updated objc2-* dependencies to 0.3.2

• 9f9a237 (#1654) Add an expanded permission handling API for WebView2, WKWebView, WebKitGTK, and Android. This includes:

  • PermissionKind expansion: DisplayCapture, Midi, Sensors, MediaKeySystemAccess, LocalFonts, WindowManagement, PointerLock, AutomaticDownloads, FileSystemAccess, Autoplay.
  • Support for PermissionResponse::Prompt to trigger native system dialogs.
  • Android support via JNI bridge (onPermissionRequest in RustWebChromeClient).
  • macOS: Split camera/microphone requests; CameraAndMicrophone resolved from individual responses.
  • Linux: DisplayCapture detection for WebKitGTK < 2.42 (getDisplayMedia fix).
  • Windows: Full coverage of all 12 COREWEBVIEW2_PERMISSION_KIND values.

• bd1decc (#1780) Breaking Change: Removed the macOS/iOS specific transparent and fullscreen feature flags. The functionalities are now always enabled. Please reach out immediatly if you see issues in the App Store submission process.

• d29cd57 (#1787) Removed protocol feature, previously gated WebViewBuilder::with_custom_protocol, WebViewBuilder::with_asynchronous_custom_protocol and WebViewBuilder::with_asset_loader are now always available

• 86ac6e8 (#1732) Updated dom_query dependency to 0.28.0

• 10fdf73 (#1738) On Windows, add WebViewBuilderExtWindows::with_profile_name to opt the webview into a named WebView2 profile. Webviews with different profile names within the same environment have isolated cookies, storage, IndexedDB, and cache while sharing the runtime — matching WebView2's documented multi-profile pattern.

Commits

• 14be448 apply version updates (#1796)
• a5612a8 refactor(android): simplify with_asset_loader (#1812)
• 62080fa perf(android): cache asset loader state (#1811)
• d134162 chore(deps): update rust crate glow to 0.18.0 (#1694)
• 3fbf592 fix(windows): RemoveWindowSubclass first before dropping `ICoreWebView2Cont...
• 5ce72b0 fix: don't panic on invalid IPC request URI (#1772)
• be729e3 fix(android): override getDefaultVideoPoster to suppress placeholder (#1804)
• b95a7f8 fix(windows): ignore MoveFocus error on creation (#1799)
• 193992a docs(android): why WEBVIEW_ATTRIBUTES exists (#1801)
• 6c3d3c7 fix(bench): rlib location on new nightly (#1800)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
cargo/cssparser	0.37.0	🟢 6	Details Check Score Reason Code-Review 🟢 9 Found 28/30 approved changesets -- score normalized to 9 Maintained 🟢 10 15 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing 🟢 10 project is fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
cargo/cssparser-macros	0.7.1	🟢 6	Details Check Score Reason Code-Review 🟢 9 Found 28/30 approved changesets -- score normalized to 9 Maintained 🟢 10 15 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing 🟢 10 project is fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
cargo/dom_query	0.28.0	Unknown	Unknown
cargo/html5ever	0.39.0	🟢 6.1	Details Check Score Reason Maintained 🟢 10 18 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing 🟢 10 project is fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
cargo/markup5ever	0.39.0	🟢 6.1	Details Check Score Reason Maintained 🟢 10 18 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing 🟢 10 project is fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
cargo/selectors	0.38.0	Unknown	Unknown
cargo/wry	0.56.1	🟢 5.8	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Code-Review 🟢 10 all changesets reviewed Binary-Artifacts 🟢 9 binaries present in source code Security-Policy 🟢 4 security policy file detected Maintained 🟢 10 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST 🟢 3 SAST tool is not run on all commits -- score normalized to 3
cargo/wry	>= 0.56.1, < 0.57.0	Unknown	Unknown

Scanned Files

• Cargo.lock
• crates/openpolysphere-app/Cargo.toml