chore(deps): bump the minor-and-patch group across 1 directory with 4 updates by dependabot[bot] · Pull Request #861 · thunderbird/thunderbolt

dependabot · 2026-05-13T17:47:14Z

Bumps the minor-and-patch group with 3 updates in the /src-tauri directory: tauri, tokio and rustls.

Updates tauri from 2.11.0 to 2.11.1

Release notes

tauri-cli v2.11.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1067 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1088 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.55.0
    │   └── tauri-runtime-wry 2.11.1
    │       └── tauri 2.11.1
    │           ├── tauri-utils 2.9.1
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.11.1
    │           │   ├── tauri-runtime 2.11.1
    │           │   │   ├── tauri-runtime-wry 2.11.1
    │           │   │   └── tauri 2.11.1
    │           │   ├── tauri-plugin 2.6.1
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.6.1
    │           │   │   └── tauri 2.11.1
    │           │   ├── tauri-codegen 2.6.1
    │           │   │   ├── tauri-macros 2.6.1
    │           │   │   └── tauri-build 2.6.1
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.11.1
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.11.1
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.9.1
    │           │   │   └── tauri-cli 2.11.1
    │           │   ├── tauri-build 2.6.1
</tr></table>

... (truncated)

Commits

e5ae5b9 chore: fix changelog
4d2db70 Apply Version Updates From Current Changes (#15328)
5e3126f feat(mobile): expose monitor APIs (#15338)
ba02558 Merge commit from fork
5f479c0 fix(core): requestPermission crash regression on Android, closes #15323 (#15336)
1b26769 fix(tauri): enforce ACL for remote origins even without AppManifest (#15266)
3057eda fix(driver): enable eq-separator feature for pico-args. (#15324)
4f548e7 chore(deps): update phf to 0.13 (#15308)
4ca427d fix: pin napi for msrv and Node.js on CI (#15310)
a04d907 fix(ci): publish-cli-rs script for Powershell (#15309)
See full diff in compare view

Updates tokio from 1.52.1 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

sync: fix underflow in mpsc channel len() (#8062)

sync: notify receivers in mpsc OwnedPermit::release() method (#8075)

sync: require that an RwLock has max_readers != 0 (#8076)

sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Commits

d875691 chore: prepare Tokio v1.52.3 (#8130)
e1aebb0 Merge 'tokio-1.51.3' into 'tokio-1.52.x' (#8129)
fd63094 chore: prepare Tokio v1.51.3 (#8127)
8c600d0 Merge 'tokio-1.47.5' into 'tokio-1.51.x' (#8123)
11bfc13 chore: prepare Tokio v1.47.5 (#8122)
f085b62 sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
30d25cc sync: require that an RwLock has max_readers != 0 (#8076)
9fccf53 sync: return Empty from try_recv() when mpsc is closed with outstanding p...
ebf61b4 sync: fix underflow in mpsc channel len() (#8062)
4abe9d7 chore: prepare Tokio v1.52.2 (#8115)
Additional commits viewable in compare view

Updates rustls from 0.23.38 to 0.23.40

Commits

b44c09f Prepare 0.23.40
e7a555f Prefer Ord::max to core::cmp
c0005be ech: base inner name padding on actual extension
4e49529 ech: test inner name padding
3e06ef1 ech: add both name and "gross" padding
c574ffd ech: avoid short-lived allocation for padding
8bf935c ech: pop comment from match arm
9088004 ech: expand maximum_name_length to usize ASAP
a612901 Default require_ems based on CryptoProvider FIPS status
0541605 Cargo: version 0.23.38 -> 0.23.39
Additional commits viewable in compare view

Updates tauri-build from 2.6.0 to 2.6.1

Release notes

Sourced from tauri-build's releases.

tauri-build v2.6.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1067 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1088 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.55.0
    │   └── tauri-runtime-wry 2.11.1
    │       └── tauri 2.11.1
    │           ├── tauri-utils 2.9.1
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.11.1
    │           │   ├── tauri-runtime 2.11.1
    │           │   │   ├── tauri-runtime-wry 2.11.1
    │           │   │   └── tauri 2.11.1
    │           │   ├── tauri-plugin 2.6.1
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.6.1
    │           │   │   └── tauri 2.11.1
    │           │   ├── tauri-codegen 2.6.1
    │           │   │   ├── tauri-macros 2.6.1
    │           │   │   └── tauri-build 2.6.1
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.11.1
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.11.1
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.9.1
    │           │   │   └── tauri-cli 2.11.1
    │           │   ├── tauri-build 2.6.1
</tr></table>

... (truncated)

Commits

e5ae5b9 chore: fix changelog
4d2db70 Apply Version Updates From Current Changes (#15328)
5e3126f feat(mobile): expose monitor APIs (#15338)
ba02558 Merge commit from fork
5f479c0 fix(core): requestPermission crash regression on Android, closes #15323 (#15336)
1b26769 fix(tauri): enforce ACL for remote origins even without AppManifest (#15266)
3057eda fix(driver): enable eq-separator feature for pico-args. (#15324)
4f548e7 chore(deps): update phf to 0.13 (#15308)
4ca427d fix: pin napi for msrv and Node.js on CI (#15310)
a04d907 fix(ci): publish-cli-rs script for Powershell (#15309)
See full diff in compare view

Note

Medium Risk
Dependency-only update, but it upgrades core runtime crates (tauri, tokio, rustls) which can change app runtime behavior and networking/TLS handling despite being patch releases.

Overview
Updates the Tauri Rust app dependencies in src-tauri to newer patch versions, including tauri 2.11.0 → 2.11.1, tokio → 1.52.3, and rustls 0.23.38 → 0.23.40.

Refreshes Cargo.lock accordingly (including Tauri subcrates like tauri-build/tauri-macros/tauri-utils and a phf bump to 0.13.x), with no functional code changes beyond the dependency graph updates.

^{Reviewed by Cursor Bugbot for commit 144e077. Bugbot is set up for automated code reviews on this repo. Configure here.}

github-actions · 2026-05-13T17:53:28Z

PR Metrics

Metric	Value
Lines changed (prod code)	`+2 / -2`
JS bundle size (gzipped)	🟢 1.02 MB → 1.02 MB (-4.4 KB, -0.4%)
Test coverage	🟢 71.47% → 71.47% (+0.0%)
Performance (preview)	Preview not ready — Render deploy may have timed out
Accessibility	—
Best Practices	—
SEO	—

Updated Wed, 13 May 2026 19:55:23 GMT · run #1484

… updates Bumps the minor-and-patch group with 3 updates in the /src-tauri directory: [tauri](https://github.com/tauri-apps/tauri), [tokio](https://github.com/tokio-rs/tokio) and [rustls](https://github.com/rustls/rustls). Updates `tauri` from 2.11.0 to 2.11.1 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.11.0...tauri-v2.11.1) Updates `tokio` from 1.52.1 to 1.52.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.1...tokio-1.52.3) Updates `rustls` from 0.23.38 to 0.23.40 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.38...v/0.23.40) Updates `tauri-build` from 2.6.0 to 2.6.1 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.6.0...tauri-build-v2.6.1) --- updated-dependencies: - dependency-name: rustls dependency-version: 0.23.40 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tauri dependency-version: 2.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tauri-build dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tokio dependency-version: 1.52.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 13, 2026

dependabot Bot had a problem deploying to preview May 13, 2026 17:50 Failure

dependabot Bot force-pushed the dependabot/cargo/src-tauri/minor-and-patch-5727880428 branch from dd76236 to 144e077 Compare May 13, 2026 19:49

dependabot Bot had a problem deploying to preview May 13, 2026 19:52 Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the minor-and-patch group across 1 directory with 4 updates#861

chore(deps): bump the minor-and-patch group across 1 directory with 4 updates#861
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/minor-and-patch-5727880428

dependabot Bot commented on behalf of github May 13, 2026 •

edited by cursor Bot

Loading

Uh oh!

github-actions Bot commented May 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 13, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

tauri-cli v2.11.1

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

Tokio v1.52.2

1.52.2 (May 4th, 2026)

tauri-build v2.6.1

Uh oh!

github-actions Bot commented May 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Metrics

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 13, 2026 •

edited by cursor Bot

Loading

github-actions Bot commented May 13, 2026 •

edited

Loading