Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the backend-deps-tauri group in /src-tauri with 2 updates #412

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 25, 2023

Bumps the backend-deps-tauri group in /src-tauri with 2 updates: tauri and tauri-build.

Updates tauri from 1.5.2 to 1.5.4

Release notes

Sourced from tauri's releases.

@​tauri-apps/cli v1.5.4

[1.5.4]

Dependencies

tauri-cli v1.5.4

Updating crates.io index

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 575 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (530 crate dependencies)
Crate:     kuchiki
Version:   0.8.1
Warning:   unmaintained
Title:     `kuchiki` is unmaintained
Date:      2023-01-21
ID:        RUSTSEC-2023-0019
URL:       https://rustsec.org/advisories/RUSTSEC-2023-0019
Dependency tree:
kuchiki 0.8.1
└── wry 0.24.4
    └── tauri-runtime-wry 0.14.1
        └── tauri 1.5.2
            ├── tauri 1.5.2
            ├── restart 0.1.0
            └── app-updater 0.1.0

Crate: atty Version: 0.2.14 Warning: unsound Title: Potential unaligned read Date: 2021-07-04 ID: RUSTSEC-2021-0145 URL: https://rustsec.org/advisories/RUSTSEC-2021-0145 Dependency tree: atty 0.2.14 └── clap 3.2.25 └── tauri 1.5.2 ├── tauri 1.5.2 ├── restart 0.1.0 └── app-updater 0.1.0

warning: 2 allowed warnings found

... (truncated)

Commits
  • 5966812 Apply Version Updates From Current Changes (v1) (#8396)
  • b44e9c0 feat(bundler): redownload outdated/mis-hashed files (#8431)
  • b2f83f0 fix(core): Replace Rc with Arc to prevent crashes when sending events (#8402)
  • 0a2175e fix(cli): expand globs in workspace member paths (#8439)
  • 645e1dc fix(core/updater): check if installer args are not empty before passing `-Arg...
  • 50a3d17 fix(core/dialog): reconstruct path using appropriate separator, closes #8074 ...
  • 9b230de fix(utils/config): fix parsing f64 values, closes #8252 (#8407)
  • 50e9caa ci: access cli release id directly (#8398)
  • e5cc72e ci: fix msrv tests (#8409)
  • 0d0501c refactor(clipboard): use arboard instead of tao closes #8177 (#8394)
  • Additional commits viewable in compare view

Updates tauri-build from 1.5.0 to 1.5.1

Release notes

Sourced from tauri-build's releases.

tauri-build v1.5.1

Updating crates.io index

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 582 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (558 crate dependencies)
Crate:     atty
Version:   0.2.14
Warning:   unsound
Title:     Potential unaligned read
Date:      2021-07-04
ID:        RUSTSEC-2021-0145
URL:       https://rustsec.org/advisories/RUSTSEC-2021-0145
Dependency tree:
atty 0.2.14
└── clap 3.2.25
    └── tauri 1.5.4
        ├── tauri 1.5.4
        ├── restart 0.1.0
        └── app-updater 0.1.0

warning: 1 allowed warning found

[1.5.1]

Dependencies

Updating crates.io index
   Packaging tauri-build v1.5.1 (/home/runner/work/tauri/tauri/core/tauri-build)
   Verifying tauri-build v1.5.1 (/home/runner/work/tauri/tauri/core/tauri-build)
    Updating crates.io index
 Downloading crates ...
  Downloaded embed-resource v2.4.0
  Downloaded cargo_toml v0.15.3
  Downloaded tauri-winres v0.1.1
   Compiling proc-macro2 v1.0.70
</tr></table> 

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the backend-deps-tauri group in /src-tauri with 2 updates: [tauri](https://github.com/tauri-apps/tauri) and [tauri-build](https://github.com/tauri-apps/tauri).


Updates `tauri` from 1.5.2 to 1.5.4
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v1.5.2...tauri-v1.5.4)

Updates `tauri-build` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v1.5...tauri-build-v1.5.1)

---
updated-dependencies:
- dependency-name: tauri
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps-tauri
- dependency-name: tauri-build
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-deps-tauri
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Dec 25, 2023
@trippjoe trippjoe merged commit b6c61b3 into main Dec 26, 2023
7 checks passed
@dependabot dependabot bot deleted the dependabot/cargo/src-tauri/backend-deps-tauri-e9c61db94a branch December 26, 2023 21:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant