Skip to content

chore(deps): bump the rust-compatible group with 9 updates - #55

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-compatible-b935791336
Closed

chore(deps): bump the rust-compatible group with 9 updates#55
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-compatible-b935791336

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the rust-compatible group with 9 updates:

Package From To
ignore 0.4.33 0.4.34
globset 0.4.20 0.4.21
similar 3.2.0 3.2.1
tokio 1.53.1 1.54.1
uuid 1.28.0 1.29.0
tree-sitter-powershell 0.26.4 0.26.6
tauri 2.12.1 2.12.2
tauri-build 2.7.1 2.7.2
tauri-plugin-dialog 2.8.1 2.8.4

Updates ignore from 0.4.33 to 0.4.34

Commits
  • 91f5d22 ignore-0.4.34
  • 55f2f69 globset-0.4.21
  • 65e072f ignore: respect linked worktree excludes without requiring Git
  • d19650f globset: match filename-only regexes against basenames
  • 9d07a92 ignore: reuse incremental matchers for directories without rules
  • 6892bc2 ignore: use byte keys for incremental parent lookups
  • 1752fb7 globset: reject impossible literal lengths before hashing
  • 2d4fa85 ignore: skip empty absolute parent matchers (#3557)
  • b5611fc ignore: reuse parent repository detection
  • c5e744c ignore: avoid scratch pools for empty matchers
  • Additional commits viewable in compare view

Updates globset from 0.4.20 to 0.4.21

Commits
  • 55f2f69 globset-0.4.21
  • 65e072f ignore: respect linked worktree excludes without requiring Git
  • d19650f globset: match filename-only regexes against basenames
  • 9d07a92 ignore: reuse incremental matchers for directories without rules
  • 6892bc2 ignore: use byte keys for incremental parent lookups
  • 1752fb7 globset: reject impossible literal lengths before hashing
  • 2d4fa85 ignore: skip empty absolute parent matchers (#3557)
  • b5611fc ignore: reuse parent repository detection
  • c5e744c ignore: avoid scratch pools for empty matchers
  • fada8f9 ignore: benchmark Python workspace discovery and matching (#3554)
  • Additional commits viewable in compare view

Updates similar from 3.2.0 to 3.2.1

Changelog

Sourced from similar's changelog.

3.2.1

  • Improved real-world diffing performance substantially without changing the produced diffs. On a corpus of real source file revisions, line diffs run about 4x faster with Algorithm::Myers, 5x faster with Algorithm::Histogram, and 2.5x faster with Algorithm::Patience; word diffs run about 2x faster. This comes from a faster line tokenizer, a SipHash-1-3 content hash that consumes whole words (randomly keyed with std), cheaper integer-keyed lookup tables, hashing only the changed middle of Myers line diffs, flat occurrence tables in Histogram, and a gap buffer in the compaction pass that was quadratic on diffs with many ops. Allocation counts and peak memory dropped as well; in particular one sided and heavily unbalanced inputs no longer build index structures proportional to the larger side for Algorithm::Hunt, Algorithm::Histogram, and Algorithm::Patience.
  • Fixed Algorithm::Histogram overflowing the stack on inputs with many scattered changes. Pending ranges are now tracked on the heap, so stack usage no longer grows with the number of anchors. #105
  • Fixed TextMerge::labels writing carriage returns and newlines verbatim into conflict markers, which let a label add lines to the output that looked like merged content. Line terminators in labels are now replaced with spaces. #101
Commits
  • 71d4831 chore(release): prepare 3.2.1
  • b61e6c3 test(histogram): skip small stack tests on WASI
  • a4ee936 fix(histogram): track pending ranges on the heap
  • 96993d9 docs: add runnable example output gallery (#104)
  • 1c64280 docs(changelog): describe diff performance and memory improvements
  • a3da6ec perf(compact): use a gap buffer for large operation lists
  • ce3a403 perf(histogram): reuse indexes and bound unbalanced input allocations
  • 2bcae2f perf(myers): skip unchanged hashing and unused split bookkeeping
  • 5a5aa8d perf(text): accelerate line and word tokenization
  • 80bc240 perf(hash): accelerate content hashing and integer lookups
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

  • time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

  • fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
  • net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
  • runtime: add Builder::max_io_events_per_busy_tick (#8410)
  • runtime: stabilize tokio::runtime::worker_index() (#8431)
  • sync: add SemaphorePermit::semaphore() (#8482)
  • sync: add blocking_acquire methods to Semaphore (#8269)
  • sync: add watch::Receiver::is_closed (#8481)
  • wasm: support JSPI for Emscripten target (#8285, #8627)
  • wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

  • fs: reject zero in File::set_max_buf_size (#8449)
  • io: make copy_buf cooperative (#8459)
  • io: panic when BufReader or BufStream is created with zero capacity (#8494)
  • io: panic when in-memory pipe is created with zero capacity (#8397)
  • io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
  • io: support vectored writes in Sink (#8663)
  • net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
  • net: start accepted sockets as readable and writable (#8435)
  • net: support UCred on Fuchsia (#8257)
  • process: use mio::unix::pipe for Unix child stdio (#8603)
  • runtime: cache-pad the shared injection queue and idle state (#8622)
  • runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
  • runtime: make enable_io available whenever rt is enabled (#8387)
  • runtime: move block_in_place setup into a non-generic function (#8315)
  • runtime: move the multi-thread inject queue to its own mutex (#8382)
  • runtime: panic when max_io_events_per_tick is zero (#8476)
  • runtime: suggest .await in nested block_on panic message (#8501)
  • sync: avoid atomic reader count in broadcast slots (#8357)
  • sync: use acquire/release orderings in Notify (#8325)
  • time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

Updates uuid from 1.28.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits
  • 4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
  • a3631fd prepare for 1.29.0 release
  • 304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
  • d49f963 Reuse existing version tests for NonNilUuid constructors
  • 2f02404 Add versioned constructors to NonNilUuid
  • See full diff in compare view

Updates tree-sitter-powershell from 0.26.4 to 0.26.6

Commits
  • 65ea691 bump to v0.26.6
  • c96b28e Merge pull request #65 from ColinKennedy/fix/native-command-arguments
  • b03e6b0 Parse native-command arguments: bare -- and -, --opt=value, -A5, comma lists,...
  • e7bd348 Merge pull request #52 from oWretch/owretch-plan-special-comments-folding
  • 6353a52 test(comments): add shebang and help comment corpus cases
  • ac91fef feat(folds): add region and signature comment folding
  • d398441 Regenerate with correct tree-sitter version
  • aae1e61 Remove tree-sitter from nix shell
  • See full diff in compare view

Updates tauri from 2.12.1 to 2.12.2

Release notes

Sourced from tauri's releases.

tauri v2.12.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1295 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134


Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits

Updates tauri-build from 2.7.1 to 2.7.2

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1296 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1092 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134


Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits
  • 5b23c82 apply version updates (#16243)
  • 05354a8 chore(deps): update swift-rs to 1.0.9
  • c48e1ca fix(ios): make @_cdecl entry points public so release builds link on Xcode ...
  • eeeaa0f fix(nsis): block downgrades in silent, passive and update modes (#16230)
  • 0204f6f fix(api): keep Channel messages flowing after the handler throws (#16244)
  • 7fcd8a7 fix(ci): retry switching to the Android webview context in e2e (#16239)
  • fd319dd chore(deps): update base64 to 0.23
  • 413cbdb Apply Version Updates From Current Changes (#16213)
  • 587ae48 chore: disable CODEOWNERS file (#16236)
  • a98038e fix: menu append doesn't take options like MenuItemOptions (#16235)
  • Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.8.1 to 2.8.4

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.4

[2.8.4]

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.4
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.4
npm notice filename: tauri-apps-plugin-dialog-2.8.4.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 994ee0f6a1a440a1b9f47bd7b03886d082b76c41
npm notice integrity: sha512-+6ZOiXenOaxXw[...]kWGej4a7dC4lw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3529333044
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.4

dialog v2.8.4

[2.8.4]

... (truncated)

Commits
  • 1281906 publish new versions (#3712)
  • 52fa775 chore(deps): update rust crate rand to 0.10 (#3738)
  • 1331ca4 chore(deps): update rust crate rfd to 0.17 (#3737)
  • 385f60c chore(deps): update rust crate base64 to 0.23 (#3515)
  • 8e04d30 chore(deps): update dependency @​tauri-apps/cli to v2.12.4 (#3717)
  • 34ed7d3 chore(deps): update dependency @​rollup/plugin-terser to v1.0.2 (#3733)
  • c75459d chore(deps): update dependency rollup to v4.64.12 (#3715)
  • df59420 chore(deps): update webpki-roots crates (lockfile-only) (#3723)
  • 11211c3 fix(window-state): stop macOS overlay windows changing size on every restore ...
  • f36ba7b feat(notification): add Android chronometer support (#3282)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the rust-compatible group with 9 updates
af96d1d 
Bumps the rust-compatible group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.33` | `0.4.34` |
| [globset](https://github.com/BurntSushi/ripgrep) | `0.4.20` | `0.4.21` |
| [similar](https://github.com/mitsuhiko/similar) | `3.2.0` | `3.2.1` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.28.0` | `1.29.0` |
| [tree-sitter-powershell](https://github.com/airbus-cert/tree-sitter-powershell) | `0.26.4` | `0.26.6` |
| [tauri](https://github.com/tauri-apps/tauri) | `2.12.1` | `2.12.2` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.7.1` | `2.7.2` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.8.1` | `2.8.4` |


Updates `ignore` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.33...ignore-0.4.34)

Updates `globset` from 0.4.20 to 0.4.21
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@globset-0.4.20...globset-0.4.21)

Updates `similar` from 3.2.0 to 3.2.1
- [Changelog](https://github.com/mitsuhiko/similar/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/similar@3.2.0...3.2.1)

Updates `tokio` from 1.53.1 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1)

Updates `uuid` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.28.0...v1.29.0)

Updates `tree-sitter-powershell` from 0.26.4 to 0.26.6
- [Commits](airbus-cert/tree-sitter-powershell@v0.26.4...v0.26.6)

Updates `tauri` from 2.12.1 to 2.12.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.12.1...tauri-v2.12.2)

Updates `tauri-build` from 2.7.1 to 2.7.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.7.1...tauri-build-v2.7.2)

Updates `tauri-plugin-dialog` from 2.8.1 to 2.8.4
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.8.1...dialog-v2.8.4)

---
updated-dependencies:
- dependency-name: ignore
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-compatible
- dependency-name: globset
  dependency-version: 0.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-compatible
- dependency-name: similar
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-compatible
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-compatible
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-compatible
- dependency-name: tree-sitter-powershell
  dependency-version: 0.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-compatible
- dependency-name: tauri
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-compatible
- dependency-name: tauri-build
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-compatible
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-compatible
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 2, 2026
@dependabot dependabot Bot mentioned this pull request Nov 2, 2026
Closed
@styayur styayur mentioned this pull request Nov 3, 2026
Merged
styayur added a commit that referenced this pull request Nov 3, 2026
@styayur
fix: integrate Vite 8 and keep desktop editors offline (#57)
64d2e80 
Integrate the compatible dependency requests #53, #54, #55 and #56, with runtime fixes found during acceptance.

- Preserve the declared Rust 1.90 MSRV and Safari 13 / Chrome 105 build targets. Vite 8 uses its native Oxc minifier rather than the incompatible previous esbuild configuration. Refresh the reviewed Rust/frontend groups and Dart grammar 0.3.
- Bind source and diff viewers to installed, audited Monaco 0.57 and DOMPurify 3.4.17 with local language workers. The loader previously defaulted to an external Monaco version blocked by the unchanged desktop CSP. No CSP or source-upload permission is broadened.
- Correct Monaco diff model disposal when navigating or changing theme, and use the existing theme foreground token for readable light settings.
- Ship byte-identical upstream Monaco and DOMPurify notices with a source/hash/build-copy verification gate. The existing document's broader distribution-notice limitations remain explicit.

Validation: frozen frontend installation, lint/typecheck/production build, production dependency audit, engine library tests, actual Dart AST/UTF-8/malformed-input recovery tests, and real Chromium acceptance of built React/source/diff/theme rendering under the exact desktop CSP. The self-authored synthetic IPC fixture attempts no patch application or user-file access; it records zero remote requests, CSP violations and page errors. Screenshots and machine-readable evidence are CI artifacts on both Linux and Windows. Browser tool requirements have no known pip-audit vulnerabilities.

Native workspace tests, desktop compilation, Security and Rust 1.90 checks remain required CI gates. This browser fixture does not claim native source analysis or packaged application acceptance. No formal release, tag, signed asset or existing user data is changed. Original requests will be closed only after this integration is merged and default-branch validation passes.
@dependabot @github

dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 3, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-compatible-b935791336 branch November 3, 2026 05:29
@styayur

styayur commented Nov 3, 2026

Copy link
Copy Markdown
Owner

Superseded by the reviewed integration PR #57: #57 . Its merge commit is verified on main, and the unchanged default-branch validation/security workflows pass: https://github.com/styayur/codeforge-engine/actions/runs/41583975557, https://github.com/styayur/codeforge-engine/actions/runs/41583975563. The requested compatible changes are included with their required adaptation and lock-bound dependency records. No safety gate or support-floor test was removed; no release/tag or signed asset was published.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@styayur