Skip to content

Bump the rust-dependencies group across 1 directory with 8 updates - #116

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/src-tauri/rust-dependencies-bae7501b47
Open

Bump the rust-dependencies group across 1 directory with 8 updates#116
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/src-tauri/rust-dependencies-bae7501b47

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 8 updates in the /src-tauri directory:

Package From To
rfd 0.15.4 0.17.2
rust_xlsxwriter 0.96.0 0.99.0
encoding_rs 0.8.35 0.8.41
flate2 1.1.9 1.1.10
zip 2.4.2 8.6.0
suppaftp 6.3.0 12.0.0
ureq 2.12.1 3.4.1
calamine 0.36.0 0.36.1

Updates rfd from 0.15.4 to 0.17.2

Release notes

Sourced from rfd's releases.

0.17.2

What's Changed

Full Changelog: PolyMeilex/rfd@0.17.1...0.17.2

0.17.1

What's Changed

[!WARNING] Warning from the 0.17.0 releasse still stands please pay extra attention and testing to the xdg_portal backend, as it was fully rewritten.

New Contributors

Full Changelog: PolyMeilex/rfd@0.17.0...0.17.1

0.17.0

What's Changed

[!WARNING] Please pay extra attention to this, I want as much user testing for those changes as possible, as it is essentially a full rewrite.

  • xdg_portal: Drop the ridiculous dependency tree of the async ecosystem in favor of libdbus by @​PolyMeilex in PolyMeilex/rfd#286
  • tokio and async-std features removed

New Contributors

Full Changelog: PolyMeilex/rfd@0.16.0...0.17.0

0.16.0

What's Changed

... (truncated)

Changelog

Sourced from rfd's changelog.

0.17.2

0.17.1

0.17.0

  • tokio and async-std features removed

0.16.0

  • Fix regressions on Wayland due to ashpd upgrade (#255).
  • The pick_file() method of file dialog targeted WASM now can return None correctly when cancelled (#258)
  • Update windows-sys to 0.60.
  • Make ashpd Wayland APIs optional. These are now gated behind the wayland feature, which is enabled by default.

Changed items in the public API

-pub fn AsyncFileDialog::set_parent<W: HasWindowHandle + HasDisplayHandle>(self, parent: &W) -> Self
+pub fn AsyncFileDialog::set_parent<W: HasWindowHandle + HasDisplayHandle + ?Sized>(self, parent: &W) -> Self
-pub fn AsyncMessageDialog::set_parent<W: HasWindowHandle + HasDisplayHandle>(self, parent: &W) -> Self
+pub fn MessageDialog::set_parent<W: HasWindowHandle + HasDisplayHandle + ?Sized>(self, parent: &W) -> Self
-pub fn FileDialog::set_parent<W: HasWindowHandle + HasDisplayHandle>(self, parent: &W) -> Self
+pub fn rfd::FileDialog::set_parent<W: HasWindowHandle + HasDisplayHandle + ?Sized>(self, parent: &W) -> Self
-pub fn MessageDialog::set_parent<W: HasWindowHandle + HasDisplayHandle>(self, parent: &W) -> Self
+pub fn MessageDialog::set_parent<W: HasWindowHandle + HasDisplayHandle + ?Sized>(self, parent: &W) -> Self

0.15.3

  • Update objc2 to v0.6.
  • Update ashpd to 0.11.

0.15.1

  • Update ashpd to 0.10.
  • Fix issue where with no filter added no files are selectable on Windows (#211).

0.15.0

  • Move from objc crates to objc2 crates.
  • Fix AsyncFileDialog blocking the executor on Windows (#191)
  • Add TDF_SIZE_TO_CONTENT to TaskDialogIndirect config so that it can display longer text without truncating/wrapping (80 characters instead of 55) (#202)
  • Fix xdg-portal backend not accepting special characters in message dialogs
  • Make set_parent require HasWindowHandle + HasDisplayHandle

... (truncated)

Commits
  • cca0cfa chore: Version bump 0.17.2
  • 7bd7cba chore: Lower MSRV
  • 8ac3917 ci: Don't run cargo-deny twice on my PRs
  • c6c74a1 chore: Version bump 0.17.1
  • 7fb5900 xdg_porta: Url decode the path
  • fdc5cf3 docs: Fixup docs post libdbus port
  • 57f503e Fix aarch64 compile error and add CI
  • cd188ef chore: Version bump 0.17 (#292)
  • f3258c5 xdg_portal: Drop the ridiculous dependency tree (#286)
  • f016476 file or folder picker implementation for macos (#290)
  • Additional commits viewable in compare view

Updates rust_xlsxwriter from 0.96.0 to 0.99.0

Changelog

Sourced from rust_xlsxwriter's changelog.

[0.99.0] - 2026-08-23

Changed

  • Breaking change: Renamed error XlsxError::TableNameReused to XlsxError::NameReused to clarify that Table names and Defined names must be unique to each other as well as within their own namespaces. Also added checks to ensure this. See [Issue #189].

Fixed

  • Fixed issue in utility::quote_sheet_name() to avoid incorrectly matching names like Q.1 as cell references. See [Issue #189].

  • Fixed issue where where worksheet level defined names with quotes like

  • 'Sheet 1'!Name were not split correctly. See [Issue #189].

Added

[0.98.2] - 2026-08-17

Fixed

[0.98.1] - 2026-08-15

Fixed

  • Fixed an issue where sparklines and conditional formatting data bars on the

... (truncated)

Commits
  • 9e84ea3 release: 0.99.0
  • c50e48f utilty: avoid false positive in quote_sheet_name()
  • c6f6f3a workbook: fix issue with defined name and quoted worksheet names.
  • 28e4150 workbook: add checks for duplicate table names and defined names.
  • 07219ee workbook: add checks for valid table names and defined names.
  • b8782bd docs: minor additions
  • 9e050e1 release: 0.98.2
  • 07a28ab image: fix overflow issue with i32::MIN as height in BMP
  • c1b531a image: add checks for truncated png/jpeg files
  • c01989b docs: fix minor typo
  • Additional commits viewable in compare view

Updates encoding_rs from 0.8.35 to 0.8.41

Commits
  • 0860491 Increment version number to 0.8.41
  • 2e9ea61 Document multiversion 0.9.0 and syn version
  • 6667988 build(deps): accept multiversion 0.9.0
  • 662cb42 Allow split_u16_stride_mut as dead code
  • 55f2530 Increment version number to 0.8.40
  • 71ae1c0 Mention defense in depth when writing to &mut str
  • 12790ab Remove remarks about a standard library bug that has been worked around
  • d477c2a Inline asm not stable on powerpc/powerpc64 at MSRV
  • 6c2fb49 Work around slow _mm_packus_epi16 in Rust 1.96 through 1.98, inclusive
  • 9451175 Zero the output slice upon panic in functions that write to &mut str
  • Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Updates zip from 2.4.2 to 8.6.0

Release notes

Sourced from zip's releases.

v8.6.0

🚀 Features

  • add compression not supported as enum error (#774)

🐛 Bug Fixes

  • allow for [u8] as filename (#775)

🚜 Refactor

  • mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#777)
  • use and simplify is_dir (#776)

v8.5.1

🚜 Refactor

  • change magic finder to stack buffer (#763)
  • simplify extra field parsing (#764)

v8.5.0

🐛 Bug Fixes

  • remove zip64 comment and add zip64 extensible data sector (#747)

🚜 Refactor

  • remove useless magic in struct (#730)
  • change extra_field from Arc<Vec> to Arc<[u8]> (#741)

⚙️ Miscellaneous Tasks

  • cleanup README (#758)

v8.4.0

🚀 Features

  • add a check for building benches (#748)

🚜 Refactor

  • split part of read.rs for code readability (#744)
  • remove unused allow (#745)

⚡ Performance

  • skip BufReader for Stored files in make_reader (#739)

⚙️ Miscellaneous Tasks

... (truncated)

Changelog

Sourced from zip's changelog.

8.6.0 - 2026-04-25

🚀 Features

  • add compression not supported as enum error (#774)

🐛 Bug Fixes

  • allow for [u8] as filename (#775)

🚜 Refactor

  • mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#777)
  • use and simplify is_dir (#776)

8.5.1 - 2026-04-06

🚜 Refactor

  • change magic finder to stack buffer (#763)
  • simplify extra field parsing (#764)

8.5.0 - 2026-04-01

🐛 Bug Fixes

  • remove zip64 comment and add zip64 extensible data sector (#747)

🚜 Refactor

  • remove useless magic in struct (#730)
  • change extra_field from Arc<Vec> to Arc<[u8]> (#741)

⚙️ Miscellaneous Tasks

  • cleanup README (#758)

8.4.0 - 2026-03-23

🚀 Features

  • add a check for building benches (#748)

🚜 Refactor

  • split part of read.rs for code readability (#744)
  • remove unused allow (#745)

⚡ Performance

... (truncated)

Commits
  • 771dfc5 chore: release v8.6.0 (#781)
  • 8e480cc chore(deps): update sha1 requirement from 0.10 to 0.11 (#767)
  • 2513bbe chore(deps): update aes requirement from 0.8 to 0.9 (#787)
  • 957e240 ci(deps): bump actions/cache from 5.0.4 to 5.0.5 (#786)
  • 0329d9d fix: allow for [u8] as filename (#775)
  • ddcf854 ci(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#788)
  • 42323a8 ci(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#785)
  • 901014a ci(deps): bump crate-ci/typos from 1.45.0 to 1.45.1 (#784)
  • 07702d4 feat: add compression not supported as enum error (#774)
  • 2d0c46b ci(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#783)
  • Additional commits viewable in compare view

Updates suppaftp from 6.3.0 to 12.0.0

Release notes

Sourced from suppaftp's releases.

v12.0.0

12.0.0

Released on 2026-09-08

Breaking changes

  • make data streams finalize themselves (#175)

finalize_put_stream, finalize_retr_stream and close_data_connection are removed; put_with_stream, append_with_stream, retr_as_stream and custom_data_command return TransferStream, whose finish() replaces them; abort takes a TransferStream; the async retr callbacks receive and return a TransferStream; get_ref returns a locked ControlSocket (async: through an async fn); get_lines_from_stream is generic over BufRead readers.

  • fix: preserve transfer cleanup across cancellation and locking

Retain pending replies and partial response buffers when async finalization is cancelled. Record dropped transfers without locking the control channel and reject TLS mode changes before sending commands while a transfer is alive.

Add regression coverage for cancellation, control socket contention, and TLS transitions. Document the breaking stream API migration and cleanup limitations, and resolve test helper lint warnings.

  • docs: move stream migration notes into commit description

Migrating to self-finalizing streams (unreleased)

The next major release changes the streaming API from version 11. The changes below apply to this development branch and are not available in the published version 11.

  • put_with_stream, append_with_stream, retr_as_stream, and custom_data_command return a TransferStream that owns transfer cleanup.
  • Replace ftp.finalize_put_stream(stream) and ftp.finalize_retr_stream(stream) with stream.finish(). For Tokio and smol, use stream.finish().await. close_data_connection is removed; finish or abort the transfer instead.
  • abort takes the TransferStream returned by that client.
  • Async retr callbacks receive a TransferStream and return it with the callback result as (value, stream). A callback that returns an error drops its stream, leaving cleanup to the next command.
  • ftp.get_ref() returns a ControlSocket guard that dereferences to the TCP socket. Async clients require ftp.get_ref().await. Keep the guard short-lived; release it before calling another client method or finishing a transfer. In the sync client, release it before dropping a transfer too, to avoid a deadlock.
  • To access the data connection, use transfer.get_ref() or transfer.get_mut(). If you wrap a transfer in a buffered reader or writer, flush any buffered writes and recover the transfer with into_inner() before calling finish().
use std::io::Write;
use suppaftp::FtpStream;
</tr></table>

... (truncated)

Changelog

Sourced from suppaftp's changelog.

12.0.0

Released on 2026-09-08

Breaking changes

  • make data streams finalize themselves

finalize_put_stream, finalize_retr_stream and close_data_connection are removed; put_with_stream, append_with_stream, retr_as_stream and custom_data_command return TransferStream, whose finish() replaces them; abort takes a TransferStream; the async retr callbacks receive and return a TransferStream; get_ref returns a locked ControlSocket (async: through an async fn); get_lines_from_stream is generic over BufRead readers.

Added

  • Breaking: make data streams finalize themselves

Move the control connection (reply reader and data-connection flag) of every client behind an Arc<Mutex<..>> shared with a new TransferStream returned by put_with_stream, append_with_stream, retr_as_stream and custom_data_command. The stream closes its data socket and reads the 226/250 reply itself through finish(); a dropped stream does the same (sync) or defers the reply to the next command (tokio, smol), so the control connection can no longer desynchronize because a caller forgot to finalize.

Fixed

  • preserve transfer cleanup across cancellation and locking

Retain pending replies and partial response buffers when async finalization is cancelled. Record dropped transfers without locking the control channel and reject TLS mode changes before sending commands while a transfer is alive.

Add regression coverage for cancellation, control socket contention, and TLS transitions. Document the breaking stream API migration and cleanup limitations, and resolve test helper lint warnings.

11.0.0

Released on 2026-08-31

Breaking changes

  • tokio: send close_notify on finalize_retr_stream

tokio finalize_retr_stream now requires streams to implement AsyncWrite and Unpin.

  • smol: close retrieval streams gracefully

smol finalize_retr_stream now requires streams to implement AsyncWrite and Unpin.

... (truncated)

Commits
  • 38f17ee feat!: make data streams finalize themselves (#175)
  • f3b22c1 chore: release 11.0.0
  • 95fb2a4 fix(smol)!: close retrieval streams gracefully
  • 65e7939 fix(tokio)!: send close_notify on finalize_retr_stream
  • fade6f5 chore(changelog): remove codeberg entry
  • 194bdd1 fix: reject FTP commands carrying CR or LF to prevent command injection (#172)
  • 6cb1d13 ci: remove codeberg mirror workflow. I do not support Codeberg anymore.
  • b3f990f chore: bump 10.0.1 (#170)
  • ddaf108 fix(parser): accept mismatched terminal codes (#169)
  • 4569e4a chore: release 10.0.0 (#167)
  • Additional commits viewable in compare view

Updates ureq from 2.12.1 to 3.4.1

Changelog

Sourced from ureq's changelog.

3.4.1

  • Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199
  • Do not pool connections with unconsumed buffered input #1198
  • Fix timeout budgets restarting and applying to later phases #1194
  • Complete TLS handshake during connect so timeout_connect covers it #1193
  • Speed up read_json for responses with a known, small body size #1191

3.4.0

  • Seal RequestExt (technically breaking) #1189
  • Send canonical Basic authentication scheme to CONNECT proxies #1185
  • Establish target TLS through HTTPS CONNECT proxies #1183
  • Update rustls-platform-verifier to 0.7.0 #1174
  • Fix pooled connections never aging out according to max_idle_age #1172
  • Strip brackets from IPv6-literal hosts before TLS SNI/ServerName #1171
  • RequestExt::middleware_config for conf inside middleware #1169

3.3.0

  • Bump MSRV 1.71 -> 1.85, edition 2024 #1167

3.2.1

  • Switch archived utf-8 crate for utf8-zero #1163

3.2.0

  • Strip Content-Encoding/Content-Length headers after decompression #1156
  • Timeout per resolved ip for try_connect #1152
  • Fix body header bug on redirect #1140
  • ureq-proto 0.5.3 to fix unsolicited 100-continue #1139
  • Make socks5:// locally resolve before calling proxy #1138
  • Add socks5h:// which DOESN'T locally resolve before calling proxy #1138

3.1.4

  • Set content-type with new Multipart form #1133

3.1.3

  • Fix short read with multi-byte charset #1131
  • Replace rustls-pemfile usage with rustls-pki-types #1122
  • Support for env NO_PROXY and proxy config #1118
  • Experimental multi-part form support #1102

3.1.2

  • Fix bug when query is after host "example.com?query" #1115

... (truncated)

Commits

Updates calamine from 0.36.0 to 0.36.1

Release notes

Sourced from calamine's releases.

v0.36.1 - 2026-07-27

Fixed

  • Fixed a regression in 0.36.0 that broke Strict OOXML (ISO/IEC 29500) _rels/.rels links.

    [PR #681]: tafia/calamine#681

  • Fixed XLS string handling to preserve empty strings instead of discarding them. [PR #679].

    [PR #679]: tafia/calamine#679

  • Fixed XLSB workbook parsing to consume the body of unhandled workbook-global records. A leftover body was misread as the next record id, which either silently dropped the worksheet or panicked from an empty buffer. [PR #675].

    [PR #675]: tafia/calamine#675

What's Changed

New Contributors

Full Changelog: tafia/calamine@v0.36.0...v0.36.1

Changelog

Sourced from calamine's changelog.

[0.36.1] - 2026-07-27

Fixed

  • Fixed a regression in 0.36.0 that broke Strict OOXML (ISO/IEC 29500) _rels/.rels links.

    [PR #681]: tafia/calamine#681

  • Fixed XLS string handling to preserve empty strings instead of discarding them. [PR #679].

    [PR #679]: tafia/calamine#679

  • Fixed XLSB workbook parsing to consume the body of unhandled workbook-global records. A leftover body was misread as the next record id, which either silently dropped the worksheet or panicked from an empty buffer. [PR #675].

    [PR #675]: tafia/calamine#675

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 8 updates in the /src-tauri directory:

| Package | From | To |
| --- | --- | --- |
| [rfd](https://github.com/PolyMeilex/rfd) | `0.15.4` | `0.17.2` |
| [rust_xlsxwriter](https://github.com/jmcnamara/rust_xlsxwriter) | `0.96.0` | `0.99.0` |
| [encoding_rs](https://github.com/hsivonen/encoding_rs) | `0.8.35` | `0.8.41` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` |
| [zip](https://github.com/zip-rs/zip2) | `2.4.2` | `8.6.0` |
| [suppaftp](https://github.com/veeso/suppaftp) | `6.3.0` | `12.0.0` |
| [ureq](https://github.com/algesten/ureq) | `2.12.1` | `3.4.1` |
| [calamine](https://github.com/tafia/calamine) | `0.36.0` | `0.36.1` |



Updates `rfd` from 0.15.4 to 0.17.2
- [Release notes](https://github.com/PolyMeilex/rfd/releases)
- [Changelog](https://github.com/PolyMeilex/rfd/blob/master/CHANGELOG.md)
- [Commits](PolyMeilex/rfd@0.15.4...0.17.2)

Updates `rust_xlsxwriter` from 0.96.0 to 0.99.0
- [Changelog](https://github.com/jmcnamara/rust_xlsxwriter/blob/main/CHANGELOG.md)
- [Commits](jmcnamara/rust_xlsxwriter@v0.96.0...v0.99.0)

Updates `encoding_rs` from 0.8.35 to 0.8.41
- [Commits](hsivonen/encoding_rs@v0.8.35...v0.8.41)

Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

Updates `zip` from 2.4.2 to 8.6.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v2.4.2...v8.6.0)

Updates `suppaftp` from 6.3.0 to 12.0.0
- [Release notes](https://github.com/veeso/suppaftp/releases)
- [Changelog](https://github.com/veeso/suppaftp/blob/main/CHANGELOG.md)
- [Commits](veeso/suppaftp@v6.3.0...v12.0.0)

Updates `ureq` from 2.12.1 to 3.4.1
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@2.12.1...3.4.1)

Updates `calamine` from 0.36.0 to 0.36.1
- [Release notes](https://github.com/tafia/calamine/releases)
- [Changelog](https://github.com/tafia/calamine/blob/master/Changelog.md)
- [Commits](tafia/calamine@v0.36.0...v0.36.1)

---
updated-dependencies:
- dependency-name: rfd
  dependency-version: 0.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: rust_xlsxwriter
  dependency-version: 0.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: encoding_rs
  dependency-version: 0.8.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: zip
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: suppaftp
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: ureq
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: calamine
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants