chore: bump the cargo-patch-and-minor group in /src-tauri with 7 updates by dependabot[bot] · Pull Request #1003 · InstaZDLL/WaveFlow

dependabot · 2026-11-02T05:45:09Z

Bumps the cargo-patch-and-minor group in /src-tauri with 7 updates:

Package	From	To
globset	`0.4.20`	`0.4.21`
opusic-sys	`0.7.5`	`0.7.6`
wasmtime	`50.0.0`	`50.0.1`
wasmtime-wasi	`50.0.0`	`50.0.1`
tauri-plugin-dialog	`2.8.3`	`2.8.4`
tauri-plugin-single-instance	`2.5.4`	`2.5.5`
tauri-plugin-notification	`2.7.0`	`2.8.0`

Updates globset from 0.4.20 to 0.4.21

Commits

55f2f69 globset-0.4.21
65e072f ignore: respect linked worktree excludes without requiring Git
d19650f globset: match filename-only regexes against basenames
9d07a92 ignore: reuse incremental matchers for directories without rules
6892bc2 ignore: use byte keys for incremental parent lookups
1752fb7 globset: reject impossible literal lengths before hashing
2d4fa85 ignore: skip empty absolute parent matchers (#3557)
b5611fc ignore: reuse parent repository detection
c5e744c ignore: avoid scratch pools for empty matchers
fada8f9 ignore: benchmark Python workspace discovery and matching (#3554)
Additional commits viewable in compare view

Updates opusic-sys from 0.7.5 to 0.7.6

Commits

See full diff in compare view

Updates wasmtime from 50.0.0 to 50.0.1

Release notes

Sourced from wasmtime's releases.

v50.0.1

50.0.1

Released 2026-10-29.

Fixed

wasi-sockets: UDP connect only required the address to be permitted for sending or receiving, allowing guests to send datagrams to addresses denied for UdpSend. GHSA-hmmr-87qq-258j

Cross-engine type confusion with host-created struct-types-with-supertypes has been fixed. GHSA-qw58-7h65-crq2

Panic with typed functions with i31 or nullref arguments has been fixed. GHSA-3982-jqvv-277m

Unchecked memory usage in transferring borrowed resources between components has been fixed. GHSA-6fr9-xmw9-5352

Fixed a possibility of content-length being invalid or not matching body length in wasi-http p2. GHSA-h4wp-g4x3-7398

Changelog

Sourced from wasmtime's changelog.

50.0.1

Released 2026-10-29.

Fixed

wasi-sockets: UDP connect only required the address to be permitted for sending or receiving, allowing guests to send datagrams to addresses denied for UdpSend. GHSA-hmmr-87qq-258j

Cross-engine type confusion with host-created struct-types-with-supertypes has been fixed. GHSA-qw58-7h65-crq2

Panic with typed functions with i31 or nullref arguments has been fixed. GHSA-3982-jqvv-277m

Unchecked memory usage in transferring borrowed resources between components has been fixed. GHSA-6fr9-xmw9-5352

Fixed a possibility of content-length being invalid or not matching body length in wasi-http p2. GHSA-h4wp-g4x3-7398

Commits

c307ec8 Release Wasmtime 50.0.1 (#15061)
3706f85 [50.0.0] omnibus patch PR for today's security release (#15068)
See full diff in compare view

Updates wasmtime-wasi from 50.0.0 to 50.0.1

Release notes

Sourced from wasmtime-wasi's releases.

v50.0.1

50.0.1

Released 2026-10-29.

Fixed

wasi-sockets: UDP connect only required the address to be permitted for sending or receiving, allowing guests to send datagrams to addresses denied for UdpSend. GHSA-hmmr-87qq-258j

Cross-engine type confusion with host-created struct-types-with-supertypes has been fixed. GHSA-qw58-7h65-crq2

Panic with typed functions with i31 or nullref arguments has been fixed. GHSA-3982-jqvv-277m

Unchecked memory usage in transferring borrowed resources between components has been fixed. GHSA-6fr9-xmw9-5352

Fixed a possibility of content-length being invalid or not matching body length in wasi-http p2. GHSA-h4wp-g4x3-7398

Changelog

Sourced from wasmtime-wasi's changelog.

50.0.1

Released 2026-10-29.

Fixed

wasi-sockets: UDP connect only required the address to be permitted for sending or receiving, allowing guests to send datagrams to addresses denied for UdpSend. GHSA-hmmr-87qq-258j

Cross-engine type confusion with host-created struct-types-with-supertypes has been fixed. GHSA-qw58-7h65-crq2

Panic with typed functions with i31 or nullref arguments has been fixed. GHSA-3982-jqvv-277m

Unchecked memory usage in transferring borrowed resources between components has been fixed. GHSA-6fr9-xmw9-5352

Fixed a possibility of content-length being invalid or not matching body length in wasi-http p2. GHSA-h4wp-g4x3-7398

Commits

c307ec8 Release Wasmtime 50.0.1 (#15061)
3706f85 [50.0.0] omnibus patch PR for today's security release (#15068)
See full diff in compare view

Updates tauri-plugin-dialog from 2.8.3 to 2.8.4

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.4

[2.8.4]

1331ca41 (#3737 by @renovate) Updated dependency rfd to 0.17

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.4
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.4
npm notice filename: tauri-apps-plugin-dialog-2.8.4.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 994ee0f6a1a440a1b9f47bd7b03886d082b76c41
npm notice integrity: sha512-+6ZOiXenOaxXw[...]kWGej4a7dC4lw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3529333044
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.4

dialog v2.8.4

[2.8.4]

1331ca41 (#3737 by @renovate) Updated dependency rfd to 0.17

... (truncated)

Commits

1281906 publish new versions (#3712)
52fa775 chore(deps): update rust crate rand to 0.10 (#3738)
1331ca4 chore(deps): update rust crate rfd to 0.17 (#3737)
385f60c chore(deps): update rust crate base64 to 0.23 (#3515)
8e04d30 chore(deps): update dependency @tauri-apps/cli to v2.12.4 (#3717)
34ed7d3 chore(deps): update dependency @rollup/plugin-terser to v1.0.2 (#3733)
c75459d chore(deps): update dependency rollup to v4.64.12 (#3715)
df59420 chore(deps): update webpki-roots crates (lockfile-only) (#3723)
11211c3 fix(window-state): stop macOS overlay windows changing size on every restore ...
f36ba7b feat(notification): add Android chronometer support (#3282)
Additional commits viewable in compare view

Updates tauri-plugin-single-instance from 2.5.4 to 2.5.5

Release notes

Sourced from tauri-plugin-single-instance's releases.

single-instance v2.5.5

[2.5.5]

aedd883c (#3482 by @JGuest121) Release the single instance lock in AppHandle::cleanup_before_exit, right before the process exits or restarts, instead of on RunEvent::Exit. The app now remains the single instance while your own RunEvent::Exit handler runs. destroy can still release the lock earlier.

6c9746e5 (#3704 by @karan5028ji) Fix race condition on Windows where a secondary instance fails to exit if FindWindowW misses the target event window during startup.

Dependencies

Upgraded to deep-link@2.6.3
Updating crates.io index
   Packaging tauri-plugin-single-instance v2.5.5 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Updating crates.io index
warning: package `yoke-derive v0.8.3` in Cargo.lock is yanked in registry `crates-io`
  |
  = help: consider updating to a version that is not yanked
    Packaged 17 files, 192.3KiB (52.3KiB compressed)
   Uploading tauri-plugin-single-instance v2.5.5 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Uploaded tauri-plugin-single-instance v2.5.5 to registry `crates-io`
note: waiting for tauri-plugin-single-instance v2.5.5 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-single-instance v2.5.5 at registry `crates-io`

Commits

6e2e7e4 publish new versions (#3070)
9a2c98f temp: remove updater changefiles
4a2ecb6 chore(deps): update rkyv, closes #3196
31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
Additional commits viewable in compare view

Updates tauri-plugin-notification from 2.7.0 to 2.8.0

Release notes

Sourced from tauri-plugin-notification's releases.

notification-js v2.8.0

[2.8.0]

52fa7754 (#3738 by @renovate) Updated dependency rand to 0.10

feat

f36ba7ba (#3282 by @Et3rnel) Added chronometer support for Android notifications with when, usesChronometer, and chronometerCountDown options. This allows displaying an automatically updating elapsed time counter directly in the notification, useful for time-tracking apps, ongoing calls, or timers.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-notification@2.8.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 16.6kB dist-js/index.cjs
npm notice 27.0kB dist-js/index.d.ts
npm notice 16.2kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 663B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-notification
npm notice version: 2.8.0
npm notice filename: tauri-apps-plugin-notification-2.8.0.tgz
npm notice package size: 11.4 kB
npm notice unpacked size: 65.7 kB
npm notice shasum: b37835641011d62d25bd923310d9e6217a1e5685
npm notice integrity: sha512-BB9Kk2emiNHyM[...]f0O8rtdW2F2dw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3529333733
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-notification@2.8.0

notification v2.8.0

[2.8.0]

... (truncated)

Commits

6e2e7e4 publish new versions (#3070)
9a2c98f temp: remove updater changefiles
4a2ecb6 chore(deps): update rkyv, closes #3196
31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-patch-and-minor group in /src-tauri with 7 updates: | Package | From | To | | --- | --- | --- | | [globset](https://github.com/BurntSushi/ripgrep) | `0.4.20` | `0.4.21` | | [opusic-sys](https://github.com/DoumanAsh/opusic-sys) | `0.7.5` | `0.7.6` | | [wasmtime](https://github.com/bytecodealliance/wasmtime) | `50.0.0` | `50.0.1` | | [wasmtime-wasi](https://github.com/bytecodealliance/wasmtime) | `50.0.0` | `50.0.1` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.8.3` | `2.8.4` | | [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.5.4` | `2.5.5` | | [tauri-plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.7.0` | `2.8.0` | Updates `globset` from 0.4.20 to 0.4.21 - [Release notes](https://github.com/BurntSushi/ripgrep/releases) - [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md) - [Commits](BurntSushi/ripgrep@globset-0.4.20...globset-0.4.21) Updates `opusic-sys` from 0.7.5 to 0.7.6 - [Commits](https://github.com/DoumanAsh/opusic-sys/commits) Updates `wasmtime` from 50.0.0 to 50.0.1 - [Release notes](https://github.com/bytecodealliance/wasmtime/releases) - [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v50.0.1/RELEASES.md) - [Commits](bytecodealliance/wasmtime@v50.0.0...v50.0.1) Updates `wasmtime-wasi` from 50.0.0 to 50.0.1 - [Release notes](https://github.com/bytecodealliance/wasmtime/releases) - [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v50.0.1/RELEASES.md) - [Commits](bytecodealliance/wasmtime@v50.0.0...v50.0.1) Updates `tauri-plugin-dialog` from 2.8.3 to 2.8.4 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.8.3...dialog-v2.8.4) Updates `tauri-plugin-single-instance` from 2.5.4 to 2.5.5 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.4...http-v2.5.5) Updates `tauri-plugin-notification` from 2.7.0 to 2.8.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.7.0...log-v2.8.0) --- updated-dependencies: - dependency-name: globset dependency-version: 0.4.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch-and-minor - dependency-name: opusic-sys dependency-version: 0.7.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch-and-minor - dependency-name: wasmtime dependency-version: 50.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch-and-minor - dependency-name: wasmtime-wasi dependency-version: 50.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch-and-minor - dependency-name: tauri-plugin-dialog dependency-version: 2.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch-and-minor - dependency-name: tauri-plugin-single-instance dependency-version: 2.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-patch-and-minor - dependency-name: tauri-plugin-notification dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-patch-and-minor ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-11-02T05:45:17Z

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords: 5

chore: bump
chore(main): release
release-please
dependabot
[bot]

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: InstaZDLL/WaveFlow
Branch: main
File: .coderabbit.yaml
Commit: d7e4dbf
Layers: Repository YAML
Review profile: ASSERTIVE
Plan: Advanced
Run ID: fa4d1a74-8de6-4f6b-aba3-a2a6b9442a87

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

dependabot Bot added cargo Rust/Cargo ecosystem updates dependencies Pull requests that update a dependency file labels Nov 2, 2026

InstaZDLL added scope: backend Rust/Tauri backend (src-tauri/) scope: deps Dependencies type: chore Maintenance / tooling size: l 200-500 lines labels Nov 2, 2026

InstaZDLL merged commit 2482b87 into main Nov 2, 2026
16 of 17 checks passed

InstaZDLL deleted the dependabot/cargo/src-tauri/cargo-patch-and-minor-34a8d89802 branch November 2, 2026 05:59

Navigation Menu

Repository navigation

chore: bump the cargo-patch-and-minor group in /src-tauri with 7 updates - #1003

chore: bump the cargo-patch-and-minor group in /src-tauri with 7 updates#1003
InstaZDLL merged 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-patch-and-minor-34a8d89802

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

coderabbitai Bot commented Nov 2, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026

v50.0.1

50.0.1

Fixed

50.0.1

Fixed

v50.0.1

50.0.1

Fixed

50.0.1

Fixed

dialog-js v2.8.4

[2.8.4]

dialog v2.8.4

[2.8.4]

single-instance v2.5.5

[2.5.5]

Dependencies

notification-js v2.8.0

[2.8.0]

feat

notification v2.8.0

[2.8.0]

Uh oh!

coderabbitai Bot commented Nov 2, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant