[renovate]

This PR contains the following updates:

Package	Type	Update	Change
minisign-verify	dependencies	minor	0.2.5 → 0.3.0
patois	dependencies	minor	0.2.2 → 0.3.0
pulldown-cmark	dependencies	patch	0.13.4 → 0.13.6
ureq	dependencies	minor	3.4.2 → 3.5.1
wxdragon	dependencies	patch	0.9.22 → 0.9.24

---

Release Notes

jedisct1/rust-minisign-verify (minisign-verify)

v0.3.0

Compare Source

raphlinus/pulldown-cmark (pulldown-cmark)

v0.13.6: Fix quadratic parsing of nested image wikilinks

Compare Source

This version backports #​1186 to fix quadratic parsing of nested image wikilinks.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.5...v0.13.6

v0.13.5: 0.13.5

Compare Source

This release fixes some security issues already fixed in main branch. More details in pulldown-cmark#1181.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.4...v0.13.5

algesten/ureq (ureq)

v3.5.1

Compare Source

• Bump ureq-proto to 0.7.1 (fixes to connection reuse and transfer encoding) #​1224
  • Send only cookie names and values in request Cookie headers #​1222
  • Preserve readable responses after macOS rejects timeout changes on closed sockets #​1220

v3.5.0

Compare Source

• Prepare 3.5.0 and fix dependency advisories and warnings - #​1217
  • Add Agent::shutdown() to interrupt requests in flight and close all connections #​1211
  • Preserve validated request header casing with RequestBuilder::header_raw #​1214
  • Decode proxy URL credentials once; literal percent signs must be escaped as %25 #​1215
  • Encode ProxyBuilder credentials and preserve colons in proxy passwords #​1215
  • Apply remaining timeout budgets to SOCKS setup and drop the socks dependency #​1209
  • Check NO_PROXY before resolving a SOCKS proxy, so excluded hosts connect directly #​1209
  • Clarify timeout budgets, phase boundaries, and proxy DNS #​1213
  • Bound TLS handshake I/O by the remaining connect/global timeout #​1208
  • Retry socket reads interrupted by EINTR when timeout (technically breaking) #​1205
  • Fix native-tls-no-default enabling dependencies without enabling the TLS connector
  • Add timeout_per_read and timeout_per_write independently of total phase budgets

v3.4.3

Compare Source

• Update TLS dependencies for security fixes #​1218

AllenDang/wxDragon (wxdragon)

v0.9.24

Compare Source

Breaking Changes

• Accessibility: Fixed accessible states reaching screen readers as other states on Windows. The WXD_ACC_STATE_SYSTEM_* defines carried the STATE_SYSTEM_* values from oleacc.h, but wxAccessible::GetState takes wxWidgets' own wxACC_STATE_SYSTEM_* numbering and converts it, so no state given through AccessibleImpl::get_state or set_accessibility_state arrived as itself: AccState::CHECKED was reported as busy, SELECTABLE as read only, and FOCUSED | SELECTED as two alert levels. The defines now carry wxWidgets' values, and Windows builds check each one against wxWidgets. AccState::SIZEABLE, MOVEABLE, LINKED, TRAVERSED and HASPOPUP and their WXD_ACC_STATE_SYSTEM_* defines are removed: wxWidgets has no such states, so none of them ever reached a screen reader as itself, and code naming them has to drop them (#​250)

New Features

• Window: Added on_mouse_left_double_click, on_mouse_right_double_click and on_mouse_middle_double_click, binding wxEVT_LEFT_DCLICK, wxEVT_RIGHT_DCLICK and wxEVT_MIDDLE_DCLICK. A custom-drawn control had no way to tell a double-click from two clicks, short of timing LeftDown events against the system double-click time and distance itself. The events carry the usual MouseButtonEvent data, and wxd_IsMouseButtonEvent now accepts them
• ScrolledWindow: Added get_view_start, wrapping wxScrolled::GetViewStart. Without it a scrolled window drawn by hand couldn't find out where the user had scrolled to with the scroll bar or the mouse wheel, so it couldn't tell which part of its contents to paint
• Notebook: Added set_page_text and get_page_text, wrapping wxNotebook::SetPageText and GetPageText. Before, the text on a tab could only be set when the page was added, so an app that shows a count or a state in a tab had to remove the page and add it again to change the text. Both return false or None for an index with no page, instead of the wxWidgets assertion
• WebView: Added WebViewEventData::get_url and get_target, wrapping wxWebViewEvent::GetURL and GetTarget. A webview event keeps its URL and target frame in their own fields and not in the command string, which is empty for navigation events, so a handler for on_navigating had no way to tell where the navigation was going. The doc comment on get_string said it returned the URL and now says what it does return, the body of a script message or the title of a title change. wxd_WebViewEvent_GetURL and wxd_WebViewEvent_GetTarget return -1 for an event that isn't a webview event (#​249)

Bug Fixes

• Window: Fixed navigate going the wrong way. The constant extractor hard-coded wxNAVIGATION_NEXT as 0 and wxNAVIGATION_PREVIOUS as 1, but wxWindow::Navigate takes wxNavigationKeyEvent flags, where 0 is IsBackward and 1 is IsForward. So navigate(true) moved focus to the previous control and navigate(false) to the next one. A control that handles Tab itself (with wxWANTS_CHARS) and passes it on with navigate(!shift_down) sent Tab backwards and Shift+Tab forwards. The extractor now takes the values from wxNavigationKeyEvent, and the generated constants are corrected
• Printing: Fixed Printer::print never starting a print job on Windows and macOS. The printout shim overrode OnBeginDocument and OnEndDocument to run the Rust callbacks and never called wxPrintout's own versions, which are the only place StartDoc and EndDoc are called on the printer DC. Every page was drawn on a DC with no document open, so nothing was printed: Microsoft Print to PDF never asked where to save and wrote no file, and print still returned true. The shim now starts the document before on_begin_document runs and ends it after on_end_document. Returning false from on_begin_document now stops printing, which wxWidgets reports as an error ("Could not start printing.") without calling on_end_document; before, the C callback type returned nothing and the answer was dropped. A panic in on_begin_document now stops printing the same way instead of carrying on. Code passing its own begin-document callback to wxd_Printout_CreateWithCallbacks through wxdragon-sys must now return bool (#​246)
• WebView / Events: Fixed veto doing nothing on an event whose class info names a base it does not derive from. wxWebViewEvent derives from wxNotifyEvent but is registered with wxIMPLEMENT_DYNAMIC_CLASS(wxWebViewEvent, wxCommandEvent), and wxd_Event_Veto, wxd_Event_CanVeto, wxd_Event_SetCanVeto and the dispatcher's IsEventVetoed looked for a wxNotifyEvent with wxDynamicCast, which follows that class info and never found one. So a WEBVIEW_NAVIGATING handler could not cancel a navigation and can_veto returned false. They use dynamic_cast now, which follows the real C++ hierarchy, as most other event types in that file already did (#​249)

Build

• Linux / taskbar: Added a default-on appindicator feature. wxWidgets detects Ayatana AppIndicator for wxTaskBarIcon, but the build links the bundled wxWidgets by hand and does not keep the CMake target's transitive dependencies, so a static build that detected AppIndicator failed to link. The build now probes ayatana-appindicator3-0.1 with pkg-config when the feature is on or the cached wxWidgets configuration has wxUSE_APPINDICATOR enabled, and forwards its linker search paths and libraries. When pkg-config does not find it, the build warns instead of failing, so a wxWidgets with AppIndicator support can still be configured on a machine without it

v0.9.23

Compare Source

New Features

• Window: Added on_char_hook, binding wxEVT_CHAR_HOOK. The hook runs on the focused window and every ancestor before the key reaches the control, which is the only way to act on combinations a control consumes itself: a multiline TextCtrl swallows Ctrl+Enter, and a ListBox answers Alt+Enter with a system beep, so neither ever reaches a key_down handler. Skip the event to let it carry on to the control. The C++ side already mapped WXD_EVENT_TYPE_CHAR_HOOK and wxd_IsKeyboardEvent already accepted it; only the Rust binding was missing. See examples/rust/char_hook_demo
• ListBox: Added append_items, insert_items and set_items, wrapping the wxItemContainer overloads that take a wxArrayString, the same trio ComboBox got in 0.9.21. Filling a list one append at a time costs a Rust-to-C++ call, a string conversion and wxWidgets' own per-change bookkeeping for every row, and on MSW the native list box grows its storage a little at a time; the array overloads reserve room for every row up front (LB_INITSTORAGE) and update once. Loading 26,934 rows into a ListBox went from about 2.3 s to 1.3 s on Windows. The builder's with_choices now goes through append_items too
• Dialogs: Added five style flags whose constants wxDragon already extracted on every platform but no style enum exposed, so the only way to use them was from_bits_retain with the raw value. DialogStyle::NoParent (wxDIALOG_NO_PARENT) makes a dialog a top-level window of its own, so one opened from a global hotkey while another application is in front comes forward instead of opening behind it. MessageDialogStyle::NoDefault and CancelDefault (wxNO_DEFAULT, wxCANCEL_DEFAULT) make the safe answer the default button, which matters for a question like "Do you want to exit?" where a stray Return should not be the answer that closes the app. MessageDialogStyle::StayOnTop (wxSTAY_ON_TOP) and TextEntryDialogStyle::MultiLine (wxTE_MULTILINE) complete what wxMessageDialog and wxTextEntryDialog document
• Accessibility: Added enable_focus_from_keyboard and disable_focus_from_keyboard on WxWidget, including opt-in Tab access to single-line read-only text controls on Windows. See examples/rust/accessibility_demo (#​229).
• DataView: Added CustomDataViewTreeModel::set_container_columns, an opt-in for displaying all columns on container rows. This exposes group text to macOS accessibility when the first column is a toggle and the text/expander column is elsewhere. The default remains first-column-only; changing the setting rebuilds associated views and may reset selection/expansion (#​160).
• TextValidator: Added TextValidator and TextValidatorStyle for filtering text input by character class or include/exclude lists. Attach one with WxWidget::set_text_validator and validate a window and its children with WxWidget::validate (#​226).
• TreeCtrl: Added get_custom_data_direct(&TreeItemId) to read item data without converting the item ID through u64, matching set_custom_data_direct (#​241).
• AUI: Added PaneInfo::dock_size for setting dock dimensions.

Bug Fixes

• TaskBarIcon: Fixed tray icon events never firing on Windows and Linux. When the taskbar event types moved from event.cpp into taskbar.cpp, the mapper and its registrar landed inside the existing #ifdef __WXOSX__ block that only guarded wx/osx/private.h, so they were compiled on macOS alone. Everywhere else on_left_up, on_left_down, on_left_double_click and the other taskbar handlers bound to wxEVT_NULL and silently never ran. The guard now covers just the macOS header again
• AuiManager: Fixed every AuiManager leaking its wxAuiManager. AuiManagerBuilder::build allocated the manager and the destroy handler on the managed window only removed its handle from the registry, so nothing ever deleted it. The handler now frees it through wxd_AuiManager_Delete, which defers the delete until the next idle: floating pane frames are children of the managed window, are destroyed after its destroy event, and use the manager from their destructor
• App: Fixed the macOS application handlers leaking their closures. on_open_files, on_open_url, on_new_file, on_reopen_app, on_print_files, on_should_terminate and on_will_terminate boxed the closure and handed it to WxdApp, which kept it in a std::vector that nothing ever freed, so every call leaked one closure. Each registration now carries a drop callback, ~WxdApp() runs it for every stored handler, and a handler that is rejected (null app or callback) is freed right away (#​239)
• Callbacks: Prevented recursive invocation of the same FnMut callback in events, drag-and-drop and IPC. A re-entered callback is skipped with a warning and an appropriate fallback; other handlers and default event processing still run. Active drag-and-drop and IPC calls also retain their callback data until they return (#​238).
• FFI callbacks: Guarded Rust callbacks invoked from C++ against unwinding across the FFI boundary, including app, data view, event, drag-and-drop, IPC, printing, translations, list control and WebView callbacks (#​231).
• Strings / accessibility: Fixed truncation of long file paths, directory-dialog messages, dropped filenames and font face names by allocating FFI buffers to the reported length (#​233). Zero-initialized native accessibility callback buffers so partially filled strings cannot read uninitialized memory (#​232).
• Image lists / fonts / DataView: Fixed image-list ownership leaks in DataViewTreeCtrl, Notebook, TreeCtrl and ListCtrl (#​234); stopped leaking fonts passed to set_font and FontPickerCtrl::set_selected_font (#​235); freed custom data-view renderer callbacks when the renderer is destroyed (#​236).

Refactoring

• wxdragon-sys: Removed 39 C shim functions that nothing called. Nine were declared in a header with no definition, so any use failed to link (the wxd_TreeItemData_* functions, wxd_RichTextCtrl_ShowPosition/ScrollIntoView/IsPositionVisible, wxd_SearchCtrl_GetCancelButton, wxd_DataViewCtrl_CreateTextColumn ). Nine were stubs that did nothing or always returned null, such as wxd_GetCursor, wxd_Cursor_SetHotSpot, wxd_TreeCtrl_EnableItem and the wxd_DataViewCustomRenderer_Release* functions. The rest were superseded: the old drop target set in dnd.cpp (replaced by the *_CreateFull functions), per-type window Destroy functions, the flat-callback wxd_DataViewModel_Create and its model class, and duplicates of functions the Rust side already uses. The safe wxdragon API is unchanged; code calling these symbols through wxdragon-sys directly would need updating
• Accessibility: Routed set_accessibility_label through wxWidgets 3.3.4's SetAccessibleName on Windows and macOS. Removed duplicate name storage and direct Cocoa label handling; retained the other property overrides and the legacy macOS C entry point as a forwarding alias. Empty labels now restore the default accessible name (#​229).
• Events: Moved event-type mapping out of event.cpp into the owning widget and grid implementation files, with a shared event-type registry (#​224).

Build

• wxWidgets: Updated the bundled wxWidgets from 3.3.3 to 3.3.4 and refreshed its SHA256 checksum.
• Build features: Added default-on wx-printing, wx-tiff, wx-jpeg, wx-asserts, wx-tango-icons, wx-extra-image-formats and wx-regex features, which can be disabled to reduce bundled wxWidgets builds. Printing wrappers are omitted when printing is disabled. Added wx-xpm, enabled when STC or extra image formats need XPM (#​225).
• Linux / CI: Linked zlib for static wxWidgets on Linux and installed its development package in CI; corrected Windows drag-result test types and initialized the MSVC environment for native tests. Windows Cargo tests now run in PowerShell.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.