Skip to content

build(deps): bump the rust group across 1 directory with 16 updates - #499

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-8dcd0be6c3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-8dcd0be6c3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the rust group with 16 updates in the / directory:

Package From To
jsonschema 0.58.6 0.60.2
uuid 1.28.0 1.29.0
arc-swap 1.9.2 1.9.3
notify 8.2.0 8.2.1
sysinfo 0.39.6 0.40.1
realfft 3.5.0 3.5.1
mdns-sd 0.21.5 0.21.6
nusb 0.2.8 0.2.9
libc 0.2.190 0.2.191
rmcp 3.5.1 3.8.0
unicode-width 0.2.2 0.2.3
open 5.4.4 5.4.5
tauri-plugin-single-instance 2.5.4 2.5.5
log 0.4.34 0.4.35
rustix 1.1.5 1.1.6
tao 0.37.1 0.37.2

Updates jsonschema from 0.58.6 to 0.60.2

Release notes

Sourced from jsonschema's releases.

[Rust] Release 0.60.2

Fixed

  • Stack overflow when building validators for unevaluated* schemas with $ref cycles across $id resources.

[Ruby] Release 0.60.2

Fixed

  • Stack overflow when building validators for unevaluated* schemas with $ref cycles across $id resources.

[Python] Release 0.60.1

Fixed

  • Wrong results in type: integer, const, enum, uniqueItems, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum for numbers with exponents past one million, such as 1e-2000000.

Performance

  • Validation of numbers with many digits or large exponents in const, enum, uniqueItems, type: integer, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum taking time growing faster than the square of the digit count, instead of at most the square.
  • Validation of numbers with more than ten thousand digits, written or implied by their exponent, taking time linear in their written length instead of quadratic in their digit count.

[Rust] Release 0.60.1

  • Panic on numbers past f64 in const, enum, minimum, maximum, exclusiveMinimum, exclusiveMaximum and type: integer when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. #1790
  • #[jsonschema::validator] panicking during expansion, or generating code that panics, on schema numbers past f64 when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. Such numbers are compile errors, as without that serde_json feature. #1790
  • const, enum and uniqueItems treating objects with the same members in a different key order as unequal when another crate in the build enables serde_json/preserve_order. #1791
  • Wrong results in type: integer, const, enum, uniqueItems, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum for numbers with exponents past one million, such as 1e-2000000, with the arbitrary-precision feature.
  • #[jsonschema::validator] rejecting multipleOf with a positive divisor below the smallest f64, such as 1e-400, with the arbitrary-precision feature.

Performance

  • Validation of numbers with many digits or large exponents in const, enum, uniqueItems, type: integer, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum with the arbitrary-precision feature taking time growing faster than the square of the digit count, instead of at most the square.
  • Validation of numbers with more than ten thousand digits, written or implied by their exponent, with the arbitrary-precision feature taking time linear in their written length instead of quadratic in their digit count.

[Ruby] Release 0.60.1

Fixed

  • Wrong results in type: integer, const, enum, uniqueItems, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum for numbers with exponents past one million, such as 1e-2000000.

Performance

  • Validation of numbers with many digits or large exponents in const, enum, uniqueItems, type: integer, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum taking time growing faster than the square of the digit count, instead of at most the square.
  • Validation of numbers with more than ten thousand digits, written or implied by their exponent, taking time linear in their written length instead of quadratic in their digit count.

[Python] Release 0.60.0

Added

  • Support for Python 3.15.

Changed

  • Update pyo3 to 0.30.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.60.2] - 2026-10-26

Fixed

  • Stack overflow when building validators for unevaluated* schemas with $ref cycles across $id resources.

[0.60.1] - 2026-10-23

Fixed

  • Panic on numbers past f64 in const, enum, minimum, maximum, exclusiveMinimum, exclusiveMaximum and type: integer when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. #1790
  • #[jsonschema::validator] panicking during expansion, or generating code that panics, on schema numbers past f64 when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. Such numbers are compile errors, as without that serde_json feature. #1790
  • const, enum and uniqueItems treating objects with the same members in a different key order as unequal when another crate in the build enables serde_json/preserve_order. #1791
  • Wrong results in type: integer, const, enum, uniqueItems, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum for numbers with exponents past one million, such as 1e-2000000, with the arbitrary-precision feature.
  • #[jsonschema::validator] rejecting multipleOf with a positive divisor below the smallest f64, such as 1e-400, with the arbitrary-precision feature.

Performance

  • Validation of numbers with many digits or large exponents in const, enum, uniqueItems, type: integer, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum with the arbitrary-precision feature taking time growing faster than the square of the digit count, instead of at most the square.
  • Validation of numbers with more than ten thousand digits, written or implied by their exponent, with the arbitrary-precision feature taking time linear in their written length instead of quadratic in their digit count.

[0.60.0] - 2026-10-22

Changed

  • ValidationErrorKind::Enum and ValidationErrorKind::Constant holding their values as Arc<Value> shared with the validator, instead of a copy per error. #1777

Performance

  • Validation with unfinished regex matches running each such match once instead of once per run, and comparing errors across runs in linear time instead of quadratic. #1784
  • items and additionalProperties looking up a single-keyword subschema once per array or object instead of once per value.
  • is_valid and validate reading fewer cache lines per subschema, by keeping error locations apart from validators.
  • is_valid on recursive schemas caching only $ref results that took many steps to compute, instead of every one.
  • Error evaluation paths taking memory linear in the $ref nesting depth, not quadratic. #1778

[0.59.0] - 2026-10-16

Added

  • CLI: - as a path reads the schema or an instance from stdin.
  • CLI: -V as the version flag; -v stays as an alias.

Changed

  • CLI: Exit status 3 for errors that prevent a verdict and 2 for usage errors, so 1 always means an invalid instance or schema.
  • CLI: Errors print to stderr instead of stdout.
  • CLI: --version prints jsonschema-cli <VERSION> instead of Version: <VERSION>.

Fixed

... (truncated)

Commits
  • 1efccf5 chore(ruby): Release 0.60.2
  • 0b657fa chore(rust): Release 0.60.2
  • 7eb6128 fix: Stack overflow on unevaluated* with $ref cycles across $id resources
  • 26aedd9 build(deps): bump CodSpeedHQ/action from 5.5.0 to 5.6.0
  • e9af61d chore(ruby): Release 0.60.1
  • 8aa123d chore(python): Release 0.60.1
  • 4eb7a64 chore(rust): Release 0.60.1
  • 4e90b95 perf: Single scan for the exponent in the digit budget check
  • f990b96 fix: Wrong results for numbers past the exponent cap with arbitrary-precision
  • c221db8 perf: Super-quadratic conversion of large numbers to fractions with arbitrary...
  • Additional commits viewable in compare view

Updates uuid from 1.28.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits
  • 4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
  • a3631fd prepare for 1.29.0 release
  • 304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
  • d49f963 Reuse existing version tests for NonNilUuid constructors
  • 2f02404 Add versioned constructors to NonNilUuid
  • See full diff in compare view

Updates arc-swap from 1.9.2 to 1.9.3

Changelog

Sourced from arc-swap's changelog.

1.9.3

  • rwlock-strategy feature: RwLock<()> as an explicit, opt-in strategy (ArcSwapAny<Arc<T>, RwLock<()>>). DefaultStrategy is unchanged (#210, #211).
Commits

Updates notify from 8.2.0 to 8.2.1

Release notes

Sourced from notify's releases.

notify v8.2.1

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Changelog

Sourced from notify's changelog.

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Commits

Updates sysinfo from 0.39.6 to 0.40.1

Changelog

Sourced from sysinfo's changelog.

0.40.1

  • Add back From<X> for Vec<Y> trait implementations for Disks, Gpus, Groups and Users.
  • Windows: System::load_average now returns Err(Error::Unsupported).

0.40.0

  • Add new gpu feature.
  • Add new Process::gpu_usage and Process::gpu_memory API.
  • Add new GPUs API.
  • Add new NetworkData::transmit_link_speed and NetworkData::receive_link_speed API.
  • Add new Disk::id API.
  • Remove IS_SUPPORTED_SYSTEM constant.
  • Remove set_open_files_limit API.
  • Remove list[_mut] methods for Users, Components and Disks.
  • Remove Networks::list method.
  • Remove From trait implementations for Users, Groups and Disks.
  • Fix Networks refresh.
  • Networks interface names have been switched from String to OsString.
  • Unix: Fix not thread-safe code in Groups.
  • Unix: Fix potential crash when a user's group cannot be retrieved.
  • Linux: Correctly mark a process as existing after update.
  • Linux: Fix cgroup memory information retrieval.
  • Linux: Multiple performance optimizations and memory usage reduction.
  • Linux: Fixes for thermal zone temperatures.
  • Linux: Keep Component max temperature across refreshes.
  • Android: Fall back to /proc/cpuinfo when /proc/stat is unreadable.
  • Raspberry Pi: Fix toolchain package name in README.
  • FreeBSD/NetBSD: Fix System::free_memory and System::available_memory.
  • FreeBSD: Correctly query sysctl values.
  • FreeBSD: Fix swap memory information retrieval.
  • NetBSD: Fix Process::accumulated_cpu_time unit.
  • macOS: Implement System::open_files_limit.
  • macOS: Fix bug in Disks::refresh.
  • iOS: Mark Networks as unsupported.
  • iOS: Make Process::open_files return None.
  • Windows: Don't keep thread-less processes alive.
  • Windows: Fix CPU brand on ARM64.
  • Windows: Fix crash in Components::refresh.
Commits
  • 75dcd2c Merge pull request #1790 from GuillaumeGomez/update
  • 15a5e93 Update crate version to 0.40.1
  • 4f252bd Update CHANGELOG for 0.40.1
  • 4a7b9e7 Merge pull request #1789 from GuillaumeGomez/from
  • b19150a Add back From\<X<Y>> for Vec\<Y> implementations for Users, Groups and `G...
  • e27239a Windows: mark System::load_average as unsupported (#1788)
  • 70c58c7 Fix wrong supported system list for GPUs
  • 13e94d5 Windows: mark System::load_average as unsupported
  • 34677fe allow getting owned Disk from Disks (#1786)
  • 48972c4 Merge pull request #1784 from GuillaumeGomez/update
  • Additional commits viewable in compare view

Updates realfft from 3.5.0 to 3.5.1

Release notes

Sourced from realfft's releases.

v3.5.1

What's Changed

Full Changelog: HEnquist/realfft@v3.5.0...v3.5.1

Commits
  • 44f36c4 Merge pull request #49 from HEnquist/license
  • 7602ffc Declare minimum Rust version in Cargo.toml
  • 9fdcf59 Add MIT license file, bump version to 3.5.1
  • See full diff in compare view

Updates mdns-sd from 0.21.5 to 0.21.6

Release notes

Sourced from mdns-sd's releases.

v0.21.6

This is a bugfix release.

Bug fixes

  • Fix daemon deadlocks under event backpressure. Delivering events to browse, browse_cache and resolve_hostname receivers no longer blocks the daemon. If a receiver falls too far behind and its event channel fills (or the receiver is dropped), that subscription is closed and its pending queries are stopped. In this case the receiver gets no SearchStopped event: after the queued events, the channel is simply disconnected. Cached records are kept, so browse_cache still works. (#522)
  • Do not record an interface address whose multicast join failed. Previously such an address was kept (and IpAdd was emitted), so the IP check never retried the join. Now the join is retried on the next IP check. (#523)

What's Changed

New Contributors

Full Changelog: keepsimple1/mdns-sd@v0.21.5...v0.21.6

Changelog

Sourced from mdns-sd's changelog.

Version 0.21.6 (2026-10-18)

This is a bugfix release.

Bug fixes

  • Fix daemon deadlocks under event backpressure. Delivering events to browse, browse_cache and resolve_hostname receivers no longer blocks the daemon. If a receiver falls too far behind and its event channel fills (or the receiver is dropped), that subscription is closed and its pending queries are stopped. In this case the receiver gets no SearchStopped event: after the queued events, the channel is simply disconnected. Cached records are kept, so browse_cache still works. (#522)
  • Do not record an interface address whose multicast join failed. Previously such an address was kept (and IpAdd was emitted), so the IP check never retried the join. Now the join is retried on the next IP check. (#523)

All changes

  • 9ca5b67 2026-10-16 fix: do not record an interface address whose multicast join failed (#523) (keepsimple1)
  • d0941f9 2026-10-16 Fix daemon deadlocks under event backpressure (#522) (oriel haim)

Thanks and welcome our new contributor @​orielhaim !

Commits

Updates nusb from 0.2.8 to 0.2.9

Release notes

Sourced from nusb's releases.

v0.2.9

New features

  • Add Descriptor::as_bytes() - like the existing Deref impl, but keeps the 'a lifetime (#244)

Fixes

  • Fix lost wakeup in transfer completion (#242)
  • Fix build with cfg(fuzzing) (#243)
  • linux + macOS: Clamp control transfer timeout to avoid panic on Duration::MAX (#245)

Contributors

@​rkr35 @​kloenk @​kevinmehall

Commits
  • 5dfee4c v0.2.9
  • fb1fae8 Merge pull request #245 from kevinmehall/push-vlovkqlowxwz
  • 1f17992 macos: Clamp control transfer timeout rather than panicking
  • bb2bab2 linux: Clamp control transfer timeout to prevent overflow panic
  • 28728e7 Merge pull request #244 from kloenk/desc-to-bytes-borrowchecker
  • 033a4c6 implement as_bytes on Descriptor to keep the 'a lifetime
  • 87c0cf6 Merge pull request #242 from rkr35/fix-lost-wakeup
  • f6eced1 Merge pull request #243 from kevinmehall/fuzz
  • 38be3ad Run descriptor parsing fuzzer on GHA
  • e2ace14 Mark transfer complete before taking the waiter
  • Additional commits viewable in compare view

Updates libc from 0.2.190 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)
Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)
Commits
  • ccc2ff4 libc: Release 0.2.191
  • bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
  • ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
  • b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
  • 9c7f568 apple: add ifaliasreq and in6_aliasreq
  • 018c7e9 wasi: Add pthread_condattr_{get,set}clock
  • 2c77185 openbsd: add sensordev structure
  • e10813c hurd: Add missing POSIX_SPAWN_* flags
  • 2ea4bc1 Fix FreeBSD/aarch64
  • 6d666fd dragonfly: Parse version from headers rather than CLI
  • Additional commits viewable in compare view

Updates rmcp from 3.5.1 to 3.8.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.8.0

Fixed

  • (transport) accept nested x-mcp-header annotations (#1359)
  • ship LICENSE in rmcp and rmcp-macros crates (#1342)

Other

  • combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)

rmcp-v3.8.0

Added

  • (transport) expose body-free HTTP status errors (#1386)

Fixed

  • (client) stop SSE reconnects on permanent GET errors (#1363)

rmcp-macros-v3.7.0

Fixed

  • (transport) accept nested x-mcp-header annotations (#1359)
  • ship LICENSE in rmcp and rmcp-macros crates (#1342)

Other

  • combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)

rmcp-v3.7.0

Added

  • (auth) support OIDC ID-token subjects in enterprise exchange (#1385)

Fixed

  • (auth) allow cross-origin resource_metadata urls (#1302)
  • (transport) keep 401/403 status when the body is a JSON-RPC error (#1341)

Other

  • Merge commit from fork

rmcp-macros-v3.6.0

Fixed

  • (transport) accept nested x-mcp-header annotations (#1359)
  • ship LICENSE in rmcp and rmcp-macros crates (#1342)

Other

... (truncated)

Commits
  • cd88056 chore: release v3.8.0 (#1388)
  • 8aec389 fix(client): stop SSE reconnects on permanent GET errors (#1363)
  • 2a401c4 feat(transport): expose body-free HTTP status errors (#1386)
  • 5d6a11f chore: release v3.7.0 (#1384)
  • 7bc5c07 fix(auth): allow cross-origin resource_metadata urls (#1302)
  • ac808ab Merge commit from fork
  • b11a40d feat(auth): support OIDC ID-token subjects in enterprise exchange (#1385)
  • e0e7e50 fix(transport): keep 401/403 status when the body is a JSON-RPC error (#1341)
  • c960b4b ci(triage): redact command output from failure logs (#1380)
  • 74d7895 chore: release v3.6.0 (#1327)
  • Additional commits viewable in compare view

Updates unicode-width from 0.2.2 to 0.2.3

Commits
  • f8c8b20 Publish 0.2.3 (#100)
  • 5180748 Fix documentation of Kirat Rai rules (#97)
  • 0b85fb8 Update to Unicode 18 (#96)
  • 832f7ca Fix typo in docs (#90)
  • c7b4d42 Fix halfwidth katakana voiced and semi-voiced sound marks in width calculatio...
  • a3d4ee6 Fix mistake in the specification of Arabic lam-alef ligature (#92)
  • d8654db Split generated file into multiple files, separating static code from generat...
  • ab7a6dc Support char iter width (#83)
  • b10a4d5 Exclude development scripts from published packages (#80)
  • See full diff in compare view

Updates open from 5.4.4 to 5.4.5

Release notes

Sourced from open's releases.

v5.4.5

Bug Fixes

  • check that_detached launchers for immediate failures that_detached() returned as soon as a launcher spawned, so a launcher that failed right after starting was reported as success and no fallback ran.

    Observe each launcher for 250 ms by delegating to that_detached_with_timeout(). A launcher that exits unsuccessfully within that window falls through to the next candidate; one still running is treated as handed off. The macOS and shellexecute-on-windows paths are unchanged.

    Extend the fixture tests to call that_detached() directly.

  • restore launcher fallback and support Plasma 6

    When xdg-open starts but exits unsuccessfully, that() and the CLI previously stopped before trying another installed opener. On Plasma 6, the fallback list also omitted the versioned KDE launchers.

    Launcher behavior

    • Retry reported failures from UNIX desktop launchers and retain the first unsuccessful exit when later candidates are missing.
    • Add kde-open6 and kde-open5 before the existing kde-open fallback.
    • Keep launcher ordering, argument boundaries, and exit-status policy together so compatibility decisions are explicit.
    • Preserve Windows' stop-on-failure policy and the existing protections for option-shaped and non-UTF-8 paths.

    Bounded detached checks

    Add that_detached_with_timeout(path, timeout) to opt into checking the actual launcher status for a configurable interval per candidate. Retry confirmed UNIX launcher failures; consider successful exits or launchers still running at the deadline handed off. A zero timeout polls once.

    On UNIX, use setsid() while retaining the launcher as a child. Reserve a background waiter before spawning and transfer ownership after a timeout so the launcher can outlive its caller and is eventually reaped. Stop fallback if observing an already-started launcher fails, avoiding a second launch based only on a wait error. Existing detached calls retain their timing behavior. The new API uses command-based launchers on Windows, including when shellexecute-on-windows is enabled.

    Historical constraints

    55dc10d relaxed exit checks for argumentless availability probes, where usage errors are expected. It did not establish that failed real opening operations should stop fallback. 245c95e introduced that behavior; the earlier implementation retried unsuccessful operations.

... (truncated)

Changelog

Sourced from open's changelog.

5.4.5 (2026-10-22)

Bug Fixes

  • check that_detached launchers for immediate failures that_detached() returned as soon as a launcher spawned, so a launcher that failed right after starting was reported as success and no fallback ran.

    Observe each launcher for 250 ms by delegating to that_detached_with_timeout(). A launcher that exits unsuccessfully within that window falls through to the next candidate; one still running is treated as handed off. The macOS and shellexecute-on-windows paths are unchanged.

    Extend the fixture tests to call that_detached() directly.

  • restore launcher fallback and support Plasma 6

    When xdg-open starts but exits unsuccessfully, that() and the CLI previously stopped before trying another installed opener. On Plasma 6, the fallback list also omitted the versioned KDE launchers.

    Launcher behavior

    • Retry reported failures from UNIX desktop launchers and retain the first unsuccessful exit when later candidates are missing.
    • Add kde-open6 and kde-open5 before the existing kde-open fallback.
    • Keep launcher ordering, argument boundaries, and exit-status policy together so compatibility decisions are explicit.
    • Preserve Windows' stop-on-failure policy and the existing protections for option-shaped and non-UTF-8 paths.

    Bounded detached checks

    Add that_detached_with_timeout(path, timeout) to opt into checking the actual launcher status for a configurable interval per candidate. Retry confirmed UNIX launcher failures; consider successful exits or launchers still running at the deadline handed off. A zero timeout polls once.

    On UNIX, use setsid() while retaining the launcher as a child. Reserve a background waiter before spawning and transfer ownership after a timeout so the launcher can outlive its caller and is eventually reaped. Stop fallback if observing an already-started launcher fails, avoiding a second launch based only on a wait error. Existing detached calls retain their timing behavior. The new API uses command-based launchers on Windows, including when shellexecute-on-windows is enabled.

    Historical constraints

    55dc10d relaxed exit checks for argumentless availability probes, where usage errors are expected. It did not establish that failed real opening operations should stop fallback. 245c95e introduced that behavior;

... (truncated)

Commits
  • a60a9d5 Release open v5.4.5
  • 4e64f6b Merge pull request #135 from Byron/fix-linux-launchers
  • c88759b auto-review
  • 42a34b0 fix(unix): check that_detached launchers for immediate failures
  • 279c1b2 fix(unix): restore launcher fallback and support Plasma 6
  • See full diff in compare view

Updates tauri-plugin-single-instance from 2.5.4 to 2.5.5

Release notes

Sourced from tauri-plugin-single-instance's releases.

single-instance v2.5.5

[2.5.5]

  • aedd883c (#3482 by @​JGuest121) Release the single instance lock in AppHandle::cleanup_before_exit, right before the process exits or restarts, instead of on RunEvent::Exit. The app now remains the single instance while your own RunEvent::Exit handler runs. destroy can still release the lock earlier.
  • 6c9746e5 (#3704 by @​karan5028ji) Fix race condition on Windows where a secondary instance fails to exit if FindWindowW misses the target event window during startup.

Dependencies

  • Upgraded to deep-link@2.6.3
Updating crates.io in...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 3, 2026
@coderabbitai

coderabbitai Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 44360ee0-9326-415f-a95d-b874d81539fb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

CodeRabbit Verify

  • Run CodeRabbit Verify to test the changes in this pull request.

Bumps the rust group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.58.6` | `0.60.2` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.28.0` | `1.29.0` |
| [arc-swap](https://github.com/vorner/arc-swap) | `1.9.2` | `1.9.3` |
| [notify](https://github.com/notify-rs/notify) | `8.2.0` | `8.2.1` |
| [sysinfo](https://github.com/GuillaumeGomez/sysinfo) | `0.39.6` | `0.40.1` |
| [realfft](https://github.com/HEnquist/realfft) | `3.5.0` | `3.5.1` |
| [mdns-sd](https://github.com/keepsimple1/mdns-sd) | `0.21.5` | `0.21.6` |
| [nusb](https://github.com/kevinmehall/nusb) | `0.2.8` | `0.2.9` |
| [libc](https://github.com/rust-lang/libc) | `0.2.190` | `0.2.191` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.5.1` | `3.8.0` |
| [unicode-width](https://github.com/unicode-rs/unicode-width) | `0.2.2` | `0.2.3` |
| [open](https://github.com/Byron/open-rs) | `5.4.4` | `5.4.5` |
| [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.5.4` | `2.5.5` |
| [log](https://github.com/rust-lang/log) | `0.4.34` | `0.4.35` |
| [rustix](https://github.com/bytecodealliance/rustix) | `1.1.5` | `1.1.6` |
| [tao](https://github.com/tauri-apps/tao) | `0.37.1` | `0.37.2` |



Updates `jsonschema` from 0.58.6 to 0.60.2
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@ruby-v0.58.6...ruby-v0.60.2)

Updates `uuid` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.28.0...v1.29.0)

Updates `arc-swap` from 1.9.2 to 1.9.3
- [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/arc-swap/commits/v1.9.3)

Updates `notify` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.1/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-8.2.0...notify-8.2.1)

Updates `sysinfo` from 0.39.6 to 0.40.1
- [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md)
- [Commits](GuillaumeGomez/sysinfo@v0.39.6...v0.40.1)

Updates `realfft` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/HEnquist/realfft/releases)
- [Commits](HEnquist/realfft@v3.5.0...v3.5.1)

Updates `mdns-sd` from 0.21.5 to 0.21.6
- [Release notes](https://github.com/keepsimple1/mdns-sd/releases)
- [Changelog](https://github.com/keepsimple1/mdns-sd/blob/main/CHANGELOG.md)
- [Commits](keepsimple1/mdns-sd@v0.21.5...v0.21.6)

Updates `nusb` from 0.2.8 to 0.2.9
- [Release notes](https://github.com/kevinmehall/nusb/releases)
- [Commits](kevinmehall/nusb@v0.2.8...v0.2.9)

Updates `libc` from 0.2.190 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.190...0.2.191)

Updates `rmcp` from 3.5.1 to 3.8.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.5.1...rmcp-v3.8.0)

Updates `unicode-width` from 0.2.2 to 0.2.3
- [Commits](unicode-rs/unicode-width@v0.2.2...v0.2.3)

Updates `open` from 5.4.4 to 5.4.5
- [Release notes](https://github.com/Byron/open-rs/releases)
- [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md)
- [Commits](Byron/open-rs@v5.4.4...v5.4.5)

Updates `tauri-plugin-single-instance` from 2.5.4 to 2.5.5
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.5.4...http-v2.5.5)

Updates `log` from 0.4.34 to 0.4.35
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/main/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.34...v0.4.35)

Updates `rustix` from 1.1.5 to 1.1.6
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v1.1.5...v1.1.6)

Updates `tao` from 0.37.1 to 0.37.2
- [Release notes](https://github.com/tauri-apps/tao/releases)
- [Changelog](https://github.com/tauri-apps/tao/blob/dev/CHANGELOG.md)
- [Commits](tauri-apps/tao@tao-v0.37.1...tao-v0.37.2)

---
updated-dependencies:
- dependency-name: arc-swap
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: jsonschema
  dependency-version: 0.60.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: log
  dependency-version: 0.4.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: mdns-sd
  dependency-version: 0.21.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: notify
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: nusb
  dependency-version: 0.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: open
  dependency-version: 5.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: realfft
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: rmcp
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: rustix
  dependency-version: 1.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: sysinfo
  dependency-version: 0.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: tao
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: tauri-plugin-single-instance
  dependency-version: 2.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: unicode-width
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-8dcd0be6c3 branch from 1fd373c to 530a245 Compare November 3, 2026 10:48

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants