fix(deps): bump mobile Tauri to patch GHSA-7gmj-67g7-phm9

[Svector-anu]

Updates the mobile Tauri host from 2.10.3 to 2.11.1 to address the published origin-confusion vulnerability.

• CVE: CVE-2026-5947
• Advisory: GHSA-7gmj-67g7-phm9
• Severity: high
• Package: tauri 2.10.3 → 2.11.1

The desktop manifest already targets Tauri 2.11; this brings the mobile host onto the patched line and refreshes its Cargo lockfile.

Detected by osv-scanner. No application code changes.

Verification

• Reproduced locally: dependency resolution yes; full Linux check blocked by missing system glib-2.0/gobject-2.0 development packages
• Command: CARGO_HOME=/tmp/openhuman-cargo-home RUSTUP_TOOLCHAIN=stable cargo check --manifest-path app/src-tauri-mobile/Cargo.toml --locked
• Before: tauri 2.10.3 is reported by OSV as affected by GHSA-7gmj-67g7-phm9
• After: lockfile resolves tauri 2.11.1, the advisory's fixed version
• Environment: cargo 1.96.0; osv-scanner 2.3.3; Linux x86_64

Summary by CodeRabbit

• Chores
  • Updated the mobile app framework dependency to a newer version for improved compatibility and maintenance.

[tinysweeper]

tinysweeper found nothing blocking. Approving.

$0.0000 · 0 in / 0 out

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 69cc8590-d76b-4ff6-b863-516863b1967c

📥 Commits

Reviewing files that changed from the base of the PR and between 5630b00 and 7f30132.

⛔ Files ignored due to path filters (1)

• app/src-tauri-mobile/Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• app/src-tauri-mobile/Cargo.toml

Included review availability: Your plan provides up to 10 included reviews per hour; 9 remain after this review.

---

📝 Walkthrough

Walkthrough

The mobile crate updates its pinned Tauri dependency from 2.10.3 to 2.11.1. Existing features and dependency configuration remain unchanged.

Changes

Mobile Tauri dependency update

Layer / File(s)	Summary
Update mobile Tauri pin app/src-tauri-mobile/Cargo.toml	The mobile crate pins Tauri to 2.11.1 and retains the existing feature configuration.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 7f301

This localized dependency update moves the mobile host to the patched Tauri version without application code changes; no actionable merge-blocking risk remains beyond normal checks and review.

Suggested reviewers: senamakel

Poem

A rabbit hops through Cargo’s lane
Tauri blooms with a newer name
The features stay tucked in place
One small pin completes the race
Ears up, the mobile build keeps pace

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the mobile Tauri dependency update and its security purpose. It accurately reflects the main change in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Warning

Your free Security trial is over. An organization admin can activate billing to continue.

---

_{Comment @coderabbitai help to get the list of available commands.}