chore: bump the cargo group across 1 directory with 16 updates

[dependabot]

Bumps the cargo group with 16 updates in the /src-tauri directory:

Package	From	To
log	0.4.33	0.4.34
sentry	0.49.1	0.49.3
aes	0.9.2	0.9.3
reqwest	0.12.28	0.13.4
tauri	2.11.5	2.11.6
matrix-sdk-crypto	0.18.0	0.19.1
tauri-plugin-log	2.9.0	2.9.2
tauri-plugin-opener	2.5.4	2.5.5
tauri-plugin-deep-link	2.4.9	2.4.10
tauri-plugin-store	2.4.4	2.4.5
tauri-plugin-clipboard-manager	2.3.2	2.3.3
tauri-plugin-dialog	2.7.2	2.7.3
tauri-plugin-devtools	2.1.0	2.2.1
tauri-plugin-single-instance	2.4.3	2.4.5
tauri-plugin-updater	2.10.1	2.12.0
tauri-plugin-fs	2.5.1	2.5.2

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

• 8034743 Merge pull request #738 from rust-lang/cargo/0.4.34
• 7d1e24e prepare for 0.4.34 release
• 3b939b6 Merge pull request #737 from malezjaa/master
• b88266c Add alloc support for boxed loggers
• 037d7a5 doc: Add context-logger utility to README
• See full diff in compare view

Updates sentry from 0.49.1 to 0.49.3

Release notes

Sourced from sentry's releases.

0.49.3

Features

• Added the sentry-minidump integration, which captures native crashes as minidumps in a separate process and sends them to Sentry as attachments. Enable it with the minidump feature on sentry. Linux, macOS and Windows only (#1315).
• Added a transport_channel_capacity option to ClientOptions, making the transport's channel capacity configurable. The StdTransportThreadOptions::with_channel_capacity and TokioTransportThreadOptions::with_channel_capacity methods provide the same configuration when constructing transport threads. When unset, each transport uses its own default (currently 30), which is subject to change (#1311).
• The Tower integration's SentryHttpLayer now records the http.response.status_code attribute on transactions (#1253).

Deprecations

• Deprecated Transaction::is_sampled, Span::is_sampled, and TransactionOrSpan::is_sampled. These methods cannot distinguish between an unsampled transaction or span and a deferred sampling decision when tracing is disabled (#1293).

Fixes

• Corrected disabled tracing behavior: transactions and spans are ignored without generating discarded-data client reports, and locally started traces leave the sampling decision unset rather than marking the trace as unsampled. Incoming sampling decisions are preserved in outgoing sentry-trace headers without enabling local capture. An explicit 0.0 trace sample rate remains distinct from disabled tracing and continues to generate client reports for locally unsampled transactions (#1286).

0.49.2

Fixes

• Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#1279).

Deprecations

• Deprecated ClientOptions::enable_logs. The option no longer disables manually captured logs (via the logging APIs); it now only disables automatic log capture by the log-capturing integrations (tracing and log with the logs feature). To stop an integration from sending logs, configure it via its own options (#1299).
• Deprecated ClientOptions::enable_metrics. The option is now a no-op; metrics are always enabled. To stop sending metrics, stop calling the metrics APIs (#1300).

Changelog

Sourced from sentry's changelog.

0.49.3

Features

• Added the sentry-minidump integration, which captures native crashes as minidumps in a separate process and sends them to Sentry as attachments. Enable it with the minidump feature on sentry. Linux, macOS and Windows only (#1315).
• Added a transport_channel_capacity option to ClientOptions, making the transport's channel capacity configurable. The StdTransportThreadOptions::with_channel_capacity and TokioTransportThreadOptions::with_channel_capacity methods provide the same configuration when constructing transport threads. When unset, each transport uses its own default (currently 30), which is subject to change (#1311).
• The Tower integration's SentryHttpLayer now records the http.response.status_code attribute on transactions (#1253).

Deprecations

• Deprecated Transaction::is_sampled, Span::is_sampled, and TransactionOrSpan::is_sampled. These methods cannot distinguish between an unsampled transaction or span and a deferred sampling decision when tracing is disabled (#1293).

Fixes

• Corrected disabled tracing behavior: transactions and spans are ignored without generating discarded-data client reports, and locally started traces leave the sampling decision unset rather than marking the trace as unsampled. Incoming sampling decisions are preserved in outgoing sentry-trace headers without enabling local capture. An explicit 0.0 trace sample rate remains distinct from disabled tracing and continues to generate client reports for locally unsampled transactions (#1286).

0.49.2

Fixes

• Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#1279).

Deprecations

• Deprecated ClientOptions::enable_logs. The option no longer disables manually captured logs (via the logging APIs); it now only disables automatic log capture by the log-capturing integrations (tracing and log with the logs feature). To stop an integration from sending logs, configure it via its own options (#1299).
• Deprecated ClientOptions::enable_metrics. The option is now a no-op; metrics are always enabled. To stop sending metrics, stop calling the metrics APIs (#1300).

Commits

• ad0b3c1 release: 0.49.3
• 31a4c96 meta(changelog): Fix the disabled tracing changelog entry (#1325)
• 5bb564d build(cargo): Bump rustls to 0.23.45 (#1324)
• 3b6d992 feat(core): Make transport channel capacity configurable (#1311)
• cbed0fa feat(minidump): Add sentry-minidump integration (#1315)
• 715a9ec ref(lints): Enforce missing_docs lint globally (#1321)
• abecd69 ref(tests): No integration test crate for shared logic (#1320)
• 70a1205 ref(clippy): Enable impl_trait_in_params lint (#1319)
• 4427186 chore(core): Implement disabled tracing semantics (#1286)
• c0b9a82 chore(core): Deprecate is_sampled methods (#1293)
• Additional commits viewable in compare view

Updates aes from 0.9.2 to 0.9.3

Commits

• c153436 Release aes v0.9.3 (#587)
• 6226693 aes: disable aarch64_aes backend on Miri (#586)
• 1013f13 kuznyechik: remove unnecessary mut in f.call() (#584)
• 9201609 Fix build badges (#583)
• e207dc6 ci: bump hybrid-array from 0.4.13 to 0.4.14 in the all-deps group across 1 di...
• 9b8b0c9 aes: enable VAES backends by default, bump MSRV to 1.89 (#580)
• See full diff in compare view

Updates reqwest from 0.12.28 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

• Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
• Add ClientBuilder::http2_keep_alive_* options for the blocking client.
• Add TLS 1.3 support when using native-tls backend.
• Fix redirect handling to strip sensitive headers when the scheme changes.
• Fix HTTP/3 happy-eyeball connection creation.
• Upgrade hickory-resolver to 0.26.

What's Changed

• fix(tls): improve rustls-no-provider panic message and add module docs by @​smythg4 in seanmonstar/reqwest#3021
• fix: do not lose the url in error when decoding json by @​Dushistov in seanmonstar/reqwest#3026
• Add tls_sslkeylogfile builder method by @​passcod in seanmonstar/reqwest#2923
• fix(redirect): strip sensitive headers on scheme change across redirects by @​SAY-5 in seanmonstar/reqwest#3034
• chore: upgrade MSRV to 1.85 by @​seanmonstar in seanmonstar/reqwest#3038
• chore: clean up minimal-versions CI job by @​seanmonstar in seanmonstar/reqwest#3039
• fix(http3): use happy eyeballs for h3 connect by @​lyuzichong in seanmonstar/reqwest#3030
• fix: update hickory-resolver to 0.26 and adjust code accordingly by @​seanmonstar in seanmonstar/reqwest#3040
• fix: remove unwrap in hickory initialization by @​mat813 in seanmonstar/reqwest#3041
• feat(https): support TLS 1.3 as min version under native-tls 🎉 by @​AverageHelper in seanmonstar/reqwest#2975
• Expose keep alive configurations in blocking client by @​aeb-dev in seanmonstar/reqwest#3043
• Prepare v0.13.4 by @​seanmonstar in seanmonstar/reqwest#3046

New Contributors

• @​smythg4 made their first contribution in seanmonstar/reqwest#3021
• @​Dushistov made their first contribution in seanmonstar/reqwest#3026
• @​SAY-5 made their first contribution in seanmonstar/reqwest#3034
• @​mat813 made their first contribution in seanmonstar/reqwest#3041
• @​AverageHelper made their first contribution in seanmonstar/reqwest#2975
• @​aeb-dev made their first contribution in seanmonstar/reqwest#3043

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

v0.13.3

tl;dr

• Fix CertificateRevocationList parsing of PEM values.
• Fix logging in resolver to only show host, not full URL.
• Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
• Fix HTTP/3 to handle STOP_SENDING as not an error.
• Fix HTTP/3 pool to remove timed out QUIC connections.
• Fix HTTP/3 connection establishment picking IPv4 and IPv6.
• Upgrade rustls-platform-verifier.
• (wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

• Update docs.rs Features by @​JamesWiresmith in seanmonstar/reqwest#2961
• fix: fallback to hickory_resolver's default config if reading /etc/resolv.conf fails by @​monosans in seanmonstar/reqwest#2797
• fix: remove timeout con by @​cuiweixie in seanmonstar/reqwest#2967
• http3: handle stop_sending without error by @​anuraaga in seanmonstar/reqwest#2978

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.4

• Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
• Add ClientBuilder::http2_keep_alive_* options for the blocking client.
• Add TLS 1.3 support when using native-tls backend.
• Fix redirect handling to strip sensitive headers when the scheme changes.
• Fix HTTP/3 happy-eyeball connection creation.
• Upgrade hickory-resolver to 0.26.

v0.13.3

• Fix CertificateRevocationList parsing of PEM values.
• Fix logging in resolver to only show host, not full URL.
• Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
• Fix HTTP/3 to handle STOP_SENDING as not an error.
• Fix HTTP/3 pool to remove timed out QUIC connections.
• Fix HTTP/3 connection establishment picking IPv4 and IPv6.
• Upgrade rustls-platform-verifier.
• (wasm) Only use wasm-bindgen on unknown-* targets.

v0.13.2

• Fix HTTP/2 and native-tls ALPN feature combinations.
• Fix HTTP/3 to send h3 ALPN.
• (wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

• Fixes compiling with rustls on Android targets.

v0.13.0

• Breaking changes:
  • rustls is now the default TLS backend, instead of native-tls.
  • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
  • rustls-tls has been renamed to rustls.
  • rustls roots features removed, rustls-platform-verifier is used by default.
    • To use different roots, call tls_certs_only(your_roots).
  • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
  • query and form are now crate features, disabled by default.
  • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
• Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
  • For example, prefer tls_backend_rustls() over use_rustls_tls().

Commits

• 11489b3 v0.13.4
• d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
• 79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
• fb7bf6a fix: remove unwrap in hickory initialization (#3041)
• 3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
• c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
• 9cbb65b chore: clean up minimal-versions CI job (#3039)
• 17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
• 03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
• 4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
• Additional commits viewable in compare view

Updates tauri from 2.11.5 to 2.11.6

Release notes

Sourced from tauri's releases.

tauri v2.11.6

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1251 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustls-pemfile

Version:   1.0.4

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser

</tr></table>

... (truncated)

Commits

• 9452dde fix audit
• 7c2fe9f run covector version
• 7d71a8a add publish-hotfix workflow
• 5a87bab Merge commit from fork
• e901f1d Merge commit from fork
• See full diff in compare view

Updates matrix-sdk-crypto from 0.18.0 to 0.19.1

Commits

• b18166c chore: Release matrix-sdk version 0.19.1
• ef536cd chore: Include some missing changelog entries from the 0.19.0 release
• d9daeb9 fix(crypto): Record the user ID and device ID when we restore the Olm account
• 1e3f0ef fix(docs): Fix docs build on docs.rs
• 2de04d6 chore: Remove some duplicate headers in the 0.19.0 changelog
• 30be7ca chore: Add a repo to the content scanner crate
• 7c940c6 Merge pull request #7050 from matrix-org/poljar/release-prep-0.19.0
• 1875fd0 feat(ffi): Expose sendEncryptedToDeviceMessage
• 66e042a feat(sdk): Add Client::send_encrypted_to_device
• 22a3528 test(sdk): Assert on the recipients of encrypted to-device messages
• Additional commits viewable in compare view

Updates tauri-plugin-log from 2.9.0 to 2.9.2

Commits

• 5baf71a fix: pnpm audit
• 2393188 publish new versions (#3591)
• 1198a52 Merge commit from fork
• 1308bfa Merge commit from fork
• 690dcfd Merge commit from fork
• 67cd25a fix(single-instance): let the first instance come to front on Windows (#3592)
• 2df3d93 refactor(log): log webview location after double colon (#3574)
• 4b5c954 chore(deps): update dependency typescript-eslint to v8.70.0 (#3536)
• 3c5d267 publish new versions (#3567)
• c050e07 fix(store): apply_pending_auto_save can deadlock (#3572)
• Additional commits viewable in compare view

Updates tauri-plugin-opener from 2.5.4 to 2.5.5

Commits

• 6e2e7e4 publish new versions (#3070)
• 9a2c98f temp: remove updater changefiles
• 4a2ecb6 chore(deps): update rkyv, closes #3196
• 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
• 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
• 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
• d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
• 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
• 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
• 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
• Additional commits viewable in compare view

Updates tauri-plugin-deep-link from 2.4.9 to 2.4.10

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates tauri-plugin-store from 2.4.4 to 2.4.5

Commits

• 6e2e7e4 publish new versions (#3070)
• 9a2c98f temp: remove updater changefiles
• 4a2ecb6 chore(deps): update rkyv, closes #3196
• 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
• 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
• 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
• d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
• 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
• 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
• 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
• Additional commits viewable in compare view

Updates tauri-plugin-clipboard-manager from 2.3.2 to 2.3.3

Commits

• See full diff in compare view

Updates tauri-plugin-dialog from 2.7.2 to 2.7.3

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates tauri-plugin-devtools from 2.1.0 to 2.2.1

Release notes

Sourced from tauri-plugin-devtools's releases.

tauri-plugin-devtools-v2.2.1

Fixed

• devtools-core release should have been breaking, upgrade to 0.4.0.

tauri-plugin-devtools-v2.2.0

Changed

• Raise MSRV to 1.85. Added MSRV policy (#414)
• Upgrade to tonic/prost 0.14 and http 1. (#407)
• Simplified CORS handling to mirror the allowed request origin in Access-Control-Allow-Origin, including in local development mode, instead of returning an origin list or *. (#407)

Fixed

• Increase span buffer size to avoid dropped spans and UX issues. (#227)

Other

• General dependency updates
• General CI maintenance
• Add test coverage for CORS features of the plugin using new test-utils core feature (#402)

Commits

• e9a8fd6 chore: release devtools-core 0.4.0 and tauri-plugin-devtools 2.2.1 (#418)
• f36f1be chore: release (#385)
• 4fc9ec1 fix: dont drop events in buffer (#227)
• 8a148f7 chore(deps): update release-plz/action digest to a80d79e (#416)
• bb82cfb chore(deps): update dtolnay/rust-toolchain digest to d103106 (#415)
• 20d059d chore(deps): update rust crate bytes to v1.12.1 (#393)
• 79dc9b4 chore(deps): update dependency eslint-plugin-solid to ^0.18.0 (#392)
• 1423127 chore(deps): update rust crate tracing-subscriber to v0.3.23 (#390)
• c2e6eee chore(deps): update rust crate serde_json to v1.0.151 (#389)
• 601e120 chore(deps): update rust crate futures to v0.3.34 (#388)
• Additional commits viewable in compare view

Updates tauri-plugin-single-instance from 2.4.3 to 2.4.5

Commits

• 6e2e7e4 publish new versions (#3070)
• 9a2c98f temp: remove updater changefiles
• 4a2ecb6 chore(deps): update rkyv, closes #3196
• 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
• 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
• 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
• d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
• 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
• 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
• 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
• Additional commits viewable in compare view

Updates tauri-plugin-updater from 2.10.1 to 2.12.0

Commits

• 5baf71a fix: pnpm audit
• 2393188 publish new versions (#3591)
• 1198a52 Merge commit from fork
• 1308bfa Merge commit from fork
• 690dcfd Merge commit from fork
• 67cd25a fix(single-instance): let the first instance come to front on Windows (#3592)
• 2df3d93 refactor(log): log webview location after double colon (#3574)
• 4b5c954 chore(deps): update dependency typescript-eslint to v8.70.0 (#3536)
• 3c5d267 publish new versions (#3567)
• c050e07 fix(store): apply_pending_auto_save can deadlock (#3572)
• Additional commits viewable in compare view

Updates tauri-plugin-fs from 2.5.1 to 2.5.2

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.