chore(deps): bump the cargo-minor-and-patch group across 1 directory with 11 updates

[dependabot]

Bumps the cargo-minor-and-patch group with 11 updates in the / directory:

Package	From	To
toml	1.1.5+spec-1.1.0	1.1.6+spec-1.1.0
thiserror	2.0.20	2.0.21
uuid	1.26.0	1.27.0
tauri	2.11.5	2.11.6
tauri-plugin-dialog	2.7.3	2.8.1
tauri-plugin-clipboard-manager	2.3.3	2.4.1
zeroize	1.9.0	1.9.1
ureq	3.4.0	3.4.2
objc2	0.6.4	0.6.5
tauri-build	2.6.3	2.7.2
clap	4.6.6	4.6.7

Updates toml from 1.1.5+spec-1.1.0 to 1.1.6+spec-1.1.0

Commits

• 572c005 chore: Release
• 66d0c53 docs: Update changelog
• 07af4e7 perf: Reduce allocations in toml_edit parsing and dumping (#1215)
• 0ff90db perf(display): Write encoded strings directly
• efb2536 perf(display): Move generated representation strings
• 075c444 refactor(display): Consolidate key-path encoding
• b48f338 perf(display): Borrow table keys during document output
• c6c1de3 perf(parser): Move completed table header keys
• ec90463 perf(parser): Borrow input when creating editable documents
• d76a48a test: Benchmark rendering generated keys and values
• Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Updates uuid from 1.26.0 to 1.27.0

Release notes

Sourced from uuid's releases.

v1.27.0

What's Changed

• Accept case-insensitive urn:uuid: prefixes when parsing by @​jaideeppyne in uuid-rs/uuid#912
• Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @​KodrAus in uuid-rs/uuid#915
• Prepare for 1.27.0 release by @​KodrAus in uuid-rs/uuid#917

New Contributors

• @​jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

v1.26.1

What's Changed

• Seat the v7 counter below the version nibble by @​lenamonj in uuid-rs/uuid#907
• Don't panic in overflowing Timestamp to SystemTime conversion by @​KodrAus in uuid-rs/uuid#909
• Prepare for 1.26.1 release by @​KodrAus in uuid-rs/uuid#910

New Contributors

• @​lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

Commits

• b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
• ffd8ec5 prepare for 1.27.0 release
• 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
• a1aa126 Merge pull request #912 from jaideeppyne/fix/urn-prefix-case-insensitive
• 4639d67 fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos
• 2723703 bump MSRV to 1.89.0
• a3e64fa refactor: simplify URN prefix parsing
• 5055fd4 refactor: inline case-insensitive URN prefix checks
• cb8b1d5 refactor: simplify case-insensitive URN parsing
• 285967d Accept case-insensitive urn:uuid: prefixes when parsing
• Additional commits viewable in compare view

Updates tauri from 2.11.5 to 2.11.6

Release notes

Sourced from tauri's releases.

tauri v2.11.6

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1251 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustls-pemfile

Version:   1.0.4

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser

</tr></table>

... (truncated)

Commits

• 9452dde fix audit
• 7c2fe9f run covector version
• 7d71a8a add publish-hotfix workflow
• 5a87bab Merge commit from fork
• e901f1d Merge commit from fork
• See full diff in compare view

Updates tauri-plugin-dialog from 2.7.3 to 2.8.1

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.1

[2.8.1]

• 569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.1
npm notice filename: tauri-apps-plugin-dialog-2.8.1.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: f29f3c28862a1ed767b6fd241f34abf26129f88f
npm notice integrity: sha512-/DtE3B62JgpYu[...]phsKnb+738Dmw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3028120915
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.1

dialog v2.8.1

[2.8.1]

• 569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

... (truncated)

Commits

• 7eb8246 publish new versions (#3673)
• 65ce65b fix(ci): Android e2e flakes, shell Terminated sent before output (#3672)
• cbd691b chore(examples): update Android project for API example
• 974bbdc publish new versions (#3667)
• 3113a54 chore(deps): update urlpattern to 0.6 (#3670)
• b443d6b fix(http): release the request's resources once fetch_send settles (#3669)
• 2a9c29e fix(updater): restore the current app when a macOS install fails (fix #3505, ...
• d4835d0 publish new versions (#3660)
• 569ee82 fix: mobile docs.rs builds
• 25f3874 chore(deps): update dependency eslint-plugin-security to v4.1.0 (#3661)
• Additional commits viewable in compare view

Updates tauri-plugin-clipboard-manager from 2.3.3 to 2.4.1

Release notes

Sourced from tauri-plugin-clipboard-manager's releases.

geolocation-js v2.4.1

[2.4.1]

• 569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-geolocation@2.4.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.8kB README.md
npm notice 3.9kB dist-js/index.cjs
npm notice 6.3kB dist-js/index.d.ts
npm notice 3.7kB dist-js/index.js
npm notice 662B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-geolocation
npm notice version: 2.4.1
npm notice filename: tauri-apps-plugin-geolocation-2.4.1.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 20.2 kB
npm notice shasum: 0113f207fe25a8779e5d4d31e789ffa7397532f2
npm notice integrity: sha512-XYZwcB8Azz9dJ[...]oOVoNEnUDxoDA==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3028122996
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-geolocation@2.4.1

geolocation v2.4.1

[2.4.1]

• 569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

... (truncated)

Commits

• d66aa6f publish new versions (#2822)
• 6f34587 fix(single-instance): disable dbus name replacement (#2860)
• 708fa4e chore(deps): update dependency eslint-config-prettier to v10.1.8 (#2858)
• b729203 fix(upload): fix download() locks main thread on Android (#2838)
• 2f9c71a chore(deps): update dependency rollup to v4.45.1 (#2850)
• 80d4d8e chore(deps): update eslint monorepo to v9.31.0 (v2) (#2839)
• e7a98b0 chore(deps): update dependency typescript-eslint to v8.37.0 (#2848)
• 44a1f65 fix(fs): writeFile create file by default (#2846)
• 6210cd3 chore(deps): update dependency rollup to v4.45.0 (#2841)
• 467f07b chore(deps): update dependency vite to v7 (v2) (#2800)
• Additional commits viewable in compare view

Updates zeroize from 1.9.0 to 1.9.1

Commits

• 34a6ebc zeroize v1.9.1 (#1553)
• e68c684 zeroize: test under cargo miri in CI (#1552)
• 4a53d7d Update Cargo.lock (#1545)
• a2b1713 zeroize: fix fallback code used by optimization_barrier (#1551)
• 3c5aa70 ctutils v0.4.3 (#1550)
• 6f4e70f ctutils: use cast_(un)signed; MSRV 1.87 (#1548)
• 29391e4 ctutils: make Choice::{to_bool, to_u8} into const fn; MSRV 1.86 (#1547)
• f09945d ci: allow triggering workflows manually (#1543)
• 53493df dit v0.0.1-alpha (#1540)
• c89949d Rename aarch64-dit to dit (#1539)
• Additional commits viewable in compare view

Updates ureq from 3.4.0 to 3.4.2

Changelog

Sourced from ureq's changelog.

3.4.2

• Bump ureq-proto to 0.6.3 (fixes network-path references in redirects)
• Bypass pooling for request connection settings incompatible with the Agent #1201
• Try the next resolved address on unreachable/unavailable connect errors #1195

3.4.1

• Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199
• Do not pool connections with unconsumed buffered input #1198
• Fix timeout budgets restarting and applying to later phases #1194
• Complete TLS handshake during connect so timeout_connect covers it #1193
• Speed up read_json for responses with a known, small body size #1191

Commits

• 2e9ef24 3.4.2
• b983841 Bump ureq-proto to 0.6.3
• 075a1d7 Respect request connection settings when pooling
• fb634de Try the next resolved address when a connect fails for that address only (#1195)
• cf4a3cd 3.4.1
• 9559d7b Bump ureq-proto to 0.6.2 (#1199)
• 9eb654c Do not pool a connection with unconsumed input (#1198)
• 5b81318 Anchor timeout budgets to phase boundaries (#1194)
• d480543 Complete TLS handshakes while connecting (#1193)
• 662410b Buffer read_json into memory when Content-Length is below the limit (#1191)
• See full diff in compare view

Updates objc2 from 0.6.4 to 0.6.5

Commits

• d7d2fa2 Bump objc2 0.6.4 -> 0.6.5
• ed5d37c Cherry-pick #862 for objc2 v0.6.5
• See full diff in compare view

Updates tauri-build from 2.6.3 to 2.7.2

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1296 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1092 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits

• 5b23c82 apply version updates (#16243)
• 05354a8 chore(deps): update swift-rs to 1.0.9
• c48e1ca fix(ios): make @_cdecl entry points public so release builds link on Xcode ...
• eeeaa0f fix(nsis): block downgrades in silent, passive and update modes (#16230)
• 0204f6f fix(api): keep Channel messages flowing after the handler throws (#16244)
• 7fcd8a7 fix(ci): retry switching to the Android webview context in e2e (#16239)
• fd319dd chore(deps): update base64 to 0.23
• 413cbdb Apply Version Updates From Current Changes (#16213)
• 587ae48 chore: disable CODEOWNERS file (#16236)
• a98038e fix: menu append doesn't take options like MenuItemOptions (#16235)
• Additional commits viewable in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions