Bumps the npm_and_yarn group in /rust/gui-client with 1 update:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Updates `vite` from 6.2.5 to 6.2.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.6</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.2.6/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v6.2.6/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->6.2.6 (2025-04-10)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: reject requests with <code>#</code> in request-target (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19830">#19830</a>)
(<a
href="3bb0883d22">3bb0883</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/19830">#19830</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d3dbf25fd5"><code>d3dbf25</code></a>
release: v6.2.6</li>
<li><a
href="3bb0883d22"><code>3bb0883</code></a>
fix: reject requests with <code>#</code> in request-target (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19830">#19830</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v6.2.6/packages/vite">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/firezone/firezone/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the npm_and_yarn group in /rust/gui-client with 1 update:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Updates `vite` from 6.2.4 to 6.2.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->6.2.5 (2025-04-03)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782">#19782</a>,
fs check with svg and relative paths (<a
href="fdb196e9f8">fdb196e</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/19782">#19782</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c176acf70a"><code>c176acf</code></a>
release: v6.2.5</li>
<li><a
href="fdb196e9f8"><code>fdb196e</code></a>
fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782">#19782</a>,
fs check with svg and relative paths</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v6.2.5/packages/vite">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/firezone/firezone/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the cargo group in /rust with 1 update:
[crossbeam-channel](https://github.com/crossbeam-rs/crossbeam).
Updates `crossbeam-channel` from 0.5.13 to 0.5.15
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/crossbeam-rs/crossbeam/releases">crossbeam-channel's
releases</a>.</em></p>
<blockquote>
<h2>crossbeam-channel 0.5.15</h2>
<ul>
<li>Fix regression introduced in 0.5.12 that can lead to a double free
when dropping unbounded channel. (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1187">#1187</a>)</li>
</ul>
<h2>crossbeam-channel 0.5.14</h2>
<ul>
<li>Fix stack overflow when sending large value to unbounded channel.
(<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1146">#1146</a>,
<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1147">#1147</a>)</li>
<li>Add <code>Select::new_biased</code> function. (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1150">#1150</a>)</li>
<li>Remove inefficient spinning. (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1154">#1154</a>)</li>
<li>Suppress buggy <code>clippy::zero_repeat_side_effects</code> lint in
macro generated code. (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1123">#1123</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d35ffde18a"><code>d35ffde</code></a>
Prepare for the next release</li>
<li><a
href="6ec74ecae8"><code>6ec74ec</code></a>
crossbeam-channel: prevent double free on Drop (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1187">#1187</a>)</li>
<li><a
href="ccd83ac410"><code>ccd83ac</code></a>
Prepare for the next release</li>
<li><a
href="54988eb239"><code>54988eb</code></a>
Calculate layout in const context</li>
<li><a
href="761d0b67e2"><code>761d0b6</code></a>
Port <a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1146">#1146</a>
& <a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1147">#1147</a>
to deque::Injector and queue::SegQueue</li>
<li><a
href="8144fbb41e"><code>8144fbb</code></a>
Remove optimistic spinning from Context::wait_until</li>
<li><a
href="a92f6c4fbb"><code>a92f6c4</code></a>
Bump peter-evans/create-pull-request from 5 to 7 (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1153">#1153</a>)</li>
<li><a
href="66d41a904f"><code>66d41a9</code></a>
channel: Add new_biased constructor for biased channel selection (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1150">#1150</a>)</li>
<li><a
href="d0d0a80be8"><code>d0d0a80</code></a>
CachePadded: Use 128-byte alignment on arm64ec</li>
<li><a
href="f757eefca2"><code>f757eef</code></a>
Add comment about fixed rustc bug</li>
<li>Additional commits viewable in <a
href="https://github.com/crossbeam-rs/crossbeam/compare/crossbeam-channel-0.5.13...crossbeam-channel-0.5.15">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/firezone/firezone/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upon each tick of the event loop `connlib` first attempts to flush
pending UDP packets to the socket, followed by packets queued for
sending out on the TUN device. In case the UDP socket is busy, we
suspend the event loop until we can send more packets there. This isn't
quite as efficient as we can be. Whilst waiting for the UDP socket, we
can still write packets to the TUN device.
With this patch, we attempt to do both. In case either of them couldn't
quite finish their work, we still return `Poll::Pending` to signal the
event loop to suspend, preventing us from accepting more work than we
can handle.
We don't ever use the `dev` stage within our Rust Dockerfile that
actually builds the binaries within the container. In CI, we build the
binaries on the host and then copy them in. During local development, I
always do the same because it is much faster to iterate that way.
Long story short: We don't need this stage within our Dockerfile and it
causes confusion when people try to use `docker compose build`. If
somebody really wanted to do that, they need to follow the instructions
in the Dockerfile and build the binary first.
Related: #8687
---------
Signed-off-by: Thomas Eizinger <thomas@eizinger.io>
Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
At present, `connlib` uses `quinn-udp`'s GRO functionality to read
multiple UDP packets within a single syscall. We are however only
passing a single buffer and a single `RecvMeta` to the `recv` function.
As a result, the function is limited to giving us only packets that
originate from one particular IP.
By supplying multiple buffers (and their according `RecvMeta`s), we can
now read packets from up to 10 different IPs at once within a single
syscall. To obtain multiple buffers, we need to split the provided
buffer into equal chunks. To ensure that each buffer can still hold
several packets, we increase the buffer size to 1MB.
It is expected that is increases throughput especially on Gateways which
receive UDP packets from many different IPs.
---------
Signed-off-by: Thomas Eizinger <thomas@eizinger.io>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Bumps the tauri group in /rust/gui-client with 2 updates:
[@tauri-apps/api](https://github.com/tauri-apps/tauri) and
[@tauri-apps/cli](https://github.com/tauri-apps/tauri).
Updates `@tauri-apps/api` from 2.4.0 to 2.4.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri/releases"><code>@tauri-apps/api</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@tauri-apps/api</code> v2.4.1</h2>
<!-- raw HTML omitted -->
<pre><code>No known vulnerabilities found
</code></pre>
<!-- raw HTML omitted -->
<h2>[2.4.1]</h2>
<h3>Enhancements</h3>
<ul>
<li><a
href="dd13728334"><code>dd1372833</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/13066">#13066</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../ahaoboy"><code>@ahaoboy</code></a>)
Add a generic to <code>emit</code> and <code>emitTo</code> functions for
the <code>payload</code> instead of the previously used type
(<code>unknown</code>).</li>
</ul>
<!-- raw HTML omitted -->
<pre><code>> @tauri-apps/api@2.4.1 npm-publish
/home/runner/work/tauri/tauri/packages/api
> pnpm build && cd ./dist && pnpm publish --access
public --loglevel silly --no-git-checks
<p>> <code>@tauri-apps/api</code><a
href="https://github.com/2"><code>@2</code></a>.4.1 build
/home/runner/work/tauri/tauri/packages/api
> rollup -c --configPlugin typescript</p>
<p>[36m
[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts,
./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts,
./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts,
./src/window.ts[22m → [1m./dist, ./dist[22m...[39m
[32mcreated [1m./dist, ./dist[22m in [1m1.6s[22m[39m
[36m
[1msrc/index.ts[22m →
[1m../../crates/tauri/scripts/bundle.global.js[22m...[39m
[32mcreated [1m../../crates/tauri/scripts/bundle.global.js[22m in
[1m1.9s[22m[39m
npm verbose cli /opt/hostedtoolcache/node/20.19.0/x64/bin/node
/opt/hostedtoolcache/node/20.19.0/x64/bin/npm
npm info using npm@10.8.2
npm info using node@v20.19.0
npm silly config
load:file:/opt/hostedtoolcache/node/20.19.0/x64/lib/node_modules/npm/npmrc
npm silly config load:file:/tmp/d1c2b5f0fc4957921faca86df134d25f/.npmrc
npm silly config load:file:/home/runner/work/_temp/.npmrc
npm silly config
load:file:/opt/hostedtoolcache/node/20.19.0/x64/etc/npmrc
npm verbose title npm publish tauri-apps-api-2.4.1.tgz
npm verbose argv "publish" "--ignore-scripts"
"tauri-apps-api-2.4.1.tgz" "--access"
"public" "--loglevel" "silly"
"--no-git-checks"
npm verbose logfile logs-max:10
dir:/home/runner/.npm/_logs/2025-04-01T17_21_18_329Z-
npm verbose logfile
/home/runner/.npm/_logs/2025-04-01T17_21_18_329Z-debug-0.log
npm verbose publish [ 'tauri-apps-api-2.4.1.tgz' ]
npm silly logfile done cleaning log files
npm notice
npm notice 📦 <code>@tauri-apps/api</code><a
href="https://github.com/2"><code>@2</code></a>.4.1
npm notice Tarball Contents
npm notice 89.3kB CHANGELOG.md
</tr></table>
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b154826881"><code>b154826</code></a>
apply version updates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13060">#13060</a>)</li>
<li><a
href="dade232592"><code>dade232</code></a>
chore: change bumps to patches</li>
<li><a
href="aa6b4d4edf"><code>aa6b4d4</code></a>
fix(cli): preserve null when merging patches (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13120">#13120</a>)</li>
<li><a
href="794af778e4"><code>794af77</code></a>
fix(cli): merge config based on the first one (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13117">#13117</a>)</li>
<li><a
href="4e22ae29d3"><code>4e22ae2</code></a>
chore(deps-dev): bump vite from 6.2.3 to 6.2.4 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13111">#13111</a>)</li>
<li><a
href="4ae14bf2f2"><code>4ae14bf</code></a>
fix: suppress deprecated warning in tray icon codegen (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13093">#13093</a>)</li>
<li><a
href="f805061d11"><code>f805061</code></a>
feat(cli): allow for toml and json5 files in --config arg (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13079">#13079</a>)</li>
<li><a
href="30beb6fee7"><code>30beb6f</code></a>
fix(cli): <code>tauri info</code> can't find the latest version for rust
crates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13096">#13096</a>)</li>
<li><a
href="22c7a877e3"><code>22c7a87</code></a>
chore(deps): update dependency rollup to v4.38.0 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13094">#13094</a>)</li>
<li><a
href="2138bbc212"><code>2138bbc</code></a>
fix(nsis): in wrong language if <code>SpanishInternational</code> is
included (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13087">#13087</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/tauri/compare/@tauri-apps/api-v2.4.0...@tauri-apps/api-v2.4.1">compare
view</a></li>
</ul>
</details>
<br />
Updates `@tauri-apps/cli` from 2.4.0 to 2.4.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri/releases"><code>@tauri-apps/cli</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@tauri-apps/cli</code> v2.4.1</h2>
<h2>[2.4.1]</h2>
<h3>Enhancements</h3>
<ul>
<li><a
href="f805061d11"><code>f805061d1</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/13079">#13079</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../Pietagorh"><code>@Pietagorh</code></a>)
Add support for passing TOML and JSON5 config files to
<code>--config</code> arg</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="794af778e4"><code>794af778e</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/13117">#13117</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../Legend-Master"><code>@Legend-Master</code></a>)
Fix setting merge config value to null with <code>--config</code> arg no
longer works</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Upgraded to <code>tauri-cli@2.4.1</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b154826881"><code>b154826</code></a>
apply version updates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13060">#13060</a>)</li>
<li><a
href="dade232592"><code>dade232</code></a>
chore: change bumps to patches</li>
<li><a
href="aa6b4d4edf"><code>aa6b4d4</code></a>
fix(cli): preserve null when merging patches (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13120">#13120</a>)</li>
<li><a
href="794af778e4"><code>794af77</code></a>
fix(cli): merge config based on the first one (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13117">#13117</a>)</li>
<li><a
href="4e22ae29d3"><code>4e22ae2</code></a>
chore(deps-dev): bump vite from 6.2.3 to 6.2.4 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13111">#13111</a>)</li>
<li><a
href="4ae14bf2f2"><code>4ae14bf</code></a>
fix: suppress deprecated warning in tray icon codegen (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13093">#13093</a>)</li>
<li><a
href="f805061d11"><code>f805061</code></a>
feat(cli): allow for toml and json5 files in --config arg (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13079">#13079</a>)</li>
<li><a
href="30beb6fee7"><code>30beb6f</code></a>
fix(cli): <code>tauri info</code> can't find the latest version for rust
crates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13096">#13096</a>)</li>
<li><a
href="22c7a877e3"><code>22c7a87</code></a>
chore(deps): update dependency rollup to v4.38.0 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13094">#13094</a>)</li>
<li><a
href="2138bbc212"><code>2138bbc</code></a>
fix(nsis): in wrong language if <code>SpanishInternational</code> is
included (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13087">#13087</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.4.0...@tauri-apps/cli-v2.4.1">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the tauri group in /rust with 1 update:
[tauri-winrt-notification](https://github.com/tauri-apps/winrt-notification).
Updates `tauri-winrt-notification` from 0.7.0 to 0.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/winrt-notification/releases">tauri-winrt-notification's
releases</a>.</em></p>
<blockquote>
<h2>tauri-winrt-notification v0.7.1</h2>
<p>Updating crates.io index
Locking 19 packages to latest compatible versions</p>
<!-- raw HTML omitted -->
<pre><code>Fetching advisory database from
`https://github.com/RustSec/advisory-db.git`
Loaded 734 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (20 crate dependencies)
</code></pre>
<!-- raw HTML omitted -->
<h2>[0.7.1]</h2>
<ul>
<li><a
href="3ab4d1867b"><code>3ab4d18</code></a>
(<a
href="https://redirect.github.com/tauri-apps/winrt-notification/pull/43">#43</a>
by <a
href="https://github.com/tauri-apps/winrt-notification/../../FabianLars"><code>@FabianLars</code></a>)
Update <code>windows</code> crate to 0.60. This bumps the MSRV to
1.74.</li>
</ul>
<!-- raw HTML omitted -->
<pre><code>Updating crates.io index
Packaging tauri-winrt-notification v0.7.1
(/home/runner/work/winrt-notification/winrt-notification)
Updating crates.io index
Packaged 31 files, 97.7KiB (44.2KiB compressed)
Uploading tauri-winrt-notification v0.7.1
(/home/runner/work/winrt-notification/winrt-notification)
Uploaded tauri-winrt-notification v0.7.1 to registry `crates-io`
note: waiting for `tauri-winrt-notification v0.7.1` to be available at
registry `crates-io`.
You may press ctrl-c to skip waiting; the crate should be available
shortly.
Published tauri-winrt-notification v0.7.1 at registry `crates-io`
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/winrt-notification/blob/dev/CHANGELOG.md">tauri-winrt-notification's
changelog</a>.</em></p>
<blockquote>
<h2>[0.7.1]</h2>
<ul>
<li><a
href="3ab4d1867b"><code>3ab4d18</code></a>
(<a
href="https://redirect.github.com/tauri-apps/winrt-notification/pull/43">#43</a>
by <a
href="https://github.com/tauri-apps/winrt-notification/../../FabianLars"><code>@FabianLars</code></a>)
Update <code>windows</code> crate to 0.60. This bumps the MSRV to
1.74.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c0b9b2fc14"><code>c0b9b2f</code></a>
feat: add button support (<a
href="https://redirect.github.com/tauri-apps/winrt-notification/issues/25">#25</a>)</li>
<li><a
href="b7bea80883"><code>b7bea80</code></a>
Publish New Versions (<a
href="https://redirect.github.com/tauri-apps/winrt-notification/issues/23">#23</a>)</li>
<li><a
href="3d49abcb88"><code>3d49abc</code></a>
fix(deps): update rust crate quick-xml to 0.31 (<a
href="https://redirect.github.com/tauri-apps/winrt-notification/issues/21">#21</a>)</li>
<li><a
href="657a812db8"><code>657a812</code></a>
chore(deps): update to windows-rs 0.56 (<a
href="https://redirect.github.com/tauri-apps/winrt-notification/issues/22">#22</a>)</li>
<li><a
href="e43754023c"><code>e437540</code></a>
Publish New Versions (<a
href="https://redirect.github.com/tauri-apps/winrt-notification/issues/19">#19</a>)</li>
<li><a
href="1427bbfadc"><code>1427bbf</code></a>
chore(deps): update <code>windows</code> crate to 0.54 (<a
href="https://redirect.github.com/tauri-apps/winrt-notification/issues/18">#18</a>)</li>
<li>See full diff in <a
href="https://github.com/tauri-apps/winrt-notification/compare/tauri-winrt-notification-v0.7...tauri-winrt-notification-v0.7.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [humantime](https://github.com/chronotope/humantime) from 2.1.0 to
2.2.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/chronotope/humantime/commits">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps
[tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace)
from 2.2.0 to 2.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/plugins-workspace/releases">tauri-plugin-dialog's
releases</a>.</em></p>
<blockquote>
<h2>opener-js v2.2.1</h2>
<h2>[2.2.1]</h2>
<ul>
<li><a
href="18dffc9dfe"><code>18dffc9d</code></a>
(<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/pull/2189">#2189</a>
by <a
href="https://github.com/tauri-apps/plugins-workspace/../../lucasfernog"><code>@lucasfernog</code></a>)
Fix usage on iOS.</li>
</ul>
<!-- raw HTML omitted -->
<pre><code>npm warn publish npm auto-corrected some errors in your
package.json when publishing. Please run "npm pkg fix" to
address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an
object
npm warn publish "repository.url" was normalized to
"git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦 @tauri-apps/plugin-opener@2.2.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.9kB README.md
npm notice 2.8kB dist-js/index.cjs
npm notice 1.8kB dist-js/index.d.ts
npm notice 2.7kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 729B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.2.1
npm notice filename: tauri-apps-plugin-opener-2.2.1.tgz
npm notice package size: 3.3 kB
npm notice unpacked size: 12.8 kB
npm notice shasum: cf0d74f683171d0cb31657baa417ad7b75cef4c0
npm notice integrity: sha512-zloo4xzBqeh36[...]S65GLVkeXTHPg==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and
public access
npm notice publish Signed provenance statement with source and build
information from GitHub Actions
npm notice publish Provenance statement published to transparency log:
https://search.sigstore.dev/?logIndex=154516065
+ @tauri-apps/plugin-opener@2.2.1
</code></pre>
<!-- raw HTML omitted -->
<h2>opener v2.2.1</h2>
<h2>[2.2.1]</h2>
<ul>
<li><a
href="18dffc9dfe"><code>18dffc9d</code></a>
(<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/pull/2189">#2189</a>
by <a
href="https://github.com/tauri-apps/plugins-workspace/../../lucasfernog"><code>@lucasfernog</code></a>)
Fix usage on iOS.</li>
</ul>
<!-- raw HTML omitted -->
<pre><code></tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b40a02c525"><code>b40a02c</code></a>
publish new versions (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2477">#2477</a>)</li>
<li><a
href="a1b3fa27f1"><code>a1b3fa2</code></a>
fix: Re-export api structs (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2515">#2515</a>)</li>
<li><a
href="e54cfcb261"><code>e54cfcb</code></a>
fix(updater): should be <code>log::debug</code> not <code>println</code>
(<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2514">#2514</a>)</li>
<li><a
href="22ba197b80"><code>22ba197</code></a>
chore(deps): update eslint monorepo to v9.22.0 (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2508">#2508</a>)</li>
<li><a
href="77520a3587"><code>77520a3</code></a>
chore(deps): update dependency rollup to v4.35.0 (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2511">#2511</a>)</li>
<li><a
href="dbc5fe120a"><code>dbc5fe1</code></a>
chore(deps): update dependency eslint-config-prettier to v10.1.1 (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2503">#2503</a>)</li>
<li><a
href="faefcc9fd8"><code>faefcc9</code></a>
feat(updater): add <code>configure_client</code> to
<code>UpdaterBuilder</code> (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2430">#2430</a>)</li>
<li><a
href="ac60d589ec"><code>ac60d58</code></a>
feat(updater): improve tracing and error logging (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2513">#2513</a>)</li>
<li><a
href="cb38f54f4a"><code>cb38f54</code></a>
HTTP add stream support (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2479">#2479</a>)</li>
<li><a
href="d37bbdef8d"><code>d37bbde</code></a>
fix(clipboard-manager): Wayland support (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2507">#2507</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/plugins-workspace/compare/os-v2.2.0...os-v2.2.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the tauri group in /rust with 4 updates:
[tauri](https://github.com/tauri-apps/tauri),
[tauri-build](https://github.com/tauri-apps/tauri),
[tauri-runtime](https://github.com/tauri-apps/tauri) and
[tauri-utils](https://github.com/tauri-apps/tauri).
Updates `tauri` from 2.4.0 to 2.4.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri/releases">tauri's
releases</a>.</em></p>
<blockquote>
<h2>tauri-runtime-wry v2.4.1</h2>
<!-- raw HTML omitted -->
<pre><code>Updating git repository
`https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21
(https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)`
was not used in the crate graph.
Check that the patched package version and available features are
compatible
with the dependency requirements. If the patch has a different version
from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not
enabled.
Locking 1015 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding axum v0.7.9 (available: v0.8.1)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.4.0)
Adding getrandom v0.2.15 (available: v0.3.1)
Adding html5ever v0.26.0 (available: v0.29.1)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.0.0)
Adding minisign v0.7.3 (available: v0.7.9)
Adding oxc_allocator v0.36.0 (available: v0.53.0)
Adding oxc_ast v0.36.0 (available: v0.53.0)
Adding oxc_parser v0.36.0 (available: v0.53.0)
Adding oxc_span v0.36.0 (available: v0.53.0)
Adding proc-macro-crate v2.0.0 (available: v2.0.2)
Adding rand v0.8.5 (available: v0.9.0)
Adding serialize-to-javascript v0.1.1 (available: v0.1.2)
Adding serialize-to-javascript-impl v0.1.1 (available: v0.1.2)
Adding tauri-utils v1.6.0 (available: v1.6.2)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding x509-certificate v0.23.1 (available: v0.24.0)
Fetching advisory database from
`https://github.com/RustSec/advisory-db.git`
Loaded 734 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1040 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
├── wry 0.50.1
│ └── tauri-runtime-wry 2.4.1
│ └── tauri 2.3.1
</tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b154826881"><code>b154826</code></a>
apply version updates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13060">#13060</a>)</li>
<li><a
href="dade232592"><code>dade232</code></a>
chore: change bumps to patches</li>
<li><a
href="aa6b4d4edf"><code>aa6b4d4</code></a>
fix(cli): preserve null when merging patches (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13120">#13120</a>)</li>
<li><a
href="794af778e4"><code>794af77</code></a>
fix(cli): merge config based on the first one (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13117">#13117</a>)</li>
<li><a
href="4e22ae29d3"><code>4e22ae2</code></a>
chore(deps-dev): bump vite from 6.2.3 to 6.2.4 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13111">#13111</a>)</li>
<li><a
href="4ae14bf2f2"><code>4ae14bf</code></a>
fix: suppress deprecated warning in tray icon codegen (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13093">#13093</a>)</li>
<li><a
href="f805061d11"><code>f805061</code></a>
feat(cli): allow for toml and json5 files in --config arg (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13079">#13079</a>)</li>
<li><a
href="30beb6fee7"><code>30beb6f</code></a>
fix(cli): <code>tauri info</code> can't find the latest version for rust
crates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13096">#13096</a>)</li>
<li><a
href="22c7a877e3"><code>22c7a87</code></a>
chore(deps): update dependency rollup to v4.38.0 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13094">#13094</a>)</li>
<li><a
href="2138bbc212"><code>2138bbc</code></a>
fix(nsis): in wrong language if <code>SpanishInternational</code> is
included (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13087">#13087</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/tauri/compare/tauri-v2.4.0...tauri-v2.4.1">compare
view</a></li>
</ul>
</details>
<br />
Updates `tauri-build` from 2.1.0 to 2.1.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri/releases">tauri-build's
releases</a>.</em></p>
<blockquote>
<h2>tauri-build v2.1.1</h2>
<!-- raw HTML omitted -->
<pre><code>Updating git repository
`https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21
(https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)`
was not used in the crate graph.
Check that the patched package version and available features are
compatible
with the dependency requirements. If the patch has a different version
from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not
enabled.
Locking 1021 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding axum v0.7.9 (available: v0.8.3)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.4.1)
Adding getrandom v0.2.15 (available: v0.3.2)
Adding html5ever v0.26.0 (available: v0.30.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.0.0)
Adding minisign v0.7.3 (available: v0.7.9)
Adding oxc_allocator v0.36.0 (available: v0.61.2)
Adding oxc_ast v0.36.0 (available: v0.61.2)
Adding oxc_parser v0.36.0 (available: v0.61.2)
Adding oxc_span v0.36.0 (available: v0.61.2)
Adding proc-macro-crate v2.0.0 (available: v2.0.2)
Adding rand v0.8.5 (available: v0.9.0)
Adding rpm v0.16.0 (available: v0.17.0)
Adding serialize-to-javascript v0.1.1 (available: v0.1.2)
Adding serialize-to-javascript-impl v0.1.1 (available: v0.1.2)
Adding tauri-utils v1.6.0 (available: v1.6.2)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding webview2-com v0.36.0 (available: v0.37.0)
Adding windows v0.60.0 (available: v0.61.1)
Adding x509-certificate v0.23.1 (available: v0.24.0)
Fetching advisory database from
`https://github.com/RustSec/advisory-db.git`
Loaded 748 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1046 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
</tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b154826881"><code>b154826</code></a>
apply version updates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13060">#13060</a>)</li>
<li><a
href="dade232592"><code>dade232</code></a>
chore: change bumps to patches</li>
<li><a
href="aa6b4d4edf"><code>aa6b4d4</code></a>
fix(cli): preserve null when merging patches (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13120">#13120</a>)</li>
<li><a
href="794af778e4"><code>794af77</code></a>
fix(cli): merge config based on the first one (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13117">#13117</a>)</li>
<li><a
href="4e22ae29d3"><code>4e22ae2</code></a>
chore(deps-dev): bump vite from 6.2.3 to 6.2.4 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13111">#13111</a>)</li>
<li><a
href="4ae14bf2f2"><code>4ae14bf</code></a>
fix: suppress deprecated warning in tray icon codegen (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13093">#13093</a>)</li>
<li><a
href="f805061d11"><code>f805061</code></a>
feat(cli): allow for toml and json5 files in --config arg (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13079">#13079</a>)</li>
<li><a
href="30beb6fee7"><code>30beb6f</code></a>
fix(cli): <code>tauri info</code> can't find the latest version for rust
crates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13096">#13096</a>)</li>
<li><a
href="22c7a877e3"><code>22c7a87</code></a>
chore(deps): update dependency rollup to v4.38.0 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13094">#13094</a>)</li>
<li><a
href="2138bbc212"><code>2138bbc</code></a>
fix(nsis): in wrong language if <code>SpanishInternational</code> is
included (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13087">#13087</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/tauri/compare/tauri-build-v2.1.0...tauri-build-v2.1.1">compare
view</a></li>
</ul>
</details>
<br />
Updates `tauri-runtime` from 2.5.0 to 2.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri/releases">tauri-runtime's
releases</a>.</em></p>
<blockquote>
<h2>tauri-runtime v2.5.1</h2>
<!-- raw HTML omitted -->
<pre><code>Updating git repository
`https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21
(https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)`
was not used in the crate graph.
Check that the patched package version and available features are
compatible
with the dependency requirements. If the patch has a different version
from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not
enabled.
Locking 1021 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding axum v0.7.9 (available: v0.8.3)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.4.1)
Adding getrandom v0.2.15 (available: v0.3.2)
Adding html5ever v0.26.0 (available: v0.30.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.0.0)
Adding minisign v0.7.3 (available: v0.7.9)
Adding oxc_allocator v0.36.0 (available: v0.61.2)
Adding oxc_ast v0.36.0 (available: v0.61.2)
Adding oxc_parser v0.36.0 (available: v0.61.2)
Adding oxc_span v0.36.0 (available: v0.61.2)
Adding proc-macro-crate v2.0.0 (available: v2.0.2)
Adding rand v0.8.5 (available: v0.9.0)
Adding rpm v0.16.0 (available: v0.17.0)
Adding serialize-to-javascript v0.1.1 (available: v0.1.2)
Adding serialize-to-javascript-impl v0.1.1 (available: v0.1.2)
Adding tauri-utils v1.6.0 (available: v1.6.2)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding webview2-com v0.36.0 (available: v0.37.0)
Adding windows v0.60.0 (available: v0.61.1)
Adding x509-certificate v0.23.1 (available: v0.24.0)
Fetching advisory database from
`https://github.com/RustSec/advisory-db.git`
Loaded 748 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1046 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
</tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b154826881"><code>b154826</code></a>
apply version updates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13060">#13060</a>)</li>
<li><a
href="dade232592"><code>dade232</code></a>
chore: change bumps to patches</li>
<li><a
href="aa6b4d4edf"><code>aa6b4d4</code></a>
fix(cli): preserve null when merging patches (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13120">#13120</a>)</li>
<li><a
href="794af778e4"><code>794af77</code></a>
fix(cli): merge config based on the first one (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13117">#13117</a>)</li>
<li><a
href="4e22ae29d3"><code>4e22ae2</code></a>
chore(deps-dev): bump vite from 6.2.3 to 6.2.4 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13111">#13111</a>)</li>
<li><a
href="4ae14bf2f2"><code>4ae14bf</code></a>
fix: suppress deprecated warning in tray icon codegen (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13093">#13093</a>)</li>
<li><a
href="f805061d11"><code>f805061</code></a>
feat(cli): allow for toml and json5 files in --config arg (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13079">#13079</a>)</li>
<li><a
href="30beb6fee7"><code>30beb6f</code></a>
fix(cli): <code>tauri info</code> can't find the latest version for rust
crates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13096">#13096</a>)</li>
<li><a
href="22c7a877e3"><code>22c7a87</code></a>
chore(deps): update dependency rollup to v4.38.0 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13094">#13094</a>)</li>
<li><a
href="2138bbc212"><code>2138bbc</code></a>
fix(nsis): in wrong language if <code>SpanishInternational</code> is
included (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13087">#13087</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/tauri/compare/tauri-runtime-v2.5.0...tauri-runtime-v2.5.1">compare
view</a></li>
</ul>
</details>
<br />
Updates `tauri-utils` from 2.3.0 to 2.3.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri/releases">tauri-utils's
releases</a>.</em></p>
<blockquote>
<h2>tauri-utils v2.3.1</h2>
<!-- raw HTML omitted -->
<pre><code>Updating git repository
`https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21
(https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)`
was not used in the crate graph.
Check that the patched package version and available features are
compatible
with the dependency requirements. If the patch has a different version
from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not
enabled.
Locking 1021 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding axum v0.7.9 (available: v0.8.3)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.4.1)
Adding getrandom v0.2.15 (available: v0.3.2)
Adding html5ever v0.26.0 (available: v0.30.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.0.0)
Adding minisign v0.7.3 (available: v0.7.9)
Adding oxc_allocator v0.36.0 (available: v0.61.2)
Adding oxc_ast v0.36.0 (available: v0.61.2)
Adding oxc_parser v0.36.0 (available: v0.61.2)
Adding oxc_span v0.36.0 (available: v0.61.2)
Adding proc-macro-crate v2.0.0 (available: v2.0.2)
Adding rand v0.8.5 (available: v0.9.0)
Adding rpm v0.16.0 (available: v0.17.0)
Adding serialize-to-javascript v0.1.1 (available: v0.1.2)
Adding serialize-to-javascript-impl v0.1.1 (available: v0.1.2)
Adding tauri-utils v1.6.0 (available: v1.6.2)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding webview2-com v0.36.0 (available: v0.37.0)
Adding windows v0.60.0 (available: v0.61.1)
Adding x509-certificate v0.23.1 (available: v0.24.0)
Fetching advisory database from
`https://github.com/RustSec/advisory-db.git`
Loaded 748 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1046 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
</tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b154826881"><code>b154826</code></a>
apply version updates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13060">#13060</a>)</li>
<li><a
href="dade232592"><code>dade232</code></a>
chore: change bumps to patches</li>
<li><a
href="aa6b4d4edf"><code>aa6b4d4</code></a>
fix(cli): preserve null when merging patches (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13120">#13120</a>)</li>
<li><a
href="794af778e4"><code>794af77</code></a>
fix(cli): merge config based on the first one (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13117">#13117</a>)</li>
<li><a
href="4e22ae29d3"><code>4e22ae2</code></a>
chore(deps-dev): bump vite from 6.2.3 to 6.2.4 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13111">#13111</a>)</li>
<li><a
href="4ae14bf2f2"><code>4ae14bf</code></a>
fix: suppress deprecated warning in tray icon codegen (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13093">#13093</a>)</li>
<li><a
href="f805061d11"><code>f805061</code></a>
feat(cli): allow for toml and json5 files in --config arg (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13079">#13079</a>)</li>
<li><a
href="30beb6fee7"><code>30beb6f</code></a>
fix(cli): <code>tauri info</code> can't find the latest version for rust
crates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13096">#13096</a>)</li>
<li><a
href="22c7a877e3"><code>22c7a87</code></a>
chore(deps): update dependency rollup to v4.38.0 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13094">#13094</a>)</li>
<li><a
href="2138bbc212"><code>2138bbc</code></a>
fix(nsis): in wrong language if <code>SpanishInternational</code> is
included (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13087">#13087</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/tauri/compare/tauri-utils-v2.3.0...tauri-utils-v2.3.1">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [ring](https://github.com/briansmith/ring) from 0.17.13 to
0.17.14.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/briansmith/ring/blob/main/RELEASES.md">ring's
changelog</a>.</em></p>
<blockquote>
<h1>Version 0.17.14 (2025-03-11)</h1>
<p>Fixed a performance bug in the AVX2-based AES-GCM implementation
added in
<em>ring</em> 0.17.13. This will be another notable performance
improvement for most
newish x86-64 systems. The performance issue impacted not just
AES-GCM.</p>
<p>Compatibility with GNU binutils 2.29 (used on Amazon Linux 2), and
probably
even earlier versions, was restored. It is expected that <em>ring</em>
0.17.14 will
build on all the systems that 0.17.12 would build on.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/briansmith/ring/commits">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the cargo group in /rust with 1 update:
[tokio](https://github.com/tokio-rs/tokio).
Updates `tokio` from 1.43.0 to 1.44.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tokio-rs/tokio/releases">tokio's
releases</a>.</em></p>
<blockquote>
<h2>Tokio v1.44.2</h2>
<p>This release fixes a soundness issue in the broadcast channel. The
channel
accepts values that are <code>Send</code> but <code>!Sync</code>.
Previously, the channel called
<code>clone()</code> on these values without synchronizing. This release
fixes the channel
by synchronizing calls to <code>.clone()</code> (Thanks Austin Bonander
for finding and
reporting the issue).</p>
<h3>Fixed</h3>
<ul>
<li>sync: synchronize <code>clone()</code> call in broadcast channel (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7232">#7232</a>)</li>
</ul>
<p><a
href="https://redirect.github.com/tokio-rs/tokio/issues/7232">#7232</a>:
<a
href="https://redirect.github.com/tokio-rs/tokio/pull/7232">tokio-rs/tokio#7232</a></p>
<h2>Tokio v1.44.1</h2>
<h1>1.44.1 (March 13th, 2025)</h1>
<h3>Fixed</h3>
<ul>
<li>rt: skip defer queue in <code>block_in_place</code> context (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7216">#7216</a>)</li>
</ul>
<p><a
href="https://redirect.github.com/tokio-rs/tokio/issues/7216">#7216</a>:
<a
href="https://redirect.github.com/tokio-rs/tokio/pull/7216">tokio-rs/tokio#7216</a></p>
<h2>Tokio v1.44.0</h2>
<h1>1.44.0 (March 7th, 2025)</h1>
<p>This release changes the <code>from_std</code> method on sockets to
panic if a blocking socket is provided. We determined this change is not
a breaking change as Tokio is not intended to operate using blocking
sockets. Doing so results in runtime hangs and should be considered a
bug. Accidentally passing a blocking socket to Tokio is one of the most
common user mistakes. If this change causes an issue for you, please
comment on <a
href="https://redirect.github.com/tokio-rs/tokio/issues/7172">#7172</a>.</p>
<h3>Added</h3>
<ul>
<li>coop: add <code>task::coop</code> module (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7116">#7116</a>)</li>
<li>process: add <code>Command::get_kill_on_drop()</code> (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7086">#7086</a>)</li>
<li>sync: add <code>broadcast::Sender::closed</code> (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/6685">#6685</a>,
<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7090">#7090</a>)</li>
<li>sync: add <code>broadcast::WeakSender</code> (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7100">#7100</a>)</li>
<li>sync: add <code>oneshot::Receiver::is_empty()</code> (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7153">#7153</a>)</li>
<li>sync: add <code>oneshot::Receiver::is_terminated()</code> (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7152">#7152</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>fs: empty reads on <code>File</code> should not start a background
read (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7139">#7139</a>)</li>
<li>process: calling <code>start_kill</code> on exited child should not
fail (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7160">#7160</a>)</li>
<li>signal: fix <code>CTRL_CLOSE</code>, <code>CTRL_LOGOFF</code>,
<code>CTRL_SHUTDOWN</code> on windows (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7122">#7122</a>)</li>
<li>sync: properly handle panic during mpsc drop (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7094">#7094</a>)</li>
</ul>
<h3>Changes</h3>
<ul>
<li>runtime: clean up magic number in registration set (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7112">#7112</a>)</li>
<li>coop: make coop yield using waker defer strategy (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7185">#7185</a>)</li>
<li>macros: make <code>select!</code> budget-aware (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7164">#7164</a>)</li>
<li>net: panic when passing a blocking socket to <code>from_std</code>
(<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7166">#7166</a>)</li>
<li>io: clean up buffer casts (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7142">#7142</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ec4b1d7215"><code>ec4b1d7</code></a>
chore: forward port 1.43.x</li>
<li><a
href="e3c3a56718"><code>e3c3a56</code></a>
Merge branch 'tokio-1.43.x' into forward-port-1.43.x</li>
<li><a
href="a7b658c35b"><code>a7b658c</code></a>
chore: prepare Tokio v1.43.1 release</li>
<li><a
href="c1c8d1033d"><code>c1c8d10</code></a>
Merge remote-tracking branch 'origin/tokio-1.38.x' into
forward-port-1.38.x</li>
<li><a
href="aa303bc205"><code>aa303bc</code></a>
chore: prepare Tokio v1.38.2 release</li>
<li><a
href="7b6ccb515f"><code>7b6ccb5</code></a>
chore: backport CI fixes</li>
<li><a
href="4b174ce2c9"><code>4b174ce</code></a>
sync: fix cloning value when receiving from broadcast channel</li>
<li><a
href="d413c9c02a"><code>d413c9c</code></a>
chore: prepare Tokio v1.44.1 (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7217">#7217</a>)</li>
<li><a
href="addbfb9204"><code>addbfb9</code></a>
rt: skip defer queue in <code>block_in_place</code> context (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7216">#7216</a>)</li>
<li><a
href="8182ecf262"><code>8182ecf</code></a>
chore: prepare Tokio v1.44.0 (<a
href="https://redirect.github.com/tokio-rs/tokio/issues/7202">#7202</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tokio-rs/tokio/compare/tokio-1.43.0...tokio-1.44.2">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/firezone/firezone/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The original idea of this feature flag was that we can easily disable
the eBPF router in case it causes issues in production. However,
something seems to be not working in reliably turning this on / off.
Without an explicit toggle of the feature-flag, the eBPF program doesn't
seem to be loaded correctly. The uncertainty in this makes me not the
trust the metrics that we are seeing because we don't know, whether
really all relays are using the eBPF router to relay TURN traffic.
In order to draw truthful conclusions as too how much traffic we are
relaying via eBPF, this patch removes the feature flag again. As of
#8656, we can disable the eBPF program by not setting the
`EBPF_OFFLOADING` env variable. This requires a re-deploy / restart of
relays to take effect which isn't quite as fast as toggling a feature
flag but much reliable and easier to maintain.
Our feature-flags are currently coupled to our Firezone ID. Without a
Firezone ID, we cannot evaluate feature flags. In order to be able to
use the feature flags to enable / disable the eBPF TURN router, we see a
random UUID as the Firezone ID upon startup of the relay.
Not setting this causes the eBPF router to currently be instantly
disabled as soon as we start up because the default of the feature flag
is false and we don't reevaluate it later due to the missing ID.
It happens a bunch of times to me during testing that I'd forget to set
the right interface onto which the eBPF kernel should be loaded and was
wondering why it didn't work. Defaulting to `eth0` wasn't a very smart
decision because it means users cannot disable the eBPF kernel at all
(other than via the feature-flag).
It makes more sense to default to not loading the program at all AND
hard-fail if we are requested to load it but cannot. This allows us to
catch configuration errors early.
This PR implements a feature-flag in PostHog that we can use to toggle
the use of the eBPF data plane at runtime. At every tick of the
event-loop, the relay will compare the (cached) configuration of the
eBPF program with the (cached) value of the feature-flag. If they
differ, the flag will be updated and upon the next packet, the eBPF
program will act accordingly.
Feature-flags are re-evaluated every 5 minutes, meaning there is some
delay until this gets applied.
The default value of our all our feature-flags is `false`, meaning if
there is some problem with evaluating them, we'd turn the eBPF data
plane off. Performing routing in userspace is slower but it is a safer
default.
Resolves: #8548
The name `slice_mut_at` came from a time where this function actually
returned a slice of bytes. It has since been refactored to return a
mutable reference to a type T that gets set by the caller. Thus,
`ref_mut_at` is a much more fitting name.
As per PostHog's recommendation [0], we now use different projects to
manage the feature-flags. This allows us to turn feature flags in
staging or production on / off without affecting the other.
[0]: https://posthog.com/tutorials/multiple-environments
The default here is 2 which is nowhere near enough of a batch-size for
us to read all perf events generated by the kernel when it is actually
relaying data via eBPF (we generate 1 perf event per relayed packet). If
we don't read them fast enough, the kernel has to drop some, meaning we
skew our metrics as to how much data we've relayed via eBPF.
This has been tested in my local setup and I've seen north of 500 events
being read in a single batch now.
---------
Signed-off-by: Thomas Eizinger <thomas@eizinger.io>
Bumps [flowbite](https://github.com/themesberg/flowbite) from 3.1.1 to
3.1.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/themesberg/flowbite/releases">flowbite's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.2</h2>
<ul>
<li>create new theme file to move CSS variables</li>
<li>update quickstart guide to reflect this change</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4ffec1008a"><code>4ffec10</code></a>
refactor(flowbite): move color theme variables to css file</li>
<li><a
href="38984c12ae"><code>38984c1</code></a>
refactor(colors): move colors from plugin to theme file</li>
<li><a
href="23732fd518"><code>23732fd</code></a>
docs(datepicker): specify that you need to set source</li>
<li>See full diff in <a
href="https://github.com/themesberg/flowbite/compare/v3.1.1...v3.1.2">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the cargo group in /rust with 1 update:
[tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace).
Updates `tauri-plugin-shell` from 2.2.0 to 2.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/plugins-workspace/releases">tauri-plugin-shell's
releases</a>.</em></p>
<blockquote>
<h2>opener-js v2.2.1</h2>
<h2>[2.2.1]</h2>
<ul>
<li><a
href="18dffc9dfe"><code>18dffc9d</code></a>
(<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/pull/2189">#2189</a>
by <a
href="https://github.com/tauri-apps/plugins-workspace/../../lucasfernog"><code>@lucasfernog</code></a>)
Fix usage on iOS.</li>
</ul>
<!-- raw HTML omitted -->
<pre><code>npm warn publish npm auto-corrected some errors in your
package.json when publishing. Please run "npm pkg fix" to
address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an
object
npm warn publish "repository.url" was normalized to
"git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦 @tauri-apps/plugin-opener@2.2.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.9kB README.md
npm notice 2.8kB dist-js/index.cjs
npm notice 1.8kB dist-js/index.d.ts
npm notice 2.7kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 729B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.2.1
npm notice filename: tauri-apps-plugin-opener-2.2.1.tgz
npm notice package size: 3.3 kB
npm notice unpacked size: 12.8 kB
npm notice shasum: cf0d74f683171d0cb31657baa417ad7b75cef4c0
npm notice integrity: sha512-zloo4xzBqeh36[...]S65GLVkeXTHPg==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and
public access
npm notice publish Signed provenance statement with source and build
information from GitHub Actions
npm notice publish Provenance statement published to transparency log:
https://search.sigstore.dev/?logIndex=154516065
+ @tauri-apps/plugin-opener@2.2.1
</code></pre>
<!-- raw HTML omitted -->
<h2>opener v2.2.1</h2>
<h2>[2.2.1]</h2>
<ul>
<li><a
href="18dffc9dfe"><code>18dffc9d</code></a>
(<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/pull/2189">#2189</a>
by <a
href="https://github.com/tauri-apps/plugins-workspace/../../lucasfernog"><code>@lucasfernog</code></a>)
Fix usage on iOS.</li>
</ul>
<!-- raw HTML omitted -->
<pre><code></tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b40a02c525"><code>b40a02c</code></a>
publish new versions (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2477">#2477</a>)</li>
<li><a
href="a1b3fa27f1"><code>a1b3fa2</code></a>
fix: Re-export api structs (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2515">#2515</a>)</li>
<li><a
href="e54cfcb261"><code>e54cfcb</code></a>
fix(updater): should be <code>log::debug</code> not <code>println</code>
(<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2514">#2514</a>)</li>
<li><a
href="22ba197b80"><code>22ba197</code></a>
chore(deps): update eslint monorepo to v9.22.0 (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2508">#2508</a>)</li>
<li><a
href="77520a3587"><code>77520a3</code></a>
chore(deps): update dependency rollup to v4.35.0 (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2511">#2511</a>)</li>
<li><a
href="dbc5fe120a"><code>dbc5fe1</code></a>
chore(deps): update dependency eslint-config-prettier to v10.1.1 (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2503">#2503</a>)</li>
<li><a
href="faefcc9fd8"><code>faefcc9</code></a>
feat(updater): add <code>configure_client</code> to
<code>UpdaterBuilder</code> (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2430">#2430</a>)</li>
<li><a
href="ac60d589ec"><code>ac60d58</code></a>
feat(updater): improve tracing and error logging (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2513">#2513</a>)</li>
<li><a
href="cb38f54f4a"><code>cb38f54</code></a>
HTTP add stream support (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2479">#2479</a>)</li>
<li><a
href="d37bbdef8d"><code>d37bbde</code></a>
fix(clipboard-manager): Wayland support (<a
href="https://redirect.github.com/tauri-apps/plugins-workspace/issues/2507">#2507</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/plugins-workspace/compare/os-v2.2.0...os-v2.2.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/firezone/firezone/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This contains useful utilities like `xdpdump` which can be used on the
Relays to debug eBPF codepaths.
Build this on the Relays themselves can take prohibitively long, so this
image has been pushed to
`us-east1-docker.pkg.dev/firezone-staging/firezone/xdp-tools:latest`.
Instead of passing just a 4-byte array, we can pass a `CdHdr` struct
that we have already defined. This is more type-safe and correctly
captures the invariant of the order of fields in the header.
When we decide to drop a packet, it means something is seriously off and
we should look into it. These warnings will propagate to userspace and
trigger a warning that gets reported to Sentry (if telemetry is
enabled).
Similar to IPv4, IPv6 and UDP, this adds a debug log describing how we
are updating the Ethernet header of a packet.
---------
Signed-off-by: Thomas Eizinger <thomas@eizinger.io>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 6.2.3 to 6.2.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.2.4/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v6.2.4/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->6.2.4 (2025-03-31)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: fs check in transform middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761">#19761</a>)
(<a
href="7a4fabab6a">7a4faba</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/19761">#19761</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="037f801075"><code>037f801</code></a>
release: v6.2.4</li>
<li><a
href="7a4fabab6a"><code>7a4faba</code></a>
fix: fs check in transform middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761">#19761</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v6.2.4/packages/vite">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the tauri group in /rust/gui-client with 2 updates:
[@tauri-apps/api](https://github.com/tauri-apps/tauri) and
[@tauri-apps/cli](https://github.com/tauri-apps/tauri).
Updates `@tauri-apps/api` from 2.3.0 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri/releases"><code>@tauri-apps/api</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@tauri-apps/api</code> v2.4.0</h2>
<!-- raw HTML omitted -->
<pre><code>No known vulnerabilities found
</code></pre>
<!-- raw HTML omitted -->
<h2>[2.4.0]</h2>
<h3>New Features</h3>
<ul>
<li><a
href="d8059bad3c"><code>d8059bad3</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12900">#12900</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../Simon-Laux"><code>@Simon-Laux</code></a>)
add <code>AppHandle.fetch_data_store_identifiers</code> and
<code>AppHandle.remove_data_store</code> (macOS and iOS only)</li>
<li><a
href="20c1906912"><code>20c190691</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12821">#12821</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../Simon-Laux"><code>@Simon-Laux</code></a>)
Added <code>WindowOptions::javascriptDisabled</code> and
<code>WebviewOptions::javascriptDisabled</code>.</li>
<li><a
href="060de5bbdd"><code>060de5bbd</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12837">#12837</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../niladrix719"><code>@niladrix719</code></a>)
Added <code>getIdentifier()</code> function to get the application
identifier configured in tauri.conf.json</li>
<li><a
href="be2e6b85fe"><code>be2e6b85f</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12944">#12944</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../Simon-Laux"><code>@Simon-Laux</code></a>)
Added <code>Window#isAlwaysOnTop</code> and
<code>WebviewWindow#isAlwaysOnTop</code> methods.</li>
<li><a
href="bcdd510254"><code>bcdd51025</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/13012">#13012</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../lucasfernog"><code>@lucasfernog</code></a>)
The <code>path</code> basename and extname APIs now accept Android
content URIs, such as the paths returned by the dialog plugin.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="3a74dc8f34"><code>3a74dc8f3</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12935">#12935</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../tk103331"><code>@tk103331</code></a>)
Fix <code>Webview.close</code> always fail with command not found</li>
</ul>
<!-- raw HTML omitted -->
<pre><code>> @tauri-apps/api@2.4.0 npm-publish
/home/runner/work/tauri/tauri/packages/api
> pnpm build && cd ./dist && pnpm publish --access
public --loglevel silly --no-git-checks
<p>> <code>@tauri-apps/api</code><a
href="https://github.com/2"><code>@2</code></a>.4.0 build
/home/runner/work/tauri/tauri/packages/api
> rollup -c --configPlugin typescript</p>
<p>[36m
[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts,
./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts,
./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts,
./src/window.ts[22m → [1m./dist, ./dist[22m...[39m
[32mcreated [1m./dist, ./dist[22m in [1m1.5s[22m[39m
[36m
[1msrc/index.ts[22m →
[1m../../crates/tauri/scripts/bundle.global.js[22m...[39m
[32mcreated [1m../../crates/tauri/scripts/bundle.global.js[22m in
[1m1.9s[22m[39m
npm verbose cli /opt/hostedtoolcache/node/20.19.0/x64/bin/node
/opt/hostedtoolcache/node/20.19.0/x64/bin/npm
npm info using npm@10.8.2
npm info using node@v20.19.0
npm silly config
load:file:/opt/hostedtoolcache/node/20.19.0/x64/lib/node_modules/npm/npmrc
npm silly config load:file:/tmp/72821e3a5f1577c84d7d9498bee4667c/.npmrc
npm silly config load:file:/home/runner/work/_temp/.npmrc
npm silly config
load:file:/opt/hostedtoolcache/node/20.19.0/x64/etc/npmrc
npm verbose title npm publish tauri-apps-api-2.4.0.tgz
npm verbose argv "publish" "--ignore-scripts"
"tauri-apps-api-2.4.0.tgz" "--access"
"public" "--loglevel" "silly"
"--no-git-checks"
</tr></table>
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="be3a79c864"><code>be3a79c</code></a>
apply version updates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/12856">#12856</a>)</li>
<li><a
href="ba42a1f553"><code>ba42a1f</code></a>
chore: pin tao and wry to latest patch versions</li>
<li><a
href="1cd8f55eed"><code>1cd8f55</code></a>
fix: don't ship global api bundle if withGlobalTauri is false (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13033">#13033</a>)</li>
<li><a
href="8603e42a6b"><code>8603e42</code></a>
fix: channel no longer being always allowed (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13032">#13032</a>)</li>
<li><a
href="c32bd722d3"><code>c32bd72</code></a>
prettify: Remove beta tag and alert users that tauri for android
currently do...</li>
<li><a
href="bcdd510254"><code>bcdd510</code></a>
feat(core): resolve file names from Android content URIs (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13012">#13012</a>)</li>
<li><a
href="71cb1e26d7"><code>71cb1e2</code></a>
docs: update <code>.disable_javascript()</code> docs (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13013">#13013</a>)</li>
<li><a
href="b459f1d405"><code>b459f1d</code></a>
docs: improve Capability docs: mention webviews (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13015">#13015</a>)</li>
<li><a
href="8cc0067165"><code>8cc0067</code></a>
chore(deps): bump zip from 2.2.2 to 2.3.0 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13016">#13016</a>)</li>
<li><a
href="f2c94aaca0"><code>f2c94aa</code></a>
feat(core): add startIntentSenderForResult Android API for plugins (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/12682">#12682</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/tauri/compare/@tauri-apps/api-v2.3.0...@tauri-apps/api-v2.4.0">compare
view</a></li>
</ul>
</details>
<br />
Updates `@tauri-apps/cli` from 2.3.1 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri/releases"><code>@tauri-apps/cli</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@tauri-apps/cli</code> v2.4.0</h2>
<h2>[2.4.0]</h2>
<h3>New Features</h3>
<ul>
<li><a
href="d91bfa5cb9"><code>d91bfa5cb</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12970">#12970</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../lucasfernog"><code>@lucasfernog</code></a>)
Allow merging multiple configuration values on <code>tauri dev</code>,
<code>tauri build</code>, <code>tauri bundle</code>, <code>tauri android
dev</code>, <code>tauri android build</code>, <code>tauri ios dev</code>
and <code>tauri ios build</code>.</li>
<li><a
href="30f5a1553d"><code>30f5a1553</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12366">#12366</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../FabianLars"><code>@FabianLars</code></a>)
Added <code>trafficLightPosition</code> window configuration to set the
traffic light buttons position on macOS.</li>
</ul>
<h3>Enhancements</h3>
<ul>
<li><a
href="f981a5ee8b"><code>f981a5ee8</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12602">#12602</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../kxxt"><code>@kxxt</code></a>)
Add basic support for linux riscv64 platform.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="0c4700e990"><code>0c4700e99</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12985">#12985</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../FabianLars"><code>@FabianLars</code></a>)
The cli will now accept <code>--bundles updater</code> again. It's still
no-op as it has been for all v2 versions. If you want to build updater
artifacts, enable <code>createUpdaterArtifacts</code> in
<code>tauri.conf.json</code>.</li>
<li><a
href="b83921226c"><code>b83921226</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12977">#12977</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../lucasfernog"><code>@lucasfernog</code></a>)
Fix <code>tauri ios</code> commands using the wrong working directory
with <code>bun@>1.2</code>.</li>
<li><a
href="f268b3dbdf"><code>f268b3dbd</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri/pull/12871">#12871</a>
by <a
href="https://www.github.com/tauri-apps/tauri/../../lucasfernog"><code>@lucasfernog</code></a>)
Ignore parent .gitignore files on the Tauri project path detection.</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Upgraded to <code>tauri-cli@2.4.0</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="be3a79c864"><code>be3a79c</code></a>
apply version updates (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/12856">#12856</a>)</li>
<li><a
href="ba42a1f553"><code>ba42a1f</code></a>
chore: pin tao and wry to latest patch versions</li>
<li><a
href="1cd8f55eed"><code>1cd8f55</code></a>
fix: don't ship global api bundle if withGlobalTauri is false (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13033">#13033</a>)</li>
<li><a
href="8603e42a6b"><code>8603e42</code></a>
fix: channel no longer being always allowed (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13032">#13032</a>)</li>
<li><a
href="c32bd722d3"><code>c32bd72</code></a>
prettify: Remove beta tag and alert users that tauri for android
currently do...</li>
<li><a
href="bcdd510254"><code>bcdd510</code></a>
feat(core): resolve file names from Android content URIs (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13012">#13012</a>)</li>
<li><a
href="71cb1e26d7"><code>71cb1e2</code></a>
docs: update <code>.disable_javascript()</code> docs (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13013">#13013</a>)</li>
<li><a
href="b459f1d405"><code>b459f1d</code></a>
docs: improve Capability docs: mention webviews (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13015">#13015</a>)</li>
<li><a
href="8cc0067165"><code>8cc0067</code></a>
chore(deps): bump zip from 2.2.2 to 2.3.0 (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/13016">#13016</a>)</li>
<li><a
href="f2c94aaca0"><code>f2c94aa</code></a>
feat(core): add startIntentSenderForResult Android API for plugins (<a
href="https://redirect.github.com/tauri-apps/tauri/issues/12682">#12682</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.3.1...@tauri-apps/cli-v2.4.0">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
It appears that the gVNIC driver in Google Cloud doesn't give us enough
headroom to use `bpf_xdp_adjust_head` with a delta of 4 bytes.
Currently, we are loading the XDP program with default flags. By loading
it explicitly in SKB mode, we should be able to bypass these driver
limitations at the expense of some performance (which should still be
better than userspace!).
Related:
https://github.com/GoogleCloudPlatform/compute-virtual-ethernet-linux/issues/70
At present, we only check for the return value of the various helper
functions and bail out if they fail. What we don't learn is what the
actual return code is. To further help with debugging, we include the
return code in the error so we can print it later.
We can't use the formatting macro within the `write` function so we need
to stitch the message together ourselves.
In case any of the xdp store/adjust/load functions fail, we need to drop
the packet. By the time we get to these functions, we have already
overwrote the Ethernet, IP and UDP headers and would only need to copy
them either forwards or backwards to get rid of or add the channel data
header. Forwarding these packets to userspace is pointless.
Currently, the relays eBPF module only supports routing from IPv4 to
IPv4 as well as IPv6 to IPv6. In general, TURN servers can also route
from IPv4 to IPv6 and vice versa. Our userspace routing supports that
but doing the same in the eBPF code is a bit more involved. We'd need to
move around the headers a bit more (IPv4 and IPv6 headers are different
in size), as well as configure the respective "source" address for each
interface. Currently, we simply take the destination address of the
incoming packet as the new source address. When routing across IP
versions, that doesn't work.
To gain some more insight into how often this happens, we add these
additional maps and populate them. This allows us to emit a dedicated
log message whenever we encounter a packet for such a mapping.
First, we always do check for an entry in the maps that we can handle.
If we can't we check the other map and special-case the error.
Otherwise, we fall back to the previous "no entry" error. We shouldn't
really see these "no entry" errors anymore now, unless someone starts
probing our relays for active channels.
Our idle connection detection works based on incoming and outgoing
packets, whichever one happened later. If we have not received or sent
packets for longer than `MAX_IDLE`, we transition into idle mode where
we configure our ICE agent to only send binding requests every 60
seconds.
Our ICE timeout in non-idle mode is just north of 10 seconds (the
formula is a bit tricky so don't have the accurate number). This can
cause a problem whenever a Gateway disappears. We leave the idle mode as
soon as we send a packet through the Gateway. Thus, what we intended to
happen is that, as long as you keep trying to connect to the Gateway, we
will leave the idle mode, increase our rate of STUN bindings through the
ICE agent and detect within ~10s that the Gateway is gone.
What actually happens is that, IF whatever resource you are trying to
talk to is a DNS resource (which is very likely) and the application
starts off with a DNS query, then we will reset the local DNS resource
NAT state and ping the Gateway to set up the NAT again (we do this to
ensure we don't have stale DNS entries on the Gateway). This message is
only sent once and all other packets are buffered. Thus, the connection
will go back to idle before the newly sent STUN binding requests can
determine that the connection is actually broken.
Resolves: #8551
At present, the eBPF code assumes that the incoming packet needs to be
sent back to the same MAC address that it came from. This is only true
if there is at least one IP layer hop in-between the relay and the
Client / Gateway. When setting up Firezone in my local LAN to debug the
eBPF code, all components are within the same subnet and thus can send
packets directly to each other, without having to go through the router.
In such a scenario, simply swapping the Ethernet addresses is not
correct.
As part of witnessing traffic coming in via the network, we can build up
a mapping of IP to MAC address. This mapping can then later be used to
set the correct MAC address for a given destination IP. All of this
functions entirely without interaction from userspace.
Unless you are running in a LAN environment, most if not all IPs will
point to the same MAC address (the one of the next IP layer hop, i.e.
the router). For the very first packet that we want to relay, we will
not have a MAC address for the destination IP. This doesn't matter
though, we simply pass that packet up to userspace and handle it there.
Pretty much all communication on the Internet is bi-directional because
you need some kind of ACK. As soon as we receive the first ACK, e.g. the
response to a binding request, we will learn the MAC address for the
given target IP and the eBPF router can kick in for all packets going
forward.
Related: #7518
dependabot[bot]