Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Detected empty commit - aborting git push

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package peter-evans/create-pull-request).

Files affected: .github/workflows/covector-version-or-publish.yml

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update rust crate time to v0.3.47 [security]
• chore(deps): update peter-evans/create-pull-request action to v7.0.11
• chore(deps): update dependency python to 3.14
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-python action to v6
• chore(deps): update peter-evans/create-pull-request action to v8
• chore(deps): update rustsec/audit-check action to v2

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update rust crate dom_query to 0.28.0
• chore(deps): update rust crate glow to 0.17.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update rust crate getrandom to 0.4
• chore(deps): update rust crate jni to 0.22
• chore(deps): update rust crate libloading to 0.9.0
• chore(deps): update rust crate sha2 to 0.11
• chore(deps): update rust crate soup3 to 0.9
• chore(deps): update rust crate webview2-com to 0.39
• chore(deps): update rust crate windows to 0.62
• chore(deps): update rust crate windows-core to 0.62
• chore(deps): update rust crate wgpu to v29

Detected Dependencies

cargo (2)

bench/Cargo.toml (5)

• anyhow 1.0
• time 0.3 → [Updates: 0.3]
• tempfile 3.10
• serde_json 1.0
• serde 1.0

Cargo.toml (51)

• tracing 0.1
• once_cell 1
• thiserror 2.0
• http 1.1
• raw-window-handle 0.6
• dpi 0.1
• cookie 0.18
• pollster 0.4.0
• tao 0.35
• wgpu 23 → [Updates: 29]
• winit 0.30
• getrandom 0.3 → [Updates: 0.4]
• http-range 0.1
• percent-encoding 2.3
• glow 0.16.0 → [Updates: 0.17.0]
• libloading 0.8.9 → [Updates: 0.9.0]
• sha2 0.10 → [Updates: 0.11]
• base64 0.22
• dom_query 0.27.0 → [Updates: 0.28.0]
• javascriptcore-rs =1.1.2
• webkit2gtk =2.0.2
• webkit2gtk-sys =2.0.2
• gtk 0.18
• soup3 0.5 → [Updates: 0.9]
• x11-dl 2.21
• gdkx11 0.18
• percent-encoding 2.3
• dirs 6
• x11-dl 2.21
• webview2-com 0.38 → [Updates: 0.39]
• windows-version 0.1
• windows-core 0.61 → [Updates: 0.62]
• dunce 1
• windows 0.61 → [Updates: 0.62]
• url 2.5
• dirs 6
• block2 0.6
• objc2 0.6.4
• objc2-web-kit 0.3.0
• objc2-core-foundation 0.3.0
• objc2-foundation 0.3.0
• objc2-ui-kit 0.3.0
• objc2-app-kit 0.3.0
• crossbeam-channel 0.5
• sha2 0.10 → [Updates: 0.11]
• base64 0.22
• jni 0.21 → [Updates: 0.22]
• ndk 0.9
• tao-macros 0.1
• libc 0.2
• dom_query 0.27.0 → [Updates: 0.28.0]

github-actions (7)

.github/workflows/audit.yml (2)

• actions/checkout v4 → [Updates: v6]
• rustsec/audit-check v1 → [Updates: v2.0.0]

.github/workflows/bench.yml (6)

• actions/checkout v4 → [Updates: v6]
• dtolnay/rust-toolchain master
• actions/setup-python v4 → [Updates: v6]
• Swatinem/rust-cache v2
• actions/checkout v4 → [Updates: v6]
• python 3.10 → [Updates: 3.14]

.github/workflows/build.yml (6)

• actions/checkout v4 → [Updates: v6]
• dtolnay/rust-toolchain 1.77
• Swatinem/rust-cache v2
• dtolnay/rust-toolchain nightly
• actions/checkout v4 → [Updates: v6]
• dtolnay/rust-toolchain nightly

.github/workflows/clippy-fmt.yml (4)

• actions/checkout v4 → [Updates: v6]
• dtolnay/rust-toolchain stable
• actions/checkout v4 → [Updates: v6]
• dtolnay/rust-toolchain stable

.github/workflows/covector-comment-on-fork.yml (1)

• jbolda/covector covector-v0

.github/workflows/covector-status.yml (2)

• actions/checkout v4 → [Updates: v6]
• jbolda/covector covector-v0

.github/workflows/covector-version-or-publish.yml (3)

• actions/checkout v4 → [Updates: v6]
• jbolda/covector covector-v0
• peter-evans/create-pull-request 7.0.7@dd2324fc52d5d43c699a5636bcf19fceaa70c284 → [Updates: v7.0.11, v8.1.1]

---

• Check this box to trigger a request for Renovate to run again on this repository

[rhysd]

What is an issue on upgrading gtk crate to v0.18? Today I tried to upgrade rfd to the latest but I couldn't do it due to the incompatibility of the crate (wry requested v0.16 and rfd requested v0.18). And v0.16 was released almost one year ago so it looks outdated.

[wusyong]

Hey sorry I planned to update the version this month but my framework laptop was broken.
I'm reaching to one of working group member to update all the dependencies.
There are a few gtk crates need to update their gir and gtk version first:

• https://github.com/tauri-apps/webkit2gtk-rs
• https://github.com/tauri-apps/javascriptcore-rs
• https://github.com/tauri-apps/libappindicator-rs
  And then we can update tao and wry accordingly.

[dklassic]

While attempting to upgrade gtk version for javascriptcore-rs, seems like gtk v0.18 requires the crate cfg-expr v0.15.5 which requires rustc version to be 1.70.0 or newer.
@amrbashir , @FabianLars , is it okay to bump our Rust version for this?

[FabianLars]

That's indeed quite steep and also the reason why we're always so slow to upgrade the gtk crates. The last times they also updated their msrv to the latest rust version available at that point :/

Anyway, we didn't really talk about the new msrv policy in v2 yet but i still believe we'll go with something like the last 3 versions / the last 6 months (same thing with current release schedule). This would mean gtk 0.18 would have to wait until December though. We could make an exception for tauri alpha&beta and apply the msrv policy only the to then stable release 🤔

I guess it's time for a proper msrv policy talk/decision including crates like webkitgtk-rs that are also used in the rust ecosystem and not just us.
Edit: And with the last point updating the msrv of these crates would have been fine if webkitgtk would still be 0.x since we could just stick to an older version in wry, now i have no idea how to handle gtk updates as a whole since they are part of the public api (re-export of glib & gio) which means updating them would be a breaking change.

[wusyong]

@FabianLars Waiting until December is too long. Do we force MSRV on alpha at the moment? If not, I think we could start updating it.

[rhysd]

Thank you for the answer to my question. I understood that gtk-rs is aggressive on updating MSRV and it is hard to handle. And I appreciate the work to keep dependencies and MSRV by tauri developers. I'll try to keep my dependencies to be compatible with current gtk-rs crate which wry depends on.

[FabianLars]

@ FabianLars Waiting until December is too long. Do we force MSRV on alpha at the moment? If not, I think we could start updating it.

Well, we've never explicitly talked about it. So far we were still really hesitant to raise the msrv but still did it a few times.
But like I said, we should have a dedicated msrv policy discussion asap!

As an interim solution i personally think it's okay to raise the msrv to whatever in the alpha versions but it could easily backfire if the policy discussion ends up deciding on something longer than "last 3 releases". We can of course also just not update webkitgtk etc in tauri and/or wry if needed, so that at other crate consumers can upgrade gtk.

[wusyong]

Looks like gtk3 won't bump any version any time soon: https://gtk-rs.org/blog/2023/08/28/new-release.html
I would say it's safe to update then.
At the meantime, I'll discuss with other member about our MSRV policy.