Skip to content

chore(deps): bump the cargo group across 1 directory with 3 updates - #479

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-965aa24cd8
Open

chore(deps): bump the cargo group across 1 directory with 3 updates#479
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-965aa24cd8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 3 updates in the /src-tauri directory: serde_json, tokio and db-keystore.

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates tokio from 1.53.0 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Commits
  • 75fef53 chore: prepare Tokio v1.53.1 (#8303)
  • ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
  • eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
  • 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
  • a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
  • See full diff in compare view

Updates db-keystore from 0.4.3 to 0.5.1

Changelog

Sourced from db-keystore's changelog.

0.5.1

  • Bumped turso from 0.7.1 to 0.7.2. Turso 0.7.2 changes include fsync synchronization fixes and rollback safety.
  • Removed obsolete example (demo of turso's 0.5 bug fix for handling of invalid encryption key)

0.5.0

Highlights - since 0.4.x

  • Multiprocess friendly. Previously, the database file was locked for exclusive use during the lifetime of the keystore. In most cases, where the db is only needed for a brief operation, holding a long lock is unnecessary, and prevents another process using db-keystore crate from sharing the same file. In 0.5, the db file is opened for the duration of the operation and then closed. This change enables multiple processes to share the same database file. If a call to open is blocked by a locked file, open retries internally until the file is unblocked or retry timeout. For reliable operation we recommend using a local file system for the keystore db, rather than a remote-mounted file, which may be subject to network delays or intermittent connectivity.

  • WAL consolidation. After closing, while an exclusive lock is held, the WAL is folded into the main database file, leaving the directory with the .db file only.

  • Rekey improvements. The rekey operation was moved from the cli to the library, making it available for in-process use. The rekey operation previously had a limited validation check that only verified that number of entries was preserved. The 0.5.0 implementation checks every key, value, and piece of metadata to confirm they are identical, and only then returns success. In the even of an unsuccessful rekey operation, the faulty copy is removed.

  • Breaking EncryptionOpts fields are now private. This was necessary to enforce the policy of zeroizing wrappers for all data structures containing secrets.

  • Other: Updated all dependencies. Turso is at 0.7.1. More unit tests.

0.5.0-pre.3

Changed

  • Multi-process file sharing: the file-backed store no longer holds its database open (and exclusively fcntl-locked) for the store's lifetime. The database is opened per operation and closed immediately afterward, so the lock is held only for the duration of each operation. Long-lived daemons and short-lived CLI invocations can now share one keystore file; concurrent opens are handled by retry with backoff. In-memory stores are unchanged (held open for the store's lifetime).

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 3 updates in the /src-tauri directory: [serde_json](https://github.com/serde-rs/json), [tokio](https://github.com/tokio-rs/tokio) and [db-keystore](https://github.com/stevelr/db-keystore).


Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `tokio` from 1.53.0 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.0...tokio-1.53.1)

Updates `db-keystore` from 0.4.3 to 0.5.1
- [Changelog](https://github.com/stevelr/db-keystore/blob/main/CHANGELOG.md)
- [Commits](stevelr/db-keystore@db-keystore-v0.4.3...db-keystore-v0.5.1)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: db-keystore
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates rust Rust/Cargo updates labels Aug 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates rust Rust/Cargo updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants