From 11d6330b979cfa7603772ce1b49d540c50b5347c Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 24 Jun 2026 20:19:06 +0000 Subject: [PATCH] fix(deps): update all non-major updates --- .github/workflows/ci.yml | 46 ++++++++++++------------- .github/workflows/deploy-api-server.yml | 6 ++-- .github/workflows/deploy-dashboard.yml | 6 ++-- .github/workflows/release.yml | 8 ++--- .github/workflows/slow-checks.yml | 20 +++++------ .mise.toml | 4 +-- apps/desktop/package.json | 6 ++-- apps/desktop/src-tauri/Cargo.toml | 22 ++++++------ apps/website/docker-compose.yml | 2 +- apps/website/package.json | 4 +-- benchmarks/smb/Cargo.toml | 6 ++-- crates/index-query/Cargo.toml | 2 +- package.json | 4 +-- rust-toolchain.toml | 2 +- scripts/check/go.mod | 4 +-- scripts/check/go.sum | 4 +++ 16 files changed, 75 insertions(+), 71 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ca8568234..bf7b7339d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -28,7 +28,7 @@ jobs: scripts: ${{ steps.filter.outputs.scripts }} steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 # Filter design rules (the `ci-coverage` check validates the non-glob paths exist): # - A filter must cover every path its job's checks read, not just the obvious app dir. @@ -114,7 +114,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 # Reclaim ~15-20 GB of preinstalled SDKs we never use. The runner ships # ~14 GB free; once rust-cache restores ~1.7 GB of `target/` + the cargo @@ -130,7 +130,7 @@ jobs: df -h / - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install @@ -200,16 +200,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install - name: Cache pnpm - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.pnpm-store key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }} @@ -309,7 +309,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 # The runner ships ~14 GB free; this job holds the ~3.5 GB E2E base image # AND (on a base-cache miss) its docker-save tar at the same time, on top @@ -325,7 +325,7 @@ jobs: run: mkdir -p /tmp/cmdr-docker-cache/cargo /tmp/cmdr-docker-cache/target /tmp/cmdr-docker-base-image - name: Cache Cargo + target (via host bind mounts into Docker) - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: | /tmp/cmdr-docker-cache/cargo @@ -342,7 +342,7 @@ jobs: # anyway — restoring multi-GB of unusable tar only wastes disk and time. - name: Cache E2E Docker base image id: base-image-cache - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: /tmp/cmdr-docker-base-image key: ${{ runner.os }}-e2e-base-image-${{ hashFiles('apps/desktop/test/e2e-linux/docker/Dockerfile.base') }} @@ -406,16 +406,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install - name: Cache pnpm - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.pnpm-store key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }} @@ -476,16 +476,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install - name: Cache pnpm - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.pnpm-store key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }} @@ -522,16 +522,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install - name: Cache pnpm - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.pnpm-store key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }} @@ -567,18 +567,18 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: fetch-depth: 0 # full history so changelog-commit-links can resolve historical SHAs - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install - name: Cache pnpm - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.pnpm-store key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }} @@ -630,10 +630,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install diff --git a/.github/workflows/deploy-api-server.yml b/.github/workflows/deploy-api-server.yml index 4b6e835d5..1827d8f1b 100644 --- a/.github/workflows/deploy-api-server.yml +++ b/.github/workflows/deploy-api-server.yml @@ -15,16 +15,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install - name: Cache pnpm - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.pnpm-store key: ${{ runner.os }}-pnpm-api-server-${{ hashFiles('pnpm-lock.yaml') }} diff --git a/.github/workflows/deploy-dashboard.yml b/.github/workflows/deploy-dashboard.yml index 3696dcde8..88eca7dac 100644 --- a/.github/workflows/deploy-dashboard.yml +++ b/.github/workflows/deploy-dashboard.yml @@ -15,16 +15,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install - name: Cache pnpm - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.pnpm-store key: ${{ runner.os }}-pnpm-dashboard-${{ hashFiles('pnpm-lock.yaml') }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 72997748c..370545479 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -26,7 +26,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Use a persistent cargo target dir # The biggest release-time cost is recompiling the ~1000-crate Tauri tree from scratch, @@ -44,7 +44,7 @@ jobs: run: echo "CARGO_TARGET_DIR=$HOME/.cache/cmdr-release-target" >> "$GITHUB_ENV" - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 with: # Self-hosted runner: mise tools persist locally in ~/.local/share/mise across runs, # so `mise install` is already a no-op. The action's default GitHub-Actions cache @@ -123,7 +123,7 @@ jobs: done < <(mount | awk -F' on ' '/\/Volumes\/Cmdr/ { sub(/ \(.*$/, "", $2); print $2 }') - name: Build, sign, and notarize - uses: tauri-apps/tauri-action@73fb865345c54760d875b94642314f8c0c894afa # v0 + uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }} @@ -170,7 +170,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Download signatures from release env: diff --git a/.github/workflows/slow-checks.yml b/.github/workflows/slow-checks.yml index e4287433f..f9e0098a5 100644 --- a/.github/workflows/slow-checks.yml +++ b/.github/workflows/slow-checks.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 # Same reason as the desktop-rust job: a warm rust-cache restore plus the # nightly udeps build can crowd the runner's ~14 GB free disk. Reclaim the @@ -38,7 +38,7 @@ jobs: df -h / - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install @@ -96,16 +96,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install - name: Cache pnpm - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.pnpm-store key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }} @@ -143,10 +143,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install @@ -173,16 +173,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install mise - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4 + uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4 - name: Install tools with mise run: mise install - name: Cache Cargo - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.cargo/registry/cache key: ${{ runner.os }}-cargo-${{ hashFiles('Cargo.lock') }} diff --git a/.mise.toml b/.mise.toml index 341fb94f5..a8f5886c2 100644 --- a/.mise.toml +++ b/.mise.toml @@ -1,5 +1,5 @@ [tools] node = "25" -pnpm = "11.0.9" -go = "1.25.11" +pnpm = "11.5.3" +go = "1.26.4" # Rust is managed by rustup via rust-toolchain.toml diff --git a/apps/desktop/package.json b/apps/desktop/package.json index de117c2d2..e0c1f133c 100644 --- a/apps/desktop/package.json +++ b/apps/desktop/package.json @@ -47,7 +47,7 @@ "license": "SEE LICENSE IN LICENSE", "dependencies": { "@ark-ui/svelte": "^5.21.2", - "@chenglou/pretext": "^0.0.6", + "@chenglou/pretext": "^0.0.7", "@leeoniya/ufuzzy": "^1.0.19", "@logtape/logtape": "^2.0.5", "@tauri-apps/api": "^2.10.1", @@ -64,9 +64,9 @@ }, "devDependencies": { "@eslint/js": "^10.0.1", - "@iconify-json/lucide": "1.2.103", + "@iconify-json/lucide": "1.2.111", "@playwright/test": "^1.59.1", - "@srsholmes/tauri-playwright": "^0.2.2", + "@srsholmes/tauri-playwright": "^0.4.0", "@sveltejs/adapter-static": "^3.0.10", "@sveltejs/kit": "^2.58.0", "@sveltejs/vite-plugin-svelte": "^7.0.0", diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml index 080838892..3deed952c 100644 --- a/apps/desktop/src-tauri/Cargo.toml +++ b/apps/desktop/src-tauri/Cargo.toml @@ -43,7 +43,7 @@ tauri-plugin-notification = "2.3.3" # macOS, the plugin uses Carbon's `RegisterEventHotKey` so it needs no extra TCC grant # (Accessibility/Input Monitoring not required). Pinned at 2.3.1 (published 2025-10-27, # ~7 months old; the 2.3.2 release from 2026-05-28 is still within the 14-day age policy). -tauri-plugin-global-shortcut = "=2.3.1" +tauri-plugin-global-shortcut = "=2.3.2" serde = { version = "1", features = ["derive"] } serde_json = "1" notify = "8" @@ -100,12 +100,12 @@ arc-swap = "1.9.1" walkdir = "2" # Drive indexing: parallel directory walker, SQLite store, and macOS FSEvents watcher jwalk = "0.8" -rusqlite = { version = "0.39", features = ["bundled", "collation", "fallible_uint"] } +rusqlite = { version = "0.40", features = ["bundled", "collation", "fallible_uint"] } # For chunked copy metadata preservation (network filesystems) xattr = "1" filetime = "0.2" -exacl = "0.12" -sysinfo = { version = "0.38.4", default-features = false, features = ["system"] } +exacl = "0.13" +sysinfo = { version = "0.39.0", default-features = false, features = ["system"] } time = { version = "0.3", features = ["parsing", "macros", "formatting"] } # Playwright E2E testing plugin: socket bridge for direct webview injection (optional, feature-gated). # Pinned to the `feat/per-window-native-screenshot` branch of the vdavid fork at @@ -129,7 +129,7 @@ rand = "0.10" # loaded machine; one fixture chain used to spawn ~31 of them and time # out the 8 s nextest cap under check.sh contention). Pure API addition, # no extra runtime cost on the prod read paths. -gix = { version = "0.81", features = ["tree-editor"] } +gix = { version = "0.84", features = ["tree-editor"] } # Multi-provider LLM client. Normalizes OpenAI / OpenAI Responses / Anthropic / Gemini / # xAI / Groq / DeepSeek / Ollama / OpenRouter / etc. Auto-routes `gpt-5*` / `*-codex` / # `*-pro` to the Responses API; uses native protocols for Anthropic + Gemini. Replaces @@ -143,14 +143,14 @@ gix = { version = "0.81", features = ["tree-editor"] } # only routed `*-pro` and `*-codex`. Stable 0.6.0 isn't out yet; bumping to a future # `0.6.0-beta.20` should be a no-op for us, but pin exact to avoid surprise breakage on # `cargo update`. Solo maintainer; MIT/Apache-2.0; ~25k LOC if we ever need to fork. -genai = "=0.6.0-beta.19" +genai = "=0.6.5" # Type-safe IPC: typed Rust↔TS bindings for tauri commands and events. # Generated `bindings.ts` lands in `apps/desktop/src/lib/ipc/`; the frontend # imports `commands.commandName(args)` instead of `invoke('command_name', ...)`. # Pinned at 2.0.0-rc.24 (published 2026-03-30, ~5 weeks old at landing); the # v1 line is for Tauri 1, v2 RC line is the active branch for Tauri 2. -tauri-specta = { version = "=2.0.0-rc.24", features = ["derive", "typescript"] } -specta = { version = "=2.0.0-rc.24", features = ["derive", "serde_json"] } +tauri-specta = { version = "=2.0.0-rc.25", features = ["derive", "typescript"] } +specta = { version = "=2.0.0-rc.25", features = ["derive", "serde_json"] } # Fuzzy matcher for the in-directory "type to jump" feature. Helix's matcher, also used # by Zellij and several TUI projects; fast (microseconds per match), smart-case, good # scoring. Pinned at 0.3.1 (published 2024-02-20, well over a month old). MPL-2.0; @@ -188,7 +188,7 @@ mtp-rs = "0.20.0" nusb = "0.2.3" bytes = "1" # mDNS discovery for network host browsing (pure Rust, cross-platform) -mdns-sd = { version = "0.19", features = ["logging"] } +mdns-sd = { version = "0.20", features = ["logging"] } # SMB2/3 protocol client for share enumeration (pure Rust, pipelined I/O). # When bumping: also re-vendor the test containers per # apps/desktop/test/smb-servers/.compose/VENDORED.md @@ -248,14 +248,14 @@ blake3 = "1.8.3" # Used only by the `#[ignore]`'d `ipc::tests::export_bindings_test`, invoked # via `pnpm bindings:regen` to write `apps/desktop/src/lib/ipc/bindings.ts`. # Not needed by release builds. -specta-typescript = "=0.0.11" +specta-typescript = "=0.0.12" criterion = { version = "0.8.1", features = ["html_reports"] } # Dev-only env-driven logger. Tests don't use `tauri-plugin-log` (it requires # a Tauri runtime), so this gives us `RUST_LOG`-controlled logs for wire # traces in integration benches. env_logger = "0.11.10" # For test-only cryptographic key generation (compatible with ed25519-dalek's rand_core 0.6) -rand_core = { version = "0.6", features = ["getrandom"] } +rand_core = { version = "0.10", features = ["getrandom"] } tempfile = "3" # Property-based testing. Used for algorithmic functions where the input space # is too large for example tests to cover meaningfully (parser, glob→regex, diff --git a/apps/website/docker-compose.yml b/apps/website/docker-compose.yml index bdadc1d76..9280450a9 100644 --- a/apps/website/docker-compose.yml +++ b/apps/website/docker-compose.yml @@ -10,7 +10,7 @@ services: # Caddy route needed: comments.getcmdr.com -> remark42:8080 remark42: - image: umputun/remark42:v1.15.0 + image: umputun/remark42:v1.16.1 container_name: remark42 restart: unless-stopped volumes: diff --git a/apps/website/package.json b/apps/website/package.json index 3b3099f09..ae0507e33 100644 --- a/apps/website/package.json +++ b/apps/website/package.json @@ -27,14 +27,14 @@ "rehype-external-links": "3.0.0", "remark-smartypants": "^3.0.2", "satori": "0.26.0", - "sharp": "^0.34.5", + "sharp": "^0.35.0", "tailwindcss": "^4.2.4" }, "devDependencies": { "@astrojs/check": "^0.9.8", "@axe-core/playwright": "^4.11.2", "@eslint/js": "^10.0.1", - "@iconify-json/lucide": "1.2.103", + "@iconify-json/lucide": "1.2.111", "@lhci/cli": "^0.15.1", "@playwright/test": "^1.59.1", "eslint": "^10.2.1", diff --git a/benchmarks/smb/Cargo.toml b/benchmarks/smb/Cargo.toml index 0614badfc..d18c6bc2b 100644 --- a/benchmarks/smb/Cargo.toml +++ b/benchmarks/smb/Cargo.toml @@ -10,12 +10,12 @@ path = "src/main.rs" [dependencies] smb = "0.11.1" -sspi = "=0.18.7" -smb-rpc = "=0.11.1" +sspi = "=0.21.0" +smb-rpc = "=0.11.2" tokio = { version = "1", features = ["rt-multi-thread", "macros", "time"] } serde = { version = "1", features = ["derive"] } toml = "1" -rand = "0.9" +rand = "0.10" chrono = "0.4" futures-util = "0.3" binrw = "0.15" diff --git a/crates/index-query/Cargo.toml b/crates/index-query/Cargo.toml index dfe1fa696..fa03a20ce 100644 --- a/crates/index-query/Cargo.toml +++ b/crates/index-query/Cargo.toml @@ -6,4 +6,4 @@ publish = false [dependencies] cmdr = { path = "../../apps/desktop/src-tauri" } -rusqlite = { version = "0.39", features = ["bundled", "collation"] } +rusqlite = { version = "0.40", features = ["bundled", "collation"] } diff --git a/package.json b/package.json index 2640072b6..c4f780286 100644 --- a/package.json +++ b/package.json @@ -21,9 +21,9 @@ "check": "./scripts/check.sh" }, "devDependencies": { - "oxfmt": "^0.46.0" + "oxfmt": "^0.54.0" }, - "packageManager": "pnpm@11.1.2", + "packageManager": "pnpm@11.5.3", "engines": { "pnpm": ">=11" } diff --git a/rust-toolchain.toml b/rust-toolchain.toml index 889887299..c786c9cb1 100644 --- a/rust-toolchain.toml +++ b/rust-toolchain.toml @@ -2,7 +2,7 @@ # Pinned to a specific stable version, not the floating "stable" channel. # A compromised rustc release would land transparently otherwise. Bump # deliberately, with a few days between Rust's release and our pin update. -channel = "1.95.0" +channel = "1.96.0" # rustup installs only the minimal profile for a pinned channel by default # (rustc + cargo + rust-std). CI invokes `cargo fmt` and `cargo clippy`, both # of which need their respective components installed. Declare them here so diff --git a/scripts/check/go.mod b/scripts/check/go.mod index a67cca0d5..cc6028243 100644 --- a/scripts/check/go.mod +++ b/scripts/check/go.mod @@ -4,7 +4,7 @@ go 1.25.0 require ( github.com/BurntSushi/toml v1.6.0 - golang.org/x/term v0.42.0 + golang.org/x/term v0.44.0 ) -require golang.org/x/sys v0.43.0 // indirect +require golang.org/x/sys v0.46.0 // indirect diff --git a/scripts/check/go.sum b/scripts/check/go.sum index 75781eb1a..10827345b 100644 --- a/scripts/check/go.sum +++ b/scripts/check/go.sum @@ -2,5 +2,9 @@ github.com/BurntSushi/toml v1.6.0 h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk github.com/BurntSushi/toml v1.6.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho= golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI= golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw= +golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/term v0.42.0 h1:UiKe+zDFmJobeJ5ggPwOshJIVt6/Ft0rcfrXZDLWAWY= golang.org/x/term v0.42.0/go.mod h1:Dq/D+snpsbazcBG5+F9Q1n2rXV8Ma+71xEjTRufARgY= +golang.org/x/term v0.44.0 h1:0rLvDRCtNj0gZkyIXhCyOb2OAzEhLVqc4B+hrsBhrmc= +golang.org/x/term v0.44.0/go.mod h1:7ze4MdzUzLXpSAoFP1H0bOI9aXDqveSvatT5vKcFh2Y=