chore(deps): bump the bun-production-minor-patch group across 1 directory with 6 updates

[dependabot]

Bumps the bun-production-minor-patch group with 6 updates in the / directory:

Package	From	To
@lezer/highlight	1.2.4	1.2.5
@tanstack/svelte-query	6.3.0	6.3.1
@tauri-apps/api	2.11.1	2.12.1
@tauri-apps/plugin-opener	2.5.5	2.7.0
@tauri-apps/plugin-process	2.3.1	2.4.0
@tauri-apps/plugin-updater	2.12.0	2.13.1

Updates @lezer/highlight from 1.2.4 to 1.2.5

Commits

• See full diff in compare view

Updates @tanstack/svelte-query from 6.3.0 to 6.3.1

Release notes

Sourced from @​tanstack/svelte-query's releases.

@​tanstack/svelte-query-devtools@​6.3.1

Patch Changes

• Updated dependencies [ec060b6]:
  • @​tanstack/query-devtools@​5.104.1
  • @​tanstack/svelte-query@​6.3.1

@​tanstack/svelte-query-persist-client@​6.3.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.104.1
  • @​tanstack/svelte-query@​6.3.1

@​tanstack/svelte-query@​6.3.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.104.1

Changelog

Sourced from @​tanstack/svelte-query's changelog.

6.3.1

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.104.1

Commits

• 29859ae ci: Version Packages (#11806)
• b90d8ce chore(*): manage 'eslint' and '@​typescript-eslint/parser' with pnpm 'catalog'...
• de6b50c chore(*): manage 'svelte' eslint plugin with pnpm 'catalog' (#11783)
• cddf804 chore(svelte-query*): manage 'svelte' packages with pnpm 'catalog' (#11715)
• 2e1ad64 chore(*): declare 'npm-run-all2' once in the root 'package.json' like other s...
• 6b95f2f chore(svelte-query*): type check on TS 5.6-5.9 by running 'svelte-check' with...
• c1de23a chore(*): manage 'typescript' with pnpm 'catalog' and declare it in each pack...
• 12dc7dd test(svelte-query): keep each action, wait and assertion together and separat...
• 2dbddfb test(svelte-query): advance timers by the time the awaited work takes (#11657)
• 5bdb8d1 test(svelte-query/createInfiniteQuery): add tests for 'initialData' with a fa...
• See full diff in compare view

Updates @tauri-apps/api from 2.11.1 to 2.12.1

Release notes

Sourced from @​tauri-apps/api's releases.

@​tauri-apps/api v2.12.1

All found vulnerabilities were already reviewed and decided to be ignored
2 ignored: 2 high

[2.12.1]

Bug Fixes

• c9a3cb892 (#16166 by @​FabianLars) The macos-private-api feature flag / macOSPrivateAPI tauri.conf.json value is no longer required to use transparency or fullscreen on macOS.

$ pnpm build && cd ./dist && pnpm publish --access public --loglevel debug --no-git-checks
$ rollup -c --configPlugin typescript
�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m997ms�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.5s�[22m�[39m
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=npm%3Aregistry.npmjs.org 200 336ms
📦 @tauri-apps/api@2.12.1 → https://registry.npmjs.org/
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=sigstore 200 107ms
Signed provenance statement with source and build information
✅ Published package @tauri-apps/api@2.12.1

@​tauri-apps/api v2.12.0

All found vulnerabilities were already reviewed and decided to be ignored
2 ignored: 2 high

[2.12.0]

... (truncated)

Commits

• 30da1fd feat(ci): run audit before publishing
• 1aefcf6 fix: pnpm audit
• 026f260 apply version updates (#16150)
• a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
• f040897 docs: link WRY and TAO to their repositories (#16163)
• c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
• 64bfdd9 fix: ignore src-tauri in vite configs (#16165)
• 793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
• d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
• 447fa9f fix(core): tauri-utils publish
• Additional commits viewable in compare view

Updates @tauri-apps/plugin-opener from 2.5.5 to 2.7.0

Release notes

Sourced from @​tauri-apps/plugin-opener's releases.

opener-js v2.7.0

[2.7.0]

• ecd3273e (#3480 by @​renovate) Updated windows-rs dependencies:

  • deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
  • opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
  • single-instance: updated windows-sys to 0.61
  • updater: updated windows-sys to 0.61

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.7.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.7.0
npm notice filename: tauri-apps-plugin-opener-2.7.0.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: 14d631a70282cbc07b46f4442ba6085d2200f301
npm notice integrity: sha512-mBorYfVKh9Lt7[...]5OHHVmipjuGMw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005263072
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-opener@2.7.0

opener v2.7.0

[2.7.0]

... (truncated)

Commits

• 51b430b ci: delete .changes/updater-new-bundle-support.md
• fd439b1 Publish New Versions (v2) (#2964)
• 2522b71 fix(deep-link): revert the breaking change introduced by #2928 (#2970)
• 9021a73 chore(deps): update dependency rollup to v4.50.0 (#2966)
• 625bb1c feat(log): re-export the log crate (#2965)
• 6215afe chore(deps): update dependency rollup to v4.49.0 (#2962)
• 8cf8eea feat(updater): inject bundle_type into endpoint url (#2960)
• 509eba8 feat: support message dialogs with 3 buttons (#2641)
• 9ac5fe8 feat(updater): support bundle-specific targets (#2624)
• c247410 chore(deps): update dependency typescript-eslint to v8.41.0 (#2956)
• Additional commits viewable in compare view

Updates @tauri-apps/plugin-process from 2.3.1 to 2.4.0

Release notes

Sourced from @​tauri-apps/plugin-process's releases.

stronghold-js v2.4.0

[2.4.0]

• ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.
• 9b29b601 Update MSRV to 1.90 to match tauri.
• a87a3c7d Update documentation.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-stronghold@2.4.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.7kB README.md
npm notice 19.4kB dist-js/index.cjs
npm notice 21.1kB dist-js/index.d.ts
npm notice 19.2kB dist-js/index.js
npm notice 750B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-stronghold
npm notice version: 2.4.0
npm notice filename: tauri-apps-plugin-stronghold-2.4.0.tgz
npm notice package size: 8.7 kB
npm notice unpacked size: 66.0 kB
npm notice shasum: 47b370840be057acd7d8f76046a9978a622cfcbe
npm notice integrity: sha512-5FIKueS+4xs66[...]j7Mzwt0NX4r1A==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2969525576
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-stronghold@2.4.0

stronghold v2.4.0

[2.4.0]

• ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.
• 9b29b601 Update MSRV to 1.90 to match tauri.
• a87a3c7d Update documentation.

... (truncated)

Commits

• a2364a5 fix: integration test
• 67ebc13 fix(ci): check-publish job should check .changes/pre.json
• cbfd428 Publish New Versions (v2) (#3618)
• f460570 chore: fmt
• a433ec0 fix: mobile clippy warnings
• 3d8a3c8 chore: edition 2024
• b517cc7 fix: actually set rust-version to 1.90
• b6a38a5 fix(ci): e2e test error reporting
• 9b29b60 feat: update to tauri 2.12
• 3a01943 tests(e2e): fix e2e failures on Linux and Windows (#3642)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tauri-apps/plugin-process since your current version.

Updates @tauri-apps/plugin-updater from 2.12.0 to 2.13.1

Release notes

Sourced from @​tauri-apps/plugin-updater's releases.

updater-js v2.13.1

[2.13.1]

• ecd3273e (#3480 by @​renovate) Updated windows-rs dependencies:

  • deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
  • opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
  • single-instance: updated windows-sys to 0.61
  • updater: updated windows-sys to 0.61

• 90b9869e (#3573 by @​renovate) Updated dirs to v7

• 22e286f3 (#3501 by @​renovate) Updated dependency infer to 0.22

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.13.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 6.7kB dist-js/index.cjs
npm notice 7.1kB dist-js/index.d.ts
npm notice 6.6kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.13.1
npm notice filename: tauri-apps-plugin-updater-2.13.1.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 25.1 kB
npm notice shasum: 2ad227ba05293fe34c5c59c0ff8a1cd690c8e9a8
npm notice integrity: sha512-+STDzJ0sdQLIm[...]/AJz0jxysytiw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005269671
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-updater@2.13.1

updater v2.13.1

... (truncated)

Commits

• e511284 publish new versions (#3647)
• ce59e96 docs(log): remove unrelated single-instance comment from log readme
• 29130c2 ci: run clippy on all platforms (#3650)
• 4353819 chore: add changefile to re-release plugin-http npm package as 2.8.0 (#3656)
• ec14142 chore(deps): update dependency @​types/node to v24 (#3649)
• 90b9869 chore(deps): update rust crate dirs to v7 (#3573)
• 22e286f chore(deps): update rust crate infer to 0.22 (#3501)
• ecd3273 chore(deps): update windows-rs and webview2 crates (#3480)
• aa2cc64 fix(android): Migrate Gradle scripts to compilerOptions DSL (#3478)
• a2364a5 fix: integration test
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: bd6780f9-91f8-499f-9e15-3280fd4832df

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codspeed]

Merging this PR will not alter performance

✅ 30 untouched benchmarks
⏩ 15 skipped benchmarks¹

---

_{Comparing dependabot/bun/bun-production-minor-patch-4974d43290 (8d7c196) with main (05975d2)}

Footnotes

1. 15 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩