chore(deps): bump the cargo-minor-patch group across 1 directory with 5 updates

[dependabot]

Bumps the cargo-minor-patch group with 5 updates in the /src-tauri directory:

Package	From	To
tauri-plugin-log	2.9.0	2.9.1
diesel	2.3.12	2.3.13
tauri-plugin-fs	2.5.1	2.5.2
tauri-plugin-dialog	2.7.2	2.7.3
tauri-plugin-haptics	2.3.2	2.3.3

Updates tauri-plugin-log from 2.9.0 to 2.9.1

Release notes

Sourced from tauri-plugin-log's releases.

log-js v2.9.1

[2.9.1]

• f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-log@2.9.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.8kB README.md
npm notice 7.0kB dist-js/index.cjs
npm notice 3.0kB dist-js/index.d.ts
npm notice 6.7kB dist-js/index.js
npm notice 715B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-log
npm notice version: 2.9.1
npm notice filename: tauri-apps-plugin-log-2.9.1.tgz
npm notice package size: 5.0 kB
npm notice unpacked size: 22.1 kB
npm notice shasum: 4b7ce1aeb9c4a666159ad76c8c7a1d5638c24f20
npm notice integrity: sha512-8dYNEQOgZcIEq[...]fIfC8lVVEhdlg==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662652241
+ @tauri-apps/plugin-log@2.9.1

log v2.9.1

[2.9.1]

• f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.

</tr></table> 

... (truncated)

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates diesel from 2.3.12 to 2.3.13

Changelog

Sourced from diesel's changelog.

[2.3.13] 2026-09-4

• Fixed interaction between then_order_by and distinct_on to reject otherwise broken SQL queries
• Fix a clippy::redundant_field_names lint warning generated by #[derive(QueryableByName)]
• MySQL and MariaDB now decode a value according to the signedness the server reports for its column, so a SMALLINT UNSIGNED holding 40000 read as Integer returns 40000 rather than -25536
• Potential stackoverflow on deeply nested JSONB values for the SQLite backend
• Fixed a possible null pointer dereference in the custom SQLite aggregate function support when SQLite fails to allocate the aggregate state
• Fixed undefined behavior in SqliteConnection::serialize_database_to_buffer when SQLite returns a null buffer for an empty deserialized database or an allocation failure. SerializedDatabase::as_slice is deprecated in favor of the new SerializedDatabase::try_as_slice, which reports the allocation failure as an error instead of panicking.
• Fixed SQLite value reads to panic instead of creating invalid slices or returning incorrect data when SQLite allocation fails. Row iteration reports a failed value duplication as an error instead.
• Fixed a use after free where reading a SQLite value in a second representation, for example a blob as text, invalidated slices another SqliteValue of the same field had returned. Such a read now works on a copy of the value.
• Fixed broken prepared statement caching for queries using positional ordering and window functions with frame offset clauses
• Fixed a potential panic while deserializing a PgInterval type from a too short buffer
• Fixed encoding floating point values without a decimal part in a roundtrip safe way in SQLite's jsonb encoding
• Fixed a potential panic while deserializing a PgInterval type from a too short buffer
• Fixed potential code injections in the generated schema.rs file caused by malicious database identifiers

Commits

• 9628f5c Fix encoding negative integers
• 3eb6cf4 Fix old serde
• d2b770f Fix compilation
• 1abf780 Merge branch 'main' into fix/rust_code_injections
• 396ea4a Merge pull request #5195 from LucaCappelletti94/fuzz-sqlite-jsonb-float-writer
• ba02e3a Merge pull request #5196 from weiznich/fix_bigdecimal_cpu_burn
• 86ae22e Merge pull request #5194 from weiznich/fix_panic_in_pg_interval
• b9e01d7 Merge pull request #5193 from weiznich/fix_query_id
• 529f0bd Merge pull request #5183 from LucaCappelletti94/sqlite-serialize-oom-safety
• 8bd540d Merge pull request #5182 from LucaCappelletti94/sqlite-value-oom-safety
• Additional commits viewable in compare view

Updates tauri-plugin-fs from 2.5.1 to 2.5.2

Release notes

Sourced from tauri-plugin-fs's releases.

fs-js v2.5.2

[2.5.2]

• db9c5998 (#3531 by @​Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
• f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.
• 685610ae (#3507 by @​Legend-Master) Fix fs:default and fs:read-app-specific-dirs-recursive not giving any command scopes
• 3fb27bf1 (#3504 by @​vasfvitor) Fixed deny-webview-data has no effect, and on Linux, only deny access to the webview data paths instead of the entire $APPLOCALDATA

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-fs@2.5.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.4kB README.md
npm notice 32.8kB dist-js/index.cjs
npm notice 32.6kB dist-js/index.d.ts
npm notice 32.0kB dist-js/index.js
npm notice 697B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-fs
npm notice version: 2.5.2
npm notice filename: tauri-apps-plugin-fs-2.5.2.tgz
npm notice package size: 21.5 kB
npm notice unpacked size: 101.5 kB
npm notice shasum: 262ff39542e50e96f1ee8b6b7d471898736d6609
npm notice integrity: sha512-XXvMSnFiob+G1[...]J5sDsniRyWxlg==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662643742
+ @tauri-apps/plugin-fs@2.5.2

fs v2.5.2

[2.5.2]

• db9c5998 (#3531 by @​Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
• f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.
• 685610ae (#3507 by @​Legend-Master) Fix fs:default and fs:read-app-specific-dirs-recursive not giving any command scopes

... (truncated)

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.2 to 2.7.3

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.7.3

[2.7.3]

• db9c5998 (#3531 by @​Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
• cc9ec9b4 (#3519 by @​purvsinojiya-inventyv) Fix Android save dialog MIME type when a single MIME type is provided.
• f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.

Dependencies

• Upgraded to fs@2.5.2

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.3
npm notice filename: tauri-apps-plugin-dialog-2.7.3.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: 7e6d375fec8e39d2a90294604a9d77e66c39a072
npm notice integrity: sha512-CRgE+7TP4tvq9[...]oKbMwSI4IEcfA==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662645358
+ @tauri-apps/plugin-dialog@2.7.3

dialog v2.7.3

[2.7.3]

... (truncated)

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates tauri-plugin-haptics from 2.3.2 to 2.3.3

Release notes

Sourced from tauri-plugin-haptics's releases.

positioner-js v2.3.3

[2.3.3]

• 4be76900 (#3449 by @​skkap) Replaced a panic in calculate_position with an error return when the window has no associated monitor (e.g. during display sleep or monitor reconfiguration).

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-positioner@2.3.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.3kB README.md
npm notice 2.3kB dist-js/index.cjs
npm notice 1.1kB dist-js/index.d.ts
npm notice 2.2kB dist-js/index.js
npm notice 728B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-positioner
npm notice version: 2.3.3
npm notice filename: tauri-apps-plugin-positioner-2.3.3.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 11.5 kB
npm notice shasum: 85c671d1aede88cca742ffd4ec6d1383dba15e00
npm notice integrity: sha512-FOUOpd3qIN1dO[...]wJZ+/jeWANfvA==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2165402717
+ @tauri-apps/plugin-positioner@2.3.3

positioner v2.3.3

[2.3.3]

• 4be76900 (#3449 by @​skkap) Replaced a panic in calculate_position with an error return when the window has no associated monitor (e.g. during display sleep or monitor reconfiguration).

... (truncated)

Commits

• See full diff in compare view

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[thwbh]

@chrome-grid add your review, choom