chore(deps): bump the cargo-minor-patch group with 4 updates

[dependabot]

Bumps the cargo-minor-patch group with 4 updates: indexmap, tauri-plugin-shell, tower-http and tauri-plugin-notification.

Updates indexmap from 2.14.0 to 2.14.1

Changelog

Sourced from indexmap's changelog.

2.14.1 (2026-08-28)

• Simplify comparisons where Equivalent isn't needed (Q = K).
• Unify index assertions for bounds checks.
• Fix (or expect) clippy lints.

Commits

• fdf7e17 Merge pull request #449 from cuviper/release-2.14.1
• ada540e Release 2.14.1
• af93b43 expect clippy::redundant_slicing in tests
• c95da18 fix clippy::derivable_impls
• 2196365 fix clippy::useless_vec (and more) in tests
• 1c2be7b use inherent usize::MAX
• 64f4a06 fix clippy::int_plus_one
• 41760c5 fix clippy::map_entry
• be7ffd0 expect clippy::unnecessary_get_then_check in benches
• bb35663 expect clippy::reversed_empty_ranges in tests
• Additional commits viewable in compare view

Updates tauri-plugin-shell from 2.3.5 to 2.3.6

Release notes

Sourced from tauri-plugin-shell's releases.

persisted-scope v2.3.6

[2.3.6]

Dependencies

• Upgraded to fs@2.5.0

Updating crates.io index
Packaging tauri-plugin-persisted-scope v2.3.6 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/persisted-scope)
Updating crates.io index
Packaged 12 files, 185.6KiB (83.9KiB compressed)
Uploading tauri-plugin-persisted-scope v2.3.6 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/persisted-scope)
Uploaded tauri-plugin-persisted-scope v2.3.6 to registry `crates-io`
note: waiting for tauri-plugin-persisted-scope v2.3.6 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
Published tauri-plugin-persisted-scope v2.3.6 at registry `crates-io`

nfc-js v2.3.6

[2.3.6]

• db9c5998 (#3531 by @​Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
• 52672616 (#3419 by @​pascalauroboa) Expect a NFCTag as input and return a ScanResponse in the scan function.

npm warn publish npm auto-corrected some errors in your package.json when publishing. Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦 @tauri-apps/plugin-nfc@2.3.6
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.1kB README.md
npm notice 5.0kB dist-js/index.cjs
npm notice 3.7kB dist-js/index.d.ts
npm notice 4.8kB dist-js/index.js
npm notice 679B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-nfc
npm notice version: 2.3.6
</tr></table> 

... (truncated)

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates tower-http from 0.7.0 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

• fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)
• fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)
• request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

• fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

• behavioral change:fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)
• decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)
• decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)
• fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)
• fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)
• set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661#712: tower-rs/tower-http#712#714: tower-rs/tower-http#714#716: tower-rs/tower-http#716#718: tower-rs/tower-http#718#722: tower-rs/tower-http#722#727: tower-rs/tower-http#727#728: tower-rs/tower-http#728

All the changes

• chore(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in tower-rs/tower-http#708
• fix(compression): reject non-empty data frames after codec is EOF by @​seanmonstar in tower-rs/tower-http#712
• Remove Clone derivations from SetMultipleResponseHeader* types by @​skeet70 in tower-rs/tower-http#714
• feat(request-id): Allow request-id constructor in const context by @​tottoto in tower-rs/tower-http#716
• fs: Avoid unnecessary conversions between SystemTime and HttpDate by @​tottoto in tower-rs/tower-http#717
• fs: Use HeaderValue::is_empty to check for empty values by @​tottoto in tower-rs/tower-http#720
• fs: Use HeaderValue::to_str for date headers by @​tottoto in tower-rs/tower-http#721

... (truncated)

Commits

• c941451 chore(release): prepare 0.7.1 (#729)
• 9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
• e2582e2 Allow ignoring multi-range requests (#727)
• 888f7fe feat(services): configure directory redirects (#728)
• 5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
• d154adb fix: reject multipart ranges before validation (#661)
• d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
• 90c072b Propagate ServeDir::try_call I/O errors (#718)
• 860922e fix(decompression): don't end the body on an empty data frame (#722)
• 8532252 docs(example)/custom future with multiple bodies (#711)
• Additional commits viewable in compare view

Updates tauri-plugin-notification from 2.3.3 to 2.4.0

Release notes

Sourced from tauri-plugin-notification's releases.

single-instance v2.4.0

[2.4.0]

Dependencies

• Upgraded to deep-link@2.4.7

fix

• 98e2c11e (#3194 by @​mrquantumoff) Breaking Change: On Linux, the DBus ID/name will now be <bundle-id>.SingleInstance instead of org.<bundle_id_underscores>.SingleInstance to follow DBus specifications.

  This will break the single-instance mechanism across different app versions if the app was installed multiple times.

  Added dbus_id builder method, which can be used to restore previous behavior. For a bundle identifier of com.tauri.my-example this would be dbus_id("org.com_tauri_my_example").

Updating crates.io index
Packaging tauri-plugin-single-instance v2.4.0 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
Updating crates.io index
Packaged 16 files, 211.8KiB (91.6KiB compressed)
Uploading tauri-plugin-single-instance v2.4.0 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
Uploaded tauri-plugin-single-instance v2.4.0 to registry `crates-io`
note: waiting for tauri-plugin-single-instance v2.4.0 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
Published tauri-plugin-single-instance v2.4.0 at registry `crates-io`

sql-js v2.4.0

[2.4.0]

• 1dc36128 (#3275 by @​mikenikles) Add support for Postgres NUMERIC and custom data types.

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing. Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦 @tauri-apps/plugin-sql@2.4.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
</tr></table> 

... (truncated)

Commits

• adc23d6 publish new versions (#2808)
• fc573b3 chore(deps): update rust crate tokio-tungstenite to 0.27 (#2768)
• 901ddfb ci: enable create-pull-request sign commits (#2809)
• f209b2f chore(deps): update tauri monorepo to v2.6.0 (v2) (#2804)
• 19ed1bd chore(deps): update dependency prettier to v3.6.1 (#2806)
• 5779099 publish new versions (#2780)
• 2aec8ff feat(opener): add inAppBrowser option for iOS and Android (#2803)
• 9799f0d fix(log): iOS simulator freezing due to early logging (#2802)
• 8cdaacd chore(examples): update API example mobile projects
• d46778e chore(deps): update dependency typescript-eslint to v8.35.0 (#2794)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions