Skip to content

build(deps): bump log from 0.4.33 to 0.4.34 in /src-tauri - #561

Merged
qnbs merged 1 commit into
mainfrom
dependabot/cargo/src-tauri/log-0.4.34
Sep 2, 2026
Merged

build(deps): bump log from 0.4.33 to 0.4.34 in /src-tauri#561
qnbs merged 1 commit into
mainfrom
dependabot/cargo/src-tauri/log-0.4.34

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps log from 0.4.33 to 0.4.34.

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [log](https://github.com/rust-lang/log) from 0.4.33 to 0.4.34.
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.33...0.4.34)
---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.34
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 31, 2026
@dependabot
dependabotBot requested a review from qnbs as a code ownerAugust 31, 2026 23:44
@dependabotdependabotBot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 31, 2026
@vercel

vercelBot commented Aug 31, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated
worldscript-studioReadyReadyPreviewAug 31, 2026 11:45pm UTC

@codeant-ai

Copy link
Copy Markdown

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

DiffPackageSupply Chain
Security
VulnerabilityQualityMaintenanceLicense
Updatedcargo/​log@​0.4.33 ⏵ 0.4.3410010093100100

View full report

@codeant-ai

Copy link
Copy Markdown

🏁 CodeAnt Quality Gate Results

Commit:d6988350
Scan Time: 2026-08-31 23:47:26 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality GateStatusDetails
Secrets✅ PASSED0 secrets found
Duplicate Code✅ PASSED0.0% duplicated
SAST✅ PASSEDNo security issues
Bugs✅ PASSEDRating S: No bugs
IAC✅ PASSEDNo IAC issues

View Full Results

@codecov

codecovBot commented Sep 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@qnbs
qnbs merged commit 019c908 into mainSep 2, 2026
34 checks passed
@qnbs
qnbs deleted the dependabot/cargo/src-tauri/log-0.4.34 branch September 2, 2026 20:44
qnbs added a commit that referenced this pull request Sep 5, 2026
* chore(release): bump version to v1.28.4
Patch release reconciling release-truth documentation with everything
merged to main since v1.28.3 (62 commits / ~40 PRs, audited against
live GitHub state, not assumed from commit subjects):
- fix: PWA first-install unprompted reload (#585, PR #613)
- fix: shared-origin service-worker cache-read isolation (#514, PR #612)
- fix: Factory Reset could reboot into Settings instead of Welcome
Portal (PR #592)
- fix: preserve-first desktop corruption recovery (PR #542) and a
distinct filesystem-I/O recovery action (PR #545)
- fix: intentionally cleared project metadata no longer reappears
(PR #546)
- a11y: Welcome/Home dashboard WCAG AA contrast + reduced-motion
cascade fix + default appearance preset change (#565, PR #609);
ManuscriptEditor contrast (PR #560)
- security: fflate ZIP64-parsing DoS override (PR #595); routine
dependency floor bumps (PR #587, #561, #562, #594)
- docs: R-15 secure desktop storage design contract admitted (PRs
#564, #580, #581, #582, #584) — design only, no implementation yet
- tests: visual regression testing repaired — baselines were directory
listings, not the application (PR #610); IDB reset-quiescence
hardening (PR #596); WelcomePortal E2E navigation made
locale-independent (PR #590)
Everything classified as pure internal/CI-governance churn (PR-size
exception plumbing, dual-graph tooling, toolchain pins) is omitted from
CHANGELOG.md as non-user-facing.
Version bumped via the existing sync scripts (sync-tauri-version.mjs,
sync-sw-version.mjs) across package.json, src-tauri/Cargo.toml,
src-tauri/tauri.conf.json, src-tauri/Cargo.lock, AGENTS.md, and
public/sw.js's APP_VERSION.
CHANGELOG.md and README.md use the established release-candidate
marker convention (<!-- release-candidate: v1.28.4 -->) so the dated
entry and version badge are truthful before the v1.28.4 tag exists;
both markers are removed in a follow-up post-release truth-sync once
the tag and GitHub Release are published, matching the v1.28.2/v1.28.3
precedent.
TODO.md's Current Sprint section was archived (its final "release cut
remains open" bullet is now resolved — v1.28.2 and v1.28.3 both
shipped) and replaced with the actual current sprint: this release cut
followed by the R-15 desktop at-rest encryption priority program.
AUDIT.md is intentionally not touched here — its release-gate entry
requires real post-merge CI/CodeQL run evidence that doesn't exist
until after this PR merges and the tag is cut, matching how every
prior release's AUDIT.md entry was written (a follow-up commit, not
part of the release-prep PR itself).
* docs(release): correct premature done-marker on the v1.28.4 TODO item
TODO.md's Current Sprint marked the release cut as done (checked
'v1.28.4' release cut, reconciling ... AUDIT.md truth ...) while this
same PR's own Non-goals section correctly states AUDIT.md is not
touched here, and while no tag, GitHub Release, or release artifacts
exist yet. Corrected to in-progress language naming PR #615 directly
and listing what actually remains pending (tag, release, artifacts,
post-release AUDIT.md evidence).
* docs(release): correct R-15 gate language and credit PR #596's real fix
Two corrections from review, verified against live evidence before
fixing:
1. TODO.md's Current Sprint claimed R-15 desktop at-rest encryption
implementation was being prioritized now. docs/native/DESKTOP-
MIGRATION-ROADMAP-REV3.md explicitly forbids pulling Wave 3/4 R-15
implementation ahead of unresolved Wave 2 authority prerequisites,
and CORE-MIGRATION-LEDGER.md row 10 records
S5_IMPLEMENTATION_READY=NO. Corrected to state R-15 design is
complete but implementation stays gated behind the still-open Wave
2 prerequisite (ledger row 9: the project state-shape compatibility
adapter), which is what this sprint's desktop-storage work actually
is.
2. CHANGELOG.md listed PR #596 only as generic IDB test hardening
under Tests. Verified against its actual diff: deleteDatabase()
previously resolved on a genuine onerror or an onblocked event as
if deletion succeeded, so wipeAllAppData() could report Factory
Reset complete while a database was never actually deleted. onerror
now rejects; onblocked waits for the connection to close before
giving up. This is a real production data-integrity fix, not test
hardening, and now has its own Fixed entry.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filerustPull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@qnbs