chore(deps): Bump the minor-and-patch group in /src-tauri with 2 updates - #98

Sourced from trash's releases.

v5.3.0

Documentation

• configure docs.rs platform targets

  I reduced the target list to the 3 common ones. Let's see if it works.

  Recent docs.rs releases only expose Linux documentation. Explicitly request the five standard docs.rs targets so macOS and Windows documentation are included, keeping Linux first as the default landing page.

  A Cargo metadata assertion failed before the change because the docs.rs target list was absent, and passes with the configured targets.

New Features

• add Portal backend This only adds the basic functionality to make it work.

Bug Fixes

• preserve path prefixes when decoding slashes

  Decode the complete path byte string instead of collecting decoded components into a PathBuf. A component beginning with %2F previously discarded the prefix, redirected restoration to the filesystem root, and could erase relative parent traversal before validation.

  Add relative and absolute encoded-separator regressions, traversal rejection, and restoration coverage. The relative separator case fails before the fix.

• reject original paths without filenames

  Validate the decoded path before joining the trash base so dot paths cannot resolve to the base directory. Route roots and paths ending in parent components through the invalid-original-path warning as well.

  Add literal and encoded dot and parent regression cases. The dot-path case fails before the fix; the listing regression passes with and without chrono afterward.

• trim surrounding trashinfo path whitespace

  Trim both ends of the encoded Path value before decoding so trailing spaces and tabs do not become filename bytes. Extend the whitespace fixture while retaining encoded filename space coverage.

• report why the shell refused to recycle an item delete answered every item the shell skipped with Error::Unknown { "Some operations were aborted" }. With FOF_NO_UI a refused item is skipped, not asked about: PerformOperations and FinishOperations both report success, and only GetAnyOperationsAborted says that something

... (truncated)

Sourced from trash's changelog.

5.3.0 (2026-11-05)

Documentation

• configure docs.rs platform targets

  I reduced the target list to the 3 common ones. Let's see if it works.

  Recent docs.rs releases only expose Linux documentation. Explicitly request the five standard docs.rs targets so macOS and Windows documentation are included, keeping Linux first as the default landing page.

  A Cargo metadata assertion failed before the change because the docs.rs target list was absent, and passes with the configured targets.

New Features

• add Portal backend This only adds the basic functionality to make it work.

Bug Fixes

• preserve path prefixes when decoding slashes

  Decode the complete path byte string instead of collecting decoded components into a PathBuf. A component beginning with %2F previously discarded the prefix, redirected restoration to the filesystem root, and could erase relative parent traversal before validation.

  Add relative and absolute encoded-separator regressions, traversal rejection, and restoration coverage. The relative separator case fails before the fix.

• reject original paths without filenames

  Validate the decoded path before joining the trash base so dot paths cannot resolve to the base directory. Route roots and paths ending in parent components through the invalid-original-path warning as well.

  Add literal and encoded dot and parent regression cases. The dot-path case fails before the fix; the listing regression passes with and without chrono afterward.

• trim surrounding trashinfo path whitespace

  Trim both ends of the encoded Path value before decoding so trailing spaces and tabs do not become filename bytes. Extend the whitespace fixture while retaining encoded filename space coverage.

• report why the shell refused to recycle an item delete answered every item the shell skipped with Error::Unknown { "Some operations were aborted" }. With FOF_NO_UI a refused item is skipped, not asked about: PerformOperations and FinishOperations both

... (truncated)

• 0fdaf8d Release trash v5.3.0
• dd2b8f7 Merge pull request #161 from Byron/fix/freedesktop-trashinfo-reviewed
• b6e2624 fix(freedesktop): preserve path prefixes when decoding slashes
• 4ee80bd fix(freedesktop): reject original paths without filenames
• 6fcae5b fix(freedesktop): trim surrounding trashinfo path whitespace
• e00d049 Merge pull request #158 from stefan-siebert/fix/windows-list-file-name
• b8f46cc Merge pull request #159 from stefan-siebert/fix/windows-report-hresult
• 0d0a038 review
• 8afaa34 fix(windows): report why the shell refused to recycle an item (#96)
• 7f63659 fix(windows): list items under their file name, extension included
• Additional commits viewable in compare view

Sourced from flate2's releases.

v1.1.11

Fixed

• fixup! Complete sync flushes across output buffer boundaries (#581)
• Separate gzip header reads from compressed data
• Defer gzip input errors without losing read progress
• Preserve gzip header progress on input read errors (#571)

Other

• Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• Merge pull request #577 from rust-lang/fix-loop
• Setup trusted publishing for the flate2 crate
• Complete sync flushes across output buffer boundaries (#581)
• Fix "can by extended" typos in deflate and zlib write docs
• Merge pull request #579 from NUAAwqy/docs/fix-double-space
• Fix double space in read module doc comment
• Add missing preposition in README description
• Cover decoder retries across the output buffer boundary
• Drain output before refilling the buffer
• Clarify partial-write buffering behavior
• Avoid shifting buffered output on partial writes
• Merge pull request #567 from ndossche/more-asserts
• Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
• Fix encoder writes hanging after try_finish (#576)
• Avoid panicking when dropping unfinished compressors
• Merge pull request #565 from HDauven/zlib-rs-uninit-output
• still allow resetting incomplete write decoders
• Assert return result of reset calls
• Reject incomplete streams in write decoders
• Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
• review
• Reject incomplete streams when finishing write-side decoders
• Preserve window size and gzip mode across Decompress::reset
• preserve runtime detection in backend examples (#570)
• Make miniz_oxide dictionary clearing explicit on reset
• Harden miniz_oxide decompressor reset
• Deduplicate zlib-rs flush conversions
• Use native zlib-rs uninitialized output

Sourced from flate2's changelog.

1.1.11 - 2026-11-06

Fixed

• fixup! Complete sync flushes across output buffer boundaries (#581)
• Separate gzip header reads from compressed data
• Defer gzip input errors without losing read progress
• Preserve gzip header progress on input read errors (#571)

Other

• Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• Merge pull request #577 from rust-lang/fix-loop
• Setup trusted publishing for the flate2 crate
• Complete sync flushes across output buffer boundaries (#581)
• Fix "can by extended" typos in deflate and zlib write docs
• Merge pull request #579 from NUAAwqy/docs/fix-double-space
• Fix double space in read module doc comment
• Add missing preposition in README description
• Cover decoder retries across the output buffer boundary
• Drain output before refilling the buffer
• Clarify partial-write buffering behavior
• Avoid shifting buffered output on partial writes
• Merge pull request #567 from ndossche/more-asserts
• Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
• Fix encoder writes hanging after try_finish (#576)
• Avoid panicking when dropping unfinished compressors
• Merge pull request #565 from HDauven/zlib-rs-uninit-output
• still allow resetting incomplete write decoders
• Assert return result of reset calls
• Reject incomplete streams in write decoders
• Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
• review
• Reject incomplete streams when finishing write-side decoders
• Preserve window size and gzip mode across Decompress::reset
• preserve runtime detection in backend examples (#570)
• Make miniz_oxide dictionary clearing explicit on reset
• Harden miniz_oxide decompressor reset
• Deduplicate zlib-rs flush conversions
• Use native zlib-rs uninitialized output

• cd06529 chore: release v1.1.11
• 6ff4098 Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• 5f68913 Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• 5582d95 fixup! Complete sync flushes across output buffer boundaries (#581)
• d05c7c4 Merge pull request #577 from rust-lang/fix-loop
• 5c7ee7a Merge pull request #583 from Kobzol/trusted-publishing
• cc527c6 Setup trusted publishing for the flate2 crate
• 54f49cd Merge pull request #580 from NUAAwqy/fix/can-by-extended-typo
• 491df15 Complete sync flushes across output buffer boundaries (#581)
• a7a1161 Fix "can by extended" typos in deflate and zlib write docs
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions