Skip to content

build(deps): bump log from 0.4.33 to 0.4.34 in /src-tauri - #561

Merged
qnbs merged 1 commit into
mainfrom
dependabot/cargo/src-tauri/log-0.4.34
Sep 2, 2026
Merged

qnbs merged 1 commit into
mainfrom
dependabot/cargo/src-tauri/log-0.4.34

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps log from 0.4.33 to 0.4.34.

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [log](https://github.com/rust-lang/log) from 0.4.33 to 0.4.34.
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.33...0.4.34)

---
updated-dependencies:
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 31, 2026
@dependabot
dependabot Bot requested a review from qnbs as a code owner August 31, 2026 23:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 31, 2026
@vercel

vercel Bot commented Aug 31, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
worldscript-studio Ready Ready Preview Aug 31, 2026 11:45pm UTC

@codeant-ai

codeant-ai Bot commented Aug 31, 2026

Copy link
Copy Markdown

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​log@​0.4.33 ⏵ 0.4.3410010093100100

View full report

@codeant-ai

codeant-ai Bot commented Aug 31, 2026

Copy link
Copy Markdown

🏁 CodeAnt Quality Gate Results

Commit: d6988350
Scan Time: 2026-08-31 23:47:26 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality Gate Status Details
Secrets ✅ PASSED 0 secrets found
Duplicate Code ✅ PASSED 0.0% duplicated
SAST ✅ PASSED No security issues
Bugs ✅ PASSED Rating S: No bugs
IAC ✅ PASSED No IAC issues

View Full Results

@codecov

codecov Bot commented Sep 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@qnbs
qnbs merged commit 019c908 into main Sep 2, 2026
34 checks passed
@qnbs
qnbs deleted the dependabot/cargo/src-tauri/log-0.4.34 branch September 2, 2026 20:44
qnbs added a commit that referenced this pull request Sep 5, 2026
* chore(release): bump version to v1.28.4

Patch release reconciling release-truth documentation with everything
merged to main since v1.28.3 (62 commits / ~40 PRs, audited against
live GitHub state, not assumed from commit subjects):

- fix: PWA first-install unprompted reload (#585, PR #613)
- fix: shared-origin service-worker cache-read isolation (#514, PR #612)
- fix: Factory Reset could reboot into Settings instead of Welcome
  Portal (PR #592)
- fix: preserve-first desktop corruption recovery (PR #542) and a
  distinct filesystem-I/O recovery action (PR #545)
- fix: intentionally cleared project metadata no longer reappears
  (PR #546)
- a11y: Welcome/Home dashboard WCAG AA contrast + reduced-motion
  cascade fix + default appearance preset change (#565, PR #609);
  ManuscriptEditor contrast (PR #560)
- security: fflate ZIP64-parsing DoS override (PR #595); routine
  dependency floor bumps (PR #587, #561, #562, #594)
- docs: R-15 secure desktop storage design contract admitted (PRs
  #564, #580, #581, #582, #584) — design only, no implementation yet
- tests: visual regression testing repaired — baselines were directory
  listings, not the application (PR #610); IDB reset-quiescence
  hardening (PR #596); WelcomePortal E2E navigation made
  locale-independent (PR #590)

Everything classified as pure internal/CI-governance churn (PR-size
exception plumbing, dual-graph tooling, toolchain pins) is omitted from
CHANGELOG.md as non-user-facing.

Version bumped via the existing sync scripts (sync-tauri-version.mjs,
sync-sw-version.mjs) across package.json, src-tauri/Cargo.toml,
src-tauri/tauri.conf.json, src-tauri/Cargo.lock, AGENTS.md, and
public/sw.js's APP_VERSION.

CHANGELOG.md and README.md use the established release-candidate
marker convention (<!-- release-candidate: v1.28.4 -->) so the dated
entry and version badge are truthful before the v1.28.4 tag exists;
both markers are removed in a follow-up post-release truth-sync once
the tag and GitHub Release are published, matching the v1.28.2/v1.28.3
precedent.

TODO.md's Current Sprint section was archived (its final "release cut
remains open" bullet is now resolved — v1.28.2 and v1.28.3 both
shipped) and replaced with the actual current sprint: this release cut
followed by the R-15 desktop at-rest encryption priority program.

AUDIT.md is intentionally not touched here — its release-gate entry
requires real post-merge CI/CodeQL run evidence that doesn't exist
until after this PR merges and the tag is cut, matching how every
prior release's AUDIT.md entry was written (a follow-up commit, not
part of the release-prep PR itself).

* docs(release): correct premature done-marker on the v1.28.4 TODO item

TODO.md's Current Sprint marked the release cut as done (checked
'v1.28.4' release cut, reconciling ... AUDIT.md truth ...) while this
same PR's own Non-goals section correctly states AUDIT.md is not
touched here, and while no tag, GitHub Release, or release artifacts
exist yet. Corrected to in-progress language naming PR #615 directly
and listing what actually remains pending (tag, release, artifacts,
post-release AUDIT.md evidence).

* docs(release): correct R-15 gate language and credit PR #596's real fix

Two corrections from review, verified against live evidence before
fixing:

1. TODO.md's Current Sprint claimed R-15 desktop at-rest encryption
   implementation was being prioritized now. docs/native/DESKTOP-
   MIGRATION-ROADMAP-REV3.md explicitly forbids pulling Wave 3/4 R-15
   implementation ahead of unresolved Wave 2 authority prerequisites,
   and CORE-MIGRATION-LEDGER.md row 10 records
   S5_IMPLEMENTATION_READY=NO. Corrected to state R-15 design is
   complete but implementation stays gated behind the still-open Wave
   2 prerequisite (ledger row 9: the project state-shape compatibility
   adapter), which is what this sprint's desktop-storage work actually
   is.

2. CHANGELOG.md listed PR #596 only as generic IDB test hardening
   under Tests. Verified against its actual diff: deleteDatabase()
   previously resolved on a genuine onerror or an onblocked event as
   if deletion succeeded, so wipeAllAppData() could report Factory
   Reset complete while a database was never actually deleted. onerror
   now rejects; onblocked waits for the connection to close before
   giving up. This is a real production data-integrity fix, not test
   hardening, and now has its own Fixed entry.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant