build(deps): bump the rust group across 1 directory with 5 updates

[dependabot]

Bumps the rust group with 5 updates in the / directory:

Package	From	To
jsonschema	0.49.9	0.58.3
surfman	0.13.0	0.14.0
webrtc-util	0.11.0	0.17.2
glow	0.17.0	0.18.0
tauri-plugin-single-instance	2.5.0	2.5.1

Updates jsonschema from 0.49.9 to 0.58.3

Release notes

Sourced from jsonschema's releases.

[CLI] Release 0.58.3

No release notes provided.

[Python] Release 0.58.3

Fixed

• Keywords of a subschema declaring a Draft 2019-09+ $schema under a Draft 4, 6 or 7 root being ignored.
• Evaluation annotations including those from subschemas of a failing schema (a failing schema produces no annotations).
• Embedded resources declaring their own $schema being checked against the root's meta-schema.

[Ruby] Release 0.58.3

Fixed

• Keywords of a subschema declaring a Draft 2019-09+ $schema under a Draft 4, 6 or 7 root being ignored.
• Evaluation annotations including those from subschemas of a failing schema (a failing schema produces no annotations).
• Embedded resources declaring their own $schema being checked against the root's meta-schema.

[Rust] Release 0.58.3

Fixed

• Keywords of a subschema declaring a Draft 2019-09+ $schema under a Draft 4, 6 or 7 root being ignored.
• Evaluation annotations including those from subschemas of a failing schema (a failing schema produces no annotations).
• Embedded resources declaring their own $schema being checked against the root's meta-schema.

[CLI] Release 0.58.2

No release notes provided.

[Python] Release 0.58.2

Fixed

• $dynamicRef targets in another document resolving relative references and reporting absolute keyword locations against the referencing document.
• $ref to an $anchor or fragment $id validating against another anchor in the same document. #1668
• schema_path of errors under a $ref or $dynamicRef to a named schema pointing at the resource root instead of that schema.

[Ruby] Release 0.58.2

Fixed

• $dynamicRef targets in another document resolving relative references and reporting absolute keyword locations against the referencing document.
• $ref to an $anchor or fragment $id validating against another anchor in the same document. #1668
• schema_path of errors under a $ref or $dynamicRef to a named schema pointing at the resource root instead of that schema.

[Rust] Release 0.58.2

Fixed

• $dynamicRef targets in another document resolving relative references and reporting absolute keyword locations against the referencing document.
• $ref to an $anchor or fragment $id validating against another anchor in the same document. #1668
• schema_path of errors under a $ref or $dynamicRef to a named schema pointing at the resource root instead of that schema.

[CLI] Release 0.58.1

No release notes provided.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.58.3] - 2026-09-30

Fixed

• Keywords of a subschema declaring a Draft 2019-09+ $schema under a Draft 4, 6 or 7 root being ignored.
• Evaluation annotations including those from subschemas of a failing schema (a failing schema produces no annotations).
• Embedded resources declaring their own $schema being checked against the root's meta-schema.

[0.58.2] - 2026-09-28

Fixed

• $dynamicRef targets in another document resolving relative references and reporting absolute keyword locations against the referencing document.
• $ref to an $anchor or fragment $id validating against another anchor in the same document. #1668
• schema_path of errors under a $ref or $dynamicRef to a named schema pointing at the resource root instead of that schema.

[0.58.1] - 2026-09-26

Fixed

• Crash in Pyo3 validators when an Enum member's value override emptied a list or dict holding the instance being read.

Performance

• uri and uri-reference formats check the syntax directly instead of parsing each value into a URI.
• Enum members read their stored value directly instead of calling the value property in Pyo3 validators.

[0.58.0] - 2026-09-25

Added

• backend = Pyo3 on #[jsonschema::validator], generating a validator that reads Python objects in place.
• backend = Magnus on #[jsonschema::validator], generating a validator that reads Ruby objects in place.
• jsonschema::meta::pyo3, the bundled meta-schema validators for a schema held as a Python object.
• jsonschema::meta::magnus, the bundled meta-schema validators for a schema held as a Ruby object.
• methods = { ... } on #[jsonschema::validator], selecting which of is_valid, validate, and iter_errors are generated.
• json::Jsonb, validating a Postgres jsonb value in place, behind the jsonb feature.

Performance

• oneOf and anyOf whose branches each require a property fixed to a distinct string validate only the branch matching the instance's value.
• Generated validate checks required in the same pass over an object as properties, instead of looking up each required name.

Fixed

• A oneOf over $ref branches beside a sibling none of them admits, which canonicalized to an allOf instead of false.
• multipleOf incorrectly accepted 1e-400 and other magnitudes below the smallest f64 subnormal with arbitrary-precision (they are not zero).
• Numeric keywords panicked on a custom representation holding a number past f64 without arbitrary-precision.

[0.57.0] - 2026-09-22

... (truncated)

Commits

• a171a01 chore(rust): Release 0.58.3
• b64f566 fix: Embedded resources declaring their own $schema being checked against t...
• 8e6f96a fix: Annotations from subschemas of a failing schema in evaluation output
• a379919 fix: Keywords of a subschema declaring a Draft 2019-09+ $schema under a Dra...
• a11504a chore(python): Release 0.58.2
• b839b37 chore(ruby): Release 0.58.2
• 3d48b90 chore(rust): Release 0.58.2
• fcf4fb3 build(deps): bump crates/jsonschema/tests/suite
• b8d917d build(deps): update hegeltest requirement from 0.46 to 0.47
• ed5d2ac build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0
• Additional commits viewable in compare view

Updates surfman from 0.13.0 to 0.14.0

Release notes

Sourced from surfman's releases.

0.14.0

What's Changed

• Remove top-level export of NativeDevice, NativeContext, and NativeConnection by @​mrobinson in servo/surfman#386
• Only run a single macOS job in CI by @​mrobinson in servo/surfman#388
• Remove support for version 0.5.x of raw-window-handle by @​mrobinson in servo/surfman#387
• Do not consider the EGLDisplay owned when creating from a pre-existing X11 Display by @​Melchizedek6809 in servo/surfman#384
• Fix build warnings in chaos_game.rs by @​mrobinson in servo/surfman#389
• Remove the sm-raw-window-handle and chains features by @​mrobinson in servo/surfman#390
• Fix all of the clippy warnings that can be fixed with cargo clippy --fix by @​mrobinson in servo/surfman#391
• Release version 0.14 by @​mrobinson in servo/surfman#392

New Contributors

• @​Melchizedek6809 made their first contribution in servo/surfman#384

Full Changelog: servo/surfman@v0.13.0...v0.14.0

Commits

• ca64434 Release version 0.14 (#392)
• 9e40fc0 Fix all of the clippy warnings that can be fixed with cargo clippy --fix (#...
• 05cc1c2 Remove the sm-raw-window-handle and chains features (#390)
• 64bbad9 Fix build warnings in chaos_game.rs (#389)
• da5438c Do not consider the EGLDisplay owned when creating from a pre-existing X11 Di...
• d0803c6 Remove support for version 0.5.x of raw-window-handle (#387)
• 4b39a9f Only run a single macOS job in CI (#388)
• bddc50a Remove top-level export of NativeDevice, NativeContext, and `NativeConnec...
• See full diff in compare view

Updates webrtc-util from 0.11.0 to 0.17.2

Release notes

Sourced from webrtc-util's releases.

v0.17.2

What's Changed

• ice: Release TURN allocation even if candidate was already closed by @​marcin-p-porebski in webrtc-rs/webrtc#799
• fix(ice): always send STUN consent checks (RFC 7675) by @​brady-pplx in webrtc-rs/webrtc#803
• util: don't tear down UDP listener read_loop on WSAECONNRESET (Windows) by @​rwtd in webrtc-rs/webrtc#812
• Release mDNS resources when connections close by @​mmalmi in webrtc-rs/webrtc#818
• sctp: lower INITIAL_MTU to 1191 and expose the MTU in association::Config by @​phact in webrtc-rs/webrtc#807

New Contributors

• @​brady-pplx made their first contribution in webrtc-rs/webrtc#803
• @​rwtd made their first contribution in webrtc-rs/webrtc#812
• @​mmalmi made their first contribution in webrtc-rs/webrtc#818
• @​phact made their first contribution in webrtc-rs/webrtc#807

Full Changelog: webrtc-rs/webrtc@v0.17.1...v0.17.2

v0.17.1

Full Changelog: webrtc-rs/webrtc@v0.17.0...v0.17.1

v0.17.0

🚨 Important Notice: v0.17.0 Release and Future Direction

v0.17.x is the final feature release of the Tokio-coupled async WebRTC implementation.

• v0.17.x branch: A dedicated branch will be created for v0.17.x that will receive bug fixes only (no new features).
• Master branch: Will transition to a new Sans-IO based architecture built on top of webrtc-rs/rtc.

Why this change?

The project is shifting toward a Sans-IO WebRTC implementation that decouples the protocol logic from any specific async runtime. This new architecture will:

• ✅ Support multiple async runtimes (Tokio, smol, async-std, etc.)
• ✅ Provide a clean, protocol-centric Sans-IO core via webrtc-rs/rtc
• ✅ Enable a truly runtime-agnostic, async-friendly WebRTC implementation in Rust

If you need Tokio-specific stability, please use the v0.17.x branch. If you want to adopt the new runtime-agnostic approach, follow development on the master branch.

What's Changed

• Add support for multi codec negotiation by @​rainliu in webrtc-rs/webrtc#741
• tokio-test dev-dependencies is used for only webrtc-util by @​Razzwan in webrtc-rs/webrtc#742
• chore: fix a typo "dail"->"dial" by @​link2xt in webrtc-rs/webrtc#744
• Remove Seek requirement for some writers by @​Yesterday17 in webrtc-rs/webrtc#743
• Perf: Changed RR and SR ticker behavior to Skip to avoid overdue reports and catchup bursts by @​Havunen in webrtc-rs/webrtc#745
• PR Submission for Issue #749 by @​Wandalen in webrtc-rs/webrtc#750
• Make psk callback async-capable by @​mdelete in webrtc-rs/webrtc#751
• Add markdown files for basic explanation on WebRTC by @​amitnos123 in webrtc-rs/webrtc#756
• Document feature flags in lib.rs by @​amitnos123 in webrtc-rs/webrtc#759
• Certain enhancements, from my experience I wish I knew sooner by @​ris-work in webrtc-rs/webrtc#760
• feat(srtp): add AES CM 256 crypto profiles by @​RRRadicalEdward in webrtc-rs/webrtc#764

... (truncated)

Commits

• 1da3fe8 bump version to v0.17.2
• 0ddec51 sctp: lower INITIAL_MTU to 1191 and expose the MTU in association::Config (#807)
• 074d95a Release mDNS resources on connection close (#818)
• 6dd494a util: don't tear down UDP listener read_loop on WSAECONNRESET (#812)
• 9238d12 fix(ice): always send STUN consent checks (RFC 7675) (#803)
• 6b94718 ice: Release TURN allocation even if candidate was already closed (#799)
• e9fe1bc bump version to v0.17.1
• 97b3c4b make RTCIceCandidatePair field public
• 7ec5d5d update examples
• 82c60ec reorg workspace and bump version to v0.17.0
• Additional commits viewable in compare view

Updates glow from 0.17.0 to 0.18.0

Commits

• See full diff in compare view

Updates tauri-plugin-single-instance from 2.5.0 to 2.5.1

Release notes

Sourced from tauri-plugin-single-instance's releases.

single-instance v2.5.1

[2.5.1]

• ecd3273e (#3480 by @​renovate) Updated windows-rs dependencies:

  • deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
  • opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
  • single-instance: updated windows-sys to 0.61
  • updater: updated windows-sys to 0.61

Dependencies

• Upgraded to deep-link@2.6.0

Updating crates.io index
   Packaging tauri-plugin-single-instance v2.5.1 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Updating crates.io index
    Packaged 15 files, 168.2KiB (46.0KiB compressed)
   Uploading tauri-plugin-single-instance v2.5.1 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Uploaded tauri-plugin-single-instance v2.5.1 to registry `crates-io`
note: waiting for tauri-plugin-single-instance v2.5.1 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
warning: timed out waiting for tauri-plugin-single-instance v2.5.1 to be available in registry `crates-io`
  |
  = note: the registry may have a backlog that is delaying making the crate available. The crate should be available soon.

barcode-scanner-js v2.5.1

[2.5.1]

• 569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-barcode-scanner@2.5.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
</tr></table> 

... (truncated)

Commits

• 5c7668b publish new versions (#3397)
• ec05401 chore(deps): update rust crate toml to v1 (#3323)
• b86e999 chore(deps): update tauri packages to 2.11 (#3407)
• c463d8a chore(deps): update rustls-webpki in lockfile, ignore core2 in audit (#3405)
• 1bb7beb chore(deps): bump openssl (#3402)
• 3412fa2 docs(readme): fix platform support matrix (opener supports mobile)
• af81fda docs(readme): fix platform support matrix (mobile is supported)
• c1fd33b fix(opener): allow open network share locations (#3343)
• 250857b chore(deps): update dependency typescript to v6 (#3363)
• 964e13f fix(store): dead lock trying to set while exiting (#3395)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 721569a2-391a-46d5-a3ae-2b92271e4b77

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}