Skip to content

build(deps): fold the pending Cargo bumps + auto-merge Dependabot - #132

Merged
PhantomDave merged 2 commits into
mainfrom
claude/awesome-sagan-25hjdl
Oct 23, 2026
Merged

PhantomDave merged 2 commits into
mainfrom
claude/awesome-sagan-25hjdl

Conversation

@PhantomDave

Copy link
Copy Markdown
Owner

Two commits:

  1. build(deps): applies Dependabot's 10 open Cargo PRs to packages/desktop-tauri/src-tauri/Cargo.lock in one go, so CI runs once against current main instead of ten lockfile rebases. tauri 2.12.2, tauri-build 2.7.2, tauri-plugin-shell 2.5.0, tauri-plugin-updater 2.14.0, tauri-plugin-dialog 2.8.3, tauri-plugin-opener 2.7.2, tokio 1.53.3, rustls 0.23.46, serde_json 1.0.154, libc 0.2.191. The transitive updates (minisign-verify 0.3.0, tauri-plugin-fs 2.7.1, sigchld/signal-hook dropped) are what the plugins require. Dependabot closes Build(deps): Bump tauri from 2.12.1 to 2.12.2 in /packages/desktop-tauri/src-tauri #113 Build(deps): Bump tauri-plugin-shell from 2.4.0 to 2.5.0 in /packages/desktop-tauri/src-tauri #118 Build(deps): Bump tauri-build from 2.7.2 to 2.7.3 in /packages/desktop-tauri/src-tauri #119 Build(deps): Bump serde_json from 1.0.151 to 1.0.154 in /packages/desktop-tauri/src-tauri #120 Build(deps): Bump rustls from 0.23.45 to 0.23.46 in /packages/desktop-tauri/src-tauri #121 Build(deps): Bump tokio from 1.53.2 to 1.53.3 in /packages/desktop-tauri/src-tauri #122 Build(deps): Bump tauri-plugin-updater from 2.13.1 to 2.14.0 in /packages/desktop-tauri/src-tauri #123 Build(deps): Bump tauri-plugin-dialog from 2.8.1 to 2.8.3 in /packages/desktop-tauri/src-tauri #124 Build(deps): Bump tauri-plugin-opener from 2.7.0 to 2.7.2 in /packages/desktop-tauri/src-tauri #125 Build(deps): Bump libc from 0.2.190 to 0.2.191 in /packages/desktop-tauri/src-tauri #127 once this lands.
  2. ci: .github/workflows/dependabot-automerge.yml enables auto-merge (squash) on Dependabot PRs that aren't a semver-major bump, so they merge themselves once the required checks pass. Majors stay manual, because CI doesn't launch the desktop app.

For the workflow to work, the repo needs Allow auto-merge turned on, and main needs required status checks. Without required checks, GitHub merges before CI finishes.

Checks

cargo check on the Tauri shell (after building the UI and the sidecar, as CI's Tauri Check job does) and the run-desktop sidecar smoke (10/10 PASS).


Generated by Claude Code

Folds Dependabot's open Cargo PRs into one lockfile change: tauri 2.12.2,
tauri-build 2.7.2, tauri-plugin-shell 2.5.0, tauri-plugin-updater 2.14.0,
tauri-plugin-dialog 2.8.3, tauri-plugin-opener 2.7.2, tokio 1.53.3,
rustls 0.23.46, serde_json 1.0.154, libc 0.2.191.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01M1R9ZLKpyRUrHTQtVFPsKs
Enables GitHub auto-merge (squash) on Dependabot PRs that aren't a
semver-major update, so they land once main's required checks pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01M1R9ZLKpyRUrHTQtVFPsKs
@PhantomDave
PhantomDave enabled auto-merge (squash) October 23, 2026 06:37
@PhantomDave
PhantomDave merged commit 7cc8c6d into main Oct 23, 2026
8 checks passed
@PhantomDave
PhantomDave deleted the claude/awesome-sagan-25hjdl branch October 23, 2026 06:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants