Bump @tauri-apps/cli from 2.11.4 to 2.11.5 in /desktop

[dependabot]

Bumps @tauri-apps/cli from 2.11.4 to 2.11.5.

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.11.5

[2.11.5]

Security fixes

• 5a87bab12 Record the app version in the trusted comment of updater signatures, so a signed artifact is bound to the version it was released as.

  An update endpoint response is not signed, and the signature only covers the downloaded artifact, so the announced version on its own does not prove which release the url and signature point at. minisign covers the trusted comment with its global signature, which lets the updater plugin compare the two and reject a response that pairs a version number with a different release. Enable requireSignedVersion in the updater plugin configuration to enforce this.

  tauri build fills the version in automatically, and tauri plugin add updater now enables requireSignedVersion for the project it is adding the plugin to. tauri signer sign gains an --app-version flag for signing updater artifacts by hand, and warns when it is omitted.

Dependencies

• Upgraded to tauri-cli@2.11.5

Commits

• 9452dde fix audit
• 7c2fe9f run covector version
• 7d71a8a add publish-hotfix workflow
• 5a87bab Merge commit from fork
• e901f1d Merge commit from fork
• 7cd7136 apply version updates (#15632)
• 44594d6 Revert "fix(deps): pin time to <0.3.52" (#15631)
• ca90b46 apply version updates (#15621)
• ba865f2 fix(windows): dpi getter leaks HDC handles (#15614)
• 0299da0 fix(deps): pin time to <0.3.52 (#15616)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, desktop. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[riponcm]

Closing for now. Build-tool update for the desktop app; it will be bumped by hand in the next release alongside the other Tauri updates, where the build is verified end to end.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.