pull · Jul 26, 2026 · Jul 26, 2026 · Jul 26, 2026 · Jul 26, 2026 · Jul 26, 2026
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -1,6 +1,20 @@
 [advisories]
 ignore = [
-  "RUSTSEC-2020-0095", # difference is unmaintained (used by `mockito`)
-  "RUSTSEC-2020-0071", # potential segfault in the time crate (not fixed on `zip` and `mac-notification-sys`)
-  "RUSTSEC-2020-0159" # potential segfault in `localtime_r` invocations on the chrono crate (not fixed on `mac-notification-sys`)
+  # rsa Marvin Attack
+  "RUSTSEC-2023-0071",
+  # difference is unmaintained
+  "RUSTSEC-2020-0095",
+  # proc-macro-error is unmaintained
+  "RUSTSEC-2024-0370",
+  # rand unsoundness, fixed when we remove kuchikiki from deps in v3, currently
+  # remains for semver reasons but is not built in default configuration
+  "RUSTSEC-2026-0097",
+  # This ruzstd vulnerability is denial of service only used in CLI for devs,
+  # the fix requires an upstream update in https://github.com/indygreg/apple-platform-rs/pull/342
+  "RUSTSEC-2026-0344",
+  # glib 0.18.5 unsoundness, fixed by updating to gtk4
+  "RUSTSEC-2024-0429",
+  # ml-dsa timing side-channel, only reachable when signing RPMs with a post-quantum ML-DSA key locally,
+  # pulled in by rpm (enables pgp's draft-pqc feature); no pgp release uses a patched ml-dsa yet
+  "RUSTSEC-2025-0144",
 ]
diff --git a/.cargo/config.toml b/.cargo/config.toml
@@ -0,0 +1,4 @@
+[env]
+# workaround needed to prevent `STATUS_ENTRYPOINT_NOT_FOUND` error in tests
+# see https://github.com/tauri-apps/tauri/pull/4383#issuecomment-1212221864
+__TAURI_WORKSPACE__ = "true"
diff --git a/.changes/README.md b/.changes/README.md
@@ -0,0 +1,44 @@
+# Changes
+
+##### via https://github.com/jbolda/covector
+
+As you create PRs and make changes that require a version bump, please add a new markdown file in this folder. You do not note the version _number_, but rather the type of bump that you expect: major, minor, or patch. The filename is not important, as long as it is a `.md`, but we recommend that it represents the overall change for organizational purposes.
+
+When you select the version bump required, you do _not_ need to consider dependencies. Only note the package with the actual change, and any packages that depend on that package will be bumped automatically in the process.
+
+Use the following format:
+
+```md
+---
+'package-a': 'patch:enhance'
+'package-b': 'patch:enhance'
+---
+
+Change summary goes here
+```
+
+Summaries do not have a specific character limit, but are text only. These summaries are used within the (future implementation of) changelogs. They will give context to the change and also point back to the original PR if more details and context are needed.
+
+Changes will be designated as a `major`, `minor` or `patch` as further described in [semver](https://semver.org/).
+
+Given a version number MAJOR.MINOR.PATCH, increment the:
+
+- MAJOR version when you make incompatible API changes,
+- MINOR version when you add functionality in a backwards compatible manner, and
+- PATCH version when you make backwards compatible bug fixes.
+
+Additional labels for pre-release and build metadata are available as extensions to the MAJOR.MINOR.PATCH format, but will be discussed prior to usage (as extra steps will be necessary in consideration of merging and publishing).
+
+Additionally you could specify a tag for the change file to group it with other changes by prefixing the bump with `:<tag>`, for example:
+
+```md
+---
+'package-a': 'patch:enhance'
+---
+
+Change summary goes here
+```
+
+which will group this change file with other changes that specify the `bug` tag.
+
+For list of available tags, see the `changeTags` key in [./config.json](./config.json)
diff --git a/.changes/allow-conf-gitignore.md b/.changes/allow-conf-gitignore.md
diff --git a/.changes/allowlist-clipboard.md b/.changes/allowlist-clipboard.md
diff --git a/.changes/allowlist-dialog.md b/.changes/allowlist-dialog.md
diff --git a/.changes/allowlist-process.md b/.changes/allowlist-process.md
diff --git a/.changes/allowlist-window.md b/.changes/allowlist-window.md
diff --git a/.changes/always-rebuilding.md b/.changes/always-rebuilding.md
diff --git a/.changes/api-WebviewWindow-fileDropEnabled.md b/.changes/api-WebviewWindow-fileDropEnabled.md
diff --git a/.changes/api-add-log-dir.md b/.changes/api-add-log-dir.md
diff --git a/.changes/api-app-window-browser.md b/.changes/api-app-window-browser.md
diff --git a/.changes/api-change-events.md b/.changes/api-change-events.md
diff --git a/.changes/api-dialog-ask-message-confirm.md b/.changes/api-dialog-ask-message-confirm.md
diff --git a/.changes/api-emit-payload-type.md b/.changes/api-emit-payload-type.md
diff --git a/.changes/api-features.md b/.changes/api-features.md
diff --git a/.changes/api-fetch-empty-reponse.md b/.changes/api-fetch-empty-reponse.md
diff --git a/.changes/api-file-dialog-title.md b/.changes/api-file-dialog-title.md
diff --git a/.changes/api-fix-os-platform-return.md b/.changes/api-fix-os-platform-return.md
diff --git a/.changes/api-format-callback.md b/.changes/api-format-callback.md
diff --git a/.changes/api-raw-headers.md b/.changes/api-raw-headers.md
diff --git a/.changes/api-relaunch-cleanup.md b/.changes/api-relaunch-cleanup.md
diff --git a/.changes/api-remove-current-dir.md b/.changes/api-remove-current-dir.md
diff --git a/.changes/api-remove-ts-files.md b/.changes/api-remove-ts-files.md
diff --git a/.changes/api-use-uint8array.md b/.changes/api-use-uint8array.md
diff --git a/.changes/api-window-type-for-size-and-position.md b/.changes/api-window-type-for-size-and-position.md
diff --git a/.changes/app-any-thread.md b/.changes/app-any-thread.md
diff --git a/.changes/app-folder-structure.md b/.changes/app-folder-structure.md
diff --git a/.changes/asset-allowlist.md b/.changes/asset-allowlist.md
diff --git a/.changes/asset-cors.md b/.changes/asset-cors.md
diff --git a/.changes/asset-protocol-feature-flag.md b/.changes/asset-protocol-feature-flag.md
diff --git a/.changes/asset-resolver.md b/.changes/asset-resolver.md
diff --git a/.changes/async-cli.js.md b/.changes/async-cli.js.md
diff --git a/.changes/async-runtime-refactor.md b/.changes/async-runtime-refactor.md
diff --git a/.changes/async-runtime-set.md b/.changes/async-runtime-set.md
diff --git a/.changes/async-runtime-spawn-blocking.md b/.changes/async-runtime-spawn-blocking.md
diff --git a/.changes/before-script-envs.md b/.changes/before-script-envs.md
diff --git a/.changes/build-rerun-if-resource-sidecar-change.md b/.changes/build-rerun-if-resource-sidecar-change.md
diff --git a/.changes/build-specify-win-sdk.md b/.changes/build-specify-win-sdk.md
diff --git a/.changes/builder-create-window-result.md b/.changes/builder-create-window-result.md
diff --git a/.changes/bundler-add-provider-short-name.md b/.changes/bundler-add-provider-short-name.md
diff --git a/.changes/bundler-add-tsp-signing.md b/.changes/bundler-add-tsp-signing.md
diff --git a/.changes/bundler-appimage-fuse.md b/.changes/bundler-appimage-fuse.md
diff --git a/.changes/bundler-fix-appimage.md b/.changes/bundler-fix-appimage.md
diff --git a/.changes/bundler-msi-init-installdir.md b/.changes/bundler-msi-init-installdir.md
diff --git a/.changes/bundler-print-cfg.md b/.changes/bundler-print-cfg.md
diff --git a/.changes/callback-validation.md b/.changes/callback-validation.md
diff --git a/.changes/clap-3.0.md b/.changes/clap-3.0.md
diff --git a/.changes/clap-beta.4-core.md b/.changes/clap-beta.4-core.md
diff --git a/.changes/clap-beta.4.md b/.changes/clap-beta.4.md
diff --git a/.changes/cli-config-path.md b/.changes/cli-config-path.md
diff --git a/.changes/cli-improve-waiting-devserver-msg.md b/.changes/cli-improve-waiting-devserver-msg.md
diff --git a/.changes/cli-include-vswhere.md b/.changes/cli-include-vswhere.md
diff --git a/.changes/cli-private-key-pwd-panic.md b/.changes/cli-private-key-pwd-panic.md