Jure 9fc585a395 Bump to v0.12.10 — security: Tauri, rustls-webpki, rand, dompurify, postcss ...

Clears all Dependabot alerts except glib (pinned upstream by Tauri's gtk-rs
stack via wry — waits for upstream).

- Tauri 2.10.3 → 2.11.1 (Origin Confusion IPC fix, + wry/tao/tray-icon bumps)
- rustls-webpki 0.103.10 → 0.103.13 (high-severity DoS panic on malformed CRL)
- rand 0.8.5 → 0.8.6, rand 0.9.2 → 0.9.4 (soundness with custom loggers)
- dompurify 3.3.2 → 3.4.2 (four sanitization bypasses)
- postcss 8.5.8 → 8.5.14 (XSS via unescaped </style>)

No functional changes. Smoke tested on Linux: build clean, app starts, feed
renders, podcast playback works, login flow works.

2026-05-11 15:20:01 +02:00

..

workflows

Bump to v0.12.10 — security: Tauri, rustls-webpki, rand, dompurify, postcss

2026-05-11 15:20:01 +02:00

FUNDING.yml

Update Liberapay username in FUNDING.yml

2026-03-10 21:57:28 +01:00