mirror of
https://github.com/hoornet/vega.git
synced 2026-06-08 14:11:55 -07:00
Jure
9fc585a395
Clears all Dependabot alerts except glib (pinned upstream by Tauri's gtk-rs stack via wry — waits for upstream). - Tauri 2.10.3 → 2.11.1 (Origin Confusion IPC fix, + wry/tao/tray-icon bumps) - rustls-webpki 0.103.10 → 0.103.13 (high-severity DoS panic on malformed CRL) - rand 0.8.5 → 0.8.6, rand 0.9.2 → 0.9.4 (soundness with custom loggers) - dompurify 3.3.2 → 3.4.2 (four sanitization bypasses) - postcss 8.5.8 → 8.5.14 (XSS via unescaped </style>) No functional changes. Smoke tested on Linux: build clean, app starts, feed renders, podcast playback works, login flow works.