From cc888cb8d3f35730da199bf1d126b71046fc9318 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Filip=20=C5=9Al=C4=99zak?= <fslezak@teonite.com>
Date: Wed, 14 Oct 2026 16:32:22 +0200
Subject: [PATCH 1/3] fix tray init after first instance added

---
 new-ui/src/routes/empty.tsx | 25 ++++++++++++++++++-------
 1 file changed, 18 insertions(+), 7 deletions(-)

diff --git a/new-ui/src/routes/empty.tsx b/new-ui/src/routes/empty.tsx
index 7753c91e..4ebfac3f 100644
--- a/new-ui/src/routes/empty.tsx
+++ b/new-ui/src/routes/empty.tsx
@@ -1,8 +1,13 @@
 import { useQuery } from '@tanstack/react-query';
 import { createFileRoute, useNavigate } from '@tanstack/react-router';
-import { useEffect } from 'react';
+import { getCurrentWindow } from '@tauri-apps/api/window';
+import { useEffect, useMemo } from 'react';
 
-import { hasAnyVisibleLocationsQueryOptions } from '../shared/rust-api/query';
+import { WindowId } from '../shared/consts';
+import {
+  getInstancesQueryOptions,
+  getTunnelsQueryOptions,
+} from '../shared/rust-api/query';
 
 export const Route = createFileRoute('/empty')({
   component: RouteComponent,
@@ -10,13 +15,19 @@ export const Route = createFileRoute('/empty')({
 
 function RouteComponent() {
   const navigate = useNavigate();
-  const { data: hasLocations } = useQuery(hasAnyVisibleLocationsQueryOptions);
+  const { data: instances } = useQuery(getInstancesQueryOptions);
+  const { data: tunnels } = useQuery(getTunnelsQueryOptions);
+
+  const hasContent = useMemo(
+    () => (instances?.length ?? 0) > 0 || (tunnels?.length ?? 0) > 0,
+    [instances, tunnels],
+  );
 
   useEffect(() => {
-    if (hasLocations === true) {
-      void navigate({ to: '/' });
-    }
-  }, [hasLocations, navigate]);
+    if (!hasContent) return;
+    const to = getCurrentWindow().label === WindowId.CompactView ? '/compact' : '/full';
+    void navigate({ to, replace: true });
+  }, [hasContent, navigate]);
 
   return <div></div>;
 }

From d24fe30db0e3458aaae1e84fd545df53a37188c5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Filip=20=C5=9Al=C4=99zak?= <fslezak@teonite.com>
Date: Wed, 14 Oct 2026 17:40:43 +0200
Subject: [PATCH 2/3] fix cargo deny

---
 src-tauri/Cargo.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index 15a8b2c4..97aa2d30 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -1342,7 +1342,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d045de693cb712d0b22c6a64be5b953f67b3ce00ab5ad3dd5d8b441886ab8e1a"
 dependencies = [
  "quote",
- "syn 3.0.6",
+ "syn 2.0.119",
 ]
 
 [[package]]
@@ -5855,9 +5855,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.45"
+version = "0.23.46"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
+checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf"
 dependencies = [
  "aws-lc-rs",
  "log",

From feab70a1f33482a3b357e34058acc6b0caad5d94 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Filip=20=C5=9Al=C4=99zak?= <fslezak@teonite.com>
Date: Wed, 14 Oct 2026 18:00:30 +0200
Subject: [PATCH 3/3] add deny ignore

---
 src-tauri/deny.toml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src-tauri/deny.toml b/src-tauri/deny.toml
index aa2b73fb..e08cbb52 100644
--- a/src-tauri/deny.toml
+++ b/src-tauri/deny.toml
@@ -73,6 +73,10 @@ ignore = [
     { id = "RUSTSEC-2024-0436", reason = "Unmaintained netlink dependency" },
     { id = "RUSTSEC-2026-0194", reason = "quick-xml <0.41 pulled by Tauri/plist; no compatible upstream update yet" },
     { id = "RUSTSEC-2026-0195", reason = "quick-xml <0.41 pulled by Tauri/plist; no compatible upstream update yet" },
+    { id = "RUSTSEC-2026-0346", reason = "rustls <0.23.46 pulled by reqwest/hyper-rustls; client session store Debug leak, not used" },
+    { id = "RUSTSEC-2026-0347", reason = "rustls <0.23.46 pulled by reqwest/hyper-rustls; ECH not used" },
+    { id = "RUSTSEC-2026-0348", reason = "rustls <0.23.46 pulled by reqwest/hyper-rustls; brotli cert compression feature not enabled" },
+    { id = "RUSTSEC-2026-0349", reason = "rustls <0.23.46 pulled by reqwest/hyper-rustls; PQ key exchange downgrade, no key compromise" },
     # The "unmaintained" advisories below stem from our use of Tauri v2, which
     # depends on GTK3 bindings that are no longer maintained.
     { id = "RUSTSEC-2024-0370", reason = "Tauri v2 GTK3 dependency (unmaintained)" },