build: align published runtime and native dependency contracts - #160
Merged
Conversation
Bumps the python-minor group with 2 updates: [openadapt-types](https://github.com/OpenAdaptAI/openadapt-types) and [onnxruntime](https://github.com/microsoft/onnxruntime). Updates `openadapt-types` from 0.10.0 to 0.17.0 - [Release notes](https://github.com/OpenAdaptAI/openadapt-types/releases) - [Changelog](https://github.com/OpenAdaptAI/openadapt-types/blob/main/CHANGELOG.md) - [Commits](OpenAdaptAI/openadapt-types@v0.10.0...v0.17.0) Updates `onnxruntime` from 1.20.1 to 1.29.0 - [Release notes](https://github.com/microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseNotesWorkflow.md) - [Commits](microsoft/onnxruntime@v1.20.1...v1.29.0) --- updated-dependencies: - dependency-name: openadapt-types dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: onnxruntime dependency-version: 1.29.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Bumps the npm-minor group with 4 updates: [@tauri-apps/plugin-notification](https://github.com/tauri-apps/plugins-workspace), [@tauri-apps/plugin-updater](https://github.com/tauri-apps/plugins-workspace), [@testing-library/react](https://github.com/testing-library/react-testing-library) and [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react). Updates `@tauri-apps/plugin-notification` from 2.3.3 to 2.4.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.3...fs-v2.4.0) Updates `@tauri-apps/plugin-updater` from 2.10.1 to 2.11.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@updater-v2.10.1...updater-v2.11.0) Updates `@testing-library/react` from 16.3.2 to 16.3.3 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3) Updates `@vitejs/plugin-react` from 6.1.0 to 6.1.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react) --- updated-dependencies: - dependency-name: "@tauri-apps/plugin-notification" dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: "@tauri-apps/plugin-updater" dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: "@testing-library/react" dependency-version: 16.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the cargo-minor group in /src-tauri with 5 updates: | Package | From | To | | --- | --- | --- | | [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.5` | `2.3.6` | | [tauri-plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.3.3` | `2.4.0` | | [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.10.1` | `2.11.0` | | [tauri-plugin-deep-link](https://github.com/tauri-apps/plugins-workspace) | `2.4.9` | `2.4.10` | | [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.4.3` | `2.4.4` | Updates `tauri-plugin-shell` from 2.3.5 to 2.3.6 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.5...nfc-v2.3.6) Updates `tauri-plugin-notification` from 2.3.3 to 2.4.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.3...fs-v2.4.0) Updates `tauri-plugin-updater` from 2.10.1 to 2.11.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@updater-v2.10.1...updater-v2.11.0) Updates `tauri-plugin-deep-link` from 2.4.9 to 2.4.10 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@deep-link-v2.4.9...deep-link-v2.4.10) Updates `tauri-plugin-single-instance` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.3...fs-v2.4.4) --- updated-dependencies: - dependency-name: tauri-plugin-shell dependency-version: 2.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: tauri-plugin-notification dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor - dependency-name: tauri-plugin-updater dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor - dependency-name: tauri-plugin-deep-link dependency-version: 2.4.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: tauri-plugin-single-instance dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the actions group with 3 updates: [anchore/sbom-action](https://github.com/anchore/sbom-action), [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) and [python-semantic-release/publish-action](https://github.com/python-semantic-release/publish-action). Updates `anchore/sbom-action` from 0.24.0 to 0.24.2 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@e22c389...3ad7283) Updates `python-semantic-release/python-semantic-release` from 10.6.1 to 10.6.2 - [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases) - [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst) - [Commits](python-semantic-release/python-semantic-release@39dd205...9a026e9) Updates `python-semantic-release/publish-action` from 10.6.1 to 10.6.2 - [Release notes](https://github.com/python-semantic-release/publish-action/releases) - [Changelog](https://github.com/python-semantic-release/publish-action/blob/main/releaserc.toml) - [Commits](python-semantic-release/publish-action@5a5718c...6d89e2d) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-version: 0.24.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: python-semantic-release/python-semantic-release dependency-version: 10.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: python-semantic-release/publish-action dependency-version: 10.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
…pr160-queue-20260910
…pr161-queue-20260910
abrichr
changed the title
…pr162-queue-20260910
…pr160-queue-20260910
…pr160-queue-20260910
abrichr
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Desktop freezes the published Flow 1.35.1 runtime with Types 0.17.0. Their dependency bounds agree, and the generated overlay contract comes from the installed Types package. Intel macOS retains ONNX Runtime 1.20.1; the other platforms retain 1.27.0. Browser and console support stay bundled.
The notification 2.4.0 and updater 2.11.0 plugins now match across JavaScript and Rust. The native deep-link, shell, and single-instance patches are included, along with React Testing Library 16.3.3 and Vite React plugin 6.1.1. Updater 2.11 enables system-proxy support and reports Windows installer spawn errors. Its signing and configuration gates remain unchanged.
A lockfile contract rejects mismatched plugin versions. The existing native installer matrix runs Rust dispatch tests after compilation. Both fixed deep-link routes have positive assertions; negative cases reject malformed fields and origins.
Validation: the combined tree passes 178 focused Python tests, 122 UI tests, the frontend build, locked dependency checks, Ruff, and the published token check. The frozen macOS arm64 sidecar passes record, compile, 11-step replay, warm reuse, Capture modifier conversion, and attended-console authorization/configuration checks. Replay remains
COMPLETED_UNVERIFIED, withproduction_eligible: false, zero model calls, and zero silent incorrect successes. The paired native dependencies pass 16 Rust tests; one separate FFmpeg archive proof stays opt-in.The synthetic doctor probe uses a null credential backend and isolated config so the user's Keychain can't block the smoke test. Production credential handling is unchanged. This PR consolidates the dependency changes from #161 and #162. Publication remains a separate manual operation.