From de7c3ed3686fcfc0974e4cefb5671c14906e5b13 Mon Sep 17 00:00:00 2001 From: Matt Toohey Date: Thu, 2 Jul 2026 10:28:46 +1000 Subject: [PATCH 1/2] chore: bump rust toolchain to 1.96.1 Pins the workspace to the latest stable Rust (1.96.1, released 2026-06-30), up from 1.95.0. 1.96.1 is a point release over 1.96.0 that patches three libssh2 CVEs bundled with Cargo (CVE-2025-15661, CVE-2026-55199, CVE-2026-55200), fixes a MIR-optimization miscompilation, and restores missing retries/timeouts in Cargo's HTTP client. Verified with cargo check --workspace under 1.96.1. Signed-off-by: Matt Toohey --- rust-toolchain.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rust-toolchain.toml b/rust-toolchain.toml index 38ab2c6bd..940382286 100644 --- a/rust-toolchain.toml +++ b/rust-toolchain.toml @@ -1,3 +1,3 @@ [toolchain] -channel = "1.95.0" +channel = "1.96.1" components = ["clippy", "rustfmt"] From 35ab2e2482a449197ac253ced59c6763eeb4b5d3 Mon Sep 17 00:00:00 2001 From: Matt Toohey Date: Thu, 2 Jul 2026 11:23:17 +1000 Subject: [PATCH 2/2] ci: trigger app CI on rust-toolchain.toml changes The Tauri app CI workflows (differ, penpal, staged) build Rust from their app subdirectories, where rustup resolves the workspace-root rust-toolchain.toml. But none of those workflows listed rust-toolchain.toml in its pull_request/push path filters, so a toolchain bump made in isolation only triggered Crates CI. A new compiler could merge without ever building or linting the apps, deferring any app-specific build/clippy failures to the next unrelated app change or a release. Add rust-toolchain.toml to the path filters of all three app CI workflows, matching the filter that crates-ci.yml already declares, so toolchain bumps exercise the app checks too. Signed-off-by: Matt Toohey --- .github/workflows/differ-ci.yml | 2 ++ .github/workflows/penpal-ci.yml | 2 ++ .github/workflows/staged-ci.yml | 2 ++ 3 files changed, 6 insertions(+) diff --git a/.github/workflows/differ-ci.yml b/.github/workflows/differ-ci.yml index b87ee572e..bd2a00784 100644 --- a/.github/workflows/differ-ci.yml +++ b/.github/workflows/differ-ci.yml @@ -10,6 +10,7 @@ on: - "pnpm-lock.yaml" - "pnpm-workspace.yaml" - "package.json" + - "rust-toolchain.toml" - ".github/workflows/differ-ci.yml" push: branches: [main] @@ -20,6 +21,7 @@ on: - "pnpm-lock.yaml" - "pnpm-workspace.yaml" - "package.json" + - "rust-toolchain.toml" - ".github/workflows/differ-ci.yml" workflow_dispatch: diff --git a/.github/workflows/penpal-ci.yml b/.github/workflows/penpal-ci.yml index 03ce4305a..12c5e6f26 100644 --- a/.github/workflows/penpal-ci.yml +++ b/.github/workflows/penpal-ci.yml @@ -8,6 +8,7 @@ on: - "pnpm-lock.yaml" - "pnpm-workspace.yaml" - "package.json" + - "rust-toolchain.toml" - ".github/workflows/penpal-ci.yml" push: branches: [main] @@ -16,6 +17,7 @@ on: - "pnpm-lock.yaml" - "pnpm-workspace.yaml" - "package.json" + - "rust-toolchain.toml" - ".github/workflows/penpal-ci.yml" workflow_dispatch: diff --git a/.github/workflows/staged-ci.yml b/.github/workflows/staged-ci.yml index 217ed9d3a..e4bfa2a1e 100644 --- a/.github/workflows/staged-ci.yml +++ b/.github/workflows/staged-ci.yml @@ -10,6 +10,7 @@ on: - "pnpm-lock.yaml" - "pnpm-workspace.yaml" - "package.json" + - "rust-toolchain.toml" - ".github/workflows/staged-ci.yml" push: branches: [main] @@ -20,6 +21,7 @@ on: - "pnpm-lock.yaml" - "pnpm-workspace.yaml" - "package.json" + - "rust-toolchain.toml" - ".github/workflows/staged-ci.yml" workflow_dispatch: