[dependabot]

Bumps the rust-minor-and-patch group with 1 update: winit.

Updates winit from 0.30.12 to 0.30.13

Release notes

Sourced from winit's releases.

Winit version 0.30.13

Added

• On Wayland, add Window::set_resize_increments.

Fixed

• On macOS, fixed crash when dragging non-file content onto window.
• On X11, fix set_hittest not working on some window managers.
• On X11, fix debug mode overflow panic in set_timestamp.
• On macOS, fix crash in set_marked_text when native Pinyin IME sends out-of-bounds selected_range.
• On Windows, fix WM_IME_SETCONTEXT IME UI flag masking on lParam.
• On Android, populate KeyEvent::text and KeyEvent::text_with_all_modifiers via Key::to_text().

Commits

• e9809ef Winit version 0.30.13
• efb5b37 chore: fix ci
• a9baf5e fix(android): Populate KeyEvent.text via Key::to_text()
• 6bb43fd wayland: implement resize increments
• 17a73f4 win32: fix ime setcontext lparam
• bccc568 fix(macOS): clamp IME selected_range to prevent substringToIndex crash
• 69b8a07 winit-x11: fix debug mode overflow panic in set_timestamp
• 3eb731f winit-x11: replace xfixes with x11rb in set_hittest
• 7035dd5 winit-win32: Fix ABI mismatch in INIT_MAIN_THREAD_ID
• ab4c6bf macOS: fix a crash when dragging non-file content onto window
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
cargo/winit	0.30.13	🟢 5	Details Check Score Reason Code-Review 🟢 7 Found 20/27 approved changesets -- score normalized to 7 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 19 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• Cargo.lock

[Jeremis70]

All tests are passing, I see no reason not to merge this