[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the everything-else group with 2 updates in the / directory: trash and windows-core.

Updates trash from 5.2.9 to 5.3.0

Release notes

Sourced from trash's releases.

v5.3.0

Documentation

• configure docs.rs platform targets

  I reduced the target list to the 3 common ones. Let's see if it works.

  Recent docs.rs releases only expose Linux documentation. Explicitly request the five standard docs.rs targets so macOS and Windows documentation are included, keeping Linux first as the default landing page.

  A Cargo metadata assertion failed before the change because the docs.rs target list was absent, and passes with the configured targets.

New Features

• add Portal backend This only adds the basic functionality to make it work.

Bug Fixes

• preserve path prefixes when decoding slashes

  Decode the complete path byte string instead of collecting decoded components into a PathBuf. A component beginning with %2F previously discarded the prefix, redirected restoration to the filesystem root, and could erase relative parent traversal before validation.

  Add relative and absolute encoded-separator regressions, traversal rejection, and restoration coverage. The relative separator case fails before the fix.

• reject original paths without filenames

  Validate the decoded path before joining the trash base so dot paths cannot resolve to the base directory. Route roots and paths ending in parent components through the invalid-original-path warning as well.

  Add literal and encoded dot and parent regression cases. The dot-path case fails before the fix; the listing regression passes with and without chrono afterward.

• trim surrounding trashinfo path whitespace

  Trim both ends of the encoded Path value before decoding so trailing spaces and tabs do not become filename bytes. Extend the whitespace fixture while retaining encoded filename space coverage.

• report why the shell refused to recycle an item delete answered every item the shell skipped with Error::Unknown { "Some operations were aborted" }. With FOF_NO_UI a refused item is skipped, not asked about: PerformOperations and FinishOperations both report success, and only GetAnyOperationsAborted says that something

... (truncated)

Changelog

Sourced from trash's changelog.

5.3.0 (2026-11-05)

Documentation

• configure docs.rs platform targets

  I reduced the target list to the 3 common ones. Let's see if it works.

  Recent docs.rs releases only expose Linux documentation. Explicitly request the five standard docs.rs targets so macOS and Windows documentation are included, keeping Linux first as the default landing page.

  A Cargo metadata assertion failed before the change because the docs.rs target list was absent, and passes with the configured targets.

New Features

• add Portal backend This only adds the basic functionality to make it work.

Bug Fixes

• preserve path prefixes when decoding slashes

  Decode the complete path byte string instead of collecting decoded components into a PathBuf. A component beginning with %2F previously discarded the prefix, redirected restoration to the filesystem root, and could erase relative parent traversal before validation.

  Add relative and absolute encoded-separator regressions, traversal rejection, and restoration coverage. The relative separator case fails before the fix.

• reject original paths without filenames

  Validate the decoded path before joining the trash base so dot paths cannot resolve to the base directory. Route roots and paths ending in parent components through the invalid-original-path warning as well.

  Add literal and encoded dot and parent regression cases. The dot-path case fails before the fix; the listing regression passes with and without chrono afterward.

• trim surrounding trashinfo path whitespace

  Trim both ends of the encoded Path value before decoding so trailing spaces and tabs do not become filename bytes. Extend the whitespace fixture while retaining encoded filename space coverage.

• report why the shell refused to recycle an item delete answered every item the shell skipped with Error::Unknown { "Some operations were aborted" }. With FOF_NO_UI a refused item is skipped, not asked about: PerformOperations and FinishOperations both

... (truncated)

Commits

• 0fdaf8d Release trash v5.3.0
• dd2b8f7 Merge pull request #161 from Byron/fix/freedesktop-trashinfo-reviewed
• b6e2624 fix(freedesktop): preserve path prefixes when decoding slashes
• 4ee80bd fix(freedesktop): reject original paths without filenames
• 6fcae5b fix(freedesktop): trim surrounding trashinfo path whitespace
• e00d049 Merge pull request #158 from stefan-siebert/fix/windows-list-file-name
• b8f46cc Merge pull request #159 from stefan-siebert/fix/windows-report-hresult
• 0d0a038 review
• 8afaa34 fix(windows): report why the shell refused to recycle an item (#96)
• 7f63659 fix(windows): list items under their file name, extension included
• Additional commits viewable in compare view

Updates windows-core from 0.62.2 to 0.100.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.