chore(deps): bump notify-rust from 4.12.0 to 4.13.1

[dependabot]

Bumps notify-rust from 4.12.0 to 4.13.1.

Changelog

Sourced from notify-rust's changelog.

v4.13.1 (2026-04-04)

Fixes

• update maintenance state and formatting in README (efafd19)

v4.13.0 (2026-04-04)

Features

• macos: forward image_path to content_image in notifications (959bcae)
• macos: add image_path field and method (1351bf2)

Commits

• bb85697 chore: bump version
• 2a0c3df Merge pull request #263 from hoodie/renovate/ctor-0.x
• cc23a1e chore(deps): update rust crate ctor to 0.8
• 91d94dd Merge pull request #265 from hoodie/feature/update-readme
• efafd19 fix: update maintenance state and formatting in README
• 3ad7fa5 chore: changelog
• bd3026d chore: bump version
• cbf16c2 Merge pull request #264 from afonsojramos/feat/macos-image-path-support
• ebe34d3 refactor: combine the image_path methods and provide common
• 2922575 docs: add separate image_path example
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 0a566d4.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

Cargo.lock

Package	Version	License	Issue Type
notify-rust	4.13.1	LicenseRef-bad-mitapache-2.0	Incompatible License

Allowed Licenses:

MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, CC0-1.0, Unlicense, 0BSD, Unicode-DFS-2016, Unicode-3.0, Zlib, MPL-2.0, BSL-1.0, Apache-2.0 WITH LLVM-exception, OpenSSL, BlueOak-1.0.0, CC-BY-3.0, CC-BY-4.0, WTFPL, MIT-0, NCSA

Excluded from license check:

pkg:cargo/serde, pkg:cargo/serde_json, pkg:cargo/tokio, pkg:cargo/clap, pkg:cargo/unicode-ident, pkg:cargo/unicode-normalization, pkg:cargo/unicode-bidi, pkg:cargo/unicode-width, pkg:cargo/unicode-segmentation, pkg:cargo/unicode-properties, pkg:cargo/ring, pkg:cargo/webpki, pkg:cargo/rustls-webpki, pkg:cargo/aws-lc-rs, pkg:cargo/aws-lc-sys, pkg:cargo/untrusted, pkg:cargo/openssl, pkg:cargo/openssl-sys, pkg:cargo/lab, pkg:cargo/iced, pkg:cargo/iced_core, pkg:cargo/iced_widget, pkg:cargo/iced_runtime

OpenSSF Scorecard

Package	Version	Score	Details
cargo/notify-rust	4.13.1	🟢 3.9	Details Check Score Reason Maintained 🟢 5 4 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 5 Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 2 Found 4/20 approved changesets -- score normalized to 2 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• Cargo.lock