chore(deps): bump the minor-and-patch group in /src-tauri with 10 updates by dependabot[bot] · Pull Request #525 · u8array/ZPLab

dependabot · 2026-10-06T18:06:07Z

Bumps the minor-and-patch group in /src-tauri with 10 updates:

Package	From	To
tauri	`2.12.0`	`2.12.1`
tokio	`1.53.1`	`1.53.2`
libc	`0.2.189`	`0.2.190`
tauri-plugin-window-state	`2.4.1`	`2.5.0`
tauri-plugin-updater	`2.12.0`	`2.13.1`
tauri-plugin-process	`2.3.1`	`2.4.0`
tauri-plugin-opener	`2.5.5`	`2.7.0`
tauri-plugin-dialog	`2.7.3`	`2.8.1`
tauri-plugin-fs	`2.5.2`	`2.6.0`
tauri-build	`2.7.0`	`2.7.1`

Updates tauri from 2.12.0 to 2.12.1

Release notes

Sourced from tauri's releases.

tauri-cli v2.12.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1277 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1091 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

30da1fd feat(ci): run audit before publishing
1aefcf6 fix: pnpm audit
026f260 apply version updates (#16150)
a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
f040897 docs: link WRY and TAO to their repositories (#16163)
c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
64bfdd9 fix: ignore src-tauri in vite configs (#16165)
793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
See full diff in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

fs: clamp io_uring read length to u32::MAX (#8572)

rt: ignore current_thread task dumps from other runtimes (#8544)

rt: preserve io_uring context if a completion waker panics (#8566)

sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)

taskdump: restore deferred leaf wakes during capture (#8445)

time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits

ff0c406 chore: prepare Tokio v1.53.2 (#8580)
a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
ec31a9f chore: prepare Tokio v1.51.5 (#8579)
625c851 sync: assign semaphore permits before emitting tracing event (#8542)
832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
9a47992 process: unregister Windows wait before closing child handle (#8564)
2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.190

Release notes

Sourced from libc's releases.

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

Docs: Add more links to public headers and manual pages (#5407), (#5485)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

... (truncated)

Commits

7b0ab55 ci: Rename publish_0.2.yml to release.yaml
ac85dde ci: Sync release permissions with main
8f8cd20 libc: Release 0.2.190
052c6e6 changelog: Fix an incorrect commit link
ea19fd7 test: Remove explicit libc version
6dbf3a2 dragonfly: Move INHERIT_ZERO to the freebsd module
8a64766 apple: add posix_spawn_file_actions_add(f)chdir(_np)
28de514 linux, netbsd: Give statvfs a Default impl
a58a95f cygwin: Change POSIX_SPAWN_* flags to c_short
d175264 apple: timeval32 is exhaustive
Additional commits viewable in compare view

Updates tauri-plugin-window-state from 2.4.1 to 2.5.0

Release notes

Sourced from tauri-plugin-window-state's releases.

store-js v2.5.0

[2.5.0]

ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.

9b29b601 Update MSRV to 1.90 to match tauri.

a87a3c7d Update documentation.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-store@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.4kB README.md
npm notice 23.2kB dist-js/index.cjs
npm notice 25.2kB dist-js/index.d.ts
npm notice 23.0kB dist-js/index.js
npm notice 712B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-store
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-store-2.5.0.tgz
npm notice package size: 7.6 kB
npm notice unpacked size: 77.4 kB
npm notice shasum: d626c5948cb912a32e9ded16b13668520ed6b188
npm notice integrity: sha512-+ykjiQwMJCSk/[...]NVdDZpfKpT1Xw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2969525514
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-store@2.5.0
store v2.5.0

[2.5.0]

ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.

9b29b601 Update MSRV to 1.90 to match tauri.

a87a3c7d Update documentation.

... (truncated)

Commits

d6a3898 Publish New Versions (v2) (#3268)
2e5bcdf chore(deps): fix audits (#3373)
4374b4f chore(notification): remove unused dev-deps (#3372)
f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
2c0883e chore(deps): update dependency vite to v8 (#3346)
024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
Additional commits viewable in compare view

Updates tauri-plugin-updater from 2.12.0 to 2.13.1

Release notes

Sourced from tauri-plugin-updater's releases.

updater-js v2.13.1

[2.13.1]

ecd3273e (#3480 by @renovate) Updated windows-rs dependencies:
- deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
- opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
- single-instance: updated windows-sys to 0.61
- updater: updated windows-sys to 0.61
90b9869e (#3573 by @renovate) Updated dirs to v7
22e286f3 (#3501 by @renovate) Updated dependency infer to 0.22

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.13.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 6.7kB dist-js/index.cjs
npm notice 7.1kB dist-js/index.d.ts
npm notice 6.6kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.13.1
npm notice filename: tauri-apps-plugin-updater-2.13.1.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 25.1 kB
npm notice shasum: 2ad227ba05293fe34c5c59c0ff8a1cd690c8e9a8
npm notice integrity: sha512-+STDzJ0sdQLIm[...]/AJz0jxysytiw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005269671
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-updater@2.13.1

updater v2.13.1

... (truncated)

Commits

e511284 publish new versions (#3647)
ce59e96 docs(log): remove unrelated single-instance comment from log readme
29130c2 ci: run clippy on all platforms (#3650)
4353819 chore: add changefile to re-release plugin-http npm package as 2.8.0 (#3656)
ec14142 chore(deps): update dependency @types/node to v24 (#3649)
90b9869 chore(deps): update rust crate dirs to v7 (#3573)
22e286f chore(deps): update rust crate infer to 0.22 (#3501)
ecd3273 chore(deps): update windows-rs and webview2 crates (#3480)
aa2cc64 fix(android): Migrate Gradle scripts to compilerOptions DSL (#3478)
a2364a5 fix: integration test
Additional commits viewable in compare view

Updates tauri-plugin-process from 2.3.1 to 2.4.0

Release notes

Sourced from tauri-plugin-process's releases.

stronghold-js v2.4.0

[2.4.0]

ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.

9b29b601 Update MSRV to 1.90 to match tauri.

a87a3c7d Update documentation.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-stronghold@2.4.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.7kB README.md
npm notice 19.4kB dist-js/index.cjs
npm notice 21.1kB dist-js/index.d.ts
npm notice 19.2kB dist-js/index.js
npm notice 750B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-stronghold
npm notice version: 2.4.0
npm notice filename: tauri-apps-plugin-stronghold-2.4.0.tgz
npm notice package size: 8.7 kB
npm notice unpacked size: 66.0 kB
npm notice shasum: 47b370840be057acd7d8f76046a9978a622cfcbe
npm notice integrity: sha512-5FIKueS+4xs66[...]j7Mzwt0NX4r1A==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2969525576
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-stronghold@2.4.0
stronghold v2.4.0

[2.4.0]

ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.

9b29b601 Update MSRV to 1.90 to match tauri.

a87a3c7d Update documentation.

... (truncated)

Commits

a2364a5 fix: integration test
67ebc13 fix(ci): check-publish job should check .changes/pre.json
cbfd428 Publish New Versions (v2) (#3618)
f460570 chore: fmt
a433ec0 fix: mobile clippy warnings
3d8a3c8 chore: edition 2024
b517cc7 fix: actually set rust-version to 1.90
b6a38a5 fix(ci): e2e test error reporting
9b29b60 feat: update to tauri 2.12
3a01943 tests(e2e): fix e2e failures on Linux and Windows (#3642)
Additional commits viewable in compare view

Updates tauri-plugin-opener from 2.5.5 to 2.7.0

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.7.0

[2.7.0]

ecd3273e (#3480 by @renovate) Updated windows-rs dependencies:
- deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
- opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
- single-instance: updated windows-sys to 0.61
- updater: updated windows-sys to 0.61

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.7.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.7.0
npm notice filename: tauri-apps-plugin-opener-2.7.0.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: 14d631a70282cbc07b46f4442ba6085d2200f301
npm notice integrity: sha512-mBorYfVKh9Lt7[...]5OHHVmipjuGMw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005263072
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-opener@2.7.0

opener v2.7.0

[2.7.0]

... (truncated)

Commits

51b430b ci: delete .changes/updater-new-bundle-support.md
fd439b1 Publish New Versions (v2) (#2964)
2522b71 fix(deep-link): revert the breaking change introduced by #2928 (#2970)
9021a73 chore(deps): update dependency rollup to v4.50.0 (#2966)
625bb1c feat(log): re-export the log crate (#2965)
6215afe chore(deps): update dependency rollup to v4.49.0 (#2962)
8cf8eea feat(updater): inject bundle_type into endpoint url (#2960)
509eba8 feat: support message dialogs with 3 buttons (#2641)
9ac5fe8 feat(updater): support bundle-specific targets (#2624)
c247410 chore(deps): update dependency typescript-eslint to v8.41.0 (#2956)
Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.3 to 2.8.1

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.1

[2.8.1]

569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.1
npm notice filename: tauri-apps-plugin-dialog-2.8.1.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: f29f3c28862a1ed767b6fd241f34abf26129f88f
npm notice integrity: sha512-/DtE3B62JgpYu[...]phsKnb+738Dmw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3028120915
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.1

dialog v2.8.1

[2.8.1]

569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

... (truncated)

Commits

d4835d0 publish new versions (#3660)
569ee82 fix: mobile docs.rs builds
25f3874 chore(deps): update dependency eslint-plugin-security to v4.1.0 (#3661)
2fd4bed chore(autostart): update auto-launch to 0.6 (#3546)
e511284 publish new versions (#3647)
ce59e96 docs(log): remove unrelated single-instance comment from log readme
29130c2 ci: run clippy on all platforms (#3650)
4353819 chore: add changefile to re-release plugin-http npm package as 2.8.0 (#3656)
ec14142 chore(deps): update dependency @types/node to v24 (#3649)
90b9869 chore(deps): update rust crate dirs to v7 (#3573)
Additional commits viewable in compare view

Updates tauri-plugin-fs from 2.5.2 to 2.6.0

Release notes

Sourced from tauri-plugin-fs's releases.

deep-link-js v2.6.0

[2.6.0]

ecd3273e (#3480 by @renovate) Updated windows-rs dependencies:
- deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
- opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
- single-instance: updated windows-sys to 0.61
- updater: updated windows-sys to 0.61

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-deep-link@2.6.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 6.2kB README.md
npm notice 4.7kB dist-js/index.cjs
npm notice 4.0kB dist-js/index.d.ts
npm notice 4.5kB dist-js/index.js
npm notice 801B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-deep-link
npm notice version: 2.6.0
npm notice filename: tauri-apps-plugin-deep-link-2.6.0.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 21.1 kB
npm notice shasum: 42f4e74e87aea6ace90871ad293f4fface5910cc
npm notice integrity: sha512-41rOuYUZjxcEz[...]TsoJQ2R9U5MCA==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005261605
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-deep-link@2.6.0

deep-link v2.6.0

[2.6.0]

... (truncated)

Commits

a2364a5 fix: integration test
67ebc13 fix(ci): check-publish job should check .changes/pre.json
cbfd428 Publish New Versions (v2) (#3618)
f460570 chore: fmt
a433ec0 fix: mobile clippy warnings
3d8a3c8 chore: edition 2024
b517cc7 fix: actually set rust-version to 1.90
b6a38a5 fix(ci): e2e test error reporting
9b29b60 feat: update to tauri 2.12
3a01943 tests(e2e): fix e2e failures on Linux and Windows (#3642)
Additional commits viewable in compare view

Updates tauri-build from 2.7.0 to 2.7.1

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1277 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1091 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

30da1fd feat(ci): run audit before publishing
1aefcf6 fix: pnpm audit
026f260 apply version updates (#16150)
a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
f040897 docs: link WRY and TAO to their repositories (#16163)
c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
64bfdd9 fix: ignore src-tauri in vite configs (#16165)
793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
See full diff in compare...
Description has been truncated

Bumps the minor-and-patch group in /src-tauri with 10 updates: | Package | From | To | | --- | --- | --- | | [tauri](https://github.com/tauri-apps/tauri) | `2.12.0` | `2.12.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` | | [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.190` | | [tauri-plugin-window-state](https://github.com/tauri-apps/plugins-workspace) | `2.4.1` | `2.5.0` | | [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.12.0` | `2.13.1` | | [tauri-plugin-process](https://github.com/tauri-apps/plugins-workspace) | `2.3.1` | `2.4.0` | | [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.5` | `2.7.0` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.3` | `2.8.1` | | [tauri-plugin-fs](https://github.com/tauri-apps/plugins-workspace) | `2.5.2` | `2.6.0` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.7.0` | `2.7.1` | Updates `tauri` from 2.12.0 to 2.12.1 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.12.0...tauri-v2.12.1) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2) Updates `libc` from 0.2.189 to 0.2.190 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.190/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.189...0.2.190) Updates `tauri-plugin-window-state` from 2.4.1 to 2.5.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.1...fs-v2.5.0) Updates `tauri-plugin-updater` from 2.12.0 to 2.13.1 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@updater-v2.12.0...updater-v2.13.1) Updates `tauri-plugin-process` from 2.3.1 to 2.4.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@os-v2.3.1...os-v2.4.0) Updates `tauri-plugin-opener` from 2.5.5 to 2.7.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.5...log-v2.7.0) Updates `tauri-plugin-dialog` from 2.7.3 to 2.8.1 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@dialog-v2.7.3...dialog-v2.8.1) Updates `tauri-plugin-fs` from 2.5.2 to 2.6.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.5.2...fs-v2.6.0) Updates `tauri-build` from 2.7.0 to 2.7.1 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.7.0...tauri-build-v2.7.1) --- updated-dependencies: - dependency-name: tauri dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: libc dependency-version: 0.2.190 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tauri-plugin-window-state dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tauri-plugin-updater dependency-version: 2.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tauri-plugin-process dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tauri-plugin-opener dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tauri-plugin-dialog dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tauri-plugin-fs dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tauri-build dependency-version: 2.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-10T07:47:43Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 6, 2026

u8array mentioned this pull request Oct 10, 2026

chore(deps): bump the npm and cargo minor-and-patch groups in lockstep #541

Merged

u8array closed this Oct 10, 2026

dependabot Bot deleted the dependabot/cargo/src-tauri/minor-and-patch-f391fad197 branch October 10, 2026 07:47

Navigation Menu

Repository navigation

chore(deps): bump the minor-and-patch group in /src-tauri with 10 updates - #525

chore(deps): bump the minor-and-patch group in /src-tauri with 10 updates#525
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/minor-and-patch-f391fad197

dependabot Bot commented on behalf of github Oct 6, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 6, 2026

tauri-cli v2.12.1

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

Fixed (unstable)

0.2.190

Support

Added

0.2.190 - 2026-10-02

Support

Added

store-js v2.5.0

[2.5.0]

store v2.5.0

[2.5.0]

updater-js v2.13.1

[2.13.1]

updater v2.13.1

stronghold-js v2.4.0

[2.4.0]

stronghold v2.4.0

[2.4.0]

opener-js v2.7.0

[2.7.0]

opener v2.7.0

[2.7.0]

dialog-js v2.8.1

[2.8.1]

dialog v2.8.1

[2.8.1]

deep-link-js v2.6.0

[2.6.0]

deep-link v2.6.0

[2.6.0]

tauri-build v2.7.1

Uh oh!

dependabot Bot commented on behalf of github Oct 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant