Skip to content

build(deps): bump the tauri-deps group across 1 directory with 13 updates - #1043

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/tauri-deps-4bafca1e95
Open

build(deps): bump the tauri-deps group across 1 directory with 13 updates#1043
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/tauri-deps-4bafca1e95

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the tauri-deps group with 13 updates in the /src-tauri directory:

Package From To
tauri 2.11.5 2.12.2
tauri-plugin-log 2.9.1 2.10.0
tauri-plugin-fs 2.5.2 2.6.0
tauri-plugin-http 2.6.0 2.8.1
tauri-plugin-dialog 2.7.3 2.8.1
tauri-plugin-shell 2.3.6 2.4.1
tauri-plugin-updater 2.12.0 2.13.2
tauri-plugin-window-state 2.4.1 2.5.0
tauri-plugin-deep-link 2.4.10 2.6.1
tauri-plugin-single-instance 2.4.4 2.5.2
tauri-plugin-notification 2.4.0 2.5.1
tauri-plugin-process 2.3.1 2.4.0
tauri-build 2.6.3 2.7.3

Updates tauri from 2.11.5 to 2.12.2

Release notes

Sourced from tauri's releases.

tauri v2.12.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1295 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134


Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits
  • 413cbdb Apply Version Updates From Current Changes (#16213)
  • 587ae48 chore: disable CODEOWNERS file (#16236)
  • a98038e fix: menu append doesn't take options like MenuItemOptions (#16235)
  • 7c24f5b fix: store tauri menu items in Menu (#16231)
  • a225a18 fix: panic on repeated once listener events (#16222)
  • a916205 fix(api): return awaitable cleanup from combined event listeners (#16195)
  • 7c87f90 chore: add publiccode.yml file (#16190)
  • 79d3537 process: relaunch macOS app via LaunchServices to avoid inheriting dying stdi...
  • 61285f6 fix(tauri-utils): doctests (#16142)
  • 30da1fd feat(ci): run audit before publishing
  • Additional commits viewable in compare view

Updates tauri-plugin-log from 2.9.1 to 2.10.0

Commits

Updates tauri-plugin-fs from 2.5.2 to 2.6.0

Release notes

Sourced from tauri-plugin-fs's releases.

notification-js v2.6.0

[2.6.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

feat

  • 46381516 (#3671) Report actions on desktop: a click on a notification (tap) or on one of the actions of its action type reaches onAction and the new Rust Notification::on_action, which also works on mobile. registerActionTypes, removeActive (Linux and the BSDs) and the listener commands no longer fail with "command not found" on desktop.

    The onAction callback is now typed with the new ActionPerformed interface, which is what every platform sends, instead of Options. Callbacks annotated with Options must be updated.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-notification@2.6.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 16.6kB dist-js/index.cjs
npm notice 26.1kB dist-js/index.d.ts
npm notice 16.2kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 663B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-notification
npm notice version: 2.6.0
npm notice filename: tauri-apps-plugin-notification-2.6.0.tgz
npm notice package size: 11.1 kB
npm notice unpacked size: 64.7 kB
npm notice shasum: 68f6090e06e17a92fd1803c7b40a01e4ee20cc7c
npm notice integrity: sha512-QvpsQ6L6uSGT/[...]J3c52S+1afsIw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189634908
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-notification@2.6.0

notification v2.6.0

... (truncated)

Commits

Updates tauri-plugin-http from 2.6.0 to 2.8.1

Release notes

Sourced from tauri-plugin-http's releases.

opener-js v2.7.2

[2.7.2]

  • 1ab93046 (#3565 by @​cyclone-mind) Fixed revealItemInDir and the reveal_item_in_dir / reveal_items_in_dir Rust APIs panicking on Linux and the BSDs with Cannot start a runtime from within a runtime when zbus is built with its tokio feature and the call happens inside an async runtime. The blocking D-Bus calls now run on a dedicated thread.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.7.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.7.2
npm notice filename: tauri-apps-plugin-opener-2.7.2.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: 698f34eeb66d167792f7a113f3567c7bdff4294a
npm notice integrity: sha512-LyybP1VSzTMQi[...]jPzHMpv0Sz+TQ==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253696161
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-opener@2.7.2

opener v2.7.2

[2.7.2]

  • 1ab93046 (#3565 by @​cyclone-mind) Fixed revealItemInDir and the reveal_item_in_dir / reveal_items_in_dir Rust APIs panicking on Linux and the BSDs with Cannot start a runtime from within a runtime when zbus is built with its tokio feature and the call happens inside an async runtime. The blocking D-Bus calls now run on a dedicated thread.

... (truncated)

Commits
  • 7eb8246 publish new versions (#3673)
  • 65ce65b fix(ci): Android e2e flakes, shell Terminated sent before output (#3672)
  • cbd691b chore(examples): update Android project for API example
  • 974bbdc publish new versions (#3667)
  • 3113a54 chore(deps): update urlpattern to 0.6 (#3670)
  • b443d6b fix(http): release the request's resources once fetch_send settles (#3669)
  • 2a9c29e fix(updater): restore the current app when a macOS install fails (fix #3505, ...
  • d4835d0 publish new versions (#3660)
  • 569ee82 fix: mobile docs.rs builds
  • 25f3874 chore(deps): update dependency eslint-plugin-security to v4.1.0 (#3661)
  • Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.3 to 2.8.1

Commits
  • 7eb8246 publish new versions (#3673)
  • 65ce65b fix(ci): Android e2e flakes, shell Terminated sent before output (#3672)
  • cbd691b chore(examples): update Android project for API example
  • 974bbdc publish new versions (#3667)
  • 3113a54 chore(deps): update urlpattern to 0.6 (#3670)
  • b443d6b fix(http): release the request's resources once fetch_send settles (#3669)
  • 2a9c29e fix(updater): restore the current app when a macOS install fails (fix #3505, ...
  • d4835d0 publish new versions (#3660)
  • 569ee82 fix: mobile docs.rs builds
  • 25f3874 chore(deps): update dependency eslint-plugin-security to v4.1.0 (#3661)
  • Additional commits viewable in compare view

Updates tauri-plugin-shell from 2.3.6 to 2.4.1

Release notes

Sourced from tauri-plugin-shell's releases.

global-shortcut-js v2.4.1

[2.4.1]

  • fc18d055 (#3683) Release the shortcuts lock before running shortcut handlers, so a handler that calls back into the plugin, or pumps messages that dispatch another shortcut event, no longer deadlocks the app.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-global-shortcut@2.4.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.8kB README.md
npm notice 3.5kB dist-js/index.cjs
npm notice 3.3kB dist-js/index.d.ts
npm notice 3.4kB dist-js/index.js
npm notice 666B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-global-shortcut
npm notice version: 2.4.1
npm notice filename: tauri-apps-plugin-global-shortcut-2.4.1.tgz
npm notice package size: 3.7 kB
npm notice unpacked size: 15.6 kB
npm notice shasum: b5d53b422217eacf53ad630c586a8c3a72cd7d0e
npm notice integrity: sha512-NVCoQ0ShDFncs[...]lvVOG7tMr/e8g==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189615918
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-global-shortcut@2.4.1

global-shortcut v2.4.1

[2.4.1]

  • fc18d055 (#3683) Release the shortcuts lock before running shortcut handlers, so a handler that calls back into the plugin, or pumps messages that dispatch another shortcut event, no longer deadlocks the app.

... (truncated)

Commits
  • d66aa6f publish new versions (#2822)
  • 6f34587 fix(single-instance): disable dbus name replacement (#2860)
  • 708fa4e chore(deps): update dependency eslint-config-prettier to v10.1.8 (#2858)
  • b729203 fix(upload): fix download() locks main thread on Android (#2838)
  • 2f9c71a chore(deps): update dependency rollup to v4.45.1 (#2850)
  • 80d4d8e chore(deps): update eslint monorepo to v9.31.0 (v2) (#2839)
  • e7a98b0 chore(deps): update dependency typescript-eslint to v8.37.0 (#2848)
  • 44a1f65 fix(fs): writeFile create file by default (#2846)
  • 6210cd3 chore(deps): update dependency rollup to v4.45.0 (#2841)
  • 467f07b chore(deps): update dependency vite to v7 (v2) (#2800)
  • Additional commits viewable in compare view

Updates tauri-plugin-updater from 2.12.0 to 2.13.2

Commits
  • 7eb8246 publish new versions (#3673)
  • 65ce65b fix(ci): Android e2e flakes, shell Terminated sent before output (#3672)
  • cbd691b chore(examples): update Android project for API example
  • 974bbdc publish new versions (#3667)
  • 3113a54 chore(deps): update urlpattern to 0.6 (#3670)
  • b443d6b fix(http): release the request's resources once fetch_send settles (#3669)
  • 2a9c29e fix(updater): restore the current app when a macOS install fails (fix #3505, ...
  • d4835d0 publish new versions (#3660)
  • 569ee82 fix: mobile docs.rs builds
  • 25f3874 chore(deps): update dependency eslint-plugin-security to v4.1.0 (#3661)
  • Additional commits viewable in compare view

Updates tauri-plugin-window-state from 2.4.1 to 2.5.0

Release notes

Sourced from tauri-plugin-window-state's releases.

shell-js v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-shell@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 21.8kB dist-js/index.cjs
npm notice 22.0kB dist-js/index.d.ts
npm notice 21.7kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-shell
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-shell-2.5.0.tgz
npm notice package size: 8.0 kB
npm notice unpacked size: 69.6 kB
npm notice shasum: 16d0b1a1f5b02689777a01dc78b9d591eec3a3b7
npm notice integrity: sha512-FZ6RtcikCxJ35[...]DcLs7JIfuFkWw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189638540
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-shell@2.5.0

shell v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

... (truncated)

Commits
  • d6a3898 Publish New Versions (v2) (#3268)
  • 2e5bcdf chore(deps): fix audits (#3373)
  • 4374b4f chore(notification): remove unused dev-deps (#3372)
  • f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
  • 4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
  • 99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
  • eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
  • 5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
  • 2c0883e chore(deps): update dependency vite to v8 (#3346)
  • 024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
  • Additional commits viewable in compare view

Updates tauri-plugin-deep-link from 2.4.10 to 2.6.1

Release notes

Sourced from tauri-plugin-deep-link's releases.

notification-js v2.6.0

[2.6.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

feat

  • 46381516 (#3671) Report actions on desktop: a click on a notification (tap) or on one of the actions of its action type reaches onAction and the new Rust Notification::on_action, which also works on mobile. registerActionTypes, removeActive (Linux and the BSDs) and the listener commands no longer fail with "command not found" on desktop.

    The onAction callback is now typed with the new ActionPerformed interface, which is what every platform sends, instead of Options. Callbacks annotated with Options must be updated.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-notification@2.6.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 16.6kB dist-js/index.cjs
npm notice 26.1kB dist-js/index.d.ts
npm notice 16.2kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 663B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-notification
npm notice version: 2.6.0
npm notice filename: tauri-apps-plugin-notification-2.6.0.tgz
npm notice package size: 11.1 kB
npm notice unpacked size: 64.7 kB
npm notice shasum: 68f6090e06e17a92fd1803c7b40a01e4ee20cc7c
npm notice integrity: sha512-QvpsQ6L6uSGT/[...]J3c52S+1afsIw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189634908
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-notification@2.6.0

notification v2.6.0

... (truncated)

Commits

Updates tauri-plugin-single-instance from 2.4.4 to 2.5.2

Release notes

Sourced from tauri-plugin-single-instance's releases.

shell-js v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-shell@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 21.8kB dist-js/index.cjs
npm notice 22.0kB dist-js/index.d.ts
npm notice 21.7kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-shell
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-shell-2.5.0.tgz
npm notice package size: 8.0 kB
npm notice unpacked size: 69.6 kB
npm notice shasum: 16d0b1a1f5b02689777a01dc78b9d591eec3a3b7
npm notice integrity: sha512-FZ6RtcikCxJ35[...]DcLs7JIfuFkWw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189638540
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-shell@2.5.0

shell v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

... (truncated)

Commits

Updates tauri-plugin-notification from 2.4.0 to 2.5.1

Release notes

Sourced from tauri-plugin-notification's releases.

shell-js v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-shell@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 21.8kB dist-js/index.cjs
npm notice 22.0kB dist-js/index.d.ts
npm notice 21.7kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-shell
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-shell-2.5.0.tgz
npm notice package size: 8.0 kB
npm notice unpacked size: 69.6 kB
npm notice shasum: 16d0b1a1f5b02689777a01dc78b9d591eec3a3b7
npm notice integrity: sha512-FZ6RtcikCxJ35[...]DcLs7JIfuFkWw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189638540
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-shell@2.5.0

shell v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

... (truncated)

Commits
  • 5c7668b publish new versions (#3397)
  • ec05401 chore(deps): update rust crate toml to v1 (#3323)
  • b86e999 chore(deps): update tauri packages to 2.11 (#3407)
  • c463d8a chore(deps): update rustls-webpki in lockfile, ignore core2 in audit (#3405)
  • 1bb7beb chore(deps): bump openssl (#3402)
  • 3412fa2 docs(readme): fix platform support matrix (opener supports mobile)
  • af81fda docs(readme): fix platform support matrix (mobile is supported)
  • c1fd33b fix(opener): allow open network share locations (#3343)
  • 250857b chore(deps): update dependency typescript to v6 (#3363)
  • 964e13f fix(store): dead lock trying to set while exiting (#3395)
  • Additional commits viewable in compare view

Updates tauri-plugin-process from 2.3.1 to 2.4.0

Commits

Updates tauri-build from 2.6.3 to 2.7.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1314 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1045 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustybuzz
Version:   0.20.1
Warning:   unmaintained
Title:     rustybuzz is unmaintained
Date:      2026-07-11
ID:        RUSTSEC-2026-0206
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     ttf-parser is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192


warning: 4 allowed warnings found

[2.7.3]

Enhancements

... (truncated)

Commits
  • 59b63ab Apply Version Updates From Current Changes (#16255)
  • 55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
  • 744ff2b chore(deps): bump rustls to 0.23.46
  • c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
  • dc637db chore: add missing api change file (#16260)
  • b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
  • 7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
  • 5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
  • 5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
  • 141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
  • Additional commits viewable in compare view

@vercel

vercel Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
worldscript-studio Ready Ready Preview Oct 16, 2026 1:52pm UTC

@dependabot
dependabot Bot requested a review from qnbs as a code owner October 14, 2026 09:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 14, 2026
@coderabbitai

coderabbitai Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: qnbs/WorldScript-Studio/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: a8e01574-41bf-434c-bb9b-72e2958799fa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@codeant-ai

codeant-ai Bot commented Oct 14, 2026

Copy link
Copy Markdown

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@socket-security

socket-security Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedcargo/​tauri@​2.11.5 ⏵ 2.12.280100100100100
Updatedcargo/​tauri-plugin-updater@​2.12.0 ⏵ 2.13.286 -1100100100100
Updatedcargo/​tauri-plugin-http@​2.6.0 ⏵ 2.8.188100100100100
Updatedcargo/​tauri-plugin-deep-link@​2.4.10 ⏵ 2.6.188100100100100
Updatedcargo/​tauri-plugin-shell@​2.3.6 ⏵ 2.4.189 +1100100100100
Updatedcargo/​tauri-plugin-log@​2.9.1 ⏵ 2.10.089100100100100
Updatedcargo/​tauri-plugin-notification@​2.4.0 ⏵ 2.5.189100100100100
Updatedcargo/​tauri-plugin-dialog@​2.7.3 ⏵ 2.8.189100100100100
Updatedcargo/​tauri-plugin-window-state@​2.4.1 ⏵ 2.5.089100100100100
Updatedcargo/​tauri-plugin-process@​2.3.1 ⏵ 2.4.089100100100100
Updatedcargo/​tauri-plugin-fs@​2.5.2 ⏵ 2.6.090 +1100100100100
Updatedcargo/​tauri-build@​2.6.3 ⏵ 2.7.397 +110093100100
Updatedcargo/​tauri-plugin-single-instance@​2.4.4 ⏵ 2.5.210010093100100

View full report

@codeant-ai

codeant-ai Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown

🏁 CodeAnt Quality Gate Results

Commit: 26f79ed3
Scan Time: 2026-10-16 13:52:20 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality Gate Status Details
Secrets ✅ PASSED 0 secrets found
Duplicate Code ✅ PASSED 0.0% duplicated
SAST ✅ PASSED No security issues
Bugs ✅ PASSED Rating S: No bugs
IAC ✅ PASSED Rating S: No issues

View Full Results

codescene-access[bot]

This comment was marked as outdated.

Sign in to view

@github-actions

github-actions Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown

[check-pr-size] PR size is over the target tier (normal profile): 2 files, 442 meaningful lines, 1 commits — limit ≤8 files / ≤400 lines / ≤6 commits. Consider splitting into smaller, independently reviewable PRs.

@codecov

codecov Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

This was referenced Oct 14, 2026
Open
Open
Open
@dependabot dependabot Bot changed the title build(deps): bump the tauri-deps group in /src-tauri with 13 updates build(deps): bump the tauri-deps group across 1 directory with 13 updates Oct 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/src-tauri/tauri-deps-4bafca1e95 branch from f78168c to 0b8cd07 Compare October 14, 2026 14:13
codescene-access[bot]

This comment was marked as outdated.

Sign in to view

@dependabot
build(deps): bump the tauri-deps group across 1 directory with 13 upd…
26f79ed 
…ates

Bumps the tauri-deps group with 13 updates in the /src-tauri directory:

| Package | From | To |
| --- | --- | --- |
| [tauri](https://github.com/tauri-apps/tauri) | `2.11.5` | `2.12.2` |
| [tauri-plugin-log](https://github.com/tauri-apps/plugins-workspace) | `2.9.1` | `2.10.0` |
| [tauri-plugin-fs](https://github.com/tauri-apps/plugins-workspace) | `2.5.2` | `2.6.0` |
| [tauri-plugin-http](https://github.com/tauri-apps/plugins-workspace) | `2.6.0` | `2.8.1` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.3` | `2.8.1` |
| [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.6` | `2.4.1` |
| [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.12.0` | `2.13.2` |
| [tauri-plugin-window-state](https://github.com/tauri-apps/plugins-workspace) | `2.4.1` | `2.5.0` |
| [tauri-plugin-deep-link](https://github.com/tauri-apps/plugins-workspace) | `2.4.10` | `2.6.1` |
| [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.4.4` | `2.5.2` |
| [tauri-plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.4.0` | `2.5.1` |
| [tauri-plugin-process](https://github.com/tauri-apps/plugins-workspace) | `2.3.1` | `2.4.0` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.3` | `2.7.3` |



Updates `tauri` from 2.11.5 to 2.12.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.11.5...tauri-v2.12.2)

Updates `tauri-plugin-log` from 2.9.1 to 2.10.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.9.1...log-v2.10.0)

Updates `tauri-plugin-fs` from 2.5.2 to 2.6.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.5.2...fs-v2.6.0)

Updates `tauri-plugin-http` from 2.6.0 to 2.8.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.6.0...http-v2.8.1)

Updates `tauri-plugin-dialog` from 2.7.3 to 2.8.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@dialog-v2.7.3...http-v2.8.1)

Updates `tauri-plugin-shell` from 2.3.6 to 2.4.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@nfc-v2.3.6...fs-v2.4.1)

Updates `tauri-plugin-updater` from 2.12.0 to 2.13.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@updater-v2.12.0...updater-v2.13.2)

Updates `tauri-plugin-window-state` from 2.4.1 to 2.5.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.1...fs-v2.5.0)

Updates `tauri-plugin-deep-link` from 2.4.10 to 2.6.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@deep-link-v2.4.10...http-v2.6.1)

Updates `tauri-plugin-single-instance` from 2.4.4 to 2.5.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.4...fs-v2.5.2)

Updates `tauri-plugin-notification` from 2.4.0 to 2.5.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@os-v2.4.0...fs-v2.5.1)

Updates `tauri-plugin-process` from 2.3.1 to 2.4.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@os-v2.3.1...os-v2.4.0)

Updates `tauri-build` from 2.6.3 to 2.7.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.6.3...tauri-build-v2.7.3)

---
updated-dependencies:
- dependency-name: tauri
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-build
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-deep-link
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-fs
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-http
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-log
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-notification
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-process
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-shell
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-single-instance
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-updater
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
- dependency-name: tauri-plugin-window-state
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tauri-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/src-tauri/tauri-deps-4bafca1e95 branch from 0b8cd07 to 26f79ed Compare October 16, 2026 13:51
codescene-access[bot]
codescene-access Bot approved these changes Oct 16, 2026
View reviewed changes

@codescene-access codescene-access Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No application code in the PR — skipped Code Health checks.

See analysis details in CodeScene

Quality Gate Profile: The Bare Minimum
Install CodeScene MCP: safeguard and uplift AI-generated code. Catch issues early with our IDE extension and CLI tool.

This branch was successfully deployed

1 active deployment
Preview — 26f79ed3 Deployed Oct 16, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@qnbs qnbs Awaiting requested review from qnbs qnbs is a code owner
1 more reviewer
@codescene-access codescene-access[bot] codescene-access[bot] approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants