Skip to content

chore: bump the minor-and-patch group across 1 directory with 11 updates - #691

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/minor-and-patch-a51b1fdb56
Closed

chore: bump the minor-and-patch group across 1 directory with 11 updates#691
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/minor-and-patch-a51b1fdb56

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-and-patch group with 11 updates in the /src-tauri directory:

Package From To
tauri 2.11.5 2.11.6
tauri-plugin-opener 2.5.4 2.7.0
tauri-plugin-dialog 2.7.2 2.8.1
tauri-plugin-log 2.9.0 2.10.0
tauri-plugin-wdio 1.3.0 1.5.0
tauri-plugin-wdio-webdriver 1.3.0 1.5.0
reqwest 0.13.4 0.13.5
tokio 1.53.1 1.53.2
tauri-plugin-single-instance 2.4.5 2.5.2
tauri-plugin-window-state 2.4.1 2.5.0
tauri-build 2.6.3 2.7.2

Updates tauri from 2.11.5 to 2.11.6

Release notes

Sourced from tauri's releases.

tauri v2.11.6

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1251 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436


Crate:     rustls-pemfile

Version:   1.0.4

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134


Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134


Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206


Crate:     ttf-parser

</tr></table>

... (truncated)

Commits

Updates tauri-plugin-opener from 2.5.4 to 2.7.0

Release notes

Sourced from tauri-plugin-opener's releases.

fs-js v2.7.0

[2.7.0]

  • a934743b (#3637) Added the scopeDroppedPaths plugin config option (plugins > fs > scopeDroppedPaths in tauri.conf.json). Set it to false to stop adding the paths dropped onto any window to the fs scope, which otherwise gives every webview with an fs permission access to them (directories recursively). Defaults to true, the current behaviour.
  • 085a0283 (#3636) Fixed a panic on Android when a content provider returns no file descriptor for a content:// URI (e.g. virtual files). The fs command now fails with an error instead.
  • f81f0447 (#3635) Fixed reading uncompressed Android assets ($RESOURCE files such as images or audio that are stored uncompressed in the APK) returning the bytes of the APK instead of the asset. Assets are now always read from a copy in the app cache, like compressed ones.
  • e03dca60 (#3628) startAccessingSecurityScopedResource and stopAccessingSecurityScopedResource now accept absolute paths on iOS, as documented, instead of silently doing nothing unless given a file:// URL.
  • 5de7ebfc (#3634) Security: the open command no longer accepts a customFlags option from the webview. It was not part of the JavaScript types and let the webview pass arbitrary open(2) flags (e.g. O_TRUNC) to files it may only read. OpenOptionsExt::custom_flags still works from Rust.
  • 5e6c023a (#3626) FileHandle.read no longer allocates a buffer of the requested size up front: the length is capped to the rest of the file (64 MiB for files of unknown size), an allocation failure is reported as an error instead of aborting the app, and only the bytes that were read are sent back to the webview.
  • 3a900017 (#3627) Security: the fs scope check now resolves symlinks in the ancestors of paths that do not exist yet, and resolves relative symlink targets against the link's directory instead of the process working directory. Previously a new file created below a symlinked directory inside the scope (writeFile, mkdir, create, rename, copyFile, ...) was written outside of the scope. Deny patterns now also apply to the path as given, so they can name a symlink, and a path whose symlinks cannot be resolved (e.g. a loop) is rejected.
  • 77d00a4f (#3633) FileHandle.seek now rejects a negative offset with SeekMode.Start instead of seeking to a huge position.
  • 5c144e74 (#3631) Fixed readTextFileLines with a UTF-16 encoding splitting lines on a 0x0A 0x00 (LE) or 0x00 0x0A (BE) byte sequence that is not aligned on a code unit, e.g. ਗĀ, which garbled every following line.
  • dcc8cb03 (#3629) Fixed writeFile with a ReadableStream leaving the end of the previous contents in place when the new data is shorter. The file is now truncated first unless append is set, like when writing a buffer.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-fs@2.7.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.4kB README.md
npm notice 39.9kB dist-js/index.cjs
npm notice 41.1kB dist-js/index.d.ts
npm notice 39.2kB dist-js/index.js
npm notice 697B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-fs
npm notice version: 2.7.0
npm notice filename: tauri-apps-plugin-fs-2.7.0.tgz
npm notice package size: 25.6 kB
npm notice unpacked size: 124.3 kB
npm notice shasum: e76d4d07b05063de6911fd1c42948ab0264ac20e
npm notice integrity: sha512-8RQbPkuYuLZ2r[...]GdKJVqDokyDgQ==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189606635
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-fs@2.7.0

... (truncated)

Commits
  • 6bbd44d publish new versions (#3675)
  • fc18d05 fix(global-shortcut): release the shortcuts lock before running handlers (#3683)
  • 42ae8b4 fix(ios): make init_plugin_* entry points public so release builds link on ...
  • 818d2e0 fix(single-instance): limit second instance's wait on Windows (#3645)
  • 323fe80 fix(single-instance): forward non-Unicode arguments and cwd (#3644)
  • 6772581 test(e2e): fix __name usage on FS test
  • 46f7c87 chore: fmt
  • a8acd17 feat(shell): add process group spawn option (fix #1332) (#3351)
  • e03dca6 fix(fs): accept absolute paths in the iOS security-scope commands (#3628)
  • 3a90001 fix(fs): resolve symlinks of missing paths before checking the scope (#3627)
  • Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.2 to 2.8.1

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.1

[2.8.1]

  • 569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.1
npm notice filename: tauri-apps-plugin-dialog-2.8.1.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: f29f3c28862a1ed767b6fd241f34abf26129f88f
npm notice integrity: sha512-/DtE3B62JgpYu[...]phsKnb+738Dmw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3028120915
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.1

dialog v2.8.1

[2.8.1]

  • 569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

... (truncated)

Commits
  • 7eb8246 publish new versions (#3673)
  • 65ce65b fix(ci): Android e2e flakes, shell Terminated sent before output (#3672)
  • cbd691b chore(examples): update Android project for API example
  • 974bbdc publish new versions (#3667)
  • 3113a54 chore(deps): update urlpattern to 0.6 (#3670)
  • b443d6b fix(http): release the request's resources once fetch_send settles (#3669)
  • 2a9c29e fix(updater): restore the current app when a macOS install fails (fix #3505, ...
  • d4835d0 publish new versions (#3660)
  • 569ee82 fix: mobile docs.rs builds
  • 25f3874 chore(deps): update dependency eslint-plugin-security to v4.1.0 (#3661)
  • Additional commits viewable in compare view

Updates tauri-plugin-log from 2.9.0 to 2.10.0

Commits

Updates tauri-plugin-wdio from 1.3.0 to 1.5.0

Changelog

Sourced from tauri-plugin-wdio's changelog.

[@​wdio/tauri-plugin@​1.5.0] - 2026-10-07

Full Changelog

Changed

  • deps-dev: bump the development-dependencies group with 6 updates (PR #714)
  • deps: bump the cargo-dependencies group across 6 directories with 2 updates (PR #715)
  • release: revert the unpublished #642 release and fix standing-PR selection (PR #707)
  • rust: run the Tauri and Dioxus driver tests in CI and ban Listener::once (PR #705)
  • release 17 package(s) (PR #642)
  • deps: bump the production-dependencies group across 1 directory with 14 updates (PR #698)
  • deps: bump the cargo-dependencies group across 5 directories with 5 updates (PR #700)
  • deps-dev: bump the development-dependencies group across 1 directory with 19 updates (PR #699)
  • deps: bump the cargo-dependencies group across 2 directories with 1 update (PR #682)
  • deps-dev: bump the development-dependencies group with 8 updates (PR #681)
  • align engines.node floor with the WDIO v9 requirement (>=18.20.0) (PR #653)
  • deps: bump the cargo-dependencies group across 4 directories with 1 update (PR #646)
  • update deps (PR #648)

[@​wdio/tauri-service@​1.5.0] - 2026-10-07

Full Changelog

Changed

  • release: revert the unpublished #642 release and fix standing-PR selection (PR #707)
  • release 17 package(s) (PR #642)
  • deps: bump the production-dependencies group across 1 directory with 14 updates (PR #698)
  • deps-dev: bump the development-dependencies group across 1 directory with 19 updates (PR #699)
  • share standalone teardown helpers (failStartup, safeDeleteSession, boundedOnComplete) (PR #678 · closes #668)
  • deps-dev: bump the development-dependencies group with 8 updates (PR #681)
  • electron,tauri: remove deprecated logging aliases, reduce test repetition (PR #677)
  • add @​repo/test-utils and migrate cold-import/defer/platform helpers (PR #664)
  • import once in a beforeAll to fix the index.spec cold-import flake (PR #662)
  • update deps (PR #648)

Fixed

  • tauri: evaluate tauri.execute on the session's own embedded port (PR #702 · closes #694)
  • tauri,electron,dioxus: stop restoring mocks after the session is deleted (PR #686 · closes #685)
  • tauri: guarantee teardown on failed standalone startup and await embedded cleanup (PR #636)

[tauri-plugin-wdio-webdriver@1.5.0] - 2026-10-07

Changed

  • deps: bump the cargo-dependencies group across 6 directories with 2 updates (#715)
  • release: revert the unpublished #642 release and fix standing-PR selection (#707)
  • rust: run the Tauri and Dioxus driver tests in CI and ban Listener::once (#705)
  • release 17 package(s) (#642)
  • deps: bump the cargo-dependencies group across 5 directories with 5 updates (#700)
  • deps: bump the cargo-dependencies group across 2 directories with 1 update (#682)
  • deps: bump the cargo-dependencies group across 4 directories with 1 update (#646)

... (truncated)

Commits
  • f5cf07d chore: release 13 package(s) (#708)
  • 320be58 chore(turbo): opt out of agent guidance (#716)
  • c8890d1 chore(deps-dev): bump the development-dependencies group with 6 updates (#714)
  • 49f2237 chore(deps): bump the cargo-dependencies group across 6 directories with 2 up...
  • ce40d2b chore(release): revert the unpublished #642 release and fix standing-PR selec...
  • 8316ce1 fix(tauri): wait for the window's actual state after a window change (#706)
  • 65415cc ci(rust): run the Tauri and Dioxus driver tests in CI and ban Listener::once ...
  • 6a4b91d ci(tauri,dioxus): nightly fresh-dependency build of published crates (#688)
  • 790ab91 chore: release 17 package(s) (#642)
  • 19ef3c2 fix(tauri): stop the embedded driver panicking when a window event repeats (#...
  • Additional commits viewable in compare view

Updates tauri-plugin-wdio-webdriver from 1.3.0 to 1.5.0

Changelog

Sourced from tauri-plugin-wdio-webdriver's changelog.

[@​wdio/tauri-plugin@​1.5.0] - 2026-10-07

Full Changelog

Changed

  • deps-dev: bump the development-dependencies group with 6 updates (PR #714)
  • deps: bump the cargo-dependencies group across 6 directories with 2 updates (PR #715)
  • release: revert the unpublished #642 release and fix standing-PR selection (PR #707)
  • rust: run the Tauri and Dioxus driver tests in CI and ban Listener::once (PR #705)
  • release 17 package(s) (PR #642)
  • deps: bump the production-dependencies group across 1 directory with 14 updates (PR #698)
  • deps: bump the cargo-dependencies group across 5 directories with 5 updates (PR #700)
  • deps-dev: bump the development-dependencies group across 1 directory with 19 updates (PR #699)
  • deps: bump the cargo-dependencies group across 2 directories with 1 update (PR #682)
  • deps-dev: bump the development-dependencies group with 8 updates (PR #681)
  • align engines.node floor with the WDIO v9 requirement (>=18.20.0) (PR #653)
  • deps: bump the cargo-dependencies group across 4 directories with 1 update (PR #646)
  • update deps (PR #648)

[@​wdio/tauri-service@​1.5.0] - 2026-10-07

Full Changelog

Changed

  • release: revert the unpublished #642 release and fix standing-PR selection (PR #707)
  • release 17 package(s) (PR #642)
  • deps: bump the production-dependencies group across 1 directory with 14 updates (PR #698)
  • deps-dev: bump the development-dependencies group across 1 directory with 19 updates (PR #699)
  • share standalone teardown helpers (failStartup, safeDeleteSession, boundedOnComplete) (PR #678 · closes #668)
  • deps-dev: bump the development-dependencies group with 8 updates (PR #681)
  • electron,tauri: remove deprecated logging aliases, reduce test repetition (PR #677)
  • add @​repo/test-utils and migrate cold-import/defer/platform helpers (PR #664)
  • import once in a beforeAll to fix the index.spec cold-import flake (PR #662)
  • update deps (PR #648)

Fixed

  • tauri: evaluate tauri.execute on the session's own embedded port (PR #702 · closes #694)
  • tauri,electron,dioxus: stop restoring mocks after the session is deleted (PR #686 · closes #685)
  • tauri: guarantee teardown on failed standalone startup and await embedded cleanup (PR #636)

[tauri-plugin-wdio-webdriver@1.5.0] - 2026-10-07

Changed

  • deps: bump the cargo-dependencies group across 6 directories with 2 updates (#715)
  • release: revert the unpublished #642 release and fix standing-PR selection (#707)
  • rust: run the Tauri and Dioxus driver tests in CI and ban Listener::once (#705)
  • release 17 package(s) (#642)
  • deps: bump the cargo-dependencies group across 5 directories with 5 updates (#700)
  • deps: bump the cargo-dependencies group across 2 directories with 1 update (#682)
  • deps: bump the cargo-dependencies group across 4 directories with 1 update (#646)

... (truncated)

Commits
  • f5cf07d chore: release 13 package(s) (#708)
  • 320be58 chore(turbo): opt out of agent guidance (#716)
  • c8890d1 chore(deps-dev): bump the development-dependencies group with 6 updates (#714)
  • 49f2237 chore(deps): bump the cargo-dependencies group across 6 directories with 2 up...
  • ce40d2b chore(release): revert the unpublished #642 release and fix standing-PR selec...
  • 8316ce1 fix(tauri): wait for the window's actual state after a window change (#706)
  • 65415cc ci(rust): run the Tauri and Dioxus driver tests in CI and ban Listener::once ...
  • 6a4b91d ci(tauri,dioxus): nightly fresh-dependency build of published crates (#688)
  • 790ab91 chore: release 17 package(s) (#642)
  • 19ef3c2 fix(tauri): stop the embedded driver panicking when a window event repeats (#...
  • Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.
Commits
  • de55373 v0.13.5
  • 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
  • 9f06fd2 docs: improve description of JSON method (#3082)
  • 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
  • ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
  • 4e9a3c7 chore: add pull request template for human-written content
  • 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
  • 221abe9 chore: Remove unnecessary clones and a cast (#3071)
  • 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
  • fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

  • fs: clamp io_uring read length to u32::MAX (#8572)
  • rt: ignore current_thread task dumps from other runtimes (#8544)
  • rt: preserve io_uring context if a completion waker panics (#8566)
  • sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
  • taskdump: restore deferred leaf wakes during capture (#8445)
  • time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits
  • ff0c406 chore: prepare Tokio v1.53.2 (#8580)
  • a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
  • ec31a9f chore: prepare Tokio v1.51.5 (#8579)
  • 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
  • 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
  • 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
  • 9a47992 process: unregister Windows wait before closing child handle (#8564)
  • 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
  • 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • Additional commits viewable in compare view

Updates tauri-plugin-single-instance from 2.4.5 to 2.5.2

Release notes

Sourced from tauri-plugin-single-instance's releases.

single-instance v2.5.2

[2.5.2]

Dependencies

  • Upgraded to deep-link@2.6.1
Updating crates.io index
   Packaging tauri-plugin-single-instance v2.5.2 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Updating crates.io index
warning: package `yoke-derive v0.8.3` in Cargo.lock is yanked in registry `crates-io`
  |
  = help: consider updating to a version that is not yanked
    Packaged 15 files, 168.3KiB (46.0KiB compressed)
   Uploading tauri-plugin-single-instance v2.5.2 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/single-instance)
    Uploaded tauri-plugin-single-instance v2.5.2 to registry `crates-io`
note: waiting for tauri-plugin-single-instance v2.5.2 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-single-instance v2.5.2 at registry `crates-io`

barcode-scanner-js v2.5.2

[2.5.2]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-barcode-scanner@2.5.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.3kB README.md
npm notice 5.3kB dist-js/index.cjs
npm notice 5.3kB dist-js/index.d.ts
npm notice 5.2kB dist-js/index.js
npm notice 755B package.json
npm notice Tarball Details
</tr></table>

... (truncated)

Commits

@dependabot
chore: bump the minor-and-patch group across 1 directory with 11 updates
8911a0a 
Bumps the minor-and-patch group with 11 updates in the /src-tauri directory:

| Package | From | To |
| --- | --- | --- |
| [tauri](https://github.com/tauri-apps/tauri) | `2.11.5` | `2.11.6` |
| [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.4` | `2.7.0` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.2` | `2.8.1` |
| [tauri-plugin-log](https://github.com/tauri-apps/plugins-workspace) | `2.9.0` | `2.10.0` |
| [tauri-plugin-wdio](https://github.com/webdriverio/desktop-mobile) | `1.3.0` | `1.5.0` |
| [tauri-plugin-wdio-webdriver](https://github.com/webdriverio/desktop-mobile) | `1.3.0` | `1.5.0` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` |
| [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.4.5` | `2.5.2` |
| [tauri-plugin-window-state](https://github.com/tauri-apps/plugins-workspace) | `2.4.1` | `2.5.0` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.3` | `2.7.2` |



Updates `tauri` from 2.11.5 to 2.11.6
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.11.5...tauri-v2.11.6)

Updates `tauri-plugin-opener` from 2.5.4 to 2.7.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.5.4...fs-v2.7.0)

Updates `tauri-plugin-dialog` from 2.7.2 to 2.8.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@dialog-v2.7.2...http-v2.8.1)

Updates `tauri-plugin-log` from 2.9.0 to 2.10.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.9.0...log-v2.10.0)

Updates `tauri-plugin-wdio` from 1.3.0 to 1.5.0
- [Release notes](https://github.com/webdriverio/desktop-mobile/releases)
- [Changelog](https://github.com/webdriverio/desktop-mobile/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webdriverio/desktop-mobile/compare/tauri-plugin-wdio-webdriver@v1.3.0...tauri-plugin-wdio-webdriver@v1.5.0)

Updates `tauri-plugin-wdio-webdriver` from 1.3.0 to 1.5.0
- [Release notes](https://github.com/webdriverio/desktop-mobile/releases)
- [Changelog](https://github.com/webdriverio/desktop-mobile/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webdriverio/desktop-mobile/compare/tauri-plugin-wdio-webdriver@v1.3.0...tauri-plugin-wdio-webdriver@v1.5.0)

Updates `reqwest` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `tauri-plugin-single-instance` from 2.4.5 to 2.5.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.5...fs-v2.5.2)

Updates `tauri-plugin-window-state` from 2.4.1 to 2.5.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.1...fs-v2.5.0)

Updates `tauri-build` from 2.6.3 to 2.7.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.6.3...tauri-build-v2.7.2)

---
updated-dependencies:
- dependency-name: tauri
  dependency-version: 2.11.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tauri-plugin-opener
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tauri-plugin-log
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tauri-plugin-wdio
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tauri-plugin-wdio-webdriver
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: reqwest
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tauri-plugin-single-instance
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tauri-plugin-window-state
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tauri-build
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Maintenance Chore, refactor, dependency, or test work without user-facing change label Oct 12, 2026
@Azganoth Azganoth mentioned this pull request Oct 12, 2026
Merged
Azganoth added a commit that referenced this pull request Oct 12, 2026
@Azganoth
chore: update dependencies (#692)
9aa80f9 
## Summary

Brings every dependency to its latest release except WebdriverIO 10,
with the compatibility changes the updates require.

- Tauri 2.12 moves on both sides at once: the `@tauri-apps/*` packages
with their crates, and the WebdriverIO Tauri plugin with its crates at
1.5.0. The Tauri CLI refuses to build when an npm package and its crate
differ in major or minor version, which is why Dependabot's separate npm
and cargo groups each failed the desktop build. 2.12 also binds queued
channel IPC data to the webview it was created for
(GHSA-w28w-mhc8-qvjv), drops event listeners when their window or
webview is destroyed, and loads `asset://` files off the event loop.
`Cargo.toml` floors follow the resolved versions, including the notify
9.0.0-rc.5 the lockfile already resolved.
- oxlint 1.84 extends `unicorn/consistent-function-scoping` to functions
that read only an outer ancestor's bindings. The ten it reports move to
the scope that owns what they read; the context popup's root mouse and
drag handlers move to the plugin rather than to module scope, since they
share its pointer state.
- Milkdown 7.22.3 moves with `mdast-util-to-markdown` 2.2.0 and
`micromark-util-types` 2.0.3, keeping the single copies those exact pins
exist for. The serializer's 2.1.3 escaping and line-ending fixes change
no bytes the round-trip suites assert.
- From Base UI 1.8, pressing a focusable control outside a non-modal
popover closes it as `focus-out` rather than `outside-press`, because
focus moves before the click lands. The context popup and block
insertion menu now treat a focus-out that hands focus to another element
as a dismissal from outside, so they no longer pull focus back into the
editor from the control that was clicked. Focus lost to nothing still
returns to the editor.
- Majors: parse5 8 (ESM-only), Vitest 5, happy-dom 21, and KaTeX 0.19,
whose `strict` change does not reach the `strict: "ignore"` math
rendering uses.
- Minor and patch: React 19.3, Base UI 1.9, Vite 8.3, Mermaid 12.1,
Shiki 4.5, lucide-react, WebdriverIO 9.32, and the rest of the npm and
Cargo trees.

## Related Issue

Not applicable

## Verification

- `pnpm check` passed.
- `corpusRoundTrip` and `markdownCompatibility` tests pass with the new
serializer and Milkdown, so the corpus round trips and written-byte
assertions hold.
- `editor-context-popup` tests: a click on a focusable control outside
the popup leaves focus on that control. The test passes on Base UI 1.7.0
and fails on 1.8.0 without the change. `popoverDismissal` tests separate
focus another element took from focus lost to nothing.
- Every `@tauri-apps/*` package and `@wdio/tauri-plugin` resolve to
exactly their crate's version.

Not verified:

- the desktop E2E suite, which CI runs;
- by eye: KaTeX's fallback to the browser math font before Times New
Roman (0.18.10), Mermaid 12.1 keeping the theme's generated values when
a theme variable is partially overridden, and Base UI 1.8–1.9's menu and
menubar focus fixes;
- an installed build.

## Notes

- WebdriverIO stays on 9: `@wdio/tauri-service` 1.5.0, the latest, peers
`webdriverio ^9`. Node 26 and `@types/node` 26 stay out, per
`dependabot.yml`.
- `@wdio/tauri-plugin` 1.5.0 pins `@tauri-apps/api` 2.12.1, so the
desktop E2E bundle carries that copy beside the app's 2.12.3. The
production build does not import the plugin.
- The shadcn CLI now depends on `cn`, a package name unused since 2013
that shadcn has published from `shadcn-ui/cn` since September 2026. Its
publisher and repository match the CLI's, and none of the packages new
to the tree runs install scripts.
- Supersedes #603, #604, and #691.
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 12, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/src-tauri/minor-and-patch-a51b1fdb56 branch October 12, 2026 06:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Maintenance Chore, refactor, dependency, or test work without user-facing change

Projects

Leafdown
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants