chore(deps): bump the cargo group across 1 directory with 7 updates by dependabot[bot] · Pull Request #111 · Lyrex/FrameForge-Linux

dependabot · 2026-10-01T08:25:22Z

Bumps the cargo group with 7 updates in the /src-tauri directory:

Package	From	To
tauri	`2.11.6`	`2.12.0`
tauri-plugin-opener	`2.5.5`	`2.6.0`
dirs	`6.0.0`	`7.0.0`
tauri-plugin-notification	`2.4.0`	`2.5.0`
tauri-plugin-dialog	`2.7.3`	`2.8.0`
tauri-plugin-updater	`2.12.0`	`2.13.0`
tauri-build	`2.6.3`	`2.7.1`

Updates tauri from 2.11.6 to 2.12.0

Release notes

Sourced from tauri's releases.

tauri-cli v2.12.0

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1271 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1091 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

447fa9f fix(core): tauri-utils publish
4f46cfc fix(ci): pnpm publish should use "debug" loglevel instead of "silly"
726822c apply version updates (#15634)
9f8922a docs(core): extend app_directories_override documentation (#16139)
dc894d4 chore: remove change file for unreleased fix (#16140)
152529e Revert "feat(core): add android activityEmbedding config (#15255)" (#16138)
7456ddd Revert "fix(core): proper unique identifier for menu items on channels store"...
15468de fix(bundler): recognize deb and rpm as self-contained updater targets (#16064)
8e70283 fix(bundler): update linuxdeploy and linuxdeploy-plugin-gtk (#16062)
1b91b7b fix(cli): list all locked crate versions in tauri info (#16102)
Additional commits viewable in compare view

Updates tauri-plugin-opener from 2.5.5 to 2.6.0

Release notes

Sourced from tauri-plugin-opener's releases.

deep-link-js v2.6.0

[2.6.0]

ecd3273e (#3480 by @renovate) Updated windows-rs dependencies:
- deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
- opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
- single-instance: updated windows-sys to 0.61
- updater: updated windows-sys to 0.61

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-deep-link@2.6.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 6.2kB README.md
npm notice 4.7kB dist-js/index.cjs
npm notice 4.0kB dist-js/index.d.ts
npm notice 4.5kB dist-js/index.js
npm notice 801B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-deep-link
npm notice version: 2.6.0
npm notice filename: tauri-apps-plugin-deep-link-2.6.0.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 21.1 kB
npm notice shasum: 42f4e74e87aea6ace90871ad293f4fface5910cc
npm notice integrity: sha512-41rOuYUZjxcEz[...]TsoJQ2R9U5MCA==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005261605
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-deep-link@2.6.0

deep-link v2.6.0

[2.6.0]

... (truncated)

Commits

a2364a5 fix: integration test
67ebc13 fix(ci): check-publish job should check .changes/pre.json
cbfd428 Publish New Versions (v2) (#3618)
f460570 chore: fmt
a433ec0 fix: mobile clippy warnings
3d8a3c8 chore: edition 2024
b517cc7 fix: actually set rust-version to 1.90
b6a38a5 fix(ci): e2e test error reporting
9b29b60 feat: update to tauri 2.12
3a01943 tests(e2e): fix e2e failures on Linux and Windows (#3642)
Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates tauri-plugin-notification from 2.4.0 to 2.5.0

Release notes

Sourced from tauri-plugin-notification's releases.

sql-js v2.5.0

[2.5.0]

ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.

9b29b601 Update MSRV to 1.90 to match tauri.

a87a3c7d Update documentation.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-sql@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 6.2kB README.md
npm notice 6.5kB dist-js/index.cjs
npm notice 6.1kB dist-js/index.d.ts
npm notice 6.5kB dist-js/index.js
npm notice 703B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-sql
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-sql-2.5.0.tgz
npm notice package size: 5.3 kB
npm notice unpacked size: 27.0 kB
npm notice shasum: f2806141a23eab9347aed34efa0efa15930e8dae
npm notice integrity: sha512-wHzfXAgMbn3G1[...]kFZrgTyu8zBkw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2969525463
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-sql@2.5.0
sql v2.5.0

[2.5.0]

ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.

9b29b601 Update MSRV to 1.90 to match tauri.

a87a3c7d Update documentation.

... (truncated)

Commits

d6a3898 Publish New Versions (v2) (#3268)
2e5bcdf chore(deps): fix audits (#3373)
4374b4f chore(notification): remove unused dev-deps (#3372)
f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
2c0883e chore(deps): update dependency vite to v8 (#3346)
024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.3 to 2.8.0

Release notes

Sourced from tauri-plugin-dialog's releases.

http-js v2.8.0

[2.8.0]

43538190 (#3656 by @FabianLars) Re-release @tauri-apps/plugin-http@2.7.0 as 2.8.0.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-http@2.8.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 7.7kB dist-js/index.cjs
npm notice 3.4kB dist-js/index.d.ts
npm notice 7.7kB dist-js/index.js
npm notice 655B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-http
npm notice version: 2.8.0
npm notice filename: tauri-apps-plugin-http-2.8.0.tgz
npm notice package size: 5.5 kB
npm notice unpacked size: 23.0 kB
npm notice shasum: 1cf059a5c97cadea0e5f6a07c22931a118c60ffc
npm notice integrity: sha512-cPvZvfUSaBkqG[...]jyXRPNo6Cky6g==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005263804
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-http@2.8.0

Commits

6e2e7e4 publish new versions (#3070)
9a2c98f temp: remove updater changefiles
4a2ecb6 chore(deps): update rkyv, closes #3196
31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
Additional commits viewable in compare view

Updates tauri-plugin-updater from 2.12.0 to 2.13.0

Release notes

Sourced from tauri-plugin-updater's releases.

updater-js v2.13.0

[2.13.0]

ae3c808e (#3602) The plugin's global API script (used with app.withGlobalTauri) now resolves the core API from window.__TAURI__ instead of bundling its own copy of @tauri-apps/api. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an Image from window.__TAURI__.image passed to clipboardManager.writeImage, which previously failed the instanceof check against the plugin's private copy), and the script is considerably smaller.

9b29b601 Update MSRV to 1.90 to match tauri.

a87a3c7d Update documentation.

bug

101e1b06 (#3615) On Linux, check() no longer sets SSL_CERT_FILE and SSL_CERT_DIR to Debian paths. The override pointed rustls to files that do not exist on distros with a different layout, such as ALT Linux, and left every TLS client in the app without root certificates.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.13.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 6.7kB dist-js/index.cjs
npm notice 7.1kB dist-js/index.d.ts
npm notice 6.6kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.13.0
npm notice filename: tauri-apps-plugin-updater-2.13.0.tgz
npm notice package size: 4.8 kB
npm notice unpacked size: 25.1 kB
npm notice shasum: 309eff1cef34817ad6238c7f78fa4a3385e72b63
npm notice integrity: sha512-9iwTSOlxMPZGI[...]bR+PxQxf2qKMQ==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2969525636
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-updater@2.13.0
updater v2.13.0

[2.13.0]

... (truncated)

Commits

a2364a5 fix: integration test
67ebc13 fix(ci): check-publish job should check .changes/pre.json
cbfd428 Publish New Versions (v2) (#3618)
f460570 chore: fmt
a433ec0 fix: mobile clippy warnings
3d8a3c8 chore: edition 2024
b517cc7 fix: actually set rust-version to 1.90
b6a38a5 fix(ci): e2e test error reporting
9b29b60 feat: update to tauri 2.12
3a01943 tests(e2e): fix e2e failures on Linux and Windows (#3642)
Additional commits viewable in compare view

Updates tauri-build from 2.6.3 to 2.7.1

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1277 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1091 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

30da1fd feat(ci): run audit before publishing
1aefcf6 fix: pnpm audit
026f260 apply version updates (#16150)
a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
f040897 docs: link WRY and TAO to their repositories (#16163)
c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
64bfdd9 fix: ignore src-tauri in vite configs (#16165)
793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
447fa9f fix(core): tauri-utils publish
Additional commits viewable in compare view

Bumps the cargo group with 7 updates in the /src-tauri directory: | Package | From | To | | --- | --- | --- | | [tauri](https://github.com/tauri-apps/tauri) | `2.11.6` | `2.12.0` | | [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.5` | `2.6.0` | | dirs | `6.0.0` | `7.0.0` | | [tauri-plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.4.0` | `2.5.0` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.3` | `2.8.0` | | [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.12.0` | `2.13.0` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.3` | `2.7.1` | Updates `tauri` from 2.11.6 to 2.12.0 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.11.6...tauri-v2.12.0) Updates `tauri-plugin-opener` from 2.5.5 to 2.6.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.5...fs-v2.6.0) Updates `dirs` from 6.0.0 to 7.0.0 Updates `tauri-plugin-notification` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@os-v2.4.0...fs-v2.5.0) Updates `tauri-plugin-dialog` from 2.7.3 to 2.8.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@dialog-v2.7.3...log-v2.8.0) Updates `tauri-plugin-updater` from 2.12.0 to 2.13.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@updater-v2.12.0...updater-v2.13.0) Updates `tauri-build` from 2.6.3 to 2.7.1 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.6.3...tauri-build-v2.7.1) --- updated-dependencies: - dependency-name: dirs dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: tauri dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tauri-build dependency-version: 2.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tauri-plugin-dialog dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tauri-plugin-notification dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tauri-plugin-opener dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tauri-plugin-updater dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-01T19:52:52Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026

dependabot Bot changed the title ~~chore(deps): bump the cargo group in /src-tauri with 7 updates~~ chore(deps): bump the cargo group across 1 directory with 7 updates Oct 1, 2026

dependabot Bot force-pushed the dependabot/cargo/src-tauri/cargo-ad3250c5b7 branch from d71e3bb to bd11077 Compare October 1, 2026 19:29

dependabot Bot closed this Oct 1, 2026

dependabot Bot deleted the dependabot/cargo/src-tauri/cargo-ad3250c5b7 branch October 1, 2026 19:52

Navigation Menu

Repository navigation

chore(deps): bump the cargo group across 1 directory with 7 updates - #111

chore(deps): bump the cargo group across 1 directory with 7 updates#111
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/cargo-ad3250c5b7

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

tauri-cli v2.12.0

deep-link-js v2.6.0

[2.6.0]

deep-link v2.6.0

[2.6.0]

sql-js v2.5.0

[2.5.0]

sql v2.5.0

[2.5.0]

http-js v2.8.0

[2.8.0]

updater-js v2.13.0

[2.13.0]

bug

updater v2.13.0

[2.13.0]

tauri-build v2.7.1

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading