chore(deps): Bump the "tauri" group with 2 updates across multiple ecosystems

[dependabot]

Bumps the tauri group with 3 updates: @tauri-apps/api, @tauri-apps/plugin-updater and @tauri-apps/cli.

Updates @tauri-apps/api from 2.12.0 to 2.12.1

Release notes

Sourced from @​tauri-apps/api's releases.

@​tauri-apps/api v2.12.1

All found vulnerabilities were already reviewed and decided to be ignored
2 ignored: 2 high

[2.12.1]

Bug Fixes

• c9a3cb892 (#16166 by @​FabianLars) The macos-private-api feature flag / macOSPrivateAPI tauri.conf.json value is no longer required to use transparency or fullscreen on macOS.

$ pnpm build && cd ./dist && pnpm publish --access public --loglevel debug --no-git-checks
$ rollup -c --configPlugin typescript
�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m997ms�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.5s�[22m�[39m
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=npm%3Aregistry.npmjs.org 200 336ms
📦 @tauri-apps/api@2.12.1 → https://registry.npmjs.org/
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=sigstore 200 107ms
Signed provenance statement with source and build information
✅ Published package @tauri-apps/api@2.12.1

Commits

• 30da1fd feat(ci): run audit before publishing
• 1aefcf6 fix: pnpm audit
• 026f260 apply version updates (#16150)
• a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
• f040897 docs: link WRY and TAO to their repositories (#16163)
• c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
• 64bfdd9 fix: ignore src-tauri in vite configs (#16165)
• 793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
• d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
• 447fa9f fix(core): tauri-utils publish
• See full diff in compare view

Updates @tauri-apps/plugin-updater from 2.13.0 to 2.13.1

Commits

• e511284 publish new versions (#3647)
• ce59e96 docs(log): remove unrelated single-instance comment from log readme
• 29130c2 ci: run clippy on all platforms (#3650)
• 4353819 chore: add changefile to re-release plugin-http npm package as 2.8.0 (#3656)
• ec14142 chore(deps): update dependency @​types/node to v24 (#3649)
• 90b9869 chore(deps): update rust crate dirs to v7 (#3573)
• 22e286f chore(deps): update rust crate infer to 0.22 (#3501)
• ecd3273 chore(deps): update windows-rs and webview2 crates (#3480)
• aa2cc64 fix(android): Migrate Gradle scripts to compilerOptions DSL (#3478)
• See full diff in compare view

Updates @tauri-apps/cli from 2.12.0 to 2.12.1

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.12.1

[2.12.1]

Enhancements

• 64bfdd909 (#16165 by @​Legend-Master) Ignore src-tauri in tauri plugin init example template

Dependencies

• Upgraded to tauri-cli@2.12.1

Commits

• 30da1fd feat(ci): run audit before publishing
• 1aefcf6 fix: pnpm audit
• 026f260 apply version updates (#16150)
• a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
• f040897 docs: link WRY and TAO to their repositories (#16163)
• c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
• 64bfdd9 fix: ignore src-tauri in vite configs (#16165)
• 793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
• d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
• See full diff in compare view

Bumps the tauri group in /src-tauri with 3 updates: tauri-plugin-updater, tauri-build and tauri.

Updates tauri-plugin-updater from 2.13.0 to 2.13.1

Commits

• e511284 publish new versions (#3647)
• ce59e96 docs(log): remove unrelated single-instance comment from log readme
• 29130c2 ci: run clippy on all platforms (#3650)
• 4353819 chore: add changefile to re-release plugin-http npm package as 2.8.0 (#3656)
• ec14142 chore(deps): update dependency @​types/node to v24 (#3649)
• 90b9869 chore(deps): update rust crate dirs to v7 (#3573)
• 22e286f chore(deps): update rust crate infer to 0.22 (#3501)
• ecd3273 chore(deps): update windows-rs and webview2 crates (#3480)
• aa2cc64 fix(android): Migrate Gradle scripts to compilerOptions DSL (#3478)
• See full diff in compare view

Updates tauri-build from 2.7.0 to 2.7.1

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1277 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits

• 30da1fd feat(ci): run audit before publishing
• 1aefcf6 fix: pnpm audit
• 026f260 apply version updates (#16150)
• a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
• f040897 docs: link WRY and TAO to their repositories (#16163)
• c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
• 64bfdd9 fix: ignore src-tauri in vite configs (#16165)
• 793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
• d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
• See full diff in compare view

Updates tauri from 2.12.0 to 2.12.1

Release notes

Sourced from tauri's releases.

tauri-cli v2.12.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1277 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser

Version:   0.25.1

Warning:   unmaintained

Title:     ttf-parser is unmaintained

Date:      2026-06-28

ID:        RUSTSEC-2026-0192

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 5 allowed warnings found

</tr></table>

... (truncated)

Commits

• 30da1fd feat(ci): run audit before publishing
• 1aefcf6 fix: pnpm audit
• 026f260 apply version updates (#16150)
• a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
• f040897 docs: link WRY and TAO to their repositories (#16163)
• c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
• 64bfdd9 fix: ignore src-tauri in vite configs (#16165)
• 793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
• d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[EVWorth]

·@·d·ependabot r·ebase

---

Generated by Claude Code

[dependabot]

Superseded by #758.