Skip to content

build(deps): bump the cargo-minor-patch group across 1 directory with 16 updates - #1602

Merged
xiaolai merged 4 commits into
mainfrom
dependabot/cargo/src-tauri/cargo-minor-patch-a38638ff35
Oct 28, 2026
Merged

build(deps): bump the cargo-minor-patch group across 1 directory with 16 updates#1602
xiaolai merged 4 commits into
mainfrom
dependabot/cargo/src-tauri/cargo-minor-patch-a38638ff35

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 16 updates in the /src-tauri directory:

Package From To
tauri-plugin-opener 2.7.0 2.7.2
tauri-plugin-fs 2.6.0 2.7.1
tauri-plugin-dialog 2.8.1 2.8.3
tauri-plugin-clipboard-manager 2.4.1 2.5.0
tauri-plugin-shell 2.4.1 2.5.0
tauri-plugin-updater 2.13.2 2.14.0
tauri-plugin-notification 2.5.1 2.7.0
tauri-plugin-log 2.10.0 2.10.1
tauri-plugin-mcp-bridge 0.13.1 0.13.2
serde_json 1.0.151 1.0.154
uuid 1.27.0 1.29.0
notify 8.2.0 8.2.1
unicode-normalization 0.1.25 0.1.26
tauri-plugin-single-instance 2.5.2 2.5.4
libc 0.2.190 0.2.191
tauri-build 2.7.1 2.7.2

Updates tauri-plugin-opener from 2.7.0 to 2.7.2

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.7.2

[2.7.2]

  • 1ab93046 (#3565 by @​cyclone-mind) Fixed revealItemInDir and the reveal_item_in_dir / reveal_items_in_dir Rust APIs panicking on Linux and the BSDs with Cannot start a runtime from within a runtime when zbus is built with its tokio feature and the call happens inside an async runtime. The blocking D-Bus calls now run on a dedicated thread.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.7.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.7.2
npm notice filename: tauri-apps-plugin-opener-2.7.2.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: 698f34eeb66d167792f7a113f3567c7bdff4294a
npm notice integrity: sha512-LyybP1VSzTMQi[...]jPzHMpv0Sz+TQ==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253696161
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-opener@2.7.2

opener v2.7.2

[2.7.2]

  • 1ab93046 (#3565 by @​cyclone-mind) Fixed revealItemInDir and the reveal_item_in_dir / reveal_items_in_dir Rust APIs panicking on Linux and the BSDs with Cannot start a runtime from within a runtime when zbus is built with its tokio feature and the call happens inside an async runtime. The blocking D-Bus calls now run on a dedicated thread.

... (truncated)

Commits

Updates tauri-plugin-fs from 2.6.0 to 2.7.1

Release notes

Sourced from tauri-plugin-fs's releases.

opener-js v2.7.1

[2.7.1]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.7.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.7.1
npm notice filename: tauri-apps-plugin-opener-2.7.1.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: e8719fb7c89a681460f6b5b42a6b7d71746b4c92
npm notice integrity: sha512-XkXdt30rontti[...]F1sFsmu6uyywQ==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189619091
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-opener@2.7.1

opener v2.7.1

[2.7.1]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

... (truncated)

Commits
  • 44293a5 Publish New Versions (v2) (#3689)
  • 7550f7c chore(deps): bump rustls to 0.23.46
  • 36d8e40 feat(geolocation): support for non-GMS devices (#3377)
  • 57297f3 feat(clipboard-manager): add support for writing secrets (#3376)
  • 1ab9304 fix(opener): avoid blocking-runtime panic in reveal_item_in_dir (#3565)
  • 0e17675 fix(http): decode header values as ISO-8859-1 (#3586)
  • 62b3565 chore(deps): update quinn-proto (lockfile-only) (#3707)
  • d80b1be feat: add torch plugin for iOS and Android (#3551)
  • c91a9e6 feat(sql): add autoCreate option to Database.load (#3702)
  • 0374bec [feat] [biometric] Adding the capability of encrypting/decrypting data using ...
  • Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.8.1 to 2.8.3

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.3

[2.8.3]

Dependencies

  • Upgraded to fs-js@2.7.1
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.3
npm notice filename: tauri-apps-plugin-dialog-2.8.3.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 1ef5cbd8833d50c911dedc3b50b94c6ba7ec2db5
npm notice integrity: sha512-Hd/yBfk2R5v2M[...]S+gBDNe3nHspw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253692258
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.3

dialog v2.8.3

[2.8.3]

Dependencies

... (truncated)

Commits
  • 44293a5 Publish New Versions (v2) (#3689)
  • 7550f7c chore(deps): bump rustls to 0.23.46
  • 36d8e40 feat(geolocation): support for non-GMS devices (#3377)
  • 57297f3 feat(clipboard-manager): add support for writing secrets (#3376)
  • 1ab9304 fix(opener): avoid blocking-runtime panic in reveal_item_in_dir (#3565)
  • 0e17675 fix(http): decode header values as ISO-8859-1 (#3586)
  • 62b3565 chore(deps): update quinn-proto (lockfile-only) (#3707)
  • d80b1be feat: add torch plugin for iOS and Android (#3551)
  • c91a9e6 feat(sql): add autoCreate option to Database.load (#3702)
  • 0374bec [feat] [biometric] Adding the capability of encrypting/decrypting data using ...
  • Additional commits viewable in compare view

Updates tauri-plugin-clipboard-manager from 2.4.1 to 2.5.0

Release notes

Sourced from tauri-plugin-clipboard-manager's releases.

shell-js v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-shell@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 21.8kB dist-js/index.cjs
npm notice 22.0kB dist-js/index.d.ts
npm notice 21.7kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-shell
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-shell-2.5.0.tgz
npm notice package size: 8.0 kB
npm notice unpacked size: 69.6 kB
npm notice shasum: 16d0b1a1f5b02689777a01dc78b9d591eec3a3b7
npm notice integrity: sha512-FZ6RtcikCxJ35[...]DcLs7JIfuFkWw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189638540
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-shell@2.5.0

shell v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

... (truncated)

Commits
  • d6a3898 Publish New Versions (v2) (#3268)
  • 2e5bcdf chore(deps): fix audits (#3373)
  • 4374b4f chore(notification): remove unused dev-deps (#3372)
  • f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
  • 4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
  • 99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
  • eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
  • 5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
  • 2c0883e chore(deps): update dependency vite to v8 (#3346)
  • 024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
  • Additional commits viewable in compare view

Updates tauri-plugin-shell from 2.4.1 to 2.5.0

Release notes

Sourced from tauri-plugin-shell's releases.

shell-js v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-shell@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 21.8kB dist-js/index.cjs
npm notice 22.0kB dist-js/index.d.ts
npm notice 21.7kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-shell
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-shell-2.5.0.tgz
npm notice package size: 8.0 kB
npm notice unpacked size: 69.6 kB
npm notice shasum: 16d0b1a1f5b02689777a01dc78b9d591eec3a3b7
npm notice integrity: sha512-FZ6RtcikCxJ35[...]DcLs7JIfuFkWw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189638540
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-shell@2.5.0

shell v2.5.0

[2.5.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
  • a8acd178 (#3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

... (truncated)

Commits
  • d6a3898 Publish New Versions (v2) (#3268)
  • 2e5bcdf chore(deps): fix audits (#3373)
  • 4374b4f chore(notification): remove unused dev-deps (#3372)
  • f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
  • 4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
  • 99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
  • eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
  • 5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
  • 2c0883e chore(deps): update dependency vite to v8 (#3346)
  • 024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
  • Additional commits viewable in compare view

Updates tauri-plugin-updater from 2.13.2 to 2.14.0

Release notes

Sourced from tauri-plugin-updater's releases.

updater-js v2.14.0

[2.14.0]

  • b6f39cc5 (#3688 by @​followdarko) On Linux, installing an AppImage update no longer fails with Invalid cross-device link (os error 18) when the temp or cache directory is a separate mount of the AppImage's file system, such as a bind-mounted or private /tmp. The backup now moves on to the next location, ending with the AppImage's own directory.

  • f2af373b (#3696 by @​lucasfernog) On Linux, reject an AppImage update that is neither an AppImage nor a compressed AppImage (or a compressed AppImage when the zip feature is disabled) before touching the installed app. Such payloads were written over the AppImage as-is, corrupting the app.

  • 24e6451b (#3693 by @​lucasfernog) On Linux, try the next temporary directory location (the user cache directory, then the directory holding the AppImage) when a temporary directory cannot be created in the previous one, instead of failing the AppImage update right away. Also avoids a panic when the app path has no parent directory.

  • a819187e (#3690 by @​lucasfernog) check(), Update.download() and Update.downloadAndInstall() no longer replace the headers of the options object they are given with an array.

  • 7b7c7c62 (#3691 by @​lucasfernog) Calling Update.download() again now releases the bytes of the previous download instead of keeping them in memory until the webview is destroyed.

  • 4b1ba079 (#3695 by @​lucasfernog) On Android and iOS, Update::install now returns Error::UnsupportedOs instead of reporting success without installing anything.

  • fce235c3 (#3640 by @​t8y2) Add Updater::restore_update to restore an update from cached release metadata, and Update::verify to verify package bytes using the configured signing key and signed-version policy. Restored updates always require the signature to bind the announced version.

    Update::install now verifies the package bytes before installing them, and Updater::check resolves to None instead of a target error when the release is not an update and has no entry for the current target.

  • d057ec47 (#3694 by @​lucasfernog) Log a warning when the download URL of an update does not use https and dangerousInsecureTransportProtocol is not enabled.

  • 21ebe1f5 (#3692 by @​lucasfernog) On Windows, report why launching the installer failed from the ShellExecuteW return value (for example "Access is denied" when the user declines the UAC prompt) instead of an unrelated GetLastError message.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.14.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 7.1kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.14.0
npm notice filename: tauri-apps-plugin-updater-2.14.0.tgz
npm notice package size: 4.9 kB
npm notice unpacked size: 25.5 kB
npm notice shasum: 212adc6dc62e7c9bda0c216f12b3eee0824f6908
npm notice integrity: sha512-gdylJ9tger4hk[...]nALfrqIPSzh7Q==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253707095
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-updater@2.14.0

... (truncated)

Commits
  • 44293a5 Publish New Versions (v2) (#3689)
  • 7550f7c chore(deps): bump rustls to 0.23.46
  • 36d8e40 feat(geolocation): support for non-GMS devices (#3377)
  • 57297f3 feat(clipboard-manager): add support for writing secrets (#3376)
  • 1ab9304 fix(opener): avoid blocking-runtime panic in reveal_item_in_dir (#3565)
  • 0e17675 fix(http): decode header values as ISO-8859-1 (#3586)
  • 62b3565 chore(deps): update quinn-proto (lockfile-only) (#3707)
  • d80b1be feat: add torch plugin for iOS and Android (#3551)
  • c91a9e6 feat(sql): add autoCreate option to Database.load (#3702)
  • 0374bec [feat] [biometric] Adding the capability of encrypting/decrypting data using ...
  • Additional commits viewable in compare view

Updates tauri-plugin-notification from 2.5.1 to 2.7.0

Release notes

Sourced from tauri-plugin-notification's releases.

notification-js v2.7.0

[2.7.0]

  • 4356356d (#3588 by @​The-Best-Codes) Fix notifications closing right after they show on GNOME: on Linux and the BSDs, every notification is now sent on the D-Bus connection the plugin keeps open.

feat

  • 4356356d (#3588 by @​The-Best-Codes) Add NotificationBuilder::on_close on Linux and the BSDs, a Rust callback that runs once the notification server reports the notification closed.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-notification@2.7.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 16.6kB dist-js/index.cjs
npm notice 26.1kB dist-js/index.d.ts
npm notice 16.2kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 663B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-notification
npm notice version: 2.7.0
npm notice filename: tauri-apps-plugin-notification-2.7.0.tgz
npm notice package size: 11.1 kB
npm notice unpacked size: 64.7 kB
npm notice shasum: c7d8898f78fe51165a2f2d867bbb7ccb37f81147
npm notice integrity: sha512-kgdHCPSY/3GIi[...]2NnA3oQxIjldw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253701137
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-notification@2.7.0

notification v2.7.0

[2.7.0]

... (truncated)

Commits
  • 6bbd44d publish new versions (#3675)
  • fc18d05 fix(global-shortcut): release the shortcuts lock before running handlers (#3683)
  • 42ae8b4 fix(ios): make init_plugin_* entry points public so release builds link on ...
  • 818d2e0 fix(single-instance): limit second instance's wait on Windows (#3645)
  • 323fe80 fix(single-instance): forward non-Unicode arguments and cwd (#3644)
  • 6772581 test(e2e): fix __name usage on FS test
  • 46f7c87 chore: fmt
  • a8acd17 feat(shell): add process group spawn option (fix #1332) (#3351)
  • e03dca6 fix(fs): accept absolute paths in the iOS security-scope commands (#3628)
  • 3a90001 fix(fs): resolve symlinks of missing paths before checking the scope (#3627)
  • Additional commits viewable in compare view

Updates tauri-plugin-log from 2.10.0 to 2.10.1

Release notes

Sourced from tauri-plugin-log's releases.

log v2.10.1

[2.10.1]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
Updating crates.io index
   Packaging tauri-plugin-log v2.10.1 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/log)
    Updating crates.io index
warning: package `yoke-derive v0.8.3` in Cargo.lock is yanked in registry `crates-io`
  |
  = help: consider updating to a version that is not yanked
    Packaged 22 files, 186.4KiB (50.8KiB compressed)
   Uploading tauri-plugin-log v2.10.1 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/log)
    Uploaded tauri-plugin-log v2.10.1 to registry `crates-io`
note: waiting for tauri-plugin-log v2.10.1 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-plugin-log v2.10.1 at registry `crates-io`
Commits
  • 6bbd44d publish new versions (#3675)
  • fc18d05 fix(global-shortcut): release the shortcuts lock before running handlers (#3683)
  • 42ae8b4 fix(ios): make init_plugin_* entry points public so release builds link on ...
  • 818d2e0 fix(single-instance): limit second instance's wait on Windows (#3645)
  • 323fe80 fix(single-instance): forward non-Unicode arguments and cwd (#3644)
  • 6772581 test(e2e): fix __name usage on FS test
  • 46f7c87 chore: fmt
  • a8acd17 feat(shell): add process group spawn option (fix #1332) (#3351)
  • e03dca6 fix(fs): accept absolute paths in the iOS security-scope commands (#3628)
  • 3a90001 fix(fs): resolve symlinks of missing paths before checking the scope (#3627)
  • Additional commits viewable in compare view

Updates tauri-plugin-mcp-bridge from 0.13.1 to 0.13.2

Release notes

Sourced from tauri-plugin-mcp-bridge's releases.

Release 0.13.2

tauri-plugin-mcp-bridge

crates.io npm

Fixed

  • Fix Android and iOS compilation by gating desktop window actions.
  • Return an unsupported-action error for focus, minimize, and maximize on mobile.

Changed

  • Add an Android cross-compilation check in CI.

@​hypothesi/tauri-mcp-server

npm

Changed

  • Wait for the test app main page to load before running UI tests.

@​hypothesi/tauri-mcp-cli

npm

Changed

  • Update the pinned @hypothesi/tauri-mcp-server dependency to 0.13.2.
Changelog

Sourced from tauri-plugin-mcp-bridge's changelog.

[0.13.2] - 2026-10-22

Fixed

  • Fix Android and iOS bridge compilation by gating desktop window actions.
  • Return an unsupported-action error for focus, minimize, and maximize on mobile.

Changed

  • Add an Android cross-compilation check in CI.
  • Wait for the test app main page to load before running UI tests.
Commits
  • 0e57f24 chore: version bump: v0.13.2
  • c5b2193 Merge pull request #53 from velocitysystems/fix/mobile-set-window-state
  • a3a7332 ci: add Android cross-compile check for tauri-plugin-mcp-bridge
  • bc887d4 fix(tauri-plugin-mcp-bridge): gate set_window_state on mobile targets
  • 216ef22 Merge pull request #51 from hypothesi/fix/test-app-readiness
  • d717027 test: wait for the main page before running UI tests (#51)
  • See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates uuid from 1.27.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

v1.28.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

Commits
  • 4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
  • a3631fd prepare for 1.29.0 release
  • 304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
  • d49f963 Reuse existing version tests for NonNilUuid constructors
  • 2f02404 Add versioned constructors to NonNilUuid
  • 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
  • 4b3b9f5 prepare for 1.28.0 release
  • cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
  • 784a022 Inline expected tokens in optional compact serde test
  • a5678c3 Simplify optional serde adapter tests to option tokens
  • Additional commits viewable in compare view

Updates notify from 8.2.0 to 8.2.1

Release notes

Sourced from notify's releases.

notify v8.2.1

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/src-tauri/cargo-minor-patch-a38638ff35 branch from 0aca20a to 033e907 Compare October 28, 2026 06:11
@dependabot
build(deps): bump the cargo-minor-patch group across 1 directory with…
caae153 
… 16 updates

Bumps the cargo-minor-patch group with 16 updates in the /src-tauri directory:

| Package | From | To |
| --- | --- | --- |
| [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.7.0` | `2.7.2` |
| [tauri-plugin-fs](https://github.com/tauri-apps/plugins-workspace) | `2.6.0` | `2.7.1` |
| [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.8.1` | `2.8.3` |
| [tauri-plugin-clipboard-manager](https://github.com/tauri-apps/plugins-workspace) | `2.4.1` | `2.5.0` |
| [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.4.1` | `2.5.0` |
| [tauri-plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.13.2` | `2.14.0` |
| [tauri-plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.5.1` | `2.7.0` |
| [tauri-plugin-log](https://github.com/tauri-apps/plugins-workspace) | `2.10.0` | `2.10.1` |
| [tauri-plugin-mcp-bridge](https://github.com/hypothesi/mcp-server-tauri) | `0.13.1` | `0.13.2` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.27.0` | `1.29.0` |
| [notify](https://github.com/notify-rs/notify) | `8.2.0` | `8.2.1` |
| [unicode-normalization](https://github.com/unicode-rs/unicode-normalization) | `0.1.25` | `0.1.26` |
| [tauri-plugin-single-instance](https://github.com/tauri-apps/plugins-workspace) | `2.5.2` | `2.5.4` |
| [libc](https://github.com/rust-lang/libc) | `0.2.190` | `0.2.191` |
| [tauri-build](https://github.com/tauri-apps/tauri) | `2.7.1` | `2.7.2` |



Updates `tauri-plugin-opener` from 2.7.0 to 2.7.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.7.0...dialog-v2.7.2)

Updates `tauri-plugin-fs` from 2.6.0 to 2.7.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.6.0...fs-v2.7.1)

Updates `tauri-plugin-dialog` from 2.8.1 to 2.8.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.8.1...http-v2.8.3)

Updates `tauri-plugin-clipboard-manager` from 2.4.1 to 2.5.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.1...fs-v2.5.0)

Updates `tauri-plugin-shell` from 2.4.1 to 2.5.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.4.1...fs-v2.5.0)

Updates `tauri-plugin-updater` from 2.13.2 to 2.14.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@updater-v2.13.2...updater-v2.14.0)

Updates `tauri-plugin-notification` from 2.5.1 to 2.7.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.5.1...fs-v2.7.0)

Updates `tauri-plugin-log` from 2.10.0 to 2.10.1
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.10.0...log-v2.10.1)

Updates `tauri-plugin-mcp-bridge` from 0.13.1 to 0.13.2
- [Release notes](https://github.com/hypothesi/mcp-server-tauri/releases)
- [Changelog](https://github.com/hypothesi/mcp-server-tauri/blob/main/CHANGELOG.md)
- [Commits](hypothesi/mcp-server-tauri@v0.13.1...v0.13.2)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `uuid` from 1.27.0 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.27.0...v1.29.0)

Updates `notify` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.1/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-8.2.0...notify-8.2.1)

Updates `unicode-normalization` from 0.1.25 to 0.1.26
- [Commits](https://github.com/unicode-rs/unicode-normalization/commits/v0.1.26)

Updates `tauri-plugin-single-instance` from 2.5.2 to 2.5.4
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.5.2...http-v2.5.4)

Updates `libc` from 0.2.190 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.190...0.2.191)

Updates `tauri-build` from 2.7.1 to 2.7.2
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.7.1...tauri-build-v2.7.2)

---
updated-dependencies:
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: notify
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-build
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-clipboard-manager
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-fs
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-log
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-mcp-bridge
  dependency-version: 0.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-notification
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-opener
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-shell
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-single-instance
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tauri-plugin-updater
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: unicode-normalization
  dependency-version: 0.1.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/src-tauri/cargo-minor-patch-a38638ff35 branch from 033e907 to caae153 Compare October 28, 2026 06:34
@xiaolai
fix(deps): align Tauri npm plugins and repin the key-policy hash
3c8afcd 
The cargo group bumped tauri-plugin-clipboard-manager to 2.5, fs to 2.7,
notification to 2.7 and updater to 2.14 while their npm packages stayed on
the previous minor, which tauri build refuses at release time
(lint:tauri-versions). The npm side now matches. Notification 2.8.0 and
updater 2.14.1 were published today, inside the 7-day minimumReleaseAge
hold, so both sides stay on the newest releases outside it.

unicode-normalization 0.1.26 moves its tables from Unicode 17 to 18, which
changes the key-policy hash. KEY_POLICY stays: persisted document keys are
the stored directory-entry spelling and are never normalized. Normalization
reaches only the write-lock fold and the in-memory near-key grouping, both
rebuilt when the index opens, so no stored key or alias changes. PINNED is
updated to the new hash.
@xiaolai
Merge branch 'main' into dependabot/cargo/src-tauri/cargo-minor-patch…
3f85ed8 
…-a38638ff35
@xiaolai
Merge branch 'main' into dependabot/cargo/src-tauri/cargo-minor-patch…
33e8e0e 
…-a38638ff35
@xiaolai
xiaolai merged commit aa3f5d2 into main Oct 28, 2026
18 checks passed
@xiaolai
xiaolai deleted the dependabot/cargo/src-tauri/cargo-minor-patch-a38638ff35 branch October 28, 2026 07:26
@xiaolai xiaolai mentioned this pull request Oct 29, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@xiaolai