chore(deps): bump the rust-minor-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #18 · styayur/developer-security-workspace

dependabot · 2026-10-06T05:55:23Z

Bumps the rust-minor-patch group with 5 updates in the /src-tauri directory:

Package	From	To
tauri	`2.11.6`	`2.12.1`
tauri-plugin-dialog	`2.7.3`	`2.8.1`
tauri-plugin-opener	`2.5.5`	`2.7.0`
uuid	`1.26.1`	`1.27.0`
tauri-build	`2.6.3`	`2.7.1`

Updates tauri from 2.11.6 to 2.12.1

Release notes

Sourced from tauri's releases.

tauri-cli v2.12.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1277 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1091 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

30da1fd feat(ci): run audit before publishing
1aefcf6 fix: pnpm audit
026f260 apply version updates (#16150)
a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
f040897 docs: link WRY and TAO to their repositories (#16163)
c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
64bfdd9 fix: ignore src-tauri in vite configs (#16165)
793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
447fa9f fix(core): tauri-utils publish
Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.7.3 to 2.8.1

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.8.1

[2.8.1]

569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.1
npm notice filename: tauri-apps-plugin-dialog-2.8.1.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: f29f3c28862a1ed767b6fd241f34abf26129f88f
npm notice integrity: sha512-/DtE3B62JgpYu[...]phsKnb+738Dmw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3028120915
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.1

dialog v2.8.1

[2.8.1]

569ee82c Fix the docs.rs build for Android: the build script now detects docs.rs through the DOCS_RS environment variable, since cfg(docsrs) is never set for build scripts.

... (truncated)

Commits

d4835d0 publish new versions (#3660)
569ee82 fix: mobile docs.rs builds
25f3874 chore(deps): update dependency eslint-plugin-security to v4.1.0 (#3661)
2fd4bed chore(autostart): update auto-launch to 0.6 (#3546)
e511284 publish new versions (#3647)
ce59e96 docs(log): remove unrelated single-instance comment from log readme
29130c2 ci: run clippy on all platforms (#3650)
4353819 chore: add changefile to re-release plugin-http npm package as 2.8.0 (#3656)
ec14142 chore(deps): update dependency @types/node to v24 (#3649)
90b9869 chore(deps): update rust crate dirs to v7 (#3573)
Additional commits viewable in compare view

Updates tauri-plugin-opener from 2.5.5 to 2.7.0

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.7.0

[2.7.0]

ecd3273e (#3480 by @renovate) Updated windows-rs dependencies:
- deep-link: updated windows-registry to 0.6 and windows-result to 0.4. The public Error::Windows variant wraps windows_result::Error; applications using this type directly should update their windows-result dependency.
- opener: updated windows to 0.62. The public Error::Win32Error variant wraps windows::core::Error; applications using this type directly should update their windows dependency.
- single-instance: updated windows-sys to 0.61
- updater: updated windows-sys to 0.61

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.7.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.7.0
npm notice filename: tauri-apps-plugin-opener-2.7.0.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: 14d631a70282cbc07b46f4442ba6085d2200f301
npm notice integrity: sha512-mBorYfVKh9Lt7[...]5OHHVmipjuGMw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3005263072
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-opener@2.7.0

opener v2.7.0

[2.7.0]

... (truncated)

Commits

51b430b ci: delete .changes/updater-new-bundle-support.md
fd439b1 Publish New Versions (v2) (#2964)
2522b71 fix(deep-link): revert the breaking change introduced by #2928 (#2970)
9021a73 chore(deps): update dependency rollup to v4.50.0 (#2966)
625bb1c feat(log): re-export the log crate (#2965)
6215afe chore(deps): update dependency rollup to v4.49.0 (#2962)
8cf8eea feat(updater): inject bundle_type into endpoint url (#2960)
509eba8 feat: support message dialogs with 3 buttons (#2641)
9ac5fe8 feat(updater): support bundle-specific targets (#2624)
c247410 chore(deps): update dependency typescript-eslint to v8.41.0 (#2956)
Additional commits viewable in compare view

Updates uuid from 1.26.1 to 1.27.0

Release notes

Sourced from uuid's releases.

v1.27.0

What's Changed

Accept case-insensitive urn:uuid: prefixes when parsing by @jaideeppyne in uuid-rs/uuid#912

Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @KodrAus in uuid-rs/uuid#915

Prepare for 1.27.0 release by @KodrAus in uuid-rs/uuid#917

New Contributors

@jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits

b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
ffd8ec5 prepare for 1.27.0 release
4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
a1aa126 Merge pull request #912 from jaideeppyne/fix/urn-prefix-case-insensitive
4639d67 fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos
2723703 bump MSRV to 1.89.0
a3e64fa refactor: simplify URN prefix parsing
5055fd4 refactor: inline case-insensitive URN prefix checks
cb8b1d5 refactor: simplify case-insensitive URN parsing
285967d Accept case-insensitive urn:uuid: prefixes when parsing
See full diff in compare view

Updates tauri-build from 2.6.3 to 2.7.1

Release notes

Sourced from tauri-build's releases.

tauri-build v2.7.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1277 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (1091 crate dependencies) Crate: fxhash Version: 0.2.1 Warning: unmaintained Title: fxhash - no longer maintained Date: 2025-09-05 ID: RUSTSEC-2025-0057 URL: https://rustsec.org/advisories/RUSTSEC-2025-0057 Crate: paste Version: 1.0.15 Warning: unmaintained Title: paste - no longer maintained Date: 2024-10-07 ID: RUSTSEC-2024-0436 URL: https://rustsec.org/advisories/RUSTSEC-2024-0436 Crate: rustls-pemfile Version: 2.2.0 Warning: unmaintained Title: rustls-pemfile is unmaintained Date: 2025-11-28 ID: RUSTSEC-2025-0134 URL: https://rustsec.org/advisories/RUSTSEC-2025-0134 Crate: rustybuzz Version: 0.20.1 Warning: unmaintained Title: rustybuzz is unmaintained Date: 2026-07-11 ID: RUSTSEC-2026-0206 URL: https://rustsec.org/advisories/RUSTSEC-2026-0206 Crate: ttf-parser Version: 0.25.1 Warning: unmaintained Title: ttf-parser is unmaintained Date: 2026-06-28 ID: RUSTSEC-2026-0192 URL: https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found </tr></table>

... (truncated)

Commits

30da1fd feat(ci): run audit before publishing
1aefcf6 fix: pnpm audit
026f260 apply version updates (#16150)
a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
f040897 docs: link WRY and TAO to their repositories (#16163)
c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
64bfdd9 fix: ignore src-tauri in vite configs (#16165)
793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
447fa9f fix(core): tauri-utils publish
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…5 updates Bumps the rust-minor-patch group with 5 updates in the /src-tauri directory: | Package | From | To | | --- | --- | --- | | [tauri](https://github.com/tauri-apps/tauri) | `2.11.6` | `2.12.1` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.3` | `2.8.1` | | [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) | `2.5.5` | `2.7.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.26.1` | `1.27.0` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.3` | `2.7.1` | Updates `tauri` from 2.11.6 to 2.12.1 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.11.6...tauri-v2.12.1) Updates `tauri-plugin-dialog` from 2.7.3 to 2.8.1 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@dialog-v2.7.3...dialog-v2.8.1) Updates `tauri-plugin-opener` from 2.5.5 to 2.7.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.5...log-v2.7.0) Updates `uuid` from 1.26.1 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.26.1...v1.27.0) Updates `tauri-build` from 2.6.3 to 2.7.1 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.6.3...tauri-build-v2.7.1) --- updated-dependencies: - dependency-name: tauri dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch - dependency-name: tauri-plugin-dialog dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch - dependency-name: tauri-plugin-opener dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch - dependency-name: tauri-build dependency-version: 2.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 6, 2026

Navigation Menu

Repository navigation

chore(deps): bump the rust-minor-patch group across 1 directory with 5 updates - #18

chore(deps): bump the rust-minor-patch group across 1 directory with 5 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src-tauri/rust-minor-patch-3e562532a4

dependabot Bot commented on behalf of github Oct 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 6, 2026

tauri-cli v2.12.1

dialog-js v2.8.1

[2.8.1]

dialog v2.8.1

[2.8.1]

opener-js v2.7.0

[2.7.0]

opener v2.7.0

[2.7.0]

v1.27.0

What's Changed

New Contributors

tauri-build v2.7.1

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants