Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the tauri-ecosystem group with 2 updates in the /src-tauri directory: tauri and tauri-plugin-opener.

Updates tauri from 2.9.0 to 2.9.3

Release notes

Sourced from tauri's releases.

tauri-cli v2.9.3

Updating git repository `https://github.com/tauri-apps/schemars.git`
    Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
     Locking 1050 packages to latest compatible versions
      Adding apple-codesign v0.27.0 (available: v0.29.0)
      Adding cargo-mobile2 v0.21.2 (available: v0.22.1)
      Adding cargo_metadata v0.19.2 (available: v0.23.0)
      Adding colored v2.2.0 (available: v3.0.0)
      Adding ctor v0.2.9 (available: v0.6.1)
      Adding dialoguer v0.11.0 (available: v0.12.0)
      Adding elf v0.7.4 (available: v0.8.0)
      Adding goblin v0.9.3 (available: v0.10.3)
      Adding html5ever v0.29.1 (available: v0.35.0)
      Adding itertools v0.13.0 (available: v0.14.0)
      Adding json-patch v3.0.1 (available: v4.1.0)
      Adding jsonrpsee v0.24.10 (available: v0.26.0)
      Adding jsonrpsee-client-transport v0.24.10 (available: v0.26.0)
      Adding jsonrpsee-core v0.24.10 (available: v0.26.0)
      Adding jsonrpsee-ws-client v0.24.10 (available: v0.26.0)
      Adding matchit v0.8.4 (available: v0.8.6)
      Adding minisign v0.7.3 (available: v0.7.9)
      Adding object v0.36.7 (available: v0.37.3)
      Adding oxc_allocator v0.36.0 (available: v0.96.0)
      Adding oxc_ast v0.36.0 (available: v0.96.0)
      Adding oxc_parser v0.36.0 (available: v0.96.0)
      Adding oxc_span v0.36.0 (available: v0.96.0)
      Adding phf v0.11.3 (available: v0.13.1)
      Adding png v0.17.16 (available: v0.18.0)
      Adding rpm v0.16.1 (available: v0.18.4)
      Adding schemars v0.8.22 (available: v1.0.5)
      Adding tiny_http v0.11.0 (available: v0.12.0)
      Adding toml v0.8.2 (available: v0.8.23)
      Adding toml_datetime v0.6.3 (available: v0.6.11)
      Adding toml_edit v0.20.2 (available: v0.20.7)
      Adding urlpattern v0.3.0 (available: v0.4.0)
      Adding windows v0.61.3 (available: v0.62.2)
      Adding windows-registry v0.5.3 (available: v0.6.1)
      Adding windows-sys v0.60.2 (available: v0.61.2)
      Adding x509-certificate v0.23.1 (available: v0.25.0)
      Adding zip v4.6.1 (available: v6.0.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
</tr></table> 

... (truncated)

Commits

Updates tauri-plugin-opener from 2.5.0 to 2.5.2

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.5.2

[2.5.2]

  • 93426f85 Fixed an issue that caused docs.rs builds to fail. No user facing changes.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.5.2
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 729B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.5.2
npm notice filename: tauri-apps-plugin-opener-2.5.2.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: 6e2127d0ad7627a16103215ed596e4fa42bda199
npm notice integrity: sha512-ei/yRRoCklWHI[...]mDJIv5R326Mew==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=644605763
+ @tauri-apps/plugin-opener@2.5.2

opener v2.5.2

[2.5.2]

  • 93426f85 Fixed an issue that caused docs.rs builds to fail. No user facing changes.
</tr></table> 

... (truncated)

Commits
  • 2371804 publish new versions (#2888)
  • 90f9b93 chore: fix cli version in deep-link package.json
  • 1c58f33 chore(deps): update dependency rollup to v4.46.4 (v2) (#2935)
  • 75617a6 fix(mobile): deeplinks (#2870)
  • 5a963a0 chore(deps): update dependency @​tauri-apps/cli to v2.8.1 (#2930)
  • 76f4e7b chore(deps): update eslint monorepo to v9.33.0 (#2903)
  • 670ac1d chore(deps): update dependency typescript-eslint to v8.40.0 (#2923)
  • ed0deef chore(deps): update dependency @​tauri-apps/api to v2.8.0 (#2929)
  • 50cebdb chore(deps): update to tauri 2.8.0 (#2925)
  • dd2ea9c chore(deps): update dependency rollup to v4.46.3 (#2920)
  • Additional commits viewable in compare view

Updates tauri-utils from 2.8.0 to 2.8.1

Release notes

Sourced from tauri-utils's releases.

tauri-utils v2.8.1

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 881 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1060 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.53.4
    │   └── tauri-runtime-wry 2.9.2
    │       └── tauri 2.9.4
    │           ├── tauri-plugin-sample 0.1.0
    │           │   └── api 0.1.0
    │           ├── tauri-plugin-log 2.6.0
    │           │   └── api 0.1.0
    │           ├── tauri-file-associations-demo 0.1.0
    │           ├── tauri 2.9.4
    │           ├── restart 0.1.0
    │           ├── resources 0.1.0
    │           ├── bench_helloworld 0.1.0
    │           ├── bench_files_transfer 0.1.0
    │           ├── bench_cpu_intensive 0.1.0
    │           └── api 0.1.0
    ├── webkit2gtk 2.0.1
    │   ├── wry 0.53.4
    │   ├── tauri-runtime-wry 2.9.2
    │   ├── tauri-runtime 2.9.2
    │   │   ├── tauri-runtime-wry 2.9.2
    │   │   └── tauri 2.9.4
    │   └── tauri 2.9.4
    ├── tauri-runtime-wry 2.9.2
    ├── tauri-runtime 2.9.2
    ├── tauri 2.9.4
    ├── tao 0.34.5
    │   └── tauri-runtime-wry 2.9.2
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.0
    │   │   └── tauri 2.9.4
    │   └── tauri 2.9.4
</tr></table> 

... (truncated)

Commits

Updates tauri-build from 2.5.0 to 2.5.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.5.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 881 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1060 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.53.4
    │   └── tauri-runtime-wry 2.9.2
    │       └── tauri 2.9.4
    │           ├── tauri-plugin-sample 0.1.0
    │           │   └── api 0.1.0
    │           ├── tauri-plugin-log 2.6.0
    │           │   └── api 0.1.0
    │           ├── tauri-file-associations-demo 0.1.0
    │           ├── tauri 2.9.4
    │           ├── restart 0.1.0
    │           ├── resources 0.1.0
    │           ├── bench_helloworld 0.1.0
    │           ├── bench_files_transfer 0.1.0
    │           ├── bench_cpu_intensive 0.1.0
    │           └── api 0.1.0
    ├── webkit2gtk 2.0.1
    │   ├── wry 0.53.4
    │   ├── tauri-runtime-wry 2.9.2
    │   ├── tauri-runtime 2.9.2
    │   │   ├── tauri-runtime-wry 2.9.2
    │   │   └── tauri 2.9.4
    │   └── tauri 2.9.4
    ├── tauri-runtime-wry 2.9.2
    ├── tauri-runtime 2.9.2
    ├── tauri 2.9.4
    ├── tao 0.34.5
    │   └── tauri-runtime-wry 2.9.2
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.0
    │   │   └── tauri 2.9.4
    │   └── tauri 2.9.4
</tr></table> 

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 4 updates

Bumps the tauri-ecosystem group with 2 updates in the /src-tauri directory: [tauri](https://github.com/tauri-apps/tauri) and [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace).


Updates `tauri` from 2.9.0 to 2.9.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-v2.9.0...tauri-v2.9.3)

Updates `tauri-plugin-opener` from 2.5.0 to 2.5.2
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.5.0...http-v2.5.2)

Updates `tauri-utils` from 2.8.0 to 2.8.1
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-utils-v2.8.0...tauri-utils-v2.8.1)

Updates `tauri-build` from 2.5.0 to 2.5.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](tauri-apps/tauri@tauri-build-v2.5.0...tauri-build-v2.5.3)

---
updated-dependencies:
- dependency-name: tauri
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tauri-ecosystem
- dependency-name: tauri-plugin-opener
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tauri-ecosystem
- dependency-name: tauri-utils
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tauri-ecosystem
- dependency-name: tauri-build
  dependency-version: 2.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tauri-ecosystem
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added automerge Automatically merge when all checks pass dependencies:backend Backend dependency updates labels Dec 1, 2025
@dependabot dependabot bot requested a review from grok-rs as a code owner December 1, 2025 07:57
@dependabot dependabot bot added automerge Automatically merge when all checks pass dependencies:backend Backend dependency updates labels Dec 1, 2025
@codecov
Copy link

codecov bot commented Dec 1, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge Automatically merge when all checks pass dependencies:backend Backend dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant