chore(deps): update dependencies of tauri-cli by FabianLars · Pull Request #15641 · tauri-apps/tauri

FabianLars · 2026-07-02T13:51:52Z

Don't want to see 20 renovate PRs :)

github-actions · 2026-07-02T13:52:13Z

Package Changes Through `3cfab09`

There are 14 changes which include tauri-bundler with minor, tauri-cli with minor, @tauri-apps/cli with minor, tauri-utils with minor, tauri with minor, tauri-build with minor, tauri-macos-sign with minor, tauri-runtime-wry with minor, tauri-runtime with minor, tauri-codegen with minor, tauri-macros with minor, tauri-plugin with minor, tauri-driver with minor, @tauri-apps/api with minor

Planned Package Versions

The following package releases are the planned based on the context of changes in this pull request.

package	current	next
@tauri-apps/api	2.11.1	2.12.0
tauri-utils	2.9.3	2.10.0
tauri-macos-sign	2.3.4	2.4.0
tauri-bundler	2.9.4	2.10.0
tauri-runtime	2.11.3	2.12.0
tauri-runtime-wry	2.11.4	2.12.0
tauri-codegen	2.6.3	2.7.0
tauri-macros	2.6.3	2.7.0
tauri-plugin	2.6.3	2.7.0
tauri-build	2.6.3	2.7.0
tauri	2.11.5	2.12.0
@tauri-apps/cli	2.11.4	2.12.0
tauri-cli	2.11.4	2.12.0
tauri-driver	2.0.6	2.1.0

Add another change file through the GitHub UI by following this link.

Read about change files or the docs at github.com/jbolda/covector

socket-security · 2026-07-02T13:52:37Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
cargo/colored@3.1.1
cargo/getrandom@0.3.3 ⏵ 0.3.4
cargo/object@0.39.1
cargo/phf@0.14.0
cargo/rand@0.10.2
cargo/sha1@0.11.0
cargo/sha2@0.11.0
cargo/windows-sys@0.61.2
cargo/image@0.25.5 ⏵ 0.25.10
cargo/itertools@0.12.1 ⏵ 0.15.0
cargo/jsonrpsee@0.24.7 ⏵ 0.26.0
cargo/jsonrpsee-client-transport@0.24.7 ⏵ 0.26.0
cargo/jsonrpsee-core@0.24.7 ⏵ 0.26.0
cargo/jsonrpsee-ws-client@0.24.7 ⏵ 0.26.0
cargo/minisign@0.7.3 ⏵ 0.9.1		⁺⁴
cargo/notify-debouncer-full@0.6.0 ⏵ 0.7.0
cargo/oxc_allocator@0.36.0 ⏵ 0.110.0
cargo/oxc_ast@0.36.0 ⏵ 0.110.0
cargo/oxc_parser@0.36.0 ⏵ 0.110.0
cargo/oxc_span@0.36.0 ⏵ 0.110.0
cargo/rayon@1.10.0 ⏵ 1.12.0
cargo/resvg@0.45.0 ⏵ 0.47.0
cargo/windows-registry@0.5.0 ⏵ 0.6.1
cargo/zip@4.0.0 ⏵ 8.0.0	⁺¹
cargo/percent-encoding@2.3.1 ⏵ 2.3.2		⁺¹
cargo/dialoguer@0.12.0
cargo/memchr@2.7.4 ⏵ 2.8.2
cargo/jsonschema@0.33.0 ⏵ 0.46.2

View full report

…into deps/tauri-cli

Legend-Master · 2026-07-06T07:00:03Z

-zip = { version = "4", default-features = false, features = ["deflate"] }
+sha1 = "0.11"
+sha2 = "0.11"
+zip = { version = "8", default-features = false, features = ["deflate"] }


This is technically also a breaking change... But honestly I don't care any of those small breakages in tauri-bundler at this point

why do we have so much shit in the public api... but yeah don't care about the bundler anymore either. want me to re-add goblin (or merge your pr) while we're at it?

This crate never really had stable APIs... Like we regularly add in new fields to public types 😂 Maybe add a stability note and remove goblin?

sounds good. 2.12 is a special version anyway, might as well abuse it a bit.

oh damn, i never really thought about but every struct change we ever did was breaking lol

Legend-Master

I would prefer we add a change file for tauri-bundler since there're breaking changes, otherwise looks good to me

socket-security · 2026-07-06T09:38:39Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: cargo `zune-jpeg` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `cargo/resvg@0.47.0` → `cargo/image@0.25.10` → `cargo/zune-jpeg@0.5.15` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore cargo/zune-jpeg@0.5.15`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Legend-Master · 2026-07-06T09:42:52Z

Obfuscated code: cargo zune-jpeg is 90.0% likely obfuscated
https://socket.dev/cargo/package/zune-jpeg/files/0.5.15/zune-jpeg-0.5.15/src/idct.rs

Like how?

FabianLars · 2026-07-06T09:43:55Z

I think it's the tests? idk i don't see the issue either

chore(deps): update dependencies of tauri-cli

5463de2

FabianLars added 4 commits July 2, 2026 15:58

also update bundler and macos-sign

502a06d

fix js(x) migration

8ee3f4c

Update Cargo.toml

8d791de

Update frontend.rs

2a91574

FabianLars marked this pull request as ready for review July 2, 2026 19:25

FabianLars requested a review from a team as a code owner July 2, 2026 19:25

Legend-Master reviewed Jul 3, 2026

View reviewed changes

Comment thread crates/tauri-macos-sign/Cargo.toml

Legend-Master reviewed Jul 3, 2026

View reviewed changes

Comment thread crates/tauri-bundler/Cargo.toml Outdated

Legend-Master reviewed Jul 3, 2026

View reviewed changes

Comment thread crates/tauri-cli/Cargo.toml Outdated

FabianLars and others added 6 commits July 3, 2026 14:35

Merge remote-tracking branch 'origin/dev' into deps/tauri-cli

bd8e6d6

feedback

720b52d

Link remove goblin PR

ad4ed97

Fix change file from #15593

413a6ac

Merge branch 'dev' into deps/tauri-cli

7588b92

Merge branch 'deps/tauri-cli' of https://github.com/tauri-apps/tauri …

9773c25

…into deps/tauri-cli

Legend-Master previously approved these changes Jul 6, 2026

View reviewed changes

Legend-Master reviewed Jul 6, 2026

View reviewed changes

FabianLars added 2 commits July 6, 2026 10:05

rm goblin

06ef350

stability note

72c796d

FabianLars dismissed Legend-Master’s stale review via 72c796d July 6, 2026 08:15

reword

fc886d2

Legend-Master previously approved these changes Jul 6, 2026

View reviewed changes

Bump resvg and image

872930e

Legend-Master dismissed their stale review via 872930e July 6, 2026 09:38

FabianLars and others added 2 commits July 6, 2026 11:41

changefile

63d944c

Merge branch 'dev' into deps/tauri-cli

3cfab09

Legend-Master approved these changes Jul 6, 2026

View reviewed changes

FabianLars merged commit 7632efd into dev Jul 6, 2026
29 checks passed

FabianLars deleted the deps/tauri-cli branch July 6, 2026 10:36

Uh oh!

Uh oh!

Conversation

FabianLars commented Jul 2, 2026 • edited by Legend-Master Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Package Changes Through 3cfab09

Uh oh!

socket-security Bot commented Jul 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Legend-Master Jul 6, 2026

Choose a reason for hiding this comment

Uh oh!

FabianLars Jul 6, 2026

Choose a reason for hiding this comment

Uh oh!

Legend-Master Jul 6, 2026

Choose a reason for hiding this comment

Uh oh!

FabianLars Jul 6, 2026

Choose a reason for hiding this comment

Uh oh!

FabianLars Jul 6, 2026

Choose a reason for hiding this comment

Uh oh!

Legend-Master left a comment

Choose a reason for hiding this comment

Uh oh!

socket-security Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Legend-Master commented Jul 6, 2026

Uh oh!

FabianLars commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

FabianLars commented Jul 2, 2026 •

edited by Legend-Master

Loading

github-actions Bot commented Jul 2, 2026 •

edited

Loading

Package Changes Through `3cfab09`

socket-security Bot commented Jul 2, 2026 •

edited

Loading

socket-security Bot commented Jul 6, 2026 •

edited

Loading

FabianLars commented Jul 6, 2026 •

edited

Loading