build(deps): bump the tauri group across 1 directory with 5 updates by dependabot[bot] · Pull Request #6295 · Stirling-Tools/Stirling-PDF

dependabot · 2026-05-01T10:39:30Z

Bumps the tauri group with 4 updates in the /frontend/src-tauri directory: tauri, tauri-plugin-fs, tauri-plugin-dialog and tauri-plugin-http.

Updates tauri from 2.10.2 to 2.10.3

Release notes

Sourced from tauri's releases.

tauri v2.10.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 941 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1052 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.54.0
    │   └── tauri-runtime-wry 2.10.1
    │       └── tauri 2.10.3
    │           ├── tauri-utils 2.8.3
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.10.1
    │           │   ├── tauri-runtime 2.10.1
    │           │   │   ├── tauri-runtime-wry 2.10.1
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-plugin 2.5.4
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-codegen 2.5.5
    │           │   │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri-build 2.5.6
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.10.3
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.10.1
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.8.1
    │           │   │   └── tauri-cli 2.10.1
    │           │   ├── tauri-build 2.5.6
</tr></table>

... (truncated)

Commits

9b17a7a fix(ci): bump rustsec/audit-check to v2 and ignore time audit (#15030)
d868279 apply version updates (#14897)
3a65cc6 fix(test): disable resolve_resource_dir on Android (#15026)
52cf195 refactor(cli): reduce some nesting code (#14844)
c3cbff3 fix: resource path handles ./ path differently (#14662)
33754ae fix(cli): unusable empty password private keys (#15022)
3935dee Add AI tool policy to contributing guide (#15002)
33932a7 chore(deps-dev): bump svelte from 5.51.5 to 5.53.5 (#15015)
7d3c759 chore(deps): update dependency rollup to v4.59.0 (#15001)
f20256b chore: fix clippy warnings (#14999)
Additional commits viewable in compare view

Updates tauri-plugin-fs from 2.4.5 to 2.5.0

Release notes

Sourced from tauri-plugin-fs's releases.

dialog-js v2.5.0

[2.5.0]

dff6fa98 (#3034 by @onehumandev) Add pickerMode option to file picker (currently only used on iOS)

Dependencies

Upgraded to fs-js@2.4.5

feat

c23fa03f (#3098 by @Lepidopteran) Add xdg-portal as an optional feature for rfd

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.5.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.4kB dist-js/index.cjs
npm notice 12.2kB dist-js/index.d.ts
npm notice 6.3kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-dialog-2.5.0.tgz
npm notice package size: 5.8 kB
npm notice unpacked size: 30.0 kB
npm notice shasum: 52057077b52cc51643ac9829d48c2c590e5e1a54
npm notice integrity: sha512-I0R0ygwRd9AN8[...]lxPHD5vDcFjiA==
npm notice total files: 7
npm notice
npm notice Security Notice: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption. Learn more https://gh.io/all-npm-classic-tokens-revoked
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=804721691
+ @tauri-apps/plugin-dialog@2.5.0

... (truncated)

Commits

d6a3898 Publish New Versions (v2) (#3268)
2e5bcdf chore(deps): fix audits (#3373)
4374b4f chore(notification): remove unused dev-deps (#3372)
f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
2c0883e chore(deps): update dependency vite to v8 (#3346)
024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.6.0 to 2.7.0

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.7.0

[2.7.0]

24154472 (#3287 by @Legend-Master) Re-use message command in Rust side for ask and confirm commands, allow-ask and allow-confirm permissions are now aliases to allow-message

Dependencies

Upgraded to fs-js@2.5.0

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.0
npm notice filename: tauri-apps-plugin-dialog-2.7.0.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: b510ecd42d9900725eaf51f42ec98523c40d29b4
npm notice integrity: sha512-4nS/hfGMGCXiA[...]RtrKXkANKDHvw==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1235993203
+ @tauri-apps/plugin-dialog@2.7.0

dialog v2.7.0

[2.7.0]

24154472 (#3287 by @Legend-Master) Re-use message command in Rust side for ask and confirm commands, allow-ask and allow-confirm permissions are now aliases to allow-message

... (truncated)

Commits

51b430b ci: delete .changes/updater-new-bundle-support.md
fd439b1 Publish New Versions (v2) (#2964)
2522b71 fix(deep-link): revert the breaking change introduced by #2928 (#2970)
9021a73 chore(deps): update dependency rollup to v4.50.0 (#2966)
625bb1c feat(log): re-export the log crate (#2965)
6215afe chore(deps): update dependency rollup to v4.49.0 (#2962)
8cf8eea feat(updater): inject bundle_type into endpoint url (#2960)
509eba8 feat: support message dialogs with 3 buttons (#2641)
9ac5fe8 feat(updater): support bundle-specific targets (#2624)
c247410 chore(deps): update dependency typescript-eslint to v8.41.0 (#2956)
Additional commits viewable in compare view

Updates tauri-plugin-http from 2.5.7 to 2.5.8

Release notes

Sourced from tauri-plugin-http's releases.

http-js v2.5.8

[2.5.8]

29712892 (#3252 by @NVolcz) Correct Response header initialization to support cloning and ensure Set-Cookie visibility.

Dependencies

Upgraded to fs-js@2.5.0

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-http@2.5.8
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 2.6kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 2.4kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 655B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-http
npm notice version: 2.5.8
npm notice filename: tauri-apps-plugin-http-2.5.8.tgz
npm notice package size: 5.1 kB
npm notice unpacked size: 20.5 kB
npm notice shasum: a6e638fd0d1b17563ef0c53745373c0b1eb50260
npm notice integrity: sha512-oxd7oypzQeu8k[...]hKUbhuKWcunRw==
npm notice total files: 6
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1235993387
+ @tauri-apps/plugin-http@2.5.8

http v2.5.8

[2.5.8]

29712892 (#3252 by @NVolcz) Correct Response header initialization to support cloning and ensure Set-Cookie visibility.

... (truncated)

Commits

d6a3898 Publish New Versions (v2) (#3268)
2e5bcdf chore(deps): fix audits (#3373)
4374b4f chore(notification): remove unused dev-deps (#3372)
f75d21d chore(deps): remove used of tauri-utils build feature (#3360)
4b95f5e chore(deps): update dependency eslint to v10.1.0 (#3357)
99c3e37 chore(deps): bump tar in /plugins/updater/tests/updater-migration/v1-app (#3352)
eaac19a chore(deps): update rust crate tar to v0.4.45 [security] (#3353)
5183e31 chore(deps): update dependency typescript-eslint to v8.57.1 (#3344)
2c0883e chore(deps): update dependency vite to v8 (#3346)
024ec0c fix(deep-link): ChromeOS deep link calls filtered and ignored by plugin (fix ...
Additional commits viewable in compare view

Updates tauri-build from 2.5.5 to 2.6.0

Release notes

Sourced from tauri-build's releases.

tauri-build v2.6.0

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1060 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1086 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.55.0
    │   └── tauri-runtime-wry 2.11.0
    │       └── tauri 2.11.0
    │           ├── tauri-utils 2.9.0
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.11.0
    │           │   ├── tauri-runtime 2.11.0
    │           │   │   ├── tauri-runtime-wry 2.11.0
    │           │   │   └── tauri 2.11.0
    │           │   ├── tauri-plugin 2.6.0
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.6.0
    │           │   │   └── tauri 2.11.0
    │           │   ├── tauri-codegen 2.6.0
    │           │   │   ├── tauri-macros 2.6.0
    │           │   │   └── tauri-build 2.6.0
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.11.0
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.11.0
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.9.0
    │           │   │   └── tauri-cli 2.11.0
    │           │   ├── tauri-build 2.6.0
</tr></table>

... (truncated)

Commits

e60834f Apply Version Updates From Current Changes (#15041)
df05c00 chore: minor bump for codegen crate
13bea17 chore: fmt
9808236 fix(macOS): correct value for work_area.position.y (#14655)
eb0312e feat(mobile): Propagate tao::Event::Suspended and tao::Event::Resumed to the ...
4ef5797 feat(ios): add --no-sign and --archive-only flags to ios build (#15061)
110336c fix(macOS): fix incorrect window position on multi-monitor setups (#15250)
c00a3db feat(macros): add support for rename command macro in tauri-macros #14173 (#1...
764b913 feat(cli): restart Android emulator if it is disconnected from adb (#14313)
1035f12 fix(windows): tauri-bundler detect arm system (#14923)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the tauri group with 4 updates in the /frontend/src-tauri directory: [tauri](https://github.com/tauri-apps/tauri), [tauri-plugin-fs](https://github.com/tauri-apps/plugins-workspace), [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) and [tauri-plugin-http](https://github.com/tauri-apps/plugins-workspace). Updates `tauri` from 2.10.2 to 2.10.3 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.10.2...tauri-v2.10.3) Updates `tauri-plugin-fs` from 2.4.5 to 2.5.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.5...fs-v2.5.0) Updates `tauri-plugin-dialog` from 2.6.0 to 2.7.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@log-v2.6.0...log-v2.7.0) Updates `tauri-plugin-http` from 2.5.7 to 2.5.8 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@http-v2.5.7...http-v2.5.8) Updates `tauri-build` from 2.5.5 to 2.6.0 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.5.5...tauri-build-v2.6.0) --- updated-dependencies: - dependency-name: tauri dependency-version: 2.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tauri - dependency-name: tauri-plugin-fs dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tauri - dependency-name: tauri-plugin-dialog dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tauri - dependency-name: tauri-plugin-http dependency-version: 2.5.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tauri - dependency-name: tauri-build dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tauri ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-02T22:23:27Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file Rust Pull requests that update Rust code labels May 1, 2026

dependabot Bot requested review from ConnorYoh, EthanHealy01, Frooodle, jbrunton96 and reecebrowne as code owners May 1, 2026 10:39

dependabot Bot added dependencies Pull requests that update a dependency file Rust Pull requests that update Rust code labels May 1, 2026

dosubot Bot added the size:XS This PR changes 0-9 lines ignoring generated files. label May 1, 2026

stirlingbot Bot added Front End Issues or pull requests related to front-end development build Changes that affect the build system or external dependencies Tauri Pull requests that update Tauri code labels May 1, 2026

dependabot Bot closed this May 2, 2026

dependabot Bot deleted the dependabot/cargo/frontend/src-tauri/tauri-96055c340a branch May 2, 2026 22:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the tauri group across 1 directory with 5 updates#6295

build(deps): bump the tauri group across 1 directory with 5 updates#6295
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/frontend/src-tauri/tauri-96055c340a

dependabot Bot commented on behalf of github May 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

tauri v2.10.3

dialog-js v2.5.0

[2.5.0]

Dependencies

feat

dialog-js v2.7.0

[2.7.0]

Dependencies

dialog v2.7.0

[2.7.0]

http-js v2.5.8

[2.5.8]

Dependencies

http v2.5.8

[2.5.8]

tauri-build v2.6.0

Uh oh!

dependabot Bot commented on behalf of github May 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 1, 2026 •

edited

Loading