Bump the production-dependencies group across 1 directory with 7 updates #439

dependabot · 2026-01-12T04:34:03Z

Bumps the production-dependencies group with 6 updates in the /src-tauri directory:

Package	From	To
tauri	`2.9.4`	`2.9.5`
tauri-plugin-shell	`2.3.3`	`2.3.4`
serde_json	`1.0.145`	`1.0.149`
tauri-plugin-dialog	`2.4.2`	`2.5.0`
reqwest	`0.12.24`	`0.13.1`
zip	`6.0.0`	`7.0.0`

Updates tauri from 2.9.4 to 2.9.5

Release notes

Sourced from tauri's releases.

tauri-cli v2.9.5

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 881 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1060 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.53.4
    │   └── tauri-runtime-wry 2.9.2
    │       └── tauri 2.9.4
    │           ├── tauri-plugin-sample 0.1.0
    │           │   └── api 0.1.0
    │           ├── tauri-plugin-log 2.6.0
    │           │   └── api 0.1.0
    │           ├── tauri-file-associations-demo 0.1.0
    │           ├── tauri 2.9.4
    │           ├── restart 0.1.0
    │           ├── resources 0.1.0
    │           ├── bench_helloworld 0.1.0
    │           ├── bench_files_transfer 0.1.0
    │           ├── bench_cpu_intensive 0.1.0
    │           └── api 0.1.0
    ├── webkit2gtk 2.0.1
    │   ├── wry 0.53.4
    │   ├── tauri-runtime-wry 2.9.2
    │   ├── tauri-runtime 2.9.2
    │   │   ├── tauri-runtime-wry 2.9.2
    │   │   └── tauri 2.9.4
    │   └── tauri 2.9.4
    ├── tauri-runtime-wry 2.9.2
    ├── tauri-runtime 2.9.2
    ├── tauri 2.9.4
    ├── tao 0.34.5
    │   └── tauri-runtime-wry 2.9.2
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.0
    │   │   └── tauri 2.9.4
    │   └── tauri 2.9.4
</tr></table>

... (truncated)

Commits

f2e0405 apply version updates (#14592)
54e8d93 ci(renovate): group worker-rs updates
251203b fix(linux): work area returns logical rect (#14637)
91becd9 fix(nsis): plugins not signed (#14627)
018b4db fix(bundler): skip signing for nsis uninstaller on --no-sign (#14625)
731dd5b docs: remove $APP and $LOG from FsScope (#14623)
7b1b351 changes(cli): log npm package version parse in debug level (#14621)
546b296 fix(tauri-bundler): add a bit more context to error message (#14606)
514cf21 chore(deps): update num-bigint-dig to version 0.8.6 (#14591)
6017452 chore(deps): update rust crate ico to 0.5 (#14589)
Additional commits viewable in compare view

Updates tauri-plugin-shell from 2.3.3 to 2.3.4

Release notes

Sourced from tauri-plugin-shell's releases.

persisted-scope v2.3.4

[2.3.4]

93426f85 Fixed an issue that caused docs.rs builds to fail. No user facing changes.

Dependencies

Upgraded to [email protected]

Updating crates.io index
   Packaging tauri-plugin-persisted-scope v2.3.4 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/persisted-scope)
    Updating crates.io index
    Packaged 12 files, 185.2KiB (83.8KiB compressed)
   Uploading tauri-plugin-persisted-scope v2.3.4 (/home/runner/work/plugins-workspace/plugins-workspace/plugins/persisted-scope)
    Uploaded tauri-plugin-persisted-scope v2.3.4 to registry `crates-io`
note: waiting for tauri-plugin-persisted-scope v2.3.4 to be available at registry `crates-io`.
You may press ctrl-c to skip waiting; the crate should be available shortly.
   Published tauri-plugin-persisted-scope v2.3.4 at registry `crates-io`

nfc-js v2.3.4

[2.3.4]

b4348cee (#3101 by @bclarke123) Update return value of isAvailable to match TypeScript function signature

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/[email protected]
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.1kB README.md
npm notice 5.0kB dist-js/index.cjs
npm notice 3.7kB dist-js/index.d.ts
npm notice 4.8kB dist-js/index.js
npm notice 678B package.json
npm notice Tarball Details
</tr></table>

... (truncated)

Commits

6e2e7e4 publish new versions (#3070)
9a2c98f temp: remove updater changefiles
4a2ecb6 chore(deps): update rkyv, closes #3196
31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
Additional commits viewable in compare view

Updates serde_json from 1.0.145 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @b41sh)

v1.0.148

Update zmij dependency to 1.0

v1.0.147

Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Set fast_arithmetic=64 for riscv64 (#1305, thanks @Xeonacid)

Commits

4f6dbfa Release 1.0.149
f3df680 Touch up PR 1306
e16730f Merge pull request #1306 from b41sh/fix-float-number-display
eeb2bcd Align arbitrary_precision number strings with zmij’s formatting
8b291c4 Release 1.0.148
1aefe15 Update to zmij 1.0
62d6e8d Release 1.0.147
fd829a6 Merge pull request #1304 from dtolnay/zmij
e757a3d Switch from ryu -> zmij for float formatting
75ad7e6 Release 1.0.146
Additional commits viewable in compare view

Updates tauri-plugin-dialog from 2.4.2 to 2.5.0

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.5.0

[2.5.0]

dff6fa98 (#3034 by @onehumandev) Add pickerMode option to file picker (currently only used on iOS)

Dependencies

Upgraded to [email protected]

feat

c23fa03f (#3098 by @Lepidopteran) Add xdg-portal as an optional feature for rfd

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/[email protected]
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.4kB dist-js/index.cjs
npm notice 12.2kB dist-js/index.d.ts
npm notice 6.3kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 656B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.5.0
npm notice filename: tauri-apps-plugin-dialog-2.5.0.tgz
npm notice package size: 5.8 kB
npm notice unpacked size: 30.0 kB
npm notice shasum: 52057077b52cc51643ac9829d48c2c590e5e1a54
npm notice integrity: sha512-I0R0ygwRd9AN8[...]lxPHD5vDcFjiA==
npm notice total files: 7
npm notice
npm notice Security Notice: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption. Learn more https://gh.io/all-npm-classic-tokens-revoked
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=804721691
+ @tauri-apps/[email protected]

... (truncated)

Commits

3eebea2 publish new versions (#2712)
6bc3e81 chore: Remove recently released crates from refresh list
f634e52 chore: Add changefile to refresh all packages.
9841ff8 chore: add contributing guide (#2753)
2e68062 chore(deps): update rust crate windows-sys to v0.60.2 (v2) (#2763)
041b93f chore(deps): fix brace expansion pnpm audit (#2773)
a05698a chore(deps): update dependency rollup to v4.43.0 (#2759)
0acca18 chore(deps): update eslint monorepo to v9.29.0 (#2766)
ce9888a feat(opener): Add requireLiteralLeadingDot config (#2762)
106e46e feat(log): Add KeepSome rotation strategy (#677)
Additional commits viewable in compare view

Updates tauri-plugin-fs from 2.4.4 to 2.4.5

Release notes

Sourced from tauri-plugin-fs's releases.

deep-link-js v2.4.5

[2.4.5]

93426f85 Fixed an issue that caused docs.rs builds to fail. No user facing changes.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/[email protected]
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 6.2kB README.md
npm notice 3.5kB dist-js/index.cjs
npm notice 2.9kB dist-js/index.d.ts
npm notice 3.4kB dist-js/index.js
npm notice 799B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-deep-link
npm notice version: 2.4.5
npm notice filename: tauri-apps-plugin-deep-link-2.4.5.tgz
npm notice package size: 4.4 kB
npm notice unpacked size: 17.7 kB
npm notice shasum: 7b0cfdf1265c248340126764a85ae70f8f525dc8
npm notice integrity: sha512-Zf2RTj1D9IQQ4[...]azx/QVZnhAwaQ==
npm notice total files: 6
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=644604650
+ @tauri-apps/[email protected]

deep-link v2.4.5

[2.4.5]

93426f85 Fixed an issue that caused docs.rs builds to fail. No user facing changes.

Updating crates.io index
</tr></table>

... (truncated)

Commits

6e2e7e4 publish new versions (#3070)
9a2c98f temp: remove updater changefiles
4a2ecb6 chore(deps): update rkyv, closes #3196
31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
Additional commits viewable in compare view

Updates reqwest from 0.12.24 to 0.13.1

Release notes

Sourced from reqwest's releases.

v0.13.1

What's Changed

http3: depend on quinn/rustls-aws-lc-rs to avoid ring dependency by @djc in seanmonstar/reqwest#2917

fix rustls on android by @seanmonstar in seanmonstar/reqwest#2918

Full Changelog: seanmonstar/reqwest@v0.13.0...v0.13.1

v0.13.0

Breaking changes

rustls is now the default TLS backend, instead of native-tls.

rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)

rustls-tls has been renamed to rustls.

rustls roots features removed, rustls-platform-verifier is used by default.

To use different roots, call tls_certs_only(your_roots).

native-tls now includes ALPN. To disable, use native-tls-no-alpn.

query and form are now crate features, disabled by default.

Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).

Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)

For example, prefer tls_backend_rustls() over use_rustls_tls().

Pull Requests in General

start 0.13 dev by @seanmonstar in seanmonstar/reqwest#2894

Make serde optional by introducing query, form features, and re-working WASM header parsing by @CathalMullan in seanmonstar/reqwest#2858

replace ClientBuilder::dns_resolver with dns_resolver2 by @seanmonstar in seanmonstar/reqwest#2898

feat: make Rustls the default TLS provider by @calavera in seanmonstar/reqwest#2897

feat: consolidate TLS options with rustls-platform-verifier by @seanmonstar in seanmonstar/reqwest#2891

remove long-deprecated methods: trust-dns and non-wasm-cors by @seanmonstar in seanmonstar/reqwest#2899

rename rustls-tls feature to just rustls by @seanmonstar in seanmonstar/reqwest#2900

remove deprecated features trust-dns and macos-system-configuration by @seanmonstar in seanmonstar/reqwest#2901

chore: separate rustls and rustls-no-provider features by @seanmonstar in seanmonstar/reqwest#2903

rustls: allow windows to use extra roots by @seanmonstar in seanmonstar/reqwest#2904

v0.13.0-rc.1 by @seanmonstar in seanmonstar/reqwest#2905

Enable ALPN by default in native-tls by @ducaale in seanmonstar/reqwest#2907

v0.13.0 by @seanmonstar in seanmonstar/reqwest#2915

New Contributors

@CathalMullan made their first contribution in seanmonstar/reqwest#2858

Full Changelog: seanmonstar/reqwest@v0.12.28...v0.13.0

v0.13.0-rc.1

👀 Discussion here if you give it try, thanks!

Main breaking changes

rustls is now default instead of native-tls

rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you want to enable a different one)

rustls-tls renamed to rustls

rustls roots features removed, platform-verifier is used instead

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.1

Fixes compiling with rustls on Android targets.

v0.13.0

Breaking changes:

rustls is now the default TLS backend, instead of native-tls.

rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)

rustls-tls has been renamed to rustls.

rustls roots features removed, rustls-platform-verifier is used by default.

To use different roots, call tls_certs_only(your_roots).

native-tls now includes ALPN. To disable, use native-tls-no-alpn.

query and form are now crate features, disabled by default.

Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).

Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)

For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.

Fix sending Proxy-Authorization if only username is configured.

Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.

Refactor internal decompression handling to use tower-http.

Commits

10fb98c v0.13.1
438098a chore: refer to h2 as dep:h2 (#2919)
43aac91 chore(ci): bump actions/checkout from 5 to 6 (#2864)
175f5b2 fix rustls on android (#2918)
1afe88e Depend on quinn/rustls-aws-lc-rs to avoid ring dependency (#2917)
62a80af v0.13.0
e8d89f4 enable ALPN by default in native-tls (#2907)
9a9daa7 v0.13.0-rc.1
d518e45 rustls: allow windows to use extra roots (#2904)
934bc84 chore: separate rustls and rustls-no-provider features (#2903)
Additional commits viewable in compare view

Updates zip from 6.0.0 to 7.0.0

Release notes

Sourced from zip's releases.

v7.0.0

⚠️ Breaking Changes

Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.

Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

(SimpleFileOptions) const DEFAULT implementation (#474)

ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

print previous error when failing to search another cde (#460)

cargo doc warnings (#472)

Write ZIP64 data descriptors when large_file option is true (#467)

Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

Revert version bump so that release-plz will trigger

expose more flate2 feature flags (#476)

Next release will be 7.0.0

release v6.0.0 (#442)

Deps

Bump lzma-rust2 to v0.15 (#465)*] Remove lzma-static and xz-static feature flags, which are deprecated synonyms of lzma and xz. (#405, #425)

Changelog

Sourced from zip's changelog.

7.0.0 - 2025-12-05

⚠️ Breaking Changes

Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.

Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

(SimpleFileOptions) const DEFAULT implementation (#474)

ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

print previous error when failing to search another cde (#460)

cargo doc warnings (#472)

Write ZIP64 data descriptors when large_file option is true (#467)

Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

Revert version bump so that release-plz will trigger

expose more flate2 feature flags (#476)

Next release will be 7.0.0

release v6.0.0 (#442)

Deps

Bump lzma-rust2 to v0.15 (#465)*] Remove lzma-static and xz-static feature flags, which are deprecated synonyms of lzma and xz. (#405, #425)

Commits

c864a14 chore: release v7.0.0 (#482)
8085fe5 fix: print previous error when failing to search another cde (#460)
aa8f933 chore: Revert version bump so that release-plz will trigger
13005c5 ci: Fix? run apt-get update at start of miri job
f99a32f chore: expose more flate2 feature flags (#476)
9b5dd0b feat(SimpleFileOptions): const DEFAULT implementation (#474)
a8a4729 ci: Fix: Miri now requires g++, not just gcc (#477)
57d26a7 fix: cargo doc warnings (#472)
69533f1 feat: ZipWriter set_auto_large_file() method to enable large-file data desc...
fadbd48 chore(deps): update lzma-rust2 requirement from 0.13 to 0.14 (#450)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 6 updates in the /src-tauri directory: | Package | From | To | | --- | --- | --- | | [tauri](https://github.com/tauri-apps/tauri) | `2.9.4` | `2.9.5` | | [tauri-plugin-shell](https://github.com/tauri-apps/plugins-workspace) | `2.3.3` | `2.3.4` | | [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.149` | | [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.4.2` | `2.5.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.24` | `0.13.1` | | [zip](https://github.com/zip-rs/zip2) | `6.0.0` | `7.0.0` | Updates `tauri` from 2.9.4 to 2.9.5 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.9.4...tauri-v2.9.5) Updates `tauri-plugin-shell` from 2.3.3 to 2.3.4 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@nfc-v2.3.3...nfc-v2.3.4) Updates `serde_json` from 1.0.145 to 1.0.149 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.145...v1.0.149) Updates `tauri-plugin-dialog` from 2.4.2 to 2.5.0 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.2...log-v2.5.0) Updates `tauri-plugin-fs` from 2.4.4 to 2.4.5 - [Release notes](https://github.com/tauri-apps/plugins-workspace/releases) - [Commits](tauri-apps/plugins-workspace@fs-v2.4.4...fs-v2.4.5) Updates `reqwest` from 0.12.24 to 0.13.1 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.12.24...v0.13.1) Updates `zip` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/zip-rs/zip2/releases) - [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md) - [Commits](zip-rs/zip2@v6.0.0...v7.0.0) --- updated-dependencies: - dependency-name: tauri dependency-version: 2.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: tauri-plugin-shell dependency-version: 2.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: serde_json dependency-version: 1.0.149 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: tauri-plugin-dialog dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: tauri-plugin-fs dependency-version: 2.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: reqwest dependency-version: 0.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zip dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 12, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the production-dependencies group across 1 directory with 7 updates #439

Bump the production-dependencies group across 1 directory with 7 updates #439

Uh oh!

dependabot bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the production-dependencies group across 1 directory with 7 updates #439

Are you sure you want to change the base?

Bump the production-dependencies group across 1 directory with 7 updates #439

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 12, 2026

tauri-cli v2.9.5

persisted-scope v2.3.4

[2.3.4]

Dependencies

nfc-js v2.3.4

[2.3.4]

v1.0.149

v1.0.148

v1.0.147

v1.0.146

dialog-js v2.5.0

[2.5.0]

Dependencies

feat

deep-link-js v2.4.5

[2.4.5]

deep-link v2.4.5

[2.4.5]

v0.13.1

What's Changed

v0.13.0

Breaking changes

Pull Requests in General

New Contributors

v0.13.0-rc.1

Main breaking changes

v0.13.1

v0.13.0

v0.12.28

v0.12.27

v0.12.26

v0.12.25

v7.0.0

⚠️ Breaking Changes

🚀 Features

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

Deps

7.0.0 - 2025-12-05

⚠️ Breaking Changes

🚀 Features

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

Deps

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant