Update tauri monorepo - #1908
Open
dashql-renovate[bot] wants to merge 1 commit into
Open
dashql-renovate[bot] wants to merge 1 commit into
dashql-renovate[bot] wants to merge 1 commit into
Conversation
dashql-renovate
Bot
added
dependencies
dashql-renovate
Bot
force-pushed
the
renovate/tauri-monorepo
branch
from
September 23, 2026 01:20
feb1dc0 to
6844c54
Compare
Contributor
Author
|
dashql-renovate
Bot
force-pushed
the
renovate/tauri-monorepo
branch
from
September 29, 2026 21:09
6844c54 to
200a5bd
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.11.2→2.12.02.12.12.6.2→2.7.02.7.12.6.2→2.7.02.7.1Release Notes
tauri-apps/tauri (tauri)
v2.12.0: tauri v2.12.0Compare Source
Cargo Audit
[2.12.0]
New Features
3f62c70d6(#13848) AddWebviewBuilder::limit_navigations_to_app_bound_domains,WebviewWindowBuilder::limit_navigations_to_app_bound_domains, and limitNavigationsToAppBoundDomains to tauri.config.json.7dbfc1fe5(#14620) Added theapp > appDirectoriesOverrideconfig to override the directories returned by theapp_*_dirpath APIs, either with a single root directory or per directory. This lets apps keep all of their data, including the data of Tauri itself and of plugins that use these APIs, in a single place of their choosing, such as next to the executable for portable apps. The override can also be set at runtime throughContext::config_mut.d8d02ba60(#14767) Added theexitfunction to@tauri-apps/api/app, backed by the newplugin:app|exitcommand (core:app:allow-exitpermission), to exit the app without requiring the@tauri-apps/plugin-processplugin.460ec3544(#14786) AddWebview::convert_file_srcandWebviewWindow::convert_file_src, the Rust equivalent of the JavaScriptconvertFileSrcfunction. The returned URL uses the scheme the webview was configured with (useHttpsScheme), so it always matches what the webview can load.21ec647cf(#15223) AddBuilder::activate_ignoring_other_appson macOS to control whether the app activates at launch when another app is already active.d203f74a2(#15274) AddedImage::from_app_icon_resourceandImage::from_icon_resourceon Windows for loading images from icon resources embedded in the executable (identified by anIconResourceid or name), and the defaultdefault_window_iconfromtauri::generate_contextmacro is now loaded usingfrom_app_icon_resource. The resource idtauri-buildembeds the application icon with is exposed astauri_utils::platform::WINDOWS_APP_ICON_RESOURCE_ID.29265557c(#15410) Addedapp > windows > noRedirectionBitmapconfig option to disable the window redirection bitmap on Windows.29265557c(#15410) AddedWindowBuilder/WebviewWindowBuilder::no_redirection_bitmapmethod to disable the window redirection bitmap on Windows.382dd6ccc(#14865) Expose thewrypermission handler API through Tauri.This includes support for permission types such as
DisplayCapture,Midi,Sensors,MediaKeySystemAccess,LocalFonts,WindowManagement,PointerLock,AutomaticDownloads,FileSystemAccess, andAutoplay.Added
PermissionResponse::{Allow, Deny, Default}for runtime permission decisions.6edc2f4d4(#14926) AddedWindow::set_fullscreen_on_monitor,WebviewWindow::set_fullscreen_on_monitorand thesetFullscreenOnMonitorJavaScript API to make a window fullscreen on the monitor containing a given physical position, along with thecore:window:allow-set-fullscreen-on-monitorpermission.Enhancements
aebf38c84(#15694) Migrate the Android Gradle scripts from the deprecatedkotlinOptionsDSL tocompilerOptions, which is accepted by both Kotlin Gradle Plugin 1.9.x and 2.x. This lets projects move to Kotlin 2.x without hitting the hard error that 2.3+ raises on the old DSL.This increased the minimum supported Gradle version to 8.13, if your
gradleis on an earlier version, deletesrc-tauri/gen/android/gradle/wrapper/gradle-wrapper.propertiesand re-runtauri android initto update it.d3108ff9a(#15578)StatehadSendandSynctrait bounds that were already implied, remove them from the struct definition.4a5065653(#14454) AddedRegularandClearLiquid Glass window effects, and theinteractivewindow effects option (macOS 27.0+) that enables the glass' visual response to user interactions.459fc315e(#15711) Fix different build and runtime debug assertion profiles on the tauri-utils crate can resulting in compilation errors.Bug Fixes
0349b6fb8(#16072) Fix the runtime ACL denying a command for every origin when any capability denied it: deny permissions are now correctly scoped to the capability's execution context (local/remote) instead of denying the command for every origin. Previously a capability that denied a command for a remote URL also denied it for the local app (and vice-versa), because the origin match result was discarded. The debug message reporting an explicit denial now also only references the capabilities that actually deny the requesting origin.d8d02ba60(#14767) On Android,AppHandle::exit(and the process pluginexitcommand) now finishes the activity instead of exiting the process directly, so the app closes with the system transition instead of flashing a blank screen.e3e3474d3On Android,Invoke.resolveObjectand the other values serialized with the plugin JSON mapper now writeJSObjectandJSArrayas JSON objects and arrays. They were serialized through their private fields, so aJSArrayreached the frontend as{ "values": [...] }and aJSObjectas{ "nameValuePairs": {...} }.020919a1b(#15798) On Android, fixed requesting permission in a plugin fails after the first activity closed.cb2ecac53(#15949) On Android, fixed a crash when an activity is destroyed while another one is already running — installing an APK over the running app is the common way to hit it. The plugin manager tried to move its activity result launchers to the surviving activity, andregisterForActivityResultrejects that withIllegalStateException: LifecycleOwner ... is attempting to register while current state is RESUMED. Each activity now registers its own launchers when it is created.f9ed1a3fd(#15838) Fix malformedasset://multi-range responses: the multipart body now ends with the closing boundary,Content-Typeis onlymultipart/byteranges, and the status is206 Partial Content.127aa176b(#16050) Loadasset://files asynchronously instead of on the event loop thread, so a slow or unreachable path no longer freezes every window.97f6666b9(#16088) Bumptray-iconto0.25andmudato0.20to pick up the fix for left-click events being swallowed by the tray menu on macOS 27 (fix #16035).1417768f9(#15679) Remove theChannelused to send event to JavaScript side on dropping the menu17717757b(#15617) Remove Rust-side event listeners bound to a window or webview when that target is destroyed, solisten/oncehandlers registered on aWindow,WebvieworWebviewWindowno longer leak after it is closed.0aeadb6b2(#15821) Transfer the exit code from thewindow.app_handle().exit(1)call to therun_return()result instead of always returning 0.82c706e26Stop queuing large channel payloads once the target webview is closed. They were kept in memory until the app exited, and a new webview reusing the same label could fetch them.023fe7f59(#15291) Fix capabilities added at runtime throughadd_capability(featuredynamic-acl) being merged into the command scopes of the build time ACL, which polluted unrelated plugin scopes and made their deserialization fail. Scope values are also no longer duplicated when a scoped permission allows more than one command.4a0e1df18(#15604) Remove a webview's JS event listeners from the backendListenersmap when that webview is destroyed. Previously the entries keyed by the source webview label lingered after the webview was dropped, so they could never be delivered and leaked until the app exited — forcing apps to manuallyunlisten()before closing a window.d727d6316(#15630) Query monitor information (primary_monitor,monitor_from_point,available_monitors) on the main thread from the app-level runtime handle instead of touching the event loop's window target directly.a370f6533(#15224) Avoid leaking Objective-C objects inWebviewMessage::WithWebviewon Apple targets by replacingRetained::into_rawwith scoped retained bindings andRetained::as_ptrpointer handoff.406feea75(#15800) Guard the handler lookup in the generated unlisten script. When the unlisten function ran before its listener registration eval reached the webview, the entry was still missing and reading itshandlerIdthrew, which aborted_unlistenbefore it sent the backendplugin:event|unlistenand left the listener registered.448d39ee2(#15860) Fix menu related commands can panic if called with invalid input throughinvokedirectly.do_menu_item!macro now returnsErr(crate::Error::UnexpectedMenuKind)instead ofunreachable!()tauri::Error::UnexpectedMenuKindmenu:newwith thePredefinedkind now returns an error instead of panicking when theitemoption is missingImageto a menu or tray icon now returnstauri::Error::InvalidIconwhen the RGBA buffer does not match the image size, instead of panicking on Linux when the icon is renderede517fa18e(#15450) Fixrun_main_thread!macro used by things likeMenuItemand some other APIs deadlock when called on main thread withMockRuntime2087bcae2(#15920) Fixpath.normalize("")returning an empty string instead of".", matching Node.js and the existingpath.join("")behavior.08acfb3fa(#15625) Fix webview don't get focus when Alt-Tab back to the window ifunstablefeature is enabled on Windows5a882eccf(#15701) On Linux, fix resize cursor for undecorated Window not being set correctly when mouse is over a resize edge.08acfb3fa(#15625) FixWindowEvent::Focusedevents emitted when dragging the window on Windowsf4feb2ba7(#15950) On Windows, fixedWindow::is_focusedalways returnsfalsein multi-webview modePerformance Improvements
26a876a9f(#16049) Skip redundant rgba buffer copies in icon conversions (muda::Icon/tray_icon::Icon),Image::from_bytes, and submenu icon construction.ba0828c76(#15955) Skip serializing to JSON forImage::rgbaWhat's Changed
1fbadc877(#15952) Internal refactors removing anArcand aMutex.Deprecate
InvokeMessage::stateandInvokeMessage::state_refthat should accidentally were made public.2e6e33c85(#16029) Moved to edition 2024ce3f13b91(#15887) Lock unstable tauri crates to minor versions.7cc68e74f(#15307)WindowEvent::ResumedandWindowEvent::Suspendedare now only fired for the matching activity window instead of every window.1cffb01da(#13221) Set MSRV to 1.90.Security fixes
201437309Bind channel data IPC queue entries to the webview they were created for and scope their ids per webview.Queued channel payloads and large invoke responses can no longer be read by other webviews, and entries are purged when the owning webview is closed.
Fixes GHSA-w28w-mhc8-qvjv.
Dependencies
Upgraded to
tauri-utils@2.10.0Upgraded to
tauri-build@2.7.0Upgraded to
tauri-runtime@2.12.0Upgraded to
tauri-runtime-wry@2.12.0Upgraded to
tauri-macros@2.7.0e2e585ad1(#15828) On Android, fix missingconsumer-rules.profile in the template.IMPORTANT: For plugin authors, update your
build.gradle.ktsfile to remove thebuildTypes { release { isMinifyEnabled = false proguardFiles( getDefaultProguardFile("proguard-android-optimize.txt"), "proguard-rules.pro" ) } }section and rename your
proguard-rules.protoconsumer-rules.proto match theconsumerProguardFiles("consumer-rules.pro")in the template.e2e585ad1(#15828) On Android, updated the template to use Gradle v9.6.1 (com.android.tools.build:gradlev9.3.1) and Kotlin v2.2. Usetauri android initto apply the change.2bb4fdbd0(#15592) Updatedcargo_tomlcrate to1872428fe9(#15790) On macOS, updatedobjc2-*dependencies to 0.3.29e9a54dea(#15890) Update swift-rs to support builds using Xcode 27.51433d740(#15996) Updatedwindowsto0.62andwebview2-comto0.39, this drops Windows 7 support, see microsoft/windows-rs#3808.Breaking Changes
26cb3d665(#15563) On Android,$VIDEOandvideo_dir()now resolve to the app-specific Movies directory instead of external cache storage.Migration: Files previously written to the old location (
.../cache) will not be discovered at the new location (.../files/Movies). Migrate existing files or update path assumptions accordingly.Cargo Publish
v2.11.6: tauri v2.11.6Compare Source
Cargo Audit
[2.11.6]
Security fixes
e901f1de9Bind channel data IPC queue entries to the webview they were created for and scope their ids per webview.Queued channel payloads and large invoke responses can no longer be read by other webviews, and entries are purged when the owning webview is closed.
Fixes GHSA-w28w-mhc8-qvjv.
Cargo Publish
v2.11.5: tauri v2.11.5Compare Source
Cargo Audit