[github-actions]

Version Updates

Merging this PR will release new versions of the following packages based on your change files.

api-example

[2.0.55]

Dependencies

• Upgraded to dialog@2.8.2
• Upgraded to fs@2.7.0
• Upgraded to global-shortcut@2.4.1
• Upgraded to barcode-scanner@2.5.2
• Upgraded to biometric@2.4.2
• Upgraded to clipboard-manager@2.4.2
• Upgraded to geolocation@2.4.2
• Upgraded to haptics@2.4.2
• Upgraded to log@2.10.1
• Upgraded to nfc@2.4.2
• Upgraded to notification@2.6.0
• Upgraded to opener@2.7.1
• Upgraded to shell@2.5.0
• Upgraded to updater@2.13.3
• Upgraded to http@2.8.2

api-example-js

[2.0.51]

Dependencies

• Upgraded to dialog-js@2.8.2
• Upgraded to fs-js@2.7.0
• Upgraded to global-shortcut-js@2.4.1
• Upgraded to barcode-scanner-js@2.5.2
• Upgraded to biometric-js@2.4.2
• Upgraded to clipboard-manager-js@2.4.2
• Upgraded to log-js@2.10.1
• Upgraded to nfc-js@2.4.2
• Upgraded to notification-js@2.6.0
• Upgraded to opener-js@2.7.1
• Upgraded to shell-js@2.5.0
• Upgraded to updater-js@2.13.3
• Upgraded to http-js@2.8.2

barcode-scanner

[2.5.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

barcode-scanner-js

[2.5.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

biometric

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
• 9a74a78 (ci: only run what a change affects, consolidate jobs #3674) Fix compilation on iOS when the wry feature of tauri is not enabled by another crate.

biometric-js

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
• 9a74a78 (ci: only run what a change affects, consolidate jobs #3674) Fix compilation on iOS when the wry feature of tauri is not enabled by another crate.

clipboard-manager

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

clipboard-manager-js

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

fs

[2.7.0]

• a934743 (feat(fs): allow disabling the drag and drop scope extension #3637) Added the scopeDroppedPaths plugin config option (plugins > fs > scopeDroppedPaths in tauri.conf.json). Set it to false to stop adding the paths dropped onto any window to the fs scope, which otherwise gives every webview with an fs permission access to them (directories recursively). Defaults to true, the current behaviour.
• 085a028 (fix(fs): return an error when Android returns no file descriptor #3636) Fixed a panic on Android when a content provider returns no file descriptor for a content:// URI (e.g. virtual files). The fs command now fails with an error instead.
• f81f044 (fix(fs): read uncompressed Android assets from the cache copy #3635) Fixed reading uncompressed Android assets ($RESOURCE files such as images or audio that are stored uncompressed in the APK) returning the bytes of the APK instead of the asset. Assets are now always read from a copy in the app cache, like compressed ones.
• e03dca6 (fix(fs): accept absolute paths in the iOS security-scope commands #3628) startAccessingSecurityScopedResource and stopAccessingSecurityScopedResource now accept absolute paths on iOS, as documented, instead of silently doing nothing unless given a file:// URL.
• 5de7ebf (fix(fs): do not deserialize customFlags from IPC #3634) Security: the open command no longer accepts a customFlags option from the webview. It was not part of the JavaScript types and let the webview pass arbitrary open(2) flags (e.g. O_TRUNC) to files it may only read. OpenOptionsExt::custom_flags still works from Rust.
• 5e6c023 (fix(fs): cap the buffer allocated by the read command #3626) FileHandle.read no longer allocates a buffer of the requested size up front: the length is capped to the rest of the file (64 MiB for files of unknown size), an allocation failure is reported as an error instead of aborting the app, and only the bytes that were read are sent back to the webview.
• 3a90001 (fix(fs): resolve symlinks of missing paths before checking the scope #3627) Security: the fs scope check now resolves symlinks in the ancestors of paths that do not exist yet, and resolves relative symlink targets against the link's directory instead of the process working directory. Previously a new file created below a symlinked directory inside the scope (writeFile, mkdir, create, rename, copyFile, ...) was written outside of the scope. Deny patterns now also apply to the path as given, so they can name a symlink, and a path whose symlinks cannot be resolved (e.g. a loop) is rejected.
• 77d00a4 (fix(fs): reject negative offsets when seeking from the start #3633) FileHandle.seek now rejects a negative offset with SeekMode.Start instead of seeking to a huge position.
• 5c144e7 (fix(fs): only split UTF-16 lines on aligned line feeds #3631) Fixed readTextFileLines with a UTF-16 encoding splitting lines on a 0x0A 0x00 (LE) or 0x00 0x0A (BE) byte sequence that is not aligned on a code unit, e.g. ਗĀ, which garbled every following line.
• dcc8cb0 (fix(fs): truncate the file when writeFile writes a stream #3629) Fixed writeFile with a ReadableStream leaving the end of the previous contents in place when the new data is shorter. The file is now truncated first unless append is set, like when writing a buffer.

fs-js

[2.7.0]

• a934743 (feat(fs): allow disabling the drag and drop scope extension #3637) Added the scopeDroppedPaths plugin config option (plugins > fs > scopeDroppedPaths in tauri.conf.json). Set it to false to stop adding the paths dropped onto any window to the fs scope, which otherwise gives every webview with an fs permission access to them (directories recursively). Defaults to true, the current behaviour.
• 085a028 (fix(fs): return an error when Android returns no file descriptor #3636) Fixed a panic on Android when a content provider returns no file descriptor for a content:// URI (e.g. virtual files). The fs command now fails with an error instead.
• f81f044 (fix(fs): read uncompressed Android assets from the cache copy #3635) Fixed reading uncompressed Android assets ($RESOURCE files such as images or audio that are stored uncompressed in the APK) returning the bytes of the APK instead of the asset. Assets are now always read from a copy in the app cache, like compressed ones.
• e03dca6 (fix(fs): accept absolute paths in the iOS security-scope commands #3628) startAccessingSecurityScopedResource and stopAccessingSecurityScopedResource now accept absolute paths on iOS, as documented, instead of silently doing nothing unless given a file:// URL.
• 5de7ebf (fix(fs): do not deserialize customFlags from IPC #3634) Security: the open command no longer accepts a customFlags option from the webview. It was not part of the JavaScript types and let the webview pass arbitrary open(2) flags (e.g. O_TRUNC) to files it may only read. OpenOptionsExt::custom_flags still works from Rust.
• 5e6c023 (fix(fs): cap the buffer allocated by the read command #3626) FileHandle.read no longer allocates a buffer of the requested size up front: the length is capped to the rest of the file (64 MiB for files of unknown size), an allocation failure is reported as an error instead of aborting the app, and only the bytes that were read are sent back to the webview.
• 3a90001 (fix(fs): resolve symlinks of missing paths before checking the scope #3627) Security: the fs scope check now resolves symlinks in the ancestors of paths that do not exist yet, and resolves relative symlink targets against the link's directory instead of the process working directory. Previously a new file created below a symlinked directory inside the scope (writeFile, mkdir, create, rename, copyFile, ...) was written outside of the scope. Deny patterns now also apply to the path as given, so they can name a symlink, and a path whose symlinks cannot be resolved (e.g. a loop) is rejected.
• 77d00a4 (fix(fs): reject negative offsets when seeking from the start #3633) FileHandle.seek now rejects a negative offset with SeekMode.Start instead of seeking to a huge position.
• 5c144e7 (fix(fs): only split UTF-16 lines on aligned line feeds #3631) Fixed readTextFileLines with a UTF-16 encoding splitting lines on a 0x0A 0x00 (LE) or 0x00 0x0A (BE) byte sequence that is not aligned on a code unit, e.g. ਗĀ, which garbled every following line.
• dcc8cb0 (fix(fs): truncate the file when writeFile writes a stream #3629) Fixed writeFile with a ReadableStream leaving the end of the previous contents in place when the new data is shorter. The file is now truncated first unless append is set, like when writing a buffer.

dialog

[2.8.2]

• 8489575 (fix(dialog): browser confirm fails with command not found #3665) Fix browser confirm fails with Uncaught dialog.confirm not allowed. Command not found
• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

Dependencies

• Upgraded to fs@2.7.0

dialog-js

[2.8.2]

• 8489575 (fix(dialog): browser confirm fails with command not found #3665) Fix browser confirm fails with Uncaught dialog.confirm not allowed. Command not found
• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

Dependencies

• Upgraded to fs-js@2.7.0

geolocation

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

geolocation-js

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

global-shortcut

[2.4.1]

• fc18d05 (fix(global-shortcut): release the shortcuts lock before running handlers #3683) Release the shortcuts lock before running shortcut handlers, so a handler that calls back into the plugin, or pumps messages that dispatch another shortcut event, no longer deadlocks the app.

global-shortcut-js

[2.4.1]

• fc18d05 (fix(global-shortcut): release the shortcuts lock before running handlers #3683) Release the shortcuts lock before running shortcut handlers, so a handler that calls back into the plugin, or pumps messages that dispatch another shortcut event, no longer deadlocks the app.

opener

[2.7.1]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

opener-js

[2.7.1]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

haptics

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

haptics-js

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

http

[2.8.2]

Dependencies

• Upgraded to fs@2.7.0

http-js

[2.8.2]

Dependencies

• Upgraded to fs-js@2.7.0

log

[2.10.1]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

log-js

[2.10.1]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

nfc

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
• 9a74a78 (ci: only run what a change affects, consolidate jobs #3674) Fix compilation on iOS when the wry feature of tauri is not enabled by another crate.

nfc-js

[2.4.2]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
• 9a74a78 (ci: only run what a change affects, consolidate jobs #3674) Fix compilation on iOS when the wry feature of tauri is not enabled by another crate.

notification

[2.6.0]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

feat

• 4638151 (feat(notification): report actions on desktop #3671) Report actions on desktop: a click on a notification (tap) or on one of the actions of its action type reaches onAction and the new Rust Notification::on_action, which also works on mobile. registerActionTypes, removeActive (Linux and the BSDs) and the listener commands no longer fail with "command not found" on desktop.

  The onAction callback is now typed with the new ActionPerformed interface, which is what every platform sends, instead of Options. Callbacks annotated with Options must be updated.

notification-js

[2.6.0]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

feat

• 4638151 (feat(notification): report actions on desktop #3671) Report actions on desktop: a click on a notification (tap) or on one of the actions of its action type reaches onAction and the new Rust Notification::on_action, which also works on mobile. registerActionTypes, removeActive (Linux and the BSDs) and the listener commands no longer fail with "command not found" on desktop.

  The onAction callback is now typed with the new ActionPerformed interface, which is what every platform sends, instead of Options. Callbacks annotated with Options must be updated.

persisted-scope

[2.4.1]

Dependencies

• Upgraded to fs@2.7.0

shell

[2.5.0]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
• a8acd17 (feat(shell): add process group spawn option (fix #1332) #3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

shell-js

[2.5.0]

• 42ae8b4 (fix(ios): make init_plugin_* entry points public so release builds link on Xcode 27 #3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.
• a8acd17 (feat(shell): add process group spawn option (fix #1332) #3351) Add processGroup option to spawn commands in a new process group (POSIX) or job object (Windows), allowing the entire process tree to be killed when calling kill() on the child process.

single-instance

[2.5.3]

• 818d2e0 (fix(single-instance): limit second instance's wait on Windows #3645) On Windows, a second instance no longer waits indefinitely for a first instance that stopped processing messages: it stops waiting after 10 seconds and exits. The first instance may still receive the arguments once it resumes processing messages.
• 323fe80 (fix(single-instance): forward non-Unicode arguments and cwd #3644) A second instance no longer panics when a command-line argument is not valid Unicode: such an argument is forwarded with its invalid parts replaced by U+FFFD. A working directory that is not valid Unicode is now forwarded the same way instead of as an empty string.

updater

[2.13.3]

• 8163188 (chore(deps): update rust crate minisign-verify to 0.3 #3658) Update minisign-verify to 0.3, which rejects signatures with a non-canonical Ed25519 S value. The Error::Minisign variant now wraps minisign_verify 0.3's Error, and its message reads like "The signature verification failed" instead of the variant name (InvalidSignature).

updater-js

[2.13.3]

• 8163188 (chore(deps): update rust crate minisign-verify to 0.3 #3658) Update minisign-verify to 0.3, which rejects signatures with a non-canonical Ed25519 S value. The Error::Minisign variant now wraps minisign_verify 0.3's Error, and its message reads like "The signature verification failed" instead of the variant name (InvalidSignature).