Cargo Audit
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 1271 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate: paste
Version: 1.0.15
Warning: unmaintained
Title: paste - no longer maintained
Date: 2024-10-07
ID: RUSTSEC-2024-0436
URL: https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate: rustls-pemfile
Version: 2.2.0
Warning: unmaintained
Title: rustls-pemfile is unmaintained
Date: 2025-11-28
ID: RUSTSEC-2025-0134
URL: https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate: rustybuzz
Version: 0.20.1
Warning: unmaintained
Title: `rustybuzz` is unmaintained
Date: 2026-07-11
ID: RUSTSEC-2026-0206
URL: https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate: ttf-parser
Version: 0.25.1
Warning: unmaintained
Title: `ttf-parser` is unmaintained
Date: 2026-06-28
ID: RUSTSEC-2026-0192
URL: https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 5 allowed warnings found
[2.7.0]
New Features
4e36f6725(#15306) AddedAttributes::config_pathto customize config path, deprecatedCodegenContext::config_pathin favor of thisf6c1eb253(#15401) Addedtauri_build::WindowsAttributes::static_vc_runtimeto control MSVC static runtime linking from build scripts.
Enhancements
19215f638(#15629) Emit acargo:rerun-if-changedfor each resource directory (and glob base directory), so that adding or removing a file inside a resource directory re-runs the build script and copies the new files. Previously only the individual files present at build time were watched, so newly added files were silently ignored until an unrelated rebuild.459fc315e(#15711) Fix different build and runtime debug assertion profiles on the tauri-utils crate can resulting in compilation errors.
Bug Fixes
d203f74a2(#15274) The.icofrombundle > icon(or theicons/icon.icofallback) embedded as the Windows application icon is now resolved relative to the config file directory instead of the build script's working directory, so it works withAttributes::config_path.dd6befda9(#15918) Emit an absolute path for the capabilities directorycargo:rerun-if-changed. Cargo resolves a relative watch path against the package owning the build script, while the capabilities glob is resolved against the process working directory, so callers that change the current directory beforetry_build/try_build_contextended up watching a non-existent directory — which is always dirty and re-ran the build script (and recompiled everything downstream) on every build.c0bd0d5a6(#15831) Resolve the target directory by walking up fromOUT_DIRto thebuilddirectory instead of assuming it is exactly three levels up. Recent nightly toolchains add another level toOUT_DIR, which made sidecars and resources land intarget/debug/buildinstead oftarget/debug.fc3a8108e(#16074) Validate the capabilities inlined in theapp > security > capabilitiesconfiguration value, which previously skipped the build script validation and only failed later with a genericfailed to resolve ACLpanic when a permission identifier was unknown.
What's Changed
2e6e33c85(#16029) Moved to edition 2024ce3f13b91(#15887) Lock unstable tauri crates to minor versions.1cffb01da(#13221) Set MSRV to 1.90.
Dependencies
- Upgraded to
tauri-utils@2.10.0 - Upgraded to
tauri-codegen@2.7.0 e2e585ad1(#15828) On Android, updated the template to use Gradle v9.6.1 (com.android.tools.build:gradlev9.3.1) and Kotlin v2.2. Usetauri android initto apply the change.2bb4fdbd0(#15592) Updatedcargo_tomlcrate to1
Cargo Publish
Updating crates.io index
Packaging tauri-build v2.7.0 (/home/runner/work/tauri/tauri/crates/tauri-build)
Updating crates.io index
Packaged 15 files, 153.0KiB (42.0KiB compressed)
Verifying tauri-build v2.7.0 (/home/runner/work/tauri/tauri/crates/tauri-build)
Downloading crates ...
Downloaded cargo_toml v1.0.0
Downloaded embed-resource v3.0.9
Downloaded tauri-winres v0.3.6
Compiling find-msvc-tools v0.1.6
Compiling shlex v1.3.0
Compiling rustc_version v0.4.1
Compiling tauri-utils v2.10.0
Compiling cc v1.2.51
Compiling cargo_toml v1.0.0
Compiling embed-resource v3.0.9
Compiling tauri-winres v0.3.6
Compiling tauri-build v2.7.0 (/home/runner/work/tauri/tauri/target/package/tauri-build-2.7.0)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 10.13s
Uploading tauri-build v2.7.0 (/home/runner/work/tauri/tauri/crates/tauri-build)
Uploaded tauri-build v2.7.0 to registry `crates-io`
note: waiting for tauri-build v2.7.0 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
Published tauri-build v2.7.0 at registry `crates-io`