Cargo Audit
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 1314 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1045 crate dependencies)
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate: paste
Version: 1.0.15
Warning: unmaintained
Title: paste - no longer maintained
Date: 2024-10-07
ID: RUSTSEC-2024-0436
URL: https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate: rustybuzz
Version: 0.20.1
Warning: unmaintained
Title: `rustybuzz` is unmaintained
Date: 2026-07-11
ID: RUSTSEC-2026-0206
URL: https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate: ttf-parser
Version: 0.25.1
Warning: unmaintained
Title: `ttf-parser` is unmaintained
Date: 2026-06-28
ID: RUSTSEC-2026-0192
URL: https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 4 allowed warnings found
[2.7.3]
Enhancements
e140a1c8f(#16280) Build-time ACL validation now suggests the closest known identifier when a capability references an unknown permission that looks like a typo of an existing one, for examplePermission fs:allow-read-text-fil not found (did you mean "fs:allow-read-text-file"?), expected one of .... Typos in the plugin namespace and a missingallow-prefix are also covered; unrelated identifiers keep the previous message.
Bug Fixes
225fb205a(#16247) Switch back tostatic_vcruntimecrate, this fixes a linking error when the crate usingtauri_build::buildis used as library.
Dependencies
- Upgraded to
tauri-utils@2.10.2 - Upgraded to
tauri-codegen@2.7.3
Cargo Publish
Updating crates.io index
Packaging tauri-build v2.7.3 (/home/runner/work/tauri/tauri/crates/tauri-build)
Updating crates.io index
Packaged 14 files, 160.9KiB (43.8KiB compressed)
Verifying tauri-build v2.7.3 (/home/runner/work/tauri/tauri/crates/tauri-build)
Downloading crates ...
Downloaded embed-resource v3.0.9
Downloaded cargo_toml v1.0.0
Downloaded static_vcruntime v3.0.0
Downloaded tauri-winres v0.3.6
Compiling darling_core v0.23.0
Compiling find-msvc-tools v0.1.6
Compiling shlex v1.3.0
Compiling rustc_version v0.4.1
Compiling cc v1.2.51
Compiling tauri-utils v2.10.2
Compiling cargo_toml v1.0.0
Compiling static_vcruntime v3.0.0
Compiling embed-resource v3.0.9
Compiling tauri-winres v0.3.6
Compiling darling_macro v0.23.0
Compiling darling v0.23.0
Compiling serde_with_macros v3.21.0
Compiling serde_with v3.21.0
Compiling tauri-build v2.7.3 (/home/runner/work/tauri/tauri/target/package/tauri-build-2.7.3)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 12.57s
Uploading tauri-build v2.7.3 (/home/runner/work/tauri/tauri/crates/tauri-build)
Uploaded tauri-build v2.7.3 to registry `crates-io`
note: waiting for tauri-build v2.7.3 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
warning: spurious network error (3 tries remaining): [16] Error in the HTTP2 framing layer
Published tauri-build v2.7.3 at registry `crates-io`