Cargo Audit
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 1243 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1217 crate dependencies)
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate: paste
Version: 1.0.15
Warning: unmaintained
Title: paste - no longer maintained
Date: 2024-10-07
ID: RUSTSEC-2024-0436
URL: https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate: rustls-pemfile
Version: 2.2.0
Warning: unmaintained
Title: rustls-pemfile is unmaintained
Date: 2025-11-28
ID: RUSTSEC-2025-0134
URL: https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate: rustybuzz
Version: 0.20.1
Warning: unmaintained
Title: `rustybuzz` is unmaintained
Date: 2026-07-11
ID: RUSTSEC-2026-0206
URL: https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate: ttf-parser
Version: 0.25.1
Warning: unmaintained
Title: `ttf-parser` is unmaintained
Date: 2026-06-28
ID: RUSTSEC-2026-0192
URL: https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 5 allowed warnings found
[3.0.0-alpha.0]
New Features
-
364a0e711(#15882)tauri-buildno longer copies the configured resources to the cargo target directory; on desktop, unbundled apps (tauri dev/cargo run) now resolve resources at runtime from their source paths instead. This means editing a resource file no longer triggers a full application rebuild, and changes to plain relative resources are picked up live by the running app.- When all configured resources are plain relative paths (e.g.
"assets/*"), the resource directory resolves to the directory containingtauri.conf.jsonand files are read directly from the sources. - When resources are remapped (map notation,
../or absolute paths), the bundle layout is mirrored next to the executable on the first resource directory access of each run.
The
bundle > resourcesconfiguration is now part of the config embedded bygenerate_context!, where it was previously stripped. - When all configured resources are plain relative paths (e.g.
Performance Improvements
-
fb7bdd95bReduce the size of the resolved ACL embedded in the app by storing the autogenerated command permissions as acommandslist on the plugin/app manifest instead of two explicit permissions (allow-$commandanddeny-$command) per command. Theallow-$command/deny-$commandpermissions are now materialized on demand when resolving the ACL.The application manifest also gains implicit
allow-*anddeny-*permissions that allow or deny all of its commands through a single resolved entry, so capabilities no longer need to list every command individually.
What's Changed
Dependencies
- Upgraded to
tauri-utils@3.0.0-alpha.0
Cargo Publish
Updating crates.io index
Packaging tauri-codegen v3.0.0-alpha.0 (/home/runner/work/tauri/tauri/crates/tauri-codegen)
Updating crates.io index
Packaged 13 files, 123.9KiB (36.4KiB compressed)
Verifying tauri-codegen v3.0.0-alpha.0 (/home/runner/work/tauri/tauri/crates/tauri-codegen)
Downloading crates ...
Downloaded ref-cast-impl v1.0.27
Downloaded ref-cast v1.0.27
Downloaded anyhow v1.0.104
Downloaded rustc_version v0.4.1
Downloaded phf_shared v0.13.1
Downloaded schemars v0.9.0
Downloaded schemars_derive v1.2.2
Downloaded quick-xml v0.42.0
Downloaded markup5ever v0.39.0
Downloaded tauri-utils v3.0.0-alpha.0
Downloaded html5ever v0.39.0
Downloaded indexmap v1.9.3
Downloaded cfb v0.14.0
Downloaded darling v0.24.1
Downloaded derive_more v2.1.1
Downloaded dom_query v0.28.0
Downloaded jiff-core v0.1.0
Downloaded bit-vec v0.8.0
Downloaded iana-time-zone v0.1.65
Downloaded serde_with_macros v3.23.0
Downloaded siphasher v1.0.3
Downloaded json-patch v4.2.0
Downloaded web-time v1.1.0
Downloaded typeid v1.0.3
Downloaded darling_core v0.24.1
Downloaded string_cache_codegen v0.6.1
Downloaded tendril v0.5.1
Downloaded phf_macros v0.13.1
Downloaded erased-serde v0.4.10
Downloaded ico v0.5.0
Downloaded cargo-platform v0.1.9
Downloaded cargo_metadata v0.19.2
Downloaded precomputed-hash v0.1.1
Downloaded fdeflate v0.3.7
Downloaded selectors v0.38.0
Downloaded serde-untagged v0.1.9
Downloaded new_debug_unreachable v1.0.6
Downloaded sha2 v0.10.9
Downloaded toml v1.1.5+spec-1.1.0
Downloaded bitflags v2.13.1
Downloaded serde_derive_internals v0.30.0
Downloaded urlpattern v0.6.0
Downloaded hex v0.4.3
Downloaded bit-set v0.8.0
Downloaded phf v0.13.1
Downloaded num-traits v0.2.19
Downloaded png v0.17.16
Downloaded png v0.18.1
Downloaded servo_arc v0.4.3
Downloaded ctor v1.0.13
Downloaded dtoa-short v0.3.5
Downloaded glob v0.3.4
Downloaded uuid v1.26.0
Downloaded web_atoms v0.2.6
Downloaded darling_macro v0.24.1
Downloaded dyn-clone v1.0.20
Downloaded phf_codegen v0.13.1
Downloaded phf_generator v0.13.1
Downloaded serde_with v3.23.0
Downloaded string_cache v0.9.0
Downloaded bs58 v0.5.1
Downloaded cssparser v0.37.0
Downloaded derive_more-impl v2.1.1
Downloaded infer v0.22.0
Downloaded plist v1.10.1
Downloaded dtoa v1.0.11
Downloaded jsonptr v0.7.1
Downloaded chrono v0.4.45
Downloaded schemars v1.2.2
Downloaded crc32fast v1.5.1
Downloaded cssparser-macros v0.7.1
Downloaded smallvec v1.16.0
Downloaded hashbrown v0.12.3
Downloaded jiff v0.2.35
Compiling proc-macro2 v1.0.107
Compiling quote v1.0.47
Compiling unicode-ident v1.0.24
Compiling serde_core v1.0.229
Compiling cfg-if v1.0.4
Compiling stable_deref_trait v1.2.1
Compiling siphasher v1.0.3
Compiling phf_shared v0.13.1
Compiling fastrand v2.5.0
Compiling smallvec v1.16.0
Compiling phf_generator v0.13.1
Compiling libc v0.2.189
Compiling memchr v2.8.3
Compiling syn v3.0.5
Compiling syn v2.0.119
Compiling serde v1.0.229
Compiling phf_codegen v0.13.1
Compiling litemap v0.8.3
Compiling writeable v0.6.4
Compiling itoa v1.0.18
Compiling utf8_iter v1.0.4
Compiling parking_lot_core v0.9.12
Compiling icu_properties_data v2.3.0
Compiling icu_normalizer_data v2.3.0
Compiling scopeguard v1.2.0
Compiling zmij v1.0.23
Compiling new_debug_unreachable v1.0.6
Compiling lock_api v0.4.14
Compiling string_cache_codegen v0.6.1
Compiling precomputed-hash v0.1.1
Compiling version_check v0.9.5
Compiling getrandom v0.4.3
Compiling serde_json v1.0.151
Compiling simd-adler32 v0.3.10
Compiling generic-array v0.14.7
Compiling web_atoms v0.2.6
Compiling parking_lot v0.12.5
Compiling synstructure v0.13.2
Compiling crc32fast v1.5.1
Compiling strsim v0.11.1
Compiling ident_case v1.0.1
Compiling adler2 v2.0.1
Compiling darling_core v0.24.1
Compiling zerovec-derive v0.11.6
Compiling zerofrom-derive v0.1.7
Compiling yoke-derive v0.8.2
Compiling displaydoc v0.2.7
Compiling serde_derive v1.0.229
Compiling zerofrom v0.1.8
Compiling phf_macros v0.13.1
Compiling yoke v0.8.3
Compiling zerovec v0.11.8
Compiling zerotrie v0.2.5
Compiling tinystr v0.8.4
Compiling potential_utf v0.1.6
Compiling icu_locale_core v2.3.0
Compiling icu_collections v2.3.0
Compiling phf v0.13.1
Compiling string_cache v0.9.0
Compiling thiserror v2.0.20
Compiling log v0.4.34
Compiling icu_provider v2.3.1
Compiling percent-encoding v2.3.2
Compiling typenum v1.20.1
Compiling icu_normalizer v2.3.0
Compiling icu_properties v2.3.0
Compiling typeid v1.0.3
Compiling dtoa v1.0.11
Compiling dtoa-short v0.3.5
Compiling form_urlencoded v1.2.2
Compiling uuid v1.26.0
Compiling idna_adapter v1.2.2
Compiling idna v1.1.0
Compiling darling_macro v0.24.1
Compiling derive_more-impl v2.1.1
Compiling thiserror-impl v2.0.20
Compiling cssparser-macros v0.7.1
Compiling miniz_oxide v0.9.1
Compiling tendril v0.5.1
Compiling selectors v0.38.0
Compiling aho-corasick v1.1.5
Compiling regex-syntax v0.8.11
Compiling bitflags v2.13.1
Compiling ref-cast v1.0.27
Compiling erased-serde v0.4.10
Compiling camino v1.2.5
Compiling flate2 v1.1.10
Compiling markup5ever v0.39.0
Compiling derive_more v2.1.1
Compiling cssparser v0.37.0
Compiling darling v0.24.1
Compiling url v2.5.8
Compiling regex-automata v0.4.18
Compiling ref-cast-impl v1.0.27
Compiling miniz_oxide v0.8.9
Compiling fdeflate v0.3.7
Compiling serde_derive_internals v0.30.0
Compiling servo_arc v0.4.3
Compiling web-time v1.1.0
Compiling equivalent v1.0.2
Compiling anyhow v1.0.104
Compiling winnow v1.0.4
Compiling deranged v0.5.8
Compiling num-conv v0.2.2
Compiling bit-vec v0.8.0
Compiling rustc-hash v2.1.3
Compiling fnv v1.0.7
Compiling time-core v0.1.9
Compiling hashbrown v0.17.1
Compiling powerfmt v0.2.0
Compiling cfb v0.14.0
Compiling indexmap v2.14.2
Compiling time v0.3.55
Compiling bit-set v0.8.0
Compiling regex v1.13.1
Compiling schemars_derive v1.2.2
Compiling toml_parser v1.1.3+spec-1.1.0
Compiling serde_with_macros v3.23.0
Compiling html5ever v0.39.0
Compiling block-buffer v0.10.4
Compiling crypto-common v0.1.7
Compiling jsonptr v0.7.1
Compiling cargo-platform v0.1.9
Compiling serde_spanned v1.1.1
Compiling semver v1.0.28
Compiling toml_datetime v1.1.1+spec-1.1.0
Compiling quick-xml v0.42.0
Compiling dyn-clone v1.0.20
Compiling bitflags v1.3.2
Compiling bytes v1.12.1
Compiling toml_writer v1.1.2+spec-1.1.0
Compiling foldhash v0.2.0
Compiling base64 v0.23.1
Compiling toml v1.1.5+spec-1.1.0
Compiling http v1.5.0
Compiling plist v1.10.1
Compiling dom_query v0.28.0
Compiling png v0.17.16
Compiling schemars v1.2.2
Compiling cargo_metadata v0.19.2
Compiling serde_with v3.23.0
Compiling json-patch v4.2.0
Compiling digest v0.10.7
Compiling serde-untagged v0.1.9
Compiling urlpattern v0.6.0
Compiling infer v0.22.0
Compiling byteorder v1.5.0
Compiling dunce v1.0.5
Compiling ctor v1.0.13
Compiling glob v0.3.4
Compiling cpufeatures v0.2.17
Compiling same-file v1.0.6
Compiling walkdir v2.5.0
Compiling tauri-utils v3.0.0-alpha.0
Compiling sha2 v0.10.9
Compiling ico v0.5.0
Compiling png v0.18.1
Compiling base64 v0.22.1
Compiling tauri-codegen v3.0.0-alpha.0 (/home/runner/work/tauri/tauri/target/package/tauri-codegen-3.0.0-alpha.0)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 28.11s
Uploading tauri-codegen v3.0.0-alpha.0 (/home/runner/work/tauri/tauri/crates/tauri-codegen)
Uploaded tauri-codegen v3.0.0-alpha.0 to registry `crates-io`
note: waiting for tauri-codegen v3.0.0-alpha.0 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
Published tauri-codegen v3.0.0-alpha.0 at registry `crates-io`