Cargo Audit
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 1271 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1091 crate dependencies)
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate: paste
Version: 1.0.15
Warning: unmaintained
Title: paste - no longer maintained
Date: 2024-10-07
ID: RUSTSEC-2024-0436
URL: https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate: rustls-pemfile
Version: 2.2.0
Warning: unmaintained
Title: rustls-pemfile is unmaintained
Date: 2025-11-28
ID: RUSTSEC-2025-0134
URL: https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate: rustybuzz
Version: 0.20.1
Warning: unmaintained
Title: `rustybuzz` is unmaintained
Date: 2026-07-11
ID: RUSTSEC-2026-0206
URL: https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate: ttf-parser
Version: 0.25.1
Warning: unmaintained
Title: `ttf-parser` is unmaintained
Date: 2026-06-28
ID: RUSTSEC-2026-0192
URL: https://rustsec.org/advisories/RUSTSEC-2026-0192
warning: 5 allowed warnings found
[2.10.0]
New Features
3f62c70d6(#13848) AddWebviewBuilder::limit_navigations_to_app_bound_domains,WebviewWindowBuilder::limit_navigations_to_app_bound_domains, and limitNavigationsToAppBoundDomains to tauri.config.json.7dbfc1fe5(#14620) Added theapp > appDirectoriesOverrideconfig to override the directories returned by theapp_*_dirpath APIs, either with a single root directory or per directory. This lets apps keep all of their data, including the data of Tauri itself and of plugins that use these APIs, in a single place of their choosing, such as next to the executable for portable apps. The override can also be set at runtime throughContext::config_mut.f6c1eb253(#15401) Addedbundle.windows.bundleVCRuntimeto copy the Visual C++ runtime DLLs into Windows MSI and NSIS installers. The bundler locates the runtime throughVCTOOLS_REDIST_DIRor the bundledvswhere.exe.d203f74a2(#15274) AddedImage::from_app_icon_resourceandImage::from_icon_resourceon Windows for loading images from icon resources embedded in the executable (identified by anIconResourceid or name), and the defaultdefault_window_iconfromtauri::generate_contextmacro is now loaded usingfrom_app_icon_resource. The resource idtauri-buildembeds the application icon with is exposed astauri_utils::platform::WINDOWS_APP_ICON_RESOURCE_ID.29265557c(#15410) Addedapp > windows > noRedirectionBitmapconfig option to disable the window redirection bitmap on Windows.023fe7f59(#15291) AddedResolved::resolve_with_base_scope_idto resolve an ACL with command scope ids assigned after a given value, so the result can be merged into an already resolved ACL without colliding scope ids.f6c1eb253(#15401) Addedbuild.windows.staticVCRuntimeto control MSVC static runtime linking. TheSTATIC_VCRUNTIMEenvironment variable is now deprecated and emits a migration warning when used.
Enhancements
ca160ad48(#15895)tauri buildnow warns whenproductNameis still set to the defaulttauri-app, since it names the generated bundles and is written into install paths and metadata that are expected to be unique to your application. The config documentation forproductNamenow lists what the field controls on each platform, andidentifier's documentation notes that the default value is rejected.19215f638(#15629) Emit acargo:rerun-if-changedfor each resource directory (and glob base directory), so that adding or removing a file inside a resource directory re-runs the build script and copies the new files. Previously only the individual files present at build time were watched, so newly added files were silently ignored until an unrelated rebuild.4a5065653(#14454) AddedRegularandClearLiquid Glass window effects, and theinteractivewindow effects option (macOS 27.0+) that enables the glass' visual response to user interactions.459fc315e(#15711) Fix different build and runtime debug assertion profiles on the tauri-utils crate can resulting in compilation errors.
Bug Fixes
3f6701bfc(#16069) Addedadditional-watch-foldersas an alias for thebuild > additionalWatchFoldersconfiguration value, so the kebab-case spelling that matches the camelCase key is accepted inTauri.toml. The previousadditional-watch-directoriesalias keeps working.29c87c3d3(#15777) Serialize the CSP directive map, header source maps and plugin config with sorted keys so writing the processed config (e.g. thetauri.conf.jsonembedded in Android/iOS projects) is deterministic across builds.3f40a35f5(#16070) Fixed header values configured with an object inapp > security > headersbeing serialized in a random order, which made the resulting header value differ between runs. Thekey valuepairs are now always sorted by key, matching the ordering already used when the configuration is serialized.4a2c4803f(#16071) Fixed theapp > security > headers > Permissions-Policyconfiguration being sent as a header namedPermission-Policy, which is not a real HTTP header, so the policy had no effect. The header is now correctly namedPermissions-Policy.
What's Changed
Dependencies
6a7afc27c(#16053) Updated brotli to v9e9e6a5eef(#15677) Updateserial_testto 3.5 to pull in the updatedsccand fix RUSTSEC advisory8a97d387a(#15352) Updatedctorcrate to19e9a54dea(#15890) Update swift-rs to support builds using Xcode 27.7cc68e74f(#15307) Updateddom_querydependency to 0.28.0
Breaking Changes
4a5065653(#14454) TheWindowEffectenum is now#[non_exhaustive]so new effects can be added without a breaking change. Exhaustivematchstatements on it must add a wildcard arm.
Cargo Publish
Updating crates.io index
Updating git repository `https://github.com/tauri-apps/schemars.git`
Packaging tauri-utils v2.10.0 (/home/runner/work/tauri/tauri/crates/tauri-utils)
Updating crates.io index
Packaged 34 files, 638.6KiB (155.7KiB compressed)
Verifying tauri-utils v2.10.0 (/home/runner/work/tauri/tauri/crates/tauri-utils)
Downloading crates ...
Downloaded autocfg v1.4.0
Downloaded potential_utf v0.1.4
Downloaded anyhow v1.0.103
Downloaded bs58 v0.5.1
Downloaded indexmap v1.9.3
Downloaded bytes v1.11.1
Downloaded icu_collections v2.1.1
Downloaded icu_normalizer v2.1.1
Downloaded toml_parser v1.0.9+spec-1.1.0
Downloaded aho-corasick v1.1.3
Downloaded icu_properties_data v2.1.2
Downloaded plist v1.10.0
Downloaded quote v1.0.46
Downloaded urlpattern v0.6.0
Downloaded serde-untagged v0.1.6
Downloaded stable_deref_trait v1.2.0
Downloaded phf_macros v0.13.1
Downloaded toml_datetime v1.0.0+spec-1.1.0
Downloaded zerofrom v0.1.5
Downloaded phf_generator v0.13.1
Downloaded toml_writer v1.0.6+spec-1.1.0
Downloaded idna_adapter v1.2.1
Downloaded serde_core v1.0.228
Downloaded yoke-derive v0.8.2
Downloaded web-time v1.1.0
Downloaded ryu v1.0.18
Downloaded siphasher v1.0.1
Downloaded zerovec v0.11.5
Downloaded zerovec-derive v0.11.3
Downloaded ref-cast v1.0.23
Downloaded tinystr v0.8.2
Downloaded equivalent v1.0.1
Downloaded tinyvec_macros v0.1.1
Downloaded darling_core v0.23.0
Downloaded fastrand v2.3.0
Downloaded json-patch v4.2.0
Downloaded zerofrom-derive v0.1.5
Downloaded proc-macro2 v1.0.106
Downloaded thiserror-impl v2.0.12
Downloaded darling v0.23.0
Downloaded jsonptr v0.7.1
Downloaded synstructure v0.13.1
Downloaded zerotrie v0.2.3
Downloaded icu_provider v2.1.1
Downloaded litemap v0.8.2
Downloaded memchr v2.8.2
Downloaded yoke v0.8.1
Downloaded icu_properties v2.1.2
Downloaded serde_derive v1.0.228
Downloaded unicode-ident v1.0.14
Downloaded winnow v0.7.14
Downloaded ctor v1.0.7
Downloaded erased-serde v0.4.9
Downloaded hashbrown v0.12.3
Downloaded icu_locale_core v2.1.1
Downloaded icu_normalizer_data v2.1.1
Downloaded indexmap v2.11.4
Downloaded log v0.4.29
Downloaded schemars v1.2.2
Downloaded http v1.3.1
Downloaded serde_json v1.0.145
Downloaded time v0.3.51
Downloaded cfb v0.14.0
Downloaded regex v1.11.1
Downloaded serde_with v3.21.0
Downloaded ref-cast-impl v1.0.23
Downloaded serde_spanned v1.0.4
Downloaded typeid v1.0.2
Downloaded toml v1.0.6+spec-1.1.0
Downloaded infer v0.22.0
Downloaded hex v0.4.3
Downloaded phf_shared v0.13.1
Downloaded serde v1.0.228
Downloaded smallvec v1.15.2
Downloaded tinyvec v1.8.1
Downloaded dyn-clone v1.0.17
Downloaded time-macros v0.2.30
Downloaded displaydoc v0.2.5
Downloaded phf v0.13.1
Downloaded glob v0.3.4
Downloaded num-traits v0.2.19
Downloaded schemars v0.9.0
Downloaded writeable v0.6.3
Downloaded thiserror v2.0.12
Downloaded serde_with_macros v3.21.0
Downloaded syn v2.0.117
Downloaded iana-time-zone v0.1.61
Downloaded uuid v1.11.0
Downloaded darling_macro v0.23.0
Downloaded quick-xml v0.41.0
Downloaded chrono v0.4.41
Downloaded itoa v1.0.14
Compiling proc-macro2 v1.0.106
Compiling unicode-ident v1.0.14
Compiling quote v1.0.46
Compiling serde_core v1.0.228
Compiling stable_deref_trait v1.2.0
Compiling serde v1.0.228
Compiling memchr v2.8.2
Compiling writeable v0.6.3
Compiling litemap v0.8.2
Compiling icu_normalizer_data v2.1.1
Compiling icu_properties_data v2.1.2
Compiling syn v2.0.117
Compiling strsim v0.11.1
Compiling siphasher v1.0.1
Compiling smallvec v1.15.2
Compiling ident_case v1.0.1
Compiling typeid v1.0.2
Compiling serde_json v1.0.145
Compiling itoa v1.0.14
Compiling phf_shared v0.13.1
Compiling aho-corasick v1.1.3
Compiling erased-serde v0.4.9
Compiling regex-syntax v0.8.11
Compiling ryu v1.0.18
Compiling fnv v1.0.7
Compiling percent-encoding v2.3.2
Compiling fastrand v2.3.0
Compiling utf8_iter v1.0.4
Compiling thiserror v2.0.12
Compiling phf_generator v0.13.1
Compiling regex-automata v0.4.18
Compiling form_urlencoded v1.2.2
Compiling synstructure v0.13.1
Compiling darling_core v0.23.0
Compiling zerofrom-derive v0.1.5
Compiling yoke-derive v0.8.2
Compiling zerofrom v0.1.5
Compiling zerovec-derive v0.11.3
Compiling yoke v0.8.1
Compiling displaydoc v0.2.5
Compiling serde_derive v1.0.228
Compiling zerotrie v0.2.3
Compiling darling_macro v0.23.0
Compiling darling v0.23.0
Compiling thiserror-impl v2.0.12
Compiling zerovec v0.11.5
Compiling equivalent v1.0.1
Compiling hashbrown v0.16.1
Compiling tinystr v0.8.2
Compiling potential_utf v0.1.4
Compiling icu_locale_core v2.1.1
Compiling icu_collections v2.1.1
Compiling num-conv v0.2.2
Compiling winnow v0.7.14
Compiling powerfmt v0.2.0
Compiling time-core v0.1.9
Compiling icu_provider v2.1.1
Compiling icu_normalizer v2.1.1
Compiling icu_properties v2.1.2
Compiling anyhow v1.0.103
Compiling web-time v1.1.0
Compiling deranged v0.5.8
Compiling idna_adapter v1.2.1
Compiling uuid v1.11.0
Compiling idna v1.1.0
Compiling jsonptr v0.7.1
Compiling url v2.5.8
Compiling time v0.3.51
Compiling cfb v0.14.0
Compiling toml_parser v1.0.9+spec-1.1.0
Compiling indexmap v2.11.4
Compiling serde_with_macros v3.21.0
Compiling phf_macros v0.13.1
Compiling regex v1.11.1
Compiling toml_datetime v1.0.0+spec-1.1.0
Compiling serde_spanned v1.0.4
Compiling quick-xml v0.41.0
Compiling base64 v0.22.1
Compiling toml_writer v1.0.6+spec-1.1.0
Compiling bytes v1.11.1
Compiling toml v1.0.6+spec-1.1.0
Compiling phf v0.13.1
Compiling serde_with v3.21.0
Compiling http v1.3.1
Compiling plist v1.10.0
Compiling urlpattern v0.6.0
Compiling serde-untagged v0.1.6
Compiling infer v0.22.0
Compiling json-patch v4.2.0
Compiling semver v1.0.28
Compiling log v0.4.29
Compiling glob v0.3.4
Compiling ctor v1.0.7
Compiling dunce v1.0.5
Compiling tauri-utils v2.10.0 (/home/runner/work/tauri/tauri/target/package/tauri-utils-2.10.0)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 26.90s
Uploading tauri-utils v2.10.0 (/home/runner/work/tauri/tauri/crates/tauri-utils)
Uploaded tauri-utils v2.10.0 to registry `crates-io`
note: waiting for tauri-utils v2.10.0 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
Published tauri-utils v2.10.0 at registry `crates-io`