github tauri-apps/tauri tauri-utils-v3.0.0-alpha.0
tauri-utils v3.0.0-alpha.0

Cargo Audit

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1243 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1217 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436

Crate:     rustls-pemfile
Version:   2.2.0
Warning:   unmaintained
Title:     rustls-pemfile is unmaintained
Date:      2025-11-28
ID:        RUSTSEC-2025-0134
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134

Crate:     rustybuzz
Version:   0.20.1
Warning:   unmaintained
Title:     `rustybuzz` is unmaintained
Date:      2026-07-11
ID:        RUSTSEC-2026-0206
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206

Crate:     ttf-parser
Version:   0.25.1
Warning:   unmaintained
Title:     `ttf-parser` is unmaintained
Date:      2026-06-28
ID:        RUSTSEC-2026-0192
URL:       https://rustsec.org/advisories/RUSTSEC-2026-0192

warning: 5 allowed warnings found

[3.0.0-alpha.0]

New Features

  • 364a0e711 (#15882) tauri-build no longer copies the configured resources to the cargo target directory; on desktop, unbundled apps (tauri dev / cargo run) now resolve resources at runtime from their source paths instead. This means editing a resource file no longer triggers a full application rebuild, and changes to plain relative resources are picked up live by the running app.

    • When all configured resources are plain relative paths (e.g. "assets/*"), the resource directory resolves to the directory containing tauri.conf.json and files are read directly from the sources.
    • When resources are remapped (map notation, ../ or absolute paths), the bundle layout is mirrored next to the executable on the first resource directory access of each run.

    The bundle > resources configuration is now part of the config embedded by generate_context!, where it was previously stripped.

Enhancements

  • 65792f536 Plugin and app build scripts now write the autogenerated command permissions to OUT_DIR instead of the crate's permissions/autogenerated folder, so they no longer need to be committed at the crate level. This applies to plugin crates (tauri-plugin) and the application manifest (tauri_build::AppManifest); inlined plugins (tauri_build::InlinedPlugin) already wrote them to OUT_DIR. For plugin crates, the human-readable permission documentation (reference.md) is still generated in permissions/autogenerated so it stays recoverable.

    Added tauri_utils::acl::build::collect_permission_files and tauri_utils::acl::build::define_permissions_from_files to allow merging permission files from multiple directories into a single permission file list.

Performance Improvements

  • fb7bdd95b Reduce the size of the resolved ACL embedded in the app by storing the autogenerated command permissions as a commands list on the plugin/app manifest instead of two explicit permissions (allow-$command and deny-$command) per command. The allow-$command/deny-$command permissions are now materialized on demand when resolving the ACL.

    The application manifest also gains implicit allow-* and deny-* permissions that allow or deny all of its commands through a single resolved entry, so capabilities no longer need to list every command individually.

What's Changed

Cargo Publish

Updating crates.io index
   Packaging tauri-utils v3.0.0-alpha.0 (/home/runner/work/tauri/tauri/crates/tauri-utils)
    Updating crates.io index
    Packaged 34 files, 626.4KiB (151.8KiB compressed)
   Verifying tauri-utils v3.0.0-alpha.0 (/home/runner/work/tauri/tauri/crates/tauri-utils)
 Downloading crates ...
  Downloaded cfb v0.14.0
  Downloaded bs58 v0.5.1
  Downloaded anyhow v1.0.104
  Downloaded darling_macro v0.24.1
  Downloaded typeid v1.0.3
  Downloaded hex v0.4.3
  Downloaded ref-cast v1.0.27
  Downloaded siphasher v1.0.3
  Downloaded dyn-clone v1.0.20
  Downloaded phf_generator v0.13.1
  Downloaded phf_shared v0.13.1
  Downloaded glob v0.3.4
  Downloaded ref-cast-impl v1.0.27
  Downloaded erased-serde v0.4.10
  Downloaded json-patch v4.2.0
  Downloaded phf_macros v0.13.1
  Downloaded smallvec v1.16.0
  Downloaded infer v0.22.0
  Downloaded serde-untagged v0.1.9
  Downloaded serde_with_macros v3.23.0
  Downloaded iana-time-zone v0.1.65
  Downloaded urlpattern v0.6.0
  Downloaded web-time v1.1.0
  Downloaded phf v0.13.1
  Downloaded plist v1.10.1
  Downloaded indexmap v1.9.3
  Downloaded ctor v1.0.13
  Downloaded toml v1.1.5+spec-1.1.0
  Downloaded jsonptr v0.7.1
  Downloaded darling v0.24.1
  Downloaded num-traits v0.2.19
  Downloaded uuid v1.26.0
  Downloaded schemars v1.2.2
  Downloaded schemars v0.9.0
  Downloaded hashbrown v0.12.3
  Downloaded chrono v0.4.45
  Downloaded darling_core v0.24.1
  Downloaded jiff-core v0.1.0
  Downloaded quick-xml v0.42.0
  Downloaded serde_with v3.23.0
  Downloaded jiff v0.2.35
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.24
   Compiling serde_core v1.0.229
   Compiling stable_deref_trait v1.2.1
   Compiling memchr v2.8.3
   Compiling litemap v0.8.3
   Compiling writeable v0.6.4
   Compiling utf8_iter v1.0.4
   Compiling icu_normalizer_data v2.3.0
   Compiling syn v3.0.5
   Compiling syn v2.0.119
   Compiling serde v1.0.229
   Compiling icu_properties_data v2.3.0
   Compiling smallvec v1.16.0
   Compiling ident_case v1.0.1
   Compiling zmij v1.0.23
   Compiling siphasher v1.0.3
   Compiling strsim v0.11.1
   Compiling serde_json v1.0.151
   Compiling typeid v1.0.3
   Compiling itoa v1.0.18
   Compiling phf_shared v0.13.1
   Compiling aho-corasick v1.1.5
   Compiling fastrand v2.5.0
   Compiling percent-encoding v2.3.2
   Compiling thiserror v2.0.20
   Compiling erased-serde v0.4.10
   Compiling regex-syntax v0.8.11
   Compiling synstructure v0.13.2
   Compiling zerovec-derive v0.11.6
   Compiling displaydoc v0.2.7
   Compiling zerofrom-derive v0.1.7
   Compiling yoke-derive v0.8.2
   Compiling serde_derive v1.0.229
   Compiling darling_core v0.24.1
   Compiling zerofrom v0.1.8
   Compiling thiserror-impl v2.0.20
   Compiling yoke v0.8.3
   Compiling zerovec v0.11.8
   Compiling tinystr v0.8.4
   Compiling icu_locale_core v2.3.0
   Compiling potential_utf v0.1.6
   Compiling zerotrie v0.2.5
   Compiling icu_collections v2.3.0
   Compiling icu_provider v2.3.1
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling darling_macro v0.24.1
   Compiling darling v0.24.1
   Compiling regex-automata v0.4.18
   Compiling form_urlencoded v1.2.2
   Compiling phf_generator v0.13.1
   Compiling uuid v1.26.0
   Compiling idna_adapter v1.2.2
   Compiling idna v1.1.0
   Compiling winnow v1.0.4
   Compiling hashbrown v0.17.1
   Compiling fnv v1.0.7
   Compiling powerfmt v0.2.0
   Compiling web-time v1.1.0
   Compiling equivalent v1.0.2
   Compiling deranged v0.5.8
   Compiling time-core v0.1.9
   Compiling num-conv v0.2.2
   Compiling anyhow v1.0.104
   Compiling indexmap v2.14.2
   Compiling regex v1.13.1
   Compiling cfb v0.14.0
   Compiling toml_parser v1.1.3+spec-1.1.0
   Compiling time v0.3.55
   Compiling url v2.5.8
   Compiling jsonptr v0.7.1
   Compiling phf_macros v0.13.1
   Compiling serde_with_macros v3.23.0
   Compiling toml_datetime v1.1.1+spec-1.1.0
   Compiling serde_spanned v1.1.1
   Compiling quick-xml v0.42.0
   Compiling bytes v1.12.1
   Compiling base64 v0.23.1
   Compiling toml_writer v1.1.2+spec-1.1.0
   Compiling toml v1.1.5+spec-1.1.0
   Compiling http v1.5.0
   Compiling plist v1.10.1
   Compiling serde_with v3.23.0
   Compiling phf v0.13.1
   Compiling serde-untagged v0.1.9
   Compiling json-patch v4.2.0
   Compiling urlpattern v0.6.0
   Compiling infer v0.22.0
   Compiling glob v0.3.4
   Compiling log v0.4.34
   Compiling semver v1.0.28
   Compiling dunce v1.0.5
   Compiling ctor v1.0.13
   Compiling tauri-utils v3.0.0-alpha.0 (/home/runner/work/tauri/tauri/target/package/tauri-utils-3.0.0-alpha.0)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 25.49s
   Uploading tauri-utils v3.0.0-alpha.0 (/home/runner/work/tauri/tauri/crates/tauri-utils)
    Uploaded tauri-utils v3.0.0-alpha.0 to registry `crates-io`
note: waiting for tauri-utils v3.0.0-alpha.0 to be available at registry `crates-io`
help: you may press ctrl-c to skip waiting; the crate should be available shortly
   Published tauri-utils v3.0.0-alpha.0 at registry `crates-io`

Don't miss a new tauri release

NewReleases is sending notifications on new releases.