[Snyk] Upgrade @tauri-apps/api from 2.4.1 to 2.5.0 #202
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @tauri-apps/api from 2.4.1 to 2.5.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released 23 days ago.
Release notes
Package name: @tauri-apps/api
Cargo Audit
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ │ ├── wry 0.51.2
│ │ │ └── tauri-runtime-wry 2.6.0
│ │ │ └── tauri 2.5.0
│ │ │ ├── tauri-plugin-sample 0.1.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-plugin-log 2.3.1
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-file-associations-demo 0.1.0
│ │ │ ├── tauri 2.5.0
│ │ │ ├── restart 0.1.0
│ │ │ ├── resources 0.1.0
│ │ │ ├── bench_helloworld 0.1.0
│ │ │ ├── bench_files_transfer 0.1.0
│ │ │ ├── bench_cpu_intensive 0.1.0
│ │ │ └── api 0.1.0
│ │ └── webkit2gtk 2.0.1
│ │ ├── wry 0.51.2
│ │ ├── tauri-runtime-wry 2.6.0
│ │ └── tauri 2.5.0
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.20.0
│ │ └── tauri 2.5.0
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.51.2
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.6.0
│ ├── tauri-runtime 2.6.0
│ │ ├── tauri-runtime-wry 2.6.0
│ │ └── tauri 2.5.0
│ ├── tauri 2.5.0
│ ├── tao 0.33.0
│ │ └── tauri-runtime-wry 2.6.0
│ ├── muda 0.16.1
│ │ ├── tray-icon 0.20.0
│ │ └── tauri 2.5.0
│ └── libappindicator 0.9.0
└── atk 0.18.2
└── gtk 0.18.2
Crate: gdk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0412
URL: https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│ ├── wry 0.51.2
│ │ └── tauri-runtime-wry 2.6.0
│ │ └── tauri 2.5.0
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.3.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.5.0
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
├── gtk 0.18.2
│ ├── wry 0.51.2
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.6.0
│ ├── tauri-runtime 2.6.0
│ │ ├── tauri-runtime-wry 2.6.0
│ │ └── tauri 2.5.0
│ ├── tauri 2.5.0
│ ├── tao 0.33.0
│ │ └── tauri-runtime-wry 2.6.0
│ ├── muda 0.16.1
│ │ ├── tray-icon 0.20.0
│ │ │ └── tauri 2.5.0
│ │ └── tauri 2.5.0
│ └── libappindicator 0.9.0
│ └── tray-icon 0.20.0
└── gdkx11 0.18.2
└── wry 0.51.2
Crate: gdk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0418
URL: https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.51.2
│ │ └── tauri-runtime-wry 2.6.0
│ │ └── tauri 2.5.0
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.3.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.5.0
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ └── webkit2gtk 2.0.1
│ ├── wry 0.51.2
│ ├── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
├── webkit2gtk 2.0.1
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.20.0
│ │ └── tauri 2.5.0
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.51.2
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.6.0
│ ├── tauri-runtime 2.6.0
│ │ ├── tauri-runtime-wry 2.6.0
│ │ └── tauri 2.5.0
│ ├── tauri 2.5.0
│ ├── tao 0.33.0
│ │ └── tauri-runtime-wry 2.6.0
│ ├── muda 0.16.1
│ │ ├── tray-icon 0.20.0
│ │ └── tauri 2.5.0
│ └── libappindicator 0.9.0
├── gdkx11-sys 0.18.2
│ ├── tao 0.33.0
│ └── gdkx11 0.18.2
│ └── wry 0.51.2
├── gdkwayland-sys 0.18.2
│ └── tao 0.33.0
└── gdk 0.18.2
├── webkit2gtk 2.0.1
├── gtk 0.18.2
└── gdkx11 0.18.2
Crate: gdkwayland-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0411
URL: https://rustsec.org/advisories/RUSTSEC-2024-0411
Dependency tree:
gdkwayland-sys 0.18.2
└── tao 0.33.0
└── tauri-runtime-wry 2.6.0
└── tauri 2.5.0
├── tauri-plugin-sample 0.1.0
│ └── api 0.1.0
├── tauri-plugin-log 2.3.1
│ └── api 0.1.0
├── tauri-file-associations-demo 0.1.0
├── tauri 2.5.0
├── restart 0.1.0
├── resources 0.1.0
├── bench_helloworld 0.1.0
├── bench_files_transfer 0.1.0
├── bench_cpu_intensive 0.1.0
└── api 0.1.0
Crate: gdkx11
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0417
URL: https://rustsec.org/advisories/RUSTSEC-2024-0417
Dependency tree:
gdkx11 0.18.2
└── wry 0.51.2
└── tauri-runtime-wry 2.6.0
└── tauri 2.5.0
├── tauri-plugin-sample 0.1.0
│ └── api 0.1.0
├── tauri-plugin-log 2.3.1
│ └── api 0.1.0
├── tauri-file-associations-demo 0.1.0
├── tauri 2.5.0
├── restart 0.1.0
├── resources 0.1.0
├── bench_helloworld 0.1.0
├── bench_files_transfer 0.1.0
├── bench_cpu_intensive 0.1.0
└── api 0.1.0
Crate: gdkx11-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0414
URL: https://rustsec.org/advisories/RUSTSEC-2024-0414
Dependency tree:
gdkx11-sys 0.18.2
├── tao 0.33.0
│ └── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.3.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.5.0
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
└── gdkx11 0.18.2
└── wry 0.51.2
└── tauri-runtime-wry 2.6.0
Crate: gtk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0415
URL: https://rustsec.org/advisories/RUSTSEC-2024-0415
Dependency tree:
gtk 0.18.2
├── wry 0.51.2
│ └── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.3.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.5.0
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.51.2
│ ├── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
├── tauri-runtime-wry 2.6.0
├── tauri-runtime 2.6.0
│ ├── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
├── tauri 2.5.0
├── tao 0.33.0
│ └── tauri-runtime-wry 2.6.0
├── muda 0.16.1
│ ├── tray-icon 0.20.0
│ │ └── tauri 2.5.0
│ └── tauri 2.5.0
└── libappindicator 0.9.0
└── tray-icon 0.20.0
Crate: gtk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0420
URL: https://rustsec.org/advisories/RUSTSEC-2024-0420
Dependency tree:
gtk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.51.2
│ │ └── tauri-runtime-wry 2.6.0
│ │ └── tauri 2.5.0
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.3.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.5.0
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ └── webkit2gtk 2.0.1
│ ├── wry 0.51.2
│ ├── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
├── webkit2gtk 2.0.1
├── libappindicator-sys 0.9.0
│ └── libappindicator 0.9.0
│ └── tray-icon 0.20.0
│ └── tauri 2.5.0
├── libappindicator 0.9.0
└── gtk 0.18.2
├── wry 0.51.2
├── webkit2gtk 2.0.1
├── tauri-runtime-wry 2.6.0
├── tauri-runtime 2.6.0
│ ├── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
├── tauri 2.5.0
├── tao 0.33.0
│ └── tauri-runtime-wry 2.6.0
├── muda 0.16.1
│ ├── tray-icon 0.20.0
│ └── tauri 2.5.0
└── libappindicator 0.9.0
Crate: gtk3-macros
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0419
URL: https://rustsec.org/advisories/RUSTSEC-2024-0419
Dependency tree:
gtk3-macros 0.18.2
└── gtk 0.18.2
├── wry 0.51.2
│ └── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.3.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.5.0
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.51.2
│ ├── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
├── tauri-runtime-wry 2.6.0
├── tauri-runtime 2.6.0
│ ├── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
├── tauri 2.5.0
├── tao 0.33.0
│ └── tauri-runtime-wry 2.6.0
├── muda 0.16.1
│ ├── tray-icon 0.20.0
│ │ └── tauri 2.5.0
│ └── tauri 2.5.0
└── libappindicator 0.9.0
└── tray-icon 0.20.0
Crate: paste
Version: 1.0.15
Warning: unmaintained
Title: paste - no longer maintained
Date: 2024-10-07
ID: RUSTSEC-2024-0436
URL: https://rustsec.org/advisories/RUSTSEC-2024-0436
Dependency tree:
paste 1.0.15
├── specta 2.0.0-rc.22
│ └── tauri 2.5.0
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.3.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.5.0
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
└── rav1e 0.7.1
└── ravif 0.11.12
└── image 0.25.6
├── tauri-cli 2.5.0
│ └── tauri-cli-node 0.0.0
├── tauri-bundler 2.4.0
│ └── tauri-cli 2.5.0
└── tauri 2.5.0
Crate: glib
Version: 0.18.5
Warning: unsound
Title: Unsoundness in
Iterator
andDoubleEndedIterator
impls forglib::VariantStrIter
Date: 2024-03-30
ID: RUSTSEC-2024-0429
URL: https://rustsec.org/advisories/RUSTSEC-2024-0429
Dependency tree:
glib 0.18.5
├── webkit2gtk 2.0.1
│ ├── wry 0.51.2
│ │ └── tauri-runtime-wry 2.6.0
│ │ └── tauri 2.5.0
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.3.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.5.0
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.6.0
│ └── tauri 2.5.0
├── soup3 0.5.0
│ ├── wry 0.51.2
│ └── webkit2gtk 2.0.1
├── pango 0.18.3
│ ├── gtk 0.18.2
│ │ ├── wry 0.51.2
│ │ ├── webkit2gtk 2.0.1
│ │ ├── tauri-runtime-wry 2.6.0
│ │ ├── tauri-runtime 2.6.0
│ │ │ ├── tauri-runtime-wry 2.6.0
│ │ │ └── tauri 2.5.0
│ │ ├── tauri 2.5.0
│ │ ├── tao 0.33.0
│ │ │ └── tauri-runtime-wry 2.6.0
│ │ ├── muda 0.16.1
│ │ │ ├── tray-icon 0.20.0
│ │ │ │ └── tauri 2.5.0
│ │ │ └── tauri 2.5.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.20.0
│ └── gdk 0.18.2
│ ├── webkit2gtk 2.0.1
│ ├── gtk 0.18.2
│ └── gdkx11 0.18.2
│ └── wry 0.51.2
├── libappindicator 0.9.0
├── javascriptcore-rs 1.1.2
│ ├── wry 0.51.2
│ └── webkit2gtk 2.0.1
├── gtk 0.18.2
├── gio 0.18.4
│ ├── webkit2gtk 2.0.1
│ ├── soup3 0.5.0
│ ├── pango 0.18.3
│ ├── gtk 0.18.2
│ ├── gdkx11 0.18.2
│ ├── gdk-pixbuf 0.18.5
│ │ ├── gtk 0.18.2
│ │ └── gdk 0.18.2
│ └── gdk 0.18.2
├── gdkx11 0.18.2
├── gdk-pixbuf 0.18.5
├── gdk 0.18.2
├── cairo-rs 0.18.5
│ ├── webkit2gtk 2.0.1
│ ├── gtk 0.18.2
│ └── gdk 0.18.2
└── atk 0.18.2
└── gtk 0.18.2
warning: 12 allowed warnings found">
[2.5.0]
New Features
dd4f13ce4
(#13185) MacOS: Addset_dock_visibility
method to support setting the visibility of the application in the dock.8cf662e34
(#13076) - add API to run initialization scripts on all frames-
WebviewBuilder::initialization_script_on_all_frames
-
WebviewWindowBuilder::initialization_script_on_all_frames
-
WebviewAttributes::initialization_script_on_all_frames
ea36294cb
(#13208) AddedWebviewWindowBuilder::with_input_accessory_view_builder
andWebviewBuilder::with_input_accessory_view_builder
on iOS.c1cd0a2dd
(#13090) macOS/iOS: add option to disable or enable link previews when building a webview (the webkit api has it enabled by default)WebViewBuilder.allow_link_preview(allow_link_preview: bool)
WebviewWindowBuilder.allow_link_preview(allow_link_preview: bool)
b072e2b29
(#9687) AddpreventOverflow
config option to prevent the window from overflowing the monitor size on creationb072e2b29
(#9687) AddWindowBuilder::prevent_overflow
,WebviewWindowBuilder::prevent_overflow
,WindowBuilder::prevent_overflow_with_margin
andWebviewWindowBuilder::prevent_overflow_with_margin
APIs to prevent the window from overflowing the monitor size on creation.Enhancements
9356fa15d
(#13239) Enhance panic message when fetching unmanaged state.ebd3dcb92
(#13135)Webview::eval
andWebviewWindow::eval
now takesimpl Into<String>
instead of&str
to allow passing the scripts more flexible and efficientlyfbd57a1af
(#13175)Builder::invoke_system
takesAsRef<str>
nowBug Fixes
66e6325f4
(#13136) FixChannel
's callback attached towindow
never cleaned up0d39ff6b0
(#13150) Fix missingcore:
in referenced commands in ACL error message690146e31
(#13217) Fix large number of commands with large structs as parameters causing stack overflow on debug build on Windowsf888502fd
(#13227)invoke
will now properly throw whenoptions.headers
contains non-ascii characters instead of silently replacing themf888502fd
(#13227) Fixinvoke
ignores the headers option if it's anHeaders
b8c0d7e40
(#13040) Fixrun_return
not responding torestart
andrequest_restart
Performance Improvements
66e6325f4
(#13136) ImproveChannel
's performance when sending small amount of data (e.g. sending a number)Dependencies
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
bb5faa21f
(#13163) Update webview2-com to 0.37.bb5faa21f
(#13163) Update windows to 0.61.Breaking Changes
fca5154e7
(#13130) Removed re-exportedWebviewAttributes
fromtauri-runtime
which is exposed by accident intauri
and not used by any public facing APIsCargo Publish