ebfork · pull · Dec 29, 2025 · Dec 29, 2025 · Dec 29, 2025 · Dec 29, 2025
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -1,6 +1,18 @@
 [advisories]
 ignore = [
-  "RUSTSEC-2020-0095", # difference is unmaintained (used by `mockito`)
-  "RUSTSEC-2020-0071", # potential segfault in the time crate (not fixed on `zip` and `mac-notification-sys`)
-  "RUSTSEC-2020-0159" # potential segfault in `localtime_r` invocations on the chrono crate (not fixed on `mac-notification-sys`)
+  # rsa Marvin Attack
+  "RUSTSEC-2023-0071",
+  # difference is unmaintained
+  "RUSTSEC-2020-0095",
+  # proc-macro-error is unmaintained
+  "RUSTSEC-2024-0370",
+  # rand unsoundness, fixed when we remove kuchikiki from deps in v3, currently
+  # remains for semver reasons but is not built in default configuration
+  "RUSTSEC-2026-0097",
+  # glib 0.18.5 unsoundness, fixed by updating to gtk4
+  "RUSTSEC-2024-0429",
+  # quick-xml, need an update in plist
+  "RUSTSEC-2026-0194",
+  # quick-xml, need an update in plist
+  "RUSTSEC-2026-0195",
 ]
diff --git a/.cargo/config.toml b/.cargo/config.toml
@@ -0,0 +1,4 @@
+[env]
+# workaround needed to prevent `STATUS_ENTRYPOINT_NOT_FOUND` error in tests
+# see https://github.com/tauri-apps/tauri/pull/4383#issuecomment-1212221864
+__TAURI_WORKSPACE__ = "true"
diff --git a/.changes/README.md b/.changes/README.md
@@ -0,0 +1,44 @@
+# Changes
+
+##### via https://github.com/jbolda/covector
+
+As you create PRs and make changes that require a version bump, please add a new markdown file in this folder. You do not note the version _number_, but rather the type of bump that you expect: major, minor, or patch. The filename is not important, as long as it is a `.md`, but we recommend that it represents the overall change for organizational purposes.
+
+When you select the version bump required, you do _not_ need to consider dependencies. Only note the package with the actual change, and any packages that depend on that package will be bumped automatically in the process.
+
+Use the following format:
+
+```md
+---
+'package-a': 'patch:enhance'
+'package-b': 'patch:enhance'
+---
+
+Change summary goes here
+```
+
+Summaries do not have a specific character limit, but are text only. These summaries are used within the (future implementation of) changelogs. They will give context to the change and also point back to the original PR if more details and context are needed.
+
+Changes will be designated as a `major`, `minor` or `patch` as further described in [semver](https://semver.org/).
+
+Given a version number MAJOR.MINOR.PATCH, increment the:
+
+- MAJOR version when you make incompatible API changes,
+- MINOR version when you add functionality in a backwards compatible manner, and
+- PATCH version when you make backwards compatible bug fixes.
+
+Additional labels for pre-release and build metadata are available as extensions to the MAJOR.MINOR.PATCH format, but will be discussed prior to usage (as extra steps will be necessary in consideration of merging and publishing).
+
+Additionally you could specify a tag for the change file to group it with other changes by prefixing the bump with `:<tag>`, for example:
+
+```md
+---
+'package-a': 'patch:enhance'
+---
+
+Change summary goes here
+```
+
+which will group this change file with other changes that specify the `bug` tag.
+
+For list of available tags, see the `changeTags` key in [./config.json](./config.json)
diff --git a/.changes/allow-conf-gitignore.md b/.changes/allow-conf-gitignore.md
diff --git a/.changes/allowlist-clipboard.md b/.changes/allowlist-clipboard.md
diff --git a/.changes/allowlist-dialog.md b/.changes/allowlist-dialog.md
diff --git a/.changes/allowlist-process.md b/.changes/allowlist-process.md
diff --git a/.changes/allowlist-window.md b/.changes/allowlist-window.md
diff --git a/.changes/always-rebuilding.md b/.changes/always-rebuilding.md
diff --git a/.changes/android-video-dir.md b/.changes/android-video-dir.md
@@ -0,0 +1,7 @@
+---
+tauri: minor:breaking
+---
+
+On Android, `$VIDEO` and `video_dir()` now resolve to the app-specific Movies directory instead of external cache storage.
+
+**Migration:** Files previously written to the old location (`.../cache`) will not be discovered at the new location (`.../files/Movies`). Migrate existing files or update path assumptions accordingly.
diff --git a/.changes/api-WebviewWindow-fileDropEnabled.md b/.changes/api-WebviewWindow-fileDropEnabled.md
diff --git a/.changes/api-add-log-dir.md b/.changes/api-add-log-dir.md
diff --git a/.changes/api-app-window-browser.md b/.changes/api-app-window-browser.md
diff --git a/.changes/api-change-events.md b/.changes/api-change-events.md
diff --git a/.changes/api-dialog-ask-message-confirm.md b/.changes/api-dialog-ask-message-confirm.md
diff --git a/.changes/api-emit-payload-type.md b/.changes/api-emit-payload-type.md
diff --git a/.changes/api-features.md b/.changes/api-features.md
diff --git a/.changes/api-fetch-empty-reponse.md b/.changes/api-fetch-empty-reponse.md
diff --git a/.changes/api-file-dialog-title.md b/.changes/api-file-dialog-title.md
diff --git a/.changes/api-fix-os-platform-return.md b/.changes/api-fix-os-platform-return.md
diff --git a/.changes/api-format-callback.md b/.changes/api-format-callback.md
diff --git a/.changes/api-raw-headers.md b/.changes/api-raw-headers.md
diff --git a/.changes/api-relaunch-cleanup.md b/.changes/api-relaunch-cleanup.md
diff --git a/.changes/api-remove-current-dir.md b/.changes/api-remove-current-dir.md
diff --git a/.changes/api-remove-ts-files.md b/.changes/api-remove-ts-files.md
diff --git a/.changes/api-use-uint8array.md b/.changes/api-use-uint8array.md
diff --git a/.changes/api-window-type-for-size-and-position.md b/.changes/api-window-type-for-size-and-position.md
diff --git a/.changes/app-any-thread.md b/.changes/app-any-thread.md
diff --git a/.changes/app-folder-structure.md b/.changes/app-folder-structure.md
diff --git a/.changes/asset-allowlist.md b/.changes/asset-allowlist.md
diff --git a/.changes/asset-cors.md b/.changes/asset-cors.md
diff --git a/.changes/asset-protocol-feature-flag.md b/.changes/asset-protocol-feature-flag.md
diff --git a/.changes/asset-resolver.md b/.changes/asset-resolver.md
diff --git a/.changes/async-cli.js.md b/.changes/async-cli.js.md
diff --git a/.changes/async-runtime-refactor.md b/.changes/async-runtime-refactor.md
diff --git a/.changes/async-runtime-set.md b/.changes/async-runtime-set.md
diff --git a/.changes/async-runtime-spawn-blocking.md b/.changes/async-runtime-spawn-blocking.md
diff --git a/.changes/before-script-envs.md b/.changes/before-script-envs.md
diff --git a/.changes/build-rerun-if-resource-sidecar-change.md b/.changes/build-rerun-if-resource-sidecar-change.md
diff --git a/.changes/build-specify-win-sdk.md b/.changes/build-specify-win-sdk.md
diff --git a/.changes/builder-create-window-result.md b/.changes/builder-create-window-result.md
diff --git a/.changes/bundle-vc-runtime.md b/.changes/bundle-vc-runtime.md
@@ -0,0 +1,8 @@
+---
+"tauri-bundler": "minor:feat"
+"tauri-cli": "minor:feat"
+"@tauri-apps/cli": "minor:feat"
+"tauri-utils": "minor:feat"
+---
+
+Added `bundle.windows.bundleVCRuntime` to copy the Visual C++ runtime DLLs into Windows MSI and NSIS installers. The bundler locates the runtime through `VCTOOLS_REDIST_DIR` or the bundled `vswhere.exe`.
diff --git a/.changes/bundler-add-provider-short-name.md b/.changes/bundler-add-provider-short-name.md
diff --git a/.changes/bundler-add-tsp-signing.md b/.changes/bundler-add-tsp-signing.md
diff --git a/.changes/bundler-appimage-fuse.md b/.changes/bundler-appimage-fuse.md
diff --git a/.changes/bundler-breaking-changes.md b/.changes/bundler-breaking-changes.md
@@ -0,0 +1,5 @@
+---
+tauri-bundler: patch:deps
+---
+
+**Breaking Change:** Updated various dependencies and removed `goblin`. Some of these dependencies are part of the public API which makes this a breaking change. Added a warning about `tauri-bundler`'s API stability in reflection to past regular breaking struct changes.
diff --git a/.changes/bundler-fix-appimage.md b/.changes/bundler-fix-appimage.md
diff --git a/.changes/bundler-msi-init-installdir.md b/.changes/bundler-msi-init-installdir.md
diff --git a/.changes/bundler-print-cfg.md b/.changes/bundler-print-cfg.md
diff --git a/.changes/callback-validation.md b/.changes/callback-validation.md
diff --git a/.changes/cargo-toml-1.md b/.changes/cargo-toml-1.md
@@ -0,0 +1,6 @@
+---
+tauri: patch:deps
+tauri-build: patch:deps
+---
+
+Updated `cargo_toml` crate to `1`
diff --git a/.changes/change-pr-15578.md b/.changes/change-pr-15578.md
@@ -0,0 +1,5 @@
+---
+"tauri": patch:enhance
+---
+
+`State` had `Send` and `Sync` trait bounds that were already implied, remove them from the struct definition.
diff --git a/.changes/change-pr-15593.md b/.changes/change-pr-15593.md
@@ -0,0 +1,5 @@
+---
+"tauri-macos-sign": patch:deps
+---
+
+Updated dependency `apple-codesign` to `0.29`, no user facing changes.
diff --git a/.changes/clap-3.0.md b/.changes/clap-3.0.md