build(deps): bump the tauri-deps group across 1 directory with 3 updates

[dependabot]

Bumps the tauri-deps group with 3 updates in the /src-tauri directory: tauri-plugin-log, tauri-plugin-single-instance and tauri-build.

Updates tauri-plugin-log from 2.8.0 to 2.9.0

Release notes

Sourced from tauri-plugin-log's releases.

log-js v2.9.0

[2.9.0]

• f08980f1 (#3445 by @​bajoca05) Added the FileOpenStrategy for log rotation. It defaults to append into existing file if any (previous behaviour), and brings a new feature to create a new file per session: FileOpenStrategy::Rotate.
• 254f222e (#3477 by @​bajoca05) Migrated from the log crate's kv_unstable feature flag to the kv feature flag stabilized in 0.4.21.
• 0c23b8ec (#3446 by @​fee1-dead) Removed an unused dependency byte-unit.

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-log@2.9.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.8kB README.md
npm notice 7.0kB dist-js/index.cjs
npm notice 3.0kB dist-js/index.d.ts
npm notice 6.7kB dist-js/index.js
npm notice 715B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-log
npm notice version: 2.9.0
npm notice filename: tauri-apps-plugin-log-2.9.0.tgz
npm notice package size: 5.0 kB
npm notice unpacked size: 22.1 kB
npm notice shasum: 47faedfef55b09adae53c90555c6e103f6fd49b6
npm notice integrity: sha512-Ql8okrnsguk0e[...]3IFIAP+wP5qSw==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2165401997
+ @tauri-apps/plugin-log@2.9.0

log v2.9.0

[2.9.0]

• f08980f1 (#3445 by @​bajoca05) Added the FileOpenStrategy for log rotation. It defaults to append into existing file if any (previous behaviour), and brings a new feature to create a new file per session: FileOpenStrategy::Rotate.
• 254f222e (#3477 by @​bajoca05) Migrated from the log crate's kv_unstable feature flag to the kv feature flag stabilized in 0.4.21.
• 0c23b8ec (#3446 by @​fee1-dead) Removed an unused dependency byte-unit.

... (truncated)

Commits

• cad301f publish new versions (#3447)
• 254f222 chore(log): use kv stable feature rather than unstable (#3477)
• b1439be chore: ignore cargo audit errors (#3481)
• d157387 fix(single-instance): Yield unix listener in macos (#3466)
• 41f6274 docs(log): some builder methods and defaults (#3460)
• f08980f feat(log): rotate log file on each session (#3445)
• 78df86f chore(deps): update dependency vite to v8.0.16 [security] (#3458)
• aecec42 docs(http): fix connectTimeout option in README (#3451)
• 0767dcb chore(deps): update dependency eslint-plugin-security to v4.0.1 (#3452)
• 4be7690 fix(positioner): return error instead of panicking when window has no monitor...
• Additional commits viewable in compare view

Updates tauri-plugin-single-instance from 2.4.2 to 2.4.3

Release notes

Sourced from tauri-plugin-single-instance's releases.

barcode-scanner-js v2.4.3

[2.4.3]

• d8bfe61f (#3121 by @​NKIPSC) Remove unnecessary checks on Android when requesting camera permission.
• 631d0e25 (#2440 by @​kingsword09) Fix the cameraView is not removed after scanning in iOS.

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-barcode-scanner@2.4.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.3kB README.md
npm notice 2.2kB dist-js/index.cjs
npm notice 1.6kB dist-js/index.d.ts
npm notice 2.1kB dist-js/index.js
npm notice 754B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-barcode-scanner
npm notice version: 2.4.3
npm notice filename: tauri-apps-plugin-barcode-scanner-2.4.3.tgz
npm notice package size: 3.4 kB
npm notice unpacked size: 10.9 kB
npm notice shasum: a401570d2698692fa6878bd816122ac3f8d7142d
npm notice integrity: sha512-y5jIRTFqCeUnc[...]cJWhCfKu6qOQA==
npm notice total files: 6
npm notice
npm notice Security Notice: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption. Learn more https://gh.io/all-npm-classic-tokens-revoked
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=804717978
+ @tauri-apps/plugin-barcode-scanner@2.4.3

barcode-scanner v2.4.3

[2.4.3]

• d8bfe61f (#3121 by @​NKIPSC) Remove unnecessary checks on Android when requesting camera permission.
• 631d0e25 (#2440 by @​kingsword09) Fix the cameraView is not removed after scanning in iOS.

... (truncated)

Commits

• 06124af publish new versions (#2972)
• 060219e chore(deps): update dependency @​rollup/plugin-typescript to v12.3.0 (#3067)
• c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
• d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
• cdc7eec chore(deps): update dependency @​rollup/plugin-typescript to v12.2.0 (#3066)
• 6314b00 chore: temp delete updater changefile
• fb4c8ae chore(deps): update dependency typescript-eslint to v8.46.2 (#3060)
• fccc1cf chore(deps): update eslint monorepo to v9.38.0 (#3044)
• 3702308 chore(deps): update dependency rollup to v4.52.5 (#3043)
• c9c8b39 chore(deps): update dependency typescript-eslint to v8.46.1 (#3025)
• Additional commits viewable in compare view

Updates tauri-build from 2.6.2 to 2.6.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.6.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1133 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1085 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Crate:     atk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0416

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416
Crate:     fxhash

Version:   0.2.1

Warning:   unmaintained

Title:     fxhash - no longer maintained

Date:      2025-09-05

ID:        RUSTSEC-2025-0057

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     gdk

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0412

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412
Crate:     gdk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0418

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0418
Crate:     gdkwayland-sys

</tr></table>

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
worldscript-studio	Ready	Preview, Comment	Jul 20, 2026 11:46pm

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​tauri-plugin-log@​2.8.0 ⏵ 2.9.0	+1
	cargo/​tauri-build@​2.6.2 ⏵ 2.6.3
	cargo/​tauri-plugin-single-instance@​2.4.2 ⏵ 2.4.3

View full report

[codeant-ai]

🏁 CodeAnt Quality Gate Results

Commit: 807ddd56
Scan Time: 2026-07-20 23:49:15 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality Gate	Status	Details
Secrets	✅ PASSED	0 secrets found
Duplicate Code	✅ PASSED	0.0% duplicated
SAST	✅ PASSED	No security issues
Bugs	✅ PASSED	Rating S: No bugs
IAC	✅ PASSED	No IAC issues

View Full Results