Skip to content

chore(deps): bump tauri-plugin-dialog from 2.6.0 to 2.7.1 in /prompt-launcher/src-tauri#41

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prompt-launcher/src-tauri/tauri-plugin-dialog-2.7.1
Open

chore(deps): bump tauri-plugin-dialog from 2.6.0 to 2.7.1 in /prompt-launcher/src-tauri#41
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prompt-launcher/src-tauri/tauri-plugin-dialog-2.7.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Copy link
Copy Markdown

Bumps tauri-plugin-dialog from 2.6.0 to 2.7.1.

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.7.1

[2.7.1]

Dependencies

  • Upgraded to fs-js@2.5.1
npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.1
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.1
npm notice filename: tauri-apps-plugin-dialog-2.7.1.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: fc83387de807c8d064d2b64b1b813b84e8286a12
npm notice integrity: sha512-OK1UBXYt+ojcm[...]FmEOjIY9IhzOQ==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1429011725
+ @tauri-apps/plugin-dialog@2.7.1

dialog v2.7.1

[2.7.1]

Dependencies

  • Upgraded to fs-js@2.5.1

... (truncated)

Commits
  • e7a68fa publish new versions (#3068)
  • b5550a3 chore: temp delete updater changefile
  • 93426f8 fix: fix docsrs builds
  • 4ee61e0 Revert "chore: temp delete updater changefile"
  • 06124af publish new versions (#2972)
  • 060219e chore(deps): update dependency @​rollup/plugin-typescript to v12.3.0 (#3067)
  • c7e9766 chore(deps): update tauri monorepo (v2) (#3058)
  • d4a8ce9 chore(deps): update rust crate tokio-tungstenite to 0.28 (#3016)
  • cdc7eec chore(deps): update dependency @​rollup/plugin-typescript to v12.2.0 (#3066)
  • 6314b00 chore: temp delete updater changefile
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) from 2.6.0 to 2.7.1.
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.6.0...log-v2.7.1)

---
updated-dependencies:
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 6, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Copy link
Copy Markdown
Owner

总体结论:这个 PR 标题是 tauri-plugin-dialog 2.6.0 -> 2.7.1,但实际 lockfile 连带升级了 Tauri core/runtime/wry、tauri-plugin-fsreqwest、webkit2gtk/toml 等关键依赖;当前没有有效 review 覆盖,建议按较大 Tauri 依赖刷新来验证。

关键发现:

  • 高:Cargo.lock 显示 tauri 2.9.5 -> 2.10.3、tauri-runtime 2.9.2 -> 2.11.0、tauri-runtime-wry 2.9.3 -> 2.10.1、wry 0.53.5 -> 0.54.2、reqwest 0.12.28 -> 0.13.3,以及 tauri-plugin-fs 2.4.5 -> 2.5.1。这个影响面明显大于 dialog 插件本身,可能影响窗口/WebView、文件系统权限、HTTP 适配和平台构建。建议合并前跑 cargo test --manifest-path prompt-launcher/src-tauri/Cargo.toml、前端 build,并以 Tauri build/CI 覆盖三端。
  • 高:dialog 插件直接影响文件/目录选择、保存对话框等用户交互;同时本 PR 还升级了 fs 插件。建议手工 smoke test:选择 prompts 目录、创建/保存 prompt 文件、取消选择、无权限目录或不存在路径等场景,确认 UI 错误态和权限处理仍正常。
  • 中:PR 描述来自 Dependabot,未解释为什么一个 dialog 升级带来了 fs/Tauri/runtime 等连带升级。建议确认这是解析结果预期;如果不是,重新生成 lockfile 或拆分依赖升级,降低回归定位成本。

优先级建议:

  • 阻塞:补充 Rust/Tauri 构建测试和 dialog/fs 关键流程手工验证。
  • 高:确认连带升级范围是否有意接受。
  • 中:把验证结果和实际影响范围补到 PR 描述或评论。

后续建议:

  • 如果本轮目标是统一刷新 Tauri 生态依赖,建议把 opener/dialog/fs/core runtime 相关 PR 合并策略统一规划,避免多个 Dependabot PR 分别带入相同的大 lockfile 变更并互相冲突。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant