Skip to content

chore(deps): bump tauri-plugin-opener from 2.5.3 to 2.5.4 in /prompt-launcher/src-tauri#42

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prompt-launcher/src-tauri/tauri-plugin-opener-2.5.4
Open

chore(deps): bump tauri-plugin-opener from 2.5.3 to 2.5.4 in /prompt-launcher/src-tauri#42
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prompt-launcher/src-tauri/tauri-plugin-opener-2.5.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Copy link
Copy Markdown

Bumps tauri-plugin-opener from 2.5.3 to 2.5.4.

Release notes

Sourced from tauri-plugin-opener's releases.

opener-js v2.5.4

[2.5.4]

npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-opener@2.5.4
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 3.1kB dist-js/index.cjs
npm notice 2.0kB dist-js/index.d.ts
npm notice 3.1kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 730B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-opener
npm notice version: 2.5.4
npm notice filename: tauri-apps-plugin-opener-2.5.4.tgz
npm notice package size: 3.5 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: b37883e4d36125b8c5a0c74f683395958a65bd7d
npm notice integrity: sha512-1HnPkb+AmgO29[...]aUJtT57lfO9CQ==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1429011743
+ @tauri-apps/plugin-opener@2.5.4

opener v2.5.4

[2.5.4]

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tauri-plugin-opener](https://github.com/tauri-apps/plugins-workspace) from 2.5.3 to 2.5.4.
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.5.3...http-v2.5.4)

---
updated-dependencies:
- dependency-name: tauri-plugin-opener
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 6, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from ZeroPointSix as a code owner May 6, 2026 00:15

Copy link
Copy Markdown
Owner

总体结论:这个 PR 标题是 tauri-plugin-opener 2.5.3 -> 2.5.4 的 patch 升级,但实际 lockfile 连带升级了 Tauri core/runtime/wry/reqwest/webkit2gtk 等多项关键依赖;当前没有有效 review 覆盖,建议不要按“单个插件补丁”低风险处理。

关键发现:

  • 高:Cargo.lock 显示 tauri 2.9.5 -> 2.10.3、tauri-runtime 2.9.2 -> 2.11.0、tauri-runtime-wry 2.9.3 -> 2.10.1、wry 0.53.5 -> 0.54.2、reqwest 0.12.28 -> 0.13.3 等连带升级。这些超出了 opener 插件自身的 patch 范围,可能影响窗口生命周期、WebView、HTTP 行为和平台构建。建议合并前至少跑 cargo test --manifest-path prompt-launcher/src-tauri/Cargo.tomlnpm run build,并以 Tauri build/CI 覆盖 Windows/macOS/Linux。
  • 中:opener 的变更点主要是 Windows 网络路径 reveal 支持,但 lockfile 同时引入/调整了 HTML/CSS parser、objc2、webkit2gtk 等跨平台依赖。建议在 Windows 上实际验证 revealItemInDir/打开文件路径相关功能,同时确认普通外部链接/文件打开路径没有回归。
  • 中:PR 只有 Dependabot 标签配置提示,没有说明本次 lockfile 的大范围解析是否预期。建议确认是否希望将 Tauri 生态依赖整体前移;如果只想升级 opener,可以考虑重新生成/约束依赖,减少不相关升级面。

优先级建议:

  • 阻塞:补充 Rust/Tauri 构建与测试验证,尤其是 Windows launcher/open path 行为。
  • 高:确认 lockfile 中 Tauri core/runtime/wry/reqwest 等连带升级是预期范围。
  • 中:补充跨平台 smoke test 结果到 PR 描述或评论。

后续建议:

  • 若这些连带升级是可接受的,建议把 PR 标题/描述补充为“opener plus Tauri dependency refresh”,让合并者按真实影响面评估。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant