Releases: tauri-apps/tauri
Releases · tauri-apps/tauri
tauri-cli v2.9.3
Cargo Audit
Updating git repository `https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
Locking 1050 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding cargo-mobile2 v0.21.2 (available: v0.22.1)
Adding cargo_metadata v0.19.2 (available: v0.23.0)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.6.1)
Adding dialoguer v0.11.0 (available: v0.12.0)
Adding elf v0.7.4 (available: v0.8.0)
Adding goblin v0.9.3 (available: v0.10.3)
Adding html5ever v0.29.1 (available: v0.35.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.1.0)
Adding jsonrpsee v0.24.10 (available: v0.26.0)
Adding jsonrpsee-client-transport v0.24.10 (available: v0.26.0)
Adding jsonrpsee-core v0.24.10 (available: v0.26.0)
Adding jsonrpsee-ws-client v0.24.10 (available: v0.26.0)
Adding matchit v0.8.4 (available: v0.8.6)
Adding minisign v0.7.3 (available: v0.7.9)
Adding object v0.36.7 (available: v0.37.3)
Adding oxc_allocator v0.36.0 (available: v0.96.0)
Adding oxc_ast v0.36.0 (available: v0.96.0)
Adding oxc_parser v0.36.0 (available: v0.96.0)
Adding oxc_span v0.36.0 (available: v0.96.0)
Adding phf v0.11.3 (available: v0.13.1)
Adding png v0.17.16 (available: v0.18.0)
Adding rpm v0.16.1 (available: v0.18.4)
Adding schemars v0.8.22 (available: v1.0.5)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding toml v0.8.2 (available: v0.8.23)
Adding toml_datetime v0.6.3 (available: v0.6.11)
Adding toml_edit v0.20.2 (available: v0.20.7)
Adding urlpattern v0.3.0 (available: v0.4.0)
Adding windows v0.61.3 (available: v0.62.2)
Adding windows-registry v0.5.3 (available: v0.6.1)
Adding windows-sys v0.60.2 (available: v0.61.2)
Adding x509-certificate v0.23.1 (available: v0.25.0)
Adding zip v4.6.1 (available: v6.0.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 862 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── tauri-runtime-wry 2.9.1
├── tauri-runtime 2.9.1
├── tauri 2.9.2
├── tao 0.34.5
│ └── tauri-runtime-wry 2.9.1
├── muda 0.17.1
│ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
└── libappindicator 0.9.0
└── tray-icon 0.21.2
Crate: atk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0416
URL: https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ │ ├── wry 0.53.5
│ │ │ └── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ │ ├── tauri-plugin-sample 0.1.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-plugin-log 2.7.1
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-file-associations-demo 0.1.0
│ │ │ ├── tauri 2.9.2
│ │ │ ├── restart 0.1.0
│ │ │ ├── resources 0.1.0
│ │ │ ├── bench_helloworld 0.1.0
│ │ │ ├── bench_files_transfer 0.1.0
│ │ │ ├── bench_cpu_intensive 0.1.0
│ │ │ └── api 0.1.0
│ │ └── webkit2gtk 2.0.1
│ │ ├── wry 0.53.5
│ │ ├── tauri-runtime-wry 2.9.1
│ │ ├── tauri-runtime 2.9.1
│ │ │ ├── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
└── atk 0.18.2
└── gtk 0.18.2
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
└── kuchikiki 0.8.8-speedreader
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── tauri-utils 2.8.0
│ ├── tauri-schema-generator 0.0.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ ├── tauri-plugin 2.5.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ └── tauri-plugin-log 2.7.1
│ ├── tauri-macros 2.5.0
│ │ └── tauri 2.9.2
│ ├── tauri-codegen 2.5.0
│ │ ├── tauri-macros 2.5.0
│ │ └── tauri-build 2.5.1
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-cli 2.9.3
│ │ └── tauri-cli-node 0.0.0
│ ├── tauri-bundler 2.7.3
│ │ └── tauri-cli 2.9.3
│ ├── tauri-build 2.5.1
│ ├── tauri 2.9.2
│ └── acl-tests 0.1.0
└── tauri-cli 2.9.3
Crate: gdk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0412
URL: https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
│ └── tray-icon 0.21.2
└── gdkx11 0.18.2
└── wry 0.53.5
Crate: gdk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0418
URL: https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_h...
tauri-bundler v2.7.3
Cargo Audit
Updating git repository `https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
Locking 1050 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding cargo-mobile2 v0.21.2 (available: v0.22.1)
Adding cargo_metadata v0.19.2 (available: v0.23.0)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.6.1)
Adding dialoguer v0.11.0 (available: v0.12.0)
Adding elf v0.7.4 (available: v0.8.0)
Adding goblin v0.9.3 (available: v0.10.3)
Adding html5ever v0.29.1 (available: v0.35.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.1.0)
Adding jsonrpsee v0.24.10 (available: v0.26.0)
Adding jsonrpsee-client-transport v0.24.10 (available: v0.26.0)
Adding jsonrpsee-core v0.24.10 (available: v0.26.0)
Adding jsonrpsee-ws-client v0.24.10 (available: v0.26.0)
Adding matchit v0.8.4 (available: v0.8.6)
Adding minisign v0.7.3 (available: v0.7.9)
Adding object v0.36.7 (available: v0.37.3)
Adding oxc_allocator v0.36.0 (available: v0.96.0)
Adding oxc_ast v0.36.0 (available: v0.96.0)
Adding oxc_parser v0.36.0 (available: v0.96.0)
Adding oxc_span v0.36.0 (available: v0.96.0)
Adding phf v0.11.3 (available: v0.13.1)
Adding png v0.17.16 (available: v0.18.0)
Adding rpm v0.16.1 (available: v0.18.4)
Adding schemars v0.8.22 (available: v1.0.5)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding toml v0.8.2 (available: v0.8.23)
Adding toml_datetime v0.6.3 (available: v0.6.11)
Adding toml_edit v0.20.2 (available: v0.20.7)
Adding urlpattern v0.3.0 (available: v0.4.0)
Adding windows v0.61.3 (available: v0.62.2)
Adding windows-registry v0.5.3 (available: v0.6.1)
Adding windows-sys v0.60.2 (available: v0.61.2)
Adding x509-certificate v0.23.1 (available: v0.25.0)
Adding zip v4.6.1 (available: v6.0.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 862 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── tauri-runtime-wry 2.9.1
├── tauri-runtime 2.9.1
├── tauri 2.9.2
├── tao 0.34.5
│ └── tauri-runtime-wry 2.9.1
├── muda 0.17.1
│ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
└── libappindicator 0.9.0
└── tray-icon 0.21.2
Crate: atk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0416
URL: https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ │ ├── wry 0.53.5
│ │ │ └── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ │ ├── tauri-plugin-sample 0.1.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-plugin-log 2.7.1
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-file-associations-demo 0.1.0
│ │ │ ├── tauri 2.9.2
│ │ │ ├── restart 0.1.0
│ │ │ ├── resources 0.1.0
│ │ │ ├── bench_helloworld 0.1.0
│ │ │ ├── bench_files_transfer 0.1.0
│ │ │ ├── bench_cpu_intensive 0.1.0
│ │ │ └── api 0.1.0
│ │ └── webkit2gtk 2.0.1
│ │ ├── wry 0.53.5
│ │ ├── tauri-runtime-wry 2.9.1
│ │ ├── tauri-runtime 2.9.1
│ │ │ ├── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
└── atk 0.18.2
└── gtk 0.18.2
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
└── kuchikiki 0.8.8-speedreader
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── tauri-utils 2.8.0
│ ├── tauri-schema-generator 0.0.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ ├── tauri-plugin 2.5.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ └── tauri-plugin-log 2.7.1
│ ├── tauri-macros 2.5.0
│ │ └── tauri 2.9.2
│ ├── tauri-codegen 2.5.0
│ │ ├── tauri-macros 2.5.0
│ │ └── tauri-build 2.5.1
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-cli 2.9.3
│ │ └── tauri-cli-node 0.0.0
│ ├── tauri-bundler 2.7.3
│ │ └── tauri-cli 2.9.3
│ ├── tauri-build 2.5.1
│ ├── tauri 2.9.2
│ └── acl-tests 0.1.0
└── tauri-cli 2.9.3
Crate: gdk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0412
URL: https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
│ └── tray-icon 0.21.2
└── gdkx11 0.18.2
└── wry 0.53.5
Crate: gdk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0418
URL: https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_h...
@tauri-apps/cli v2.9.3
[2.9.3]
Bug Fixes
fd8c30b4f(#14353 by @ChaseKnowlden) Premultiply Alpha before Resizing which gets rid of the gray fringe around the icons.
Dependencies
- Upgraded to
tauri-cli@2.9.3
tauri v2.9.2
Cargo Audit
Updating git repository `https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
Locking 1050 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding cargo-mobile2 v0.21.2 (available: v0.22.1)
Adding cargo_metadata v0.19.2 (available: v0.23.0)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.6.0)
Adding dialoguer v0.11.0 (available: v0.12.0)
Adding elf v0.7.4 (available: v0.8.0)
Adding goblin v0.9.3 (available: v0.10.3)
Adding html5ever v0.29.1 (available: v0.35.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.1.0)
Adding jsonrpsee v0.24.10 (available: v0.26.0)
Adding jsonrpsee-client-transport v0.24.10 (available: v0.26.0)
Adding jsonrpsee-core v0.24.10 (available: v0.26.0)
Adding jsonrpsee-ws-client v0.24.10 (available: v0.26.0)
Adding matchit v0.8.4 (available: v0.8.6)
Adding minisign v0.7.3 (available: v0.7.9)
Adding object v0.36.7 (available: v0.37.3)
Adding oxc_allocator v0.36.0 (available: v0.95.0)
Adding oxc_ast v0.36.0 (available: v0.95.0)
Adding oxc_parser v0.36.0 (available: v0.95.0)
Adding oxc_span v0.36.0 (available: v0.95.0)
Adding phf v0.11.3 (available: v0.13.1)
Adding png v0.17.16 (available: v0.18.0)
Adding rpm v0.16.1 (available: v0.18.4)
Adding schemars v0.8.22 (available: v1.0.4)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding toml v0.8.2 (available: v0.8.23)
Adding toml_datetime v0.6.3 (available: v0.6.11)
Adding toml_edit v0.20.2 (available: v0.20.7)
Adding urlpattern v0.3.0 (available: v0.4.0)
Adding windows v0.61.3 (available: v0.62.2)
Adding windows-registry v0.5.3 (available: v0.6.1)
Adding windows-sys v0.60.2 (available: v0.61.2)
Adding x509-certificate v0.23.1 (available: v0.25.0)
Adding zip v4.6.1 (available: v6.0.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 861 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── tauri-runtime-wry 2.9.1
├── tauri-runtime 2.9.1
├── tauri 2.9.2
├── tao 0.34.5
│ └── tauri-runtime-wry 2.9.1
├── muda 0.17.1
│ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
└── libappindicator 0.9.0
└── tray-icon 0.21.2
Crate: atk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0416
URL: https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ │ ├── wry 0.53.5
│ │ │ └── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ │ ├── tauri-plugin-sample 0.1.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-plugin-log 2.7.1
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-file-associations-demo 0.1.0
│ │ │ ├── tauri 2.9.2
│ │ │ ├── restart 0.1.0
│ │ │ ├── resources 0.1.0
│ │ │ ├── bench_helloworld 0.1.0
│ │ │ ├── bench_files_transfer 0.1.0
│ │ │ ├── bench_cpu_intensive 0.1.0
│ │ │ └── api 0.1.0
│ │ └── webkit2gtk 2.0.1
│ │ ├── wry 0.53.5
│ │ ├── tauri-runtime-wry 2.9.1
│ │ ├── tauri-runtime 2.9.1
│ │ │ ├── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
└── atk 0.18.2
└── gtk 0.18.2
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
└── kuchikiki 0.8.8-speedreader
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── tauri-utils 2.8.0
│ ├── tauri-schema-generator 0.0.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ ├── tauri-plugin 2.5.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ └── tauri-plugin-log 2.7.1
│ ├── tauri-macros 2.5.0
│ │ └── tauri 2.9.2
│ ├── tauri-codegen 2.5.0
│ │ ├── tauri-macros 2.5.0
│ │ └── tauri-build 2.5.1
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-cli 2.9.2
│ │ └── tauri-cli-node 0.0.0
│ ├── tauri-bundler 2.7.2
│ │ └── tauri-cli 2.9.2
│ ├── tauri-build 2.5.1
│ ├── tauri 2.9.2
│ └── acl-tests 0.1.0
└── tauri-cli 2.9.2
Crate: gdk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0412
URL: https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
│ └── tray-icon 0.21.2
└── gdkx11 0.18.2
└── wry 0.53.5
Crate: gdk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0418
URL: https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_h...
tauri-cli v2.9.2
Cargo Audit
Updating git repository `https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
Locking 1050 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding cargo-mobile2 v0.21.2 (available: v0.22.1)
Adding cargo_metadata v0.19.2 (available: v0.23.0)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.6.0)
Adding dialoguer v0.11.0 (available: v0.12.0)
Adding elf v0.7.4 (available: v0.8.0)
Adding goblin v0.9.3 (available: v0.10.3)
Adding html5ever v0.29.1 (available: v0.35.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.1.0)
Adding jsonrpsee v0.24.10 (available: v0.26.0)
Adding jsonrpsee-client-transport v0.24.10 (available: v0.26.0)
Adding jsonrpsee-core v0.24.10 (available: v0.26.0)
Adding jsonrpsee-ws-client v0.24.10 (available: v0.26.0)
Adding matchit v0.8.4 (available: v0.8.6)
Adding minisign v0.7.3 (available: v0.7.9)
Adding object v0.36.7 (available: v0.37.3)
Adding oxc_allocator v0.36.0 (available: v0.95.0)
Adding oxc_ast v0.36.0 (available: v0.95.0)
Adding oxc_parser v0.36.0 (available: v0.95.0)
Adding oxc_span v0.36.0 (available: v0.95.0)
Adding phf v0.11.3 (available: v0.13.1)
Adding png v0.17.16 (available: v0.18.0)
Adding rpm v0.16.1 (available: v0.18.4)
Adding schemars v0.8.22 (available: v1.0.4)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding toml v0.8.2 (available: v0.8.23)
Adding toml_datetime v0.6.3 (available: v0.6.11)
Adding toml_edit v0.20.2 (available: v0.20.7)
Adding urlpattern v0.3.0 (available: v0.4.0)
Adding windows v0.61.3 (available: v0.62.2)
Adding windows-registry v0.5.3 (available: v0.6.1)
Adding windows-sys v0.60.2 (available: v0.61.2)
Adding x509-certificate v0.23.1 (available: v0.25.0)
Adding zip v4.6.1 (available: v6.0.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 861 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── tauri-runtime-wry 2.9.1
├── tauri-runtime 2.9.1
├── tauri 2.9.2
├── tao 0.34.5
│ └── tauri-runtime-wry 2.9.1
├── muda 0.17.1
│ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
└── libappindicator 0.9.0
└── tray-icon 0.21.2
Crate: atk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0416
URL: https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ │ ├── wry 0.53.5
│ │ │ └── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ │ ├── tauri-plugin-sample 0.1.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-plugin-log 2.7.1
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-file-associations-demo 0.1.0
│ │ │ ├── tauri 2.9.2
│ │ │ ├── restart 0.1.0
│ │ │ ├── resources 0.1.0
│ │ │ ├── bench_helloworld 0.1.0
│ │ │ ├── bench_files_transfer 0.1.0
│ │ │ ├── bench_cpu_intensive 0.1.0
│ │ │ └── api 0.1.0
│ │ └── webkit2gtk 2.0.1
│ │ ├── wry 0.53.5
│ │ ├── tauri-runtime-wry 2.9.1
│ │ ├── tauri-runtime 2.9.1
│ │ │ ├── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
└── atk 0.18.2
└── gtk 0.18.2
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
└── kuchikiki 0.8.8-speedreader
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── tauri-utils 2.8.0
│ ├── tauri-schema-generator 0.0.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ ├── tauri-plugin 2.5.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ └── tauri-plugin-log 2.7.1
│ ├── tauri-macros 2.5.0
│ │ └── tauri 2.9.2
│ ├── tauri-codegen 2.5.0
│ │ ├── tauri-macros 2.5.0
│ │ └── tauri-build 2.5.1
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-cli 2.9.2
│ │ └── tauri-cli-node 0.0.0
│ ├── tauri-bundler 2.7.2
│ │ └── tauri-cli 2.9.2
│ ├── tauri-build 2.5.1
│ ├── tauri 2.9.2
│ └── acl-tests 0.1.0
└── tauri-cli 2.9.2
Crate: gdk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0412
URL: https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
│ └── tray-icon 0.21.2
└── gdkx11 0.18.2
└── wry 0.53.5
Crate: gdk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0418
URL: https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_h...
tauri-bundler v2.7.2
Cargo Audit
Updating git repository `https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
Locking 1050 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding cargo-mobile2 v0.21.2 (available: v0.22.1)
Adding cargo_metadata v0.19.2 (available: v0.23.0)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.6.0)
Adding dialoguer v0.11.0 (available: v0.12.0)
Adding elf v0.7.4 (available: v0.8.0)
Adding goblin v0.9.3 (available: v0.10.3)
Adding html5ever v0.29.1 (available: v0.35.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.1.0)
Adding jsonrpsee v0.24.10 (available: v0.26.0)
Adding jsonrpsee-client-transport v0.24.10 (available: v0.26.0)
Adding jsonrpsee-core v0.24.10 (available: v0.26.0)
Adding jsonrpsee-ws-client v0.24.10 (available: v0.26.0)
Adding matchit v0.8.4 (available: v0.8.6)
Adding minisign v0.7.3 (available: v0.7.9)
Adding object v0.36.7 (available: v0.37.3)
Adding oxc_allocator v0.36.0 (available: v0.95.0)
Adding oxc_ast v0.36.0 (available: v0.95.0)
Adding oxc_parser v0.36.0 (available: v0.95.0)
Adding oxc_span v0.36.0 (available: v0.95.0)
Adding phf v0.11.3 (available: v0.13.1)
Adding png v0.17.16 (available: v0.18.0)
Adding rpm v0.16.1 (available: v0.18.4)
Adding schemars v0.8.22 (available: v1.0.4)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding toml v0.8.2 (available: v0.8.23)
Adding toml_datetime v0.6.3 (available: v0.6.11)
Adding toml_edit v0.20.2 (available: v0.20.7)
Adding urlpattern v0.3.0 (available: v0.4.0)
Adding windows v0.61.3 (available: v0.62.2)
Adding windows-registry v0.5.3 (available: v0.6.1)
Adding windows-sys v0.60.2 (available: v0.61.2)
Adding x509-certificate v0.23.1 (available: v0.25.0)
Adding zip v4.6.1 (available: v6.0.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 861 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── tauri-runtime-wry 2.9.1
├── tauri-runtime 2.9.1
├── tauri 2.9.2
├── tao 0.34.5
│ └── tauri-runtime-wry 2.9.1
├── muda 0.17.1
│ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
└── libappindicator 0.9.0
└── tray-icon 0.21.2
Crate: atk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0416
URL: https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ │ ├── wry 0.53.5
│ │ │ └── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ │ ├── tauri-plugin-sample 0.1.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-plugin-log 2.7.1
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-file-associations-demo 0.1.0
│ │ │ ├── tauri 2.9.2
│ │ │ ├── restart 0.1.0
│ │ │ ├── resources 0.1.0
│ │ │ ├── bench_helloworld 0.1.0
│ │ │ ├── bench_files_transfer 0.1.0
│ │ │ ├── bench_cpu_intensive 0.1.0
│ │ │ └── api 0.1.0
│ │ └── webkit2gtk 2.0.1
│ │ ├── wry 0.53.5
│ │ ├── tauri-runtime-wry 2.9.1
│ │ ├── tauri-runtime 2.9.1
│ │ │ ├── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
└── atk 0.18.2
└── gtk 0.18.2
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
└── kuchikiki 0.8.8-speedreader
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.2
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.1
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.2
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── tauri-utils 2.8.0
│ ├── tauri-schema-generator 0.0.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ ├── tauri-plugin 2.5.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ └── tauri-plugin-log 2.7.1
│ ├── tauri-macros 2.5.0
│ │ └── tauri 2.9.2
│ ├── tauri-codegen 2.5.0
│ │ ├── tauri-macros 2.5.0
│ │ └── tauri-build 2.5.1
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-cli 2.9.2
│ │ └── tauri-cli-node 0.0.0
│ ├── tauri-bundler 2.7.2
│ │ └── tauri-cli 2.9.2
│ ├── tauri-build 2.5.1
│ ├── tauri 2.9.2
│ └── acl-tests 0.1.0
└── tauri-cli 2.9.2
Crate: gdk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0412
URL: https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ └── tauri 2.9.2
├── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.2
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ │ └── tauri 2.9.2
│ │ └── tauri 2.9.2
│ └── libappindicator 0.9.0
│ └── tray-icon 0.21.2
└── gdkx11 0.18.2
└── wry 0.53.5
Crate: gdk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0418
URL: https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.2
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.1
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.2
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_h...
@tauri-apps/cli v2.9.2
[2.9.2]
Dependencies
- Upgraded to
tauri-cli@2.9.2
tauri v2.9.1
Cargo Audit
Updating git repository `https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
Locking 1051 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding cargo-mobile2 v0.21.2 (available: v0.22.1)
Adding cargo_metadata v0.19.2 (available: v0.23.0)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.6.0)
Adding dialoguer v0.11.0 (available: v0.12.0)
Adding elf v0.7.4 (available: v0.8.0)
Adding goblin v0.9.3 (available: v0.10.3)
Adding html5ever v0.29.1 (available: v0.35.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.1.0)
Adding jsonrpsee v0.24.10 (available: v0.26.0)
Adding jsonrpsee-client-transport v0.24.10 (available: v0.26.0)
Adding jsonrpsee-core v0.24.10 (available: v0.26.0)
Adding jsonrpsee-ws-client v0.24.10 (available: v0.26.0)
Adding matchit v0.8.4 (available: v0.8.6)
Adding minisign v0.7.3 (available: v0.7.9)
Adding object v0.36.7 (available: v0.37.3)
Adding oxc_allocator v0.36.0 (available: v0.95.0)
Adding oxc_ast v0.36.0 (available: v0.95.0)
Adding oxc_parser v0.36.0 (available: v0.95.0)
Adding oxc_span v0.36.0 (available: v0.95.0)
Adding phf v0.11.3 (available: v0.13.1)
Adding png v0.17.16 (available: v0.18.0)
Adding rpm v0.16.1 (available: v0.18.4)
Adding schemars v0.8.22 (available: v1.0.4)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding toml v0.8.2 (available: v0.8.23)
Adding toml_datetime v0.6.3 (available: v0.6.11)
Adding toml_edit v0.20.2 (available: v0.20.7)
Adding urlpattern v0.3.0 (available: v0.4.0)
Adding windows v0.61.3 (available: v0.62.2)
Adding windows-registry v0.5.3 (available: v0.6.1)
Adding windows-sys v0.60.2 (available: v0.61.2)
Adding x509-certificate v0.23.1 (available: v0.25.0)
Adding zip v4.6.1 (available: v6.0.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 857 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1076 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.1
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.0
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.1
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ └── tauri 2.9.1
├── tauri-runtime-wry 2.9.1
├── tauri-runtime 2.9.1
├── tauri 2.9.1
├── tao 0.34.5
│ └── tauri-runtime-wry 2.9.1
├── muda 0.17.1
│ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.1
│ └── tauri 2.9.1
└── libappindicator 0.9.0
└── tray-icon 0.21.2
Crate: atk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0416
URL: https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ │ ├── wry 0.53.5
│ │ │ └── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.1
│ │ │ ├── tauri-plugin-sample 0.1.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-plugin-log 2.7.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-file-associations-demo 0.1.0
│ │ │ ├── tauri 2.9.1
│ │ │ ├── restart 0.1.0
│ │ │ ├── resources 0.1.0
│ │ │ ├── bench_helloworld 0.1.0
│ │ │ ├── bench_files_transfer 0.1.0
│ │ │ ├── bench_cpu_intensive 0.1.0
│ │ │ └── api 0.1.0
│ │ └── webkit2gtk 2.0.1
│ │ ├── wry 0.53.5
│ │ ├── tauri-runtime-wry 2.9.1
│ │ ├── tauri-runtime 2.9.1
│ │ │ ├── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.1
│ │ └── tauri 2.9.1
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.21.2
│ │ └── tauri 2.9.1
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.1
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.1
│ └── libappindicator 0.9.0
└── atk 0.18.2
└── gtk 0.18.2
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
└── kuchikiki 0.8.8-speedreader
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.1
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.0
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.1
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── tauri-utils 2.8.0
│ ├── tauri-schema-generator 0.0.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ ├── tauri-plugin 2.5.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ └── tauri-plugin-log 2.7.0
│ ├── tauri-macros 2.5.0
│ │ └── tauri 2.9.1
│ ├── tauri-codegen 2.5.0
│ │ ├── tauri-macros 2.5.0
│ │ └── tauri-build 2.5.1
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.1
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-cli 2.9.1
│ │ └── tauri-cli-node 0.0.0
│ ├── tauri-bundler 2.7.1
│ │ └── tauri-cli 2.9.1
│ ├── tauri-build 2.5.1
│ ├── tauri 2.9.1
│ └── acl-tests 0.1.0
└── tauri-cli 2.9.1
Crate: gdk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0412
URL: https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.1
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ └── tauri 2.9.1
├── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.1
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ │ └── tauri 2.9.1
│ │ └── tauri 2.9.1
│ └── libappindicator 0.9.0
│ └── tray-icon 0.21.2
└── gdkx11 0.18.2
└── wry 0.53.5
Crate: gdk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0418
URL: https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.1
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_h...
tauri-runtime-wry v2.9.1
Cargo Audit
Updating git repository `https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
Locking 1051 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding cargo-mobile2 v0.21.2 (available: v0.22.1)
Adding cargo_metadata v0.19.2 (available: v0.23.0)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.6.0)
Adding dialoguer v0.11.0 (available: v0.12.0)
Adding elf v0.7.4 (available: v0.8.0)
Adding goblin v0.9.3 (available: v0.10.3)
Adding html5ever v0.29.1 (available: v0.35.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.1.0)
Adding jsonrpsee v0.24.10 (available: v0.26.0)
Adding jsonrpsee-client-transport v0.24.10 (available: v0.26.0)
Adding jsonrpsee-core v0.24.10 (available: v0.26.0)
Adding jsonrpsee-ws-client v0.24.10 (available: v0.26.0)
Adding matchit v0.8.4 (available: v0.8.6)
Adding minisign v0.7.3 (available: v0.7.9)
Adding object v0.36.7 (available: v0.37.3)
Adding oxc_allocator v0.36.0 (available: v0.95.0)
Adding oxc_ast v0.36.0 (available: v0.95.0)
Adding oxc_parser v0.36.0 (available: v0.95.0)
Adding oxc_span v0.36.0 (available: v0.95.0)
Adding phf v0.11.3 (available: v0.13.1)
Adding png v0.17.16 (available: v0.18.0)
Adding rpm v0.16.1 (available: v0.18.4)
Adding schemars v0.8.22 (available: v1.0.4)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding toml v0.8.2 (available: v0.8.23)
Adding toml_datetime v0.6.3 (available: v0.6.11)
Adding toml_edit v0.20.2 (available: v0.20.7)
Adding urlpattern v0.3.0 (available: v0.4.0)
Adding windows v0.61.3 (available: v0.62.2)
Adding windows-registry v0.5.3 (available: v0.6.1)
Adding windows-sys v0.60.2 (available: v0.61.2)
Adding x509-certificate v0.23.1 (available: v0.25.0)
Adding zip v4.6.1 (available: v6.0.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 857 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1076 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.1
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.0
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.1
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ └── tauri 2.9.1
├── tauri-runtime-wry 2.9.1
├── tauri-runtime 2.9.1
├── tauri 2.9.1
├── tao 0.34.5
│ └── tauri-runtime-wry 2.9.1
├── muda 0.17.1
│ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.1
│ └── tauri 2.9.1
└── libappindicator 0.9.0
└── tray-icon 0.21.2
Crate: atk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0416
URL: https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ │ ├── wry 0.53.5
│ │ │ └── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.1
│ │ │ ├── tauri-plugin-sample 0.1.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-plugin-log 2.7.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-file-associations-demo 0.1.0
│ │ │ ├── tauri 2.9.1
│ │ │ ├── restart 0.1.0
│ │ │ ├── resources 0.1.0
│ │ │ ├── bench_helloworld 0.1.0
│ │ │ ├── bench_files_transfer 0.1.0
│ │ │ ├── bench_cpu_intensive 0.1.0
│ │ │ └── api 0.1.0
│ │ └── webkit2gtk 2.0.1
│ │ ├── wry 0.53.5
│ │ ├── tauri-runtime-wry 2.9.1
│ │ ├── tauri-runtime 2.9.1
│ │ │ ├── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.1
│ │ └── tauri 2.9.1
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.21.2
│ │ └── tauri 2.9.1
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.1
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.1
│ └── libappindicator 0.9.0
└── atk 0.18.2
└── gtk 0.18.2
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
└── kuchikiki 0.8.8-speedreader
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.1
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.0
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.1
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── tauri-utils 2.8.0
│ ├── tauri-schema-generator 0.0.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ ├── tauri-plugin 2.5.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ └── tauri-plugin-log 2.7.0
│ ├── tauri-macros 2.5.0
│ │ └── tauri 2.9.1
│ ├── tauri-codegen 2.5.0
│ │ ├── tauri-macros 2.5.0
│ │ └── tauri-build 2.5.1
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.1
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-cli 2.9.1
│ │ └── tauri-cli-node 0.0.0
│ ├── tauri-bundler 2.7.1
│ │ └── tauri-cli 2.9.1
│ ├── tauri-build 2.5.1
│ ├── tauri 2.9.1
│ └── acl-tests 0.1.0
└── tauri-cli 2.9.1
Crate: gdk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0412
URL: https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.1
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ └── tauri 2.9.1
├── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.1
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ │ └── tauri 2.9.1
│ │ └── tauri 2.9.1
│ └── libappindicator 0.9.0
│ └── tray-icon 0.21.2
└── gdkx11 0.18.2
└── wry 0.53.5
Crate: gdk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0418
URL: https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.1
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_h...
tauri-runtime v2.9.1
Cargo Audit
Updating git repository `https://github.com/tauri-apps/schemars.git`
Updating crates.io index
warning: Patch `schemars_derive v0.8.21 (https://github.com/tauri-apps/schemars.git?branch=feat%2Fpreserve-description-newlines#c30f9848)` was not used in the crate graph.
Check that the patched package version and available features are compatible
with the dependency requirements. If the patch has a different version from
what is locked in the Cargo.lock file, run `cargo update` to use the new
version. This may also occur with an optional dependency that is not enabled.
Locking 1051 packages to latest compatible versions
Adding apple-codesign v0.27.0 (available: v0.29.0)
Adding cargo-mobile2 v0.21.2 (available: v0.22.1)
Adding cargo_metadata v0.19.2 (available: v0.23.0)
Adding colored v2.2.0 (available: v3.0.0)
Adding ctor v0.2.9 (available: v0.6.0)
Adding dialoguer v0.11.0 (available: v0.12.0)
Adding elf v0.7.4 (available: v0.8.0)
Adding goblin v0.9.3 (available: v0.10.3)
Adding html5ever v0.29.1 (available: v0.35.0)
Adding itertools v0.13.0 (available: v0.14.0)
Adding json-patch v3.0.1 (available: v4.1.0)
Adding jsonrpsee v0.24.10 (available: v0.26.0)
Adding jsonrpsee-client-transport v0.24.10 (available: v0.26.0)
Adding jsonrpsee-core v0.24.10 (available: v0.26.0)
Adding jsonrpsee-ws-client v0.24.10 (available: v0.26.0)
Adding matchit v0.8.4 (available: v0.8.6)
Adding minisign v0.7.3 (available: v0.7.9)
Adding object v0.36.7 (available: v0.37.3)
Adding oxc_allocator v0.36.0 (available: v0.95.0)
Adding oxc_ast v0.36.0 (available: v0.95.0)
Adding oxc_parser v0.36.0 (available: v0.95.0)
Adding oxc_span v0.36.0 (available: v0.95.0)
Adding phf v0.11.3 (available: v0.13.1)
Adding png v0.17.16 (available: v0.18.0)
Adding rpm v0.16.1 (available: v0.18.4)
Adding schemars v0.8.22 (available: v1.0.4)
Adding tiny_http v0.11.0 (available: v0.12.0)
Adding toml v0.8.2 (available: v0.8.23)
Adding toml_datetime v0.6.3 (available: v0.6.11)
Adding toml_edit v0.20.2 (available: v0.20.7)
Adding urlpattern v0.3.0 (available: v0.4.0)
Adding windows v0.61.3 (available: v0.62.2)
Adding windows-registry v0.5.3 (available: v0.6.1)
Adding windows-sys v0.60.2 (available: v0.61.2)
Adding x509-certificate v0.23.1 (available: v0.25.0)
Adding zip v4.6.1 (available: v6.0.0)
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
Loaded 857 security advisories (from /home/runner/.cargo/advisory-db)
Updating crates.io index
Scanning Cargo.lock for vulnerabilities (1076 crate dependencies)
Crate: atk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0413
URL: https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.1
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.0
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.1
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ └── tauri 2.9.1
├── tauri-runtime-wry 2.9.1
├── tauri-runtime 2.9.1
├── tauri 2.9.1
├── tao 0.34.5
│ └── tauri-runtime-wry 2.9.1
├── muda 0.17.1
│ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.1
│ └── tauri 2.9.1
└── libappindicator 0.9.0
└── tray-icon 0.21.2
Crate: atk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0416
URL: https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│ ├── webkit2gtk-sys 2.0.1
│ │ ├── wry 0.53.5
│ │ │ └── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.1
│ │ │ ├── tauri-plugin-sample 0.1.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-plugin-log 2.7.0
│ │ │ │ └── api 0.1.0
│ │ │ ├── tauri-file-associations-demo 0.1.0
│ │ │ ├── tauri 2.9.1
│ │ │ ├── restart 0.1.0
│ │ │ ├── resources 0.1.0
│ │ │ ├── bench_helloworld 0.1.0
│ │ │ ├── bench_files_transfer 0.1.0
│ │ │ ├── bench_cpu_intensive 0.1.0
│ │ │ └── api 0.1.0
│ │ └── webkit2gtk 2.0.1
│ │ ├── wry 0.53.5
│ │ ├── tauri-runtime-wry 2.9.1
│ │ ├── tauri-runtime 2.9.1
│ │ │ ├── tauri-runtime-wry 2.9.1
│ │ │ └── tauri 2.9.1
│ │ └── tauri 2.9.1
│ ├── webkit2gtk 2.0.1
│ ├── libappindicator-sys 0.9.0
│ │ └── libappindicator 0.9.0
│ │ └── tray-icon 0.21.2
│ │ └── tauri 2.9.1
│ ├── libappindicator 0.9.0
│ └── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.1
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ └── tauri 2.9.1
│ └── libappindicator 0.9.0
└── atk 0.18.2
└── gtk 0.18.2
Crate: fxhash
Version: 0.2.1
Warning: unmaintained
Title: fxhash - no longer maintained
Date: 2025-09-05
ID: RUSTSEC-2025-0057
URL: https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
└── kuchikiki 0.8.8-speedreader
├── wry 0.53.5
│ └── tauri-runtime-wry 2.9.1
│ └── tauri 2.9.1
│ ├── tauri-plugin-sample 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-plugin-log 2.7.0
│ │ └── api 0.1.0
│ ├── tauri-file-associations-demo 0.1.0
│ ├── tauri 2.9.1
│ ├── restart 0.1.0
│ ├── resources 0.1.0
│ ├── bench_helloworld 0.1.0
│ ├── bench_files_transfer 0.1.0
│ ├── bench_cpu_intensive 0.1.0
│ └── api 0.1.0
├── tauri-utils 2.8.0
│ ├── tauri-schema-generator 0.0.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ ├── tauri-plugin 2.5.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ └── tauri-plugin-log 2.7.0
│ ├── tauri-macros 2.5.0
│ │ └── tauri 2.9.1
│ ├── tauri-codegen 2.5.0
│ │ ├── tauri-macros 2.5.0
│ │ └── tauri-build 2.5.1
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.1
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-cli 2.9.1
│ │ └── tauri-cli-node 0.0.0
│ ├── tauri-bundler 2.7.1
│ │ └── tauri-cli 2.9.1
│ ├── tauri-build 2.5.1
│ ├── tauri 2.9.1
│ └── acl-tests 0.1.0
└── tauri-cli 2.9.1
Crate: gdk
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0412
URL: https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.1
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_helloworld 0.1.0
│ │ ├── bench_files_transfer 0.1.0
│ │ ├── bench_cpu_intensive 0.1.0
│ │ └── api 0.1.0
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ │ ├── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ └── tauri 2.9.1
├── gtk 0.18.2
│ ├── wry 0.53.5
│ ├── webkit2gtk 2.0.1
│ ├── tauri-runtime-wry 2.9.1
│ ├── tauri-runtime 2.9.1
│ ├── tauri 2.9.1
│ ├── tao 0.34.5
│ │ └── tauri-runtime-wry 2.9.1
│ ├── muda 0.17.1
│ │ ├── tray-icon 0.21.2
│ │ │ └── tauri 2.9.1
│ │ └── tauri 2.9.1
│ └── libappindicator 0.9.0
│ └── tray-icon 0.21.2
└── gdkx11 0.18.2
└── wry 0.53.5
Crate: gdk-sys
Version: 0.18.2
Warning: unmaintained
Title: gtk-rs GTK3 bindings - no longer maintained
Date: 2024-03-04
ID: RUSTSEC-2024-0418
URL: https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.1
│ ├── wry 0.53.5
│ │ └── tauri-runtime-wry 2.9.1
│ │ └── tauri 2.9.1
│ │ ├── tauri-plugin-sample 0.1.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-plugin-log 2.7.0
│ │ │ └── api 0.1.0
│ │ ├── tauri-file-associations-demo 0.1.0
│ │ ├── tauri 2.9.1
│ │ ├── restart 0.1.0
│ │ ├── resources 0.1.0
│ │ ├── bench_h...