Apply Version Updates From Current Changes

[github-actions]

Version Updates

Merging this PR will release new versions of the following packages based on your change files.

@tauri-apps/api

[2.0.0-beta.7]

Bug Fixes

• c33f6e6cf(#9211) Re-added the TauriEvent.WINDOW_CREATED (tauri://window-created) event.

Breaking Changes

• 06833f4fa(#9100) Rename FileDrop to DragDrop on structs, enums and enum variants. Also renamed file_drop to drag_drop on fields and function names.

tauri-utils

[2.0.0-beta.11]

New Features

• 259d84529(#9209) Added preInstallScript, postInstallScript, preRemoveScript and postRemoveScript options for bundler > deb and bundler > rpm configs.

Enhancements

• 7c334cb18(#9327) Make the isolation pattern encrypt key unextractable.
• a804a70a7(#9328) The isolation iframe script now removes itself after execution.

Breaking Changes

• 06833f4fa(#9100) Rename FileDrop to DragDrop on structs, enums and enum variants. Also renamed file_drop to drag_drop on fields and function names.

tauri-bundler

[2.0.1-beta.8]

New Features

• 259d84529(#9209) Add suport for include preinstall, postinstall, preremove and postremove scripts into Debian and RPM packages.

Dependencies

• Upgraded to [email protected]

tauri-runtime

[2.0.0-beta.11]

What's Changed

• 06833f4fa(#9100) Updated http crate to 1.1

Dependencies

• Upgraded to [email protected]

Breaking Changes

• 06833f4fa(#9100) The IPC handler closure now receives a http::Request instead of a String representing the request body.
• 06833f4fa(#9100) Rename FileDrop to DragDrop on structs, enums and enum variants. Also renamed file_drop to drag_drop on fields and function names.
• 06833f4fa(#9100) Moved window::dpi module to the root of the crate.

tauri-runtime-wry

[2.0.0-beta.11]

Bug Fixes

• 4c0c780e0(#2690) Fix window inner size evaluation on macOS.
• 5bd47b446(#9246) Fix webview's visibility doesn't change with the app window

What's Changed

• 06833f4fa(#9100) Updated http crate to 1.1

Dependencies

• Upgraded to [email protected]
• Upgraded to [email protected]
• 06833f4fa(#9100) Upgraded to [email protected]

Breaking Changes

• 06833f4fa(#9100) The IPC handler closure now receives a http::Request instead of a String representing the request body.
• 06833f4fa(#9100) Rename FileDrop to DragDrop on structs, enums and enum variants. Also renamed file_drop to drag_drop on fields and function names.

tauri-codegen

[2.0.0-beta.11]

Dependencies

• Upgraded to [email protected]

tauri-macros

[2.0.0-beta.11]

Dependencies

• Upgraded to [email protected]
• Upgraded to [email protected]

tauri-plugin

[2.0.0-beta.11]

Dependencies

• Upgraded to [email protected]

tauri-build

[2.0.0-beta.11]

Dependencies

• Upgraded to [email protected]
• Upgraded to [email protected]

tauri

[2.0.0-beta.14]

New Features

• 06833f4fa(#9100) Added Rect struct.
• 06833f4fa(#9100) Add Webview::bounds and Webview::set_bounds APIs.

Enhancements

• 06833f4fa(#9100) Enhance the IPC URL check by using the Origin header on the custom protocol IPC and the new request URI field on the postMessage IPC instead of using Webview::url() which only returns the URL of the main frame and is not suitable for iframes (iframe URL fetch is still not supported on Android and on Linux when using the postMessage IPC).

Bug Fixes

• c33f6e6cf(#9211) Fixed an issue preventing webview/window creation events to not be emitted. This also fixed the getByLabel and getAll JavaScript functions.

What's Changed

• 06833f4fa(#9100) Updated http crate to 1.1

Dependencies

• Upgraded to [email protected]
• Upgraded to [email protected]
• Upgraded to [email protected]
• Upgraded to [email protected]
• Upgraded to [email protected]

Breaking Changes

• 06833f4fa(#9100) Rename FileDrop to DragDrop on structs, enums and enum variants. Also renamed file_drop to drag_drop on fields and function names.

• 284eca9ef(#9272) Manager::resources_table is now scoped so each App/AppHandle/Window/Webview/WebviewWindow has its own resource collection.

• 06833f4fa(#9100) Refactored the tray icon event struct:

  • Changed TrayIconEvent.icon_rect type to use the new tauri::Rect type.
  • Removed TrayIconEvent.x and TrayIconEvent.y fields and combined them into TrayIconEvent.position field.
  • Removed tauri::tray::Rectangle struct.

@tauri-apps/cli

[2.0.0-beta.12]

New Features

• 93e0e1392 Support specifying a version for tauri add subcommand, for example: tauri add [email protected]

Dependencies

• Upgraded to [email protected]

tauri-cli

[2.0.0-beta.12]

New Features

• 93e0e1392 Support specifying a version for tauri add subcommand, for example: tauri add [email protected]

Enhancements

• 6703b7cbc(#9310) Use $CARGO_MANIFEST_DIR when including templates at build-time.

Dependencies

• Upgraded to [email protected]
• Upgraded to [email protected]

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@sveltejs/[email protected]	environment, eval, filesystem, unsafe	+3	758 kB	svelte-admin
npm/[email protected]	Transitive: environment, shell	+14	267 kB	sindresorhus
npm/[email protected]	None	+1	44.8 kB	lukeed
npm/[email protected]	None	0	31.8 kB	rich_harris
npm/[email protected]	Transitive: environment	+4	4.59 MB	svelte-language-tools-deploy
npm/[email protected]	environment, filesystem Transitive: eval	+17	4.98 MB	dummdidumm
npm/[email protected]	None	0	8.93 MB	conduitry
npm/[email protected]	None	0	10.6 MB	conduitry
npm/[email protected]	None	0	52.8 kB	typescript-bot
npm/[email protected]	None	0	68.8 MB	typescript-bot
npm/[email protected]	environment, filesystem	+4	160 kB	sapphi-red
npm/[email protected]	unsafe Transitive: environment, filesystem, shell	+11	677 MB	menci
npm/[email protected]	filesystem, network	0	16.2 kB	menci
npm/[email protected]	environment, eval, filesystem, network, shell, unsafe	+26	196 MB	vitebot
npm/[email protected]	environment, eval, filesystem, network, shell, unsafe	+10	10.6 MB	vitebot

🚮 Removed packages: npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@types/[email protected], npm/[email protected]

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source
Install scripts	npm/[email protected]	Install script: postinstall Source: echo "[svelte-preprocess] Don't forget to install the preprocessors packages that will be used: node-sass/sass, stylus, less, postcss & postcss-load-config, coffeescript, pug, etc..."	examples/web/package.json

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore npm/[email protected]