[Snyk] Upgrade @tauri-apps/plugin-dialog from 2.4.2 to 2.6.0#3
[Snyk] Upgrade @tauri-apps/plugin-dialog from 2.4.2 to 2.6.0#3danielbodnar wants to merge 1 commit intomainfrom
Conversation
Snyk has created this PR to upgrade @tauri-apps/plugin-dialog from 2.4.2 to 2.6.0. See this package in pnpm: @tauri-apps/plugin-dialog See this project in Snyk: https://app.snyk.io/org/danielbodnar/project/fb1fae36-5dba-4f23-a29b-04b364e68a4f?utm_source=github&utm_medium=referral&page=upgrade-pr
There was a problem hiding this comment.
Pull request overview
Upgrades the Tauri dialog plugin dependency in the desktop app (pnpm workspace) as part of routine dependency maintenance/security hygiene.
Changes:
- Bump
@tauri-apps/plugin-dialogfrom2.4.2to2.6.0inkeyless-desktop/package.json. - Update
keyless-desktop/pnpm-lock.yamlto reflect the new resolved version and integrity.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
keyless-desktop/package.json |
Updates the declared dependency range for @tauri-apps/plugin-dialog to ^2.6.0. |
keyless-desktop/pnpm-lock.yaml |
Updates pnpm lock entries to resolve @tauri-apps/plugin-dialog@2.6.0. |
Files not reviewed (1)
- keyless-desktop/pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "@tauri-apps/api": "^2", | ||
| "@tauri-apps/plugin-autostart": "^2", | ||
| "@tauri-apps/plugin-dialog": "^2", | ||
| "@tauri-apps/plugin-dialog": "^2.6.0", |
There was a problem hiding this comment.
This upgrades the JS package to @tauri-apps/plugin-dialog@2.6.0, but the Rust side is still locked to tauri-plugin-dialog 2.4.2 in the repo’s Cargo.lock. That version skew can cause runtime/plugin IPC incompatibilities and makes the upgrade incomplete. Please also update the Rust dependency lock (e.g., run a targeted cargo update for tauri-plugin-dialog and commit the updated Cargo.lock) so the Rust crate matches the JS plugin version you’re now depending on.
| "@tauri-apps/plugin-dialog": "^2.6.0", | |
| "@tauri-apps/plugin-dialog": "^2.4.2", |
Snyk has created this PR to upgrade @tauri-apps/plugin-dialog from 2.4.2 to 2.6.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 2 versions ahead of your current version.
The recommended version was released a month ago.
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: