Skip to content

deps(deps): bump @tauri-apps/plugin-dialog from 2.6.0 to 2.7.0 in the js-minor group across 1 directory#5

Open
dependabot[bot] wants to merge 61 commits into
mainfrom
dependabot/npm_and_yarn/js-minor-007584fce6
Open

deps(deps): bump @tauri-apps/plugin-dialog from 2.6.0 to 2.7.0 in the js-minor group across 1 directory#5
dependabot[bot] wants to merge 61 commits into
mainfrom
dependabot/npm_and_yarn/js-minor-007584fce6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 18, 2026

Bumps the js-minor group with 1 update in the / directory: @tauri-apps/plugin-dialog.

Updates @tauri-apps/plugin-dialog from 2.6.0 to 2.7.0

Release notes

Sourced from @​tauri-apps/plugin-dialog's releases.

dialog-js v2.7.0

[2.7.0]

  • 24154472 (#3287 by @​Legend-Master) Re-use message command in Rust side for ask and confirm commands, allow-ask and allow-confirm permissions are now aliases to allow-message

Dependencies

  • Upgraded to fs-js@2.5.0
npm warn Unknown user config "always-auth". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.0
npm notice filename: tauri-apps-plugin-dialog-2.7.0.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: b510ecd42d9900725eaf51f42ec98523c40d29b4
npm notice integrity: sha512-4nS/hfGMGCXiA[...]RtrKXkANKDHvw==
npm notice total files: 7
npm notice
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1235993203
+ @tauri-apps/plugin-dialog@2.7.0

dialog v2.7.0

[2.7.0]

  • 24154472 (#3287 by @​Legend-Master) Re-use message command in Rust side for ask and confirm commands, allow-ask and allow-confirm permissions are now aliases to allow-message

... (truncated)

Commits
  • 51b430b ci: delete .changes/updater-new-bundle-support.md
  • fd439b1 Publish New Versions (v2) (#2964)
  • 2522b71 fix(deep-link): revert the breaking change introduced by #2928 (#2970)
  • 9021a73 chore(deps): update dependency rollup to v4.50.0 (#2966)
  • 625bb1c feat(log): re-export the log crate (#2965)
  • 6215afe chore(deps): update dependency rollup to v4.49.0 (#2962)
  • 8cf8eea feat(updater): inject bundle_type into endpoint url (#2960)
  • 509eba8 feat: support message dialogs with 3 buttons (#2641)
  • 9ac5fe8 feat(updater): support bundle-specific targets (#2624)
  • c247410 chore(deps): update dependency typescript-eslint to v8.41.0 (#2956)
  • Additional commits viewable in compare view

…ipeline state management

- Updated UI components to display activity and pipeline status.
- Introduced new hooks and IPC methods for better integration with the atomization process.
- Refactored related code for improved clarity and maintainability.
… backend

- Add wizard_logic.rs: advance_wizard_step, save_wizard_draft, mark_wizard_stale,
  validate_describe_input, validate_project_config, validate_launch_readiness,
  get_default_config, add/update/remove/reorder/get_stories commands
- Add wizard_state.rs: WizardStepState with advance/mark_stale/clear_stale
- Add validation.rs: validate_config, validate_describe, validate_launch_readiness
  with unit tests; ConfigLimits and ConfigDefaultsResponse
- Add stories_crud.rs: full CRUD over prd.json (add, update, remove, reorder, get)
- Add notification_filter.rs: should_emit_verification_failed, build_notification
- Add plan_engine/filters.rs: noise filtering for plan stream output
- Add wizard-logic.ts: IPC bindings for all new Tauri commands
- Remove draft-payload.ts: draft construction moved to save_wizard_draft (Rust)
- Remove plan-stream-filters.ts: filtering moved to plan_engine/filters.rs (Rust)
- Remove wizard store mutations for stories: all writes go through backend
- Replace hardcoded DEFAULT_CONFIG with PLACEHOLDER_CONFIG; config loaded from
  get_default_config on Configure mount
- Wire all new commands in invoke.rs
Standardize linting and formatting across frontend and Rust so Biome, TypeScript, rustfmt, and clippy run clean in strict mode through hooks and CI.
Align rule coverage with artifact and vertical-slice contracts while splitting guidance into focused files to reduce implementation ambiguity.
…g failure

Make AppHandle generic over R: Runtime across the test call chain so
MockRuntime tests compile. Add tauri test feature as dev-dependency,
supply missing StartLoopArgs fields, annotate closure parameter types,
and skip updater artifact creation in CI builds.
Move SystemReadiness to its alphabetically correct position.
…izer prompts

Fix activity, contract, invoke, and plan engine test fixtures so the
full suite passes green. Upgrade atomize templates with richer context
and clearer instructions for chunk, merge, stories, and summarize stages.
…xa token

Introduce a product focused README with GitHub Flavored Markdown, a short
contributing guide and the MIT license so the project is ready for open
source. Ignore OpenSpec generated agent folders and replace the hardcoded
Exa MCP bearer token with an environment variable reference.
Keep the Cursor MCP configuration outside version control so API keys live
only in shell environment variables on the developer machine.
Keep the Cursor agent definitions outside version control because they
are workstation specific and may contain absolute paths.
Prepare the repository for open source release by adding the community
health files that GitHub looks for and by storing the automation that
will finish the lockdown when the repo becomes public.

Adds:
  * SECURITY.md with a reporting policy and scope.
  * .github/CODEOWNERS so future pull requests route to the maintainer.
  * .github/dependabot.yml with weekly updates for cargo, npm, and
    github-actions grouped by patch and minor bumps.
  * .github/ISSUE_TEMPLATE with a config that forces structured forms
    plus bug and feature request templates.
  * scripts/setup-github-security.sh that applies branch rulesets,
    secret scanning, push protection, CodeQL default setup, private
    vulnerability reporting, and SHA pinning for Actions as soon as the
    repository goes public or is upgraded to GitHub Pro.
The initial version of the script required status checks that did not
exist in .github/workflows/test.yml. Point the ruleset at the real job
names so the protection becomes effective as soon as the repository
goes public.

Required checks: typecheck, lint, rust-tests.
The build matrix stays out of the required list because the four
platform combinations are not needed to accept a pull request.
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 18, 2026

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

GitHub now enforces sha_pinning_required for this repository, so every
uses reference in the workflows needs to point at a full 40 character
commit hash instead of a moving tag. The comments next to each hash
keep the semver visible for humans and let Dependabot bump the pin
when a new release ships.

Also drops required_signatures from the main ruleset script because
the maintainer signs commits through GitHub and does not run local
GPG or SSH signing. The rule can come back once signing keys are set
up and the signing workflow is documented.
@taberoajorge
Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps the js-minor group with 1 update: [@tauri-apps/plugin-dialog](https://github.com/tauri-apps/plugins-workspace).

Updates `@tauri-apps/plugin-dialog` from 2.6.0 to 2.7.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.6.0...log-v2.7.0)

---
updated-dependencies:
- dependency-name: "@tauri-apps/plugin-dialog"
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: js-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps(deps): bump @tauri-apps/plugin-dialog from 2.6.0 to 2.7.0 in the js-minor group deps(deps): bump @tauri-apps/plugin-dialog from 2.6.0 to 2.7.0 in the js-minor group across 1 directory Apr 18, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/js-minor-007584fce6 branch from 6c1be93 to 957549d Compare April 18, 2026 16:06
@dependabot dependabot Bot requested a review from taberoajorge as a code owner April 18, 2026 16:06
@taberoajorge taberoajorge force-pushed the dependabot/npm_and_yarn/js-minor-007584fce6 branch from 957549d to 3081401 Compare April 20, 2026 02:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant