[Snyk] Upgrade @tauri-apps/plugin-opener from 2.5.2 to 2.5.3#5
[Snyk] Upgrade @tauri-apps/plugin-opener from 2.5.2 to 2.5.3#5danielbodnar wants to merge 1 commit intomainfrom
Conversation
Snyk has created this PR to upgrade @tauri-apps/plugin-opener from 2.5.2 to 2.5.3. See this package in pnpm: @tauri-apps/plugin-opener See this project in Snyk: https://app.snyk.io/org/danielbodnar/project/fb1fae36-5dba-4f23-a29b-04b364e68a4f?utm_source=github&utm_medium=referral&page=upgrade-pr
There was a problem hiding this comment.
Pull request overview
Upgrades the Keyless desktop app’s Tauri opener plugin dependency to the latest patch release to keep dependencies current.
Changes:
- Bumped
@tauri-apps/plugin-openerfrom2.5.2to2.5.3inkeyless-desktop. - Updated
pnpm-lock.yamlto reflect the new resolved version and integrity.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| keyless-desktop/package.json | Updates the direct dependency version range for @tauri-apps/plugin-opener to ^2.5.3. |
| keyless-desktop/pnpm-lock.yaml | Updates the lockfile entries to resolve @tauri-apps/plugin-opener at 2.5.3. |
Files not reviewed (1)
- keyless-desktop/pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "@tauri-apps/plugin-autostart": "^2", | ||
| "@tauri-apps/plugin-dialog": "^2", | ||
| "@tauri-apps/plugin-opener": "^2", | ||
| "@tauri-apps/plugin-opener": "^2.5.3", |
There was a problem hiding this comment.
The JS dependency is upgraded to @tauri-apps/plugin-opener@2.5.3, but the corresponding Rust crate is still locked to tauri-plugin-opener 2.5.2 in Cargo.lock. Since Tauri plugins typically expect the Rust and JS sides to stay in sync, update the Rust lockfile (e.g., run a targeted cargo update for tauri-plugin-opener) so both sides resolve to the same patch version.
Snyk has created this PR to upgrade @tauri-apps/plugin-opener from 2.5.2 to 2.5.3.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released a month ago.
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: