fix(pnpm): ignore micromatch ReDoS vuln CVE-2024-4067

This reverts commit dc49cb3d9b.

.cargo/config.toml

@@ -1,2 +1,4 @@
 [env]
+# workaround needed to prevent `STATUS_ENTRYPOINT_NOT_FOUND` error
+# see https://github.com/tauri-apps/tauri/pull/4383#issuecomment-1212221864
 __TAURI_WORKSPACE__ = "true"

.changes/add-notarize-error.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Include notarization error output in the error message if it fails.

.changes/allow-commands-by-default.md

@@ -0,0 +1,5 @@
+---
+"tauri-build": patch:feat
+---
+
+Added `InlinedPlugin::default_permission` to autogenerate the default permission of an inlined plugin.

.changes/android-dev-open-adb-fix.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Fixes running `android dev --open`.

.changes/android-gradle-8-9.md

@@ -0,0 +1,6 @@
+---
+'tauri-cli': 'patch:enhance'
+'@tauri-apps/cli': 'patch:enhance'
+---
+
+Update gradle to 8.9 and the gradle android plugin to 8.5.1 in the android templates (requires latest Android Studio). This should add support for Java 21 but Java 17 keeps being the recommended version.

.changes/android-port-forward-fixes.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Fixes `android dev` port forward failing under some conditions, add better logging and error handling.

.changes/append_invoke_initialization_script.md

@@ -0,0 +1,5 @@
+---
+"tauri": patch:enhance
+---
+
+Added `Builder::append_invoke_initialization_script`.

.changes/avoid-rebuilds.md

@@ -0,0 +1,7 @@
+---
+"tauri": patch:bug
+"tauri-build": patch:bug
+"tauri-utils": patch:bug
+---
+
+Prevent build script from rerunning unnecessarily by only writing files when the content changes.

.changes/brotli-6.md

@@ -0,0 +1,6 @@
+---
+"tauri-codegen": patch:deps
+"tauri-utils": patch:deps
+---
+
+Updated brotli to v6.

.changes/bundler-object-custom-sign-command.md

@@ -0,0 +1,8 @@
+---
+"tauri-bundler": patch:feat
+"tauri-utils": patch:feat
+"@tauri-apps/cli": patch:feat
+"tauri-cli": patch:feat
+---
+
+Custom sign command with object notation for whitespaces in the command path and arguments.

.changes/change-default-export-option-debugging.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:changes
+"@tauri-apps/cli": patch:changes
+---
+
+Change iOS template default export method from deprecated `development` to `debugging`.

.changes/change-pr-10498.md

@@ -0,0 +1,5 @@
+---
+"tauri-bundler": patch:bug
+---
+
+Correct nsis pre-uninstall hook to post-uninstall

.changes/change-pr-10619.md

@@ -0,0 +1,5 @@
+---
+"tauri-bundler": "patch:bug"
+---
+
+Fixed an issue that caused the bundler to not be able to download the AppImage tooling when building for ARM 32bit.

.changes/change-pr-10676.md

@@ -0,0 +1,6 @@
+---
+"@tauri-apps/cli": 'patch:bug'
+"tauri-cli": 'patch:bug'
+---
+
+Change plugin template call to `register_ios_plugin` params to snake case

.changes/check-android-lib-symbols.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:enhance
+"@tauri-apps/cli": patch:enhance
+---
+
+Check if the Rust library contains the symbols required at runtime for Android and iOS apps.

.changes/cli-add-no-fmt.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": "patch:enhance"
+"@tauri-apps/cli": "patch:enhance"
+---
+
+Added `--no-fmt` option to the `add` command to skip formatting the code after applying changes.

.changes/cli-android-template-androidtv.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": "patch:feat"
+"@tauri-apps/cli": "patch:feat"
+---
+
+Add necessary options to `AndroidManifest.xml` in android template to support AndroidTV.

.changes/cli-make-app-dir-consistent.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+CLI commands will now consistently search for the `app_dir` (the directory containing `package.json`) from the current working directory of the command invocation.

.changes/cli-mobile-checks.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:enhance
+"@tauri-apps/cli": patch:enhance
+---
+
+Check if identifier or lib name changed when running mobile commands.

.changes/cli-signtool-path.md

@@ -0,0 +1,5 @@
+---
+"tauri-bundler": patch:feat
+---
+
+`TAURI_WINDOWS_SIGNTOOL_PATH` environment variable for specifying the path to signtool.exe.

.changes/config.json

@@ -14,10 +14,13 @@
   "pkgManagers": {
     "rust": {
       "version": true,
-      "getPublishedVersion": "node ../../.scripts/covector/package-latest-version.js cargo ${ pkgFile.pkg.package.name } ${ pkgFile.pkg.package.version }",
+      "getPublishedVersion": {
+        "use": "fetch:check",
+        "options": {
+          "url": "https://crates.io/api/v1/crates/${ pkg.pkgFile.pkg.package.name }/${ pkg.pkgFile.version }"
+        }
+      },
       "prepublish": [
-        "sudo apt-get update",
-        "sudo apt-get install -y webkit2gtk-4.1 libayatana-appindicator3-dev",
         "cargo install cargo-audit --features=fix",
         {
           "command": "cargo generate-lockfile",
@@ -43,11 +46,6 @@
         }
       ],
       "publish": [
-        "sleep 15s",
-        {
-          "command": "cargo package --no-verify",
-          "dryRunCommand": true
-        },
         {
           "command": "echo '<details>\n<summary><em><h4>Cargo Publish</h4></em></summary>\n\n```'",
           "dryRunCommand": true,
@@ -64,33 +62,34 @@
           "pipe": true
         }
       ],
-      "postpublish": [
-        "git tag ${ pkg.pkg }-v${ pkgFile.versionMajor } -f",
-        "git tag ${ pkg.pkg }-v${ pkgFile.versionMajor }.${ pkgFile.versionMinor } -f",
-        "git push --tags -f"
-      ],
-      "assets": [
-        {
-          "path": "./target/package/${ pkg.pkg }-${ pkgFile.version }.crate",
-          "name": "${ pkg.pkg }-${ pkgFile.version }.crate"
-        }
-      ]
+      "postpublish": {
+        "use": "fetch:check",
+        "options": {
+          "url": "https://crates.io/api/v1/crates/${ pkg.pkgFile.pkg.package.name }/${ pkg.pkgFile.version }"
+        },
+        "retries": [5000, 5000, 5000]
+      }
     },
     "javascript": {
       "version": true,
-      "getPublishedVersion": "node ../../.scripts/covector/package-latest-version.js npm ${ pkgFile.pkg.name } ${ pkgFile.pkg.version }",
+      "getPublishedVersion": {
+        "use": "fetch:check",
+        "options": {
+          "url": "https://registry.npmjs.com/${ pkg.pkgFile.pkg.name }/${ pkg.pkgFile.version }"
+        }
+      },
       "prepublish": [
         {
-          "command": "yarn",
+          "command": "pnpm i --frozen-lockfile",
           "dryRunCommand": true
         },
         {
-          "command": "echo '<details>\n<summary><em><h4>Yarn Audit</h4></em></summary>\n\n```'",
+          "command": "echo '<details>\n<summary><em><h4>PNPM Audit</h4></em></summary>\n\n```'",
           "dryRunCommand": true,
           "pipe": true
         },
         {
-          "command": "yarn audit",
+          "command": "pnpm audit",
           "dryRunCommand": true,
           "runFromRoot": true,
           "pipe": true
@@ -99,22 +98,17 @@
           "command": "echo '```\n\n</details>\n'",
           "dryRunCommand": true,
           "pipe": true
-        },
-        {
-          "command": "npm pack",
-          "dryRunCommand": true
         }
       ],
       "publish": [
-        "sleep 15s",
         {
-          "command": "echo '<details>\n<summary><em><h4>Yarn Publish</h4></em></summary>\n\n```'",
+          "command": "echo '<details>\n<summary><em><h4>PNPM Publish</h4></em></summary>\n\n```'",
           "dryRunCommand": true,
           "pipe": true
         },
         {
-          "command": "yarn publish --access public --loglevel silly --tag next",
-          "dryRunCommand": "npm publish --dry-run --access public",
+          "command": "pnpm publish --access public --loglevel silly --tag next --no-git-checks",
+          "dryRunCommand": "npm publish --dry-run --access public --no-git-checks",
           "pipe": true
         },
         {
@@ -123,57 +117,27 @@
           "pipe": true
         }
       ],
-      "postpublish": [
-        "git tag ${ pkg.pkg }-v${ pkgFile.versionMajor } -f",
-        "git tag ${ pkg.pkg }-v${ pkgFile.versionMajor }.${ pkgFile.versionMinor } -f",
-        "git push --tags -f"
-      ]
+      "postpublish": {
+        "use": "fetch:check",
+        "options": {
+          "url": "https://registry.npmjs.com/${ pkg.pkgFile.pkg.name }/${ pkg.pkgFile.version }"
+        },
+        "retries": [5000, 5000, 5000]
+      }
     }
   },
   "packages": {
     "@tauri-apps/api": {
       "path": "./tooling/api",
       "manager": "javascript",
-      "assets": [
-        {
-          "path": "./tooling/api/dist/tauri-apps-api-${ pkgFile.version }.tgz",
-          "name": "tauri-apps-api-${ pkgFile.version }.tgz"
-        }
-      ],
-      "prepublish": [
-        {
-          "command": "yarn",
-          "dryRunCommand": true
-        },
-        {
-          "command": "echo '<details>\n<summary><em><h4>Yarn Audit</h4></em></summary>\n\n```'",
-          "dryRunCommand": true,
-          "pipe": true
-        },
-        {
-          "command": "yarn audit",
-          "dryRunCommand": true,
-          "runFromRoot": true,
-          "pipe": true
-        },
-        {
-          "command": "echo '```\n\n</details>\n'",
-          "dryRunCommand": true,
-          "pipe": true
-        },
-        {
-          "command": "yarn npm-pack",
-          "dryRunCommand": true
-        }
-      ],
       "publish": [
         {
-          "command": "echo '<details>\n<summary><em><h4>Yarn Publish</h4></em></summary>\n\n```'",
+          "command": "echo '<details>\n<summary><em><h4>PNPM Publish</h4></em></summary>\n\n```'",
           "dryRunCommand": true,
           "pipe": true
         },
         {
-          "command": "yarn npm-publish",
+          "command": "pnpm npm-publish",
           "dryRunCommand": true,
           "pipe": true
         },
@@ -221,14 +185,14 @@
       "path": "./core/tauri-plugin",
       "manager": "rust",
       "dependencies": ["tauri-utils"],
-      "postversion": "node ../../.scripts/covector/sync-cli-metadata.js ${ pkg.pkg } ${ release.type }"
+      "postversion": "node ../../.scripts/ci/sync-cli-metadata.js ${ pkg.pkg } ${ release.type }"
     },
     "tauri-build": {
       "path": "./core/tauri-build",
       "manager": "rust",
       "dependencies": ["tauri-codegen", "tauri-utils"],
       "postversion": [
-        "node ../../.scripts/covector/sync-cli-metadata.js ${ pkg.pkg } ${ release.type }",
+        "node ../../.scripts/ci/sync-cli-metadata.js ${ pkg.pkg } ${ release.type }",
         "cargo build --manifest-path ../tauri-config-schema/Cargo.toml"
       ],
       "assets": [
@@ -248,15 +212,14 @@
         "tauri-runtime-wry",
         "tauri-build"
       ],
-      "postversion": "node ../../.scripts/covector/sync-cli-metadata.js ${ pkg.pkg } ${ release.type }"
+      "postversion": "node ../../.scripts/ci/sync-cli-metadata.js ${ pkg.pkg } ${ release.type }"
     },
     "@tauri-apps/cli": {
       "path": "./tooling/cli/node",
       "manager": "javascript",
-      "getPublishedVersion": "node ../../../.scripts/covector/package-latest-version.js npm ${ pkgFile.pkg.name } ${ pkgFile.pkg.version }",
       "dependencies": ["tauri-cli"],
       "postversion": [
-        "node ../../../.scripts/covector/sync-cli-metadata.js ${ pkg.pkg } ${ release.type }",
+        "node ../../../.scripts/ci/sync-cli-metadata.js ${ pkg.pkg } ${ release.type }",
         "cargo build --manifest-path ../../../core/tauri-config-schema/Cargo.toml"
       ],
       "prepublish": [],
@@ -270,12 +233,6 @@
       "postversion": [
         "cargo check",
         "cargo build --manifest-path ../../core/tauri-config-schema/Cargo.toml"
-      ],
-      "assets": [
-        {
-          "path": "${ pkg.path }/target/package/tauri-cli-${ pkgFile.version }.crate",
-          "name": "${ pkg.pkg }-${ pkgFile.version }.crate"
-        }
       ]
     },
     "tauri-driver": {

.changes/enhance-permission-error-message.md

@@ -0,0 +1,5 @@
+---
+"tauri": patch:enhance
+---
+
+Include more information in the IPC permission error message.

.changes/feat-remove-target-sdk.md

@@ -0,0 +1,7 @@
+---
+"tauri": patch:changes
+"@tauri-apps/cli": patch:changes
+"tauri-cli": patch:changes
+---
+
+Remove targetSdk from gradle files

.changes/fix-adb.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Fixes running `adb reverse` in Node.js context.

.changes/fix-android-remove-current-script.md

@@ -0,0 +1,5 @@
+---
+"tauri-utils": patch:bug
+---
+
+Properly remove isolation script on Android.

.changes/fix-cli-add-plugin-version.md

@@ -0,0 +1,6 @@
+---
+'tauri-cli': 'patch:bug'
+'@tauri-apps/cli': 'patch:bug'
+---
+
+Changed the `add` command to use a version requirement that matches the CLI's stable and prerelease numbers.

.changes/fix-cli-dev-server-android.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Fixes `android dev` not working when using the builtin dev server.

.changes/fix-cli-panic-bun.md

@@ -0,0 +1,5 @@
+---
+"@tauri-apps/cli": patch:bug
+---
+
+Exit with code 1 if a panic occurs when running the CLI with `bun`.

.changes/fix-colon-in-file-path.md

@@ -0,0 +1,5 @@
+---
+"tauri-utils": "patch:bug"
+---
+
+Fixed an issue where permission files will be generated with ':' in the file path.

.changes/fix-config-override.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Fixes `[android|ios] build --config <config>` failing to resolve.

.changes/fix-export-default-permissions.md

@@ -0,0 +1,5 @@
+---
+"tauri-build": patch:bug
+---
+
+Correctly export `DefaultPermissionsRule`

.changes/fix-ios-build-older-swift.md

@@ -0,0 +1,6 @@
+---
+'tauri-cli': 'patch:bug'
+'@tauri-apps/cli': 'patch:bug'
+---
+
+Fix Swift plugin compilation on older versions.

.changes/fix-ios-bun-support.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Fixes running `ios dev` and `ios build` using `bun`.

.changes/fix-ipc-fallback.md

@@ -0,0 +1,5 @@
+---
+"tauri": patch:bug
+---
+
+Fix IPC fallback (postMessage implementation when custom protocol fails) hanging when sending responses.

.changes/fix-manifest-migration.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Fixes v1 migration of Cargo.toml dependencies and features.

.changes/fix-missing-codesign-error-macos.md

@@ -0,0 +1,5 @@
+---
+"tauri-macos-sign": patch:bug
+---
+
+Fixes output not visible when running on Node.js via NAPI.

.changes/fix-tslib-path.md

@@ -0,0 +1,5 @@
+---
+"@tauri-apps/api": patch:bug
+---
+
+Fix tslib path in dist.

.changes/fix-v1-frontend-migration.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Fixes v1 frontend code migration when using plugin default imports.

.changes/fix-xcodebuild-arch.md

@@ -0,0 +1,7 @@
+---
+'tauri-cli': 'patch:bug'
+'@tauri-apps/cli': 'patch:bug'
+---
+
+Do not include the target arch when building and archiving the iOS application,
+which makes Xcode project modifications more flexible.

.changes/get-window-async.md

@@ -0,0 +1,9 @@
+---
+"@tauri-apps/api": patch:breaking
+---
+
+Changed `WebviewWindow.getAll`, `WebviewWindow.getByLabel`, `getAllWebviewWindows`,
+`Window.getAll`, `Window.getByLabel`, `getAllWindows`,
+`Webview.getAll`, `Webview.getByLabel`, `getAllWebviews`
+to be async so their return value are synchronized with the state from the Rust side,
+meaning new and destroyed windows are reflected.

.changes/improve-cli-init.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:enhance
+"@tauri-apps/cli": patch:enhance
+---
+
+Improve the `init` command behavior by detecting the project NPM package manager.

.changes/infer-signing-identity.md

@@ -0,0 +1,7 @@
+---
+"tauri-bundler": patch:enhance
+"tauri-cli": patch:enhance
+"@tauri-apps/cli": patch:enhance
+---
+
+Infer macOS codesign identity from the `APPLE_CERTIFICATE` environment variable when provided, meaning the identity no longer needs to be provided when signing on CI using that option. If the imported certificate name does not match a provided signingIdentity configuration, an error is returned.

.changes/inject-mobile-resources.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:feat
+"@tauri-apps/cli": patch:feat
+---
+
+Inject configured resources on mobile apps.

.changes/ios-codesign-on-build.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:breaking
+"@tauri-apps/cli": patch:breaking
+---
+
+The `IOS_CERTIFICATE`, `IOS_CERTIFICATE_PASSWORD` and `IOS_MOBILE_PROVISION` environment variables are now read by the `ios build` command instead of `ios init`.

.changes/ios-custom-project-template.md

@@ -0,0 +1,7 @@
+---
+"tauri-utils": patch:feat
+"tauri-cli": patch:feat
+"@tauri-apps/cli": patch:feat
+---
+
+Added `bundle > ios > template` configuration option for custom Xcode project YML Handlebars template using XcodeGen.

.changes/ios-default-minversion.md

@@ -0,0 +1,7 @@
+---
+'tauri-utils': 'patch:bug'
+'tauri-cli': 'patch:bug'
+'@tauri-apps/cli': 'patch:bug'
+---
+
+Fixed an issue causing `tauri ios init` to fail if `iOS.minimumSystemVersion` was not configured explicitly.

.changes/migrate-plugins.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Migrate v1 plugins to their v2 releases.

.changes/migrate-prevent-duplications.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Prevent duplicate permissions on v1 migration.

.changes/migrate-vue-svelte.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:feat
+"@tauri-apps/cli": patch:feat
+---
+
+v1 migrate script now migrates Svelte and Vue.js code.

.changes/min-ios-version.md

@@ -0,0 +1,7 @@
+---
+"tauri-utils": patch:feat
+"tauri-cli": patch:feat
+"@tauri-apps/cli": patch:feat
+---
+
+Added `bundle > ios > minimumSystemVersion` configuration option.

.changes/mobile-identifier.md

@@ -0,0 +1,8 @@
+---
+"tauri-cli": patch:bug
+"tauri-build": patch:bug
+"@tauri-apps/cli": patch:bug
+"tauri-runtime-wry": patch:bug
+---
+
+Allow hyphens and underscores on app identifiers.

.changes/only-validate-ios-lib-debug.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Only validate the output iOS library on debug builds.

.changes/permissions-add-target-specific.md

@@ -0,0 +1,7 @@
+---
+"tauri-cli": patch:enhance
+"@tauri-apps/cli": patch:enhance
+---
+
+`permission add` and `add` commands now check if the plugin is known and if it is either desktop or mobile only
+we add the permission to a target-specific capability.

.changes/pre.json

@@ -1,18 +1,85 @@
 {
   "tag": "rc",
   "changes": [
+    ".changes/add-notarize-error.md",
+    ".changes/allow-commands-by-default.md",
+    ".changes/android-dev-open-adb-fix.md",
+    ".changes/android-gradle-8-9.md",
+    ".changes/android-port-forward-fixes.md",
+    ".changes/append_invoke_initialization_script.md",
     ".changes/asset-resolver-dev-fallback.md",
+    ".changes/avoid-rebuilds.md",
+    ".changes/brotli-6.md",
+    ".changes/bundler-object-custom-sign-command.md",
+    ".changes/change-default-export-option-debugging.md",
     ".changes/change-pr-10435.md",
+    ".changes/change-pr-10498.md",
+    ".changes/change-pr-10619.md",
+    ".changes/change-pr-10676.md",
+    ".changes/check-android-lib-symbols.md",
+    ".changes/cli-add-no-fmt.md",
+    ".changes/cli-android-template-androidtv.md",
     ".changes/cli-desktop-port-exposure.md",
+    ".changes/cli-make-app-dir-consistent.md",
+    ".changes/cli-mobile-checks.md",
+    ".changes/cli-signtool-path.md",
     ".changes/core-plugin-namespace.md",
     ".changes/dev-url-localhost-mobile.md",
+    ".changes/enhance-permission-error-message.md",
+    ".changes/feat-remove-target-sdk.md",
+    ".changes/fix-adb.md",
+    ".changes/fix-android-remove-current-script.md",
+    ".changes/fix-cli-add-plugin-version.md",
+    ".changes/fix-cli-dev-server-android.md",
+    ".changes/fix-cli-panic-bun.md",
+    ".changes/fix-colon-in-file-path.md",
     ".changes/fix-conf-parsing-error-filepath.md",
+    ".changes/fix-config-override.md",
+    ".changes/fix-export-default-permissions.md",
+    ".changes/fix-ios-build-older-swift.md",
+    ".changes/fix-ios-bun-support.md",
+    ".changes/fix-ipc-fallback.md",
+    ".changes/fix-manifest-migration.md",
+    ".changes/fix-missing-codesign-error-macos.md",
+    ".changes/fix-tslib-path.md",
     ".changes/fix-usage-without-compression.md",
+    ".changes/fix-v1-frontend-migration.md",
+    ".changes/fix-xcodebuild-arch.md",
+    ".changes/get-window-async.md",
+    ".changes/improve-cli-init.md",
+    ".changes/infer-signing-identity.md",
+    ".changes/inject-mobile-resources.md",
+    ".changes/ios-codesign-on-build.md",
+    ".changes/ios-custom-project-template.md",
+    ".changes/ios-default-minversion.md",
     ".changes/ios-frameworks.md",
     ".changes/isolation-main-frame-origin.md",
     ".changes/linux-option-gtk-app-id.md",
+    ".changes/migrate-plugins.md",
+    ".changes/migrate-prevent-duplications.md",
+    ".changes/migrate-vue-svelte.md",
+    ".changes/min-ios-version.md",
+    ".changes/mobile-identifier.md",
+    ".changes/only-validate-ios-lib-debug.md",
+    ".changes/permissions-add-target-specific.md",
     ".changes/plugin-builder-failable.md",
     ".changes/rc-migration.md",
-    ".changes/remove-unsecure-configs.md"
+    ".changes/refactor-ipc-error.md",
+    ".changes/refactor-ipc-response.md",
+    ".changes/remove-open-command.md",
+    ".changes/remove-unsecure-configs.md",
+    ".changes/resource-dir-android.md",
+    ".changes/resource-dir-ios.md",
+    ".changes/resources-map-becoming-dirs.md",
+    ".changes/synchronize-pbxproj-export-options.md",
+    ".changes/tauri-driver-1.x.md",
+    ".changes/universal-bin-build-fails.md",
+    ".changes/update-docs-icon-path.md",
+    ".changes/update-pbxproj-codesign.md",
+    ".changes/update-tao-wry.md",
+    ".changes/utils-autogenerated-command-return-list.md",
+    ".changes/utils-fix-plugin-reference.md",
+    ".changes/v1-migrate-updater.md",
+    ".changes/v1-migration-improvement.md"
   ]
 }

.changes/refactor-ipc-error.md

@@ -0,0 +1,5 @@
+---
+"tauri": patch:changes
+---
+
+Change how IPC handles errors to simplify what's logged in the console.

.changes/refactor-ipc-response.md

@@ -0,0 +1,6 @@
+---
+"tauri": patch:breaking
+---
+
+Added a dedicated type for IPC response body `InvokeResponseBody` for performance reasons.
+This is only a breaking change if you are directly using types from `tauri::ipc`.

.changes/remove-open-command.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:changes
+"@tauri-apps/cli": patch:changes
+---
+
+Removed the `[android|ios] open` command. It is recommended to use `[android|ios] dev --open` or `[android|ios] build --open` instead.

.changes/resource-dir-android.md

@@ -0,0 +1,5 @@
+---
+"tauri-utils": patch:bug
+---
+
+Implemented `resource_dir` on Android, which returns a URI that needs to be resolved using [AssetManager::open](https://developer.android.com/reference/android/content/res/AssetManager#open(java.lang.String,%20int)). This will be handled by the file system plugin.

.changes/resource-dir-ios.md

@@ -0,0 +1,5 @@
+---
+"tauri-utils": patch:bug
+---
+
+Fix `resource_dir` on iOS.

.changes/resources-map-becoming-dirs.md

@@ -0,0 +1,5 @@
+---
+"tauri-utils": "patch:bug"
+---
+
+Fix `ResourcePaths` iterator returning an unexpected result for mapped resources, for example `"../resources/user.json": "resources/user.json"` generates this resource `resources/user.json/user.json` where it should generate just `resources/user.json`.

.changes/synchronize-pbxproj-export-options.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Synchronize Xcode project changes with the ExportOptions.plist file so `ios build` calls can work with code signing changes made in Xcode.

.changes/tauri-driver-1.x.md

@@ -0,0 +1,5 @@
+---
+"tauri-driver": patch:bug
+---
+
+support both 1.x and 2.x automation env vars in `tauri-driver`

.changes/universal-bin-build-fails.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+fails to build universal fat binary if main bin is renamed to another name in `Cargo.toml`

.changes/update-docs-icon-path.md

@@ -0,0 +1,17 @@
+---
+"tauri": patch:changes
+"tauri-runtime": patch:changes
+"tauri-runtime-wry": patch:changes
+"tauri-utils": patch:changes
+"tauri-macros": patch:changes
+"tauri-codegen": patch:changes
+"tauri-build": patch:changes
+"tauri-plugin": patch:changes
+"tauri-driver": patch:changes
+"tauri-cli": patch:changes
+"@tauri-apps/cli": patch:changes
+"@tauri-apps/api": patch:changes
+"tauri-bundler": patch:changes
+---
+
+Update documentation icon path.

.changes/update-pbxproj-codesign.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:enhance
+"@tauri-apps/cli": patch:enhance
+---
+
+Modify both ExportOptions.plist and project.pbxproj to reflect changes for the `IOS_CERTIFICATE`, `IOS_CERTIFICATE_PASSWORD` and `IOS_MOBILE_PROVISION` environment variables.

.changes/update-tao-wry.md

@@ -0,0 +1,7 @@
+---
+"tauri": patch:deps
+"tauri-runtime": patch:deps
+"tauri-runtime-wry": patch:deps
+---
+
+Update `tao` to 0.29 and `wry` to 0.42.

.changes/utils-autogenerated-command-return-list.md

@@ -0,0 +1,5 @@
+---
+"tauri-utils": patch:enhance
+---
+
+Return autogenerated permissions from `autogenerate_command_permissions`.

.changes/utils-fix-plugin-reference.md

@@ -0,0 +1,5 @@
+---
+"tauri-utils": patch:bug
+---
+
+Fix plugin permissions documentation heading for permissions table.

.changes/v1-migrate-updater.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Migration from v1 to v2 now adds the updater plugin when it is active.

.changes/v1-migration-improvement.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+Improve migration tooling by supporting TOML configs, handle nulls and properly check for updater migration.

.devcontainer/README.md

@@ -24,7 +24,7 @@ Prerequisites are mainly derived from VS Code's instructions for usage of develo
 
 ### A note on filesystem performance
 
-Due to limitations in how Docker shares files between the Docker host and a container, it's also recommended that developers [clone Tauri source code into a container volume](https://code.visualstudio.com/remote/advancedcontainers/improve-performance#_use-clone-repository-in-container-volume). This is optional, but highly advised as many filesystem/IO heavy operations (`cargo build`, `yarn install`, etc) will be very slow if they operate on directories shared with a Docker container from the Docker host.
+Due to limitations in how Docker shares files between the Docker host and a container, it's also recommended that developers [clone Tauri source code into a container volume](https://code.visualstudio.com/remote/advancedcontainers/improve-performance#_use-clone-repository-in-container-volume). This is optional, but highly advised as many filesystem/IO heavy operations (`cargo build`, `pnpm install`, etc) will be very slow if they operate on directories shared with a Docker container from the Docker host.
 
 To do this, open your project with VS Code and run **Remote-Containers: Clone Repository in Container Volume...** from the Command Palette (<kbd>F1</kbd>).
 

.github/CODE_OF_CONDUCT.md

@@ -1,4 +1,3 @@
-
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge
@@ -18,23 +17,23 @@ diverse, inclusive, and healthy community.
 Examples of behavior that contributes to a positive environment for our
 community include:
 
-* Demonstrating empathy and kindness toward other people
-* Being respectful of differing opinions, viewpoints, and experiences
-* Giving and gracefully accepting constructive feedback
-* Accepting responsibility and apologizing to those affected by our mistakes,
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our mistakes,
   and learning from the experience
-* Focusing on what is best not just for us as individuals, but for the overall
+- Focusing on what is best not just for us as individuals, but for the overall
   community
 
 Examples of unacceptable behavior include:
 
-* The use of sexualized language or imagery, and sexual attention or advances of
+- The use of sexualized language or imagery, and sexual attention or advances of
   any kind
-* Trolling, insulting or derogatory comments, and personal or political attacks
-* Public or private harassment
-* Publishing others' private information, such as a physical or email address,
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or email address,
   without their explicit permission
-* Other conduct which could reasonably be considered inappropriate in a
+- Other conduct which could reasonably be considered inappropriate in a
   professional setting
 
 ## Enforcement Responsibilities
@@ -130,4 +129,4 @@ For answers to common questions about this code of conduct, see the FAQ at
 [v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html
 [Mozilla CoC]: https://github.com/mozilla/diversity
 [FAQ]: https://www.contributor-covenant.org/faq
-[translations]: https://www.contributor-covenant.org/translations
+[translations]: https://www.contributor-covenant.org/translations

.github/CONTRIBUTING.md

@@ -48,7 +48,7 @@ Hi! We, the maintainers, are really excited that you are interested in contribut
 
 First, [join our Discord server](https://discord.gg/SpmNs4S) and let us know that you want to contribute. This way we can point you in the right direction and help ensure your contribution will be as helpful as possible.
 
-To set up your machine for development, follow the [Tauri setup guide](https://tauri.app/v1/guides/getting-started/prerequisites/) to get all the tools you need to develop Tauri apps. The only additional tool you may need is [Yarn](https://yarnpkg.com/), it is only required if you are developing the Node CLI or API packages (`tooling/cli/node` and `tooling/api`). Next, fork and clone this repo. It is structured as a monorepo, which means that all the various Tauri packages are under the same repository. The development process varies depending on what part of Tauri you are contributing to, see the guides below for per-package instructions.
+To set up your machine for development, follow the [Tauri setup guide](https://tauri.app/v1/guides/getting-started/prerequisites/) to get all the tools you need to develop Tauri apps. The only additional tool you may need is [PNPM](https://pnpm.io/), it is only required if you are developing the Node CLI or API packages (`tooling/cli/node` and `tooling/api`). Next, fork and clone this repo. It is structured as a monorepo, which means that all the various Tauri packages are under the same repository. The development process varies depending on what part of Tauri you are contributing to, see the guides below for per-package instructions.
 
 Some Tauri packages will be automatically built when running one of the examples. Others, however, will need to be built beforehand. To build these automatically, run the `.scripts/setup.sh` (Linux and macOS) or `.scripts/setup.ps1` (Windows) script. This will install the Rust and Node.js CLI and build the JS API. After that, you should be able to run all the examples. Note that the setup script should be executed from the root folder of the repository in order to run correctly.
 
@@ -78,7 +78,7 @@ $ RUSTDOCFLAGS="--cfg docsrs" cargo +nightly doc --all-features --open
 
 ### Developing the JS API
 
-The JS API provides bindings between the developer's JS in the Webview and the builtin Tauri APIs, written in Rust. Its code is located in `[Tauri repo root]/tooling/api`. After making changes to the code, run `yarn build` to build it. To test your changes, we recommend using the API example app, located in `[Tauri repo root]/examples/api`. It will automatically use your local copy of the JS API and provides a helpful UI to test the various commands.
+The JS API provides bindings between the developer's JS in the Webview and the builtin Tauri APIs, written in Rust. Its code is located in `[Tauri repo root]/tooling/api`. After making changes to the code, run `pnpm build` to build it. To test your changes, we recommend using the API example app, located in `[Tauri repo root]/examples/api`. It will automatically use your local copy of the JS API and provides a helpful UI to test the various commands.
 
 ## Financial Contribution
 

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -45,7 +45,7 @@ body:
     id: info
     attributes:
       label: Full `tauri info` output
-      description: "Output of `npm run tauri info` or `cargo tauri info`"
+      description: 'Output of `npm run tauri info` or `cargo tauri info`'
       render: text
     validations:
       required: true

.github/ISSUE_TEMPLATE/docs_report.md

@@ -1,8 +1,7 @@
 ---
 name: 📚 Docs Report
 about: Create a report to help us improve the docs
-title: "[docs] "
+title: '[docs] '
 labels: 'type: documentation'
 assignees: ''
-
 ---

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -22,7 +22,7 @@ body:
     attributes:
       label: "Describe the solution you'd like"
       description: A clear description of what change you would like
-      placeholder: "I would like to..."
+      placeholder: 'I would like to...'
     validations:
       required: true
 
@@ -31,7 +31,7 @@ body:
     attributes:
       label: Alternatives considered
       description: "Any alternative solutions you've considered"
-  
+
   - type: textarea
     id: context
     attributes:

.github/workflows/audit.yml

@@ -14,7 +14,7 @@ on:
       - '**/Cargo.lock'
       - '**/Cargo.toml'
       - '**/package.json'
-      - '**/yarn.lock'
+      - '**/pnpm-lock.yaml'
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -34,11 +34,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - name: audit workspace
-        run: yarn audit
-      - name: audit @tauri-apps/api
-        working-directory: tooling/api
-        run: yarn audit
-      - name: audit @tauri-apps/cli
-        working-directory: tooling/cli/node
-        run: yarn audit
+      - run: corepack enable
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '18'
+      - run: pnpm audit

.github/workflows/check-generated-files.yml

@@ -39,7 +39,6 @@ jobs:
               - 'core/tauri-config-schema/schema.json'
               - 'core/tauri-acl-schema/*.json'
 
-
   api:
     runs-on: ubuntu-latest
     needs: changes
@@ -49,7 +48,7 @@ jobs:
 
       - name: build api
         working-directory: tooling/api
-        run: yarn && yarn build
+        run: pnpm i --frozen-lockfile && pnpm build
       - name: check api
         run: ./.scripts/ci/has-diff.sh
 

.github/workflows/covector-comment-on-fork.yml

@@ -27,4 +27,4 @@ jobs:
         uses: jbolda/covector/packages/action@covector-v0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
-          command: "status"
+          command: 'status'

.github/workflows/covector-version-or-publish-v1.yml

@@ -164,11 +164,11 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v4
         with:
           node-version: 14
           registry-url: 'https://registry.npmjs.org'
-          cache: yarn
+          cache: 'yarn'
           cache-dependency-path: tooling/*/yarn.lock
 
       - name: cargo login

.github/workflows/covector-version-or-publish.yml

@@ -23,6 +23,8 @@ jobs:
         with:
           fetch-depth: 0
 
+      - run: corepack enable
+
       - name: install stable
         uses: dtolnay/rust-toolchain@stable
 
@@ -48,13 +50,18 @@ jobs:
         timeout-minutes: 30
         run: |
           cd ./tooling/cli/node
-          yarn
-          yarn build
-          yarn test
+          pnpm i --frozen-lockfile
+          pnpm build
+          pnpm test
 
   version-or-publish:
     runs-on: ubuntu-latest
     timeout-minutes: 65
+    permissions:
+      actions: write # required for workflow_dispatch
+      contents: write # required to create new releases
+      pull-requests: write # required to open version update pr
+      id-token: write # pnpm provenance
     outputs:
       change: ${{ steps.covector.outputs.change }}
       commandRan: ${{ steps.covector.outputs.commandRan }}
@@ -66,12 +73,12 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v3
+      - run: corepack enable
+      - uses: actions/setup-node@v4
         with:
           node-version: 18
           registry-url: 'https://registry.npmjs.org'
-          cache: yarn
-          cache-dependency-path: tooling/*/yarn.lock
+          cache: 'pnpm'
 
       - name: cargo login
         run: cargo login ${{ secrets.ORG_CRATES_IO_TOKEN }}
@@ -80,12 +87,18 @@ jobs:
           git config --global user.name "${{ github.event.pusher.name }}"
           git config --global user.email "${{ github.event.pusher.email }}"
 
+      - name: install Linux dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y webkit2gtk-4.1 libayatana-appindicator3-dev
+
       - name: covector version or publish (publish when no change files present)
         uses: jbolda/covector/packages/action@covector-v0
         id: covector
         env:
           NODE_AUTH_TOKEN: ${{ secrets.ORG_NPM_TOKEN }}
           CARGO_AUDIT_OPTIONS: ${{ secrets.CARGO_AUDIT_OPTIONS }}
+          NPM_CONFIG_PROVENANCE: true
         with:
           command: 'version-or-publish'
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -119,7 +132,7 @@ jobs:
           contains(steps.covector.outputs.packagesPublished, '@tauri-apps/cli')
         run: gh workflow run 31554138 -r dev -f releaseId=${{ steps.covector.outputs['-tauri-apps-cli-releaseId'] }}
         env:
-          GH_TOKEN: ${{ secrets.ORG_TAURI_BOT_PAT }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Trigger `tauri-cli` publishing workflow
         if: |
@@ -127,4 +140,4 @@ jobs:
           contains(steps.covector.outputs.packagesPublished, 'tauri-cli')
         run: gh workflow run 31554139 -r dev
         env:
-          GH_TOKEN: ${{ secrets.ORG_TAURI_BOT_PAT }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/docker.yml

@@ -66,8 +66,9 @@ jobs:
         with:
           targets: ${{ matrix.target.name }}
 
+      - run: corepack enable
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18
 
@@ -112,9 +113,9 @@ jobs:
       - name: Test
         run: |
           cd tooling/api
-          yarn && yarn build
+          pnpm i --frozen-lockfile && pnpm build
           cd ../../examples/api
-          yarn
+          pnpm i --frozen-lockfile
           . .setup-cross.sh
           chmod +x cargo-tauri
           chmod +x $HOME/.cargo/bin/cross

.github/workflows/lint-js.yml

@@ -16,45 +16,38 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  eslint-cli:
+  prettier:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v3
+      - run: corepack enable
+      - uses: actions/setup-node@v4
         with:
-          node-version: '18'
-          cache: yarn
-          cache-dependency-path: tooling/cli/node/yarn.lock
-      - name: install deps via yarn
-        working-directory: ./tooling/cli/node/
-        run: yarn
-      # nothing to lint
-      #- name: run lint
-      #  working-directory: ./tooling/cli/node/
-      #  run: yarn lint
-      - name: run format
-        working-directory: ./tooling/cli/node/
-        run: yarn format:check
+          node-version: 'lts/*'
+          cache: 'pnpm'
+      - run: pnpm i --frozen-lockfile
+      - run: pnpm format:check
 
-  eslint-api:
+  eslint:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v3
+      - run: corepack enable
+      - uses: actions/setup-node@v4
         with:
-          node-version: '18'
-          cache: yarn
-          cache-dependency-path: tooling/api/yarn.lock
+          node-version: 'lts/*'
+          cache: 'pnpm'
+      - run: pnpm i --frozen-lockfile
+      - run: pnpm eslint:check
 
-      - name: install deps via yarn
-        working-directory: ./tooling/api/
-        run: yarn
-      - name: run ts:check
-        working-directory: ./tooling/api/
-        run: yarn ts:check
-      - name: run lint
-        working-directory: ./tooling/api/
-        run: yarn lint
-      - name: run format
-        working-directory: ./tooling/api/
-        run: yarn format:check
+  typescript:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: corepack enable
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 'lts/*'
+          cache: 'pnpm'
+      - run: pnpm i --frozen-lockfile
+      - run: pnpm ts:check

.github/workflows/publish-cli-js.yml

@@ -30,45 +30,45 @@ jobs:
             target: x86_64-apple-darwin
             architecture: x64
             build: |
-              yarn build:release --target=x86_64-apple-darwin
+              pnpm build:release --target=x86_64-apple-darwin
               strip -x *.node
           - host: windows-latest
-            build: yarn build:release
+            build: pnpm build:release
             target: x86_64-pc-windows-msvc
             architecture: x64
           - host: windows-latest
-            build: yarn build:release --target i686-pc-windows-msvc
+            build: pnpm build:release --target i686-pc-windows-msvc
             target: i686-pc-windows-msvc
             architecture: x64
           - host: windows-latest
             architecture: x64
             target: aarch64-pc-windows-msvc
-            build: yarn build:release --target aarch64-pc-windows-msvc --features native-tls-vendored --cargo-flags="--no-default-features"
+            build: pnpm build:release --target aarch64-pc-windows-msvc --features native-tls-vendored --cargo-flags="--no-default-features"
           - host: ubuntu-20.04
             target: x86_64-unknown-linux-gnu
             docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian
             build: |
               cd tooling/cli/node
-              yarn build:release --target x86_64-unknown-linux-gnu
+              pnpm build:release --target x86_64-unknown-linux-gnu
               strip *.node
           - host: ubuntu-20.04
             target: x86_64-unknown-linux-musl
             docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
             build: |
               cd tooling/cli/node
-              yarn build:release
+              pnpm build:release
               strip *.node
           - host: macos-latest
             target: aarch64-apple-darwin
             build: |
-              yarn build:release --features native-tls-vendored --target=aarch64-apple-darwin
+              pnpm build:release --features native-tls-vendored --target=aarch64-apple-darwin
               strip -x *.node
           - host: ubuntu-20.04
             target: aarch64-unknown-linux-gnu
             docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian-aarch64
             build: |
               cd tooling/cli/node
-              yarn build:release --target aarch64-unknown-linux-gnu
+              pnpm build:release --target aarch64-unknown-linux-gnu
               aarch64-unknown-linux-gnu-strip *.node
           - host: ubuntu-20.04
             architecture: x64
@@ -77,7 +77,7 @@ jobs:
               sudo apt-get update
               sudo apt-get install gcc-arm-linux-gnueabihf g++-arm-linux-gnueabihf -y
             build: |
-              yarn build:release --target=armv7-unknown-linux-gnueabihf
+              pnpm build:release --target=armv7-unknown-linux-gnueabihf
               arm-linux-gnueabihf-strip *.node
           - host: ubuntu-20.04
             architecture: x64
@@ -86,20 +86,19 @@ jobs:
             build: |
               cd tooling/cli/node
               rustup target add aarch64-unknown-linux-musl
-              yarn build:release --target aarch64-unknown-linux-musl
+              pnpm build:release --target aarch64-unknown-linux-musl
               /aarch64-linux-musl-cross/bin/aarch64-linux-musl-strip *.node
     name: stable - ${{ matrix.settings.target }} - node@16
     runs-on: ${{ matrix.settings.host }}
     steps:
       - uses: actions/checkout@v4
+      - run: corepack enable
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         if: ${{ !matrix.settings.docker }}
         with:
-          node-version: 16
-          check-latest: true
-          cache: yarn
-          cache-dependency-path: 'tooling/cli/node/yarn.lock'
+          node-version: 18
+          cache: 'pnpm'
           architecture: ${{ matrix.settings.architecture }}
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
@@ -116,7 +115,7 @@ jobs:
         if: ${{ matrix.settings.setup }}
         shell: bash
       - name: Install dependencies
-        run: yarn install --ignore-scripts --frozen-lockfile --registry https://registry.npmjs.org --network-timeout 300000
+        run: pnpm i --frozen-lockfile --ignore-scripts
 
       - name: Build in docker
         uses: addnab/docker-run-action@v3
@@ -157,7 +156,7 @@ jobs:
   #          prepare: |
   #            pkg install -y curl node14 python2
   #            curl -qL https://www.npmjs.com/install.sh | sh
-  #            npm install -g yarn
+  #            npm install -g pnpm
   #            curl https://sh.rustup.rs -sSf --output rustup.sh
   #            sh rustup.sh -y --profile minimal --default-toolchain stable
   #            export PATH="/usr/local/cargo/bin:$PATH"
@@ -165,8 +164,8 @@ jobs:
   #            rustc --version
   #            echo "~~~~ node -v ~~~~"
   #            node -v
-  #            echo "~~~~ yarn --version ~~~~"
-  #            yarn --version
+  #            echo "~~~~ pnpm --version ~~~~"
+  #            pnpm --version
   #          run: |
   #            export PATH="/usr/local/cargo/bin:$PATH"
   #            pwd
@@ -175,8 +174,8 @@ jobs:
   #            env
   #            freebsd-version
   #            cd ./tooling/cli/node/
-  #            yarn install --ignore-scripts --frozen-lockfile --registry https://registry.npmjs.org --network-timeout 300000
-  #            yarn build:release
+  #            pnpm i --frozen-lockfile --ignore-scripts
+  #            pnpm build:release
   #            strip -x *.node
   #            rm -rf node_modules
   #            rm -rf ../target
@@ -199,21 +198,19 @@ jobs:
           - host: windows-latest
             target: x86_64-pc-windows-msvc
         node:
-          - '16'
           - '18'
           - '20'
     runs-on: ${{ matrix.settings.host }}
     steps:
       - uses: actions/checkout@v4
+      - run: corepack enable
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
-          check-latest: true
-          cache: yarn
-          cache-dependency-path: 'tooling/cli/node/yarn.lock'
+          cache: 'pnpm'
       - name: Install dependencies
-        run: yarn install --ignore-scripts --frozen-lockfile --registry https://registry.npmjs.org --network-timeout 300000
+        run: pnpm i --frozen-lockfile --ignore-scripts
       - name: Download artifacts
         uses: actions/download-artifact@v3
         with:
@@ -223,7 +220,7 @@ jobs:
         run: ls -R .
         shell: bash
       - name: Test bindings
-        run: yarn test
+        run: pnpm test
   test-linux-x64-gnu-binding:
     name: Test bindings on Linux-x64-gnu - node@${{ matrix.node }}
     needs:
@@ -232,21 +229,19 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - '16'
           - '18'
           - '20'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      - run: corepack enable
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
-          check-latest: true
-          cache: yarn
-          cache-dependency-path: 'tooling/cli/node/yarn.lock'
+          cache: 'pnpm'
       - name: Install dependencies
-        run: yarn install --ignore-scripts --frozen-lockfile --registry https://registry.npmjs.org --network-timeout 300000
+        run: pnpm i --frozen-lockfile --ignore-scripts
       - name: Download artifacts
         uses: actions/download-artifact@v3
         with:
@@ -260,7 +255,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y webkit2gtk-4.1 libayatana-appindicator3-dev
       - name: Test bindings
-        run: yarn test
+        run: pnpm test
   test-linux-x64-musl-binding:
     name: Test bindings on x86_64-unknown-linux-musl - node@${{ matrix.node }}
     needs:
@@ -269,7 +264,6 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - '16'
           - '18'
           - '20'
     runs-on: ubuntu-latest
@@ -277,15 +271,14 @@ jobs:
       image: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
     steps:
       - uses: actions/checkout@v4
+      - run: corepack enable
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
-          check-latest: true
-          cache: yarn
-          cache-dependency-path: 'tooling/cli/node/yarn.lock'
+          cache: 'pnpm'
       - name: Install dependencies
-        run: yarn install --ignore-scripts --frozen-lockfile --registry https://registry.npmjs.org --network-timeout 300000
+        run: pnpm i --frozen-lockfile --ignore-scripts
       - name: Download artifacts
         uses: actions/download-artifact@v3
         with:
@@ -296,13 +289,13 @@ jobs:
         shell: bash
       - name: Setup and run tests
         run: |
-          yarn tauri --help
+          pnpm tauri --help
           ls -la
       #- name: Setup and run tests
       #  run: |
       #    rustup install stable
       #    rustup default stable
-      #    yarn test
+      #    pnpm test
       #    ls -la
   test-linux-arm-bindings:
     name: Test bindings on ${{ matrix.image }} - node@${{ matrix.node }}
@@ -312,7 +305,6 @@ jobs:
       fail-fast: false
       matrix:
         node:
-          - '16'
           - '18'
           - '20'
         image:
@@ -326,8 +318,6 @@ jobs:
       - name: List packages
         run: ls -R .
         shell: bash
-      - name: Install dependencies
-        run: yarn install --ignore-scripts --ignore-platform --frozen-lockfile --registry https://registry.npmjs.org --network-timeout 300000
       - name: Download aarch64-gnu artifacts
         uses: actions/download-artifact@v3
         with:
@@ -356,7 +346,7 @@ jobs:
             fnm install ${{ matrix.node }}
             fnm use ${{ matrix.node }}
             cd tooling/cli/node
-            yarn tauri --help
+            node tauri.js --help
             ls -la
   publish:
     name: Publish
@@ -367,23 +357,25 @@ jobs:
       - test-linux-x64-gnu-binding
       - test-linux-x64-musl-binding
       #- test-linux-arm-bindings
+    permissions:
+      contents: write # update release
+      id-token: write # npm provenance
     steps:
       - uses: actions/checkout@v4
+      - run: corepack enable
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 20
-          check-latest: true
-          cache: yarn
-          cache-dependency-path: 'tooling/cli/node/yarn.lock'
+          cache: 'pnpm'
       - name: Install dependencies
-        run: yarn install --ignore-scripts --frozen-lockfile --registry https://registry.npmjs.org --network-timeout 300000
+        run: pnpm i --frozen-lockfile --ignore-scripts
       - name: Download all artifacts
         uses: actions/download-artifact@v3
         with:
           path: tooling/cli/node/artifacts
       - name: Move artifacts
-        run: yarn artifacts
+        run: pnpm artifacts
       - name: List packages
         run: ls -R ./npm
         shell: bash
@@ -395,3 +387,4 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.ORG_NPM_TOKEN }}
           RELEASE_ID: ${{ github.event.client_payload.releaseId || inputs.releaseId }}
+          NPM_CONFIG_PROVENANCE: true

.github/workflows/supply-chain.yml

@@ -37,9 +37,9 @@ jobs:
       - name: Ensure that the tool cache is populated with the cargo-vet binary
         run: cargo install --root ${{ runner.tool_cache }}/cargo-vet --version ${{ env.CARGO_VET_VERSION }} cargo-vet
 
-# Enable this again to break the workflow once we have a reasonable amount of suggestions to get to a clean base line
-#      - name: Invoke cargo-vet
-#        run: cargo vet --locked
+      # Enable this again to break the workflow once we have a reasonable amount of suggestions to get to a clean base line
+      #      - name: Invoke cargo-vet
+      #        run: cargo vet --locked
 
       - name: Provide audit suggestions
         run: cargo vet suggest

.github/workflows/test-android.yml

@@ -42,20 +42,18 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y libgtk-3-dev webkit2gtk-4.1
 
+      - run: corepack enable
       - name: setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18
-          cache: yarn
-          cache-dependency-path: |
-            tooling/api/yarn.lock
-            examples/api/yarn.lock
+          cache: 'pnpm'
 
       - uses: actions/setup-java@v3
         with:
           distribution: temurin
           java-version: 17
-          cache: gradle
+          cache: 'gradle'
 
       - name: Setup NDK
         uses: nttld/setup-ndk@v1
@@ -95,11 +93,11 @@ jobs:
 
       - name: build Tauri API
         working-directory: ./tooling/api
-        run: yarn && yarn build
+        run: pnpm i --frozen-lockfile && pnpm build
 
       - name: install API example dependencies
         working-directory: ./examples/api
-        run: yarn
+        run: pnpm i --frozen-lockfile
 
       - name: init Android Studio project
         working-directory: ./examples/api

.github/workflows/test-cli-js.yml

@@ -38,12 +38,12 @@ jobs:
       - name: install Rust stable
         uses: dtolnay/rust-toolchain@stable
 
+      - run: corepack enable
       - name: setup node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
           node-version: 18
-          cache: yarn
-          cache-dependency-path: tooling/cli/node/yarn.lock
+          cache: 'pnpm'
 
       - name: install Linux dependencies
         if: matrix.platform == 'ubuntu-latest'
@@ -61,6 +61,6 @@ jobs:
         timeout-minutes: 30
         run: |
           cd ./tooling/cli/node
-          yarn
-          yarn build
-          yarn test
+          pnpm i --frozen-lockfile
+          pnpm build
+          pnpm test

.github/workflows/test-cli-rs.yml

@@ -32,23 +32,14 @@ jobs:
       fail-fast: false
       matrix:
         platform:
-          - {
-              target: x86_64-pc-windows-msvc,
-              os: windows-latest
-            }
+          - { target: x86_64-pc-windows-msvc, os: windows-latest }
           - {
               target: aarch64-pc-windows-msvc,
               os: windows-latest,
               args: --no-default-features --features native-tls-vendored
             }
-          - {
-              target: x86_64-unknown-linux-gnu,
-              os: ubuntu-latest
-            }
-          - {
-              target: x86_64-apple-darwin,
-              os: macos-latest
-            }
+          - { target: x86_64-unknown-linux-gnu, os: ubuntu-latest }
+          - { target: x86_64-apple-darwin, os: macos-latest }
 
     steps:
       - uses: actions/checkout@v4

.husky/.gitignore

@@ -1 +0,0 @@
-_

.husky/pre-commit

@@ -1,24 +0,0 @@
-#!/bin/sh
-
-# Copyright 2019-2024 Tauri Programme within The Commons Conservancy
-# SPDX-License-Identifier: Apache-2.0
-# SPDX-License-Identifier: MIT
-
-. "$(dirname "$0")/_/husky.sh"
-
-if [ -z "$(git diff --name-only tooling/api)" ]; then
-  echo "skipping api - no changes detected"
-else
-  cd tooling/api
-  yarn format
-  yarn lint:fix
-  cd ../..
-fi
-
-if [ -z "$(git diff --name-only tooling/cli/node)" ]; then
-  echo "skipping \`@tauri-apps/cli\` - no changes detected"
-else
-  cd tooling/cli/node
-  yarn format
-  cd ../../..
-fi

.prettierignore

@@ -1,17 +1,36 @@
-/.github
+/.changes
 /.husky
-/.vscode
 /audits
-node_modules
-target
-dist
-/core/tauri/scripts/bundle.global.js
-/tooling/cli/templates
-/tooling/cli/node
-/tooling/cli/schema.json
-/core/tauri-config-schema/schema.json
+/.vscode
+
+# dependcies and artifacts directories
+node_modules/
+target/
+dist/
+
+# lock files
+pnpm-lock.yaml
+
+# autogenerated and minimized js file
+core/tauri/scripts/bundle.global.js
+
+# this file is an IIFE, shouldn't be formatted
+core/tauri/scripts/process-ipc-message-fn.js
+
+# cli templates should be formatted manually
+# it also includes invalid json files that
+# prettier can't handle
+tooling/cli/templates
+
+# autogenerated files
+**/autogenerated/**/*.md
+tooling/cli/node/index.js
+tooling/cli/node/index.d.ts
 CHANGELOG.md
-*.wxs
-**/reference.md
 *schema.json
-core/tauri/scripts/process-ipc-message-fn.js
+
+# WiX templates
+*.wxs
+
+# examples /gen directory
+examples/**/src-tauri/gen

.scripts/cargo-check.ps1

@@ -1,55 +0,0 @@
-#!/usr/bin/env pwsh
-
-# Copyright 2019-2024 Tauri Programme within The Commons Conservancy
-# SPDX-License-Identifier: Apache-2.0
-# SPDX-License-Identifier: MIT
-
-# note: you can pass in the cargo sub-commands used to check manually.
-# allowed commands: check, clippy, fmt, test
-# default: clippy, fmt, test
-
-# set the script arguments if none are found
-if(-Not $args) {
-  $args=@("clippy","fmt","test")
-}
-
-# exit the script early if the last command returned an error
-function check_error {
-  if($LASTEXITCODE -ne 0 ) {
-    Exit $LASTEXITCODE
-  }
-}
-
-function run {
-  $command, $_args = $args
-
-  Write-Output "[$command]"
-  cargo $command --workspace --all-targets --all-features $_args
-  check_error
-}
-
-foreach ($command in $args) {
-  Switch ($command) {
-    "check" {
-      run check
-      break
-    }
-    "test" {
-      run test
-      break
-    }
-    "clippy" {
-      run clippy "--" -D warnings
-      break
-    }
-    "fmt" {
-      Write-Output "[$command] checking formatting"
-      cargo +nightly fmt "--" --check
-      check_error
-    }
-    default {
-      Write-Output "[cargo-check.ps1] Unknown cargo sub-command: $command"
-      Exit 1
-    }
-  }
-}

.scripts/cargo-check.sh

@@ -1,45 +0,0 @@
-#!/usr/bin/env sh
-
-# Copyright 2019-2024 Tauri Programme within The Commons Conservancy
-# SPDX-License-Identifier: Apache-2.0
-# SPDX-License-Identifier: MIT
-
-# note: you can pass in the cargo sub-commands used to check manually.
-# allowed commands: check, clippy, fmt, test
-# default: clippy, fmt, test
-
-# exit the script early if any of the commands return an error
-set -e
-
-# set the script arguments if none are found
-if [ -z "$*" ]; then
-  set -- "clippy" "fmt" "test"
-fi
-
-# run n+1 times, where n is the amount of mutually exclusive features.
-# the extra run is for all the crates without mutually exclusive features.
-# as many features as possible are enabled at for each command
-run() {
-  command=$1
-  shift 1
-  cargo "$command" --workspace --all-targets --all-features "$@"
-}
-
-for command in "$@"; do
-  case "$command" in
-  check | test)
-    run "$command"
-    ;;
-  clippy)
-    run clippy -- -D warnings
-    ;;
-  fmt)
-    echo "[$command] checking formatting"
-    cargo +nightly fmt -- --check
-    ;;
-  *)
-    echo "[cargo-check.sh] Unknown cargo sub-command: $command"
-    exit 1
-    ;;
-  esac
-done

.scripts/ci/has-diff.sh

@@ -4,10 +4,12 @@
 # SPDX-License-Identifier: Apache-2.0
 # SPDX-License-Identifier: MIT
 
-if git diff --quiet --ignore-submodules HEAD
+git_output=$(git diff --ignore-submodules --name-only HEAD)
+if [ -z "$git_output" ];
 then
-  echo "working directory is clean"
+  echo "✔ working directory is clean"
 else
-  echo "found diff"
+  echo "✘ found diff:"
+  echo "$git_output"
   exit 1
 fi

.scripts/covector/package-latest-version.js

@@ -1,58 +0,0 @@
-#!/usr/bin/env node
-
-// Copyright 2019-2024 Tauri Programme within The Commons Conservancy
-// SPDX-License-Identifier: Apache-2.0
-// SPDX-License-Identifier: MIT
-
-/*
-This script is solely intended to be run as part of the `covector publish` step to
-check the latest version of a crate, considering the current minor version.
-*/
-
-const https = require('https')
-
-const kind = process.argv[2]
-const packageName = process.argv[3]
-const packageVersion = process.argv[4]
-const target = packageVersion.substring(0, packageVersion.lastIndexOf('.'))
-
-let url = null
-switch (kind) {
-  case 'cargo':
-    url = `https://crates.io/api/v1/crates/${packageName}`
-    break
-  case 'npm':
-    url = `https://registry.npmjs.org/${packageName}`
-    break
-  default:
-    throw new Error('unexpected kind ' + kind)
-}
-
-const options = {
-  headers: {
-    'Content-Type': 'application/json',
-    Accept: 'application/json',
-    'User-Agent': 'tauri (https://github.com/tauri-apps/tauri)'
-  }
-}
-
-https.get(url, options, (response) => {
-  let chunks = []
-  response.on('data', function (chunk) {
-    chunks.push(chunk)
-  })
-
-  response.on('end', function () {
-    const data = JSON.parse(chunks.join(''))
-    if (kind === 'cargo') {
-      const versions =
-        data.versions?.filter((v) => v.num.startsWith(target)) ?? []
-      console.log(versions.length ? versions[0].num : '0.0.0')
-    } else if (kind === 'npm') {
-      const versions = Object.keys(data.versions).filter((v) =>
-        v.startsWith(target)
-      )
-      console.log(versions[versions.length - 1] || '0.0.0')
-    }
-  })
-})

.scripts/docker/build.sh

@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Copyright 2019-2024 Tauri Programme within The Commons Conservancy
-# SPDX-License-Identifier: Apache-2.0
-# SPDX-License-Identifier: MIT
-
-docker build -t aarch64-unknown-linux-gnu:latest --file .docker/cross/aarch64.Dockerfile .docker/cross

.scripts/setup.ps1

@@ -1,30 +0,0 @@
-#!/usr/bin/env pwsh
-
-# Copyright 2019-2024 Tauri Programme within The Commons Conservancy
-# SPDX-License-Identifier: Apache-2.0
-# SPDX-License-Identifier: MIT
-
-echo "Building API definitions..."
-cd tooling\api
-yarn; yarn build
-cd ..\..
-
-echo "Installing the Tauri Rust CLI..."
-cd tooling\cli
-cargo install --path .
-cd ..\..
-echo "Tauri Rust CLI installed. Run it with '$ cargo tauri [COMMAND]'."
-
-$yes = New-Object System.Management.Automation.Host.ChoiceDescription "&Yes"
-$no = New-Object System.Management.Automation.Host.ChoiceDescription "&No"
-$options = [System.Management.Automation.Host.ChoiceDescription[]]($yes, $no)
-
-$result = $host.ui.PromptForChoice("Node.js CLI", "Do you want to install the Node.js CLI?", $options, 1)
-switch ($result) {
-  0{
-    cd tooling\cli\node
-    yarn; yarn build; yarn link
-    cd ..\..
-    echo "Tauri Node.js CLI installed. use `yarn link @tauri-apps/cli` and run it with '$ yarn tauri [COMMAND]'."
-  }
-}

.scripts/setup.sh

@@ -1,29 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright 2019-2024 Tauri Programme within The Commons Conservancy
-# SPDX-License-Identifier: Apache-2.0
-# SPDX-License-Identifier: MIT
-
-echo "Building API definitions..."
-cd tooling/api
-yarn && yarn build
-cd ../..
-
-echo "Building the Tauri Rust CLI..."
-cd tooling/cli
-cargo install --path .
-cd ../..
-echo "Tauri Rust CLI installed. Run it with '$ cargo tauri [COMMAND]'."
-
-echo "Do you want to install the Node.js CLI?"
-select yn in "Yes" "No"; do
-    case $yn in
-        Yes )
-            cd tooling/cli/node
-            yarn && yarn build && yarn link
-            cd ../../..
-            echo "Tauri Node.js CLI installed. use `yarn link @tauri-apps/cli` and run it with '$ yarn tauri [COMMAND]'."
-            break;;
-        No ) break;;
-    esac
-done