Tauri v2.12.5, the framework for building desktop apps with web technology, is out. It fixes two Windows installer bugs, and its CLI release fixes an error and answers three security advisories.
Tauri is an open-source framework for building desktop apps. The screens are web technology (HTML, CSS, JavaScript) and the core is written in Rust. Its JavaScript API package, @tauri-apps/api, has 2,744,435 weekly downloads on npm.
tauri v2.12.5 came out on October 21. There is no headline feature. What it does fix is the NSIS installer that Tauri uses to build Windows setup files, and CLI v2.12.4 shipped the same day. Once you open the notes, these are pretty practical fixes for anyone who ships an app.
그림: tauri.app
v2.12.5 fixes two bugs.
- The installer language string
choowHowToInstallwas a typo and is nowchooseHowToInstall. Custom language files that define only the old name still work for now, but the notes tell you to move to the new one (#16333) - When
bundle.windows.allowDowngradesisfalse, an installer no longer lets an older version overwrite a newer one that was installed from an MSI. This covers silent (/S), passive (/P) and update (/UPDATE) modes too (#16254)
A typo fix sounds trivial. It is not, if you maintain your own language files: you now have a rename to make.
@tauri-apps/cli v2.12.4 contains this fix. If rustup is on the PATH but no toolchain is installed, rustup target list fails, and the CLI now skips its --target check instead of rejecting every target as missing (#16305).
The same CLI release raises zip to v9 in answer to the security advisories RUSTSEC-2026-0367, 0368 and 0369 (#16317). The notes do not say how far those advisories actually reached Tauri apps.
- tauri-build v2.7.4 → tauri v2.12.5
- tauri-macros v2.7.4 → tauri v2.12.5
- tauri-runtime-wry v2.12.3 → tauri v2.12.5
tauri v3.0.0-alpha.5 was published on October 14. The only change in its notes is a dependency update that moves tauri-utils, tauri-runtime, tauri-macros and tauri-build to 3.0.0-alpha.4. The notes show no new feature and no breaking change.
The road to v3 is still at the alpha stage. This week's record gave me no reason to move yet.
그림: tauri.app
If you ship Windows installers yourself, I would open the allowDowngrades setting first. A deployment script that reinstalled an older version in silent mode could now be stopped. The notes describe the behavior when the setting is false and nothing more, so the rest is yours to check.
The CLI fix is not urgent, honestly. It only bites on a developer machine where rustup is half set up.
The three security advisories do bother me a little. The notes give the advisory numbers and not their reach. I don't know that part yet.
- On GitHub Trending (Kotlin), kushagrasinghx/BitChord gained 826 stars this week
- On GitHub Trending (Swift), pauljoda/Crest gained 465 stars this week
- The Android developer blog covered a more reliable way to add and edit contacts