Sync upstream/dev (2026-08-03) and forward-port ports/tao 0.36 / ports/wry 0.56

.changes/android-plugin-manager-no-activity.md

@@ -0,0 +1,5 @@
+---
+tauri: patch:bug
+---
+
+On Android, fixed requesting permission in a plugin fails after the first activity closed.

.changes/appimage-respect-gdk-backend.md

@@ -0,0 +1,5 @@
+---
+"tauri-bundler": "patch:bug"
+---
+
+Respect an explicitly configured `GDK_BACKEND` in AppImage GTK hooks while retaining `x11` as the default.

.changes/build-config-path.md

@@ -0,0 +1,5 @@
+---
+"tauri-build": minor:feat
+---
+
+Added `Attributes::config_path` to customize config path, deprecated `CodegenContext::config_path` in favor of this

.changes/clarify-init-frontend-command-prompts.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": "patch:enhance"
+"@tauri-apps/cli": "patch:enhance"
+---
+
+Clarify that the `tauri init` frontend commands run before `tauri dev` and `tauri build`, and can be left empty when they are not needed.

.changes/disable-binary-patching.md

@@ -0,0 +1,7 @@
+---
+"tauri-bundler": "minor:feat"
+"tauri-cli": "minor:feat"
+"@tauri-apps/cli": "minor:feat"
+---
+
+Add a `--no-binary-patching` flag to `tauri build` and `tauri bundle`. When set, the bundler skips patching the main executable with bundle type information (and the subsequent re-signing), leaving an already-signed binary untouched. Patching is only required when shipping multiple bundle types per platform that should each update with their own installer format.

.changes/event-listener-cleanup-on-destroy.md

@@ -0,0 +1,5 @@
+---
+"tauri": "patch:bug"
+---
+
+Remove Rust-side event listeners bound to a window or webview when that target is destroyed, so `listen`/`once` handlers registered on a `Window`, `Webview` or `WebviewWindow` no longer leak after it is closed.

.changes/fix-appimage-xdg-utils.md

@@ -0,0 +1,7 @@
+---
+tauri-bundler: patch:bug
+tauri-cli: patch:bug
+"@tauri-apps/cli": patch:bug
+---
+
+On Linux, do not bundle xdg-open and xdg-utils in the AppImage anymore. This rarely worked and usually requires host system support anyway.

.changes/fix-copy-new-resource-files.md

@@ -3,4 +3,4 @@
 'tauri-utils': 'patch:enhance'
 ---
 
-Emit a `cargo:rerun-if-changed` for each resource directory and glob base directory, so adding or removing files inside configured resource directories re-runs the build script and copies the changed resources.
+Emit a `cargo:rerun-if-changed` for each resource directory (and glob base directory), so that adding or removing a file inside a resource directory re-runs the build script and copies the new files. Previously only the individual files present at build time were watched, so newly added files were silently ignored until an unrelated rebuild.

.changes/icon-non-square-fit.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": "minor:feat"
+"@tauri-apps/cli": "minor:feat"
+---
+
+Add a `--fit` option to `tauri icon` to accept non-square source images. `--fit cover` center-crops the source to a square (clipping the longer side) and `--fit contain` pads the shorter side with transparency. Non-square sources without `--fit` keep erroring, now with a hint pointing to the flag.

.changes/mobile-resumed-suspended-event.md

@@ -0,0 +1,6 @@
+---
+"tauri": minor:changes
+"tauri-runtime-wry": minor:changes
+---
+
+`WindowEvent::Resumed` and `WindowEvent::Suspended` are now only fired for the matching activity window instead of every window.

.changes/objc2-0.3.2.md

@@ -0,0 +1,7 @@
+---
+"tauri": patch:deps
+"tauri-runtime": patch:deps
+"tauri-runtime-wry": patch:deps
+---
+
+On macOS, updated `objc2-*` dependencies to 0.3.2

.changes/permission-handler.md

@@ -0,0 +1,9 @@
+---
+"tauri": "minor:feat"
+"tauri-runtime": "minor:feat"
+"tauri-runtime-wry": "minor:feat"
+---
+
+Expose the `wry` permission handler API through Tauri.
+This includes support for permission types such as `DisplayCapture`, `Midi`, `Sensors`, `MediaKeySystemAccess`, `LocalFonts`, `WindowManagement`, `PointerLock`, `AutomaticDownloads`, `FileSystemAccess`, and `Autoplay`.
+Added `PermissionResponse::{Allow, Deny, Default}` for runtime permission decisions.

.changes/signing-env-vars.md

@@ -0,0 +1,6 @@
+---
+"tauri-cli": patch:enhance
+"@tauri-apps/cli": patch:enhance
+---
+
+Document the `TAURI_SIGNING_PRIVATE_KEY_PATH` environment variable and clarify that `TAURI_SIGNING_PRIVATE_KEY` accepts a string or a path for the `build` and `bundle` command but must be the literal key string for the `signer sign` command, both in `ENVIRONMENT_VARIABLES.md` and in the `signer generate` command output.

.changes/unstable-webview-focus.md

@@ -0,0 +1,6 @@
+---
+tauri: minor:bug
+tauri-runtime-wry: minor:bug
+---
+
+Fix webview don't get focus when Alt-Tab back to the window if `unstable` feature is enabled on Windows

ports/wry/.changes/update-dom-query.md → .changes/update-dom-query.md

@@ -1,5 +1,5 @@
 ---
-'wry': minor
+"tauri-utils": minor:deps
 ---
 
 Updated `dom_query` dependency to 0.28.0

.changes/webkitgtk-resize-cursor.md

@@ -0,0 +1,6 @@
+---
+'tauri-runtime-wry': 'patch:bug'
+'tauri': 'patch:bug'
+---
+
+On Linux, fix resize cursor for undecorated Window not being set correctly when mouse is over a resize edge.

.changes/webview-focus-on-move.md

@@ -0,0 +1,6 @@
+---
+tauri: minor:bug
+tauri-runtime-wry: minor:bug
+---
+
+Fix `WindowEvent::Focused` events emitted when dragging the window on Windows

.changes/wry-focused-webview.md

@@ -0,0 +1,5 @@
+---
+tauri-runtime-wry: minor:breaking
+---
+
+`CreateWebviewOptions::focused_webview` now takes `Arc<Mutex<FocusState>>` instead of `Arc<Mutex<Option<String>>>`

.github/workflows/publish-cli-js.yml

@@ -91,7 +91,8 @@ jobs:
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
         with:
-          targets: ${{ matrix.settings.target }}
+          # CEF helper needs both archs
+          targets: ${{ contains(matrix.settings.target, 'apple-darwin') && 'aarch64-apple-darwin,x86_64-apple-darwin' || matrix.settings.target }}
       - uses: Swatinem/rust-cache@v2
         with:
           key: ${{ matrix.settings.target }}
@@ -148,8 +149,8 @@ jobs:
             target: x86_64-apple-darwin
             architecture: x64
         node:
-          - '20'
           - '22'
+          - '24'
     runs-on: ${{ matrix.settings.host }}
     steps:
       - uses: actions/checkout@v7
@@ -188,8 +189,8 @@ jobs:
           - aarch64-unknown-linux-musl
           - armv7-unknown-linux-gnueabihf
         node:
-          - '20'
           - '22'
+          - '24'
     runs-on: ${{ contains(matrix.target, 'aarch64') && 'ubuntu-24.04-arm' || 'ubuntu-latest' }}
     steps:
       - uses: actions/checkout@v7
@@ -244,7 +245,7 @@ jobs:
             if ('${{ matrix.target }}'.endsWith('-musl')) {
               console.log('IMAGE=node:${{ matrix.node }}-alpine')
             } else {
-              console.log('IMAGE=node:${{ matrix.node }}-slim')
+              console.log('IMAGE=node:22-slim')
             }
           " >> $GITHUB_OUTPUT
 

.github/workflows/test-core.yml

@@ -108,6 +108,10 @@ jobs:
         # Using --lib --bins --tests to skip doc tests
         run: ${{ matrix.platform.cargo }} ${{ matrix.platform.command }} --target ${{ matrix.platform.target }} ${{ matrix.features.args }} --lib --bins --tests --manifest-path crates/tauri-utils/Cargo.toml
 
+      - name: run acl-tests
+        if: ${{ matrix.features.key != 'no-default' && matrix.platform.command == 'test' }}
+        run: ${{ matrix.platform.cargo }} test --target ${{ matrix.platform.target }} ${{ matrix.features.args }} --manifest-path crates/tests/acl/Cargo.toml
+
       - name: test tauri
         run: ${{ matrix.platform.cargo }} ${{ matrix.features.key == 'no-default' && 'check' || matrix.platform.command }} --target ${{ matrix.platform.target }} ${{ matrix.features.args }} --manifest-path crates/tauri/Cargo.toml