[runyourempire]

Why

tauri build refuses a major.minor mismatch between each Rust crate and its npm package. On main (d7db30d), Cargo.lock has tauri 2.12.1, tauri-plugin-opener 2.7.0 and tauri-plugin-updater 2.13.1, but pnpm-lock.yaml resolved @tauri-apps/api 2.11.1, plugin-opener 2.5.5 and plugin-updater 2.12.0. release.yml builds through tauri-apps/tauri-action v0.6.2 without --ignore-version-mismatches, so the v1.0.4 release build would fail. This PR is a release blocker.

Versions

npm package	before	after	Rust crate (Cargo.lock)
@tauri-apps/api	2.11.1	2.12.3	tauri 2.12.1
@tauri-apps/plugin-opener	2.5.5	2.7.1	tauri-plugin-opener 2.7.0
@tauri-apps/plugin-updater	2.12.0	2.13.3	tauri-plugin-updater 2.13.1
@tauri-apps/cli	2.11.5	2.12.2	tauri 2.12.x

• Each target version was checked with 4DA dependency_check and returned proceed: no advisories, trusted publisher with no trust downgrade, no install scripts, and no new dependencies.
• The newest patches (api 2.12.4, opener 2.7.2, cli 2.12.3) were published on 2026-10-14. dependency_check returned wait for them, and the repo's minimumReleaseAge: 4320 also holds them back, so I chose the previous patch of each.
• The other Rust plugins (notification, autostart, deep-link, single-instance) have no npm counterpart in package.json, and the frontend does not import them. They are not part of the version check.

Lockfile

The pnpm-lock.yaml diff (pnpm 10.34.6, per packageManager) changes only the @tauri-apps/* entries: api, cli plus its 11 platform binaries, plugin-opener and plugin-updater. 70 lines added and 70 removed. node scripts/check-pnpm-overrides.cjs reports: OK, pinned to pnpm 10.x, 35 overrides across 2 manifests are live.

Verification

• pnpm run typecheck (tsc --noEmit): exit 0
• pnpm run test (vitest): 191 of 191 files, 1945 of 1945 tests passed, no unhandled errors
• pnpm exec tauri info no longer shows a mismatch warning:

[-] Packages
    - tauri 🦀: 2.12.1, (outdated, latest: 2.12.4)
    - tauri-build 🦀: 2.7.1, (outdated, latest: 2.7.3)
    - @tauri-apps/api  ⱼₛ: 2.12.3 (outdated, latest: 2.12.4)
    - @tauri-apps/cli  ⱼₛ: 2.12.2 (outdated, latest: 2.12.3)
[-] Plugins
    - tauri-plugin-opener 🦀: 2.7.0, (outdated, latest: 2.7.2)
    - @tauri-apps/plugin-opener  ⱼₛ: 2.7.1 (outdated, latest: 2.7.2)
    - tauri-plugin-updater 🦀: 2.13.1, (outdated, latest: 2.14.0)
    - @tauri-apps/plugin-updater  ⱼₛ: 2.13.3 (outdated, latest: 2.14.0)

A full tauri build was not run locally because the machine is heavily loaded. The release workflow is the end-to-end check.

Auto-merge is not enabled.

🤖 Generated with Claude Code

https://claude.ai/code/session_018hjX3pEMmC7CHfG41PiPj7