宣布 Tauri 1.4.0

Jun 14, 2023

Lucas Nogueira

Tauri Co-Founder

Tauri 1.4 Launch Hero Image

Tauri 团队很高兴地宣布 1.4 版本的发布。这个版本包括几个新功能和重要的错误修复，例如 CLI 补全、单元测试功能以及 Windows 安装程序的改进。

🌐 The Tauri team is excited to announce the 1.4 release. This version includes several new features and important bug fixes such as CLI completions, unit testing capabilities and Windows installer improvements.

升级

🌐 Upgrading

确保将 NPM 和 Cargo 的依赖都更新到 1.4.0 版本。你可以使用以下命令更新依赖：

🌐 Make sure to update both NPM and Cargo dependencies to the 1.4.0 release. You can update the dependencies with:

npm install @tauri-apps/cli@latest @tauri-apps/api@latest

yarn upgrade @tauri-apps/cli @tauri-apps/api --latest

pnpm update @tauri-apps/cli @tauri-apps/api --latest

cargo update

1.4.0 有什么更新

🌐 What’s in 1.4.0

命令行完成

🌐 CLI completions

Tauri CLI现在可以为Bash、Zsh、PowerShell和Fish生成Shell补全。更多信息请参阅文档。

🌐 The Tauri CLI now can generate shell completions for Bash, Zsh, PowerShell and Fish. See the documentation for more information.

禁用窗口控件

🌐 Disabling window controls

窗口的最大化、最小化和关闭按钮现在可以通过配置或 API 调用来禁用。请查看 set_maximizable、set_minimizable 和 set_closable 了解 Rust API，以及 setMaximizable、setMinimizable 和 setClosable 了解 JavaScript API。

🌐 The window’s maximize, minimize and close buttons now can be disabled via configuration or API calls. Check out set_maximizable, set_minimizable and set_closable for the Rust APIs and setMaximizable, setMinimizable and setClosable for the JavaScript APIs.

NSIS 改进

🌐 NSIS improvements

1.4.0 版本包含若干 NSIS 打包增强功能：

🌐 The 1.4.0 release includes several NSIS bundle enhancements:

自定义语言文件
自定义安装程序模板 (.nsi 文件)
支持荷兰语、日语、韩语、波斯语、瑞典语和土耳其语
如果你的应用是通过 WiX 安装的，安装程序会提示用户卸载它
改进了对更新程序安装模式的支持

请参阅安装程序自定义指南和安装程序国际化以获取更多信息。

🌐 See the installer customization guide and installer internationalization for more information.

MSRV 变化

🌐 MSRV change

Tauri 1.4 仍然支持的最低 Rust 版本是 1.60，但由于某些依赖兼容性问题，我们不再固定 time、ignore 和 winnow 这些 crate 的补丁版本。如果你仍然在使用 Rust 1.60，你需要通过 cargo update 手动固定这些版本。

🌐 Tauri 1.4 still has a minimum supported Rust version of 1.60, but due to some dependency incompatibility issues we are no longer pinning the patch version of the time, ignore, and winnow crates. If you are still using Rust 1.60, you will need to pin these versions manually with cargo update.

单元测试

🌐 Unit tests

tauri 包现在通过 test Cargo 功能公开了 test 模块。该模块仍然不稳定，但允许你通过创建可以在不生成窗口的情况下执行的 tauri::App 实例来对应用进行单元测试。有关更多信息和示例，请参阅文档。

🌐 The tauri crate now exposes the test module under the test Cargo feature. This module is still unstable but allows you to unit test your application by creating a tauri::App instance that can execute without spawning windows. See the documentation for more information and examples.

其他变化

🌐 Other changes

从 v1.4.0 开始，我们的更新日志格式已得到改进。查看完整的更改列表：

🌐 Starting on v1.4.0, our changelog format has been improved. Check out the entire list of changes:

审计

🌐 Audit

内部¹审计由 Tillmann @tillmann-crabnebula 和 Chip @chip-crabnebula 执行，他们也以自己私有账号（@tweidinger 和 @chippers）参与该项目的安全事务。

🌐 The internal¹ audit was performed by Tillmann @tillmann-crabnebula and Chip @chip-crabnebula, who are also involved in security topics at the project under their private handles (@tweidinger and @chippers).

这项工作是在CrabNebula Ltd.的带薪时间内进行的，我们很感激能够在工作时间的一部分投入到开源项目中，并使其成为一个更安全的环境 :heart:。

🌐 It was performed during paid time at CrabNebula Ltd. and we are grateful to be able to spend parts of our work time contributing to the open source project and making it a more secure environment :heart:.

对于此次发布，我们手动审查了部分 PRs，而不是审查所有进入发布的 PRs。新的方法意味着审查者和开发者需要自行判断某个 PR 是否引入了任何与安全相关的更改。审查可以由参与更改的任何人触发，通过向 PR 添加标签来实现。

🌐 For this release we manually audited a selection of PRs instead of all PRs coming into the release. The new approach means the reviewers and developers need to decide on their own if a PR is introducing any security relevant change. A review can be triggered by anyone involved in the change, by adding a label to the PR.

由于时间限制，我们也是第一次在官方发布后进行审计。这导致了一个安全补丁的发布，修复了审计过程中发现的唯一重要问题（CVE-2023-34460）。总体来说，此次发布更多地集中在修复和改进 NSIS 功能，引入的新功能和安全相关的更改较少。

🌐 For the first time we also audited after the official release due to time constraints. This resulted in a security patch release, fixing the only impactful issue (CVE-2023-34460) discovered during auditing. In general this release was more focused on fixing and improving the NSIS features and introduced less new features and security relevant changes.

It is internal in the sense that we are also involved in the project itself but performed with the help of an external entity. Calling it external security audit would create false impressions. ↩ ↩²