feat(cli): check plugin versions for incompatibilities #13993

lucasfernog · 2025-08-12T20:04:15Z

check core plugin versions for incompatibilities between Cargo and NPM releases

a plugin NPM/cargo version is considered "incompatible" if their major or minor versions are not equal

on dev we show an warning
on build we error out (with a --ignore-incompatible-plugins flag to prevent that)

this is an idea from @oscartbeaumont
we've seen several plugin changes that require updates for both the cargo and the NPM releases of a plugin, and if they are not in sync, the functionality does not work e.g. tauri-apps/plugins-workspace#2573 where the change actually breaks the app updater if you miss the NPM update

@oscartbeaumont

check core plugin versions for incompatibilities between Cargo and NPM releases a plugin NPM/cargo version is considered "incompatible" if their major or minor versions are not equal on dev we show an warning on build we error out (with a `--ignore-incompatible-plugins` flag to prevent that) this is an idea from @oscartbeaumont we've seen several plugin changes that require updates for both the cargo and the NPM releases of a plugin, and if they are not in sync, the functionality does not work e.g. tauri-apps/plugins-workspace#2573 where the change actually breaks the app updater if you miss the NPM update

FabianLars · 2025-08-12T20:08:03Z

We also talked about this briefly here #13960 (and in like a hundred discord threads 😂 )

tldr: Tony is mostly concerned about start up time. Similar for me, after all we removed the cli update check for that reason.

FabianLars · 2025-08-12T20:10:46Z

oh and technically we sync plugins on patch versions at the moment. if we want the tool to only check minor then we need to make sure we don't have ipc breaking changes in patch releases (even if we consider it a fix). I don't mind either, we just need to agree on something and i guess document it somewhere.

FabianLars · 2025-08-12T20:16:08Z

tldr: Tony is mostly concerned about start up time. Similar for me, after all we removed the cli update check for that reason.

Well, should have probably tested the PR first before that. At least from my testing this seems to be pretty much instant. Too fast to measure its impact x) Nice job! Let's wait for the critics ( @Legend-Master ) though.

Legend-Master · 2025-08-13T00:39:29Z

Looks really good from a quick glance, offloading to a thread so we don't block startup and using rayon to parallelize the js package manager calls, I'll give it a try as well see if I notice the speed differences

Legend-Master · 2025-08-13T01:05:29Z

After some testing, the bottle neck is at getting the javascript packages, npm, pnpm yarn, list all support querying multiple packages at once, so we can use it and remove rayon instead, current one takes around 9 seconds (100ms parsing Cargo.toml + Cargo.lock) when running inside the plugin-workspace (most extreme scenario with all official plugins)

I'll see if I could push a change here

github-actions · 2025-08-13T02:02:31Z

Package Changes Through `e66fbb3`

There are 10 changes which include tauri with minor, tauri-cli with minor, @tauri-apps/cli with minor, tauri-utils with minor, tauri-bundler with minor, tauri-macos-sign with minor, tauri-runtime-wry with minor, tauri-runtime with minor, @tauri-apps/api with minor, tauri-plugin with minor

Planned Package Versions

The following package releases are the planned based on the context of changes in this pull request.

package	current	next
@tauri-apps/api	2.7.0	2.8.0
tauri-utils	2.6.0	2.7.0
tauri-macos-sign	2.1.0	2.2.0
tauri-bundler	2.5.2	2.6.0
tauri-runtime	2.7.1	2.8.0
tauri-runtime-wry	2.7.2	2.8.0
tauri-codegen	2.3.1	2.3.2
tauri-macros	2.3.2	2.3.3
tauri-plugin	2.3.1	2.4.0
tauri-build	2.3.1	2.3.2
tauri	2.7.0	2.8.0
@tauri-apps/cli	2.7.1	2.8.0
tauri-cli	2.7.1	2.8.0

Add another change file through the GitHub UI by following this link.

Read about change files or the docs at github.com/jbolda/covector

Legend-Master · 2025-08-13T02:03:28Z

Pushed c6e63a0

I have tested this with npm and pnpm, and the time used reduced to <1s, I think this is acceptable now with it being on a separate thread

Edit: ~~yarn needs special handling, it doesn't work right now~~ added and tested

crates/tauri-cli/src/helpers/mod.rs

Legend-Master · 2025-08-13T14:01:22Z

crates/tauri-cli/src/info/plugins.rs

+    .and_then(|p| fs::read_to_string(p.join("Cargo.lock")).ok())
+    .and_then(|s| toml::from_str(&s).ok());
+
+  let know_plugins = helpers::plugins::known_plugins();


I think we want to also include @tauri-app/api here? And maybe also @tauri-app/cli

well we do not have a good way to match those..

we'd need to agree on whether to match the tauri package versions and which packages and patch or minor and then actually do that 🙃

sooner or later we'll probably have to tackle this.

@tauri-app/api and tauri will need to match in minor versions at least

except that we failed with that multiple times (especially in v1 at the end). again, i'm not against it but if we add the check here we must start to take this serious.

i think before we actually run the check, we should sync our versions for a while, otherwise we suddenly break most builds

let's sync tauri, api and cli
and maybe pin minors for inner dependencies too

I think we could at least add a check that checks the version of tauri and @tauri-app/api here?

crates/tauri-cli/src/build.rs

Legend-Master · 2025-08-13T14:04:11Z

crates/tauri-cli/src/helpers/npm.rs

    }
  }
+
+  pub fn current_package_versions(


Probably want to migrate the other ones to use this one as much as possible to speed things up, could push that to the future though

FabianLars · 2025-08-15T12:03:21Z

With the intention being that we want to include tauri versions in the future as well we're a bit in a weird situation here because not checking the patch versions for plugins can be problematic since plugins are synced on the patch level. Some patch releases contained IPC sensitive changes.

We could take a step back and require patches to not make any ipc breaking changes (probably means that we mostly get js-only or rust-only PRs) but still keep syncing on patch releases anyway.

Legend-Master · 2025-08-15T12:36:29Z

Personally, I think we should sync the versions for the tauri packages as well, like we're currently doing for the plugins, it is easier to understand, that if the versions exactly matches, it will definitely work (if you see the versions being different, your first reaction would be am I doing something wrong that they don't fully match? instead of knowing it's fine as long as they're on the same minor version)

For the check and IPC breaking changes though, I think we should keep them in minors only (except for cases where the last minor broke the IPC in some ways and it's for fixing that), so if people want (like if they rely on the window.__TAURI_INTERNALS__.invoke directly ¹), they could pin the version range to minors (~ instead of ^)

Technically, if we do IPC breaking changes in tauri, plugin's global init script (api-iife.js) will break, in that case we should pin plugins' tauri version to a minor range, and release a new version on every tauri minor, the downsides being we'll need to release plugins a lot more frequently even with no code change at all (and if we don't sync the version of plugins with tauri, it could also be a bit hard to understand, but if we do sync them, we'll need to delay all the minor changes to be released with tauri)

A reference of people might be doing it: https://github.com/tauri-apps/plugins-workspace/pull/2897#discussion_r2255624382 ↩

lucasfernog · 2025-08-16T13:31:33Z

I agree with what you said overall.
But syncing tauri->plugins is a bit more complicated.. we can pull if off but it is harder to manage indeed, having to delay a particular plugin feature because tauri is not getting a minor release for a while..

lucasfernog · 2025-08-16T13:31:49Z

can I merge this? I kinda want to release tauri soon

Legend-Master · 2025-08-16T13:35:57Z

But syncing tauri->plugins is a bit more complicated.. we can pull if off but it is harder to manage indeed, having to delay a particular plugin feature because tauri is not getting a minor release for a while..

Yeah, same thoughts, we could leave this one for now

can I merge this? I kinda want to release tauri soon

Yeah sure, I just want to also add the tauri <-> @tauri-app/api check here, or maybe that could be for another day

crates/tauri-cli/src/build.rs

FabianLars · 2025-08-16T14:04:24Z

having to delay a particular plugin feature because tauri is not getting a minor release for a while..

we pulled out the core stuff into plugins to get around exactly that lol

edit: i think i misunderstood what you said, just act like i'm not here :)

Legend-Master · 2025-08-16T14:28:11Z

Yeah sure, I just want to also add the tauri <-> @tauri-app/api check here, or maybe that could be for another day

Added in cac22e4, and LOL, found out we got a mismatch in plugin-workspace while trying it 😂

Legend-Master · 2025-08-17T02:47:35Z

crates/tauri-cli/src/build.rs

+    if let Err(error) = check_mismatched_packages(frontend_dir(), tauri_path) {
+      log::error!("{error}");
+      if !ignore_version_mismatches {
+        std::process::exit(1);


This doesn't seem to stop the spawned processes (e.g. vite, cargo) though, feels like a pain to deal with 😂

ah right.. no easy way to deal with this unless we go with tokio tasks, easier to have graceful shutdown :/

it's either that or get back to sync (which is ok imo, build isn't run as often - and let's not forget cargo takes 500s while our check takes just 1 😂 )

it's either that or get back to sync (which is ok imo, build isn't run as often - and let's not forget cargo takes 500s while our check takes just 1 😂 )

Yeah, ~1 second is acceptable, let's use the sync version for now, sigh, I wish the cargo build doesn't take that long 😂

Just for the reference time with release build, it took around 500ms to check in plugins-workspace and ~700ms to check in my own project (with npm list taking up almost all the time) on my machine with an 11th gen i5 11400

I honestly don't know why those js package managers are so slow (maybe because the js file sizes are too big so parsing them could take a while?), pnpm --version takes 300-400ms, similar numbers for npm, with our cli, tauri --version takes only 20-50ms

…rsions

oscartbeaumont · 2025-08-18T17:43:17Z

Thank you everyone for getting this through! So happy to know it's going to be much less likely anyone is going to end up in the same unfortunate position as us with a broken autoupdater in production caused by an cargo update.

After NixOS#438726 updated `tauri` to >=2.8.0, it now checks for mismatched versions (tauri-apps/tauri#13993). This was always a problem, it just wasn't checked until now. This patch bumps the NPM versions to match the newer Cargo versions.

After #438726 updated `tauri` to >=2.8.0, it now checks for mismatched versions (tauri-apps/tauri#13993). This was always a problem, it just wasn't checked until now. This patch bumps the NPM versions to match the newer Cargo versions.

lucasfernog requested a review from a team as a code owner August 12, 2025 20:04

github-project-automation bot added this to Roadmap Aug 12, 2025

github-project-automation bot moved this to 📬Proposal in Roadmap Aug 12, 2025

Legend-Master added 2 commits August 13, 2025 10:00

Use list to get multiple package versions at once

c6e63a0

Merge branch 'dev' into feat/check-plugin-versions

8394508

Legend-Master added 2 commits August 13, 2025 10:06

Fix for older rust versions

8967d4e

Clippy

23e9f62

Legend-Master linked an issue Aug 13, 2025 that may be closed by this pull request

[feat] warn user about Rust and JavaScript version mismatch in CLI #13960

Closed

Support yarn classic

87f59e4

Legend-Master reviewed Aug 13, 2025

View reviewed changes

crates/tauri-cli/src/helpers/mod.rs Outdated Show resolved Hide resolved

Legend-Master added 3 commits August 13, 2025 11:25

Support yarn berry

e3efd13

Use .cmd only for npm, yarn, pnpm

d0cd407

Use yarn list without --pattern

5b1a540

Legend-Master reviewed Aug 13, 2025

View reviewed changes

lucasfernog added 2 commits August 14, 2025 09:18

rename

c473511

Merge branch 'dev' into feat/check-plugin-versions

958c7cf

lucasfernog requested review from FabianLars and Legend-Master August 15, 2025 11:10

Legend-Master reviewed Aug 16, 2025

View reviewed changes

crates/tauri-cli/src/build.rs Outdated Show resolved Hide resolved

Legend-Master added 2 commits August 16, 2025 22:07

Extract function check_incompatible_packages

6397418

Check tauri <-> @tauri-apps/api

cac22e4

lucasfernog added 3 commits August 16, 2025 13:23

incompatible -> mismatched

3374328

run build check in parallel

99eac04

rename struct

201e7c1

Legend-Master reviewed Aug 17, 2025

View reviewed changes

Switch back to use sync check and add todo

202a782

Legend-Master previously approved these changes Aug 17, 2025

View reviewed changes

Extract to function cargo_manifest_and_lock

b8690ef

Legend-Master dismissed their stale review via b8690ef August 17, 2025 08:35

Legend-Master and others added 2 commits August 17, 2025 16:41

Merge remote-tracking branch 'upstream/dev' into feat/check-plugin-ve…

5b0833a

…rsions

Merge branch 'dev' into feat/check-plugin-versions

e66fbb3

Legend-Master approved these changes Aug 17, 2025

View reviewed changes

lucasfernog merged commit bc4afe7 into dev Aug 17, 2025
19 of 20 checks passed

github-project-automation bot moved this from 📬Proposal to 🔎 In audit in Roadmap Aug 17, 2025

lucasfernog deleted the feat/check-plugin-versions branch August 17, 2025 15:24

github-actions bot mentioned this pull request Aug 17, 2025

Apply Version Updates From Current Changes #13887

Merged

Legend-Master mentioned this pull request Aug 17, 2025

[feat] warn user about Rust and JavaScript version mismatch in CLI #13960

Closed

magneticflux- mentioned this pull request Sep 1, 2025

gg-jj: patch lockfile to fix mismatched NPM/Cargo versions of Tauri NixOS/nixpkgs#439100

Merged

13 tasks

Uh oh!

feat(cli): check plugin versions for incompatibilities #13993

feat(cli): check plugin versions for incompatibilities #13993

Uh oh!

Conversation

lucasfernog commented Aug 12, 2025

Uh oh!

FabianLars commented Aug 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

FabianLars commented Aug 12, 2025

Uh oh!

FabianLars commented Aug 12, 2025

Uh oh!

Legend-Master commented Aug 13, 2025

Uh oh!

Legend-Master commented Aug 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Aug 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Package Changes Through e66fbb3

Uh oh!

Legend-Master commented Aug 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Legend-Master Aug 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

FabianLars commented Aug 15, 2025

Uh oh!

Legend-Master commented Aug 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Footnotes

Uh oh!

lucasfernog commented Aug 16, 2025

Uh oh!

lucasfernog commented Aug 16, 2025

Uh oh!

Legend-Master commented Aug 16, 2025

Uh oh!

Uh oh!

FabianLars commented Aug 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Legend-Master commented Aug 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Legend-Master Aug 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

oscartbeaumont commented Aug 18, 2025

Uh oh!

Uh oh!

FabianLars commented Aug 12, 2025 •

edited

Loading

Legend-Master commented Aug 13, 2025 •

edited

Loading

github-actions bot commented Aug 13, 2025 •

edited

Loading

Package Changes Through `e66fbb3`

Legend-Master commented Aug 13, 2025 •

edited

Loading

Legend-Master Aug 13, 2025 •

edited

Loading

Legend-Master commented Aug 15, 2025 •

edited

Loading

FabianLars commented Aug 16, 2025 •

edited

Loading

Legend-Master commented Aug 16, 2025 •

edited

Loading

Legend-Master Aug 17, 2025 •

edited

Loading