[PR #5402] [MERGED] fix(native): bump `tauri-plugin-shell` to `v2.2.1` #5189

New issue

Closed

opened 2026-03-17 02:39:34 +03:00 by kerem · 0 comments

kerem commented

2026-03-17 02:39:34 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hoppscotch/hoppscotch/pull/5402
Author: @CuriousCorrelation
Created: 9/24/2025
Status: ✅ Merged
Merged: 9/24/2025
Merged by: @jamesgeorge007

Base: next ← Head: native-security-bump-tauri-shell-plugin

📝 Commits (1)

a8ff3cc fix(native): bump tauri-plugin-shell to v2.2.1

📊 Changes

9 files changed (+917 additions, -500 deletions)

View changed files

📝 packages/hoppscotch-agent/package.json (+1 -1)
📝 packages/hoppscotch-agent/src-tauri/Cargo.lock (+266 -161)
📝 packages/hoppscotch-agent/src-tauri/Cargo.toml (+1 -1)
📝 packages/hoppscotch-desktop/package.json (+1 -1)
📝 packages/hoppscotch-desktop/src-tauri/Cargo.lock (+634 -315)
📝 packages/hoppscotch-desktop/src-tauri/Cargo.toml (+1 -1)
📝 packages/hoppscotch-kernel/package.json (+1 -1)
📝 packages/hoppscotch-selfhost-web/package.json (+1 -1)
📝 pnpm-lock.yaml (+11 -18)

📄 Description

Updates tauri-plugin-shell from vulnerable version to v2.2.1 to
address CVE-2025-31477 in open around scope validation.

Affects both hoppscotch-kernel, hoppscotch-agent and hoppscotch-desktop.

Closes FE-1022

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hoppscotch/hoppscotch/pull/5402 **Author:** [@CuriousCorrelation](https://github.com/CuriousCorrelation) **Created:** 9/24/2025 **Status:** ✅ Merged **Merged:** 9/24/2025 **Merged by:** [@jamesgeorge007](https://github.com/jamesgeorge007) **Base:** `next` ← **Head:** `native-security-bump-tauri-shell-plugin` --- ### 📝 Commits (1) - [`a8ff3cc`](https://github.com/hoppscotch/hoppscotch/commit/a8ff3ccfe74c3e56a4c53cae16608997b91ca001) fix(native): bump `tauri-plugin-shell` to `v2.2.1` ### 📊 Changes **9 files changed** (+917 additions, -500 deletions) <details> <summary>View changed files</summary> 📝 `packages/hoppscotch-agent/package.json` (+1 -1) 📝 `packages/hoppscotch-agent/src-tauri/Cargo.lock` (+266 -161) 📝 `packages/hoppscotch-agent/src-tauri/Cargo.toml` (+1 -1) 📝 `packages/hoppscotch-desktop/package.json` (+1 -1) 📝 `packages/hoppscotch-desktop/src-tauri/Cargo.lock` (+634 -315) 📝 `packages/hoppscotch-desktop/src-tauri/Cargo.toml` (+1 -1) 📝 `packages/hoppscotch-kernel/package.json` (+1 -1) 📝 `packages/hoppscotch-selfhost-web/package.json` (+1 -1) 📝 `pnpm-lock.yaml` (+11 -18) </details> ### 📄 Description Updates `tauri-plugin-shell` from vulnerable version to `v2.2.1` to address `CVE-2025-31477` in `open` around scope validation. Affects both `hoppscotch-kernel`, `hoppscotch-agent` and `hoppscotch-desktop`. Closes FE-1022 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>