Upgrade all dependencies
Rust:
- tauri/tauri-build: 2.0.0-rc -> 2 (stable)
- sharks -> blahaj 0.6 (sharks abandoned, blahaj is drop-in fork)
- base64: 0.22 -> 0.23
- rand: 0.8 -> 0.9 (updated test API)
- Removed unused tauri-plugin-shell
Frontend:
- nuxt: 3.13 -> 4 (migrated to app/ directory structure)
- @nuxt/ui: 2.18 -> 4 (UFormGroup->UFormField, UApp wrapper, Tailwind v4)
- zod: 3 -> 4 (z.uuid(), z.string().min(1))
- vue: 3.4 -> 3.5, vue-router: 4 -> 5
- uuid: 10 -> 14, typescript: 5 -> 6, vue-tsc: 2 -> 3
- tauri JS packages: RC -> 2 stable
- Removed unused deps: @types/uuid, @vitejs/plugin-vue, internal-ip, vite
- Added tailwindcss v4 for @nuxt/ui v4
- Removed dead Greet.vue component
- Fixed FormError.path->name, toast timeout->duration for @nuxt/ui v4
- Updated nuxt.config.ts: devServer.host, server.ws (replacing deprecated hmr)
ci: add CI workflow with lint, test, audit, and build jobs
- Lint and test job (Linux, all PRs + master): cargo fmt, clippy,
test, cargo audit (with ignored Tauri transitive deps), cargo deny
(licenses + advisories + bans), npm ci, typecheck, frontend build,
npm audit
- Build job (matrix: ubuntu, macOS, Windows, master only): full
tauri build with artifact upload (14-day retention)
- All actions SHA-pinned to commit SHAs for supply-chain security
- Add deny.toml with license allowlist, advisory ignores, and
permissive unmaintained/yanked config for transitive deps
- Add MIT license to Cargo.toml for cargo-deny license check
- mise-action for tool version management (reads mise.toml)
- Swatinem/rust-cache for Rust build caching
- Concurrency groups to cancel superseded runs
- permissions: contents: read on CI workflow
ci: add CI workflow with lint, test, audit, and build jobs
- Lint and test job (Linux, all PRs + master): cargo fmt, clippy,
test, cargo audit (with ignored Tauri transitive deps), cargo deny
(licenses + advisories + bans), npm ci, typecheck, frontend build,
npm audit
- Build job (matrix: ubuntu, macOS, Windows, master only): full
tauri build with artifact upload (14-day retention)
- All actions SHA-pinned to commit SHAs for supply-chain security
- Add deny.toml with license allowlist, advisory ignores, and
permissive unmaintained/yanked config for transitive deps
- Add MIT license to Cargo.toml for cargo-deny license check
- mise-action for tool version management (reads mise.toml)
- Swatinem/rust-cache for Rust build caching
- Concurrency groups to cancel superseded runs
- permissions: contents: read on CI workflow