Fix release Tauri dependency alignment

.github/workflows/release.yml

@@ -90,7 +90,7 @@ jobs:
           workspaces: src-tauri
 
       - name: Install frontend dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       # ── whisper.cpp binaries ──────────────────────────────────────────────
       - name: Setup whisper.cpp sidecar
@@ -225,7 +225,7 @@ jobs:
           workspaces: src-tauri
 
       - name: Install frontend dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       # ── whisper.cpp binaries ──────────────────────────────────────────────
       - name: Setup whisper.cpp sidecar
@@ -322,7 +322,7 @@ jobs:
           workspaces: src-tauri
 
       - name: Install frontend dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       # ── whisper.cpp binaries ──────────────────────────────────────────────
       - name: Setup whisper.cpp sidecar

README.md

@@ -172,6 +172,11 @@ pnpm tauri dev
 pnpm tauri build
 ```
 
+CI and release jobs install dependencies with `pnpm install --frozen-lockfile`.
+When updating Tauri, keep the Rust `tauri` crate and frontend
+`@tauri-apps/api` package on the same major/minor version before running a
+release build.
+
 ### Sidecar Binaries (required)
 
 The bootstrap script handles this automatically. For manual setup, you need to place platform-appropriate sidecar binaries in `src-tauri/binaries/`:

docs/changelog.md

@@ -2,6 +2,7 @@
 
 ## Unreleased
 
+- Fixed release builds by aligning Tauri Rust and frontend package versions and using the pnpm frozen lockfile in all release jobs.
 - Removed the unused npm lockfile, pinned pnpm as the project package manager, and moved security overrides into `pnpm-workspace.yaml` so Dependabot scans one frontend lockfile.
 - Added selectable pill modes: the new default recording overlay stays hidden while idle and shows only a bottom-center waveform during recording, while Classic pill preserves the old persistent compact/expanded UI with previews.
 - Fixed the overlay pill startup default so the main dashboard opens normally while the overlay itself stays hidden until recording.

docs/dev/transcription-pipeline.md

@@ -167,6 +167,8 @@ Segment storage is unchanged. Word-level timestamps are stored in `session_words
 
 CI runs `.github/actions/setup-whisper` and `.github/actions/setup-parakeet-cpp` before Rust tests and release builds. The Parakeet action pins `mudler/parakeet.cpp` to `v0.3.2`, downloads CPU/portable CLI assets, verifies SHA-256 checksums, builds `parakeet-stream-worker` from the pinned source, writes target-triple sidecar binaries, and stages required runtime libraries in `src-tauri/parakeet-runtime/`.
 
+Release jobs use `pnpm install --frozen-lockfile` so packaging sees the same frontend dependency graph as CI. When Tauri is updated, keep the Rust `tauri` crate and frontend `@tauri-apps/api` package on the same major/minor version; `tauri build` fails early when they drift.
+
 Release jobs audit that the bundled sidecars and NeMo worker resource are present before building installers. Public installers bundle:
 
 - `whisper-cli`

package.json

@@ -31,9 +31,9 @@
         "@base-ui/react": "^1.4.1",
         "@fontsource-variable/geist": "^5.2.8",
         "@tanstack/react-virtual": "^3.13.24",
-        "@tauri-apps/api": "^2.10.1",
+        "@tauri-apps/api": "2.11.1",
         "@tauri-apps/plugin-notification": "^2.3.3",
-        "@tauri-apps/plugin-opener": "^2.5.3",
+        "@tauri-apps/plugin-opener": "2.5.4",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "i18next": "^26.0.8",
@@ -51,7 +51,7 @@
     "devDependencies": {
         "@playwright/test": "^1.59.1",
         "@tailwindcss/vite": "^4.2.4",
-        "@tauri-apps/cli": "^2.10.1",
+        "@tauri-apps/cli": "2.11.1",
         "@testing-library/jest-dom": "^6.9.1",
         "@testing-library/react": "^16.3.2",
         "@testing-library/user-event": "^14.6.1",