quine-global/electron-link
1
0
Fork 0
Code Issues Pull requests 5 Projects Releases Packages Wiki Activity Actions

Bump electron from 9.3.5 to 42.0.1 #6

Open
dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/electron-42.0.1 into master
pull from: dependabot/npm_and_yarn/electron-42.0.1
merge into: quine-global:master
Conversation 0 Commits 1 Files changed 2 +128 -767
dependabot[bot] commented 2026-05-10 19:31:09 -08:00 (Migrated from github.com)
Copy link

Bumps electron from 9.3.5 to 42.0.1.

Release notes

Sourced from electron's releases.

electron v42.0.1

Release Notes for v42.0.1

Fixes

  • Fixed DesktopCapturer crash on macOS. #51506
  • Fixed ELECTRON_INSTALL_PLATFORM being ignored when resolving the Electron executable path during postinstall, which caused path.txt to be written for the host platform instead of the requested target and made isInstalled() always re-download on subsequent installs. #51370
  • Fixed app.getLoginItemSettings() returning undefined for executableWillLaunchAtLogin on macOS; the property is now always a boolean. #51507 (Also in 40, 41)
  • Fixed a potential race condition crash when closing DevTools. #51473 (Also in 41)

Other Changes

  • Updated Chromium to 148.0.7778.97. #51517

electron v42.0.0

Release Notes for v42.0.0

Stack Upgrades

Breaking Changes

Behavior Changed: macOS notifications now use UNNotification API

Electron has migrated from the deprecated NSUserNotification API to the UNNotification API on macOS. The new API requires that an application be code-signed in order for notifications to be displayed. If an application is not code-signed, notifications will emit a failed event on the Notification object. #47817

Behavior Changed: electron no longer downloads itself via postinstall script

Previously, the electron npm package would download the Electron binary from the repository's GitHub Releases in the package's postinstall script. With recent supply chain security attacks against the npm ecosystem with postinstall scripts as a common attack vector, Electron will now download itself dynamically the first time that its main bin script is run (e.g. via npx electron). See [RFC #22](electron/rfcs#22) for more context. #49328

Behavior Changed: Offscreen rendering default device scale factor

Previously, OSR used the primary display's device scale factor for rendering. Starting from Electron 42, the default changes to a constant value of 1.0 for more consistent output sizes. Use webPreferences.offscreen.deviceScaleFactor to specify a custom value. #49683

Removed: quotas object from Session.clearStorageData(options)

When calling Session.clearStorageData(options), the options.quotas object is no longer supported because it has been removed from upstream Chromium.

Removed: ELECTRON_SKIP_BINARY_DOWNLOAD environment variable

This environment variable is no longer supported due to the new lazy download behavior. #50459

Features

Additions

... (truncated)

Commits
  • b133532 ci: pin Homebrew version in CI runs (#51545)
  • a8a9854 chore: update breaking changes for Electron 42 (#51550)
  • e7021e3 fix: test idempotency issues (#51526)
  • e49c3c6 test: make sure there are no orphaned electron processes running (#51485)
  • 90ef05b chore: bump chromium to 148.0.7778.97 (42-x-y) (#51517)
  • 34e6739 test: await did-create-window assertion in child close test (#51519)
  • 6e01417 fix: always emit executableWillLaunchAtLogin from getLoginItemSettings (#...
  • 7db53c0 fix: timing issue DCHECK crash in DesktopCapturer on macOS (#51506)
  • b71b313 build: replace spec dep fork with transitive resolution (#51489)
  • 2a4e369 fix: honor ELECTRON_INSTALL_PLATFORM in getPlatformPath (#51029) (#51370)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [electron](https://github.com/electron/electron) from 9.3.5 to 42.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/electron/electron/releases">electron's releases</a>.</em></p> <blockquote> <h2>electron v42.0.1</h2> <h1>Release Notes for v42.0.1</h1> <h2>Fixes</h2> <ul> <li>Fixed DesktopCapturer crash on macOS. <a href="https://redirect.github.com/electron/electron/pull/51506">#51506</a></li> <li>Fixed ELECTRON_INSTALL_PLATFORM being ignored when resolving the Electron executable path during postinstall, which caused path.txt to be written for the host platform instead of the requested target and made isInstalled() always re-download on subsequent installs. <a href="https://redirect.github.com/electron/electron/pull/51370">#51370</a></li> <li>Fixed <code>app.getLoginItemSettings()</code> returning <code>undefined</code> for <code>executableWillLaunchAtLogin</code> on macOS; the property is now always a boolean. <a href="https://redirect.github.com/electron/electron/pull/51507">#51507</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/51509">40</a>, <a href="https://redirect.github.com/electron/electron/pull/51508">41</a>)<!-- raw HTML omitted --></li> <li>Fixed a potential race condition crash when closing DevTools. <a href="https://redirect.github.com/electron/electron/pull/51473">#51473</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/51474">41</a>)<!-- raw HTML omitted --></li> </ul> <h2>Other Changes</h2> <ul> <li>Updated Chromium to 148.0.7778.97. <a href="https://redirect.github.com/electron/electron/pull/51517">#51517</a></li> </ul> <h2>electron v42.0.0</h2> <h1>Release Notes for v42.0.0</h1> <h2>Stack Upgrades</h2> <ul> <li>Chromium <code>148.0.7778.96</code> <ul> <li><a href="https://developer.chrome.com/blog/new-in-chrome-148/">New in 148</a></li> <li><a href="https://developer.chrome.com/blog/new-in-chrome-147/">New in 147</a></li> </ul> </li> <li>Node <code>v24.15.0</code> <ul> <li><a href="https://nodejs.org/en/blog/release/v24.15.0/">Node 24.15.0 blog post</a></li> </ul> </li> <li>V8 <code>14.8</code></li> </ul> <h2>Breaking Changes</h2> <h3>Behavior Changed: macOS notifications now use <code>UNNotification</code> API</h3> <p>Electron has migrated from the deprecated <code>NSUserNotification</code> API to the <code>UNNotification</code> API on macOS. The new API requires that an application be code-signed in order for notifications to be displayed. If an application is not code-signed, notifications will emit a <code>failed</code> event on the <code>Notification</code> object. <a href="https://redirect.github.com/electron/electron/pull/47817">#47817</a></p> <h3>Behavior Changed: <code>electron</code> no longer downloads itself via <code>postinstall</code> script</h3> <p>Previously, the <code>electron</code> npm package would download the Electron binary from the repository's GitHub Releases in the package's <code>postinstall</code> script. With recent supply chain security attacks against the npm ecosystem with <code>postinstall</code> scripts as a common attack vector, Electron will now download itself dynamically the first time that its main <code>bin</code> script is run (e.g. via <code>npx electron</code>). See [RFC <a href="https://redirect.github.com/electron/electron/issues/22">#22</a>](<a href="https://redirect.github.com/electron/rfcs/pull/22">electron/rfcs#22</a>) for more context. <a href="https://redirect.github.com/electron/electron/pull/49328">#49328</a></p> <h3>Behavior Changed: Offscreen rendering default device scale factor</h3> <p>Previously, OSR used the primary display's device scale factor for rendering. Starting from Electron 42, the default changes to a constant value of <code>1.0</code> for more consistent output sizes. Use <code>webPreferences.offscreen.deviceScaleFactor</code> to specify a custom value. <a href="https://redirect.github.com/electron/electron/pull/49683">#49683</a></p> <h3>Removed: <code>quotas</code> object from <code>Session.clearStorageData(options)</code></h3> <p>When calling <code>Session.clearStorageData(options)</code>, the <code>options.quotas</code> object is no longer supported because it has been removed from upstream Chromium.</p> <h3>Removed: <code>ELECTRON_SKIP_BINARY_DOWNLOAD</code> environment variable</h3> <p>This environment variable is no longer supported due to the new lazy download behavior. <a href="https://redirect.github.com/electron/electron/pull/50459">#50459</a></p> <h2>Features</h2> <h3>Additions</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/electron/electron/commit/b133532b5fbe4b2db755c61c8baadde859e76643"><code>b133532</code></a> ci: pin Homebrew version in CI runs (<a href="https://redirect.github.com/electron/electron/issues/51545">#51545</a>)</li> <li><a href="https://github.com/electron/electron/commit/a8a98545006c51f314143ae03e213f9382bc4adf"><code>a8a9854</code></a> chore: update breaking changes for Electron 42 (<a href="https://redirect.github.com/electron/electron/issues/51550">#51550</a>)</li> <li><a href="https://github.com/electron/electron/commit/e7021e36be1bd4d160f9bc6e472084e169a1c7dd"><code>e7021e3</code></a> fix: test idempotency issues (<a href="https://redirect.github.com/electron/electron/issues/51526">#51526</a>)</li> <li><a href="https://github.com/electron/electron/commit/e49c3c6e63be0469b64e458d8aaf63cb63db2266"><code>e49c3c6</code></a> test: make sure there are no orphaned electron processes running (<a href="https://redirect.github.com/electron/electron/issues/51485">#51485</a>)</li> <li><a href="https://github.com/electron/electron/commit/90ef05b486ce76a8d7d528446ccfb2c9271dd43c"><code>90ef05b</code></a> chore: bump chromium to 148.0.7778.97 (42-x-y) (<a href="https://redirect.github.com/electron/electron/issues/51517">#51517</a>)</li> <li><a href="https://github.com/electron/electron/commit/34e67398632e3b1fe539ee50b286e717a6ca1d52"><code>34e6739</code></a> test: await did-create-window assertion in child close test (<a href="https://redirect.github.com/electron/electron/issues/51519">#51519</a>)</li> <li><a href="https://github.com/electron/electron/commit/6e014179fb5bc217725649056f3cb784d54af2c2"><code>6e01417</code></a> fix: always emit <code>executableWillLaunchAtLogin</code> from <code>getLoginItemSettings</code> (#...</li> <li><a href="https://github.com/electron/electron/commit/7db53c05e5a74af5d0d8510b14673a5dbda94757"><code>7db53c0</code></a> fix: timing issue DCHECK crash in DesktopCapturer on macOS (<a href="https://redirect.github.com/electron/electron/issues/51506">#51506</a>)</li> <li><a href="https://github.com/electron/electron/commit/b71b3138f4cb3a45294cbdb8c3bed27e6fde71d9"><code>b71b313</code></a> build: replace spec dep fork with transitive resolution (<a href="https://redirect.github.com/electron/electron/issues/51489">#51489</a>)</li> <li><a href="https://github.com/electron/electron/commit/2a4e369ddd99d3a2c893093d8412152a700e7e75"><code>2a4e369</code></a> fix: honor <code>ELECTRON_INSTALL_PLATFORM</code> in <code>getPlatformPath</code> (<a href="https://redirect.github.com/electron/electron/issues/51029">#51029</a>) (<a href="https://redirect.github.com/electron/electron/issues/51370">#51370</a>)</li> <li>Additional commits viewable in <a href="https://github.com/electron/electron/compare/v9.3.5...v42.0.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=electron&package-manager=npm_and_yarn&previous-version=9.3.5&new-version=42.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/npm_and_yarn/electron-42.0.1:dependabot/npm_and_yarn/electron-42.0.1
git checkout dependabot/npm_and_yarn/electron-42.0.1

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git checkout master
git merge --no-ff dependabot/npm_and_yarn/electron-42.0.1
git checkout dependabot/npm_and_yarn/electron-42.0.1
git rebase master
git checkout master
git merge --ff-only dependabot/npm_and_yarn/electron-42.0.1
git checkout dependabot/npm_and_yarn/electron-42.0.1
git rebase master
git checkout master
git merge --no-ff dependabot/npm_and_yarn/electron-42.0.1
git checkout master
git merge --squash dependabot/npm_and_yarn/electron-42.0.1
git checkout master
git merge --ff-only dependabot/npm_and_yarn/electron-42.0.1
git checkout master
git merge dependabot/npm_and_yarn/electron-42.0.1
git push origin master
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug

Something isn't working

  
dependencies

Pull requests that update a dependency file

  
documentation

Improvements or additions to documentation

  
duplicate

This issue or pull request already exists

  
enhancement

New feature or request

  
good first issue

Good for newcomers

  
help wanted

Extra attention is needed

  
invalid

This doesn't seem right

  
javascript

Pull requests that update javascript code

  
question

Further information is requested

  
wontfix

This will not be worked on

No labels
bug
dependencies
documentation
duplicate
enhancement
good first issue
help wanted
invalid
javascript
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: quine-global/electron-link#6
No description provided.
Delete branch "dependabot/npm_and_yarn/electron-42.0.1"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?