Bump electron from 44.2.0 to 44.3.0 #8025

Open
dependabot[bot] opened 7:16pm on September 13, 2026 wants to merge 1 commit into signalapp/signal-desktop main from
dependabot/npm_and_yarn/electron-44.3.0
Diff Delta:
0
About 0 Diff Delta/hour
Classified as:  General

dependabot-bot's Description of Work

Bumps electron from 44.2.0 to 44.3.0.

Release notes

Sourced from electron's releases.



electron v44.3.0


Release Notes for v44.3.0


Features



  • Added the ELECTRON_DEBUG_DRAGGABLE_REGIONS environment variable, which visualizes and logs draggable regions in unpackaged apps to help debug custom title bars. #53627 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->


Fixes



  • File System Access permission requests and the file-system-access-restricted event are scoped to the requesting document, grants are reset when the origin's last page closes, and write access works in in-memory sessions. #53691 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->

  • Fixed Ctrl+Y not yanking text killed with Ctrl+K in text fields on macOS. #53714 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed Tray icons not appearing when running inside Flatpak or Snap sandboxes on Linux. #53653 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed app.getGPUInfo('complete') stalling the GPU process for several seconds on some Windows systems. #53644 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed session.setPermissionCheckHandler receiving the top-level origin and a null webContents for hid and usb checks made from a subframe. #53688 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->

  • Fixed webContents.on(), removeListener() and removeAllListeners() throwing "Object has been destroyed" for console-message listeners after the WebContents was destroyed. #53494 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->

  • Fixed a crash on Linux when process.env was written while another thread was reading the environment, and a memory leak when a worker thread exits. #53509 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->

  • Fixed a possible crash on Windows when a file dialog was shown for a window that was being closed at the same time. #53583 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->

  • Fixed a renderer crash when the main process sent IPC to, or a page navigated, a same-process window.open() child whose contextIsolation differed from its opener's. #53539 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->

  • Fixed a spurious node_init error being logged when creating a ShadowRealm with Node.js integration enabled. #53579 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed crashes in setDisplayMediaRequestHandler when the granted frame had been destroyed or another tab was granted by id. #53672 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->

  • Fixed several non-functional DevTools integrations: the Security panel's "View certificate" button, Ctrl+wheel zooming inside DevTools, and DevTools keyboard shortcuts (e.g. F8) while the inspected page has focus. #53630 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed window state not being persisted when a window entered or left fullscreen, or was maximized or unmaximized, without also being moved or resized. #53576 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Internal <webview>, window.close() and executeJavaScript reply IPCs are validated against the sending frame. #53723 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->


  • <webview> without allowpopups also blocks links opened into a new window by modifier-click, and such windows navigate as the clicking document rather than as a browser-initiated load. #53721 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->


  • getUserMedia with chromeMediaSource: 'desktop' no longer accepts WebContents source ids; use chromeMediaSource: 'tab' with webContents.getMediaSourceId() or setDisplayMediaRequestHandler to capture a WebContents. #53709 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->


  • nodeIntegrationInWorker now applies only to workers created by frames that themselves have Node integration; enable nodeIntegrationInSubFrames to keep Node in workers created by subframes. #53711 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->


  • openExternal permission requests started by a frame that has since gone away are attributed to that frame's origin rather than to the navigating page. #53699 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->


  • pointerLock and keyboardLock permission requests now report the requesting frame, and execCommand('paste') requires user activation in the frame that calls it. #53693 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->


Other Changes



  • Fixed the app becoming unresponsive when a page has a very large number of app-region draggable elements. #53597 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Updated Chromium to 152.0.7977.78. #53523


Commits



  • 07e4607 test: split the Squirrel.Mac updater specs and run them serially on x64 (#53729)


  • 79ceb1e fix: check the sending frame for internal guest, window and reply IPCs (#53723)


  • fb5f8e2 feat: add ELECTRON_DEBUG_DRAGGABLE_REGIONS debugging aid (#53627)


  • 079b9b1 fix: route modifier-click and OpenURLFromTab popups through the window-open p...


  • b6a4d49 fix: gate preload and worker Node integration on the creating frame (44-x-y) ...


  • 779cba5 fix: restore the kill ring on non-MAS macOS builds (#53714)


  • d024d25 fix: require a registered source id for webContents capture via getUserMedia ...


  • a450ce4 fix: scope File System Access grants to the requesting document (44-x-y) (#53...


  • 8aa5414 fix: attribute openExternal permission requests to the navigation's initiator...


  • 88bad31 fix: attribute pointer lock, keyboard lock and paste checks to the requesting...

  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

2 total changed files
(2 files ignored)
You've reached the end of this PR review
Reviewer: 1. Additional work: 0