Bump electron from 44.2.0 to 44.4.2 #8035

Closed
dependabot[bot] opened 7:14pm on September 20, 2026 wanted to merge 1 commit into signalapp/signal-desktop main from
dependabot/npm_and_yarn/electron-44.4.2

Pull Request Overview

  • Opened on September 21, 2026
  • Status Closed
  • Commit count 1 with first commit September 21, 2026

Total Delta

0 Total Diff Delta

Open Days

Open 40 weekdays

Test Delta

0 Diff Delta in Test Files
Breakdown by Phase

How long has this pull request spent in each phase of its lifecycle?

Fraction of total time Business days Phase
 
0 days Authoring 1 commit before pull request opened for review
 
1 day Awaiting first review

Total time for pull request 1 business day from first commit to closed PR

Author avatar

Bump electron from 44.2.0 to 44.4.2

Bumps electron from 44.2.0 to 44.4.2.

Release notes

Sourced from electron's releases.



electron v44.4.2


Release Notes for v44.4.2


Fixes



  • Fixed a potential UAF when a select-usb-device handler destroys the requesting webContents. #54009 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->


Other Changes



  • Backported fixes from upstream ANGLE, Chromium, Skia and V8. #53985

  • Updated Chromium to 152.0.7977.130. #53778


electron v44.4.1


Release Notes for v44.4.1


Fixes



  • Fixed default protocol client APIs falsely returning true on Windows. #53959 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed several object lifetime issues in Debugger, Menu, Tray, Notification, globalShortcut, utilityProcess, ServiceWorkerMain, WebFrameMain, webFrame, sharedTexture, systemPreferences, netLog, MessagePortMain, net.request and shell.openPath(). #53968 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->


electron v44.4.0


Release Notes for v44.4.0


Features



  • Added initiatorOrigin to webRequest and protocol handler requests, DownloadItem.getInitiatorOrigin(), and a trailing frame argument to the will-download and preconnect session events. #53703 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->


Fixes



  • Added validation to protocol.registerSchemesAsPrivileged() to reject protocol names that do not conform to RFC 3986 URI scheme grammar. #53743 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed a crash when a webContents navigated to the Chrome Web Store and the page invoked the unsupported chrome.webstorePrivate API. #53776 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed a main-process crash when an app called loadURL() again right after a load failed because the renderer process exited before the page committed. #53943 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed a memory leak on Windows when app.getPreferredSystemLanguages() was called. #53868 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed a potential UAF in app.getPreferredSystemLanguages() on Windows. #53865 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed a renderer crash that could occur when printing from an iframe. #53762 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed a renderer crash when an iframe was removed right after loading with nodeIntegrationInSubFrames enabled and sandbox disabled, e.g. on pages that embed Meta Pixel. #53885 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->

  • Fixed a Windows renderer crash when no default locale could be determined. #53947

  • Fixed an issue where the browser-side check that blocks drag and drop between cross-site frames of the same page was disabled. #53749 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed helper executables on macOS starting a second app instance when launched without a process type, for example through child_process.fork() with the runAsNode fuse disabled; fork() now throws in that configuration. #53840 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed V8 code caching for https scripts loaded by file:// and custom-scheme pages. #53745 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed webContents emitting unresponsive right after the system wakes from sleep on Windows, and emitting responsive when a hung window was hidden rather than when it recovered. #53764 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed webContents.capturePage() on offscreen windows returning an image resampled to the display's scale factor instead of rendered at the window's offscreen.deviceScaleFactor. #53816 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed Window Controls Overlay CSS environment variables and navigator.windowControlsOverlay not being populated for WebContentsViews in a BaseWindow. #53812 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->


Other Changes



  • Backported fixes from upstream ANGLE, Chromium, libyuv, PDFium and V8. #53769

  • Updated Node.js to v24.21.0. #53779


electron v44.3.0


<!-- raw HTML omitted -->

... (truncated)

Commits



  • 34a45a2 build: update PGO profiles (#54031)


  • 5d2b2fe chore: bump chromium to 152.0.7977.130 (44-x-y) (#53778)


  • 5e32952 build: fix native addon cross-compilation (#54018)


  • 566efa2 fix: don't crash if guest destroyed in select-usb-device handler (#54009)


  • b45d4f1 build: allow empty .patches files (#54004)


  • adf6470 ci: ignore transient curl error in audit (#54002)


  • 8ec91c6 docs: search gitiles history before treating a Chrome fix CL as restricted (#...


  • 91d5485 chore: cherry-pick 18 changes from angle, chromium, skia and v8 (#53985)


  • 09d1a65 fix: cppgc object lifetime follow-ups (44-x-y) (#53968)


  • 8f9454a test: gate specs on testing bindings (#53964)

  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Comments Threads Pending Resolution

Resolved Comment Threads

No resolved comments have been left on this PR.