dependabot-bot's Description of Work
Bumps electron from 44.2.0 to 44.4.2.
Release notes
Sourced from electron's releases.
electron v44.4.2
Release Notes for v44.4.2
Fixes
- Fixed a potential UAF when a
select-usb-devicehandler destroys the requestingwebContents. #54009 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->Other Changes
- Backported fixes from upstream ANGLE, Chromium, Skia and V8. #53985
- Updated Chromium to 152.0.7977.130. #53778
electron v44.4.1
Release Notes for v44.4.1
Fixes
- Fixed default protocol client APIs falsely returning
trueon Windows. #53959 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->- Fixed several object lifetime issues in
Debugger,Menu,Tray,Notification,globalShortcut,utilityProcess,ServiceWorkerMain,WebFrameMain,webFrame,sharedTexture,systemPreferences,netLog,MessagePortMain,net.requestandshell.openPath(). #53968 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->electron v44.4.0
Release Notes for v44.4.0
Features
- Added
initiatorOriginto webRequest and protocol handler requests,DownloadItem.getInitiatorOrigin(), and a trailingframeargument to thewill-downloadandpreconnectsession events. #53703 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->Fixes
- Added validation to
protocol.registerSchemesAsPrivileged()to reject protocol names that do not conform to RFC 3986 URI scheme grammar. #53743 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->- Fixed a crash when a webContents navigated to the Chrome Web Store and the page invoked the unsupported
chrome.webstorePrivateAPI. #53776 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->- Fixed a main-process crash when an app called
loadURL()again right after a load failed because the renderer process exited before the page committed. #53943 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->- Fixed a memory leak on Windows when
app.getPreferredSystemLanguages()was called. #53868 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->- Fixed a potential UAF in
app.getPreferredSystemLanguages()on Windows. #53865 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->- Fixed a renderer crash that could occur when printing from an iframe. #53762 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->
- Fixed a renderer crash when an iframe was removed right after loading with
nodeIntegrationInSubFramesenabled andsandboxdisabled, e.g. on pages that embed Meta Pixel. #53885 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->- Fixed a Windows renderer crash when no default locale could be determined. #53947
- Fixed an issue where the browser-side check that blocks drag and drop between cross-site frames of the same page was disabled. #53749 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->
- Fixed helper executables on macOS starting a second app instance when launched without a process type, for example through
child_process.fork()with therunAsNodefuse disabled;fork()now throws in that configuration. #53840 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->- Fixed V8 code caching for https scripts loaded by
file://and custom-scheme pages. #53745 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->- Fixed
webContentsemittingunresponsiveright after the system wakes from sleep on Windows, and emittingresponsivewhen a hung window was hidden rather than when it recovered. #53764 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->- Fixed
webContents.capturePage()on offscreen windows returning an image resampled to the display's scale factor instead of rendered at the window'soffscreen.deviceScaleFactor. #53816 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->- Fixed Window Controls Overlay CSS environment variables and
navigator.windowControlsOverlaynot being populated forWebContentsViews in aBaseWindow. #53812 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->Other Changes
- Backported fixes from upstream ANGLE, Chromium, libyuv, PDFium and V8. #53769
- Updated Node.js to v24.21.0. #53779
electron v44.3.0
<!-- raw HTML omitted -->
... (truncated)
Commits
-
34a45a2build: update PGO profiles (#54031) -
5d2b2fechore: bump chromium to 152.0.7977.130 (44-x-y) (#53778) -
5e32952build: fix native addon cross-compilation (#54018) -
566efa2fix: don't crash if guest destroyed in select-usb-device handler (#54009) -
b45d4f1build: allow empty .patches files (#54004) -
adf6470ci: ignore transient curl error in audit (#54002) -
8ec91c6docs: search gitiles history before treating a Chrome fix CL as restricted (#... -
91d5485chore: cherry-pick 18 changes from angle, chromium, skia and v8 (#53985) -
09d1a65fix: cppgc object lifetime follow-ups (44-x-y) (#53968) -
8f9454atest: gate specs on testing bindings (#53964) - Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)