Bump electron from 44.2.0 to 44.4.2 #8035

Closed
dependabot[bot] opened 7:14pm on September 20, 2026 wanted to merge 1 commit into signalapp/signal-desktop main from
dependabot/npm_and_yarn/electron-44.4.2
Diff Delta:
0
About 0 Diff Delta/hour
Classified as:  General

dependabot-bot's Description of Work

Bumps electron from 44.2.0 to 44.4.2.

Release notes

Sourced from electron's releases.



electron v44.4.2


Release Notes for v44.4.2


Fixes



  • Fixed a potential UAF when a select-usb-device handler destroys the requesting webContents. #54009 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->


Other Changes



  • Backported fixes from upstream ANGLE, Chromium, Skia and V8. #53985

  • Updated Chromium to 152.0.7977.130. #53778


electron v44.4.1


Release Notes for v44.4.1


Fixes



  • Fixed default protocol client APIs falsely returning true on Windows. #53959 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed several object lifetime issues in Debugger, Menu, Tray, Notification, globalShortcut, utilityProcess, ServiceWorkerMain, WebFrameMain, webFrame, sharedTexture, systemPreferences, netLog, MessagePortMain, net.request and shell.openPath(). #53968 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->


electron v44.4.0


Release Notes for v44.4.0


Features



  • Added initiatorOrigin to webRequest and protocol handler requests, DownloadItem.getInitiatorOrigin(), and a trailing frame argument to the will-download and preconnect session events. #53703 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->


Fixes



  • Added validation to protocol.registerSchemesAsPrivileged() to reject protocol names that do not conform to RFC 3986 URI scheme grammar. #53743 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed a crash when a webContents navigated to the Chrome Web Store and the page invoked the unsupported chrome.webstorePrivate API. #53776 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed a main-process crash when an app called loadURL() again right after a load failed because the renderer process exited before the page committed. #53943 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed a memory leak on Windows when app.getPreferredSystemLanguages() was called. #53868 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed a potential UAF in app.getPreferredSystemLanguages() on Windows. #53865 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed a renderer crash that could occur when printing from an iframe. #53762 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed a renderer crash when an iframe was removed right after loading with nodeIntegrationInSubFrames enabled and sandbox disabled, e.g. on pages that embed Meta Pixel. #53885 <!-- raw HTML omitted -->(Also in 42, 43, 45)<!-- raw HTML omitted -->

  • Fixed a Windows renderer crash when no default locale could be determined. #53947

  • Fixed an issue where the browser-side check that blocks drag and drop between cross-site frames of the same page was disabled. #53749 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed helper executables on macOS starting a second app instance when launched without a process type, for example through child_process.fork() with the runAsNode fuse disabled; fork() now throws in that configuration. #53840 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed V8 code caching for https scripts loaded by file:// and custom-scheme pages. #53745 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed webContents emitting unresponsive right after the system wakes from sleep on Windows, and emitting responsive when a hung window was hidden rather than when it recovered. #53764 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->

  • Fixed webContents.capturePage() on offscreen windows returning an image resampled to the display's scale factor instead of rendered at the window's offscreen.deviceScaleFactor. #53816 <!-- raw HTML omitted -->(Also in 43, 45)<!-- raw HTML omitted -->

  • Fixed Window Controls Overlay CSS environment variables and navigator.windowControlsOverlay not being populated for WebContentsViews in a BaseWindow. #53812 <!-- raw HTML omitted -->(Also in 45)<!-- raw HTML omitted -->


Other Changes



  • Backported fixes from upstream ANGLE, Chromium, libyuv, PDFium and V8. #53769

  • Updated Node.js to v24.21.0. #53779


electron v44.3.0


<!-- raw HTML omitted -->

... (truncated)

Commits



  • 34a45a2 build: update PGO profiles (#54031)


  • 5d2b2fe chore: bump chromium to 152.0.7977.130 (44-x-y) (#53778)


  • 5e32952 build: fix native addon cross-compilation (#54018)


  • 566efa2 fix: don't crash if guest destroyed in select-usb-device handler (#54009)


  • b45d4f1 build: allow empty .patches files (#54004)


  • adf6470 ci: ignore transient curl error in audit (#54002)


  • 8ec91c6 docs: search gitiles history before treating a Chrome fix CL as restricted (#...


  • 91d5485 chore: cherry-pick 18 changes from angle, chromium, skia and v8 (#53985)


  • 09d1a65 fix: cppgc object lifetime follow-ups (44-x-y) (#53968)


  • 8f9454a test: gate specs on testing bindings (#53964)

  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

2 total changed files
(2 files ignored)
You've made it to the end of the scroll.
Approve, request changes, or stare into the void (reviewer's choice) πŸ˜