You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cordova.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 09:01:28 UTC
[PR] chore(deps): bump electron from 29.1.0 to 41.10.6 [cordova-electron]
dependabot[bot] opened a new pull request, #335:
URL: https://github.com/apache/cordova-electron/pull/335
Bumps [electron](https://github.com/electron/electron) from 29.1.0 to 41.10.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/electron/electron/releases">electron's releases</a>.</em></p>
<blockquote>
<h2>electron v41.10.6</h2>
<h1>Release Notes for v41.10.6</h1>
<h2>Fixes</h2>
<ul>
<li>Fixed <code>registerFileProtocol</code> and <code>registerHttpProtocol</code> returning readable responses to cross-origin <code>no-cors</code> fetches; they now return opaque responses like <code>protocol.handle</code>. <a href="https://redirect.github.com/electron/electron/pull/52854">#52854</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/52855">42</a>, <a href="https://redirect.github.com/electron/electron/pull/52853">43</a>, <a href="https://redirect.github.com/electron/electron/pull/52852">44</a>)<!-- raw HTML omitted --></li>
<li>Fixed an issue on Windows where the app process could fail to exit after <code>app.quit()</code> while a <code>shell.openExternal()</code> or <code>shell.openPath()</code> call was still waiting on a system "Open with" dialog. <a href="https://redirect.github.com/electron/electron/pull/52899">#52899</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/52897">43</a>, <a href="https://redirect.github.com/electron/electron/pull/52898">44</a>)<!-- raw HTML omitted --></li>
<li>Fixed windows opened by a sandboxed top-level frame not inheriting the opener's sandbox restrictions. <a href="https://redirect.github.com/electron/electron/pull/52849">#52849</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/52850">42</a>, <a href="https://redirect.github.com/electron/electron/pull/52848">43</a>, <a href="https://redirect.github.com/electron/electron/pull/52851">44</a>)<!-- raw HTML omitted --></li>
<li><code><webview></code> and <code>window.open</code> now inherit <code>nodeIntegrationInWorker</code> from the embedder, consistent with the other Node and sandbox preferences. <a href="https://redirect.github.com/electron/electron/pull/52829">#52829</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/52831">42</a>, <a href="https://redirect.github.com/electron/electron/pull/52830">43</a>, <a href="https://redirect.github.com/electron/electron/pull/52832">44</a>)<!-- raw HTML omitted --></li>
</ul>
<h2>Other Changes</h2>
<ul>
<li>Backported fixes from upstream ANGLE, Chromium and Skia. <a href="https://redirect.github.com/electron/electron/pull/52707">#52707</a></li>
<li>Backported fixes from upstream Chromium and V8. <a href="https://redirect.github.com/electron/electron/pull/52775">#52775</a></li>
</ul>
<h2>electron v41.10.5</h2>
<h1>Release Notes for v41.10.5</h1>
<h2>Fixes</h2>
<ul>
<li>Fixed an issue where the Squirrel.Mac installer could resolve the target bundle path to different locations at different stages of an install. <a href="https://redirect.github.com/electron/electron/pull/50764">#50764</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/50766">39</a>, <a href="https://redirect.github.com/electron/electron/pull/50765">42</a>)<!-- raw HTML omitted --></li>
</ul>
<h2>Other Changes</h2>
<ul>
<li>Backported fixes from upstream ANGLE, Chromium, Skia and V8. <a href="https://redirect.github.com/electron/electron/pull/52702">#52702</a></li>
<li>No user-facing change; semver/none. <a href="https://redirect.github.com/electron/electron/pull/52734">#52734</a></li>
</ul>
<h2>electron v41.10.4</h2>
<h1>Release Notes for v41.10.4</h1>
<h2>Fixes</h2>
<ul>
<li>Fixed a UAF with <code>protocol.registerStreamProtocol</code> when an error is emitted during a read. <a href="https://redirect.github.com/electron/electron/pull/52513">#52513</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/52516">42</a>, <a href="https://redirect.github.com/electron/electron/pull/52514">43</a>, <a href="https://redirect.github.com/electron/electron/pull/52515">44</a>)<!-- raw HTML omitted --></li>
<li>Fixed a crash that could occur when closing DevTools while the host WebContents was being destroyed. <a href="https://redirect.github.com/electron/electron/pull/52512">#52512</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/52511">42</a>, <a href="https://redirect.github.com/electron/electron/pull/52510">43</a>, <a href="https://redirect.github.com/electron/electron/pull/52509">44</a>)<!-- raw HTML omitted --></li>
<li>Windows opened from links inside a sandboxed iframe now inherit the iframe's sandbox restrictions unless <code>allow-popups-to-escape-sandbox</code> is set. <a href="https://redirect.github.com/electron/electron/pull/52486">#52486</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/52190">42</a>, <a href="https://redirect.github.com/electron/electron/pull/52189">43</a>)<!-- raw HTML omitted --></li>
</ul>
<h2>electron v41.10.3</h2>
<h1>Release Notes for v41.10.3</h1>
<h2>Fixes</h2>
<ul>
<li>Fixed <code>app.disableHardwareAcceleration()</code> not fully disabling GPU hardware usage on Windows starting from Electron 38. <a href="https://redirect.github.com/electron/electron/pull/52368">#52368</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/52371">42</a>, <a href="https://redirect.github.com/electron/electron/pull/52369">43</a>, <a href="https://redirect.github.com/electron/electron/pull/52370">44</a>)<!-- raw HTML omitted --></li>
<li>Fixed unnecessary autofill popup creation for fields without datalist suggestions, which could cause input latency on macOS. <a href="https://redirect.github.com/electron/electron/pull/52320">#52320</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/52319">42</a>, <a href="https://redirect.github.com/electron/electron/pull/52321">43</a>, <a href="https://redirect.github.com/electron/electron/pull/52318">44</a>)<!-- raw HTML omitted --></li>
</ul>
<h2>Other Changes</h2>
<ul>
<li>Backported fixes from upstream Chromium and V8. <a href="https://redirect.github.com/electron/electron/pull/52396">#52396</a></li>
</ul>
<h2>electron v41.10.2</h2>
<h1>Release Notes for v41.10.2</h1>
<h2>Fixes</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/electron/electron/commit/832e70a551348f2b6b2e004b4f09b9eb6ca038c0"><code>832e70a</code></a> fix: don't let pending shell operations block app exit on Windows (<a href="https://redirect.github.com/electron/electron/issues/52899">#52899</a>)</li>
<li><a href="https://github.com/electron/electron/commit/b8d49a438391a77d2f10d5e214c8f2f0eed4d4d5"><code>b8d49a4</code></a> chore: cherry-pick 39 changes from angle, chromium and skia (<a href="https://redirect.github.com/electron/electron/issues/52707">#52707</a>)</li>
<li><a href="https://github.com/electron/electron/commit/29fc130569f970e91e355383821a4af0f25724a2"><code>29fc130</code></a> fix: inherit sandbox flags in windows opened by a sandboxed top-level frame (...</li>
<li><a href="https://github.com/electron/electron/commit/c595b05976e7a885465b043d17e00a92fc3c3397"><code>c595b05</code></a> fix: return opaque responses from file and http protocol handlers for cross-o...</li>
<li><a href="https://github.com/electron/electron/commit/6462a2e1dc4e6adffd3b7d9b9be1474c45dcbbe2"><code>6462a2e</code></a> fix: inherit nodeIntegrationInWorker from the embedder for <webview> and wind...</li>
<li><a href="https://github.com/electron/electron/commit/d9c621587ac3d0d6f9369b64b05582e6e60f28b0"><code>d9c6215</code></a> chore: cherry-pick 4 changes from chromium and v8 (<a href="https://redirect.github.com/electron/electron/issues/52775">#52775</a>)</li>
<li><a href="https://github.com/electron/electron/commit/a46a5afc4b0dcb279e26ddf27f2de327fc7efb28"><code>a46a5af</code></a> build: run the Windows builds on the VM runners (41-x-y) (<a href="https://redirect.github.com/electron/electron/issues/52770">#52770</a>)</li>
<li><a href="https://github.com/electron/electron/commit/5bff19c021dac4fb5d30481ccd6b76ec6e198b0d"><code>5bff19c</code></a> build: add release-assets.json expected-asset manifest (41-x-y) (<a href="https://redirect.github.com/electron/electron/issues/52734">#52734</a>)</li>
<li><a href="https://github.com/electron/electron/commit/15e2928a5c5f01759107b414010e220d90d59cef"><code>15e2928</code></a> fix: resolve target bundle path once at start of install (<a href="https://redirect.github.com/electron/electron/issues/50764">#50764</a>)</li>
<li><a href="https://github.com/electron/electron/commit/2ba8050f292694fc814a58b90cbae957c9a63d47"><code>2ba8050</code></a> chore: cherry-pick 33 changes from angle, chromium, skia and v8 (<a href="https://redirect.github.com/electron/electron/issues/52702">#52702</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/electron/electron/compare/v29.1.0...v41.10.6">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/cordova-electron/network/alerts).
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
Re: [PR] chore(deps): bump electron from 29.1.0 to 41.10.6 [cordova-electron]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #335:
URL: https://github.com/apache/cordova-electron/pull/335#issuecomment-6341890114
Superseded by #339.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
Re: [PR] chore(deps): bump electron from 29.1.0 to 41.10.6 [cordova-electron]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] closed pull request #335: chore(deps): bump electron from 29.1.0 to 41.10.6
URL: https://github.com/apache/cordova-electron/pull/335
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org