Skip to content

Bump electron from 44.7.0 to 44.9.1 in the npm-security group across 1 directory - #34

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-security-03e5534014
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-security-03e5534014

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-security group with 1 update in the / directory: electron.

Updates electron from 44.7.0 to 44.9.1

Release notes

Sourced from electron's releases.

electron v44.9.1

Release Notes for v44.9.1

[!NOTE] This release contains the fix for GHSA-jr5w-w6x2-84p9, the mitigation for compromised eMudhra intermediate certificates

electron v44.9.0

Release Notes for v44.9.0

Features

  • Added app shims on macOS to show windows under another app's Dock icon. #55073 (Also in 45)

Fixes

  • Fixed link-opened windows not using the opener's session and webPreferences. #55048 (Also in 42, 43, 45)
  • Fixed setCertificateVerifyProc occasionally not being applied to a request issued concurrently with the first request to a host. #55046 (Also in 42, 43, 45)

electron v44.8.0

Release Notes for v44.8.0

Features

  • Added support for Notification action buttons on Linux. #54890 (Also in 45)

Fixes

  • Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. #54987
  • Fixed net.fetch and session.fetch failing permanently with net::ERR_FAILED after the Network Service process restarts. #54909 (Also in 42, 43, 45)
  • Fixed utilityProcess dropping messages posted with process.parentPort.postMessage() right before the process exits. #54960 (Also in 42, 43, 45)
  • Fixed win.isFullScreen() being stale in fullscreen events on Windows. #55009 (Also in 45)

Other Changes

  • Backported fixes from upstream Chromium and V8. #55034
  • Updated Chromium to 152.0.7977.167. #54928
  • Updated Node.js to v24.22.0. #55004

electron v44.7.2

Release Notes for v44.7.2

Fixes

  • Fixed an issue where clicks posted to a background app were dropped on macOS. #54819 (Also in 45)
  • Fixed interrupted macOS updates leaving a broken app behind. #54844 (Also in 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, PDFium and V8. #54898

... (truncated)

Commits
  • e02265b fix: apply the certificate SPKI blocklist to Node and add entries (44-x-y) (#...
  • 0545d89 test: replace fix_crypto_tests_to_run_with_bssl.patch with upstream backport ...
  • 0ec830f docs: fix code block line highlighting after docs reformats (#55102)
  • 68ddc64 test: re-enable Node.js tests that now pass with BoringSSL (#55095)
  • cb2bde2 build: stop overriding node GN declare_args defaults in patch (#55077)
  • aa16ac2 build: update PGO profiles (#55090)
  • fd148b9 feat: add app shims on macOS (#55073)
  • fe5dd7e fix: avoid misaligned char16_t reads in crdtp string deserialization (#55061)
  • c6874c5 fix: use the opener's session and webPreferences for windows opened from link...
  • 790b4b8 ci: skip native builds when installing deps for type generation (#55066)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 29, 2026
Bumps the npm-security group with 1 update in the / directory: [electron](https://github.com/electron/electron).


Updates `electron` from 44.7.0 to 44.9.1
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v44.7.0...v44.9.1)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 44.9.1
  dependency-type: direct:development
  dependency-group: npm-security
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-security-03e5534014 branch from 9f2377f to e454306 Compare November 2, 2026 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants