Skip to content

chore(deps-dev): bump electron from 44.5.0 to 44.9.1 - #396

Merged
dsanders11 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-44.9.1
Oct 28, 2026
Merged

dsanders11 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-44.9.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor

Bumps electron from 44.5.0 to 44.9.1.

Release notes

Sourced from electron's releases.

electron v44.9.1

Release Notes for v44.9.1

[!NOTE] This release contains the fix for GHSA-jr5w-w6x2-84p9, the mitigation for compromised eMudhra intermediate certificates

electron v44.9.0

Release Notes for v44.9.0

Features

  • Added app shims on macOS to show windows under another app's Dock icon. #55073 (Also in 45)

Fixes

  • Fixed link-opened windows not using the opener's session and webPreferences. #55048 (Also in 42, 43, 45)
  • Fixed setCertificateVerifyProc occasionally not being applied to a request issued concurrently with the first request to a host. #55046 (Also in 42, 43, 45)

electron v44.8.0

Release Notes for v44.8.0

Features

  • Added support for Notification action buttons on Linux. #54890 (Also in 45)

Fixes

  • Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. #54987
  • Fixed net.fetch and session.fetch failing permanently with net::ERR_FAILED after the Network Service process restarts. #54909 (Also in 42, 43, 45)
  • Fixed utilityProcess dropping messages posted with process.parentPort.postMessage() right before the process exits. #54960 (Also in 42, 43, 45)
  • Fixed win.isFullScreen() being stale in fullscreen events on Windows. #55009 (Also in 45)

Other Changes

  • Backported fixes from upstream Chromium and V8. #55034
  • Updated Chromium to 152.0.7977.167. #54928
  • Updated Node.js to v24.22.0. #55004

electron v44.7.2

Release Notes for v44.7.2

Fixes

  • Fixed an issue where clicks posted to a background app were dropped on macOS. #54819 (Also in 45)
  • Fixed interrupted macOS updates leaving a broken app behind. #54844 (Also in 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, PDFium and V8. #54898

... (truncated)

Commits
  • e02265b fix: apply the certificate SPKI blocklist to Node and add entries (44-x-y) (#...
  • 0545d89 test: replace fix_crypto_tests_to_run_with_bssl.patch with upstream backport ...
  • 0ec830f docs: fix code block line highlighting after docs reformats (#55102)
  • 68ddc64 test: re-enable Node.js tests that now pass with BoringSSL (#55095)
  • cb2bde2 build: stop overriding node GN declare_args defaults in patch (#55077)
  • aa16ac2 build: update PGO profiles (#55090)
  • fd148b9 feat: add app shims on macOS (#55073)
  • fe5dd7e fix: avoid misaligned char16_t reads in crdtp string deserialization (#55061)
  • c6874c5 fix: use the opener's session and webPreferences for windows opened from link...
  • 790b4b8 ci: skip native builds when installing deps for type generation (#55066)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [electron](https://github.com/electron/electron) from 44.5.0 to 44.9.1.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v44.5.0...v44.9.1)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 44.9.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 28, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 28, 2026 15:41
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Oct 28, 2026
@socket-security

socket-security Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedelectron@​44.5.0 ⏵ 44.10.0100 +3100 +16100 +198100

View full report

@socket-security

socket-security Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

  • electron@44.10.0

View full report

@dsanders11

Copy link
Copy Markdown
Member

@SocketSecurity ignore npm/electron@44.10.0

@dsanders11
dsanders11 enabled auto-merge (squash) October 28, 2026 19:06
@dsanders11
dsanders11 merged commit f4a0d89 into main Oct 28, 2026
36 checks passed
@dsanders11
dsanders11 deleted the dependabot/npm_and_yarn/electron-44.9.1 branch October 28, 2026 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant