Skip to content

Bump electron from 43.7.6 to 44.4.5 in /src/nodepilot-desktop - #441

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/nodepilot-desktop/electron-44.4.5
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/nodepilot-desktop/electron-44.4.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps electron from 43.7.6 to 44.4.5.

Release notes

Sourced from electron's releases.

electron v44.4.5

Release Notes for v44.4.5

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, Dawn, PDFium and V8. #54222

electron v44.4.4

Release Notes for v44.4.4

Fixes

  • Fixed a Cannot read properties of undefined (reading 'startTime') error thrown in pages while the DevTools Performance panel's live metrics were active. #54162
  • Fixed a crash when calling setIgnoreMenuShortcuts() on DevTools. #54116 (Also in 43, 45)
  • Fixed a spurious "sandboxed_renderer.bundle.js script failed to run" console error when DevTools attached to a sandboxed frame before its first navigation. #54155 (Also in 42, 43)
  • Fixed alignment of the text label and popup menu in the macOS save dialog. #54143 (Also in 45)
  • Fixed an "Invalid guestInstanceId" error when removing a loaded <webview> from the DOM. #54099 (Also in 42, 43, 45)
  • Fixed GPU shaders compiled by Skia not being cached between launches. #54161 (Also in 45)
  • Fixed ready-to-show never firing for some hidden windows on Windows and Linux. #54118 (Also in 43, 45)
  • Fixed the tray context menu not working for snap-confined apps because AppArmor blocked the /org/chromium/DbusMenu path. #54103 (Also in 45)

electron v44.4.3

Release Notes for v44.4.3

Fixes

  • Fixed net.fetch() / net.request() spending seconds of main-process time buffering large streamed request bodies. #54061 (Also in 45)

Performance Improvements

  • Improved the performance of fs operations and require() on files inside asar archives. #54051 (Also in 45)

Other Changes

  • Backported fixes from upstream Chromium, PDFium, Skia and V8. #54081

electron v44.4.2

Release Notes for v44.4.2

Fixes

  • Fixed a potential UAF when a select-usb-device handler destroys the requesting webContents. #54009 (Also in 43, 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, Skia and V8. #53985
  • Updated Chromium to 152.0.7977.130. #53778

electron v44.4.1

Release Notes for v44.4.1

... (truncated)

Commits
  • 694f458 chore: cherry-pick 35 changes from angle, chromium, dawn, pdfium and v8 (#54222)
  • b200482 build: remove ts-node and load specs as native ESM (44-x-y) (#54194)
  • ee593ac build: fail the PGO collect attempt on renderer death and relaunch (#54185)
  • 0925610 build: update @​electron/lint-roller to 4.0.0 and check docs code blocks with ...
  • af6e064 fix: skip the sandbox bundle on documents without startup data (#54155)
  • aee8d2d chore: cherry-pick 6a47f93393a7 from devtools-frontend (#54162)
  • 98b15d3 fix: persist GPU shaders compiled by Skia between launches (44-x-y) (#54161)
  • 906e18f fix: keep hidden windows rendering when they navigate (44-x-y) (#54118)
  • 02f814b build: update PGO profiles (#54145)
  • 1996b13 fix: vertically align "format" row of macOS save dialog elements (#54143)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from Sev7eNup as a code owner September 28, 2026 03:11
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@dependabot dependabot Bot changed the title Bump electron from 43.4.1 to 44.4.5 in /src/nodepilot-desktop Bump electron from 43.7.6 to 44.4.5 in /src/nodepilot-desktop Sep 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/src/nodepilot-desktop/electron-44.4.5 branch from ba6bef5 to f57c33d Compare September 29, 2026 23:58
Bumps [electron](https://github.com/electron/electron) from 43.7.6 to 44.4.5.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v43.7.6...v44.4.5)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 44.4.5
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/src/nodepilot-desktop/electron-44.4.5 branch from f57c33d to 9e075bf Compare September 30, 2026 06:39
Sev7eNup added a commit that referenced this pull request Oct 3, 2026
Build-DesktopInstaller.ps1's .DESCRIPTION still named 43.4.1; main has
pinned 43.7.6 since the last bump, independent of the still-open #441.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Sev7eNup added a commit that referenced this pull request Oct 3, 2026
* Fix doc-sync and review findings from issues #449, #450, #460

- Rename "Test run" to "Run"/"Ausführen" in the six documentation
  places that still used the old editor label (#450).
- llms.txt now links pages with the canonical trailing slash instead
  of the redirect-hop form (#460).
- gate.py's uiSourceHash no longer hashes __tests__/*.tsx and
  *.test.tsx, so test-only UI changes stop invalidating the computer-use
  coverage review (#449).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* Fix stale Electron version in desktop installer build script (#456)

Build-DesktopInstaller.ps1's .DESCRIPTION still named 43.4.1; main has
pinned 43.7.6 since the last bump, independent of the still-open #441.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* Widen the cancellation-wait bound in RunspaceEngineAsyncTests to fix CI flakiness

ps.Stop() runs synchronously inside the cancellation callback. On a
contended CI runner that occasionally took longer than the test's 30s
wait, so task.WaitAsync() timed out before observing the
OperationCanceledException and failed the test
(seen on main and on #459/#442's reruns). Widen both bounds to 90s.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* Bound the PowerShell cancellation wait in RunspaceExecutionEngine

ps.Stop() on a RunspacePool-backed BeginInvoke can occasionally never
signal completion (a known PowerShell SDK gap, e.g.
PowerShell/PowerShell#17250). ExecuteOnceAsync now gives the pipeline a
20s grace period after Stop() fires; past that it abandons the pipeline
and throws cancellation anyway instead of hanging the caller forever.
ps.Dispose() is skipped in that case since it can block on the same
stuck pipeline — the runspace is deliberately leaked and logged loudly
so an operator can restart the service.

Reproduced on CI: RunspaceEngineAsyncTests.Execute_CallerCancellation_
ThrowsInsteadOfReturningAFailedResult failed at exactly its wait bound
twice in a row (30s, then 90s), the signature of a stuck pipeline
rather than CI contention.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
@Sev7eNup Sev7eNup mentioned this pull request Oct 3, 2026
3 of 4 tasks
Sev7eNup added a commit that referenced this pull request Oct 3, 2026
Dependabot's #441 was built on an older lockfile that still had
brace-expansion 5.0.9 (GHSA-q2hr-2g5m-vwhr and two more), so its npm
audit failed. Rebuilt on current main, where the patched 5.0.12 is
already locked; npm audit reports no vulnerabilities.

Electron 44.4.5 bundles Node 24.21.0, the same Node line as 43.7.6
(per releases.electronjs.org), so the embedded-Node note only changes
its version.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@Sev7eNup

Sev7eNup commented Oct 3, 2026

Copy link
Copy Markdown
Owner

Superseded by #470: Electron 44.4.5 rebuilt on current main, where the patched brace-expansion is locked.

@Sev7eNup Sev7eNup closed this Oct 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 3, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/src/nodepilot-desktop/electron-44.4.5 branch October 3, 2026 14:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant