Skip to content

Javascript dependency: bump electron from 43.4.0 to 44.4.2 in /runtime - #10359

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/runtime/electron-44.0.0
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/runtime/electron-44.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps electron from 43.4.0 to 44.4.2.

Release notes

Sourced from electron's releases.

electron v44.4.2

Release Notes for v44.4.2

Fixes

  • Fixed a potential UAF when a select-usb-device handler destroys the requesting webContents. #54009 (Also in 43, 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, Skia and V8. #53985
  • Updated Chromium to 152.0.7977.130. #53778

electron v44.4.1

Release Notes for v44.4.1

Fixes

  • Fixed default protocol client APIs falsely returning true on Windows. #53959 (Also in 43, 45)
  • Fixed several object lifetime issues in Debugger, Menu, Tray, Notification, globalShortcut, utilityProcess, ServiceWorkerMain, WebFrameMain, webFrame, sharedTexture, systemPreferences, netLog, MessagePortMain, net.request and shell.openPath(). #53968 (Also in 45)

electron v44.4.0

Release Notes for v44.4.0

Features

  • Added initiatorOrigin to webRequest and protocol handler requests, DownloadItem.getInitiatorOrigin(), and a trailing frame argument to the will-download and preconnect session events. #53703 (Also in 43, 45)

Fixes

  • Added validation to protocol.registerSchemesAsPrivileged() to reject protocol names that do not conform to RFC 3986 URI scheme grammar. #53743 (Also in 45)
  • Fixed a crash when a webContents navigated to the Chrome Web Store and the page invoked the unsupported chrome.webstorePrivate API. #53776 (Also in 45)
  • Fixed a main-process crash when an app called loadURL() again right after a load failed because the renderer process exited before the page committed. #53943 (Also in 43, 45)
  • Fixed a memory leak on Windows when app.getPreferredSystemLanguages() was called. #53868 (Also in 43, 45)
  • Fixed a potential UAF in app.getPreferredSystemLanguages() on Windows. #53865 (Also in 43, 45)
  • Fixed a renderer crash that could occur when printing from an iframe. #53762 (Also in 43, 45)
  • Fixed a renderer crash when an iframe was removed right after loading with nodeIntegrationInSubFrames enabled and sandbox disabled, e.g. on pages that embed Meta Pixel. #53885 (Also in 42, 43, 45)
  • Fixed a Windows renderer crash when no default locale could be determined. #53947
  • Fixed an issue where the browser-side check that blocks drag and drop between cross-site frames of the same page was disabled. #53749 (Also in 43, 45)
  • Fixed helper executables on macOS starting a second app instance when launched without a process type, for example through child_process.fork() with the runAsNode fuse disabled; fork() now throws in that configuration. #53840 (Also in 45)
  • Fixed V8 code caching for https scripts loaded by file:// and custom-scheme pages. #53745 (Also in 45)
  • Fixed webContents emitting unresponsive right after the system wakes from sleep on Windows, and emitting responsive when a hung window was hidden rather than when it recovered. #53764 (Also in 45)
  • Fixed webContents.capturePage() on offscreen windows returning an image resampled to the display's scale factor instead of rendered at the window's offscreen.deviceScaleFactor. #53816 (Also in 43, 45)
  • Fixed Window Controls Overlay CSS environment variables and navigator.windowControlsOverlay not being populated for WebContentsViews in a BaseWindow. #53812 (Also in 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, libyuv, PDFium and V8. #53769
  • Updated Node.js to v24.21.0. #53779

electron v44.3.0

... (truncated)

Commits
  • 34a45a2 build: update PGO profiles (#54031)
  • 5d2b2fe chore: bump chromium to 152.0.7977.130 (44-x-y) (#53778)
  • 5e32952 build: fix native addon cross-compilation (#54018)
  • 566efa2 fix: don't crash if guest destroyed in select-usb-device handler (#54009)
  • b45d4f1 build: allow empty .patches files (#54004)
  • adf6470 ci: ignore transient curl error in audit (#54002)
  • 8ec91c6 docs: search gitiles history before treating a Chrome fix CL as restricted (#...
  • 91d5485 chore: cherry-pick 18 changes from angle, chromium, skia and v8 (#53985)
  • 09d1a65 fix: cppgc object lifetime follow-ups (44-x-y) (#53968)
  • 8f9454a test: gate specs on testing bindings (#53964)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
electron [>= 36.3.a, < 36.4]

@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Aug 28, 2026
Bumps [electron](https://github.com/electron/electron) from 43.4.0 to 44.4.2.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v43.4.0...v44.4.2)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 44.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Javascript dependency: bump electron from 43.4.0 to 44.0.0 in /runtime Javascript dependency: bump electron from 43.4.0 to 44.4.2 in /runtime Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/runtime/electron-44.0.0 branch from 77261ba to 0878744 Compare September 21, 2026 11:26
@coderabbitai

coderabbitai Bot commented Sep 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: pgadmin-org/pgadmin4/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: d5d763a4-f0ad-4e5b-aada-4869378f08d4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dpage

dpage commented Sep 21, 2026

Copy link
Copy Markdown
Contributor

Merged to master as 08f643e. Replayed locally rather than merged through GitHub, so this will not close automatically.

Note that the landed version is 44.4.2 rather than the 44.0.0 in the title, since Dependabot rebased the branch this morning.

Checked before merging: none of the Electron 44 breaking changes touch us, as the runtime uses none of the removed synchronous safeStorage methods, utilityProcess, capturePage or nodeIntegrationInWorker. Electron 44 drops Windows 32-bit, which does not affect us either, as installer.iss.in builds x64 only.

@dpage dpage closed this Sep 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/runtime/electron-44.0.0 branch September 21, 2026 11:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant