Skip to content

Bump the npm_and_yarn group across 2 directories with 1 update - #1059

Merged
Nikola Metulev (nmetulev) merged 1 commit into
mainfrom
dependabot/npm_and_yarn/benchmarks/agents/scenarios/demand/c04-electron-builder-v27-custom-nsis-toolset/fixture/npm_and_yarn-7db05642f9
Oct 9, 2026
Merged

Nikola Metulev (nmetulev) merged 1 commit into
mainfrom
dependabot/npm_and_yarn/benchmarks/agents/scenarios/demand/c04-electron-builder-v27-custom-nsis-toolset/fixture/npm_and_yarn-7db05642f9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the /benchmarks/agents/scenarios/demand/c04-electron-builder-v27-custom-nsis-toolset/fixture directory: electron.
Bumps the npm_and_yarn group with 1 update in the /benchmarks/agents/scenarios/demand/c06-installer-tech-for-no-uac/fixture directory: electron.

Updates electron from 31.2.0 to 41.10.6

Release notes

Sourced from electron's releases.

electron v41.10.6

Release Notes for v41.10.6

Fixes

  • Fixed registerFileProtocol and registerHttpProtocol returning readable responses to cross-origin no-cors fetches; they now return opaque responses like protocol.handle. #52854 (Also in 42, 43, 44)
  • Fixed an issue on Windows where the app process could fail to exit after app.quit() while a shell.openExternal() or shell.openPath() call was still waiting on a system "Open with" dialog. #52899 (Also in 43, 44)
  • Fixed windows opened by a sandboxed top-level frame not inheriting the opener's sandbox restrictions. #52849 (Also in 42, 43, 44)
  • <webview> and window.open now inherit nodeIntegrationInWorker from the embedder, consistent with the other Node and sandbox preferences. #52829 (Also in 42, 43, 44)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium and Skia. #52707
  • Backported fixes from upstream Chromium and V8. #52775

electron v41.10.5

Release Notes for v41.10.5

Fixes

  • Fixed an issue where the Squirrel.Mac installer could resolve the target bundle path to different locations at different stages of an install. #50764 (Also in 39, 42)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, Skia and V8. #52702
  • No user-facing change; semver/none. #52734

electron v41.10.4

Release Notes for v41.10.4

Fixes

  • Fixed a UAF with protocol.registerStreamProtocol when an error is emitted during a read. #52513 (Also in 42, 43, 44)
  • Fixed a crash that could occur when closing DevTools while the host WebContents was being destroyed. #52512 (Also in 42, 43, 44)
  • Windows opened from links inside a sandboxed iframe now inherit the iframe's sandbox restrictions unless allow-popups-to-escape-sandbox is set. #52486 (Also in 42, 43)

electron v41.10.3

Release Notes for v41.10.3

Fixes

  • Fixed app.disableHardwareAcceleration() not fully disabling GPU hardware usage on Windows starting from Electron 38. #52368 (Also in 42, 43, 44)
  • Fixed unnecessary autofill popup creation for fields without datalist suggestions, which could cause input latency on macOS. #52320 (Also in 42, 43, 44)

Other Changes

  • Backported fixes from upstream Chromium and V8. #52396

electron v41.10.2

Release Notes for v41.10.2

Fixes

... (truncated)

Commits
  • 832e70a fix: don't let pending shell operations block app exit on Windows (#52899)
  • b8d49a4 chore: cherry-pick 39 changes from angle, chromium and skia (#52707)
  • 29fc130 fix: inherit sandbox flags in windows opened by a sandboxed top-level frame (...
  • c595b05 fix: return opaque responses from file and http protocol handlers for cross-o...
  • 6462a2e fix: inherit nodeIntegrationInWorker from the embedder for <webview> and wind...
  • d9c6215 chore: cherry-pick 4 changes from chromium and v8 (#52775)
  • a46a5af build: run the Windows builds on the VM runners (41-x-y) (#52770)
  • 5bff19c build: add release-assets.json expected-asset manifest (41-x-y) (#52734)
  • 15e2928 fix: resolve target bundle path once at start of install (#50764)
  • 2ba8050 chore: cherry-pick 33 changes from angle, chromium, skia and v8 (#52702)
  • Additional commits viewable in compare view

Updates electron from 30.0.5 to 41.10.6

Release notes

Sourced from electron's releases.

electron v41.10.6

Release Notes for v41.10.6

Fixes

  • Fixed registerFileProtocol and registerHttpProtocol returning readable responses to cross-origin no-cors fetches; they now return opaque responses like protocol.handle. #52854 (Also in 42, 43, 44)
  • Fixed an issue on Windows where the app process could fail to exit after app.quit() while a shell.openExternal() or shell.openPath() call was still waiting on a system "Open with" dialog. #52899 (Also in 43, 44)
  • Fixed windows opened by a sandboxed top-level frame not inheriting the opener's sandbox restrictions. #52849 (Also in 42, 43, 44)
  • <webview> and window.open now inherit nodeIntegrationInWorker from the embedder, consistent with the other Node and sandbox preferences. #52829 (Also in 42, 43, 44)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium and Skia. #52707
  • Backported fixes from upstream Chromium and V8. #52775

electron v41.10.5

Release Notes for v41.10.5

Fixes

  • Fixed an issue where the Squirrel.Mac installer could resolve the target bundle path to different locations at different stages of an install. #50764 (Also in 39, 42)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, Skia and V8. #52702
  • No user-facing change; semver/none. #52734

electron v41.10.4

Release Notes for v41.10.4

Fixes

  • Fixed a UAF with protocol.registerStreamProtocol when an error is emitted during a read. #52513 (Also in 42, 43, 44)
  • Fixed a crash that could occur when closing DevTools while the host WebContents was being destroyed. #52512 (Also in 42, 43, 44)
  • Windows opened from links inside a sandboxed iframe now inherit the iframe's sandbox restrictions unless allow-popups-to-escape-sandbox is set. #52486 (Also in 42, 43)

electron v41.10.3

Release Notes for v41.10.3

Fixes

  • Fixed app.disableHardwareAcceleration() not fully disabling GPU hardware usage on Windows starting from Electron 38. #52368 (Also in 42, 43, 44)
  • Fixed unnecessary autofill popup creation for fields without datalist suggestions, which could cause input latency on macOS. #52320 (Also in 42, 43, 44)

Other Changes

  • Backported fixes from upstream Chromium and V8. #52396

electron v41.10.2

Release Notes for v41.10.2

Fixes

... (truncated)

Commits
  • 832e70a fix: don't let pending shell operations block app exit on Windows (#52899)
  • b8d49a4 chore: cherry-pick 39 changes from angle, chromium and skia (#52707)
  • 29fc130 fix: inherit sandbox flags in windows opened by a sandboxed top-level frame (...
  • c595b05 fix: return opaque responses from file and http protocol handlers for cross-o...
  • 6462a2e fix: inherit nodeIntegrationInWorker from the embedder for <webview> and wind...
  • d9c6215 chore: cherry-pick 4 changes from chromium and v8 (#52775)
  • a46a5af build: run the Windows builds on the VM runners (41-x-y) (#52770)
  • 5bff19c build: add release-assets.json expected-asset manifest (41-x-y) (#52734)
  • 15e2928 fix: resolve target bundle path once at start of install (#50764)
  • 2ba8050 chore: cherry-pick 33 changes from angle, chromium, skia and v8 (#52702)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the /benchmarks/agents/scenarios/demand/c04-electron-builder-v27-custom-nsis-toolset/fixture directory: [electron](https://github.com/electron/electron).
Bumps the npm_and_yarn group with 1 update in the /benchmarks/agents/scenarios/demand/c06-installer-tech-for-no-uac/fixture directory: [electron](https://github.com/electron/electron).


Updates `electron` from 31.2.0 to 41.10.6
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v31.2.0...v41.10.6)

Updates `electron` from 30.0.5 to 41.10.6
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v31.2.0...v41.10.6)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 41.10.6
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: electron
  dependency-version: 41.10.6
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI balanced review requested due to automatic review settings October 9, 2026 22:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 9, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The undocumented third major-version upgrade should be reverted or separately described and validated.

1 open finding
What changed in this PR

Updates Electron dependencies in benchmark scenario fixtures.

Changes:

  • Upgrades Electron to 41.10.6 in c04 and c06.
  • Also upgrades c12 to 44.7.0, which is not described in the PR.
File Description
c04.../​fixture/​package.json Updates Electron for the NSIS toolset scenario.
c06.../​fixture/​package.json Updates Electron for the no-UAC installer scenario.
c12.../​fixture/​package.json Adds an undocumented Electron 44 upgrade.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

},
"devDependencies": {
"electron": "41.10.6",
"electron": "44.7.0",
@github-actions

github-actions Bot commented Oct 9, 2026

Copy link
Copy Markdown
Contributor

Build Metrics Report

Validation passed. All required build and validation jobs succeeded.

Binary Sizes

Artifact Baseline Current Delta
CLI (ARM64) 57.77 MB 57.77 MB ✅ 0.0 KB (0.00%)
CLI (x64) 57.79 MB 57.79 MB ✅ 0.0 KB (0.00%)
MSIX (ARM64) 24.02 MB 24.02 MB 📈 +0.0 KB (+0.00%)
MSIX (x64) 25.49 MB 25.49 MB 📉 -0.1 KB (-0.00%)
NPM Package 50.08 MB 50.08 MB 📉 -0.5 KB (-0.00%)
NuGet Package 50.19 MB 50.19 MB 📉 -0.4 KB (-0.00%)

.NET Test Results (TRX reports)

Other suites are reflected in the overall validation status above.

✅ 8331 passed, 37 skipped out of 8368 tests in 1130.0s (+105.1s vs. baseline)

Test Coverage

✅ 87.5% line coverage, 82.2% branch coverage · ✅ no change vs. baseline

CLI Startup Time

65ms median (x64, winapp --version) · ✅ +7ms vs. baseline

Try This Build

Installs the MSIX for your architecture, replacing any previously installed build. Needs the GitHub CLI — the command offers to install it and sign you in if it is missing.

& ([scriptblock]::Create((irm https://raw.githubusercontent.com/microsoft/winappCli/main/scripts/winapp-pr.ps1))) 1059
Switching between builds often?

Put the tool on your PATH once:

& ([scriptblock]::Create((irm https://raw.githubusercontent.com/microsoft/winappCli/main/scripts/winapp-pr.ps1))) -AddToPath

Then this build is just:

winapp-pr 1059

Run winapp-pr with no arguments to pick from a list of open PRs.


Updated 2026-10-09 23:08:34 UTC · commit 8be3080 · workflow run

@nmetulev
Nikola Metulev (nmetulev) merged commit 57aee35 into main Oct 9, 2026
43 checks passed
@nmetulev
Nikola Metulev (nmetulev) deleted the dependabot/npm_and_yarn/benchmarks/agents/scenarios/demand/c04-electron-builder-v27-custom-nsis-toolset/fixture/npm_and_yarn-7db05642f9 branch October 9, 2026 23:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants