Skip to content

⬆️ Bump electron from 43.7.0 to 44.4.2 - #1523

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-44.0.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-44.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps electron from 43.7.0 to 44.4.2.

Release notes

Sourced from electron's releases.

electron v44.4.2

Release Notes for v44.4.2

Fixes

  • Fixed a potential UAF when a select-usb-device handler destroys the requesting webContents. #54009 (Also in 43, 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, Skia and V8. #53985
  • Updated Chromium to 152.0.7977.130. #53778

electron v44.4.1

Release Notes for v44.4.1

Fixes

  • Fixed default protocol client APIs falsely returning true on Windows. #53959 (Also in 43, 45)
  • Fixed several object lifetime issues in Debugger, Menu, Tray, Notification, globalShortcut, utilityProcess, ServiceWorkerMain, WebFrameMain, webFrame, sharedTexture, systemPreferences, netLog, MessagePortMain, net.request and shell.openPath(). #53968 (Also in 45)

electron v44.4.0

Release Notes for v44.4.0

Features

  • Added initiatorOrigin to webRequest and protocol handler requests, DownloadItem.getInitiatorOrigin(), and a trailing frame argument to the will-download and preconnect session events. #53703 (Also in 43, 45)

Fixes

  • Added validation to protocol.registerSchemesAsPrivileged() to reject protocol names that do not conform to RFC 3986 URI scheme grammar. #53743 (Also in 45)
  • Fixed a crash when a webContents navigated to the Chrome Web Store and the page invoked the unsupported chrome.webstorePrivate API. #53776 (Also in 45)
  • Fixed a main-process crash when an app called loadURL() again right after a load failed because the renderer process exited before the page committed. #53943 (Also in 43, 45)
  • Fixed a memory leak on Windows when app.getPreferredSystemLanguages() was called. #53868 (Also in 43, 45)
  • Fixed a potential UAF in app.getPreferredSystemLanguages() on Windows. #53865 (Also in 43, 45)
  • Fixed a renderer crash that could occur when printing from an iframe. #53762 (Also in 43, 45)
  • Fixed a renderer crash when an iframe was removed right after loading with nodeIntegrationInSubFrames enabled and sandbox disabled, e.g. on pages that embed Meta Pixel. #53885 (Also in 42, 43, 45)
  • Fixed a Windows renderer crash when no default locale could be determined. #53947
  • Fixed an issue where the browser-side check that blocks drag and drop between cross-site frames of the same page was disabled. #53749 (Also in 43, 45)
  • Fixed helper executables on macOS starting a second app instance when launched without a process type, for example through child_process.fork() with the runAsNode fuse disabled; fork() now throws in that configuration. #53840 (Also in 45)
  • Fixed V8 code caching for https scripts loaded by file:// and custom-scheme pages. #53745 (Also in 45)
  • Fixed webContents emitting unresponsive right after the system wakes from sleep on Windows, and emitting responsive when a hung window was hidden rather than when it recovered. #53764 (Also in 45)
  • Fixed webContents.capturePage() on offscreen windows returning an image resampled to the display's scale factor instead of rendered at the window's offscreen.deviceScaleFactor. #53816 (Also in 43, 45)
  • Fixed Window Controls Overlay CSS environment variables and navigator.windowControlsOverlay not being populated for WebContentsViews in a BaseWindow. #53812 (Also in 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, libyuv, PDFium and V8. #53769
  • Updated Node.js to v24.21.0. #53779

electron v44.3.0

... (truncated)

Commits
  • 34a45a2 build: update PGO profiles (#54031)
  • 5d2b2fe chore: bump chromium to 152.0.7977.130 (44-x-y) (#53778)
  • 5e32952 build: fix native addon cross-compilation (#54018)
  • 566efa2 fix: don't crash if guest destroyed in select-usb-device handler (#54009)
  • b45d4f1 build: allow empty .patches files (#54004)
  • adf6470 ci: ignore transient curl error in audit (#54002)
  • 8ec91c6 docs: search gitiles history before treating a Chrome fix CL as restricted (#...
  • 91d5485 chore: cherry-pick 18 changes from angle, chromium, skia and v8 (#53985)
  • 09d1a65 fix: cppgc object lifetime follow-ups (44-x-y) (#53968)
  • 8f9454a test: gate specs on testing bindings (#53964)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
electron [>= 30.a, < 31]
electron [>= 38.a, < 39]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
Bumps [electron](https://github.com/electron/electron) from 43.7.0 to 44.4.2.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v43.7.0...v44.4.2)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 44.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title ⬆️ Bump electron from 43.4.1 to 44.0.0 ⬆️ Bump electron from 43.7.0 to 44.4.2 Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/electron-44.0.0 branch from 83cf03c to 14c1e43 Compare September 21, 2026 04:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants