[Snyk] Upgrade electron from 33.2.0 to 35.0.0 #76
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade electron from 33.2.0 to 35.0.0. See this package in npm: electron See this project in Snyk: https://app.snyk.io/org/nerds-github/project/7ac3a559-e245-43bc-aea8-6d68ed454985?utm_source=github&utm_medium=referral&page=upgrade-pr
Reviewer's Guide by SourceryThis pull request upgrades the electron dependency from version 33.2.0 to 35.0.0. This upgrade includes several security fixes, new features, improvements, and bug fixes as detailed in the release notes. No diagrams generated as the changes look simple and do not need a visual representation. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade electron from 33.2.0 to 35.0.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 68 versions ahead of your current version.
The recommended version was released 23 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-ELECTRON-9056160
SNYK-JS-ELECTRON-8381013
SNYK-JS-ELECTRON-8642944
SNYK-JS-ELECTRON-8642946
SNYK-JS-ELECTRON-8642948
SNYK-JS-ELECTRON-8738830
SNYK-JS-ELECTRON-8738832
SNYK-JS-ELECTRON-8738834
SNYK-JS-ELECTRON-8738836
SNYK-JS-ELECTRON-8738839
Release notes
Package name: electron
-
35.0.0 - 2025-03-04
- Chromium
- New in 134
- New in 133
- Node
- Node 22.14.0 blog post
- V8
- Added excludeUrls to webRequest filter and deprecated the use of empty arrays in urls property. #45678
- Added
- Deprecated
- Fixed file chooser dialogs for flaptak applications. #44426 (Also in 34)
- Moved 'console-message' arguments into event object. #43617
- The
- Added APIs to manage shared dictionaries for compression efficiency using Brotli or ZStandard. The new APIs are
- Added
- Added
- Added
- Added
- Added
- Added
- Added
- Added
- Added
- Added
- Added optional animation parameter to BrowserWindow.setVibrancy. #35987
- Added permission support for
- Added support for
- Added support for service worker preload scripts. #45408
- Support Portal's globalShortcuts. Electron must be run with --enable-features=GlobalShortcutsPortal in order to have the feature working. #45297
- Performance improvements when processing microtasks. #44439 (Also in 32, 33, 34)
- Redesigned preload script APIs by introducing
- Removed 240 FPS limit when use shared texture OSR. #45781
- Fixed
- Fixed an issue where the renderer process crashed when loading about:blank in subframes. #45758
- Fixed broken OOP
- Fixed desktopCapturer.getSources not returning electron windows on Windows. #45000
- Fixed spellcheck suggestions not correctly populating on Windows. #45763
- Optimized
- Re-enables the MacWebContentsOcclusion feature flag for Mac, with plans to make it enabled by default in a future release. #45801
- Addressed two possible crashes in the File System Access API. #45261 (Also in 34)
- Backported fix for a upstream bug that cause Offscreen Rendering to stutter. #45660 (Also in 32, 33, 34)
- Fixed WebFrameMain crash related to accessing speculative frames that have been destroyed. #45686 (Also in 33, 34)
- Fixed
- Fixed
- Fixed
- Fixed a bug where the default path didn't always correctly fill the Name field in KDialogs on Linux. #45420 (Also in 34)
- Fixed a crash that could occur in OSR on window close. #45630 (Also in 34)
- Fixed a crash that could occur when calling
- Fixed a crash when calling
- Fixed a potential crash in
- Fixed a potential crash when calling legacy
- Fixed a potential issues permissions in the Pointer Lock API after focus loss and regain. #45628 (Also in 34)
- Fixed an issue where RTL tooltips could be incorrect when using WCO on Windows. #45425 (Also in 33, 34)
- Fixed an issue where Windows Control Overlay didn't work with some window configurations. #45477 (Also in 33, 34)
- Fixed an issue where
- Fixed an issue where
- Fixed an issue where
- Fixed an issue where
- Fixed an issue where a
- Fixed an issue where buttons shown under the Window Controls Overlay API were missing tooltips. #44721 (Also in 32, 33, 34)
- Fixed an issue where closing a window after printing on Linux triggered a crash. #44246 (Also in 31, 32, 33, 34)
- Fixed an issue where drag-dropping two directories would cause
- Fixed an issue where print scaling could be too small during silent print. #45262 (Also in 34)
- Fixed an issue where selection of multiple directories with the
- Fixed an issue where the
- Fixed an issue where the webContents
- Fixed an issue where the windows control overlay was unexpectedly visible in fullscreen on Linux. #44621 (Also in 31, 32, 33, 34)
- Fixed an issue where windows on Windows with
- Fixed an possible crash when using draggable regions and BaseWindows to get the
- Fixed build failure when the PDF viewer is disabled. #44960 (Also in 33, 34)
- Fixed calling setAlwaysOnTop on a hidden window which is then shown with showInactive on Linux under X11. #44078 (Also in 31, 32, 33, 34)
- Fixed crash in gin::wrappable::secondweakcallback. #45378 (Also in 33, 34)
- Fixed crash in net api when utility process exits. #44574 (Also in 32, 33, 34)
- Fixed crash on startup with asan build on macOS. #45569 (Also in 33, 34)
- Fixed crash when accessing WebFrameMain frames and name attributes on destroyed frames. #45508 (Also in 33, 34)
- Fixed crash when network process terminates while a net log is running. #44406 (Also in 31, 32, 33, 34)
- Fixed crash when rendering super menu accelerator on linux. #44341 (Also in 32, 33, 34)
- Fixed custom spell checker getting stuck in infinite loop using 100% CPU. #45001 (Also in 31, 32, 33, 34)
- Fixed drag and drop icons not showing on Windows. #45777 (Also in 34)
- Fixed external window focus when using shell.openExternal. #44408 (Also in 33, 34)
- Fixed file preview window reappearing when calling
- Fixed issue where 'contextmenu' event is emitted twice on macOS. #44978 (Also in 34)
- Fixed issue with missing index arg for
- Fixed race condition in which WebContents appears as white screen on VDI machines without hardware acceleration capabilities. #44318 (Also in 32, 33, 34)
- Fixed regression with dynamic dependency on
- Fixed segfault when moving WebContentsView between BrowserWindows. #44599 (Also in 31, 32, 33, 34)
- Fixed the path for a needed library used for mksnapshot. #45546 (Also in 32, 33, 34)
- Fixed theme does not work in DevTools. #44114 (Also in 32, 33, 34)
- Fixed update file extension bug. #44296 (Also in 33, 34)
- Fixed web worker scripts failing to load for chrome extensions. #45708 (Also in 32, 33, 34)
- Return 0 exit code for normal termination of the utility process. #44726 (Also in 32, 33, 34)
- The
- Added more helpful logging if Node.js fails to initialize. #45317
- Backported fix for 387258077,383070811. #45496
- Fixed all
- Fixed an issue where a deprecation warning was being incorrectly emitted for frameless windows on macOS. #44728 (Also in 33, 34)
- Documentation change
- #44391
- #44851
- #45173
-
35.0.0-beta.13 - 2025-03-03
- Updated Chromium to 134.0.6998.44. #45845
-
35.0.0-beta.12 - 2025-02-28
- Fixed an issue where
- Fixed 35.0.0-beta.11 build issue. #45838
-
35.0.0-beta.11 - 2025-02-27
-
35.0.0-beta.10 - 2025-02-25
-
35.0.0-beta.9 - 2025-02-24
-
35.0.0-beta.8 - 2025-02-21
-
35.0.0-beta.7 - 2025-02-17
-
35.0.0-beta.6 - 2025-02-13
-
35.0.0-beta.5 - 2025-02-10
-
35.0.0-beta.4 - 2025-02-07
-
35.0.0-beta.3 - 2025-02-06
-
35.0.0-beta.2 - 2025-02-05
-
35.0.0-beta.1 - 2025-02-03
-
35.0.0-alpha.5 - 2025-01-29
-
35.0.0-alpha.4 - 2025-01-24
-
35.0.0-alpha.3 - 2025-01-23
-
35.0.0-alpha.2 - 2025-01-20
-
35.0.0-alpha.1 - 2025-01-15
-
34.4.0 - 2025-03-26
-
34.3.4 - 2025-03-20
-
34.3.3 - 2025-03-12
-
34.3.2 - 2025-03-10
-
34.3.1 - 2025-03-06
-
34.3.0 - 2025-02-26
-
34.2.0 - 2025-02-13
-
34.1.1 - 2025-02-07
-
34.1.0 - 2025-02-05
-
34.0.2 - 2025-01-29
-
34.0.1 - 2025-01-22
-
34.0.0 - 2025-01-14
-
34.0.0-beta.16 - 2025-01-09
-
34.0.0-beta.15 - 2025-01-07
-
34.0.0-beta.14 - 2024-12-23
-
34.0.0-beta.13 - 2024-12-19
-
34.0.0-beta.12 - 2024-12-16
-
34.0.0-beta.11 - 2024-12-11
-
34.0.0-beta.10 - 2024-12-09
-
34.0.0-beta.9 - 2024-12-05
-
34.0.0-beta.8 - 2024-12-02
-
34.0.0-beta.7 - 2024-11-28
-
34.0.0-beta.6 - 2024-11-25
-
34.0.0-beta.5 - 2024-11-21
-
34.0.0-beta.4 - 2024-11-18
-
34.0.0-beta.3 - 2024-11-15
-
34.0.0-beta.2 - 2024-11-14
-
34.0.0-beta.1 - 2024-11-12
-
34.0.0-alpha.9 - 2024-11-11
-
34.0.0-alpha.8 - 2024-11-07
-
34.0.0-alpha.7 - 2024-11-04
-
34.0.0-alpha.6 - 2024-10-31
-
34.0.0-alpha.5 - 2024-10-28
-
34.0.0-alpha.4 - 2024-10-25
-
34.0.0-alpha.3 - 2024-10-23
-
34.0.0-alpha.2 - 2024-10-17
-
34.0.0-alpha.1 - 2024-10-16
-
33.4.7 - 2025-03-26
-
33.4.6 - 2025-03-20
-
33.4.5 - 2025-03-13
-
33.4.4 - 2025-03-10
-
33.4.3 - 2025-03-06
- Fixed an issue where native Node.js addons including
- Security: backported fix for 383772517.
- Security: backported fix for 390465670.
- Security: backported fix for CVE-2025-0445. #45705
- Security: backported fix for CVE-2025-0995.
- Security: backported fix for CVE-2025-0998. #45716
-
33.4.2 - 2025-02-27
-
33.4.1 - 2025-02-15
-
33.4.0 - 2025-02-06
-
33.3.2 - 2025-01-22
-
33.3.1 - 2025-01-06
-
33.3.0 - 2024-12-05
-
33.2.1 - 2024-11-27
-
33.2.0 - 2024-11-07
from electron GitHub release notesRelease Notes for v35.0.0
Stack Upgrades
134.0.6998.4422.14.013.4Breaking Changes
fromVersionIDonServiceWorkersto get an instance ofServiceWorkerMain. #45341getPreloadsandsetPreloadsonSession. #45329systemPreferences.isAeroGlassEnabled()API has been deprecated and will be removed without replacement. #45554Features
Additions
session.getSharedDictionaryUsageInfo(),session.getSharedDictionaryInfo(options),session.clearSharedDictionaryCache(), andsession.clearSharedDictionaryCacheForIsolationKey(options). #44750 (Also in 33, 34)NSPrefersDisplaySafeAreaCompatibilityMode=falseto Info.plist to remove "Scale to fit below built-in camera." from app options. #45357 (Also in 33, 34)ServiceWorkerMainclass to interact with service workers in the main process. #45341running-status-changedevent onServiceWorkersto indicate when a service worker's running status has changed.startWorkerForScopeonServiceWorkersto start a worker that may have been previously stopped.WebFrameMain.collectJavaScriptCallStack()for accessing the JavaScript call stack of unresponsive renderers. #44204 (Also in 33, 34)contextBridge.executeInMainWorldto safely execute code across world boundaries. #45330frameto 'console-message' event. #43617query-session-endevent and improvedsession-endevents on Windows. #44598view.getVisible(). #45409 (Also in 34)webContents.navigationHistory.restore(index, entries)API that allows restoration of navigation history. #45583 (Also in 34)document.executeCommand("paste"). #45471 (Also in 33, 34)roundedCornersBrowserWindow constructor option on Windows. #45740 (Also in 34)Improvements
registerPreloadScript,unregisterPreloadScript,getPreloadScriptsonSession.#45329Removed/Deprecated
Fixes
webContents.print()after switch to OOP printing on macOS and Linux. #45285window.print()on macOS/Linux. #45259webFrame.getZoomLevelandwebFrame.getZoomFactorAPIs. #45557Also in earlier versions...
chrome.i18nextension API being unavailable in service workers. #45031 (Also in 31, 32, 33, 34)trace-startupnot working on macOS. #44257 (Also in 32, 33, 34)v8.setHeapSnapshotNearHeapLimitapi in main and utility process, along with support for--diagnostic-dirNode.js cli flag to specify the directory to save the heap snapshots. #45632 (Also in 33, 34)shell.readShortcutLinkon Windows. #44784 (Also in 33, 34)shell.readShortcutLinkcaused byPKEY_AppUserModel_ToastActivatorCLSIDsometimes being represented by a string uuid. #45348 (Also in 33, 34)chrome.tabs.update(). #45302 (Also in 33, 34)getUserMediawith an invalidchromeMediaSourceId. #45755 (Also in 34)EventSourcewasundefinedin both renderer and worker processes when Node.js integration was enabled. #44475 (Also in 32, 33, 34)WebContentsViews were being improperly removed. #44656 (Also in 31, 32, 33, 34)contextmenuevents wouldn't be correctly dispatched in draggable regions on Linux. #45841 (Also in 34)resizewasn't being emitted for single-pixel resizes on Windows. #44700 (Also in 32, 33, 34)utilityProcesspid would not beundefinedafter exit. #44677 (Also in 32, 33, 34)getAsFileSystemHandleto never resolve. #45256 (Also in 33, 34)dialogmodule didn't work on Linux. #45394 (Also in 34)exitevent could be emitted twice from theutilityProcess. #44243 (Also in 31, 32, 33, 34)context-menuevent was not emitted when using-webkit-app-region: drag. #44761 (Also in 32, 33, 34)backgroundMateriallost effect on maximization. #45525 (Also in 34)context-menuevent. #44940 (Also in 32, 33, 34)win.closeFilePreviewtwice on macOS. #45664 (Also in 32, 33, 34)webContents.canGoToOffset. #44989 (Also in 32, 33, 34)libgdk_pixbuf. #44423 (Also in 32, 33, 34)avoidClosingConnectionsoption forsession.clearDatanow properly defaults tofalsewhen thedataTypesoption is not set. #45187 (Also in 33, 34)Other Changes
-Wunsafe-buffer-usageClang warnings and enabled the compiler warning in new builds. #44056Documentation
Notices
End of Support for 32.x.y
Electron 32.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.
Note: This is a beta release. Please file new issues for any bugs you find in it.
This release is published to npm under the beta tag and can be installed via
npm install electron@beta, ornpm install electron@35.0.0-beta.13.Release Notes for v35.0.0-beta.13
Other Changes
Note: This is a beta release. Please file new issues for any bugs you find in it.
This release is published to npm under the beta tag and can be installed via
npm install electron@beta, ornpm install electron@35.0.0-beta.12.Release Notes for v35.0.0-beta.12
Fixes
contextmenuevents wouldn't be correctly dispatched in draggable regions on Linux. #45841Other Changes
Release Notes for v33.4.3
Other Changes
uv.hbeforenode.hdon't compile as expected. #45872Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
Summary by Sourcery
Upgrade Electron from version 33.2.0 to 35.0.0
Bug Fixes:
Enhancements: