Skip to content

deps: bump electron from 43.4.0 to 43.4.1 in /electron - #11426

Merged
diegosouzapw merged 1 commit into
release/v3.8.51from
dependabot/npm_and_yarn/electron/electron-43.4.1
Aug 26, 2026
Merged

diegosouzapw merged 1 commit into
release/v3.8.51from
dependabot/npm_and_yarn/electron/electron-43.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps electron from 43.4.0 to 43.4.1.

Release notes

Sourced from electron's releases.

electron v43.4.1

Release Notes for v43.4.1

Fixes

  • Fixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via webContents.setDevToolsWebContents(). #52937 (Also in 44)
  • Fixed registerFileProtocol and registerHttpProtocol returning readable responses to cross-origin no-cors fetches; they now return opaque responses like protocol.handle. #52853 (Also in 41, 42, 44)
  • Fixed a WebContentsView staying blank after its window is shown when setBackgroundThrottling(false) was called while the window was hidden. #52864 (Also in 42, 44)
  • Fixed a crash in systemPreferences.promptTouchID(reason) when an invalid reason value is passed. #52782 (Also in 42, 44)
  • Fixed a crash when resolving a path inside a malformed ASAR archive that contains cyclic link entries. #52857 (Also in 42, 44)
  • Fixed a crash with app.setLoginItemSettings if a non-UTF8 service name is used. #52944 (Also in 44)
  • Fixed a memory leak when creating BrowserWindows. #52892 (Also in 42, 44)
  • Fixed a possible crash (SIGABRT) during process exit when the process had loaded tls/https shortly before exiting, affecting app.exit() before ready and short-lived ELECTRON_RUN_AS_NODE / child_process.fork() scripts. #52870 (Also in 44)
  • Fixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. #52925 (Also in 44)
  • Fixed a potential crash in contentTracing.stopRecording() when the trace file could not be written to the requested path. #52795 (Also in 42, 44)
  • Fixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. #52903 (Also in 44)
  • Fixed a regression preventing from transparent frameless windows from being resized on Linux. #52947 (Also in 44)
  • Fixed an npm install failure with no recovery path when the OS blocked the native zip extractor from loading (for example, Windows Smart App Control). #52845 (Also in 44)
  • Fixed an issue on Windows where the app process could fail to exit after app.quit() while a shell.openExternal() or shell.openPath() call was still waiting on a system "Open with" dialog. #52897 (Also in 41, 44)
  • Fixed crash in sharedTexture module when GPU context becomes unavailable. #52938 (Also in 44)
  • Fixed custom V8 snapshots (electron-mksnapshot, and the loadBrowserProcessSpecificV8Snapshot fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. #52877 (Also in 42, 44)
  • Fixed downloading files that live inside an asar archive, including saving a packed PDF from the built-in PDF viewer. #52826 (Also in 42, 44)
  • Fixed the built-in PDF viewer not rendering documents in in-memory sessions (partitions without the persist: prefix). #52835 (Also in 44)
  • Fixed windows opened by a sandboxed top-level frame not inheriting the opener's sandbox restrictions. #52848 (Also in 41, 42, 44)
  • <webview> and window.open now inherit nodeIntegrationInWorker from the embedder, consistent with the other Node and sandbox preferences. #52830 (Also in 41, 42, 44)

Other Changes

  • Backported fix for 524628213. #52868
  • Backported fixes for 542224257, 542025190. #52842
  • Backported fixes from upstream Chromium and V8. #52778
  • Fixed Tray icons not appearing (and their menus not opening) on Linux desktops that address the StatusNotifierItem by its unique D-Bus name or via the org.freedesktop.StatusNotifierItem interface, such as GNOME with the AppIndicator extension, Cinnamon and XFCE. #52952
  • Fixed an issue on macOS where a page's first use of speechSynthesis could block the main process for several hundred milliseconds. #52814
  • Reduced idle main-process CPU wakeups caused by Node.js timers and immediates. #52905 (Also in 44)
Commits
  • 340bae1 ci: fix generating ffmpeg (#52961)
  • 5d74fe3 fix: show DevTools popup menus for setDevToolsWebContents() frontends (#52937)
  • 7bb1b8f refactor: SimpleURLLoaderWrapper managed by cppgc (#52934)
  • ce2dc12 fix: prevent crash when GPU context unavailable in sharedTexture (#52938)
  • d1afd78 chore: cleanup includes of Win32 headers (#52945)
  • bfc9c62 chore: cherry-pick 3a02de271fd3 and 726eafecc145 from chromium (#52952)
  • 524a3df fix: dangling rawptr NativeWindow::primary_web_contents_view_ (#52939)
  • a2e9e45 ci: log Datadog upload failure instead of failing job (#52936)
  • d593366 fix: transparent windows can be resized on Linux (#52947)
  • 4a04028 fix: don't crash on non-UTF8 serviceName in app.setLoginItemSettings (#52944)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@dependabot
dependabot Bot requested a review from diegosouzapw as a code owner August 24, 2026 18:25
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@diegosouzapw
diegosouzapw changed the base branch from release/v3.8.50 to release/v3.8.51 August 24, 2026 23:01
@diegosouzapw

Copy link
Copy Markdown
Owner

Re-homed to release/v3.8.51: v3.8.50 entered its release freeze, so the branch now belongs to the release captain and development continues on the next cycle. Nothing is wrong with this PR — it just needed a live base. No action needed from you; CI will re-run against the new base.

@diegosouzapw

Copy link
Copy Markdown
Owner

Retargeted from release/v3.8.50, this branch carries ~81 orphaned v3.8.50-lineage commits as a phantom diff and conflicts with release/v3.8.51 on package-lock.json. The actual bump (electron 43.4.0 -> 43.4.1, 2 files) is fine. Commenting @dependabot recreate will rebuild it cleanly off the current v3.8.51 tip.

@diegosouzapw

Copy link
Copy Markdown
Owner

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/electron/electron-43.4.1 branch from e128874 to 719fd09 Compare August 25, 2026 04:21
Bumps [electron](https://github.com/electron/electron) from 43.4.0 to 43.4.1.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v43.4.0...v43.4.1)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 43.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/electron/electron-43.4.1 branch from 719fd09 to ee8442f Compare August 25, 2026 21:56
@diegosouzapw
diegosouzapw merged commit a9dd1dd into release/v3.8.51 Aug 26, 2026
12 of 18 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/electron/electron-43.4.1 branch August 26, 2026 03:38
diegosouzapw pushed a commit that referenced this pull request Aug 26, 2026
…11440)

Validated in a combined dependabot worktree off release/v3.8.51 tip alongside #11426 and #11428 — a fresh npm install of all three combined (2437 packages, 0 vulnerabilities) plus full-suite validation:
- typecheck:core, file-size, changelog-integrity, complexity, cognitive-complexity, check:cycles — all OK
- npm run lint — 0 errors (after also draining an unrelated stale-suppressions cascade, see #11596)
- npm run test:vitest — 451/452 pass; the 1 failure (auto/glm materialization) is a pre-existing timing-flaky test, reproduced 11/11 pass ×3 in isolation, unrelated to this bump

11 production-group updates (aws-sdk bedrock-runtime, dompurify, fumadocs-core/ui, jose, lucide-react, marked, mermaid, next, onnxruntime-node, wreq-js), all patch/minor within their existing major lines.
diegosouzapw pushed a commit that referenced this pull request Aug 26, 2026
…11428)

Validated in a combined dependabot worktree off release/v3.8.51 tip alongside #11426 and #11440 — a fresh npm install of all three combined (2437 packages, 0 vulnerabilities) plus full-suite validation:
- typecheck:core, file-size, changelog-integrity, complexity, cognitive-complexity, check:cycles — all OK, including through the @types/node 22→26 major jump
- npm run lint — 0 errors (after also draining an unrelated stale-suppressions cascade, see #11596)
- npm run test:vitest — 451/452 pass; the 1 failure (auto/glm materialization) is a pre-existing timing-flaky test, reproduced 11/11 pass ×3 in isolation, unrelated to this bump
- Node runtime unaffected — v24.16.0 unchanged, only the type definitions moved

8 development-group updates. The bun 1.3.14→1.4.0 + @types/bun bump aligns with the Bun-native infrastructure work merged earlier today (#11468/#11470/#11471/#11482), which was built against Bun 1.4+ assumptions.
xiaoyaner0201 added a commit to xiaoyaner0201/OmniRoute that referenced this pull request Aug 26, 2026
Merge upstream release/v3.8.51 (e0ea3f9) into the team cost centers
reconcile branch. The release advanced by four commits since the previous
reconcile point (6eb7bf0): one eslint-suppressions prune (diegosouzapw#11596) and
three dependabot bumps (diegosouzapw#11426, diegosouzapw#11440, diegosouzapw#11428).

The only file edited by both sides is config/quality/eslint-suppressions.json,
where the two sides delete disjoint entries; both deletions are preserved.
Migration numbering is unaffected: the release top slot is still
163_radar_feed_cache_generated_at.sql and 164_team_cost_centers.sql remains
the next free slot.
muhamadgalihsaputra pushed a commit to niyatna/NiyatnaRoute that referenced this pull request Sep 27, 2026
…11426)

Validated in a combined dependabot worktree off release/v3.8.51 tip alongside diegosouzapw#11440 and diegosouzapw#11428 — a fresh npm install of all three combined (2437 packages, 0 vulnerabilities) plus full-suite validation:
- typecheck:core, file-size, changelog-integrity, complexity, cognitive-complexity, check:cycles — all OK
- npm run lint — 0 errors (after also draining an unrelated stale-suppressions cascade, see diegosouzapw#11596)
- npm run test:vitest — 451/452 pass; the 1 failure (auto/glm materialization) is a pre-existing timing-flaky test, reproduced 11/11 pass ×3 in isolation, unrelated to this bump

Electron patch bump, upstream release notes list only crash fixes and stability backports.
muhamadgalihsaputra pushed a commit to niyatna/NiyatnaRoute that referenced this pull request Sep 27, 2026
…iegosouzapw#11440)

Validated in a combined dependabot worktree off release/v3.8.51 tip alongside diegosouzapw#11426 and diegosouzapw#11428 — a fresh npm install of all three combined (2437 packages, 0 vulnerabilities) plus full-suite validation:
- typecheck:core, file-size, changelog-integrity, complexity, cognitive-complexity, check:cycles — all OK
- npm run lint — 0 errors (after also draining an unrelated stale-suppressions cascade, see diegosouzapw#11596)
- npm run test:vitest — 451/452 pass; the 1 failure (auto/glm materialization) is a pre-existing timing-flaky test, reproduced 11/11 pass ×3 in isolation, unrelated to this bump

11 production-group updates (aws-sdk bedrock-runtime, dompurify, fumadocs-core/ui, jose, lucide-react, marked, mermaid, next, onnxruntime-node, wreq-js), all patch/minor within their existing major lines.
muhamadgalihsaputra pushed a commit to niyatna/NiyatnaRoute that referenced this pull request Sep 27, 2026
…iegosouzapw#11428)

Validated in a combined dependabot worktree off release/v3.8.51 tip alongside diegosouzapw#11426 and diegosouzapw#11440 — a fresh npm install of all three combined (2437 packages, 0 vulnerabilities) plus full-suite validation:
- typecheck:core, file-size, changelog-integrity, complexity, cognitive-complexity, check:cycles — all OK, including through the @types/node 22→26 major jump
- npm run lint — 0 errors (after also draining an unrelated stale-suppressions cascade, see diegosouzapw#11596)
- npm run test:vitest — 451/452 pass; the 1 failure (auto/glm materialization) is a pre-existing timing-flaky test, reproduced 11/11 pass ×3 in isolation, unrelated to this bump
- Node runtime unaffected — v24.16.0 unchanged, only the type definitions moved

8 development-group updates. The bun 1.3.14→1.4.0 + @types/bun bump aligns with the Bun-native infrastructure work merged earlier today (diegosouzapw#11468/diegosouzapw#11470/diegosouzapw#11471/diegosouzapw#11482), which was built against Bun 1.4+ assumptions.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant