Bump electron from 37.4.0 to 38.2.1 by dependabot[bot] · Pull Request #59812 · gravitational/teleport

dependabot · 2025-10-01T09:39:11Z

Electron 38 drops support for macOS 11. This means we cannot backport it to v18 and older release branches, at least not straight away. Fortunately, Go 1.25 also dropped support for macOS 11 (#59104), so with v19 we'll just make it so that our clients require macOS 12+.

Down the line we might backport Go 1.25 to v18 and we can backport Electron's update at that point as well. See the discussion on Slack.

Original PR body

Bumps electron from 37.4.0 to 38.2.0.

Release notes

Sourced from electron's releases.

electron v38.2.0

Release Notes for v38.2.0

Features

Allowed for persisting File System API grant status within a given session. #48327 (Also in 37)

Fixes

Fixed Wayland configuration through the XDG_SESSION_TYPE environment variable. #48309

Fixed excessive WindowServer GPU usage on macOS Tahoe 26. #48398 (Also in 36, 37, 39)

Fixed high CPU usage with <input> tag on macOS 26. #48394 (Also in 37, 39)

electron v38.1.2

Release Notes for v38.1.2

Other Changes

Use Local Execution, Remote Caching (LERC) for fork PRs [(#48324)](electron/electron#48324)

Updated v8 [(#48338)](electron/electron#48338)

electron v38.1.1

Release Notes for v38.1.1

Other Changes

Updated Chromium to 140.0.7339.133. #48287

electron v38.1.0

Release Notes for v38.1.0

Other Changes

Updated Chromium to 140.0.7339.80. #48249

Updated Node.js to v22.19.0. #48221

electron v38.0.0

Release Notes for v38.0.0

Stack Upgrades

Chromium 140.0.7339.41

New in 140

New in 139

Node 22.18.0

Node 22.18.0 blog post

V8 14.0

Breaking Changes

For breaking changes inherited via Chromium, see blog post

Features

... (truncated)

Commits

81db417 fix: MacOS 26 Tahoe - stop overriding private cornerMask API to fix WindowSer...
5dfeee6 fix: disable NSAutoFillHeuristicController on macOS 26 (#48394)
2982cd7 test: rerun failed tests individually (#48387)
3179f61 fix: set ozone platform for wayland (#48309)
526dfe2 build: update build tools to get siso for forks fix (#48345) (#48350)
cf9d044 feat: add fileSystem to ses.setPermissionCheckHandler (#48327)
99feff3 docs: mention setContentProtection macOS limitations (#48367)
d60ae17 chore: cherry-pick ec6c18478382 from v8 (#48337)
f43348e ci: Use Local Execution, Remote Caching (LERC) for fork PRS (#48323)
5e51c88 chore: bump chromium to 140.0.7339.133 (38-x-y) (#48287)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

socket-security · 2025-10-01T09:42:11Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/node-pty@1.1.0-beta34 ⏵ 1.1.0-beta35	⁺¹		⁺¹	⁺³
	npm/electron@37.4.0 ⏵ 38.2.1	⁺¹		⁺¹	⁺¹

View full report

ravicious · 2025-10-02T17:01:27Z

Tag builds:

https://github.com/gravitational/teleport.e/actions/runs/18199997135

Failed because of outdated node-abi

https://github.com/gravitational/teleport.e/actions/runs/18217437402

Some random failures unrelated to Electron

https://github.com/gravitational/teleport.e/actions/runs/18320940831

Teleport tarball failure with no logs

https://github.com/gravitational/teleport.e/actions/runs/18350591390

@gzdunek So this update works, almost. It breaks window focus on Ubuntu and Fedora. Instead of focusing on the window, it shows a system notification saying "Teleport Connect is ready". I confirmed that this is broken by the Electron update and not recent changes to window management – it works fine on master.

I haven't found an issue related to the focus problem. I can create it, but I think for now we can merge the update? The window doesn't get focus, but at least there's the notification.

Another thing is that because of electron/electron#48321, when running it in a Fedora VM I had to start the app twice because the initial start doesn't show the app window. This should be the case only in VMs.

Screen recordings

Electron 38 (bad)

ubuntu-electron-38.mov

Electron 37 (good)

ubuntu-electron-37.mov

Agree, we can merge it. Hopefully, the bug will be fixed by the time we release v19.

I created an issue here. electron/electron#48737

Well, it turns out that this is just how things will be on Linux from now on, so we have to live with the fact that app.focus() now works similar to Windows there. I updated the Electron update checklist so that it's something we expect.

Bumps [electron](https://github.com/electron/electron) from 37.4.0 to 38.2.0. - [Release notes](https://github.com/electron/electron/releases) - [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md) - [Commits](electron/electron@v37.4.0...v38.2.0) --- updated-dependencies: - dependency-name: electron dependency-version: 38.2.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

gzdunek · 2025-10-15T08:17:05Z

Agree, we can merge it. Hopefully, the bug will be fixed by the time we release v19.

* Bump electron from 37.4.0 to 38.2.0 Bumps [electron](https://github.com/electron/electron) from 37.4.0 to 38.2.0. - [Release notes](https://github.com/electron/electron/releases) - [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md) - [Commits](electron/electron@v37.4.0...v38.2.0) --- updated-dependencies: - dependency-name: electron dependency-version: 38.2.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * Revert unnecessary updates * Update node-pty to 1.1.0-beta35 * Update node-abi * Bump electron to 38.2.1 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Rafał Cieślak <rafal.cieslak@goteleport.com>

dependabot bot added dependencies Pull requests that update a dependency file no-changelog Indicates that a PR does not require a changelog entry ui labels Oct 1, 2025

dependabot bot requested review from avatus, gzdunek, r0mant, ravicious and zmb3 as code owners October 1, 2025 09:39

dependabot bot added dependencies Pull requests that update a dependency file no-changelog Indicates that a PR does not require a changelog entry labels Oct 1, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/electron-38.2.0 branch from f18cf5f to 5b4cb64 Compare October 2, 2025 16:44

ravicious mentioned this pull request Oct 2, 2025

Bump node-pty from 1.1.0-beta34 to 1.1.0-beta35 in the electron group #59800

Closed

ravicious reviewed Oct 2, 2025

View reviewed changes

dependabot bot and others added 4 commits October 3, 2025 10:38

Revert unnecessary updates

673b501

Update node-pty to 1.1.0-beta35

61c7fdd

Update node-abi

7ddf387

ravicious force-pushed the dependabot/npm_and_yarn/electron-38.2.0 branch from 7d2a6b0 to 7ddf387 Compare October 3, 2025 08:39

Bump electron to 38.2.1

48bf56e

ravicious changed the title ~~Bump electron from 37.4.0 to 38.2.0~~ Bump electron from 37.4.0 to 38.2.1 Oct 7, 2025

ravicious mentioned this pull request Oct 7, 2025

[v18] Update electron to 37.6.1 #60021

Merged

avatus approved these changes Oct 8, 2025

View reviewed changes

ravicious self-assigned this Oct 8, 2025

Merge branch 'master' into dependabot/npm_and_yarn/electron-38.2.0

a9d13e0

zmb3 approved these changes Oct 9, 2025

View reviewed changes

gzdunek approved these changes Oct 15, 2025

View reviewed changes

ravicious added this pull request to the merge queue Oct 15, 2025

Merged via the queue into master with commit da8347a Oct 15, 2025
39 checks passed

ravicious deleted the dependabot/npm_and_yarn/electron-38.2.0 branch October 15, 2025 09:00

ravicious mentioned this pull request Nov 24, 2025

Bump electron from 38.2.1 to 39.2.2 #60916

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump electron from 37.4.0 to 38.2.1#59812

Bump electron from 37.4.0 to 38.2.1#59812
ravicious merged 6 commits intomasterfrom
dependabot/npm_and_yarn/electron-38.2.0

dependabot bot commented on behalf of github Oct 1, 2025 •

edited by ravicious

Loading

Uh oh!

socket-security bot commented Oct 1, 2025 •

edited

Loading

Uh oh!

ravicious Oct 2, 2025 •

edited

Loading

Uh oh!

ravicious Oct 14, 2025 •

edited

Loading

Uh oh!

gzdunek Oct 15, 2025

Uh oh!

ravicious Oct 30, 2025

Uh oh!

ravicious Nov 4, 2025

Uh oh!

gzdunek Oct 15, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

dependabot bot commented on behalf of github Oct 1, 2025 • edited by ravicious Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

electron v38.2.0

Release Notes for v38.2.0

Features

Fixes

electron v38.1.2

Release Notes for v38.1.2

Other Changes

electron v38.1.1

Release Notes for v38.1.1

Other Changes

electron v38.1.0

Release Notes for v38.1.0

Other Changes

electron v38.0.0

Release Notes for v38.0.0

Stack Upgrades

Breaking Changes

Features

Uh oh!

socket-security bot commented Oct 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ravicious Oct 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

ravicious Oct 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

gzdunek Oct 15, 2025

Choose a reason for hiding this comment

Uh oh!

ravicious Oct 30, 2025

Choose a reason for hiding this comment

Uh oh!

ravicious Nov 4, 2025

Choose a reason for hiding this comment

Uh oh!

gzdunek Oct 15, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

dependabot bot commented on behalf of github Oct 1, 2025 •

edited by ravicious

Loading

socket-security bot commented Oct 1, 2025 •

edited

Loading

ravicious Oct 2, 2025 •

edited

Loading

ravicious Oct 14, 2025 •

edited

Loading