Skip to content

Update dependency electron to v11.5.0 - abandoned#1856

Open
mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/electron-11.x-lockfile
Open

Update dependency electron to v11.5.0 - abandoned#1856
mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/electron-11.x-lockfile

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Feb 5, 2022 •
edited
Loading

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
electron 11.2.3 -> 11.5.0 age adoption passing confidence

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 8.6 CVE-2021-39184 #1729
High 7.5 CVE-2021-33502 #43
High 7.2 CVE-2021-23337 #81
Medium 5.3 CVE-2020-28500 #40

Release Notes

electron/electron

v11.5.0

Compare Source

Release Notes for v11.5.0

Other Changes

End of Support for 11.x.y

Electron 11.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.

v11.4.12

Compare Source

Release Notes for v11.4.12

Fixes

v11.4.11

Compare Source

Release Notes for v11.4.11

Other Changes

v11.4.10

Compare Source

Release Notes for v11.4.10

Other Changes

v11.4.9

Compare Source

Release Notes for v11.4.9

Fixes

  • Fixed potential corruption of piped response data when using interceptHttpProtocol/registerHttpProtocol. #​29667 (Also in 12, 13, 14)
  • Security: backported fix for CVE-2021-30551. #​29780

Other Changes

v11.4.8

Compare Source

Release Notes for v11.4.8

Fixes

  • Fixed will-resize and will-move events not scaling the emitted newBounds rectangle to the appropriate Windows display scale factor. #​29225 (Also in 12, 13)
  • Fixed drag and drop not working correctly for some x11 window managers. #​29271 (Also in 12)
  • Fixed packaged apps allowing --require in NODE_OPTIONS on Windows. #​29419

Other Changes

v11.4.7

Compare Source

Release Notes for v11.4.7

Fixes

  • Fixed an incorrect warning about enableRemoteModule being issued when the option was undefined (and thus defaulting to false). #​29023
  • Fixed an issue where events on webview elements were missing properties if contextIsolation was enabled. #​29150 (Also in 10)
  • Fixed corner radius for vibrancy view in macOS 11. #​29072 (Also in 12, 13)

Documentation

v11.4.6

Compare Source

Release Notes for v11.4.6

Fixes

  • Fixed <webview> focus / blur events not working with contextIsolation enabled. #​29027 (Also in 10, 12, 13)
  • Fixed an issue where drag regions on macOS would be offset incorrectly when no drag regions were set,. #​29018 (Also in 12, 13)

v11.4.5

Compare Source

Release Notes for v11.4.5

Fixes

  • Allow Node.js to manage microtasks queue by using explicit microtasks policy before calling uv_run(). #​28974 (Also in 12, 13)
  • Fixed an issue where some Node.js modules would hang on page reload on Windows. #​28336 (Also in 12, 13)
  • Fixed an issue where windows in simpleFullscreen mode were not properly resizing when display metrics changed. #​28870 (Also in 12, 13)
  • Fixed the window-all-closed event being emitted while the last BrowserWindow was still in the process of being closed. #​28912 (Also in 12, 13)

Other Changes

v11.4.4

Compare Source

Release Notes for v11.4.4

Fixes

  • Fixed an issue where multiple calls to window.setFullScreen could cause problems. #​28773 (Also in 12, 13)
  • Fixed an issue where some dialogs would stop working on macOS if window.hide() was called while they were open. #​28696 (Also in 12, 13)
  • Fixed crash on m1 mac. #​28745
  • No longer set backgroundColor in default-app when opening custom files / URLs. #​28843 (Also in 10, 12, 13)

Other Changes

v11.4.3

Compare Source

Release Notes for v11.4.3

Fixes

  • Fixed a bug where, when a JumpList task description exceeded 260 characters, the JumpList was empty, despite valid entries. #​28524 (Also in 12, 13)
  • Fixed a network process crash that could happen when using setCertificateVerifyProc with many concurrent verification requests. #​28470 (Also in 12, 13)
  • Fixed failing to request file:// resources when web security is disabled. #​28589 (Also in 12, 13)
  • Support wasm-eval csp behind WebAssemblyCSP flag. #​28576 (Also in 12, 13)
  • Transparent windows cannot be maximized using the Windows system menu or by double clicking the title bar. #​28635 (Also in 12, 13)

Other Changes

  • Security: backported fix for chromium:1196683. #​28639

v11.4.2

Compare Source

Release Notes for v11.4.2

Fixes

  • Fixed an issue where the thumbar disappeared after win.hide() on Windows. #​28391 (Also in 10, 12, 13)
  • Fixed bug where TouchBarPopover and TouchBarGroup were no longer rendering. #​28412 (Also in 12)
  • Fixed crash when exiting app with active nodejs worker_threads. #​28471
  • Fixed service worker not working with custom protocol. #​28353 (Also in 12, 13)

Documentation

v11.4.1

Compare Source

Release Notes for v11.4.1

Fixes

  • Fixed desktopCapturer.getSources() promise result sometimes never resolving. #​28282 (Also in 10, 12, 13)
  • Fixed an issue where the drag regions in BrowserViews on macOS could be off in their y-axis. #​28297 (Also in 10, 12, 13)
  • Fixed context menus not being positioned correctly when near the edge of the screen. #​28278 (Also in 12, 13)
  • Fixed intensive I/O from asar files causing ERR_FILE_NOT_FOUND after a while. #​28201 (Also in 12, 13)
  • Fixed issue where window.open() would not return an object with a location.href setter when contextIsolation is enabled and nativeWindowOpen is disabled. #​28161 (Also in 10, 12)
  • URLS passed to shell.openExternal on windows are now correctly URI encoded. This was already occurring on macOS and Linux. #​28340 (Also in 10, 12, 13)

Other Changes

Documentation

v11.4.0

Compare Source

Release Notes for v11.4.0

Features

  • Added support for the des-ede3 cipher in node crypto. #​27993 (Also in 12)

Fixes

  • Colors returned from systemPreferences.getAccentColor(), getSystemColor and getColor are now correctly converted into the devices color space. Previously the color would have been subtly incorrect. #​28171 (Also in 12, 13)
  • Fixed a potential crash when resetting BrowserViews. #​27948 (Also in 10, 12)
  • Fixed an issue where BrowserViews could have mismatched draggable regions to their bounds. #​27987 (Also in 10, 12)
  • Fixed an issue where win.capturePage() never called back after calling hide() for a hidden window on some platforms. #​28074 (Also in 12, 13)
  • Fixed an issue where libuv might hang with multiple subframes when nodeIntegrationInSubframes is enabled. #​27880 (Also in 10, 12)
  • Fixed an out-of-bounds access in WebContents.sendInputEvent. #​27853 (Also in 10, 12)
  • Fixed background color not being applied for child windows created by native window.open path. #​27944 (Also in 10, 12)
  • Fixed crash when calling getBackgroundColor on a transparent window with no assigned background color. #​28186 (Also in 12, 13)
  • Fixed native window.open() to not use windowName/frameName as title by default. #​27813 (Also in 10, 12)
  • Fixed navigator.bluetooth.requestDevice crash. #​27941 (Also in 12)
  • Fixed warning when worldSafeExecuteJavaScript is disabled. #​27968 (Also in 10, 12)

Other Changes

v11.3.0

Compare Source

Release Notes for v11.3.0

Features

  • Added allowFileAccess option to loadExtension() API. #​27703 (Also in 12)
  • Added win.setTopBrowserView() so that BrowserViews can be raised. #​27712 (Also in 10, 12)

Fixes

  • Backported fix for https://crbug.com/1125165. #​27558
  • Fixed OS-level shortcuts on macOS (e.g. Ctrl + F2, ⌘ + ~). #​27787 (Also in 12)
  • Fixed SVG content with filter sometimes not being rendered. #​27699
  • Fixed a crash when calling crypto.createDiffieHellman() with certain parameters. #​27766 (Also in 12)
  • Fixed a memory leak when creating BrowserWindows. #​27640 (Also in 12)
  • Fixed an erroneous enableBlinkFeatures warning shown webviews which enabled no Blink features. #​27789 (Also in 10, 12)
  • Fixed an issue where deleted download directories would be sometimes recreated by the operating system. #​27808 (Also in 10, 12)
  • Fixed an occasional white flicker present when rendering BrowserViews in close succession. #​27659 (Also in 10, 12)
  • Fixed crash when destroying WebContents in the crashed event. #​27757 (Also in 10, 12)
  • Fixed memory leak when sending non-primitives over the context bridge. #​27638 (Also in 10, 12)
  • Fixed native window freeze on Windows when Electron app is sent to tray and external display changes. #​27669 (Also in 12)
  • Fixed svg with filter content not being rendered. #​27635

Other Changes

Documentation

  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by WhiteSource label Feb 5, 2022
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/electron-11.x-lockfile branch 2 times, most recently from c36930c to b098b01 Compare February 15, 2022 04:51
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/electron-11.x-lockfile branch from b098b01 to 7b8e337 Compare February 16, 2022 15:23
@mend-for-github-com

mend-for-github-com Bot commented Jun 22, 2022 •
edited
Loading

Copy link
Copy Markdown
Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@mend-for-github-com mend-for-github-com Bot changed the title Update dependency electron to v11.5.0 Update dependency electron to v11.5.0 - abandoned Jan 29, 2023
@mend-for-github-com

mend-for-github-com Bot commented Mar 26, 2023 •
edited
Loading

Copy link
Copy Markdown
Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

security fix Security fix generated by WhiteSource

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants