Skip to content

chore(deps): bump the electron-deps group in /packaging/electron with 3 updates#42

Merged
EraPartner merged 2 commits intomainfrom
dependabot/npm_and_yarn/packaging/electron/electron-deps-73cb873aee
May 7, 2026
Merged

chore(deps): bump the electron-deps group in /packaging/electron with 3 updates#42
EraPartner merged 2 commits intomainfrom
dependabot/npm_and_yarn/packaging/electron/electron-deps-73cb873aee

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps the electron-deps group in /packaging/electron with 3 updates: compress-commons, zip-stream and electron.

Updates compress-commons from 6.0.2 to 7.0.0

Release notes

Sourced from compress-commons's releases.

7.0.0

What’s changed

Breaking changes

Maintenance

Dependency updates

Changelog

Sourced from compress-commons's changelog.

Changelog

7.0.0 — October 13, 2024 — Diff

6.0.2 — March 9, 2024 — Diff

6.0.1 — February 29, 2024 — Diff

6.0.0 — February 26, 2024 — Diff

5.0.2 — February 26, 2024 — Diff

5.0.1 — September 3, 2023 — Diff

5.0.0 — September 2, 2023 — Diff

4.1.2 — September 2, 2023 — Diff

4.1.1 — May 30th, 2021 — Diff

Maintenance

  • Bump mocha from 8.2.1 to 8.4.0 (#70)
  • Bump crc32-stream from 4.0.1 to 4.0.2 (#59)
  • Bump y18n from 4.0.0 to 4.0.1 (#69)
  • Bump chai from 4.2.0 to 4.3.4 (#67)
  • Bump actions/setup-node from 2.1.4 to 2.1.5 (#71)

4.1.0 — March 2, 2021 — Diff

Features

  • Allow prepending forward slash in entry name (#63)

Maintenance

  • Bump actions/setup-node from v2.1.2 to v2.1.4 (#58)

4.0.1 — July 20, 2020 — Diff

4.0.0 — July 18, 2020 — Diff

... (truncated)

Commits

Updates zip-stream from 6.0.1 to 7.0.2

Release notes

Sourced from zip-stream's releases.

7.0.2

What’s changed

  • No changes

7.0.1

What’s changed

  • No changes

7.0.0

What’s changed

Breaking changes

Maintenance

Dependency updates

Changelog

Sourced from zip-stream's changelog.

Changelog

7.0.2 - October 15, 2024 — Diff

7.0.0 - October 15, 2024 — Diff

6.0.1 - March 9, 2024 — Diff

6.0.0 - February 27, 2024 — Diff

5.0.2 - February 27, 2024 — Diff

5.0.1 - September 3, 2023 — Diff

5.0.0 - September 2, 2023 — Diff

Release Archive

Commits

Updates electron from 41.5.0 to 42.0.0

Release notes

Sourced from electron's releases.

electron v42.0.0

Release Notes for v42.0.0

Stack Upgrades

Breaking Changes

Behavior Changed: macOS notifications now use UNNotification API

Electron has migrated from the deprecated NSUserNotification API to the UNNotification API on macOS. The new API requires that an application be code-signed in order for notifications to be displayed. If an application is not code-signed, notifications will emit a failed event on the Notification object. #47817

Behavior Changed: electron no longer downloads itself via postinstall script

Previously, the electron npm package would download the Electron binary from the repository's GitHub Releases in the package's postinstall script. With recent supply chain security attacks against the npm ecosystem with postinstall scripts as a common attack vector, Electron will now download itself dynamically the first time that its main bin script is run (e.g. via npx electron). See [RFC #22](electron/rfcs#22) for more context. #49328

Behavior Changed: Offscreen rendering default device scale factor

Previously, OSR used the primary display's device scale factor for rendering. Starting from Electron 42, the default changes to a constant value of 1.0 for more consistent output sizes. Use webPreferences.offscreen.deviceScaleFactor to specify a custom value. #49683

Removed: quotas object from Session.clearStorageData(options)

When calling Session.clearStorageData(options), the options.quotas object is no longer supported because it has been removed from upstream Chromium.

Removed: ELECTRON_SKIP_BINARY_DOWNLOAD environment variable

This environment variable is no longer supported due to the new lazy download behavior. #50459

Features

Additions

  • Added app.configureWebAuthn({ touchID: { keychainAccessGroup } }) to enable the WebAuthn Touch ID platform authenticator on macOS. Also introduces a select-webauthn-account session event for discoverable-credential selection. #51411 (Also in 41)
  • Added Notification.getHistory() for macOS. #51123
  • Added Notification.handleActivation(callback) API on Windows to handle notification clicks, replies, and action buttons - including when the app is launched from a notification (cold start). #49919
  • Added ELECTRON_INSTALL_PLATFORM and ELECTRON_INSTALL_ARCH variables to install binaries from other platforms and architectures. #49981
  • Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. #50530 (Also in 40, 41)
  • Added app.isActive() to check if the app is the active/foreground application (macOS only). #49622
  • Added globalShortcut.setSuspended() and globalShortcut.isSuspended() methods to temporarily suspend and resume global shortcut handling. #50777
  • Added id and groupId options to the Notification constructor on macOS. id allows custom identifiers for notifications, and groupId visually groups notifications together in Notification Center. #50304
  • Added webContents.getOrCreateDevToolsTargetId(). #49733 (Also in 41)
  • Added a disclaim option to the UtilityProcess API to allow for TCC disclaiming on macOS. #49128 (Also in 39, 40, 41)
  • Added a reason property to the Notification 'closed' event on Windows to allow developers to know the reason the Notification was dismissed. #49913 (Also in 40, 41)
  • Added an usePrinterDefaultPageSize option to webContents.print() to allow using the printer's default page size. #49523 (Also in 41)
  • Added animation functionality to view.setBounds and added view.setBackgroundBlur. #48812

... (truncated)

Commits
  • 51db52e fix: set XDG app ID and WM_CLASS based on normalized app name (#51479)
  • 3998b93 fix: handle createWindow() rejection in import-meta test fixture (#51468)
  • 5ce31c3 fix: don't let tests hang for an hour (#51466)
  • 49f7d16 chore: bump chromium to 148.0.7778.96 (42-x-y) (#51402)
  • 673351b chore: use oxfmt and oxlint in 42-x-y (#51435)
  • 7369f7d fix: constrain AllowUniversalAccessFromFileURLs to file: origins in agent clu...
  • dc58761 fix: prevent borders and smearing in transparent frameless/client fra… (#51430)
  • 84ea8a1 build(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 (#51408)
  • 6e01ddb refactor: gin_helper::Promise managed by cppgc (#51405)
  • 2d943ef feat: support WebAuthn Touch ID platform authenticator on macOS (#51411)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the electron-deps group
22136c9 
Bumps the electron-deps group in /packaging/electron with 3 updates: [compress-commons](https://github.com/archiverjs/node-compress-commons), [zip-stream](https://github.com/archiverjs/node-zip-stream) and [electron](https://github.com/electron/electron).


Updates `compress-commons` from 6.0.2 to 7.0.0
- [Release notes](https://github.com/archiverjs/node-compress-commons/releases)
- [Changelog](https://github.com/archiverjs/node-compress-commons/blob/master/CHANGELOG.md)
- [Commits](archiverjs/node-compress-commons@6.0.2...7.0.0)

Updates `zip-stream` from 6.0.1 to 7.0.2
- [Release notes](https://github.com/archiverjs/node-zip-stream/releases)
- [Changelog](https://github.com/archiverjs/node-zip-stream/blob/master/CHANGELOG.md)
- [Commits](archiverjs/node-zip-stream@6.0.1...7.0.2)

Updates `electron` from 41.5.0 to 42.0.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v41.5.0...v42.0.0)

---
updated-dependencies:
- dependency-name: compress-commons
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: electron-deps
- dependency-name: zip-stream
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: electron-deps
- dependency-name: electron
  dependency-version: 42.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: electron-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 7, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 7, 2026

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 53.73% 4741 / 8823
🔵 Statements 51.33% 5122 / 9978
🔵 Functions 42.92% 1334 / 3108
🔵 Branches 42.45% 3443 / 8110
File CoverageNo changed files found.
Generated in workflow #106 for commit 971077f by the Vitest Coverage Report Action

@EraPartner EraPartner enabled auto-merge (squash) May 7, 2026 19:21
@EraPartner EraPartner merged commit 70cf686 into main May 7, 2026
16 checks passed
@EraPartner EraPartner deleted the dependabot/npm_and_yarn/packaging/electron/electron-deps-73cb873aee branch May 7, 2026 19:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@EraPartner