Bump electron and electron-pdf

[dependabot]

Bumps electron to 20.3.5 and updates ancestor dependency electron-pdf. These dependencies need to be updated together.

Updates electron from 1.6.2 to 20.3.5

Release notes

Sourced from electron's releases.

electron v20.3.5

Release Notes for v20.3.5

Other Changes

• Security: backported fix for 1361612. #36217
• Security: backported fix for 1373314. #36214
• Security: backported fix for CVE-2022-3654. #36208
• Security: backported fix for CVE-2022-3723. #36226

electron v20.3.4

Release Notes for v20.3.4

Fixes

• Fixed spurious promise rejection in webContents.loadURL when navigating to a hash. #36149 (Also in 21, 22)

Other Changes

• Security: backported fix for 1356234. #36220
• Security: backported fix for 1364604. #36080
• Security: backported fix for 1368076. #36085
• Security: backported fix for CVE-2022-3448. #36079
• Security: backported fix for CVE-2022-3450. #36078
• Security: backported fix for CVE-2022-3652. #36206
• Security: backported fix for CVE-2022-3653. #36210

electron v20.3.3

Release Notes for v20.3.3

Fixes

• Fixed v8 flags and desktop name in package.json does not hornored when running local app using electron cli. #36048 (Also in 21, 22)

electron v20.3.2

Release Notes for v20.3.2

Fixes

• Fixed a drag-and-drop issue on macOS where items would be incorrectly moved instead of copied in some contexts. #35978 (Also in 21, 22)
• Fixed on-screen-keyboard not hiding on input rendered in webview is blurred. #35981 (Also in 21, 22)
• You can now import the built-in electron module via ESModule loaders, i.e. import('electron') and import 'electron' now work natively. #35956 (Also in 21, 22)

Other Changes

• Modified the Windows 11 WCO to match the native look more closely. #35968 (Also in 21)
• Security: backported fix for CVE-2022-3307. #35883
• Security: backported fix for CVE-2022-3315. #35929

electron v20.3.1

Release Notes for v20.3.1

... (truncated)

Changelog

Sourced from electron's changelog.

Breaking Changes

Breaking changes will be documented here, and deprecation warnings added to JS code where possible, at least one major version before the change is made.

Types of Breaking Changes

This document uses the following convention to categorize breaking changes:

• API Changed: An API was changed in such a way that code that has not been updated is guaranteed to throw an exception.
• Behavior Changed: The behavior of Electron has changed, but not in such a way that an exception will necessarily be thrown.
• Default Changed: Code depending on the old default may break, not necessarily throwing an exception. The old behavior can be restored by explicitly specifying the value.
• Deprecated: An API was marked as deprecated. The API will continue to function, but will emit a deprecation warning, and will be removed in a future release.
• Removed: An API or feature was removed, and is no longer supported by Electron.

Planned Breaking API Changes (23.0)

Removed: BrowserWindow scroll-touch-* events

The deprecated scroll-touch-begin, scroll-touch-end and scroll-touch-edge events on BrowserWindow have been removed. Instead, use the newly available input-event event on WebContents.

// Removed in Electron 23.0
win.on('scroll-touch-begin', scrollTouchBegin)
win.on('scroll-touch-edge', scrollTouchEdge)
win.on('scroll-touch-end', scrollTouchEnd)
// Replace with
win.webContents.on('input-event', (_, event) => {
if (event.type === 'gestureScrollBegin') {
scrollTouchBegin()
} else if (event.type === 'gestureScrollUpdate') {
scrollTouchEdge()
} else if (event.type === 'gestureScrollEnd') {
scrollTouchEnd()
}
})

Removed: webContents.incrementCapturerCount(stayHidden, stayAwake)

The webContents.incrementCapturerCount(stayHidden, stayAwake) function has been removed. It is now automatically handled by webContents.capturePage when a page capture completes.

const w = new BrowserWindow({ show: false })
// Removed in Electron 23
w.webContents.incrementCapturerCount()
</tr></table>

... (truncated)

Commits

• e8b8ee1 chore: cherry-pick d5ffb4dd4112 from chromium (#36214)
• b9d0a5a chore: cherry-pick ec236fef54b8 from v8 (#36226)
• bc3d0bf chore: cherry-pick 933cc81c6bad from chromium (#36223)
• a0f608b chore: cherry-pick 06c87f9f42ff from chromium (#36208)
• 92a338a chore: cherry-pick eef098d1c7d5 from webrtc (#36217)
• f8ab274 chore: cherry-pick b8636b57b8f2 from angle (#36210)
• d844933 chore: cherry-pick 194bcc127f21 from v8 (#36206)
• 30046ca chore: cherry-pick 67c9cbc784d6 from chromium (#36220)
• 98ab127 build: use python3 for appveyor commands (#36231)
• 1008774 docs: Fixed outdated documentation (uploading to App Store) (#36211)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by electron-nightly, a new releaser for electron since your current version.

Updates electron-pdf from 1.3.0 to 20.0.0

Commits

• f2f3b9c Merge pull request #310 from SpiderStrategies/upgrade-electron-20
• b03284f upgrade to electron v20.0.2
• 6231bcb removed dead/outdated links
• 2861a37 added new master versions
• 0760931 Fixes #292 Electron v15 upgrade (#293)
• d5332fc Fixes #283 Added options.fileSuffixFn for ExportJob (#284)
• e03c3a7 Merge branch '4.0'
• 8a20175 listen for window close event, code refactoring for #273 (#277)
• 6bce22b updated version listing
• 29d8ede bumped electron to latest (10.1.x), and project version to match (10.0.0)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jerryorr, a new releaser for electron-pdf since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.