[Security] Bump electron from 9.0.0 to 10.1.3

[dependabot-preview]

Bumps electron from 9.0.0 to 10.1.3.

Release notes

Sourced from electron's releases.

electron v10.1.3

Release Notes for v10.1.3

Fixes

• Fixed CORS not being disabled by webSecurity: false. #25503 (Also in 9, 10, 11)
• Fixed ready-to-show event not emitted on some machines. #25476 (Also in 9, 10, 11)
• Fixed a crash in app.importCertificate() on Linux. #25536 (Also in 9, 10, 11)
• Fixed a crash when closing window in an event listener after exiting fullscreen on macOS. #25604 (Also in 10, 11)
• Fixed an issue that could cause a normally-exiting process to fail with an "illegal access" message and exit code 7. #25458 (Also in 8, 9, 10, 11)
• Fixed an issue where an error would be displayed when using webContents.print() if no default was set and no device name provided. #25606 (Also in 9, 10, 11)
• Fixed an issue where multiple calls to window.print() could cause a crash. #25530
• Fixed an issue where pageRanges was not properly honored when printing. #25597 (Also in 10)
• Fixed crashes caused by attempting to modify destroyed views. #25511 (Also in 9, 10, 11)
• Fixed the remote-debugging-port discovery page showing garbled text. #25601 (Also in 10, 11)
• Updated Node root certs to use NSS 3.56. #25361 (Also in 8, 9, 10, 11)

Other Changes

• Added a small console hint to console to help debug renderer crashes. #25472 (Also in 9, 10, 11)
• Fixed resource leak in worker threads. #25662 (Also in 9, 10, 11)
• Updated Chromium to 85.0.4183.121. #25559

Unknown

• Fixed extension background page devtools not being openable. #25566 (Also in 9, 10, 11)

electron v10.1.2

Release Notes for v10.1.2

Fixes

• Added missing module delay loads on windows to reduce per process reference set impact. #25435 (Also in 9, 10, 11)
• Fixed a crash in the renderer process when invoking the Badging API. #25369 (Also in 9, 10, 11)
• Fixed an issue where document.hasFocus and document.activeElement would be inconsistent upon showing a window that was initially created with show: false. #25330 (Also in 10, 11)
• Fixed client_id file being generated in the working directory for node child process. #25309 (Also in 9, 10, 11)
• Fixed multiple dock icons being left in system when calling dock.show/hide on macOS. #25299 (Also in 8, 9, 10, 11)

Other Changes

• Updated Chromium to 85.0.4183.98. #25275

Unknown

• Added support for some chrome.management APIs. #25345 (Also in 9, 10, 11)

electron v10.1.1

Release Notes for v10.1.1

Fixes

• Fixed an issue where filters set in dialogs on macOS would have nondeterministic ordering. #25192
• Fixed network permission error when there are multiple WebContents sharing same session are created with web security disabled. #25178
• Fixed the following issues for frameless when maximized on Windows:

Commits

• 21afda3 Bump v10.1.3
• 37bcb09 refactor: add a wrapper for wrangling uv handles. (#25662)
• 4a0f2be chore: improve renderer crash logging (#25621)
• e964c1e fix: prevent destroyed view references from causing crashes (#25511)
• 6fe6dff fix: honor pageRanges when printing (#25597)
• 0b75053 fix: check printer list when no default printers (#25606)
• 894d41e fix: close window when leave fs crash (#25604)
• a99256d fix: decompress devtools discovery html (#25601)
• 430a6ad chore: bump chromium to 85.0.4183.121 (10-x-y) (#25559)
• f82c375 fix: update node certdata to NSS 3.56 (#25361)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

We've just been alerted that this update fixes a security vulnerability:

Sourced from The GitHub Security Advisory Database.

Unpreventable top-level navigation

Impact

The will-navigate event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-frame performs a top-frame navigation across sites.

Patches

• 11.0.0-beta.1
• 10.0.1
• 9.3.0
• 8.5.1

... (truncated)

Affected versions: [">= 9.0.0-beta.0 < 9.3.0"]

[dependabot-preview]

Superseded by #31.