From 979dbd001f72af8aa68e81f01e3295a33d9365fb Mon Sep 17 00:00:00 2001 From: Andrey170170 Date: Tue, 20 Oct 2026 16:48:42 -0600 Subject: [PATCH] fix(desktop): bump Electron to 44.9.1 to distrust eMudhra intermediates Eight eMudhra intermediate CA private keys were recoverable from their certificates (Mozilla bug 2083449). Electron 44.9.1 ships the patched trust store that distrusts them. Co-Authored-By: Claude Opus 5.5 --- apps/desktop/package.json | 2 +- pnpm-lock.yaml | 18 +++++++++--------- pnpm-workspace.yaml | 2 +- 3 files changed, 11 insertions(+), 11 deletions(-) diff --git a/apps/desktop/package.json b/apps/desktop/package.json index d78ac0fd286a..8087ca1d7134 100644 --- a/apps/desktop/package.json +++ b/apps/desktop/package.json @@ -24,7 +24,7 @@ "@t3tools/tailscale": "workspace:*", "dbus-next": "0.10.2", "effect": "catalog:", - "electron": "44.4.5", + "electron": "44.9.1", "electron-store": "^8.2.0", "electron-updater": "^6.8.9", "electron-webauthn": "catalog:", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index f08f2c5157e5..6251f89c905e 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -217,7 +217,7 @@ importers: dependencies: '@clerk/electron': specifier: 0.1.1 - version: 0.1.1(@clerk/electron-passkeys@0.0.3)(electron-store@8.2.0)(electron@44.4.5)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) + version: 0.1.1(@clerk/electron-passkeys@0.0.3)(electron-store@8.2.0)(electron@44.9.1)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) '@clerk/electron-passkeys': specifier: 0.0.3 version: 0.0.3 @@ -252,8 +252,8 @@ importers: specifier: 4.0.5 version: 4.0.5 electron: - specifier: 44.4.5 - version: 44.4.5 + specifier: 44.9.1 + version: 44.9.1 electron-store: specifier: ^8.2.0 version: 8.2.0 @@ -806,7 +806,7 @@ importers: version: 6.39.1(react-dom@19.3.0(react@19.3.0))(react@19.3.0) '@clerk/electron': specifier: 0.1.1 - version: 0.1.1(@clerk/electron-passkeys@0.0.3)(electron-store@8.2.0)(electron@44.4.5)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) + version: 0.1.1(@clerk/electron-passkeys@0.0.3)(electron-store@8.2.0)(electron@44.9.1)(react-dom@19.3.0(react@19.3.0))(react@19.3.0) '@clerk/react': specifier: 6.17.8 version: 6.17.8(react-dom@19.3.0(react@19.3.0))(react@19.3.0) @@ -8687,8 +8687,8 @@ packages: resolution: {integrity: sha512-bO3y10YikuUwUuDUQRM4KfwNkKhnpVO7IPdbsrejwN9/AABJzzTQ4GeHwyzNSrVO+tEH3/Np255a3sVZpZDjvg==} engines: {node: '>=8.0.0'} - electron@44.4.5: - resolution: {integrity: sha512-SjgoaeYsSWZfJzubgQU7juvuXMTvn6/e1gAHdGFA/yuMbpF+I+skYqIJ6DdXBXHeWbkbpNpmwZCTpiivtlWZSw==} + electron@44.9.1: + resolution: {integrity: sha512-x/tECFFDa2OFNjMObFH0EGKWrCnFZPOR1wP2iMIVt0STecGl8FmDXdaiaryY0kf8mtw9kSLP2yK8dfdaWkfDmw==} engines: {node: '>= 22.12.0'} hasBin: true @@ -13887,12 +13887,12 @@ snapshots: '@clerk/electron-passkeys-win32-arm64-msvc': 0.0.3 '@clerk/electron-passkeys-win32-x64-msvc': 0.0.3 - '@clerk/electron@0.1.1(@clerk/electron-passkeys@0.0.3)(electron-store@8.2.0)(electron@44.4.5)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': + '@clerk/electron@0.1.1(@clerk/electron-passkeys@0.0.3)(electron-store@8.2.0)(electron@44.9.1)(react-dom@19.3.0(react@19.3.0))(react@19.3.0)': dependencies: '@clerk/clerk-js': 6.39.1(react-dom@19.3.0(react@19.3.0))(react@19.3.0) '@clerk/react': 6.17.8(react-dom@19.3.0(react@19.3.0))(react@19.3.0) '@clerk/shared': 4.40.0(react-dom@19.3.0(react@19.3.0))(react@19.3.0) - electron: 44.4.5 + electron: 44.9.1 react: 19.3.0 tslib: 2.8.1 optionalDependencies: @@ -19397,7 +19397,7 @@ snapshots: transitivePeerDependencies: - supports-color - electron@44.4.5: + electron@44.9.1: dependencies: '@electron-internal/extract-zip': 1.0.5 '@electron/get': 5.1.0 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 2e3195c31f07..2b9ba4e17839 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -150,7 +150,7 @@ minimumReleaseAgeExclude: - expo-sharing@58.0.19 - expo-sqlite@58.0.13 - expo-symbols@58.0.4 - - electron@44.4.5 + - electron@44.9.1 - "@anthropic-ai/claude-agent-sdk@0.3.276" - "@alchemy.run/cloudflare-runtime@2.0.0-beta.80" - "@alchemy.run/floci@2.0.0-beta.80"