Skip to content

deps: bump electron from 44.2.0 to 44.4.3 - #72

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-44.4.3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-44.4.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown
Contributor

Bumps electron from 44.2.0 to 44.4.3.

Release notes

Sourced from electron's releases.

electron v44.4.3

Release Notes for v44.4.3

Fixes

  • Fixed net.fetch() / net.request() spending seconds of main-process time buffering large streamed request bodies. #54061 (Also in 45)

Performance Improvements

  • Improved the performance of fs operations and require() on files inside asar archives. #54051 (Also in 45)

Other Changes

  • Backported fixes from upstream Chromium, PDFium, Skia and V8. #54081

electron v44.4.2

Release Notes for v44.4.2

Fixes

  • Fixed a potential UAF when a select-usb-device handler destroys the requesting webContents. #54009 (Also in 43, 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, Skia and V8. #53985
  • Updated Chromium to 152.0.7977.130. #53778

electron v44.4.1

Release Notes for v44.4.1

Fixes

  • Fixed default protocol client APIs falsely returning true on Windows. #53959 (Also in 43, 45)
  • Fixed several object lifetime issues in Debugger, Menu, Tray, Notification, globalShortcut, utilityProcess, ServiceWorkerMain, WebFrameMain, webFrame, sharedTexture, systemPreferences, netLog, MessagePortMain, net.request and shell.openPath(). #53968 (Also in 45)

electron v44.4.0

Release Notes for v44.4.0

Features

  • Added initiatorOrigin to webRequest and protocol handler requests, DownloadItem.getInitiatorOrigin(), and a trailing frame argument to the will-download and preconnect session events. #53703 (Also in 43, 45)

Fixes

  • Added validation to protocol.registerSchemesAsPrivileged() to reject protocol names that do not conform to RFC 3986 URI scheme grammar. #53743 (Also in 45)
  • Fixed a crash when a webContents navigated to the Chrome Web Store and the page invoked the unsupported chrome.webstorePrivate API. #53776 (Also in 45)
  • Fixed a main-process crash when an app called loadURL() again right after a load failed because the renderer process exited before the page committed. #53943 (Also in 43, 45)
  • Fixed a memory leak on Windows when app.getPreferredSystemLanguages() was called. #53868 (Also in 43, 45)
  • Fixed a potential UAF in app.getPreferredSystemLanguages() on Windows. #53865 (Also in 43, 45)
  • Fixed a renderer crash that could occur when printing from an iframe. #53762 (Also in 43, 45)

... (truncated)

Commits
  • 1442047 chore: cherry-pick 11 changes from chromium, pdfium, skia and v8 (#54081)
  • 601973e test: turn accessibility back off after the app a11y specs (#54077)
  • 5340a80 test: don't let tests' PowerShell calls block Mocha from timing out (#54071)
  • 1e4b7cb test: re-enable protocol.handle throughput test (#54028)
  • 37e4061 perf: speed up fs operations on paths inside asar archives (44-x-y) (#54051)
  • 0ef5d01 test: re-enable webview media permission test (#54068)
  • fd82e14 fix: don't re-copy the whole request body for every chunk written to net.requ...
  • a1bbce5 ci: run reduced test subsets on macOS x64 and mas (44-x-y) (#54057)
  • fd2cdd7 test: re-enable missing-file load failure (#54054)
  • fded7c8 test: fix fullscreen spec waits (#54044)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [electron](https://github.com/electron/electron) from 44.2.0 to 44.4.3.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v44.2.0...v44.4.3)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 44.4.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants