Bump electron from 7.3.3 to 42.4.0 in the npm_and_yarn group across 1 directory

[dependabot]

Bumps the npm_and_yarn group with 1 update in the / directory: electron.

Updates electron from 7.3.3 to 42.4.0

Release notes

Sourced from electron's releases.

electron v42.4.0

Release Notes for v42.4.0

Fixes

• Fixed a browser process crash when calling webContents.reload() or navigating synchronously from the render-process-gone event; the event is now emitted after the renderer's teardown notification has completed. #51916 (Also in 43)
• Fixed an issue on Linux and Windows where frameless windows would shrink when calling win.center(). Additionally, fixed an issue where frameless windows would appear slightly off-center on Windows. #51921 (Also in 41, 43)
• Fixed an issue where the "Toggle Developer Tools" menu item failed to function correctly with BaseWindow. #51903 (Also in 41, 43)
• Fixed sandboxed preload scripts running a stale cached version after the script was modified without its file size changing. #51933 (Also in 43)
• Fixed the context menu in a detached DevTools window focusing the inspected page's window instead of the DevTools window. #51864 (Also in 43)

Other Changes

• Backported fixes from upstream Chromium and V8. #51934
• Security: backported fixes for CVE-2026-9115, CVE-2026-9116. #51904
• Updated Chromium to 148.0.7778.254. #51878
• Updated Node.js to v24.16.0. #51747

electron v42.3.3

Release Notes for v42.3.3

Fixes

• Fixed a crash when calling node:wasi functions with fast API calls enabled. #51867
• Improved external resize band positioning and scaling for frameless windows on Windows. #51561 (Also in 41, 43)

Other Changes

• Fixed silent data truncation in Buffer/TextEncoder APIs and a crash in fs.writeFileSync with non-ASCII strings on Apple Silicon. #51849 (Also in 41, 43)
• Improved app startup performance — the main process now boots from an embedded Node.js startup snapshot, framework bundles and preload scripts are cached as compiled V8 bytecode, and sandboxed renderer startup data is pushed ahead of navigation instead of fetched via blocking IPC. Preload stack traces now show the correct file path and line number. #51831 (Also in 43)

electron v42.3.2

Release Notes for v42.3.2

• Fixed a crash in simdutf when processing strings in the main process

electron v42.3.1

Release Notes for v42.3.1

Fixes

• Fixed a desktopCapturer crash when sharing a window on Windows. #51787

Other Changes

• Enabled ThinLTO on macOS builds. #51823 (Also in 43)
• Improved performance of Linux and Windows release builds by enabling ThinLTO link-time optimization for the main Electron binary. #51821 (Also in 43)
• Improved performance of app.isDefaultProtocolClient() and app.setAsDefaultProtocolClient() on Linux. #51627
• Improved runtime performance. #51828
• Updated Chromium to 148.0.7778.218. #51790

electron v42.3.0

Release Notes for v42.3.0

... (truncated)

Commits

• 86ce4b4 chore: cherry-pick 9 changes from chromium, v8 (#51934)
• 06b2741 fix: invalidate sandboxed preload code cache when source changes without chan...
• ef43f3c fix: emit render-process-gone outside the process-death notification (#51916)
• d347b94 fix: win.center() sets the correct size and position on frameless windows (#5...
• c2b9c9f test: don't import from ../lib in API tests (#51914)
• dd211e7 chore: bump node to v24.16.0 (42-x-y) (#51747)
• 219ef5f chore: bump chromium to 148.0.7778.254 (42-x-y) (#51878)
• a08a3e2 refactor: use @​electron-internal/extract-zip in the npm package (#51895)
• f8731f2 fix: toggle devtools menu item for BaseWindow (#51903)
• 55b29e8 chore: cherry-pick 1 changes from chromium (#51904)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Note

Medium Risk
Large major-version Electron upgrade affects only dev/test tooling but can break Jest/Electron integration tests or CI until validated; no direct impact on published SDK runtime behavior.

Overview
Bumps the electron dev dependency from 7.x to ^42.4.0 in package.json (Dependabot security/group update). There are no changes to SDK source or runtime dependencies—only the Electron binary used for local/CI test runs (e.g. Jest with @jest-runner/electron and renderer integration tests).

Reviewers should expect a major runtime jump (Chromium/Node inside Electron) and verify that unit and integration tests still pass; consuming apps choose their own Electron version separately.

^{Reviewed by Cursor Bugbot for commit 411bfef. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 411bfef. Configure here.}

[cursor]

Electron bump breaks integration tests

Medium Severity

Raising the devDependency electron to ^42.4.0 without updating the integration harness leaves npm run integration-test unable to run reliably. Spectron is unmaintained and not built for Electron 42, and the test app still calls the removed built-in electron.remote API that existed under Electron 7.

 

^{Reviewed by Cursor Bugbot for commit 411bfef. Configure here.}