Fixup CVE-2024-27303

The electron-builder app was impacted with this 7.3/10 CVE until v24.13.2 Updating the following dependencies to fix that issue: - electron: 29.1.0 - electron-builder: 24.13.3 - electron-updater: 6.1.8
Farigh · Mar 6, 2024 · dbc6052 · dbc6052
2 parents 5aff3d4 + b32dc79
commit dbc6052
Show file tree

Hide file tree

Showing 5 changed files with 1,541 additions and 325 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -12,9 +12,9 @@ jobs:
         runs-on: windows-latest
 
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
             - name: Use Node.js
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v4
               with:
                 node-version: 20
 
@@ -28,7 +28,7 @@ jobs:
               run: npm run-script win-portable
 
             - name: Upload artifacts
-              uses: actions/upload-artifact@v3.1.2
+              uses: actions/upload-artifact@v4
               with:
                 name: windows-artifacts
                 path: |
@@ -38,9 +38,9 @@ jobs:
         runs-on: ubuntu-latest
 
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
             - name: Use Node.js
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v4
               with:
                 node-version: 20
 
@@ -51,7 +51,7 @@ jobs:
               run: npm run-script linux
 
             - name: Upload artifacts
-              uses: actions/upload-artifact@v3.1.2
+              uses: actions/upload-artifact@v4
               with:
                 name: linux-artifacts
                 path: |

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -8,9 +8,9 @@ jobs:
         runs-on: windows-latest
 
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
             - name: Use Node.js
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v4
               with:
                 node-version: 20
 
@@ -24,7 +24,7 @@ jobs:
 
 
             - name: Upload artifacts
-              uses: actions/upload-artifact@v3.1.2
+              uses: actions/upload-artifact@v4
               with:
                 name: windows-artifacts
                 path: |
@@ -34,9 +34,9 @@ jobs:
         runs-on: ubuntu-latest
 
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
             - name: Use Node.js
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v4
               with:
                 node-version: 20
 

diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml
@@ -8,9 +8,9 @@ jobs:
         runs-on: windows-latest
 
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
             - name: Use Node.js
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v4
               with:
                 node-version: 20
 
@@ -21,7 +21,7 @@ jobs:
               run: npm audit fix
 
             - name: Upload artifacts
-              uses: actions/upload-artifact@v3.1.2
+              uses: actions/upload-artifact@v4
               with:
                 name: artifacts
                 path: |