Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Build(deps): Bump electron from 28.2.0 to 28.2.1 #3746

Merged
merged 1 commit into from Feb 2, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2024

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps electron from 28.2.0 to 28.2.1.

Release notes

Sourced from electron's releases.

electron v28.2.1

Release Notes for v28.2.1

Fixes

  • Apply module search paths restriction on worker and child process. #41137 (Also in 27, 29)
  • Fixed a potential async_hooks crash when listening for the restore event on Windows after minimizing a maximized BrowserWindow. #41145 (Also in 27, 29)
  • Fixed an issue where Request objects did not correctly copy headers into fetches. #41103
  • Fixed an issue where non-modal windows with vibrancy could have incorrectly rounded corners on Sonoma. #41036 (Also in 27, 29)
  • Fixed an issue where the printBackground option in webContents.printToPDF did not work as expected. #41179 (Also in 29)
  • Fixed forked child process not able to send IPC message under some cases on macOS. #41101 (Also in 26, 27, 29)
  • Fixed on-screen-keyboard not hiding for webviews under some cases. #41150 (Also in 27, 29)

Other Changes

  • Removed extraneous dlls from Windows zip files. #41128 (Also in 29)
  • Security: backported fix for CVE-2024-0807.
    • Security: backported fix for 1407197. #41105
  • Updated Chromium to 120.0.6099.268. #41094
Commits
  • 2df0c05 refactor: inline simple getters (#41168)
  • d5d40d5 fix: avoid potential CHECK() failure in DictionaryToRect() (#41183)
  • b9acd8a refactor: simplify code by using base::Value::EnsureList() (#41181)
  • 865a72f fix: shouldPrintBackgrounds -> printBackground in `webContents.printToPDF...
  • 59f50c7 refactor: type-safe imports in lib/node/init.ts (#41185)
  • 52251f2 fix: update osk patch to fix more corner cases (#41150)
  • 750df6a fix: undici incorrectly copies headers onto fetches (#41103)
  • e21a6bf fix: potential async_hooks crash in NotifyWindowRestore on Windows (#41145)
  • 8f005ee build: remove unneeded dlls in Windows zip (#41128)
  • 38b64d3 fix: apply module search paths restriction on worker and child process (#41137)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [electron](https://github.com/electron/electron) from 28.2.0 to 28.2.1.
- [Release notes](https://github.com/electron/electron/releases)
- [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md)
- [Commits](electron/electron@v28.2.0...v28.2.1)

---
updated-dependencies:
- dependency-name: electron
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from remusao as a code owner February 1, 2024 05:01
@dependabot dependabot bot added the PR: Dependencies 🔩 Changes only update dependencies label Feb 1, 2024
@remusao remusao merged commit 593276d into master Feb 2, 2024
3 checks passed
@remusao remusao deleted the dependabot/npm_and_yarn/electron-28.2.1 branch February 2, 2024 20:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
PR: Dependencies 🔩 Changes only update dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant