Skip to content

Bump the npm_and_yarn group across 2 directories with 5 updates - #2

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/desktop/npm_and_yarn-2eb110edf3
Open

Bump the npm_and_yarn group across 2 directories with 5 updates#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/desktop/npm_and_yarn-2eb110edf3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 5 updates in the /desktop directory:

Package From To
electron 41.7.1 43.3.0
pdfjs-dist 5.7.284 6.2.108
fast-uri 3.1.4 3.1.5
js-yaml 4.3.0 4.3.1
postcss 8.5.20 8.5.26

Bumps the npm_and_yarn group with 1 update in the /desktop-tauri directory: pdfjs-dist.

Updates electron from 41.7.1 to 43.3.0

Release notes

Sourced from electron's releases.

electron v43.3.0

Release Notes for v43.3.0

Features

  • Added available to process.getSystemMemoryInfo() on Linux, exposing proc/meminfo MemAvailable. #52379 (Also in 42, 44)

Fixes

  • Fixed BrowserWindow size corruption on Windows when created with explicit x/y on a secondary monitor whose DPI differs from the primary. #52501 (Also in 42, 44)
  • Fixed Dirent.parentPath being undefined for fs.readdir, fs.readdirSync, fs.glob, and fs.globSync with withFileTypes: true inside asar archives. #52505 (Also in 42, 44)
  • Fixed dialog.showOpenDialog/dialog.showSaveDialog opening at an unusable location on Linux when defaultPath is a bare filename without a directory. #52401 (Also in 44)
  • Fixed a UAF with protocol.registerStreamProtocol when an error is emitted during a read. #52514 (Also in 41, 42, 44)
  • Fixed a crash that could occur when closing DevTools while the host WebContents was being destroyed. #52510 (Also in 41, 42, 44)
  • Fixed a graphical glitch on Linux where thin borders appeared past the drop shadows on frameless windows when multiple windows were created. #52607 (Also in 44)
  • Fixed an issue where loading ICO files from ASAR archives on Windows left temporary icon files behind. #52478 (Also in 42, 44)
  • Fixed an issue where some values passed into requestSingleInstanceLock could result in a crash. #52471 (Also in 44)

Other Changes

  • Fixed bindings for MV3 service workers. #52503
  • Improved the error message when an asar integrity check fails to name the entry that failed. #52622 (Also in 42, 44)
  • Updated Chromium to 150.0.7871.212. #52524
  • Updated Node.js to v24.18.1. #52552

electron v43.2.0

Release Notes for v43.2.0

Features

  • Added net.WebSocket, a WHATWG-compatible WebSocket client for the main process that routes through Chromium's network stack. #52344 (Also in 42)

Fixes

  • Fixed app.disableHardwareAcceleration() not fully disabling GPU hardware usage on Windows starting from Electron 38. #52369 (Also in 41, 42, 44)
  • Fixed globalShortcut not working on GNOME Wayland by enabling Chromium's GlobalShortcutsPortalPreferredTrigger feature by default on Linux. #52228
  • Fixed a crash when showing Linux message boxes while another Linux UI implementation was active. #52410 (Also in 42, 44)
  • Fixed a window being marked hidden and background-throttled on macOS when covered by a transparent or click-through window. #52389 (Also in 44)
  • Fixed unnecessary autofill popup creation for fields without datalist suggestions, which could cause input latency on macOS. #52321 (Also in 41, 42, 44)
  • Fixed webContents.print() returning "Invalid printer settings" when print options are provided. #52381 (Also in 44)

Other Changes

  • Updated Chromium to 150.0.7871.129. #52355

electron v43.1.1

Release Notes for v43.1.1

Fixes

  • Fixed a browser-process crash (ValidateIntegrityOrDie) and spurious preload ENOENT errors when an app's app.asar is replaced on disk (e.g. by an updater or MDM software) while the app is running. #52293 (Also in 42, 44)

Other Changes

  • Updated Chromium to 150.0.7871.114. #52297

... (truncated)

Commits
  • 1aa21d2 chore: include the asar entry in integrity-check failure messages (#52622)
  • e94835e fix: remove shadow artifacts that appear when multiple windows are created on...
  • 3bbd302 build: update PGO profiles (#52596)
  • 8c0629a chore: bump node to v24.18.1 (43-x-y) (#52552)
  • e4976ed ci: trigger PGO generation when a chromium roll lands on a release branch (#5...
  • 75c1164 chore: remove dead code in autofill_popup_view.cc (#52549)
  • ad8aa54 chore: bump chromium to 150.0.7871.212 (43-x-y) (#52524)
  • b822de9 build: add extensions_renderer_generated_resources.pak (#52503)
  • 67e5bc4 ci: enable LSan on existing Linux ASan build job (#52527)
  • 815a207 fix: refactor to avoid UAF in NodeStreamLoader (#52514)
  • Additional commits viewable in compare view

Updates pdfjs-dist from 5.7.284 to 6.2.108

Release notes

Sourced from pdfjs-dist's releases.

v6.2.108

This release contains improvements for annotation rendering, annotation editing, font conversion, image conversion, performance, SMask handling and text selection.

Changes since v6.1.200

... (truncated)

Commits
  • 0365cbd Merge pull request #21654 from calixteman/fix/cycles
  • f704f2e Merge pull request #21652 from Snuffleupagus/signatures-async-helpers
  • 01ba4c4 Merge pull request #21646 from calixteman/update/pdf.js.qcms
  • 0299cdc Merge pull request #21653 from Snuffleupagus/jsActions-_getElementsByName-sho...
  • 8c3e101 Merge pull request #21650 from mozilla/dependabot/github_actions/github/codeq...
  • 14afb86 Merge pull request #21649 from mozilla/dependabot/github_actions/github/codeq...
  • 14fc73b Merge pull request #21648 from mozilla/dependabot/github_actions/github/codeq...
  • 257f4c2 Merge pull request #21647 from mozilla/dependabot/github_actions/actions/setu...
  • 93958e4 Merge pull request #21640 from Snuffleupagus/defaultOptions-Map
  • bc6b5b0 Merge pull request #21651 from mozilla/dependabot/github_actions/actions/chec...
  • Additional commits viewable in compare view

Updates fast-uri from 3.1.4 to 3.1.5

Release notes

Sourced from fast-uri's releases.

v3.1.5

⚠️ Security Warning

Fix for GHSA-7p8r-x3mc-p8w7

Full Changelog: fastify/fast-uri@v3.1.4...v3.1.5

Commits

Updates js-yaml from 4.3.0 to 4.3.1

Changelog

Sourced from js-yaml's changelog.

4.3.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.
Commits

Updates postcss from 8.5.20 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

Changelog

Sourced from postcss's changelog.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

Commits

Updates pdfjs-dist from 5.7.284 to 6.2.108

Release notes

Sourced from pdfjs-dist's releases.

v6.2.108

This release contains improvements for annotation rendering, annotation editing, font conversion, image conversion, performance, SMask handling and text selection.

Changes since v6.1.200

... (truncated)

Commits
  • 0365cbd Merge pull request #21654 from calixteman/fix/cycles
  • f704f2e Merge pull request #21652 from Snuffleupagus/signatures-async-helpers
  • 01ba4c4 Merge pull request #21646 from calixteman/update/pdf.js.qcms
  • 0299cdc Merge pull request #21653 from Snuffleupagus/jsActions-_getElementsByName-sho...
  • 8c3e101 Merge pull request #21650 from mozilla/dependabot/github_actions/github/codeq...
  • 14afb86 Merge pull request #21649 from mozilla/dependabot/github_actions/github/codeq...
  • 14fc73b Merge pull request #21648 from mozilla/dependabot/github_actions/github/codeq...
  • 257f4c2 Merge pull request #21647 from mozilla/dependabot/github_actions/actions/setu...
  • 93958e4 Merge pull request #21640 from Snuffleupagus/defaultOptions-Map
  • bc6b5b0 Merge pull request #21651 from mozilla/dependabot/github_actions/actions/chec...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the npm_and_yarn group across 2 directories with 5 updates
7ddb0d9 
Bumps the npm_and_yarn group with 5 updates in the /desktop directory:

| Package | From | To |
| --- | --- | --- |
| [electron](https://github.com/electron/electron) | `41.7.1` | `43.3.0` |
| [pdfjs-dist](https://github.com/mozilla/pdf.js) | `5.7.284` | `6.2.108` |
| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.4` | `3.1.5` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.3.0` | `4.3.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.20` | `8.5.26` |

Bumps the npm_and_yarn group with 1 update in the /desktop-tauri directory: [pdfjs-dist](https://github.com/mozilla/pdf.js).


Updates `electron` from 41.7.1 to 43.3.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v41.7.1...v43.3.0)

Updates `pdfjs-dist` from 5.7.284 to 6.2.108
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v5.7.284...v6.2.108)

Updates `fast-uri` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.4...v3.1.5)

Updates `js-yaml` from 4.3.0 to 4.3.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...4.3.1)

Updates `postcss` from 8.5.20 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.20...8.5.26)

Updates `pdfjs-dist` from 5.7.284 to 6.2.108
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v5.7.284...v6.2.108)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 43.3.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: pdfjs-dist
  dependency-version: 6.2.108
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: fast-uri
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: pdfjs-dist
  dependency-version: 6.2.108
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants