chore(deps-dev): Bump electron from 41.3.0 to 42.0.0

[dependabot]

Bumps electron from 41.3.0 to 42.0.0.

Release notes

Sourced from electron's releases.

electron v42.0.0

Release Notes for v42.0.0

Stack Upgrades

• Chromium 148.0.7778.96
  • New in 148
  • New in 147
• Node v24.15.0
  • Node 24.15.0 blog post
• V8 14.8

Breaking Changes

Behavior Changed: macOS notifications now use UNNotification API

Electron has migrated from the deprecated NSUserNotification API to the UNNotification API on macOS. The new API requires that an application be code-signed in order for notifications to be displayed. If an application is not code-signed, notifications will emit a failed event on the Notification object. #47817

Behavior Changed: electron no longer downloads itself via postinstall script

Previously, the electron npm package would download the Electron binary from the repository's GitHub Releases in the package's postinstall script. With recent supply chain security attacks against the npm ecosystem with postinstall scripts as a common attack vector, Electron will now download itself dynamically the first time that its main bin script is run (e.g. via npx electron). See [RFC #22](electron/rfcs#22) for more context. #49328

Behavior Changed: Offscreen rendering default device scale factor

Previously, OSR used the primary display's device scale factor for rendering. Starting from Electron 42, the default changes to a constant value of 1.0 for more consistent output sizes. Use webPreferences.offscreen.deviceScaleFactor to specify a custom value. #49683

Removed: quotas object from Session.clearStorageData(options)

When calling Session.clearStorageData(options), the options.quotas object is no longer supported because it has been removed from upstream Chromium.

Removed: ELECTRON_SKIP_BINARY_DOWNLOAD environment variable

This environment variable is no longer supported due to the new lazy download behavior. #50459

Features

Additions

• Added app.configureWebAuthn({ touchID: { keychainAccessGroup } }) to enable the WebAuthn Touch ID platform authenticator on macOS. Also introduces a select-webauthn-account session event for discoverable-credential selection. #51411 (Also in 41)
• Added Notification.getHistory() for macOS. #51123
• Added Notification.handleActivation(callback) API on Windows to handle notification clicks, replies, and action buttons - including when the app is launched from a notification (cold start). #49919
• Added ELECTRON_INSTALL_PLATFORM and ELECTRON_INSTALL_ARCH variables to install binaries from other platforms and architectures. #49981
• Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. #50530 (Also in 40, 41)
• Added app.isActive() to check if the app is the active/foreground application (macOS only). #49622
• Added globalShortcut.setSuspended() and globalShortcut.isSuspended() methods to temporarily suspend and resume global shortcut handling. #50777
• Added id and groupId options to the Notification constructor on macOS. id allows custom identifiers for notifications, and groupId visually groups notifications together in Notification Center. #50304
• Added webContents.getOrCreateDevToolsTargetId(). #49733 (Also in 41)
• Added a disclaim option to the UtilityProcess API to allow for TCC disclaiming on macOS. #49128 (Also in 39, 40, 41)
• Added a reason property to the Notification 'closed' event on Windows to allow developers to know the reason the Notification was dismissed. #49913 (Also in 40, 41)
• Added an usePrinterDefaultPageSize option to webContents.print() to allow using the printer's default page size. #49523 (Also in 41)
• Added animation functionality to view.setBounds and added view.setBackgroundBlur. #48812

... (truncated)

Commits

• 51db52e fix: set XDG app ID and WM_CLASS based on normalized app name (#51479)
• 3998b93 fix: handle createWindow() rejection in import-meta test fixture (#51468)
• 5ce31c3 fix: don't let tests hang for an hour (#51466)
• 49f7d16 chore: bump chromium to 148.0.7778.96 (42-x-y) (#51402)
• 673351b chore: use oxfmt and oxlint in 42-x-y (#51435)
• 7369f7d fix: constrain AllowUniversalAccessFromFileURLs to file: origins in agent clu...
• dc58761 fix: prevent borders and smearing in transparent frameless/client fra… (#51430)
• 84ea8a1 build(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 (#51408)
• 6e01ddb refactor: gin_helper::Promise managed by cppgc (#51405)
• 2d943ef feat: support WebAuthn Touch ID platform authenticator on macOS (#51411)
• Additional commits viewable in compare view

[Wintersta7e]

@dependabot rebase

[Wintersta7e]

Closing — Dependabot's rebase escalated this from a 41.3.0 → 41.5.0 patch into a major bump to Electron 42.0.0. CI now fails on the native rebuild because node-abi doesn't yet have an entry for Electron 42 (Could not detect abi for version 42.0.0 and runtime electron).

Electron 42 is a deliberate upgrade — needs verification of ConPTY/node-pty behavior and dist-release packaging — not a routine patch. Will revisit as a planned upgrade once node-abi ships v42 support.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.