Update dependency electron to v42.11.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
electron	42.7.1 → 42.11.4
electron	42.7.1 → 42.11.4

---

Release Notes

electron/electron (electron)

v42.11.4: electron v42.11.4

Compare Source

Release Notes for v42.11.4

Fixes

• Fixed a renderer crash when an iframe was removed right after loading with nodeIntegrationInSubFrames enabled and sandbox disabled, e.g. on pages that embed Meta Pixel. #​53886 ^{(Also in 43, 44, 45)}

Other Changes

• Backported fixes from upstream ANGLE, Chromium, libyuv, PDFium and V8. #​53767

v42.11.3: electron v42.11.3

Compare Source

Release Notes for v42.11.3

Fixes

• File System Access permission requests and the file-system-access-restricted event are scoped to the requesting document, grants are reset when the origin's last page closes, and write access works in in-memory sessions. #​53695 ^{(Also in 43, 44, 45)}
• Fixed session.setPermissionCheckHandler receiving the top-level origin and a null webContents for hid and usb checks made from a subframe. #​53736 ^{(Also in 43, 44, 45)}
• Fixed webContents.on(), removeListener() and removeAllListeners() throwing "Object has been destroyed" for console-message listeners after the WebContents was destroyed. #​53497 ^{(Also in 43, 44, 45)}
• Fixed a crash on Linux when process.env was written while another thread was reading the environment, and a memory leak when a worker thread exits. #​53511 ^{(Also in 43, 44, 45)}
• Fixed a possible crash on Windows when a file dialog was shown for a window that was being closed at the same time. #​53585 ^{(Also in 43, 44, 45)}
• Fixed a renderer crash when the main process sent IPC to, or a page navigated, a same-process window.open() child whose contextIsolation differed from its opener's. #​53541 ^{(Also in 43, 44, 45)}
• Fixed crashes in setDisplayMediaRequestHandler when the granted frame had been destroyed or another tab was granted by id. #​53674 ^{(Also in 43, 44, 45)}
• Internal <webview>, window.close() and executeJavaScript reply IPCs are validated against the sending frame. #​53727 ^{(Also in 43, 44, 45)}
• <webview> without allowpopups also blocks links opened into a new window by modifier-click, and such windows navigate as the clicking document rather than as a browser-initiated load. #​53719 ^{(Also in 43, 44, 45)}
• getUserMedia with chromeMediaSource: 'desktop' no longer accepts WebContents source ids; use chromeMediaSource: 'tab' with webContents.getMediaSourceId() or setDisplayMediaRequestHandler to capture a WebContents. #​53710 ^{(Also in 43, 44, 45)}
• nodeIntegrationInWorker now applies only to workers created by frames that themselves have Node integration; enable nodeIntegrationInSubFrames to keep Node in workers created by subframes. #​53713 ^{(Also in 43, 44, 45)}
• openExternal permission requests started by a frame that has since gone away are attributed to that frame's origin rather than to the navigating page. #​53697 ^{(Also in 43, 44, 45)}
• pointerLock and keyboardLock permission requests now report the requesting frame, and execCommand('paste') requires user activation in the frame that calls it. #​53702 ^{(Also in 43, 44, 45)}

v42.11.2: electron v42.11.2

Compare Source

Release Notes for v42.11.2

Fixes

• Fixed application crash after a large number of IPC messages from renderers. #​53419 ^{(Also in 43, 44, 45)}
• Fixed native addons deriving from node::ObjectWrap aborting during garbage collection on Node.js 24.19.0 and later. #​53394 ^{(Also in 43, 44, 45)}

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Skia and V8. #​53480
• Backported fixes from upstream Chromium, Dawn, Skia and V8. #​53397
• Backported fixes from upstream Chromium, V8, ANGLE, Dawn, Skia, WebRTC and DevTools. #​53367

v42.11.1: electron v42.11.1

Compare Source

Release Notes for v42.11.1

Fixes

• Fixed chrome.tabs.query() returning tab url and title to extensions without the tabs permission or host access, aligning with tabs.get. #​53355 ^{(Also in 43, 44, 45)}
• Fixed a renderer crash when an array with a throwing property getter is passed across contextBridge, and several main/utility-process crashes when option objects passed to Electron APIs contain throwing accessors or Proxy traps. #​53329 ^{(Also in 43, 44)}

Other Changes

• Security: backported fixes for CVE-2026-15764, CVE-2026-15765, CVE-2026-15766, CVE-2026-15767, CVE-2026-15768, CVE-2026-15769, CVE-2026-15770, CVE-2026-15771, CVE-2026-15772, CVE-2026-15773, CVE-2026-15774, CVE-2026-15775, CVE-2026-15776, CVE-2026-15777, CVE-2026-15778. #​53344

v42.11.0: electron v42.11.0

Compare Source

Release Notes for v42.11.0

Fixes

• Fixed fs.constants.O_DIRECTORY, O_NOFOLLOW and O_DIRECT holding x86 values on Linux arm64 and armv7l, which made opening a directory fail with EINVAL, and made require('trace_events') behave the same on cross-compiled builds as on native ones. #​53318 ^{(Also in 43, 44, 45)}
• Fixed a crash when calling node:wasi functions in optimized code. #​53267 ^{(Also in 43, 44, 45)}
• Fixed a regression where a window created with a custom title can show an empty title after using back/forward navigation. #​53217 ^{(Also in 43, 44)}
• Fixed desktopCapturer thumbnail generation and premature portal timeout on Linux with Wayland. #​51784 ^{(Also in 43)}
• Fixed region-qualified --lang values such as de-DE loading no locale resources on macOS, which left localized strings empty and could crash WebAuthn Touch ID prompts. #​53187 ^{(Also in 43, 44)}
• Fixed the GPU process being terminated in AppX/MSIX packaged apps on Windows when WebGPU fell back to SwiftShader. #​53199 ^{(Also in 43, 44)}

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Dawn, V8 and WebRTC. #​53191
• Updated Node.js to v24.19.0. #​52634

v42.10.1: electron v42.10.1

Compare Source

Release Notes for v42.10.1

Fixes

• Fixed webContents.print() honoring printBackground, duplexMode, and printer default duplex settings. #​53158 ^{(Also in 43, 44)}
• Fixed a crash on macOS when a notification's icon could not be attached; the notification is now shown without the icon. #​53148 ^{(Also in 43, 44)}
• Fixed an issue where pages loaded in a detached WebContentsView wouldn't see the correct window size. #​53151 ^{(Also in 43, 44)}
• Fixed the primary instance being killed or receiving truncated arguments when a second instance passed a very long command line or large additionalData to app.requestSingleInstanceLock(). #​53157 ^{(Also in 43, 44)}

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Dawn, Skia and V8. #​52970
• Page resources, fetch() calls and file:// loads in renderers no longer wait for the main process to be idle when no webRequest listeners or protocol interceptors are registered. #​53143 ^{(Also in 43, 44)}

v42.10.0: electron v42.10.0

Compare Source

Release Notes for v42.10.0

Features

• Fixed contentTracing module to capture Node.js trace categories. #​52973

Fixes

• Fixed DevTools device metrics overrides persisting indefinitely when a remote debugging client disconnected without clearing them. #​53133 ^{(Also in 43, 44)}
• Fixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via webContents.setDevToolsWebContents(). #​52981 ^{(Also in 43, 44)}
• Fixed BrowserWindow.unmaximize() and restore() having no effect on Wayland when the window was maximized immediately after creation. #​53126 ^{(Also in 44)}
• Fixed Uncaught illegal access errors and possible renderer crashes after closing a same-process child window or removing an iframe with nodeIntegrationInSubFrames enabled. #​53042 ^{(Also in 44)}
• Fixed dialog.showOpenDialog/dialog.showSaveDialog opening at an unusable location on Linux when defaultPath is a bare filename without a directory. #​52980 ^{(Also in 43, 44)}
• Fixed a crash on Linux when the D-Bus session bus disconnected while the app was running, such as at logout or when dbus is restarted. #​53094 ^{(Also in 43, 44)}
• Fixed a crash on Windows when V8 posted a delayed worker task during shutdown. #​53014 ^{(Also in 43)}
• Fixed a crash with app.setLoginItemSettings if a non-UTF8 service name is used. #​52989 ^{(Also in 43, 44)}
• Fixed a possible crash (SIGABRT) during process exit when the process had loaded tls/https shortly before exiting, affecting app.exit() before ready and short-lived ELECTRON_RUN_AS_NODE / child_process.fork() scripts. #​52992 ^{(Also in 43, 44)}
• Fixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. #​53132 ^{(Also in 43, 44)}
• Fixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. #​52994 ^{(Also in 43, 44)}
• Fixed a renderer crash when a page calls SpeechRecognition.available() or SpeechRecognition.install() with processLocally. #​53016 ^{(Also in 43, 44)}
• Fixed an issue on Linux where the system theme color appeared at the top edge of frameless windows. #​52978 ^{(Also in 41, 43)}
• Fixed an issue where some values passed into requestSingleInstanceLock could result in a crash. #​52982 ^{(Also in 43, 44)}
• Fixed crash in sharedTexture module when GPU context becomes unavailable. #​52983 ^{(Also in 43, 44)}
• Fixed document title updates when using back/forward navigation using the same document without utilizing browserWindow.setTitle(). #​53099 ^{(Also in 43, 44)}
• Fixed the built-in PDF viewer not rendering documents in in-memory sessions (partitions without the persist: prefix). #​52990 ^{(Also in 43, 44)}
• Fixed titleBarOverlay.color set to rgba(0,0,0,0) failing back to default frame color. #​52976 ^{(Also in 41, 43)}
• Fixed utility process crashes at exit on Windows 11 24H2 and later. #​53091 ^{(Also in 43, 44)}

Other Changes

• Backported fixes from upstream Chromium and V8. #​53060
• Fixed a 1-in-200 chance per renderer process on Windows of scripts on the first page load being compiled without their V8 code cache. #​52988 ^{(Also in 43, 44)}
• Fixed a Windows x64 renderer performance regression introduced in 42.8.1 that made style/layout work (and app startup) noticeably slower. #​53064
• Fixed a stall of tens of milliseconds while creating the first BrowserWindow on Linux.
  • Improved the performance of file lookups inside ASAR archives and of large files served from them to the renderer.
  • Improved the performance of calls through contextBridge-exposed APIs.
  • Reduced the main-thread cost of sending large values through ipcRenderer, ipcMain handlers and webContents.send. #​53019 ^{(Also in 43, 44)}
• Improved startup time of utilityProcess.fork(), child_process.fork() / ELECTRON_RUN_AS_NODE child processes and Node.js-enabled renderers. #​53136 ^{(Also in 43, 44)}
• Linux arm64, Windows arm64 and macOS x64 builds now start the main process from the embedded Node.js startup snapshot like the other platforms, improving startup time. #​52880 ^{(Also in 43, 44)}

v42.9.3: electron v42.9.3

Compare Source

Release Notes for v42.9.3

Fixes

• Fixed a graphical glitch on Linux where thin borders appeared past the drop shadows on frameless windows when multiple windows were created. #​52772 ^{(Also in 43, 44)}
• Fixed a memory leak when creating BrowserWindows. #​52893 ^{(Also in 43, 44)}
• Fixed an issue on Windows where the app process could fail to exit after app.quit() while a shell.openExternal() or shell.openPath() call was still waiting on a system "Open with" dialog. #​52900 ^{(Also in 41, 43, 44)}
• Fixed custom V8 snapshots (electron-mksnapshot, and the loadBrowserProcessSpecificV8Snapshot fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. #​52876 ^{(Also in 43, 44)}

Other Changes

• Backported fix for 5246282. #​52869
• Reduced idle main-process CPU wakeups caused by Node.js timers and immediates. #​52907 ^{(Also in 43, 44)}

v42.9.2: electron v42.9.2

Compare Source

Release Notes for v42.9.2

Fixes

• Fixed registerFileProtocol and registerHttpProtocol returning readable responses to cross-origin no-cors fetches; they now return opaque responses like protocol.handle. #​52855 ^{(Also in 41, 43, 44)}
• Fixed a WebContentsView staying blank after its window is shown when setBackgroundThrottling(false) was called while the window was hidden. #​52865 ^{(Also in 43, 44)}
• Fixed a crash when resolving a path inside a malformed ASAR archive that contains cyclic link entries. #​52859 ^{(Also in 43, 44)}
• Fixed downloading files that live inside an asar archive, including saving a packed PDF from the built-in PDF viewer. #​52828 ^{(Also in 43, 44)}
• Fixed windows opened by a sandboxed top-level frame not inheriting the opener's sandbox restrictions. #​52850 ^{(Also in 41, 43, 44)}
• <webview> and window.open now inherit nodeIntegrationInWorker from the embedder, consistent with the other Node and sandbox preferences. #​52831 ^{(Also in 41, 43, 44)}

Other Changes

• Backported fixes for 5422242, 5420251. #​52843

v42.9.1: electron v42.9.1

Compare Source

Release Notes for v42.9.1

Fixes

• Fixed a crash in systemPreferences.promptTouchID(reason) when an invalid reason value is passed. #​52780 ^{(Also in 43, 44)}
• Fixed a potential crash in contentTracing.stopRecording() when the trace file could not be written to the requested path. #​52796 ^{(Also in 43, 44)}

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Skia and V8. #​52706
• Backported fixes from upstream Chromium and V8. #​52785
• Fixed an issue on macOS where a page's first use of speechSynthesis could block the main process for several hundred milliseconds. #​52813

v42.9.0: electron v42.9.0

Compare Source

Release Notes for v42.9.0

Features

• Added webFrameMain.printToPDF() to allow printing individual frames to PDF from the main process. #​52626 ^{(Also in 43, 44)}

Fixes

• Fixed a browser process crash that could occur during Windows logoff, shutdown, or restart. #​52621 ^{(Also in 43, 44)}
• Fixed a crash report when the X server or Wayland compositor exits while an app is running. #​52686 ^{(Also in 43, 44)}
• Fixed a crash when quickly switching menus while the app is under heavy load. #​52671 ^{(Also in 43, 44)}
• Fixed a potential crash when notifying user activation before the primary main frame was live. #​52699 ^{(Also in 43, 44)}
• Fixed an issue where a JavaScript out-of-memory crash could be reported from inside the crash-key handler instead of at the out-of-memory site. #​52723 ^{(Also in 43, 44)}

Other Changes

• Backported fixes from upstream ANGLE, Chromium and V8. #​52664
• No user-facing change; semver/none. #​52733

v42.8.1: electron v42.8.1

Compare Source

Release Notes for v42.8.1

Fixes

• Fixed BrowserWindow size corruption on Windows when created with explicit x/y on a secondary monitor whose DPI differs from the primary. #​52500 ^{(Also in 43, 44)}
• Fixed Dirent.parentPath being undefined for fs.readdir, fs.readdirSync, fs.glob, and fs.globSync with withFileTypes: true inside asar archives. #​52506 ^{(Also in 43, 44)}
• Fixed a UAF with protocol.registerStreamProtocol when an error is emitted during a read. #​52516 ^{(Also in 41, 43, 44)}
• Fixed a crash that could occur when closing DevTools while the host WebContents was being destroyed. #​52511 ^{(Also in 41, 43, 44)}

Other Changes

• Fixed a renderer crash when disabling device emulation while the main frame was not local. #​52601
• Improved the error message when an asar integrity check fails to name the entry that failed. #​52623 ^{(Also in 43, 44)}
• Updated Node.js to v24.18.1. #​52551

v42.8.0: electron v42.8.0

Compare Source

Release Notes for v42.8.0

Features

• Added available to process.getSystemMemoryInfo() on Linux, exposing proc/meminfo MemAvailable. #​52378 ^{(Also in 43, 44)}

Fixes

• Fixed a window being marked hidden and background-throttled on macOS when covered by a transparent or click-through window. #​52390 ^{(Also in 43, 44)}
• Fixed an issue where loading ICO files from ASAR archives on Windows left temporary icon files behind. #​52479 ^{(Also in 43, 44)}

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.