Skip to content

Bump electron from 39.8.7 to 39.8.10 - #1597

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/electron-39.8.10
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/electron-39.8.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps electron from 39.8.7 to 39.8.10.

Release notes

Sourced from electron's releases.

electron v39.8.10

Release Notes for v39.8.10

[!WARNING] Electron 39.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.

Fixes

  • Ensured cross-origin fetch() and XHR are blocked for custom protocols registered with supportFetchAPI: true unless corsEnabled: true is also set; cross-origin mode: 'no-cors' requests now receive an opaque response. #51272 (Also in 40, 41, 42)
  • Fixed an issue where the Squirrel.Mac installer could resolve the target bundle path to different locations at different stages of an install. #50766 (Also in 42)

Other Changes

  • Backported a fix for route_id validation in the GPU command buffer. #51327
  • Backported security fixes for 493319454, 494158331, 493234757, 492736100, 493413432, 492668885, 496281816. #51257
  • Backported several fixes in Skia, ANGLE, and WebRTC from upstream. #51266
Commits
  • d7c42eb chore: backport removal of private macOS APIs (#51502)
  • c76d48c build: replace spec dep fork with transitive resolution (#51490)
  • 3ff23c5 fix: respect iframe sandbox flags on the OpenURL navigation path (#51437)
  • 01faabf fix: resolve target bundle path once at start of install (#50766)
  • 8287d59 build(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 (#51409)
  • a8a79ea ci: backport secondary siso patch (#51390)
  • 593607e chore: cherry-pick 1 change from chromium (#51327)
  • aa7791f build: restrict npm tarball contents to an explicit allowlist (#51307)
  • 5392e9a fix: ensure corsEnabled: false protocol handlers do not work across protocols...
  • 2c24640 fix: validate OSR frame geometry against shared-memory mapping size (39-x-y) ...
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Changes that require dependency file updates javascript Pull requests that update Javascript code patch Changes in this PR requires a patch release labels Aug 7, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 7, 2026 15:00
@dependabot dependabot Bot added patch Changes in this PR requires a patch release dependencies Changes that require dependency file updates javascript Pull requests that update Javascript code labels Aug 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/electron-39.8.10 branch 2 times, most recently from 6729a57 to 118fcf2 Compare August 26, 2026 07:52
Bumps [electron](https://github.com/electron/electron) from 39.8.7 to 39.8.10.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v39.8.7...v39.8.10)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 39.8.10
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/electron-39.8.10 branch from 118fcf2 to 7b58b08 Compare September 3, 2026 11:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Changes that require dependency file updates javascript Pull requests that update Javascript code patch Changes in this PR requires a patch release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants