dependabot[bot] opened a new pull request, #290: URL: https://github.com/apache/cordova-electron/pull/290
Bumps [electron](https://github.com/electron/electron) from 29.1.0 to 35.7.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/electron/electron/releases";>electron's releases</a>.</em></p> <blockquote> <h2>electron v35.7.5</h2> <h1>Release Notes for v35.7.5</h1> <blockquote> <p>[!WARNING] Electron 35.x.y has reached end-of-support as per the project's <a href="https://www.electronjs.org/docs/latest/tutorial/electron-timelines#version-support-policy";>support policy</a>. Developers and applications are encouraged to upgrade to a newer version of Electron.</p> </blockquote> <h2>Fixes</h2> <ul> <li>Fixed an issue where <code>shell.openPath</code> was not non-blocking as expected. <a href="https://redirect.github.com/electron/electron/pull/48079";>#48079</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/48088";>36</a>, <a href="https://redirect.github.com/electron/electron/pull/48088";>37</a>, <a href="https://redirect.github.com/electron/electron/pull/48088";>38</a>)<!-- raw HTML omitted --></li> </ul> <h2>electron v35.7.4</h2> <h1>Release Notes for v35.7.4</h1> <ul> <li>Fix ffmpeg generation on Windows non-x64</li> </ul> <h2>electron v35.7.2</h2> <h1>Release Notes for v35.7.2</h1> <h2>Fixes</h2> <ul> <li>Fixed an issue where printing PDFs with <code>webContents.print({ silent: true })</code> would fail. <a href="https://redirect.github.com/electron/electron/pull/47645";>#47645</a> <!-- raw HTML omitted -->(Also in <a href="https://redirect.github.com/electron/electron/pull/47624";>36</a>, <a href="https://redirect.github.com/electron/electron/pull/47397";>37</a>)<!-- raw HTML omitted --></li> </ul> <h2>electron v35.7.0</h2> <h1>Release Notes for v35.7.0</h1> <h2>Other Changes</h2> <ul> <li>Updated Node.js to v22.16.0. <a href="https://redirect.github.com/electron/electron/pull/47213";>#47213</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/electron/electron/blob/main/docs/breaking-changes.md";>electron's changelog</a>.</em></p> <blockquote> <h1>Breaking Changes</h1> <p>Breaking changes will be documented here, and deprecation warnings added to JS code where possible, at least <a href="https://github.com/electron/electron/blob/main/docs/tutorial/electron-versioning.md#semver";>one major version</a> before the change is made.</p> <h3>Types of Breaking Changes</h3> <p>This document uses the following convention to categorize breaking changes:</p> <ul> <li><strong>API Changed:</strong> An API was changed in such a way that code that has not been updated is guaranteed to throw an exception.</li> <li><strong>Behavior Changed:</strong> The behavior of Electron has changed, but not in such a way that an exception will necessarily be thrown.</li> <li><strong>Default Changed:</strong> Code depending on the old default may break, not necessarily throwing an exception. The old behavior can be restored by explicitly specifying the value.</li> <li><strong>Deprecated:</strong> An API was marked as deprecated. The API will continue to function, but will emit a deprecation warning, and will be removed in a future release.</li> <li><strong>Removed:</strong> An API or feature was removed, and is no longer supported by Electron.</li> </ul> <h2>Planned Breaking API Changes (40.0)</h2> <h3>Deprecated: <code>clipboard</code> API access from renderer processes</h3> <p>Using the <code>clipboard</code> API directly in the renderer process is deprecated. If you want to call this API from a renderer process, place the API call in your preload script and expose it using the <a href="https://www.electronjs.org/docs/latest/api/context-bridge";>contextBridge</a> API.</p> <h3>Behavior Changed: MacOS dSYM files now compressed with tar.xz</h3> <p>Debug symbols for MacOS (dSYM) now use xz compression in order to handle larger file sizes. <code>dsym.zip</code> files are now <code>dsym.tar.xz</code> files. End users using debug symbols may need to update their zip utilities.</p> <h2>Planned Breaking API Changes (39.0)</h2> <h3>Deprecated: <code>--host-rules</code> command line switch</h3> <p>Chromium is deprecating the <code>--host-rules</code> switch.</p> <p>You should use <code>--host-resolver-rules</code> instead.</p> <h3>Behavior Changed: window.open popups are always resizable</h3> <p>Per current <a href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#dom-open-dev";>WHATWG spec</a>, the <code>window.open</code> API will now always create a resizable popup window.</p> <p>To restore previous behavior:</p> <pre lang="js"><code>webContents.setWindowOpenHandler((details) => { return { action: 'allow', overrideBrowserWindowOptions: { resizable: details.features.includes('resizable=yes') } } }) </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/electron/electron/commit/86d839a881b6d04d9bc0e81c9b8cc3ad2d91f1df";><code>86d839a</code></a> build: correct CHECK syntax (<a href="https://redirect.github.com/electron/electron/issues/48106";>#48106</a>)</li> <li><a href="https://github.com/electron/electron/commit/5be0be7f0418e0a388cf84ad34ee475dbda76266";><code>5be0be7</code></a> fix: ensure snapshot is valid (<a href="https://redirect.github.com/electron/electron/issues/48105";>#48105</a>)</li> <li><a href="https://github.com/electron/electron/commit/df232d1269983329d7d7e27db8ab00e9025ca279";><code>df232d1</code></a> ci: cleanup use new arc cluster (<a href="https://redirect.github.com/electron/electron/issues/48007";>#48007</a>)</li> <li><a href="https://github.com/electron/electron/commit/ab51554bdf4ca4b25638af2d6cb86753d144a86e";><code>ab51554</code></a> ci: fixup mac runner hang (<a href="https://redirect.github.com/electron/electron/issues/47992";>#47992</a>)</li> <li><a href="https://github.com/electron/electron/commit/203abdd5a9735425dc3c16908982f81f93b097b5";><code>203abdd</code></a> ci: use new arc cluster (<a href="https://redirect.github.com/electron/electron/issues/47913";>#47913</a>)</li> <li><a href="https://github.com/electron/electron/commit/ea17e8339f2af31abe116eed07c4e8bcf5080213";><code>ea17e83</code></a> build: fix ffmpeg generation on Windows non-x64 (<a href="https://redirect.github.com/electron/electron/issues/47845";>#47845</a>)</li> <li><a href="https://github.com/electron/electron/commit/7b5d41181969cdb67b1638b9d518ee792a41485b";><code>7b5d411</code></a> build(dev-deps): drop unused <code>@types/webpack</code> dep (<a href="https://redirect.github.com/electron/electron/issues/47806";>#47806</a>)</li> <li><a href="https://github.com/electron/electron/commit/def6203bb9f9f6ef5fd1d62c025c99368d9c9642";><code>def6203</code></a> build: deep update brace-expansion to resolve an audit alert (<a href="https://redirect.github.com/electron/electron/issues/47719";>#47719</a>)</li> <li><a href="https://github.com/electron/electron/commit/28d8ed037c0969769cd1d618b1f668e4272e5118";><code>28d8ed0</code></a> test: cleanup RenderFrame lifespan tests (<a href="https://redirect.github.com/electron/electron/issues/47795";>#47795</a>)</li> <li><a href="https://github.com/electron/electron/commit/ee8942dcbf386caff9275c27f902af24a0232bee";><code>ee8942d</code></a> build: drop eslint-plugin-unicorn (<a href="https://redirect.github.com/electron/electron/issues/47690";>#47690</a>)</li> <li>Additional commits viewable in <a href="https://github.com/electron/electron/compare/v29.1.0...v35.7.5";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/cordova-electron/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
