Skip to content

chore(deps-dev): bump electron from 41.10.3 to 41.10.6 in /desktop in the npm_and_yarn group across 1 directory - #769

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/desktop/npm_and_yarn-07b8ff3f02
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/desktop/npm_and_yarn-07b8ff3f02

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the /desktop directory: electron.

Updates electron from 41.10.3 to 41.10.6

Release notes

Sourced from electron's releases.

electron v41.10.6

Release Notes for v41.10.6

Fixes

  • Fixed registerFileProtocol and registerHttpProtocol returning readable responses to cross-origin no-cors fetches; they now return opaque responses like protocol.handle. #52854 (Also in 42, 43, 44)
  • Fixed an issue on Windows where the app process could fail to exit after app.quit() while a shell.openExternal() or shell.openPath() call was still waiting on a system "Open with" dialog. #52899 (Also in 43, 44)
  • Fixed windows opened by a sandboxed top-level frame not inheriting the opener's sandbox restrictions. #52849 (Also in 42, 43, 44)
  • <webview> and window.open now inherit nodeIntegrationInWorker from the embedder, consistent with the other Node and sandbox preferences. #52829 (Also in 42, 43, 44)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium and Skia. #52707
  • Backported fixes from upstream Chromium and V8. #52775

electron v41.10.5

Release Notes for v41.10.5

Fixes

  • Fixed an issue where the Squirrel.Mac installer could resolve the target bundle path to different locations at different stages of an install. #50764 (Also in 39, 42)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, Skia and V8. #52702
  • No user-facing change; semver/none. #52734

electron v41.10.4

Release Notes for v41.10.4

Fixes

  • Fixed a UAF with protocol.registerStreamProtocol when an error is emitted during a read. #52513 (Also in 42, 43, 44)
  • Fixed a crash that could occur when closing DevTools while the host WebContents was being destroyed. #52512 (Also in 42, 43, 44)
  • Windows opened from links inside a sandboxed iframe now inherit the iframe's sandbox restrictions unless allow-popups-to-escape-sandbox is set. #52486 (Also in 42, 43)
Commits
  • 832e70a fix: don't let pending shell operations block app exit on Windows (#52899)
  • b8d49a4 chore: cherry-pick 39 changes from angle, chromium and skia (#52707)
  • 29fc130 fix: inherit sandbox flags in windows opened by a sandboxed top-level frame (...
  • c595b05 fix: return opaque responses from file and http protocol handlers for cross-o...
  • 6462a2e fix: inherit nodeIntegrationInWorker from the embedder for <webview> and wind...
  • d9c6215 chore: cherry-pick 4 changes from chromium and v8 (#52775)
  • a46a5af build: run the Windows builds on the VM runners (41-x-y) (#52770)
  • 5bff19c build: add release-assets.json expected-asset manifest (41-x-y) (#52734)
  • 15e2928 fix: resolve target bundle path once at start of install (#50764)
  • 2ba8050 chore: cherry-pick 33 changes from angle, chromium, skia and v8 (#52702)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the /desktop directory: [electron](https://github.com/electron/electron).


Updates `electron` from 41.10.3 to 41.10.6
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v41.10.3...v41.10.6)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 41.10.6
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 29, 2026
@github-actions

Copy link
Copy Markdown

❌ CI Test Results

Overall Status: 2 test suite(s) failed

Test Results: 3/9 passed

Test Suites:

  • ✅ Smoke Tests: success
  • ✅ Unit Tests: success
  • ⏸️ Integration Tests: cancelled
  • ✅ Security Tests: success
  • ❌ Code Quality: failure
  • ❌ Frontend Assets: failure
  • ⏭️ E2E, CSP & Accessibility: skipped
  • ⏭️ Docker Build: skipped
  • ⏭️ Full Test Suite: skipped

Commit: 865bfe1
Workflow: 36632334608

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants