Skip to content

chore(deps): bump electron from 43.4.0 to 44.5.0 - #382

Merged
dsanders11 merged 3 commits into
mainfrom
dependabot/npm_and_yarn/electron-43.7.5
Sep 30, 2026
Merged

dsanders11 merged 3 commits into
mainfrom
dependabot/npm_and_yarn/electron-43.7.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •

Copy link
Copy Markdown
Contributor

Requested by Erick · project thread

Before: Dependabot opened this to bump the dev electron dependency to 43.7.5, but it dropped the direct electron entry from yarn.lock, so yarn install --immutable failed in every Test job.

After: the dev electron dependency is ^44.5.0 (latest Electron 44) and yarn.lock is regenerated to match.

How: bumped the range in package.json and regenerated the lockfile with the repo's Yarn 4.10.3. The versioned electron36–electron43 test aliases and the CI matrix are unchanged. Lint and tsc -b tsconfig.types.json pass against Electron 44 types.

Originally opened by Dependabot; release notes: https://github.com/electron/electron/releases

🤖 Generated with Claude Code

https://claude.ai/code/session_01CB8SkiJ5o1pgQqtFCiRd2e

Bumps [electron](https://github.com/electron/electron) from 43.4.0 to 43.7.5.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v43.4.0...v43.7.5)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 43.7.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 29, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 29, 2026 18:30
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 29, 2026
Dependabot dropped the direct electron entry from yarn.lock, so
yarn install --immutable failed in CI. Bump the range in package.json
and regenerate the lockfile.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CB8SkiJ5o1pgQqtFCiRd2e
@socket-security

socket-security Bot commented Sep 29, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedelectron@​44.5.09710010098100

View full report

@socket-security

socket-security Bot commented Sep 29, 2026 •

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

  • electron@44.5.0

View full report

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CB8SkiJ5o1pgQqtFCiRd2e
@erickzhao erickzhao changed the title chore(deps): bump electron from 43.4.0 to 43.7.5 chore(deps): bump electron from 43.4.0 to 44.5.0 Sep 29, 2026
@erickzhao

Copy link
Copy Markdown
Member

@SocketSecurity ignore npm/electron@44.5.0

@dsanders11
dsanders11 merged commit 64f5b11 into main Sep 30, 2026
31 checks passed
@dsanders11
dsanders11 deleted the dependabot/npm_and_yarn/electron-43.7.5 branch September 30, 2026 06:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants