chore: upgrade electron to v44 (drops macOS 12 support)

[paustint]

Electron 43.4.0 → 44.1.1. Split out from #2046 because it carries a user-facing support decision.

Chromium 150 → 152, Node 24.17 → 24.19, V8 15.0 → 15.2.

• WAIT FOR chore: report desktop host OS, arch and runtime on every server request #2048 to merge in and be live for a while so we can see if there would be negative impact to drop macOS 12 Monterey

⚠️ This drops macOS 12 Monterey

Electron 44 requires macOS 13+. Packaged builds from this branch declare LSMinimumSystemVersion 13.0 (verified on both the x64 and arm64 slices), so macOS will refuse to launch the app on Monterey.

Worth deciding before merging: electron-updater doesn't gate downloads on OS version, so a Monterey user on 4.14.0 would download an update they then can't launch. Desktop users skew toward locked-down and VDI environments where OS upgrades aren't self-service. If install telemetry shows a meaningful Monterey population, we may want a staged rollout or an update gate first.

Not blocking otherwise — I have no visibility into those numbers, so flagging rather than deciding.

Code changes

Electron 44 rearchitects the clipboard module toward the W3C shape: main-process methods return Promises, the module is no longer exposed to renderers, and narrow helpers (readBookmark/writeHTML/readImage) are gone.

Exactly one site is affected — the context menu's Copy Selection handler in browser.ts. clipboard.writeText is now Promise<void>, so the handler logs a failed write instead of leaving an unhandled rejection. Nothing waits on the copy, so it stays fire-and-forget.

The renderer never imported the clipboard module (it uses copy-to-clipboard and navigator.clipboard), so the renderer removal doesn't apply.

Everything else audited and clear

• net.request Sec-Fetch validation — net.fetch is called in protocol.service.ts and api.service.ts, always with a freshly constructed URL and never forwarding a Sec-Fetch-Dest header, so the new frame-type rejection doesn't apply.
• Dropped ia32 / armv7l binaries — never built. electron-builder.config.js produces macOS dmg/zip for x64 + arm64 and Windows nsis/portable for x64 only.
• Login item settings (openAsHidden, wasOpenedAsHidden, restoreState removed on macOS) — not used.
• select-client-certificate may now pass a null webContents — not handled anywhere.
• ANGLE now statically linked — no custom ANGLE usage.

Verification

Full packaged macOS build (electron-builder build --mac, both slices), which exercises the real release path:

afterPack dependency verification passed: 61 packaged modules, dependency closure complete
packaged smoke test: launching .../Jetstream.app/Contents/MacOS/Jetstream
  electron: 44.1.1, chrome: 152.0.7977.65, node: 24.19.0, v8: 15.2.124.18-electron.0
[SMOKE TEST] renderer DOM ready (+9.0s)
[SMOKE TEST] PASSED - main process booted and renderer finished loading (+12.9s)
packaged smoke test: passed

That covers the failure mode from 4.12.0 — the asar dependency closure is complete and the app boots from app.asar rather than the workspace node_modules. Typecheck of jetstream-desktop, jetstream-desktop-client and jetstream-desktop-e2e is clean, as are oxlint and oxfmt --check.

Still needs a Windows packaged build and hands-on testing of the Copy Selection menu item, neither of which I can do here.

Note on version

Pinned to 44.1.1 rather than 44.2.0 — 44.2.0 is still inside the minimumReleaseAge window (published Sept 4, eligible Sept 7).

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	electron@​43.4.0 ⏵ 44.1.1			+1

View full report

[Copilot]

🔵 Needs a closer look

Major Electron runtime upgrade with an OS-support drop warrants manual packaged-build verification (especially Windows) and hands-on functional testing before merging.

Pull request overview

Upgrades the Jetstream desktop app’s Electron runtime to v44.x (Electron 43.4.0 → 44.1.1), which also drops macOS 12 support and requires the one impacted clipboard call site to handle a now-promise-based API.

Changes:

• Bump electron dependency to ^44.1.1 (lockfile + manifest).
• Update the desktop context menu “Copy Selection” handler to attach a rejection handler to clipboard.writeText(...) (Electron 44 promise-based clipboard API).

File summaries

File	Description
pnpm-lock.yaml	Updates the resolved Electron package/snapshot to 44.1.1.
package.json	Bumps the Electron dependency range to ^44.1.1.
apps/jetstream-desktop/src/browser/browser.ts	Adjusts “Copy Selection” to handle the promise-based clipboard API and log failures.

Review details

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

• Files reviewed: 2/3 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🟡 Changes recommended

The Electron 44 upgrade drops macOS 12 but the current auto-update path appears to have no OS-version gating, risking Monterey users downloading an update they cannot launch.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

• Files reviewed: 2/3 changed files
• Comments generated: 2
• Review effort level: Lite