Repository navigation
chore: cherry-pick 8 changes from angle, chromium, skia, v8 and webrtc - #54657
Merged
Merged
Conversation
* e80dc914f6c6 from angle * afea99f8eacc from skia * 4efd0228fbc5 from v8 * fcaf4fc064ae from webrtc * d4413d7a101f from chromium * 475d243839f1 from chromium * 3636efe6fe67 from chromium * aee7423367e1 from chromium Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018khRcY1YYaYT95VfQQiaGj
…ecks Ports chromium/src bc5a321c6196 into Electron's copy of MaybeIsLocalUNCPath(), so \\wsl.localhost\... and \\wsl.localhost.\... paths are treated like other local UNC paths. Refs https://chromium-review.googlesource.com/c/chromium/src/+/8341352 (upstream commit bc5a321c6196db0a2de36f1fe3e4fab977b10007) Upstream: https://chromium-review.googlesource.com/c/chromium/src/+/8341352 Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018khRcY1YYaYT95VfQQiaGj
claude
Bot
force-pushed
the
security-backport/44-x-y/37032065351
branch
from
October 6, 2026 15:09
b8fb8c9 to
87931b2
Compare
MarshallOfSound
approved these changes
Oct 6, 2026
MarshallOfSound
marked this pull request as ready for review
October 6, 2026 16:28
MarshallOfSound
enabled auto-merge (squash)
October 6, 2026 16:28
jkleinsc
approved these changes
Oct 6, 2026
|
Release Notes Persisted
|
1 of 6 tasks
Dot-Ami
added a commit
to Dot-Ami/dotami
that referenced
this pull request
Oct 12, 2026
…me's engine (#148) The desktop app moves from Electron 44.5.1 to 44.7.0, which picks up 55 fixes copied from Chrome's engine; the one thing a person may notice is that, on a computer set to Vancouver time, the day DotAmi counts as "today" shifts one hour earlier from 2026-11-01. ## What changes - **Electron 44.5.1 to 44.7.0.** `package.json` goes from `^44.5.1` to `^44.7.0`; `package-lock.json` pins exactly 44.7.0 (a 4-line change, nothing else in the dependency tree moved). Chromium (152.0.7977.130) and Node (24.21.0) are the same version numbers as before. - **55 backported fixes, not 47.** Electron 44.7.0 carries two lists of fixes copied from Chrome: [47 in electron/electron#54666](electron/electron#54666) and [8 in electron/electron#54657](electron/electron#54657). Electron calls them "backported fixes", not labelled security fixes. By its title, one is a fix for memory used after being freed ("GL: Fix UAF in ContextGL with depth init PBOs"), and a few more are about objects that could be used after they went away. - **Time-zone data moves, and "today" moves with it.** [Electron 44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0) updated its time-zone data to 2026d, including British Columbia's move to permanent UTC-7 ([#54623](electron/electron#54623)). DotAmi works out the person's own day with that data (the line for refusing a future-dated expense or figure, and the days shown for agreed or retracted items). In the desktop app that code runs inside Electron, so from 2026-11-01, on a computer set to Vancouver time, the day changes one hour earlier than before. That follows the new rule, so it is an improvement, but it is a visible change and is now written down. - **Docs.** CHANGELOG [Unreleased] gets a "Security" section (what was read in the release notes on 2026-10-11, the 55 fixes, the time-zone entry with its before and after). `docs/privacy-log.md` [Unreleased] gets a "Packages that ship" line: nothing DotAmi keeps, sends or asks changes. The task list gets a ticked line. - **New desktop test** in `e2e-desktop/desktop.spec.ts`: "the person's day follows the time-zone data Electron ships". It formats three fixed moments the way DotAmi's day-finder does, in the main process (the same program that runs the server) and in DotAmi's window. ## Receipts Three commits on top of main (7232937): f0b4a9c (the version move and docs), d33d259 (the time-zone test), b2b2a41 (the docs fix that came out of review). Head b2b2a41. Each has a sign-off and the trailer, and `git cat-file commit HEAD | tr -cd '\r' | wc -c` prints 0. | Gate | Exit | Result | |---|---|---| | `npm ci`, `node scripts/keep-gypfile.mjs --check`, `npm run prisma:generate` (before the change) | 0 | Installed; `npm ls electron` printed `electron@44.5.1` | | `npm install --save-dev electron@44.7.0`, then `keep-gypfile.mjs`, then `--check` | 0 | gypfile flag restored, check passes; a second `npm ci` left `package.json` and the lockfile byte-identical | | `npm run ci:quality` (first run) | 1 | Typecheck and lint clean; 2805 of 2808 passed. The 3 failures were the known 5-second timeout under load (`tests/figures.spec.ts` "accepts exactly 500", then "all or nothing" which saw the 505 rows that timed-out test left, and one scan test in `tests/privacy-inventory.spec.ts`). Those two files alone: exit 0, 465 of 465 | | `npm run ci:quality` (on f0b4a9c) | 1 | 2807 of 2808; one 5-second timeout in `tests/third-party-notices.spec.ts`. That file alone: exit 0, 21 of 21 | | `npm run ci:quality` (on the final code) | 0 | Prisma generate, typecheck, lint (no warnings), 85 files / 2808 tests, build all pass | | `npm run test:desktop` (shared lock, first pass on 44.7.0) | 0 | 35 passed (11.0 min), including the test where the graphics chip decodes HEIC, and every encryption, backup and lost-key path | | `npm run test:desktop` (shared lock, final code) | 0 | 36 passed (10.4 min). The log opens with `electron 44.7.0`, chrome 152.0.7977.130, node 24.21.0, tz 2026d, written from the installed binary before the suite ran | | `npm run desktop:package` (shared lock) | 0 | Packaged in about 1.5 min with `electron=44.7.0`; `LICENSE.electron.txt` and `LICENSES.chromium.html` are in the output. I did not run the desktop tests against the packaged app locally; CI does | **Tests first.** The version move itself adds no rule and no behaviour, so there is no test for it beyond the existing desktop suite (35 of 35 on 44.7.0). The one visible change, the time-zone shift, got its test first (d33d259, before the docs fix b2b2a41). **The BEFORE proof** (same fixed moments, formatted in America/Vancouver, run on each Electron binary): | Electron | tz data | 2026-11-02 07:30 UTC | 2026-12-01 07:30 UTC | 2027-01-15 07:30 UTC | |---|---|---|---|---| | 44.5.1 | 2025c | 2026-11-01, 11:30 p.m. GMT-8 | 2026-11-30, 11:30 p.m. GMT-8 | 2027-01-14, 11:30 p.m. GMT-8 | | 44.7.0 | 2026d | 2026-11-02, 12:30 a.m. GMT-7 | 2026-12-01, 12:30 a.m. GMT-7 | 2027-01-15, 12:30 a.m. GMT-7 | Before the change on main, `npm ls electron` printed `electron@44.5.1` and the lockfile pinned 44.5.1. After, it prints `electron@44.7.0`. `npm audit` lists the same 13 old problems (8 moderate, 5 high) in the same 13 build-tool packages before and after, so this change adds none and fixes none. **Control** (break the rule, show the test fails, restore from git, `git diff --quiet`): | Rule broken | Test | Result | |---|---|---| | Electron put back to 44.5.1 (`npm install electron@44.5.1`) | "the person's day follows the time-zone data Electron ships" | exit 1: "main process, time-zone data 2025c", expected 2026-11-02 and 2027-01-15, received 2026-11-01 and 2027-01-14. Restored with `git checkout -- package.json package-lock.json`, `npm install`, `keep-gypfile.mjs`; `git diff --quiet` exit 0; the binary is back on 44.7.0 and the test passes on it (exit 0, 12.3 s) | ## Review round Fixed: - **Must-fix:** the first CHANGELOG draft said nothing in the 44.6.0 or 44.7.0 notes touches what DotAmi uses. That was false: 44.6.0 updates the time-zone data DotAmi's dates depend on. Reproduced first on both binaries (table above), then fixed: the false sentence is replaced with an entry that cites #54623 and the 44.6.0 notes, says what moves, and gives the before and after. The new test and its control are the proof. - **Wording:** "several of them fixes for memory used after being freed" was stronger than the sources say; only one title names it outright. The CHANGELOG now says that. - **Receipt:** the first desktop log did not print the Electron version. The final log opens with it. The first commit's message (f0b4a9c) still has the old "several" wording; I did not rewrite history, and the follow-up commit message records the correction. ## Design calls you can reverse - `package.json` keeps the caret (`^44.7.0`), matching how the repo already wrote Electron. The lockfile pins exactly 44.7.0, so `npm ci`, CI and the release build all use 44.7.0. - The fixes go under CHANGELOG "Security" (a Keep a Changelog heading this file already used in 0.3.0), using Electron's own wording that they are backported fixes. - No test pins the Electron version. That would be a new safety layer for a change with no new behaviour. - `lib/privacy/inventory.ts` lists no Electron version, so it is unchanged. `THIRD-PARTY-NOTICES.txt` is not in git (`desktop/notices.mjs` writes it at build time from the installed package; the desktop build's copy reads `Version: 44.7.0`). `docs/connectors/heic-decoder-review.md` keeps its dated 44.5.1 probe output because it records what was measured then. ## Questions for the maintainer - The planning notes say "47 fixes". The true count in 44.7.0 is 55 (47 + 8, linked above). Should the planning notes' wording be corrected to 55? The repo text already says 55. ## Risks - A new Electron can change behaviour the tests do not cover. The 44.6.0 and 44.7.0 release notes were read on 2026-10-11: in 44.7.0 the autoUpdater change is Mac-only (DotAmi updates through electron-updater on Windows) and the `net.fetch` header fix is for a call DotAmi does not make (`desktop/main.mjs` imports no Electron `net`; its `net` is Node's). In 44.6.0, `protocol.registerSource` is new and experimental, and DotAmi does not use it. Neither set of notes mentions safeStorage, webContents or HEIC/WebCodecs, and the graphics-chip HEVC test passed on 44.7.0. - Anything the browser engine requests on its own is still marked "not checked" in the privacy log; this change does not check it either. - The time-zone shift is real for people on Vancouver time from 2026-11-01. It is the correct behaviour under the new data, but "today" will flip an hour earlier than they are used to. - electron-builder 26.15.3 is already the newest on npm and declares no Electron range; it packaged on 44.7.0 without trouble. ## NOT done - No release or tag. Installed copies get this only with the next release. - The desktop tests were not run locally against the packaged `DotAmi.exe` (`DOTAMI_DESKTOP_EXE`); CI runs that on Windows. - No change to what DotAmi keeps, sends, ships or asks, so no inventory change. Held for the maintainer's merge word. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Signed-off-by: Dot-Ami <195960890+Dot-Ami@users.noreply.github.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
4 tasks done
7 tasks done
renovate Bot
added a commit
to cigaleapp/cigale
that referenced
this pull request
Oct 19, 2026
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0) ##### Release Notes for v44.7.0 ##### Features - The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204) ##### Fixes - Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672) ##### Other Changes - Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666) - Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657) ##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0) ### Release Notes for v44.6.0 #### Features - Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup> #### Fixes - Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596) - Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup> - Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup> - Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623) #### Documentation - Documentation changes: [#54589](electron/electron#54589)
renovate Bot
added a commit
to cigaleapp/cigale
that referenced
this pull request
Oct 19, 2026
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0) ##### Release Notes for v44.7.0 ##### Features - The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204) ##### Fixes - Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672) ##### Other Changes - Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666) - Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657) ##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0) ### Release Notes for v44.6.0 #### Features - Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup> #### Fixes - Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596) - Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup> - Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup> - Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623) #### Documentation - Documentation changes: [#54589](electron/electron#54589)
renovate Bot
added a commit
to cigaleapp/cigale
that referenced
this pull request
Oct 25, 2026
##### [v44.9.0](https://github.com/electron/electron/releases/tag/v44.9.0) ### Release Notes for v44.9.0 #### Features - Added app shims on macOS to show windows under another app's Dock icon. [#55073](electron/electron#55073) <sup>(Also in [45](https://github.com/electron/electron/pull/55072))</sup> #### Fixes - Fixed link-opened windows not using the opener's session and `webPreferences`. [#55048](electron/electron#55048) <sup>(Also in [42](electron/electron#55050), [43](electron/electron#55049), [45](https://github.com/electron/electron/pull/55051))</sup> - Fixed `setCertificateVerifyProc` occasionally not being applied to a request issued concurrently with the first request to a host. [#55046](electron/electron#55046) <sup>(Also in [42](electron/electron#55054), [43](electron/electron#55047), [45](https://github.com/electron/electron/pull/55045))</sup> ##### [v44.8.0](https://github.com/electron/electron/releases/tag/v44.8.0) ### Release Notes for v44.8.0 #### Features - Added support for `Notification` action buttons on Linux. [#54890](electron/electron#54890) <sup>(Also in [45](https://github.com/electron/electron/pull/54889))</sup> #### Fixes - Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. [#54987](electron/electron#54987) - Fixed `net.fetch` and `session.fetch` failing permanently with `net::ERR_FAILED` after the Network Service process restarts. [#54909](electron/electron#54909) <sup>(Also in [42](electron/electron#54925), [43](electron/electron#54908), [45](https://github.com/electron/electron/pull/54910))</sup> - Fixed `utilityProcess` dropping messages posted with `process.parentPort.postMessage()` right before the process exits. [#54960](electron/electron#54960) <sup>(Also in [42](electron/electron#55000), [43](electron/electron#54962), [45](https://github.com/electron/electron/pull/54956))</sup> - Fixed `win.isFullScreen()` being stale in fullscreen events on Windows. [#55009](electron/electron#55009) <sup>(Also in [45](https://github.com/electron/electron/pull/55008))</sup> #### Other Changes - Backported fixes from upstream Chromium and V8. [#55034](electron/electron#55034) - Updated Chromium to 152.0.7977.167. [#54928](electron/electron#54928) - Updated Node.js to v24.22.0. [#55004](electron/electron#55004) ##### [v44.7.2](https://github.com/electron/electron/releases/tag/v44.7.2) ### Release Notes for v44.7.2 #### Fixes - Fixed an issue where clicks posted to a background app were dropped on macOS. [#54819](electron/electron#54819) <sup>(Also in [45](https://github.com/electron/electron/pull/54818))</sup> - Fixed interrupted macOS updates leaving a broken app behind. [#54844](electron/electron#54844) <sup>(Also in [45](https://github.com/electron/electron/pull/54843))</sup> #### Other Changes - Backported fixes from upstream ANGLE, Chromium, PDFium and V8. [#54898](electron/electron#54898) #### Documentation - Documentation changes: [#54880](electron/electron#54880) ##### [v44.7.1](https://github.com/electron/electron/releases/tag/v44.7.1) ### Release Notes for v44.7.1 #### Fixes - Fixed a crash when starting without an available display server on Linux. [#54794](electron/electron#54794) <sup>(Also in [45](https://github.com/electron/electron/pull/54781))</sup> - Fixed a Linux crash creating a window with a menu bar when GTK failed to load. [#54859](electron/electron#54859) <sup>(Also in [45](https://github.com/electron/electron/pull/54846))</sup> - Fixed a `WebContentsView` that was removed with `removeChildView()` and re-added with `addChildView()` staying hidden behind its sibling views on Linux. [#54798](electron/electron#54798) - Fixed asar archives in non-ASCII folders failing to load on Linux. [#54849](electron/electron#54849) <sup>(Also in [45](https://github.com/electron/electron/pull/54848))</sup> - Fixed renderer crashes during garbage collection inside ShadowRealms. [#54865](electron/electron#54865) <sup>(Also in [45](https://github.com/electron/electron/pull/54864))</sup> #### Other Changes - Refactored mouse forwarding on Windows to fix `setIgnoreMouseEvents(true, { forward: true })` related issues. [#54802](electron/electron#54802) <sup>(Also in [45](https://github.com/electron/electron/pull/54803))</sup> - Updated Chromium to 152.0.7977.149. [#54085](electron/electron#54085) ##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0) ### Release Notes for v44.7.0 #### Features - The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204) #### Fixes - Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672) #### Other Changes - Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666) - Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657) ##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0) ### Release Notes for v44.6.0 #### Features - Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup> #### Fixes - Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596) - Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup> - Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup> - Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623) #### Documentation - Documentation changes: [#54589](electron/electron#54589)
renovate Bot
added a commit
to cigaleapp/cigale
that referenced
this pull request
Oct 26, 2026
##### [v44.9.0](https://github.com/electron/electron/releases/tag/v44.9.0) ### Release Notes for v44.9.0 #### Features - Added app shims on macOS to show windows under another app's Dock icon. [#55073](electron/electron#55073) <sup>(Also in [45](https://github.com/electron/electron/pull/55072))</sup> #### Fixes - Fixed link-opened windows not using the opener's session and `webPreferences`. [#55048](electron/electron#55048) <sup>(Also in [42](electron/electron#55050), [43](electron/electron#55049), [45](https://github.com/electron/electron/pull/55051))</sup> - Fixed `setCertificateVerifyProc` occasionally not being applied to a request issued concurrently with the first request to a host. [#55046](electron/electron#55046) <sup>(Also in [42](electron/electron#55054), [43](electron/electron#55047), [45](https://github.com/electron/electron/pull/55045))</sup> ##### [v44.8.0](https://github.com/electron/electron/releases/tag/v44.8.0) ### Release Notes for v44.8.0 #### Features - Added support for `Notification` action buttons on Linux. [#54890](electron/electron#54890) <sup>(Also in [45](https://github.com/electron/electron/pull/54889))</sup> #### Fixes - Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. [#54987](electron/electron#54987) - Fixed `net.fetch` and `session.fetch` failing permanently with `net::ERR_FAILED` after the Network Service process restarts. [#54909](electron/electron#54909) <sup>(Also in [42](electron/electron#54925), [43](electron/electron#54908), [45](https://github.com/electron/electron/pull/54910))</sup> - Fixed `utilityProcess` dropping messages posted with `process.parentPort.postMessage()` right before the process exits. [#54960](electron/electron#54960) <sup>(Also in [42](electron/electron#55000), [43](electron/electron#54962), [45](https://github.com/electron/electron/pull/54956))</sup> - Fixed `win.isFullScreen()` being stale in fullscreen events on Windows. [#55009](electron/electron#55009) <sup>(Also in [45](https://github.com/electron/electron/pull/55008))</sup> #### Other Changes - Backported fixes from upstream Chromium and V8. [#55034](electron/electron#55034) - Updated Chromium to 152.0.7977.167. [#54928](electron/electron#54928) - Updated Node.js to v24.22.0. [#55004](electron/electron#55004) ##### [v44.7.2](https://github.com/electron/electron/releases/tag/v44.7.2) ### Release Notes for v44.7.2 #### Fixes - Fixed an issue where clicks posted to a background app were dropped on macOS. [#54819](electron/electron#54819) <sup>(Also in [45](https://github.com/electron/electron/pull/54818))</sup> - Fixed interrupted macOS updates leaving a broken app behind. [#54844](electron/electron#54844) <sup>(Also in [45](https://github.com/electron/electron/pull/54843))</sup> #### Other Changes - Backported fixes from upstream ANGLE, Chromium, PDFium and V8. [#54898](electron/electron#54898) #### Documentation - Documentation changes: [#54880](electron/electron#54880) ##### [v44.7.1](https://github.com/electron/electron/releases/tag/v44.7.1) ### Release Notes for v44.7.1 #### Fixes - Fixed a crash when starting without an available display server on Linux. [#54794](electron/electron#54794) <sup>(Also in [45](https://github.com/electron/electron/pull/54781))</sup> - Fixed a Linux crash creating a window with a menu bar when GTK failed to load. [#54859](electron/electron#54859) <sup>(Also in [45](https://github.com/electron/electron/pull/54846))</sup> - Fixed a `WebContentsView` that was removed with `removeChildView()` and re-added with `addChildView()` staying hidden behind its sibling views on Linux. [#54798](electron/electron#54798) - Fixed asar archives in non-ASCII folders failing to load on Linux. [#54849](electron/electron#54849) <sup>(Also in [45](https://github.com/electron/electron/pull/54848))</sup> - Fixed renderer crashes during garbage collection inside ShadowRealms. [#54865](electron/electron#54865) <sup>(Also in [45](https://github.com/electron/electron/pull/54864))</sup> #### Other Changes - Refactored mouse forwarding on Windows to fix `setIgnoreMouseEvents(true, { forward: true })` related issues. [#54802](electron/electron#54802) <sup>(Also in [45](https://github.com/electron/electron/pull/54803))</sup> - Updated Chromium to 152.0.7977.149. [#54085](electron/electron#54085) ##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0) ### Release Notes for v44.7.0 #### Features - The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204) #### Fixes - Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672) #### Other Changes - Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666) - Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657) ##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0) ### Release Notes for v44.6.0 #### Features - Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup> #### Fixes - Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596) - Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup> - Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup> - Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623) #### Documentation - Documentation changes: [#54589](electron/electron#54589)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Requested via Slack
Description of Change
Backports the following changes:
cdea97f48c9ffrom angle — [M152] GL: Change mipmap workaround from flush to forcefullyFlush8e3884cd029dfrom chromium — [M152] Check IsContextDestroyed() before optimizing stream transferdedbd3f9dee8from chromium — [M152] Reinsert PatternData into pattern map after reconstructioneb2cbc0600c1from chromium — [M152] [HiC] Disallow external SVG content referenced by href7ff661871690from chromium — [M152] cc, gpu: Widen PaintCacheId and paint cache deletion IPC to uint64_t76f502419c33from skia — [M152] [SkPath] Increase GenerationID to 64 bitsd87667efcecafrom v8 — [M152] [modules] Fix partial SCC linking failurefc6666263eaffrom webrtc — [M152] Harden payload capacity and reduction checks in RTP packetizersNote
Hand-written Electron source change outside
patches/. In addition to the patch files above, this PR modifiesshell/browser/file_system_access/file_system_access_permission_context.cc. It ports the upstream Chromium fix (CL 8341352, upstream commitbc5a321c6196db0a2de36f1fe3e4fab977b10007) that blocks WSL UNC paths (\\wsl.localhost\...and\\wsl.localhost.\...) into Electron's own copy of the File System Access sensitive-path check (MaybeIsLocalUNCPath()), so please review that file directly.This PR was opened manually from the verified (build-green) artifacts of agent-workflows run 37032065351, because the backport automation refuses to publish changes outside
patches/.Checklist
Release Notes
Notes: Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC.
🤖 Generated with Claude Code
https://claude.ai/code/session_018khRcY1YYaYT95VfQQiaGj
Generated by Claude Code