Skip to content

chore: cherry-pick 8 changes from angle, chromium, skia, v8 and webrtc - #54657

Merged
MarshallOfSound merged 2 commits into
44-x-yfrom
security-backport/44-x-y/37032065351
Oct 6, 2026
Merged

MarshallOfSound merged 2 commits into
44-x-yfrom
security-backport/44-x-y/37032065351

Conversation

@claude

@claude claude Bot commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Requested via Slack

Description of Change

Backports the following changes:

  • cdea97f48c9f from angle — [M152] GL: Change mipmap workaround from flush to forcefullyFlush
  • 8e3884cd029d from chromium — [M152] Check IsContextDestroyed() before optimizing stream transfer
  • dedbd3f9dee8 from chromium — [M152] Reinsert PatternData into pattern map after reconstruction
  • eb2cbc0600c1 from chromium — [M152] [HiC] Disallow external SVG content referenced by href
  • 7ff661871690 from chromium — [M152] cc, gpu: Widen PaintCacheId and paint cache deletion IPC to uint64_t
  • 76f502419c33 from skia — [M152] [SkPath] Increase GenerationID to 64 bits
  • d87667efceca from v8 — [M152] [modules] Fix partial SCC linking failure
  • fc6666263eaf from webrtc — [M152] Harden payload capacity and reduction checks in RTP packetizers

Note

Hand-written Electron source change outside patches/. In addition to the patch files above, this PR modifies shell/browser/file_system_access/file_system_access_permission_context.cc. It ports the upstream Chromium fix (CL 8341352, upstream commit bc5a321c6196db0a2de36f1fe3e4fab977b10007) that blocks WSL UNC paths (\\wsl.localhost\... and \\wsl.localhost.\...) into Electron's own copy of the File System Access sensitive-path check (MaybeIsLocalUNCPath()), so please review that file directly.

This PR was opened manually from the verified (build-green) artifacts of agent-workflows run 37032065351, because the backport automation refuses to publish changes outside patches/.

Checklist

Release Notes

Notes: Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC.

🤖 Generated with Claude Code

https://claude.ai/code/session_018khRcY1YYaYT95VfQQiaGj


Generated by Claude Code

@claude claude Bot added 44-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes labels Oct 6, 2026
claude added 2 commits October 6, 2026 15:08
* e80dc914f6c6 from angle
* afea99f8eacc from skia
* 4efd0228fbc5 from v8
* fcaf4fc064ae from webrtc
* d4413d7a101f from chromium
* 475d243839f1 from chromium
* 3636efe6fe67 from chromium
* aee7423367e1 from chromium

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018khRcY1YYaYT95VfQQiaGj
…ecks

Ports chromium/src bc5a321c6196 into Electron's copy of
MaybeIsLocalUNCPath(), so \\wsl.localhost\... and \\wsl.localhost.\...
paths are treated like other local UNC paths.

Refs https://chromium-review.googlesource.com/c/chromium/src/+/8341352 (upstream commit bc5a321c6196db0a2de36f1fe3e4fab977b10007)

Upstream: https://chromium-review.googlesource.com/c/chromium/src/+/8341352
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018khRcY1YYaYT95VfQQiaGj
@claude
claude Bot force-pushed the security-backport/44-x-y/37032065351 branch from b8fb8c9 to 87931b2 Compare October 6, 2026 15:09
@MarshallOfSound
MarshallOfSound marked this pull request as ready for review October 6, 2026 16:28
@MarshallOfSound
MarshallOfSound requested a review from a team as a code owner October 6, 2026 16:28
@MarshallOfSound
MarshallOfSound enabled auto-merge (squash) October 6, 2026 16:28
@MarshallOfSound
MarshallOfSound merged commit 0498bc7 into 44-x-y Oct 6, 2026
69 checks passed
@MarshallOfSound
MarshallOfSound deleted the security-backport/44-x-y/37032065351 branch October 6, 2026 17:07
@release-clerk

release-clerk Bot commented Oct 6, 2026

Copy link
Copy Markdown

Release Notes Persisted

Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC.

Dot-Ami added a commit to Dot-Ami/dotami that referenced this pull request Oct 12, 2026
…me's engine (#148)

The desktop app moves from Electron 44.5.1 to 44.7.0, which picks up 55
fixes copied from Chrome's engine; the one thing a person may notice is
that, on a computer set to Vancouver time, the day DotAmi counts as
"today" shifts one hour earlier from 2026-11-01.

## What changes

- **Electron 44.5.1 to 44.7.0.** `package.json` goes from `^44.5.1` to
`^44.7.0`; `package-lock.json` pins exactly 44.7.0 (a 4-line change,
nothing else in the dependency tree moved). Chromium (152.0.7977.130)
and Node (24.21.0) are the same version numbers as before.
- **55 backported fixes, not 47.** Electron 44.7.0 carries two lists of
fixes copied from Chrome: [47 in
electron/electron#54666](electron/electron#54666)
and [8 in
electron/electron#54657](electron/electron#54657).
Electron calls them "backported fixes", not labelled security fixes. By
its title, one is a fix for memory used after being freed ("GL: Fix UAF
in ContextGL with depth init PBOs"), and a few more are about objects
that could be used after they went away.
- **Time-zone data moves, and "today" moves with it.** [Electron
44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)
updated its time-zone data to 2026d, including British Columbia's move
to permanent UTC-7
([#54623](electron/electron#54623)). DotAmi
works out the person's own day with that data (the line for refusing a
future-dated expense or figure, and the days shown for agreed or
retracted items). In the desktop app that code runs inside Electron, so
from 2026-11-01, on a computer set to Vancouver time, the day changes
one hour earlier than before. That follows the new rule, so it is an
improvement, but it is a visible change and is now written down.
- **Docs.** CHANGELOG [Unreleased] gets a "Security" section (what was
read in the release notes on 2026-10-11, the 55 fixes, the time-zone
entry with its before and after). `docs/privacy-log.md` [Unreleased]
gets a "Packages that ship" line: nothing DotAmi keeps, sends or asks
changes. The task list gets a ticked line.
- **New desktop test** in `e2e-desktop/desktop.spec.ts`: "the person's
day follows the time-zone data Electron ships". It formats three fixed
moments the way DotAmi's day-finder does, in the main process (the same
program that runs the server) and in DotAmi's window.

## Receipts

Three commits on top of main (7232937): f0b4a9c (the version move and
docs), d33d259 (the time-zone test), b2b2a41 (the docs fix that came out
of review). Head b2b2a41. Each has a sign-off and the trailer, and `git
cat-file commit HEAD | tr -cd '\r' | wc -c` prints 0.

| Gate | Exit | Result |
|---|---|---|
| `npm ci`, `node scripts/keep-gypfile.mjs --check`, `npm run
prisma:generate` (before the change) | 0 | Installed; `npm ls electron`
printed `electron@44.5.1` |
| `npm install --save-dev electron@44.7.0`, then `keep-gypfile.mjs`,
then `--check` | 0 | gypfile flag restored, check passes; a second `npm
ci` left `package.json` and the lockfile byte-identical |
| `npm run ci:quality` (first run) | 1 | Typecheck and lint clean; 2805
of 2808 passed. The 3 failures were the known 5-second timeout under
load (`tests/figures.spec.ts` "accepts exactly 500", then "all or
nothing" which saw the 505 rows that timed-out test left, and one scan
test in `tests/privacy-inventory.spec.ts`). Those two files alone: exit
0, 465 of 465 |
| `npm run ci:quality` (on f0b4a9c) | 1 | 2807 of 2808; one 5-second
timeout in `tests/third-party-notices.spec.ts`. That file alone: exit 0,
21 of 21 |
| `npm run ci:quality` (on the final code) | 0 | Prisma generate,
typecheck, lint (no warnings), 85 files / 2808 tests, build all pass |
| `npm run test:desktop` (shared lock, first pass on 44.7.0) | 0 | 35
passed (11.0 min), including the test where the graphics chip decodes
HEIC, and every encryption, backup and lost-key path |
| `npm run test:desktop` (shared lock, final code) | 0 | 36 passed (10.4
min). The log opens with `electron 44.7.0`, chrome 152.0.7977.130, node
24.21.0, tz 2026d, written from the installed binary before the suite
ran |
| `npm run desktop:package` (shared lock) | 0 | Packaged in about 1.5
min with `electron=44.7.0`; `LICENSE.electron.txt` and
`LICENSES.chromium.html` are in the output. I did not run the desktop
tests against the packaged app locally; CI does |

**Tests first.** The version move itself adds no rule and no behaviour,
so there is no test for it beyond the existing desktop suite (35 of 35
on 44.7.0). The one visible change, the time-zone shift, got its test
first (d33d259, before the docs fix b2b2a41).

**The BEFORE proof** (same fixed moments, formatted in
America/Vancouver, run on each Electron binary):

| Electron | tz data | 2026-11-02 07:30 UTC | 2026-12-01 07:30 UTC |
2027-01-15 07:30 UTC |
|---|---|---|---|---|
| 44.5.1 | 2025c | 2026-11-01, 11:30 p.m. GMT-8 | 2026-11-30, 11:30 p.m.
GMT-8 | 2027-01-14, 11:30 p.m. GMT-8 |
| 44.7.0 | 2026d | 2026-11-02, 12:30 a.m. GMT-7 | 2026-12-01, 12:30 a.m.
GMT-7 | 2027-01-15, 12:30 a.m. GMT-7 |

Before the change on main, `npm ls electron` printed `electron@44.5.1`
and the lockfile pinned 44.5.1. After, it prints `electron@44.7.0`. `npm
audit` lists the same 13 old problems (8 moderate, 5 high) in the same
13 build-tool packages before and after, so this change adds none and
fixes none.

**Control** (break the rule, show the test fails, restore from git, `git
diff --quiet`):

| Rule broken | Test | Result |
|---|---|---|
| Electron put back to 44.5.1 (`npm install electron@44.5.1`) | "the
person's day follows the time-zone data Electron ships" | exit 1: "main
process, time-zone data 2025c", expected 2026-11-02 and 2027-01-15,
received 2026-11-01 and 2027-01-14. Restored with `git checkout --
package.json package-lock.json`, `npm install`, `keep-gypfile.mjs`; `git
diff --quiet` exit 0; the binary is back on 44.7.0 and the test passes
on it (exit 0, 12.3 s) |

## Review round

Fixed:
- **Must-fix:** the first CHANGELOG draft said nothing in the 44.6.0 or
44.7.0 notes touches what DotAmi uses. That was false: 44.6.0 updates
the time-zone data DotAmi's dates depend on. Reproduced first on both
binaries (table above), then fixed: the false sentence is replaced with
an entry that cites #54623 and the 44.6.0 notes, says what moves, and
gives the before and after. The new test and its control are the proof.
- **Wording:** "several of them fixes for memory used after being freed"
was stronger than the sources say; only one title names it outright. The
CHANGELOG now says that.
- **Receipt:** the first desktop log did not print the Electron version.
The final log opens with it.

The first commit's message (f0b4a9c) still has the old "several"
wording; I did not rewrite history, and the follow-up commit message
records the correction.

## Design calls you can reverse

- `package.json` keeps the caret (`^44.7.0`), matching how the repo
already wrote Electron. The lockfile pins exactly 44.7.0, so `npm ci`,
CI and the release build all use 44.7.0.
- The fixes go under CHANGELOG "Security" (a Keep a Changelog heading
this file already used in 0.3.0), using Electron's own wording that they
are backported fixes.
- No test pins the Electron version. That would be a new safety layer
for a change with no new behaviour.
- `lib/privacy/inventory.ts` lists no Electron version, so it is
unchanged. `THIRD-PARTY-NOTICES.txt` is not in git
(`desktop/notices.mjs` writes it at build time from the installed
package; the desktop build's copy reads `Version: 44.7.0`).
`docs/connectors/heic-decoder-review.md` keeps its dated 44.5.1 probe
output because it records what was measured then.

## Questions for the maintainer

- The planning notes say "47 fixes". The true count in 44.7.0 is 55 (47
+ 8, linked above). Should the planning notes' wording be corrected to
55? The repo text already says 55.

## Risks

- A new Electron can change behaviour the tests do not cover. The 44.6.0
and 44.7.0 release notes were read on 2026-10-11: in 44.7.0 the
autoUpdater change is Mac-only (DotAmi updates through electron-updater
on Windows) and the `net.fetch` header fix is for a call DotAmi does not
make (`desktop/main.mjs` imports no Electron `net`; its `net` is
Node's). In 44.6.0, `protocol.registerSource` is new and experimental,
and DotAmi does not use it. Neither set of notes mentions safeStorage,
webContents or HEIC/WebCodecs, and the graphics-chip HEVC test passed on
44.7.0.
- Anything the browser engine requests on its own is still marked "not
checked" in the privacy log; this change does not check it either.
- The time-zone shift is real for people on Vancouver time from
2026-11-01. It is the correct behaviour under the new data, but "today"
will flip an hour earlier than they are used to.
- electron-builder 26.15.3 is already the newest on npm and declares no
Electron range; it packaged on 44.7.0 without trouble.

## NOT done

- No release or tag. Installed copies get this only with the next
release.
- The desktop tests were not run locally against the packaged
`DotAmi.exe` (`DOTAMI_DESKTOP_EXE`); CI runs that on Windows.
- No change to what DotAmi keeps, sends, ships or asks, so no inventory
change.

Held for the maintainer's merge word.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: Dot-Ami <195960890+Dot-Ami@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Oct 19, 2026
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

##### Release Notes for v44.7.0

##### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

##### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

##### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Oct 19, 2026
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

##### Release Notes for v44.7.0

##### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

##### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

##### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Oct 25, 2026
##### [v44.9.0](https://github.com/electron/electron/releases/tag/v44.9.0)

### Release Notes for v44.9.0

#### Features

- Added app shims on macOS to show windows under another app's Dock icon. [#55073](electron/electron#55073) <sup>(Also in [45](https://github.com/electron/electron/pull/55072))</sup>

#### Fixes

- Fixed link-opened windows not using the opener's session and `webPreferences`. [#55048](electron/electron#55048) <sup>(Also in [42](electron/electron#55050), [43](electron/electron#55049), [45](https://github.com/electron/electron/pull/55051))</sup>
- Fixed `setCertificateVerifyProc` occasionally not being applied to a request issued concurrently with the first request to a host. [#55046](electron/electron#55046) <sup>(Also in [42](electron/electron#55054), [43](electron/electron#55047), [45](https://github.com/electron/electron/pull/55045))</sup>
##### [v44.8.0](https://github.com/electron/electron/releases/tag/v44.8.0)

### Release Notes for v44.8.0

#### Features

- Added support for `Notification` action buttons on Linux. [#54890](electron/electron#54890) <sup>(Also in [45](https://github.com/electron/electron/pull/54889))</sup>

#### Fixes

- Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. [#54987](electron/electron#54987)
- Fixed `net.fetch` and `session.fetch` failing permanently with `net::ERR_FAILED` after the Network Service process restarts. [#54909](electron/electron#54909) <sup>(Also in [42](electron/electron#54925), [43](electron/electron#54908), [45](https://github.com/electron/electron/pull/54910))</sup>
- Fixed `utilityProcess` dropping messages posted with `process.parentPort.postMessage()` right before the process exits. [#54960](electron/electron#54960) <sup>(Also in [42](electron/electron#55000), [43](electron/electron#54962), [45](https://github.com/electron/electron/pull/54956))</sup>
- Fixed `win.isFullScreen()` being stale in fullscreen events on Windows. [#55009](electron/electron#55009) <sup>(Also in [45](https://github.com/electron/electron/pull/55008))</sup>

#### Other Changes

- Backported fixes from upstream Chromium and V8. [#55034](electron/electron#55034)
- Updated Chromium to 152.0.7977.167. [#54928](electron/electron#54928)
- Updated Node.js to v24.22.0. [#55004](electron/electron#55004)
##### [v44.7.2](https://github.com/electron/electron/releases/tag/v44.7.2)

### Release Notes for v44.7.2

#### Fixes

- Fixed an issue where clicks posted to a background app were dropped on macOS. [#54819](electron/electron#54819) <sup>(Also in [45](https://github.com/electron/electron/pull/54818))</sup>
- Fixed interrupted macOS updates leaving a broken app behind. [#54844](electron/electron#54844) <sup>(Also in [45](https://github.com/electron/electron/pull/54843))</sup>

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, PDFium and V8. [#54898](electron/electron#54898)

#### Documentation

- Documentation changes: [#54880](electron/electron#54880)
##### [v44.7.1](https://github.com/electron/electron/releases/tag/v44.7.1)

### Release Notes for v44.7.1

#### Fixes

- Fixed a crash when starting without an available display server on Linux. [#54794](electron/electron#54794) <sup>(Also in [45](https://github.com/electron/electron/pull/54781))</sup>
- Fixed a Linux crash creating a window with a menu bar when GTK failed to load. [#54859](electron/electron#54859) <sup>(Also in [45](https://github.com/electron/electron/pull/54846))</sup>
- Fixed a `WebContentsView` that was removed with `removeChildView()` and re-added with `addChildView()` staying hidden behind its sibling views on Linux. [#54798](electron/electron#54798)
- Fixed asar archives in non-ASCII folders failing to load on Linux. [#54849](electron/electron#54849) <sup>(Also in [45](https://github.com/electron/electron/pull/54848))</sup>
- Fixed renderer crashes during garbage collection inside ShadowRealms. [#54865](electron/electron#54865) <sup>(Also in [45](https://github.com/electron/electron/pull/54864))</sup>

#### Other Changes

- Refactored mouse forwarding on Windows to fix `setIgnoreMouseEvents(true, { forward: true })` related issues. [#54802](electron/electron#54802) <sup>(Also in [45](https://github.com/electron/electron/pull/54803))</sup>
- Updated Chromium to 152.0.7977.149. [#54085](electron/electron#54085)
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

### Release Notes for v44.7.0

#### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

#### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Oct 26, 2026
##### [v44.9.0](https://github.com/electron/electron/releases/tag/v44.9.0)

### Release Notes for v44.9.0

#### Features

- Added app shims on macOS to show windows under another app's Dock icon. [#55073](electron/electron#55073) <sup>(Also in [45](https://github.com/electron/electron/pull/55072))</sup>

#### Fixes

- Fixed link-opened windows not using the opener's session and `webPreferences`. [#55048](electron/electron#55048) <sup>(Also in [42](electron/electron#55050), [43](electron/electron#55049), [45](https://github.com/electron/electron/pull/55051))</sup>
- Fixed `setCertificateVerifyProc` occasionally not being applied to a request issued concurrently with the first request to a host. [#55046](electron/electron#55046) <sup>(Also in [42](electron/electron#55054), [43](electron/electron#55047), [45](https://github.com/electron/electron/pull/55045))</sup>
##### [v44.8.0](https://github.com/electron/electron/releases/tag/v44.8.0)

### Release Notes for v44.8.0

#### Features

- Added support for `Notification` action buttons on Linux. [#54890](electron/electron#54890) <sup>(Also in [45](https://github.com/electron/electron/pull/54889))</sup>

#### Fixes

- Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. [#54987](electron/electron#54987)
- Fixed `net.fetch` and `session.fetch` failing permanently with `net::ERR_FAILED` after the Network Service process restarts. [#54909](electron/electron#54909) <sup>(Also in [42](electron/electron#54925), [43](electron/electron#54908), [45](https://github.com/electron/electron/pull/54910))</sup>
- Fixed `utilityProcess` dropping messages posted with `process.parentPort.postMessage()` right before the process exits. [#54960](electron/electron#54960) <sup>(Also in [42](electron/electron#55000), [43](electron/electron#54962), [45](https://github.com/electron/electron/pull/54956))</sup>
- Fixed `win.isFullScreen()` being stale in fullscreen events on Windows. [#55009](electron/electron#55009) <sup>(Also in [45](https://github.com/electron/electron/pull/55008))</sup>

#### Other Changes

- Backported fixes from upstream Chromium and V8. [#55034](electron/electron#55034)
- Updated Chromium to 152.0.7977.167. [#54928](electron/electron#54928)
- Updated Node.js to v24.22.0. [#55004](electron/electron#55004)
##### [v44.7.2](https://github.com/electron/electron/releases/tag/v44.7.2)

### Release Notes for v44.7.2

#### Fixes

- Fixed an issue where clicks posted to a background app were dropped on macOS. [#54819](electron/electron#54819) <sup>(Also in [45](https://github.com/electron/electron/pull/54818))</sup>
- Fixed interrupted macOS updates leaving a broken app behind. [#54844](electron/electron#54844) <sup>(Also in [45](https://github.com/electron/electron/pull/54843))</sup>

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, PDFium and V8. [#54898](electron/electron#54898)

#### Documentation

- Documentation changes: [#54880](electron/electron#54880)
##### [v44.7.1](https://github.com/electron/electron/releases/tag/v44.7.1)

### Release Notes for v44.7.1

#### Fixes

- Fixed a crash when starting without an available display server on Linux. [#54794](electron/electron#54794) <sup>(Also in [45](https://github.com/electron/electron/pull/54781))</sup>
- Fixed a Linux crash creating a window with a menu bar when GTK failed to load. [#54859](electron/electron#54859) <sup>(Also in [45](https://github.com/electron/electron/pull/54846))</sup>
- Fixed a `WebContentsView` that was removed with `removeChildView()` and re-added with `addChildView()` staying hidden behind its sibling views on Linux. [#54798](electron/electron#54798)
- Fixed asar archives in non-ASCII folders failing to load on Linux. [#54849](electron/electron#54849) <sup>(Also in [45](https://github.com/electron/electron/pull/54848))</sup>
- Fixed renderer crashes during garbage collection inside ShadowRealms. [#54865](electron/electron#54865) <sup>(Also in [45](https://github.com/electron/electron/pull/54864))</sup>

#### Other Changes

- Refactored mouse forwarding on Windows to fix `setIgnoreMouseEvents(true, { forward: true })` related issues. [#54802](electron/electron#54802) <sup>(Also in [45](https://github.com/electron/electron/pull/54803))</sup>
- Updated Chromium to 152.0.7977.149. [#54085](electron/electron#54085)
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

### Release Notes for v44.7.0

#### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

#### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

44-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes

Projects

No open projects
Status: No status

Development

Successfully merging this pull request may close these issues.

3 participants