chore: cherry-pick 10 changes from chromium and v8 by electron-security-backports[bot] · Pull Request #55034 · electron/electron

electron-security-backports · 2026-10-15T22:24:31Z

Description of Change

Backports the following changes:

1ecc753ba088 from chromium — [M152] Guard TextInputManager against re-entrant destruction during notify
d50992ebe442 from chromium — [M152] Guard BeginNavigation() against self-deletion during prerender checks
90ae142e4c7c from chromium — [M152] Don't hold a reference to the id attribute across UpdateId()
3f6b73b9e0b3 from chromium — Worker: Use GetServiceWorkerClient() consistently in DedicatedWorkerHost
f06e60e56d7f from chromium — [M155] Widen cc::PaintShader record shader IDs to 64 bits
1d69cc5a0259 from chromium — [M155] Fix stale iterators during svg resource cycle check
08f529c57faa from chromium — [M155] ServiceWorker: Drop ServiceWorkerMainResourceHandle for CSP-sandboxed workers
9d9ccafe3b95 from v8 — [M152] [deserializer] Check source hash before starting BG merge
6c626cef3652 from v8 — [M152] [maglev] Fix predecessor counting in the "smi case falls back to object case" logic
af9e5c36d892 from v8 — [compiler] Mark JSCreateGeneratorObject as writing and deoptimizing

Checklist

I have filled out the PR description
I have reviewed and verified the changes

Release Notes

Notes: Backported fixes from upstream Chromium and V8.

Refresh the stale index line for worker_script_fetcher.cc in cherry-pick-e98f6e2e4f23.patch (https://chromium-review.googlesource.com/c/chromium/src/+/8535126, upstream 08f529c57faa). The hunks are unchanged; the preimage blob now matches the file at Chromium 152.0.7977.167, which is what the apply-patches check expects. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ar8ptxbonFcV6ezRPpjKHz

release-clerk · 2026-10-15T23:51:15Z

Release Notes Persisted

Backported fixes from upstream Chromium and V8.

##### [v44.9.0](https://github.com/electron/electron/releases/tag/v44.9.0) ### Release Notes for v44.9.0 #### Features - Added app shims on macOS to show windows under another app's Dock icon. [#55073](electron/electron#55073) (Also in [45](https://github.com/electron/electron/pull/55072)) #### Fixes - Fixed link-opened windows not using the opener's session and `webPreferences`. [#55048](electron/electron#55048) (Also in [42](electron/electron#55050), [43](electron/electron#55049), [45](https://github.com/electron/electron/pull/55051)) - Fixed `setCertificateVerifyProc` occasionally not being applied to a request issued concurrently with the first request to a host. [#55046](electron/electron#55046) (Also in [42](electron/electron#55054), [43](electron/electron#55047), [45](https://github.com/electron/electron/pull/55045)) ##### [v44.8.0](https://github.com/electron/electron/releases/tag/v44.8.0) ### Release Notes for v44.8.0 #### Features - Added support for `Notification` action buttons on Linux. [#54890](electron/electron#54890) (Also in [45](https://github.com/electron/electron/pull/54889)) #### Fixes - Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. [#54987](electron/electron#54987) - Fixed `net.fetch` and `session.fetch` failing permanently with `net::ERR_FAILED` after the Network Service process restarts. [#54909](electron/electron#54909) (Also in [42](electron/electron#54925), [43](electron/electron#54908), [45](https://github.com/electron/electron/pull/54910)) - Fixed `utilityProcess` dropping messages posted with `process.parentPort.postMessage()` right before the process exits. [#54960](electron/electron#54960) (Also in [42](electron/electron#55000), [43](electron/electron#54962), [45](https://github.com/electron/electron/pull/54956)) - Fixed `win.isFullScreen()` being stale in fullscreen events on Windows. [#55009](electron/electron#55009) (Also in [45](https://github.com/electron/electron/pull/55008)) #### Other Changes - Backported fixes from upstream Chromium and V8. [#55034](electron/electron#55034) - Updated Chromium to 152.0.7977.167. [#54928](electron/electron#54928) - Updated Node.js to v24.22.0. [#55004](electron/electron#55004) ##### [v44.7.2](https://github.com/electron/electron/releases/tag/v44.7.2) ### Release Notes for v44.7.2 #### Fixes - Fixed an issue where clicks posted to a background app were dropped on macOS. [#54819](electron/electron#54819) (Also in [45](https://github.com/electron/electron/pull/54818)) - Fixed interrupted macOS updates leaving a broken app behind. [#54844](electron/electron#54844) (Also in [45](https://github.com/electron/electron/pull/54843)) #### Other Changes - Backported fixes from upstream ANGLE, Chromium, PDFium and V8. [#54898](electron/electron#54898) #### Documentation - Documentation changes: [#54880](electron/electron#54880) ##### [v44.7.1](https://github.com/electron/electron/releases/tag/v44.7.1) ### Release Notes for v44.7.1 #### Fixes - Fixed a crash when starting without an available display server on Linux. [#54794](electron/electron#54794) (Also in [45](https://github.com/electron/electron/pull/54781)) - Fixed a Linux crash creating a window with a menu bar when GTK failed to load. [#54859](electron/electron#54859) (Also in [45](https://github.com/electron/electron/pull/54846)) - Fixed a `WebContentsView` that was removed with `removeChildView()` and re-added with `addChildView()` staying hidden behind its sibling views on Linux. [#54798](electron/electron#54798) - Fixed asar archives in non-ASCII folders failing to load on Linux. [#54849](electron/electron#54849) (Also in [45](https://github.com/electron/electron/pull/54848)) - Fixed renderer crashes during garbage collection inside ShadowRealms. [#54865](electron/electron#54865) (Also in [45](https://github.com/electron/electron/pull/54864)) #### Other Changes - Refactored mouse forwarding on Windows to fix `setIgnoreMouseEvents(true, { forward: true })` related issues. [#54802](electron/electron#54802) (Also in [45](https://github.com/electron/electron/pull/54803)) - Updated Chromium to 152.0.7977.149. [#54085](electron/electron#54085) ##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0) ### Release Notes for v44.7.0 #### Features - The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204) #### Fixes - Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672) #### Other Changes - Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666) - Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657) ##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0) ### Release Notes for v44.6.0 #### Features - Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) (Also in [45](https://github.com/electron/electron/pull/54521)) #### Fixes - Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596) - Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) (Also in [45](https://github.com/electron/electron/pull/54615)) - Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) (Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585)) - Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623) #### Documentation - Documentation changes: [#54589](electron/electron#54589)

chore: cherry-pick 10 changes from chromium and v8

be06172

electron-security-backports Bot added 44-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes labels Oct 15, 2026

MarshallOfSound marked this pull request as ready for review October 15, 2026 22:43

MarshallOfSound requested a review from a team as a code owner October 15, 2026 22:43

MarshallOfSound approved these changes Oct 15, 2026

View reviewed changes

MarshallOfSound enabled auto-merge (squash) October 15, 2026 22:43

VerteDinde approved these changes Oct 15, 2026

View reviewed changes

MarshallOfSound merged commit 60169b4 into 44-x-y Oct 15, 2026
76 checks passed

MarshallOfSound deleted the security-backport/44-x-y/38810334178 branch October 15, 2026 23:51

electron-release-board Bot added this to 44-x-y Oct 15, 2026

scott-r-lindsey mentioned this pull request Oct 21, 2026

chore: update Electron to 44.9.3 scott-r-lindsey/foom#673

Merged

Navigation Menu

Repository navigation

chore: cherry-pick 10 changes from chromium and v8 - #55034

chore: cherry-pick 10 changes from chromium and v8#55034
MarshallOfSound merged 2 commits into
44-x-yfrom
security-backport/44-x-y/38810334178

electron-security-backports Bot commented Oct 15, 2026

Uh oh!

Uh oh!

release-clerk Bot commented Oct 15, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

electron-security-backports Bot commented Oct 15, 2026

Description of Change

Checklist

Release Notes

Uh oh!

Uh oh!

release-clerk Bot commented Oct 15, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants