[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
electron	43.2.0 → 45.0.0

---

Release Notes

electron/electron (electron)

v45.0.0: electron v45.0.0

Compare Source

Release Notes for v45.0.0

Stack Upgrades

• Chromium 156.0.8078.48
  • Chrome 156 Release Notes
  • Chrome 155 Release Notes
  • New in 154
  • New in 153
• Node v24.22.0
  • Node 24.22.0 blog post
• V8 15.6

Breaking Changes

• Reduced sandboxed renderer startup work for preload scripts that do not use Buffer. #​54048
  • Removed the events, timers and url modules and the Buffer, setImmediate and clearImmediate globals from sandboxed preload scripts; use a polyfill.
  • Made sandboxed renderers without a preload script start faster.
  • Made sandboxed preload scripts start faster; Electron no longer evaluates a JavaScript bundle of its own in sandboxed renderers unless webviewTag is enabled.
• With nodeIntegrationInWorker: true, a Worker created from an <iframe> in the same process as the main frame used to get Node.js integration even though the iframe itself had none. Workers now only get Node.js integration when the frame that creates them has it: the main frame, or any frame when nodeIntegrationInSubFrames is enabled.
• A chrome-extension:// document used to receive the window's preload script (and session preload scripts) wherever it was embedded. It now only does so when it is a top-level frame or is hosted inside the DevTools front-end (a devtools_page or panel); an extension frame embedded in an ordinary page is treated like any other subframe and follows nodeIntegrationInSubFrames.
• The legacy chromeMediaSource: 'desktop' constraint now only accepts screen and window source ids from desktopCapturer.getSources. Passing a WebContents source id there now fails with an "Invalid state" error. To capture a WebContents, use chromeMediaSource: 'tab' with an id from webContents.getMediaSourceId(), or use ses.setDisplayMediaRequestHandler.
• The experimental contentTracing.enableHeapProfiling() API has been removed. Chromium removed the memlog implementation that backed this API and replaced it with a Perfetto heap-profiling data source. Pass a nativeHeapProfiling option to contentTracing.startRecording() to enable heap profiling for the duration of a trace. Like all recordings, heap-enabled recordings use the Perfetto protobuf format.
• Changed heap profiling in contentTracing recordings to now use a perfetto heap-profiling data source. #​54863
• Screen, window and tab capture requests are now reported to setPermissionRequestHandler as display-capture instead of media; a handler that allows only media must also allow display-capture to keep screen sharing working. #​52824
• Chromium has disabled document.requestStorageAccessFor by default ahead of its removal. The API can temporarily be restored with the enableBlinkFeatures web preference set to RequestStorageAccessFor. See Chromium's intent to remove discussion for more information.
• fs.open, fs.openSync and fs.promises.open on a file inside an ASAR archive used to extract the file to a temporary copy and return a descriptor for that copy. They now return a descriptor that only identifies the entry to Node's fs module, which reads directly out of the archive with no temporary file (fs.read, fs.readv, fs.fstat, fs.readFile(fd), fs.createReadStream and the FileHandle methods). The descriptor itself is not backed by the file's contents: code that reads the raw descriptor (a native addon, child_process stdio, net.Socket({ fd }), http2stream.respondWithFile() / respondWithFD(), a FileHandle transferred to a worker, ...) fails with EBADF and is not supported. Opening a file inside an archive with a flag that allows writing (w, a, r+, ...) now fails with EACCES instead of silently writing to the temporary copy, and fs.fchmod, fs.fchown and fs.futimes on these descriptors fail with EACCES.
• A window.open() child whose sandbox state differs from its opener's renderer process is now created in its own process with no opener relationship instead of silently sharing the opener's process; set sandbox: false in setWindowOpenHandler to keep sharing an unsandboxed opener's process. #​52472
• The synchronous safeStorage methods are deprecated and will be removed in Electron 46, following Chromium's removal of the synchronous OSCrypt backend they are built on. Use the asynchronous methods instead, which use the same per-platform key stores. Data encrypted with safeStorage.encryptString() can be decrypted with safeStorage.decryptStringAsync().
• Added select-client-certificate event support for net.request and net.fetch; requests to servers requesting a client certificate no longer fail with ERR_SSL_CLIENT_AUTH_CERT_NEEDED, and applications can now select a certificate to present. #​52162 ^{(Also in 44)}
• Clipboard module is now aligned with the W3C Clipboard API. #​51707 ^{(Also in 44)}
• Removed 32-bit builds (Windows ia32 and Linux armv7l). Electron is now published only for 64-bit (x64 and arm64) platforms. #​51816 ^{(Also in 44)}
• Removed openAsHidden option from app.setLoginItemSettings(). #​52351 ^{(Also in 44)}
  • Removed openAsHidden, wasOpenedAsHidden and restoreState fields from return value of app.getLoginItemSettings().
  • Fixed potential deadlock inside app.getLoginItemSettings() on macOS.
• Updated the Linux support policy. #​52429 ^{(Also in 44)}

See the Breaking Changes doc for more details about these changes.

Features

• Added a badge property to MenuItem on macOS 14+ for showing a count or custom text badge next to a menu item's label. #​50805 ^{(Also in 43, 44)}
• Added a Save/Restore Window State API for cross-platform use. #​51510 ^{(Also in 44)}
• Added a Windows Error Reporting helper (electron_wer.dll, renamed to <app>_wer.dll alongside the executable) so crashReporter captures __fastfail and other crashes that bypass the in-process handler on Windows. #​53851
• Added app shims on macOS to show windows under another app's Dock icon. #​55072 ^{(Also in 44)}
• Added app.configureWebAuthn() API to enable iCloud Keychain passkey support on macOS. When enabled, navigator.credentials.create() and .get() present Apple's native passkey UI via ASAuthorizationController. #​51563
• Added available to process.getSystemMemoryInfo() on Linux, exposing proc/meminfo MemAvailable. #​52299 ^{(Also in 42, 43, 44)}
• Added disableWakeLocks option to WebPreferences. #​52342
• Added getIsolatedWorlds method and isolated-world-created event for webFrame to enable discovery of isolated worlds. #​50633
• Added initiatorOrigin to webRequest and protocol handler requests, DownloadItem.getInitiatorOrigin(), and a trailing frame argument to the will-download and preconnect session events. #​53700 ^{(Also in 43, 44)}
• Added launch-failure reporting with systemErrorCode to the app child-process-gone event. #​54230 ^{(Also in 44)}
• Added support for Notification action buttons on Linux. #​54889 ^{(Also in 44)}
• Added support for the Prompt API via the new localAIHandler module in UtilityProcess. #​50659
• Added the ELECTRON_DEBUG_DRAGGABLE_REGIONS environment variable, which visualizes and logs draggable regions in unpackaged apps to help debug custom title bars. #​53626 ^{(Also in 43, 44)}
• Added the experimental protocol.registerSource() to serve a custom scheme from directories on disk without a JavaScript handler. #​54521 ^{(Also in 44)}
• Added webContents.caretBrowsingEnabled for toggling caret browsing in a WebContents. #​52696 ^{(Also in 43, 44)}
• Added webFrameMain.printToPDF() to allow printing individual frames to PDF from the main process. #​52439 ^{(Also in 42, 43, 44)}
• Fixed an issue where getDisplayMedia({ audio: { restrictOwnAudio: true } }) was ignored in setDisplayMediaRequestHandler, causing loopback audio to include local app playback. #​52455 ^{(Also in 43, 44)}
• Frameless windows on Linux now use system-themed titlebar icons for Window Controls Overlay (WCO). #​52461 ^{(Also in 44)}
• fs.open, fs.createReadStream, fs.copyFile, fs.cp and friends now read files inside ASAR archives directly from the archive instead of extracting a temporary copy; fs.opendir and fs.readlink work on archives; opening a packed file for writing fails with EACCES. #​52833
• Restored app.setBadgeCount and win.setProgressBar for Linux. These APIs now support any dock or taskbar which implements the LauncherEntry D-Bus API, and they no longer require libunity. #​52739 ^{(Also in 44)}
• The macOS autoUpdater now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. #​52820 ^{(Also in 44)}

Fixes

• <webview> and window.open now inherit nodeIntegrationInWorker from the embedder, consistent with the other Node and sandbox preferences. #​52823 ^{(Also in 41, 42, 43, 44)}
• <webview> without allowpopups also blocks links opened into a new window by modifier-click, and such windows navigate as the clicking document rather than as a browser-initiated load. #​53717 ^{(Also in 42, 43, 44)}
• Added validation to protocol.registerSchemesAsPrivileged() to reject protocol names that do not conform to RFC 3986 URI scheme grammar. #​53742 ^{(Also in 44)}
• Changed the default trash implementation on KDE Plasma 6 to kioclient. #​54362 ^{(Also in 44)}
• DevTools zoom in/out now uses the same zoom steps as Chromium. #​54388 ^{(Also in 44)}
• File System Access permission requests and the file-system-access-restricted event are scoped to the requesting document, grants are reset when the origin's last page closes, and write access works in in-memory sessions. #​53690 ^{(Also in 42, 43, 44)}
• Fixed --xdg-portal-required-version having no effect and a spurious portal warning being logged for file dialogs on Linux. #​54302 ^{(Also in 43, 44)}
• Fixed <select> dropdowns not rendering in offscreen windows on macOS. #​53716
• Fixed a 1-in-200 chance per renderer process on Windows of scripts on the first page load being compiled without their V8 code cache. #​52791 ^{(Also in 42, 43, 44)}
• Fixed a browser process crash that could occur during Windows logoff, shutdown, or restart. #​52604 ^{(Also in 42, 43, 44)}
• Fixed a browser-process crash (ValidateIntegrityOrDie) and spurious preload ENOENT errors when an app's app.asar is replaced on disk (e.g. by an updater or MDM software) while the app is running. #​52283 ^{(Also in 42, 43, 44)}
• Fixed a bug where content-protected windows could temporarily appear in screen captures during picture-in-picture state changes. #​54612
• Fixed a child WebContentsView losing focus when its window is reactivated. #​54454 ^{(Also in 43, 44)}
• Fixed a crash in systemPreferences.promptTouchID(reason) when an invalid reason value is passed. #​52764 ^{(Also in 42, 43, 44)}
• Fixed a crash on Linux at startup or on theme change with GTK modules loaded. #​55017
• Fixed a crash on Linux when process.env was written while another thread was reading the environment, and a memory leak when a worker thread exits. #​53508 ^{(Also in 42, 43, 44)}
• Fixed a crash on Linux when the D-Bus session bus disconnected while the app was running, such as at logout or when dbus is restarted. #​53022 ^{(Also in 42, 43, 44)}
• Fixed a crash on macOS when a notification's icon could not be attached; the notification is now shown without the icon. #​53131 ^{(Also in 42, 43, 44)}
• Fixed a crash on macOS when a WebAuthn Touch ID prompt was requested while no locale resources were loaded. #​53185 ^{(Also in 43, 44)}
• Fixed a crash on navigator.usb.requestDevice() in in-memory sessions. #​54615 ^{(Also in 44)}
• Fixed a crash on Windows when V8 posted a delayed worker task during shutdown. #​52956 ^{(Also in 42, 43, 44)}
• Fixed a crash report when the X server or Wayland compositor exits while an app is running. #​52603 ^{(Also in 42, 43, 44)}
• Fixed a crash that could occur when closing DevTools while the host WebContents was being destroyed. #​52166 ^{(Also in 41, 42, 43, 44)}
• Fixed a crash when a WebAuthn request used a security key that required its PIN. #​54371 ^{(Also in 43, 44)}
• Fixed a crash when a webContents navigated to the Chrome Web Store and the page invoked the unsupported chrome.webstorePrivate API. #​53775 ^{(Also in 44)}
• Fixed a crash when accessing frame details during cross-origin navigation. #​53102 ^{(Also in 44)}
• Fixed a crash when calling node:wasi functions in optimized code. #​53266 ^{(Also in 42, 43, 44)}
• Fixed a crash when calling setIgnoreMenuShortcuts() on DevTools. #​54115 ^{(Also in 43, 44)}
• Fixed a crash when calling utilityProcess.postMessage() after the utility process had exited. #​53299 ^{(Also in 43, 44)}
• Fixed a crash when creating a framed window on Wayland in environments where GTK could not initialize. #​54399 ^{(Also in 43, 44)}
• Fixed a crash when quickly switching menus while the app is under heavy load. #​52598 ^{(Also in 42, 43, 44)}
• Fixed a crash when resolving a path inside a malformed ASAR archive that contains cyclic link entries. #​52825 ^{(Also in 42, 43, 44)}
• Fixed a crash when sending a DevTools protocol command with a non-string value for an optional string parameter via webContents.debugger. #​54444 ^{(Also in 43, 44)}
• Fixed a crash when showing Linux message boxes while another Linux UI implementation was active. #​52238 ^{(Also in 42, 43, 44)}
• Fixed a crash when starting without an available display server on Linux. #​54781
• Fixed a crash with app.setLoginItemSettings if a non-UTF8 service name is used. #​52773 ^{(Also in 42, 43, 44)}
• Fixed a graphical glitch on Linux where thin borders appeared past the drop shadows on frameless windows when multiple windows were created. #​52584 ^{(Also in 42, 43, 44)}
• Fixed a grey border around frameless windows on Linux WMs without compositing. #​54392 ^{(Also in 43, 44)}
• Fixed a Linux crash creating a window with a menu bar when GTK failed to load. #​54846 ^{(Also in 43, 44)}
• Fixed a macOS File System Access blocklist bypass via /System/Volumes/Data paths. #​54678
• Fixed a main process crash when a native API method was called with a this value of a different native type; it now throws a TypeError. #​54313 ^{(Also in 43, 44)}
• Fixed a main-process crash when an app called loadURL() again right after a load failed because the renderer process exited before the page committed. #​53942 ^{(Also in 43, 44)}
• Fixed a memory leak on Windows when app.getPreferredSystemLanguages() was called. #​53869 ^{(Also in 43, 44)}
• Fixed a memory leak when creating BrowserWindows. #​52092 ^{(Also in 42, 43, 44)}
• Fixed a pending read on a net.request chunked upload stream inside a protocol handler never settling when the request failed or was aborted. #​53368 ^{(Also in 43, 44)}
• Fixed a possible crash (SIGABRT) during process exit when the process had loaded tls/https shortly before exiting, affecting app.exit() before ready and short-lived ELECTRON_RUN_AS_NODE / child_process.fork() scripts. #​52856 ^{(Also in 42, 43, 44)}
• Fixed a possible crash during process exit when vm.Script or vm contexts created in the main process had been garbage collected shortly before quitting. #​54267 ^{(Also in 43, 44)}
• Fixed a possible crash on Windows on ARM when powerMonitor is torn down. #​54384 ^{(Also in 44)}
• Fixed a possible crash on Windows when a file dialog was shown for a window that was being closed at the same time. #​53586 ^{(Also in 42, 43, 44)}
• Fixed a possible hang when pressing Esc while a <webview> is fullscreen. #​53744
• Fixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. #​52836 ^{(Also in 42, 43, 44)}
• Fixed a potential crash during application shutdown. #​54526
• Fixed a potential crash in contentTracing.stopRecording() when the trace file could not be written to the requested path. #​52793 ^{(Also in 42, 43, 44)}
• Fixed a potential crash when cleaning up download items. #​54517
• Fixed a potential crash when closing detached DevTools. #​54538
• Fixed a potential crash when notifying user activation before the primary main frame was live. #​52215 ^{(Also in 42, 43, 44)}
• Fixed a potential crash when using menu.popup with a frame from an offscreen rendered window. #​53242 ^{(Also in 43, 44)}
• Fixed a potential UAF in app.getPreferredSystemLanguages() on Windows. #​53864 ^{(Also in 43, 44)}
• Fixed a potential UAF when a select-usb-device handler destroys the requesting webContents. #​54008 ^{(Also in 43, 44)}
• Fixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. #​52847 ^{(Also in 42, 43, 44)}
• Fixed a regression preventing from transparent frameless windows from being resized on Linux. #​52740 ^{(Also in 43, 44)}
• Fixed a regression where a window created with a custom title can show an empty title after using back/forward navigation. #​53180 ^{(Also in 42, 43, 44)}
• Fixed a renderer crash calling image.toPNG() from a sandboxed preload script. #​54501 ^{(Also in 43, 44)}
• Fixed a renderer crash that could occur when printing from an iframe. #​53763 ^{(Also in 43, 44)}
• Fixed a renderer crash when a page calls SpeechRecognition.available() or SpeechRecognition.install() with processLocally. #​52955 ^{(Also in 42, 43, 44)}
• Fixed a renderer crash when a ResizeObserver loop-limit error handler modified layout. #​54289 ^{(Also in 42, 43, 44)}
• Fixed a renderer crash when an array with a throwing property getter is passed across contextBridge, and several main/utility-process crashes when option objects passed to Electron APIs contain throwing accessors or Proxy traps. #​53069 ^{(Also in 42, 43, 44)}
• Fixed a renderer crash when an iframe was removed right after loading with nodeIntegrationInSubFrames enabled and sandbox disabled, e.g. on pages that embed Meta Pixel. #​53883 ^{(Also in 42, 43, 44)}
• Fixed a renderer crash when the main process sent IPC to, or a page navigated, a same-process window.open() child whose contextIsolation differed from its opener's. #​53538 ^{(Also in 42, 43, 44)}
• Fixed a spurious node_init error being logged when creating a ShadowRealm with Node.js integration enabled. #​53578 ^{(Also in 44)}
• Fixed a stale nativeTheme.shouldUseDarkColors after resetting themeSource. #​54648
• Fixed a UAF with protocol.registerStreamProtocol when an error is emitted during a read. #​52474 ^{(Also in 41, 42, 43, 44)}
• Fixed a WebContentsView staying blank after its window is shown when setBackgroundThrottling(false) was called while the window was hidden. #​52844 ^{(Also in 42, 43, 44)}
• Fixed a window being marked hidden and background-throttled on macOS when covered by a transparent or click-through window. #​52365 ^{(Also in 42, 43, 44)}
• Fixed accent-color-changed on Windows reporting a colour that differed from systemPreferences.getAccentColor(). #​54405 ^{(Also in 44)}
• Fixed alignment of the text label and popup menu in the macOS save dialog. #​54144 ^{(Also in 44)}
• Fixed an "Invalid guestInstanceId" error when removing a loaded <webview> from the DOM. #​54096 ^{(Also in 42, 43, 44)}
• Fixed an intermittent crash (access violation) on Windows when an ASAR integrity violation is detected, so the process now exits with code 1 as intended. #​53438 ^{(Also in 43, 44)}
• Fixed an intermittent crash at startup on Linux caused by a race between Pango and the main thread initializing fontconfig. #​53338 ^{(Also in 43, 44)}
• Fixed an issue on Windows where the app process could fail to exit after app.quit() while a shell.openExternal() or shell.openPath() call was still waiting on a system "Open with" dialog. #​52888 ^{(Also in 41, 43, 44)}
• Fixed an issue where a JavaScript out-of-memory crash could be reported from inside the crash-key handler instead of at the out-of-memory site. #​52591 ^{(Also in 42, 43, 44)}
• Fixed an issue where an exception thrown by a property getter on an object passed through contextBridge was swallowed instead of being thrown back to the caller. #​53297 ^{(Also in 43, 44)}
• Fixed an issue where clicks posted to a background app were dropped on macOS. #​54818 ^{(Also in 42, 43, 44)}
• Fixed an issue where crashReporter.setUploadToServer() had no effect after crashReporter.start() was called. #​54519 ^{(Also in 44)}
• Fixed an issue where loading ICO files from ASAR archives on Windows left temporary icon files behind. #​52424 ^{(Also in 42, 43, 44)}
• Fixed an issue where notifications would sometimes not appear from certain long domains on Windows. #​54348
• Fixed an issue where pages loaded in a detached WebContentsView wouldn't see the correct window size. #​53031 ^{(Also in 42, 43, 44)}
• Fixed an issue where some values passed into requestSingleInstanceLock could result in a crash. #​52025 ^{(Also in 42, 43, 44)}
• Fixed an issue where the browser-side check that blocks drag and drop between cross-site frames of the same page was disabled. #​53748 ^{(Also in 43, 44)}
• Fixed an npm install failure with no recovery path when the OS blocked the native zip extractor from loading (for example, Windows Smart App Control). #​52748 ^{(Also in 43, 44)}
• Fixed an uncatchable TypeError in net.fetch when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. #​54671 ^{(Also in 44)}
• Fixed app.disableHardwareAcceleration() not fully disabling GPU hardware usage on Windows starting from Electron 38. #​51817 ^{(Also in 41, 42, 43, 44)}
• Fixed app.getGPUInfo('complete') stalling the GPU process for several seconds on some Windows systems. #​53645 ^{(Also in 44)}
• Fixed app.getLoginItemSettings() not finding login items on Windows when the executable path contains spaces. #​54419
• Fixed app.getRecentDocuments() omitting documents with non-ASCII paths on Windows. #​54385 ^{(Also in 44)}
• Fixed application crash after a large number of IPC messages from renderers. #​53418 ^{(Also in 42, 43, 44)}
• Fixed asar archives in non-ASCII folders failing to load on Linux. #​54848 ^{(Also in 44)}
• Fixed BrowserWindow size corruption on Windows when created with explicit x/y on a secondary monitor whose DPI differs from the primary. #​51603 ^{(Also in 42, 43, 44)}
• Fixed BrowserWindow.unmaximize() and restore() having no effect on Wayland when the window was maximized immediately after creation. #​53063 ^{(Also in 42, 43, 44)}
• Fixed chrome.tabs.query() returning tab url and title to extensions without the tabs permission or host access, aligning with tabs.get. #​53353 ^{(Also in 42, 43, 44)}
• Fixed clipboard.read(), readText() and has() resolving seconds late on Linux while the app was idle. #​54307 ^{(Also in 42, 43, 44)}
• Fixed crash in sharedTexture module when GPU context becomes unavailable. #​49518 ^{(Also in 42, 43, 44)}
• Fixed crash triggered by replacing an open application menu. #​52248 ^{(Also in 41, 42, 43, 44)}
• Fixed crashes in setDisplayMediaRequestHandler when the granted frame had been destroyed or another tab was granted by id. #​53673 ^{(Also in 42, 43, 44)}
• Fixed crashes in sharedTexture, service-worker ipcRenderer and utilityProcess.fork() caused by object lifetime bugs. #​53280 ^{(Also in 43, 44)}
• Fixed crashes in the main process when a webRequest.onBeforeRequest listener redirected a CORS preflight request, and when calling net.fetch() with a webRequest-permission extension loaded. #​53302 ^{(Also in 43, 44)}
• Fixed crashes when a webContents or parent window is destroyed while other APIs still reference it. #​53281 ^{(Also in 43, 44)}
• Fixed crashes when certain app event handlers call back into Electron synchronously. #​53269 ^{(Also in 43, 44)}
• Fixed Ctrl+Y not yanking text killed with Ctrl+K in text fields on macOS. #​53715 ^{(Also in 44)}
• Fixed custom V8 snapshots (electron-mksnapshot, and the loadBrowserProcessSpecificV8Snapshot fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. #​52872 ^{(Also in 42, 43, 44)}
• Fixed default protocol client APIs falsely returning true on Windows. #​53958 ^{(Also in 43, 44)}
• Fixed desktopCapturer.getSources() leaving non-resizable windows resizable on macOS. #​54398 ^{(Also in 43, 44)}
• Fixed DevTools device metrics overrides persisting indefinitely when a remote debugging client disconnected without clearing them. #​52254 ^{(Also in 42, 43, 44)}
• Fixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via webContents.setDevToolsWebContents(). #​52205 ^{(Also in 42, 43, 44)}
• Fixed dialog.showOpenDialog/dialog.showSaveDialog opening at an unusable location on Linux when defaultPath is a bare filename without a directory. #​52243 ^{(Also in 42, 43, 44)}
• Fixed Dirent.parentPath being undefined for fs.readdir, fs.readdirSync, fs.glob, and fs.globSync with withFileTypes: true inside asar archives. #​51845 ^{(Also in 42, 43, 44)}
• Fixed downloading files that live inside an asar archive, including saving a packed PDF from the built-in PDF viewer. #​52808 ^{(Also in 42, 43, 44)}
• Fixed fs.constants.O_DIRECTORY, O_NOFOLLOW and O_DIRECT holding x86 values on Linux arm64 and armv7l, which made opening a directory fail with EINVAL, and made require('trace_events') behave the same on cross-compiled builds as on native ones. #​53321 ^{(Also in 42, 43, 44)}
• Fixed fs.rmSync failing to remove read-only files on Windows. #​54190 ^{(Also in 42, 43, 44)}
• Fixed GDK_BACKEND leaking into processes spawned by Electron apps on Linux. #​54424 ^{(Also in 43, 44)}
• Fixed globalShortcut not working on GNOME Wayland by enabling Chromium's GlobalShortcutsPortalPreferredTrigger feature by default on Linux. #​52221 ^{(Also in 43)}
• Fixed GPU shaders compiled by Skia not being cached between launches. #​54156 ^{(Also in 44)}
• Fixed helper executables on macOS starting a second app instance when launched without a process type, for example through child_process.fork() with the runAsNode fuse disabled; fork() now throws in that configuration. [#​53839](https://redirect.github.com/e

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "after 2am and before 8am on friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: eesast-web@2024.0.0
npm error Found: graphql@17.0.2
npm error node_modules/graphql
npm error   graphql@"17.0.2" from the root project
npm error
npm error Could not resolve dependency:
npm error peer graphql@"^15.0.0 || ^16.0.0" from @apollo/client@3.14.1
npm error node_modules/@apollo/client
npm error   @apollo/client@"3.14.1" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-10-26T23_09_48_191Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-26T23_09_48_191Z-debug-0.log

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request