From 895e7d5f8e231024de2613fdd1fd9913c38a3149 Mon Sep 17 00:00:00 2001 From: AviPeltz Date: Wed, 5 Aug 2026 11:19:16 -0700 Subject: [PATCH] fix(desktop): bump Electron to 40.9.3 to resolve Dependabot alerts Closes 9 open Dependabot alerts (#263-271) including two high-severity issues: a context isolation bypass and a custom-protocol CORS bypass. --- apps/desktop/package.json | 2 +- bun.lock | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/apps/desktop/package.json b/apps/desktop/package.json index 1c089d5ac8f..d564488f91a 100644 --- a/apps/desktop/package.json +++ b/apps/desktop/package.json @@ -266,7 +266,7 @@ "@vitejs/plugin-react": "5.2.0", "code-inspector-plugin": "1.4.5", "cross-env": "10.1.0", - "electron": "40.8.5", + "electron": "40.9.3", "electron-builder": "26.8.1", "electron-vite": "4.0.1", "material-icon-theme": "5.32.0", diff --git a/bun.lock b/bun.lock index b845d00cb8d..a941da44fdc 100644 --- a/bun.lock +++ b/bun.lock @@ -344,7 +344,7 @@ "@vitejs/plugin-react": "5.2.0", "code-inspector-plugin": "1.4.5", "cross-env": "10.1.0", - "electron": "40.8.5", + "electron": "40.9.3", "electron-builder": "26.8.1", "electron-vite": "4.0.1", "material-icon-theme": "5.32.0", @@ -4175,7 +4175,7 @@ "electric-proxy": ["electric-proxy@workspace:apps/electric-proxy"], - "electron": ["electron@40.8.5", "", { "dependencies": { "@electron/get": "^2.0.0", "@types/node": "^24.9.0", "extract-zip": "^2.0.1" }, "bin": { "electron": "cli.js" } }, "sha512-pgTY/VPQKaiU4sTjfU96iyxCXrFm4htVPCMRT4b7q9ijNTRgtLmLvcmzp2G4e7xDrq9p7OLHSmu1rBKFf6Y1/A=="], + "electron": ["electron@40.9.3", "", { "dependencies": { "@electron/get": "^2.0.0", "@types/node": "^24.9.0", "extract-zip": "^2.0.1" }, "bin": { "electron": "cli.js" } }, "sha512-rDcJOT6BBE689Ada+4jD3rVr05pMv9MZOgT0x/rIMVDF9c4ttx4RTb6lVARTyxZC7uqpirttCtcli1eg1DX5qg=="], "electron-builder": ["electron-builder@26.8.1", "", { "dependencies": { "app-builder-lib": "26.8.1", "builder-util": "26.8.1", "builder-util-runtime": "9.5.1", "chalk": "^4.1.2", "ci-info": "^4.2.0", "dmg-builder": "26.8.1", "fs-extra": "^10.1.0", "lazy-val": "^1.0.5", "simple-update-notifier": "2.0.0", "yargs": "^17.6.2" }, "bin": { "electron-builder": "cli.js", "install-app-deps": "install-app-deps.js" } }, "sha512-uWhx1r74NGpCagG0ULs/P9Nqv2nsoo+7eo4fLUOB8L8MdWltq9odW/uuLXMFCDGnPafknYLZgjNX0ZIFRzOQAw=="],