Skip to content

[dev-dependency](deps-dev): Bump electron from 37.2.5 to 37.4.0 in /electron-app in the npm_and_yarn group across 1 directory - #148

Merged
Nick2bad4u merged 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-app/npm_and_yarn-7cbe7c7964
Sep 4, 2025
Merged

Nick2bad4u merged 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-app/npm_and_yarn-7cbe7c7964

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2025

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the /electron-app directory: electron.

Updates electron from 37.2.5 to 37.4.0

Release notes

Sourced from electron's releases.

electron v37.4.0

Release Notes for v37.4.0

Features

  • Added tray.{get|set}AutosaveName to enable macOS tray icons to maintain position across launches. #48076 (Also in 36, 38)

Fixes

  • Fixed an issue where net.isOnline() always returned true in utilityProcesses. #48152 (Also in 36, 38)
  • Fixed an issue where snapped corner state wasn't properly restored after minimizing and then restoring. #48156 (Also in 36, 38)
  • Fixed an issue where the accent color would be accidentally inverted when set to match the system color. #48107 (Also in 36, 38)

Other Changes

  • Updated Chromium to 138.0.7204.243. #48119

electron v37.3.1

Release Notes for v37.3.1

Fixes

  • Fixed an issue where shell.openPath was not non-blocking as expected. #48088 (Also in 36, 38)
  • Fixed an issue where windows opened with window.open would never be offscreen. #48070 (Also in 38)
  • Fixed potential deadlock inside app.getLoginItemSettings on macOS. #48096 (Also in 36)

Other Changes

  • Updated Chromium to 138.0.7204.235. #48066

electron v37.3.0

Release Notes for v37.3.0

Features

  • Added support for app.getRecentDocuments() on Windows and macOS. #47923 (Also in 36, 38)
  • Adds the ability to change window accent color on Windows after initial window initialization via {get|set}AccentColor. #48017 (Also in 36, 38)
  • Internally switched to using DIR_ASSETS instead of DIR_MODULE/DIR_EXE to locate assets and resources, and added "assets" as a key that can be queried via app.getPath. #47951 (Also in 38)

Fixes

  • Fixed a crash possible when calling webContents.loadURL() from a failed webContents.loadURL() call's catch handler. #48045 (Also in 36, 38)
  • Fixed an issue where app.accessibilitySupportEnabled didn't work as expected. #48061 (Also in 38)
  • Fixed an issue where importing from electron/utility in an ESM file threw an error at runtime. #48021 (Also in 36, 38)
  • Fixed an issue where importing from electron/utility threw a ERR_MODULE_NOT_FOUND error at runtime. #47988 (Also in 36, 38)
  • Fixed an issue where the accent border was drawn on all windows regardless of the window's active focused status. #48011 (Also in 36, 38)
  • Fixed compilation error when disabling extensions and pdf_viewer. #47994 (Also in 38)

Other Changes

  • Updated Chromium to 138.0.7204.224. #47974
  • Updated Node.js to v22.18.0. #47935

electron v37.2.6

Release Notes for v37.2.6

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the /electron-app directory: [electron](https://github.com/electron/electron).


Updates `electron` from 37.2.5 to 37.4.0
- [Release notes](https://github.com/electron/electron/releases)
- [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md)
- [Commits](electron/electron@v37.2.5...v37.4.0)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 37.4.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Nick2bad4u as a code owner September 4, 2025 15:38
@dependabot dependabot Bot added dependabot Dependabot Pull Requests dependencies Pull requests that update a dependency file npm npm updates labels Sep 4, 2025
@Nick2bad4u

Copy link
Copy Markdown
Owner

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

@github-actions

github-actions Bot commented Sep 4, 2025

Copy link
Copy Markdown
Contributor
# npm audit report

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg
fix available via `npm audit fix --force`
Will install ts-migrate@0.0.0, which is a breaking change
node_modules/jscodeshift/node_modules/braces
node_modules/ts-migrate-plugins/node_modules/braces
  micromatch  <=4.0.7
  Depends on vulnerable versions of braces
  node_modules/jscodeshift/node_modules/micromatch
  node_modules/ts-migrate-plugins/node_modules/micromatch
    jscodeshift  0.3.20 - 0.13.1
    Depends on vulnerable versions of micromatch
    node_modules/jscodeshift
    node_modules/ts-migrate-plugins/node_modules/jscodeshift
      json5-writer  *
      Depends on vulnerable versions of jscodeshift
      node_modules/json5-writer
        ts-migrate  >=0.0.3
        Depends on vulnerable versions of json5-writer
        Depends on vulnerable versions of ts-migrate-plugins
        node_modules/ts-migrate
      ts-migrate-plugins  *
      Depends on vulnerable versions of jscodeshift
      node_modules/ts-migrate-plugins


6 vulnerabilities (4 moderate, 2 high)

To address all issues possible (including breaking changes), run:
  npm audit fix --force

Some issues need review, and may require choosing
a different dependency.

@github-actions

github-actions Bot commented Sep 4, 2025

Copy link
Copy Markdown
Contributor

Summary of the Pull Request

This pull request updates the Electron development dependency used in the /electron-app directory, bumping its version from 37.2.5 to 37.4.0. It introduces new features, fixes, and other updates. Below is a breakdown of the changes:


Key Updates in Electron:

New Features:

  1. Tray Icon Position (macOS):
    Added tray.{get|set}AutosaveName to allow tray icons to maintain their position across app launches.
    (#48076)

  2. Recent Documents Support:
    Added support for app.getRecentDocuments() on Windows and macOS.
    (#47923)

  3. Accent Color Adjustment (Windows):
    Enabled dynamic adjustment of

@github-actions

github-actions Bot commented Sep 4, 2025 •

Copy link
Copy Markdown
Contributor

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 39 0 0 0.79s
✅ COPYPASTE jscpd yes no no 9.06s
⚠️ CSS stylelint 2 2 0 3.34s
✅ HTML djlint 1 0 0 3.08s
⚠️ HTML htmlhint 1 1 0 0.29s
⚠️ JAVASCRIPT prettier 211 2 0 91.89s
✅ JSON jsonlint 16 0 0 2.31s
⚠️ JSON prettier 16 14 0 5.26s
✅ JSON v8r 16 0 0 22.4s
⚠️ MARKDOWN markdownlint 25 1 0 11.66s
⚠️ MARKDOWN markdown-link-check 25 3 0 606.62s
✅ MARKDOWN markdown-table-formatter 18 0 0 4.3s
✅ POWERSHELL powershell 8 0 0 8.55s
⚠️ POWERSHELL powershell_formatter 8 5 0 7.38s
✅ REPOSITORY checkov yes no no 28.69s
⚠️ REPOSITORY devskim yes 1 1 2.92s
✅ REPOSITORY dustilock yes no no 1.71s
✅ REPOSITORY gitleaks yes no no 2.55s
✅ REPOSITORY git_diff yes no no 0.15s
✅ REPOSITORY grype yes no no 39.81s
✅ REPOSITORY kics yes no no 2.89s
✅ REPOSITORY secretlint yes no no 3.86s
✅ REPOSITORY syft yes no no 4.08s
✅ REPOSITORY trivy yes no no 7.14s
✅ REPOSITORY trivy-sbom yes no no 0.5s
✅ REPOSITORY trufflehog yes no no 13.63s
⚠️ SPELL cspell 347 1388 0 652.81s
✅ SPELL lychee 94 0 0 45.75s
⚠️ TYPESCRIPT ts-standard 3 3 0 1.39s
✅ XML xmllint 1 0 0 2.08s
⚠️ YAML prettier 49 48 96 16.45s
✅ YAML v8r 49 0 0 70.71s
✅ YAML yamllint 49 0 0 8.58s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@Nick2bad4u
Nick2bad4u merged commit 18c6637 into main Sep 4, 2025
100 of 101 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/electron-app/npm_and_yarn-7cbe7c7964 branch September 4, 2025 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot Dependabot Pull Requests dependencies Pull requests that update a dependency file npm npm updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant