Security: backported fix for chromium:1196683. #28638
electron v12.0.3
Release Notes for v12.0.3
Fixes
Allow loading source maps from custom protocols and asar bundles. #28616 (Also in 13)
Fixed postData parameter missing from new-window event. #28543 (Also in 13)
Fixed a bug where, when a JumpList task description exceeded 260 characters, the JumpList was empty, despite valid entries. #28525 (Also in 11, 13)
Fixed a crash when loading pepper plugins. #28373 (Also in 13)
Fixed a network process crash that could happen when using setCertificateVerifyProc with many concurrent verification requests. #28465 (Also in 11, 13)
Fixed an issue where select-serial-port callback crashes when called with an invalid serial port ID. #28618 (Also in 13)
Fixed an issue where window.print() did not work properly when printing a pdf from the pdf plugin. #28352 (Also in 13)
Fixed an issue where errors thrown in functions passed over the contextBridge could be displayed incorrectly. #28447 (Also in 13)
Fixed an issue where the thumbar disappeared after win.hide() on Windows. #28389 (Also in 10, 11, 13)
Fixed bug where TouchBarPopover and TouchBarGroup were no longer rendering. #28411 (Also in 11)
Fixed crash when using profiler in devtools. #28531
Fixed failing to request file:// resources when web security is disabled. #28560 (Also in 11, 13)
Fixed rare crash when initializing the internal PDF extension. #28452 (Also in 13)
Fixed service worker not working with custom protocol. #28355 (Also in 11, 13)
Support wasm-eval csp behind WebAssemblyCSP flag. #28575 (Also in 11, 13)
Transparent windows cannot be maximized using the Windows system menu or by double clicking the title bar. #28622 (Also in 13)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Bumps electron from 11.3.0 to 12.0.5.
Release notes
Sourced from electron's releases.
... (truncated)
Commits
258f245
Bump v12.0.5d0fdf5a
build: fix docs only change script to pull all files not just 30 (#28742)3d82985
docs(build-instructions): clarify that these are for building Electron itself...93342d9
build: read node files as binary files (#28736)50094b3
chore: clean up some spec things (#28730)13284a3
fix: do not handle write errors after request is aborted (#28721)5da6ee1
fix: invoke the window open handler for _blank links (#28498) (#28664)4de3e45
chore: bump chromium to 89.0.4389.128 (12-x-y) (#28659)d270462
build: do not require vsts token for releases (#28650)9ce7c51
Bump v12.0.4Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)