search

bitwarden / clients

Bitwarden client apps (web, browser extension, desktop, and cli).
https://bitwarden.com
Other
8.66k stars 1.14k forks source link

[PM-9103][deps] Tools: Update electron to v30.1.2 #9773

Closed renovate[bot] closed 1 week ago

renovate[bot] commented 1 week ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
electron 30.1.1 -> 30.1.2 age adoption passing confidence

Release Notes

electron/electron (electron) ### [`v30.1.2`](https://togithub.com/electron/electron/releases/tag/v30.1.2): electron v30.1.2 [Compare Source](https://togithub.com/electron/electron/compare/v30.1.1...v30.1.2) ### Release Notes for v30.1.2 #### Fixes - Fixed an issue where MessagePorts could close unexpectedly with non-cloneable objects sent via `postMessage`. [#​42582](https://togithub.com/electron/electron/pull/42582) (Also in [32](https://togithub.com/electron/electron/pull/42581)) - Fixed an issue where `navigator.usb.getDevices()` could crash in some circumstances. [#​42461](https://togithub.com/electron/electron/pull/42461) (Also in [29](https://togithub.com/electron/electron/pull/42463), [31](https://togithub.com/electron/electron/pull/42462)) #### Other Changes - Fixed crash in gpu process when software compositing is enabled on linux with x11 platform. [#​42567](https://togithub.com/electron/electron/pull/42567) (Also in [29](https://togithub.com/electron/electron/pull/42569), [31](https://togithub.com/electron/electron/pull/42570), [32](https://togithub.com/electron/electron/pull/42568))

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Mend Renovate. View repository job log here.

bitwarden-bot commented 1 week ago

Internal tracking:

codecov[bot] commented 1 week ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 29.29%. Comparing base (248bf56) to head (2d826a6). Report is 10 commits behind head on main.

:exclamation: Current head 2d826a6 differs from pull request most recent head 19086e0

Please upload reports for the commit 19086e0 to get more accurate results.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #9773 +/- ## ======================================= Coverage 29.29% 29.29% ======================================= Files 2532 2532 Lines 73789 73789 Branches 13770 13770 ======================================= Hits 21613 21613 Misses 50554 50554 Partials 1622 1622 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

github-actions[bot] commented 1 week ago

Logo Checkmarx One – Scan Summary & Details – da633eb2-2149-4b6d-92be-2d50db5a883b

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Client_DOM_XSS /apps/web/src/connectors/common.ts: 2 Attack Vector
LOW Client_DOM_Open_Redirect /apps/web/src/connectors/common.ts: 2 Attack Vector
LOW Client_DOM_Open_Redirect /apps/web/src/connectors/common.ts: 2 Attack Vector
LOW Unprotected_Cookie /apps/web/src/app/auth/two-factor.component.ts: 159 Attack Vector
LOW Unprotected_Cookie /apps/web/src/connectors/duo-redirect.ts: 57 Attack Vector
LOW Unprotected_Cookie /apps/web/src/connectors/duo-redirect.ts: 112 Attack Vector

Fixed Issues

Severity Issue Source File / Package
HIGH Client_DOM_XSS /apps/web/src/connectors/common.ts: 2
LOW Client_DOM_Open_Redirect /apps/web/src/connectors/common.ts: 2
LOW Client_DOM_Open_Redirect /apps/web/src/connectors/common.ts: 2