search

chips-blockchain / pangea-poker

This is the reference GUI for Pangea Poker, blackchain based decentralised game.
https://chips.cash/
25 stars 16 forks source link

Update dependency electron to v11 [SECURITY] - autoclosed #497

Closed renovate[bot] closed 2 years ago

renovate[bot] commented 2 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
electron 10.4.5 -> 11.5.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-39184

Impact

This vulnerability allows a sandboxed renderer to request a "thumbnail" image of an arbitrary file on the user's system. The thumbnail can potentially include significant parts of the original file, including textual data in many cases.

All current stable versions of Electron are affected.

Patches

This was fixed with #​30728, and the following Electron versions contain the fix:

Workarounds

If your app enables contextIsolation, this vulnerability is significantly more difficult for an attacker to exploit.

Further, if your app does not depend on the createThumbnailFromPath API, then you can simply disable the functionality. In the main process, before the 'ready' event:

delete require('electron').nativeImage.createThumbnailFromPath

For more information

If you have any questions or comments about this advisory, email us at security@electronjs.org.

Release Notes

electron/electron ### [`v11.5.0`](https://togithub.com/electron/electron/releases/v11.5.0) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.12...v11.5.0) ### Release Notes for v11.5.0 #### Other Changes - Security: Backported fix for [`1227933`](https://togithub.com/electron/electron/commit/1227933). [#​30614](https://togithub.com/electron/electron/pull/30614) (Also in [12](https://togithub.com/electron/electron/pull/30615)) - Security: Backported fix for [`1231134`](https://togithub.com/electron/electron/commit/1231134). [#​30761](https://togithub.com/electron/electron/pull/30761) - Security: Backported fix for [`1233564`](https://togithub.com/electron/electron/commit/1233564). [#​30755](https://togithub.com/electron/electron/pull/30755) - Security: Backported fix for [`1234009`](https://togithub.com/electron/electron/commit/1234009). [#​30751](https://togithub.com/electron/electron/pull/30751) - Security: Backported fix for [`1234764`](https://togithub.com/electron/electron/commit/1234764). [#​30659](https://togithub.com/electron/electron/pull/30659) (Also in [12](https://togithub.com/electron/electron/pull/30660)) #### End of Support for 11.x.y Electron 11.x.y has reached end-of-support as per the project's [support policy](https://electronjs.org/docs/tutorial/support#supported-versions). Developers and applications are encouraged to upgrade to a newer version of Electron. ### [`v11.4.12`](https://togithub.com/electron/electron/releases/v11.4.12) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.11...v11.4.12) ### Release Notes for v11.4.12 #### Fixes - Security: backported fix for https://crbug.com/1204814. [#​30399](https://togithub.com/electron/electron/pull/30399) ### [`v11.4.11`](https://togithub.com/electron/electron/releases/v11.4.11) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.10...v11.4.11) ### Release Notes for v11.4.11 #### Other Changes - Security: backported fix for [`1205059`](https://togithub.com/electron/electron/commit/1205059),1196302. [#​30267](https://togithub.com/electron/electron/pull/30267) - Security: backported fix for CVE-2021-30541. [#​30200](https://togithub.com/electron/electron/pull/30200) - Security: backported fix for CVE-2021-30560. [#​30183](https://togithub.com/electron/electron/pull/30183) - Security: backported fix for CVE-2021-30562. [#​30196](https://togithub.com/electron/electron/pull/30196) - Security: backported fix for CVE-2021-30563. [#​30199](https://togithub.com/electron/electron/pull/30199) - Security: backported fix for CVE-2021-30568. [#​30228](https://togithub.com/electron/electron/pull/30228) - Security: backported fix for CVE-2021-30569. [#​30296](https://togithub.com/electron/electron/pull/30296) - Security: backported fix for CVE-2021-30572. [#​30262](https://togithub.com/electron/electron/pull/30262) - Security: backported fix for CVE-2021-30573. [#​30253](https://togithub.com/electron/electron/pull/30253) ### [`v11.4.10`](https://togithub.com/electron/electron/releases/v11.4.10) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.9...v11.4.10) ### Release Notes for v11.4.10 #### Other Changes - Backported fix for chromium:1211215. [#​29785](https://togithub.com/electron/electron/pull/29785) - Security: backported fix for CVE-2021-30522. [#​29879](https://togithub.com/electron/electron/pull/29879) - Security: backported fix for CVE-2021-30523. [#​29877](https://togithub.com/electron/electron/pull/29877) - Security: backported fix for CVE-2021-30547. [#​29790](https://togithub.com/electron/electron/pull/29790) - Security: backported fix for CVE-2021-30553. [#​29819](https://togithub.com/electron/electron/pull/29819) - Security: backported fix for CVE-2021-30554. [#​29823](https://togithub.com/electron/electron/pull/29823) - Security: backported fix for chromium:1194689. [#​29817](https://togithub.com/electron/electron/pull/29817) - Security: backported fix for chromium:1209558. [#​29815](https://togithub.com/electron/electron/pull/29815) ### [`v11.4.9`](https://togithub.com/electron/electron/releases/v11.4.9) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.8...v11.4.9) ### Release Notes for v11.4.9 #### Fixes - Fixed potential corruption of piped response data when using interceptHttpProtocol/registerHttpProtocol. [#​29667](https://togithub.com/electron/electron/pull/29667) (Also in [12](https://togithub.com/electron/electron/pull/29668), [13](https://togithub.com/electron/electron/pull/29669), [14](https://togithub.com/electron/electron/pull/29670)) - Security: backported fix for CVE-2021-30551. [#​29780](https://togithub.com/electron/electron/pull/29780) #### Other Changes - Security: backported fix for CVE-2021-30544. [#​29777](https://togithub.com/electron/electron/pull/29777) - Security: backported fix for CVE-2021-30548. [#​29787](https://togithub.com/electron/electron/pull/29787) ### [`v11.4.8`](https://togithub.com/electron/electron/releases/v11.4.8) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.7...v11.4.8) ### Release Notes for v11.4.8 #### Fixes - Fixed `will-resize` and `will-move` events not scaling the emitted `newBounds` rectangle to the appropriate Windows display scale factor. [#​29225](https://togithub.com/electron/electron/pull/29225) (Also in [12](https://togithub.com/electron/electron/pull/29226), [13](https://togithub.com/electron/electron/pull/29227)) - Fixed drag and drop not working correctly for some x11 window managers. [#​29271](https://togithub.com/electron/electron/pull/29271) (Also in [12](https://togithub.com/electron/electron/pull/29272)) - Fixed packaged apps allowing `--require` in `NODE_OPTIONS` on Windows. [#​29419](https://togithub.com/electron/electron/pull/29419) #### Other Changes - Fixed using custom v8 snapshots on Apple Silicon. [#​29347](https://togithub.com/electron/electron/pull/29347) (Also in [12](https://togithub.com/electron/electron/pull/29341), [13](https://togithub.com/electron/electron/pull/29339)) - Security: backported fixes for CVE-2021-30518, CVE-2021-30516, CVE-2021-30515, CVE-2021-30513, CVE-2021-30512, CVE-2021-30510, CVE-2021-30508. [#​29250](https://togithub.com/electron/electron/pull/29250) ### [`v11.4.7`](https://togithub.com/electron/electron/releases/v11.4.7) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.6...v11.4.7) ### Release Notes for v11.4.7 #### Fixes - Fixed an incorrect warning about enableRemoteModule being issued when the option was undefined (and thus defaulting to false). [#​29023](https://togithub.com/electron/electron/pull/29023) - Fixed an issue where events on webview elements were missing properties if contextIsolation was enabled. [#​29150](https://togithub.com/electron/electron/pull/29150) (Also in [10](https://togithub.com/electron/electron/pull/29143)) - Fixed corner radius for vibrancy view in macOS 11. [#​29072](https://togithub.com/electron/electron/pull/29072) (Also in [12](https://togithub.com/electron/electron/pull/29071), [13](https://togithub.com/electron/electron/pull/28679)) #### Documentation - Documentation changes: [#​29147](https://togithub.com/electron/electron/pull/29147) ### [`v11.4.6`](https://togithub.com/electron/electron/releases/v11.4.6) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.5...v11.4.6) ### Release Notes for v11.4.6 #### Fixes - Fixed `<webview>` `focus` / `blur` events not working with `contextIsolation` enabled. [#​29027](https://togithub.com/electron/electron/pull/29027) (Also in [10](https://togithub.com/electron/electron/pull/29026), [12](https://togithub.com/electron/electron/pull/29024), [13](https://togithub.com/electron/electron/pull/29025)) - Fixed an issue where drag regions on macOS would be offset incorrectly when no drag regions were set,. [#​29018](https://togithub.com/electron/electron/pull/29018) (Also in [12](https://togithub.com/electron/electron/pull/29019), [13](https://togithub.com/electron/electron/pull/29017)) ### [`v11.4.5`](https://togithub.com/electron/electron/releases/v11.4.5) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.4...v11.4.5) ### Release Notes for v11.4.5 #### Fixes - Allow Node.js to manage microtasks queue by using explicit microtasks policy before calling `uv_run()`. [#​28974](https://togithub.com/electron/electron/pull/28974) (Also in [12](https://togithub.com/electron/electron/pull/28972), [13](https://togithub.com/electron/electron/pull/28973)) - Fixed an issue where some Node.js modules would hang on page reload on Windows. [#​28336](https://togithub.com/electron/electron/pull/28336) (Also in [12](https://togithub.com/electron/electron/pull/28337), [13](https://togithub.com/electron/electron/pull/28335)) - Fixed an issue where windows in `simpleFullscreen` mode were not properly resizing when display metrics changed. [#​28870](https://togithub.com/electron/electron/pull/28870) (Also in [12](https://togithub.com/electron/electron/pull/28869), [13](https://togithub.com/electron/electron/pull/28216)) - Fixed the window-all-closed event being emitted while the last BrowserWindow was still in the process of being closed. [#​28912](https://togithub.com/electron/electron/pull/28912) (Also in [12](https://togithub.com/electron/electron/pull/28913), [13](https://togithub.com/electron/electron/pull/28914)) #### Other Changes - Security: backported fix for [`1161379`](https://togithub.com/electron/electron/commit/1161379), [`1186641`](https://togithub.com/electron/electron/commit/1186641). [#​28801](https://togithub.com/electron/electron/pull/28801) - Security: backported fix for CVE-2021-21214. [#​28934](https://togithub.com/electron/electron/pull/28934) - Security: backported fix for CVE-2021-21215 and CVE-2021-21216. [#​28948](https://togithub.com/electron/electron/pull/28948) - Security: backported fix to CVE-2021-21207. [#​28930](https://togithub.com/electron/electron/pull/28930) - Security: backported fix to CVE-2021-21223. [#​28813](https://togithub.com/electron/electron/pull/28813) - Security: backported fix to CVE-2021-21227. [#​28862](https://togithub.com/electron/electron/pull/28862) - Security: backported fix to CVE-2021-21230. [#​28902](https://togithub.com/electron/electron/pull/28902) - Security: backported fix to CVE-2021-21231. [#​28905](https://togithub.com/electron/electron/pull/28905) - Security: backported fix to CVE-2021-21233. [#​28873](https://togithub.com/electron/electron/pull/28873) ### [`v11.4.4`](https://togithub.com/electron/electron/releases/v11.4.4) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.3...v11.4.4) ### Release Notes for v11.4.4 #### Fixes - Fixed an issue where multiple calls to `window.setFullScreen` could cause problems. [#​28773](https://togithub.com/electron/electron/pull/28773) (Also in [12](https://togithub.com/electron/electron/pull/28772), [13](https://togithub.com/electron/electron/pull/28763)) - Fixed an issue where some dialogs would stop working on macOS if `window.hide()` was called while they were open. [#​28696](https://togithub.com/electron/electron/pull/28696) (Also in [12](https://togithub.com/electron/electron/pull/28695), [13](https://togithub.com/electron/electron/pull/28694)) - Fixed crash on m1 mac. [#​28745](https://togithub.com/electron/electron/pull/28745) - No longer set backgroundColor in default-app when opening custom files / URLs. [#​28843](https://togithub.com/electron/electron/pull/28843) (Also in [10](https://togithub.com/electron/electron/pull/28840), [12](https://togithub.com/electron/electron/pull/28841), [13](https://togithub.com/electron/electron/pull/28842)) #### Other Changes - Security: Backported fix for chromium:1195333. [#​28724](https://togithub.com/electron/electron/pull/28724) - Security: Backported fix to CVE-2021-21199. [#​28704](https://togithub.com/electron/electron/pull/28704) - Security: Backported fix to CVE-2021-21201. [#​28760](https://togithub.com/electron/electron/pull/28760) - Security: Backported fix to CVE-2021-21202. [#​28779](https://togithub.com/electron/electron/pull/28779) - Security: Backported fix to chromium:1190525. [#​28738](https://togithub.com/electron/electron/pull/28738) - Security: Backported the fix to CVE-2021-21195. [#​28697](https://togithub.com/electron/electron/pull/28697) - Security: backported fix for [`1192552`](https://togithub.com/electron/electron/commit/1192552). [#​28819](https://togithub.com/electron/electron/pull/28819) - Security: backported fix for CVE-2021-21194. [#​28702](https://togithub.com/electron/electron/pull/28702) - Security: backported fix for CVE-2021-21206. [#​28689](https://togithub.com/electron/electron/pull/28689) - Security: backported fix for CVE-2021-21222. [#​28816](https://togithub.com/electron/electron/pull/28816) - Security: backported fix for CVE-2021-21226. [#​28807](https://togithub.com/electron/electron/pull/28807) - Security: backported fix to CVE-2021-21198. [#​28797](https://togithub.com/electron/electron/pull/28797) - Security: backported fix to CVE-2021-21225. [#​28810](https://togithub.com/electron/electron/pull/28810) - Security: backported fix to chromium:1155297. [#​28822](https://togithub.com/electron/electron/pull/28822) - Security: backported fix to chromium:1161847. [#​28799](https://togithub.com/electron/electron/pull/28799) - Security: backported fix to chromium:1184441. [#​28796](https://togithub.com/electron/electron/pull/28796) ### [`v11.4.3`](https://togithub.com/electron/electron/releases/v11.4.3) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.2...v11.4.3) ### Release Notes for v11.4.3 #### Fixes - Fixed a bug where, when a JumpList task description exceeded 260 characters, the JumpList was empty, despite valid entries. [#​28524](https://togithub.com/electron/electron/pull/28524) (Also in [12](https://togithub.com/electron/electron/pull/28525), [13](https://togithub.com/electron/electron/pull/28526)) - Fixed a network process crash that could happen when using `setCertificateVerifyProc` with many concurrent verification requests. [#​28470](https://togithub.com/electron/electron/pull/28470) (Also in [12](https://togithub.com/electron/electron/pull/28465), [13](https://togithub.com/electron/electron/pull/28433)) - Fixed failing to request file:// resources when web security is disabled. [#​28589](https://togithub.com/electron/electron/pull/28589) (Also in [12](https://togithub.com/electron/electron/pull/28560), [13](https://togithub.com/electron/electron/pull/28557)) - Support `wasm-eval` csp behind `WebAssemblyCSP` flag. [#​28576](https://togithub.com/electron/electron/pull/28576) (Also in [12](https://togithub.com/electron/electron/pull/28575), [13](https://togithub.com/electron/electron/pull/28569)) - Transparent windows cannot be maximized using the Windows system menu or by double clicking the title bar. [#​28635](https://togithub.com/electron/electron/pull/28635) (Also in [12](https://togithub.com/electron/electron/pull/28622), [13](https://togithub.com/electron/electron/pull/28527)) #### Other Changes - Security: backported fix for chromium:1196683. [#​28639](https://togithub.com/electron/electron/pull/28639) ### [`v11.4.2`](https://togithub.com/electron/electron/releases/v11.4.2) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.1...v11.4.2) ### Release Notes for v11.4.2 #### Fixes - Fixed an issue where the thumbar disappeared after `win.hide()` on Windows. [#​28391](https://togithub.com/electron/electron/pull/28391) (Also in [10](https://togithub.com/electron/electron/pull/28388), [12](https://togithub.com/electron/electron/pull/28389), [13](https://togithub.com/electron/electron/pull/28390)) - Fixed bug where TouchBarPopover and TouchBarGroup were no longer rendering. [#​28412](https://togithub.com/electron/electron/pull/28412) (Also in [12](https://togithub.com/electron/electron/pull/28411)) - Fixed crash when exiting app with active nodejs worker_threads. [#​28471](https://togithub.com/electron/electron/pull/28471) - Fixed service worker not working with custom protocol. [#​28353](https://togithub.com/electron/electron/pull/28353) (Also in [12](https://togithub.com/electron/electron/pull/28355), [13](https://togithub.com/electron/electron/pull/28354)) #### Documentation - Documentation changes: [#​28364](https://togithub.com/electron/electron/pull/28364) ### [`v11.4.1`](https://togithub.com/electron/electron/releases/v11.4.1) [Compare Source](https://togithub.com/electron/electron/compare/v11.4.0...v11.4.1) ### Release Notes for v11.4.1 #### Fixes - Fixed `desktopCapturer.getSources()` promise result sometimes never resolving. [#​28282](https://togithub.com/electron/electron/pull/28282) (Also in [10](https://togithub.com/electron/electron/pull/28279), [12](https://togithub.com/electron/electron/pull/28281), [13](https://togithub.com/electron/electron/pull/28280)) - Fixed an issue where the drag regions in BrowserViews on macOS could be off in their y-axis. [#​28297](https://togithub.com/electron/electron/pull/28297) (Also in [10](https://togithub.com/electron/electron/pull/28295), [12](https://togithub.com/electron/electron/pull/28296), [13](https://togithub.com/electron/electron/pull/28298)) - Fixed context menus not being positioned correctly when near the edge of the screen. [#​28278](https://togithub.com/electron/electron/pull/28278) (Also in [12](https://togithub.com/electron/electron/pull/28277), [13](https://togithub.com/electron/electron/pull/28276)) - Fixed intensive I/O from asar files causing ERR_FILE_NOT_FOUND after a while. [#​28201](https://togithub.com/electron/electron/pull/28201) (Also in [12](https://togithub.com/electron/electron/pull/28202), [13](https://togithub.com/electron/electron/pull/28203)) - Fixed issue where window.open() would not return an object with a location.href setter when contextIsolation is enabled and nativeWindowOpen is disabled. [#​28161](https://togithub.com/electron/electron/pull/28161) (Also in [10](https://togithub.com/electron/electron/pull/28160), [12](https://togithub.com/electron/electron/pull/27940)) - URLS passed to `shell.openExternal` on windows are now correctly URI encoded. This was already occurring on macOS and Linux. [#​28340](https://togithub.com/electron/electron/pull/28340) (Also in [10](https://togithub.com/electron/electron/pull/28339), [12](https://togithub.com/electron/electron/pull/28341), [13](https://togithub.com/electron/electron/pull/28342)) #### Other Changes - Security: Backported fix to CVE-2021-21174. [#​28233](https://togithub.com/electron/electron/pull/28233) - Security: Backported the fix to CVE-2021-21169. [#​28236](https://togithub.com/electron/electron/pull/28236) - Security: backported fix for CVE-2021-21166. [#​28132](https://togithub.com/electron/electron/pull/28132) - Security: backported fix for CVE-2021-21172. [#​28294](https://togithub.com/electron/electron/pull/28294) - Security: backported fix for CVE-2021-21175. [#​28247](https://togithub.com/electron/electron/pull/28247) - Security: backported fix for CVE-2021-21179. [#​28249](https://togithub.com/electron/electron/pull/28249) - Security: backported fix for chromium:1167357. [#​28198](https://togithub.com/electron/electron/pull/28198) #### Documentation - Documentation changes: [#​28212](https://togithub.com/electron/electron/pull/28212) ### [`v11.4.0`](https://togithub.com/electron/electron/releases/v11.4.0) [Compare Source](https://togithub.com/electron/electron/compare/v11.3.0...v11.4.0) ### Release Notes for v11.4.0 #### Features - Added support for the des-ede3 cipher in node crypto. [#​27993](https://togithub.com/electron/electron/pull/27993) (Also in [12](https://togithub.com/electron/electron/pull/27992)) #### Fixes - Colors returned from `systemPreferences.getAccentColor()`, `getSystemColor` and `getColor` are now correctly converted into the devices color space. Previously the color would have been subtly incorrect. [#​28171](https://togithub.com/electron/electron/pull/28171) (Also in [12](https://togithub.com/electron/electron/pull/28172), [13](https://togithub.com/electron/electron/pull/28173)) - Fixed a potential crash when resetting `BrowserView`s. [#​27948](https://togithub.com/electron/electron/pull/27948) (Also in [10](https://togithub.com/electron/electron/pull/27946), [12](https://togithub.com/electron/electron/pull/27947)) - Fixed an issue where `BrowserView`s could have mismatched draggable regions to their bounds. [#​27987](https://togithub.com/electron/electron/pull/27987) (Also in [10](https://togithub.com/electron/electron/pull/27986), [12](https://togithub.com/electron/electron/pull/27988)) - Fixed an issue where `win.capturePage()` never called back after calling `hide()` for a hidden window on some platforms. [#​28074](https://togithub.com/electron/electron/pull/28074) (Also in [12](https://togithub.com/electron/electron/pull/28075), [13](https://togithub.com/electron/electron/pull/28076)) - Fixed an issue where libuv might hang with multiple subframes when `nodeIntegrationInSubframes` is enabled. [#​27880](https://togithub.com/electron/electron/pull/27880) (Also in [10](https://togithub.com/electron/electron/pull/27881), [12](https://togithub.com/electron/electron/pull/27879)) - Fixed an out-of-bounds access in `WebContents.sendInputEvent`. [#​27853](https://togithub.com/electron/electron/pull/27853) (Also in [10](https://togithub.com/electron/electron/pull/27854), [12](https://togithub.com/electron/electron/pull/27855)) - Fixed background color not being applied for child windows created by native window.open path. [#​27944](https://togithub.com/electron/electron/pull/27944) (Also in [10](https://togithub.com/electron/electron/pull/27945), [12](https://togithub.com/electron/electron/pull/27942)) - Fixed crash when calling `getBackgroundColor` on a transparent window with no assigned background color. [#​28186](https://togithub.com/electron/electron/pull/28186) (Also in [12](https://togithub.com/electron/electron/pull/28188), [13](https://togithub.com/electron/electron/pull/28187)) - Fixed native window.open() to not use *windowName/frameName* as title by default. [#​27813](https://togithub.com/electron/electron/pull/27813) (Also in [10](https://togithub.com/electron/electron/pull/27868), [12](https://togithub.com/electron/electron/pull/27552)) - Fixed navigator.bluetooth.requestDevice crash. [#​27941](https://togithub.com/electron/electron/pull/27941) (Also in [12](https://togithub.com/electron/electron/pull/27927)) - Fixed warning when `worldSafeExecuteJavaScript` is disabled. [#​27968](https://togithub.com/electron/electron/pull/27968) (Also in [10](https://togithub.com/electron/electron/pull/27974), [12](https://togithub.com/electron/electron/pull/27969)) #### Other Changes - Backported fix for CVE-2020-27844. [#​28101](https://togithub.com/electron/electron/pull/28101) - Fixed native module compilation with AsyncCleanupHooks on windows. [#​28108](https://togithub.com/electron/electron/pull/28108) (Also in [12](https://togithub.com/electron/electron/pull/28109), [13](https://togithub.com/electron/electron/pull/28110)) - Security: backported fix for [`1180871`](https://togithub.com/electron/electron/commit/1180871). [#​28046](https://togithub.com/electron/electron/pull/28046) - Security: backported fix for CVE-2021-21160. [#​28093](https://togithub.com/electron/electron/pull/28093) - Security: backported fix for CVE-2021-21162. [#​28091](https://togithub.com/electron/electron/pull/28091) - Security: backported fix for CVE-2021-21165. [#​28089](https://togithub.com/electron/electron/pull/28089) - Security: backported fix for CVE-2021-21181. [#​28097](https://togithub.com/electron/electron/pull/28097) - Security: backported fix for CVE-2021-21193. [#​28165](https://togithub.com/electron/electron/pull/28165) - Security: backported fix to [`1177593`](https://togithub.com/electron/electron/commit/1177593). [#​28050](https://togithub.com/electron/electron/pull/28050) ### [`v11.3.0`](https://togithub.com/electron/electron/releases/v11.3.0) [Compare Source](https://togithub.com/electron/electron/compare/v11.2.3...v11.3.0) ### Release Notes for v11.3.0 #### Features - Added `allowFileAccess` option to `loadExtension()` API. [#​27703](https://togithub.com/electron/electron/pull/27703) (Also in [12](https://togithub.com/electron/electron/pull/27702)) - Added `win.setTopBrowserView()` so that BrowserViews can be raised. [#​27712](https://togithub.com/electron/electron/pull/27712) (Also in [10](https://togithub.com/electron/electron/pull/27711), [12](https://togithub.com/electron/electron/pull/27713)) #### Fixes - Backported fix for https://crbug.com/1125165. [#​27558](https://togithub.com/electron/electron/pull/27558) - Fixed OS-level shortcuts on macOS (e.g. Ctrl + F2, ⌘ + ~). [#​27787](https://togithub.com/electron/electron/pull/27787) (Also in [12](https://togithub.com/electron/electron/pull/27769)) - Fixed SVG content with filter sometimes not being rendered. [#​27699](https://togithub.com/electron/electron/pull/27699) - Fixed a crash when calling `crypto.createDiffieHellman()` with certain parameters. [#​27766](https://togithub.com/electron/electron/pull/27766) (Also in [12](https://togithub.com/electron/electron/pull/27700)) - Fixed a memory leak when creating BrowserWindows. [#​27640](https://togithub.com/electron/electron/pull/27640) (Also in [12](https://togithub.com/electron/electron/pull/27641)) - Fixed an erroneous `enableBlinkFeatures` warning shown webviews which enabled no Blink features. [#​27789](https://togithub.com/electron/electron/pull/27789) (Also in [10](https://togithub.com/electron/electron/pull/27788), [12](https://togithub.com/electron/electron/pull/27790)) - Fixed an issue where deleted download directories would be sometimes recreated by the operating system. [#​27808](https://togithub.com/electron/electron/pull/27808) (Also in [10](https://togithub.com/electron/electron/pull/27807), [12](https://togithub.com/electron/electron/pull/27806)) - Fixed an occasional white flicker present when rendering BrowserViews in close succession. [#​27659](https://togithub.com/electron/electron/pull/27659) (Also in [10](https://togithub.com/electron/electron/pull/27660), [12](https://togithub.com/electron/electron/pull/27658)) - Fixed crash when destroying WebContents in the `crashed` event. [#​27757](https://togithub.com/electron/electron/pull/27757) (Also in [10](https://togithub.com/electron/electron/pull/27758), [12](https://togithub.com/electron/electron/pull/27756)) - Fixed memory leak when sending non-primitives over the context bridge. [#​27638](https://togithub.com/electron/electron/pull/27638) (Also in [10](https://togithub.com/electron/electron/pull/27637), [12](https://togithub.com/electron/electron/pull/27636)) - Fixed native window freeze on Windows when Electron app is sent to tray and external display changes. [#​27669](https://togithub.com/electron/electron/pull/27669) (Also in [12](https://togithub.com/electron/electron/pull/27668)) - Fixed svg with filter content not being rendered. [#​27635](https://togithub.com/electron/electron/pull/27635) #### Other Changes - Fixed crash when loading wasm modules in child node process with mac arm64 > 11.2. [#​27684](https://togithub.com/electron/electron/pull/27684) (Also in [12](https://togithub.com/electron/electron/pull/27685)) - Fixed slow child process spawning on macOS Big Sur. [#​27654](https://togithub.com/electron/electron/pull/27654) (Also in [10](https://togithub.com/electron/electron/pull/27655), [12](https://togithub.com/electron/electron/pull/27656)) - Reverted posix_spawn change in libuv that affected child process spawning on macOS Big Sur. [#​27809](https://togithub.com/electron/electron/pull/27809) (Also in [10](https://togithub.com/electron/electron/pull/27655), [12](https://togithub.com/electron/electron/pull/27656)) - Security: backported fix for [`1138143`](https://togithub.com/electron/electron/commit/1138143). [#​27780](https://togithub.com/electron/electron/pull/27780) - Security: backported fix for [`1155974`](https://togithub.com/electron/electron/commit/1155974). [#​27779](https://togithub.com/electron/electron/pull/27779) - Security: backported fix for [`1166504`](https://togithub.com/electron/electron/commit/1166504). [#​27778](https://togithub.com/electron/electron/pull/27778) - Security: backported fix for [`1170657`](https://togithub.com/electron/electron/commit/1170657). [#​27781](https://togithub.com/electron/electron/pull/27781) - Security: backported fix for [`1171954`](https://togithub.com/electron/electron/commit/1171954). [#​27777](https://togithub.com/electron/electron/pull/27777) - Security: backported fix for [`1172192`](https://togithub.com/electron/electron/commit/1172192). [#​27776](https://togithub.com/electron/electron/pull/27776) - Security: backported fix for [`1177341`](https://togithub.com/electron/electron/commit/1177341). [#​27750](https://togithub.com/electron/electron/pull/27750) - Security: backported fix for chromium:1162942. [#​27614](https://togithub.com/electron/electron/pull/27614) - Security: backported fix for https://crbug.com/1161705. [#​27609](https://togithub.com/electron/electron/pull/27609) #### Documentation - Documentation changes: [#​27817](https://togithub.com/electron/electron/pull/27817) ### [`v11.2.3`](https://togithub.com/electron/electron/releases/v11.2.3) [Compare Source](https://togithub.com/electron/electron/compare/v11.2.2...v11.2.3) ### Release Notes for v11.2.3 #### Fixes - Backported fix for https://crbug.com/952922. [#​27584](https://togithub.com/electron/electron/pull/27584) - Fixed crash when extension fails to load. [#​27588](https://togithub.com/electron/electron/pull/27588) (Also in [10](https://togithub.com/electron/electron/pull/27590), [12](https://togithub.com/electron/electron/pull/27589)) #### Other Changes - Security: Addressed [Chromium CVE-2021-21148](https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop\_4.html) with backported fix for chromium:1170176, chromium:961059. [#​27624](https://togithub.com/electron/electron/pull/27624) ### [`v11.2.2`](https://togithub.com/electron/electron/compare/v11.2.1...v11.2.2) [Compare Source](https://togithub.com/electron/electron/compare/v11.2.1...v11.2.2) ### [`v11.2.1`](https://togithub.com/electron/electron/releases/v11.2.1) [Compare Source](https://togithub.com/electron/electron/compare/v11.2.0...v11.2.1) ### Release Notes for v11.2.1 #### Fixes - Apps requesting the CAMERA_PAN_TILT_ZOOM permission will have the permission request handler called with a permission string of "media" instead of "font-access". [#​27423](https://togithub.com/electron/electron/pull/27423) - Fixed crash when a keyboard event immediately precedes calling `browserWindow.close()` on Windows. [#​27357](https://togithub.com/electron/electron/pull/27357) (Also in [10](https://togithub.com/electron/electron/pull/27358), [12](https://togithub.com/electron/electron/pull/27359)) - Fixed shutdown crash when quitting with in-progress downloads. [#​27419](https://togithub.com/electron/electron/pull/27419) (Also in [10](https://togithub.com/electron/electron/pull/27417), [12](https://togithub.com/electron/electron/pull/27418)) - Increase stack size on windows x64 to 8MB. [#​27385](https://togithub.com/electron/electron/pull/27385) (Also in [10](https://togithub.com/electron/electron/pull/27386), [12](https://togithub.com/electron/electron/pull/27384)) - Updated the ICU time zone database to the latest 2020f version. [#​27369](https://togithub.com/electron/electron/pull/27369) #### Other Changes - Backported the fix to CVE-2021-21120 from sqlite. [#​27424](https://togithub.com/electron/electron/pull/27424) - Backported the fix to chromium:1160534. [#​27443](https://togithub.com/electron/electron/pull/27443) - Backported the fixes to the save file dialog related CVE-2021-21123, CVE-2021-21129, CVE-2021-21130, CVE-2021-21131, CVE-2021-21141. [#​27437](https://togithub.com/electron/electron/pull/27437) - Security: backported fix for chromium:1161654. [#​27411](https://togithub.com/electron/electron/pull/27411) ### [`v11.2.0`](https://togithub.com/electron/electron/releases/v11.2.0) [Compare Source](https://togithub.com/electron/electron/compare/v11.1.1...v11.2.0) ### Release Notes for v11.2.0 #### Features - Made `win.setAspectRatio()` work on Windows. [#​27203](https://togithub.com/electron/electron/pull/27203) (Also in [12](https://togithub.com/electron/electron/pull/27202)) #### Fixes - Fixed a crash that could occur on app quit when using the remote module. [#​27069](https://togithub.com/electron/electron/pull/27069) (Also in [12](https://togithub.com/electron/electron/pull/27070)) - Fixed an issue where BrowserViews couldn't be effectively reparented. [#​27219](https://togithub.com/electron/electron/pull/27219) (Also in [12](https://togithub.com/electron/electron/pull/27187)) - Fixed an issue where non-draggable regions on BrowserViews could have incorrectly calculated bounds. [#​27183](https://togithub.com/electron/electron/pull/27183) (Also in [10](https://togithub.com/electron/electron/pull/27185), [12](https://togithub.com/electron/electron/pull/27184)) - Fixed an issue where some draggable regions were not clickable when loaded into BrowserViews on Windows. [#​27178](https://togithub.com/electron/electron/pull/27178) (Also in [10](https://togithub.com/electron/electron/pull/27222), [12](https://togithub.com/electron/electron/pull/27177)) - Fixed the pretty-print JavaScript feature in DevTools not functioning correctly. [#​27102](https://togithub.com/electron/electron/pull/27102) #### Other Changes - Updated Chromium to 87.0.4280.141. [#​27213](https://togithub.com/electron/electron/pull/27213) #### Unknown - Fixed `chrome.webRequest` extensions API not intercepting any requests. [#​27096](https://togithub.com/electron/electron/pull/27096) (Also in [10](https://togithub.com/electron/electron/pull/27097), [12](https://togithub.com/electron/electron/pull/27098)) ### [`v11.1.1`](https://togithub.com/electron/electron/releases/v11.1.1) [Compare Source](https://togithub.com/electron/electron/compare/v11.1.0...v11.1.1) ### Release Notes for v11.1.1 #### Fixes - Fixed `protocol` methods not being accessible via `remote.protocol`. [#​27044](https://togithub.com/electron/electron/pull/27044) (Also in [12](https://togithub.com/electron/electron/pull/27043)) - Fixed `readdir`/`readdirSync` (w/ `withFileTypes`) failing on a deep directory within archive. [#​27010](https://togithub.com/electron/electron/pull/27010) (Also in [12](https://togithub.com/electron/electron/pull/27011)) - Fixed a memory leak in desktopCapturer.getSources. [#​27056](https://togithub.com/electron/electron/pull/27056) (Also in [10](https://togithub.com/electron/electron/pull/27057), [12](https://togithub.com/electron/electron/pull/27058)) - Fixed an issue where SIGINT was improperly handled in Node.js processes. [#​26972](https://togithub.com/electron/electron/pull/26972) (Also in [10](https://togithub.com/electron/electron/pull/26970), [12](https://togithub.com/electron/electron/pull/26971)) - Fixed an issue where renderer process stack traces were broken with `contextIsolation` enabled. [#​26997](https://togithub.com/electron/electron/pull/26997) (Also in [12](https://togithub.com/electron/electron/pull/26912)) - Fixed an issue where some `async_hooks` were not properly emitted after an error in the renderer process. [#​26991](https://togithub.com/electron/electron/pull/26991) (Also in [12](https://togithub.com/electron/electron/pull/26990)) - Fixed an issue whereby `remote.screen` `EventEmitter` methods are undefined in the renderer. [#​26989](https://togithub.com/electron/electron/pull/26989) (Also in [12](https://togithub.com/electron/electron/pull/26988)) ### [`v11.1.0`](https://togithub.com/electron/electron/releases/v11.1.0) [Compare Source](https://togithub.com/electron/electron/compare/v11.0.5...v11.1.0) ### Release Notes for v11.1.0 #### Fixes - Added Electron DLLs like libGLESv2.dll to symbol server. [#​26965](https://togithub.com/electron/electron/pull/26965) (Also in [9](https://togithub.com/electron/electron/pull/26967), [10](https://togithub.com/electron/electron/pull/26964), [12](https://togithub.com/electron/electron/pull/26966)) - Fixed an issue that a message box in GTK contains no buttons. [#​26916](https://togithub.com/electron/electron/pull/26916) (Also in [10](https://togithub.com/electron/electron/pull/26915), [12](https://togithub.com/electron/electron/pull/26917)) - Fixed an issue where `event.reply` could sometimes not deliver a reply to an IPC message when cross-site iframes were present. [#​26926](https://togithub.com/electron/electron/pull/26926) (Also in [9](https://togithub.com/electron/electron/pull/26928), [10](https://togithub.com/electron/electron/pull/26927), [12](https://togithub.com/electron/electron/pull/26925)) - Fixed an occasional crash on Windows related to NativeViewHost::SetParentAccessible. [#​26951](https://togithub.com/electron/electron/pull/26951) (Also in [9](https://togithub.com/electron/electron/pull/26950), [10](https://togithub.com/electron/electron/pull/26949), [12](https://togithub.com/electron/electron/pull/26952)) ### [`v11.0.5`](https://togithub.com/electron/electron/releases/v11.0.5) [Compare Source](https://togithub.com/electron/electron/compare/v11.0.4...v11.0.5) ### Release Notes for v11.0.5 #### Fixes - Fixed "screen" methods to be reassignable again. [#​26873](https://togithub.com/electron/electron/pull/26873) (Also in [12](https://togithub.com/electron/electron/pull/26868)) - Fixed `systemPreferences.effectiveAppearance` returning `systemPreferences.getAppLevelAppearance()`. [#​26878](https://togithub.com/electron/electron/pull/26878) (Also in [9](https://togithub.com/electron/electron/pull/26881), [10](https://togithub.com/electron/electron/pull/26882), [12](https://togithub.com/electron/electron/pull/26879)) - Fixed callbacks passed via the `remote` module not being released after all references are dropped. [#​26836](https://togithub.com/electron/electron/pull/26836) (Also in [12](https://togithub.com/electron/electron/pull/26833)) - Fixed uncaught promise rejection when creating `webContents` with javascript disabled. [#​26870](https://togithub.com/electron/electron/pull/26870) (Also in [10](https://togithub.com/electron/electron/pull/26871), [12](https://togithub.com/electron/electron/pull/26869)) #### Other Changes - Updated Chromium to 87.0.4280.88. [#​26817](https://togithub.com/electron/electron/pull/26817) ### [`v11.0.4`](https://togithub.com/electron/electron/releases/v11.0.4) [Compare Source](https://togithub.com/electron/electron/compare/v11.0.3...v11.0.4) ### Release Notes for v11.0.4 #### Fixes - Added default Bluetooth permission strings to info.plist. [#​26768](https://togithub.com/electron/electron/pull/26768) (Also in [12](https://togithub.com/electron/electron/pull/26769)) - Fixed an issue where IsMaximized would incorrectly return false for some windows on Windows. [#​26780](https://togithub.com/electron/electron/pull/26780) (Also in [12](https://togithub.com/electron/electron/pull/26772)) - Fixed an issue where draggable regions did not work exclusively on BrowserViews on Windows. [#​26774](https://togithub.com/electron/electron/pull/26774) (Also in [12](https://togithub.com/electron/electron/pull/26775)) - Fixed an issue where draggable regions in BrowserWindow causes BrowserView to become draggable in non-correspondent places. [#​26754](https://togithub.com/electron/electron/pull/26754) (Also in [10](https://togithub.com/electron/electron/pull/26753), [12](https://togithub.com/electron/electron/pull/26755)) - Fixed import of unpacked node modules. [#​26751](https://togithub.com/electron/electron/pull/26751) (Also in [12](https://togithub.com/electron/electron/pull/26750)) ### [`v11.0.3`](https://togithub.com/electron/electron/releases/v11.0.3) [Compare Source](https://togithub.com/electron/electron/compare/v11.0.2...v11.0.3) ### Release Notes for v11.0.3 #### Fixes - Fixed `<webview>` `render-process-gone` event dispatch. [#​26578](https://togithub.com/electron/electron/pull/26578) - Fixed `contentTracing.stopRecording()` not rejecting when there is no trace in progress. [#​26655](https://togithub.com/electron/electron/pull/26655) (Also in [12](https://togithub.com/electron/electron/pull/26656)) - Fixed `screen` methods not being accessible via `remote.screen`. [#​26660](https://togithub.com/electron/electron/pull/26660) - Fixed a crash when calling `webContents.fromId` with an unknown ID. [#​26652](https://togithub.com/electron/electron/pull/26652) ### [`v11.0.2`](https://togithub.com/electron/electron/releases/v11.0.2) [Compare Source](https://togithub.com/electron/electron/compare/v11.0.1...v11.0.2) ### Release Notes for v11.0.2 #### Fixes - Fixed `LC_ALL` environment variable getting changed in Electron. [#​26551](https://togithub.com/electron/electron/pull/26551) (Also in [9](https://togithub.com/electron/electron/pull/26508), [10](https://togithub.com/electron/electron/pull/26550)) - Fixed an issue where some buttons were un-clickable in some BrowserViews with draggable regions enabled. [#​26528](https://togithub.com/electron/electron/pull/26528) - Fixed detection of launch on login items - Fixed detection of enabled state set by TaskManager. [#​26538](https://togithub.com/electron/electron/pull/26538) - Stopped using private API `CTFontDescriptorIsSystemUIFont` in MAS build. [#​26574](https://togithub.com/electron/electron/pull/26574) #### Other Changes - Updated Chromium to 87.0.4280.67. [#​26565](https://togithub.com/electron/electron/pull/26565) #### Unknown - Re-enable Rosetta on Apple Silicon devices. [#​26570](https://togithub.com/electron/electron/pull/26570) (Also in [7.3](https://togithub.com/electron/electron/pull/26571), [8](https://togithub.com/electron/electron/pull/26573), [9](https://togithub.com/electron/electron/pull/26572), [10](https://togithub.com/electron/electron/pull/26569)) ### [`v11.0.1`](https://togithub.com/electron/electron/releases/v11.0.1) [Compare Source](https://togithub.com/electron/electron/compare/v11.0.0...v11.0.1) ### Release Notes for v11.0.1 #### Fixes - Fixed an Uncaught TypeError when opening DevTools. [#​26514](https://togithub.com/electron/electron/pull/26514) - Removed private API usage that was blocking Mac App Store releases. [#​26513](https://togithub.com/electron/electron/pull/26513) ### [`v11.0.0`](https://togithub.com/electron/electron/releases/v11.0.0) [Compare Source](https://togithub.com/electron/electron/compare/v10.4.7...v11.0.0) ### Release Notes for v11.0.0 #### Stack Upgrades - Chromium 87.0.4280.47 - [v87 blog post](https://developers.google.com/web/updates/2020/11/nic87) - [v86 blog post](https://developers.google.com/web/updates/2020/10/nic86) - Node v12.18.3 - [v12.18.3 release notes](https://togithub.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#​12.18.3) - [v12.18.2 release notes](https://togithub.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#​12.18.2) - [v12.18.1 release notes](https://togithub.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#​12.18.1) - [v12.18.0 release notes](https://togithub.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#​12.18.0) - [v12.17.0 release notes](https://togithub.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#​12.17.0) - V8 v8.7 - [v8.7 blog post](https://v8.dev/blog/v8-release-87) - [v8.6 blog post](https://v8.dev/blog/v8-release-86) #### Breaking Changes - Removed experimental APIs: `BrowserView.{destroy, fromId, fromWebContents, getAllViews}` and the `id` property of `BrowserView`. [#​23578](https://togithub.com/electron/electron/pull/23578) #### Features ##### Additions - Added new experimental apple silicon (darwin arm64) builds. [#​24545](https://togithub.com/electron/electron/pull/24545) - Added new app.runningUnderRosettaTranslation property to detect when running under rosetta on Apple silicon. [#​26492](https://togithub.com/electron/electron/pull/26492) - Added V8 crash message and location information to crashReport parameters. [#​24771](https://togithub.com/electron/electron/pull/24771) (Also in [10](https://togithub.com/electron/electron/pull/24866)) - Added a small console hint to console to help debug renderer crashes. [#​25474](https://togithub.com/electron/electron/pull/25474) (Also in [9](https://togithub.com/electron/electron/pull/25473), [10](https://togithub.com/electron/electron/pull/25472)) - Added new `system-context-menu` event to allow preventing and overriding the system context menu. [#​25835](https://togithub.com/electron/electron/pull/25835) - Added `webContents.forcefullyCrashRenderer()` to forcefully terminate a renderer process to assist with recovering a hung renderer. [#​25756](https://togithub.com/electron/electron/pull/25756) - Added `app.getApplicationInfoForProtocol()` API that returns detailed information about the app that handles a certain protocol. [#​24112](https://togithub.com/electron/electron/pull/24112) - Added `name` to `app.getAppMetrics()` output. [#​24359](https://togithub.com/electron/electron/pull/24359) - Added `utility-process-gone` event to `app`. [#​24367](https://togithub.com/electron/electron/pull/24367) - Added `visualEffectState` option to BrowserWindows to allow customization of vibrancy effect state on macOS. [#​25083](https://togithub.com/electron/electron/pull/25083) - Added app.createThumbnailFromPath() API that returns a preview image of a file given its file path and a maximum thumbnail size. [#​24802](https://togithub.com/electron/electron/pull/24802) - Added back a previously broken `visibleOnFullScreen` option for `setVisibleOnAllWorkspaces`. [#​24956](https://togithub.com/electron/electron/pull/24956) - Added desktopCapturer.getMediaSourceIdForWebContents(), can be used with getUserMedia to get a stream for a WebContent. [#​22701](https://togithub.com/electron/electron/pull/22701) - Added did-become-active event on Mac for observing any application activation. [#​23872](https://togithub.com/electron/electron/pull/23872) - Added new `worldSafeExecuteJavaScript` webPreference to ensure that the return values from `webFrame.executeJavaScript` are world safe when context isolation is enabled. [#​24114](https://togithub.com/electron/electron/pull/24114) (Also in [9](https://togithub.com/electron/electron/pull/24712), [10](https://togithub.com/electron/electron/pull/24711)) - Added optional parameter to specify monospaced font types for macOS tray titles. [#​25059](https://togithub.com/electron/electron/pull/25059) - Added support for suspend and resume events to Windows. [#​24251](https://togithub.com/electron/electron/pull/24251) (Also in [8](https://togithub.com/electron/electron/pull/24282), [9](https://togithub.com/electron/electron/pull/24283), [10](https://togithub.com/electron/electron/pull/24281)) - Added support for suspend and resume events to macOS. [#​24254](https://togithub.com/electron/electron/pull/24254) (Also in [8](https://togithub.com/electron/electron/pull/24295), [9](https://togithub.com/electron/electron/pull/24294), [10](https://togithub.com/electron/electron/pull/24293)) - Added the `currencyCode` field that Apple's StoreKit in-app-purchasing library provides but has not been added to the `Product` object that `inAppPurchase.getProducts` returns. [#​25058](https://togithub.com/electron/electron/pull/25058) - Added 'resized' (Windows/macOS) and 'moved' (Windows) events to BrowserWindow. [#​26454](https://togithub.com/electron/electron/pull/26454) ##### Improvements - Improved the performance of sending JS primitives over the context bridge. [#​24531](https://togithub.com/electron/electron/pull/24531) (Also in [9](https://togithub.com/electron/electron/pull/24746), [10](https://togithub.com/electron/electron/pull/24551)) - Improved the performance of sending wide objects over the context bridge. [#​24671](https://togithub.com/electron/electron/pull/24671) - Improved the default REPL experience when running Electron with the `--interactive` flag. [#​24204](https://togithub.com/electron/electron/pull/24204) - Improved performance of `takeHeapSnapshot()`. [#​26230](https://togithub.com/electron/electron/pull/26230) - Changed app.getLoginItemSettings() and app.setLoginItemSettings() API to factor in startup approval keys when determining whether an application is able to launch on login. [#​24494](https://togithub.com/electron/electron/pull/24494) - Expose sessionId associated with a target from debugger module. [#​24170](https://togithub.com/electron/electron/pull/24170) (Also in [8](https://togithub.com/electron/electron/pull/24399), [9](https://togithub.com/electron/electron/pull/24398), [10](https://togithub.com/electron/electron/pull/24397)) - Implemented `systemPreferences.getMediaAccessStatus()` on Windows. [#​24275](https://togithub.com/electron/electron/pull/24275) (Also in [8](https://togithub.com/electron/electron/pull/24313), [9](https://togithub.com/electron/electron/pull/24312), [10](https://togithub.com/electron/electron/pull/24311)) - V8CacheOptions is a new webpreference option to enforce code caching policy. [#​23842](https://togithub.com/electron/electron/pull/23842) (Also in [8](https://togithub.com/electron/electron/pull/23869), [9](https://togithub.com/electron/electron/pull/23868), [10](https://togithub.com/electron/electron/pull/23867)) - When the `disabled-by-default-v8.cpu_profiler` tracing category is enabled, cpu samples will now be collected from the main process as well as the renderer. [#​24819](https://togithub.com/electron/electron/pull/24819) ##### Removed/Deprecated - Removed experimental APIs: `BrowserView.{destroy, fromId, fromWebContents, getAllViews}` and the `id` property of `BrowserView`. [#​23578](https://togithub.com/electron/electron/pull/23578) #### Fixes - Fixed an issue where pageRanges was not properly honored when printing. [#​25600](https://togithub.com/electron/electron/pull/25600) (Also in [10](https://togithub.com/electron/electron/pull/25597)) - Fixed an issue whereby a corrupted `async_hooks` stack would crash the renderer when throwing some errors in the renderer process. [#​26424](https://togithub.com/electron/electron/pull/26424) - Fixed draggable regions stops working when devtools is opened on macOS. [#​26395](https://togithub.com/electron/electron/pull/26395) - Fixed `window.open` not accepting size values with "px" at the end. [#​26334](https://togithub.com/electron/electron/pull/26334) (Also in [10](https://togithub.com/electron/electron/pull/26333)) - Fixed an issue where draggable regions were not properly updated on BrowserViews when a containing `BrowserWindow` was resized. [#​26320](https://togithub.com/electron/electron/pull/26320) (Also in [9](https://togithub.com/electron/electron/pull/26322), [10](https://togithub.com/electron/electron/pull/26321)) - Fixed an issue where Hover Text on macOS Catalina did not work without VoiceOver also being enabled. [#

Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by WhiteSource Renovate. View repository job log here.