foragepm / forage

🎒 An IPFS-backed package manager proxy cache
MIT License
33 stars 6 forks source link

Bump electron from 13.4.0 to 15.3.1 #178

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps electron from 13.4.0 to 15.3.1.

Release notes

Sourced from electron's releases.

electron v15.3.1

Release Notes for v15.3.1

Features

  • Added warning when ipcRenderer.sendSync() is called with no listeners for channel on ipcMain. #31434 (Also in 13, 14, 16)

Fixes

  • Changed WebHID to use disable-hid-blocklist flag to enable FIDO devices. #31649 (Also in 16)
  • Fixed <webview> background transparency regression. #31701 (Also in 14)
  • Fixed clipboard.writeBuffer(), clipboard.readBuffer() and clipboard.read()'s ability to manipulate platform-specific clipboard formats. #31720 (Also in 16)
  • Fixed a crash when a BrowserWindow is closed subsequent to its webContents being destroyed. #31644 (Also in 14, 16)
  • Fixed a tracing agent-related crash when initializing Node.js in service workers. #31476 (Also in 14, 16)
  • Fixed an issue where Content-Disposition filenames would be incorrectly truncated at the first comma for a filename attachment which contained one. #31693 (Also in 13, 14, 16)
  • Fixed an issue where MediaMetadata did not work properly. #31534 (Also in 13, 14, 16)
  • Fixed an issue where app.getPath('crashDumps') returned an incorrect path for Linux. #31712 (Also in 16)
  • Fixed an issue where clipboard.read() could cause crashes with custom clipboard formats. #31591 (Also in 16)
  • Fixed an issue which caused print settings to not work properly when printing silently. #31616 (Also in 13, 14, 16)
  • Fixed clipboard.read to once again work like clipboard.readBuffer. #31651 (Also in 16)
  • Fixed crash when using sync dialog APIs immediately after async dialog APIs. #31658 (Also in 16)
  • Fixed event with invalid timestamp in trace log. #31422 (Also in 14, 16)
  • None. #31480 (Also in 16)

Other Changes

  • Backported fix for CVE-2021-37981. #31497
  • Backported fix for CVE-2021-37985. #31516
  • Backported fix for CVE-2021-37987. #31539
  • Backported fix for CVE-2021-37989. #31523
  • Backported fix for CVE-2021-37992. #31519
  • Backported fix for CVE-2021-37996. #31543
  • Backported fix for chromium:1245870. #31501
  • Backported fix for chromium:1252858. #31680

electron v15.3.0

Release Notes for v15.3.0

Features

  • Began passing securityOrigin in details for permission request handlers for media requests in addition to permission check handlers. #31417 (Also in 13, 14, 16)

Fixes

  • Fixed a potential crash when setting nativeTheme.themeSource on macOS. #31429 (Also in 14, 16)
  • Fixed possible 'Object has been destroyed' error when calling window.open with a frame name and using setWindowOpenHandler. #31468 (Also in 14, 16)
  • Generate valid config.gypi file in Node.js headers. #31442 (Also in 14, 16)
  • Removes several Chromium private APIs from Mac Apple Store builds. #31483 (Also in 16)

Other Changes

  • Changed Web Serial to use ses.setDevicePermissionHandler to allow developers more control over Web Serial permissioning. #31418 (Also in 16)

electron v15.2.0

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 2 years ago

Superseded by #180.