search

zkiiito / map-gallery-editor

GNU General Public License v3.0
1 stars 0 forks source link

build(deps-dev): bump electron from 10.2.0 to 11.2.2 #413

Closed dependabot-preview[bot] closed 3 years ago

dependabot-preview[bot] commented 3 years ago

Bumps electron from 10.2.0 to 11.2.2.

Release notes

Sourced from electron's releases.

electron v11.2.2

Release Notes for v11.2.2

Fixes

  • Fixed CSP with unsafe-eval detection with Trusted Types. #27469 (Also in 9, 10, 12)
  • Fixed <webview> not working with Trusted Types. #27464 (Also in 9, 10, 12)
  • Fixed regression that crashed Electron when processing an invalid icon. #27478 (Also in 12)
  • None. #27509 (Also in 12)

Other Changes

  • Backported the fix to CVE-2020-16044. #27491
  • Backported the fix to CVE-2021-21118 from V8. #27415
  • Backported the fix to a UAF in Mojo (1162198). #27401
  • Backported the fix to chromium:1153329. #27494
  • Security: backported fix for CVE-2021-21122. #27406

electron v11.2.1

Release Notes for v11.2.1

Fixes

  • Apps requesting the CAMERA_PAN_TILT_ZOOM permission will have the permission request handler called with a permission string of "media" instead of "font-access". #27423
  • Fixed crash when a keyboard event immediately precedes calling browserWindow.close() on Windows. #27357 (Also in 10, 12)
  • Fixed shutdown crash when quitting with in-progress downloads. #27419 (Also in 10, 12)
  • Increase stack size on windows x64 to 8MB. #27385 (Also in 10, 12)
  • Updated the ICU time zone database to the latest 2020f version. #27369

Other Changes

  • Backported the fix to CVE-2021-21120 from sqlite. #27424
  • Backported the fix to chromium:1160534. #27443
  • Backported the fixes to the save file dialog related CVE-2021-21123, CVE-2021-21129, CVE-2021-21130, CVE-2021-21131, CVE-2021-21141. #27437
  • Security: backported fix for chromium:1161654. #27411

electron v11.2.0

Release Notes for v11.2.0

Features

  • Made win.setAspectRatio() work on Windows. #27203 (Also in 12)

Fixes

  • Fixed a crash that could occur on app quit when using the remote module. #27069 (Also in 12)
  • Fixed an issue where BrowserViews couldn't be effectively reparented. #27219 (Also in 12)
  • Fixed an issue where non-draggable regions on BrowserViews could have incorrectly calculated bounds. #27183 (Also in 10, 12)
  • Fixed an issue where some draggable regions were not clickable when loaded into BrowserViews on Windows. #27178 (Also in 10, 12)
  • Fixed the pretty-print JavaScript feature in DevTools not functioning correctly. #27102

Other Changes

  • Updated Chromium to 87.0.4280.141. #27213

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)
dependabot-preview[bot] commented 3 years ago

Superseded by #419.