[deps] Tools: Update electron to v30

[renovate[bot]]

trafficstars

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
electron	28.3.1 -> 30.0.3

---

Release Notes

electron/electron (electron)

v30.0.3

Compare Source

v30.0.2: electron v30.0.2

Compare Source

Release Notes for v30.0.2

Fixes

• Electron doesn't paint on offscreen-render mode after gpu process crashed. #​41925 (Also in 29, 31)
• Fixed data corruption when protocol.handle() processed incoming data asynchronously. #​41933 (Also in 31)
• Fixed nativeImage.createThumbnailFromPath and shell.openExternal not resolving when called in the renderer process. #​41909 (Also in 31)

Other Changes

• Updated Chromium to 124.0.6367.91. #​41976

Documentation

• Documentation changes: #​41883

v30.0.1: electron v30.0.1

Compare Source

Release Notes for v30.0.1

Other Changes

• Updated Chromium to 124.0.6367.60. #​41867

v30.0.0: electron v30.0.0

Compare Source

Release Notes for v30.0.0

Stack Upgrades

• Chromium 124.0.6367.49
  • New in 124
  • New in 123
• Node 20.11.1
  • Node 20.11.1 blog post
• V8 12.4

Breaking Changes

• Added WebContentsView and BaseWindow, replacing the now-deprecated BrowserView APIs. #​35658 (Also in 29)
• Added Windows support for the ASAR Integrity fuse. #​40504
• Updated Chromium to 122.0.6194.0. (Behavior Changed: cross-origin iframes now use Permission Policy to access features) #​40750
• Updated Chromium to 122.0.6236.2. (Removed: The --disable-color-correct-rendering switch) #​40871
• The inputFieldType property in the context-menu params has been removed. #​41440
• Updated Chromium to 124.0.6323.0 (Removed: process.getIOCounters()) #​41412

Features

Additions

• Added a transparent webpreference to webviews. #​40301
• Added a new instance property navigationHistory on webContents API with navigationHistory.getEntryAtIndex method, enabling applications to retrieve the URL and title of any navigation entry within the browsing history.#​41662 (Also in 29)
• Added a new method BrowserWindow.isOccluded() to allow apps to check occlusion status. #​38982
• Added net module to utility process. #​40017 (Also in 27, 28, 29)
• Added proxy configuring support for requests made with net module from utility process. #​41417 (Also in 28, 29)
• Added support for Bluetooth ports being requested by service class ID in navigator.serial. #​41734 (Also in 29)
• Added support for NODE_EXTRA_CA_CERTS. #​41822
• Implemented support for the File System API. #​41827

Removed/Deprecated

• Removed extraneous dlls from Windows zip files. #​41120 (Also in 28, 29)

Fixes

• Fixed and BrowserViews being white instead of transparent by default. #​40866
• Fixed WebContents.loadURL() incorrectly failing if called immediately after a previous call to loadURL() failed. #​40661
• Fixed a bug where a window with maximization disabled and WCO enabled would still show its maximization button. #​41805
• Fixed a potential crash while closing or interacting with a WebContentsView after its associated WebContents has been cleaned up. #​41154
• Fixed an issue where app.getLoginItemSettings didn't correctly throw errors. #​41667
• Fixed an issue where child views in a BrowserWindow could sometimes be. #​41802
• Fixed an issue where showing or focusing a panel window would activate the app on Mac. #​41844
• Improved appearance of caption buttons on Windows 11 when using Windows Control Overlay. #​41586
• Properly reject webcontents.loadURL promise on invalid URL load. #​41194

Also in earlier versions...

• Added support for ThumbnailCapturerMac and ScreenCaptureKitStreamPickerSonoma chromium feature flags to bypass deprecated API warning on macOS 14.4. #​41328 (Also in 29)
• Apply module search paths restriction on worker and child process. #​41118 (Also in 27, 28, 29)
• CSS style -webkit-app-region: drag; has no effect in full screen mode. #​41307 (Also in 27, 28, 29)
• Ensured ScreenCaptureKit is used exclusively on macOS 14.4 and higher to avoid permission prompts. #​41404 (Also in 29)
• Fixed Electron 29.0.0-beta.3 regression that could pop up context menus in the wrong location. #​41275 (Also in 29)
• Fixed chrome://process-internals failing to load. #​41540 (Also in 28, 29)
• Fixed session.fromPartition() key lookup bug. #​41055 (Also in 28, 29)
• Fixed shell.showItemInFolder not opening Windows Explorer if the passed path contains forward slashes. #​41671 (Also in 28, 29)
• Fixed a crash resultant from trying to listen to power-related events before the ready event was emitted on Linux. #​40888 (Also in 26, 27, 28, 29)
• Fixed a crash that started occurring sporadically with some types of macOS window close. #​41264 (Also in 28, 29)
• Fixed a partition alloc ref count check for higher MacOS versions. #​40757 (Also in 28, 29)
• Fixed a potential async_hooks crash when listening for the restore event on Windows after minimizing a maximized BrowserWindow. #​40576 (Also in 27, 28, 29)
• Fixed a potential crash in chrome.scripting on extension unload. #​41702 (Also in 29)
• Fixed a potential crash when calling dialog.showMessageBoxSync. #​40996 (Also in 27, 28, 29)
• Fixed an issue on Windows where silent printing resulted in comically tiny renderer output. #​41838 (Also in 29)
• Fixed an issue where import.meta.url did not work in the renderer process with contextIsolation enabled. #​40993 (Also in 29)
• Fixed an issue where inAppPurchase.getProducts and inAppPurchase.purchasedProduct did not resolve as expected. #​40938 (Also in 27, 28, 29)
• Fixed an issue where original-fs methods were not properly corrected for patched imports. #​41209 (Also in 29)
• Fixed an issue where select-usb-device did not respect the filter option in navigator.usb.requestDevice(). #​41166 (Also in 27, 28, 29)
• Fixed an issue where user-did-{resign|become}-active were not emitted properly on macOS. #​41528 (Also in 28, 29)
• Fixed an issue where webContents.print(options) failed if options was not passed or undefined is passed. #​41480 (Also in 28, 29)
• Fixed an issue where webContents.printToPDF could fail when certain combinations of margins and pageSize values are passed. #​41157 (Also in 28, 29)
• Fixed an issue where badge text set using the Badging API no longer appeared correctly on Windows. #​41629 (Also in 29)
• Fixed an issue where crashes in node::Environment destruction potentially wouldn't be propagated to the NodeService exit handler. #​41277 (Also in 27, 28, 29)
• Fixed an issue where draggable regions didn't work across platforms. #​41030 (Also in 29)
• Fixed an issue where emojis weren't properly handled on Windows. #​41681 (Also in 29)
• Fixed an issue where non-modal windows with vibrancy could have incorrectly rounded corners on Sonoma. #​41003 (Also in 27, 28, 29)
• Fixed an issue where some dependencies using CommonJS would cause ESM apps to fail to open. #​41367 (Also in 29)
• Fixed an issue where the -webkit-app-region: drag property was not respected on some windows. #​41377 (Also in 29)
• Fixed an issue where the printBackground option in webContents.printToPDF did not work as expected. #​41161 (Also in 28, 29)
• Fixed an issue where the serial-port-added event improperly respected filters set by serial.requestPort(). #​41635 (Also in 28, 29)
• Fixed crash in MessagePort::close. #​41201 (Also in 29)
• Fixed crash in Notification::Close() under libnotify 0.8.x with portal environment. #​41708 (Also in 28, 29)
• Fixed default protocol handler behavior on Windows. #​40892 (Also in 28, 29)
• Fixed documentation of the default --inspect port. #​40665 (Also in 27, 28)
• Fixed forked child process not able to send IPC message under some cases on macOS. #​41079 (Also in 26, 27, 28, 29)
• Fixed incorrect title bar shown on frameless transparent windows. #​40749 (Also in 27, 28, 29)
• Fixed macOS bug that causes window maximize button to be disabled in full-screen mode. #​40994 (Also in 27, 28, 29)
• Fixed missing <__assertion_handler> header when compiling with libc++. #​41846 (Also in 29)
• Fixed on-screen-keyboard not hiding for webviews under some cases. #​41131 (Also in 27, 28, 29)
• Fixed the GrantFileProtocolExtraPrivileges not correctly preventing fetch() calls to file:// URLs. #​40801 (Also in 29)
• Fixed the enabled/disabled behavior of the maximize/fullscreen button of macOS windows. #​40705 (Also in 27, 28, 29)
• Fixed usage of Storage.{get|set|clear}Cookies via the Chrome DevTools Protocol. #​41740 (Also in 28, 29)
• Fixed various bugs which could prevent forwarding requests intercepted with protocol.handle(). #​41052 (Also in 29)
• Unset all Node envs in node process when parent is a foreign process. #​40770 (Also in 26, 27, 28, 29)

Documentation

• Documentation change
  • #​41732

Notices

End of Support for 27.x.y

Electron 27.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.

v29.3.2: electron v29.3.2

Compare Source

Release Notes for v29.3.2

Fixes

• Electron doesn't paint on offscreen-render mode after gpu process crashed. #​41923 (Also in 30, 31)
• Fixed an issue where console.log() in AudioWorkletGlobalScope produced incorrect output. #​41889 (Also in 28)
• Fixed an issue where recentDOcuments wasn't populating properly on macOS. #​41994 (Also in 31)

Other Changes

• Security: backported fix for CVE-2024-4060.
  • Security: backported fix for CVE-2024-4058. #​41982

v29.3.1: electron v29.3.1

Compare Source

Release Notes for v29.3.1

Fixes

• Fixed an issue on Windows where silent printing resulted in comically tiny renderer output. #​41836 (Also in 28, 30)
• Fixed missing <__assertion_handler> header when compiling with libc++. #​41845 (Also in 30)

Other Changes

• Security: backported fix for CVE-2024-3515.
  • Security: backported fix for CVE-2024-3516.
  • Security: backported fix for CVE-2024-3157. #​41854

v29.3.0: electron v29.3.0

Compare Source

Release Notes for v29.3.0

Fixes

• Fixed a bug where a window with maximization disabled and WCO enabled would still show its maximization button. #​41807

Other Changes

• Security: backported fix for CVE-2024-3156. #​41775

v29.2.0: electron v29.2.0

Compare Source

Release Notes for v29.2.0

Fixes

• Fixed crash in Notification::Close() under libnotify 0.8.x with portal environment. #​41707 (Also in 28, 30)
• Fixed usage of Storage.{get|set|clear}Cookies via the Chrome DevTools Protocol. #​41739 (Also in 28, 30)

Other Changes

• Security: backported fix for CVE-2024-2885.
  • Security: backported fix for CVE-2024-2883.
  • Security: backported fix for CVE-2024-2887.
  • Security: backported fix for CVE-2024-2886.
  • Security: backported fix for 3296748.
  • Security: backported fix for 3271834.
  • Security: backported fix for 3263494. #​41746
• Updated Chromium to 122.0.6261.156. #​41765

Documentation

• Documentation changes: #​41730

Unknown

• Added support for Bluetooth ports being requested by service class ID in navigator.serial. #​41735 (Also in 30)

v29.1.6: electron v29.1.6

Compare Source

Release Notes for v29.1.6

Fixes

• Fixed shell.showItemInFolder not opening Windows Explorer if the passed path contains forward slashes. #​41672 (Also in 28, 30)
• Fixed a potential crash in chrome.scripting on extension unload. #​41701 (Also in 30)
• Fixed an issue where emojis weren't properly handled on Windows. #​41680 (Also in 30)
• Fixed an issue where the serial-port-added event improperly respected filters set by serial.requestPort(). #​41636 (Also in 28, 30)

Other Changes

• Security: backported fix for CVE-2024-2625. #​41631
• Updated Chromium to 122.0.6261.139. #​41634

v29.1.5: electron v29.1.5

Compare Source

Release Notes for v29.1.5

Fixes

• Fixed an issue where badge text set using the Badging API no longer appeared correctly on Windows. #​41628 (Also in 30)

Other Changes

• Updated Chromium to 122.0.6261.130. #​41598

v29.1.4: electron v29.1.4

Compare Source

Release Notes for v29.1.4

Other Changes

• Updated Chromium to 122.0.6261.129. #​41583

v29.1.3: electron v29.1.3

Compare Source

Release Notes for v29.1.3

Fixes

• Fixed chrome://process-internals failing to load. #​41542 (Also in 28, 30)
• Fixed a memory corruption crash on Windows by removing DXDiag telemetry code. #​41574

Other Changes

• Backported fix for 4026530. #​41573
• Updated Chromium to 122.0.6261.112. #​41552

v29.1.2: electron v29.1.2

Compare Source

Release Notes for v29.1.2

Fixes

• Fixed chrome://process-internals failing to load. #​41542 (Also in 28, 30)
• Fixed a memory corruption crash on Windows by removing DXDiag telemetry code. #​41574

Other Changes

• Backported fix for 4026530. #​41573
• Updated Chromium to 122.0.6261.112. #​41552

v29.1.1: electron v29.1.1

Compare Source

Release Notes for v29.1.1

Fixes

• Fixed an issue where user-did-{resign|become}-active were not emitted properly on macOS. #​41527 (Also in 28, 30)
• Fixed an issue where webContents.print(options) failed if options was not passed or undefined is passed. #​41479 (Also in 28, 30)

Other Changes

• Updated Chromium to 122.0.6261.95. #​41489

v29.1.0: electron v29.1.0

Compare Source

Release Notes for v29.1.0

Features

• Added proxy configuring support for requests made with net module from utility process. #​41416 (Also in 30)

Fixes

• Ensured ScreenCaptureKit is used exclusively on macOS 14.4 and higher to avoid permission prompts. #​41403 (Also in 30)

Other Changes

• Updated Chromium to 122.0.6261.70. #​41446

v29.0.1: electron v29.0.1

Compare Source

Release Notes for v29.0.1

Fixes

• Fixed an issue where the -webkit-app-region: drag property was not respected on some windows. #​41388

Other Changes

• Updated Chromium to 122.0.6261.57. #​41390

v29.0.0: electron v29.0.0

Compare Source

Release Notes for v29.0.0

Stack Upgrades

• Chromium 122.0.6261.39
  • New in 122
  • New in 121
• Node 20.9.0
  • Node 20.9.0 blog post
• V8 12.2

Breaking Changes

• Functions called over the contextBridge are now called with the expected receiver (this). #​39978 (Also in 27, 28)
  • #​40330
• The gpu-process-crashed event on app has been deprecated. #​40169 (Also in 28)
• The deprecated gpu-process-crashed event on app has been removed. #​40255
• The deprecated renderer-process-crashed event on app and crashed event on WebContents and <webview> have been removed. #​40115

Features

Additions

• Added WebContentsView and BaseWindow, replacing the now-deprecated BrowserView APIs. #​40759
• Added keyboardLock to ses.setPermissionRequestHandler(handler). #​40369 (Also in 26, 27, 28)
• Added an option in protocol.registerSchemesAsPrivileged to allow V8 code cache in custom schemes. #​40544 (Also in 27, 28)
• Added net module to utility process. #​40890 (Also in 27, 28)
• Added new Electron Fuse that opts the file:// protocol into more secure and restrictive behaviour that matches Chromium. #​40372
• Added new webUtils.getPathForFile method to replace File.path augmentation. #​38776
• Added support for configuring use_remote_checksums via .npmrc. #​40253
• Migrated app.{set|get}LoginItemSettings(settings) to use Apple's new recommended underlying framework on macOS. #​37244
• This PR adds several properties to the display object including detected, maximumCursorSize, and nativeOrigin. #​40497 (Also in 28)

Removed/Deprecated

• Removed extraneous dlls from Windows zip files. #​41129 (Also in 28)

Fixes

• Added support for ThumbnailCapturerMac and ScreenCaptureKitStreamPickerSonoma chromium feature flags to bypass deprecated API warning on macOS 14.4. #​41329
• Fixed Electron 29.0.0-beta.3 regression that could pop up context menus in the wrong location. #​41296
• Fixed an issue where import.meta.url did not work in the renderer process with contextIsolation enabled. #​41265
• Fixed an issue where original-fs methods were not properly corrected for patched imports. #​41238
• Fixed an issue where draggable regions didn't work across platforms. #​41112
• Fixed an issue where some dependencies using CommonJS would cause ESM apps to fail to open. #​41371
• Fixed crash in MessagePort::close. #​41237
• Fixed the GrantFileProtocolExtraPrivileges not correctly preventing fetch() calls to file:// URLs. #​40864
• Fixed various bugs which could prevent forwarding requests intercepted with protocol.handle(). #​41359

Also in earlier versions...

• Apply module search paths restriction on worker and child process. #​41138 (Also in 27, 28)
• Backported fix for AVX related crashes on certain linux machines. #​40536 (Also in 26, 27, 28)
• CSS style -webkit-app-region: drag; has no effect in full screen mode. #​41332 (Also in 27, 28)
• Fixed "will-navigate" not being emitted when pressing links in chrome: pages. #​40390 (Also in 27, 28)
• Fixed session.fromPartition() key lookup bug. #​41084 (Also in 28)
• Fixed a crash resultant from trying to listen to power-related events before the ready event was emitted on Linux. #​40925 (Also in 26, 27, 28)
• Fixed a crash that started occurring sporadically with some types of macOS window close. #​41299 (Also in 28)
• Fixed a partition alloc ref count check for higher MacOS versions. #​40766 (Also in 28)
• Fixed a potential async_hooks crash when listening for the restore event on Windows after minimizing a maximized BrowserWindow. #​41146 (Also in 27, 28)
• Fixed a potential crash when calling dialog.showMessageBoxSync. #​41043 (Also in 27, 28)
• Fixed a potential issue with async_hook corruption in some error contexts. #​40574 (Also in 26, 27, 28)
• Fixed a unexpectedly thrown error in some unsupported chrome extensions. #​40500 (Also in 26, 27, 28)
• Fixed an error changing file format in dialog.showOpenDialog on macOS. #​40308 (Also in 27, 28)
• Fixed an issue where Request objects did not correctly copy headers into fetches. #​41019 (Also in 28)
• Fixed an issue where WebViews could sometimes crash on unload. #​40400 (Also in 26, 27, 28)
• Fixed an issue where Windows Toast notifications weren't properly dismissed from the Action Center on notification.close() if they'd previously been dismissed. #​40197 (Also in 26, 27, 28)
• Fixed an issue where MessagePorts were not being correctly garbage collected when not referenced. #​40189 (Also in 28)
• Fixed an issue where inAppPurchase.getProducts and inAppPurchase.purchasedProduct did not resolve as expected. #​40957 (Also in 27, 28)
• Fixed an issue where navigator.keyboard.lock() did not work per latest expected behavior. #​40365 (Also in 26, 27, 28)
• Fixed an issue where select-usb-device did not respect the filter option in navigator.usb.requestDevice(). #​41197 (Also in 27, 28)
• Fixed an issue where webContents.printToPDF could fail when certain combinations of margins and pageSize values are passed. #​41266 (Also in 28)
• Fixed an issue where crashes in node::Environment destruction potentially wouldn't be propagated to the NodeService exit handler. #​41301 (Also in 27, 28)
• Fixed an issue where devtools could not be re-opened. #​40666 (Also in 28)
• Fixed an issue where font requests were incorrectly being sent to dev tools multiple times per resource. #​40681 (Also in 27, 28)
• Fixed an issue where fully occluded windows would return an empty image from webContents.capturePage() on Windows and Linux. #​39730 (Also in 25, 26, 27, 28)
• Fixed an issue where non-modal windows with vibrancy could have incorrectly rounded corners on Sonoma. #​41037 (Also in 27, 28)
• Fixed an issue where the printBackground option in webContents.printToPDF did not work as expected. #​41180 (Also in 28)
• Fixed an issue where zoom level settings did not persist per-session for webviews. #​40650 (Also in 27, 28)
• Fixed an issue with webContents interaction with fullscreen and WCO on macOS. #​40179 (Also in 25, 26, 27, 28)
• Fixed app incorrectly activating panel windows on macOS Sonoma. #​40307 (Also in 28)
• Fixed child window opening in non-active macOS apps. #​40546 (Also in 26, 27, 28)
• Fixed default protocol handler behavior on Windows. #​40908 (Also in 28)
• Fixed file paths passed to shell.showItemInFolder not being escaped in Linux. #​40527 (Also in 26, 27, 28)
• Fixed forked child process not able to send IPC message under some cases on macOS. #​41102 (Also in 26, 27, 28)
• Fixed incorrect title bar shown on frameless transparent windows. #​40862 (Also in 27, 28)
• Fixed loading nested ESM dependencies in node_modules
  • Correctly support the throwIfNoEntry option in fs.statSync/fs.lstatSync in asar files. #​40221 (Also in 28)
• Fixed macOS bug that causes window maximize button to be disabled in full-screen mode. #​41029 (Also in 27, 28)
• Fixed on-screen-keyboard not hiding for webviews under some cases. #​41149 (Also in 27, 28)
• Fixed problem with bounds of maximized window when toggle BrowserWindow.setResizable function. #​40503 (Also in 26, 27, 28)
• Fixed resizing performance issue on macOS. #​40577 (Also in 26, 27, 28)
• Fixed some redundant permission dialogs while screen sharing on Wayland. #​40098 (Also in 26, 27, 28)
• Fixed the enabled/disabled behavior of the maximize/fullscreen button of macOS windows. #​40897 (Also in 27, 28)
• Prevent node mode to be used as script runner by other apps on macOS. #​40579 (Also in 26, 27, 28)
• Unset all Node envs in node process when parent is a foreign process. #​40881 (Also in 26, 27, 28)
• Use activateIgnoringOtherApps for focusing non-panels on macOS. #​40570 (Also in 28)

Other Changes

• Re-enabled partition alloc on Mac. #​33981 (Also in 28)
• Reverted new WebContentsView and BaseWindow APIs. #​41060
• Security: backported fix for chromium:1517354. #​40969

Notices

End of Support for 26.x.y

Electron 26.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[bitwarden-bot]

Internal tracking:

• ID: PM-7512
• Link: https://bitwarden.atlassian.net/browse/PM-7512

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 28.32%. Comparing base (f9faeeb) to head (4ef5215).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8764      +/-   ##
==========================================
- Coverage   28.33%   28.32%   -0.01%     
==========================================
  Files        2439     2439              
  Lines       71668    71668              
  Branches    13382    13382              
==========================================
- Hits        20305    20298       -7     
- Misses      49768    49775       +7     
  Partials     1595     1595              

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

[Hinton]

@djsmith85 I looked at the changelog and there is one noteworthy breaking change we should ensure gets properly QA attention.

Behavior Changed: cross-origin iframes now use Permission Policy to access features

Cross-origin iframes must now specify features available to a given iframe via the allow attribute in order to access them.

See documentation for more information.

[github-actions[bot]]

Checkmarx One – Scan Summary & Details – 9fb09c8e-0e01-4200-b35c-80fc9986ef3b

No New Or Fixed Issues Found

[renovate[bot]]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[renovate[bot]]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

[Hinton]

Upgraded to 30.1.0 and merged in main.