opentok-web-samples icon indicating copy to clipboard operation
opentok-web-samples copied to clipboard

Published 20 hours ago • verified publisher icon opentok

Update dependency electron to v19

Open mend-for-github-com[bot] opened this issue 3 years ago • 0 comments

This PR contains the following updates:

Package Type Update Change
electron dependencies major ^17.0.0-beta.1 -> ^19.0.0

By merging this PR, the issue #271 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 9.8 CVE-2021-44906
High High 9.8 CVE-2022-29247
High High 7.2 CVE-2022-29257
Medium Medium 5.3 CVE-2022-33987

Release Notes

electron/electron

v19.0.7

Compare Source

Release Notes for v19.0.7

Fixes

  • Fixed an issue where Windows Control Overlay buttons did not respect maximizable/minimizable/closable states of a BrowserWindow. #​34722 (Also in 17, 18, 20)
  • Fixed missing Sec-CH-UA headers and empty navigator.userAgentData. #​34757 (Also in 17, 18, 20)

Other Changes

  • Security: backported fix for CVE-2022-2162. #​34712
  • Updated Chromium to 102.0.5005.134. #​34702

v19.0.6

Compare Source

Release Notes for v19.0.6

Fixes

  • Fixed an issue where calling w.setWindowButtonVisibility(true) immediately after exiting fullscreen fails to show window buttons. #​34674 (Also in 18, 20)

v19.0.5

Compare Source

Release Notes for v19.0.5

Fixes

  • Fixed a performance problem in crashReporter.start() on macOS. #​34638 (Also in 17, 18)
  • Fixed an error where setWindowOpenHandler() would crash if the callback threw an error. #​34546 (Also in 18, 20)
  • Fixed an issue where draggable regions were not recalculated when BrowserView bounds changed on Windows. #​34611 (Also in 18, 20)
  • Fixed an issue where media keys would be sent to Electron on Windows no matter which window was in focus. #​34646
  • Fixed an issue where normal bounds would not be appropriately updated if the user minimized with the minimize button. #​34484 (Also in 18, 20)
  • Fixed an issue where passing { name: 'All Files', extensions: ['*'] } in the filters param of open or save dialogs on Linux would disallow choosing files without an extension. #​34517 (Also in 18, 20)
  • Fixed linux arm64 builds to not require glibc 2.29+. #​34502 (Also in 20)

Other Changes

  • Fixed an issue where BrowserViews didn't always visually update after call to setBounds. #​34642 (Also in 18, 20)
  • On Linux, changed the libgdk-pixbuf dependency to be dynamically linked rather than statically linked. #​34602 (Also in 18, 20)
  • Updated Chromium to 102.0.5005.115. #​34498

v19.0.4

Compare Source

Release Notes for v19.0.4

Fixes

  • Fixed behavior of BrowserWindow.maximize on macOS for not shown windows. #​34365 (Also in 15, 16, 17, 18)

v19.0.3

Compare Source

Release Notes for v19.0.3

Fixes

  • Fixed a crash when loading a same-origin URL after a render process crash. #​34431
  • Fixed potential crash in WebFrameMain when performing a cross-origin navigation. #​34416 (Also in 18, 20)

v19.0.2

Compare Source

Release Notes for v19.0.2

Fixes

  • Fixed an issue where pressing escape would not un-fullscreen on Windows or Linux in some circumstances. #​34359 (Also in 18)
  • Fixed an issue where zombie windows can be created if window.close() is called during a fullscreen transition. #​34391 (Also in 17, 18, 20)
  • Fixed printing crash when using webContents.print(). #​34369

Other Changes

  • Updated Chromium to 102.0.5005.63. #​34349

v19.0.1

Compare Source

Release Notes for v19.0.1

Other Changes

  • Added a TRACE call named crash_reporter::Start under the electron category for crash_reporter::Start(). #​34326 (Also in 17, 18)

v19.0.0

Compare Source

Release Notes for v19.0.0

Stack Upgrades

Features

Additions
  • Added BrowserWindow method to change the button color, symbol color, and height of a window with WCO enabled. #​33066 (Also in 18)
  • Added nativeTheme.inForcedColorsMode API to allow detecting forced color mode. #​32956 (Also in 15, 16, 17, 18)
  • Added ses.setCodeCachePath() API for setting code cache directory. #​31154 (Also in 17, 18)
  • Added ability to configure if window should close when opener closes. #​31314
  • Added support for more color formats in setBackgroundColor. #​31868 (Also in 18)
  • Added warning that preload scripts will be sandboxed by default beginning in Electron 20. #​32868 (Also in 18)
  • Enabled systemPreferences.subscribe{Local|Workspace}Notification to take a null value for the event parameter. #​33770 (Also in 18)
  • Fixed an issue where calling setTitlebarOverlay with an initially invalid titleBarStyle on Windows would result in a crash. #​34302
  • Fixed an issue where the PDF Viewer would fail if a user attempted to reload. #​33712 (Also in 18)

Fixes

  • Added support for the --unsafely-treat-insecure-origin-as-secure command-line flag. #​33189
  • Fixed a potential crash when calling webContents.print(). #​34299
  • Fixed an issue where #ARGB ->#RGBA and #AARRGGBB ->#RRGGBBAA were converted improperly when setting background color. #​33755
  • Fixed an issue where some BrowserWindows opened from new links wouldn't properly load URLs. #​34189
  • Fixed an issue with background colors being improperly applied to BrowserViews on Windows. #​33435
  • Fixed crash when img without alt is shown with accessibility features enabled. #​33841
  • Fixed the initialization of First Party Sets on Windows, where First Party Sets would sometimes fail to load. #​34138
  • Fixed the initialization of First Party Sets. #​33972
  • Fixed the initialization of first party sets in the browser process. #​34011
Also in earlier versions....
  • Apply senderFrame details to ipcMain port event. #​33783 (Also in 16, 17, 18)
  • Fire 'show' event when a BrowserWindow is shown via maximize(). #​32979 (Also in 16, 17, 18)
  • Fix: initialize asar support in worker threads. #​33216 (Also in 18)
  • Fixed BrowserWindow.showInactive restoring a maximized window to non-maximized on Windows. #​32870 (Also in 16, 17, 18)
  • Fixed a V8 crash that could happen randomly in non-sandboxed renderer processes. #​33252 (Also in 18)
  • Fixed a bug where BrowserWindow.fromWebContents would return undefined during the browser-window-created event. #​33257 (Also in 18)
  • Fixed a crash in safeStorage on Linux. #​34147 (Also in 15, 16, 17, 18)
  • Fixed a crash on Windows when opening apps in multiple, separate user sessions. #​34160 (Also in 18)
  • Fixed a crash when calling loadExtension on an extension directory that's missing a manifest file. #​34303 (Also in 16, 17)
  • Fixed a network service crash that could occur when using setCertificateVerifyProc. #​33204 (Also in 17, 18)
  • Fixed a potential crash in Browser.getFocusedWindow() when child windows are closed. #​33404 (Also in 16, 17, 18)
  • Fixed an OSR crash happening when input select items were rendered. #​34093 (Also in 17, 18)
  • Fixed an issue where BrowserView layout bounds where limited to it's visible bounds. #​32747 (Also in 17, 18)
  • Fixed an issue where Chrom DevTools settings didn't persist between loads. #​33120 (Also in 17, 18)
  • Fixed an issue where First Party Sets were not correctly loaded on app launch. #​33339 (Also in 18)
  • Fixed an issue where Pointer Lock behavior could not be properly exited. #​32369 (Also in 18)
  • Fixed an issue where BrowserWindow#isFocused() was returning false when blur() was called on macOS. #​34031 (Also in 17, 18)
  • Fixed an issue where Escape keyboard events would not be properly propagated to the parent window after entering fullscreen and then exiting it again on Windows. #​33788 (Also in 18)
  • Fixed an issue where alternateImages did not work properly on macOS. #​33026 (Also in 15, 16, 17, 18)
  • Fixed an issue where webContents.openDevTools({ mode }) did not work for certain dock positions. #​32829 (Also in 17, 18)
  • Fixed an issue where webContents.savePage failed when passing a relative path instead of an absolute one. #​32728 (Also in 15, 16, 17, 18)
  • Fixed an issue where bounds changes were incorrectly delayed in the case where a window was moved or resized and event.preventDefault was called in either will-resize or will-move on Windows. #​34285 (Also in 16, 17)
  • Fixed an issue where calling SetLoginItemSettings() could potentially cause network volumes to be incorrectly mounted. #​34108 (Also in 17, 18)
  • Fixed an issue where clicking "Open in Containing Folder" in the Sources tab in Devtools caused a crash. #​33024 (Also in 16, 17, 18)
  • Fixed an issue where frameless windows on Windows would incorrectly show a small frame during the loading process. #​32692 (Also in 14, 15, 16, 17, 18)
  • Fixed an issue where mixed-case extension filters in file dialogs were ignored on Linux. #​34015 (Also in 18)
  • Fixed an issue where new bounds set via setBounds was not correctly applied if the user was moving or resizing the window concurrently on Windows. #​33288 (Also in 18)
  • Fixed an issue where pages would not properly print on macOS due to a rendering failure. #​32767 (Also in 18)
  • Fixed an issue where setting window maxHeight or maxWidth made it so the width and height could no longer be resized. #​33025 (Also in 17, 18)
  • Fixed an issue where the Tray could get garbage collected incorrectly under some circumstances. #​33040 (Also in 15, 16, 17, 18)
  • Fixed an issue where the the window bounds would incorrectly change if BrowserWindow.unmaximize was called on a window whose user bounds were maximized. #​33549 (Also in 16, 17, 18)
  • Fixed an issue where tray items wouldn't highlight in some scenarios on macOS. #​34208 (Also in 16, 17, 18)
  • Fixed an issue with the app.requestSingleInstanceLock() API where it would sometimes hang. #​34071 (Also in 18)
  • Fixed an occasional crash on Mac when spawning a child process. #​33114 (Also in 17, 18)
  • Fixed broken event loop in renderer process when process reuse is enabled on windows platform. #​33207 (Also in 16, 17, 18)
  • Fixed broken transparency option in offscreen window rendering. #​32885 (Also in 16, 17, 18)
  • Fixed building node modules with Visual Studio 2017. #​34164 (Also in 18)
  • Fixed command string registered via setAsDefaultProtocolClient on windows. #​32953 (Also in 14, 15, 16, 17, 18)
  • Fixed crash in the render process on reload with pending node fs.promises. #​33280 (Also in 15, 16, 17, 18)
  • Fixed crash on startup due to missing gtk symbol on older distros. #​34151 (Also in 18)
  • Fixed crash when WindowButtonsProxy references cleared NSWindow. #​33069 (Also in 15, 16, 17, 18)
  • Fixed crash when opening gtk file dialogs due to mismatched versions. #​33813 (Also in 18)
  • Fixed drag regions on WCO windows on Windows. #​32871 (Also in 15, 16, 17, 18)
  • Fixed effect when hovering over window controls on Windows in a WCO-enabled window. #​32672 (Also in 14, 15, 16, 17, 18)
  • Fixed incorrect external memory allocation tracking in nativeImage module. #​33266 (Also in 15, 16, 17, 18)
  • Fixed incorrect return value of app.requestSingleInstanceLock() when setting non-existent user data folder. #​33593 (Also in 16, 17, 18)
  • Fixed issues with frameless window animations and styling. #​33609 (Also in 15, 16, 17, 18)
  • Fixed maximizing frameless windows by double-clicking on a draggable (title bar) region. #​33438 (Also in 15, 16, 17, 18)
  • Fixed multiple issues when running under Wayland caused by calling X11 functions. #​33355 (Also in 17, 18)
  • Fixed possible race conditions between frame state and electron ipc. #​32734 (Also in 17)
  • Fixed potential crash while generating accessibility trees for certain images. #​33617 (Also in 18)
  • Fixed potential crash with WebFrameMain when navigating between cross-origin websites. #​34294 (Also in 18)
  • Fixed slowness when using child_process.spawn and related methods on macOS Big Sur and newer. #​33337 (Also in 16, 17, 18)
  • Fixed stale renderer process when application is quit while renderer is busy. #​32888 (Also in 14, 15, 16, 17, 18)
  • Fixed the IncrementCapturerCount regression introduced by 13.0.0-beta.21. #​32973 (Also in 18)
  • SIGUSR1 is no longer handled when the node_cli_inspect fuse is disabled. #​33188 (Also in 16, 17, 18)
  • Strip crashpad_handler binary on Linux, reducing bundle size. #​33126 (Also in 15, 16, 17, 18)
  • Theoretical fix for a crash we're seeing when closing multiple child windows at the same time on macOS. #​33063 (Also in 17, 18)
  • [Mac] Fixed Partition Alloc related crash in pre-BigSur (macos <= 10.15). #​33966 (Also in 18)
  • shell.openExternal() now reports more detailed errors on Windows. #​33660 (Also in 15, 16, 17, 18)

Other Changes

  • Chore: backport EPROTOTYPE fixes from libuv. #​32856 (Also in 16, 17, 18)
  • Fixed an issue where adding/removing display changes the BrowserWindow size. #​33109 (Also in 14, 15, 16, 17, 18)
  • Fixed child_process.spawn ENOENT error with cwd option. #​33872 (Also in 16, 17, 18)
  • Re-enabled symbol generation on 32-bit Windows. #​34179
  • Removed the semi-documented preloadURL property from WebPreferences. #​33228
  • Temporarily disabled symbol generation on 32-bit Windows due to issues with symbol generation on that platform. #​33689
  • Updated node types version. #​33452 (Also in 18)

Documentation

End of Support for 15.x.y and 16.x.y

Electron 15.x.y and 16.x.y has reached end-of-support. As per Electron's new 8-week cadence, we were supporting the latest four versions of Electron until May 2022. With this Electron 19 release, we'll return to supporting the latest three major versions, as well as the alpha, beta, and nightly releases.

v18.3.15

Compare Source

Release Notes for v18.3.15

End of Support for 18.x.y

Electron 18.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.

Other Changes

  • Security: backported fix chromium:1346938. #​35827
  • Security: backported fix for CVE-2022-3196. #​35788
  • Security: backported fix for CVE-2022-3198. #​35792

v18.3.14

Compare Source

Release Notes for v18.3.14

Other Changes

  • Security: backported fix for CVE-2022-3039. #​35561
  • Security: backported fix for CVE-2022-3040. #​35551
  • Security: backported fix for CVE-2022-3045. #​35554
  • Security: backported fix for CVE-2022-3046. #​35550
  • Security: backported fix for CVE-2022-3075. #​35546
  • Security: backported fix for CVE-2022-3197. #​35790
  • Security: backported fix for CVE-2022-3199. #​35749
  • Security: backported fix for chromium:1359294,v8:12578. #​35775

v18.3.13

Compare Source

Release Notes for v18.3.13

Fixes

  • Added support for Windows drop-down dialog extensions. #​35661 (Also in 19, 20)

v18.3.12

Compare Source

Release Notes for v18.3.12

Other Changes

v18.3.11

Compare Source

Release Notes for v18.3.11

Fixes

  • Fixed an issue where frameless resizable windows showed Window 7 style frames while opening. #​35477 (Also in 19, 20, 21)

Other Changes

  • Security: backported fix for CVE-2022-2855. #​35424
  • Security: backported fix for CVE-2022-2857. #​35426
  • Security: backported fix for CVE-2022-2860. #​35434

v18.3.9

Compare Source

Release Notes for v18.3.9

Fixes

  • Fixed an issue where WCO could occlude DevTools opened in any non-detached mode. #​35307 (Also in 19, 20)
  • Fixed crash in renderer when resuming system from sleep. #​35340 (Also in 19, 20, 21)

Other Changes

v18.3.8

Compare Source

Release Notes for v18.3.8

Fixes

  • Added support for --ozone-platform-hint flag on Linux. #​35013 (Also in 19, 20)
  • Fixed a Windows Control Overlay issue where a window taken directly from minimized to maximized state could have incorrect hover state. #​35072 (Also in 19, 20)

Other Changes

v18.3.7

Compare Source

Release Notes for v18.3.7

Fixes

  • Fixed WCO not responding to touch events on windows. #​35177 (Also in 19, 20)
  • Fixed webContents.getUserAgent() incorrectly returning an empty string unless previously set. #​35130 (Also in 17, 19, 20)
  • Fixed an issue in which calling setBounds() after e.preventDefault in a 'will-move' or 'will-resize' event wouldn't change the window's shape until the mouse button was released. #​35082 (Also in 19, 20)
  • Fixed context menu not showing all items on macOS when dock is not hidden. #​35198 (Also in 19)
  • None. #​35171 (Also in 19, 20)

Other Changes

  • Fixed page size always being restricted to 4k on Linux arm64. #​35184
  • Security: backported fix for CVE-2022-2478. #​35099
  • Security: backported fix for chromium:1334864. #​35097

v18.3.6

Compare Source

Release Notes for v18.3.6

Fixes

  • Fixed a crash when calling BrowserWindow.setEnabled(). #​34973 (Also in 19, 20)
  • Fixed a potential crash when changing window settings after initializing WCO with an invalid titleBarStyle. #​34873 (Also in 17, 19, 20)
  • Fixed alwaysOnTop BrowserWindow option for X11 Linux. #​34911 (Also in 19, 20)
  • Fixed an issue where BrowserWindows on macOS were incorrectly marked as resizable. #​34907 (Also in 19, 20)
  • Fixed an issue where Windows Control Overlay buttons did not respect maximizable/minimizable/closable states of a BrowserWindow. #​34720 (Also in 17, 19, 20)
  • Fixed an issue where calling BrowserWindow.setRepresentedFilename on macOS with titlebarStyle: 'hiddenInset' or titlebarStyle: 'hidden' inadvertently moves the traffic light location. #​34847 (Also in 19, 20)
  • Fixed an issue where some BrowserWindows opened from new links wouldn't properly load URLs. #​34910 (Also in 19)
  • Fixed an issue where the minimize button with WCO enabled would incorrectly be highlighted in some cases. #​34838 (Also in 17, 19, 20)
  • Fixed an issue with background colors being improperly applied to BrowserViews on Windows. #​33478 (Also in 16)
  • Fixed empty app_id when running under wayland. #​34877 (Also in 19, 20)
  • Fixed missing Sec-CH-UA headers and empty navigator.userAgentData. #​34758 (Also in 17, 19, 20)
  • Fixed symbol generation on 32-bit Windows release builds. #​35096 (Also in 19, 20)
  • Prevent brief display of "Ozone X11" in window title on Linux. #​34943

Other Changes

v18.3.5

Compare Source

Release Notes for v18.3.5

Fixes

  • Fixed a performance problem in crashReporter.start() on macOS. #​34640 (Also in 17, 19, 20)
  • Fixed an error where setWindowOpenHandler() would crash if the callback threw an error. #​34627 (Also in 19, 20)
  • Fixed an issue where calling w.setWindowButtonVisibility(true) immediately after exiting fullscreen fails to show window buttons. #​34673 (Also in 19, 20)
  • Fixed an issue where draggable regions were not recalculated when BrowserView bounds changed on Windows. #​34610 (Also in 19, 20)

Other Changes

v18.3.4

Compare Source

Release Notes for v18.3.4

Fixes

  • Fixed an issue where normal bounds would not be appropriately updated if the user minimized with the minimize button. #​34485 (Also in 19, 20)
  • Fixed an issue where passing { name: 'All Files', extensions: ['*'] } in the filters param of open or save dialogs on Linux would disallow choosing files without an extension. #​34518 (Also in 19, 20)

Other Changes

v18.3.3

Compare Source

Release Notes for v18.3.3

Fixes

  • Fixed a crash when loading a same-origin URL after a render process crash. #​34430 (Also in 19, 20)
  • Fixed potential crash in WebFrameMain when performing a cross-origin navigation. #​34415 (Also in 19, 20)

v18.3.2

Compare Source

Release Notes for v18.3.2

Fixes

  • Fixed an issue where pressing escape would not un-fullscreen on Windows or Linux in some circumstances. #​34361 (Also in 19)
  • Fixed an issue where zombie windows can be created if window.close() is called during a fullscreen transition. #​34392 (Also in 17, 19, 20)

Other Changes

  • Enable 16k page sizes support for linux arm64. #​34385

v18.3.1

Compare Source

Release Notes for v18.3.1

Fixes

  • Fixed crash when calling navigator.serial.getPorts(). #​34327 (Also in 17, 19)

Other Changes

  • Added a TRACE call named crash_reporter::Start under the electron category for crash_reporter::Start(). #​34325 (Also in 17, 19)

[v18.3.0](https://togithub.c

mend-for-github-com[bot] avatar Jul 15 '22 03:07 mend-for-github-com[bot]