Skip to content

Bump electron from 39.2.7 to 41.0.0#39

Open
dependabot[bot] wants to merge 20 commits intodroidianfrom
dependabot/npm_and_yarn/electron-41.0.0
Open

Bump electron from 39.2.7 to 41.0.0#39
dependabot[bot] wants to merge 20 commits intodroidianfrom
dependabot/npm_and_yarn/electron-41.0.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2026

Bumps electron from 39.2.7 to 41.0.0.

Release notes

Sourced from electron's releases.

electron v41.0.0

Release Notes for v41.0.0

Features

  • Added webContents.getOrCreateDevToolsTargetId(). #50176

Fixes

  • Added validation to protocol client methods to reject protocol names that do not conform to the RFC 3986 URI scheme grammar. #50155 (Also in 38, 39, 40)
  • Fixed an issue where Chrome Devtools menus may not appear in certain embedded windows. #50137 (Also in 39, 40)
  • Fixed an issue where additionalData passed to app.requestSingleInstanceLock on Windows could be truncated or fail to deserialize in the primary instance's second-instance event. #50154 (Also in 38, 39, 40)
  • Fixed an issue where nodeIntegrationInWorker overrides in setWindowOpenHandler were not honored for child windows sharing a renderer process with their opener. #50134 (Also in 38)
  • Fixed an issue where screen.getCursorScreenPoint() crashed on Wayland when it was called before a BrowserWindow had been created. #50105 (Also in 39, 40)
  • Fixed an issue where invalid characters in custom protocol or webRequest response header values were not rejected. #50132 (Also in 38, 39, 40)
  • Fixed an issue where permission and device-chooser handlers received the top-level page origin instead of the requesting subframe's origin. #50148 (Also in 38, 39, 40)
  • Reverted AltGr key fix that caused menu bar to no longer show on Windows. #50111 (Also in 39, 40)

Other Changes

  • Updated Chromium to 146.0.7680.65. #50101

electron v41.0.0-beta.8

Note: This is a beta release. Please file new issues for any bugs you find in it.

This release is published to npm under the beta tag and can be installed via npm install electron@beta, or npm install electron@41.0.0-beta.8.

Release Notes for v41.0.0-beta.8

Features

  • Added a reason property to the Notification 'closed' event on Windows to allow developers to know the reason the Notification was dismissed. #50029 (Also in 40)

Fixes

  • Fixed an issue on macOS where Universal Links were not delivered to app.on('continue-activity') on cold launch when NSUserActivity.userInfo was nil. #50006 (Also in 39, 40)
  • Fixed an issue where VideoFrame objects returned through contextBridge had an incorrect prototype. #50023 (Also in 39, 40)
  • Fixed an issue where calling setBounds on a WebContentsView could trigger redundant page-favicon-updated events even when the favicon had not changed. #50085 (Also in 39, 40)
  • Fixed build failure when printing is disabled. #50077
  • Fixed shutdown crash on windows when hidden titlebar is enabled. #50055 (Also in 39, 40)
  • Global shortcuts can now be registered more reliably on Wayland using the globalShortcut API. #50051

Unknown

  • Fixed CSS selector syntax in default app styles to properly apply animations to hero icons. #50033

electron v41.0.0-beta.7

Note: This is a beta release. Please file new issues for any bugs you find in it.

This release is published to npm under the beta tag and can be installed via npm install electron@beta, or npm install electron@41.0.0-beta.7.

Release Notes for v41.0.0-beta.7

Fixes

... (truncated)

Commits
  • 3678edf feat: WebContents.getOrCreateDevToolsTargetId() (#50176)
  • cb4d31a fix: bind offscreen paint callback to child WebContents (#50152)
  • 616a63b refactor: use WHATWG URL instead of url.parse (#50143)
  • e78e2ca fix: correct parsing of second-instance additionalData (#50154)
  • cea004c docs: fix ipc highlight lines (#50181)
  • a14f661 fix: read nodeIntegrationInWorker from per-frame WebPreferences (#50134)
  • 6435467 fix: validate protocol scheme names in setAsDefaultProtocolClient (#50155)
  • 15dd5dc fix: use requesting frame origin in permission helper and device choosers (#5...
  • 205cd53 fix: InspectorFrontendHost override in embedded windows (#50137)
  • 2c890e0 fix: validate response header names and values before AddHeader (#50132)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 11, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/electron-41.0.0 branch from bc13741 to 43332d9 Compare March 11, 2026 20:28
bellegarde-c and others added 19 commits March 11, 2026 22:10
Really slow on a phone, this commit does not really fix the issue :(
…obile

When entering a conversation, signal-quill-cjs automatically focuses the editor, triggering the on-screen keyboard on mobile devices.
This behavior is undesirable, as it suggests immediate typing is required.

To prevent this:
- The editor is now initially rendered with the inert attribute, making it non-focusable and non-interactive.
- The inert attribute is removed on user click, allowing interaction and manual focus.

This improves the user experience on mobile by preventing the keyboard from appearing until explicitly needed.
Subscribe to the `ActiveChanged` signal from `org.gnome.ScreenSaver` via DBus and maintain internal state to reflect screensaver activity. The `isActive()` method now returns `false` when the screensaver is active, ensuring that application logic properly respects user inactivity.

Useful for improving notifications behavior when the user is away.

Only GNOME is supported at this stage; other desktop environments could be added later.
…andling

When Signal is minimized to the system tray, launching a second instance
causes Electron to go through a full startup cycle before signaling the main
instance to show the window. This results in a noticeable delay (~2 seconds).

To avoid this, a lightweight D-Bus interface (`org.signal.Signal`) has been
added. It exposes a `ShowWindow` method to allow the window to be shown
immediately without full app startup.

A wrapper script (`signal-desktop-mobile`) now attempts to call this method via
`gdbus`. If the main instance is not running, it falls back to launching a new
Electron process.

This approach significantly reduces perceived startup time when the app is
already running but hidden.
Signal currently disables notifications on reconnect until the message queues are fully processed.
While this behavior prevents notification floods on a fresh start, it causes problems in our use case where freeze/unfreeze cycles can lead to missed messages.

By removing notificationService.disable() call on socket connect,
we ensure notifications remain active throughout reconnects, preventing silent message losses caused by paused queues.

This change prioritizes message delivery and user awareness over suppressing notification floods during reconnect.
…e reset is avoided when touching outside of the rectangle
Dependabot couldn't find the original pull request head commit, 43332d9.
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/electron-41.0.0 branch from 43332d9 to 5b72c14 Compare March 11, 2026 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants