Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 15, 2025

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package Change Age Confidence
electron 36.8.1 -> 38.1.0 age confidence

Release Notes

electron/electron (electron)

v38.1.0: electron v38.1.0

Compare Source

Release Notes for v38.1.0

Other Changes

v38.0.0: electron v38.0.0

Compare Source

Release Notes for v38.0.0

Stack Upgrades

Breaking Changes

  • For breaking changes inherited via Chromium, see blog post

Features

Additions
  • Added before-mouse-event to allow intercepting and preventing mouse events in WebContents. #​47280 (Also in 36, 37)
  • Added fileBacked and purgeable fields to process.getSystemMemoryInfo() for macOS. #​48146 (Also in 37)
  • Added innerWidth and innerHeight options for window.open. #​46749 (Also in 35, 36, 37)
  • Added tray.{get|set}AutosaveName to enable macOS tray icons to maintain position across launches. #​48077 (Also in 36, 37)
  • Added webFrameMain.fromFrameToken(processId, frameToken) to get a WebFrameMain instance from its frame token. #​47942
  • Added sublabel functionality for menus on macOS >= 14.4. #​46887 (Also in 35, 36, 37)
  • Added support for app.getRecentDocuments() on Windows and macOS. #​47924 (Also in 36, 37)
  • Added support for --no-experimental-global-navigator flag. #​47370 (Also in 35, 36, 37)
  • Added support for HIDDevice.collections. #​47391 (Also in 36, 37)
  • Added support for screen.dipToScreenPoint(point) and screen.screenToDipPoint(point) on Linux X11. #​46211 (Also in 35, 36, 37)
  • Added support for customizing system accent color and highlighting of active window border. #​47285 (Also in 35, 36, 37)
  • Added support for menu item role palette and header on macOS. #​45538 (Also in 37)
  • Added support for node option --experimental-network-inspection. #​46690 (Also in 35, 36, 37)
  • Added the priority and priorityIncremental options to net.request(). #​42628 (Also in 36, 37)
  • Adds the ability to change window accent color on Windows after initial window initialization via {get|set}AccentColor. #​47939 (Also in 36, 37)
Improvements
  • Exposed win.isContentProtected() to allow developers to check window protection status. #​47242 (Also in 36, 37)
  • Internally switched to using DIR_ASSETS instead of DIR_MODULE/DIR_EXE to locate assets and resources, and added "assets" as a key that can be queried via app.getPath. #​47950 (Also in 37)

Fixes

  • Fixed an issue where dialog.showMessageDialog showed a window incorrectly centered to monitor instead of parent window when passed. #​48215
  • Fixed an issue where users on MacOS were unable to interact with a webpage loaded via loadURL. #​47575
  • Fixed broken chrome://accessibility page. #​47497
Also in earlier versions...
  • Fixed addChildView() crashes when adding a closed WebContentsView. #​47099 (Also in 35, 36, 37)
  • Fixed a bug where app extensions filters didn't allow for selecting app bundles in macOS file dialogs. #​47841 (Also in 36, 37)
  • Fixed a bug where the Referer header was not being set correctly when using webContents.downloadURL(). #​47867 (Also in 36, 37)
  • Fixed a child process crash on macOS when the running application is replaced with one that has a newer implementation triggering the sandbox. #​47783 (Also in 37)
  • Fixed a crash possible when calling webContents.loadURL() from a failed webContents.loadURL() call's catch handler. #​48043 (Also in 36, 37)
  • Fixed a crash that could occur when opening some dialogs as windows are closing on macOS. #​46927 (Also in 35, 36, 37)
  • Fixed a crash when adding the -electron-corner-smoothing CSS rule to a stylesheet with no associated document. #​47785 (Also in 37)
  • Fixed a crash when calling desktopCapturer.getSources with an empty thumbnail size. #​47652 (Also in 36, 37)
  • Fixed a crash when calling some webContents functions after window.close(). #​47952 (Also in 36, 37)
  • Fixed a possible crash using the WebView tag and calling focus. #​46979 (Also in 35, 36, 37)
  • Fixed a potential crash using session.clearData in some circumstances. #​47361 (Also in 35, 36, 37)
  • Fixed an error when importing electron for the first time from an ESM module loaded by a CJS module in a packaged app. #​46810 (Also in 35, 36, 37)
  • Fixed an issue on some older Windows versions where setContentProtection didn't work as expected. #​47886 (Also in 36, 37)
  • Fixed an issue where app.accessibilitySupportEnabled didn't work as expected. #​48060 (Also in 37)
  • Fixed an issue where net.isOnline() always returned true in utilityProcesses. #​48151 (Also in 36, 37)
  • Fixed an issue where require('node:sqlite') didn't work. #​47757 (Also in 36, 37)
  • Fixed an issue where shell.openPath was not non-blocking as expected. #​48089 (Also in 36, 37)
  • Fixed an issue where webContents.print did not work as expected when mediaSize was not passed. #​46937 (Also in 36, 37)
  • Fixed an issue where an invalid color passed as a string to accentColor would result in a white accent color. #​47684 (Also in 37)
  • Fixed an issue where calling Fetch.continueResponse via debugger with WebContentsView could cause a crash. #​47434 (Also in 35, 36, 37)
  • Fixed an issue where certain operations performed in a window close callback could trigger a crash. #​47812 (Also in 36, 37)
  • Fixed an issue where child windows could crash if they were opened from a fullscreen parent and have roundedCorners set to false. #​47681 (Also in 36, 37)
  • Fixed an issue where filters wouldn't apply in the specific case only one was passed. #​46900 (Also in 36, 37)
  • Fixed an issue where dragging sometimes didn't work after the contextmenu event was emitted. #​48224 (Also in 36, 37)
  • Fixed an issue where importing from electron/utility in an ESM file threw an error at runtime. #​48019 (Also in 36, 37)
  • Fixed an issue where importing from electron/utility threw a ERR_MODULE_NOT_FOUND error at runtime. #​47989 (Also in 36, 37)
  • Fixed an issue where printing PDFs with webContents.print({ silent: true }) would fail. #​47378 (Also in 36, 37)
  • Fixed an issue where protected transparent windows inappropriately showed a titlebar after visibility change. #​47241 (Also in 35, 36, 37)
  • Fixed an issue where snapped corner state wasn't properly restored after minimizing and then restoring. #​48157 (Also in 36, 37)
  • Fixed an issue where the 'suspend' and 'resume' events could be emitted in duplicate. #​47162 (Also in 35, 36, 37)
  • Fixed an issue where the accent border was drawn on all windows regardless of the window's active focused status. #​47802 (Also in 36, 37)
  • Fixed an issue where the accent color would be accidentally inverted when set to match the system color. #​48108 (Also in 36, 37)
  • Fixed an issue where the window flickers with either a light or dark color before loading the desired background color. #​47022 (Also in 35, 36, 37)
  • Fixed an issue where the window required restart in order to recognize system accent color setting change. #​47658 (Also in 36, 37)
  • Fixed an issue where transparent child windows on macOS were rendering a grey block as opposed to their correct contents. #​46886 (Also in 35, 36, 37)
  • Fixed an issue where utility processes could leak file handles. #​47525 (Also in 35, 36, 37)
  • Fixed an issue where video scrubbing would not correctly hold the new position on playback. #​47965 (Also in 37)
  • Fixed an issue where windows opened with window.open would never be offscreen. #​48026 (Also in 37)
  • Fixed an issue where windows used dark theme on Linux all the time without reacting to system theme changes. #​47919 (Also in 37)
  • Fixed applying background material correctly when creating windows on Windows, restored animations, and also fixed the issue where dynamically setting the background material had no effect. #​47814 (Also in 36, 37)
  • Fixed compilation error when disabling extensions and pdf_viewer. #​47993 (Also in 37)
  • Fixed crash in autoUpdater on macOS when zip extraction failed. #​47271 (Also in 34, 35, 36, 37)
  • Fixed crash in xdg portal version detection on startup. #​47008 (Also in 35, 36, 37)
  • Fixed log files written to the current working directory on Windows. #​44413 (Also in 35, 36, 37)
  • Fixed opening package paths as directory when treatPackageAsDirectory is enabled on macOS. #​47077 (Also in 35, 36, 37)
  • Fixed potential deadlock inside app.getLoginItemSettings on macOS. #​48094 (Also in 36, 37)
  • Fixed regression with directory selection in macOS dialogs. #​47259 (Also in 35, 36, 37)
  • Fixed utilityProcess running user script after process.exit is called. #​47469 (Also in 37)
  • Fixed xdg portal version detection for file dialogs on linux. #​46905 (Also in 35, 36, 37)
  • Partially fixes an issue with printing a PDF via webContents.print() where the callback would not be called. #​47377 (Also in 35, 36, 37)
  • Restored previous window-hiding behavior of win.setContentProtected() on Windows. #​47020 (Also in 35, 36, 37)

Documentation

Notices

End of Support for 35.x.y

Electron 35.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.

v37.5.1: electron v37.5.1

Compare Source

Release Notes for v37.5.1

Other Changes

v37.5.0: electron v37.5.0

Compare Source

Release Notes for v37.5.0

Features

  • Added fileBacked and purgeable fields to process.getSystemMemoryInfo() for macOS. #​48143 (Also in 38)

Fixes

  • Fixed an issue where dialog.showMessageDialog showed a window incorrectly centered to monitor instead of parent window when passed. #​48213 (Also in 36, 38)
  • Fixed an issue where a file-only picker incorrectly allowed some directories. #​48230 (Also in 36, 38)
  • Fixed an issue where dragging sometimes didn't work after the contextmenu event was emitted. #​48226 (Also in 36, 38)

Other Changes

v37.4.0: electron v37.4.0

Compare Source

Release Notes for v37.4.0

Features

  • Added tray.{get|set}AutosaveName to enable macOS tray icons to maintain position across launches. #​48076 (Also in 36, 38)

Fixes

  • Fixed an issue where net.isOnline() always returned true in utilityProcesses. #​48152 (Also in 36, 38)
  • Fixed an issue where snapped corner state wasn't properly restored after minimizing and then restoring. #​48156 (Also in 36, 38)
  • Fixed an issue where the accent color would be accidentally inverted when set to match the system color. #​48107 (Also in 36, 38)

Other Changes

  • Updated Chromium to 138.0.7204.243. #​48119

v37.3.1: electron v37.3.1

Compare Source

Release Notes for v37.3.1

Fixes

  • Fixed an issue where shell.openPath was not non-blocking as expected. #​48088 (Also in 36, 38)
  • Fixed an issue where windows opened with window.open would never be offscreen. #​48070 (Also in 38)
  • Fixed potential deadlock inside app.getLoginItemSettings on macOS. #​48096 (Also in 36)

Other Changes

  • Updated Chromium to 138.0.7204.235. #​48066

v37.3.0: electron v37.3.0

Compare Source

Release Notes for v37.3.0

Features

  • Added support for app.getRecentDocuments() on Windows and macOS. #​47923 (Also in 36, 38)
  • Adds the ability to change window accent color on Windows after initial window initialization via {get|set}AccentColor. #​48017 (Also in 36, 38)
  • Internally switched to using DIR_ASSETS instead of DIR_MODULE/DIR_EXE to locate assets and resources, and added "assets" as a key that can be queried via app.getPath. #​47951 (Also in 38)

Fixes

  • Fixed a crash possible when calling webContents.loadURL() from a failed webContents.loadURL() call's catch handler. #​48045 (Also in 36, 38)
  • Fixed an issue where app.accessibilitySupportEnabled didn't work as expected. #​48061 (Also in 38)
  • Fixed an issue where importing from electron/utility in an ESM file threw an error at runtime. #​48021 (Also in 36, 38)
  • Fixed an issue where importing from electron/utility threw a ERR_MODULE_NOT_FOUND error at runtime. #​47988 (Also in 36, 38)
  • Fixed an issue where the accent border was drawn on all windows regardless of the window's active focused status. #​48011 (Also in 36, 38)
  • Fixed compilation error when disabling extensions and pdf_viewer. #​47994 (Also in 38)

Other Changes

v37.2.6: electron v37.2.6

Compare Source

Release Notes for v37.2.6

Fixes

  • Fixed a bug where the Referer header was not being set correctly when using webContents.downloadURL(). #​47865 (Also in 36, 38)
  • Fixed a crash when calling some webContents functions after window.close(). #​47954 (Also in 36, 38)
  • Fixed an issue on some older Windows versions where setContentProtection didn't work as expected. #​47887 (Also in 36, 38)
  • Fixed an issue where an invalid color passed as a string to accentColor would result in a white accent color. #​47800 (Also in 38)
  • Fixed an issue where video scrubbing would not correctly hold the new position on playback. #​47971 (Also in 38)
  • Fixed an issue where windows used dark theme on Linux all the time without reacting to system theme changes. #​47920 (Also in 38)
  • Fixed applying background material correctly when creating windows on Windows, restored animations, and also fixed the issue where dynamically setting the background material had no effect. #​47956 (Also in 36, 38)

Other Changes

  • Updated Chromium to 138.0.7204.185. #​47909

v37.2.5: electron v37.2.5

Compare Source

Release Notes for v37.2.5

Other Changes

  • Updated Chromium to 138.0.7204.168. #​47861

v37.2.4: electron v37.2.4

Compare Source

Release Notes for v37.2.4

Fixes

  • Fixed a bug where app extensions filters didn't allow for selecting app bundles in macOS file dialogs. #​47839 (Also in 36, 38)
  • Fixed an issue where certain operations performed in a window close callback could trigger a crash. #​47813 (Also in 36, 38)

Other Changes

v37.2.3: electron v37.2.3

Compare Source

Release Notes for v37.2.3

Fixes

  • Fixed a child process crash on macOS when the running application is replaced with one that has a newer implementation triggering the sandbox. #​47784 (Also in 38)
  • Fixed a crash when adding the -electron-corner-smoothing CSS rule to a stylesheet with no associated document. #​47792
  • Fixed an issue where require('node:sqlite') didn't work. #​47756 (Also in 36, 38)

v37.2.2: electron v37.2.2

Compare Source

Release Notes for v37.2.2

Other Changes

  • Updated Chromium to 138.0.7204.100. #​47701

v37.2.1: electron v37.2.1

Compare Source

Release Notes for v37.2.1

Fixes

  • Fixed a crash when calling desktopCapturer.getSources with an empty thumbnail size. #​47653 (Also in 36, 38)
  • Fixed an issue where child windows could crash if they were opened from a fullscreen parent and have roundedCorners set to false. #​47682 (Also in 36, 38)
  • Fixed an issue where the window required restart in order to recognize system accent color setting change. #​47656 (Also in 36, 38)

v37.2.0: electron v37.2.0

Compare Source

Release Notes for v37.2.0

Other Changes

v37.1.0: electron v37.1.0

Compare Source

Release Notes for v37.1.0

Features

  • Added support for customizing system accent color and highlighting of active window border. #​47537 (Also in 35, 36)

Fixes

  • Fixed an issue where utility processes could leak file handles. #​47543 (Also in 35, 36)

v37.0.0: electron v37.0.0

Compare Source

Release Notes for v37.0.0

Stack Upgrades

Breaking Changes

  • Added support for Web Serial & WebUSB blocklists. #​46600
  • Fixed an issue where utility processes crashed on unhandled rejections. #​45921
  • Fixed utilityProcess running user script after process.exit is called. #​47492
  • Removed deprecated feature of creating a new random session by setting ProtocolResponse.session's property to null. #​46264

Features

Additions
  • Added BrowserWindow.isSnapped() to indicate whether a given window has been arranged via Snap. #​46079 (Also in 36)
  • Added before-mouse-event to allow intercepting and preventing mouse events in WebContents. #​47364 (Also in 36)
  • Added ffmpeg.dll to delay load configuration. #​46151 (Also in 34, 35, 36)
  • Added innerWidth and innerHeight options for window.open. #​47039 (Also in 35, 36)
  • Added nativeTheme.shouldUseDarkColorsForSystemIntegratedUI to distinguish system and app theme. #​46438 (Also in 35, 36)
  • Added scriptURL property to ServiceWorkerMain. #​45863
  • Added a CSS rule for smooth corners. #​45185
  • Added sublabel functionality for menus on macOS >= 14.4. #​47042 (Also in 35, 36)
  • Added support for Autofill, Writing Tools and Services macOS level menu items in context menus via the new frame option in menu.popup. #​45138 (Also in 36)
  • Added support for HIDDevice.collections. #​47483 (Also in 36)
  • Added support for --no-experimental-global-navigator flag. #​47418 (Also in 35, 36)
  • Added support for screen.dipToScreenPoint(point) and screen.screenToDipPoint(point) on Linux X11. #​46895 (Also in 35, 36)
  • Added support for system-context-menu on Linux. #​45848 (Also in 35, 36)
  • Added support for menu item role palette and header on macOS. #​47245
  • Added support for node option --experimental-network-inspection. #​47031 (Also in 35, 36)
  • Added the priority and priorityIncremental options to net.request(). #​47321 (Also in 36)
  • Exposed win.isContentProtected() to allow developers to check window protection status. #​47310 (Also in 36)
Improvements
  • Improved ASAR integrity checks on Windows. #​46509 (Also in 36)
  • Improved performance of desktopCapturer.getSources when not requesting thumbnails on macOS. #​46138 (Also in 34, 35, 36)
Removed/Deprecated
  • Deprecated NativeImage.getBitmap() and fixed incorrect documentation. #​46696 (Also in 36)

Fixes

  • Fixed an issue on application close on Windows, where not all processes are quit on close. #​47485
  • Fixed an issue where printing PDFs with webContents.print({ silent: true }) would fail. #​47397
Also in earlier versions...
  • Fix: don't copy 'package.json's out of ASAR file. #​46390 (Also in 35, 36)
  • Fix: osr stutter fix backport for electron. #​46650 (Also in 36)
  • Fixed ElectronAccessibilityUI bug. #​46562 (Also in 33, 34, 35, 36)
  • Fixed Minimize menu button to follow set window minimizability on Windows. #​46279 (Also in 34, 35, 36)
  • Fixed NODE_OPTIONS parsing for child processes on macOS. #​46209 (Also in 34, 35, 36)
  • Fixed addChildView() crashes when adding a closed WebContentsView. #​47338 (Also in 35, 36)
  • Fixed electron.shell.openExternal and electron.shell.openPath to honor user-defined system defaults on Linux. #​45310 (Also in 33, 34, 35, 36)
  • Fixed getNativeWindowHandle() crash that affected 36 betas on macOS. #​46733 (Also in 36)
  • Fixed a bug that could cause some maximized windows on Linux to report an incorrect window state. #​46450 (Also in 34, 35, 36)
  • Fixed a crash seen on Linux when calling webContents.print(). #​46087 (Also in 35, 36)
  • Fixed a crash that could occur when dragging and dropping files into the browser. #​46253 (Also in 35, 36)
  • Fixed a crash that could occur when opening some dialogs as windows are closing on macOS. #​46952 (Also in 35, 36)
  • Fixed a possible BrowserWindow crash caused by closing a parent window with focus or blur events. #​46559 (Also in 34, 35, 36)
  • Fixed a possible crash in shell.readShortcutLink. #​46294 (Also in 35, 36)
  • Fixed a possible crash using Node.js on some arm32 devices. #​46435 (Also in 35, 36)
  • Fixed a possible crash using the WebView tag and calling focus. #​47036 (Also in 35, 36)
  • Fixed a possible crash when using navigator.bluetooth.requestDevice and the select-bluetooth-device event. #​46745 (Also in 34, 35, 36)
  • Fixed a potential crash in parentPort. #​46437 (Also in 34, 35, 36)
  • Fixed a potential crash in utilityProcess.postMessage when calling with an invalid transferable. #​46639 (Also in [35](ht

@renovate renovate bot requested review from a team and dereknance September 15, 2025 02:45
@codecov
Copy link

codecov bot commented Sep 15, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 38.77%. Comparing base (e14c8c6) to head (65e8632).
⚠️ Report is 4 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main   #16423   +/-   ##
=======================================
  Coverage   38.76%   38.77%           
=======================================
  Files        3408     3408           
  Lines       96742    96742           
  Branches    14519    14519           
=======================================
+ Hits        37503    37510    +7     
+ Misses      57602    57595    -7     
  Partials     1637     1637           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@bitwarden-bot bitwarden-bot changed the title [deps] Platform: Update electron to v38 [PM-25748] [deps] Platform: Update electron to v38 Sep 15, 2025
@bitwarden-bot
Copy link

Internal tracking:

@renovate renovate bot changed the title [PM-25748] [deps] Platform: Update electron to v38 [deps] Platform: Update electron to v38 Sep 15, 2025
@renovate renovate bot force-pushed the renovate/electron-38.x branch from 11aabf9 to a18d9f4 Compare September 17, 2025 20:25
@trmartin4 trmartin4 requested review from coroiu and dani-garcia and removed request for coroiu and dereknance September 23, 2025 12:49
@renovate renovate bot force-pushed the renovate/electron-38.x branch from a18d9f4 to ff7acbe Compare September 23, 2025 17:29
@renovate
Copy link
Contributor Author

renovate bot commented Sep 23, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@github-actions
Copy link
Contributor

github-actions bot commented Sep 23, 2025

Logo
Checkmarx One – Scan Summary & Details523cf0a0-2c13-4b3b-b630-8a5dc698a4a6

Fixed Issues (17)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
CRITICAL CVE-2025-10585 Npm-electron-36.8.1
HIGH CVE-2025-10200 Npm-electron-36.8.1
HIGH CVE-2025-10500 Npm-electron-36.8.1
HIGH CVE-2025-10891 Npm-electron-36.8.1
HIGH CVE-2025-10892 Npm-electron-36.8.1
HIGH CVE-2025-8880 Npm-electron-36.8.1
HIGH CVE-2025-8882 Npm-electron-36.8.1
HIGH CVE-2025-8901 Npm-electron-36.8.1
HIGH CVE-2025-9132 Npm-electron-36.8.1
HIGH CVE-2025-9478 Npm-electron-36.8.1
HIGH CVE-2025-9864 Npm-electron-36.8.1
HIGH CVE-2025-9866 Npm-electron-36.8.1
MEDIUM CVE-2025-10890 Npm-electron-36.8.1
MEDIUM CVE-2025-8583 Npm-electron-36.8.1
MEDIUM CVE-2025-8881 Npm-electron-36.8.1
MEDIUM CVE-2025-9865 Npm-electron-36.8.1
MEDIUM CVE-2025-9867 Npm-electron-36.8.1

@sonarqubecloud
Copy link

sonarqubecloud bot commented Oct 3, 2025

@dani-garcia dani-garcia merged commit 89e866c into main Oct 3, 2025
115 checks passed
@dani-garcia dani-garcia deleted the renovate/electron-38.x branch October 3, 2025 15:59
trmartin4 added a commit that referenced this pull request Oct 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update electron to latest version Desktop app window title bar does not honor Windows color scheme

3 participants