[deps]: Update electron to v40 by renovate[bot] · Pull Request #988 · bitwarden/directory-connector

renovate · 2026-02-02T02:42:32Z

This PR contains the following updates:

Package	Change	Age	Confidence
electron	`39.2.1` → `40.1.0`

Release Notes

electron/electron (electron)

`v40.1.0`: electron v40.1.0

Compare Source

Release Notes for v40.1.0

Features

DevTools errors are no longer printed to console. #49359

Fixes

Fixed setRepresentedFilename() not setting AXDocument accessibility attribute on macOS. #49417 ^{(Also in 39)}
Fixed a potential race condition crash when opening DevTools. #49422 ^{(Also in 39)}
Fixed an issue in chrome://accessibility. #49560 ^{(Also in 39, 41)}
Fixed an issue where shell.writeShortcutLink was throwing TypeError: Insufficient number of arguments when called with just [(path, options)]. #49501 ^{(Also in 39, 41)}
Fixed crash in platform_util::Beep() on Linux. #49482 ^{(Also in 39, 41)}
Made toplevel icon Wayland protocol work. #49414 ^{(Also in 39)}

Other Changes

Backported fix for 4738514. #49487
Updated Chromium to 144.0.7559.96. #49474

Unknown

Fixed an issue where some packages weren't correctly filtered on macOS in dialogs. #49473 ^{(Also in 38, 39, 41)}

`v40.0.0`: electron v40.0.0

Compare Source

Release Notes for v40.0.0

Stack Upgrades

Chromium 144.0.7559.60
- New in 144
- New in 143
Node v24.11.1
- Node 24.11.1 blog post
V8 14.4

Breaking Changes

Deprecated clipboard API access from renderer processes #48923
Fixed an error on debug symbol upload by moving dsym.zip to use tar.xz compression. #48952

Features

Additions

Added "memory-eviction" as a possible reason for a child process to exit. #48362
Added RGBAF16 output format with scRGB HDR color space support to Offscreen Rendering. #48265 ^{(Also in 39)}
Added app.isHardwareAccelerationEnabled(). #47614 ^{(Also in 37, 38, 39)}
Added bypassCustomProtocolHandlers option to net.request. #48883 ^{(Also in 38, 39)}
Added methods to enable more granular accessibility support management. #48042 ^{(Also in 37, 38, 39)}
Added support for WebSocket authentication through the login event on webContents. #49064 ^{(Also in 39)}
Added support to import external shared texture as VideoFrame. #48831
Added the ability to retrieve the system accent color on Linux using systemPreferences.getAccentColor. #48027 ^{(Also in 39)}
Allowed for persisting File System API grant status within a given session. #48170 ^{(Also in 37, 38, 39)}
Automatically focus DevTools when element is inspected or breakpoint is triggered. #46386 ^{(Also in 37, 38, 39)}

Improvements

Enables resetting accent color to follow system accent settings if a previous color has been set via window.setAccentColor(null). #48274 ^{(Also in 38, 39)}
Support dynamic ESM imports in non-context isolated preloads. #48375 ^{(Also in 37, 38, 39)}
Updated nativeImage.createFromNamedImage to support SF Symbol names. #48772 ^{(Also in 39)}

Fixes

Added support for --no-stdio-init to be used when nul device is disabled on windows. #47870
Fixed an issue on Windows and Linux where no cookie encryption key provider was passed into the network service when cookie encryption was enabled. #49375
Fixed an issue where no cookie encryption provider was passed into the network service when cookie encryption was enabled. #49350
Fixed crash when attempting to resolve modules during process exit. #49104
Fixed drag regions in child windows. #49312
Fixed draw smoothing round corner issue. #48782
Fixed the cookie encryption logic to use the old os_crypt sync implementation present in M142. #49384
Fixed visual artifacts while resizing a window on Windows. #49191

Also in earlier versions...

AccentColor set distinguishes the frame. #48405 ^{(Also in 37, 38, 39)}
Corrected the appearance of tiled windows on GNOME (when frame: true), and removed resize handles from tiled edges. #48835 ^{(Also in 38, 39)}
Fix: ESM-from-CJS import when CJK characters are in path. #48862 ^{(Also in 39)}
Fix: runtime JS error that crashes GetPackageJSON. #48293 ^{(Also in 37, 38, 39)}
Fixed Wayland configuration through the XDG_SESSION_TYPE environment variable. #48301 ^{(Also in 38, 39)}
Fixed Windows dialog.showMessageBox default button handling. #48216 ^{(Also in 36, 37, 38, 39)}
Fixed a Windows notification issue where clicking a native notification would result in an application hang on certain Windows environments. #49129 ^{(Also in 39)}
Fixed a potential crash in dialog.showOpenDialog on Windows with an empty extension filter array. #48640 ^{(Also in 37, 38, 39)}
Fixed an application crash when clicking or hovering over the native MacOS "Window" menu. Reverts #48598. #48799 ^{(Also in 37, 38, 39)}
Fixed an error when checking environmental variables when using remote checksums when installing Electron via npm. #48634 ^{(Also in 37, 38, 39)}
Fixed an issue that menu items on macOS could not be disabled under all circumstances. #48598 ^{(Also in 37, 38, 39)}
Fixed an issue where menu-did-close was not emitted properly for some application menus. #49092 ^{(Also in 38, 39)}
Fixed an issue where shell.openExternal caused an unexpected dialog to open when there was no app suitable to open the url. #48502 ^{(Also in 38, 39)}
Fixed an issue where systemPreferences.getAccentColor inverted the color. #48511 ^{(Also in 37, 38, 39)}
Fixed an issue where trafficLightPosition would not be correctly applied when using titleBarStyle: 'customButtonsOnHover' on macOS 26. #48538 ^{(Also in 37, 38, 39)}
Fixed an issue where authentication via websockets can crash. #48510 ^{(Also in 37, 38, 39)}
Fixed an issue where button background on mouse hover with titleBarOverlay wasn't always calculated to provide appropriate minimum contrast. #48568 ^{(Also in 37, 38, 39)}
Fixed an issue where calling webContents.openDevTools({ mode: 'detach' }) would cause a crash on Wayland. #48600 ^{(Also in 38, 39)}
Fixed an issue where changing the resizable property on a window would break the styles of a transparent window. #48378 ^{(Also in 37, 38, 39)}
Fixed an issue where icons didn't show up as expected on Windows Toast notifications. #48543 ^{(Also in 38, 39)}
Fixed an issue where snapped windows aren't correctly snapped when minimized and then unminimized. #48296 ^{(Also in 37, 38, 39)}
Fixed an issue where some apps would throw an exception on launch. #48976 ^{(Also in 39)}
Fixed an issue where the close callback param for menu.popup would fire when any arbitrary submenu of the given menu closed, and not the menu itself. #49046 ^{(Also in 38, 39)}
Fixed crash on windows when UTF-8 is in path. #48942 ^{(Also in 38, 39)}
Fixed crash when accessing webContents.session or webContents.debugger. #48318 ^{(Also in 39)}
Fixed crash when creating event object for ipc events. #48991 ^{(Also in 39)}
Fixed crash when inspector agent attempts to evaluate on provisional frames. #48503 ^{(Also in 37, 38, 39)}
Fixed crash when passing feature param from commandline --enable-features=Feature:ParamA/Value. #48411 ^{(Also in 39)}
Fixed crash when reading system certificates via nodejs tls module. #49041 ^{(Also in 39)}
Fixed download button does not work in PDF Viewer. #48372 ^{(Also in 38, 39)}
Fixed excessive WindowServer GPU usage on macOS Tahoe 26. #48376 ^{(Also in 36, 37, 38, 39)}
Fixed high CPU usage with <input> tag on macOS 26. #48379 ^{(Also in 36, 37, 38, 39)}
Fixed incorrect signal variable reference in nan-spec-runner that could cause install failures to go undetected. #48639 ^{(Also in 38, 39)}
Fixed oom crash when optimizing certain wasm functions involving large phi nodes. #48816 ^{(Also in 38, 39)}
Fixed shader-f16 to work on Windows. #48342 ^{(Also in 37, 38, 39)}
Fixed the issue where the parent window leave disabled after the modal window call show() multiple time. #49021 ^{(Also in 38, 39)}
Fixed the issue where the parent window remained interactive after the modal window was opened. #48864 ^{(Also in 38, 39)}
Fixed white flash on call to BrowserWindow.show. #47151 ^{(Also in 37, 38, 39)}
Reenable V8 trap handlers for wasm in browser and utility process, improves runtime execution of wasm. #48839 ^{(Also in 39)}
Requests sent via net are now capable of having their headers modified to use reserved headers via webRequest. #49241 ^{(Also in 39)}
Titlebar buttons now appear on the correct side of windows on Wayland in Ubuntu. #48490 ^{(Also in 38, 39)}
Windows: Calling window.setFocusable(true) will no longer cause a window to lose focus. #48927 ^{(Also in 39)}

Other Changes

Backported fix for 4453807. #48335 ^{(Also in 36, 37, 38, 39)}
Backported fix for 4667866. #49286
Backported fix for chromium:466192044. #49201
Fixed a development issue where the metal toolchain could not be found when building on macOS 26. #48467 ^{(Also in 37, 38, 39)}
Fixed devtools element panel flickering when with node inspection. #49043 ^{(Also in 39)}

Documentation

Documentation change
- #48665
- #48841

Notices

End of Support for 37.x.y

Electron 37.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.

`v39.5.1`: electron v39.5.1

Compare Source

Release Notes for v39.5.1

Fixes

Fixed rendering glitches on macOS. #49615 ^{(Also in 40, 41)}

`v39.5.0`: electron v39.5.0

Compare Source

Release Notes for v39.5.0

Features

Added support for MSIX auto-updating. #49585 ^{(Also in 40, 41)}

Fixes

Fixed an issue where menu item accelerators stopped working after the item's enabled property was toggled on macOS. #49593 ^{(Also in 40, 41)}
Fixed an issue whereby a duplicate "Toggle Full Screen" menu item appeared in the View menu on macOS. #49597 ^{(Also in 38, 40, 41)}

`v39.4.0`: electron v39.4.0

Compare Source

Release Notes for v39.4.0

Fixes

Fixed an issue in chrome://accessibility. #49559 ^{(Also in 40, 41)}
Fixed an issue where shell.writeShortcutLink was throwing TypeError: Insufficient number of arguments when called with just [(path, options)]. #49502 ^{(Also in 40, 41)}
Fixed crash in platform_util::Beep() on Linux. #49484 ^{(Also in 40, 41)}

Other Changes

Updated Node.js to v22.22.0. #49389

Unknown

Fixed an issue where some packages weren't correctly filtered on macOS in dialogs. #49472 ^{(Also in 38, 40, 41)}

`v39.3.0`: electron v39.3.0

Compare Source

Release Notes for v39.3.0

Features

Added support for WebSocket authentication through the login event on webContents. #49065 ^{(Also in 40)}

Fixes

Fixed setRepresentedFilename() not setting AXDocument accessibility attribute on macOS. #49418 ^{(Also in 40)}
Fixed a potential race condition crash when opening DevTools. #49423 ^{(Also in 40)}
Fixed stack overflow when compiling deeply nested JS functions. #49360
Made toplevel icon Wayland protocol work. #49415 ^{(Also in 40)}
Requests sent via net are now capable of having their headers modified to use reserved headers via webRequest. #49242 ^{(Also in 40)}

Other Changes

Backported fix for 4667866. #49287
Updated Chromium to 142.0.7444.265. #49322

`v39.2.7`: electron v39.2.7

Compare Source

Release Notes for v39.2.7

Other Changes

Updated Chromium to 142.0.7444.235. #49190

`v39.2.6`: electron v39.2.6

Compare Source

Release Notes for v39.2.6

Fixes

Fixed visual artifacts while resizing a window on Windows. #49138

Other Changes

Updated Chromium to 142.0.7444.226. #49137

`v39.2.5`: electron v39.2.5

Compare Source

Release Notes for v39.2.5

Fixes

Fixed a Windows notification issue where clicking a native notification would result in an application hang on certain Windows environments. #49130 ^{(Also in 40)}
Fixed an issue where menu-did-close was not emitted properly for some application menus. #49093 ^{(Also in 38, 40)}
Reduced amount of visual artifacts while resizing a window on Windows. #49076

Other Changes

Fixed devtools element panel flickering when with node inspection. #49044 ^{(Also in 40)}

`v39.2.4`: electron v39.2.4

Compare Source

Release Notes for v39.2.4

Fixes

Fixed an issue where the close callback param for menu.popup would fire when any arbitrary submenu of the given menu closed, and not the menu itself. #49045 ^{(Also in 38, 40)}
Fixed crash when reading system certificates via nodejs tls module. #49042 ^{(Also in 40)}
Fixed the issue where the parent window leave disabled after the modal window call show() multiple time. #49019 ^{(Also in 38, 40)}

Other Changes

Updated Chromium to 142.0.7444.177. #49037

`v39.2.3`: electron v39.2.3

Compare Source

Release Notes for v39.2.3

Updated Chromium to 142.0.7444.175.

`v39.2.2`: electron v39.2.2

Compare Source

Release Notes for v39.2.2

Fixes

Fixed crash when creating event object for IPC events. #48992 ^{(Also in 40)}

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bitwarden-bot · 2026-02-02T02:43:02Z

Internal tracking:

ID: PM-31557
Link: https://bitwarden.atlassian.net/browse/PM-31557

codecov · 2026-02-02T02:44:10Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 14.90%. Comparing base (14fc69c) to head (d306dc4).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #988   +/-   ##
=======================================
  Coverage   14.90%   14.90%           
=======================================
  Files          67       67           
  Lines        2791     2791           
  Branches      481      481           
=======================================
  Hits          416      416           
  Misses       2271     2271           
  Partials      104      104

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions · 2026-02-03T15:48:30Z

Checkmarx One – Scan Summary & Details – ad7aac16-3d76-4831-b361-a484b1304214

New Issues (1)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		CVE-2025-13465	Npm-lodash-4.17.21	details Description: Lodash versions from 4.0.0 through 4.17.22 are vulnerable to Prototype Pollution in the "_.unset" and "_.omit" functions. An attacker can pass craf... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package

Fixed Issues (32)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	~~CVE-2026-0905~~	Npm-electron-39.2.1
	~~CVE-2026-0906~~	Npm-electron-39.2.1
	~~CVE-2026-0907~~	Npm-electron-39.2.1
	~~CVE-2025-13042~~	Npm-electron-39.2.1
	~~CVE-2025-13223~~	Npm-electron-39.2.1
	~~CVE-2025-13224~~	Npm-electron-39.2.1
	~~CVE-2025-13630~~	Npm-electron-39.2.1
	~~CVE-2025-13631~~	Npm-electron-39.2.1
	~~CVE-2025-13633~~	Npm-electron-39.2.1
	~~CVE-2025-13638~~	Npm-electron-39.2.1
	~~CVE-2025-13639~~	Npm-electron-39.2.1
	~~CVE-2025-13720~~	Npm-electron-39.2.1
	~~CVE-2025-13721~~	Npm-electron-39.2.1
	~~CVE-2025-14174~~	Npm-electron-39.2.1
	~~CVE-2025-14765~~	Npm-electron-39.2.1
	~~CVE-2025-14766~~	Npm-electron-39.2.1
	~~CVE-2026-0628~~	Npm-electron-39.2.1
	~~CVE-2026-0899~~	Npm-electron-39.2.1
	~~CVE-2026-0900~~	Npm-electron-39.2.1
	~~CVE-2026-0902~~	Npm-electron-39.2.1
	~~CVE-2026-0908~~	Npm-electron-39.2.1
	~~CVE-2025-13632~~	Npm-electron-39.2.1
	~~CVE-2025-13634~~	Npm-electron-39.2.1
	~~CVE-2025-13635~~	Npm-electron-39.2.1
	~~CVE-2025-13636~~	Npm-electron-39.2.1
	~~CVE-2025-13637~~	Npm-electron-39.2.1
	~~CVE-2025-14372~~	Npm-electron-39.2.1
	~~CVE-2025-14373~~	Npm-electron-39.2.1
	~~CVE-2026-0901~~	Npm-electron-39.2.1
	~~CVE-2026-0903~~	Npm-electron-39.2.1
	~~CVE-2026-0904~~	Npm-electron-39.2.1
	~~CVE-2025-13640~~	Npm-electron-39.2.1

jrmccannon · 2026-02-05T20:37:39Z

Cannot upgrade to electron v40 until we switch off of keytar.

renovate · 2026-02-05T20:41:23Z

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 40.x releases. But if you manually upgrade to 40.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

renovate bot requested a review from a team as a code owner February 2, 2026 02:42

renovate bot requested a review from jrmccannon February 2, 2026 02:42

renovate bot added the major-update label Feb 2, 2026

bitwarden-bot changed the title ~~[deps]: Update electron to v40~~ [PM-31557] [deps]: Update electron to v40 Feb 2, 2026

renovate bot changed the title ~~[PM-31557] [deps]: Update electron to v40~~ [deps]: Update electron to v40 Feb 2, 2026

[deps]: Update electron to v40

d306dc4

renovate bot force-pushed the renovate/electron-40.x branch from a0cf08d to d306dc4 Compare February 5, 2026 02:49

jrmccannon closed this Feb 5, 2026

renovate bot deleted the renovate/electron-40.x branch February 5, 2026 20:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[deps]: Update electron to v40#988

[deps]: Update electron to v40#988
renovate[bot] wants to merge 1 commit intomainfrom
renovate/electron-40.x

renovate bot commented Feb 2, 2026 •

edited

Loading

Uh oh!

bitwarden-bot commented Feb 2, 2026

Uh oh!

codecov bot commented Feb 2, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

jrmccannon commented Feb 5, 2026

Uh oh!

renovate bot commented Feb 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate bot commented Feb 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v40.1.0: electron v40.1.0

Release Notes for v40.1.0

Features

Fixes

Other Changes

Unknown

v40.0.0: electron v40.0.0

Release Notes for v40.0.0

Stack Upgrades

Breaking Changes

Features

Additions

Improvements

Fixes

Also in earlier versions...

Other Changes

Documentation

Notices

End of Support for 37.x.y

v39.5.1: electron v39.5.1

Release Notes for v39.5.1

Fixes

v39.5.0: electron v39.5.0

Release Notes for v39.5.0

Features

Fixes

v39.4.0: electron v39.4.0

Release Notes for v39.4.0

Fixes

Other Changes

Unknown

v39.3.0: electron v39.3.0

Release Notes for v39.3.0

Features

Fixes

Other Changes

v39.2.7: electron v39.2.7

Release Notes for v39.2.7

Other Changes

v39.2.6: electron v39.2.6

Release Notes for v39.2.6

Fixes

Other Changes

v39.2.5: electron v39.2.5

Release Notes for v39.2.5

Fixes

Other Changes

v39.2.4: electron v39.2.4

Release Notes for v39.2.4

Fixes

Other Changes

v39.2.3: electron v39.2.3

Release Notes for v39.2.3

v39.2.2: electron v39.2.2

Release Notes for v39.2.2

Fixes

Configuration

Uh oh!

bitwarden-bot commented Feb 2, 2026

Uh oh!

codecov bot commented Feb 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

jrmccannon commented Feb 5, 2026

Uh oh!

renovate bot commented Feb 5, 2026

Renovate Ignore Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

renovate bot commented Feb 2, 2026 •

edited

Loading

`v40.1.0`: electron v40.1.0

`v40.0.0`: electron v40.0.0

`v39.5.1`: electron v39.5.1

`v39.5.0`: electron v39.5.0

`v39.4.0`: electron v39.4.0

`v39.3.0`: electron v39.3.0

`v39.2.7`: electron v39.2.7

`v39.2.6`: electron v39.2.6

`v39.2.5`: electron v39.2.5

`v39.2.4`: electron v39.2.4

`v39.2.3`: electron v39.2.3

`v39.2.2`: electron v39.2.2

codecov bot commented Feb 2, 2026 •

edited

Loading