Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 5 updates#191

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-313f21833a
Open

chore(deps): bump the production-dependencies group across 1 directory with 5 updates#191
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-313f21833a

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2026

Bumps the production-dependencies group with 5 updates in the / directory:

Package From To
@electron/fuses 2.0.0 2.1.0
electron-to-chromium 1.5.302 1.5.307
puppeteer-core 24.37.5 24.39.0
electron 40.6.1 40.8.0
electron-nightly 42.0.0-nightly.20260224 42.0.0-nightly.20260310

Updates @electron/fuses from 2.0.0 to 2.1.0

Release notes

Sourced from @​electron/fuses's releases.

v2.1.0

2.1.0 (2026-02-26)

Features

  • add FuseV1Options.WasmTrapHandlers (#89) (c76019b)
Commits
  • c76019b feat: add FuseV1Options.WasmTrapHandlers (#89)
  • 9fadbda build(deps): bump tar from 7.5.4 to 7.5.7 (#88)
  • 2b65c43 build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (#87)
  • 1f3d586 build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#86)
  • ca68a33 build(deps): bump electron/github-app-auth-action from 1.1.1 to 2.0.0 (#85)
  • 9bd6364 build(deps): bump tar from 7.5.2 to 7.5.4 (#84)
  • fff3dee build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (#83)
  • 5ebce7e build(deps): bump actions/checkout from 5.0.0 to 6.0.1 (#82)
  • 0f81bde build: deep update glob dependency (#81)
  • 9dc412b build(deps): bump glob from 10.4.5 to 10.5.0 (#80)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​electron/fuses since your current version.


Updates electron-to-chromium from 1.5.302 to 1.5.307

Commits

Updates puppeteer-core from 24.37.5 to 24.39.0

Release notes

Sourced from puppeteer-core's releases.

puppeteer-core: v24.39.0

24.39.0 (2026-03-10)

🎉 Features

🛠️ Fixes

puppeteer-core: v24.38.0

24.38.0 (2026-03-04)

🎉 Features

🛠️ Fixes

  • consider browsingContext.navigationCommitted to dispose an existing navigation (#14724) (b4e92c6)
  • disable PartitionAllocSchedulerLoopQuarantineTaskControlledPurge (#14744) (e6c7425)
  • roll to Chrome 145.0.7632.117 (#14719) (1d407e1)
Changelog

Sourced from puppeteer-core's changelog.

24.39.0 (2026-03-10)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.38.0 to 24.39.0

🎉 Features

🛠️ Fixes

24.38.0 (2026-03-04)

🎉 Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.37.5 to 24.38.0

🛠️ Fixes

  • consider browsingContext.navigationCommitted to dispose an existing navigation (#14724) (b4e92c6)
  • disable PartitionAllocSchedulerLoopQuarantineTaskControlledPurge (#14744) (e6c7425)
  • roll to Chrome 145.0.7632.117 (#14719) (1d407e1)
Commits

Updates electron from 40.6.1 to 40.8.0

Release notes

Sourced from electron's releases.

electron v40.8.0

Release Notes for v40.8.0

Features

  • Added a reason property to the Notification 'closed' event on Windows to allow developers to know the reason the Notification was dismissed. #50030 (Also in 41)

Fixes

  • Fixed shutdown crash on windows when hidden titlebar is enabled. #50053 (Also in 39, 41)

Other Changes

  • Updated Chromium to 144.0.7559.236. #50060

electron v40.7.0

Release Notes for v40.7.0

Features

  • Added support for --experimental-transform-types. #49883 (Also in 39, 41)

Fixes

  • Allow dynamically updating menu item labels, sublabels, and icons. #49973 (Also in 41)
  • Fixed safeStorage failing to clean up legacy keychain entries when migrating to suffixed account names on macOS, and fixed first launch creating entries with the wrong (unsuffixed) account name. #49817
  • Fixed a bug that cause offscreen rendering doesn't have valid screen info and unable to get valid result of related media queries.
    • Added webPreference.offscreen.deviceScaleFactor to allow user specify a value, instead of using user's primary display's value. #49681
  • Fixed a macOS crash when creating a new tab from the tab overview. #49934 (Also in 41)
  • Fixed an issue on macOS where Universal Links were not delivered to app.on('continue-activity') on cold launch when NSUserActivity.userInfo was nil. #50005 (Also in 39, 41)
  • Fixed an issue where VideoFrame objects returned through contextBridge had an incorrect prototype. #50022 (Also in 39, 41)
  • Fixed an issue where malformed custom toastXml could cause a Notification crash. #49952 (Also in 41)
  • Fixed menu bar hiding after a call to win.setFullScreen(false) when not in fullscreen on Linux. #49994 (Also in 41)
  • Fixed menus to correctly emit menu-will-close event when closed after any submenu has been open. #49963 (Also in 41)

Other Changes

  • Updated Chromium to 144.0.7559.225. #49928
  • Updated Node.js to v24.14.0. #49939
Commits
  • de61f6c feat: show toast dismissal reason on Windows (#50030)
  • 90f85f2 chore: bump chromium to 144.0.7559.236 (40-x-y) (#50060)
  • 60951cd fix: use proper quoting for exe paths and args on Windows (#50075)
  • a3022df build: fix code-signing for MacOS x64 tests (#50072)
  • 996fbfd chore: remove applescript from trash (#50065)
  • 79d1e32 fix: uaf in non-client hittest during view teardown (#50053)
  • 1598b91 fix: validate USB device selection against filtered device list (#50048)
  • 68cd111 fix: use setter's creation context when proxying setter in OverrideGlobalProp...
  • 1e2d590 fix: bind offscreen paint callback to child WebContents (#50024)
  • 1bbe8c9 fix: use destination context when wrapping VideoFrame in contextBridge (#50022)
  • Additional commits viewable in compare view

Updates electron-nightly from 42.0.0-nightly.20260224 to 42.0.0-nightly.20260310

Commits
  • 3691451 build(deps): bump github/codeql-action from 4.32.5 to 4.32.6 (#50179)
  • b3e4547 build(deps): bump fast-xml-parser from 4.5.3 to 4.5.4 in the npm_and_yarn gro...
  • bda1bec build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#50180)
  • dda92fd ci: add workflow to remove 'needs-signed-commits' label (#50103)
  • d4cbd6c docs: fix ipc highlight lines (#50169)
  • 2ba4872 feat: WebContents.getOrCreateDevToolsTargetId() (#49733)
  • c264402 fix: validate protocol scheme names in setAsDefaultProtocolClient (#50141)
  • 2c6dd11 fix: use requesting frame origin in permission helper and device choosers (#5...
  • eacec9a refactor: use WHATWG URL instead of url.parse (#48674)
  • 0d869c2 ci: calculate dates for release board automation (#50081)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 5 updates

Bumps the production-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@electron/fuses](https://github.com/electron/fuses) | `2.0.0` | `2.1.0` |
| [electron-to-chromium](https://github.com/kilian/electron-to-chromium) | `1.5.302` | `1.5.307` |
| [puppeteer-core](https://github.com/puppeteer/puppeteer) | `24.37.5` | `24.39.0` |
| [electron](https://github.com/electron/electron) | `40.6.1` | `40.8.0` |
| [electron-nightly](https://github.com/electron/electron) | `42.0.0-nightly.20260224` | `42.0.0-nightly.20260310` |



Updates `@electron/fuses` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/electron/fuses/releases)
- [Commits](electron/fuses@v2.0.0...v2.1.0)

Updates `electron-to-chromium` from 1.5.302 to 1.5.307
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/master/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.302...v1.5.307)

Updates `puppeteer-core` from 24.37.5 to 24.39.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-core-v24.37.5...puppeteer-core-v24.39.0)

Updates `electron` from 40.6.1 to 40.8.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v40.6.1...v40.8.0)

Updates `electron-nightly` from 42.0.0-nightly.20260224 to 42.0.0-nightly.20260310
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.0.0-nightly.20260224...v42.0.0-nightly.20260310)

---
updated-dependencies:
- dependency-name: "@electron/fuses"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: electron-to-chromium
  dependency-version: 1.5.307
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: puppeteer-core
  dependency-version: 24.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: electron
  dependency-version: 40.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: electron-nightly
  dependency-version: 42.0.0-nightly.20260310
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the area:dependencies Updating dependencies label Mar 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:dependencies Updating dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants