Bump the npm_and_yarn group across 10 directories with 6 updates

[dependabot]

Bumps the npm_and_yarn group with 1 update in the /types/electron-json-storage directory: electron.
Bumps the npm_and_yarn group with 1 update in the /types/electron-notifications directory: electron.
Bumps the npm_and_yarn group with 1 update in the /types/electron-notify directory: electron.
Bumps the npm_and_yarn group with 1 update in the /types/electron-window-state directory: electron.
Bumps the npm_and_yarn group with 1 update in the /types/menubar directory: electron.
Bumps the npm_and_yarn group with 1 update in the /types/moxios directory: axios.
Bumps the npm_and_yarn group with 1 update in the /types/rappid directory: jointjs.
Bumps the npm_and_yarn group with 1 update in the /types/rollup-plugin-json directory: rollup.
Bumps the npm_and_yarn group with 1 update in the /types/schwifty directory: objection.
Bumps the npm_and_yarn group with 1 update in the /types/universal-router directory: path-to-regexp.

Updates electron from 1.8.8 to 41.2.0

Release notes

Sourced from electron's releases.

electron v41.2.0

Release Notes for v41.2.0

Features

• Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. #50529 (Also in 40, 42)

Fixes

• BrowserWindow now enforces min/max size constraints on window creation, even if they conflict with the requested width and height. #50753 (Also in 42)
• Fixed a regression on Linux where transparent frameless windows would have visible borders. Also fixed a longstanding issue where transparent windows on Linux could show smeared and glitched content as windows moved around. #50605
• Fixed an intermittent Invoke in DisallowJavascriptExecutionScope crash on application quit when a WebContents (or other JS-emitting native object) is garbage-collected during shutdown. #50694 (Also in 40, 42)
• Fixed an issue on macOS where show/hide events and WebContents visibility state could be reported incorrectly when multiple WebContentsViews were attached to a window. #50715 (Also in 40, 42)
• Fixed an issue where concurrent getFileHandle requests on the same path could stall indefinitely. #50670 (Also in 40, 42)
• Fixed an issue where margins did not look as expected when printing in silent mode. #50652 (Also in 42)
• Fixed an issue where the webContents.print() callback may not fire correctly in some cases. #50604 (Also in 42)
• Fixed the appearance of maximized windows on GNOME in Wayland, especially when non-default GTK themes like Breeze are set. #50645 (Also in 42)
• Removed "representedObject is not a WeakPtrToElectronMenuModelAsNSObject" logging when interacting with macOS menus. #50613 (Also in 42)

Other Changes

• Updated Chromium to 146.0.7680.179. #50616

electron v41.1.1

Release Notes for v41.1.1

Fixes

• Fixed a crash when calling contentTracing.getTraceBufferUsage() while a trace session is active. #50594 (Also in 39, 40, 42)
• Fixed printing on Linux failing with "Invalid printer settings". #50486 (Also in 42)

Other Changes

• Enabled profile-guided optimization for V8 builtins in release builds, improving JavaScript builtin performance (Array, String, RegExp, etc.). #50574 (Also in 40, 42)

electron v41.1.0

Release Notes for v41.1.0

Features

• Added nativeTheme.shouldDifferentiateWithoutColor on macOS. #50408 (Also in 42)
• Notes: Added support for the urgency option in Notifications on Windows. #50382 (Also in 42)

Fixes

• Fixed a bug where Windows notification icons could fail to save because their temporary filenames contained invalid characters. #50483 (Also in 40)
• Fixed a crash in clipboard.readImage() when the clipboard contains malformed image data. #50492 (Also in 39, 40, 42)
• Fixed a crash when calling an offscreen shared texture's release() after the texture object was garbage collected. #50501 (Also in 39, 40, 42)
• Fixed an accessibility issue where the AXMenuOpened event was not fired on menu creation. #50506 (Also in 40, 42)
• Fixed an issue where an app shortcut may lose its icon after auto-updating on Windows. #50519 (Also in 40)

Other Changes

• Updated Chromium to 146.0.7680.166. #50458

... (truncated)

Commits

• 7394591 ci: use hermetic mac SDK for the release ffmpeg build (#50755)
• d37b4f5 fix: enforce size constraints on window creation on Windows and Linux (#50753)
• 6f1d53a ci: make src-cache upload atomic (#50750)
• fb150b2 docs: link menu type references (#50752)
• c219f2c build: derive patches upstream-head ref from script path (41-x-y) (#50741)
• 3fa5280 fix: re-enable MacWebContentsOcclusion with embedder window fix (#50715)
• 45ad6b3 chore: bump chromium to 146.0.7680.179 (41-x-y) (#50616)
• 26e20c7 ci: use github mirror to get lint dependency versions (#50736)
• ca15223 chore: harden GitHub Actions against script injection patterns (#50708)
• 3d743a6 build: replace npx with lockfile-pinned binaries (#50718)
• Additional commits viewable in compare view

Updates electron from 1.8.8 to 41.2.0

Release notes

Sourced from electron's releases.

electron v41.2.0

Release Notes for v41.2.0

Features

• Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. #50529 (Also in 40, 42)

Fixes

• BrowserWindow now enforces min/max size constraints on window creation, even if they conflict with the requested width and height. #50753 (Also in 42)
• Fixed a regression on Linux where transparent frameless windows would have visible borders. Also fixed a longstanding issue where transparent windows on Linux could show smeared and glitched content as windows moved around. #50605
• Fixed an intermittent Invoke in DisallowJavascriptExecutionScope crash on application quit when a WebContents (or other JS-emitting native object) is garbage-collected during shutdown. #50694 (Also in 40, 42)
• Fixed an issue on macOS where show/hide events and WebContents visibility state could be reported incorrectly when multiple WebContentsViews were attached to a window. #50715 (Also in 40, 42)
• Fixed an issue where concurrent getFileHandle requests on the same path could stall indefinitely. #50670 (Also in 40, 42)
• Fixed an issue where margins did not look as expected when printing in silent mode. #50652 (Also in 42)
• Fixed an issue where the webContents.print() callback may not fire correctly in some cases. #50604 (Also in 42)
• Fixed the appearance of maximized windows on GNOME in Wayland, especially when non-default GTK themes like Breeze are set. #50645 (Also in 42)
• Removed "representedObject is not a WeakPtrToElectronMenuModelAsNSObject" logging when interacting with macOS menus. #50613 (Also in 42)

Other Changes

• Updated Chromium to 146.0.7680.179. #50616

electron v41.1.1

Release Notes for v41.1.1

Fixes

• Fixed a crash when calling contentTracing.getTraceBufferUsage() while a trace session is active. #50594 (Also in 39, 40, 42)
• Fixed printing on Linux failing with "Invalid printer settings". #50486 (Also in 42)

Other Changes

• Enabled profile-guided optimization for V8 builtins in release builds, improving JavaScript builtin performance (Array, String, RegExp, etc.). #50574 (Also in 40, 42)

electron v41.1.0

Release Notes for v41.1.0

Features

• Added nativeTheme.shouldDifferentiateWithoutColor on macOS. #50408 (Also in 42)
• Notes: Added support for the urgency option in Notifications on Windows. #50382 (Also in 42)

Fixes

• Fixed a bug where Windows notification icons could fail to save because their temporary filenames contained invalid characters. #50483 (Also in 40)
• Fixed a crash in clipboard.readImage() when the clipboard contains malformed image data. #50492 (Also in 39, 40, 42)
• Fixed a crash when calling an offscreen shared texture's release() after the texture object was garbage collected. #50501 (Also in 39, 40, 42)
• Fixed an accessibility issue where the AXMenuOpened event was not fired on menu creation. #50506 (Also in 40, 42)
• Fixed an issue where an app shortcut may lose its icon after auto-updating on Windows. #50519 (Also in 40)

Other Changes

• Updated Chromium to 146.0.7680.166. #50458

... (truncated)

Commits

• 7394591 ci: use hermetic mac SDK for the release ffmpeg build (#50755)
• d37b4f5 fix: enforce size constraints on window creation on Windows and Linux (#50753)
• 6f1d53a ci: make src-cache upload atomic (#50750)
• fb150b2 docs: link menu type references (#50752)
• c219f2c build: derive patches upstream-head ref from script path (41-x-y) (#50741)
• 3fa5280 fix: re-enable MacWebContentsOcclusion with embedder window fix (#50715)
• 45ad6b3 chore: bump chromium to 146.0.7680.179 (41-x-y) (#50616)
• 26e20c7 ci: use github mirror to get lint dependency versions (#50736)
• ca15223 chore: harden GitHub Actions against script injection patterns (#50708)
• 3d743a6 build: replace npx with lockfile-pinned binaries (#50718)
• Additional commits viewable in compare view

Updates electron from 1.8.8 to 41.2.0

Release notes

Sourced from electron's releases.

electron v41.2.0

Release Notes for v41.2.0

Features

• Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. #50529 (Also in 40, 42)

Fixes

• BrowserWindow now enforces min/max size constraints on window creation, even if they conflict with the requested width and height. #50753 (Also in 42)
• Fixed a regression on Linux where transparent frameless windows would have visible borders. Also fixed a longstanding issue where transparent windows on Linux could show smeared and glitched content as windows moved around. #50605
• Fixed an intermittent Invoke in DisallowJavascriptExecutionScope crash on application quit when a WebContents (or other JS-emitting native object) is garbage-collected during shutdown. #50694 (Also in 40, 42)
• Fixed an issue on macOS where show/hide events and WebContents visibility state could be reported incorrectly when multiple WebContentsViews were attached to a window. #50715 (Also in 40, 42)
• Fixed an issue where concurrent getFileHandle requests on the same path could stall indefinitely. #50670 (Also in 40, 42)
• Fixed an issue where margins did not look as expected when printing in silent mode. #50652 (Also in 42)
• Fixed an issue where the webContents.print() callback may not fire correctly in some cases. #50604 (Also in 42)
• Fixed the appearance of maximized windows on GNOME in Wayland, especially when non-default GTK themes like Breeze are set. #50645 (Also in 42)
• Removed "representedObject is not a WeakPtrToElectronMenuModelAsNSObject" logging when interacting with macOS menus. #50613 (Also in 42)

Other Changes

• Updated Chromium to 146.0.7680.179. #50616

electron v41.1.1

Release Notes for v41.1.1

Fixes

• Fixed a crash when calling contentTracing.getTraceBufferUsage() while a trace session is active. #50594 (Also in 39, 40, 42)
• Fixed printing on Linux failing with "Invalid printer settings". #50486 (Also in 42)

Other Changes

• Enabled profile-guided optimization for V8 builtins in release builds, improving JavaScript builtin performance (Array, String, RegExp, etc.). #50574 (Also in 40, 42)

electron v41.1.0

Release Notes for v41.1.0

Features

• Added nativeTheme.shouldDifferentiateWithoutColor on macOS. #50408 (Also in 42)
• Notes: Added support for the urgency option in Notifications on Windows. #50382 (Also in 42)

Fixes

• Fixed a bug where Windows notification icons could fail to save because their temporary filenames contained invalid characters. #50483 (Also in 40)
• Fixed a crash in clipboard.readImage() when the clipboard contains malformed image data. #50492 (Also in 39, 40, 42)
• Fixed a crash when calling an offscreen shared texture's release() after the texture object was garbage collected. #50501 (Also in 39, 40, 42)
• Fixed an accessibility issue where the AXMenuOpened event was not fired on menu creation. #50506 (Also in 40, 42)
• Fixed an issue where an app shortcut may lose its icon after auto-updating on Windows. #50519 (Also in 40)

Other Changes

• Updated Chromium to 146.0.7680.166. #50458

... (truncated)

Commits

• 7394591 ci: use hermetic mac SDK for the release ffmpeg build (#50755)
• d37b4f5 fix: enforce size constraints on window creation on Windows and Linux (#50753)
• 6f1d53a ci: make src-cache upload atomic (#50750)
• fb150b2 docs: link menu type references (#50752)
• c219f2c build: derive patches upstream-head ref from script path (41-x-y) (#50741)
• 3fa5280 fix: re-enable MacWebContentsOcclusion with embedder window fix (#50715)
• 45ad6b3 chore: bump chromium to 146.0.7680.179 (41-x-y) (#50616)
• 26e20c7 ci: use github mirror to get lint dependency versions (#50736)
• ca15223 chore: harden GitHub Actions against script injection patterns (#50708)
• 3d743a6 build: replace npx with lockfile-pinned binaries (#50718)
• Additional commits viewable in compare view

Updates electron from 1.8.8 to 41.2.0

Release notes

Sourced from electron's releases.

electron v41.2.0

Release Notes for v41.2.0

Features

• Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. #50529 (Also in 40, 42)

Fixes

• BrowserWindow now enforces min/max size constraints on window creation, even if they conflict with the requested width and height. #50753 (Also in 42)
• Fixed a regression on Linux where transparent frameless windows would have visible borders. Also fixed a longstanding issue where transparent windows on Linux could show smeared and glitched content as windows moved around. #50605
• Fixed an intermittent Invoke in DisallowJavascriptExecutionScope crash on application quit when a WebContents (or other JS-emitting native object) is garbage-collected during shutdown. #50694 (Also in 40, 42)
• Fixed an issue on macOS where show/hide events and WebContents visibility state could be reported incorrectly when multiple WebContentsViews were attached to a window. #50715 (Also in 40, 42)
• Fixed an issue where concurrent getFileHandle requests on the same path could stall indefinitely. #50670 (Also in 40, 42)
• Fixed an issue where margins did not look as expected when printing in silent mode. #50652 (Also in 42)
• Fixed an issue where the webContents.print() callback may not fire correctly in some cases. #50604 (Also in 42)
• Fixed the appearance of maximized windows on GNOME in Wayland, especially when non-default GTK themes like Breeze are set. #50645 (Also in 42)
• Removed "representedObject is not a WeakPtrToElectronMenuModelAsNSObject" logging when interacting with macOS menus. #50613 (Also in 42)

Other Changes

• Updated Chromium to 146.0.7680.179. #50616

electron v41.1.1

Release Notes for v41.1.1

Fixes

• Fixed a crash when calling contentTracing.getTraceBufferUsage() while a trace session is active. #50594 (Also in 39, 40, 42)
• Fixed printing on Linux failing with "Invalid printer settings". #50486 (Also in 42)

Other Changes

• Enabled profile-guided optimization for V8 builtins in release builds, improving JavaScript builtin performance (Array, String, RegExp, etc.). #50574 (Also in 40, 42)

electron v41.1.0

Release Notes for v41.1.0

Features

• Added nativeTheme.shouldDifferentiateWithoutColor on macOS. #50408 (Also in 42)
• Notes: Added support for the urgency option in Notifications on Windows. #50382 (Also in 42)

Fixes

• Fixed a bug where Windows notification icons could fail to save because their temporary filenames contained invalid characters. #50483 (Also in 40)
• Fixed a crash in clipboard.readImage() when the clipboard contains malformed image data. #50492 (Also in 39, 40, 42)
• Fixed a crash when calling an offscreen shared texture's release() after the texture object was garbage collected. #50501 (Also in 39, 40, 42)
• Fixed an accessibility issue where the AXMenuOpened event was not fired on menu creation. #50506 (Also in 40, 42)
• Fixed an issue where an app shortcut may lose its icon after auto-updating on Windows. #50519 (Also in 40)

Other Changes

• Updated Chromium to 146.0.7680.166. #50458

... (truncated)

Commits

• 7394591 ci: use hermetic mac SDK for the release ffmpeg build (#50755)
• d37b4f5 fix: enforce size constraints on window creation on Windows and Linux (#50753)
• 6f1d53a ci: make src-cache upload atomic (#50750)
• fb150b2 docs: link menu type references (#50752)
• c219f2c build: derive patches upstream-head ref from script path (41-x-y) (#50741)
• 3fa5280 fix: re-enable MacWebContentsOcclusion with embedder window fix (#50715)
• 45ad6b3 chore: bump chromium to 146.0.7680.179 (41-x-y) (#50616)
• 26e20c7 ci: use github mirror to get lint dependency versions (#50736)
• ca15223 chore: harden GitHub Actions against script injection patterns (#50708)
• 3d743a6 build: replace npx with lockfile-pinned binaries (#50718)
• Additional commits viewable in compare view

Updates electron from 1.8.8 to 41.2.0

Release notes

Sourced from electron's releases.

electron v41.2.0

Release Notes for v41.2.0

Features

• Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. #50529 (Also in 40, 42)

Fixes

• BrowserWindow now enforces min/max size constraints on window creation, even if they conflict with the requested width and height. #50753 (Also in 42)
• Fixed a regression on Linux where transparent frameless windows would have visible borders. Also fixed a longstanding issue where transparent windows on Linux could show smeared and glitched content as windows moved around. #50605
• Fixed an intermittent Invoke in DisallowJavascriptExecutionScope crash on application quit when a WebContents (or other JS-emitting native object) is garbage-collected during shutdown. #50694 (Also in 40, 42)
• Fixed an issue on macOS where show/hide events and WebContents visibility state could be reported incorrectly when multiple WebContentsViews were attached to a window. #50715 (Also in 40, 42)
• Fixed an issue where concurrent getFileHandle requests on the same path could stall indefinitely. #50670 (Also in 40, 42)
• Fixed an issue where margins did not look as expected when printing in silent mode. #50652 (Also in 42)
• Fixed an issue where the webContents.print() callback may not fire correctly in some cases. #50604 (Also in 42)
• Fixed the appearance of maximized windows on GNOME in Wayland, especially when non-default GTK themes like Breeze are set. #50645 (Also in 42)
• Removed "representedObject is not a WeakPtrToElectronMenuModelAsNSObject" logging when interacting with macOS menus. #50613 (Also in 42)

Other Changes

• Updated Chromium to 146.0.7680.179. #50616

electron v41.1.1

Release Notes for v41.1.1

Fixes

• Fixed a crash when calling contentTracing.getTraceBufferUsage() while a trace session is active. #50594 (Also in 39, 40, 42)
• Fixed printing on Linux failing with "Invalid printer settings". #50486 (Also in 42)

Other Changes

• Enabled profile-guided optimization for V8 builtins in release builds, improving JavaScript builtin performance (Array, String, RegExp, etc.). #50574 (Also in 40, 42)

electron v41.1.0

Release Notes for v41.1.0

Features

• Added nativeTheme.shouldDifferentiateWithoutColor on macOS. #50408 (Also in 42)
• Notes: Added support for the urgency option in Notifications on Windows. #50382 (Also in 42)

Fixes

• Fixed a bug where Windows notification icons could fail to save because their temporary filenames contained invalid characters. #50483 (Also in 40)
• Fixed a crash in clipboard.readImage() when the clipboard contains malformed image data. #50492 (Also in 39, 40, 42)
• Fixed a crash when calling an offscreen shared texture's release() after the texture object was garbage collected. #50501 (Also in 39, 40, 42)
• Fixed an accessibility issue where the AXMenuOpened event was not fired on menu creation. #50506 (Also in 40, 42)
• Fixed an issue where an app shortcut may lose its icon after auto-updating on Windows. #50519 (Also in 40)

Other Changes

• Updated Chromium to 146.0.7680.166. #50458

... (truncated)

Commits

• 7394591 ci: use hermetic mac SDK for the release ffmpeg build (#50755)
• d37b4f5 fix: enforce size constraints on window creation on Windows and Linux (#50753)
• 6f1d53a ci: make src-cache upload atomic (#50750)
• fb150b2 docs: link menu type references (#50752)
• c219f2c build: derive patches upstream-head ref from script path (41-x-y) (#50741)
• 3fa5280 fix: re-enable MacWebContentsOcclusion with embedder window fix (#50715)
• 45ad6b3 chore: bump chromium to 146.0.7680.179 (41-x-y) (#50616)
• 26e20c7 ci: use github mirror to get lint dependency versions (#50736)
• ca15223 chore: harden GitHub Actions against script injection patterns (#50708)
• 3d743a6 build: replace npx with lockfile-pinned binaries (#50718)
• Additional commits viewable in compare view

Updates axios from 0.16.2 to 1.15.0

Release notes

Sourced from axios's releases.

v1.15.0

This release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.

⚠️ Important Changes

• Deprecation: url.parse() usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (#10625)

🔒 Security Fixes

• Proxy Handling: Fixed a no_proxy hostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (#10661)
• Header Injection: Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (#10660)

🚀 New Features

• Runtime Support: Added compatibility checks and documentation for Deno and Bun environments. (#10652, #10653)

🔧 Maintenance & Chores

• CI Security: Hardened workflow permissions to least privilege, added the zizmor security scanner, pinned action versions, and gated npm publishing with OIDC and environment protection. (#10618, #10619, #10627, #10637, #10666)
• Dependencies: Bumped serialize-javascript, handlebars, picomatch, vite, and denoland/setup-deno to latest versions. Added a 7-day Dependabot cooldown period. (#10574, #10572, #10568, #10663, #10664, #10665, #10669, #10670, #10616)
• Documentation: Unified docs, improved beforeRedirect credential leakage example, clarified withCredentials/withXSRFToken behaviour, HTTP/2 support notes, async/await timeout error handling, header case preservation, and various typo fixes. (#10649, #10624, #7452, #7471, #10654, #10644, #10589)
• Housekeeping: Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (#10584, #10650, #10582, #10640, #10659, #10668)
• Tests: Added regression coverage for urlencoded Content-Type casing. (#10573)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

• @​raashish1601 (#10573)
• @​Kilros0817 (#10625)
• @​ashstrc (#10624)
• @​Abhi3975 (#10589)
• @​theamodhshetty (#7452)

v1.14.0

This release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.

⚠️ Important Changes

• Breaking Changes: None identified in this release.
• Action Required: If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably proxy-from-env v2 alignment and main entry compatibility fix).
...

Description has been truncated