fix(electron): upgrade to Electron 41.10.7 and let the builder follow package.json

electron-builder.yml hard-coded electronVersion: 39.2.7 since #448, so every
desktop release, including v0.5.0, shipped Electron 39.2.7 no matter which
version package.json asked for. Removing the line makes electron-builder use
the installed version (checked: the packaged Electron Framework reports
41.10.7 and the app starts and serves its page). Electron 41.10.7 fixes the
four open Electron advisories (popup sandbox, webview Node integration,
protocol handler cross-origin reads, sandboxed window inheritance) and its
@electron/get 5 drops extract-zip, which clears two more alerts.
This commit is contained in:
dayuan.jiang
2026-10-10 20:08:17 +09:00
parent a6e812d3a5
commit 0b5c5f0a07
3 changed files with 53 additions and 137 deletions
-1
View File
@@ -1,7 +1,6 @@
appId: com.nextaidrawio.app
productName: Next AI Draw.io
copyright: Copyright © 2024 Next AI Draw.io
electronVersion: 39.2.7
directories:
output: release