fix(electron): upgrade to Electron 41.10.7 and let the builder follow package.json

electron-builder.yml hard-coded electronVersion: 39.2.7 since #448, so every
desktop release, including v0.5.0, shipped Electron 39.2.7 no matter which
version package.json asked for. Removing the line makes electron-builder use
the installed version (checked: the packaged Electron Framework reports
41.10.7 and the app starts and serves its page). Electron 41.10.7 fixes the
four open Electron advisories (popup sandbox, webview Node integration,
protocol handler cross-origin reads, sandboxed window inheritance) and its
@electron/get 5 drops extract-zip, which clears two more alerts.
This commit is contained in:
dayuan.jiang
2026-10-10 20:08:17 +09:00
parent a6e812d3a5
commit 0b5c5f0a07
3 changed files with 53 additions and 137 deletions
+1 -1
View File
@@ -127,7 +127,7 @@
"@vitest/coverage-v8": "^4.0.16",
"concurrently": "^9.2.1",
"cross-env": "^10.1.0",
"electron": "^39.2.7",
"electron": "^41.10.6",
"electron-builder": "^26.0.12",
"esbuild": "^0.28.0",
"eslint": "9.39.5",