fix(electron): upgrade to Electron 41.10.7 and let the builder follow package.json (#973)

electron-builder.yml hard-coded electronVersion: 39.2.7 since #448, so every
desktop release, including v0.5.0, shipped Electron 39.2.7 no matter which
version package.json asked for. Removing the line makes electron-builder use
the installed version (checked: the packaged Electron Framework reports
41.10.7 and the app starts and serves its page). Electron 41.10.7 fixes the
four open Electron advisories (popup sandbox, webview Node integration,
protocol handler cross-origin reads, sandboxed window inheritance) and its
@electron/get 5 drops extract-zip, which clears two more alerts.
This commit is contained in:
Dayuan Jiang
2026-10-10 21:53:37 +09:00
committed by GitHub
parent a6e812d3a5
commit 498ee628f1
3 changed files with 53 additions and 137 deletions
-1
View File
@@ -1,7 +1,6 @@
appId: com.nextaidrawio.app
productName: Next AI Draw.io
copyright: Copyright © 2024 Next AI Draw.io
electronVersion: 39.2.7
directories:
output: release