fix(electron): upgrade to Electron 41.10.7 and let the builder follow package.json (#973)

electron-builder.yml hard-coded electronVersion: 39.2.7 since #448, so every
desktop release, including v0.5.0, shipped Electron 39.2.7 no matter which
version package.json asked for. Removing the line makes electron-builder use
the installed version (checked: the packaged Electron Framework reports
41.10.7 and the app starts and serves its page). Electron 41.10.7 fixes the
four open Electron advisories (popup sandbox, webview Node integration,
protocol handler cross-origin reads, sandboxed window inheritance) and its
@electron/get 5 drops extract-zip, which clears two more alerts.
This commit is contained in:
Dayuan Jiang
2026-10-10 21:53:37 +09:00
committed by GitHub
parent a6e812d3a5
commit 498ee628f1
3 changed files with 53 additions and 137 deletions
+1 -1
View File
@@ -127,7 +127,7 @@
"@vitest/coverage-v8": "^4.0.16",
"concurrently": "^9.2.1",
"cross-env": "^10.1.0",
"electron": "^39.2.7",
"electron": "^41.10.6",
"electron-builder": "^26.0.12",
"esbuild": "^0.28.0",
"eslint": "9.39.5",