Skip to content

chore(deps-dev): bump electron from 38.8.6 to 39.8.10 - #444

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-39.8.10
Open

chore(deps-dev): bump electron from 38.8.6 to 39.8.10#444
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/electron-39.8.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown

Bumps electron from 38.8.6 to 39.8.10.

Release notes

Sourced from electron's releases.

electron v39.8.10

Release Notes for v39.8.10

[!WARNING] Electron 39.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.

Fixes

  • Ensured cross-origin fetch() and XHR are blocked for custom protocols registered with supportFetchAPI: true unless corsEnabled: true is also set; cross-origin mode: 'no-cors' requests now receive an opaque response. #51272 (Also in 40, 41, 42)
  • Fixed an issue where the Squirrel.Mac installer could resolve the target bundle path to different locations at different stages of an install. #50766 (Also in 42)

Other Changes

  • Backported a fix for route_id validation in the GPU command buffer. #51327
  • Backported security fixes for 493319454, 494158331, 493234757, 492736100, 493413432, 492668885, 496281816. #51257
  • Backported several fixes in Skia, ANGLE, and WebRTC from upstream. #51266

electron v39.8.9

Release Notes for v39.8.9

Other Changes

electron v39.8.8

Release Notes for v39.8.8

Fixes

  • Fixed an issue where DevTools would re-attach to the window when opened after previously being detached. #50818 (Also in 40, 41, 42)

Other Changes

  • Backported fix for chromium:74266014. #50175
  • Backported upstream v8 fixes for several maglev, inspector, and arm64 code-generation edge cases. #50993
Commits
  • d7c42eb chore: backport removal of private macOS APIs (#51502)
  • c76d48c build: replace spec dep fork with transitive resolution (#51490)
  • 3ff23c5 fix: respect iframe sandbox flags on the OpenURL navigation path (#51437)
  • 01faabf fix: resolve target bundle path once at start of install (#50766)
  • 8287d59 build(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 (#51409)
  • a8a79ea ci: backport secondary siso patch (#51390)
  • 593607e chore: cherry-pick 1 change from chromium (#51327)
  • aa7791f build: restrict npm tarball contents to an explicit allowlist (#51307)
  • 5392e9a fix: ensure corsEnabled: false protocol handlers do not work across protocols...
  • 2c24640 fix: validate OSR frame geometry against shared-memory mapping size (39-x-y) ...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 7, 2026

Copy link
Copy Markdown

Deploying vidbee-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: 15e08a1
Status:🚫  Build failed.

View logs

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 87c4e9746c

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread pnpm-lock.yaml
Comment on lines 722 to +724
react:
specifier: ^19.0.0
version: 19.2.4
version: 19.2.7

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep the shared UI on the app's React copy

This lockfile now resolves the @vidbee/ui importer's React peer to 19.2.7, while the desktop and web importers that link to the same workspace package still resolve their own react/react-dom to 19.2.4. After a pnpm install, shared UI modules and their Radix dependencies can resolve hooks against packages/ui's 19.2.7 copy instead of the app's 19.2.4 copy, so desktop/web components imported from @vidbee/ui can hit React's duplicate-copy “invalid hook call” failure; keep this peer resolution aligned with the consuming apps or dedupe React.

Useful? React with 👍 / 👎.

Bumps [electron](https://github.com/electron/electron) from 38.8.6 to 39.8.10.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v38.8.6...v39.8.10)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 39.8.10
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/electron-39.8.10 branch from 87c4e97 to 15e08a1 Compare August 16, 2026 14:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants