Skip to content

chore: cherry-pick 47 changes from angle, chromium, dawn, fontconfig, skia, v8 and webrtc - #54666

Merged
MarshallOfSound merged 3 commits into
44-x-yfrom
security-backport/44-x-y/37507889400
Oct 6, 2026
Merged

MarshallOfSound merged 3 commits into
44-x-yfrom
security-backport/44-x-y/37507889400

Conversation

@claude

@claude claude Bot commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Requested via Slack

Description of Change

Backports the following changes:

  • 0a35d208b1a4 from angle — GL: Fix UAF in ContextGL with depth init PBOs
  • 17c57c6066ac from angle — D3D11: Backup texture storage contents on base level changes
  • 5aaa642831a2 from angle — D3D: Release 2D array storage on base level layer count change
  • 7c4ce32df88b from angle — D3D11: Release storage on zero-dimension base level transition
  • 803dfde1e22e from angle — Fix missing texture type match validation in MSRTT
  • 819e8c405b13 from angle — GL: enable adjustSrcDstRegionForBlitFramebuffer on Mali GPUs.
  • ac048ffcee48 from angle — Vulkan: Fix robust-init when OOB-self-image-copying
  • ad72ad15e2c8 from angle — D3D11: Fix stale swizzle cache on robust resource init
  • f9c580915985 from angle — Fix robust-init when OOB-copying between mips of same texture
  • 011c5d23207a from chromium — LNA: stop classifying chrome-untrusted:// as loopback
  • 61ef27611dc6 from chromium — [M152] Fix bugs in ResourceMultiBufferDataProvider::DidReceiveResponse
  • 61f3d8549e0b from chromium — [M152] Harden RenderWidgetHostViewEventHandler::FinishImeCompositionSession
  • 2048cd07495e from chromium — [M152] [Media] Zero unfilled frames in TeeFilter::Render()
  • 52a66b712fe8 from chromium — Make fontconfig global config creation synchronous
  • 64c8e2a1ceda from chromium — [FSA] Block macOS firmlink alias paths to sensitive directories
  • 64fab9307cf2 from chromium — Avoid stale entry reference in ReconstructTheActiveFormattingElements
  • 6a2ce41c631e from chromium — [net] Stop PAC script auto-auth fetches in ProxyResolverWinHttp
  • 6e1324133a06 from chromium — media: Check IsCleared in VideoImageRepresentation read access
  • 5829dbe56767 from chromium — [M152] Fix bugs during TextTrackContainer::UpdateDisplay
  • fee8baee165a from chromium — [M152] Fix bugs in HTMLMediaElement::SelectNextSourceChild
  • 35e6b50ff0e3 from chromium — [M152] Fix RFH state checks in EvictBFCachedClientsIfLastActive
  • 082a72b30467 from chromium — [M152] [Media] Use HeapVector<Member> for active cues
  • 4b49db22352c from chromium — [M152] [PDF] Avoid using invalid destination handle in PDFiumEngine
  • 852936ed111c from chromium — [M152] Ignore child element insertion when srcObject is present
  • 9abe6c18e0cf from chromium — Convert atomic sequences for cc::PaintImage to 64-bit integers
  • 3fe46caac0d3 from chromium — [M152] Post task for PrepareToLeaveBackForwardCache callback
  • a73219eb4cb1 from chromium — Generate Blob UUID in browser process
  • bf2b378deb90 from chromium — net: Rebuild proxy HttpAuthController when the proxy changes
  • 29c3240bc3b5 from chromium — [M152] Reland "Avoid dangling reference in HTMLAnchorElementBase::NavigateToHyperlink."
  • e8cfa0184ae5 from chromium — [M152] [WebAudio] Defer AudioHandler disposal for all non-closed states
  • 79d7e8374c00 from chromium — [M152] Fix bugs in MultiBuffer::OnDataProviderEvent when Prune empties UrlData
  • ff834f798fe3 from chromium — [M152] [PDF] Avoid using invalid link handle in PDFiumPage
  • f9cea35d3e88 from chromium — Ensure sufficient lifetime of WebViewImpl::page_popup_.
  • fd4e928e7b3e from chromium — [parser] Store stable element identity in adoption agency Bookmark
  • ffa67bc6b5b0 from chromium — GPU: enable adjust_src_dst_region_for_blitframebuffer on Mali.
  • 2c09344f1530 from dawn — [metal] Handle command buffer execution errors
  • d0acacc83ce8 from dawn — Fix issue with emit_continue block maintenance.
  • 0009a9561ce5 from fontconfig — Add FcRwLock for POSIX
  • 8602459f2dee from fontconfig — Add Windows SRWLOCK implementation for FcRwLock
  • 8e9585bc5e76 from fontconfig — Synchronize font set access with FcRwLock
  • 409081ee128b from skia — [M152] [ganesh] Drop unique refs in GrThreadSafeCache when flush tasks fail
  • 41d0351e57bb from v8 — [turbolev] Preserve phi type during loop peeling
  • 55dcff77d1bd from v8 — [M152] [heap] Fix GetHash for JSWeakRef weak handling in Scavenger
  • 7075c436f401 from v8 — [M152] [debug] Step into function when OOM break fires at function entry
  • ec136c5038d3 from v8 — [M152] [compiler] Don't assume a memory fence for generated-code feedback
  • 82df4ce4226d from webrtc — [M152] Ensure stopped transceivers do not hold a channel
  • 7a25e1c85a0a from webrtc — [M152] Keep transceiver MID in sync with its channel

Note

Hand-written Electron source changes outside patches/. In addition to the patch files above, this PR modifies two Electron source files, each in its own commit:

  • shell/browser/file_system_access/file_system_access_permission_context.cc — switches Electron's copy of ShouldBlockAccessToPath() to the NormalizeFilePathForBlocklist() helper added by the companion chromium cherry-pick (64c8e2a1ceda), so paths spelled via the /System/Volumes/Data firmlink are matched against the blocklist rules the same way Chrome does. Upstream: CL 8410087, upstream commit 64c8e2a1cedafdbcc750abc423ad9b389537c223.
  • shell/app/electron_main_delegate.cc — drops the Linux-only gfx::InitializeGlobalFontConfigAsync() call in PreBrowserMain(); the companion chromium cherry-pick (52a66b712fe8) removes that function and makes global fontconfig initialization synchronous. Upstream: CL 8310116, upstream commit 52a66b712fe87f445a917357626ed9447d63f686.

Please review these files directly.

This PR was opened manually from the verified (build-green) artifacts of agent-workflows run 37507889400, because the backport automation refuses to publish changes outside patches/.

Checklist

Release Notes

Notes: Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC.

🤖 Generated with Claude Code

https://claude.ai/code/session_01MtuMgvwAcw7t9Q6HEB31Vx


Generated by Claude Code

chromium-roller[bot] and others added 3 commits October 6, 2026 19:48
… skia, v8, webrtc

* 0a35d208b1a4 from angle
* 17c57c6066ac from angle
* 5aaa642831a2 from angle
* 7c4ce32df88b from angle
* 803dfde1e22e from angle
* 819e8c405b13 from angle
* ac048ffcee48 from angle
* ad72ad15e2c8 from angle
* f9c580915985 from angle
* 011c5d23207a from chromium
* 091c35b2a13a from chromium
* 0e4c92fef264 from chromium
* 1a306f3a8452 from chromium
* 52a66b712fe8 from chromium
* 64c8e2a1ceda from chromium
* 64fab9307cf2 from chromium
* 6a2ce41c631e from chromium
* 6e1324133a06 from chromium
* 713b2c1f6096 from chromium
* 744b0ccd6ad9 from chromium
* 77f97edf0fad from chromium
* 8b88e1034815 from chromium
* 8d07b5f3132f from chromium
* 915faf331fa7 from chromium
* 9abe6c18e0cf from chromium
* 9be2ecbb64ea from chromium
* a73219eb4cb1 from chromium
* bf2b378deb90 from chromium
* bfc0b156563a from chromium
* ce5005e549f3 from chromium
* d6d2f9e31763 from chromium
* d71f4955a0d3 from chromium
* f9cea35d3e88 from chromium
* fd4e928e7b3e from chromium
* ffa67bc6b5b0 from chromium
* 2c09344f1530 from dawn
* d0acacc83ce8 from dawn
* 747cf654ed6f from skia
* 41d0351e57bb from v8
* 679a20b390a0 from v8
* 888af38d9222 from v8
* a1b0c976e208 from v8
* d83ea741f026 from webrtc
* e1991d7f7bd0 from webrtc
* 0009a9561ce5 from fontconfig
* 8602459f2dee from fontconfig
* 8e9585bc5e76 from fontconfig

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01MtuMgvwAcw7t9Q6HEB31Vx
…klist checks

Switches Electron's copy of ShouldBlockAccessToPath() to the
NormalizeFilePathForBlocklist() helper introduced by the companion
chromium cherry-pick (upstream 64c8e2a1ceda), so paths spelled via
/System/Volumes/Data are matched against the root-namespace blocklist
rules the same way Chrome does.

Refs https://chromium-review.googlesource.com/c/chromium/src/+/8410087 (upstream commit 64c8e2a1cedafdbcc750abc423ad9b389537c223)

Upstream: https://chromium-review.googlesource.com/c/chromium/src/+/8410087

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01MtuMgvwAcw7t9Q6HEB31Vx
The companion chromium cherry-pick (upstream 52a66b712fe8) removes
gfx::InitializeGlobalFontConfigAsync() because fontconfig must not be
used while it is still initializing; the global config is now created
synchronously by gfx::InitializeFonts() on the main thread. Drop
Electron's early asynchronous kick-off in PreBrowserMain() accordingly.

Refs https://chromium-review.googlesource.com/c/chromium/src/+/8310116 (upstream commit 52a66b712fe87f445a917357626ed9447d63f686)

Upstream: https://chromium-review.googlesource.com/c/chromium/src/+/8310116

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01MtuMgvwAcw7t9Q6HEB31Vx
@claude claude Bot added 44-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes labels Oct 6, 2026
@claude

claude Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

linux-x64 / test-wayland / test (linux, 1) failed because its self-hosted runner lost contact with the server about 10 minutes into the test step; no spec failed and no log was uploaded. The same job is green on the 44-x-y base and on the sibling backports (including #54667, which carries the same FontConfig change), and the X11 linux-x64 test shards passed on this head, so this isn't the PR's. GitHub won't re-run a single job while the rest of the workflow run is still in progress, so that job needs one re-run once the run finishes.


Generated by Claude Code

@MarshallOfSound
MarshallOfSound marked this pull request as ready for review October 6, 2026 22:37
@MarshallOfSound
MarshallOfSound requested a review from a team as a code owner October 6, 2026 22:37
@MarshallOfSound
MarshallOfSound enabled auto-merge (squash) October 6, 2026 22:37
@MarshallOfSound
MarshallOfSound merged commit 74f6399 into 44-x-y Oct 6, 2026
136 of 138 checks passed
@MarshallOfSound
MarshallOfSound deleted the security-backport/44-x-y/37507889400 branch October 6, 2026 22:48
@release-clerk

release-clerk Bot commented Oct 6, 2026

Copy link
Copy Markdown

Release Notes Persisted

Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC.

Dot-Ami added a commit to Dot-Ami/dotami that referenced this pull request Oct 12, 2026
…me's engine (#148)

The desktop app moves from Electron 44.5.1 to 44.7.0, which picks up 55
fixes copied from Chrome's engine; the one thing a person may notice is
that, on a computer set to Vancouver time, the day DotAmi counts as
"today" shifts one hour earlier from 2026-11-01.

## What changes

- **Electron 44.5.1 to 44.7.0.** `package.json` goes from `^44.5.1` to
`^44.7.0`; `package-lock.json` pins exactly 44.7.0 (a 4-line change,
nothing else in the dependency tree moved). Chromium (152.0.7977.130)
and Node (24.21.0) are the same version numbers as before.
- **55 backported fixes, not 47.** Electron 44.7.0 carries two lists of
fixes copied from Chrome: [47 in
electron/electron#54666](electron/electron#54666)
and [8 in
electron/electron#54657](electron/electron#54657).
Electron calls them "backported fixes", not labelled security fixes. By
its title, one is a fix for memory used after being freed ("GL: Fix UAF
in ContextGL with depth init PBOs"), and a few more are about objects
that could be used after they went away.
- **Time-zone data moves, and "today" moves with it.** [Electron
44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)
updated its time-zone data to 2026d, including British Columbia's move
to permanent UTC-7
([#54623](electron/electron#54623)). DotAmi
works out the person's own day with that data (the line for refusing a
future-dated expense or figure, and the days shown for agreed or
retracted items). In the desktop app that code runs inside Electron, so
from 2026-11-01, on a computer set to Vancouver time, the day changes
one hour earlier than before. That follows the new rule, so it is an
improvement, but it is a visible change and is now written down.
- **Docs.** CHANGELOG [Unreleased] gets a "Security" section (what was
read in the release notes on 2026-10-11, the 55 fixes, the time-zone
entry with its before and after). `docs/privacy-log.md` [Unreleased]
gets a "Packages that ship" line: nothing DotAmi keeps, sends or asks
changes. The task list gets a ticked line.
- **New desktop test** in `e2e-desktop/desktop.spec.ts`: "the person's
day follows the time-zone data Electron ships". It formats three fixed
moments the way DotAmi's day-finder does, in the main process (the same
program that runs the server) and in DotAmi's window.

## Receipts

Three commits on top of main (7232937): f0b4a9c (the version move and
docs), d33d259 (the time-zone test), b2b2a41 (the docs fix that came out
of review). Head b2b2a41. Each has a sign-off and the trailer, and `git
cat-file commit HEAD | tr -cd '\r' | wc -c` prints 0.

| Gate | Exit | Result |
|---|---|---|
| `npm ci`, `node scripts/keep-gypfile.mjs --check`, `npm run
prisma:generate` (before the change) | 0 | Installed; `npm ls electron`
printed `[email protected]` |
| `npm install --save-dev [email protected]`, then `keep-gypfile.mjs`,
then `--check` | 0 | gypfile flag restored, check passes; a second `npm
ci` left `package.json` and the lockfile byte-identical |
| `npm run ci:quality` (first run) | 1 | Typecheck and lint clean; 2805
of 2808 passed. The 3 failures were the known 5-second timeout under
load (`tests/figures.spec.ts` "accepts exactly 500", then "all or
nothing" which saw the 505 rows that timed-out test left, and one scan
test in `tests/privacy-inventory.spec.ts`). Those two files alone: exit
0, 465 of 465 |
| `npm run ci:quality` (on f0b4a9c) | 1 | 2807 of 2808; one 5-second
timeout in `tests/third-party-notices.spec.ts`. That file alone: exit 0,
21 of 21 |
| `npm run ci:quality` (on the final code) | 0 | Prisma generate,
typecheck, lint (no warnings), 85 files / 2808 tests, build all pass |
| `npm run test:desktop` (shared lock, first pass on 44.7.0) | 0 | 35
passed (11.0 min), including the test where the graphics chip decodes
HEIC, and every encryption, backup and lost-key path |
| `npm run test:desktop` (shared lock, final code) | 0 | 36 passed (10.4
min). The log opens with `electron 44.7.0`, chrome 152.0.7977.130, node
24.21.0, tz 2026d, written from the installed binary before the suite
ran |
| `npm run desktop:package` (shared lock) | 0 | Packaged in about 1.5
min with `electron=44.7.0`; `LICENSE.electron.txt` and
`LICENSES.chromium.html` are in the output. I did not run the desktop
tests against the packaged app locally; CI does |

**Tests first.** The version move itself adds no rule and no behaviour,
so there is no test for it beyond the existing desktop suite (35 of 35
on 44.7.0). The one visible change, the time-zone shift, got its test
first (d33d259, before the docs fix b2b2a41).

**The BEFORE proof** (same fixed moments, formatted in
America/Vancouver, run on each Electron binary):

| Electron | tz data | 2026-11-02 07:30 UTC | 2026-12-01 07:30 UTC |
2027-01-15 07:30 UTC |
|---|---|---|---|---|
| 44.5.1 | 2025c | 2026-11-01, 11:30 p.m. GMT-8 | 2026-11-30, 11:30 p.m.
GMT-8 | 2027-01-14, 11:30 p.m. GMT-8 |
| 44.7.0 | 2026d | 2026-11-02, 12:30 a.m. GMT-7 | 2026-12-01, 12:30 a.m.
GMT-7 | 2027-01-15, 12:30 a.m. GMT-7 |

Before the change on main, `npm ls electron` printed `[email protected]`
and the lockfile pinned 44.5.1. After, it prints `[email protected]`. `npm
audit` lists the same 13 old problems (8 moderate, 5 high) in the same
13 build-tool packages before and after, so this change adds none and
fixes none.

**Control** (break the rule, show the test fails, restore from git, `git
diff --quiet`):

| Rule broken | Test | Result |
|---|---|---|
| Electron put back to 44.5.1 (`npm install [email protected]`) | "the
person's day follows the time-zone data Electron ships" | exit 1: "main
process, time-zone data 2025c", expected 2026-11-02 and 2027-01-15,
received 2026-11-01 and 2027-01-14. Restored with `git checkout --
package.json package-lock.json`, `npm install`, `keep-gypfile.mjs`; `git
diff --quiet` exit 0; the binary is back on 44.7.0 and the test passes
on it (exit 0, 12.3 s) |

## Review round

Fixed:
- **Must-fix:** the first CHANGELOG draft said nothing in the 44.6.0 or
44.7.0 notes touches what DotAmi uses. That was false: 44.6.0 updates
the time-zone data DotAmi's dates depend on. Reproduced first on both
binaries (table above), then fixed: the false sentence is replaced with
an entry that cites #54623 and the 44.6.0 notes, says what moves, and
gives the before and after. The new test and its control are the proof.
- **Wording:** "several of them fixes for memory used after being freed"
was stronger than the sources say; only one title names it outright. The
CHANGELOG now says that.
- **Receipt:** the first desktop log did not print the Electron version.
The final log opens with it.

The first commit's message (f0b4a9c) still has the old "several"
wording; I did not rewrite history, and the follow-up commit message
records the correction.

## Design calls you can reverse

- `package.json` keeps the caret (`^44.7.0`), matching how the repo
already wrote Electron. The lockfile pins exactly 44.7.0, so `npm ci`,
CI and the release build all use 44.7.0.
- The fixes go under CHANGELOG "Security" (a Keep a Changelog heading
this file already used in 0.3.0), using Electron's own wording that they
are backported fixes.
- No test pins the Electron version. That would be a new safety layer
for a change with no new behaviour.
- `lib/privacy/inventory.ts` lists no Electron version, so it is
unchanged. `THIRD-PARTY-NOTICES.txt` is not in git
(`desktop/notices.mjs` writes it at build time from the installed
package; the desktop build's copy reads `Version: 44.7.0`).
`docs/connectors/heic-decoder-review.md` keeps its dated 44.5.1 probe
output because it records what was measured then.

## Questions for the maintainer

- The planning notes say "47 fixes". The true count in 44.7.0 is 55 (47
+ 8, linked above). Should the planning notes' wording be corrected to
55? The repo text already says 55.

## Risks

- A new Electron can change behaviour the tests do not cover. The 44.6.0
and 44.7.0 release notes were read on 2026-10-11: in 44.7.0 the
autoUpdater change is Mac-only (DotAmi updates through electron-updater
on Windows) and the `net.fetch` header fix is for a call DotAmi does not
make (`desktop/main.mjs` imports no Electron `net`; its `net` is
Node's). In 44.6.0, `protocol.registerSource` is new and experimental,
and DotAmi does not use it. Neither set of notes mentions safeStorage,
webContents or HEIC/WebCodecs, and the graphics-chip HEVC test passed on
44.7.0.
- Anything the browser engine requests on its own is still marked "not
checked" in the privacy log; this change does not check it either.
- The time-zone shift is real for people on Vancouver time from
2026-11-01. It is the correct behaviour under the new data, but "today"
will flip an hour earlier than they are used to.
- electron-builder 26.15.3 is already the newest on npm and declares no
Electron range; it packaged on 44.7.0 without trouble.

## NOT done

- No release or tag. Installed copies get this only with the next
release.
- The desktop tests were not run locally against the packaged
`DotAmi.exe` (`DOTAMI_DESKTOP_EXE`); CI runs that on Windows.
- No change to what DotAmi keeps, sends, ships or asks, so no inventory
change.

Held for the maintainer's merge word.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: Dot-Ami <[email protected]>
Co-authored-by: Claude Opus 5.5 <[email protected]>
Sniezka1927 added a commit to nightly-labs/openbot that referenced this pull request Oct 13, 2026
The main process stopped once with EXC_BREAKPOINT in V8
(CompilationDependencies::PrepareInstall) on Electron 44.5.1 while
the app was idle. The app has no native addons in the main process,
so the fault is in Electron's V8.

Electron 44.7.0 backports V8 fixes (electron/electron#54666,
#54657), including "[compiler] Don't assume a memory fence for
generated-code feedback" and "[turbolev] Preserve phi type during
loop peeling". The crash is not reproducible, so it is not confirmed
that these fixes stop it.

44.7.0 also changes the macOS autoUpdater: downloads stream to disk,
resume, and use a binary delta when the feed has one. electron-updater
uses it on macOS. Check one update in release QA.

Refs #1939

Co-authored-by: Claude Opus 5.5 <[email protected]>
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Oct 19, 2026
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

##### Release Notes for v44.7.0

##### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

##### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

##### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Oct 19, 2026
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

##### Release Notes for v44.7.0

##### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

##### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

##### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Oct 25, 2026
##### [v44.9.0](https://github.com/electron/electron/releases/tag/v44.9.0)

### Release Notes for v44.9.0

#### Features

- Added app shims on macOS to show windows under another app's Dock icon. [#55073](electron/electron#55073) <sup>(Also in [45](https://github.com/electron/electron/pull/55072))</sup>

#### Fixes

- Fixed link-opened windows not using the opener's session and `webPreferences`. [#55048](electron/electron#55048) <sup>(Also in [42](electron/electron#55050), [43](electron/electron#55049), [45](https://github.com/electron/electron/pull/55051))</sup>
- Fixed `setCertificateVerifyProc` occasionally not being applied to a request issued concurrently with the first request to a host. [#55046](electron/electron#55046) <sup>(Also in [42](electron/electron#55054), [43](electron/electron#55047), [45](https://github.com/electron/electron/pull/55045))</sup>
##### [v44.8.0](https://github.com/electron/electron/releases/tag/v44.8.0)

### Release Notes for v44.8.0

#### Features

- Added support for `Notification` action buttons on Linux. [#54890](electron/electron#54890) <sup>(Also in [45](https://github.com/electron/electron/pull/54889))</sup>

#### Fixes

- Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. [#54987](electron/electron#54987)
- Fixed `net.fetch` and `session.fetch` failing permanently with `net::ERR_FAILED` after the Network Service process restarts. [#54909](electron/electron#54909) <sup>(Also in [42](electron/electron#54925), [43](electron/electron#54908), [45](https://github.com/electron/electron/pull/54910))</sup>
- Fixed `utilityProcess` dropping messages posted with `process.parentPort.postMessage()` right before the process exits. [#54960](electron/electron#54960) <sup>(Also in [42](electron/electron#55000), [43](electron/electron#54962), [45](https://github.com/electron/electron/pull/54956))</sup>
- Fixed `win.isFullScreen()` being stale in fullscreen events on Windows. [#55009](electron/electron#55009) <sup>(Also in [45](https://github.com/electron/electron/pull/55008))</sup>

#### Other Changes

- Backported fixes from upstream Chromium and V8. [#55034](electron/electron#55034)
- Updated Chromium to 152.0.7977.167. [#54928](electron/electron#54928)
- Updated Node.js to v24.22.0. [#55004](electron/electron#55004)
##### [v44.7.2](https://github.com/electron/electron/releases/tag/v44.7.2)

### Release Notes for v44.7.2

#### Fixes

- Fixed an issue where clicks posted to a background app were dropped on macOS. [#54819](electron/electron#54819) <sup>(Also in [45](https://github.com/electron/electron/pull/54818))</sup>
- Fixed interrupted macOS updates leaving a broken app behind. [#54844](electron/electron#54844) <sup>(Also in [45](https://github.com/electron/electron/pull/54843))</sup>

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, PDFium and V8. [#54898](electron/electron#54898)

#### Documentation

- Documentation changes: [#54880](electron/electron#54880)
##### [v44.7.1](https://github.com/electron/electron/releases/tag/v44.7.1)

### Release Notes for v44.7.1

#### Fixes

- Fixed a crash when starting without an available display server on Linux. [#54794](electron/electron#54794) <sup>(Also in [45](https://github.com/electron/electron/pull/54781))</sup>
- Fixed a Linux crash creating a window with a menu bar when GTK failed to load. [#54859](electron/electron#54859) <sup>(Also in [45](https://github.com/electron/electron/pull/54846))</sup>
- Fixed a `WebContentsView` that was removed with `removeChildView()` and re-added with `addChildView()` staying hidden behind its sibling views on Linux. [#54798](electron/electron#54798)
- Fixed asar archives in non-ASCII folders failing to load on Linux. [#54849](electron/electron#54849) <sup>(Also in [45](https://github.com/electron/electron/pull/54848))</sup>
- Fixed renderer crashes during garbage collection inside ShadowRealms. [#54865](electron/electron#54865) <sup>(Also in [45](https://github.com/electron/electron/pull/54864))</sup>

#### Other Changes

- Refactored mouse forwarding on Windows to fix `setIgnoreMouseEvents(true, { forward: true })` related issues. [#54802](electron/electron#54802) <sup>(Also in [45](https://github.com/electron/electron/pull/54803))</sup>
- Updated Chromium to 152.0.7977.149. [#54085](electron/electron#54085)
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

### Release Notes for v44.7.0

#### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

#### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Oct 26, 2026
##### [v44.9.0](https://github.com/electron/electron/releases/tag/v44.9.0)

### Release Notes for v44.9.0

#### Features

- Added app shims on macOS to show windows under another app's Dock icon. [#55073](electron/electron#55073) <sup>(Also in [45](https://github.com/electron/electron/pull/55072))</sup>

#### Fixes

- Fixed link-opened windows not using the opener's session and `webPreferences`. [#55048](electron/electron#55048) <sup>(Also in [42](electron/electron#55050), [43](electron/electron#55049), [45](https://github.com/electron/electron/pull/55051))</sup>
- Fixed `setCertificateVerifyProc` occasionally not being applied to a request issued concurrently with the first request to a host. [#55046](electron/electron#55046) <sup>(Also in [42](electron/electron#55054), [43](electron/electron#55047), [45](https://github.com/electron/electron/pull/55045))</sup>
##### [v44.8.0](https://github.com/electron/electron/releases/tag/v44.8.0)

### Release Notes for v44.8.0

#### Features

- Added support for `Notification` action buttons on Linux. [#54890](electron/electron#54890) <sup>(Also in [45](https://github.com/electron/electron/pull/54889))</sup>

#### Fixes

- Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. [#54987](electron/electron#54987)
- Fixed `net.fetch` and `session.fetch` failing permanently with `net::ERR_FAILED` after the Network Service process restarts. [#54909](electron/electron#54909) <sup>(Also in [42](electron/electron#54925), [43](electron/electron#54908), [45](https://github.com/electron/electron/pull/54910))</sup>
- Fixed `utilityProcess` dropping messages posted with `process.parentPort.postMessage()` right before the process exits. [#54960](electron/electron#54960) <sup>(Also in [42](electron/electron#55000), [43](electron/electron#54962), [45](https://github.com/electron/electron/pull/54956))</sup>
- Fixed `win.isFullScreen()` being stale in fullscreen events on Windows. [#55009](electron/electron#55009) <sup>(Also in [45](https://github.com/electron/electron/pull/55008))</sup>

#### Other Changes

- Backported fixes from upstream Chromium and V8. [#55034](electron/electron#55034)
- Updated Chromium to 152.0.7977.167. [#54928](electron/electron#54928)
- Updated Node.js to v24.22.0. [#55004](electron/electron#55004)
##### [v44.7.2](https://github.com/electron/electron/releases/tag/v44.7.2)

### Release Notes for v44.7.2

#### Fixes

- Fixed an issue where clicks posted to a background app were dropped on macOS. [#54819](electron/electron#54819) <sup>(Also in [45](https://github.com/electron/electron/pull/54818))</sup>
- Fixed interrupted macOS updates leaving a broken app behind. [#54844](electron/electron#54844) <sup>(Also in [45](https://github.com/electron/electron/pull/54843))</sup>

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, PDFium and V8. [#54898](electron/electron#54898)

#### Documentation

- Documentation changes: [#54880](electron/electron#54880)
##### [v44.7.1](https://github.com/electron/electron/releases/tag/v44.7.1)

### Release Notes for v44.7.1

#### Fixes

- Fixed a crash when starting without an available display server on Linux. [#54794](electron/electron#54794) <sup>(Also in [45](https://github.com/electron/electron/pull/54781))</sup>
- Fixed a Linux crash creating a window with a menu bar when GTK failed to load. [#54859](electron/electron#54859) <sup>(Also in [45](https://github.com/electron/electron/pull/54846))</sup>
- Fixed a `WebContentsView` that was removed with `removeChildView()` and re-added with `addChildView()` staying hidden behind its sibling views on Linux. [#54798](electron/electron#54798)
- Fixed asar archives in non-ASCII folders failing to load on Linux. [#54849](electron/electron#54849) <sup>(Also in [45](https://github.com/electron/electron/pull/54848))</sup>
- Fixed renderer crashes during garbage collection inside ShadowRealms. [#54865](electron/electron#54865) <sup>(Also in [45](https://github.com/electron/electron/pull/54864))</sup>

#### Other Changes

- Refactored mouse forwarding on Windows to fix `setIgnoreMouseEvents(true, { forward: true })` related issues. [#54802](electron/electron#54802) <sup>(Also in [45](https://github.com/electron/electron/pull/54803))</sup>
- Updated Chromium to 152.0.7977.149. [#54085](electron/electron#54085)
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

### Release Notes for v44.7.0

#### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

#### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Nov 2, 2026
##### [v44.9.3](https://github.com/electron/electron/releases/tag/v44.9.3)

### Release Notes for v44.9.3

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, PDFium, Skia and V8. [#55149](electron/electron#55149)
##### [v44.9.2](https://github.com/electron/electron/releases/tag/v44.9.2)

### Release Notes for v44.9.2
##### [v44.9.1](https://github.com/electron/electron/releases/tag/v44.9.1)

### Release Notes for v44.9.1

> \[!NOTE]
> This release contains the fix for <GHSA-jr5w-w6x2-84p9>, the mitigation for compromised eMudhra intermediate certificates
##### [v44.9.0](https://github.com/electron/electron/releases/tag/v44.9.0)

### Release Notes for v44.9.0

#### Features

- Added app shims on macOS to show windows under another app's Dock icon. [#55073](electron/electron#55073) <sup>(Also in [45](https://github.com/electron/electron/pull/55072))</sup>

#### Fixes

- Fixed link-opened windows not using the opener's session and `webPreferences`. [#55048](electron/electron#55048) <sup>(Also in [42](electron/electron#55050), [43](electron/electron#55049), [45](https://github.com/electron/electron/pull/55051))</sup>
- Fixed `setCertificateVerifyProc` occasionally not being applied to a request issued concurrently with the first request to a host. [#55046](electron/electron#55046) <sup>(Also in [42](electron/electron#55054), [43](electron/electron#55047), [45](https://github.com/electron/electron/pull/55045))</sup>
##### [v44.8.0](https://github.com/electron/electron/releases/tag/v44.8.0)

### Release Notes for v44.8.0

#### Features

- Added support for `Notification` action buttons on Linux. [#54890](electron/electron#54890) <sup>(Also in [45](https://github.com/electron/electron/pull/54889))</sup>

#### Fixes

- Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. [#54987](electron/electron#54987)
- Fixed `net.fetch` and `session.fetch` failing permanently with `net::ERR_FAILED` after the Network Service process restarts. [#54909](electron/electron#54909) <sup>(Also in [42](electron/electron#54925), [43](electron/electron#54908), [45](https://github.com/electron/electron/pull/54910))</sup>
- Fixed `utilityProcess` dropping messages posted with `process.parentPort.postMessage()` right before the process exits. [#54960](electron/electron#54960) <sup>(Also in [42](electron/electron#55000), [43](electron/electron#54962), [45](https://github.com/electron/electron/pull/54956))</sup>
- Fixed `win.isFullScreen()` being stale in fullscreen events on Windows. [#55009](electron/electron#55009) <sup>(Also in [45](https://github.com/electron/electron/pull/55008))</sup>

#### Other Changes

- Backported fixes from upstream Chromium and V8. [#55034](electron/electron#55034)
- Updated Chromium to 152.0.7977.167. [#54928](electron/electron#54928)
- Updated Node.js to v24.22.0. [#55004](electron/electron#55004)
##### [v44.7.2](https://github.com/electron/electron/releases/tag/v44.7.2)

### Release Notes for v44.7.2

#### Fixes

- Fixed an issue where clicks posted to a background app were dropped on macOS. [#54819](electron/electron#54819) <sup>(Also in [45](https://github.com/electron/electron/pull/54818))</sup>
- Fixed interrupted macOS updates leaving a broken app behind. [#54844](electron/electron#54844) <sup>(Also in [45](https://github.com/electron/electron/pull/54843))</sup>

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, PDFium and V8. [#54898](electron/electron#54898)

#### Documentation

- Documentation changes: [#54880](electron/electron#54880)
##### [v44.7.1](https://github.com/electron/electron/releases/tag/v44.7.1)

### Release Notes for v44.7.1

#### Fixes

- Fixed a crash when starting without an available display server on Linux. [#54794](electron/electron#54794) <sup>(Also in [45](https://github.com/electron/electron/pull/54781))</sup>
- Fixed a Linux crash creating a window with a menu bar when GTK failed to load. [#54859](electron/electron#54859) <sup>(Also in [45](https://github.com/electron/electron/pull/54846))</sup>
- Fixed a `WebContentsView` that was removed with `removeChildView()` and re-added with `addChildView()` staying hidden behind its sibling views on Linux. [#54798](electron/electron#54798)
- Fixed asar archives in non-ASCII folders failing to load on Linux. [#54849](electron/electron#54849) <sup>(Also in [45](https://github.com/electron/electron/pull/54848))</sup>
- Fixed renderer crashes during garbage collection inside ShadowRealms. [#54865](electron/electron#54865) <sup>(Also in [45](https://github.com/electron/electron/pull/54864))</sup>

#### Other Changes

- Refactored mouse forwarding on Windows to fix `setIgnoreMouseEvents(true, { forward: true })` related issues. [#54802](electron/electron#54802) <sup>(Also in [45](https://github.com/electron/electron/pull/54803))</sup>
- Updated Chromium to 152.0.7977.149. [#54085](electron/electron#54085)
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

### Release Notes for v44.7.0

#### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

#### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
renovate Bot added a commit to cigaleapp/cigale that referenced this pull request Nov 8, 2026
##### [v44.10.1](https://github.com/electron/electron/releases/tag/v44.10.1)

### Release Notes for v44.10.1

#### Fixes

- Fixed DevTools "Save" prompting for a location every time instead of reusing the previously chosen file. [#55484](electron/electron#55484)
  - Fixed DevTools "Save As" using the old file and Linux cancels treated as saved.
- Fixed `webContents.adjustSelection()` ignoring the `end` option. [#55461](electron/electron#55461) <sup>(Also in [45](electron/electron#55462), [46](https://github.com/electron/electron/pull/55463))</sup>

#### Performance Improvements

- Improved performance of `net.fetch()` requests without a body. [#55445](electron/electron#55445) <sup>(Also in [43](electron/electron#55447), [45](electron/electron#55446), [46](https://github.com/electron/electron/pull/55444))</sup>
- Improved performance of repeated `net.fetch()` calls for `file:` URLs. [#55458](electron/electron#55458) <sup>(Also in [45](electron/electron#55459), [46](https://github.com/electron/electron/pull/55457))</sup>

#### Other Changes

- Backported fixes from upstream Chromium, Dawn, Skia and V8. [#55492](electron/electron#55492)
##### [v44.10.0](https://github.com/electron/electron/releases/tag/v44.10.0)

### Release Notes for v44.10.0

#### Features

- Added filtering options to `session.registerPreloadScript` - `matches`, `excludeMatches`, `includeGlobs`, `excludeGlobs`, `matchOriginAsFallback`. [#55182](electron/electron#55182) <sup>(Also in [45](https://github.com/electron/electron/pull/55181))</sup>

#### Fixes

- Fixed a crash on Linux when a D-Bus method call was made on a disconnected bus. [#55290](electron/electron#55290) <sup>(Also in [45](electron/electron#55292), [46](https://github.com/electron/electron/pull/55289))</sup>
- Fixed a main process crash when `onSendHeaders` observed Blob uploads. [#55168](electron/electron#55168) <sup>(Also in [45](https://github.com/electron/electron/pull/55169))</sup>
- Fixed `app.getLoginItemSettings()` not finding login items on Windows when the executable path contains spaces. [#55207](electron/electron#55207) <sup>(Also in [45](https://github.com/electron/electron/pull/54419))</sup>
- Fixed Europe/London and Europe/Dublin time zone names showing as "GMT+00:00" in winter by updating ICU to tzdata 2026e. [#55335](electron/electron#55335)
- Fixed File System Access blocklist gaps for `.git/hooks` writes and hypervisor UNC shares. [#55330](electron/electron#55330)
- Fixed handling of malformed asar archives whose size fields do not match the file length. [#55176](electron/electron#55176) <sup>(Also in [43](electron/electron#55179), [45](https://github.com/electron/electron/pull/55175))</sup>
- Fixed inconsistent handling of asar archive paths between the main process and child processes. [#55183](electron/electron#55183) <sup>(Also in [43](electron/electron#55185), [45](https://github.com/electron/electron/pull/55184))</sup>
- Fixed `Menu.popup()` on macOS sometimes not showing a menu after another closed. [#55325](electron/electron#55325) <sup>(Also in [45](electron/electron#55326), [46](https://github.com/electron/electron/pull/55324))</sup>
- Fixed MV3 extension events not arriving to background service workers. [#55152](electron/electron#55152) <sup>(Also in [43](electron/electron#55153), [45](https://github.com/electron/electron/pull/55154))</sup>
- Fixed paste hanging indefinitely on Linux X11 until the app was restarted. [#55327](electron/electron#55327)
- Fixed `protocol.registerSource` schemes not applying the same fetch rules as `protocol.handle` schemes. [#55177](electron/electron#55177) <sup>(Also in [45](https://github.com/electron/electron/pull/55178))</sup>
- Fixed `utilityProcess` not emitting an `exit` event when the app quit while the process was still launching. [#55273](electron/electron#55273) <sup>(Also in [43](electron/electron#55272), [45](electron/electron#55274), [46](https://github.com/electron/electron/pull/55264))</sup>

#### Other Changes

- Updated Chromium to 152.0.7977.169. [#55033](electron/electron#55033)
- Updated Node.js to v24.22.1. [#55162](electron/electron#55162)
##### [v44.9.3](https://github.com/electron/electron/releases/tag/v44.9.3)

### Release Notes for v44.9.3

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, PDFium, Skia and V8. [#55149](electron/electron#55149)
##### [v44.9.2](https://github.com/electron/electron/releases/tag/v44.9.2)

### Release Notes for v44.9.2
##### [v44.9.1](https://github.com/electron/electron/releases/tag/v44.9.1)

### Release Notes for v44.9.1

> \[!NOTE]
> This release contains the fix for <GHSA-jr5w-w6x2-84p9>, the mitigation for compromised eMudhra intermediate certificates
##### [v44.9.0](https://github.com/electron/electron/releases/tag/v44.9.0)

### Release Notes for v44.9.0

#### Features

- Added app shims on macOS to show windows under another app's Dock icon. [#55073](electron/electron#55073) <sup>(Also in [45](https://github.com/electron/electron/pull/55072))</sup>

#### Fixes

- Fixed link-opened windows not using the opener's session and `webPreferences`. [#55048](electron/electron#55048) <sup>(Also in [42](electron/electron#55050), [43](electron/electron#55049), [45](https://github.com/electron/electron/pull/55051))</sup>
- Fixed `setCertificateVerifyProc` occasionally not being applied to a request issued concurrently with the first request to a host. [#55046](electron/electron#55046) <sup>(Also in [42](electron/electron#55054), [43](electron/electron#55047), [45](https://github.com/electron/electron/pull/55045))</sup>
##### [v44.8.0](https://github.com/electron/electron/releases/tag/v44.8.0)

### Release Notes for v44.8.0

#### Features

- Added support for `Notification` action buttons on Linux. [#54890](electron/electron#54890) <sup>(Also in [45](https://github.com/electron/electron/pull/54889))</sup>

#### Fixes

- Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. [#54987](electron/electron#54987)
- Fixed `net.fetch` and `session.fetch` failing permanently with `net::ERR_FAILED` after the Network Service process restarts. [#54909](electron/electron#54909) <sup>(Also in [42](electron/electron#54925), [43](electron/electron#54908), [45](https://github.com/electron/electron/pull/54910))</sup>
- Fixed `utilityProcess` dropping messages posted with `process.parentPort.postMessage()` right before the process exits. [#54960](electron/electron#54960) <sup>(Also in [42](electron/electron#55000), [43](electron/electron#54962), [45](https://github.com/electron/electron/pull/54956))</sup>
- Fixed `win.isFullScreen()` being stale in fullscreen events on Windows. [#55009](electron/electron#55009) <sup>(Also in [45](https://github.com/electron/electron/pull/55008))</sup>

#### Other Changes

- Backported fixes from upstream Chromium and V8. [#55034](electron/electron#55034)
- Updated Chromium to 152.0.7977.167. [#54928](electron/electron#54928)
- Updated Node.js to v24.22.0. [#55004](electron/electron#55004)
##### [v44.7.2](https://github.com/electron/electron/releases/tag/v44.7.2)

### Release Notes for v44.7.2

#### Fixes

- Fixed an issue where clicks posted to a background app were dropped on macOS. [#54819](electron/electron#54819) <sup>(Also in [45](https://github.com/electron/electron/pull/54818))</sup>
- Fixed interrupted macOS updates leaving a broken app behind. [#54844](electron/electron#54844) <sup>(Also in [45](https://github.com/electron/electron/pull/54843))</sup>

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, PDFium and V8. [#54898](electron/electron#54898)

#### Documentation

- Documentation changes: [#54880](electron/electron#54880)
##### [v44.7.1](https://github.com/electron/electron/releases/tag/v44.7.1)

### Release Notes for v44.7.1

#### Fixes

- Fixed a crash when starting without an available display server on Linux. [#54794](electron/electron#54794) <sup>(Also in [45](https://github.com/electron/electron/pull/54781))</sup>
- Fixed a Linux crash creating a window with a menu bar when GTK failed to load. [#54859](electron/electron#54859) <sup>(Also in [45](https://github.com/electron/electron/pull/54846))</sup>
- Fixed a `WebContentsView` that was removed with `removeChildView()` and re-added with `addChildView()` staying hidden behind its sibling views on Linux. [#54798](electron/electron#54798)
- Fixed asar archives in non-ASCII folders failing to load on Linux. [#54849](electron/electron#54849) <sup>(Also in [45](https://github.com/electron/electron/pull/54848))</sup>
- Fixed renderer crashes during garbage collection inside ShadowRealms. [#54865](electron/electron#54865) <sup>(Also in [45](https://github.com/electron/electron/pull/54864))</sup>

#### Other Changes

- Refactored mouse forwarding on Windows to fix `setIgnoreMouseEvents(true, { forward: true })` related issues. [#54802](electron/electron#54802) <sup>(Also in [45](https://github.com/electron/electron/pull/54803))</sup>
- Updated Chromium to 152.0.7977.149. [#54085](electron/electron#54085)
##### [v44.7.0](https://github.com/electron/electron/releases/tag/v44.7.0)

### Release Notes for v44.7.0

#### Features

- The macOS `autoUpdater` now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. [#54204](electron/electron#54204)

#### Fixes

- Fixed an uncatchable TypeError in `net.fetch` when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. [#54672](electron/electron#54672)

#### Other Changes

- Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. [#54666](electron/electron#54666)
- Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. [#54657](electron/electron#54657)
##### [v44.6.0](https://github.com/electron/electron/releases/tag/v44.6.0)

### Release Notes for v44.6.0

#### Features

- Added the experimental `protocol.registerSource()` to serve a custom scheme from directories on disk without a JavaScript handler. [#54522](electron/electron#54522) <sup>(Also in [45](https://github.com/electron/electron/pull/54521))</sup>

#### Fixes

- Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. [#54596](electron/electron#54596)
- Fixed a crash on `navigator.usb.requestDevice()` in in-memory sessions. [#54616](electron/electron#54616) <sup>(Also in [45](https://github.com/electron/electron/pull/54615))</sup>
- Fixed `webview.findInPage()` hanging when the host page also has an iframe. [#54586](electron/electron#54586) <sup>(Also in [43](electron/electron#54584), [45](https://github.com/electron/electron/pull/54585))</sup>
- Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. [#54623](electron/electron#54623)

#### Documentation

- Documentation changes: [#54589](electron/electron#54589)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

44-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes

Projects

No open projects
Status: No status

Development

Successfully merging this pull request may close these issues.

2 participants