From 953abdf42a5bf0f97a6a2794ba3314c0d3d3ffbd Mon Sep 17 00:00:00 2001 From: sudacode Date: Tue, 29 Sep 2026 18:37:16 -0700 Subject: [PATCH] build(deps): bump electron to 42.10.0 and undici to 7.29.1 - Resolve security advisories blocking CI - Add changelog fragment for patched dependencies --- bun.lock | 10 +++++----- changes/patched-electron-undici.md | 4 ++++ package.json | 6 +++--- 3 files changed, 12 insertions(+), 8 deletions(-) create mode 100644 changes/patched-electron-undici.md diff --git a/bun.lock b/bun.lock index fc7c7b92..db9ed5d5 100644 --- a/bun.lock +++ b/bun.lock @@ -21,13 +21,13 @@ "@electron/asar": "3.4.1", "@types/node": "^24.10.0", "@types/ws": "^8.18.1", - "electron": "42.6.0", + "electron": "42.10.0", "electron-builder": "26.16.1", "esbuild": "^0.25.12", "eslint": "^10.8.0", "prettier": "^3.8.1", "typescript": "^5.9.3", - "undici": "7.29.0", + "undici": "7.29.1", }, }, }, @@ -48,7 +48,7 @@ "picomatch": "4.0.4", "tar": "7.5.21", "tmp": "0.2.7", - "undici": "7.29.0", + "undici": "7.29.1", }, "packages": { "@discordjs/collection": ["@discordjs/collection@2.1.1", "", {}, "sha512-LiSusze9Tc7qF03sLCujF5iZp7K+vRNEDBZ86FT9aQAv3vxMLihUvKvpsCWiQ2DJq1tVckopKm1rxomgNUc9hg=="], @@ -347,7 +347,7 @@ "ejs": ["ejs@3.1.10", "", { "dependencies": { "jake": "^10.8.5" }, "bin": { "ejs": "bin/cli.js" } }, "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA=="], - "electron": ["electron@42.6.0", "", { "dependencies": { "@electron-internal/extract-zip": "^1.0.1", "@electron/get": "^5.0.0", "@types/node": "^24.9.0" }, "bin": { "electron": "cli.js", "install-electron": "install.js" } }, "sha512-axGNgd+yCTg+vi1VEGrQqAj9WVWkePKwbICSAvMiT2eTaxhij9a/xhBHD6rXV8wrlW9ZfJzE5+xg752ImxrmTw=="], + "electron": ["electron@42.10.0", "", { "dependencies": { "@electron-internal/extract-zip": "^1.0.1", "@electron/get": "^5.0.0", "@types/node": "^24.9.0" }, "bin": { "electron": "cli.js", "install-electron": "install.js" } }, "sha512-yBWnZO8tKId0ADvGa4+imPmm3+8Kfs8MtkUPhQQJz1AjTnUUDwCTWkQEU0CrArVVL97Jo4Q/0mVcLHciicBDGQ=="], "electron-builder": ["electron-builder@26.16.1", "", { "dependencies": { "app-builder-lib": "26.16.1", "builder-util": "26.16.0", "builder-util-runtime": "9.7.0", "chalk": "^4.1.2", "ci-info": "^4.2.0", "dmg-builder": "26.16.1", "fs-extra": "^10.1.0", "lazy-val": "^1.0.5", "simple-update-notifier": "2.0.0", "yargs": "^17.6.2" }, "bin": { "electron-builder": "./cli.js", "install-app-deps": "./install-app-deps.js" } }, "sha512-LrLK65QX5PUYYODXqp23FKrV7CILTtVY7mrJckNknO9jLNSMiqFkKbSMiDRw4CjOADMPVDdWLxY4mezOZWswxg=="], @@ -717,7 +717,7 @@ "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="], - "undici": ["undici@7.29.0", "", {}, "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw=="], + "undici": ["undici@7.29.1", "", {}, "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q=="], "undici-types": ["undici-types@7.16.0", "", {}, "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw=="], diff --git a/changes/patched-electron-undici.md b/changes/patched-electron-undici.md new file mode 100644 index 00000000..65cca7fd --- /dev/null +++ b/changes/patched-electron-undici.md @@ -0,0 +1,4 @@ +type: fixed +area: dependencies + +- Updated Electron to 42.10.0 and undici to 7.29.1 to resolve the security advisories blocking CI. diff --git a/package.json b/package.json index 9e8eec12..b8bdb217 100644 --- a/package.json +++ b/package.json @@ -97,7 +97,7 @@ "picomatch": "4.0.4", "tar": "7.5.21", "tmp": "0.2.7", - "undici": "7.29.0" + "undici": "7.29.1" }, "keywords": [ "anki", @@ -128,13 +128,13 @@ "@electron/asar": "3.4.1", "@types/node": "^24.10.0", "@types/ws": "^8.18.1", - "electron": "42.6.0", + "electron": "42.10.0", "electron-builder": "26.16.1", "esbuild": "^0.25.12", "eslint": "^10.8.0", "prettier": "^3.8.1", "typescript": "^5.9.3", - "undici": "7.29.0" + "undici": "7.29.1" }, "build": { "appId": "com.sudacode.SubMiner",