diff --git a/bun.lock b/bun.lock index ef06304f..4dd16633 100644 --- a/bun.lock +++ b/bun.lock @@ -19,12 +19,12 @@ "@electron/asar": "3.4.1", "@types/node": "^24.10.0", "@types/ws": "^8.18.1", - "electron": "43.7.7", + "electron": "43.8.3", "electron-builder": "26.16.1", "esbuild": "^0.25.12", "prettier": "^3.8.1", "typescript": "^5.9.3", - "undici": "7.29.1", + "undici": "7.30.1", }, }, }, @@ -46,7 +46,7 @@ "picomatch": "4.0.4", "tar": "7.5.21", "tmp": "0.2.7", - "undici": "7.29.1", + "undici": "7.30.1", }, "packages": { "@discordjs/collection": ["@discordjs/collection@2.1.1", "", {}, "sha512-LiSusze9Tc7qF03sLCujF5iZp7K+vRNEDBZ86FT9aQAv3vxMLihUvKvpsCWiQ2DJq1tVckopKm1rxomgNUc9hg=="], @@ -305,7 +305,7 @@ "ejs": ["ejs@3.1.10", "", { "dependencies": { "jake": "^10.8.5" }, "bin": { "ejs": "bin/cli.js" } }, "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA=="], - "electron": ["electron@43.7.7", "", { "dependencies": { "@electron-internal/extract-zip": "^1.0.1", "@electron/get": "^5.0.0", "@types/node": "^24.9.0" }, "bin": { "electron": "cli.js", "install-electron": "install.js" } }, "sha512-y0pg+KhWLAkW2Ts2njkFFNFl3KtB1FmbUp9Te9i+R2Og2v1fcI/I6MADJ7jvnzB5UKdt+U+0EUoCnVL79xMPMA=="], + "electron": ["electron@43.8.3", "", { "dependencies": { "@electron-internal/extract-zip": "^1.0.1", "@electron/get": "^5.0.0", "@types/node": "^24.9.0" }, "bin": { "electron": "cli.js", "install-electron": "install.js" } }, "sha512-KgvSm3bHXz96hSXzqxyRjLeli80rIdszbDQFKlRSfckmGazTPCH/CxUN31Dp9c5rFKTQSNf9gPJRWl1yWNB3pA=="], "electron-builder": ["electron-builder@26.16.1", "", { "dependencies": { "app-builder-lib": "26.16.1", "builder-util": "26.16.0", "builder-util-runtime": "9.7.0", "chalk": "^4.1.2", "ci-info": "^4.2.0", "dmg-builder": "26.16.1", "fs-extra": "^10.1.0", "lazy-val": "^1.0.5", "simple-update-notifier": "2.0.0", "yargs": "^17.6.2" }, "bin": { "electron-builder": "./cli.js", "install-app-deps": "./install-app-deps.js" } }, "sha512-LrLK65QX5PUYYODXqp23FKrV7CILTtVY7mrJckNknO9jLNSMiqFkKbSMiDRw4CjOADMPVDdWLxY4mezOZWswxg=="], @@ -617,7 +617,7 @@ "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="], - "undici": ["undici@7.29.1", "", {}, "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q=="], + "undici": ["undici@7.30.1", "", {}, "sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg=="], "undici-types": ["undici-types@7.16.0", "", {}, "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw=="], diff --git a/changes/security-deps-electron-undici.md b/changes/security-deps-electron-undici.md new file mode 100644 index 00000000..873a737c --- /dev/null +++ b/changes/security-deps-electron-undici.md @@ -0,0 +1,4 @@ +type: fixed +area: security + +- Electron is updated to 43.8.3 and undici to 7.30.1 to pick up security fixes. diff --git a/package.json b/package.json index 13d2518f..9b7cf1fd 100644 --- a/package.json +++ b/package.json @@ -100,7 +100,7 @@ "picomatch": "4.0.4", "tar": "7.5.21", "tmp": "0.2.7", - "undici": "7.29.1" + "undici": "7.30.1" }, "keywords": [ "anki", @@ -129,12 +129,12 @@ "@electron/asar": "3.4.1", "@types/node": "^24.10.0", "@types/ws": "^8.18.1", - "electron": "43.7.7", + "electron": "43.8.3", "electron-builder": "26.16.1", "esbuild": "^0.25.12", "prettier": "^3.8.1", "typescript": "^5.9.3", - "undici": "7.29.1" + "undici": "7.30.1" }, "build": { "appId": "com.sudacode.SubMiner",