build(deps-dev): bump electron from 25.9.8 to 35.1.5

[dependabot]

Bumps electron from 25.9.8 to 35.1.5.

Release notes

Sourced from electron's releases.

electron v35.1.5

Release Notes for v35.1.5

Fixes

• Fixed a potential crash in parentPort. #46495 (Also in 34, 36)

Unknown

• Reverts a change that greyed out disabled menu items on macOS (electron/electron#46307). #46521 (Also in 34, 36)

electron v35.1.4

Release Notes for v35.1.4

Fixes

• Fix: don't copy 'package.json's out of ASAR file. #46478 (Also in 36)
• Fixed a bug that could cause some maximized windows on Linux to report an incorrect window state. #46464 (Also in 34, 36)
• Fixed a possible crash using Node.js on some arm32 devices. #46461 (Also in 36)
• Fixed crash on application exit with pending app.getGPUInfo promise. #46470 (Also in 34, 36)

electron v35.1.3

Release Notes for v35.1.3

Fixes

• Fixed a crash that could occur when dragging and dropping files into the browser. #46311 (Also in 36)
• Fixed an issue where context-menu event weren't emitted as expected on Windows in draggable regions. #46334 (Also in 34, 36)
• Fixed an issue where calling UtilityProcess.fork prior to the app ready event would cause a crash. #46403 (Also in 34, 36)
• Fixed flickering and ghosting artifacts in transparent windows on macOS. #46392 (Also in 36)
• Fixed memory leak in AutofillPopupView. #46413 (Also in 34, 36)
• Fixed the issue where rounded corners disappear momentarily when closing on Windows 11. #46408 (Also in 36)
• When a menu item on macOS is disabled (enabled = false), it is now greyed out. #46341 (Also in 34, 36)

Other Changes

• Updated Chromium to 134.0.6998.179. #46313

electron v35.1.2

Release Notes for v35.1.2

Fixes

• Fixed an issue where navigationHistory.restore() failed to restore the userAgent if it was overridden. #46300 (Also in 34, 36)

Other Changes

• Security: backported fix for CVE-2025-2783. #46303
• Updated Chromium to 134.0.6998.178. #46287

electron v35.1.1

Release Notes for v35.1.1

... (truncated)

Changelog

Sourced from electron's changelog.

Breaking Changes

Breaking changes will be documented here, and deprecation warnings added to JS code where possible, at least one major version before the change is made.

Types of Breaking Changes

This document uses the following convention to categorize breaking changes:

• API Changed: An API was changed in such a way that code that has not been updated is guaranteed to throw an exception.
• Behavior Changed: The behavior of Electron has changed, but not in such a way that an exception will necessarily be thrown.
• Default Changed: Code depending on the old default may break, not necessarily throwing an exception. The old behavior can be restored by explicitly specifying the value.
• Deprecated: An API was marked as deprecated. The API will continue to function, but will emit a deprecation warning, and will be removed in a future release.
• Removed: An API or feature was removed, and is no longer supported by Electron.

Planned Breaking API Changes (37.0)

Removed: null value for session property in ProtocolResponse

This deprecated feature has been removed.

Previously, setting the ProtocolResponse.session property to null would create a random independent session. This is no longer supported.

Using single-purpose sessions here is discouraged due to overhead costs; however, old code that needs to preserve this behavior can emulate it by creating a random session with session.fromPartition(some_random_string) and then using it in ProtocolResponse.session.

Behavior Changed: BrowserWindow.IsVisibleOnAllWorkspaces() on Linux

BrowserWindow.IsVisibleOnAllWorkspaces() will now return false on Linux if the window is not currently visible.

Behavior Changes: app.commandLine

app.commandLine will convert upper-cases switches and arguments to lowercase.

app.commandLine was only meant to handle chromium switches (which aren't case-sensitive) and switches passed via app.commandLine will not be passed down to any of the child processes.

If you were using app.commandLine to control the behavior of the main process, you should do this via process.argv.

Planned Breaking API Changes (36.0)

Utility Process unhandled rejection behavior change

Utility Processes will now warn with an error message when an unhandled rejection occurs instead of crashing the process.

To restore the previous behavior, you can use:

... (truncated)

Commits

• ef97397 refactor: remove unnecessary const_cast (#46568)
• 17ef6b8 refactor: use v8::True(isolate) and v8::False(isolate) (#46570)
• a2f3d82 refactor: simplify some BaseWindow JS getters (#46564)
• 7886cc3 refactor: make api::View methods const, private (#46552)
• cbc1504 refactor: make TrackableObjectBase::weak_map_id_ const (#46556)
• 1ebad64 refactor: use base::flat_set in WebContents::DidUpdateFaviconUrl() (#46531)
• 1fe77cd docs: note that titleBarOverlay.symbolColor is supported on Linux (#46535)
• 446128b revert: allow NSMenuItems to be disabled (#46521)
• e76f986 perf: avoid redundant virtual method call in `NativeWindowViews::SetEnabledIn...
• b44892e refactor: instantiate navigation_entries local variable on the stack (#46503)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Reviewers

The following users could not be added as reviewers: ChiaMineJP. Either the username does not exist or it does not have the correct permissions to be added as a reviewer.

Labels

The following labels could not be found: Changed, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	electron@​25.9.8 ⏵ 35.1.5	+7		+1	+1

View full report