From e3146fb594459d12218a6814f3d3e7b0bccfd586 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 22:14:53 +0000 Subject: [PATCH 1/2] chore(deps-dev): bump electron Bumps the npm-minor-patch group with 1 update in the /src/nodepilot-desktop directory: [electron](https://github.com/electron/electron). Updates `electron` from 44.7.0 to 44.9.0 - [Release notes](https://github.com/electron/electron/releases) - [Commits](https://github.com/electron/electron/compare/v44.7.0...v44.9.0) --- updated-dependencies: - dependency-name: electron dependency-version: 44.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] --- src/nodepilot-desktop/package-lock.json | 8 ++++---- src/nodepilot-desktop/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/src/nodepilot-desktop/package-lock.json b/src/nodepilot-desktop/package-lock.json index 085c84dd..4d790e30 100644 --- a/src/nodepilot-desktop/package-lock.json +++ b/src/nodepilot-desktop/package-lock.json @@ -13,7 +13,7 @@ "@electron/fuses": "2.1.3", "@electron/packager": "20.3.0", "@types/node": "^26.6.5", - "electron": "44.7.0", + "electron": "44.9.0", "typescript": "~6.0.2", "vitest": "^4.1.11" }, @@ -862,9 +862,9 @@ } }, "node_modules/electron": { - "version": "44.7.0", - "resolved": "https://registry.npmjs.org/electron/-/electron-44.7.0.tgz", - "integrity": "sha512-aUq9/zLAAFYc+a9gy6cd0C3Y/N/RmovLCD8TV8LhIzNhuND6HEgsu96jJz9cbAxvckSPv+Trf2PKEjktoZgFkw==", + "version": "44.9.0", + "resolved": "https://registry.npmjs.org/electron/-/electron-44.9.0.tgz", + "integrity": "sha512-boP8zA5OIoMGYe3uWP4IqB1VJNoEzdHYgcBaVYnd1DBv5TogwXkbM4yJGSfNmYCzalVQ5J3TAIbaKOY+ILTnyg==", "dev": true, "license": "MIT", "dependencies": { diff --git a/src/nodepilot-desktop/package.json b/src/nodepilot-desktop/package.json index 90b6889f..5ce1de60 100644 --- a/src/nodepilot-desktop/package.json +++ b/src/nodepilot-desktop/package.json @@ -48,7 +48,7 @@ "@electron/fuses": "2.1.3", "@electron/packager": "20.3.0", "@types/node": "^26.6.5", - "electron": "44.7.0", + "electron": "44.9.0", "typescript": "~6.0.2", "vitest": "^4.1.11" } From 802ba76641465cb7793660097e303d4b4ff92ae5 Mon Sep 17 00:00:00 2001 From: Sev7eNup <79143581+Sev7eNup@users.noreply.github.com> Date: Thu, 22 Oct 2026 08:57:25 +0200 Subject: [PATCH 2/2] fix: align Electron 44.9 runtime contract and embedded Node metadata --- CHANGELOG.md | 5 +++++ src/nodepilot-desktop/package.json | 2 +- src/nodepilot-desktop/src/package-contract.test.ts | 8 ++++---- 3 files changed, 10 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index da5c2006..a945b2ed 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,6 +14,11 @@ exhaustive. Planned version: **1.5.2**. +### Changed + +- Desktop runtime updated to Electron 44.9.0 (embedded Node 24.22.0), with matching + manifest, lockfile and runtime contract pins. + ### Added - XML and JSON queries can read files and evaluate XPath/JSONPath on a WinRM target, including diff --git a/src/nodepilot-desktop/package.json b/src/nodepilot-desktop/package.json index 5ce1de60..a74ac1f0 100644 --- a/src/nodepilot-desktop/package.json +++ b/src/nodepilot-desktop/package.json @@ -26,7 +26,7 @@ }, "dependencies": {}, "//types-node": [ - "Electron 44.7.0 bundles Node 24.x. @types/node may be newer for tooling, so", + "Electron 44.9.0 bundles Node 24.22.0. @types/node may be newer for tooling, so", "runtime-only APIs must still be checked against the embedded Node release." ], "//archive-security": [ diff --git a/src/nodepilot-desktop/src/package-contract.test.ts b/src/nodepilot-desktop/src/package-contract.test.ts index 1a62bf7f..a9aee349 100644 --- a/src/nodepilot-desktop/src/package-contract.test.ts +++ b/src/nodepilot-desktop/src/package-contract.test.ts @@ -24,13 +24,13 @@ function readJson(relativePath: string): T { } describe('desktop runtime dependency contract', () => { - it('pins Electron 44.7.0 consistently in the manifest and lockfile', () => { + it('pins Electron 44.9.0 consistently in the manifest and lockfile', () => { const manifest = readJson('../package.json'); const lock = readJson('../package-lock.json'); - expect(manifest.devDependencies.electron).toBe('44.7.0'); - expect(lock.packages[''].devDependencies?.electron).toBe('44.7.0'); - expect(lock.packages['node_modules/electron'].version).toBe('44.7.0'); + expect(manifest.devDependencies.electron).toBe('44.9.0'); + expect(lock.packages[''].devDependencies?.electron).toBe('44.9.0'); + expect(lock.packages['node_modules/electron'].version).toBe('44.9.0'); }); // The embedded Node major changes with Electron majors. Naming the pinned version in the note