From 3c695f78fea656d1d56876282b75ed3fca8b979a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 18 Jan 2023 14:58:09 -0800
Subject: [PATCH] Bump electron from 15.5.5 to 18.3.7 in /js/web (#13617)
Bumps [electron](https://github.com/electron/electron) from 15.5.5 to
18.3.7.
Release notes
Sourced from electron's
releases.
electron v18.3.7
Release Notes for v18.3.7
Fixes
- Fixed WCO not responding to touch events on windows. #35177
(Also in 19,
20)
- Fixed
webContents.getUserAgent() incorrectly returning
an empty string unless previously set. #35130
(Also in 17,
19,
20)
- Fixed an issue in which calling setBounds() after e.preventDefault
in a 'will-move' or 'will-resize' event wouldn't change the window's
shape until the mouse button was released. #35082
(Also in 19,
20)
- Fixed context menu not showing all items on macOS when dock is not
hidden. #35198
(Also in 19)
- None. #35171
(Also in 19,
20)
Other Changes
- Fixed page size always being restricted to 4k on Linux arm64. #35184
- Security: backported fix for CVE-2022-2478. #35099
- Security: backported fix for chromium:1334864. #35097
electron v18.3.6
Release Notes for v18.3.6
Fixes
- Fixed a crash when calling
BrowserWindow.setEnabled().
#34973
(Also in 19,
20)
- Fixed a potential crash when changing window settings after
initializing WCO with an invalid
titleBarStyle. #34873
(Also in 17,
19,
20)
- Fixed alwaysOnTop BrowserWindow option for X11 Linux. #34911
(Also in 19,
20)
- Fixed an issue where BrowserWindows on macOS were incorrectly marked
as resizable. #34907
(Also in 19,
20)
- Fixed an issue where Windows Control Overlay buttons did not respect
maximizable/minimizable/closable states of a BrowserWindow. #34720
(Also in 17,
19,
20)
- Fixed an issue where calling
BrowserWindow.setRepresentedFilename on macOS with
titlebarStyle: 'hiddenInset' or titlebarStyle:
'hidden' inadvertently moves the traffic light location. #34847
(Also in 19,
20)
- Fixed an issue where some
BrowserWindows opened from
new links wouldn't properly load URLs. #34910
(Also in 19)
- Fixed an issue where the minimize button with WCO enabled would
incorrectly be highlighted in some cases. #34838
(Also in 17,
19,
20)
- Fixed an issue with background colors being improperly applied to
BrowserViews on Windows. #33478
(Also in 16)
- Fixed empty app_id when running under wayland. #34877
(Also in 19,
20)
- Fixed missing Sec-CH-UA headers and empty navigator.userAgentData.
#34758
(Also in 17,
19,
20)
- Fixed symbol generation on 32-bit Windows release builds. #35096
(Also in 19,
20)
- Prevent brief display of "Ozone X11" in window title on
Linux. #34943
Other Changes
- Backported fix for CVE-2022-2294. #34882
- Security: backported fix for 1287804. #35102
- Security: backported fix for 1333333. #34689
- Security: backported fix for 1335054. #34687
- Security: backported fix for 1335458. #34685
- Security: backported fix for 1336014. #35004
- Security: backported fix for 1339844. #35002
- Security: backported fix for 1340335. #35000
- Security: backported fix for 1340654. #34998
- Security: backported fix for CVE-2022-2162. #34714
- Security: backported fix for CVE-2022-2295. #34881
electron v18.3.5
Release Notes for v18.3.5
... (truncated)
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@fs-eire.
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the
default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as
the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as
the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the
default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/onnxruntime/network/alerts).
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
js/web/package-lock.json | 30 +++++++++++++++---------------
js/web/package.json | 2 +-
2 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/js/web/package-lock.json b/js/web/package-lock.json
index be78396d3f..64a2d6bfee 100644
--- a/js/web/package-lock.json
+++ b/js/web/package-lock.json
@@ -32,7 +32,7 @@
"base64-js": "^1.5.1",
"chai": "^4.3.4",
"dir-compare": "^3.3.0",
- "electron": "^15.5.5",
+ "electron": "^18.3.7",
"fs-extra": "^9.1.0",
"globby": "^11.0.3",
"jszip": "^3.7.1",
@@ -429,9 +429,9 @@
"dev": true
},
"node_modules/@types/node": {
- "version": "14.14.37",
- "resolved": "https://registry.npmjs.org/@types/node/-/node-14.14.37.tgz",
- "integrity": "sha512-XYmBiy+ohOR4Lh5jE379fV2IU+6Jn4g5qASinhitfyO71b/sCo6MKsMLF5tc7Zf2CE8hViVQyYSobJNke8OvUw=="
+ "version": "16.18.11",
+ "resolved": "https://registry.npmjs.org/@types/node/-/node-16.18.11.tgz",
+ "integrity": "sha512-3oJbGBUWuS6ahSnEq1eN2XrCyf4YsWI8OyCvo7c64zQJNplk3mO84t53o8lfTk+2ji59g5ycfc6qQ3fdHliHuA=="
},
"node_modules/@types/npmlog": {
"version": "4.1.2",
@@ -1997,14 +1997,14 @@
"dev": true
},
"node_modules/electron": {
- "version": "15.5.5",
- "resolved": "https://registry.npmjs.org/electron/-/electron-15.5.5.tgz",
- "integrity": "sha512-cGS1ueek14WLvLJlJbId3fmqJLvkr7VuBI0hHt6gpKaj8m2iv/NMteRg0deLgwlxjEF6ZGGNerUJW6a96rNq/Q==",
+ "version": "18.3.7",
+ "resolved": "https://registry.npmjs.org/electron/-/electron-18.3.7.tgz",
+ "integrity": "sha512-SDvX0VYejR1xw9PrJyvnyiDcuIhdzFVaA1NaRN2LEWXr5R6mEFl8NVTM+i5dtxMm2SHP/FPnkvmsWZs6MHijqg==",
"dev": true,
"hasInstallScript": true,
"dependencies": {
"@electron/get": "^1.13.0",
- "@types/node": "^14.6.2",
+ "@types/node": "^16.11.26",
"extract-zip": "^1.0.3"
},
"bin": {
@@ -7390,9 +7390,9 @@
"dev": true
},
"@types/node": {
- "version": "14.14.37",
- "resolved": "https://registry.npmjs.org/@types/node/-/node-14.14.37.tgz",
- "integrity": "sha512-XYmBiy+ohOR4Lh5jE379fV2IU+6Jn4g5qASinhitfyO71b/sCo6MKsMLF5tc7Zf2CE8hViVQyYSobJNke8OvUw=="
+ "version": "16.18.11",
+ "resolved": "https://registry.npmjs.org/@types/node/-/node-16.18.11.tgz",
+ "integrity": "sha512-3oJbGBUWuS6ahSnEq1eN2XrCyf4YsWI8OyCvo7c64zQJNplk3mO84t53o8lfTk+2ji59g5ycfc6qQ3fdHliHuA=="
},
"@types/npmlog": {
"version": "4.1.2",
@@ -8692,13 +8692,13 @@
"dev": true
},
"electron": {
- "version": "15.5.5",
- "resolved": "https://registry.npmjs.org/electron/-/electron-15.5.5.tgz",
- "integrity": "sha512-cGS1ueek14WLvLJlJbId3fmqJLvkr7VuBI0hHt6gpKaj8m2iv/NMteRg0deLgwlxjEF6ZGGNerUJW6a96rNq/Q==",
+ "version": "18.3.7",
+ "resolved": "https://registry.npmjs.org/electron/-/electron-18.3.7.tgz",
+ "integrity": "sha512-SDvX0VYejR1xw9PrJyvnyiDcuIhdzFVaA1NaRN2LEWXr5R6mEFl8NVTM+i5dtxMm2SHP/FPnkvmsWZs6MHijqg==",
"dev": true,
"requires": {
"@electron/get": "^1.13.0",
- "@types/node": "^14.6.2",
+ "@types/node": "^16.11.26",
"extract-zip": "^1.0.3"
}
},
diff --git a/js/web/package.json b/js/web/package.json
index 53f673a3be..b18c86ae37 100644
--- a/js/web/package.json
+++ b/js/web/package.json
@@ -49,7 +49,7 @@
"base64-js": "^1.5.1",
"chai": "^4.3.4",
"dir-compare": "^3.3.0",
- "electron": "^15.5.5",
+ "electron": "^18.3.7",
"fs-extra": "^9.1.0",
"globby": "^11.0.3",
"jszip": "^3.7.1",