build(deps-dev): bump the electron group across 1 directory with 2 updates

[dependabot]

Bumps the electron group with 2 updates in the /app directory: @electron/fuses and electron.

Updates @electron/fuses from 1.8.0 to 2.1.1

Release notes

Sourced from @​electron/fuses's releases.

v2.1.1

2.1.1 (2026-03-27)

Performance Improvements

• optimize binary scanning with streaming and concurrent chunk processing (#96) (0b8ac07)

v2.1.0

2.1.0 (2026-02-26)

Features

• add FuseV1Options.WasmTrapHandlers (#89) (c76019b)

v2.0.0

2.0.0 (2025-08-01)

Breaking Changes

• feat!: bump engines requirement to Node 22. This module is now ESM-only. (#67)

Commits

• 0b8ac07 perf: optimize binary scanning with streaming and concurrent chunk processing...
• 12810c2 build(deps): bump tar from 7.5.9 to 7.5.10 (#94)
• 0efd835 build(deps): bump rollup from 4.50.1 to 4.59.0 (#93)
• e93f189 build(deps): bump electron/semantic-trusted-release from 1.0.1 to 1.1.0 (#92)
• 219b6e0 build(deps): bump tar from 7.5.7 to 7.5.9 (#91)
• c76019b feat: add FuseV1Options.WasmTrapHandlers (#89)
• 9fadbda build(deps): bump tar from 7.5.4 to 7.5.7 (#88)
• 2b65c43 build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (#87)
• 1f3d586 build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#86)
• ca68a33 build(deps): bump electron/github-app-auth-action from 1.1.1 to 2.0.0 (#85)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​electron/fuses since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates electron from 41.2.1 to 41.5.0

Release notes

Sourced from electron's releases.

electron v41.5.0

Release Notes for v41.5.0

Features

• Added app.configureWebAuthn() to enable the Touch ID platform authenticator for WebAuthn on macOS, and a select-webauthn-account session event for choosing between multiple discoverable credentials. #51412 (Also in 42)

Fixes

• Fixed a regression on Windows where frameless windows changed their size after calling setResizable. #51427 (Also in 42)
• Fixed an issue on Windows where a transient UnhookWindowsHookEx failure in setIgnoreMouseEvents(true, { forward: true }) teardown could cause duplicate low-level mouse hooks to be installed on the next activation. #51419 (Also in 42)
• Fixed remote debugging via --remote-debugging-port not working when inspecting from Chrome's chrome://inspect page. The DevTools page would appear empty due to the frontend URL pointing to a CDN that returned 404 for Electron's Chromium builds. #51413

electron v41.4.0

Release Notes for v41.4.0

Features

• Added support for heap profiling via contentTracing.enableHeapProfiling(). #51178 (Also in 42)

Fixes

• Ensured cross-origin fetch() and XHR are blocked for custom protocols registered with supportFetchAPI: true unless corsEnabled: true is also set; cross-origin mode: 'no-cors' requests now receive an opaque response. #51270 (Also in 39, 40, 42)
• Fixed a crash when providing invalid HTTP header names or values in the webRequest.onBeforeSendHeaders() callback. #51365 (Also in 40, 42)
• Fixed a bug that cause offscreen rendering doesn't have valid screen info and unable to get valid result of related media queries.
  • Added webPreference.offscreen.deviceScaleFactor to allow user specify a value, instead of using user's primary display's value. #50375 (Also in 40)
• Fixed a bug where errors would occur when using the Chrome DevTools Fetch API. #51371 (Also in 42)
• Fixed a crash that could occur when an autofill suggestion popup was shown while a window was closing. #51321 (Also in 42)
• Fixed a regression where frameless fullscreen windows had white borders on Windows. #51332 (Also in 42)
• Fixed a renderer crash when a page uses the <geolocation> HTML element. #51373 (Also in 42)
• Fixed an issue where calling contentTracing APIs before app.whenReady() would crash the application. #51352 (Also in 42)
• Fixed an issue where some toast notification properties didn't work as expected in WinRT. #51397 (Also in 42)
• Fixed buggy behavior where Backspace would accept macOS text replacements inside contenteditable elements. #51343 (Also in 40, 42)
• This PR fixes a regression in silent printing where custom DPI values from webContents.print were not honored, causing incorrect output scaling in real-world print flows. #51355 (Also in 42)

Other Changes

• Backported a fix for route_id validation in the GPU command buffer. #51319
• Backported fix in Skia for 495534710. #51264
• Backported security fixes for 492736100, 492668885, 493413432, 493319454, 494158331, 496281816. #51259
• Updated Chromium to 146.0.7680.216. #51382

electron v41.3.0

Release Notes for v41.3.0

Fixes

• Fixed webContents.printToPDF rejecting on all subsequent calls after a prior call was rejected with an invalid pageRanges value. #51221 (Also in 40, 42)
• Fixed an issue where app-region: drag inside a hidden WebContentsView would still drag the parent window on Windows. #51246 (Also in 40, 42)
• Fixed an issue where an Electron macOS update would not be applied if another app was previously blocking the macOS system update loop. #51210 (Also in 40, 42)
• Fixed build failure when building with enable_pdf disabled. #51248 (Also in 42)
• Fixed frameless transparent windows on Windows losing their transparency after setResizable(false) followed by setResizable(true). #51217 (Also in 42)

Other Changes

... (truncated)

Commits

• 7f51178 fix: ensure stable bounds on Windows when toggling setResizable for frameless...
• 6ec2b16 fix: use bundled devtools frontend URL for remote debugging (#51413)
• f6ec0df feat: support WebAuthn Touch ID platform authenticator on macOS (#51412)
• 6037d59 fix: preserve mouse hook handle when UnhookWindowsHookEx fails (#51419)
• f4d3708 docs: fix version of deprecation notice (#51422)
• ff343d4 build(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 (#51410)
• 5562011 chore: bump chromium to 146.0.7680.216 (41-x-y) (#51382)
• c9a1cff fix: dispatch toast action and reply events from WinRT activation path (#51397)
• 8d1475e ci: backport secondary siso patch (#51392)
• 7e0499d feat: support heap profiling in contentTracing (#51178)
• Additional commits viewable in compare view

[cubic-dev-ai]

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="app/package.json">

<violation number="1" location="app/package.json:69">
P2: `@electron/fuses` was upgraded to v2, but `@electron-forge/plugin-fuses` only declares compatibility with `@electron/fuses` v1 (`^1.0.0`). This creates an unsupported dependency combination that can break fuse packaging behavior or fail in stricter install environments.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review, or fix all with cubic.}

[cubic-dev-ai]

P2: @electron/fuses was upgraded to v2, but @electron-forge/plugin-fuses only declares compatibility with @electron/fuses v1 (^1.0.0). This creates an unsupported dependency combination that can break fuse packaging behavior or fail in stricter install environments.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At app/package.json, line 69:

<comment>`@electron/fuses` was upgraded to v2, but `@electron-forge/plugin-fuses` only declares compatibility with `@electron/fuses` v1 (`^1.0.0`). This creates an unsupported dependency combination that can break fuse packaging behavior or fail in stricter install environments.</comment>

<file context>
@@ -66,7 +66,7 @@
     "@electron-forge/plugin-vite": "^7.11.1",
     "@electron-forge/shared-types": "^7.11.1",
-    "@electron/fuses": "^1.8.0",
+    "@electron/fuses": "^2.1.1",
     "@electron/rebuild": "^4.0.4",
     "@eslint/js": "^10.0.1",
</file context>

Suggested change

	"@electron/fuses": "^2.1.1",
	"@electron/fuses": "^1.8.0",