chore(deps): update dependency electron to v35.7.5 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
electron	35.4.0 → 35.7.5

GitHub Vulnerability Alerts

CVE-2025-55305

Impact

This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted.

Specifically this issue can only be exploited if your app is launched from a filesystem the attacker has write access too. i.e. the ability to edit files inside the resources folder in your app installation on Windows which these fuses are supposed to protect against.

Workarounds

There are no app side workarounds, you must update to a patched version of Electron.

Fixed Versions

• 38.0.0-beta.6
• 37.3.1
• 36.8.1
• 35.7.5

For more information

If you have any questions or comments about this advisory, email us at [email protected]

---

Release Notes

electron/electron (electron)

v35.7.5: electron v35.7.5

Compare Source

Release Notes for v35.7.5

[!WARNING]
Electron 35.x.y has reached end-of-support as per the project's support policy. Developers and applications are encouraged to upgrade to a newer version of Electron.

Fixes

• Fixed an issue where shell.openPath was not non-blocking as expected. #​48079 (Also in 36, 37, 38)

v35.7.4: electron v35.7.4

Compare Source

Release Notes for v35.7.4

• Fix ffmpeg generation on Windows non-x64

v35.7.2: electron v35.7.2

Compare Source

Release Notes for v35.7.2

Fixes

• Fixed an issue where printing PDFs with webContents.print({ silent: true }) would fail. #​47645 (Also in 36, 37)

v35.7.0: electron v35.7.0

Compare Source

Release Notes for v35.7.0

Other Changes

• Updated Node.js to v22.16.0. #​47213

v35.6.0: electron v35.6.0

Compare Source

Release Notes for v35.6.0

Features

• Added support for --no-experimental-global-navigator flag. #​47416 (Also in 36, 37)
• Added support for customizing system accent color and highlighting of active window border. #​47539 (Also in 36, 37)

Fixes

• Fixed a potential crash using session.clearData in some circumstances. #​47410 (Also in 36, 37)
• Fixed an error when importing electron for the first time from an ESM module loaded by a CJS module in a packaged app. #​47344 (Also in 36, 37)
• Fixed an issue where calling Fetch.continueResponse via debugger with WebContentsView could cause a crash. #​47443 (Also in 36, 37)
• Fixed an issue where utility processes could leak file handles. #​47542 (Also in 36, 37)
• Partially fixes an issue with printing a PDF via webContents.print() where the callback would not be called. #​47399 (Also in 36, 37)

Other Changes

• Backported fix for 4206375. #​47369

v35.5.1: electron v35.5.1

Compare Source

Release Notes for v35.5.1

Fixes

• Fixed addChildView() crashes when adding a closed WebContentsView. #​47339
• Fixed crash in autoUpdater on macOS when zip extraction failed. #​47299 (Also in 34, 36, 37)
• Fixed crash when pausing in loops due to missing context when desugared. #​47286

Other Changes

• Security: backported fix for CVE-2025-5419. #​47354

v35.5.0: electron v35.5.0

Compare Source

Release Notes for v35.5.0

Features

• Added innerWidth and innerHeight options for window.open. #​47045 (Also in 36, 37)
• Added sublabel functionality for menus on macOS >= 14.4. #​47041 (Also in 36, 37)
• Added support for screen.dipToScreenPoint(point) and screen.screenToDipPoint(point) on Linux X11. #​47124 (Also in 36, 37)
• Added support for node option --experimental-network-inspection. #​47029 (Also in 36, 37)

Fixes

• Fixed a possible crash in shell.readShortcutLink. #​47226 (Also in 36)
• Fixed an issue where protected transparent windows inappropriately showed a titlebar after visibility change. #​47265 (Also in 36, 37)
• Fixed an issue where the 'suspend' and 'resume' events could be emitted in duplicate. #​47190 (Also in 36, 37)
• Fixed an issue where the backgroundMaterial feature did not work in a frameless window on initial window creation. #​47236 (Also in 36)
• Fixed opening package paths as directory when treatPackageAsDirectory is enabled on macOS. #​47110 (Also in 36, 37)
• Fixed regression with directory selection in macOS dialogs. #​47276 (Also in 36, 37)

Other Changes

• Security: backported fix for 4033643. #​47069
• Security: backported fix for CVE-2025-4609.
  • Security: backported fix for CVE-2025-4664. #​47175
• Updated Node.js to v22.15.1. #​47102

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.