chore(deps-dev): bump electron from 41.10.7 to 44.4.1

[dependabot]

Bumps electron from 41.10.7 to 44.4.1.

Release notes

Sourced from electron's releases.

electron v44.4.1

Release Notes for v44.4.1

Fixes

• Fixed default protocol client APIs falsely returning true on Windows. #53959 (Also in 43, 45)
• Fixed several object lifetime issues in Debugger, Menu, Tray, Notification, globalShortcut, utilityProcess, ServiceWorkerMain, WebFrameMain, webFrame, sharedTexture, systemPreferences, netLog, MessagePortMain, net.request and shell.openPath(). #53968 (Also in 45)

electron v44.4.0

Release Notes for v44.4.0

Features

• Added initiatorOrigin to webRequest and protocol handler requests, DownloadItem.getInitiatorOrigin(), and a trailing frame argument to the will-download and preconnect session events. #53703 (Also in 43, 45)

Fixes

• Added validation to protocol.registerSchemesAsPrivileged() to reject protocol names that do not conform to RFC 3986 URI scheme grammar. #53743 (Also in 45)
• Fixed a crash when a webContents navigated to the Chrome Web Store and the page invoked the unsupported chrome.webstorePrivate API. #53776 (Also in 45)
• Fixed a main-process crash when an app called loadURL() again right after a load failed because the renderer process exited before the page committed. #53943 (Also in 43, 45)
• Fixed a memory leak on Windows when app.getPreferredSystemLanguages() was called. #53868 (Also in 43, 45)
• Fixed a potential UAF in app.getPreferredSystemLanguages() on Windows. #53865 (Also in 43, 45)
• Fixed a renderer crash that could occur when printing from an iframe. #53762 (Also in 43, 45)
• Fixed a renderer crash when an iframe was removed right after loading with nodeIntegrationInSubFrames enabled and sandbox disabled, e.g. on pages that embed Meta Pixel. #53885 (Also in 42, 43, 45)
• Fixed a Windows renderer crash when no default locale could be determined. #53947
• Fixed an issue where the browser-side check that blocks drag and drop between cross-site frames of the same page was disabled. #53749 (Also in 43, 45)
• Fixed helper executables on macOS starting a second app instance when launched without a process type, for example through child_process.fork() with the runAsNode fuse disabled; fork() now throws in that configuration. #53840 (Also in 45)
• Fixed V8 code caching for https scripts loaded by file:// and custom-scheme pages. #53745 (Also in 45)
• Fixed webContents emitting unresponsive right after the system wakes from sleep on Windows, and emitting responsive when a hung window was hidden rather than when it recovered. #53764 (Also in 45)
• Fixed webContents.capturePage() on offscreen windows returning an image resampled to the display's scale factor instead of rendered at the window's offscreen.deviceScaleFactor. #53816 (Also in 43, 45)
• Fixed Window Controls Overlay CSS environment variables and navigator.windowControlsOverlay not being populated for WebContentsViews in a BaseWindow. #53812 (Also in 45)

Other Changes

• Backported fixes from upstream ANGLE, Chromium, libyuv, PDFium and V8. #53769
• Updated Node.js to v24.21.0. #53779

electron v44.3.0

Release Notes for v44.3.0

Features

• Added the ELECTRON_DEBUG_DRAGGABLE_REGIONS environment variable, which visualizes and logs draggable regions in unpackaged apps to help debug custom title bars. #53627 (Also in 43, 45)

Fixes

• File System Access permission requests and the file-system-access-restricted event are scoped to the requesting document, grants are reset when the origin's last page closes, and write access works in in-memory sessions. #53691 (Also in 42, 43, 45)
• Fixed Ctrl+Y not yanking text killed with Ctrl+K in text fields on macOS. #53714 (Also in 45)
• Fixed Tray icons not appearing when running inside Flatpak or Snap sandboxes on Linux. #53653 (Also in 45)
• Fixed app.getGPUInfo('complete') stalling the GPU process for several seconds on some Windows systems. #53644 (Also in 45)
• Fixed session.setPermissionCheckHandler receiving the top-level origin and a null webContents for hid and usb checks made from a subframe. #53688 (Also in 42, 43, 45)

... (truncated)

Commits

• 09d1a65 fix: cppgc object lifetime follow-ups (44-x-y) (#53968)
• 8f9454a test: gate specs on testing bindings (#53964)
• dc105cf fix: correct SUCCEEDED/FAILED usage on non-HRESULT return values (#53959)
• 1a37b33 test: isolate reporting API session (#53955)
• 81ef9c7 chore: cherry-pick 4b33582833e5 from chromium (#53947)
• b71433f fix: post navigations started while a dead renderer is torn down (#53943)
• 93a67b4 test: avoid exit race in utility process DNS spec (#53935)
• 8dbc0a0 perf: push preload paths to Node.js renderers instead of a sync IPC at startu...
• 6686ae6 docs: remove outdated Linux quirk documentation (#53921)
• 4cadda1 build: run webpack in production mode, minify only release bundles (#53917)
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	electron@​41.10.7 ⏵ 44.4.1	+6		+1

View full report

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 17036d67-8b29-4a0b-ac31-6ffe03b7bd46

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}