build(deps-dev): bump the electron group across 1 directory with 2 updates

[dependabot]

Bumps the electron group with 2 updates in the /app directory: @electron/fuses and electron.

Updates @electron/fuses from 1.8.0 to 2.1.1

Release notes

Sourced from @​electron/fuses's releases.

v2.1.1

2.1.1 (2026-03-27)

Performance Improvements

• optimize binary scanning with streaming and concurrent chunk processing (#96) (0b8ac07)

v2.1.0

2.1.0 (2026-02-26)

Features

• add FuseV1Options.WasmTrapHandlers (#89) (c76019b)

v2.0.0

2.0.0 (2025-08-01)

Breaking Changes

• feat!: bump engines requirement to Node 22. This module is now ESM-only. (#67)

Commits

• 0b8ac07 perf: optimize binary scanning with streaming and concurrent chunk processing...
• 12810c2 build(deps): bump tar from 7.5.9 to 7.5.10 (#94)
• 0efd835 build(deps): bump rollup from 4.50.1 to 4.59.0 (#93)
• e93f189 build(deps): bump electron/semantic-trusted-release from 1.0.1 to 1.1.0 (#92)
• 219b6e0 build(deps): bump tar from 7.5.7 to 7.5.9 (#91)
• c76019b feat: add FuseV1Options.WasmTrapHandlers (#89)
• 9fadbda build(deps): bump tar from 7.5.4 to 7.5.7 (#88)
• 2b65c43 build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (#87)
• 1f3d586 build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#86)
• ca68a33 build(deps): bump electron/github-app-auth-action from 1.1.1 to 2.0.0 (#85)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​electron/fuses since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates electron from 41.2.1 to 42.0.1

Release notes

Sourced from electron's releases.

electron v42.0.1

Release Notes for v42.0.1

Fixes

• Fixed DesktopCapturer crash on macOS. #51506
• Fixed ELECTRON_INSTALL_PLATFORM being ignored when resolving the Electron executable path during postinstall, which caused path.txt to be written for the host platform instead of the requested target and made isInstalled() always re-download on subsequent installs. #51370
• Fixed app.getLoginItemSettings() returning undefined for executableWillLaunchAtLogin on macOS; the property is now always a boolean. #51507 (Also in 40, 41)
• Fixed a potential race condition crash when closing DevTools. #51473 (Also in 41)

Other Changes

• Updated Chromium to 148.0.7778.97. #51517

electron v42.0.0

Release Notes for v42.0.0

Stack Upgrades

• Chromium 148.0.7778.96
  • New in 148
  • New in 147
• Node v24.15.0
  • Node 24.15.0 blog post
• V8 14.8

Breaking Changes

Behavior Changed: macOS notifications now use UNNotification API

Electron has migrated from the deprecated NSUserNotification API to the UNNotification API on macOS. The new API requires that an application be code-signed in order for notifications to be displayed. If an application is not code-signed, notifications will emit a failed event on the Notification object. #47817

Behavior Changed: electron no longer downloads itself via postinstall script

Previously, the electron npm package would download the Electron binary from the repository's GitHub Releases in the package's postinstall script. With recent supply chain security attacks against the npm ecosystem with postinstall scripts as a common attack vector, Electron will now download itself dynamically the first time that its main bin script is run (e.g. via npx electron). See [RFC #22](electron/rfcs#22) for more context. #49328

Behavior Changed: Offscreen rendering default device scale factor

Previously, OSR used the primary display's device scale factor for rendering. Starting from Electron 42, the default changes to a constant value of 1.0 for more consistent output sizes. Use webPreferences.offscreen.deviceScaleFactor to specify a custom value. #49683

Removed: quotas object from Session.clearStorageData(options)

When calling Session.clearStorageData(options), the options.quotas object is no longer supported because it has been removed from upstream Chromium.

Removed: ELECTRON_SKIP_BINARY_DOWNLOAD environment variable

This environment variable is no longer supported due to the new lazy download behavior. #50459

Features

Additions

... (truncated)

Commits

• b133532 ci: pin Homebrew version in CI runs (#51545)
• a8a9854 chore: update breaking changes for Electron 42 (#51550)
• e7021e3 fix: test idempotency issues (#51526)
• e49c3c6 test: make sure there are no orphaned electron processes running (#51485)
• 90ef05b chore: bump chromium to 148.0.7778.97 (42-x-y) (#51517)
• 34e6739 test: await did-create-window assertion in child close test (#51519)
• 6e01417 fix: always emit executableWillLaunchAtLogin from getLoginItemSettings (#...
• 7db53c0 fix: timing issue DCHECK crash in DesktopCapturer on macOS (#51506)
• b71b313 build: replace spec dep fork with transitive resolution (#51489)
• 2a4e369 fix: honor ELECTRON_INSTALL_PLATFORM in getPlatformPath (#51029) (#51370)
• Additional commits viewable in compare view

[cubic-dev-ai]

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="app/package.json">

<violation number="1" location="app/package.json:69">
P2: `@electron/fuses` was upgraded to v2, but `@electron-forge/plugin-fuses` only declares compatibility with `@electron/fuses` v1 (`^1.0.0`). This creates an unsupported dependency combination that can break fuse packaging behavior or fail in stricter install environments.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review, or fix all with cubic.}

[cubic-dev-ai]

P2: @electron/fuses was upgraded to v2, but @electron-forge/plugin-fuses only declares compatibility with @electron/fuses v1 (^1.0.0). This creates an unsupported dependency combination that can break fuse packaging behavior or fail in stricter install environments.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At app/package.json, line 69:

<comment>`@electron/fuses` was upgraded to v2, but `@electron-forge/plugin-fuses` only declares compatibility with `@electron/fuses` v1 (`^1.0.0`). This creates an unsupported dependency combination that can break fuse packaging behavior or fail in stricter install environments.</comment>

<file context>
@@ -66,7 +66,7 @@
     "@electron-forge/plugin-vite": "^7.11.1",
     "@electron-forge/shared-types": "^7.11.1",
-    "@electron/fuses": "^1.8.0",
+    "@electron/fuses": "^2.1.1",
     "@electron/rebuild": "^4.0.4",
     "@eslint/js": "^10.0.1",
</file context>

Suggested change

	"@electron/fuses": "^2.1.1",
	"@electron/fuses": "^1.8.0",