All pull requests

Pull requests

• fix(builder): state the crossOriginHeaders rule in the feed query warning, advisory, changesets and docs

  app-builder-libbuilder-util-runtimeelectron-builderelectron-updater
  #10568·claude[bot] opened Nov 3, 2026Bot·5/5·

  ·
  6

• feat(updater)!: reject plain http update requests and https-to-http redirects

  app-builder-libbuilder-util-runtimeelectron-builderelectron-updater
  #10566·mmaietta opened Nov 3, 2026Collaborator·4/5·

  ·
  16

• feat(updater): pass the request URL to the login event

  electron-updater
  #10565·mmaietta opened Nov 3, 2026Collaborator·3/5·

  ·
  6

• feat(updater)!: send to another origin only the request headers that autoUpdater.crossOriginHeaders allows

  builder-util-runtimeelectron-updater
  #10563·mmaietta opened Nov 3, 2026Collaborator·2/5·

  ·
  8

• fix(runtime): drop the request auth option on a cross-origin redirect

  builder-util-runtime
  #10562·mmaietta opened Nov 3, 2026Collaborator·1/5·

  ·
  1

• chore(deps): update dorny/paths-filter action to v4.0.3

  renovate
  #10556·renovate[bot] opened Nov 3, 2026Bot·1 task·

  ·
  1

• chore(deps): update electron/github-app-auth-action digest to cc6751b

  renovate
  #10551·renovate[bot] opened Nov 1, 2026Bot·1 task·

  ·
  1

• chore(deps): update changesets/action digest to e0145ed

  renovate
  #10550·renovate[bot] opened Nov 1, 2026Bot·1 task·

  ·
  1

• fix(app-builder-lib): fail the asar sanity check when the archive size does not match its header

  #10547·tlq5l opened Nov 1, 2026Contributor·

  ·
  1

  3

• fix(deps): update dependency minimatch to v11 [security]

  app-builder-librenovate
  #10546·renovate[bot] opened Nov 1, 2026Bot·1 task·

  ·
  6

• chore(deps): update dependency minimatch@>=7 <7.4.8 to v11 [security]

  renovate
  #10545·renovate[bot] opened Nov 1, 2026Bot·1 task·

  ·
  5

• chore(deps): update dependency minimatch@>=5 <5.1.8 to v11 [security]

  renovate
  #10544·renovate[bot] opened Nov 1, 2026Bot·1 task·

  ·
  3

• fix(nsis): read a quoted /D= install directory without its closing quote (v26 backport of #10527, #10529)

  app-builder-librelease/v26
  #10543·claude[bot] opened Oct 31, 2026Bot·

  ·
  4

• fix(runtime): abort the request of a cancelled download (v26 backport of #10506)

  builder-util-runtimerelease/v26
  #10542·claude[bot] opened Oct 31, 2026Bot·

  ·
  3

• fix(app-builder-lib): upgrade minimatch to v11 for GHSA-g3hv-75wg-m249

  app-builder-lib
  #10539·claude[bot] opened Oct 31, 2026Bot·

  ·
  1

  6

• fix(app-builder-lib): upgrade minimatch to v11 for GHSA-g3hv-75wg-m249 (v26)

  app-builder-librelease/v26
  #10538·claude[bot] opened Oct 31, 2026Bot·

  ·
  5

• fix(updater): pick the highest eligible release from a private GitHub repository

  electron-updater
  #10519·mmaietta opened Oct 30, 2026Collaborator·

  ·
  12

• fix(updater): pick the installer for the app's arch by name, not manifest order

  electron-updater
  #10518·mmaietta opened Oct 30, 2026Collaborator·

  ·
  6

• fix(nsis): keep one-click banner progress monotonic during 7z extraction

  #10501·a5768549 opened Oct 29, 2026Contributor·

  ·
  1

  2

• feat(asar): opt-in stable app.asar layout (stableLayout) so file insertions and growth don't rewrite the header

  #10499·imlucas opened Oct 29, 2026Contributor·3 tasks done·

  ·
  6

• perf(updater): fewer round trips for block map v3 updates on single-range hosts

  #10498·imlucas opened Oct 29, 2026Contributor·

  ·
  7

• fix(updater): harden the block map download path (empty maps, size limits, blockMapSha512)

  #10496·imlucas opened Oct 29, 2026Contributor·

  ·
  5

• feat(nsis): opt-in nsis.allowUnelevatedPerMachineUpdate for silent per-machine updates

  #10495·imlucas opened Oct 29, 2026Contributor·

  ·
  2

• chore(deploy): Release (next) (alpha)

  app-builder-libbuilder-utilbuilder-util-runtimedmg-builderelectron-builderelectron-builder-squirrel-windowselectron-publishelectron-updater
  #10491·electron-builder-release-bot[bot] opened Oct 29, 2026Bot·

  ·

• fix(mac): normalize bundle filenames to NFD before code signing

  #10466·sujipar opened Oct 27, 2026·

  ·
  1

  5