build(deps-dev): bump the npm_and_yarn group across 2 directories with 1 update

[dependabot]

Bumps the npm_and_yarn group with 1 update in the / directory: electron.
Bumps the npm_and_yarn group with 1 update in the /apps/desktop directory: electron.

Updates electron from 40.10.2 to 41.10.3

Release notes

Sourced from electron's releases.

electron v41.10.3

Release Notes for v41.10.3

Fixes

• Fixed app.disableHardwareAcceleration() not fully disabling GPU hardware usage on Windows starting from Electron 38. #52368 (Also in 42, 43, 44)
• Fixed unnecessary autofill popup creation for fields without datalist suggestions, which could cause input latency on macOS. #52320 (Also in 42, 43, 44)

Other Changes

• Backported fixes from upstream Chromium and V8. #52396

electron v41.10.2

Release Notes for v41.10.2

Fixes

• Fixed a renderer crash when calling WebAssembly.compileStreaming() or WebAssembly.instantiateStreaming() with nodeIntegration enabled. #52240 (Also in 42, 43)

Other Changes

• Backported fixes from upstream Chromium. #52304

electron v41.10.1

Release Notes for v41.10.1

Fixes

• Fixed crash triggered by replacing an open application menu. #52278 (Also in 42, 43, 44)

electron v41.10.0

Release Notes for v41.10.0

Other Changes

• Backported fixes from upstream Chromium, ANGLE, Dawn, Skia, and V8. #52231
• Updated Node.js to v24.18.0. #52104

electron v41.9.2

Release Notes for v41.9.2

Fixes

• Fixed an issue where clicking the maximize button could progressively shrink the window in some Wayland environments. #52074 (Also in 42, 43)

electron v41.9.1

Release Notes for v41.9.1

Fixes

• Fixed ProtocolResponse.url requests being made through the default session instead of the session the protocol handler was registered on when ProtocolResponse.session was not set. #52134 (Also in 40, 42, 43)
• Made "reload" menu items work with BaseWindow. #52118 (Also in 42, 43)

... (truncated)

Commits

• 991a977 chore: cherry-pick 6 changes from chromium and v8 (#52396)
• 3991da0 fix: append --disable-gpu switch in app.disableHardwareAcceleration() (#52368)
• 68cf8b7 fix: respect iframe sandbox flags on the OpenURL navigation path (#51438)
• 0dd1486 build: fail gha-done when required or checkout jobs fail (#52252)
• 4c3df5b fix: don't show empty autofill popup (#52320)
• 0d93097 fix: only set Node's WASM streaming callback when fetch is enabled (#… (#52240)
• 35874b0 chore: cherry-pick 8 changes from chromium (#52304)
• 23e9688 fix: restore SelfKeepAlive in Menu (#52278)
• 015e7a6 chore: bump node to v24.18.0 (41-x-y) (#52104)
• 9dbb737 chore: update angle patches after #52231 (#52241)
• Additional commits viewable in compare view

Updates electron from 40.10.2 to 41.10.3

Release notes

Sourced from electron's releases.

electron v41.10.3

Release Notes for v41.10.3

Fixes

• Fixed app.disableHardwareAcceleration() not fully disabling GPU hardware usage on Windows starting from Electron 38. #52368 (Also in 42, 43, 44)
• Fixed unnecessary autofill popup creation for fields without datalist suggestions, which could cause input latency on macOS. #52320 (Also in 42, 43, 44)

Other Changes

• Backported fixes from upstream Chromium and V8. #52396

electron v41.10.2

Release Notes for v41.10.2

Fixes

• Fixed a renderer crash when calling WebAssembly.compileStreaming() or WebAssembly.instantiateStreaming() with nodeIntegration enabled. #52240 (Also in 42, 43)

Other Changes

• Backported fixes from upstream Chromium. #52304

electron v41.10.1

Release Notes for v41.10.1

Fixes

• Fixed crash triggered by replacing an open application menu. #52278 (Also in 42, 43, 44)

electron v41.10.0

Release Notes for v41.10.0

Other Changes

• Backported fixes from upstream Chromium, ANGLE, Dawn, Skia, and V8. #52231
• Updated Node.js to v24.18.0. #52104

electron v41.9.2

Release Notes for v41.9.2

Fixes

• Fixed an issue where clicking the maximize button could progressively shrink the window in some Wayland environments. #52074 (Also in 42, 43)

electron v41.9.1

Release Notes for v41.9.1

Fixes

• Fixed ProtocolResponse.url requests being made through the default session instead of the session the protocol handler was registered on when ProtocolResponse.session was not set. #52134 (Also in 40, 42, 43)
• Made "reload" menu items work with BaseWindow. #52118 (Also in 42, 43)

... (truncated)

Commits

• 991a977 chore: cherry-pick 6 changes from chromium and v8 (#52396)
• 3991da0 fix: append --disable-gpu switch in app.disableHardwareAcceleration() (#52368)
• 68cf8b7 fix: respect iframe sandbox flags on the OpenURL navigation path (#51438)
• 0dd1486 build: fail gha-done when required or checkout jobs fail (#52252)
• 4c3df5b fix: don't show empty autofill popup (#52320)
• 0d93097 fix: only set Node's WASM streaming callback when fetch is enabled (#… (#52240)
• 35874b0 chore: cherry-pick 8 changes from chromium (#52304)
• 23e9688 fix: restore SelfKeepAlive in Menu (#52278)
• 015e7a6 chore: bump node to v24.18.0 (41-x-y) (#52104)
• 9dbb737 chore: update angle patches after #52231 (#52241)
• Additional commits viewable in compare view

Updates electron from 40.10.2 to 41.10.3

Release notes

Sourced from electron's releases.

electron v41.10.3

Release Notes for v41.10.3

Fixes

• Fixed app.disableHardwareAcceleration() not fully disabling GPU hardware usage on Windows starting from Electron 38. #52368 (Also in 42, 43, 44)
• Fixed unnecessary autofill popup creation for fields without datalist suggestions, which could cause input latency on macOS. #52320 (Also in 42, 43, 44)

Other Changes

• Backported fixes from upstream Chromium and V8. #52396

electron v41.10.2

Release Notes for v41.10.2

Fixes

• Fixed a renderer crash when calling WebAssembly.compileStreaming() or WebAssembly.instantiateStreaming() with nodeIntegration enabled. #52240 (Also in 42, 43)

Other Changes

• Backported fixes from upstream Chromium. #52304

electron v41.10.1

Release Notes for v41.10.1

Fixes

• Fixed crash triggered by replacing an open application menu. #52278 (Also in 42, 43, 44)

electron v41.10.0

Release Notes for v41.10.0

Other Changes

• Backported fixes from upstream Chromium, ANGLE, Dawn, Skia, and V8. #52231
• Updated Node.js to v24.18.0. #52104

electron v41.9.2

Release Notes for v41.9.2

Fixes

• Fixed an issue where clicking the maximize button could progressively shrink the window in some Wayland environments. #52074 (Also in 42, 43)

electron v41.9.1

Release Notes for v41.9.1

Fixes

• Fixed ProtocolResponse.url requests being made through the default session instead of the session the protocol handler was registered on when ProtocolResponse.session was not set. #52134 (Also in 40, 42, 43)
• Made "reload" menu items work with BaseWindow. #52118 (Also in 42, 43)

... (truncated)

Commits

• 991a977 chore: cherry-pick 6 changes from chromium and v8 (#52396)
• 3991da0 fix: append --disable-gpu switch in app.disableHardwareAcceleration() (#52368)
• 68cf8b7 fix: respect iframe sandbox flags on the OpenURL navigation path (#51438)
• 0dd1486 build: fail gha-done when required or checkout jobs fail (#52252)
• 4c3df5b fix: don't show empty autofill popup (#52320)
• 0d93097 fix: only set Node's WASM streaming callback when fetch is enabled (#… (#52240)
• 35874b0 chore: cherry-pick 8 changes from chromium (#52304)
• 23e9688 fix: restore SelfKeepAlive in Menu (#52278)
• 015e7a6 chore: bump node to v24.18.0 (41-x-y) (#52104)
• 9dbb737 chore: update angle patches after #52231 (#52241)
• Additional commits viewable in compare view

Updates electron from 40.10.2 to 41.10.3

Release notes

Sourced from electron's releases.

electron v41.10.3

Release Notes for v41.10.3

Fixes

• Fixed app.disableHardwareAcceleration() not fully disabling GPU hardware usage on Windows starting from Electron 38. #52368 (Also in 42, 43, 44)
• Fixed unnecessary autofill popup creation for fields without datalist suggestions, which could cause input latency on macOS. #52320 (Also in 42, 43, 44)

Other Changes

• Backported fixes from upstream Chromium and V8. #52396

electron v41.10.2

Release Notes for v41.10.2

Fixes

• Fixed a renderer crash when calling WebAssembly.compileStreaming() or WebAssembly.instantiateStreaming() with nodeIntegration enabled. #52240 (Also in 42, 43)

Other Changes

• Backported fixes from upstream Chromium. #52304

electron v41.10.1

Release Notes for v41.10.1

Fixes

• Fixed crash triggered by replacing an open application menu. #52278 (Also in 42, 43, 44)

electron v41.10.0

Release Notes for v41.10.0

Other Changes

• Backported fixes from upstream Chromium, ANGLE, Dawn, Skia, and V8. #52231
• Updated Node.js to v24.18.0. #52104

electron v41.9.2

Release Notes for v41.9.2

Fixes

• Fixed an issue where clicking the maximize button could progressively shrink the window in some Wayland environments. #52074 (Also in 42, 43)

electron v41.9.1

Release Notes for v41.9.1

Fixes

• Fixed ProtocolResponse.url requests being made through the default session instead of the session the protocol handler was registered on when ProtocolResponse.session was not set. #52134 (Also in 40, 42, 43)
• Made "reload" menu items work with BaseWindow. #52118 (Also in 42, 43)

... (truncated)

Commits

• 991a977 chore: cherry-pick 6 changes from chromium and v8 (#52396)
• 3991da0 fix: append --disable-gpu switch in app.disableHardwareAcceleration() (#52368)
• 68cf8b7 fix: respect iframe sandbox flags on the OpenURL navigation path (#51438)
• 0dd1486 build: fail gha-done when required or checkout jobs fail (#52252)
• 4c3df5b fix: don't show empty autofill popup (#52320)
• 0d93097 fix: only set Node's WASM streaming callback when fetch is enabled (#… (#52240)
• 35874b0 chore: cherry-pick 8 changes from chromium (#52304)
• 23e9688 fix: restore SelfKeepAlive in Menu (#52278)
• 015e7a6 chore: bump node to v24.18.0 (41-x-y) (#52104)
• 9dbb737 chore: update angle patches after #52231 (#52241)
• Additional commits viewable in compare view

[github-actions]

૮ >ﻌ< ა ci review

_{running on db9acca — build(deps-dev): bump the npm_and_yarn group across 2 direct}

---

_{Still running 1 job: JS & TS checks / JS & TS checks}

⚠️ Action required

package-lock.json · View job

Locked npm dependency versions changed.

package-lock.json

Package	Before	After
➕ @electron-internal/extract-zip	—	1.0.5
➕ @electron/get	—	5.1.0
➕ env-paths (nested under @electron/get)	—	3.0.0
➕ semver (nested under @electron/get)	—	7.8.5
➕ electron	—	41.10.3
➕ @types/node (nested under electron)	—	24.13.3
➕ undici-types (nested under electron)	—	7.18.2
➖ @electron/get	2.0.3	—
➖ electron	40.10.2	—
➖ @types/node (nested under electron)	24.13.3	—
➖ undici-types	7.18.2	—
➖ @types/yauzl	2.10.3	—
➖ extract-zip	2.0.1	—
➖ fs-extra	8.1.0	—
➖ pend	1.2.0	—
➖ yauzl	3.4.0	—

How to fix:

Add the ci-reviewed label after verifying the version changes are expected.

---

⚠️ Warnings

OSV vulnerability scan · View job

4 known vulnerabilities found in pinned dependencies.

• CVE-2026-67213 in package-lock.json
• CVE-2026-67213 in website/package-lock.json
• CVE-2026-71554 in uv.lock
• CVE-2026-71554 in uv.lock

How to fix:

Review the findings in the Security tab. Update the affected dependencies if a patched version is available.

[bbasketballer75]

🤖 hermes automated review

• 2 files changed, 95 additions, 154 deletions
• ❌ tests failed

  clone failed: error launching git: The system cannot find the path specified.
  
  failed to run git: exit status 1
  

No heuristic issues detected.

---

Review generated by hermes pr-reviewer. Trust but verify.

[bbasketballer75]

🤖 hermes automated review

• 2 files changed, 95 additions, 127 deletions
• ❌ tests failed

  npm error Missing script: "test"
  npm error
  npm error To see a list of scripts, run:
  npm error   npm run
  npm error A complete log of this run can be found in: C:\Users\bbask\AppData\Local\npm-cache\_logs\2026-08-17T22_32_05_516Z-debug-0.log
  
  

No heuristic issues detected.

---

Review generated by hermes pr-reviewer. Trust but verify.

[bbasketballer75]

Adding ci-reviewed label per Austin's approval. Please re-run checks.

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.