build(deps): bump the npm_and_yarn group across 1 directory with 3 updates

[dependabot]

Bumps the npm_and_yarn group with 3 updates in the / directory: electron, brace-expansion and tar.

Updates electron from 33.4.11 to 41.1.0

Release notes

Sourced from electron's releases.

electron v41.1.0

Release Notes for v41.1.0

Features

• Added nativeTheme.shouldDifferentiateWithoutColor on macOS. #50408 (Also in 42)
• Notes: Added support for the urgency option in Notifications on Windows. #50382 (Also in 42)

Fixes

• Fixed a bug where Windows notification icons could fail to save because their temporary filenames contained invalid characters. #50483 (Also in 40)
• Fixed a crash in clipboard.readImage() when the clipboard contains malformed image data. #50492 (Also in 39, 40, 42)
• Fixed a crash when calling an offscreen shared texture's release() after the texture object was garbage collected. #50501 (Also in 39, 40, 42)
• Fixed an accessibility issue where the AXMenuOpened event was not fired on menu creation. #50506 (Also in 40, 42)
• Fixed an issue where an app shortcut may lose its icon after auto-updating on Windows. #50519 (Also in 40)

Other Changes

• Updated Chromium to 146.0.7680.166. #50458

electron v41.0.4

Release Notes for v41.0.4

Fixes

• Fixed crash when handling JavaScript dialogs from windows opened with invalid or empty URLs. #50399 (Also in 39, 40, 42)
• Fixed improper focus tracking in BaseWindow on MacOS. #50340 (Also in 39, 40, 42)
• Fixed logic bug that rendered certain window types un-resizable on MAS builds. #50354 (Also in 40, 42)
• Fixed utilityProcess exit event reporting incorrect exit codes on Windows when the exit code has the high bit. #50386 (Also in 40, 42)
• Fixed window freeze when failing to enter/exit fullscreen on macOS. #50343 (Also in 39, 40, 42)
• Improved the appearance of shadows and borders on frameless windows on Wayland. #50213

Other Changes

• Added support for using a proxy during yarn install. #50350 (Also in 39, 40, 42)
• Updated Chromium to 146.0.7680.153. #50346

electron v41.0.3

Release Notes for v41.0.3

Fixes

• Added additional ASAR support to additional fs copy methods. #50286 (Also in 39, 40, 42)
• Fixed an issue where some DevTools functionality didn't work as expected. #50276 (Also in 40, 42)
• Fixed user resizing of transparent windows on win32 platform. #50298 (Also in 39, 40, 42)

Other Changes

• Updated Chromium to 146.0.7680.80. #50262

Documentation

• Documentation changes: #50293

electron v41.0.2

... (truncated)

Commits

• eb49ed9 fix: outdated execution path for COM activation (#50519)
• 7e36ac6 chore: bump chromium to 146.0.7680.166 (41-x-y) (#50458)
• cbae32a fix: [a11y] fire AXMenuOpened event when ARIA menu is added to DOM (#50506)
• 880b1e0 refactor: remove dead named-window lookup from guest-window-manager (#50497)
• aedea57 fix: hex-encode Windows notification icon temp filenames (#50483)
• 707541d fix: fall back to default DPI when GTK returns 0 on Linux (#50489)
• 3dcb641 fix: crash calling OSR shared texture release() after texture GC'd (#50501)
• 878a763 fix: crash in clipboard.readImage() on malformed image data (#50492)
• 6a8d187 feat: add accessibilityDisplayShouldDifferentiateWithoutColor on macOS (#50408)
• 2962293 feat: support notification priority on Windows (#50382)
• Additional commits viewable in compare view

Updates brace-expansion from 1.1.12 to 1.1.13

Commits

• 6c353ca 1.1.13
• 7fd684f Backport fix for GHSA-f886-m6hf-6m8v (#95)
• See full diff in compare view

Updates tar from 6.2.1 to 7.5.13

Changelog

Sourced from tar's changelog.

Changelog

7.5

• Added zstd compression support.
• Consistent TOCTOU behavior in sync t.list
• Only read from ustar block if not specified in Pax
• Fix sync tar.list when file size reduces while reading
• Sanitize absolute linkpaths properly
• Prevent writing hardlink entries to the archive ahead of their file target

7.4

• Deprecate onentry in favor of onReadEntry for clarity.

7.3

• Add onWriteEntry option

7.2

• DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

• Update minipass to v7.1.0
• Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

• Drop support for node <18
• Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
• Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
• Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
• Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits

• d6611ae 7.5.13
• 119c401 fix(extract): prevent raced symlink writes outside cwd
• 2a294d3 7.5.12
• 01082a4 fix: reject top promise on floating addFilesAsync rejections
• dd1c36a linting
• 35a1ffe doc: more clarity in security warning
• bf776f6 7.5.11
• f48b5fa prevent escaping symlinks with drive-relative paths
• 97cff15 docs: more security info
• 2b72abc 7.5.10
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.