Skip to content

Commit ed42b34

Browse files
author
Akos Kitta
committed
chore(deps): update electron@25.5.0
- Update to `electron-builder@24.6.3`. - Fix obsolete electron security section in the development docs. Signed-off-by: Akos Kitta <a.kitta@arduino.cc>
1 parent 3f0a6b7 commit ed42b34

File tree

3 files changed

+161
-187
lines changed

3 files changed

+161
-187
lines changed

Diff for: docs/development.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ In Electron, the process that runs the main entry JavaScript file is called the
2020

2121
By default, whenever the _Electron main_ process creates a web page, it will instantiate a new `BrowserWindow` instance. Since Electron uses Chromium for displaying web pages, Chromium's multi-process architecture is also used. Each web page in Electron runs in its own process, which is called the renderer process. Each `BrowserWindow` instance runs the web page in its own renderer process. When a `BrowserWindow` instance is destroyed, the corresponding renderer process is also terminated. The main process manages all web pages and their corresponding renderer processes. Each renderer process is isolated and only cares about the web page running in it.<sup>[[1]]</sup>
2222

23-
In normal browsers, web pages usually run in a sandboxed environment, and accessing native resources are disallowed. However, Electron has the power to use Node.js APIs in the web pages allowing lower-level OS interactions. Due to security reasons, accessing native resources is an undesired behavior in the IDE. So by convention, we do not use Node.js APIs. (Note: the Node.js integration is [not yet disabled](https://github.com/eclipse-theia/theia/issues/2018) although it is not used). In the IDE, only the _backend_ allows OS interaction.
23+
In normal browsers, web pages usually run in a sandboxed environment, and accessing native resources are disallowed. However, Electron has the power to use Node.js APIs in the web pages allowing lower-level OS interactions. Due to security reasons, accessing native resources is an undesired behavior in the IDE. So [`nodeIntegration`](https://www.electronjs.org/docs/latest/tutorial/security#2-do-not-enable-nodejs-integration-for-remote-content) is disabled, and [context isolation](https://www.electronjs.org/docs/latest/tutorial/context-isolation) is enabled.
2424

2525
The _backend_ process is responsible for:
2626

Diff for: electron-app/package.json

+2-2
Original file line numberDiff line numberDiff line change
@@ -28,8 +28,8 @@
2828
"compression-webpack-plugin": "^9.0.0",
2929
"copy-webpack-plugin": "^8.1.1",
3030
"dateformat": "^5.0.3",
31-
"electron": "^23.2.4",
32-
"electron-builder": "23.6.0",
31+
"electron": "^25.5.0",
32+
"electron-builder": "^24.6.3",
3333
"electron-notarize": "^1.1.1",
3434
"execa": "^7.1.1",
3535
"file-type": "^18.5.0",

0 commit comments

Comments
 (0)