chore(deps-dev): bump electron from 39.2.6 to 42.4.0

[dependabot]

Bumps electron from 39.2.6 to 42.4.0.

Release notes

Sourced from electron's releases.

electron v42.4.0

Release Notes for v42.4.0

Fixes

• Fixed a browser process crash when calling webContents.reload() or navigating synchronously from the render-process-gone event; the event is now emitted after the renderer's teardown notification has completed. #51916 (Also in 43)
• Fixed an issue on Linux and Windows where frameless windows would shrink when calling win.center(). Additionally, fixed an issue where frameless windows would appear slightly off-center on Windows. #51921 (Also in 41, 43)
• Fixed an issue where the "Toggle Developer Tools" menu item failed to function correctly with BaseWindow. #51903 (Also in 41, 43)
• Fixed sandboxed preload scripts running a stale cached version after the script was modified without its file size changing. #51933 (Also in 43)
• Fixed the context menu in a detached DevTools window focusing the inspected page's window instead of the DevTools window. #51864 (Also in 43)

Other Changes

• Backported fixes from upstream Chromium and V8. #51934
• Security: backported fixes for CVE-2026-9115, CVE-2026-9116. #51904
• Updated Chromium to 148.0.7778.254. #51878
• Updated Node.js to v24.16.0. #51747

electron v42.3.3

Release Notes for v42.3.3

Fixes

• Fixed a crash when calling node:wasi functions with fast API calls enabled. #51867
• Improved external resize band positioning and scaling for frameless windows on Windows. #51561 (Also in 41, 43)

Other Changes

• Fixed silent data truncation in Buffer/TextEncoder APIs and a crash in fs.writeFileSync with non-ASCII strings on Apple Silicon. #51849 (Also in 41, 43)
• Improved app startup performance — the main process now boots from an embedded Node.js startup snapshot, framework bundles and preload scripts are cached as compiled V8 bytecode, and sandboxed renderer startup data is pushed ahead of navigation instead of fetched via blocking IPC. Preload stack traces now show the correct file path and line number. #51831 (Also in 43)

electron v42.3.2

Release Notes for v42.3.2

• Fixed a crash in simdutf when processing strings in the main process

electron v42.3.1

Release Notes for v42.3.1

Fixes

• Fixed a desktopCapturer crash when sharing a window on Windows. #51787

Other Changes

• Enabled ThinLTO on macOS builds. #51823 (Also in 43)
• Improved performance of Linux and Windows release builds by enabling ThinLTO link-time optimization for the main Electron binary. #51821 (Also in 43)
• Improved performance of app.isDefaultProtocolClient() and app.setAsDefaultProtocolClient() on Linux. #51627
• Improved runtime performance. #51828
• Updated Chromium to 148.0.7778.218. #51790

electron v42.3.0

Release Notes for v42.3.0

... (truncated)

Commits

• 86ce4b4 chore: cherry-pick 9 changes from chromium, v8 (#51934)
• 06b2741 fix: invalidate sandboxed preload code cache when source changes without chan...
• ef43f3c fix: emit render-process-gone outside the process-death notification (#51916)
• d347b94 fix: win.center() sets the correct size and position on frameless windows (#5...
• c2b9c9f test: don't import from ../lib in API tests (#51914)
• dd211e7 chore: bump node to v24.16.0 (42-x-y) (#51747)
• 219ef5f chore: bump chromium to 148.0.7778.254 (42-x-y) (#51878)
• a08a3e2 refactor: use @​electron-internal/extract-zip in the npm package (#51895)
• f8731f2 fix: toggle devtools menu item for BaseWindow (#51903)
• 55b29e8 chore: cherry-pick 1 changes from chromium (#51904)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity.
It will be closed if no further activity occurs within 7 days.
If you're still working on this, please leave a comment to keep it open.

[github-actions]

This pull request has been automatically closed due to inactivity.
Feel free to reopen and update if you'd like to continue working on this.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.