[dependabot]

Bumps electron from 39.8.10 to 42.11.9.

Release notes

Sourced from electron's releases.

electron v42.11.9

Release Notes for v42.11.9

Fixes

• Fixed clipboard.read(), readText() and has() resolving seconds late on Linux while the app was idle. #54310 (Also in 43, 44, 45)
• Fixed fs.rmSync failing to remove read-only files on Windows. #54257 (Also in 43, 44, 45)
• Fixed pointerLock permission requests from some iframes reporting the parent frame. #54466 (Also in 43, 44, 45)
• Fixed utilityProcess dropping stdout/stderr output that the child wrote immediately before exiting. #54332 (Also in 43, 44, 45)
• Fixed WebAssembly exception handlers failing to catch, or crashing during tier-up, in modules using wasm exceptions. #54236
• Fixed WebAssembly modules loaded from the code cache crashing or throwing RuntimeError: unreachable after updating between certain patch releases. #54239 (Also in 43, 44, 45)

electron v42.11.8

Release Notes for v42.11.8

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Dawn, PDFium and V8. #54223

electron v42.11.7

Release Notes for v42.11.7

Fixes

• Fixed a spurious "sandboxed_renderer.bundle.js script failed to run" console error when DevTools attached to a sandboxed frame before its first navigation. #54175 (Also in 43)
• Fixed an "Invalid guestInstanceId" error when removing a loaded <webview> from the DOM. #54098 (Also in 43, 44, 45)

electron v42.11.6

Release Notes for v42.11.6

Other Changes

• Backported fixes from upstream Chromium, Dawn, PDFium, Skia and V8. #54083

electron v42.11.5

Release Notes for v42.11.5

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Skia and V8. #53986

electron v42.11.4

Release Notes for v42.11.4

Fixes

• Fixed a renderer crash when an iframe was removed right after loading with nodeIntegrationInSubFrames enabled and sandbox disabled, e.g. on pages that embed Meta Pixel. #53886 (Also in 43, 44, 45)

Other Changes

... (truncated)

Commits

• d460d61 test: parse all custom page size PDFs in one pdf.js process (#54539)
• 05a599e test: wait for focus before requesting pointer lock in spec (#54531)
• 00e2f2e test: wait for earlier Electron workers to exit before serial specs (#54509)
• 5bbb44e test: fix flaky navigationHistory.restore PageState spec (#54478)
• 77ffb7b test: fix chrome.tabs reload spec race with the reload commit (#54477)
• 1755ee5 fix: attribute pointer lock requests from in-process iframes to the requestin...
• b969f46 build: update PGO profiles (#54472)
• 759b912 ci: send child-process logging to a file on the Windows test legs (42-x-y) (#...
• ba66580 test: run the spec suite with vitest (42-x-y) (#54414)
• 840f152 ci: minimize the runner agent's terminal window before Windows tests (#54367)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
device-sdk-ts-sample	Ready	Preview	Oct 23, 2026 4:29pm UTC
doc-device-management-kit	Ready	Preview	Oct 23, 2026 4:29pm UTC

[Copilot]

🔵 Needs a closer look

The three-major-version Electron upgrade needs packaged DevTools startup and functionality validation on macOS and Linux.

No open issues 🎉

1 file not reviewed

• pnpm-lock.yaml: Generated file

What changed in this PR

Upgrades Electron from 39.8.10 to 42.11.9 for the DMK desktop DevTools app.

Changes:

• Updates the shared Electron version in the workspace catalog.
• Refreshes lockfile resolutions and Electron dependencies, raising the required installation Node.js version to 22.12.0.

File	Description
pnpm-workspace.yaml	Pins the shared Electron dependency to 42.11.9.
pnpm-lock.yaml	Updates Electron, peer resolutions, and transitive dependencies.

_{Review effort: Balanced}