Highlights
- Electron 44 / Chromium 152, up from Electron 39 / Chromium 142.
- The spell checker no longer marks correct words as misspelled. About 1 in 10 dictionary loads came out broken, and words such as Italian
casaorlibrostayed underlined until the dictionaries were reloaded. (#709) - Spelling suggestions now work for words containing an apostrophe, such as English contractions. Previously, right-clicking one of them showed no suggestions.
- Spell-check dictionaries updated to their latest releases for 18 of the 19 languages. Brazilian Portuguese stays on 1.2.2 on purpose, because the newest version marks common words as misspelled.
npx electronimworks on Node.js 22, 24 and 26. On Node.js 26 the Electron download used to stall and leave an unusable install.- Smaller downloads: test files are no longer included in the npm package or the app bundle. (#711)
Security
- "Open link in external browser" now only opens
http,https,ftpandftpslinks, the same rule that already applied to link redirects. Before, a web page could hand any link type the desktop can open (for examplefile://) straight to the operating system. (#711) - The spell checker now escapes the misspelled word before using it. The word comes from the web page, and a specially crafted one could run code in the spell-check process.
- Dependency security updates: Electron/Chromium, plus
axios(1.13.2 → 1.20.0) andmarkdown-it(14 → 15).
Fixes
- Closing a dialog with Esc now fully closes it. Before, each open/close left a hidden page running in the background. (#711)
macOS
- The app is now ad-hoc signed. Electron 44 needs this to show notifications. The app is still not signed with an Apple Developer ID, so you still need the
xattr -crstep from Troubleshooting. (#714)
What's Changed
- chore(deps): bump electron from 39.1.2 to 39.2.1 by @manusa with @Copilot in #690
- chore(deps): bump electron from 39.2.1 to 39.2.3 by @manusa with @Copilot in #693
- docs: update Chromium version from 140 to 142 by @manusa with @Copilot in #695
- chore(deps): update all dependencies, plus the fixes they uncovered by @manusa in #709
- fix: unresponsive window, missing spell-check context menu, unvalidated external links by @manusa in #711
- perf(main): build the app menu ahead of the click instead of on it by @manusa in #712
- test(e2e): cover closing the app menu with the scrim and reopening it by @manusa in #713
- fix(build): ad-hoc sign the macOS app so notifications are delivered by @manusa in #714
Full Changelog: v0.0.122...v0.0.123