Update dependency electron-builder to v26.18.0 by renovate[bot] · Pull Request #2814 · eesast/web

renovate · 2026-10-29T20:57:00Z

This PR contains the following updates:

Package	Change	Age	Confidence
electron-builder (source)	`26.15.3` → `26.18.0`

Release Notes

electron-userland/electron-builder (electron-builder)

`v26.18.0`

Compare Source

What's Changed

fix(nsis): warn when differentialPackage "store-asar" finds no app.asar (v26 backport of #10246) by @claude[bot] in #10249
test(archive): make stored-member assertions independent of 7-Zip folder order (v26 backport of #10247) by @claude[bot] in #10251
fix(nsis): keep installer extraction in sync with the payload format when useZip is set (v26 backport of #10248) by @claude[bot] in #10252
fix(pnpm): read the app's own package.json when its name matches a dependency (v26 backport of #10278) by @claude[bot] in #10282
fix: import blake2b from @noble/hashes/blake2.js by @mmaietta in #10292
fix: encode GitLab package path segments (v26 backport of #10140) by @claude[bot] in #10299
fix(updater): validate cached update filenames (v26 backport of #10115) by @claude[bot] in #10300
fix: escape Squirrel project URLs in nuspec XML (v26 backport of #10141) by @claude[bot] in #10301
fix: enforce workspace path boundaries for asar (v26 backport of #10135) by @claude[bot] in #10314
fix(app-builder-lib): bump @electron/rebuild to 4.2.1 (v26 backport of #10308) by @claude[bot] in #10315
feat(blockmap): finer content-defined blocks for the stored app.asar region (v26 backport of #10235) by @imlucas in #10309
fix(pnpm): collect packages that pnpm list only prints as deduped stubs by @mmaietta in #10323
fix: contain mapped app file destinations (v26 backport of #10137) by @claude[bot] in #10330
fix(snap): don't request allow-sandbox by default for core24 (v26 backport of #10294) by @claude[bot] in #10331
fix(snap): don't delete chrome-sandbox from the shared linux-unpacked dir in template builds (v26 backport of #10327) by @yokomohoyo in #10333
fix(forge): make electron-builder makers loadable by current Electron Forge (v26 backport) by @claude[bot] in #10352
chore(deploy): Release (v26) by @electron-builder-release-bot[bot] in #10250

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.17.0...electron-builder@26.18.0

`v26.17.0`

Compare Source

What's Changed

fix: detect pnpm workspace root on Windows without shelling out to pwd (v26 backport) by @claude[bot] in #10189
test: pin globTest "failed peer dep" deps via lockfile fixture and update snapshot for moment 2.31.0 (v26 backport of #10197) by @claude[bot] in #10198
feat(nsis): "store-asar" mode for proportional differential updates (v26 backport) by @claude[bot] in #10201
test(v26): bump package manager pins and disable dependency lifecycle scripts in fixture installs (backport #10199) by @claude[bot] in #10203
fix(app-builder-lib): resolve pnpm deps omitted from deduped list output by declared range (backport #10200) by @claude[bot] in #10207
fix(pkg): add rootVolumeOnly to for macOS 26 Installer prompt (v26 backport of #10193) by @claude[bot] in #10211
fix(node-module-collector): clear error on empty output and fall back to traversal when a collector throws (v26 backport of #10210) by @claude[bot] in #10213
fix(electron-updater): keep cached blockmap consistent with cached installer (v26 backport of #10098) by @claude[bot] in #10163
fix(updater): make multi-range differential downloads work on real servers (v26 backport of #10192) by @claude[bot] in #10219
fix(flatpak): stop linux.files from corrupting flatpak files (v26 backport of #10209 + #10227) by @claude[bot] in #10229
fix(pnpm-collector): pick in-range nested deps with pnpm 11 hoisted layout (v26) by @claude[bot] in #10230
chore(deploy): Release (v26) by @electron-builder-release-bot[bot] in #10191

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.16.1...electron-builder@26.17.0

`v26.16.1`

Compare Source

What's Changed

fix(squirrel): backport elevate.exe appOutDir race fix to v26 (#9852) by @claude[bot] in #10157
fix(mac): use keychain password for set-key-partition-list (v26 backport of #10101) by @claude[bot] in #10172
fix(win): only log "signing with signtool.exe" when signing actually runs by @claude[bot] in #10171
chore(CI): auto-label PRs targeting backports to release/v26 (#10158) by @mmaietta in #10166
fix(mac): Retain Electron and Chromium license files on macOS (v26 backport of #10174) by @claude[bot] in #10177
fix: prevent infinite recursion in node module collection when a package depends on itself (backport #10070 to v26) by @claude[bot] in #10180
chore(deploy): Release (v26) by @electron-builder-release-bot[bot] in #10165

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.16.0...electron-builder@26.16.1

`v26.16.0`

Compare Source

What's Changed

feat(v26): offline checksum validation via locally seeded SHASUMS256.txt for air-gapped builds by @claude[bot] in #10047
fix(nsis): accept base64 SHA-512 checksums for custom NSIS toolset downloads by @claude[bot] in #10041
fix: v26 backport of #10050 by @claude[bot] in #10052
feat: add allowMissingDependencies to fail builds on missing production deps (v26, warn-only default) by @claude[bot] in #10074
fix(nsis): run PowerShell with -NoProfile -NonInteractive in allowOnlyOneInstallerInstance checks (v26 backport of #10051) by @claude[bot] in #10053
fix(mac): bump icons toolset to 1.2.3 so small ICNS sizes are written as ic04/ic05 ARGB (v26) by @claude[bot] in #10088
fix(linux): bump linux-tools-mac toolset to 1.0.1 so its binaries run on macOS 15+ (v26) by @claude[bot] in #10102
fix: emit afterSign hook for mas/mas-dev builds (v26) by @claude[bot] in #10072
docs(website): env-driven baseUrl + version dropdown; stop v26 releases from prod-deploying electron.build by @claude[bot] in #10090
fix: pin @noble/hashes to v1 so blockmap generation works on Node < 20.19 by @claude[bot] in #10108
feat: backport escape xml for appxmanifest by @regnete in #10099
chore(deploy): Release (v26) by @electron-builder-release-bot[bot] in #10059

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.7...electron-builder@26.16.0

`v26.15.7`

Compare Source

What's Changed

fix: extract .tar.7z snap template archives correctly (v26 backport of #10003) by @claude[bot] in #10004
fix: don't empty locales dir when electronLanguages uses bare language codes (v26 backport of #10007) by @claude[bot] in #10008
chore(deploy): Release (v26) by @electron-builder-release-bot[bot] in #10005

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.6...electron-builder@26.15.7

`v26.15.6`

Compare Source

What's Changed

fix: bundle a workspace sub-package's production dependencies into app.asar when the package manager resolves to the workspace root by @mmaietta in #9950
fix(nsis): reliably install the main executable and native binaries on x64 and arm64 by @mmaietta in #9989
chore(deploy): Release (v26) by @electron-builder-release-bot[bot] in #9952

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.5...electron-builder@26.15.6

`v26.15.5`

Compare Source

What's Changed

fix: resolve merge-smart-cache CI step failures on branch names with / by @mmaietta in #9931
fix(snap): core24 now runs the app through a generated launcher script by @mmaietta in #9937
fix: updating icons toolset to latest 1.2.1 for broader icns asset generation by @mmaietta in #9943
chore(deploy): Release (v26) by @electron-builder-release-bot[bot] in #9938

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.4...electron-builder@26.15.5

`v26.15.4`

Compare Source

What's Changed

chore: set up release/v26 branch release CD by @mmaietta in #9864
fix(nsis): preserve $(...) LangString references in escaped NSIS define values by @mmaietta in #9917
fix(linux): write executableArgs verbatim into the .desktop Exec by @mmaietta in #9918
chore: backport fixes from master to v26 by @mmaietta in #9921
chore(deploy): Release (v26) by @electron-builder-release-bot[bot] in #9919
chore(deploy): remove runtime-generated test suite from pnpm compile for publish pipeline by @mmaietta in #9923
chore(deploy): Mark .changeset/config.json as skip-worktree by @mmaietta in #9924
chore(deploy): add --publish-branch ${GITHUB_REF_NAME:-master} by @mmaietta in #9926

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.3...electron-builder@26.15.4

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "after 2am and before 8am on friday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-10-29T20:57:03Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: eesast-web@2024.0.0
npm error Found: graphql@17.0.2
npm error node_modules/graphql
npm error   graphql@"17.0.2" from the root project
npm error
npm error Could not resolve dependency:
npm error peer graphql@"^15.0.0 || ^16.0.0" from @apollo/client@3.14.1
npm error node_modules/@apollo/client
npm error   @apollo/client@"3.14.1" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-11-05T21_34_38_054Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-11-05T21_34_38_054Z-debug-0.log

mergify · 2026-10-29T21:00:20Z

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

Queue this pull request

Update dependency electron-builder to v26.18.0

bcec848

renovate-approve Bot approved these changes Oct 29, 2026

View reviewed changes

mergify Bot added the dependencies Pull requests that update a dependency file label Oct 29, 2026

Navigation Menu

Repository navigation

Update dependency electron-builder to v26.18.0 - #2814

Update dependency electron-builder to v26.18.0#2814
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/electron-builder-26.x

Uh oh!

Uh oh!

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

Uh oh!

⚠️ Artifact update problem

File name: package-lock.json

Uh oh!

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants