02119d5a83
fix: import for path now compiles correctly after TypeScript was added ( #85 )
...
* Fixing import for path after TypeScript was added
* Added esModuleInterop: true, fixed breaking imports after change
2023-11-05 11:37:48 -03:00
1948f1caa9
fix: use Typescript for files in `entry-asar` ( #83 )
2023-11-02 19:10:17 -03:00
52fa9a2a78
fix: add missing app ( #81 )
2023-11-02 14:03:37 -03:00
4e631b7ca2
ci: add new issues and pull requests to project board ( #82 )
2023-11-02 09:40:21 -07:00
fe1a0e06b0
build: update debug transitively to fix audit output
2023-10-30 23:18:49 -07:00
9a808beecc
fix: Run app.setAppPath() with the right path ( #78 )
...
* Fix: Run app.setAppPath() with the right path
* Implement feedback <3
* test: Add linting
2023-09-06 08:52:08 -07:00
381ca1a748
chore: fix lint and add lint to CI job ( #79 )
2023-08-31 11:17:25 -07:00
0d2b974dcc
ci: use electronjs/node orb ( #77 )
...
* ci: use electronjs/node orb
* ci: bump orb version
* ci: expand test matrix
* ci: update config
* ci: bump orb version
2023-08-25 06:45:53 -07:00
0cfaddcc77
build(deps): bump semver from 5.7.1 to 5.7.2 ( #74 )
...
Bumps [semver](https://github.com/npm/node-semver ) from 5.7.1 to 5.7.2.
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2 )
---
updated-dependencies:
- dependency-name: semver
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-04 14:40:00 -07:00
fddff57c15
fix: arm64/x64 inputs may contain universal binaries that are not the same ( #62 )
...
* Mach-O types are in big endian format
One of my dependencies for some reason has two universal binaries per platform, and they are not exactly the same bytewise. I'm unsure why. But I am certain they are functional.
In any case, this error is erroneously being thrown since it fails the previous byte comparison match.
```ts
throw new Error(`Can't reconcile two non-macho files ${file}`);
```
CAFEBABE and FEEDFACE magics for universal binaries. This will allow packaging to continue if both the arm and x64 packages have universal binaries.
* Update asar-utils.ts
* Update asar-utils.ts
2023-06-24 23:09:09 -07:00
b02ce7697f
feat: add infoPlistsToIgnore prop to prevent modification ( #72 )
2023-06-24 22:38:09 -07:00
85b1f90f2c
docs: update status badges in README.md ( #73 )
2023-06-07 11:45:28 -07:00
3ecbbd5710
ci: use action-semantic-pull-request ( #71 )
...
Refs https://github.com/electron/electron/pull/33857 .
Since this repo uses CFA releases, enforce semantic commit messages.
2023-05-15 12:11:03 -07:00
8bff0b7579
build: use gen2 macOS resource class ( #65 )
2023-02-07 15:07:33 -08:00
283773eb45
build(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 ( #64 )
...
Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/kornelski/http-cache-semantics/releases )
- [Commits](https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1 )
---
updated-dependencies:
- dependency-name: http-cache-semantics
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-04 13:49:22 -08:00
a99ae94fc2
chore: add LICENSE file to match package.json ( #63 )
2023-01-31 11:14:06 -08:00
0d70c1c39f
chore: set @wg-ecosystem as CODEOWNERS ( #60 )
2023-01-25 15:23:49 -08:00
ba587f0a08
build: use cfa orb
2022-12-24 17:09:55 +13:00
580002844b
build: update dependencies to clean up 'yarn audit'
2022-11-26 19:08:03 -08:00
365775311f
fix: update dir-compare for minimatch redos
2022-11-26 18:58:59 -08:00
1fc0005ae8
fix: merged ASAR does not unpack when there is only one unpacked file ( #55 )
2022-10-18 17:17:11 -07:00
64cbc83faf
build: configure semantic release for main branch
2022-10-18 16:08:05 -07:00
691e4ef31d
fix: migrate from asar to @electron/asar
2022-10-18 16:06:38 -07:00
d902197267
build: migrate master <-> main
2022-10-18 16:05:13 -07:00
72a3f83d27
fix: export MakeUniversalOpts ( #48 )
...
This is to allow other packages to extract specific logic/options with typesafety
2022-10-03 00:05:29 -07:00
3cc1365561
Update config.yml
2022-10-03 00:04:43 -07:00
3a30fe989b
build(deps): bump plist from 3.0.4 to 3.0.5 ( #44 )
...
Bumps [plist](https://github.com/TooTallNate/node-plist ) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases )
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md )
- [Commits](https://github.com/TooTallNate/node-plist/commits )
---
updated-dependencies:
- dependency-name: plist
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-01 13:06:11 -07:00
01dfb8a963
feat: don't lipo binaries that are identical in the x64 and arm64 versions and match an allowlist ( #47 )
...
* fix: Don’t lipo binaries that are already a universal file or the same arch #17
Some Mach-O files may have already been fat binaries and will throw an error if lipoed again.
Co-authored-by: Mitch Cohen <mitch@1password.com>
Co-authored-by: Nick McGuire <nick.mcguire@1password.com>
* Add a x64ArchFiles config key to allow allow-listing of files that are only always x64Arch
Co-authored-by: Andrew Beyer <beyer@1password.com>
Co-authored-by: Mitch Cohen <mitch@1password.com>
Co-authored-by: Nick McGuire <nick.mcguire@1password.com>
2022-06-01 13:05:54 -07:00
3bd173d61a
build(deps): bump minimist from 1.2.5 to 1.2.6
...
Bumps [minimist](https://github.com/substack/minimist ) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases )
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6 )
---
updated-dependencies:
- dependency-name: minimist
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-29 18:07:33 -07:00
479e80d6a9
fix: handle MainMenu.nib mismatch in Electron 18 ( #42 )
2022-03-09 11:04:13 -08:00
2c3c1a60a0
build(deps): bump node-fetch from 2.6.1 to 2.6.7 ( #38 )
...
Bumps [node-fetch](https://github.com/node-fetch/node-fetch ) from 2.6.1 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases )
- [Commits](https://github.com/node-fetch/node-fetch/compare/v2.6.1...v2.6.7 )
---
updated-dependencies:
- dependency-name: node-fetch
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-03 11:50:56 -08:00
cdcbe58dee
build(deps): bump trim-off-newlines from 1.0.1 to 1.0.3 ( #37 )
...
Bumps [trim-off-newlines](https://github.com/stevemao/trim-off-newlines ) from 1.0.1 to 1.0.3.
- [Release notes](https://github.com/stevemao/trim-off-newlines/releases )
- [Commits](https://github.com/stevemao/trim-off-newlines/compare/v1.0.1...v1.0.3 )
---
updated-dependencies:
- dependency-name: trim-off-newlines
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-03 11:50:50 -08:00
38ab1c3559
feat: add option to merge ASARs ( #34 )
...
* feat: fuse ASARs
* Rename, improve
* Rename option
* Drop universal from MACHO_MAGIC
2022-01-25 10:35:57 +13:00
9f86e1dd2b
Merge pull request #30 from v-gjy/patch-1
...
chore: add repository info to package.json
2021-10-19 12:54:39 -05:00
a626463c95
Update package.json to include the repository
...
Hi there!
This change adds the repository property to your package.json file(s). Having this available provides a number of benefits to security tooling. For example, it allows for greater trust by checking for signed commits, contributors to a release and validating history with the project. It also allows for comparison between the source code and the published artifact in order to detect attacks on authors during the publication process.
We validate that we're making a PR against the correct repository by comparing the metadata for the published artifact on [npmjs.com](www.npmjs.com) against the metadata in the package.json file in the repository.
This change is provided by a team at Microsoft -- we're happy to answer any questions you may have. (Members of this team include [@s-tuli](https://github.com/s-tuli ), [@iarna](https://github.com/iarna ), [@rancyr](https://github.com/v-rr ), [@Jaydon Peng](https://github.com/v-jiepeng ), [@Zhongpeng Zhou](https://github.com/v-zhzhou ) and [@Jingying Gu](https://github.com/v-gjy )). If you would prefer that we not make these sorts of PRs to projects you maintain, please just say. If you'd like to learn more about what we're doing here, we've prepared a document talking about both this project and some of our other activities around supply chain security here: [microsoft/Secure-Supply-Chain](https://github.com/microsoft/Secure-Supply-Chain )
This PR provides repository metadata for the following packages:
* @electron/universal
2021-10-18 14:15:32 +08:00
36b58a84f3
feat: add support for auto-merging ElectronAsarIntegrity values
2021-09-15 12:50:03 -07:00
fe8d99e31d
build(deps): bump tar from 4.4.15 to 4.4.19
...
Bumps [tar](https://github.com/npm/node-tar ) from 4.4.15 to 4.4.19.
- [Release notes](https://github.com/npm/node-tar/releases )
- [Changelog](https://github.com/npm/node-tar/blob/main/CHANGELOG.md )
- [Commits](https://github.com/npm/node-tar/compare/v4.4.15...v4.4.19 )
---
updated-dependencies:
- dependency-name: tar
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-09-02 11:43:24 -07:00
d336231787
build(deps): bump path-parse from 1.0.6 to 1.0.7
...
Bumps [path-parse](https://github.com/jbgutierrez/path-parse ) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases )
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7 )
---
updated-dependencies:
- dependency-name: path-parse
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-12 15:49:25 -07:00
6cd85d89aa
chore: update deps
2021-07-30 01:36:40 -07:00
7b1c610963
Merge pull request #25 from electron/dependabot/npm_and_yarn/glob-parent-5.1.2
...
build(deps): bump glob-parent from 5.1.1 to 5.1.2
2021-06-09 09:24:07 -05:00
060a299188
Merge pull request #24 from electron/dependabot/npm_and_yarn/trim-newlines-3.0.1
...
build(deps): bump trim-newlines from 3.0.0 to 3.0.1
2021-06-09 09:23:58 -05:00
64420e4c32
build(deps): bump glob-parent from 5.1.1 to 5.1.2
...
Bumps [glob-parent](https://github.com/gulpjs/glob-parent ) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/gulpjs/glob-parent/releases )
- [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md )
- [Commits](https://github.com/gulpjs/glob-parent/compare/v5.1.1...v5.1.2 )
---
updated-dependencies:
- dependency-name: glob-parent
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 14:22:23 +00:00
2b411ce98b
build(deps): bump trim-newlines from 3.0.0 to 3.0.1
...
Bumps [trim-newlines](https://github.com/sindresorhus/trim-newlines ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/sindresorhus/trim-newlines/releases )
- [Commits](https://github.com/sindresorhus/trim-newlines/commits )
---
updated-dependencies:
- dependency-name: trim-newlines
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 14:22:22 +00:00
e80eed7f69
Merge pull request #23 from electron/dependabot/npm_and_yarn/normalize-url-4.5.1
...
build(deps): bump normalize-url from 4.5.0 to 4.5.1
2021-06-09 09:21:54 -05:00
6053796432
build(deps): bump normalize-url from 4.5.0 to 4.5.1
...
Bumps [normalize-url](https://github.com/sindresorhus/normalize-url ) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/sindresorhus/normalize-url/releases )
- [Commits](https://github.com/sindresorhus/normalize-url/commits )
---
updated-dependencies:
- dependency-name: normalize-url
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 02:23:44 +00:00
0a1d0f916c
build(deps): bump hosted-git-info from 2.8.8 to 2.8.9
...
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info ) from 2.8.8 to 2.8.9.
- [Release notes](https://github.com/npm/hosted-git-info/releases )
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md )
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-12 22:10:18 -07:00
1d4e198ba5
build(deps): bump lodash from 4.17.20 to 4.17.21
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.20 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.20...4.17.21 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-12 22:10:08 -07:00
2f06fcab5f
build(deps): bump handlebars from 4.7.6 to 4.7.7
...
Bumps [handlebars](https://github.com/wycats/handlebars.js ) from 4.7.6 to 4.7.7.
- [Release notes](https://github.com/wycats/handlebars.js/releases )
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md )
- [Commits](https://github.com/wycats/handlebars.js/compare/v4.7.6...v4.7.7 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-12 22:09:50 -07:00
e7d57dd1e5
fix: /usr/bin/file can return errors on MacOS; ignore these errors ( #13 )
...
Co-authored-by: Andrew Plotkin <zarf@ZarfLent.local>
2021-05-08 21:14:36 -07:00
d9b1b4104f
build(deps): bump ssri from 6.0.1 to 6.0.2 ( #19 )
...
Bumps [ssri](https://github.com/npm/ssri ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/npm/ssri/releases )
- [Changelog](https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md )
- [Commits](https://github.com/npm/ssri/compare/v6.0.1...v6.0.2 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-08 21:13:52 -07:00
Baldvin Th
Erik Moura
Masoud Soroush
David Sanders
Samuel Attard
Felix Rieseberg
dependabot[bot]
Koushik Dutta
Samuel Attard
Samuel Attard
Quang Lam
Mike Maietta
Jesse Vincent
Fedor Indutny
Charles Kerr
Jingying Gu
Andrew Plotkin