Merge pull request #14902 from esengine/dependabot/npm_and_yarn/desktop/electron/electron-45.1.0

chore(deps-dev): bump electron from 44.7.2 to 45.1.0 in /desktop/electron

desktop/electron/package.json

@@ -33,7 +33,7 @@
     "launcher-live": "node test/launcher_live.mjs"
   },
   "devDependencies": {
-    "electron": "44.7.2",
+    "electron": "45.1.0",
     "electron-builder": "^26.18.0",
     "playwright": "1.64.1"
   },

desktop/electron/pnpm-lock.yaml

@@ -9,8 +9,8 @@ importers:
   .:
     devDependencies:
       electron:
-        specifier: 44.7.2
-        version: 44.7.2([email protected])
+        specifier: 45.1.0
+        version: 45.1.0([email protected])
       electron-builder:
         specifier: ^26.18.0
         version: 26.18.0([email protected])([email protected])
@@ -374,8 +374,8 @@ packages:
     resolution: {integrity: sha512-bO3y10YikuUwUuDUQRM4KfwNkKhnpVO7IPdbsrejwN9/AABJzzTQ4GeHwyzNSrVO+tEH3/Np255a3sVZpZDjvg==}
     engines: {node: '>=8.0.0'}
 
-  electron@44.7.2:
-    resolution: {integrity: sha512-u3Pbz0Hi1sSSwBMz2v8LiagsfUG4QURPUe/qphM+g4THKP8o4BYdnuboyhlLO8HIC/KfV5rvltyacbP4jEq9yw==}
+  electron@45.1.0:
+    resolution: {integrity: sha512-i7qKVAh/KR5v1pf56NhGGX2QYHcdjvLgS7koL6ui50c+zUDGLRunR95nXcTpHPURKOQ4GDBG8BmXiDgOQ8DD0A==}
     engines: {node: '>= 22.12.0'}
     hasBin: true
 
@@ -1551,7 +1551,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  electron@44.7.2([email protected]):
+  electron@45.1.0([email protected]):
     dependencies:
       '@electron-internal/extract-zip': 1.0.5
       '@electron/get': 5.1.0([email protected])

docs/STUDIO_RELEASE.md

@@ -242,7 +242,7 @@ What is signed:
 | File | Signed by | Why |
 | --- | --- | --- |
 | The release PE files | the project | Windows loads each one, and Smart App Control judges an unsigned DLL on its own reputation. |
-| `d3dcompiler_47.dll`, `dxil.dll` | Microsoft, left as shipped | Verified to carry a trusted, timestamped signature from an `O=Microsoft Corporation` signer under a Microsoft PCA, chaining to Microsoft Root Certificate Authority 2010 by thumbprint. |
+| `d3dcompiler_47.dll` | Microsoft, left as shipped | Verified to carry a trusted, timestamped signature from an `O=Microsoft Corporation` signer under a Microsoft PCA, chaining to Microsoft Root Certificate Authority 2010 by thumbprint. |
 | The installer | the project | Signed only after `windows-verify-package` has matched its contents. |
 | `resources/elevate.exe` | nobody | `windows-package` writes it after the payload is signed; its SHA-256 is pinned instead. |
 | The NSIS uninstaller | nobody | electron-builder signs it only through an in-process hook, which would put the session in the packaging job. |
@@ -254,7 +254,7 @@ A bundle holding a PE file the list does not name fails with `studio-signing.und
 The release PE files:
 
 - `Reasonix Studio.exe`, `resources/bin/reasonix-studio-host.exe`, `resources/bin/cua-driver.exe`
-- `dxcompiler.dll`, `ffmpeg.dll`, `vk_swiftshader.dll`, `vulkan-1.dll`
+- `dxcompiler.dll`, `electron_wer.dll`, `ffmpeg.dll`, `vk_swiftshader.dll`, `vulkan-1.dll`
 
 | Rule | Detail |
 | --- | --- |

scripts/windows-signing-lib.ps1

@@ -12,6 +12,7 @@ $script:PeExtensions = @(".exe", ".dll", ".node")
 $script:ReleaseSignedPe = @(
     "Reasonix Studio.exe",
     "dxcompiler.dll",
+    "electron_wer.dll",
     "ffmpeg.dll",
     "resources/bin/cua-driver.exe",
     "resources/bin/reasonix-studio-host.exe",
@@ -20,8 +21,7 @@ $script:ReleaseSignedPe = @(
 )
 # Shipped by Electron already signed by Microsoft, and kept that way.
 $script:MicrosoftSignedPe = @(
-    "d3dcompiler_47.dll",
-    "dxil.dll"
+    "d3dcompiler_47.dll"
 )
 # Microsoft Root Certificate Authority 2010, the root their signer chains to.
 $script:MicrosoftRootThumbprint = "3B1EFD3A66EA28B16697394703A72CA340A05BD5"