diff --git a/desktop/electron/package.json b/desktop/electron/package.json index 45a07bbfd8..b31f30e8a5 100644 --- a/desktop/electron/package.json +++ b/desktop/electron/package.json @@ -33,7 +33,7 @@ "launcher-live": "node test/launcher_live.mjs" }, "devDependencies": { - "electron": "44.7.2", + "electron": "45.1.0", "electron-builder": "^26.18.0", "playwright": "1.64.1" }, diff --git a/desktop/electron/pnpm-lock.yaml b/desktop/electron/pnpm-lock.yaml index 7c84695e8e..cb8cf29991 100644 --- a/desktop/electron/pnpm-lock.yaml +++ b/desktop/electron/pnpm-lock.yaml @@ -9,8 +9,8 @@ importers: .: devDependencies: electron: - specifier: 44.7.2 - version: 44.7.2(supports-color@7.2.0) + specifier: 45.1.0 + version: 45.1.0(supports-color@7.2.0) electron-builder: specifier: ^26.18.0 version: 26.18.0(electron-builder-squirrel-windows@26.18.0)(supports-color@7.2.0) @@ -374,8 +374,8 @@ packages: resolution: {integrity: sha512-bO3y10YikuUwUuDUQRM4KfwNkKhnpVO7IPdbsrejwN9/AABJzzTQ4GeHwyzNSrVO+tEH3/Np255a3sVZpZDjvg==} engines: {node: '>=8.0.0'} - electron@44.7.2: - resolution: {integrity: sha512-u3Pbz0Hi1sSSwBMz2v8LiagsfUG4QURPUe/qphM+g4THKP8o4BYdnuboyhlLO8HIC/KfV5rvltyacbP4jEq9yw==} + electron@45.1.0: + resolution: {integrity: sha512-i7qKVAh/KR5v1pf56NhGGX2QYHcdjvLgS7koL6ui50c+zUDGLRunR95nXcTpHPURKOQ4GDBG8BmXiDgOQ8DD0A==} engines: {node: '>= 22.12.0'} hasBin: true @@ -1551,7 +1551,7 @@ snapshots: transitivePeerDependencies: - supports-color - electron@44.7.2(supports-color@7.2.0): + electron@45.1.0(supports-color@7.2.0): dependencies: '@electron-internal/extract-zip': 1.0.5 '@electron/get': 5.1.0(supports-color@7.2.0) diff --git a/docs/STUDIO_RELEASE.md b/docs/STUDIO_RELEASE.md index 4da7b2030f..f47d45f91d 100644 --- a/docs/STUDIO_RELEASE.md +++ b/docs/STUDIO_RELEASE.md @@ -242,7 +242,7 @@ What is signed: | File | Signed by | Why | | --- | --- | --- | | The release PE files | the project | Windows loads each one, and Smart App Control judges an unsigned DLL on its own reputation. | -| `d3dcompiler_47.dll`, `dxil.dll` | Microsoft, left as shipped | Verified to carry a trusted, timestamped signature from an `O=Microsoft Corporation` signer under a Microsoft PCA, chaining to Microsoft Root Certificate Authority 2010 by thumbprint. | +| `d3dcompiler_47.dll` | Microsoft, left as shipped | Verified to carry a trusted, timestamped signature from an `O=Microsoft Corporation` signer under a Microsoft PCA, chaining to Microsoft Root Certificate Authority 2010 by thumbprint. | | The installer | the project | Signed only after `windows-verify-package` has matched its contents. | | `resources/elevate.exe` | nobody | `windows-package` writes it after the payload is signed; its SHA-256 is pinned instead. | | The NSIS uninstaller | nobody | electron-builder signs it only through an in-process hook, which would put the session in the packaging job. | @@ -254,7 +254,7 @@ A bundle holding a PE file the list does not name fails with `studio-signing.und The release PE files: - `Reasonix Studio.exe`, `resources/bin/reasonix-studio-host.exe`, `resources/bin/cua-driver.exe` -- `dxcompiler.dll`, `ffmpeg.dll`, `vk_swiftshader.dll`, `vulkan-1.dll` +- `dxcompiler.dll`, `electron_wer.dll`, `ffmpeg.dll`, `vk_swiftshader.dll`, `vulkan-1.dll` | Rule | Detail | | --- | --- | diff --git a/scripts/windows-signing-lib.ps1 b/scripts/windows-signing-lib.ps1 index 2269220b3b..1de2ceb806 100644 --- a/scripts/windows-signing-lib.ps1 +++ b/scripts/windows-signing-lib.ps1 @@ -12,6 +12,7 @@ $script:PeExtensions = @(".exe", ".dll", ".node") $script:ReleaseSignedPe = @( "Reasonix Studio.exe", "dxcompiler.dll", + "electron_wer.dll", "ffmpeg.dll", "resources/bin/cua-driver.exe", "resources/bin/reasonix-studio-host.exe", @@ -20,8 +21,7 @@ $script:ReleaseSignedPe = @( ) # Shipped by Electron already signed by Microsoft, and kept that way. $script:MicrosoftSignedPe = @( - "d3dcompiler_47.dll", - "dxil.dll" + "d3dcompiler_47.dll" ) # Microsoft Root Certificate Authority 2010, the root their signer chains to. $script:MicrosoftRootThumbprint = "3B1EFD3A66EA28B16697394703A72CA340A05BD5"