Skip to content

Conversation

@chunqilu
Copy link
Contributor

Issue

https://t.corp.amazon.com/V2048574065 reported vulnerabilities in Chromium that < 143.0.7499.146 and the dependency chain is Code Editor -> VS Code -> Electron -> Chromium, so we need to update Electron.

Description of Changes

This change is to update to electron 40.0.0 with chromium 144.0.7559.60 as mentioned in https://github.com/electron/electron/releases/tag/v40.0.0 to mitigate Chromium vulnerability.

Testing

build web-embedded and server version and then manually play with IDE and tried file upload, create, etc.

Screenshots/Videos

Additional Notes

Backporting


By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@chunqilu chunqilu requested a review from a team as a code owner January 23, 2026 07:30
@chunqilu
Copy link
Contributor Author

screenshot of local build IDE

Screenshot 2026-01-23 at 08 38 03

@chunqilu chunqilu merged commit 11c95e5 into main Jan 23, 2026
3 checks passed
@chunqilu chunqilu deleted the electron-tar-update branch January 23, 2026 10:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants