app-builder-lib 26.12.1 → 26.13.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "app-builder-lib",
   "description": "electron-builder lib",
-  "version": "26.12.1",
+  "version": "26.13.1",
   "main": "out/index.js",
   "files": [
     "out",
@@ -47,7 +47,6 @@
   "bugs": "https://github.com/electron-userland/electron-builder/issues",
   "homepage": "https://github.com/electron-userland/electron-builder",
   "dependencies": {
-    "@develar/schema-utils": "~2.6.5",
     "@electron/asar": "3.4.1",
     "@electron/fuses": "^1.8.0",
     "@electron/get": "^3.0.0",
@@ -57,6 +56,9 @@
     "@electron/universal": "2.0.3",
     "@malept/flatpak-bundler": "^0.4.0",
     "@types/fs-extra": "9.0.13",
+    "@peculiar/webcrypto": "^1.7.1",
+    "ajv": "^8.18.0",
+    "asn1js": "^3.0.10",
     "async-exit-hook": "^2.0.1",
     "chromium-pickle-js": "^0.2.0",
     "ci-info": "4.3.1",
@@ -72,6 +74,7 @@
     "json5": "^2.2.3",
     "lazy-val": "^1.0.5",
     "minimatch": "^10.2.5",
+    "pkijs": "^3.4.0",
     "plist": "3.1.0",
     "proper-lockfile": "^4.1.2",
     "resedit": "^1.7.0",
@@ -81,9 +84,9 @@
     "tiny-async-pool": "1.3.0",
     "unzipper": "^0.12.3",
     "which": "^5.0.0",
-    "builder-util-runtime": "9.6.2",
-    "builder-util": "26.12.1",
-    "electron-publish": "26.12.1"
+    "builder-util": "26.13.0",
+    "electron-publish": "26.13.0",
+    "builder-util-runtime": "9.6.3"
   },
   "///": "babel in devDependencies for proton tests",
   "devDependencies": {
@@ -117,12 +120,12 @@
     "@types/unzipper": "^0.10.11",
     "@types/which": "^3.0.4",
     "toml": "^3.0.0",
-    "electron-builder-squirrel-windows": "26.12.1",
-    "dmg-builder": "26.12.1"
+    "dmg-builder": "26.13.1",
+    "electron-builder-squirrel-windows": "26.13.1"
   },
   "peerDependencies": {
-    "dmg-builder": "26.12.1",
-    "electron-builder-squirrel-windows": "26.12.1"
+    "dmg-builder": "26.13.1",
+    "electron-builder-squirrel-windows": "26.13.1"
   },
   "//": "electron-builder-squirrel-windows and dmg-builder added as dev dep for tests (as otherwise `require` doesn't work using Yarn 2)",
   "typings": "./out/index.d.ts"

package/scheme.json

@@ -67,7 +67,7 @@
               "type": "null"
             }
           ],
-          "description": "The compression algorithm passed to the AppImage build tool.\n\n**FUSE2 toolset (`\"0.0.0\"` or unset):** `\"xz\"` is forwarded as `--compression xz`.\n`\"gzip\"`, `\"zstd\"`, `null`, and unset all fall through to the root-level `compression` option:\n- `\"maximum\"` → `--compression xz` (overrides any per-target gzip/zstd value)\n- anything else → flag omitted (mksquashfs defaults to gzip)\n\n**Static-runtime toolsets (`>= 1.0.0`):** `\"gzip\"` and `\"zstd\"` are forwarded\ndirectly. `\"xz\"` is mapped to `\"zstd\"` (nearest supported equivalent). `null`\nor unset falls through to the root-level `compression` option:\n- `\"store\"` → `\"gzip\"`\n- `\"normal\"` / `\"maximum\"` / unset → `\"zstd\"`"
+          "description": "The compression algorithm passed to the AppImage build tool.\n\n**FUSE2 toolset (`\"0.0.0\"` or unset):** only `\"xz\"` and `\"gzip\"` are forwarded\nto mksquashfs (`-comp <value>`); `\"xz\"` additionally passes `-Xdict-size 100% -b 1048576`.\n`\"zstd\"`, `null`, and unset fall through to the root-level `compression` option:\n- `\"maximum\"` → `\"xz\"`\n- anything else → flag omitted (mksquashfs defaults to gzip)\n\n**Static-runtime toolsets (`>= 1.0.0`):** `\"gzip\"` and `\"zstd\"` are forwarded\ndirectly. `\"xz\"` is mapped to `\"zstd\"` (nearest supported equivalent). `null`\nor unset falls through to the root-level `compression` option:\n- `\"store\"` → `\"gzip\"`\n- `\"normal\"` / `\"maximum\"` / unset → `\"zstd\"`"
         },
         "description": {
           "description": "As [description](https://www.electron.build/configuration#description) from application package.json, but allows you to specify different for Linux.",
@@ -953,6 +953,22 @@
           },
           "type": "array"
         },
+        "filesystem": {
+          "anyOf": [
+            {
+              "enum": [
+                "APFS",
+                "HFS+"
+              ],
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": "HFS+",
+          "description": "The filesystem for the DMG volume (e.g. `\"APFS\"` or `\"HFS+\"`)\nThis will be changed to APFS in the next major release, so it is recommended to set it explicitly to HFS+ if you want to keep using HFS+ (e.g. for better compatibility with older macOS versions)."
+        },
         "format": {
           "default": "UDZO",
           "description": "The disk image format. `ULFO` (lzfse-compressed image (OS X 10.11+ only)).",
@@ -9159,6 +9175,11 @@
       ],
       "description": "Directories for build resources"
     },
+    "disableAsarIntegrity": {
+      "default": false,
+      "description": "Whether to skip ASAR integrity hash computation. Useful for custom electron forks with encrypted ASAR support where the header is not readable by standard tools.",
+      "type": "boolean"
+    },
     "disableDefaultIgnoredFiles": {
       "default": false,
       "description": "Whether to exclude all default ignored files(https://www.electron.build/contents#files) and options. Defaults to `false`.",

package/templates/linux/after-remove.tpl

@@ -1,15 +1,27 @@
 #!/bin/bash
 
 # Delete the link to the binary
+# update-alternatives --remove <name> <path>: 'path' must be the registered alternative binary,
+# not the generic symlink — see https://man7.org/linux/man-pages/man1/update-alternatives.1.html
 if type update-alternatives >/dev/null 2>&1; then
-    update-alternatives --remove '${executable}' '/usr/bin/${executable}'
+    update-alternatives --remove '${executable}' '/opt/${sanitizedProductName}/${executable}'
 else
     rm -f '/usr/bin/${executable}'
 fi
 
 APPARMOR_PROFILE_DEST='/etc/apparmor.d/${executable}'
 
-# Remove apparmor profile.
+# Remove and unload apparmor profile.
 if [ -f "$APPARMOR_PROFILE_DEST" ]; then
+  # Unload the profile from the running kernel before deleting the file so the
+  # policy is not left enforced until the next reboot.  Mirror the chroot guard
+  # used in the after-install script — live AppArmor operations are not
+  # meaningful inside a chroot.
+  # https://wiki.debian.org/AppArmor/HowToUse
+  if apparmor_status --enabled > /dev/null 2>&1; then
+    if ! { [ -x '/usr/bin/ischroot' ] && /usr/bin/ischroot; } && hash apparmor_parser 2>/dev/null; then
+      apparmor_parser --remove "$APPARMOR_PROFILE_DEST" || true
+    fi
+  fi
   rm -f "$APPARMOR_PROFILE_DEST"
 fi

package/templates/nsis/include/allowOnlyOneInstallerInstance.nsh

@@ -31,10 +31,8 @@
 
 !macro CHECK_APP_RUNNING
   Var /GLOBAL CmdPath
-  Var /GLOBAL FindPath
   Var /GLOBAL PowerShellPath
   StrCpy $CmdPath "$SYSDIR\cmd.exe"
-  StrCpy $FindPath "$SYSDIR\find.exe"
   StrCpy $PowerShellPath "$SYSDIR\WindowsPowerShell\v1.0\powershell.exe"
   !ifmacrodef customCheckAppRunning
     !insertmacro customCheckAppRunning
@@ -69,10 +67,12 @@
     Pop ${_RETURN}
   ${else}
     !ifdef INSTALL_MODE_PER_ALL_USERS
-      ${nsProcess::FindProcess} "${_FILE}" ${_RETURN}
+      # exact match via findstr anchored to the start of each CSV line
+      nsExec::Exec `"$CmdPath" /C tasklist /FI "IMAGENAME eq ${_FILE}" /FO CSV /NH | "$SYSDIR\findstr.exe" /B /I /C:"\"${_FILE}\""`
+      Pop ${_RETURN}
     !else
-      # find process owned by current user
-      nsExec::Exec `"$CmdPath" /C tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq ${_FILE}" /FO CSV | "$FindPath" "${_FILE}"`
+      # find process owned by current user — anchored exact match
+      nsExec::Exec `"$CmdPath" /C tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq ${_FILE}" /FO CSV /NH | "$SYSDIR\findstr.exe" /B /I /C:"\"${_FILE}\""`
       Pop ${_RETURN}
     !endif
   ${endIf}