app-builder-lib 26.15.7 → 26.16.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "app-builder-lib",
   "description": "electron-builder lib",
-  "version": "26.15.7",
+  "version": "26.16.1",
   "main": "out/index.js",
   "files": [
     "out",
@@ -55,7 +55,7 @@
     "@electron/rebuild": "^4.0.4",
     "@electron/universal": "2.0.3",
     "@malept/flatpak-bundler": "^0.4.0",
-    "@noble/hashes": "^2.2.0",
+    "@noble/hashes": "^1.8.0",
     "@peculiar/webcrypto": "^1.7.1",
     "@types/fs-extra": "9.0.13",
     "ajv": "^8.18.0",
@@ -85,9 +85,9 @@
     "tiny-async-pool": "1.3.0",
     "unzipper": "^0.12.3",
     "which": "^5.0.0",
-    "builder-util": "26.15.3",
+    "builder-util": "26.16.0",
     "builder-util-runtime": "9.7.0",
-    "electron-publish": "26.15.3"
+    "electron-publish": "26.16.0"
   },
   "///": "babel in devDependencies for proton tests",
   "devDependencies": {
@@ -121,12 +121,12 @@
     "@types/unzipper": "^0.10.11",
     "@types/which": "^3.0.4",
     "toml": "^3.0.0",
-    "dmg-builder": "26.15.7",
-    "electron-builder-squirrel-windows": "26.15.7"
+    "dmg-builder": "26.16.1",
+    "electron-builder-squirrel-windows": "26.16.1"
   },
   "peerDependencies": {
-    "dmg-builder": "26.15.7",
-    "electron-builder-squirrel-windows": "26.15.7"
+    "dmg-builder": "26.16.1",
+    "electron-builder-squirrel-windows": "26.16.1"
   },
   "//": "electron-builder-squirrel-windows and dmg-builder added as dev dep for tests (as otherwise `require` doesn't work using Yarn 2)",
   "typings": "./out/index.d.ts"

package/scheme.json

@@ -538,6 +538,7 @@
         },
         "url": {
           "default": "https://github.com/electron-userland/electron-builder-binaries/releases/download/nsis-3.0.4.1/nsis-3.0.4.1.7z",
+          "description": "URL to a 7z archive containing the NSIS toolset to use.\nNote: do not use the `nsis-3.0.4.2` bundle — it is known to be broken (see https://github.com/electron-userland/electron-builder/issues/6334). Use `nsis-3.0.4.1` instead.",
           "type": [
             "null",
             "string"
@@ -8962,6 +8963,24 @@
       ],
       "description": "The function (or path to file or module id) to be run after pack and sign but before pack into distributable format.\nReceives an {@link AfterPackContext}. For file/module setup, see {@link beforePack}."
     },
+    "allowMissingDependencies": {
+      "anyOf": [
+        {
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        {
+          "type": [
+            "null",
+            "boolean"
+          ]
+        }
+      ],
+      "default": true,
+      "description": "Whether production dependencies that cannot be resolved during node-module collection are\nallowed — i.e. whether the build should continue with a warning instead of failing.\n\nDuring collection every production dependency must resolve to an installed package on disk. A\ndependency that does not resolve (`cannot find path for dependency` / `dependency not found on\ndisk`) is not bundled, which typically breaks the packaged app at runtime with\n`MODULE_NOT_FOUND`.\n\n- `true` (or omitted — the v26 default): missing production dependencies are only logged as\n  warnings, keeping the historical behavior of the stable 26.x line. (electron-builder 27+\n  defaults to `false` and fails the build instead.)\n- `false` or `null`: the build fails after dependency collection completes, reporting the\n  **complete** list of missing production dependencies at once.\n- `string[]`: the listed dependency names are allowed to be missing; any other missing\n  production dependency fails the build. Entries match the package name of the reported\n  `name@version` entry (e.g. `some-native-module`, `@scope/pkg`), or an exact `name@version`\n  string to allow only that resolved version to be missing.\n\nMissing *optional* dependencies (declared in `optionalDependencies`, e.g. `fsevents` on\nLinux/Windows, or platform-specific packages) are always allowed and never fail the build."
+    },
     "apk": {
       "anyOf": [
         {
@@ -9277,7 +9296,7 @@
           "type": "null"
         }
       ],
-      "description": "The [electron-download](https://github.com/electron-userland/electron-download#usage) options. (legacy)\nAlternatively, you can use [electron/get](https://github.com/electron/get#usage) options."
+      "description": "The [electron-download](https://github.com/electron-userland/electron-download#usage) options. (legacy)\nAlternatively, you can use [electron/get](https://github.com/electron/get#usage) options.\n\n`checksums` (a map of artifact file name → SHA-256 hex) makes checksum validation fully offline —\nwithout it, `@electron/get` fetches `SHASUMS256.txt` from the network on every build, even when the\nartifact itself is already cached. When `checksums` is not configured, electron-builder automatically\npicks up a locally seeded `SHASUMS256.txt-<version>` (or `SHASUMS256.txt`) file at the root of the\nElectron cache directory. See the\n[air-gapped / offline builds guide](https://www.electron.build/tutorials/offline-air-gapped-builds)."
     },
     "electronFuses": {
       "anyOf": [

package/templates/appx/appxmanifest.xml

@@ -5,10 +5,9 @@
    xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10"
    xmlns:desktop="http://schemas.microsoft.com/appx/manifest/desktop/windows10"
    xmlns:rescap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities">
-  <!-- use single quotes to avoid double quotes escaping in the publisher value  -->
   <Identity Name="${identityName}"
     ProcessorArchitecture="${arch}"
-    Publisher='${publisher}'
+    Publisher="${publisher}"
     Version="${version}" />
   <Properties>
     <DisplayName>${displayName}</DisplayName>

package/templates/nsis/include/allowOnlyOneInstallerInstance.nsh

@@ -45,12 +45,12 @@
 !macro IS_POWERSHELL_AVAILABLE
   Var /GLOBAL IsPowerShellAvailable ; 0 = available, 1 = not available
   # Try running PowerShell with a simple command to check if it's available
-  nsExec::Exec `"$PowerShellPath" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"`
+  nsExec::Exec `"$PowerShellPath" -NoProfile -NonInteractive -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"`
   Pop $0  # Return code (0 = success, other = error)
 
   ${if} $0 == 0
     # PowerShell is available, check if it's not blocked by policies
-    nsExec::Exec `"$PowerShellPath" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"`
+    nsExec::Exec `"$PowerShellPath" -NoProfile -NonInteractive -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"`
     Pop $0
   ${endIf}
 
@@ -63,7 +63,7 @@
 
 !macro FIND_PROCESS _FILE _RETURN
   ${if} $IsPowerShellAvailable == 0
-    nsExec::Exec `"$PowerShellPath" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$$_.Path -and $$_.Path.StartsWith('$INSTDIR', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"`
+    nsExec::Exec `"$PowerShellPath" -NoProfile -NonInteractive -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$$_.Path -and $$_.Path.StartsWith('$INSTDIR', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"`
     Pop ${_RETURN}
   ${else}
     !ifdef INSTALL_MODE_PER_ALL_USERS
@@ -91,7 +91,7 @@
   ${endIf}
 
   ${if} $IsPowerShellAvailable == 0
-    nsExec::Exec `"$PowerShellPath" -C "Get-CimInstance -ClassName Win32_Process | ? {$$_.Path -and $$_.Path.StartsWith('$INSTDIR', 'CurrentCultureIgnoreCase')} | % { Stop-Process -Id $$_.ProcessId $0 }"`
+    nsExec::Exec `"$PowerShellPath" -NoProfile -NonInteractive -C "Get-CimInstance -ClassName Win32_Process | ? {$$_.Path -and $$_.Path.StartsWith('$INSTDIR', 'CurrentCultureIgnoreCase')} | % { Stop-Process -Id $$_.ProcessId $0 }"`
   ${else}
     !ifdef INSTALL_MODE_PER_ALL_USERS
       nsExec::Exec `taskkill /IM "${_FILE}" /FI "PID ne $pid"`