chore(deps-dev): bump electron-builder from 25.1.8 to 26.15.3

[dependabot]

Bumps electron-builder from 25.1.8 to 26.15.3.

Release notes

Sourced from electron-builder's releases.

electron-builder@26.15.3

What's Changed

• fix: add ELECTRON_BUILDER_BINARIES_ALLOW_HTTP opt-in for parsing env vars targeting non-localhost HTTP by @​mmaietta in electron-userland/electron-builder#9856
• docs: update docs and add build lifecycle page by @​mmaietta in electron-userland/electron-builder#9857
• chore(test): update vitest by @​mmaietta in electron-userland/electron-builder#9859
• fix(download): persist toolset archives in a predictable cache path by @​mmaietta in electron-userland/electron-builder#9861
• fix(publish): set x-amz-content-sha256: UNSIGNED-PAYLOAD before SigV4 signing by @​mmaietta in electron-userland/electron-builder#9863
• chore(deploy): Release (next) by @​electron-builder-release-bot[bot] in electron-userland/electron-builder#9858

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.2...electron-builder@26.15.3

electron-builder@26.15.2

What's Changed

• fix(mac): use native zip for macOS zip target to preserve .framework symlinks by @​mmaietta in electron-userland/electron-builder#9847
• fix: retry package install on transient network errors by @​mmaietta in electron-userland/electron-builder#9850
• fix(icons): replace png2icons with wasm-vips Lanczos3 resampling for high-quality icon conversion by @​mmaietta in electron-userland/electron-builder#9851
• chore(deploy): Release (next) by @​electron-builder-release-bot[bot] in electron-userland/electron-builder#9848

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.1...electron-builder@26.15.2

electron-builder@26.15.1

What's Changed

• fix: validate packages by @​regnete in electron-userland/electron-builder#9838
• chore: ci:validate, ci:test:fetch-cache simplification, and code cleanup by @​mmaietta in electron-userland/electron-builder#9840
• chore(tests): embed platform markers in generated test filenames to eliminate "unknown" timing in shard plan by @​mmaietta in electron-userland/electron-builder#9843
• chore(deps): update and unpin @​electron/rebuild package by @​mmaietta in electron-userland/electron-builder#9845
• chore(deploy): Release (next) by @​electron-builder-release-bot[bot] in electron-userland/electron-builder#9842

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.0...electron-builder@26.15.1

electron-builder@26.15.0

What's Changed

• chore(pr-labeler): force run to only pull_request on core repo (ignore forks) by @​mmaietta in electron-userland/electron-builder#9821
• fix(mac): skip signing when no certificate found; warn on ad-hoc + hardenedRuntime by @​mmaietta in electron-userland/electron-builder#9822
• fix: use bash instead of sh in package.json by @​mmaietta in electron-userland/electron-builder#9823
• chore: replace app-builder-bin node-dep-tree and rebuild-node-modules by @​mmaietta in electron-userland/electron-builder#9828
• feat(node-module-collector): invoke package managers via PowerShell -EncodedCommand on Windows by @​mmaietta in electron-userland/electron-builder#9827
• feat(migration): fully replace Go binary app-builder-bin with TS implementation by @​mmaietta in electron-userland/electron-builder#9829
• chore(test): print out shard duration calculation results during shard-count step by @​mmaietta in electron-userland/electron-builder#9831
• feat(linux): add syncDesktopName option to align installed .desktop filename with StartupWMClass by @​mmaietta in electron-userland/electron-builder#9832
• fix(smart-cache): deep-merge shard caches so linux timing data survives across runs by @​mmaietta in electron-userland/electron-builder#9833
• fix: holistic field detection for <text> (sha256 hash) redaction by @​mmaietta in electron-userland/electron-builder#9834
• fix(mac/pkg): explicitly pass --version to pkgbuild by @​mmaietta in electron-userland/electron-builder#9835
• chore(deploy): Release (next) by @​electron-builder-release-bot[bot] in electron-userland/electron-builder#9825

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.14.0...electron-builder@26.15.0

... (truncated)

Changelog

Sourced from electron-builder's changelog.

26.15.3

Patch Changes

35bfdeb 9097daf

• builder-util@26.15.3
• app-builder-lib@26.15.3
• dmg-builder@26.15.3

26.15.2

Patch Changes

e25f967 f5ae163 3951024

• app-builder-lib@26.15.2
• dmg-builder@26.15.2

26.15.1

Patch Changes

588ff48 db5d2f4

• app-builder-lib@26.15.1
• dmg-builder@26.15.1

... (truncated)

Commits

• 512a57e chore(deploy): Release v26.15.3 (#9858)
• a6117b3 chore(deploy): Release v26.15.2 (#9848)
• d57f094 chore(deploy): Release v26.15.1 (#9842)
• bed3a9c chore(deploy): Release v26.15.0 (electron-updater@6.8.9) (#9825)
• 198c10c chore: replace app-builder-bin node-dep-tree and rebuild-node-modules (#9...
• e236392 chore(deploy): Release v26.14.0 (#9812)
• 72d298c chore(deploy): Release v26.13.1 (#9805)
• ffd11c7 chore(deploy): Release v26.13.0 (electron-updater@6.8.8) (#9793)
• 2c8c71a chore(deploy): Release v26.12.1 (electron-updater@6.8.7) (#9782)
• d6a5aee fix: harden generated-file output, argument construction, and download valida...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for electron-builder since your current version.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
pixelcat	Ready	Preview	Aug 28, 2026 3:21am

[JOhnsonKC201]

Superseded by #38, which does the same bump on top of #34 and #35. This branch went conflicting the moment those landed, since all three rewrite package-lock.json.

#38 also verified the thing that actually matters about an electron-builder major: npm run pack on Windows against 26.15.3 produces dist/win-unpacked with the asar integrity resource updated and the signing step run, and app-builder-lib (GHSA-7g7r-gx96-252g, high) is gone from npm audit.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.