chore(deploy): Release (next) (alpha)

[electron-builder-release-bot]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to master, this PR will be updated.

⚠️⚠️⚠️⚠️⚠️⚠️

master is currently in pre mode so this branch has prereleases rather than normal releases. If you want to exit prereleases, run changeset pre exit on master.

⚠️⚠️⚠️⚠️⚠️⚠️

Releases

app-builder-lib@27.0.0-alpha.8

Major Changes

• Fix(app-builder-lib): expand lower channels when the channel name has a suffix #9998 e2077cd @ylkhayat

  With generateUpdatesFilesForAllChannels enabled, the extra alpha/beta update files were only written when the channel was exactly alpha, beta, or latest. A per-arch feed configured as channel: "${channel}-${arch}" resolves to something like beta-arm64, which hit the default branch, so alpha-arm64.yml was never written and arm64 pre-release users stopped getting promoted. The base channel is now read off the front of the name and the suffix is reattached to the expanded channels, so beta-arm64 yields beta-arm64 and alpha-arm64, and latest-arm64 yields all three.

  Breaking: a suffixed beta-*/latest-* channel now publishes 2–3 update files instead of 1, so a latest-x64 publish overwrites beta-x64.yml/alpha-x64.yml in the same bucket. Turn off generateUpdatesFilesForAllChannels if you relied on suffixed channels staying single-file.

• Fix(linux): remove http-parser from the default pacman depends list. The package no longer exists in the official Arch Linux repositories (it is AUR-only since Node.js switched to llhttp), so packages built with the default configuration failed to install on stock Arch Linux and Manjaro with an unresolvable dependency — while ldd shows Electron apps have no runtime dependency on it (When packaging for the "pacman" target on Linux, http-parser is included in dependencies #9429). Every remaining entry in the default pacman list was verified to still resolve from the official Arch repositories (libappindicator-gtk3 resolves via the provides of the official libappindicator package in extra), so no other entry was removed. #10109 64c2398 @claude

  feat(linux): support the "default" keyword in depends for the fpm targets (deb, rpm, pacman), mirroring the snap target's plugs/stagePackages/buildPackages convention. "default" expands in place to the target's default depends list, so extras can be appended without repeating the defaults — e.g. ["default", "http-parser"] restores http-parser on top of the defaults. The final list is deduplicated.

Minor Changes

• Fix: return a descriptive result instead of a bare boolean from the signing chain, unified across the platform packagers as a single exported type. SigningResult ("signed" | "signed:custom" | "skipped:no-certificate" | "skipped:filtered" | "skipped:disabled" | "skipped:unsupported", failures are still thrown) is now what PlatformPackager.signApp and the Windows/macOS signing paths report; sign managers' single sign attempts resolve to the SignFileResult subset ("signed" | "signed:custom" | "skipped:no-certificate"), and WinPackager.signIf extends it with "skipped:filtered" (excluded via signExts) and "skipped:disabled" (sign: false/sign: null), so callers and logs can distinguish why a file was not signed. The isSignResultSigned type guard tells the signed variants apart from the skips. Follow-up to fix: Only logs that we've signed a file if we actually did #10082: #10104 5ce1625 @claude
  • The unconditional Signing <file>... log line is removed — the sign managers already log signing with certificate details right before executing, so unsigned builds no longer look like they are signing.
  • The skip message now states the actual reason at info level (signing skipped reason=no code signing certificate configured) instead of a debug-level "no signing configuration found".
  • A file signed by a custom win.sign hook is now logged as signed with custom `sign` hook instead of being misattributed to signtool.exe.
  • MacPackager.sign reports the same type explicitly instead of a bare true/false ("skipped:unsupported" on non-mac hosts and pull-request CI guard, "skipped:disabled" for sign/identity: null, "skipped:no-certificate" when no identity is found, "signed:custom" for a custom mac.sign hook), and MacTargetHelper.handleNullIdentity returns "skipped:disabled" instead of false.
  • Behavior change: WinPackager.signApp and MacPackager.signApp previously discarded the per-file results and returned true unconditionally, so the afterSign hook fired even for fully unsigned builds. signApp now reports the combined real result (a signed result wins) — for unsigned builds, afterSign is skipped and the standard skipping "afterSign" hook as no signing occurred, perhaps you intended "afterPack"? warning is logged, matching the documented gating in doSignAfterPack and the mas/mas-dev behavior (fix: emit afterSign hook for mas/mas-dev builds #10071). Builds that relied on afterSign firing without any signing should move that logic to afterPack.

Patch Changes

• Fix: update the 7-Zip toolset to 7zip@1.0.1, which ships correct per-arch Windows binaries. 7zip@1.0.0 bundled the 32-bit 7za.exe for every Windows arch, capping 7-Zip's memory at 1.75 GiB and breaking LZMA2 multithreading on win-x64/win-arm64 hosts (7zip win-x64 (and win-arm64) toolset bundles ship the 32-bit x86 7za.exe electron-builder-binaries#222). Checksums for all platform bundles are updated to the new release assets. #10103 44a10d4 @claude

• Docs: fix broken electron.build documentation links in readmes, TSDoc comments, and error messages — point auto-update, code-signing, and multi-platform-build references at their new /docs/features/ locations, repair the electron.build./ domain typo, and replace anchors that no longer exist (Broken URLs in documentation #10107) #10111 cf39086 @claude

• Fix(mac): pass the temporary keychain's own password to security set-key-partition-list -k instead of the certificate's import password. The import password is only valid for security import -P; set-key-partition-list authenticates against the keychain itself, so on macOS versions that verify the password, CSC_LINK-based signing failed with SecKeychainUnlock: The user name or passphrase you entered is not correct (see set-key-partition-list uses the .p12 import password instead of the generated keychain password, breaking CSC_LINK-based macOS signing #10066). #10101 7abb30e @amwyygyuge

• Fix(mac): bump linux-tools-mac toolset to 1.0.1, rebuilt on macOS 15 runners so its gtar/lzip/ar binaries run on macOS 15+ instead of requiring macOS 26; also download custom toolsets.*.url bundles from the configured URL as-is instead of appending the filename again (fixes Linux builds bricked macOS <26. #10084) #10100 f7e400b @claude

• Fix: preserve Yarn Berry registry credentials #10079 16559d4 @atirna

• Fix: emit afterSign hook for mas/mas-dev builds again. The MAS flow packs with sign: false and codesigns separately, which skipped the only emitAfterSign call site — the hook now fires after codesigning and before the installer .pkg is created, and the standard "skipping afterSign" warning is logged when signing does not occur ([MAS] AfterSign hook is not called in 26.15.5 #9997) #10071 1d7b489 @claude

• Fix(nsis): detect and close app instances running from the previous per-user/per-machine install location, not only the new $INSTDIR, so a perMachine install over a running per-user installation no longer fails. The path match now also requires a trailing backslash so sibling directories with the same prefix are no longer matched, and a failure to uninstall the previous version now reports the real uninstaller error instead of the misleading "cannot be closed" dialog. #10024 8e95ad0 @claude

• Fix(nsis): a silent auto-update no longer hangs forever on an invisible dialog when the old version's uninstall fails. The uninstall-failure MessageBox (and the other silent-mode-reachable MessageBoxes in the NSIS templates) now carry a /SD IDOK silent default, so in silent installs the dialog auto-selects OK and the installer exits with its failure exit code instead of blocking on a dialog nobody can see. #10034 4b455f7 @claude

• Fix NSIS installer hang when the user's PowerShell profile contains interactive commands: run powershell.exe with -NoProfile -NonInteractive in allowOnlyOneInstallerInstance checks #10051 4070ce7 @claude

• Fix: report the repository detected for app-update.yml at build time #10081 f2cfd5f @maximilliangrand

  When a GitHub or Bitbucket publish configuration omits owner/repo, electron-builder fills them in from the repository info (package.json repository, CI env vars, then .git/config) and writes the result into app-update.yml inside the packaged app, where it becomes the update feed for every installed copy. Until now nothing in the build output said which repository had been chosen - not even at DEBUG=electron-builder, which logged the pre-resolution owner=undefined project=undefined.

  The build now logs the resolved provider/owner/repo (or slug for Bitbucket) once per build, together with the source the repository was detected from. A repository taken from the package.json repository field is deliberate configuration and is reported at info level; one picked up from CI environment variables or .git/config is reported at warn level. Nothing about what gets written to app-update.yml changes, and builds that already specify owner/repo explicitly are unaffected.

• Fix: actually retry transient Electron/toolset download failures. The download retry predicate only matched builder-util-runtime's HttpError and errors with a top-level code, but @electron/get v5 throws its own HTTPError (fetch Response on .response, no .code) and undici wraps socket errors in TypeError: fetch failed with the code on error.cause.code — so GitHub 503s and connection resets failed immediately with zero retries. Downloads now retry with backoff on HTTP 5xx/429 and on transient network codes (ECONNRESET, ETIMEDOUT, ECONNREFUSED, EAI_AGAIN, EPIPE, UND_ERR_SOCKET, UND_ERR_CONNECT_TIMEOUT) _#10105 c5c4ea1 @claude_

• Only log a file as 'signed' when signing actually succeeded #10082 4f84c6e @DiefBell

• Chore(deps): update dotenv and dotenv-expand #9968 038ea9f @mmaietta

• Added slnx to default file exclusions #9969 4273546 @redwyre

Updated 5 dependencies

cf39086

• builder-util-runtime@10.0.0-alpha.7
• dmg-builder@27.0.0-alpha.8
• electron-builder-squirrel-windows@27.0.0-alpha.8
• builder-util@27.0.0-alpha.8
• electron-publish@27.0.0-alpha.8

builder-util@27.0.0-alpha.8

Patch Changes

Updated 1 dependency

cf39086

• builder-util-runtime@10.0.0-alpha.7

builder-util-runtime@10.0.0-alpha.7

Patch Changes

• Docs: fix broken electron.build documentation links in readmes, TSDoc comments, and error messages — point auto-update, code-signing, and multi-platform-build references at their new /docs/features/ locations, repair the electron.build./ domain typo, and replace anchors that no longer exist (Broken URLs in documentation #10107) #10111 cf39086 @claude

dmg-builder@27.0.0-alpha.8

Patch Changes

Updated 3 dependencies

e2077cd 44a10d4 cf39086 7abb30e f7e400b 16559d4 1d7b489 8e95ad0 4b455f7 64c2398 4070ce7 f2cfd5f c5c4ea1 4f84c6e 038ea9f 4273546 5ce1625

• app-builder-lib@27.0.0-alpha.8
• builder-util-runtime@10.0.0-alpha.7
• builder-util@27.0.0-alpha.8

electron-builder@27.0.0-alpha.8

Patch Changes

• Docs: fix broken electron.build documentation links in readmes, TSDoc comments, and error messages — point auto-update, code-signing, and multi-platform-build references at their new /docs/features/ locations, repair the electron.build./ domain typo, and replace anchors that no longer exist (Broken URLs in documentation #10107) #10111 cf39086 @claude

Updated 5 dependencies

e2077cd 44a10d4 cf39086 7abb30e f7e400b 16559d4 1d7b489 8e95ad0 4b455f7 64c2398 4070ce7 f2cfd5f c5c4ea1 4f84c6e 038ea9f 4273546 5ce1625

• app-builder-lib@27.0.0-alpha.8
• builder-util-runtime@10.0.0-alpha.7
• dmg-builder@27.0.0-alpha.8
• builder-util@27.0.0-alpha.8
• electron-publish@27.0.0-alpha.8

electron-builder-squirrel-windows@27.0.0-alpha.8

Patch Changes

Updated 2 dependencies

e2077cd 44a10d4 cf39086 7abb30e f7e400b 16559d4 1d7b489 8e95ad0 4b455f7 64c2398 4070ce7 f2cfd5f c5c4ea1 4f84c6e 038ea9f 4273546 5ce1625

• app-builder-lib@27.0.0-alpha.8
• builder-util@27.0.0-alpha.8

electron-forge-maker-appimage@27.0.0-alpha.8

Patch Changes

• Docs: fix broken electron.build documentation links in readmes, TSDoc comments, and error messages — point auto-update, code-signing, and multi-platform-build references at their new /docs/features/ locations, repair the electron.build./ domain typo, and replace anchors that no longer exist (Broken URLs in documentation #10107) #10111 cf39086 @claude

Updated 1 dependency

e2077cd 44a10d4 cf39086 7abb30e f7e400b 16559d4 1d7b489 8e95ad0 4b455f7 64c2398 4070ce7 f2cfd5f c5c4ea1 4f84c6e 038ea9f 4273546 5ce1625

• app-builder-lib@27.0.0-alpha.8

electron-forge-maker-nsis@27.0.0-alpha.8

Patch Changes

• Docs: fix broken electron.build documentation links in readmes, TSDoc comments, and error messages — point auto-update, code-signing, and multi-platform-build references at their new /docs/features/ locations, repair the electron.build./ domain typo, and replace anchors that no longer exist (Broken URLs in documentation #10107) #10111 cf39086 @claude

Updated 1 dependency

e2077cd 44a10d4 cf39086 7abb30e f7e400b 16559d4 1d7b489 8e95ad0 4b455f7 64c2398 4070ce7 f2cfd5f c5c4ea1 4f84c6e 038ea9f 4273546 5ce1625

• app-builder-lib@27.0.0-alpha.8

electron-forge-maker-nsis-web@27.0.0-alpha.8

Patch Changes

• Docs: fix broken electron.build documentation links in readmes, TSDoc comments, and error messages — point auto-update, code-signing, and multi-platform-build references at their new /docs/features/ locations, repair the electron.build./ domain typo, and replace anchors that no longer exist (Broken URLs in documentation #10107) #10111 cf39086 @claude

Updated 1 dependency

e2077cd 44a10d4 cf39086 7abb30e f7e400b 16559d4 1d7b489 8e95ad0 4b455f7 64c2398 4070ce7 f2cfd5f c5c4ea1 4f84c6e 038ea9f 4273546 5ce1625

• app-builder-lib@27.0.0-alpha.8

electron-forge-maker-snap@27.0.0-alpha.8

Patch Changes

• Docs: fix broken electron.build documentation links in readmes, TSDoc comments, and error messages — point auto-update, code-signing, and multi-platform-build references at their new /docs/features/ locations, repair the electron.build./ domain typo, and replace anchors that no longer exist (Broken URLs in documentation #10107) #10111 cf39086 @claude

Updated 1 dependency

e2077cd 44a10d4 cf39086 7abb30e f7e400b 16559d4 1d7b489 8e95ad0 4b455f7 64c2398 4070ce7 f2cfd5f c5c4ea1 4f84c6e 038ea9f 4273546 5ce1625

• app-builder-lib@27.0.0-alpha.8

electron-publish@27.0.0-alpha.8

Patch Changes

Updated 2 dependencies

cf39086

• builder-util-runtime@10.0.0-alpha.7
• builder-util@27.0.0-alpha.8

electron-updater@7.0.0-alpha.7

Patch Changes

• Docs: fix broken electron.build documentation links in readmes, TSDoc comments, and error messages — point auto-update, code-signing, and multi-platform-build references at their new /docs/features/ locations, repair the electron.build./ domain typo, and replace anchors that no longer exist (Broken URLs in documentation #10107) #10111 cf39086 @claude

Updated 1 dependency

cf39086

• builder-util-runtime@10.0.0-alpha.7