mongodb-js / devtools-shared

72%

main: 79%

LAST BUILD ON BRANCH fix/bump-electron-39-7b55e2c6ebf521db

branch: fix/bump-electron-39-7b55e2c6ebf521db

CHANGE BRANCH

x

Reset

• fix/bump-electron-39-7b55e2c6ebf521db
• 10017-dev
• 10034-dev
• 2488-dev
• 2883-dev
• 9911-dev
• CLOUDP-376083
• COMPASS-10060-add-throw-eslint-rule
• COMPASS-10271
• COMPASS-10477-add-rerank-stage
• COMPASS-10642
• COMPASS-6697
• COMPASS-8355
• COMPASS-8601
• COMPASS-9237
• COMPASS-9277-add-search-stages-and-operators
• COMPASS-9373-query-hint-in-query-parser
• COMPASS-9429-rankFusion-8-1
• COMPASS-9430-score-fusion
• COMPASS-9455
• COMPASS-9553-vector-similarity-expressions
• COMPASS-9693
• COMPASS-9700
• COMPASS-9793
• COMPASS-9793-make-lookup-configurable
• COMPASS-9871
• COMPASS-9943-rhel9-on-ci
• MONGOSH-2486-add-shell-helpers-for-legacy-uuid
• add-autocomplete-package
• add-server-log-checker
• add-stage-icons
• align-log-writers
• auto-embed-templates
• auto_embed_stage_typo_fixes
• autocomplete-types-tests
• bump-node
• bump-pacote
• bump-shell-api
• bump-shell-deps
• bundle-all-ts-files
• bundle-the-output
• charset-utf8-in-urlencoded-contenttype
• check-arbiter-race-condition
• check-transitive-deps
• chore/update-os-dns-native-for-node24
• chore/update-system-ca-in-proxy-support
• compass-10168-10179-add-expression-operators
• copilot/fix-axios-header-injection-vulnerability
• copilot/fix-path-traversal-vulnerability
• copilot/fix-prettier-violations
• debug-ts-autocomplete
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/dependency-review-action-4.9.0
• dependabot/github_actions/actions/dependency-review-action-5
• dependabot/github_actions/actions/setup-node-6
• dependabot/github_actions/actions/setup-node-6.3.0
• dependabot/github_actions/actions/setup-python-6
• dependabot/github_actions/actions/upload-artifact-7.0.1
• dependabot/github_actions/github/codeql-action-4.35.1
• dependabot/github_actions/github/codeql-action-4.35.2
• dependabot/github_actions/github/codeql-action-4.35.3
• dependabot/github_actions/github/codeql-action-4.35.4
• dependabot/github_actions/github/codeql-action-4.35.5
• dependabot/github_actions/github/gh-aw-actions-0.69.3
• dependabot/github_actions/github/gh-aw-actions-0.71.2
• dependabot/github_actions/github/gh-aw-actions-0.72.0
• dependabot/github_actions/github/gh-aw-actions-0.74.1
• dependabot/github_actions/github/gh-aw-actions-0.74.8
• dependabot/github_actions/github/gh-aw-actions-ea222e359276c0702a5f5203547ff9d88d0ddd76
• dependabot/npm_and_yarn/acorn-8.16.0
• dependabot/npm_and_yarn/agent-base-9.0.0
• dependabot/npm_and_yarn/ajv-8.18.0
• dependabot/npm_and_yarn/aws-sdk-2.1693.0
• dependabot/npm_and_yarn/babel-4990f92182
• dependabot/npm_and_yarn/babel-a0fb1cee03
• dependabot/npm_and_yarn/babel/eslint-parser-7.28.6
• dependabot/npm_and_yarn/chalk-5.6.2
• dependabot/npm_and_yarn/cheerio-1.2.0
• dependabot/npm_and_yarn/commander-14.0.3
• dependabot/npm_and_yarn/cross-fetch-4.1.0
• dependabot/npm_and_yarn/eslint-plugin-jsx-a11y-6.10.2
• dependabot/npm_and_yarn/eslint-plugin-promise-7.2.1
• dependabot/npm_and_yarn/eslint-plugin-react-hooks-7.0.1
• dependabot/npm_and_yarn/form-data-3.0.4
• dependabot/npm_and_yarn/git-log-parser-1.2.1
• dependabot/npm_and_yarn/global-jsdom-29.0.0
• dependabot/npm_and_yarn/handlebars-4.7.9
• dependabot/npm_and_yarn/http-proxy-agent-9.0.0
• dependabot/npm_and_yarn/husky-9.1.7
• dependabot/npm_and_yarn/js-yaml-4.1.1
• dependabot/npm_and_yarn/kerberos-7.0.0
• dependabot/npm_and_yarn/leafygreen-ui/emotion-5.2.0
• dependabot/npm_and_yarn/lru-cache-11.3.3
• dependabot/npm_and_yarn/lru-cache-11.3.5
• dependabot/npm_and_yarn/mongodb-7.2.0
• dependabot/npm_and_yarn/mongodb-js/oidc-plugin-2.0.8
• dependabot/npm_and_yarn/mongosh/shell-api-5.1.6
• dependabot/npm_and_yarn/multi-591de2bdf7
• dependabot/npm_and_yarn/multi-6c96afc0a9
• dependabot/npm_and_yarn/nock-14.0.12
• dependabot/npm_and_yarn/node-addon-api-8.7.0
• dependabot/npm_and_yarn/peculiar/x509-2.0.0
• dependabot/npm_and_yarn/pkg-up-5.0.0
• dependabot/npm_and_yarn/pkgjs/nv-0.3.0
• dependabot/npm_and_yarn/prettier-3.8.1
• dependabot/npm_and_yarn/resolve-mongodb-srv-1.1.7
• dependabot/npm_and_yarn/rimraf-6.1.3
• dependabot/npm_and_yarn/sinon-21.1.2
• dependabot/npm_and_yarn/snyk-policy-4.1.7
• dependabot/npm_and_yarn/snyk-policy-5.0.0
• dependabot/npm_and_yarn/socks-2.8.8
• dependabot/npm_and_yarn/types/decompress-4.2.7
• dependabot/npm_and_yarn/types/node-25.5.2
• dependabot/npm_and_yarn/types/s3rver-3.7.4
• dependabot/npm_and_yarn/types/sparse-bitfield-3.0.4
• dependabot/npm_and_yarn/types/toposort-2.0.7
• dependabot/npm_and_yarn/types/yargs-17.0.35
• dependabot/npm_and_yarn/typescript-eslint/rule-tester-8.58.1
• dependabot/npm_and_yarn/yargs-18.0.0
• drivers-tools-followup
• dummy-change
• eslint-no-plain-object-records
• extra-params
• fallback-to-true
• feat/mcp-29
• feat/upgrade-mongodb-driver
• fix-build-info-default-export
• fix-collection-dots
• fix-exports
• fix-precommit
• fix-types-for-real
• fix-uncommitted
• fix-webpack-dep-plugin-relative-lookups
• fix/bump-eslint-plugin-jsx-a11y-CVE-2025-27789-82e444582ec8fad2
• fix/bump-glob-10.5.0-27606bf67e3ab883
• fix/codeql-workflow-dispatch
• fix/dependabot-258-basic-ftp-5.3.1-573476f2029b793e
• fix/picomatch-security-2026-de2d70589c49a5c8
• fix/serialize-javascript-security-3ebebf160494f817
• forgotten-bit
• gagik/add-command
• gagik/add-device-id
• gagik/async-native-device-id
• gagik/bump-tar
• gagik/docs-machine-id
• gagik/download-dir
• gagik/export-types
• gagik/fix-redact
• gagik/npm-token-script
• go-back-to-driver-metadata
• insert-correct-ts
• kh/build-info
• kh/build-info-identify-server-name
• kh/build-info-identify-server-name-2
• kh/build-info-pass-build-info
• kh/simpler-tsconfig
• main
• make-host-settable
• make-shell-api-peer
• mongodb-ls-json
• mongodb-ns-explicit-internal
• mongodb-ns-fix-publish
• mongodb-runner-verbose-logs
• mongosh-2194-dev
• move-ns
• new-aws-ips
• ni/aw-secrets
• ni/coveralls
• ni/dependabot
• ni/dependabot-groups
• ni/device-id-tweaks
• ni/form-data
• ni/mql-typescript
• ni/recursive-log-manager
• ni/security-aw
• ni/update-dependencies
• no-connection
• no-peer-dep
• replace-mql-types
• resilient-mongodbrunner-close
• revert-242f0d1
• rhel10-9
• security/bump-lodash-4.18.1-4284c08d7a14b084
• security/bump-postcss-8.5.10-433301cdc7b9b87f
• security/fix-axios-vulnerability-ca4a5db3d49df5a6
• server-log-checker-ignore-internal-clients
• some-deps-are-not-dev
• switch-default-position
• test-schema
• undefined-connection-database
• unskip-ping-driver
• unused-vars-config
• update-engines-requirement-npm-11-node-22
• update-es-version-ts-config
• update-eslint-plugin-export-files
• update-eslint-plugin-to-be-public-npm
• vector-search-description

Build # 24566765885

Build Type

Pull #685

github

Committed by web-flow

Commit Message

chore(deps): bump electron to ^39.8.5 in devtools-proxy-support

Fixes multiple CVEs in electron (devDependency used for testing only):
- CVE-2026-34781 (GHSA-f37v-82c4-4x64) - requires >= 39.8.5
- CVE-2026-34774 (GHSA-532v-xpq5-8h95) - requires >= 39.8.1
- CVE-2026-34779 (GHSA-5rqw-r77c-jp79) - requires >= 38.8.6
- CVE-2026-34776 (GHSA-3c8v-cfp5-9885) - requires >= 38.8.6
- CVE-2026-34778 (GHSA-xj5x-m3f3-5x3h) - requires >= 38.8.6
- CVE-2026-34777 (GHSA-r5p7-gp4j-qhrx) - requires >= 38.8.6
- CVE-2026-34775 (GHSA-xwr5-m59h-vwqr) - requires >= 38.8.6
- CVE-2026-34773 (GHSA-mwmh-mq4g-g6gr) - requires >= 38.8.6
- CVE-2026-34771 (GHSA-8337-3p73-46f4) - requires >= 38.8.6
- CVE-2026-34772 (GHSA-9w97-2464-8783) - requires >= 38.8.6
- CVE-2026-34770 (GHSA-jjp3-mq3x-295m) - requires >= 38.8.6
- CVE-2026-34769 (GHSA-9wfr-w7mm-pc7f) - requires >= 38.8.6
- CVE-2026-34768 (GHSA-jfqx-fxh3-c62j) - requires >= 38.8.6
- CVE-2026-34766 (GHSA-9899-m83m-qhpj) - requires >= 38.8.6
- CVE-2026-34767 (GHSA-4p4r-m79c-wq3v) - requires >= 38.8.6
- CVE-2025-55305 (GHSA-vmqv-hx8q-j7mg) - requires >= 35.7.5

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Pull Request Pull Request #685: [agent] chore(deps): bump electron to ^39.8.5 in devtools-proxy-support

Coverage Stats

1895 of 2935 branches covered (64.57%)

Branch coverage included in aggregate %.

4060 of 5287 relevant lines covered (76.79%)

568.95 hits per line