[Due for payment 2025-09-02] [$250] Upgrade Electron

[roryabraham]

Problem

Coming from #67075, the version of Electron we're using has been found to contain security vulnerabilities.

Solution

Upgrade electron to its latest stable version 37.2.4.

Upwork Automation - Do Not Edit

• Upwork Job URL: https://www.upwork.com/jobs/~021949110353310570855
• Upwork Job ID: 1949110353310570855
• Last Price Increase: 2025-07-26

Issue Owner

Current Issue Owner: @lschurr

[melvin-bot]

Job added to Upwork: https://www.upwork.com/jobs/~021949110353310570855

[melvin-bot]

Triggered auto assignment to Contributor-plus team member for initial proposal review - @rojiphil (External)

[melvin-bot]

Triggered auto assignment to @lschurr (Bug), see https://stackoverflow.com/c/expensify/questions/14418 for more details. Please add this bug to a GH project, as outlined in the SO.

[roryabraham]

For proposals, please list out any breaking changes and how to address them

[PiyushChandra17]

🚨 Edited by proposal-police: This proposal was edited at 2025-07-26 14:29:40 UTC.

Proposal

Please re-state the problem that we are trying to solve in this issue.

Upgrade electron for desktop

What is the root cause of that problem?

Improvement

What changes do you think we should make in order to solve the problem?

Already mentioned in OP, Upgrade electron to its latest stable version 37.2.4.
We need to npm install electron@37.2.4 and make the changes accordingly

• We should look for breaking changes in release notes

• Look for breaking changes, deprecated APIs, and new features.

• Test our application by running npm run desktop

• Check for Deprecated APIs ,Search our codebase for deprecated Electron APIs mentioned in the release notes.Replace deprecated APIs with their recommended alternatives.

• Since the the latest stable version of electron 37.2.4 uses node version: v22.17.1. We need to update our node version too here,

App/package.json

Line 411 in 4b68aa8

"node": "20.19.3",

Upgrade it to v22.17.1 in order to avoid compatibility issues with the latest electron runtime node version

• We need update these three aswell in order to ensure compatibility and avoid runtime issues to their latest stable version

App/desktop/package.json

Lines 7 to 9 in 4b68aa8

	"electron-context-menu": "^2.3.0",
	"electron-log": "^4.4.8",
	"electron-updater": "^6.6.5",

"electron-context-menu": "^3.5.0",
"electron-log": "^5.1.4",
"electron-updater": "^6.6.7",

Breaking API changes v37.2.4

According to the official breaking changes docs here

• Utility Process unhandled rejection behavior change (Utility Processes will now warn with an error message when an unhandled rejection occurs instead of crashing the process.)

• To restore the previous behavior, we can use

process.on('unhandledRejection', () => {
  process.exit(1)
})

What specific scenarios should we cover in automated tests to prevent reintroducing this issue in the future?

n/A

What alternative solutions did you explore? (Optional)

n/A

Result

Reminder: Please use plain English, be brief and avoid jargon. Feel free to use images, charts or pseudo-code if necessary. Do not post large multi-line diffs or write walls of text. Do not create PRs unless you have been hired for this job.

[github-actions]

⚠️ Thanks for your proposal. Please update it to follow the proposal template, as proposals are only reviewed if they follow that format (note the mandatory sections).