Bump form-data and electron

[dependabot]

Bumps form-data to 2.5.6 and updates ancestor dependency electron. These dependencies need to be updated together.

Updates form-data from 2.3.2 to 2.5.6

Changelog

Sourced from form-data's changelog.

v2.5.6 - 2026-06-12

Commits

• [Fix] escape CR, LF, and " in field names and filenames b620316
• [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape 12be578
• [Dev Deps] update js-randomness-predictor 46cfd23
• [Tests] use safe-buffer so the header-injection test runs on node < 4 633044a
• [Deps] update hasown e3b96ee

v2.5.5 - 2025-07-18

Commits

• [meta] actually ensure the readme backup isn’t published 10626c0
• [Fix] use proper dependency 026abe5

v2.5.4 - 2025-07-17

Fixed

• [Fix] append: avoid a crash on nullish values [#577](https://github.com/form-data/form-data/issues/577)

Commits

• [eslint] update linting config 8bf2492
• [meta] add auto-changelog b5101ad
• [Tests] handle predict-v8-randomness failures in node < 17 and node > 23 0e93122
• [Fix] Switch to using crypto random for boundary values b88316c
• [Fix] validate boundary type in setBoundary() method 131ae5e
• [Tests] Switch to newer v8 prediction library; enable node 24 testing c97cfbe
• [Refactor] use hasown 97ac9c2
• [meta] remove local commit hooks be99d4e
• [Dev Deps] remove unused deps ddbc89b
• [meta] fix scripts to use prepublishOnly e351a97
• [Dev Deps] remove unused script 8f23366
• [Dev Deps] add missing peer dep 02ff026
• [meta] fix readme capitalization 2fd5f61

v2.5.3 - 2025-02-14

Merged

• [Fix] set Symbol.toStringTag when available [#573](https://github.com/form-data/form-data/issues/573)

Fixed

• [Fix] set Symbol.toStringTag when available (#573) [#396](https://github.com/form-data/form-data/issues/396)

Commits

... (truncated)

Commits

• c713349 v2.5.6
• 46cfd23 [Dev Deps] update js-randomness-predictor
• 633044a [Tests] use safe-buffer so the header-injection test runs on node < 4
• e3b96ee [Deps] update hasown
• 12be578 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape
• b620316 [Fix] escape CR, LF, and " in field names and filenames
• 40de5a7 v2.5.5
• 026abe5 [Fix] use proper dependency
• 10626c0 [meta] actually ensure the readme backup isn’t published
• efe6c26 v2.5.4
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for form-data since your current version.

Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.

Updates electron from 3.0.8 to 42.4.1

Release notes

Sourced from electron's releases.

electron v42.4.1

Release Notes for v42.4.1

Fixes

• Fixed DevTools Network panel missing most requests after navigating when webContents.debugger is attached. #51965 (Also in 43)
• Fixed safeStorage.isAsyncEncryptionAvailable() incorrectly reporting false shortly after the app ready event, and a crash when calling safeStorage.encryptStringAsync() or safeStorage.decryptStringAsync() before async encryption initialization completed. safeStorage.isAsyncEncryptionAvailable() now returns a Promise as documented. #51924
• Fixed a bug on Linux where a 1px line appeared at the top of frameless windows if the window and web contents had different background colors. #52005 (Also in 41, 43)
• Fixed a renderer crash when calling WebAssembly.compileStreaming() or WebAssembly.instantiateStreaming() with nodeIntegration enabled. #51956 (Also in 43)

Other Changes

• Backported fixes from upstream Chromium, Skia and Dawn. #51942
• Updated Chromium to 148.0.7778.265. #51979

Documentation

• Documentation changes: #51927

electron v42.4.0

Release Notes for v42.4.0

Fixes

• Fixed a browser process crash when calling webContents.reload() or navigating synchronously from the render-process-gone event; the event is now emitted after the renderer's teardown notification has completed. #51916 (Also in 43)
• Fixed an issue on Linux and Windows where frameless windows would shrink when calling win.center(). Additionally, fixed an issue where frameless windows would appear slightly off-center on Windows. #51921 (Also in 41, 43)
• Fixed an issue where the "Toggle Developer Tools" menu item failed to function correctly with BaseWindow. #51903 (Also in 41, 43)
• Fixed sandboxed preload scripts running a stale cached version after the script was modified without its file size changing. #51933 (Also in 43)
• Fixed the context menu in a detached DevTools window focusing the inspected page's window instead of the DevTools window. #51864 (Also in 43)

Other Changes

• Backported fixes from upstream Chromium and V8. #51934
• Security: backported fixes for CVE-2026-9115, CVE-2026-9116. #51904
• Updated Chromium to 148.0.7778.254. #51878
• Updated Node.js to v24.16.0. #51747

electron v42.3.3

Release Notes for v42.3.3

Fixes

• Fixed a crash when calling node:wasi functions with fast API calls enabled. #51867
• Improved external resize band positioning and scaling for frameless windows on Windows. #51561 (Also in 41, 43)

Other Changes

• Fixed silent data truncation in Buffer/TextEncoder APIs and a crash in fs.writeFileSync with non-ASCII strings on Apple Silicon. #51849 (Also in 41, 43)
• Improved app startup performance — the main process now boots from an embedded Node.js startup snapshot, framework bundles and preload scripts are cached as compiled V8 bytecode, and sandboxed renderer startup data is pushed ahead of navigation instead of fetched via blocking IPC. Preload stack traces now show the correct file path and line number. #51831 (Also in 43)

electron v42.3.2

Release Notes for v42.3.2

• Fixed a crash in simdutf when processing strings in the main process

... (truncated)

Commits

• 76b7ac4 fix: remove 1px line from the top of frameless windows on Linux (#51458) (#52...
• c9eba2a fix: macOS menu roles missing Tahoe icons (#52013)
• e46d7ad docs: clarify the way electron is downloaded in faq (#51998)
• b86fc6a test: fix flaky code cache cleanup on Windows (#52008)
• aa22b27 chore: bump chromium to 148.0.7778.265 (42-x-y) (#51979)
• f454e21 fix: devTools network events dropped on RenderFrameHost swap (#51965)
• 5e6a399 chore: bump chromium to 148.0.7778.257 (42-x-y) (#51938)
• 8877540 build: bump node-gyp to 12.3.0 (#51968)
• f34cf62 fix: only set Node's WASM streaming callback when fetch is enabled (#51956)
• 37cda21 test: use strict mode for TS smoke tests and improve typings (#51952)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.