chore(deps-dev): bump the npm_and_yarn group across 3 directories with 2 updates

[dependabot]

Bumps the npm_and_yarn group with 1 update in the /packages/sdk/electron/contract-tests/entity directory: electron.
Bumps the npm_and_yarn group with 1 update in the /packages/sdk/electron/example directory: electron.
Bumps the npm_and_yarn group with 1 update in the /packages/sdk/vercel/examples/route-handler directory: postcss.

Updates electron from 40.10.6 to 43.4.1

Release notes

Sourced from electron's releases.

electron v43.4.1

Release Notes for v43.4.1

Fixes

• Fixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via webContents.setDevToolsWebContents(). #52937 (Also in 44)
• Fixed registerFileProtocol and registerHttpProtocol returning readable responses to cross-origin no-cors fetches; they now return opaque responses like protocol.handle. #52853 (Also in 41, 42, 44)
• Fixed a WebContentsView staying blank after its window is shown when setBackgroundThrottling(false) was called while the window was hidden. #52864 (Also in 42, 44)
• Fixed a crash in systemPreferences.promptTouchID(reason) when an invalid reason value is passed. #52782 (Also in 42, 44)
• Fixed a crash when resolving a path inside a malformed ASAR archive that contains cyclic link entries. #52857 (Also in 42, 44)
• Fixed a crash with app.setLoginItemSettings if a non-UTF8 service name is used. #52944 (Also in 44)
• Fixed a memory leak when creating BrowserWindows. #52892 (Also in 42, 44)
• Fixed a possible crash (SIGABRT) during process exit when the process had loaded tls/https shortly before exiting, affecting app.exit() before ready and short-lived ELECTRON_RUN_AS_NODE / child_process.fork() scripts. #52870 (Also in 44)
• Fixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. #52925 (Also in 44)
• Fixed a potential crash in contentTracing.stopRecording() when the trace file could not be written to the requested path. #52795 (Also in 42, 44)
• Fixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. #52903 (Also in 44)
• Fixed a regression preventing from transparent frameless windows from being resized on Linux. #52947 (Also in 44)
• Fixed an npm install failure with no recovery path when the OS blocked the native zip extractor from loading (for example, Windows Smart App Control). #52845 (Also in 44)
• Fixed an issue on Windows where the app process could fail to exit after app.quit() while a shell.openExternal() or shell.openPath() call was still waiting on a system "Open with" dialog. #52897 (Also in 41, 44)
• Fixed crash in sharedTexture module when GPU context becomes unavailable. #52938 (Also in 44)
• Fixed custom V8 snapshots (electron-mksnapshot, and the loadBrowserProcessSpecificV8Snapshot fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. #52877 (Also in 42, 44)
• Fixed downloading files that live inside an asar archive, including saving a packed PDF from the built-in PDF viewer. #52826 (Also in 42, 44)
• Fixed the built-in PDF viewer not rendering documents in in-memory sessions (partitions without the persist: prefix). #52835 (Also in 44)
• Fixed windows opened by a sandboxed top-level frame not inheriting the opener's sandbox restrictions. #52848 (Also in 41, 42, 44)
• <webview> and window.open now inherit nodeIntegrationInWorker from the embedder, consistent with the other Node and sandbox preferences. #52830 (Also in 41, 42, 44)

Other Changes

• Backported fix for 524628213. #52868
• Backported fixes for 542224257, 542025190. #52842
• Backported fixes from upstream Chromium and V8. #52778
• Fixed Tray icons not appearing (and their menus not opening) on Linux desktops that address the StatusNotifierItem by its unique D-Bus name or via the org.freedesktop.StatusNotifierItem interface, such as GNOME with the AppIndicator extension, Cinnamon and XFCE. #52952
• Fixed an issue on macOS where a page's first use of speechSynthesis could block the main process for several hundred milliseconds. #52814
• Reduced idle main-process CPU wakeups caused by Node.js timers and immediates. #52905 (Also in 44)

electron v43.4.0

Release Notes for v43.4.0

Features

• Added webFrameMain.printToPDF() to allow printing individual frames to PDF from the main process. #52627 (Also in 42, 44)
• Fixed an issue where getDisplayMedia({ audio: { restrictOwnAudio: true } }) was ignored in setDisplayMediaRequestHandler, causing loopback audio to include local app playback. #52533 (Also in 44)

Fixes

• Fixed a browser process crash that could occur during Windows logoff, shutdown, or restart. #52620 (Also in 42, 44)
• Fixed a crash report when the X server or Wayland compositor exits while an app is running. #52685 (Also in 42, 44)
• Fixed a crash when quickly switching menus while the app is under heavy load. #52673 (Also in 42, 44)
• Fixed a potential crash when notifying user activation before the primary main frame was live. #52697 (Also in 42, 44)
• Fixed an issue where a JavaScript out-of-memory crash could be reported from inside the crash-key handler instead of at the out-of-memory site. #52725 (Also in 42, 44)
• Fixed the Linux system accent color intermittently not being applied (systemPreferences.getAccentColor() returning an empty string on some launches). #52575

Other Changes

... (truncated)

Commits

• 340bae1 ci: fix generating ffmpeg (#52961)
• 5d74fe3 fix: show DevTools popup menus for setDevToolsWebContents() frontends (#52937)
• 7bb1b8f refactor: SimpleURLLoaderWrapper managed by cppgc (#52934)
• ce2dc12 fix: prevent crash when GPU context unavailable in sharedTexture (#52938)
• d1afd78 chore: cleanup includes of Win32 headers (#52945)
• bfc9c62 chore: cherry-pick 3a02de271fd3 and 726eafecc145 from chromium (#52952)
• 524a3df fix: dangling rawptr NativeWindow::primary_web_contents_view_ (#52939)
• a2e9e45 ci: log Datadog upload failure instead of failing job (#52936)
• d593366 fix: transparent windows can be resized on Linux (#52947)
• 4a04028 fix: don't crash on non-UTF8 serviceName in app.setLoginItemSettings (#52944)
• Additional commits viewable in compare view

Updates electron from 40.10.6 to 43.4.1

Release notes

Sourced from electron's releases.

electron v43.4.1

Release Notes for v43.4.1

Fixes

• Fixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via webContents.setDevToolsWebContents(). #52937 (Also in 44)
• Fixed registerFileProtocol and registerHttpProtocol returning readable responses to cross-origin no-cors fetches; they now return opaque responses like protocol.handle. #52853 (Also in 41, 42, 44)
• Fixed a WebContentsView staying blank after its window is shown when setBackgroundThrottling(false) was called while the window was hidden. #52864 (Also in 42, 44)
• Fixed a crash in systemPreferences.promptTouchID(reason) when an invalid reason value is passed. #52782 (Also in 42, 44)
• Fixed a crash when resolving a path inside a malformed ASAR archive that contains cyclic link entries. #52857 (Also in 42, 44)
• Fixed a crash with app.setLoginItemSettings if a non-UTF8 service name is used. #52944 (Also in 44)
• Fixed a memory leak when creating BrowserWindows. #52892 (Also in 42, 44)
• Fixed a possible crash (SIGABRT) during process exit when the process had loaded tls/https shortly before exiting, affecting app.exit() before ready and short-lived ELECTRON_RUN_AS_NODE / child_process.fork() scripts. #52870 (Also in 44)
• Fixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. #52925 (Also in 44)
• Fixed a potential crash in contentTracing.stopRecording() when the trace file could not be written to the requested path. #52795 (Also in 42, 44)
• Fixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. #52903 (Also in 44)
• Fixed a regression preventing from transparent frameless windows from being resized on Linux. #52947 (Also in 44)
• Fixed an npm install failure with no recovery path when the OS blocked the native zip extractor from loading (for example, Windows Smart App Control). #52845 (Also in 44)
• Fixed an issue on Windows where the app process could fail to exit after app.quit() while a shell.openExternal() or shell.openPath() call was still waiting on a system "Open with" dialog. #52897 (Also in 41, 44)
• Fixed crash in sharedTexture module when GPU context becomes unavailable. #52938 (Also in 44)
• Fixed custom V8 snapshots (electron-mksnapshot, and the loadBrowserProcessSpecificV8Snapshot fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. #52877 (Also in 42, 44)
• Fixed downloading files that live inside an asar archive, including saving a packed PDF from the built-in PDF viewer. #52826 (Also in 42, 44)
• Fixed the built-in PDF viewer not rendering documents in in-memory sessions (partitions without the persist: prefix). #52835 (Also in 44)
• Fixed windows opened by a sandboxed top-level frame not inheriting the opener's sandbox restrictions. #52848 (Also in 41, 42, 44)
• <webview> and window.open now inherit nodeIntegrationInWorker from the embedder, consistent with the other Node and sandbox preferences. #52830 (Also in 41, 42, 44)

Other Changes

• Backported fix for 524628213. #52868
• Backported fixes for 542224257, 542025190. #52842
• Backported fixes from upstream Chromium and V8. #52778
• Fixed Tray icons not appearing (and their menus not opening) on Linux desktops that address the StatusNotifierItem by its unique D-Bus name or via the org.freedesktop.StatusNotifierItem interface, such as GNOME with the AppIndicator extension, Cinnamon and XFCE. #52952
• Fixed an issue on macOS where a page's first use of speechSynthesis could block the main process for several hundred milliseconds. #52814
• Reduced idle main-process CPU wakeups caused by Node.js timers and immediates. #52905 (Also in 44)

electron v43.4.0

Release Notes for v43.4.0

Features

• Added webFrameMain.printToPDF() to allow printing individual frames to PDF from the main process. #52627 (Also in 42, 44)
• Fixed an issue where getDisplayMedia({ audio: { restrictOwnAudio: true } }) was ignored in setDisplayMediaRequestHandler, causing loopback audio to include local app playback. #52533 (Also in 44)

Fixes

• Fixed a browser process crash that could occur during Windows logoff, shutdown, or restart. #52620 (Also in 42, 44)
• Fixed a crash report when the X server or Wayland compositor exits while an app is running. #52685 (Also in 42, 44)
• Fixed a crash when quickly switching menus while the app is under heavy load. #52673 (Also in 42, 44)
• Fixed a potential crash when notifying user activation before the primary main frame was live. #52697 (Also in 42, 44)
• Fixed an issue where a JavaScript out-of-memory crash could be reported from inside the crash-key handler instead of at the out-of-memory site. #52725 (Also in 42, 44)
• Fixed the Linux system accent color intermittently not being applied (systemPreferences.getAccentColor() returning an empty string on some launches). #52575

Other Changes

... (truncated)

Commits

• 340bae1 ci: fix generating ffmpeg (#52961)
• 5d74fe3 fix: show DevTools popup menus for setDevToolsWebContents() frontends (#52937)
• 7bb1b8f refactor: SimpleURLLoaderWrapper managed by cppgc (#52934)
• ce2dc12 fix: prevent crash when GPU context unavailable in sharedTexture (#52938)
• d1afd78 chore: cleanup includes of Win32 headers (#52945)
• bfc9c62 chore: cherry-pick 3a02de271fd3 and 726eafecc145 from chromium (#52952)
• 524a3df fix: dangling rawptr NativeWindow::primary_web_contents_view_ (#52939)
• a2e9e45 ci: log Datadog upload failure instead of failing job (#52936)
• d593366 fix: transparent windows can be resized on Linux (#52947)
• 4a04028 fix: don't crash on non-UTF8 serviceName in app.setLoginItemSettings (#52944)
• Additional commits viewable in compare view

Updates postcss from 8.5.10 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

• Fixed postcss-scss commend regression.

8.5.12

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

8.5.11

• Fixed nested brackets parsing performance (by @​offset).

Changelog

Sourced from postcss's changelog.

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

... (truncated)

Commits

• eb9e1fe Release 8.5.23 version
• 9d19c78 Update dependencies
• 7beca13 Does no load source map file without opts.from
• decea51 Typo
• c18e30d Update EM banner
• 98a39ad Update EM banner
• a3e48c4 Release 8.5.22 version
• f49d691 Fix custom property losing its semicolon before a comment (#2117)
• 28e0daf Release 8.5.21 version
• 3d2b4e4 Update dependencies
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

---

Note

Overview
Dependabot-only version bumps in example and test packages; no SDK source changes.

Electron in the Electron example and contract-test entity goes from ^40.x to ^43.4.1 (dev and peer). The published SDK still peers electron: >=34.5.6.

PostCSS in the Vercel route-handler example goes from 8.5.10 to 8.5.23 (patch, includes source-map path restrictions).

^{Reviewed by Cursor Bugbot for commit 2a12883. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

@launchdarkly/js-client-sdk size report
This is the brotli compressed size of the ESM build.
Compressed size: 32444 bytes
Compressed size limit: 34000
Uncompressed size: 116232 bytes

[github-actions]

@launchdarkly/js-sdk-common size report
This is the brotli compressed size of the ESM build.
Compressed size: 26360 bytes
Compressed size limit: 29000
Uncompressed size: 129188 bytes

[github-actions]

@launchdarkly/js-client-sdk-common size report
This is the brotli compressed size of the ESM build.
Compressed size: 41502 bytes
Compressed size limit: 44000
Uncompressed size: 224541 bytes

[github-actions]

@launchdarkly/browser size report
This is the brotli compressed size of the ESM build.
Compressed size: 179887 bytes
Compressed size limit: 200000
Uncompressed size: 833430 bytes

[jsonbailey]

@dependabot rebase