Build(deps-dev): Bump electron from 38.7.2 to 40.1.0

[dependabot]

Bumps electron from 38.7.2 to 40.1.0.

Release notes

Sourced from electron's releases.

electron v40.1.0

Release Notes for v40.1.0

Features

• DevTools errors are no longer printed to console. #49359

Fixes

• Fixed setRepresentedFilename() not setting AXDocument accessibility attribute on macOS. #49417 (Also in 39)
• Fixed a potential race condition crash when opening DevTools. #49422 (Also in 39)
• Fixed an issue in chrome://accessibility. #49560 (Also in 39, 41)
• Fixed an issue where shell.writeShortcutLink was throwing TypeError: Insufficient number of arguments when called with just [(path, options)]. #49501 (Also in 39, 41)
• Fixed crash in platform_util::Beep() on Linux. #49482 (Also in 39, 41)
• Made toplevel icon Wayland protocol work. #49414 (Also in 39)

Other Changes

• Backported fix for 473851441. #49487
• Updated Chromium to 144.0.7559.96. #49474

Unknown

• Fixed an issue where some packages weren't correctly filtered on macOS in dialogs. #49473 (Also in 38, 39, 41)

electron v40.0.0

Release Notes for v40.0.0

Stack Upgrades

• Chromium 144.0.7559.60
  • New in 144
  • New in 143
• Node v24.11.1
  • Node 24.11.1 blog post
• V8 14.4

Breaking Changes

• Deprecated clipboard API access from renderer processes #48923
• Fixed an error on debug symbol upload by moving dsym.zip to use tar.xz compression. #48952

Features

Additions

• Added "memory-eviction" as a possible reason for a child process to exit. #48362
• Added RGBAF16 output format with scRGB HDR color space support to Offscreen Rendering. #48265 (Also in 39)
• Added app.isHardwareAccelerationEnabled(). #47614 (Also in 37, 38, 39)
• Added bypassCustomProtocolHandlers option to net.request. #48883 (Also in 38, 39)
• Added methods to enable more granular accessibility support management. #48042 (Also in 37, 38, 39)
• Added support for WebSocket authentication through the login event on webContents. #49064 (Also in 39)
• Added support to import external shared texture as VideoFrame. #48831
• Added the ability to retrieve the system accent color on Linux using systemPreferences.getAccentColor. #48027 (Also in 39)
• Allowed for persisting File System API grant status within a given session. #48170 (Also in 37, 38, 39)

... (truncated)

Commits

• d0661e7 fix: chrome://accessibility drift (#49560)
• 3c9d1dc ci: reapply patches if PR base branch updates them (#49532)
• d942351 docs: correct type for process.noDeprecation (#49544)
• ac4efed fix: second argument to shell.writeShortcutLink is optional (#49501)
• db6b22a docs: add type reference links in Menu and MenuItem API documentation (#49525)
• 1b7073a chore: update patches for 40-x-y (#49513)
• cd0b34d chore: bump chromium to 144.0.7559.96 (40-x-y) (#49474)
• c37daa7 chore: cherry-pick dba49550b12d from v8 (#49487)
• e555e52 fix: return early from platform_util::Beep() on Linux if there is no default ...
• a2949e5 fix: potential devtools crash on empty (#49490)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}