👷 Update dependency @electron/asar to v4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@electron/asar	3.4.1 → 4.2.1

---

Release Notes

electron/asar (@​electron/asar)

v4.2.1

Compare Source

Bug Fixes

• add circular symlink detection and depth limit protection (#​423) (fd0fcd8)
• add DoS validation for asar archive headers and file entries (#​419) (51cd188)
• add header validation for ASAR archives (#​421) (00e5293)
• add offset validation to readFileSync to prevent out-of-bounds reads (#​420) (97c09cc)
• add path validation to prevent directory traversal attacks (#​418) (de0689b)
• compute integrity over transformed bytes when a transform is applied (#​450) (8c9be01), closes #​277
• constrain extractFile reads to the unpacked directory (#​451) (1f4b01d)
• improve symlink validation to prevent directory traversal attacks (#​422) (c43f92b)
• replace commander with native Node.js parseArgs (#​416) (42b25d0)
• resolve absolute symlink targets correctly when packing (#​452) (0087cfa), closes #​366

v4.2.0

Compare Source

Features

• Revert "feat: add integrity digest management commands and functional… (#​424) (49681b1), closes #​380

v4.1.2

Compare Source

Performance Improvements

• 5-7x faster packing, 15-20% faster extraction (#​414) (79686b6), closes #​417

v4.1.1

Compare Source

Bug Fixes

• pickle resize overflow, stream flush race, integrity block boundary (#​413) (f1f0a8f)

v4.1.0

Compare Source

Features

• add integrity digest management commands and functionality (#​380) (ccaf57f)

v4.0.1

Compare Source

Bug Fixes

• export FileRecord and DirectoryRecord types (#​370) (f941402)

v4.0.0

Compare Source

• feat!: bump engines requirement to Node 22 (#​347) (c14d903), closes #​347

BREAKING CHANGES

• bumps required Node.js version to >=22.12.0. ESM-only.

• use node: imports

• use "@tsconfig/node22

• remove rimraf

• update glob and remove inlined types

• esm: add "type": "module" and update imports

• esm: update test imports and dependencies

• remove default exports

• remove unused imports

• fix Windows tests

• update imports / exports in src/asar.ts

• remove promisify(stream.pipeline)

• remove lodash

• remove enginesStrict

• rename bin/asar.js to bin/asar.mjs

• bump minimatch to 10.0.1

• var -> const

• add noUnusedLocals: true to tsconfig.json

• update wrappedFs

• update commander

• update chai

• add docs publishing flow

• docs: update README imports

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.