Telegram for Desktop

What's new in this version:

Features:
Additions:
- Added 'dom-ready' event to WebFrameMain which emits when the frame's document is ready
- Added 'frame-created' event to WebContents which emits when a frame is created in the page
- Added WebHID support
- Added <webview>.sendToFrame() / frameId to 'ipc-message' event
- Added <webview> 'did-redirect-navigation' event
- Added app.configureHostResolver API for configuring DNS-over-HTTPS
- Added commandLine.removeSwitch to allow apps to remove command line switches from Chromiums internal command line representation
- Added frame property to the params object of the 'context-menu' event
- Added isIssuedByKnownRoot to ses.setCertificateVerifyProc callback
- Added isMainFrame argument to 'certificate-error' event
- Added safeStorage string encryption API
- Added textWidth option to dialog.showMessageBox() / dialog.showMessageBoxSync()
- Added webContents.fromDevToolsTargetId(targetId) to lookup a WebContents instance from an associated Chrome DevTools Protocol TargetID
- Added an Electron Fuse for enforcing code signatures on the app.asar file your application loads. Requires the latest asar module
- Added fuses to disable NODE_OPTIONS and --inspect debug arguments in packaged apps
- Added new data parameter to app.requestSingleInstanceLock()
- Added support for Windows Control Overlay on Windows
- Added support for the U2F Web API
- Added warning when ipcRenderer.sendSync() is called with no listeners for channel on ipcMain

Improved:
- Began passing securityOrigin in details for permission request handlers for media requests in addition to permission check handlers
- Clicking a hyperlink in a PDF now does what you'd expect
- Emit a warning when setting a crash key name longer than the maximum allowed length
- Enabled sandboxing by default on WebContents which do not use Node or preloads
- NativeImage objects are now serializable over IPC
- The crashReporter API is now powered by Crashpad on Linux

Removed/Deprecated:
- Usage of the desktopCapturer.getSources API from the renderer process has been deprecated and will be removed

Fixed:
- Enables support for navigator.keyboard.lock()
- Fixed <webview> background transparency regression
- Fixed BrowserView.setBackgroundColor() not working correctly
- Fixed an issue where some transparent windows would show with a white background
- Fixed an issue where transparency was not always set correctly on webContents
- Fixed an issue where windows with vibrancy types set on them would incorrectly have a white instead of transparent background
- Fixed behaviour on posix when passing lists into app.requestSingleInstanceLock(additionalData) API
- Fixed crash in webview creation caused by UAF in the browser process
- Fixed crash when using singleton api with packaged apps on macOS
- Fixed detached DevTools window not closing when a menu item with the toggleDevTools role was triggered
- Fixed imageAnimationPolicy not being respected
- Having a secure CSP will no longer cause a CSP violation warning to appear in console
- ~/.config/{App Name} will no longer be incorrectly deleted if it is a symlink on unix systems