chore: Update electron-builder v26.0.3 (#3047)

* updated electron-builder v26.0.3

* add flipFuses

Author: jeanfbrito

build/afterPack.js

@@ -0,0 +1,43 @@
+const { flipFuses, FuseVersion, FuseV1Options } = require('@electron/fuses');
+
+exports.default = async function afterPack(context) {
+  console.log(
+    'AfterPack: Platform =',
+    context.electronPlatformName,
+    'OutDir =',
+    context.appOutDir
+  );
+
+  // Skip fuses for MAS builds - they are incompatible
+  if (
+    context.electronPlatformName === 'mas' ||
+    context.appOutDir.includes('mas-universal')
+  ) {
+    console.log(
+      'Skipping fuses for MAS build (App Store has its own integrity validation)'
+    );
+    return;
+  }
+
+  // Apply security fuses for regular builds
+  console.log('Applying electron fuses for enhanced security');
+
+  const appPath =
+    context.electronPlatformName === 'darwin'
+      ? `${context.appOutDir}/Rocket.Chat.app`
+      : context.appOutDir;
+
+  await flipFuses(appPath, {
+    version: FuseVersion.V1,
+    [FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: true,
+    [FuseV1Options.OnlyLoadAppFromAsar]: true,
+    [FuseV1Options.RunAsNode]: true,
+    [FuseV1Options.EnableCookieEncryption]: false,
+    [FuseV1Options.EnableNodeOptionsEnvironmentVariable]: true,
+    [FuseV1Options.EnableNodeCliInspectArguments]: true,
+    [FuseV1Options.LoadBrowserProcessSpecificV8Snapshot]: false,
+    [FuseV1Options.GrantFileProtocolExtraPrivileges]: true,
+  });
+
+  console.log('Electron fuses applied successfully');
+};

electron-builder.json

@@ -6,6 +6,7 @@
     "name": "Rocket.Chat",
     "schemes": ["rocketchat"]
   },
+  "afterPack": "./build/afterPack.js",
   "mac": {
     "category": "public.app-category.productivity",
     "target": ["dmg", "pkg", "zip", "mas"],
@@ -70,12 +71,10 @@
       }
     ],
     "icon": "build/icon.ico",
-    "publisherName": "Rocket.Chat Technologies Corp.",
     "legalTrademarks": "",
     "verifyUpdateCodeSignature": true,
     "requestedExecutionLevel": "asInvoker",
     "signAndEditExecutable": true,
-    "signDlls": false,
     "artifactName": "rocketchat-${version}-${os}-${arch}.${ext}"
   },
   "nsis": {
@@ -113,15 +112,11 @@
     "executableName": "rocketchat-desktop",
     "category": "GNOME;GTK;Network;InstantMessaging",
     "desktop": {
-      "StartupWMClass": "Rocket.Chat",
-      "MimeType": "x-scheme-handler/rocketchat",
       "entry": {
         "Name": "Rocket.Chat",
         "Comment": "Official Rocket.Chat Desktop Client",
         "GenericName": "Rocket.Chat",
-        "Categories": "GNOME;GTK;Network;InstantMessaging",
-        "StartupWMClass": "Rocket.Chat",
-        "MimeType": "x-scheme-handler/rocketchat"
+        "Categories": "GNOME;GTK;Network;InstantMessaging"
       }
     },
     "artifactName": "rocketchat-${version}-${os}-${arch}.${ext}"

package.json

@@ -33,6 +33,7 @@
     "build": "rollup -c",
     "build:watch": "rollup -c -w",
     "build-mac": "yarn build && yarn electron-builder --publish never --mac --universal",
+    "build-mas": "yarn build && yarn electron-builder --publish never --mac mas --universal",
     "build-win": "yarn build && yarn electron-builder --publish never --win",
     "build-linux": "yarn build && yarn electron-builder --publish never --linux",
     "build-assets": "ts-node -O '{\"module\":\"commonjs\"}' src/buildAssets.ts",
@@ -88,6 +89,7 @@
     "@babel/preset-env": "~7.23.7",
     "@babel/preset-react": "~7.23.3",
     "@babel/preset-typescript": "~7.23.3",
+    "@electron/fuses": "~1.8.0",
     "@fiahfy/icns-convert": "~0.0.12",
     "@fiahfy/ico-convert": "~0.0.12",
     "@kayahr/jest-electron-runner": "29.14.0",
@@ -111,7 +113,7 @@
     "conventional-changelog-cli": "~4.1.0",
     "convert-svg-to-png": "~0.6.4",
     "electron": "~34.0.2",
-    "electron-builder": "25.1.8",
+    "electron-builder": "26.0.3",
     "electron-devtools-installer": "^3.2.0",
     "electron-notarize": "^1.2.2",
     "eslint": "~8.56.0",