Electron Releases

Description of Change

Fixes six re-entrancy bugs with the same shape: native code emits an event or calls user JS while still holding this or a live iterator, and the handler (legitimately) destroys the owner or mutates the container. All are use-after-free / iterator-invalidation crashes; per-site detail is in each commit.

• select-bluetooth-device callback invoked synchronously — weak-self check after emit in BluetoothChooser.
• select-hid-device / hid-device-removed handler destroys the requesting webContents — weak-self check in HidChooserController.
• Custom protocol stream whose on() / removeListener() fires listeners synchronously — weak-self checks in NodeStreamLoader::Start, invalidate weak ptrs first in the destructor.
• select-webauthn-account / -authenticator listener calls back then throws — weak-self check after emit.
• Cancelling pending local-AI create() / append() — erase the AbortController map entry before calling abort() instead of holding the iterator across it.
• isolated-world-created listener that registers more listeners — iterate a copy of the callback vector.

Regression specs added for all except Bluetooth (needs a real adapter).

Checklist

• PR description included
• npm test passes
• tests are changed or added
• PR release notes describe the change in a way relevant to app developers, and are capitalized, punctuated, and past tense.

Release Notes

Notes: Fixed crashes when certain app event handlers call back into Electron synchronously.