Bumps [lodash](https://github.com/lodash/lodash) from 4.17.19 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.19...4.17.21

)

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: Christoph Settgast <csett86@web.de>

UDP connections (for WebRTC) require both the server and the client entitlement,
as an app with only the client entitlement enabled can send, but not receive, data.

See https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_security_network_client



Signed-off-by: Christoph Settgast <csett86@web.de>

Security and bug fixes

Signed-off-by: Christoph Settgast <csett86@web.de>

Signed-off-by: Christoph Settgast <csett86@web.de>

Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md)
- [Commits](https://github.com/npm/ssri/compare/v6.0.1...v6.0.2

)

Signed-off-by: dependabot[bot] <support@github.com>

Security: backported fix for chromium:1196683. #28638

Signed-off-by: Christoph Settgast <csett86@web.de>

devDependencies left out intentionally, as updating babel & eslint requires
more work and more dependencies due to the deprecation of babel-eslint.

Modeled after https://github.com/electron-userland/electron-builder/issues/5371#issuecomment-791771150
but written with promised-based fs nodejs API.

This allows to drop the app-builder-lib .desktop patch, as
--no-sandbox is now part of all linux targets via the additional launcher script,
so the arg can be dropped from the .desktop file Exec line.

Manual workaround is removed from the README as well.

Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits

)

Signed-off-by: dependabot[bot] <support@github.com>

This is a workaround for the electron-builder issue
https://github.com/electron-userland/electron-builder/issues/5294

It's necessary for auto-updates.

Several fixes and patch-updated bundled Chromium.
For details see https://github.com/electron/electron/releases/tag/v12.0.2



Signed-off-by: Christoph Settgast <csett86@web.de>

- disable the autoupdater if running as mas (was not working anyway, just logging an error on every start)
- replace check via app.requestSingleInstanceLock() with LSMultipleInstancesProhibited in Info.plist
  due to https://github.com/electron/electron/issues/15958


- Quit the app also when all windows are closed to conform to macOS Human Interface Guidelines
  Comments from review:
  If the application is a single-window app, it might be appropriate to save data and quit the app when the main window is closed.
- "asarUnpack": "**/*.node" to also sign the native addons when packaging
- add the required mas-specific entitlements which include the app-sandbox key

Signed-off-by: Christoph Settgast <csett86@web.de>

Apple's documentation suggests that apps should be shipped as universal binaries
to simplify the process for the users. See eg. https://developer.apple.com/documentation/apple-silicon/porting-your-macos-apps-to-apple-silicon



Also update electron-updater to latest version (matching electron-builder version)
as part of this.

Signed-off-by: Christoph Settgast <csett86@web.de>

Just marking the remote control feature as disabled without explaining why
was not at all helpful to end users needing this feature.  So link to a couple
of pages to help them understand the reasoning.  It may even attract
developers to work on a fix.

Several fixes and patch-updated bundled Chromium.
For details see https://github.com/electron/electron/releases/tag/v12.0.1



Signed-off-by: Christoph Settgast <csett86@web.de>

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.4.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](https://github.com/indutny/elliptic/compare/v6.5.3...v6.5.4

)

Signed-off-by: dependabot[bot] <support@github.com>