chore: bump node-libcurl for electron 43 and windows arm support [INS-3111] (#10305)

Author: ryan-willis

.nvmrc

@@ -1 +1 @@
-24.14.0
+24.18.0

package-lock.json

@@ -11,7 +11,7 @@
   },
   "homepage": "https://github.com/kong/insomnia#readme",
   "engines": {
-    "node": ">=24",
+    "node": ">=24.18.0",
     "npm": ">=11"
   },
   "workspaces": [
@@ -31,8 +31,8 @@
     "type-check": "npm run type-check --workspaces --if-present",
     "test": "npm run test --workspaces --if-present",
     "clean": "git clean -dfX",
-    "install-libcurl-electron": "node-pre-gyp install --directory node_modules/@getinsomnia/node-libcurl --update-binary --runtime=electron --target=41.0.3",
-    "install-libcurl-node": "node-pre-gyp install --directory node_modules/@getinsomnia/node-libcurl --update-binary --runtime=node --target=24.14.0",
+    "install-libcurl-electron": "node-pre-gyp install --directory node_modules/@getinsomnia/node-libcurl --update-binary --runtime=electron --target=43.2.0",
+    "install-libcurl-node": "node-pre-gyp install --directory node_modules/@getinsomnia/node-libcurl --update-binary --runtime=node --target=24.18.0",
     "inso-start": "npm start -w insomnia-inso",
     "inso-package": "npm run build -w insomnia-inso && npm run package -w insomnia-inso",
     "watch:app": "npm run build:electron-entrypoints -w insomnia && npm run start:dev-server -w insomnia",
@@ -83,7 +83,18 @@
     }
   },
   "dependencies": {
-    "@getinsomnia/node-libcurl": "3.2.2",
+    "@getinsomnia/node-libcurl": "3.3.0",
     "ajv": "^8.17.1"
+  },
+  "allowScripts": {
+    "@getinsomnia/node-libcurl@3.3.0": true,
+    "@scarf/scarf@1.4.0": true,
+    "electron-winstaller@5.4.0": true,
+    "esbuild@0.25.12": true,
+    "esbuild@0.27.5": true,
+    "fsevents@2.3.2": true,
+    "fsevents@2.3.3": true,
+    "node-llama-cpp@3.18.1": true,
+    "protobufjs@7.6.4": true
   }
 }

package.json

@@ -41,7 +41,7 @@
     "uuid": "^9.0.1"
   },
   "devDependencies": {
-    "@getinsomnia/node-libcurl": "3.2.2",
+    "@getinsomnia/node-libcurl": "3.3.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
     "@types/deep-equal": "^1.0.4",
     "mocha": "^11.7.5",

packages/insomnia-data/package.json

@@ -59,7 +59,7 @@
     "@fortawesome/free-regular-svg-icons": "^6.7.2",
     "@fortawesome/free-solid-svg-icons": "^6.7.2",
     "@fortawesome/react-fontawesome": "^3.0.2",
-    "@getinsomnia/node-libcurl": "3.2.2",
+    "@getinsomnia/node-libcurl": "3.3.0",
     "@getinsomnia/srp-js": "1.0.0-alpha.1",
     "@grpc/grpc-js": "^1.14.4",
     "@grpc/proto-loader": "^0.7.13",
@@ -202,7 +202,7 @@
     "@types/ws": "^8.18.1",
     "@vitejs/plugin-react": "5.1.2",
     "cross-env": "^10.1.0",
-    "electron": "41.0.3",
+    "electron": "43.2.0",
     "electron-builder": "26.8.1",
     "electron-builder-squirrel-windows": "26.8.1",
     "electron-devtools-installer": "^3.2.1",

packages/insomnia/package.json

@@ -114,6 +114,37 @@ describe('resolveDbByKey requires a valid protocol auth token', () => {
   });
 });
 
+describe('resolveDbByKey answers CORS preflight and tags responses with CORS headers', () => {
+  beforeEach(() => {
+    _testOnlyResetTemplatingDbAuthToken();
+  });
+
+  it('answers an OPTIONS preflight with 204 and CORS headers, without requiring a token', async () => {
+    const { resolveDbByKey } = await import('../templating-worker-database');
+    const req = new Request('insomnia-templating-worker-database://settings.get', {
+      method: 'OPTIONS',
+      headers: { Origin: 'https://insomnia-app.local' },
+    });
+    const res = await resolveDbByKey(req);
+    expect(res.status).toBe(204);
+    expect(res.headers.get('Access-Control-Allow-Origin')).toBe('https://insomnia-app.local');
+    expect(res.headers.get('Access-Control-Allow-Headers')).toContain(TEMPLATING_DB_AUTH_HEADER);
+    expect(res.headers.get('Access-Control-Allow-Methods')).toContain('OPTIONS');
+  });
+
+  it('tags an authorized response with an Access-Control-Allow-Origin echoing the request Origin', async () => {
+    const token = getOrCreateTemplatingDbAuthToken();
+    const { resolveDbByKey } = await import('../templating-worker-database');
+    const req = new Request('insomnia-templating-worker-database://settings.get', {
+      method: 'POST',
+      headers: { [TEMPLATING_DB_AUTH_HEADER]: token, Origin: 'https://insomnia-app.local' },
+      body: '{}',
+    });
+    const res = await resolveDbByKey(req);
+    expect(res.headers.get('Access-Control-Allow-Origin')).toBe('https://insomnia-app.local');
+  });
+});
+
 describe('protocol-dispatch handlers resolve `directory` from the trusted registry, not the request body', () => {
   let legitDir: string;
   let foreignDir: string;

packages/insomnia/src/main/__tests__/templating-worker-database-protocol-authorization.test.ts

@@ -28,6 +28,7 @@ export async function registerInsomniaProtocols() {
         standard: true,
         supportFetchAPI: true,
         stream: true,
+        corsEnabled: true,
       },
     },
     {
@@ -40,7 +41,7 @@ export async function registerInsomniaProtocols() {
     },
     {
       scheme: templatingWorkerDatabaseInterface,
-      privileges: { secure: true, standard: true, supportFetchAPI: true },
+      privileges: { secure: true, standard: true, supportFetchAPI: true, corsEnabled: true },
     },
   ]);