electron / electron/forge

Deprecated version of WiX could lead to security issues

Open
#3,951 1 comment 2 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
7.1k
Forks
641
Avg merge
3d 1h
Merged PRs (30d)
30

Description

### Pre-flight checklist

- [x] I have read the [contribution documentation](https://github.com/electron/forge/blob/main/CONTRIBUTING.md) for this project.
- [x] I agree to follow the [code of conduct](https://github.com/electron/electron/blob/main/CODE_OF_CONDUCT.md) that this project uses.
- [x] I have searched the issue tracker for a bug that matches the one I want to file, without success.

### Forge version

7.8.1

### Electron version

36.0.0

### Operating system

Windows 11 Enterprise (22631)

### Last known working Forge version

_No response_

### Expected behavior

The WiX version used should be > 3 because of the deprecation.

### Actual behavior

When following the documentation for using the WiX MSI maker it says to install WiX v3, but when i follow the link to their documentation I stumble upon this message saying it's deprecated since february 2025:

![Image](https://github.com/user-attachments/assets/0ac476bb-7e92-4496-b74e-ca48720e0d59)

For security concerns I can't use that at my company but they still want us to produce a MSI installer.

### Steps to reproduce

Follow the documentation here : https://www.electronforge.io/config/makers/wix-msi

### Additional information

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.