Update Dependencies (Electron 12.0, TypeScript 4.2.2, ProseMirror)

[benrbray]

After a several-month-long development hiatus, several of the packages Noteworthy depends on received new major versions. After getting #5 is out of the way, I was able to start upgrading to the new versions.

Upgrading to TypeScript 4.2.2 only required the removal of a few delete operations. Upgrading to Electron 12.0.0 took more effort, as I decided to use this as an opportunity to finally set nodeIntegration: false and contextIsolation: true in the render process. This paves the way for user plugins that can safely query the web later.

Now that the render process has no access to Node APIs, it is necessary to use a Node-enabled preload script, which acts as a barrier between the Node APIs and the possibly-unsafe render process. This necessitated a new webpack entry point with the electron-preload target, and all the necessary webpack boilerplate to go along with it.

Helpful Resources:

• StackOverflow, Electron require() is not defined
• StackOverflow, Electron IPC and nodeIntegration
• Electron, Security, Native Capabilities, and Your Responsibility
• Error while importing electron in react | import { ipcRenderer } from 'electron' electron/electron#9920 , in particular this answer
• secure-electron-template
• StackOverflow, Using typescript in Electron's preload scripts
• GitHub Gist by earksiinii, "Using electron-webpack without Node integration"
• Update Electron-Webpack to use Electron security guidelines electron-userland/electron-webpack#425, which was part of the motivation for Manually Configure webpack and electron-builder instead of using electron-webpack #5
• Scott Logic, "Setting up a TypeScript Electron app in WebPack"