fix: bundle theia native dependencies with stricter permissions

The Arduino company is no longer soliciting monetary donations. Community members who wish to contribute to the project
still have opportunities to do so via the other options listed here.

.github/workflows/build.yml

@@ -317,7 +317,7 @@ jobs:
           if not exist "${{ matrix.config.working-directory }}" mklink /d "${{ matrix.config.working-directory }}" "C:\actions-runner\_work\arduino-ide\arduino-ide"
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
 
       - name: Install Node.js
@@ -441,10 +441,10 @@ jobs:
           echo "CHANNEL_FILES_PATH=${{ runner.temp }}/channel-files" >> "$GITHUB_ENV"
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Download staged-for-merge channel file artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           merge-multiple: true
           path: ${{ env.CHANNEL_FILES_PATH }}
@@ -513,7 +513,7 @@ jobs:
 
     steps:
       - name: Download job transfer artifact that contains ${{ matrix.artifact.name }} tester build
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: ${{ env.JOB_TRANSFER_ARTIFACT_PREFIX }}${{ matrix.artifact.job-transfer-artifact-suffix }}
           path: ${{ env.BUILD_ARTIFACTS_FOLDER }}
@@ -533,7 +533,7 @@ jobs:
       BODY: ${{ steps.changelog.outputs.BODY }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0 # To fetch all history for all branches and tags.
 
@@ -600,7 +600,7 @@ jobs:
 
     steps:
       - name: Download all job transfer artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           merge-multiple: true
           path: ${{ env.ARTIFACTS_FOLDER }}
@@ -643,7 +643,7 @@ jobs:
 
     steps:
       - name: Download all job transfer artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           merge-multiple: true
           path: ${{ env.ARTIFACTS_FOLDER }}

.github/workflows/check-containers.yml

@@ -40,7 +40,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Build and push to local registry
         uses: docker/build-push-action@v6

.github/workflows/check-i18n-task.yml

@@ -56,7 +56,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Install Node.js 18.17
         uses: actions/setup-node@v4

.github/workflows/check-javascript.yml

@@ -65,7 +65,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node.js
         uses: actions/setup-node@v4

.github/workflows/check-yarn.yml

@@ -64,7 +64,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node.js
         uses: actions/setup-node@v4

.github/workflows/compose-full-changelog.yml

@@ -21,7 +21,7 @@ jobs:
       
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Install Node.js
         uses: actions/setup-node@v4

.github/workflows/i18n-nightly-push.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Install Node.js 18.17
         uses: actions/setup-node@v4

.github/workflows/i18n-weekly-pull.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Install Node.js 18.17
         uses: actions/setup-node@v4

.github/workflows/push-container-images.yml

@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Log in to the Container registry
         uses: docker/login-action@v3

.github/workflows/sync-labels.yml

@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Download JSON schema for labels configuration file
         id: download-schema
@@ -106,10 +106,10 @@ jobs:
           echo "flag=--dry-run" >> $GITHUB_OUTPUT
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Download configuration file artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           merge-multiple: true
           pattern: ${{ env.CONFIGURATIONS_ARTIFACT_PREFIX }}*

.github/workflows/test-javascript.yml

@@ -82,7 +82,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node.js
         uses: actions/setup-node@v4

.github/workflows/themes-weekly-pull.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Install Node.js
         uses: actions/setup-node@v4

README.md

@@ -46,9 +46,9 @@ See [**the contributor guide**](docs/CONTRIBUTING.md#contributor-guide) for more
 
 See the [**development guide**](docs/development.md) for a technical overview of the application and instructions for building the code.
 
-## Donations
+### Support the project
 
-This open source code was written by the Arduino team and is maintained on a daily basis with the help of the community. We invest a considerable amount of time in development, testing and optimization. Please consider [donating](https://www.arduino.cc/en/donate/) or [sponsoring](https://github.com/sponsors/arduino) to support our work, as well as [buying original Arduino boards](https://store.arduino.cc/) which is the best way to make sure our effort can continue in the long term.
+This open source code was written by the Arduino team and is maintained on a daily basis with the help of the community. We invest a considerable amount of time in development, testing and optimization. Please consider [buying original Arduino boards](https://store.arduino.cc/) to support our work on the project.
 
 ## License
 

arduino-ide-extension/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arduino-ide-extension",
-  "version": "2.3.6",
+  "version": "2.3.7",
   "description": "An extension for Theia building the Arduino IDE",
   "license": "AGPL-3.0-or-later",
   "scripts": {

docs/CONTRIBUTING.md

@@ -7,21 +7,19 @@ Thanks for your interest in contributing to this project!
 There are several ways you can get involved:
 
 | Type of contribution                      | Contribution method                                              |
-| ----------------------------------------- | -------------------------------------------------------------------------------- |
+| ----------------------------------------- | ---------------------------------------------------------------- |
 | - Support<br/>- Question<br/>- Discussion | Post on the [**Arduino Forum**][forum]                           |
 | - Bug report<br/>- Feature request        | Issue report (see the guide [**here**][issues])                  |
 | Testing                                   | Beta testing, PR review (see the guide [**here**][beta-testing]) |
 | Translation                               | See the guide [**here**][translate]                              |
 | - Bug fix<br/>- Enhancement               | Pull request (see the guide [**here**][prs])                     |
-| Monetary                                  | - [Donate][donate]<br/>- [Sponsor][sponsor]<br/>- [Buy official products][store] |
+| Monetary                                  | [Buy official products][store]                                   |
 
 [forum]: https://forum.arduino.cc
 [issues]: contributor-guide/issues.md#issue-report-guide
 [beta-testing]: contributor-guide/beta-testing.md#beta-testing-guide
 [translate]: contributor-guide/translation.md#translator-guide
 [prs]: contributor-guide/pull-requests.md#pull-request-guide
-[donate]: https://www.arduino.cc/en/donate/
-[sponsor]: https://github.com/sponsors/arduino
 [store]: https://store.arduino.cc
 
 ## Resources

docs/contributor-guide/translation.md

@@ -1,13 +1,41 @@
 # Translator Guide
 
-The text of the Arduino IDE interface is translated into several languages. The language can be selected in the dialog opened via **File > Preferences** in the Arduino IDE menus (**Arduino IDE > Preferences** for macOS users).
+The text of the Arduino IDE user interface is translated into several languages. The language can be selected in the dialog opened via **File > Preferences** in the Arduino IDE menus (**Arduino IDE > Preferences** for macOS users).
 
 Translating text and improving on existing translations is a valuable contribution to the project, helping make Arduino accessible to everyone.
 
-The translations for the text found in the Arduino IDE come from several sources:
+The translations for the text found in Arduino IDE come from several sources:
 
 ## Arduino IDE Text
 
+The text of the Arduino IDE application can be translated to the following languages:
+
+- čeština (Czech)
+- Deutsch (German)
+- Dutch
+- español (Spanish)
+- français (French)
+- italiano (Italian)
+- magyar (Hungarian)
+- polski (Polish)
+- português (Portuguese)
+- Türkçe (Turkish)
+- български (Bulgarian)
+- русский (Russian)
+- українська (Ukrainian)
+- 한국어 (Korean)
+- 中文(简体) (Chinese Simplified)
+- 中文(繁體) (Chinese Traditional)
+- 日本語 (Japanese)
+
+---
+
+⚠ Unfortunately the 3rd party localization system used by the Arduino IDE application imposes a technical limitation to that set of languages. For this reason, we are unable to add support to Arduino IDE for additional languages (see [`arduino/arduino-ide#1447`](https://github.com/arduino/arduino-ide/issues/1447) for details).
+
+There is no technical limitation on the set of languages to which **Arduino CLI** can be translated. If you would like to contribute translations for a language not on the above list, you are welcome to [contribute to the **Arduino CLI** project](#arduino-cli-text).
+
+---
+
 Translations of Arduino IDE's text is done in the "**Arduino IDE 2.0**" project on the **Transifex** localization platform:
 
 https://explore.transifex.com/arduino-1/ide2/

electron-app/package.json

@@ -1,7 +1,7 @@
 {
   "private": true,
   "name": "electron-app",
-  "version": "2.3.6",
+  "version": "2.3.7",
   "license": "AGPL-3.0-or-later",
   "main": "./src-gen/backend/electron-main.js",
   "dependencies": {
@@ -19,7 +19,7 @@
     "@theia/preferences": "1.57.0",
     "@theia/terminal": "1.57.0",
     "@theia/workspace": "1.57.0",
-    "arduino-ide-extension": "2.3.6"
+    "arduino-ide-extension": "2.3.7"
   },
   "devDependencies": {
     "@theia/cli": "1.57.0",

electron-app/resources/entitlements.mac.plist

@@ -8,7 +8,5 @@
     <true/>
     <key>com.apple.security.cs.disable-library-validation</key>
     <true/>
-    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
-    <true/>
 </dict>
 </plist>

electron-app/webpack.config.js

@@ -1,5 +1,7 @@
 const path = require('node:path');
+const fs = require('fs');
 const webpack = require('webpack');
+const TheiaNativeWebpackPlugin = require('@theia/native-webpack-plugin');
 const frontend = require('./gen-webpack.config');
 const backend = require('./gen-webpack.node.config');
 const {
@@ -39,6 +41,27 @@ backend.config.entry['parcel-watcher'] = {
   },
 };
 
+// Override Theia native dependency bundler to assign stricter file permissions (chmod 755)
+// https://github.com/eclipse-theia/theia/blob/9a52544fb4c1ea1d3d0d6bcbe106b97184279030/dev-packages/native-webpack-plugin/src/native-webpack-plugin.ts#L149
+class NativeWebpackPlugin extends TheiaNativeWebpackPlugin {
+  // Override the method that writes/copies files
+  async copyExecutable(source, target) {
+    const targetDirectory = path.dirname(target);
+    await fs.promises.mkdir(targetDirectory, { recursive: true });
+    await fs.promises.copyFile(source, target);
+    await fs.promises.chmod(target, 0o755);
+  }
+}
+backend.config.plugins.push(new NativeWebpackPlugin({
+  out: 'native',
+  trash: true,
+  ripgrep: true,
+  pty: true,
+  nativeBindings: {
+    drivelist: 'drivelist/build/Release/drivelist.node',
+  },
+}));
+
 // Use a customized backend main that can enable the file logger in bundled mode.
 backend.config.entry['main'] = require.resolve('./arduino-ide-backend-main.js');
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "arduino-ide",
-  "version": "2.3.6",
+  "version": "2.3.7",
   "description": "Arduino IDE",
   "repository": "https://github.com/arduino/arduino-ide.git",
   "author": "Arduino SA",