chore: Update dependency nw-builder to v4.16.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
nw-builder	4.13.8 -> 4.16.0

---

Release Notes

nwutils/nw-builder (nw-builder)

v4.16.0

Compare Source

Features

• deps: NW.js 0.103.0, Node v24.5.0, npm v11.5.2 (#​1446) (b9e2e37)
• deps: NW.js v0.104.0, Node v24.7.0, npm v11.6.1 (#​1449) (eeb39bf)

Bug Fixes

• util: parse options.managedManifest correctly (d3ae0da)

Chores

• deps: bump actions (83c1df4)
• deps: bump actions/setup-node from 4.4.0 to 5.0.0 in /.github/workflows in the gha group (#​1447) (7c50902)
• deps: bump googleapis/release-please-action from 4.2.0 to 4.3.0 in /.github/workflows in the gha group (#​1442) (1cab1a8)
• deps: bump the npm-all group across 1 directory with 4 updates (#​1443) (124d8fb)
• deps: bump the npm-all group across 1 directory with 4 updates (#​1448) (8053fe1)
• deps: bump the npm-all group across 1 directory with 8 updates (#​1458) (a3e2afa)

v4.15.0

Compare Source

Features

• deps: NW.js v0.102.1, Node v24.5.0, npm v11.5.2 (#​1439) (11b7240)

Chores

• deps-dev: bump the npm-all group across 1 directory with 4 updates (#​1438) (c1a5660)
• deps: bump actions/checkout from 4.2.2 to 5.0.0 in /.github/workflows in the gha group (#​1436) (ac79b8b)

v4.14.2

Compare Source

Bug Fixes

• util: add default value for Exec in Desktop Entry file (#​1434) (0b7f75a), closes #​1433
• util: remove path.resolve for options.app.icon (#​1432) (bf7be13)

Chores

• deps-dev: bump eslint-plugin-jsdoc from 52.0.2 to 52.0.4 in the npm-all group (#​1427) (6efefe7)

v4.14.1

Compare Source

Bug Fixes

• cli: parse argument as srcDir option (#​1425) (8483dd4), closes #​1424
• deps: security update for tmp (#​1426) (106d545)

v4.14.0

Compare Source

Features

• deps: NW.js v102, Node v24.3.0, npm v11.5.2 (1971786)

Bug Fixes

• cli: parse --app.* options (#​1422) (175a263), closes #​1419
• deps: security update for braces-expansion (96f00f4)
• deps: security update for form-data (#​1416) (95fbfa1)

Chores

• ci: enforce excluding nw only (87ade48)
• ci: update nw seperately (884a07b)
• deps: bump the npm group across 1 directory with 5 updates (#​1418) (7675df5)
• docs: update maintainer guidelines (c364721)

v4.13.16

Compare Source

Bug Fixes

• util: update getManifest return type and handle empty response (#​1410) (c287c07)

v4.13.15

Compare Source

Bug Fixes

• update default NW.js version url (#​1412) (467bab8), closes #​1411

Chores

• ci: enable continue-on-error for env job (b6ee211)
• deps: bump davelosert/vitest-coverage-report-action from 2.8.2 to 2.8.3 in /.github/workflows in the gha group (#​1398) (548d0e5)
• deps: bump the npm group across 1 directory with 10 updates (#​1409) (6dd0311)
• deps: bump the npm group across 1 directory with 9 updates (#​1404) (29204c1)
• fix linting errors (a7f57ed)

v4.13.14

Compare Source

Bug Fixes

• bld: disable rebuilding Node addons (464dca2)

Chores

• ci: check for NPM_TOKEN in separate job (74ca486)
• deps: bump the npm group across 1 directory with 4 updates (#​1394) (560dd73)
• docs: clarify addon rebuilding disabled (bb910e1)
• docs: remove mention of rebuilding node addons (e3ae5b3)

v4.13.13

Compare Source

Bug Fixes

• security: use execFileSync instead of execSync (48193f0)

v4.13.12

Compare Source

Bug Fixes

• util: specify default values in CLI invocation (3b3799d)

Chores

• ci: check if NPM_TOKEN exists as action step (6b7e64e)
• ci: fail if NPM_TOKEN not set (84484a1)
• ci: move NPM_TOKEN conditional inside action steps (ea6ea4c)
• ci: set continue-on-error to false (3b9a8a2)
• deps: bump davelosert/vitest-coverage-report-action from 2.8.1 to 2.8.2 in /.github/workflows in the gha group (#​1388) (7a51dd4)
• deps: bump the gha group across 1 directory with 2 updates (#​1385) (2a98e27)
• deps: bump the npm group across 1 directory with 6 updates (#​1378) (5df5c51)
• deps: bump the npm group across 1 directory with 8 updates (#​1390) (a5ce5be)
• deps: bump the npm group across 1 directory with 9 updates (#​1386) (1f55773)
• deps: bump vite from 6.2.2 to 6.2.3 in the npm_and_yarn group (#​1377) (4f4379d)
• deps: bump vite from 6.2.3 to 6.2.4 in the npm_and_yarn group (#​1379) (e425d56)

v4.13.11

Compare Source

Bug Fixes

• util: use strict boolean check for glob flag (63c931d)

Chores

• ci: add concurrency (41494f5)
• ci: do not run npm publish job if NPM_TOKEN is not available (e21051c)
• deps: bump @​babel/runtime from 7.26.0 to 7.26.10 in the npm_and_yarn group (#​1373) (0b2d34e)
• deps: bump actions/setup-node from 4.2.0 to 4.3.0 in /.github/workflows in the gha group (#​1370) (5509ca9)
• deps: bump the npm group across 1 directory with 5 updates (#​1371) (ba554d2)

v4.13.10

Compare Source

Bug Fixes

• ci: give release please write permissions (920e4a0)
• codeql: address code scanning alerts (#​1360) (10cb3ba)

Chores

• deps: bump googleapis/release-please-action from 4.1.4 to 4.2.0 in /.github/workflows in the gha group across 1 directory (#​1364) (0f28592)
• deps: bump the npm group across 1 directory with 6 updates (#​1368) (1aaffa5)

v4.13.9

Compare Source

Bug Fixes

• get/verify: use crypto.timingSafeEqual to verify shasums (3dd449a)

Chores

• deps: bump the gha group across 1 directory with 2 updates (#​1358) (48e4947)
• deps: bump the npm group across 1 directory with 13 updates (#​1357) (9d3fe0c)
• reverse undeprecation of get and run mode (e139740)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.