Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update nodejs #595

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update nodejs #595

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 8, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@types/node (source) ^18.19.71 -> ^18.19.80 age adoption passing confidence devDependencies patch
node (source) 18.19.0 -> 18.20.7 age adoption passing confidence engines minor
node 18.19.0-alpine3.18 -> 18.20.3-alpine3.18 age adoption passing confidence stage minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

nodejs/node (node)

v18.20.7: 2025-02-20, Version 18.20.7 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
Commits

v18.20.6: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
  • CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

  • CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits

v18.20.5: 2024-11-12, Version 18.20.5 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
  • [ac37e554a5] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #​55333
Commits

v18.20.4: 2024-07-08, Version 18.20.4 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
Commits

v18.20.3: 2024-05-21, Version 18.20.3 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release fixes a regression introduced in Node.js 18.19.0 where http.server.close() was incorrectly closing idle connections.

A fix has also been included for compiling Node.js from source with newer versions of Clang.

The list of keys used to sign releases has been synchronized with the current list from the main branch.

Updated dependencies
  • acorn updated to 8.11.3.
  • acorn-walk updated to 8.3.2.
  • ada updated to 2.7.8.
  • c-ares updated to 1.28.1.
  • corepack updated to 0.28.0.
  • nghttp2 updated to 1.61.0.
  • ngtcp2 updated to 1.3.0.
  • npm updated to 10.7.0. Includes a fix from [email protected] to limit the number of open connections npm/cli#7324.
  • simdutf updated to 5.2.4.
  • zlib updated to 1.3.0.1-motley-7d77fb7.
Commits

v18.20.2: 2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows
Commits

v18.20.1: 2024-04-03, Version 18.20.1 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
  • CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
  • llhttp version 9.2.1
  • undici version 5.28.4
Commits

v18.20.0: 2024-03-26, Version 18.20.0 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes
Added support for import attributes

Support has been added for import attributes, to replace the old import
assertions syntax. This will aid migration by making the new syntax available
across all currently supported Node.js release lines.

This adds the with keyword which should be used in place of the previous
assert keyword, which will be removed in a future semver-major Node.js
release.

For example,

import "foo" assert { ... }

should be replaced with

import "foo" with { ... }

For more details, see

Contributed by Nicolò Ribaudo in #​51136
and Antoine du Hamel in #​50140.

Doc deprecation for dirent.path

Please use newly added dirent.parentPath instead.

Contributed by Antoine du Hamel in #​50976
and #​51020.

Experimental node-api feature flags

Introduces an experimental feature to segregate finalizers that affect GC state.
A new type called node_api_nogc_env has been introduced as the const version
of napi_env and node_api_nogc_finalize as a variant of napi_finalize that
accepts a node_api_nogc_env as its first argument.

This feature can be turned off by defining
NODE_API_EXPERIMENTAL_NOGC_ENV_OPT_OUT.

Contributed by Gabriel Schulhof in #​50060.

Root certificates updated to NSS 3.98

Certificates added:

  • Telekom Security TLS ECC Root 2020
  • Telekom Security TLS RSA Root 2023

Certificates removed:

  • Security Communication Root CA
Updated dependencies
  • ada updated to 2.7.6.
  • base64 updated to 0.5.2.
  • c-ares updated to 1.27.0.
  • corepack updated to 0.25.2.
  • ICU updated to 74.2. Includes CLDR 44.1 and Unicode 15.1.
  • npm updated to 10.5.0. Fixes a regression in signals not being passed onto child processes.
  • simdutf8 updated to 4.0.8.
  • Timezone updated to 2024a.
  • zlib updated to 1.3.0.1-motley-40e35a7.
vm: fix V8 compilation cache support for vm.Script

Previously repeated compilation of the same source code using vm.Script
stopped hitting the V8 compilation cache after v16.x when support for
importModuleDynamically was added to vm.Script, resulting in a performance
regression that blocked users (in particular Jest users) from upgrading from
v16.x.

The recent fixes allow the compilation cache to be hit again
for vm.Script when --experimental-vm-modules is not used even in the
presence of the importModuleDynamically option, so that users affected by the
performance regression can now upgrade. Ongoing work is also being done to
enable compilation cache support for vm.CompileFunction.

Contributed by Joyee Cheung in #​49950
and #​50137.

Commits

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label May 8, 2023
@renovate renovate bot requested a review from a team May 8, 2023 00:04
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.5 Update dependency @types/node to ^18.16.6 May 9, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from 77fe36c to 0b57d88 Compare May 9, 2023 01:34
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.6 Update dependency @types/node to ^18.16.7 May 10, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from 0b57d88 to a5232a9 Compare May 10, 2023 09:01
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.7 Update dependency @types/node to ^18.16.8 May 11, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from a5232a9 to b9be263 Compare May 11, 2023 20:40
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.8 Update dependency @types/node to ^18.16.9 May 13, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from b9be263 to 62b2140 Compare May 13, 2023 16:57
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.9 Update dependency @types/node to ^18.16.10 May 16, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from 62b2140 to 35772ce Compare May 16, 2023 02:08
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.10 Update dependency @types/node to ^18.16.12 May 16, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from 35772ce to 8bcf2ce Compare May 16, 2023 22:32
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.12 Update dependency @types/node to ^18.16.13 May 18, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from 8bcf2ce to 674e3ab Compare May 18, 2023 16:36
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.13 Update dependency @types/node to ^18.16.14 May 21, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from 674e3ab to a4e8bd9 Compare May 21, 2023 22:01
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.14 Update dependency @types/node to ^18.16.15 May 25, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from a4e8bd9 to f0cce5c Compare May 25, 2023 21:40
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.15 Update dependency @types/node to ^18.16.16 May 26, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from f0cce5c to 94a03d7 Compare May 26, 2023 22:19
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.16 Update dependency @types/node to ^18.16.17 Jun 12, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from 94a03d7 to 7d772ec Compare June 12, 2023 09:00
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.17 Update dependency @types/node to ^18.16.18 Jun 13, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from 7d772ec to 1f30867 Compare June 13, 2023 04:59
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.18 Update dependency @types/node to ^18.16.19 Jul 1, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from 1f30867 to d757acd Compare July 1, 2023 07:41
@renovate renovate bot changed the title Update dependency @types/node to ^18.16.19 Update dependency @types/node to ^18.16.20 Jul 21, 2023
@renovate renovate bot force-pushed the renovate/nodejs branch from d757acd to 108cd70 Compare July 21, 2023 22:53
@renovate renovate bot force-pushed the renovate/nodejs branch from e836cb4 to e052950 Compare January 6, 2025 11:30
@renovate renovate bot force-pushed the renovate/nodejs branch 5 times, most recently from 373a8a6 to 26007e2 Compare January 21, 2025 07:37
@renovate renovate bot force-pushed the renovate/nodejs branch 8 times, most recently from 19492e6 to 8c6bab6 Compare January 28, 2025 09:13
@renovate renovate bot force-pushed the renovate/nodejs branch 4 times, most recently from a2470b0 to 2021a06 Compare February 4, 2025 00:48
@renovate renovate bot force-pushed the renovate/nodejs branch 5 times, most recently from 53531b1 to 59daf49 Compare February 13, 2025 23:02
@renovate renovate bot force-pushed the renovate/nodejs branch 2 times, most recently from 007ec38 to 9648a8a Compare February 27, 2025 09:27
@renovate renovate bot force-pushed the renovate/nodejs branch 2 times, most recently from 4fe8f20 to d320e80 Compare March 5, 2025 10:07
@renovate renovate bot force-pushed the renovate/nodejs branch from d320e80 to 05d38b1 Compare March 9, 2025 11:12
@renovate renovate bot force-pushed the renovate/nodejs branch from 05d38b1 to 1023d78 Compare March 10, 2025 11:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants