Skip to content

chore(deps): update node.js to v18.20.8 - #99

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-18.x
Open

chore(deps): update node.js to v18.20.8#99
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-18.x

Conversation

@renovate

@renovate renovate Bot commented Jan 6, 2023 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
node (source) volta minor 18.12.1 → 18.20.8 age confidence
@types/node (source) devDependencies minor 18.11.18 → 18.19.130 age confidence

Release Notes

nodejs/node (node)

v18.20.8: 2025-03-27, Version 18.20.8 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release updates OpenSSL to 3.0.16 and root certificates to NSS 3.108.

Commits

v18.20.7: 2025-02-20, Version 18.20.7 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
Commits

v18.20.6: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
  • CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

  • CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits

v18.20.5: 2024-11-12, Version 18.20.5 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
  • [ac37e554a5] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #​55333
Commits

v18.20.4: 2024-07-08, Version 18.20.4 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
Commits

v18.20.3: 2024-05-21, Version 18.20.3 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release fixes a regression introduced in Node.js 18.19.0 where http.server.close() was incorrectly closing idle connections.

A fix has also been included for compiling Node.js from source with newer versions of Clang.

The list of keys used to sign releases has been synchronized with the current list from the main branch.

Updated dependencies
  • acorn updated to 8.11.3.
  • acorn-walk updated to 8.3.2.
  • ada updated to 2.7.8.
  • c-ares updated to 1.28.1.
  • corepack updated to 0.28.0.
  • nghttp2 updated to 1.61.0.
  • ngtcp2 updated to 1.3.0.
  • npm updated to 10.7.0. Includes a fix from npm@​10.5.1 to limit the number of open connections npm/cli#7324.
  • simdutf updated to 5.2.4.
  • zlib updated to 1.3.0.1-motley-7d77fb7.
Commits

v18.20.2: 2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows
Commits

v18.20.1: 2024-04-03, Version 18.20.1 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
  • CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
  • llhttp version 9.2.1
  • undici version 5.28.4
Commits

v18.20.0: 2024-03-26, Version 18.20.0 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes
Added support for import attributes

Support has been added for import attributes, to replace the old import
assertions syntax. This will aid migration by making the new syntax available
across all currently supported Node.js release lines.

This adds the with keyword which should be used in place of the previous
assert keyword, which will be removed in a future semver-major Node.js
release.

For example,

import "foo" assert { ... }

should be replaced with

import "foo" with { ... }

For more details, see

Contributed by Nicolò Ribaudo in #​51136
and Antoine du Hamel in #​50140.

Doc deprecation for dirent.path

Please use newly added dirent.parentPath instead.

Contributed by Antoine du Hamel in #​50976
and #​51020.

Experimental node-api feature flags

Introduces an experimental feature to segregate finalizers that affect GC state.
A new type called node_api_nogc_env has been introduced as the const version
of napi_env and node_api_nogc_finalize as a variant of napi_finalize that
accepts a node_api_nogc_env as its first argument.

This feature can be turned off by defining
NODE_API_EXPERIMENTAL_NOGC_ENV_OPT_OUT.

Contributed by Gabriel Schulhof in #​50060.

Root certificates updated to NSS 3.98

Certificates added:

  • Telekom Security TLS ECC Root 2020
  • Telekom Security TLS RSA Root 2023

Certificates removed:

  • Security Communication Root CA
Updated dependencies
  • ada updated to 2.7.6.
  • base64 updated to 0.5.2.
  • c-ares updated to 1.27.0.
  • corepack updated to 0.25.2.
  • ICU updated to 74.2. Includes CLDR 44.1 and Unicode 15.1.
  • npm updated to 10.5.0. Fixes a regression in signals not being passed onto child processes.
  • simdutf8 updated to 4.0.8.
  • Timezone updated to 2024a.
  • zlib updated to 1.3.0.1-motley-40e35a7.
vm: fix V8 compilation cache support for vm.Script

Previously repeated compilation of the same source code using vm.Script
stopped hitting the V8 compilation cache after v16.x when support for
importModuleDynamically was added to vm.Script, resulting in a performance
regression that blocked users (in particular Jest users) from upgrading from
v16.x.

The recent fixes allow the compilation cache to be hit again
for vm.Script when --experimental-vm-modules is not used even in the
presence of the importModuleDynamically option, so that users affected by the
performance regression can now upgrade. Ongoing work is also being done to
enable compilation cache support for vm.CompileFunction.

Contributed by Joyee Cheung in #​49950
and #​50137.

Commits

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/node-18.x branch from 38d8606 to 25b6bf0 Compare February 2, 2023 22:20
@renovate renovate Bot changed the title chore(deps): update node.js to v18.13.0 chore(deps): update node.js to v18.14.0 Feb 2, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 2 times, most recently from 452cbd7 to fe5e2d2 Compare February 7, 2023 11:37
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from fe5e2d2 to 6b1f108 Compare February 16, 2023 23:30
@renovate renovate Bot changed the title chore(deps): update node.js to v18.14.0 chore(deps): update node.js to v18.14.1 Feb 16, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 2 times, most recently from 6b82e3e to e5a6814 Compare February 21, 2023 20:31
@renovate renovate Bot changed the title chore(deps): update node.js to v18.14.1 chore(deps): update node.js to v18.14.2 Feb 21, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from e5a6814 to b56b0c3 Compare February 23, 2023 14:47
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from b56b0c3 to 08dc671 Compare March 18, 2023 02:10
@renovate renovate Bot changed the title chore(deps): update node.js to v18.14.2 chore(deps): update node.js to v18.15.0 Mar 18, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 7 times, most recently from 49ac952 to e635a4a Compare March 29, 2023 22:50
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from e635a4a to f67625a Compare April 17, 2023 12:05
@renovate renovate Bot changed the title chore(deps): update node.js to v18.15.0 chore(deps): update node.js to v18.16.0 Apr 17, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from f67625a to 68fa859 Compare May 28, 2023 10:01
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 2 times, most recently from d1e508c to 4abec4d Compare June 13, 2023 03:29
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from 4abec4d to cec373b Compare June 20, 2023 23:21
@renovate renovate Bot changed the title chore(deps): update node.js to v18.16.0 chore(deps): update node.js to v18.16.1 Jun 20, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from cec373b to 628cf92 Compare July 1, 2023 03:58
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from 628cf92 to d4e4723 Compare July 18, 2023 21:06
@renovate renovate Bot changed the title chore(deps): update node.js to v18.16.1 chore(deps): update node.js to v18.17.0 Jul 18, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from d4e4723 to 4cbc781 Compare July 21, 2023 22:38
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 3 times, most recently from 6586ca4 to b147d18 Compare August 28, 2023 04:23
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 2 times, most recently from 29ce943 to dd5cb12 Compare September 2, 2023 22:11
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 2 times, most recently from aa550b2 to f08bd07 Compare September 15, 2023 11:55
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 2 times, most recently from a182d0c to ee4f226 Compare September 18, 2023 22:16
@renovate renovate Bot changed the title chore(deps): update node.js to v18.17.1 chore(deps): update node.js to v18.18.0 Sep 18, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 3 times, most recently from 4efe3b4 to 91a4326 Compare September 25, 2023 22:46
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 3 times, most recently from aefb2ab to ca0c995 Compare October 2, 2023 22:23
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 2 times, most recently from 87e06cb to 2096abe Compare October 10, 2023 16:25
@renovate renovate Bot changed the title chore(deps): update node.js to v18.18.0 chore(deps): update node.js to v18.18.1 Oct 10, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 2 times, most recently from 7ab3aac to 32499e1 Compare October 13, 2023 21:50
@renovate renovate Bot changed the title chore(deps): update node.js to v18.18.1 chore(deps): update node.js to v18.18.2 Oct 13, 2023
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from 32499e1 to 182fc16 Compare October 18, 2023 10:25
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 2 times, most recently from 581d64a to c5a1328 Compare October 31, 2023 11:41
@renovate
renovate Bot force-pushed the renovate/node-18.x branch from c5a1328 to 350b2ce Compare November 7, 2023 21:36
@renovate
renovate Bot force-pushed the renovate/node-18.x branch 3 times, most recently from f71cd13 to 2dd7235 Compare November 22, 2023 01:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants