This repository has been archived by the owner on Mar 29, 2023. It is now read-only.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
16.19.0
->16.19.1
Release Notes
nodejs/node
v16.19.1
: 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlauCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
Fixed by an update to undici:
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.
This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory.
Commits
7fef050447
] - build: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) nodejs-private/node-private#374b558e9f476
] - crypto: clear OpenSSL error on invalid ca cert (RafaelGSS) nodejs-private/node-private#375160adb7ffc
] - crypto: clear OpenSSL error queue after calling X509_check_private_key() (Filip Skokan) #45495d0ece30948
] - crypto: clear OpenSSL error queue after calling X509_verify() (Takuro Sato) #453772d9ae4f184
] - deps: update undici to v5.19.1 (Matteo Collina) nodejs-private/node-private#388d80e8312fd
] - deps: cherry-pick Windows ARM64 fix for openssl (Richard Lau) #46568de5c8d2c2f
] - deps: update archs files for quictls/openssl-1.1.1t+quic (RafaelGSS) #465681a8ccfe908
] - deps: upgrade openssl sources to OpenSSL_1_1_1t+quic (RafaelGSS) #46568693789780b
] - doc: clarify release notes for Node.js 16.19.0 (Richard Lau) #45846f95ef064f4
] - lib: makeRequireFunction patch when experimental policy (RafaelGSS) nodejs-private/node-private#358b02d895137
] - policy: makeRequireFunction on mainModule.require (RafaelGSS) nodejs-private/node-private#358d7f83c420c
] - test: avoid left behind child processes (Richard Lau) #46276Configuration
📅 Schedule: Branch creation - "every weekend" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.