Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency node to v18.20.4 #2

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

plural-renovate[bot]
Copy link

@plural-renovate plural-renovate bot commented Jan 14, 2024

This PR contains the following updates:

Package Type Update Change
node minor 18.19.0 -> 18.20.4
@types/node (source) devDependencies patch 18.19.8 -> 18.19.39

Release Notes

nodejs/node (node)

v18.20.4

Compare Source

v18.20.3: 2024-05-21, Version 18.20.3 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release fixes a regression introduced in Node.js 18.19.0 where http.server.close() was incorrectly closing idle connections.

A fix has also been included for compiling Node.js from source with newer versions of Clang.

The list of keys used to sign releases has been synchronized with the current list from the main branch.

Updated dependencies
  • acorn updated to 8.11.3.
  • acorn-walk updated to 8.3.2.
  • ada updated to 2.7.8.
  • c-ares updated to 1.28.1.
  • corepack updated to 0.28.0.
  • nghttp2 updated to 1.61.0.
  • ngtcp2 updated to 1.3.0.
  • npm updated to 10.7.0. Includes a fix from [email protected] to limit the number of open connections npm/cli#7324.
  • simdutf updated to 5.2.4.
  • zlib updated to 1.3.0.1-motley-7d77fb7.
Commits

v18.20.2: 2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows
Commits

v18.20.1: 2024-04-03, Version 18.20.1 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
  • CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
  • llhttp version 9.2.1
  • undici version 5.28.4
Commits

v18.20.0: 2024-03-26, Version 18.20.0 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes
Added support for import attributes

Support has been added for import attributes, to replace the old import
assertions syntax. This will aid migration by making the new syntax available
across all currently supported Node.js release lines.

This adds the with keyword which should be used in place of the previous
assert keyword, which will be removed in a future semver-major Node.js
release.

For example,

import "foo" assert { ... }

should be replaced with

import "foo" with { ... }

For more details, see

Contributed by Nicolò Ribaudo in #​51136
and Antoine du Hamel in #​50140.

Doc deprecation for dirent.path

Please use newly added dirent.parentPath instead.

Contributed by Antoine du Hamel in #​50976
and #​51020.

Experimental node-api feature flags

Introduces an experimental feature to segregate finalizers that affect GC state.
A new type called node_api_nogc_env has been introduced as the const version
of napi_env and node_api_nogc_finalize as a variant of napi_finalize that
accepts a node_api_nogc_env as its first argument.

This feature can be turned off by defining
NODE_API_EXPERIMENTAL_NOGC_ENV_OPT_OUT.

Contributed by Gabriel Schulhof in #​50060.

Root certificates updated to NSS 3.98

Certificates added:

  • Telekom Security TLS ECC Root 2020
  • Telekom Security TLS RSA Root 2023

Certificates removed:

  • Security Communication Root CA
Updated dependencies
  • ada updated to 2.7.6.
  • base64 updated to 0.5.2.
  • c-ares updated to 1.27.0.
  • corepack updated to 0.25.2.
  • ICU updated to 74.2. Includes CLDR 44.1 and Unicode 15.1.
  • npm updated to 10.5.0. Fixes a regression in signals not being passed onto child processes.
  • simdutf8 updated to 4.0.8.
  • Timezone updated to 2024a.
  • zlib updated to 1.3.0.1-motley-40e35a7.
vm: fix V8 compilation cache support for vm.Script

Previously repeated compilation of the same source code using vm.Script
stopped hitting the V8 compilation cache after v16.x when support for
importModuleDynamically was added to vm.Script, resulting in a performance
regression that blocked users (in particular Jest users) from upgrading from
v16.x.

The recent fixes allow the compilation cache to be hit again
for vm.Script when --experimental-vm-modules is not used even in the
presence of the importModuleDynamically option, so that users affected by the
performance regression can now upgrade. Ongoing work is also being done to
enable compilation cache support for vm.CompileFunction.

Contributed by Joyee Cheung in #​49950
and #​50137.

Commits

v18.19.1: 2024-02-14, Version 18.19.1 'Hydrogen' (LTS), @​RafaelGSS prepared by @​marco-ippolito

Compare Source

Notable changes

This is a security release.

Notable changes
  • CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
  • CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
  • CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
  • CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
  • undici version 5.28.3
  • npm version 10.2.4
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.5 chore(deps): update dependency @types/node to v18.19.6 Jan 16, 2024
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.6 chore(deps): update dependency @types/node to v18.19.6 - autoclosed Jan 17, 2024
@plural-renovate plural-renovate bot closed this Jan 17, 2024
@plural-renovate plural-renovate bot deleted the renovate/node-18.x branch January 17, 2024 13:10
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.6 - autoclosed chore(deps): update dependency @types/node to v18.19.6 Jan 24, 2024
@plural-renovate plural-renovate bot reopened this Jan 24, 2024
@plural-renovate plural-renovate bot restored the renovate/node-18.x branch January 24, 2024 08:14
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.6 chore(deps): update dependency @types/node to v18.19.9 Jan 24, 2024
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 2 times, most recently from 8596e96 to c47a37f Compare January 26, 2024 04:58
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.9 chore(deps): update dependency @types/node to v18.19.10 Jan 26, 2024
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.10 chore(deps): update dependency @types/node to v18.19.11 Jan 30, 2024
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 2 times, most recently from ddd283e to b6d8d34 Compare January 31, 2024 06:16
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.11 chore(deps): update dependency @types/node to v18.19.9 Jan 31, 2024
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.9 chore(deps): update dependency @types/node to v18.19.10 Feb 2, 2024
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.10 chore(deps): update dependency @types/node to v18.19.11 Feb 6, 2024
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.11 chore(deps): update dependency @types/node to v18.19.12 Feb 7, 2024
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 2 times, most recently from 0d9df62 to 110a4fb Compare February 8, 2024 10:59
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.12 chore(deps): update dependency @types/node to v18.19.13 Feb 8, 2024
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency @types/node to v18.19.13 chore(deps): update dependency @types/node to v18.19.14 Feb 8, 2024
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 3 times, most recently from f767ffc to 1aa0226 Compare February 14, 2024 15:56
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 3 times, most recently from e041dff to f625c6c Compare March 20, 2024 15:57
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 2 times, most recently from b0d97c5 to b7f1366 Compare March 26, 2024 18:21
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency node to v18.19.1 chore(deps): update dependency node to v18.20.0 Mar 26, 2024
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch from b7f1366 to 22ede30 Compare April 3, 2024 20:34
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency node to v18.20.0 chore(deps): update dependency node to v18.20.1 Apr 3, 2024
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 3 times, most recently from f5bb245 to a46767c Compare April 10, 2024 18:22
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency node to v18.20.1 chore(deps): update dependency node to v18.20.2 Apr 10, 2024
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 2 times, most recently from 19930a5 to 9f04715 Compare April 16, 2024 12:33
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch from 9f04715 to 5a4b900 Compare May 10, 2024 22:46
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency node to v18.20.2 chore(deps): update dependency node to v18.20.0 May 10, 2024
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 2 times, most recently from 6d38ba5 to 0e6ad10 Compare May 15, 2024 15:33
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch from 0e6ad10 to 24d9cfa Compare May 21, 2024 12:27
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency node to v18.20.0 chore(deps): update dependency node to v18.20.3 May 21, 2024
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch from 24d9cfa to bccb4c1 Compare June 11, 2024 03:12
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch 5 times, most recently from 3acc417 to f95112a Compare June 29, 2024 10:59
| datasource  | package     | from    | to       |
| ----------- | ----------- | ------- | -------- |
| github-tags | nodejs/node | 18.19.0 | v18.20.4 |
| npm         | @types/node | 18.19.8 | 18.19.39 |
@plural-renovate plural-renovate bot force-pushed the renovate/node-18.x branch from f95112a to 12cd52b Compare July 8, 2024 17:32
@plural-renovate plural-renovate bot changed the title chore(deps): update dependency node to v18.20.3 chore(deps): update dependency node to v18.20.4 Jul 8, 2024
@plural-renovate
Copy link
Author

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock
Download failed: https://nodejs.org/dist/v18.20.4/SHASUMS256.txt
[17:32:50.386] INFO (1498070): Downloading file ...
    url: "https://nodejs.org/dist/v18.20.4/SHASUMS256.txt"
    output: "/tmp/renovate/cache/containerbase/0c95a59e35b27c61c74d0ccb024356d80af3970ca7d890860708946b881309e5/SHASUMS256.txt"
[17:32:52.038] FATAL (1498070): Response code 404 (Not Found)
    err: {
      "type": "HTTPError",
      "message": "Response code 404 (Not Found)",
      "stack":
          HTTPError: Response code 404 (Not Found)
              at _Request._onResponseBase (/snapshot/dist/containerbase-cli.js:39632:25)
              at _Request._onResponse (/snapshot/dist/containerbase-cli.js:39687:18)
              at ClientRequest.<anonymous> (/snapshot/dist/containerbase-cli.js:39702:17)
              at Object.onceWrapper (node:events:652:26)
              at ClientRequest.emit (node:events:549:35)
              at ClientRequest.emit (node:domain:482:12)
              at HTTPParser.parserOnIncomingClient (node:_http_client:642:27)
              at HTTPParser.parserOnHeadersComplete (node:_http_common:117:17)
              at TLSSocket.socketOnData (node:_http_client:505:22)
              at TLSSocket.emit (node:events:537:28)
      "code": "ERR_NON_2XX_3XX_RESPONSE",
      "timings": {
        "start": 1720459970409,
        "socket": 1720459970413,
        "lookup": 1720459970417,
        "connect": 1720459970428,
        "secureConnect": 1720459970460,
        "upload": 1720459970460,
        "response": 1720459972023,
        "end": 1720459972030,
        "phases": {
          "wait": 4,
          "dns": 4,
          "tcp": 11,
          "tls": 32,
          "request": 0,
          "firstByte": 1563,
          "download": 7,
          "total": 1621
        }
      },
      "name": "HTTPError",
      "options": {
        "agent": {},
        "decompress": true,
        "timeout": {},
        "prefixUrl": "",
        "ignoreInvalidCookies": false,
        "context": {},
        "hooks": {
          "init": [],
          "beforeRequest": [],
          "beforeError": [],
          "beforeRedirect": [],
          "beforeRetry": [],
          "afterResponse": []
        },
        "followRedirect": true,
        "maxRedirects": 10,
        "throwHttpErrors": true,
        "username": "",
        "password": "",
        "http2": false,
        "allowGetBody": false,
        "headers": {
          "user-agent": "got (https://github.com/sindresorhus/got)",
          "accept-encoding": "gzip, deflate, br"
        },
        "methodRewriting": false,
        "retry": {
          "limit": 2,
          "methods": [
            "GET",
            "PUT",
            "HEAD",
            "DELETE",
            "OPTIONS",
            "TRACE"
          ],
          "statusCodes": [
            408,
            413,
            429,
            500,
            502,
            503,
            504,
            521,
            522,
            524
          ],
          "errorCodes": [
            "ETIMEDOUT",
            "ECONNRESET",
            "EADDRINUSE",
            "ECONNREFUSED",
            "EPIPE",
            "ENOTFOUND",
            "ENETUNREACH",
            "EAI_AGAIN"
          ],
          "backoffLimit": null,
          "noise": 100
        },
        "method": "GET",
        "cacheOptions": {},
        "https": {},
        "resolveBodyOnly": false,
        "isStream": true,
        "responseType": "text",
        "url": "https://nodejs.org/dist/v18.20.4/SHASUMS256.txt",
        "pagination": {
          "countLimit": null,
          "backoff": 0,
          "requestLimit": 10000,
          "stackAllItems": false
        },
        "setHost": true,
        "enableUnixSockets": false
      }
    }
[17:32:52.041] INFO (1498070): Download completed with errors  in 1.6s.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants