-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update dependency node to v16.20.2 #669
base: master
Are you sure you want to change the base?
Conversation
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
990ab94
to
d10c259
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
d10c259
to
172ceb3
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
172ceb3
to
ff18394
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
ff18394
to
6496e4b
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
6496e4b
to
986aa03
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
986aa03
to
5cbca58
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
5cbca58
to
96a2e5c
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
96a2e5c
to
4268bac
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
4268bac
to
27e5933
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
27e5933
to
b5f993d
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
b5f993d
to
5da9c5e
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
5da9c5e
to
121b312
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
121b312
to
10ef5b0
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
5473c28
to
eab727f
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
eab727f
to
d0f147a
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
d0f147a
to
efa276f
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
efa276f
to
c8e7fbc
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
c8e7fbc
to
b46b70c
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
b46b70c
to
35060ac
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
35060ac
to
dde3dd2
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
dde3dd2
to
0f21e11
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
0f21e11
to
d02b46f
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
d02b46f
to
586026f
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
586026f
to
ec4dcaa
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
ec4dcaa
to
d1ada02
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
d1ada02
to
a93d606
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
a93d606
to
b1bed52
Compare
depcheck ResultList up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.
|
This PR contains the following updates:
16.18.0
->16.20.2
16.18.3
->16.18.108
Release Notes
nodejs/node (node)
v16.20.2
: 2023-08-09, Version 16.20.2 'Gallium' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.
Commits
40c3958a5a
] - deps: update archs files for OpenSSL-1.1.1v (RafaelGSS) #49043a9ac9da89a
] - deps: fix openssl crypto clean (RafaelGSS) #49043362d4c7494
] - deps: upgrade openssl sources to OpenSSL_1_1_1v (RafaelGSS) #49043d8ccfe9ad4
] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#445242aaa0caa
] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#459v16.20.1
: 2023-06-20, Version 16.20.1 'Gallium' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
mainModule.__proto__
Bypass Experimental Policy Mechanism (High)More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.
Commits
5a92ea7a3b
] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen)5df04e893a
] - deps: setCARES_RANDOM_FILE
for c-ares (Richard Lau) #48156c171cbd124
] - deps: update c-ares to 1.19.1 (RafaelGSS) #48115155d3aac02
] - deps: update archs files for OpenSSL-1.1.1u+quic (RafaelGSS) #483698d4c8f8ebe
] - deps: upgrade openssl sources to OpenSSL_1_1_1u (RafaelGSS) #483691a5c9284eb
] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#426e42ff4b018
] - http: disable request smuggling via empty headers (Paolo Insogna) nodejs-private/node-private#42910042683c8
] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#408a6f4e87bc9
] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#416b77000f4d7
] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #47851v16.20.0
: 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggsCompare Source
Notable Changes
Commits
de6dd67790
] - crypto: avoid hang when no algorithm available (Richard Lau) #462374617512788
] - crypto: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) #4618524972164fc
] - deps: update undici to 5.20.0 (Node.js GitHub Bot) #4671185f88c6a8d
] - deps: V8: cherry-pick90be99f
(Michaël Zasso) #46646b4ebe6d47b
] - deps: update c-ares to 1.19.0 (Michaël Zasso) #4641556cbc7fdda
] - deps: V8: cherry-pickc2792e5
(Jiawen Geng) #449617af9bdb31e
] - deps: upgrade npm to 8.19.4 (npm team) #46677962a7471b5
] - deps: update corepack to 0.17.0 (Node.js GitHub Bot) #46842748bc96e35
] - deps: update corepack to 0.16.0 (Node.js GitHub Bot) #46710a467782499
] - deps: update corepack to 0.15.3 (Node.js GitHub Bot) #460371913b6763d
] - deps: update corepack to 0.15.2 (Node.js GitHub Bot) #45635809371a15f
] - module: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) #45147086bb2f8d4
] - Revert "src: let http2 streams end after session close" (Rich Trott) #467216a01d39120
] - (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #44376d081032a60
] - test: fix test-net-connect-reset-until-connected (Vita Batrla) #46781efe1be47ec
] - test: skip test depending onoverlapped-checker
when not available (Antoine du Hamel) #45015fc47d58abe
] - test: remove cjs loader from stack traces (Geoffrey Booth) #44197cf76d0790d
] - test: fix WPT title when no META title is present (Filip Skokan) #468040d1485b924
] - test: fix default WPT titles (Filip Skokan) #46778088e9cde3d
] - test: add WPTRunner support for variants and generating WPT reports (Filip Skokan) #46498908c4dff44
] - test: mark test-crypto-key-objects flaky on Linux (Richard Lau) #46684768e56227e
] - tools: makeutils.SearchFiles
deterministic (Bruno Pitrus) #44496v16.19.1
: 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlauCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
Fixed by an update to undici:
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.
This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory.
Commits
7fef050447
] - build: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) nodejs-private/node-private#374b558e9f476
] - crypto: clear OpenSSL error on invalid ca cert (RafaelGSS) nodejs-private/node-private#375160adb7ffc
] - crypto: clear OpenSSL error queue after calling X509_check_private_key() (Filip Skokan) #45495d0ece30948
] - crypto: clear OpenSSL error queue after calling X509_verify() (Takuro Sato) #453772d9ae4f184
] - deps: update undici to v5.19.1 (Matteo Collina) nodejs-private/node-private#388d80e8312fd
] - deps: cherry-pick Windows ARM64 fix for openssl (Richard Lau) #46568de5c8d2c2f
] - deps: update archs files for quictls/openssl-1.1.1t+quic (RafaelGSS) #465681a8ccfe908
] - deps: upgrade openssl sources to OpenSSL_1_1_1t+quic (RafaelGSS) #46568693789780b
] - doc: clarify release notes for Node.js 16.19.0 (Richard Lau) #45846f95ef064f4
] - lib: makeRequireFunction patch when experimental policy (RafaelGSS) nodejs-private/node-private#358b02d895137
] - policy: makeRequireFunction on mainModule.require (RafaelGSS) nodejs-private/node-private#358d7f83c420c
] - test: avoid left behind child processes (Richard Lau) #46276v16.19.0
: 2022-12-13, Version 16.19.0 'Gallium' (LTS), @richardlauCompare Source
Notable Changes
OpenSSL 1.1.1s
This update is a bugfix release and does not address any security
vulnerabilities.
Root certificates updated to NSS 3.85
Certificates added:
A626340
Certificates removed:
Time zone update to 2022f
Time zone data has been updated to 2022f. This includes changes to Daylight
Savings Time (DST) for Fiji and Mexico. For more information, see
https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.
Other Notable Changes
33707dcd03
] - dgram: add dgram send queue info (theanarkh) #44149Dependency updates:
3b2b70d792
] - deps: upgrade npm to 8.19.3 (npm team) #45322Experimental features:
1e0dcd1ee0
] - cli: add--watch
(Moshe Atlow) #443668c73279ebb
] - util: add default value option to parsearg (Manuel Spigolon) #44631Commits
bbef3c42f6
] - build: add version info to timezone update PR (Darshan Sen) #45021cc2c7648e0
] - build: support Python 3.11 (Luigi Pinca) #45191ac24c80663
] - build: remove redundant condition from common.gypi (Richard Lau) #4507603dcbe3030
] - build: fix bad upstream merge (Stephen Gallagher) #446421e0dcd1ee0
] - cli: add--watch
(Moshe Atlow) #4436696d131665e
] - cluster: use inspector utils (Moshe Atlow) #44592704836033a
] - crypto: update root certificates (Luigi Pinca) #454905a776d4a69
] - deps: update timezone to 2022f (Richard Lau) #456133b2b70d792
] - deps: upgrade npm to 8.19.3 (npm team) #453229fbc8b21db
] - deps: update corepack to 0.15.1 (Node.js GitHub Bot) #4533187e3d002ca
] - deps: update corepack to 0.15.0 (Node.js GitHub Bot) #45235e972ff7b13
] - deps: V8: backportbbd800c
(Chengzhong Wu) #44947af9d8217c0
] - deps: V8: cherry-pickb953542
(Chengzhong Wu) #4494738202d321b
] - deps: update undici to 5.12.0 (Node.js GitHub Bot) #452367c0da6adf9
] - deps: update archs files for OpenSSL-1.1.1s (RafaelGSS) #452741149ead6f7
] - deps: upgrade openssl sources to OpenSSL_1_1_1s (RafaelGSS) #45274cd54bce4f5
] - deps: update timezone (Node.js GitHub Bot) #449502901abe4f0
] - deps: update undici to 5.11.0 (Node.js GitHub Bot) #44929c80cf97033
] - deps: update corepack to 0.14.2 (Node.js GitHub Bot) #4477533707dcd03
] - dgram: add dgram send queue info (theanarkh) #44149c708d9bb94
] - doc: fix typo in parseArgs default value (Tobias Nießen) #450835a0efa05d2
] - node-api: handle no support for external buffers (Michael Dawson) #45181db31de634e
] - readline: refactor to avoid unsafe regex primordials (Antoine du Hamel) #43475fbc52e5729
] - src: disambiguate terms used to refer to builtins and addons (Joyee Cheung) #44135953072d3db
] - src: let http2 streams end after session close (Santiago Gimeno) #4515354608d8dc3
] - src: split property helpers from node::Environment (Chengzhong Wu) #440566733556783
] - test: add test to validate changelogs for releases (Richard Lau) #45325821d832cef
] - test: mark test-watch-mode* as flaky on all platforms (Pierrick Bouvier) #4504902a18eac69
] - test: fix test-runner-inspect (Moshe Atlow) #44620197df63f74
] - test: add a test to ensure the correctness of timezone upgrades (Darshan Sen) #4529942e9d8016a
] - test: fix textdecoder test for small-icu builds (Richard Lau) #452256d736a56d8
] - test: fix watch mode test flake (Moshe Atlow) #44739543d3d2bf3
] - test: deflake watch mode tests (Moshe Atlow) #4462197f6caf4eb
] - test: split watch mode inspector tests to sequential (Moshe Atlow) #44551499750ff7a
] - test: update list of known globals (Antoine du Hamel) #4525564d343af74
] - test_runner: support using--inspect
with--test
(Moshe Atlow) #4452099ee5e484d
] - test_runner: fixduration_ms
to be milliseconds (Moshe Atlow) #4445037e909251c
] - test_runner: support programmatically running--test
(Moshe Atlow) #442410ae5694f88
] - tools: update certdata.txt (Luigi Pinca) #45490891368cefd
] - tools: remove faulty early termination logic from update-timezone.mjs (Darshan Sen) #44870543493c242
] - tools: fix timezone update tool (Darshan Sen) #44870c77f660b75
] - tools: fixcreate-or-update-pull-request-action
hash on GHA (Antoine du Hamel) #4516658c30dd049
] - tools: update gr2m/create-or-update-pull-request-action (Luigi Pinca) #45022749a4b3e5e
] - tools: use Python 3.11 in GitHub Actions workflows (Luigi Pinca) #451916f541d99a5
] - tools: have test-asan use ubuntu-20.04 (Filip Skokan) #45581e7ed56f501
] - tools: make license-builder.sh comply with shellcheck 0.8.0 (Rich Trott) #41258cc819b4bf8
] - tools: fix typo inavoid-prototype-pollution
lint rule (Antoine du Hamel) #44446254358c81e
] - tools: refactoravoid-prototype-pollution
lint rule (Antoine du Hamel) #434768c73279ebb
] - util: add default value option to parsearg (Manuel Spigolon) #44631v16.18.1
: 2022-11-04, Version 16.18.1 'Gallium' (LTS), @BethGriggsCompare Source
This is a security release.
Notable changes
The following CVEs are fixed in this release:
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
9ffddd7098
] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354Configuration
📅 Schedule: Branch creation - "after 11pm,before 6am" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.