Skip to content
This repository was archived by the owner on Aug 12, 2023. It is now read-only.

Update Node.js to v10.22.1 #314

Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update Node.js to v10.22.1 #314

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 17, 2019 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
node minor 10.17.0 -> 10.22.1
node engines minor 10.17.0 -> 10.22.1

Release Notes

nodejs/node

v10.22.1

Compare Source

Notable changes

This is a security release.

Vulnerabilities fixed:

  • CVE-2020-8252: fs.realpath.native on may cause buffer overflow (Medium).
Commits

v10.22.0

Compare Source

Notable changes
  • deps:
    • upgrade npm to 6.14.6 (claudiahdz) #​34246
    • upgrade openssl sources to 1.1.1g (Hassaan Pasha) #​32982
  • n-api:
    • add napi_detach_arraybuffer (legendecas) #​29768
Commits

v10.21.0

Compare Source

Notable changes

This is a security release.

Vulnerabilities fixed:

  • CVE-2020-8174: napi_get_value_string_*() allows various kinds of memory corruption (High).
  • CVE-2020-10531: ICU-20958 Prevent SEGV_MAPERR in append (High).
  • CVE-2020-11080: HTTP/2 Large Settings Frame DoS (Low).
Commits

v10.20.1

Compare Source

Notable changes

Due to release process failures, Node.js v10.20.0 shipped with source
and header tarballs that did not properly match the final release
commit that was used to build the binaries. We recommend that Node.js
v10.20.0 not be used, particularly in any applications using native
add-ons or where compiling Node.js from source is involved.

Node.js v10.20.1 is a clean release with the correct sources and is
strongly recommended in place of v10.20.0.

v10.20.0

Compare Source

macOS package notarization and a change in builder configuration

The macOS binaries for this release, and future 10.x releases, are now
being compiled on macOS 10.15 (Catalina) with Xcode 11 to support
package notarization, a requirement for installing .pkg files on macOS
10.15 and later. Previous builds of Node.js 10.x were compiled on macOS
10.10 (Yosemite) with a minimum deployment target of macOS 10.7 (Lion).
As binaries are still being compiled to support a minimum of macOS 10.7
(Lion) we do not anticipate this having a negative impact on Node.js
10.x users with older versions of macOS.

Notable changes
  • buffer: add {read|write}Big[U]Int64{BE|LE} methods (garygsc) #​19691
  • build: macOS package notarization (Rod Vagg) #​31459
  • deps:
    • update npm to 6.14.3 (Myles Borins) #​32368
    • upgrade openssl sources to 1.1.1e (Hassaan Pasha) #​32328
    • upgrade to libuv 1.34.2 (cjihrig) #​31477
  • n-api:
    • add napi_get_all_property_names (himself65) #​30006
    • add APIs for per-instance state management (Gabriel Schulhof) #​28682
    • define release 6 #​32058
    • turn NAPI_CALL_INTO_MODULE into a function (Anna Henningsen) #​26128
  • tls:
    • expose keylog event on TLSSocket (Alba Mendez) #​27654
    • support TLS min/max protocol defaults in CLI (Sam Roberts) #​27946
  • url: handle quasi-WHATWG URLs in urlToOptions() (cjihrig) #​26226
Commits

v10.19.0

Compare Source

Notable changes

This is a security release.

Vulnerabilities fixed:

  • CVE-2019-15606: HTTP header values do not have trailing OWS trimmed.
  • CVE-2019-15605: HTTP request smuggling using malformed Transfer-Encoding header.
  • CVE-2019-15604: Remotely trigger an assertion on a TLS server with a malformed certificate string.

Also, HTTP parsing is more strict to be more secure. Since this may
cause problems in interoperability with some non-conformant HTTP
implementations, it is possible to disable the strict checks with the
--insecure-http-parser command line flag, or the insecureHTTPParser
http option. Using the insecure HTTP parser should be avoided.

Commits

v10.18.1

Compare Source

Notable changes
  • http2: fix session memory accounting after pausing (Michael Lehenbauer) #​30684
  • n-api: correct bug in napi_get_last_error (Octavian Soldea) #​28702
  • tools: update tzdata to 2019c (Myles Borins) #​30479
Commits

v10.18.0

Compare Source

This is a security release.

For more details about the vulnerability please consult the npm blog:

https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli

Notable changes
Commits

Renovate configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

@codecov-io
Copy link

codecov-io commented Dec 17, 2019 •
edited
Loading

Codecov Report

❗ No coverage uploaded for pull request base (master@6c1afc7). Click here to learn what that means.
The diff coverage is n/a.

@renovate renovate bot force-pushed the renovate/node-10.x branch 4 times, most recently from c9cf007 to ef23850 Compare December 27, 2019 14:46
@renovate renovate bot force-pushed the renovate/node-10.x branch from ef23850 to 9eb5268 Compare December 28, 2019 12:26
@renovate renovate bot force-pushed the renovate/node-10.x branch 2 times, most recently from 353ad6d to 9c7bf7f Compare January 9, 2020 23:04
@renovate renovate bot changed the title Update Node.js to v10.18.0 Update Node.js to v10.18.1 Jan 9, 2020
@renovate renovate bot force-pushed the renovate/node-10.x branch 2 times, most recently from 0f9182f to dcc5330 Compare January 14, 2020 21:28
@renovate renovate bot force-pushed the renovate/node-10.x branch from dcc5330 to 43c5bab Compare January 20, 2020 19:46
@renovate
Copy link
Contributor Author

renovate bot commented Jan 20, 2020

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻️ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you check the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
Unable to find image 'undefined:latest' locally
docker: Error response from daemon: pull access denied for undefined, repository does not exist or may require 'docker login': denied: requested access to the resource is denied.
See 'docker run --help'.

@renovate renovate bot force-pushed the renovate/node-10.x branch 2 times, most recently from cdfff86 to 4f82906 Compare January 28, 2020 08:38
@renovate renovate bot force-pushed the renovate/node-10.x branch 4 times, most recently from da663bf to 0b47c1e Compare February 6, 2020 03:46
@renovate renovate bot changed the title Update Node.js to v10.18.1 Update Node.js to v10.19.0 Feb 6, 2020
@renovate renovate bot force-pushed the renovate/node-10.x branch 6 times, most recently from 098e91b to 25e9100 Compare February 21, 2020 15:53
@renovate renovate bot force-pushed the renovate/node-10.x branch from 25e9100 to 1206d54 Compare February 22, 2020 20:54
@renovate renovate bot force-pushed the renovate/node-10.x branch 3 times, most recently from 94bee89 to 693aa67 Compare March 4, 2020 22:49
@renovate renovate bot force-pushed the renovate/node-10.x branch from 5d33101 to 7d28cbb Compare June 12, 2020 02:30
@renovate renovate bot force-pushed the renovate/node-10.x branch 2 times, most recently from 439c3d2 to 449c9e7 Compare June 27, 2020 18:56
@renovate renovate bot force-pushed the renovate/node-10.x branch 3 times, most recently from cddeed4 to e384598 Compare July 21, 2020 16:11
@renovate renovate bot changed the title Update Node.js to v10.21.0 Update Node.js to v10.22.0 Jul 21, 2020
@renovate renovate bot force-pushed the renovate/node-10.x branch 2 times, most recently from 413f1f5 to 140f167 Compare August 2, 2020 15:19
@renovate renovate bot force-pushed the renovate/node-10.x branch from 140f167 to 421fbc8 Compare August 10, 2020 12:51
@renovate renovate bot force-pushed the renovate/node-10.x branch from 421fbc8 to ac814e3 Compare August 30, 2020 09:49
@renovate renovate bot force-pushed the renovate/node-10.x branch from ac814e3 to 767441a Compare September 8, 2020 16:47
@renovate renovate bot force-pushed the renovate/node-10.x branch from 767441a to e01b90b Compare September 15, 2020 21:06
@renovate renovate bot changed the title Update Node.js to v10.22.0 Update Node.js to v10.22.1 Sep 15, 2020
@renovate renovate bot force-pushed the renovate/node-10.x branch from e01b90b to d853d7b Compare September 16, 2020 15:17
@renovate renovate bot force-pushed the renovate/node-10.x branch 2 times, most recently from affd5a7 to 69f8a34 Compare October 4, 2020 10:15
@renovate renovate bot force-pushed the renovate/node-10.x branch 2 times, most recently from 77a4815 to 3300e0c Compare October 20, 2020 19:22
@codecov-io
Copy link

codecov-io commented Oct 20, 2020 •
edited
Loading

Codecov Report

Merging #314 into master will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@          Coverage Diff           @@
##           master    #314   +/-   ##
======================================
  Coverage    7.86%   7.86%           
======================================
  Files         155     155           
  Lines        2352    2352           
  Branches      199     199           
======================================
  Hits          185     185           
  Misses       1995    1995           
  Partials      172     172

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c3a6fb5...e477151. Read the comment docs.

@renovate renovate bot force-pushed the renovate/node-10.x branch 8 times, most recently from 5ddee72 to ac6bcae Compare October 23, 2020 12:45
@renovate renovate bot force-pushed the renovate/node-10.x branch from ac6bcae to e477151 Compare October 23, 2020 13:45
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@codecov-io @codecov-commenter @renovate-bot