Commit Graph

10 Commits

Author SHA1 Message Date
Hirokazu MORIKAWA
21200cd083 node: bump to 22.14.0
Notable Changes

    [82a9000e9e] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #56566
    [b7fe54fc88] - (SEMVER-MINOR) fs: allow exclude option in globs to accept glob patterns (Daeyeon Jeong) #56489
    [3ac92ef607] - (SEMVER-MINOR) lib: add typescript support to STDIN eval (Marco Ippolito) #56359
    [1614e8e7bc] - (SEMVER-MINOR) module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX (Marco Ippolito) #56610
    [6d6cffa9cc] - (SEMVER-MINOR) module: add findPackageJSON util (Jacob Smith) #55412
    [d35333ae18] - (SEMVER-MINOR) process: add process.ref() and process.unref() methods (James M Snell) #56400
    [07ff3ddcb5] - (SEMVER-MINOR) sqlite: support TypedArray and DataView in StatementSync (Alex Yang) #56385
    [94d3fe1b62] - (SEMVER-MINOR) src: add --disable-sigusr1 to prevent signal i/o thread (Rafael Gonzaga) #56441
    [5afffb4415] - (SEMVER-MINOR) src,worker: add isInternalWorker (Carlos Espa) #56469
    [697a851fb3] - (SEMVER-MINOR) test_runner: add TestContext.prototype.waitFor() (Colin Ihrig) #56595
    [047537b48c] - (SEMVER-MINOR) test_runner: add t.assert.fileSnapshot() (Colin Ihrig) #56459
    [926cf84e95] - (SEMVER-MINOR) test_runner: add assert.register() API (Colin Ihrig) #56434
    [c658a8afdf] - (SEMVER-MINOR) worker: add eval ts input (Marco Ippolito) #56394

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2025-02-17 18:51:17 +08:00
Hirokazu MORIKAWA
643afd8977 node: January 21, 2025 Security Releases
This is a security release.

Notable Changes

    CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
    CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
    CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

    CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2025-01-24 15:55:15 +08:00
Hirokazu MORIKAWA
e6178717d7 node: remake - do not use shared abseil-cpp
remake this commit https://github.com/openwrt/packages/pull/25582

Fix nodejs compile errors after the introduction of abseil-cpp in #25565

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-12-30 11:32:05 +08:00
Alexandru Ardelean
031bf6f355 Revert "node: Do not use shared abseil-cpp"
This reverts commit 9e70d3c5b0.

As mentioned here:
   https://github.com/openwrt/packages/pull/25582#issuecomment-2561673222

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-12-26 13:35:49 +02:00
Austin Lane
9e70d3c5b0 node: Do not use shared abseil-cpp
Signed-off-by: Austin Lane <vidplace7@gmail.com>
2024-12-24 17:46:18 +02:00
Hirokazu MORIKAWA
af7183fc30 node: upgrade to 22.11.0 LTS
Upgrade Version 22.11.0 'Jod' (LTS)

Notable Changes

This release marks the transition of Node.js 22.x into Long Term Support (LTS) with the codename 'Jod'. The 22.x release line now moves into "Active LTS" and will remain so until October 2025. After that time, it will move into "Maintenance" until end of life in April 2027.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-11-23 11:02:23 +02:00
Hirokazu MORIKAWA
6575ab559c node: bump to v20.18.0
Notable Changes
	Experimental Network Inspection Support in Node.js
	Exposes X509_V_FLAG_PARTIAL_CHAIN to tls.createSecureContext
	New option for vm.createContext() to create a context with a freezable globalThis

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-10-09 15:16:42 +08:00
Hirokazu MORIKAWA
ca3209a3b3 node: April 3, 2024 Security Releases
This is a security release
Notable Changes
* CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
* CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
* llhttp version 9.2.1
* undici version 5.28.4

Changed to use gz according to main-snapshot

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-04-07 18:01:08 +08:00
Hirokazu MORIKAWA
190542692d node: bump to v20.11.0
Notable Changes
* crypto: update root certificates to NSS 3.95 (Node.js GitHub Bot)
* doc: add MrJithil to collaborators (Jithil P Ponnan)
* doc: add Ethan-Arrowood as a collaborator (Ethan Arrowood)
* (SEMVER-MINOR) esm: add import.meta.dirname and import.meta.filename (James Sumners)
* fs: add c++ fast path for writeFileSync utf8 (CanadaHonk)
* (SEMVER-MINOR) module: remove useCustomLoadersIfPresent flag (Chengzhong Wu)
* (SEMVER-MINOR) module: bootstrap module loaders in shadow realm (Chengzhong Wu)
* (SEMVER-MINOR) src: add --disable-warning option (Ethan Arrowood)
* [SEMVER-MINOR) src: create per isolate proxy env template (Chengzhong Wu)
* (SEMVER-MINOR) src: make process binding data weak (Chengzhong Wu)
* stream: use Array for Readable buffer (Robert Nagy)
* stream: optimize creation (Robert Nagy)
* (SEMVER-MINOR) test_runner: adds built in lcov reporter (Phil Nash)
* (SEMVER-MINOR) test_runner: add Date to the supported mock APIs (Lucas Santos)
* (SEMVER-MINOR) test_runner, cli: add --test-timeout flag (Shubham Pandey)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-01-13 14:22:35 +08:00
Hirokazu MORIKAWA
3e51eef14c node: upgrade to v20.9.0
node.js version 20.x is now active LTS.

mipsel (pistachio) is no longer supported.
Due to build difficulties, libuv shared libraries are not used.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-11-02 00:25:22 +08:00