This repository has been archived by the owner on Mar 17, 2023. It is now read-only.
chore(deps): update node.js to v16.19.1 #66
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/node-16.x
branch
from
5c6cdd6 to
68b236d
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/node-16.x
branch
from
68b236d to
7843e18
Compare
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
16.18.0->16.19.1Release Notes
nodejs/node
v16.19.1: 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlauCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
Fixed by an update to undici:
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.
This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory.
Commits
7fef050447] - build: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) nodejs-private/node-private#374b558e9f476] - crypto: clear OpenSSL error on invalid ca cert (RafaelGSS) nodejs-private/node-private#375160adb7ffc] - crypto: clear OpenSSL error queue after calling X509_check_private_key() (Filip Skokan) #45495d0ece30948] - crypto: clear OpenSSL error queue after calling X509_verify() (Takuro Sato) #453772d9ae4f184] - deps: update undici to v5.19.1 (Matteo Collina) nodejs-private/node-private#388d80e8312fd] - deps: cherry-pick Windows ARM64 fix for openssl (Richard Lau) #46568de5c8d2c2f] - deps: update archs files for quictls/openssl-1.1.1t+quic (RafaelGSS) #465681a8ccfe908] - deps: upgrade openssl sources to OpenSSL_1_1_1t+quic (RafaelGSS) #46568693789780b] - doc: clarify release notes for Node.js 16.19.0 (Richard Lau) #45846f95ef064f4] - lib: makeRequireFunction patch when experimental policy (RafaelGSS) nodejs-private/node-private#358b02d895137] - policy: makeRequireFunction on mainModule.require (RafaelGSS) nodejs-private/node-private#358d7f83c420c] - test: avoid left behind child processes (Richard Lau) #46276v16.19.0: 2022-12-13, Version 16.19.0 'Gallium' (LTS), @richardlauCompare Source
Notable Changes
OpenSSL 1.1.1s
This update is a bugfix release and does not address any security
vulnerabilities.
Root certificates updated to NSS 3.85
Certificates added:
A626340Certificates removed:
Time zone update to 2022f
Time zone data has been updated to 2022f. This includes changes to Daylight
Savings Time (DST) for Fiji and Mexico. For more information, see
https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.
Other Notable Changes
33707dcd03] - dgram: add dgram send queue info (theanarkh) #44149Dependency updates:
3b2b70d792] - deps: upgrade npm to 8.19.3 (npm team) #45322Experimental features:
1e0dcd1ee0] - cli: add--watch(Moshe Atlow) #443668c73279ebb] - util: add default value option to parsearg (Manuel Spigolon) #44631Commits
bbef3c42f6] - build: add version info to timezone update PR (Darshan Sen) #45021cc2c7648e0] - build: support Python 3.11 (Luigi Pinca) #45191ac24c80663] - build: remove redundant condition from common.gypi (Richard Lau) #4507603dcbe3030] - build: fix bad upstream merge (Stephen Gallagher) #446421e0dcd1ee0] - cli: add--watch(Moshe Atlow) #4436696d131665e] - cluster: use inspector utils (Moshe Atlow) #44592704836033a] - crypto: update root certificates (Luigi Pinca) #454905a776d4a69] - deps: update timezone to 2022f (Richard Lau) #456133b2b70d792] - deps: upgrade npm to 8.19.3 (npm team) #453229fbc8b21db] - deps: update corepack to 0.15.1 (Node.js GitHub Bot) #4533187e3d002ca] - deps: update corepack to 0.15.0 (Node.js GitHub Bot) #45235e972ff7b13] - deps: V8: backportbbd800c(Chengzhong Wu) #44947af9d8217c0] - deps: V8: cherry-pickb953542(Chengzhong Wu) #4494738202d321b] - deps: update undici to 5.12.0 (Node.js GitHub Bot) #452367c0da6adf9] - deps: update archs files for OpenSSL-1.1.1s (RafaelGSS) #452741149ead6f7] - deps: upgrade openssl sources to OpenSSL_1_1_1s (RafaelGSS) #45274cd54bce4f5] - deps: update timezone (Node.js GitHub Bot) #449502901abe4f0] - deps: update undici to 5.11.0 (Node.js GitHub Bot) #44929c80cf97033] - deps: update corepack to 0.14.2 (Node.js GitHub Bot) #4477533707dcd03] - dgram: add dgram send queue info (theanarkh) #44149c708d9bb94] - doc: fix typo in parseArgs default value (Tobias Nießen) #450835a0efa05d2] - node-api: handle no support for external buffers (Michael Dawson) #45181db31de634e] - readline: refactor to avoid unsafe regex primordials (Antoine du Hamel) #43475fbc52e5729] - src: disambiguate terms used to refer to builtins and addons (Joyee Cheung) #44135953072d3db] - src: let http2 streams end after session close (Santiago Gimeno) #4515354608d8dc3] - src: split property helpers from node::Environment (Chengzhong Wu) #440566733556783] - test: add test to validate changelogs for releases (Richard Lau) #45325821d832cef] - test: mark test-watch-mode* as flaky on all platforms (Pierrick Bouvier) #4504902a18eac69] - test: fix test-runner-inspect (Moshe Atlow) #44620197df63f74] - test: add a test to ensure the correctness of timezone upgrades (Darshan Sen) #4529942e9d8016a] - test: fix textdecoder test for small-icu builds (Richard Lau) #452256d736a56d8] - test: fix watch mode test flake (Moshe Atlow) #44739543d3d2bf3] - test: deflake watch mode tests (Moshe Atlow) #4462197f6caf4eb] - test: split watch mode inspector tests to sequential (Moshe Atlow) #44551499750ff7a] - test: update list of known globals (Antoine du Hamel) #4525564d343af74] - test_runner: support using--inspectwith--test(Moshe Atlow) #4452099ee5e484d] - test_runner: fixduration_msto be milliseconds (Moshe Atlow) #4445037e909251c] - test_runner: support programmatically running--test(Moshe Atlow) #442410ae5694f88] - tools: update certdata.txt (Luigi Pinca) #45490891368cefd] - tools: remove faulty early termination logic from update-timezone.mjs (Darshan Sen) #44870543493c242] - tools: fix timezone update tool (Darshan Sen) #44870c77f660b75] - tools: fixcreate-or-update-pull-request-actionhash on GHA (Antoine du Hamel) #4516658c30dd049] - tools: update gr2m/create-or-update-pull-request-action (Luigi Pinca) #45022749a4b3e5e] - tools: use Python 3.11 in GitHub Actions workflows (Luigi Pinca) #451916f541d99a5] - tools: have test-asan use ubuntu-20.04 (Filip Skokan) #45581e7ed56f501] - tools: make license-builder.sh comply with shellcheck 0.8.0 (Rich Trott) #41258cc819b4bf8] - tools: fix typo inavoid-prototype-pollutionlint rule (Antoine du Hamel) #44446254358c81e] - tools: refactoravoid-prototype-pollutionlint rule (Antoine du Hamel) #434768c73279ebb] - util: add default value option to parsearg (Manuel Spigolon) #44631v16.18.1: 2022-11-04, Version 16.18.1 'Gallium' (LTS), @BethGriggsCompare Source
This is a security release.
Notable changes
The following CVEs are fixed in this release:
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
9ffddd7098] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.