Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update node.js to v20.18.2 #845

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 24, 2024

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
node image minor 20.13.1-slim -> 20.18.2-slim age adoption passing confidence
@types/node (source) devDependencies minor 20.12.12 -> 20.17.16 age adoption passing confidence

Release Notes

nodejs/node (node)

v20.18.2: 2025-01-21, Version 20.18.2 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2025-23083 - throw on InternalWorker use when permission model is enabled (High)
  • CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
  • CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

  • CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits

v20.18.1: 2024-11-20, Version 20.18.1 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

v20.18.0: 2024-10-03, Version 20.18.0 'Iron' (LTS), @​targos

Compare Source

Notable Changes
Experimental Network Inspection Support in Node.js

This update introduces the initial support for network inspection in Node.js.
Currently, this is an experimental feature, so you need to enable it using the --experimental-network-inspection flag.
With this feature enabled, you can inspect network activities occurring within a JavaScript application.

To use network inspection, start your Node.js application with the following command:

$ node --inspect-wait --experimental-network-inspection index.js

Please note that the network inspection capabilities are in active development.
We are actively working on enhancing this feature and will continue to expand its functionality in future updates.

Contributed by Kohei Ueno in #​53593 and #​54246

Exposes X509_V_FLAG_PARTIAL_CHAIN to tls.createSecureContext

This releases introduces a new option to the API tls.createSecureContext. From
now on, tls.createSecureContext({ allowPartialTrustChain: true }) can be used
to treat intermediate (non-self-signed) certificates in the trust CA certificate
list as trusted.

Contributed by Anna Henningsen in #​54790

New option for vm.createContext() to create a context with a freezable globalThis

Node.js implements a flavor of vm.createContext() and friends that creates a context without contextifying its global
object when vm.constants.DONT_CONTEXTIFY is used. This is suitable when users want to freeze the context
(impossible when the global is contextified i.e. has interceptors installed) or speed up the global access if they
don't need the interceptor behavior.

Contributed by Joyee Cheung in #​54394

Deprecations
  • [64aa31f6e5] - repl: doc-deprecate instantiating node:repl classes without new (Aviv Keller) #​54842
  • [4c52ee3d7f] - zlib: deprecate instantiating classes without new (Yagiz Nizipli) #​54708
Other Notable Changes
Commits

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/node-20.x branch 6 times, most recently from f766f02 to a556190 Compare October 28, 2024 21:53
@renovate renovate bot force-pushed the renovate/node-20.x branch 7 times, most recently from 80f232a to d42f0f8 Compare November 5, 2024 19:47
@renovate renovate bot force-pushed the renovate/node-20.x branch 7 times, most recently from 888169d to a09b009 Compare November 10, 2024 19:31
@renovate renovate bot force-pushed the renovate/node-20.x branch 5 times, most recently from 04084dc to 0768c98 Compare November 17, 2024 20:19
@renovate renovate bot force-pushed the renovate/node-20.x branch 2 times, most recently from 12730fc to a7879f8 Compare November 17, 2024 21:02
@renovate renovate bot force-pushed the renovate/node-20.x branch 7 times, most recently from c340a70 to 8e245ed Compare December 22, 2024 18:18
@renovate renovate bot force-pushed the renovate/node-20.x branch 5 times, most recently from 5e6cd01 to 31c8249 Compare January 1, 2025 04:56
@renovate renovate bot force-pushed the renovate/node-20.x branch 4 times, most recently from 60a8db1 to 27686b6 Compare January 6, 2025 11:13
@renovate renovate bot force-pushed the renovate/node-20.x branch 7 times, most recently from fe818d4 to f5aaa01 Compare January 16, 2025 05:10
@renovate renovate bot force-pushed the renovate/node-20.x branch from f5aaa01 to 5225720 Compare January 22, 2025 18:01
@renovate renovate bot changed the title chore(deps): update node.js to v20.18.1 chore(deps): update node.js to v20.18.2 Jan 22, 2025
@renovate renovate bot force-pushed the renovate/node-20.x branch 3 times, most recently from be596c8 to 792ac6e Compare January 23, 2025 02:08
@renovate renovate bot force-pushed the renovate/node-20.x branch from 792ac6e to 116e405 Compare January 23, 2025 08:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants