Closed renovate[bot] closed 3 years ago
This PR contains the following updates:
v9.10.1
9.11.2
:date: Schedule: At any time (no schedule defined).
:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.
:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
:no_bell: Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.
This PR contains the following updates:
v9.10.1->9.11.2Release Notes
nodejs/node
### [`v9.11.2`](https://togithub.com/nodejs/node/releases/v9.11.2) [Compare Source](https://togithub.com/nodejs/node/compare/v9.11.1...v9.11.2) ##### Notable Changes - **Fixes memory exhaustion DoS** (CVE-2018-7164): Fixes a bug introduced in 9.7.0 that increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. - **buffer** (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang - **http2** - (CVE-2018-7161): Fixes Denial of Service vulnerability by updating the http2 implementation to not crash under certain circumstances during cleanup - (CVE-2018-1000168): Fixes Denial of Service vulnerability by upgrading nghttp2 to 1.32.0 - **tls** (CVE-2018-7162): Fixes Denial of Service vulnerability by updating the TLS implementation to not crash upon receiving ##### Commits - \[[`65ed3213ca`](https://togithub.com/nodejs/node/commit/65ed3213ca)] - **deps**: update to nghttp2 1.32.0 (James M Snell) [nodejs-private/node-private#124](https://togithub.com/nodejs-private/node-private/pull/124) - \[[`f0af3b09bd`](https://togithub.com/nodejs/node/commit/f0af3b09bd)] - **doc**: buffer.fill() can zero-fill on invalid input (Сковорода Никита Андреевич) [nodejs-private/node-private#120](https://togithub.com/nodejs-private/node-private/pull/120) - \[[`828159fcd4`](https://togithub.com/nodejs/node/commit/828159fcd4)] - **http2**: fixup http2stream cleanup and other nits (James M Snell) [nodejs-private/node-private#122](https://togithub.com/nodejs-private/node-private/pull/122) - \[[`be103eba41`](https://togithub.com/nodejs/node/commit/be103eba41)] - **src**: re-add `Realloc()` shrink after reading stream data (Anna Henningsen) [nodejs-private/node-private#129](https://togithub.com/nodejs-private/node-private/pull/129) - \[[`555696df51`](https://togithub.com/nodejs/node/commit/555696df51)] - **src**: avoid hanging on Buffer#fill 0-length input (Сковорода Никита Андреевич) [nodejs-private/node-private#120](https://togithub.com/nodejs-private/node-private/pull/120) - \[[`7684ba63c4`](https://togithub.com/nodejs/node/commit/7684ba63c4)] - **test**: add tls write error regression test (Shigeki Ohtsu) [nodejs-private/node-private#130](https://togithub.com/nodejs-private/node-private/pull/130) - \[[`0ab90acaf3`](https://togithub.com/nodejs/node/commit/0ab90acaf3)] - **test**: add regression test for nghttp2 CVE-2018-1000168 (James M Snell) [nodejs-private/node-private#124](https://togithub.com/nodejs-private/node-private/pull/124) - \[[`84f23d2f12`](https://togithub.com/nodejs/node/commit/84f23d2f12)] - **tls**: fix SSL write error handling (Anna Henningsen) [nodejs-private/node-private#130](https://togithub.com/nodejs-private/node-private/pull/130) ### [`v9.11.1`](https://togithub.com/nodejs/node/releases/v9.11.1) [Compare Source](https://togithub.com/nodejs/node/compare/v9.11.0...v9.11.1) ##### Notable Changes No additional commits. An infrastructure issue caused a non-functioning msi installer for x64 to be promoted. The patch release is to ensure that all binaries and installers work as expected. ### [`v9.11.0`](https://togithub.com/nodejs/node/releases/v9.11.0) [Compare Source](https://togithub.com/nodejs/node/compare/v9.10.1...v9.11.0) ##### Notable Changes - **deps**: - Updated ICU to 61.1 (Steven R. Loomis) [#19621](https://togithub.com/nodejs/node/pull/19621) Includes CLDR 33 (many new languages and data improvements). - **fs**: - Emit 'ready' event for `ReadStream` and `WriteStream` (Sameer Srivastava) [#19408](https://togithub.com/nodejs/node/pull/19408) - **n-api**: - Bump version of n-api supported (Michael Dawson) [#19497](https://togithub.com/nodejs/node/pull/19497) - **net**: - Emit 'ready' event for `Socket` (Sameer Srivastava) [#19408](https://togithub.com/nodejs/node/pull/19408) - **Added new collaborators** - [mafintosh](https://togithub.com/mafintosh) Mathias Buus ##### Commits - \[[`0bd78dc391`](https://togithub.com/nodejs/node/commit/0bd78dc391)] - **buffer**: use v8::TypedArray::kMaxLength as buffer::kMaxLength (Joyee Cheung) [#19738](https://togithub.com/nodejs/node/pull/19738) - \[[`54b84f3c26`](https://togithub.com/nodejs/node/commit/54b84f3c26)] - **buffer**: remove "new" from deprecation message (Rich Trott) [#19687](https://togithub.com/nodejs/node/pull/19687) - \[[`0127712cf5`](https://togithub.com/nodejs/node/commit/0127712cf5)] - **build**: introduce make jstest (Joyee Cheung) [#19324](https://togithub.com/nodejs/node/pull/19324) - \[[`58f61dbf8e`](https://togithub.com/nodejs/node/commit/58f61dbf8e)] - **deps**: ICU 61.1 bump (Steven R. Loomis) [#19621](https://togithub.com/nodejs/node/pull/19621) - \[[`97a92c4973`](https://togithub.com/nodejs/node/commit/97a92c4973)] - **deps**: turn in std::string for ICU (Steven R. Loomis) [#19624](https://togithub.com/nodejs/node/pull/19624) - \[[`ae86adc086`](https://togithub.com/nodejs/node/commit/ae86adc086)] - **doc**: fix various nits (Vse Mozhet Byt) [#19743](https://togithub.com/nodejs/node/pull/19743) - \[[`041f6cd9c9`](https://togithub.com/nodejs/node/commit/041f6cd9c9)] - **doc**: improve Buffer.allocUnsafeSlow() and related (Rich Trott) [#19742](https://togithub.com/nodejs/node/pull/19742) - \[[`42671f24ba`](https://togithub.com/nodejs/node/commit/42671f24ba)] - **doc**: add mafintosh to collaborators (Mathias Buus) [#19773](https://togithub.com/nodejs/node/pull/19773) - \[[`c1b83fcbc2`](https://togithub.com/nodejs/node/commit/c1b83fcbc2)] - **doc**: update to adding listens on SIGUSR1 (willhayslett) [#19709](https://togithub.com/nodejs/node/pull/19709) - \[[`1aaad92101`](https://togithub.com/nodejs/node/commit/1aaad92101)] - **doc**: fix lint nits in COLLABORATOR_GUIDE.md (Vse Mozhet Byt) [#19762](https://togithub.com/nodejs/node/pull/19762) - \[[`5149e18719`](https://togithub.com/nodejs/node/commit/5149e18719)] - **doc**: deprecation clarifications (James M Snell) [#19522](https://togithub.com/nodejs/node/pull/19522) - \[[`c5469bb7a8`](https://togithub.com/nodejs/node/commit/c5469bb7a8)] - **doc**: remove "if provided" for optional arguments (Rich Trott) [#19690](https://togithub.com/nodejs/node/pull/19690) - \[[`3a3ae0134d`](https://togithub.com/nodejs/node/commit/3a3ae0134d)] - **doc**: do not identify string as "JavaScript string" (Rich Trott) [#19689](https://togithub.com/nodejs/node/pull/19689) - \[[`d111037624`](https://togithub.com/nodejs/node/commit/d111037624)] - **doc**: favor utf16le over ucs2 in buffer.md (Rich Trott) [#19688](https://togithub.com/nodejs/node/pull/19688) - \[[`bb32bc8686`](https://togithub.com/nodejs/node/commit/bb32bc8686)] - **doc**: fix links in vm.md (Vse Mozhet Byt) [#19721](https://togithub.com/nodejs/node/pull/19721) - \[[`44361bd1c8`](https://togithub.com/nodejs/node/commit/44361bd1c8)] - **doc**: fix quotes mistypes in inline code blocks (Сковорода Никита Андреевич) [#19713](https://togithub.com/nodejs/node/pull/19713) - \[[`c8fa8f1f9d`](https://togithub.com/nodejs/node/commit/c8fa8f1f9d)] - **doc**: remove ES6/ECMAScript 2015 from buffer.md (Rich Trott) [#19685](https://togithub.com/nodejs/node/pull/19685) - \[[`9f20534889`](https://togithub.com/nodejs/node/commit/9f20534889)] - **doc**: shorten character encoding introduction (Rich Trott) [#19648](https://togithub.com/nodejs/node/pull/19648) - \[[`078616109c`](https://togithub.com/nodejs/node/commit/078616109c)] - **doc**: guard against md list parsing edge case (Vse Mozhet Byt) [#19647](https://togithub.com/nodejs/node/pull/19647) - \[[`2ea7f90728`](https://togithub.com/nodejs/node/commit/2ea7f90728)] - **doc**: fix grammar error in process.md (Kenji Okamoto) [#19641](https://togithub.com/nodejs/node/pull/19641) - \[[`7555deeb8c`](https://togithub.com/nodejs/node/commit/7555deeb8c)] - **doc**: improve zero-fill-buffers text (Rich Trott) [#19623](https://togithub.com/nodejs/node/pull/19623) - \[[`5e90fc6a85`](https://togithub.com/nodejs/node/commit/5e90fc6a85)] - **fs**: use fs.access in fs.exists (Bartosz Sosnowski) [#18618](https://togithub.com/nodejs/node/pull/18618) - \[[`8a8b43e1b1`](https://togithub.com/nodejs/node/commit/8a8b43e1b1)] - **(SEMVER-MINOR)** **fs,net**: emit 'ready' for fs streams and sockets (Sameer Srivastava) [#19408](https://togithub.com/nodejs/node/pull/19408) - \[[`e1f44a6366`](https://togithub.com/nodejs/node/commit/e1f44a6366)] - **http**: fix `request` when `setHost` is `true` (XadillaX) [#19502](https://togithub.com/nodejs/node/pull/19502) - \[[`dac5f67e64`](https://togithub.com/nodejs/node/commit/dac5f67e64)] - **http**: support server options on createServer (Wes Todd) [#19461](https://togithub.com/nodejs/node/pull/19461) - \[[`2bdf3ca235`](https://togithub.com/nodejs/node/commit/2bdf3ca235)] - **http2**: callback valid check before closing request (Trivikram) [#19061](https://togithub.com/nodejs/node/pull/19061) - \[[`7b850a7565`](https://togithub.com/nodejs/node/commit/7b850a7565)] - **http2**: destroy() stream, upon errnoException (Sarat Addepalli) [#19389](https://togithub.com/nodejs/node/pull/19389) - \[[`441175c29a`](https://togithub.com/nodejs/node/commit/441175c29a)] - **http2**: refer to stream errors by name (Anna Henningsen) [#18966](https://togithub.com/nodejs/node/pull/18966) - \[[`0bcad33c7a`](https://togithub.com/nodejs/node/commit/0bcad33c7a)] - **inspector**: report client-visible host and port (Eugene Ostroukhov) [#19664](https://togithub.com/nodejs/node/pull/19664) - \[[`8e440115ec`](https://togithub.com/nodejs/node/commit/8e440115ec)] - **lib**: add back lib/module.js redirection (Joyee Cheung) [#19177](https://togithub.com/nodejs/node/pull/19177) - \[[`45c477c2e6`](https://togithub.com/nodejs/node/commit/45c477c2e6)] - **lib**: restructure cjs and esm loaders (Joyee Cheung) [#19177](https://togithub.com/nodejs/node/pull/19177) - \[[`152a86c6aa`](https://togithub.com/nodejs/node/commit/152a86c6aa)] - **lib**: make isStackOverflowError() engine-agnostic (Mike Kaufman) [#19705](https://togithub.com/nodejs/node/pull/19705) - \[[`889a3b44b3`](https://togithub.com/nodejs/node/commit/889a3b44b3)] - **lib**: fix a typo in lib/timers "read through" (wangzengdi) [#19666](https://togithub.com/nodejs/node/pull/19666) - \[[`a45f3f8fd2`](https://togithub.com/nodejs/node/commit/a45f3f8fd2)] - **lib**: document nextTick queue internals (Anna Henningsen) [#19469](https://togithub.com/nodejs/node/pull/19469) - \[[`d3d1ee7279`](https://togithub.com/nodejs/node/commit/d3d1ee7279)] - **lib**: add internal check macros (Gus Caplan) [#18852](https://togithub.com/nodejs/node/pull/18852) - \[[`e0c7d783e0`](https://togithub.com/nodejs/node/commit/e0c7d783e0)] - **lint**: change require-buffer rule message (Gus Caplan) [#19701](https://togithub.com/nodejs/node/pull/19701) - \[[`859b719927`](https://togithub.com/nodejs/node/commit/859b719927)] - **module**: skip preserveSymlinks for main (Guy Bedford) [#19388](https://togithub.com/nodejs/node/pull/19388) - \[[`a0a58730e0`](https://togithub.com/nodejs/node/commit/a0a58730e0)] - **n-api**: back up env before finalize (Gabriel Schulhof) [#19718](https://togithub.com/nodejs/node/pull/19718) - \[[`b0a3a44ff6`](https://togithub.com/nodejs/node/commit/b0a3a44ff6)] - **n-api**: ensure in-module exceptions are propagated (Gabriel Schulhof) [#19537](https://togithub.com/nodejs/node/pull/19537) - \[[`94a10bad3a`](https://togithub.com/nodejs/node/commit/94a10bad3a)] - **(SEMVER-MINOR)** **n-api**: bump version of n-api supported (Michael Dawson) [#19497](https://togithub.com/nodejs/node/pull/19497) - \[[`ee4390a167`](https://togithub.com/nodejs/node/commit/ee4390a167)] - **repl**: fix tab completion of inspector module (Michaël Zasso) [#19505](https://togithub.com/nodejs/node/pull/19505) - \[[`ebdcf91dcc`](https://togithub.com/nodejs/node/commit/ebdcf91dcc)] - **src**: put bootstrappers in lib/internal/bootstrap/ (Joyee Cheung) [#19177](https://togithub.com/nodejs/node/pull/19177) - \[[`ff7a116ba3`](https://togithub.com/nodejs/node/commit/ff7a116ba3)] - **src**: move internal loaders out of bootstrap_node.js (Joyee Cheung) [#19112](https://togithub.com/nodejs/node/pull/19112) - \[[`75d23ab2a0`](https://togithub.com/nodejs/node/commit/75d23ab2a0)] - **src**: fix warnings in aliased_buffer (Kyle Farnung) [#19665](https://togithub.com/nodejs/node/pull/19665) - \[[`01e31906e8`](https://togithub.com/nodejs/node/commit/01e31906e8)] - **src**: general C++ cleanup in node_url.cc (Anna Henningsen) [#19598](https://togithub.com/nodejs/node/pull/19598) - \[[`6c466811d3`](https://togithub.com/nodejs/node/commit/6c466811d3)] - **src**: name all builtin init functions Initialize (Daniel Bevenius) [#19550](https://togithub.com/nodejs/node/pull/19550) - \[[`1a38b9bd0f`](https://togithub.com/nodejs/node/commit/1a38b9bd0f)] - **src**: remove unused 'ares.h' include from env.h (Anna Henningsen) [#19557](https://togithub.com/nodejs/node/pull/19557) - \[[`cae9ff256b`](https://togithub.com/nodejs/node/commit/cae9ff256b)] - **src**: fix upcoming V8 deprecation warnings (Sarat Addepalli) [#19490](https://togithub.com/nodejs/node/pull/19490) - \[[`83ebaf08d9`](https://togithub.com/nodejs/node/commit/83ebaf08d9)] - **test**: remove NODE_DEBUG in global module loading test (Joyee Cheung) [#19177](https://togithub.com/nodejs/node/pull/19177) - \[[`92e9ed09e9`](https://togithub.com/nodejs/node/commit/92e9ed09e9)] - **test**: test process.setuid for bad argument types (Divyanshu Singh) [#19703](https://togithub.com/nodejs/node/pull/19703) - \[[`4df3377856`](https://togithub.com/nodejs/node/commit/4df3377856)] - **test**: update test to comply with lint rule (Rich Trott) [#19784](https://togithub.com/nodejs/node/pull/19784) - \[[`f379167917`](https://togithub.com/nodejs/node/commit/f379167917)] - **test**: improve assert message (fatahn) [#19629](https://togithub.com/nodejs/node/pull/19629) - \[[`46569d644d`](https://togithub.com/nodejs/node/commit/46569d644d)] - **test**: remove third argument from call to assert.strictEqual() (Forrest Wolf) [#19659](https://togithub.com/nodejs/node/pull/19659) - \[[`e44b7779d6`](https://togithub.com/nodejs/node/commit/e44b7779d6)] - **test**: fix flaky test-cluster-send-handle-twice (Rich Trott) [#19700](https://togithub.com/nodejs/node/pull/19700) - \[[`90c85461ff`](https://togithub.com/nodejs/node/commit/90c85461ff)] - **test**: rename regression tests more expressively (Ujjwal Sharma) [#19668](https://togithub.com/nodejs/node/pull/19668) - \[[`ff7f28c4f2`](https://togithub.com/nodejs/node/commit/ff7f28c4f2)] - **test**: remove 3rd argument from assert.strictEqual (Arian Santrach) [#19707](https://togithub.com/nodejs/node/pull/19707) - \[[`0b27416516`](https://togithub.com/nodejs/node/commit/0b27416516)] - **test**: make test-http-expect-continue more strict (Rich Trott) [#19669](https://togithub.com/nodejs/node/pull/19669) - \[[`94b28aaf07`](https://togithub.com/nodejs/node/commit/94b28aaf07)] - **test**: use createReadStream instead of ReadStream (Daniel Bevenius) [#19636](https://togithub.com/nodejs/node/pull/19636) - \[[`7ae2ca4476`](https://togithub.com/nodejs/node/commit/7ae2ca4476)] - **test**: removed default message from assert.strictEqual (jaspal-yupana) [#19660](https://togithub.com/nodejs/node/pull/19660) - \[[`a89ba21ab4`](https://togithub.com/nodejs/node/commit/a89ba21ab4)] - **test**: refactor test-net-dns-error (Luigi Pinca) [#19640](https://togithub.com/nodejs/node/pull/19640) - \[[`677b613d24`](https://togithub.com/nodejs/node/commit/677b613d24)] - **test**: fix typo in test-tls-cnnic-whitelist (Daniel Bevenius) [#19662](https://togithub.com/nodejs/node/pull/19662) - \[[`806bc0d8f7`](https://togithub.com/nodejs/node/commit/806bc0d8f7)] - **test**: fix assert.throws error in test-http-parser (Rich Trott) [#19626](https://togithub.com/nodejs/node/pull/19626) - \[[`2f09ee78fb`](https://togithub.com/nodejs/node/commit/2f09ee78fb)] - **test**: refactor test-http-expect-continue (Rich Trott) [#19625](https://togithub.com/nodejs/node/pull/19625) - \[[`278e8af7a6`](https://togithub.com/nodejs/node/commit/278e8af7a6)] - **test**: rename tests with descriptive filenames (Ujjwal Sharma) [#19608](https://togithub.com/nodejs/node/pull/19608) - \[[`0daa063021`](https://togithub.com/nodejs/node/commit/0daa063021)] - **test**: amplify and optimize doctool/test-make-doc (Vse Mozhet Byt) [#19581](https://togithub.com/nodejs/node/pull/19581) - \[[`274eff5376`](https://togithub.com/nodejs/node/commit/274eff5376)] - **test**: update link according to NIST bibliography (Tobias Nießen) [#19593](https://togithub.com/nodejs/node/pull/19593) - \[[`21e69d1222`](https://togithub.com/nodejs/node/commit/21e69d1222)] - **test**: fix test-tty-get-color-depth (Bartosz Sosnowski) [#18478](https://togithub.com/nodejs/node/pull/18478) - \[[`4caf536b20`](https://togithub.com/nodejs/node/commit/4caf536b20)] - **test**: http2 stream.respond() error checks (Trivikram) [#18861](https://togithub.com/nodejs/node/pull/18861) - \[[`ca97be52a2`](https://togithub.com/nodejs/node/commit/ca97be52a2)] - **test**: fix wrong error classes passed in as type (Ruben Bridgewater) [#13686](https://togithub.com/nodejs/node/pull/13686) - \[[`44b12c158d`](https://togithub.com/nodejs/node/commit/44b12c158d)] - **test**: fix common.expectsError (Refael Ackermann) [#13686](https://togithub.com/nodejs/node/pull/13686) - \[[`cc68bc27f8`](https://togithub.com/nodejs/node/commit/cc68bc27f8)] - **test**: add more asserts to `test-internal-errors` (Refael Ackermann) [#13686](https://togithub.com/nodejs/node/pull/13686) - \[[`6bc49f03b9`](https://togithub.com/nodejs/node/commit/6bc49f03b9)] - **test**: http2 errors on req.close() (Trivikram) [#18854](https://togithub.com/nodejs/node/pull/18854) - \[[`53d7fbbbf5`](https://togithub.com/nodejs/node/commit/53d7fbbbf5)] - **tools**: don’t emit illegal utf-8 from icutrim/iculslocs (Steven R. Loomis) [#19756](https://togithub.com/nodejs/node/pull/19756) - \[[`b80d169e7c`](https://togithub.com/nodejs/node/commit/b80d169e7c)] - **tools**: apply editorconfig rules to tools also (Tobias Nießen) [#19521](https://togithub.com/nodejs/node/pull/19521) - \[[`239a036317`](https://togithub.com/nodejs/node/commit/239a036317)] - **tools**: remove src dir from JS editorconfig rule (Tobias Nießen) [#19521](https://togithub.com/nodejs/node/pull/19521) - \[[`7043e95fb7`](https://togithub.com/nodejs/node/commit/7043e95fb7)] - **tools**: dry utility function in tools/doc/json.js (Vse Mozhet Byt) [#19692](https://togithub.com/nodejs/node/pull/19692) - \[[`140611b2c6`](https://togithub.com/nodejs/node/commit/140611b2c6)] - **tools**: fix comment nits in tools/doc/\*.js files (Vse Mozhet Byt) [#19696](https://togithub.com/nodejs/node/pull/19696) - \[[`2c5d53f7cb`](https://togithub.com/nodejs/node/commit/2c5d53f7cb)] - **tools**: fix nits in tools/doc/type-parser.js (Vse Mozhet Byt) [#19612](https://togithub.com/nodejs/node/pull/19612) - \[[`fdc51a1331`](https://togithub.com/nodejs/node/commit/fdc51a1331)] - **url**: remove redundant function (Sergey Golovin) [#19076](https://togithub.com/nodejs/node/pull/19076) - \[[`99e3c77808`](https://togithub.com/nodejs/node/commit/99e3c77808)] - **url**: refactor "escapeParam" function to make it common (Sergey Golovin) [#19076](https://togithub.com/nodejs/node/pull/19076)Renovate configuration
:date: Schedule: At any time (no schedule defined).
:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.
:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
:no_bell: Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.