nodejs/node
### [`v16.20.2`](https://togithub.com/nodejs/node/releases/v16.20.2)
[Compare Source](https://togithub.com/nodejs/node/compare/v16.20.1...v16.20.2)
This is a security release.
##### Notable Changes
The following CVEs are fixed in this release:
- [CVE-2023-32002](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32002): Policies can be bypassed via Module.\_load (High)
- [CVE-2023-32006](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32006): Policies can be bypassed by module.constructor.createRequire (Medium)
- [CVE-2023-32559](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32559): Policies can be bypassed via process.binding (Medium)
- OpenSSL Security Releases
- [OpenSSL security advisory 14th July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000264.html).
- [OpenSSL security advisory 19th July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000265.html).
- [OpenSSL security advisory 31st July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000267.html)
More detailed information on each of the vulnerabilities can be found in [August 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/august-2023-security-releases/) blog post.
##### Commits
- \[[`40c3958a5a`](https://togithub.com/nodejs/node/commit/40c3958a5a)] - **deps**: update archs files for OpenSSL-1.1.1v (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043)
- \[[`a9ac9da89a`](https://togithub.com/nodejs/node/commit/a9ac9da89a)] - **deps**: fix openssl crypto clean (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043)
- \[[`362d4c7494`](https://togithub.com/nodejs/node/commit/362d4c7494)] - **deps**: upgrade openssl sources to OpenSSL\_1\_1\_1v (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043)
- \[[`d8ccfe9ad4`](https://togithub.com/nodejs/node/commit/d8ccfe9ad4)] - **policy**: handle Module.constructor and main.extensions bypass (RafaelGSS) [nodejs-private/node-private#445](https://togithub.com/nodejs-private/node-private/pull/445)
- \[[`242aaa0caa`](https://togithub.com/nodejs/node/commit/242aaa0caa)] - **policy**: disable process.binding() when enabled (Tobias Nießen) [nodejs-private/node-private#459](https://togithub.com/nodejs-private/node-private/pull/459)
hakimel/reveal.js
### [`v4.6.1`](https://togithub.com/hakimel/reveal.js/compare/4.6.0...4.6.1)
[Compare Source](https://togithub.com/hakimel/reveal.js/compare/4.6.0...4.6.1)
### [`v4.6.0`](https://togithub.com/hakimel/reveal.js/releases/4.6.0)
[Compare Source](https://togithub.com/hakimel/reveal.js/compare/4.5.0...4.6.0)
#### Changes
- Add support for line number offsets in Markdown code blocks. [Read the docs](https://revealjs.com/markdown/#line-number-offset) ([@flowolf](https://togithub.com/flowolf) [#3409](https://togithub.com/hakimel/reveal.js/issues/3409))
- Significantly speed up livereload ([@t-fritsch](https://togithub.com/t-fritsch) [#3446](https://togithub.com/hakimel/reveal.js/issues/3446))
- Add support for links to the id of an element nested inside slide ([@t-fritsch](https://togithub.com/t-fritsch) [#3444](https://togithub.com/hakimel/reveal.js/issues/3444))
- Adds ability to override Markdown plugin default options ([@t-fritsch](https://togithub.com/t-fritsch) [#3443](https://togithub.com/hakimel/reveal.js/issues/3443))
- Allow theme subfolders ([@t-fritsch](https://togithub.com/t-fritsch) [#3442](https://togithub.com/hakimel/reveal.js/issues/3442))
- Refactored Markdown plugin to use let/const and strict equality ([@grgprarup](https://togithub.com/grgprarup) [#3454](https://togithub.com/hakimel/reveal.js/issues/3454))
#### Fixes
- Auto-slide duration falls back on global setting `autoSlide` instead of using first fragment auto-slide ([@hakimel](https://togithub.com/hakimel))
- When a fragment sets `data-autoslide`, all fragments of the same index will now use the same auto-slide timing ([@hakimel](https://togithub.com/hakimel))
- Fix code block auto-animate bug that caused unmatched lines to appear without fading in ([@hakimel](https://togithub.com/hakimel))
- Fix livereload when using root CLI param ([@t-fritsch](https://togithub.com/t-fritsch) [#3441](https://togithub.com/hakimel/reveal.js/issues/3441))
- Fix scss watch tasks broken on syntax error ([@t-fritsch](https://togithub.com/t-fritsch) [#3445](https://togithub.com/hakimel/reveal.js/issues/3445))
- Fix typos in variable names ([@individual-it](https://togithub.com/individual-it) [#3453](https://togithub.com/hakimel/reveal.js/issues/3453))
- Fix code blocks font when printing pdf ([@t-fritsch](https://togithub.com/t-fritsch) [#3457](https://togithub.com/hakimel/reveal.js/issues/3457))
- Fix dracula's theme list-style on sub-items ([@gildasio](https://togithub.com/gildasio) [#3450](https://togithub.com/hakimel/reveal.js/issues/3450))
- Fix dracula li markers ([@t-fritsch](https://togithub.com/t-fritsch) [#3464](https://togithub.com/hakimel/reveal.js/issues/3464))
**Full Changelog**: https://github.com/hakimel/reveal.js/compare/4.5.0...4.6.0
Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, click this checkbox.
This PR contains the following updates:
16.20.1
->16.20.2
1.7.3
->1.8.2
4.5.0
->4.6.1
Release Notes
nodejs/node
### [`v16.20.2`](https://togithub.com/nodejs/node/releases/v16.20.2) [Compare Source](https://togithub.com/nodejs/node/compare/v16.20.1...v16.20.2) This is a security release. ##### Notable Changes The following CVEs are fixed in this release: - [CVE-2023-32002](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32002): Policies can be bypassed via Module.\_load (High) - [CVE-2023-32006](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32006): Policies can be bypassed by module.constructor.createRequire (Medium) - [CVE-2023-32559](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32559): Policies can be bypassed via process.binding (Medium) - OpenSSL Security Releases - [OpenSSL security advisory 14th July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000264.html). - [OpenSSL security advisory 19th July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000265.html). - [OpenSSL security advisory 31st July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000267.html) More detailed information on each of the vulnerabilities can be found in [August 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/august-2023-security-releases/) blog post. ##### Commits - \[[`40c3958a5a`](https://togithub.com/nodejs/node/commit/40c3958a5a)] - **deps**: update archs files for OpenSSL-1.1.1v (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043) - \[[`a9ac9da89a`](https://togithub.com/nodejs/node/commit/a9ac9da89a)] - **deps**: fix openssl crypto clean (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043) - \[[`362d4c7494`](https://togithub.com/nodejs/node/commit/362d4c7494)] - **deps**: upgrade openssl sources to OpenSSL\_1\_1\_1v (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043) - \[[`d8ccfe9ad4`](https://togithub.com/nodejs/node/commit/d8ccfe9ad4)] - **policy**: handle Module.constructor and main.extensions bypass (RafaelGSS) [nodejs-private/node-private#445](https://togithub.com/nodejs-private/node-private/pull/445) - \[[`242aaa0caa`](https://togithub.com/nodejs/node/commit/242aaa0caa)] - **policy**: disable process.binding() when enabled (Tobias Nießen) [nodejs-private/node-private#459](https://togithub.com/nodejs-private/node-private/pull/459)hakimel/reveal.js
### [`v4.6.1`](https://togithub.com/hakimel/reveal.js/compare/4.6.0...4.6.1) [Compare Source](https://togithub.com/hakimel/reveal.js/compare/4.6.0...4.6.1) ### [`v4.6.0`](https://togithub.com/hakimel/reveal.js/releases/4.6.0) [Compare Source](https://togithub.com/hakimel/reveal.js/compare/4.5.0...4.6.0) #### Changes - Add support for line number offsets in Markdown code blocks. [Read the docs](https://revealjs.com/markdown/#line-number-offset) ([@flowolf](https://togithub.com/flowolf) [#3409](https://togithub.com/hakimel/reveal.js/issues/3409)) - Significantly speed up livereload ([@t-fritsch](https://togithub.com/t-fritsch) [#3446](https://togithub.com/hakimel/reveal.js/issues/3446)) - Add support for links to the id of an element nested inside slide ([@t-fritsch](https://togithub.com/t-fritsch) [#3444](https://togithub.com/hakimel/reveal.js/issues/3444)) - Adds ability to override Markdown plugin default options ([@t-fritsch](https://togithub.com/t-fritsch) [#3443](https://togithub.com/hakimel/reveal.js/issues/3443)) - Allow theme subfolders ([@t-fritsch](https://togithub.com/t-fritsch) [#3442](https://togithub.com/hakimel/reveal.js/issues/3442)) - Refactored Markdown plugin to use let/const and strict equality ([@grgprarup](https://togithub.com/grgprarup) [#3454](https://togithub.com/hakimel/reveal.js/issues/3454)) #### Fixes - Auto-slide duration falls back on global setting `autoSlide` instead of using first fragment auto-slide ([@hakimel](https://togithub.com/hakimel)) - When a fragment sets `data-autoslide`, all fragments of the same index will now use the same auto-slide timing ([@hakimel](https://togithub.com/hakimel)) - Fix code block auto-animate bug that caused unmatched lines to appear without fading in ([@hakimel](https://togithub.com/hakimel)) - Fix livereload when using root CLI param ([@t-fritsch](https://togithub.com/t-fritsch) [#3441](https://togithub.com/hakimel/reveal.js/issues/3441)) - Fix scss watch tasks broken on syntax error ([@t-fritsch](https://togithub.com/t-fritsch) [#3445](https://togithub.com/hakimel/reveal.js/issues/3445)) - Fix typos in variable names ([@individual-it](https://togithub.com/individual-it) [#3453](https://togithub.com/hakimel/reveal.js/issues/3453)) - Fix code blocks font when printing pdf ([@t-fritsch](https://togithub.com/t-fritsch) [#3457](https://togithub.com/hakimel/reveal.js/issues/3457)) - Fix dracula's theme list-style on sub-items ([@gildasio](https://togithub.com/gildasio) [#3450](https://togithub.com/hakimel/reveal.js/issues/3450)) - Fix dracula li markers ([@t-fritsch](https://togithub.com/t-fritsch) [#3464](https://togithub.com/hakimel/reveal.js/issues/3464)) **Full Changelog**: https://github.com/hakimel/reveal.js/compare/4.5.0...4.6.0Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.