search

balena-io-modules / open-balena-base

16 stars 12 forks source link

Update dependency node to v22.4.1 #363

Closed balena-renovate[bot] closed 2 months ago

balena-renovate[bot] commented 2 months ago

This PR contains the following updates:

Package Update Change
node (source) patch 22.4.0 -> 22.4.1

Release Notes

nodejs/node (node) ### [`v22.4.1`](https://togithub.com/nodejs/node/releases/tag/v22.4.1): 2024-07-08, Version 22.4.1 (Current), @​RafaelGSS [Compare Source](https://togithub.com/nodejs/node/compare/v22.4.0...v22.4.1) This is a security release. ##### Notable Changes - CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High) - CVE-2024-22020 - Bypass network import restriction via data URL (Medium) - CVE-2024-22018 - fs.lstat bypasses permission model (Low) - CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low) - CVE-2024-37372 - Permission model improperly processes UNC paths (Low) ##### Commits - \[[`110902ff5e`](https://togithub.com/nodejs/node/commit/110902ff5e)] - **lib,esm**: handle bypass network-import via data: (RafaelGSS) [nodejs-private/node-private#522](https://togithub.com/nodejs-private/node-private/pull/522) - \[[`0a0de3d491`](https://togithub.com/nodejs/node/commit/0a0de3d491)] - **lib,permission**: support fs.lstat (RafaelGSS) - \[[`93574335ff`](https://togithub.com/nodejs/node/commit/93574335ff)] - **lib,permission**: disable fchmod/fchown when pm enabled (RafaelGSS) [nodejs-private/node-private#584](https://togithub.com/nodejs-private/node-private/pull/584) - \[[`09899e6302`](https://togithub.com/nodejs/node/commit/09899e6302)] - **src**: handle permissive extension on cmd check (RafaelGSS) [nodejs-private/node-private#596](https://togithub.com/nodejs-private/node-private/pull/596) - \[[`5d9c811634`](https://togithub.com/nodejs/node/commit/5d9c811634)] - **src,permission**: fix UNC path resolution (RafaelGSS) [nodejs-private/node-private#581](https://togithub.com/nodejs-private/node-private/pull/581)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

â™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Renovate Bot.