renovate[bot]
commented
1 year ago Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠ Warning: custom changes will be lost.
This PR contains the following updates:
16.19.1->18.15.0^17.0.45->^18.0.0Release Notes
nodejs/node
### [`v18.15.0`](https://togithub.com/nodejs/node/releases/tag/v18.15.0): 2023-03-07, Version 18.15.0 'Hydrogen' (LTS), @BethGriggs prepared by @juanarbol [Compare Source](https://togithub.com/nodejs/node/compare/v18.14.2...v18.15.0) ##### Notable Changes - \[[`63563f8a7a`](https://togithub.com/nodejs/node/commit/63563f8a7a)] - **doc,lib,src,test**: rename --test-coverage (Colin Ihrig) [#46017](https://togithub.com/nodejs/node/pull/46017) - \[[`28a775b32f`](https://togithub.com/nodejs/node/commit/28a775b32f)] - **test_runner**: add initial code coverage support (Colin Ihrig) [#46017](https://togithub.com/nodejs/node/pull/46017) - \[[`4d50db14b3`](https://togithub.com/nodejs/node/commit/4d50db14b3)] - **(SEMVER-MINOR)** **test_runner**: add reporters (Moshe Atlow) [#45712](https://togithub.com/nodejs/node/pull/45712) - \[[`643545ab79`](https://togithub.com/nodejs/node/commit/643545ab79)] - **(SEMVER-MINOR)** **fs**: add statfs() functions (Colin Ihrig) [#46358](https://togithub.com/nodejs/node/pull/46358) - \[[`110ead9abb`](https://togithub.com/nodejs/node/commit/110ead9abb)] - **(SEMVER-MINOR)** **vm**: expose cachedDataRejected for vm.compileFunction (Anna Henningsen) [#46320](https://togithub.com/nodejs/node/pull/46320) - \[[`02632b42cf`](https://togithub.com/nodejs/node/commit/02632b42cf)] - **(SEMVER-MINOR)** **v8**: support gc profile (theanarkh) [#46255](https://togithub.com/nodejs/node/pull/46255) - \[[`f09b838408`](https://togithub.com/nodejs/node/commit/f09b838408)] - **(SEMVER-MINOR)** **src,lib**: add constrainedMemory API for process (theanarkh) [#46218](https://togithub.com/nodejs/node/pull/46218) - \[[`cb5bb12422`](https://togithub.com/nodejs/node/commit/cb5bb12422)] - **(SEMVER-MINOR)** **buffer**: add isAscii method (Yagiz Nizipli) [#46046](https://togithub.com/nodejs/node/pull/46046) ##### Commits - \[[`6f91c8e2ae`](https://togithub.com/nodejs/node/commit/6f91c8e2ae)] - **benchmark**: add trailing commas (Antoine du Hamel) [#46370](https://togithub.com/nodejs/node/pull/46370) - \[[`d0b9be21eb`](https://togithub.com/nodejs/node/commit/d0b9be21eb)] - **benchmark**: remove buffer benchmarks redundancy (Brian White) [#45735](https://togithub.com/nodejs/node/pull/45735) - \[[`6468f30d0d`](https://togithub.com/nodejs/node/commit/6468f30d0d)] - **benchmark**: introduce benchmark combination filtering (Brian White) [#45735](https://togithub.com/nodejs/node/pull/45735) - \[[`cb5bb12422`](https://togithub.com/nodejs/node/commit/cb5bb12422)] - **(SEMVER-MINOR)** **buffer**: add isAscii method (Yagiz Nizipli) [#46046](https://togithub.com/nodejs/node/pull/46046) - \[[`ec61bb04c0`](https://togithub.com/nodejs/node/commit/ec61bb04c0)] - **build**: export more OpenSSL symbols on Windows (Mohamed Akram) [#45486](https://togithub.com/nodejs/node/pull/45486) - \[[`7bae4333ce`](https://togithub.com/nodejs/node/commit/7bae4333ce)] - **build**: fix MSVC 2022 Release compilation (Vladimir Morozov (REDMOND)) [#46228](https://togithub.com/nodejs/node/pull/46228) - \[[`0f5f2d4470`](https://togithub.com/nodejs/node/commit/0f5f2d4470)] - **crypto**: include `hmac.h` in `crypto_util.h` (Adam Langley) [#46279](https://togithub.com/nodejs/node/pull/46279) - \[[`91ece4161b`](https://togithub.com/nodejs/node/commit/91ece4161b)] - **crypto**: avoid hang when no algorithm available (Richard Lau) [#46237](https://togithub.com/nodejs/node/pull/46237) - \[[`492fc95bdf`](https://togithub.com/nodejs/node/commit/492fc95bdf)] - **deps**: V8: cherry-pick [`90be99f`](https://togithub.com/nodejs/node/commit/90be99fab31c) (Michaël Zasso) [#46646](https://togithub.com/nodejs/node/pull/46646) - \[[`732c77e3d9`](https://togithub.com/nodejs/node/commit/732c77e3d9)] - **deps**: update acorn to 8.8.2 (Node.js GitHub Bot) [#46363](https://togithub.com/nodejs/node/pull/46363) - \[[`8582f99ffb`](https://togithub.com/nodejs/node/commit/8582f99ffb)] - **deps**: update to uvwasi 0.0.15 (Colin Ihrig) [#46253](https://togithub.com/nodejs/node/pull/46253) - \[[`5453cd9940`](https://togithub.com/nodejs/node/commit/5453cd9940)] - **deps**: V8: cherry-pick [`bf0bd48`](https://togithub.com/nodejs/node/commit/bf0bd4868dde) (Michaël Zasso) [#45908](https://togithub.com/nodejs/node/pull/45908) - \[[`3ea53c5dc8`](https://togithub.com/nodejs/node/commit/3ea53c5dc8)] - **deps**: V8: cherry-pick [`c875e86`](https://togithub.com/nodejs/node/commit/c875e86df1d7) (sepehrst) [#46501](https://togithub.com/nodejs/node/pull/46501) - \[[`c04808de4b`](https://togithub.com/nodejs/node/commit/c04808de4b)] - **doc**: correct the `sed` command for macOS in release process docs (Juan José) [#46397](https://togithub.com/nodejs/node/pull/46397) - \[[`8113220690`](https://togithub.com/nodejs/node/commit/8113220690)] - **doc**: pass string to `textEncoder.encode` as input (Deokjin Kim) [#46421](https://togithub.com/nodejs/node/pull/46421) - \[[`129dccf5d2`](https://togithub.com/nodejs/node/commit/129dccf5d2)] - **doc**: add tip for session.post function (theanarkh) [#46354](https://togithub.com/nodejs/node/pull/46354) - \[[`919e581732`](https://togithub.com/nodejs/node/commit/919e581732)] - **doc**: add documentation for socket.destroySoon() (Luigi Pinca) [#46337](https://togithub.com/nodejs/node/pull/46337) - \[[`fc15ac95a5`](https://togithub.com/nodejs/node/commit/fc15ac95a5)] - **doc**: fix commit message using test instead of deps (Tony Gorez) [#46313](https://togithub.com/nodejs/node/pull/46313) - \[[`d153a93200`](https://togithub.com/nodejs/node/commit/d153a93200)] - **doc**: add v8 fast api contribution guidelines (Yagiz Nizipli) [#46199](https://togithub.com/nodejs/node/pull/46199) - \[[`dbf082d082`](https://togithub.com/nodejs/node/commit/dbf082d082)] - **doc**: fix small typo error (0xflotus) [#46186](https://togithub.com/nodejs/node/pull/46186) - \[[`94421b4cfe`](https://togithub.com/nodejs/node/commit/94421b4cfe)] - **doc**: mark some parameters as optional in webstreams (Deokjin Kim) [#46269](https://togithub.com/nodejs/node/pull/46269) - \[[`5adb743511`](https://togithub.com/nodejs/node/commit/5adb743511)] - **doc**: update output of example in `events.getEventListeners` (Deokjin Kim) [#46268](https://togithub.com/nodejs/node/pull/46268) - \[[`63563f8a7a`](https://togithub.com/nodejs/node/commit/63563f8a7a)] - **doc,lib,src,test**: rename --test-coverage (Colin Ihrig) [#46017](https://togithub.com/nodejs/node/pull/46017) - \[[`4e88c7c813`](https://togithub.com/nodejs/node/commit/4e88c7c813)] - **esm**: delete preload mock test (Geoffrey Booth) [#46402](https://togithub.com/nodejs/node/pull/46402) - \[[`643545ab79`](https://togithub.com/nodejs/node/commit/643545ab79)] - **(SEMVER-MINOR)** **fs**: add statfs() functions (Colin Ihrig) [#46358](https://togithub.com/nodejs/node/pull/46358) - \[[`5019b5473f`](https://togithub.com/nodejs/node/commit/5019b5473f)] - **http**: res.setHeaders first implementation (Marco Ippolito) [#46109](https://togithub.com/nodejs/node/pull/46109) - \[[`76622c4c60`](https://togithub.com/nodejs/node/commit/76622c4c60)] - **inspector**: allow opening inspector when `NODE_V8_COVERAGE` is set (Moshe Atlow) [#46113](https://togithub.com/nodejs/node/pull/46113) - \[[`92f0747e03`](https://togithub.com/nodejs/node/commit/92f0747e03)] - **meta**: update AUTHORS (Node.js GitHub Bot) [#46399](https://togithub.com/nodejs/node/pull/46399) - \[[`795251bc6f`](https://togithub.com/nodejs/node/commit/795251bc6f)] - **meta**: update AUTHORS (Node.js GitHub Bot) [#46303](https://togithub.com/nodejs/node/pull/46303) - \[[`8865424c31`](https://togithub.com/nodejs/node/commit/8865424c31)] - **meta**: add .mailmap entry (Rich Trott) [#46303](https://togithub.com/nodejs/node/pull/46303) - \[[`5ed679407b`](https://togithub.com/nodejs/node/commit/5ed679407b)] - **meta**: move evanlucas to emeritus (Evan Lucas) [#46274](https://togithub.com/nodejs/node/pull/46274) - \[[`403df210ac`](https://togithub.com/nodejs/node/commit/403df210ac)] - **module**: move test reporter loading (Geoffrey Booth) [#45923](https://togithub.com/nodejs/node/pull/45923) - \[[`2f7319e387`](https://togithub.com/nodejs/node/commit/2f7319e387)] - **readline**: fix detection of carriage return (Antoine du Hamel) [#46306](https://togithub.com/nodejs/node/pull/46306) - \[[`73a8f46c4d`](https://togithub.com/nodejs/node/commit/73a8f46c4d)] - ***Revert*** "**src**: let http2 streams end after session close" (Santiago Gimeno) [#46721](https://togithub.com/nodejs/node/pull/46721) - \[[`30d783f91a`](https://togithub.com/nodejs/node/commit/30d783f91a)] - **src**: stop tracing agent before shutting down libuv (Santiago Gimeno) [#46380](https://togithub.com/nodejs/node/pull/46380) - \[[`1508d90fda`](https://togithub.com/nodejs/node/commit/1508d90fda)] - **src**: get rid of fp arithmetic in ParseIPv4Host (Tobias Nießen) [#46326](https://togithub.com/nodejs/node/pull/46326) - \[[`bdb793a082`](https://togithub.com/nodejs/node/commit/bdb793a082)] - **src**: use UNREACHABLE instead of CHECK(falsy) (Tobias Nießen) [#46317](https://togithub.com/nodejs/node/pull/46317) - \[[`116a33649b`](https://togithub.com/nodejs/node/commit/116a33649b)] - **src**: add support for ETW stack walking (José Dapena Paz) [#46203](https://togithub.com/nodejs/node/pull/46203) - \[[`b06298c98e`](https://togithub.com/nodejs/node/commit/b06298c98e)] - **src**: refactor EndsInANumber in node_url.cc and adds IsIPv4NumberValid (Miguel Teixeira) [#46227](https://togithub.com/nodejs/node/pull/46227) - \[[`26f41b041c`](https://togithub.com/nodejs/node/commit/26f41b041c)] - **src**: fix c++ exception on bad command line arg (Ben Noordhuis) [#46290](https://togithub.com/nodejs/node/pull/46290) - \[[`14da89f41a`](https://togithub.com/nodejs/node/commit/14da89f41a)] - **src**: remove unreachable UNREACHABLE (Tobias Nießen) [#46281](https://togithub.com/nodejs/node/pull/46281) - \[[`18c4dd004b`](https://togithub.com/nodejs/node/commit/18c4dd004b)] - **src**: replace custom ASCII validation with simdutf one (Anna Henningsen) [#46271](https://togithub.com/nodejs/node/pull/46271) - \[[`cde375510f`](https://togithub.com/nodejs/node/commit/cde375510f)] - **src**: replace unreachable code with static_assert (Tobias Nießen) [#46250](https://togithub.com/nodejs/node/pull/46250) - \[[`f389b2f3fc`](https://togithub.com/nodejs/node/commit/f389b2f3fc)] - **src**: use explicit C++17 fallthrough (Tobias Nießen) [#46251](https://togithub.com/nodejs/node/pull/46251) - \[[`8adaa1333c`](https://togithub.com/nodejs/node/commit/8adaa1333c)] - **src**: use CreateEnvironment instead of inlining its code where possible (Anna Henningsen) [#45886](https://togithub.com/nodejs/node/pull/45886) - \[[`f09b838408`](https://togithub.com/nodejs/node/commit/f09b838408)] - **(SEMVER-MINOR)** **src,lib**: add constrainedMemory API for process (theanarkh) [#46218](https://togithub.com/nodejs/node/pull/46218) - \[[`63e92eae63`](https://togithub.com/nodejs/node/commit/63e92eae63)] - **stream**: remove brandchecks from stream duplexify (Debadree Chatterjee) [#46315](https://togithub.com/nodejs/node/pull/46315) - \[[`3acfe9bf92`](https://togithub.com/nodejs/node/commit/3acfe9bf92)] - **stream**: fix readable stream as async iterator function (Erick Wendel) [#46147](https://togithub.com/nodejs/node/pull/46147) - \[[`de64315ccb`](https://togithub.com/nodejs/node/commit/de64315ccb)] - **test**: fix WPT title when no META title is present (Filip Skokan) [#46804](https://togithub.com/nodejs/node/pull/46804) - \[[`162e3400ff`](https://togithub.com/nodejs/node/commit/162e3400ff)] - **test**: fix default WPT titles (Filip Skokan) [#46778](https://togithub.com/nodejs/node/pull/46778) - \[[`5f422c4d70`](https://togithub.com/nodejs/node/commit/5f422c4d70)] - **test**: add WPTRunner support for variants and generating WPT reports (Filip Skokan) [#46498](https://togithub.com/nodejs/node/pull/46498) - \[[`4f5aff2557`](https://togithub.com/nodejs/node/commit/4f5aff2557)] - **test**: fix tap parser fails if a test logs a number (Pulkit Gupta) [#46056](https://togithub.com/nodejs/node/pull/46056) - \[[`32b020cf84`](https://togithub.com/nodejs/node/commit/32b020cf84)] - **test**: fix tap escaping with and without --test (Pulkit Gupta) [#46311](https://togithub.com/nodejs/node/pull/46311) - \[[`f2bba1bcdb`](https://togithub.com/nodejs/node/commit/f2bba1bcdb)] - **test**: add trailing commas in `test/node-api` (Antoine du Hamel) [#46384](https://togithub.com/nodejs/node/pull/46384) - \[[`f2ebe66fda`](https://togithub.com/nodejs/node/commit/f2ebe66fda)] - **test**: add trailing commas in `test/message` (Antoine du Hamel) [#46372](https://togithub.com/nodejs/node/pull/46372) - \[[`ed564a9985`](https://togithub.com/nodejs/node/commit/ed564a9985)] - **test**: add trailing commas in `test/pseudo-tty` (Antoine du Hamel) [#46371](https://togithub.com/nodejs/node/pull/46371) - \[[`e4437dd409`](https://togithub.com/nodejs/node/commit/e4437dd409)] - **test**: set common.bits to 64 for loong64 (Shi Pujin) [#45383](https://togithub.com/nodejs/node/pull/45383) - \[[`9d40aef736`](https://togithub.com/nodejs/node/commit/9d40aef736)] - **test**: s390x zlib test case fixes (Adam Majer) [#46367](https://togithub.com/nodejs/node/pull/46367) - \[[`ed3fb52716`](https://togithub.com/nodejs/node/commit/ed3fb52716)] - **test**: fix logInTimeout is not function (theanarkh) [#46348](https://togithub.com/nodejs/node/pull/46348) - \[[`d05b0771be`](https://togithub.com/nodejs/node/commit/d05b0771be)] - **test**: avoid trying to call sysctl directly (Adam Majer) [#46366](https://togithub.com/nodejs/node/pull/46366) - \[[`041aac3bbd`](https://togithub.com/nodejs/node/commit/041aac3bbd)] - **test**: avoid left behind child processes (Richard Lau) [#46276](https://togithub.com/nodejs/node/pull/46276) - \[[`837ddcb322`](https://togithub.com/nodejs/node/commit/837ddcb322)] - **test**: add failing test for readline with carriage return (Alec Mev) [#46075](https://togithub.com/nodejs/node/pull/46075) - \[[`75b8db41c6`](https://togithub.com/nodejs/node/commit/75b8db41c6)] - **test**: reduce `fs-write-optional-params` flakiness (LiviaMedeiros) [#46238](https://togithub.com/nodejs/node/pull/46238) - \[[`c0d3fdaf63`](https://togithub.com/nodejs/node/commit/c0d3fdaf63)] - **test,crypto**: add CFRG curve vectors to wrap/unwrap tests (Filip Skokan) [#46406](https://togithub.com/nodejs/node/pull/46406) - \[[`f328f7b15e`](https://togithub.com/nodejs/node/commit/f328f7b15e)] - **test,crypto**: update WebCryptoAPI WPT (Filip Skokan) [#46267](https://togithub.com/nodejs/node/pull/46267) - \[[`1ef3c53e24`](https://togithub.com/nodejs/node/commit/1ef3c53e24)] - **test_runner**: better handle async bootstrap errors (Colin Ihrig) [#46720](https://togithub.com/nodejs/node/pull/46720) - \[[`0a690efb76`](https://togithub.com/nodejs/node/commit/0a690efb76)] - **test_runner**: add `describe.only` and `it.only` shorthands (Richie McColl) [#46604](https://togithub.com/nodejs/node/pull/46604) - \[[`28a1317efe`](https://togithub.com/nodejs/node/commit/28a1317efe)] - **test_runner**: bootstrap reporters before running tests (Moshe Atlow) [#46737](https://togithub.com/nodejs/node/pull/46737) - \[[`cd3aaa8fac`](https://togithub.com/nodejs/node/commit/cd3aaa8fac)] - **test_runner**: emit test-only diagnostic warning (Richie McColl) [#46540](https://togithub.com/nodejs/node/pull/46540) - \[[`c19fa45a65`](https://togithub.com/nodejs/node/commit/c19fa45a65)] - **test_runner**: centralize CLI option handling (Colin Ihrig) [#46707](https://togithub.com/nodejs/node/pull/46707) - \[[`0898145e37`](https://togithub.com/nodejs/node/commit/0898145e37)] - **test_runner**: display skipped tests in spec reporter output (Richie McColl) [#46651](https://togithub.com/nodejs/node/pull/46651) - \[[`894d7117fa`](https://togithub.com/nodejs/node/commit/894d7117fa)] - **test_runner**: parse non-ascii character correctly (Mert Can Altın) [#45736](https://togithub.com/nodejs/node/pull/45736) - \[[`5b3c606626`](https://togithub.com/nodejs/node/commit/5b3c606626)] - **test_runner**: flatten TAP output when running using `--test` (Moshe Atlow) [#46440](https://togithub.com/nodejs/node/pull/46440) - \[[`391ff0dba4`](https://togithub.com/nodejs/node/commit/391ff0dba4)] - **test_runner**: allow nesting test within describe (Moshe Atlow) [#46544](https://togithub.com/nodejs/node/pull/46544) - \[[`ba784e87b4`](https://togithub.com/nodejs/node/commit/ba784e87b4)] - **test_runner**: fix missing test diagnostics (Moshe Atlow) [#46450](https://togithub.com/nodejs/node/pull/46450) - \[[`c5f16fb5fb`](https://togithub.com/nodejs/node/commit/c5f16fb5fb)] - **test_runner**: top-level diagnostics not ommited when running with --test (Pulkit Gupta) [#46441](https://togithub.com/nodejs/node/pull/46441) - \[[`28a775b32f`](https://togithub.com/nodejs/node/commit/28a775b32f)] - **test_runner**: add initial code coverage support (Colin Ihrig) [#46017](https://togithub.com/nodejs/node/pull/46017) - \[[`0d999e373a`](https://togithub.com/nodejs/node/commit/0d999e373a)] - **test_runner**: make built in reporters internal (Colin Ihrig) [#46092](https://togithub.com/nodejs/node/pull/46092) - \[[`79f4b426fe`](https://togithub.com/nodejs/node/commit/79f4b426fe)] - **test_runner**: report `file` in test runner events (Moshe Atlow) [#46030](https://togithub.com/nodejs/node/pull/46030) - \[[`4d50db14b3`](https://togithub.com/nodejs/node/commit/4d50db14b3)] - **(SEMVER-MINOR)** **test_runner**: add reporters (Moshe Atlow) [#45712](https://togithub.com/nodejs/node/pull/45712) - \[[`5fdf374c74`](https://togithub.com/nodejs/node/commit/5fdf374c74)] - **test_runner**: avoid swallowing of asynchronously thrown errors (MURAKAMI Masahiko) [#45264](https://togithub.com/nodejs/node/pull/45264) - \[[`23b875806c`](https://togithub.com/nodejs/node/commit/23b875806c)] - **test_runner**: update comment to comply with eslint no-fallthrough rule (Antoine du Hamel) [#46258](https://togithub.com/nodejs/node/pull/46258) - \[[`00c5495aa3`](https://togithub.com/nodejs/node/commit/00c5495aa3)] - **tools**: update eslint to 8.33.0 (Node.js GitHub Bot) [#46400](https://togithub.com/nodejs/node/pull/46400) - \[[`37a6ce1120`](https://togithub.com/nodejs/node/commit/37a6ce1120)] - **tools**: update doc to unist-util-select@4.0.3 unist-util-visit@4.1.2 (Node.js GitHub Bot) [#46364](https://togithub.com/nodejs/node/pull/46364) - \[[`1eaafc7db4`](https://togithub.com/nodejs/node/commit/1eaafc7db4)] - **tools**: update lint-md-dependencies to rollup@3.12.0 (Node.js GitHub Bot) [#46398](https://togithub.com/nodejs/node/pull/46398) - \[[`a97774603b`](https://togithub.com/nodejs/node/commit/a97774603b)] - **tools**: require more trailing commas (Antoine du Hamel) [#46346](https://togithub.com/nodejs/node/pull/46346) - \[[`03e244a59b`](https://togithub.com/nodejs/node/commit/03e244a59b)] - **tools**: update lint-md-dependencies (Node.js GitHub Bot) [#46302](https://togithub.com/nodejs/node/pull/46302) - \[[`60d714e0c3`](https://togithub.com/nodejs/node/commit/60d714e0c3)] - **tools**: allow icutrim.py to run on python2 (Michael Dawson) [#46263](https://togithub.com/nodejs/node/pull/46263) - \[[`b7950f50de`](https://togithub.com/nodejs/node/commit/b7950f50de)] - **tools**: update eslint to 8.32.0 (Node.js GitHub Bot) [#46258](https://togithub.com/nodejs/node/pull/46258) - \[[`08bafc84f6`](https://togithub.com/nodejs/node/commit/08bafc84f6)] - **url**: refactor to use more primordials (Antoine du Hamel) [#45966](https://togithub.com/nodejs/node/pull/45966) - \[[`02632b42cf`](https://togithub.com/nodejs/node/commit/02632b42cf)] - **(SEMVER-MINOR)** **v8**: support gc profile (theanarkh) [#46255](https://togithub.com/nodejs/node/pull/46255) - \[[`110ead9abb`](https://togithub.com/nodejs/node/commit/110ead9abb)] - **(SEMVER-MINOR)** **vm**: expose cachedDataRejected for vm.compileFunction (Anna Henningsen) [#46320](https://togithub.com/nodejs/node/pull/46320) ### [`v18.14.2`](https://togithub.com/nodejs/node/releases/tag/v18.14.2): 2023-02-21, Version 18.14.2 'Hydrogen' (LTS), @MylesBorins [Compare Source](https://togithub.com/nodejs/node/compare/v18.14.1...v18.14.2) ##### Notable Changes - \[[`f864bef32a`](https://togithub.com/nodejs/node/commit/f864bef32a)] - **deps**: upgrade npm to 9.5.0 (npm team) [#46673](https://togithub.com/nodejs/node/pull/46673) ##### Commits - \[[`880a65d7ff`](https://togithub.com/nodejs/node/commit/880a65d7ff)] - **build**: delete `snapshot.blob` file from the project (Juan José Arboleda) [#46626](https://togithub.com/nodejs/node/pull/46626) - \[[`cbea56efda`](https://togithub.com/nodejs/node/commit/cbea56efda)] - **deps**: update undici to 5.20.0 (Node.js GitHub Bot) [#46711](https://togithub.com/nodejs/node/pull/46711) - \[[`f864bef32a`](https://togithub.com/nodejs/node/commit/f864bef32a)] - **deps**: upgrade npm to 9.5.0 (npm team) [#46673](https://togithub.com/nodejs/node/pull/46673) - \[[`648041d568`](https://togithub.com/nodejs/node/commit/648041d568)] - **deps**: upgrade npm to 9.4.0 (npm team) [#46353](https://togithub.com/nodejs/node/pull/46353) - \[[`5e1f213f3c`](https://togithub.com/nodejs/node/commit/5e1f213f3c)] - **deps**: patch V8 to 10.2.154.26 (Michaël Zasso) [#46446](https://togithub.com/nodejs/node/pull/46446) ### [`v18.14.1`](https://togithub.com/nodejs/node/releases/tag/v18.14.1): 2023-02-16, Version 18.14.1 'Hydrogen' (LTS), @RafaelGSS prepared by @juanarbol [Compare Source](https://togithub.com/nodejs/node/compare/v18.14.0...v18.14.1) This is a security release. ##### Notable Changes The following CVEs are fixed in this release: - **[CVE-2023-23918](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23918)**: Node.js Permissions policies can be bypassed via process.mainModule (High) - **[CVE-2023-23919](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23919)**: Node.js OpenSSL error handling issues in nodejs crypto library (Medium) - **[CVE-2023-23936](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23936)**: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium) - **[CVE-2023-24807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24807)**: Regular Expression Denial of Service in Headers in Node.js fetch API (Low) - **[CVE-2023-23920](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23920)**: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low) More detailed information on each of the vulnerabilities can be found in [February 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/) blog post. This security release includes OpenSSL security updates as outlined in the recent [OpenSSL security advisory](https://www.openssl.org/news/secadv/20230207.txt). ##### Commits - \[[`8393ebc72d`](https://togithub.com/nodejs/node/commit/8393ebc72d)] - **build**: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) [nodejs-private/node-private#379](https://togithub.com/nodejs-private/node-private/pull/379) - \[[`004e34d046`](https://togithub.com/nodejs/node/commit/004e34d046)] - **crypto**: clear OpenSSL error on invalid ca cert (RafaelGSS) [#46572](https://togithub.com/nodejs/node/pull/46572) - \[[`5e0142a852`](https://togithub.com/nodejs/node/commit/5e0142a852)] - **deps**: cherry-pick Windows ARM64 fix for openssl (Richard Lau) [#46572](https://togithub.com/nodejs/node/pull/46572) - \[[`f71fe278a6`](https://togithub.com/nodejs/node/commit/f71fe278a6)] - **deps**: update archs files for quictls/openssl-3.0.8+quic (RafaelGSS) [#46572](https://togithub.com/nodejs/node/pull/46572) - \[[`2c6817e42b`](https://togithub.com/nodejs/node/commit/2c6817e42b)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.8+quic (RafaelGSS) [#46572](https://togithub.com/nodejs/node/pull/46572) - \[[`f0afa0bfe5`](https://togithub.com/nodejs/node/commit/f0afa0bfe5)] - **deps**: update undici to 5.19.1 (Node.js GitHub Bot) [#46634](https://togithub.com/nodejs/node/pull/46634) - \[[`c26a34c13e`](https://togithub.com/nodejs/node/commit/c26a34c13e)] - **deps**: update undici to 5.18.0 (Node.js GitHub Bot) [#46634](https://togithub.com/nodejs/node/pull/46634) - \[[`db93ee4a15`](https://togithub.com/nodejs/node/commit/db93ee4a15)] - **deps**: update undici to 5.17.1 (Node.js GitHub Bot) [#46634](https://togithub.com/nodejs/node/pull/46634) - \[[`b4e49fb02c`](https://togithub.com/nodejs/node/commit/b4e49fb02c)] - **deps**: update undici to 5.16.0 (Node.js GitHub Bot) [#46634](https://togithub.com/nodejs/node/pull/46634) - \[[`90994e6a2c`](https://togithub.com/nodejs/node/commit/90994e6a2c)] - **deps**: update undici to 5.15.1 (Node.js GitHub Bot) [#46634](https://togithub.com/nodejs/node/pull/46634) - \[[`00302fc7ac`](https://togithub.com/nodejs/node/commit/00302fc7ac)] - **deps**: update undici to 5.15.0 (Node.js GitHub Bot) [#46634](https://togithub.com/nodejs/node/pull/46634) - \[[`0e3b796cc5`](https://togithub.com/nodejs/node/commit/0e3b796cc5)] - **lib**: makeRequireFunction patch when experimental policy (RafaelGSS) [nodejs-private/node-private#371](https://togithub.com/nodejs-private/node-private/pull/371) - \[[`7cccd5565f`](https://togithub.com/nodejs/node/commit/7cccd5565f)] - **policy**: makeRequireFunction on mainModule.require (RafaelGSS) [nodejs-private/node-private#371](https://togithub.com/nodejs-private/node-private/pull/371) ### [`v18.14.0`](https://togithub.com/nodejs/node/releases/tag/v18.14.0): 2023-02-02, Version 18.14.0 'Hydrogen' (LTS), @BethGriggs prepared by @juanarbol [Compare Source](https://togithub.com/nodejs/node/compare/v18.13.0...v18.14.0) ##### Notable changes ##### Updated npm to 9.3.1 Based on the [list of guidelines we've established on integrating `npm` and `node`](https://togithub.com/npm/cli/wiki/Integrating-with-node), here is a grouped list of the breaking changes with the reasoning as to why they fit within the guidelines linked above. Note that all the breaking changes were made in [9.0.0](https://togithub.com/npm/cli/releases/tag/v9.0.0). All subsequent minor and patch releases after `npm@9.0.0` do not contain any breaking changes. ##### Engines > Explanation: the node engines supported by `npm@9` make it safe to allow `npm@9` as the default in any LTS version of `14` or `16`, as well as anything later than or including `18.0.0` - `npm` is now compatible with the following semver range for node: `^14.17.0 || ^16.13.0 || >=18.0.0` ##### Filesystem > Explanation: when run as root previous versions of npm attempted to manage file ownership automatically on the user's behalf. this behavior was problematic in many cases and has been removed in favor of allowing users to manage their own filesystem permissions - `npm` will no longer attempt to modify ownership of files it creates. ##### Auth > Explanation: any errors thrown from users having unsupported auth configurations will show `npm config fix` in the remediation instructions, which will allow the user to automatically have their auth config fixed. - The presence of auth related settings that are not scoped to a specific registry found in a config file is no longer supported and will throw errors. ##### Login > Explanation: the default `auth-type` has changed and users can opt back into the old behavior with `npm config set auth-type=legacy`. `login` and `adduser` have also been seperated making each command more closely match it's name instead of being aliases for each other. - Legacy auth types `sso`, `saml` & `legacy` have been consolidated into `"legacy"`. - `auth-type` defaults to `"web"` - `login` and `adduser` are now separate commands that send different data to the registry. - `auth-type` config values `web` and `legacy` only try their respective methods, npm no longer tries them all and waits to see which one doesn't fail. ##### Tarball Packing > Explanation: previously using multiple ignore/allow lists when packing was an undefined behavior, and now the order of operations is strictly defined when packing a tarball making it easier to follow and should only affect users relying on the previously undefined behavior. - `npm pack` now follows a strict order of operations when applying ignore rules. If a `files` array is present in the `package.json`, then rules in `.gitignore` and `.npmignore` files from the root will be ignored. ##### Display/Debug/Timing Info > Explanation: these changes center around the display of information to the terminal including timing and debug log info. We do not anticipate these changes breaking any existing workflows. - Links generated from git urls will now use `HEAD` instead of `master` as the default ref. - `timing` has been removed as a value for `--loglevel`. - `--timing` will show timing information regardless of `--loglevel`, except when `--silent`. - When run with the `--timing` flag, `npm` now writes timing data to a file alongside the debug log data, respecting the `logs-dir` option and falling back to `Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate. View repository job log here.