Closed renovate[bot] closed 5 months ago
This PR contains the following updates:
>=15.0.0
>=15.14.0
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
>=15.0.0->>=15.14.0Release Notes
nodejs/node (node)
### [`v15.14.0`](https://togithub.com/nodejs/node/releases/tag/v15.14.0): 2021-04-06, Version 15.14.0 (Current), @mylesborins [Compare Source](https://togithub.com/nodejs/node/compare/v15.0.0...v15.14.0) This is a security release. ##### Notable Changes Vulnerabilties Fixed: - **CVE-2021-3450**: OpenSSL - CA certificate check bypass with X509\_V_FLAG_X509\_STRICT (High) - This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt - Impacts: - All versions of the 15.x, 14.x, 12.x and 10.x releases lines - **CVE-2021-3449**: OpenSSL - NULL pointer deref in signature_algorithms processing (High) - This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt - Impacts: - All versions of the 15.x, 14.x, 12.x and 10.x releases lines - **CVE-2020-7774**: npm upgrade - Update y18n to fix Prototype-Pollution (High) - This is a vulnerability in the y18n npm module which may be exploited by prototype pollution. You can read more about it in https://github.com/advisories/GHSA-c4w7-xm78-47vh - Impacts: - All versions of the 14.x, 12.x and 10.x releases lines Other Notable Changes: - \[[`b6f4901221`](https://togithub.com/nodejs/node/commit/b6f4901221)] - **(SEMVER-MINOR)** **fs**: add support for async iterators to `fsPromises.writeFile` (HiroyukiYagihashi) [#37490](https://togithub.com/nodejs/node/pull/37490) - \[[`0709cbb7fe`](https://togithub.com/nodejs/node/commit/0709cbb7fe)] - **(SEMVER-MINOR)** **net**: allow net.BlockList to use net.SocketAddress objects (James M Snell) [#37917](https://togithub.com/nodejs/node/pull/37917) - \[[`daa8a7bbcf`](https://togithub.com/nodejs/node/commit/daa8a7bbcf)] - **(SEMVER-MINOR)** **net**: add SocketAddress class (James M Snell) [#37917](https://togithub.com/nodejs/node/pull/37917) - \[[`a4169ce519`](https://togithub.com/nodejs/node/commit/a4169ce519)] - **(SEMVER-MINOR)** **net**: make net.BlockList cloneable (James M Snell) [#37917](https://togithub.com/nodejs/node/pull/37917) - \[[`669b81c68b`](https://togithub.com/nodejs/node/commit/669b81c68b)] - **(SEMVER-MINOR)** **net,tls**: add abort signal support to connect (Nitzan Uziely) [#37735](https://togithub.com/nodejs/node/pull/37735) - \[[`a1123f0a29`](https://togithub.com/nodejs/node/commit/a1123f0a29)] - **(SEMVER-MINOR)** **readline**: add AbortSignal support to interface (Nitzan Uziely) [#37932](https://togithub.com/nodejs/node/pull/37932) ##### Commits - \[[`ac69b95e47`](https://togithub.com/nodejs/node/commit/ac69b95e47)] - **crypto**: use correct webcrypto RSASSA-PKCS1-v1\_5 algorithm name (Filip Skokan) [#38029](https://togithub.com/nodejs/node/pull/38029) - \[[`960c6be229`](https://togithub.com/nodejs/node/commit/960c6be229)] - **crypto**: add buffering to randomInt (Tobias Nießen) [#35110](https://togithub.com/nodejs/node/pull/35110) - \[[`4ef102d34e`](https://togithub.com/nodejs/node/commit/4ef102d34e)] - **deps**: update to cjs-module-lexer@1.1.1 (Guy Bedford) [#37992](https://togithub.com/nodejs/node/pull/37992) - \[[`f0e77149a4`](https://togithub.com/nodejs/node/commit/f0e77149a4)] - **deps**: update archs files for OpenSSL-1.1.1k (Hassaan Pasha) [#37916](https://togithub.com/nodejs/node/pull/37916) - \[[`bbdcdad2c6`](https://togithub.com/nodejs/node/commit/bbdcdad2c6)] - **deps**: upgrade openssl sources to 1.1.1k+quic (Hassaan Pasha) [#37916](https://togithub.com/nodejs/node/pull/37916) - \[[`913ec56798`](https://togithub.com/nodejs/node/commit/913ec56798)] - **deps**: cjs-module-lexer: cherry-pick [`22093e7`](https://togithub.com/nodejs/node/commit/22093e765f) (pezhmanparsaee) [#37895](https://togithub.com/nodejs/node/pull/37895) - \[[`afc6ab2122`](https://togithub.com/nodejs/node/commit/afc6ab2122)] - **doc**: fix asyncLocalStorage.run() description (Darkripper214) [#38023](https://togithub.com/nodejs/node/pull/38023) - \[[`b40d35d649`](https://togithub.com/nodejs/node/commit/b40d35d649)] - **doc**: document how to unref stdin when using readline.Interface (Anu Pasumarthy) [#38019](https://togithub.com/nodejs/node/pull/38019) - \[[`ce14080473`](https://togithub.com/nodejs/node/commit/ce14080473)] - **doc**: move psmarshall to collaborators emeriti (Peter Marshall) [#37994](https://togithub.com/nodejs/node/pull/37994) - \[[`ae70aa3c63`](https://togithub.com/nodejs/node/commit/ae70aa3c63)] - **doc**: add distinctive color for code elements inside links (Antoine du Hamel) [#37950](https://togithub.com/nodejs/node/pull/37950) - \[[`8792c7c96b`](https://togithub.com/nodejs/node/commit/8792c7c96b)] - **doc**: add missing events.on metadata (Anna Henningsen) [#37965](https://togithub.com/nodejs/node/pull/37965) - \[[`a57dc06adf`](https://togithub.com/nodejs/node/commit/a57dc06adf)] - **doc**: improve Buffer's encoding documentation (Michaël Zasso) [#37945](https://togithub.com/nodejs/node/pull/37945) - \[[`f3fabb57cf`](https://togithub.com/nodejs/node/commit/f3fabb57cf)] - **doc**: add missing cleanup step in OpenSSL upgrade (Tobias Nießen) [#37927](https://togithub.com/nodejs/node/pull/37927) - \[[`13c3924af8`](https://togithub.com/nodejs/node/commit/13c3924af8)] - **doc**: add Windows-specific info to subprocess.kill() (João Lucas Lucchetta) [#34867](https://togithub.com/nodejs/node/pull/34867) - \[[`b6f4901221`](https://togithub.com/nodejs/node/commit/b6f4901221)] - **(SEMVER-MINOR)** **fs**: add support for async iterators to `fsPromises.writeFile` (HiroyukiYagihashi) [#37490](https://togithub.com/nodejs/node/pull/37490) - \[[`ad7e34446c`](https://togithub.com/nodejs/node/commit/ad7e34446c)] - **fs**: fix chown abort (Darshan Sen) [#38004](https://togithub.com/nodejs/node/pull/38004) - \[[`d86aca9a77`](https://togithub.com/nodejs/node/commit/d86aca9a77)] - **http**: optimize debug function correctly (Michaël Zasso) [#37966](https://togithub.com/nodejs/node/pull/37966) - \[[`062541aae5`](https://togithub.com/nodejs/node/commit/062541aae5)] - **http2**: add specific error code for custom frames (Anna Henningsen) [#37936](https://togithub.com/nodejs/node/pull/37936) - \[[`8525231902`](https://togithub.com/nodejs/node/commit/8525231902)] - **lib**: change wording in lib/domain.js comment (Akhil Marsonya) [#37933](https://togithub.com/nodejs/node/pull/37933) - \[[`21e399be4c`](https://togithub.com/nodejs/node/commit/21e399be4c)] - **lib**: change wording in lib/internal/child_process comment (Akhil Marsonya) [#37903](https://togithub.com/nodejs/node/pull/37903) - \[[`3ab9619e56`](https://togithub.com/nodejs/node/commit/3ab9619e56)] - **module**: improve error message for invalid data URL (Antoine du Hamel) [#37701](https://togithub.com/nodejs/node/pull/37701) - \[[`0709cbb7fe`](https://togithub.com/nodejs/node/commit/0709cbb7fe)] - **(SEMVER-MINOR)** **net**: allow net.BlockList to use net.SocketAddress objects (James M Snell) [#37917](https://togithub.com/nodejs/node/pull/37917) - \[[`daa8a7bbcf`](https://togithub.com/nodejs/node/commit/daa8a7bbcf)] - **(SEMVER-MINOR)** **net**: add SocketAddress class (James M Snell) [#37917](https://togithub.com/nodejs/node/pull/37917) - \[[`a4169ce519`](https://togithub.com/nodejs/node/commit/a4169ce519)] - **(SEMVER-MINOR)** **net**: make net.BlockList cloneable (James M Snell) [#37917](https://togithub.com/nodejs/node/pull/37917) - \[[`669b81c68b`](https://togithub.com/nodejs/node/commit/669b81c68b)] - **(SEMVER-MINOR)** **net,tls**: add abort signal support to connect (Nitzan Uziely) [#37735](https://togithub.com/nodejs/node/pull/37735) - \[[`a94cc27cbe`](https://togithub.com/nodejs/node/commit/a94cc27cbe)] - **path**: refactor to use more primordials (Akhil Marsonya) [#37893](https://togithub.com/nodejs/node/pull/37893) - \[[`6cc1e15669`](https://togithub.com/nodejs/node/commit/6cc1e15669)] - **readline**: fix pre-aborted signal question handling (Nitzan Uziely) [#37929](https://togithub.com/nodejs/node/pull/37929) - \[[`a1123f0a29`](https://togithub.com/nodejs/node/commit/a1123f0a29)] - **(SEMVER-MINOR)** **readline**: add AbortSignal support to interface (Nitzan Uziely) [#37932](https://togithub.com/nodejs/node/pull/37932) - \[[`629e72e9f4`](https://togithub.com/nodejs/node/commit/629e72e9f4)] - **src**: fix typo in node_mutex (Tobias Nießen) [#38011](https://togithub.com/nodejs/node/pull/38011) - \[[`e61cc0bfb0`](https://togithub.com/nodejs/node/commit/e61cc0bfb0)] - **src**: fix typos in crypto comments (Tobias Nießen) [#38024](https://togithub.com/nodejs/node/pull/38024) - \[[`6ad0b6f0f5`](https://togithub.com/nodejs/node/commit/6ad0b6f0f5)] - **src**: fix error handling for CryptoJob::ToResult (Tobias Nießen) [#37076](https://togithub.com/nodejs/node/pull/37076) - \[[`3175559bed`](https://togithub.com/nodejs/node/commit/3175559bed)] - **test**: add extra space in test failure output (Qingyu Deng) [#37957](https://togithub.com/nodejs/node/pull/37957) - \[[`0243376cfc`](https://togithub.com/nodejs/node/commit/0243376cfc)] - **test**: use faster variant for rss (Pooja D P) [#36839](https://togithub.com/nodejs/node/pull/36839) - \[[`b02c352ad6`](https://togithub.com/nodejs/node/commit/b02c352ad6)] - **test**: fix test-tls-no-sslv3 for OpenSSL 3 (Richard Lau) [#38027](https://togithub.com/nodejs/node/pull/38027) - \[[`0db1a1eacf`](https://togithub.com/nodejs/node/commit/0db1a1eacf)] - **test**: deflake test-fs-read-optional-params (Luigi Pinca) [#37991](https://togithub.com/nodejs/node/pull/37991) - \[[`4d50975cd7`](https://togithub.com/nodejs/node/commit/4d50975cd7)] - **test**: improve clarity of ALS-enable-disable.js (Darkripper214) [#38008](https://togithub.com/nodejs/node/pull/38008) - \[[`5e15ae05d0`](https://togithub.com/nodejs/node/commit/5e15ae05d0)] - **test**: add DataView test case for v8 serdes (Rich Trott) [#37955](https://togithub.com/nodejs/node/pull/37955) - \[[`6d28a24f1c`](https://togithub.com/nodejs/node/commit/6d28a24f1c)] - **tools**: update ESLint to 7.23.0 (Luigi Pinca) [#37979](https://togithub.com/nodejs/node/pull/37979) - \[[`51e7a33d54`](https://togithub.com/nodejs/node/commit/51e7a33d54)] - **tools,doc**: add "legacy" badge in the TOC (Antoine du Hamel) [#37949](https://togithub.com/nodejs/node/pull/37949) - \[[`570fbcef93`](https://togithub.com/nodejs/node/commit/570fbcef93)] - **url**: forbid pipe in URL host (Darshan Sen) [#37877](https://togithub.com/nodejs/node/pull/37877)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.