nwjs / nw.js

Call all Node.js modules directly from DOM/WebWorker and enable a new way of writing applications with all Web technologies.
https://nwjs.io
MIT License
40.16k stars 3.88k forks source link

Upgrade Node version for security fixes #8177

Closed imawizrd closed 1 month ago

imawizrd commented 1 month ago

Issue Type

Before opening an issue, please search and see if it has already been raised.

The nwjs.io website currently states that the latest version of nwjs v86 includes node 21.1.0.

However, NodeJS 21.7.2 was released a few days ago with security fixes (source: https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V21.md#21.7.2).

NodeJS 21.6.2, which also includes security fixes, was released on February 14, 2024.

Although chromium has been upgraded to the latest version in nwjs, it is recommended to upgrade the node version as well to ensure the latest security patches are applied.

imawizrd commented 1 month ago

You can disable Node support by using the manifest option described in https://nwjs.readthedocs.io/en/latest/References/Manifest%20Format/#nodejs. I am leaving this information here in case someone wants to disable Node until it is upgraded.

imawizrd commented 4 days ago

@ayushmanchhabra Thank you, I see the new NWJS version 88 includes node 22