babel/babel
### [`v7.13.8`](https://togithub.com/babel/babel/blob/master/CHANGELOG.md#v7138-2021-02-26)
[Compare Source](https://togithub.com/babel/babel/compare/v7.13.1...v7.13.8)
##### :bug: Bug Fix
- Other
- [#12909](https://togithub.com/babel/babel/pull/12909) chore: do not provide polyfills on bundling [@babel/standalone](https://togithub.com/babel/standalone) ([@JLHwung](https://togithub.com/JLHwung))
- [#12891](https://togithub.com/babel/babel/pull/12891) fix(eslint-parser): merge input `estree` options ([@JLHwung](https://togithub.com/JLHwung))
- `babel-compat-data`, `babel-preset-env`
- [#12901](https://togithub.com/babel/babel/pull/12901) Fix Module not found: Error: Can't resolve 'core-js/modules/es6.array.concat.js' with compat-data@7.13.x ([@luxp](https://togithub.com/luxp))
- `babel-plugin-transform-runtime`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime`
- [#12893](https://togithub.com/babel/babel/pull/12893) Allow `require()` of runtime helpers in Node.js 13.2-13.6 ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
##### :nail_care: Polish
- `babel-helper-create-class-features-plugin`
- [#12898](https://togithub.com/babel/babel/pull/12898) Do not warn for `loose` of class features in `preset-env` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
##### :house: Internal
- `babel-core`, `babel-helper-transform-fixture-test-runner`, `babel-register`
- [#12820](https://togithub.com/babel/babel/pull/12820) [internal] Keep the `.cjs` extension when compiling source files ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-plugin-transform-runtime`, `babel-runtime-corejs2`, `babel-runtime`
- [#12883](https://togithub.com/babel/babel/pull/12883) Improve `@babel/runtime` esm stability ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
##### :microscope: Output optimization
- `babel-plugin-proposal-object-rest-spread`
- [#12899](https://togithub.com/babel/babel/pull/12899) Skip `_extends` helper for `{…x}` with modern targets ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
### [`v7.13.1`](https://togithub.com/babel/babel/blob/master/CHANGELOG.md#v7131-2021-02-23)
[Compare Source](https://togithub.com/babel/babel/compare/v7.13.0...v7.13.1)
##### :bug: Bug Fix
- `babel-plugin-transform-runtime`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime`
- [#12855](https://togithub.com/babel/babel/pull/12855) Rename `index.mjs` to `_index.mjs` in `@babel/runtime` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-core`
- [#12852](https://togithub.com/babel/babel/pull/12852) Export function versions of `createConfigItem` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
### [`v7.13.0`](https://togithub.com/babel/babel/blob/master/CHANGELOG.md#v7130-2021-02-22)
[Compare Source](https://togithub.com/babel/babel/compare/v7.12.17...v7.13.0)
##### :rocket: New Feature
- `babel-parser`
- [#12370](https://togithub.com/babel/babel/pull/12370) Implement class features in estree ([@JLHwung](https://togithub.com/JLHwung))
- `babel-generator`, `babel-parser`, `babel-plugin-syntax-module-blocks`, `babel-standalone`, `babel-traverse`, `babel-types`
- [#12469](https://togithub.com/babel/babel/pull/12469) Parse JS Module Blocks proposal ([@sosukesuzuki](https://togithub.com/sosukesuzuki))
- `babel-generator`, `babel-parser`, `babel-types`
- [#12628](https://togithub.com/babel/babel/pull/12628) Support TypeScript 4.2 abstract constructor signatures ([@sosukesuzuki](https://togithub.com/sosukesuzuki))
- [#12193](https://togithub.com/babel/babel/pull/12193) Flow Enums with unknown members support ([@gkz](https://togithub.com/gkz))
- `babel-core`, `babel-register`
- [#11498](https://togithub.com/babel/babel/pull/11498) Add cjs as a default extension ([@perrin4869](https://togithub.com/perrin4869))
- `babel-traverse`
- [#12603](https://togithub.com/babel/babel/pull/12603) feat(referencesImport): support named exports accessed via namespace imports ([@jeysal](https://togithub.com/jeysal))
- `babel-plugin-transform-typescript`, `babel-preset-typescript`
- [#12765](https://togithub.com/babel/babel/pull/12765) Enable allowNamespaces in `transform-typescript` by default ([@JLHwung](https://togithub.com/JLHwung))
- `babel-generator`, `babel-parser`, `babel-plugin-transform-flow-strip-types`, `babel-plugin-transform-parameters`, `babel-types`
- [#12234](https://togithub.com/babel/babel/pull/12234) Support Flow `this` parameter annotations ([@dsainati1](https://togithub.com/dsainati1))
- `babel-plugin-proposal-record-and-tuple`
- [#12145](https://togithub.com/babel/babel/pull/12145) Implement "Records and Tuples" transform ([@rickbutton](https://togithub.com/rickbutton))
- `babel-plugin-transform-runtime`, `babel-plugin-transform-typeof-symbol`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime`
- [#12632](https://togithub.com/babel/babel/pull/12632) Use conditional exports in `@babel/runtime` for CJS/ESM ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-core`, `babel-helper-plugin-utils`, `babel-preset-env`
- [#12219](https://togithub.com/babel/babel/pull/12219) Add `@babel/core` support for the new `assumptions` option ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-core`, `babel-helper-compilation-targets`, `babel-helper-plugin-utils`, `babel-preset-env`
- [#12189](https://togithub.com/babel/babel/pull/12189) Add `targets` and `browserslist*` options to `@babel/core` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-core`
- [#12266](https://togithub.com/babel/babel/pull/12266) Support `.mjs` plugins/presets and async factories ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
##### :bug: Bug Fix
- `babel-helpers`, `babel-plugin-proposal-class-properties`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-classes`, `babel-plugin-transform-function-name`, `babel-plugin-transform-parameters`, `babel-plugin-transform-react-jsx`, `babel-plugin-transform-runtime`, `babel-plugin-transform-typescript`, `babel-preset-env`
- [#8461](https://togithub.com/babel/babel/pull/8461) Fix \_isNativeReflectConstruct helper ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-cli`
- [#12846](https://togithub.com/babel/babel/pull/12846) [babel-cli] Don't fail when `chmod` throws an error ([@immitsu](https://togithub.com/immitsu))
- `babel-node`
- [#12836](https://togithub.com/babel/babel/pull/12836) fix: create IPC channel for spawned babel-node process ([@JLHwung](https://togithub.com/JLHwung))
- `babel-standalone`
- [#12819](https://togithub.com/babel/babel/pull/12819) fix: add regenerate-unicode-properties to dynamicRequireTargets ([@JLHwung](https://togithub.com/JLHwung))
- `babel-plugin-proposal-optional-chaining`, `babel-traverse`
- [#12812](https://togithub.com/babel/babel/pull/12812) Fix scope of computed method keys ([@overlookmotel](https://togithub.com/overlookmotel))
##### :house: Internal
- `babel-plugin-proposal-async-generator-functions`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-runtime`, `babel-preset-env`, `babel-runtime-corejs2`
- [#12845](https://togithub.com/babel/babel/pull/12845) Use the `babel-plugin-polyfill-*` packages in `transform-runtime` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-plugin-transform-runtime`
- [#12842](https://togithub.com/babel/babel/pull/12842) Don't use `useESModules` in `@babel/runtime` build script ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-standalone`
- [#12839](https://togithub.com/babel/babel/pull/12839) Make sure that Rollup's `dynamicRequireTargets` are included ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-helper-transform-fixture-test-runner`, `babel-plugin-proposal-async-generator-functions`, `babel-plugin-proposal-decorators`, `babel-preset-env`
- [#12583](https://togithub.com/babel/babel/pull/12583) Use the `babel-plugin-polyfill-*` packages in `preset-env` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
##### :running_woman: Performance
- `babel-register`
- [#12813](https://togithub.com/babel/babel/pull/12813) babel-register: Don’t rewrite the cache if it’s not dirty ([@andersk](https://togithub.com/andersk))
##### :microscope: Output optimization
- `babel-helper-create-class-features-plugin`, `babel-helper-member-expression-to-functions`, `babel-plugin-proposal-class-properties`
- [#12762](https://togithub.com/babel/babel/pull/12762) Support `noDocumentAll` for `obj?.#p` ([@JLHwung](https://togithub.com/JLHwung))
nock/nock
### [`v13.0.8`](https://togithub.com/nock/nock/releases/v13.0.8)
[Compare Source](https://togithub.com/nock/nock/compare/v13.0.7...v13.0.8)
##### Bug Fixes
- **socket:** add encrypted attribute for secure requests ([#2149](https://togithub.com/nock/nock/issues/2149)) ([8de6b69](https://togithub.com/nock/nock/commit/8de6b69247d8b3492c3dfb9d2098b2211e2dfbfe)), closes [/github.com/nodejs/node/blob/295e766c2782d6d83e33004f7c2204c0a8d52655/lib/\_tls_wrap.js#L507-L509](https://togithub.com//github.com/nodejs/node/blob/295e766c2782d6d83e33004f7c2204c0a8d52655/lib/_tls_wrap.js/issues/L507-L509)
nodejs/node
### [`v12.21.0`](https://togithub.com/nodejs/node/releases/v12.21.0)
[Compare Source](https://togithub.com/nodejs/node/compare/v12.20.2...v12.21.0)
This is a security release.
##### Notable changes
Vulnerabilities fixed:
- **CVE-2021-22883**: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
- Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.
- **CVE-2021-22884**: DNS rebinding in --inspect
- Affected Node.js versions are vulnerable to denial of service attacks when the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.
- **CVE-2021-23840**: OpenSSL - Integer overflow in CipherUpdate
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in
##### Commits
- \[[`e69177a088`](https://togithub.com/nodejs/node/commit/e69177a088)] - **deps**: update archs files for OpenSSL-1.1.1j (Daniel Bevenius) [#37413](https://togithub.com/nodejs/node/pull/37413)
- \[[`0633ae77e6`](https://togithub.com/nodejs/node/commit/0633ae77e6)] - **deps**: upgrade openssl sources to 1.1.1j (Daniel Bevenius) [#37413](https://togithub.com/nodejs/node/pull/37413)
- \[[`922ada7713`](https://togithub.com/nodejs/node/commit/922ada7713)] - **(SEMVER-MINOR)** **http2**: add unknownProtocol timeout (Daniel Bevenius) [nodejs-private/node-private#246](https://togithub.com/nodejs-private/node-private/pull/246)
- \[[`1564752d55`](https://togithub.com/nodejs/node/commit/1564752d55)] - **src**: drop localhost6 as allowed host for inspector (Matteo Collina) [nodejs-private/node-private#244](https://togithub.com/nodejs-private/node-private/pull/244)
Surnet/swagger-jsdoc
### [`v6.0.7`](https://togithub.com/Surnet/swagger-jsdoc/blob/master/CHANGELOG.md#v607-20210226-1432-0000)
[Compare Source](https://togithub.com/Surnet/swagger-jsdoc/compare/v6.0.6...v6.0.7)
- [#250](https://togithub.com/Surnet/swagger-jsdoc/pull/250) Update FIRST-STEPS.md ([#250](https://togithub.com/Surnet/swagger-jsdoc/issues/250)) ([@azizkale](https://togithub.com/azizkale))
- [da152ea](https://togithub.com/Surnet/swagger-jsdoc/commit/da152eaf81656b77f49628005225ef7e0f647c9e) Update docs ([@kalinchernev](https://togithub.com/kalinchernev))
Renovate configuration
:date: Schedule: "every weekend" (UTC).
:vertical_traffic_light: Automerge: Enabled.
:recycle: Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
:ghost: Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
7.12.17
->7.13.8
13.0.7
->13.0.8
12.20.2-alpine
->12.21.0-alpine
6.0.6
->6.0.7
Release Notes
babel/babel
### [`v7.13.8`](https://togithub.com/babel/babel/blob/master/CHANGELOG.md#v7138-2021-02-26) [Compare Source](https://togithub.com/babel/babel/compare/v7.13.1...v7.13.8) ##### :bug: Bug Fix - Other - [#12909](https://togithub.com/babel/babel/pull/12909) chore: do not provide polyfills on bundling [@babel/standalone](https://togithub.com/babel/standalone) ([@JLHwung](https://togithub.com/JLHwung)) - [#12891](https://togithub.com/babel/babel/pull/12891) fix(eslint-parser): merge input `estree` options ([@JLHwung](https://togithub.com/JLHwung)) - `babel-compat-data`, `babel-preset-env` - [#12901](https://togithub.com/babel/babel/pull/12901) Fix Module not found: Error: Can't resolve 'core-js/modules/es6.array.concat.js' with compat-data@7.13.x ([@luxp](https://togithub.com/luxp)) - `babel-plugin-transform-runtime`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#12893](https://togithub.com/babel/babel/pull/12893) Allow `require()` of runtime helpers in Node.js 13.2-13.6 ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :nail_care: Polish - `babel-helper-create-class-features-plugin` - [#12898](https://togithub.com/babel/babel/pull/12898) Do not warn for `loose` of class features in `preset-env` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :house: Internal - `babel-core`, `babel-helper-transform-fixture-test-runner`, `babel-register` - [#12820](https://togithub.com/babel/babel/pull/12820) [internal] Keep the `.cjs` extension when compiling source files ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-plugin-transform-runtime`, `babel-runtime-corejs2`, `babel-runtime` - [#12883](https://togithub.com/babel/babel/pull/12883) Improve `@babel/runtime` esm stability ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :microscope: Output optimization - `babel-plugin-proposal-object-rest-spread` - [#12899](https://togithub.com/babel/babel/pull/12899) Skip `_extends` helper for `{…x}` with modern targets ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ### [`v7.13.1`](https://togithub.com/babel/babel/blob/master/CHANGELOG.md#v7131-2021-02-23) [Compare Source](https://togithub.com/babel/babel/compare/v7.13.0...v7.13.1) ##### :bug: Bug Fix - `babel-plugin-transform-runtime`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#12855](https://togithub.com/babel/babel/pull/12855) Rename `index.mjs` to `_index.mjs` in `@babel/runtime` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-core` - [#12852](https://togithub.com/babel/babel/pull/12852) Export function versions of `createConfigItem` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ### [`v7.13.0`](https://togithub.com/babel/babel/blob/master/CHANGELOG.md#v7130-2021-02-22) [Compare Source](https://togithub.com/babel/babel/compare/v7.12.17...v7.13.0) ##### :rocket: New Feature - `babel-parser` - [#12370](https://togithub.com/babel/babel/pull/12370) Implement class features in estree ([@JLHwung](https://togithub.com/JLHwung)) - `babel-generator`, `babel-parser`, `babel-plugin-syntax-module-blocks`, `babel-standalone`, `babel-traverse`, `babel-types` - [#12469](https://togithub.com/babel/babel/pull/12469) Parse JS Module Blocks proposal ([@sosukesuzuki](https://togithub.com/sosukesuzuki)) - `babel-generator`, `babel-parser`, `babel-types` - [#12628](https://togithub.com/babel/babel/pull/12628) Support TypeScript 4.2 abstract constructor signatures ([@sosukesuzuki](https://togithub.com/sosukesuzuki)) - [#12193](https://togithub.com/babel/babel/pull/12193) Flow Enums with unknown members support ([@gkz](https://togithub.com/gkz)) - `babel-core`, `babel-register` - [#11498](https://togithub.com/babel/babel/pull/11498) Add cjs as a default extension ([@perrin4869](https://togithub.com/perrin4869)) - `babel-traverse` - [#12603](https://togithub.com/babel/babel/pull/12603) feat(referencesImport): support named exports accessed via namespace imports ([@jeysal](https://togithub.com/jeysal)) - `babel-plugin-transform-typescript`, `babel-preset-typescript` - [#12765](https://togithub.com/babel/babel/pull/12765) Enable allowNamespaces in `transform-typescript` by default ([@JLHwung](https://togithub.com/JLHwung)) - `babel-generator`, `babel-parser`, `babel-plugin-transform-flow-strip-types`, `babel-plugin-transform-parameters`, `babel-types` - [#12234](https://togithub.com/babel/babel/pull/12234) Support Flow `this` parameter annotations ([@dsainati1](https://togithub.com/dsainati1)) - `babel-plugin-proposal-record-and-tuple` - [#12145](https://togithub.com/babel/babel/pull/12145) Implement "Records and Tuples" transform ([@rickbutton](https://togithub.com/rickbutton)) - `babel-plugin-transform-runtime`, `babel-plugin-transform-typeof-symbol`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#12632](https://togithub.com/babel/babel/pull/12632) Use conditional exports in `@babel/runtime` for CJS/ESM ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-core`, `babel-helper-plugin-utils`, `babel-preset-env` - [#12219](https://togithub.com/babel/babel/pull/12219) Add `@babel/core` support for the new `assumptions` option ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-core`, `babel-helper-compilation-targets`, `babel-helper-plugin-utils`, `babel-preset-env` - [#12189](https://togithub.com/babel/babel/pull/12189) Add `targets` and `browserslist*` options to `@babel/core` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-core` - [#12266](https://togithub.com/babel/babel/pull/12266) Support `.mjs` plugins/presets and async factories ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :bug: Bug Fix - `babel-helpers`, `babel-plugin-proposal-class-properties`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-classes`, `babel-plugin-transform-function-name`, `babel-plugin-transform-parameters`, `babel-plugin-transform-react-jsx`, `babel-plugin-transform-runtime`, `babel-plugin-transform-typescript`, `babel-preset-env` - [#8461](https://togithub.com/babel/babel/pull/8461) Fix \_isNativeReflectConstruct helper ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-cli` - [#12846](https://togithub.com/babel/babel/pull/12846) [babel-cli] Don't fail when `chmod` throws an error ([@immitsu](https://togithub.com/immitsu)) - `babel-node` - [#12836](https://togithub.com/babel/babel/pull/12836) fix: create IPC channel for spawned babel-node process ([@JLHwung](https://togithub.com/JLHwung)) - `babel-standalone` - [#12819](https://togithub.com/babel/babel/pull/12819) fix: add regenerate-unicode-properties to dynamicRequireTargets ([@JLHwung](https://togithub.com/JLHwung)) - `babel-plugin-proposal-optional-chaining`, `babel-traverse` - [#12812](https://togithub.com/babel/babel/pull/12812) Fix scope of computed method keys ([@overlookmotel](https://togithub.com/overlookmotel)) ##### :house: Internal - `babel-plugin-proposal-async-generator-functions`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-runtime`, `babel-preset-env`, `babel-runtime-corejs2` - [#12845](https://togithub.com/babel/babel/pull/12845) Use the `babel-plugin-polyfill-*` packages in `transform-runtime` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-plugin-transform-runtime` - [#12842](https://togithub.com/babel/babel/pull/12842) Don't use `useESModules` in `@babel/runtime` build script ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-standalone` - [#12839](https://togithub.com/babel/babel/pull/12839) Make sure that Rollup's `dynamicRequireTargets` are included ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-transform-fixture-test-runner`, `babel-plugin-proposal-async-generator-functions`, `babel-plugin-proposal-decorators`, `babel-preset-env` - [#12583](https://togithub.com/babel/babel/pull/12583) Use the `babel-plugin-polyfill-*` packages in `preset-env` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :running_woman: Performance - `babel-register` - [#12813](https://togithub.com/babel/babel/pull/12813) babel-register: Don’t rewrite the cache if it’s not dirty ([@andersk](https://togithub.com/andersk)) ##### :microscope: Output optimization - `babel-helper-create-class-features-plugin`, `babel-helper-member-expression-to-functions`, `babel-plugin-proposal-class-properties` - [#12762](https://togithub.com/babel/babel/pull/12762) Support `noDocumentAll` for `obj?.#p` ([@JLHwung](https://togithub.com/JLHwung))nock/nock
### [`v13.0.8`](https://togithub.com/nock/nock/releases/v13.0.8) [Compare Source](https://togithub.com/nock/nock/compare/v13.0.7...v13.0.8) ##### Bug Fixes - **socket:** add encrypted attribute for secure requests ([#2149](https://togithub.com/nock/nock/issues/2149)) ([8de6b69](https://togithub.com/nock/nock/commit/8de6b69247d8b3492c3dfb9d2098b2211e2dfbfe)), closes [/github.com/nodejs/node/blob/295e766c2782d6d83e33004f7c2204c0a8d52655/lib/\_tls_wrap.js#L507-L509](https://togithub.com//github.com/nodejs/node/blob/295e766c2782d6d83e33004f7c2204c0a8d52655/lib/_tls_wrap.js/issues/L507-L509)nodejs/node
### [`v12.21.0`](https://togithub.com/nodejs/node/releases/v12.21.0) [Compare Source](https://togithub.com/nodejs/node/compare/v12.20.2...v12.21.0) This is a security release. ##### Notable changes Vulnerabilities fixed: - **CVE-2021-22883**: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion - Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory. - **CVE-2021-22884**: DNS rebinding in --inspect - Affected Node.js versions are vulnerable to denial of service attacks when the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160. - **CVE-2021-23840**: OpenSSL - Integer overflow in CipherUpdate - This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it inSurnet/swagger-jsdoc
### [`v6.0.7`](https://togithub.com/Surnet/swagger-jsdoc/blob/master/CHANGELOG.md#v607-20210226-1432-0000) [Compare Source](https://togithub.com/Surnet/swagger-jsdoc/compare/v6.0.6...v6.0.7) - [#250](https://togithub.com/Surnet/swagger-jsdoc/pull/250) Update FIRST-STEPS.md ([#250](https://togithub.com/Surnet/swagger-jsdoc/issues/250)) ([@azizkale](https://togithub.com/azizkale)) - [da152ea](https://togithub.com/Surnet/swagger-jsdoc/commit/da152eaf81656b77f49628005225ef7e0f647c9e) Update docs ([@kalinchernev](https://togithub.com/kalinchernev))Renovate configuration
:date: Schedule: "every weekend" (UTC).
:vertical_traffic_light: Automerge: Enabled.
:recycle: Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
:ghost: Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by WhiteSource Renovate. View repository job log here.