erichardson/py-eagle-mqtt
1
0
Fork 0
Code Issues 1 Pull Requests 5 Actions Packages Projects Releases 11 Wiki Activity

chore(deps): update node.js to v20.15.1 #89

Merged
erichardson merged 1 commits from renovate/node-20.x into master 2024-07-14 01:41:45 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
renovate commented 2024-07-11 04:53:34 +00:00
Collaborator
Copy Link
Copy Source

This PR contains the following updates:

Package Type Update Change
node image patch 20.15.0-alpine3.19 -> 20.15.1-alpine3.19

Release Notes

nodejs/node (node)

v20.15.1: 2024-07-08, Version 20.15.1 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
  • CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
  • CVE-2024-22018 - fs.lstat bypasses permission model (Low)
  • CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
  • CVE-2024-37372 - Permission model improperly processes UNC paths (Low)
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://github.com/nodejs/node) | image | patch | `20.15.0-alpine3.19` -> `20.15.1-alpine3.19` | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v20.15.1`](https://github.com/nodejs/node/releases/tag/v20.15.1): 2024-07-08, Version 20.15.1 &#x27;Iron&#x27; (LTS), @&#8203;RafaelGSS [Compare Source](https://github.com/nodejs/node/compare/v20.15.0...v20.15.1) This is a security release. ##### Notable Changes - CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High) - CVE-2024-22020 - Bypass network import restriction via data URL (Medium) - CVE-2024-22018 - fs.lstat bypasses permission model (Low) - CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low) - CVE-2024-37372 - Permission model improperly processes UNC paths (Low) ##### Commits - \[[`60e184a6e4`](https://github.com/nodejs/node/commit/60e184a6e4)] - **lib,esm**: handle bypass network-import via data: (RafaelGSS) [nodejs-private/node-private#522](https://github.com/nodejs-private/node-private/pull/522) - \[[`025cbd6936`](https://github.com/nodejs/node/commit/025cbd6936)] - **lib,permission**: support fs.lstat (RafaelGSS) [nodejs-private/node-private#486](https://github.com/nodejs-private/node-private/pull/486) - \[[`d38ea17341`](https://github.com/nodejs/node/commit/d38ea17341)] - **lib,permission**: disable fchmod/fchown when pm enabled (RafaelGSS) [nodejs-private/node-private#584](https://github.com/nodejs-private/node-private/pull/584) - \[[`1ba624cd3b`](https://github.com/nodejs/node/commit/1ba624cd3b)] - **src**: handle permissive extension on cmd check (RafaelGSS) [nodejs-private/node-private#596](https://github.com/nodejs-private/node-private/pull/596) - \[[`2524d00c3d`](https://github.com/nodejs/node/commit/2524d00c3d)] - **src,permission**: fix UNC path resolution (RafaelGSS) [nodejs-private/node-private#581](https://github.com/nodejs-private/node-private/pull/581) - \[[`484cb0f13c`](https://github.com/nodejs/node/commit/484cb0f13c)] - **src,permission**: resolve path on fs_permission (Rafael Gonzaga) [#&#8203;52761](https://github.com/nodejs/node/pull/52761) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjguMSIsInVwZGF0ZWRJblZlciI6IjM3LjQyOC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImJvdCIsInVwZ3JhZGUiXX0=-->
renovate added the botupgrade labels 2024-07-11 04:53:34 +00:00
renovate added 1 commit 2024-07-11 04:53:34 +00:00
chore(deps): update node.js to v20.15.1
ci / docker (push) Successful in 22s
Details
Bump version / create_release_tag (pull_request) Failing after 42s
Details
58a62b794e
erichardson merged commit fdc44fb5d4 into master 2024-07-14 01:41:45 +00:00
erichardson deleted branch renovate/node-20.x 2024-07-14 01:41:46 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bot
upgrade
No labels bot upgrade
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
gitea-service-account renovate erichardson (Evan Richardson)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: erichardson/py-eagle-mqtt#89