chore(deps): update node.js to v20.12.2 #67

Merged
erichardson merged 1 commits from renovate/node-20.x into master 2024-04-12 03:24:55 +00:00
Collaborator

This PR contains the following updates:

Package Type Update Change
node image patch 20.12.1-alpine3.19 -> 20.12.2-alpine3.19

Release Notes

nodejs/node (node)

v20.12.2: 2024-04-10, Version 20.12.2 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://github.com/nodejs/node) | image | patch | `20.12.1-alpine3.19` -> `20.12.2-alpine3.19` | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v20.12.2`](https://github.com/nodejs/node/releases/tag/v20.12.2): 2024-04-10, Version 20.12.2 &#x27;Iron&#x27; (LTS), @&#8203;RafaelGSS [Compare Source](https://github.com/nodejs/node/compare/v20.12.1...v20.12.2) This is a security release. ##### Notable Changes - CVE-2024-27980 - Command injection via args parameter of `child_process.spawn` without shell option enabled on Windows ##### Commits - \[[`69ffc6d50d`](https://github.com/nodejs/node/commit/69ffc6d50d)] - **src**: disallow direct .bat and .cmd file spawning (Ben Noordhuis) [nodejs-private/node-private#563](https://github.com/nodejs-private/node-private/pull/563) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yODYuMSIsInVwZGF0ZWRJblZlciI6IjM3LjI4Ni4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImJvdCIsInVwZ3JhZGUiXX0=-->
renovate added the botupgrade labels 2024-04-11 13:01:05 +00:00
renovate added 1 commit 2024-04-11 13:01:05 +00:00
chore(deps): update node.js to v20.12.2
All checks were successful
ci / docker (push) Successful in 16s
Bump version / create_release_tag (pull_request) Successful in 35s
993a4b1c25
erichardson merged commit 762148e8d0 into master 2024-04-12 03:24:55 +00:00
erichardson deleted branch renovate/node-20.x 2024-04-12 03:24:55 +00:00
Sign in to join this conversation.
No Reviewers
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: erichardson/py-eagle-mqtt#67