chore(deps): update node.js to v18 - autoclosed #5
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![plural-renovate[bot]](https://avatars.githubusercontent.com/in/259360?s=60&v=4){kind=small}
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
219f634 to
3a88181
Compare
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
3a88181 to
de3662d
Compare
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
2 times, most recently
from
593bbea to
bf2d96b
Compare
⚠ Artifact update problemRenovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below: File name: yarn.lock |
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
bf2d96b to
7c0ec7b
Compare
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
7c0ec7b to
9d78ab8
Compare
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
9d78ab8 to
75955f2
Compare
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
75955f2 to
41ee0f5
Compare
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
41ee0f5 to
9f6cddb
Compare
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
9f6cddb to
b9b8878
Compare
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
b9b8878 to
0414f6a
Compare
plural-renovate
bot
force-pushed
the
renovate/node-18.x
branch
from
0414f6a to
21737b7
Compare
plural-renovate
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
16.16.0->18.18.2Release Notes
nodejs/node (node)
v18.18.2: 2023-10-13, Version 18.18.2 'Hydrogen' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
nghttp2Security Release (High)undiciSecurity Release (High)More detailed information on each of the vulnerabilities can be found in October 2023 Security Releases blog post.
Commits
55028468db] - deps: update undici to v5.26.3 (Matteo Collina) #50153a792bbc515] - deps: update nghttp2 to 1.57.0 (James M Snell) #50121f6444defa4] - deps: update nghttp2 to 1.56.0 (Node.js GitHub Bot) #495827e9b08dfd4] - deps: update nghttp2 to 1.55.1 (Node.js GitHub Bot) #4879085672c153f] - deps: update nghttp2 to 1.55.0 (Node.js GitHub Bot) #48746300a902422] - deps: update nghttp2 to 1.53.0 (Node.js GitHub Bot) #479977d83ed0bf6] - Revert "deps: update nghttp2 to 1.55.0" (Richard Lau) #501511193ca5fdb] - lib: let deps requirenodeprefixed modules (Matthew Aitken) #50047eaf9083cf1] - module: fix code injection through export names (Tobias Nießen) nodejs-private/node-private#4611c538938cc] - policy: use tamper-proof integrity check function (Tobias Nießen) nodejs-private/node-private#462v18.18.1: 2023-10-10, Version 18.18.1 'Hydrogen' (LTS), @richardlauCompare Source
Notable Changes
This release addresses some regressions that appeared in Node.js 18.18.0:
The libuv 1.45.0 and 1.46.0 updates that were released in Node.js 18.18.0 have been temporarily reverted.
Commits
3e3a75cc46] - Revert "build: sync libuv header change" (Richard Lau) #5003614ece2c479] - Revert "deps: upgrade to libuv 1.45.0" (Richard Lau) #50036022352acbe] - Revert "deps: upgrade to libuv 1.46.0" (Richard Lau) #50036d9f138189c] - Revert "deps: add missing thread-common.c in uv.gyp" (Richard Lau) #500367a3e1ffbb8] - fs: make sure to write entire buffer (Robert Nagy) #4921104cba95a67] - test: addtmpdir.resolve()(Livia Medeiros) #49079v18.17.1: 2023-08-09, Version 18.17.1 'Hydrogen' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.
Commits
fe3abdf82e] - deps: update archs files for openssl-3.0.10+quic1 (Node.js GitHub Bot) #490362c5a522d9c] - deps: upgrade openssl sources to quictls/openssl-3.0.10+quic1 (Node.js GitHub Bot) #4903615bced0bde] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#417d4570fae35] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#460v18.17.0: 2023-07-18, Version 18.17.0 'Hydrogen' (LTS), @danielleadamsCompare Source
Notable Changes
Ada 2.0
Node.js v18.17.0 comes with the latest version of the URL parser, Ada. This update brings significant performance improvements
to URL parsing, including enhancements to the url.domainToASCII and url.domainToUnicode functions in node:url.
Ada 2.0 has been integrated into the Node.js codebase, ensuring that all parts of the application can benefit from the
improved performance. Additionally, Ada 2.0 features a significant performance boost over its predecessor, Ada 1.0.4,
while also eliminating the need for the ICU requirement for URL hostname parsing.
Contributed by Yagiz Nizipli and Daniel Lemire in #47339
Web Crypto API
Web Crypto API functions' arguments are now coerced and validated as per their WebIDL definitions like in other Web Crypto API implementations.
This further improves interoperability with other implementations of Web Crypto API.
Contributed by Filip Skokan in #46067
test(Chemi Atlow) #47909Commits
2ba08ac002] - benchmark: usecluster.isPrimaryinstead ofcluster.isMaster(Deokjin Kim) #4800260ca69d96c] - benchmark: add eventtarget creation bench (Rafael Gonzaga) #47774d8233d96bb] - benchmark: add a benchmark fordefaultResolve(Antoine du Hamel) #47543a1aabb6912] - benchmark: fix invalid requirementsURL (Deokjin Kim) #47378394c61caf9] - bootstrap: support namespaced builtins in snapshot scripts (Joyee Cheung) #474670165a765a0] - bootstrap: do not expand process.argv[1] for snapshot entry points (Joyee Cheung) #47466cca557cdd9] - buffer: combine checking range of sourceStart inbuf.copy(Deokjin Kim) #477584c69be467c] - buffer: use private properties for brand checks in File (Matthew Aitken) #47154d002f9b6e2] - build: revert unkonwn ruff selector (Moshe Atlow) #4875393f77cb762] - build: set v8_enable_webassembly=false when lite mode is enabled (Cheng Shao) #482481662e894f3] - build: add action to close stale PRs (Michael Dawson) #480515ca437b288] - build: use pathlib for paths (Mohammed Keyvanzadeh) #4758172443bc54b] - build: refactor configure.py (Mohammed Keyvanzadeh) #47667d4eecb5be9] - build: add devcontainer configuration (Tierney Cyren) #40825803ed41144] - build: bump ossf/scorecard-action from 2.1.2 to 2.1.3 (dependabot[bot]) #4736748468c4413] - build: replace Python linter flake8 with ruff (Christian Clauss) #475193ceb2c4387] - build: add node-core-utils to setup (Jiawen Geng) #47442fdc59b8e14] - build: bump github/codeql-action from 2.2.6 to 2.2.9 (dependabot[bot]) #473663924893023] - build: update stale action from v7 to v8 (Rich Trott) #47357753185c5b0] - build: remove Python pip--no-useroption (Christian Clauss) #4737267af0a6a2b] - build: avoid usage of pipes library (Mohammed Keyvanzadeh) #47271db910dd6b2] - build, deps, tools: avoid excessive LTO (Konstantin Demin) #4731335d1def891] - child_process: use signal.reason in child process abort (Debadree Chatterjee) #478177692d2e7b9] - cluster: use ObjectPrototypeHasOwnProperty (Daeyeon Jeong) #481417617772762] - crypto: use openssl's own memory BIOs in crypto_context.cc (GauriSpears) #471608cabfe7c6e] - crypto: fix setEngine() when OPENSSL_NO_ENGINE set (Tobias Nießen) #47977de1338da05] - crypto: fix webcrypto private/secret import with empty usages (Filip Skokan) #4787727a696fda9] - crypto: update root certificates to NSS 3.89 (Node.js GitHub Bot) #47659e2292f936e] - crypto: remove INT_MAX restriction in randomBytes (Tobias Nießen) #47559a5f214c00c] - crypto: replace THROW with CHECK for scrypt keylen (Tobias Nießen) #47407dd42214fd4] - crypto: unify validation of checkPrime checks (Tobias Nießen) #4716576e4d12fb3] - crypto: re-add padding for AES-KW wrapped JWKs (Filip Skokan) #465639d894c17dd] - crypto: use WebIDL converters in WebCryptoAPI (Filip Skokan) #460676f3a8b45a5] - deps: update ada to 2.5.0 (Node.js GitHub Bot) #48223075b6db919] - deps: update ada to 2.4.2 (Node.js GitHub Bot) #48092a4ee1f652c] - deps: update ada to 2.4.1 (Node.js GitHub Bot) #4803681b514d3f0] - deps: update ada to 2.4.0 (Node.js GitHub Bot) #47922575ddf694f] - deps: update ada to 2.3.1 (Node.js GitHub Bot) #478932d03d5f458] - deps: update ada to 2.3.0 (Node.js GitHub Bot) #4773742e690f2d5] - deps: update ada to 2.2.0 (Node.js GitHub Bot) #4767808dd271521] - deps: update ada to 2.1.0 (Node.js GitHub Bot) #4759896c50ba71f] - deps: update ada to 2.0.0 (Node.js GitHub Bot) #473394d1c38b758] - deps: update zlib to337322d(Node.js GitHub Bot) #4821874206b2549] - deps: update histogram 0.11.8 (Marco Ippolito) #47742fbb4b3775d] - deps: update histogram to 0.11.7 (Marco Ippolito) #47742e88c079022] - deps: update simdutf to 3.2.12 (Node.js GitHub Bot) #4811848bd1248b9] - deps: update minimatch to 9.0.1 (Node.js GitHub Bot) #48094d4572d31fa] - deps: update corepack to 0.18.0 (Node.js GitHub Bot) #480918090d29dc4] - deps: update uvwasi to 0.0.18 (Node.js GitHub Bot) #47866169c8eea2e] - deps: update uvwasi to 0.0.17 (Node.js GitHub Bot) #478666acbb23380] - deps: upgrade npm to 9.6.7 (npm team) #48062e8f2c0a58b] - deps: update undici to 5.22.1 (Node.js GitHub Bot) #479949309fd3120] - deps: update simdutf to 3.2.9 (Node.js GitHub Bot) #47983b796d3560a] - deps: upgrade npm to 9.6.6 (npm team) #47862cce372e14e] - deps: V8: cherry-pickc5ab3e4(Richard Lau) #477367283486adb] - deps: update undici to 5.22.0 (Node.js GitHub Bot) #476792ea6e03003] - deps: add minimatch as a dependency (Moshe Atlow) #47499261e1d23d1] - deps: update ICU to 73.1 release (Steven R. Loomis) #47456f532f9df5f] - deps: update undici to 5.21.2 (Node.js GitHub Bot) #47508dcb8c038b9] - deps: update simdutf to 3.2.8 (Node.js GitHub Bot) #475076c8456d61f] - deps: update undici to 5.21.1 (Node.js GitHub Bot) #47488d3b2e8a438] - deps: update simdutf to 3.2.7 (Node.js GitHub Bot) #4747364a5fe0499] - deps: update corepack to 0.17.2 (Node.js GitHub Bot) #474746f0f61a7d3] - deps: upgrade npm to 9.6.4 (npm team) #47432443a72e207] - deps: update zlib to upstream5edb52d(Luigi Pinca) #47151dc3bc46914] - deps: update simdutf to 3.2.3 (Node.js GitHub Bot) #47331b2f2bebbc2] - deps: update timezone to 2023c (Node.js GitHub Bot) #47302c10729ffa7] - deps: upgrade npm to 9.6.3 (npm team) #47325420deac1de] - deps: update corepack to 0.17.1 (Node.js GitHub Bot) #47156966ba28491] - deps: V8: cherry-pick3e4952c(Richard Lau) #47236fc6ab26824] - deps: update timezone to 2023b (Node.js GitHub Bot) #472562700e70215] - deps: upgrade npm to 9.6.2 (npm team) #4710829ba98a0a5] - deps: V8: cherry-pick975ff4d(Debadree Chatterjee) #47209be34777be8] - deps: cherry-pick win/arm64/clang fixes (Cheng Zhao) #47011b52aacb614] - deps: update uvwasi to v0.0.16 (Michael Dawson) #4643427a76cf5e0] - deps,test: update postject to 1.0.0-alpha.6 (Node.js GitHub Bot) #48072b171c1a3a4] - dgram: convert macro to template (Tobias Nießen) #47891709bf1c758] - (SEMVER-MINOR) dns: expose getDefaultResultOrder (btea) #469732f202c93e7] - doc: clarify array args to Buffer.from() (Bryan English) #4827427f195f8d8] - doc: document watch option for node:test run() (Moshe Atlow) #482567558ef350a] - doc: update documentation for FIPS support (Richard Lau) #48194f2bb1919e5] - doc: improve the documentation of the stdio option (Kumar Arnav) #48110a2aa52ba92] - doc: update Buffer.allocUnsafe description (sinkhaha) #4818319ad471d52] - doc: update codeowners with website team (Claudio Wunder) #4819767b2c2a98f] - doc: fix broken link to new folder doc/contributing/maintaining (Andrea Fassina) #48205795ca70815] - doc: add atlowChemi to triagers (Chemi Atlow) #48104e437a0aff1] - doc: fix typo in readline completer function section (Vadym) #4818892e0ea496d] - doc: remove broken link for keygen (Rich Trott) #48176fe15dae8e6] - doc: addautointrinsic height to prevent jitter/flicker (Daniel Holbert) #48195230335e21f] - doc: add version info on the SEA docs (Antoine du Hamel) #48173e6f37d1b80] - doc: add Ruy to list of TSC members (Michael Dawson) #4817269205a250c] - doc: update socket.remote* properties documentation (Saba Kharanauli) #48139e4a5d6298c] - doc: update outdated section on TLSv1.3-PSK (Tobias Nießen) #48123d14018ed99] - doc: improve HMAC key recommendations (Tobias Nießen) #48121e9d4baf770] - doc: clarify mkdir() recursive behavior (Stephen Odogwu) #481093e4a469139] - doc: fix typo in crypto legacy streams API section (Tobias Nießen) #48122bdf366ab88] - doc: update SEA source link (Rich Trott) #480802a4f79a75f] - doc: clarify tty.isRaw (Roberto Vidal) #4805598c6e4be03] - doc: use secure key length for HMAC generateKey (Tobias Nießen) #480528ae5c8cf9d] - doc: update broken EVP_BytesToKey link (Rich Trott) #480643c713e7caa] - doc: update broken spkac link (Rich Trott) #48063c22f739e94] - doc: document node-api version process (Chengzhong Wu) #47972ce859f9f9f] - doc: fix typo in binding functions (Deokjin Kim) #48003070c3457b7] - doc: mark Node.js 14 as End-of-Life (Richard Lau) #480233611027d8e] - doc: clarify CRYPTO_CUSTOM_ENGINE_NOT_SUPPORTED (Tobias Nießen) #47976dbffad958c] - doc: add missing deprecated blocks to cluster (Tobias Nießen) #47981035356f711] - doc: update description of global (Tobias Nießen) #47969081a6ffaea] - doc: update measure memory rejection information (Yash Ladha) #416393460cf9c23] - doc: fix broken link to TC39 import attributes proposal (Rich Trott) #479543b018c8aa9] - doc: fix broken link (Rich Trott) #47953244db960a9] - doc: remove broken link (Rich Trott) #479422cc8715bb9] - doc: document make lint-md-clean (Matteo Collina) #47926b80e006c17] - doc: mark global object as legacy (Mert Can Altın) #47819bf4eb058f3] - doc: ntfs junction points must link to directories (Ben Noordhuis) #4790749875f0d69] - doc: fix params names (Dmitry Semigradsky) #4785394b5eaaf17] - doc: update supported version of FreeBSD to 12.4 (Michaël Zasso) #478380114201825] - doc: swap Matteo with Rafael in the stewards (Rafael Gonzaga) #478418bcfcc0af9] - doc: add valgrind suppression details (Kevin Eady) #4776075d397ecab] - doc: replace EOL versions in README (Tobias Nießen) #478332b0c57cb80] - doc: add ovflowd to collaborators (Claudio Wunder) #47844be4966977c] - doc: update BUILDING.md previous versions links (Tobias Nießen) #47835a9e8a20fb8] - doc: create maintaining folder for deps (Marco Ippolito) #47589fd0f362d7c] - doc: remove MoLow from Triagers (Moshe Atlow) #477920927c67ab6] - doc: fix typo in webstreams.md (Christian Takle) #47766994be578da] - doc: move BethGriggs to regular member (Rich Trott) #4777664d19f4678] - doc: move addaleax to TSC emeriti (Anna Henningsen) #4775233ec10e6b8] - doc: add link to news for Node.js core (Michael Dawson) #477042a682b5efe] - doc: async_hooks asynchronous content example add mjs code (btea) #474014f541c3ca3] - doc: clarify concurrency model of test runner (Tobias Nießen) #47642ffcff68f0d] - doc: fix typos (Mohammed Keyvanzadeh) #47685290b2b7afc] - doc: fix capitalization of ASan (Mohammed Keyvanzadeh) #47676b4ca788878] - doc: fix typos in SECURITY.md (Mohammed Keyvanzadeh) #47677971c545a47] - doc: update error code of buffer (Deokjin Kim) #47617ec5c919928] - doc: change offset of example inBuffer.copyBytesFrom(Deokjin Kim) #47606980bf052c7] - doc: remove markdown link from heading (Tobias Nießen) #47585e96451ec5e] - doc: fix release-post script location (Rafael Gonzaga) #4751761ea15339c] - doc: add link for news from uvwasi team (Michael Dawson) #47531d40bcdd73e] - doc: add missing setEncoding call in ESM example (Anna Henningsen) #47558924dc909b3] - doc: fix typo in util.types.isNativeError() (Julian Dax) #47532a24d72a6fb] - doc: add KhafraDev to collaborators (Matthew Aitken) #47510b0196378b6] - doc: create maintaining-brotli.md (Marco Ippolito) #473803902be8fe8] - doc: info on handling unintended breaking changes (Michael Dawson) #47426670f9a591d] - doc: add performance initiative (Yagiz Nizipli) #4742489a5d04a8e] - doc: do not create a backup file (Luigi Pinca) #471517f2bccc5d6] - doc: add MoLow to the TSC (Colin Ihrig) #474367db2e889ac] - doc: add a note about os.cpus() returning an empty list (codedokode) #47363289a8e30d6] - doc: clarify reports are only evaluated on active versions (Rafael Gonzaga) #47341dc22edb4d2] - doc: remove Vladimir de Turckheim from Security release stewards (Vladimir de Turckheim) #473183e74a74da3] - doc: add importing util to example of `process.report.getReport' (Deokjin Kim) #47298ece029f64e] - doc: vm.SourceTextModule() without context option (Axel Kittenberger) #47295c7227204cc] - doc: document process for sharing project news (Michael Dawson) #471892865cbb4bd] - doc: revise example of assert.CallTracker (Deokjin Kim) #4725281ebaf2670] - doc: fix typo in SECURITY.md (Rich Trott) #47282faabd48f11] - doc: use serial comma in cli docs (Tobias Nießen) #472623a85794089] - doc: improve example for Error.captureStackTrace() (Julian Dax) #468862114fa472b] - doc: clarify http error events after calling destroy() (Zach Bjornson) #46903d15f522d1f] - doc: update output of example in AbortController (Deokjin Kim) #47227ab6588e343] - doc: drop one-week branch sync on major releases (Rafael Gonzaga) #471496ac52e3061] - doc: fix grammar in the collaborator guide (Mohammed Keyvanzadeh) #4724513175774a6] - doc: update stream.reduce concurrency note (Raz Luvaton) #471661e97ccd6d4] - doc: remove use of DEFAULT_ENCODING in PBKDF2 docs (Tobias Nießen) #47181d562a7c461] - doc: fix typos in async_context.md (Shubham Sharma) #471559a11788cdf] - doc: update collaborator guide to reflect TSC changes (Rich Trott) #471265fc2bb763f] - doc: clarify thatfs.create{Read,Write}StreamsupportAbortSignal(Antoine du Hamel) #471222dd3b0213e] - doc: improve documentation for util.types.isNativeError() (Julian Dax) #46840ce4636e36b] - doc: rename the startup performance initiative to startup snapshot (#47111) (Joyee Cheung)309d017f15] - doc: fix "maintaining dependencies" heading typos (Keyhan Vakil) #47082230a984eb3] - doc: include webstreams in finished() and Duplex.from() parameters (Debadree Chatterjee) #463128651ea822e] - doc,fs: update description of fs.stat() method (Mert Can Altın) #47654e4539e1f19] - doc,test: update the v8.startupSnapshot doc and test the example (Joyee Cheung) #474683dddc0175f] - doc,test: fix concurrency option of test() (Tobias Nießen) #47734563f9fe06a] - doc,vm: clarify usage of cachedData in vm.compileFunction() (Darshan Sen) #48193316016ffac] - esm: avoid accessing lazy getters for urls (Yagiz Nizipli) #47542e5e385d2b2] - esm: increase test coverage of edge cases (Antoine du Hamel) #47033061fb20660] - (SEMVER-MINOR) events: add getMaxListeners method (Matthew Aitken) #47039ed0b62cc01] - (SEMVER-MINOR) fs: add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #470849b44c56c9a] - fs: make readdir recursive algorithm iterative (Ethan Arrowood) #476507273ef53b3] - (SEMVER-MINOR) fs: add recursive option to readdir and opendir (Ethan Arrowood) #414393f0636d2c1] - (SEMVER-MINOR) fs: add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084a0b9853251] - (SEMVER-MINOR) fs: implement byob mode for readableWebStream() (Debadree Chatterjee) #46933709e368708] - http: send implicit headers on HEAD with no body (Matteo Collina) #48108dc318f26c0] - (SEMVER-MINOR) http: prevent writing to the body when not allowed by HTTP spec (Gerrard Lindsay) #477324b2a015642] - (SEMVER-MINOR) http: remove internal error in assignSocket (Matteo Collina) #477237cef6aa721] - (SEMVER-MINOR) http: add highWaterMark opt in http.createServer (HinataKah0) #474059186f3a0ef] - http2: improve nghttp2 error callback (Tobias Nießen) #47840cc7e5dd4cd] - inspector: add tips for Session (theanarkh) #4719570c0e882d3] - inspector: log response and requests in the inspector for debugging (Joyee Cheung) #469416099d2d08b] - inspector: fix session.disconnect crash (theanarkh) #46942156292d44a] - lib: create weakRef only if any signals provided (Chemi Atlow) #48448efaa073303] - (SEMVER-MINOR) lib: implement AbortSignal.any() (Chemi Atlow) #47821c46b31f3bf] - lib: support FORCE_COLOR for non TTY streams (Moshe Atlow) #48034286c358832] - lib: do not disable linter for entire files (Antoine du Hamel) #48299a2552ab7c0] - lib: use existingisWindowsvariable (sinkhaha) #481342b65625281] - lib: update comment (sinkhaha) #47884fa447b5120] - lib: use webidl DOMString converter in EventTarget (Matthew Aitken) #4751433f32dc318] - lib: define Event.isTrusted in the prototype (Santiago Gimeno) #4697450789a5e4a] - lib: refactor to usevalidateBuffer(Deokjin Kim) #464893658abea26] - (SEMVER-MINOR) lib: add webstreams to Duplex.from() (Debadree Chatterjee) #46190fcf3781d22] - lib,src,test: lint codebase according new rules for v18.x (Juan José Arboleda) #48697b55dc53422] - meta: bump github/codeql-action from 2.3.3 to 2.3.6 (dependabot[bot]) #482878ac4579d85] - meta: bump actions/setup-python from 4.6.0 to 4.6.1 (dependabot[bot]) #48286b1854fe9c1] - meta: bump codecov/codecov-action from 3.1.3 to 3.1.4 (dependabot[bot]) #48285d9448b8d93] - meta: remove dont-land-on-v14 auto labeling (Shrujal Shah) #48031bb859768b6] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #48010af90fb939b] - meta: bump step-security/harden-runner from 2.3.1 to 2.4.0 (Rich Trott) #479804dcf5e2052] - meta: bump github/codeql-action from 2.3.2 to 2.3.3 (Rich Trott) #47979dab3186ea2] - meta: bump actions/setup-python from 4.5.0 to 4.6.0 (Rich Trott) #47968546224c13c] - meta: add security-wg ping to permission.js (Rafael Gonzaga) #47941353dfbd2d6] - meta: bump step-security/harden-runner from 2.2.1 to 2.3.1 (dependabot[bot]) #4780820a5cc27ec] - meta: bump actions/setup-python from 4.5.0 to 4.6.0 (dependabot[bot]) #47806eef6442d8d] - meta: bump actions/checkout from 3.3.0 to 3.5.2 (dependabot[bot]) #47805e30e6a718a] - meta: remove extra space in scorecard workflow (Mestery) #478052d13cdebc4] - meta: bump github/codeql-action from 2.2.9 to 2.3.2 (dependabot[bot]) #47809f0d8352ed8] - meta: bump codecov/codecov-action from 3.1.1 to 3.1.3 (dependabot[bot]) #478077e95fba0ff] - meta: fix dependabot commit message (Mestery) #47810d31d9c7c28] - meta: ping nodejs/startup for startup test changes (Joyee Cheung) #47771077686055b] - meta: add mailmap entry for KhafraDev (Rich Trott) #47512e50eb6570a] - meta: ping security-wg team on permission model changes (Rafael Gonzaga) #474832df1a36214] - meta: ping startup and realm team on src/node_realm* changes (Joyee Cheung) #47448c7dc6e321b] - meta: fix notable-change comment label url (Filip Skokan) #47300e859ca44d5] - meta: clarify the threat model to explain the JSON.parse case (Matteo Collina) #472761f08f4848d] - meta: update link to collaborators discussion page (Michaël Zasso) #472113b524cbf86] - meta: automate description requests when notable change label is added (Danielle Adams) #47078da16ca7c59] - meta: move TSC voting member(s) to regular member(s) (Node.js GitHub Bot) #471800c80e60d7e] - meta: move TSC voting member to regular membership (Node.js GitHub Bot) #469850edcfed895] - meta: update GOVERNANCE.md to reflect TSC charter changes (Rich Trott) #47126baada5d035] - meta: ask expected behavior reason in bug template (Ben Noordhuis) #470495d75ec402e] - module: reduce the number of URL initializations (Yagiz Nizipli) #48272c5af5a4f4f] - module: changeConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.