File nodejs16.changes of Package nodejs16

Overview Repositories Revisions Requests Users Attributes Meta

File nodejs16.changes of Package nodejs16

-------------------------------------------------------------------
Wed Mar 16 11:01:02 UTC 2022 - Adam Majer <adam.majer@suse.de>

- update to LTS release 16.14.1:
  * deps: upgrade npm to 8.5.0
  * http2: fix memory leak on nghttp2 hd threshold

- 42342.patch: upstreamed, dropped
- versioned.patch: refreshed

-------------------------------------------------------------------
Tue Mar 15 13:29:20 UTC 2022 - Adam Majer <adam.majer@suse.de>

- 42342.patch: fix expired certificates in unit tests

-------------------------------------------------------------------
Thu Feb 17 12:31:36 UTC 2022 - Adam Majer <adam.majer@suse.de>

- update to LTS release 16.14.0:
  * deps: upgrade npm to 8.1.4
  * child_process: add support for URL to cp.fork
  * fs: accept URL as argument for fs.rm and fs.rmSync
  * lib:
    + make AbortSignal cloneable/transferable
    + add AbortSignal.timeout
    + add reason to AbortSignal
    + add unsubscribe method to non-active DC channels
  * process: add getActiveResourcesInfo()
  * src:
    + add x509.fingerprint512 to crypto module
    + add flags for controlling process behavior
  * stream:
    + add map and filter methods to readable
    + deprecate thenable support
  * timers: add experimental scheduler api
  * util:
    + add numericSeparator to util.inspect
    + always visualize cause property in errors during inspection
    + pass through the inspect function to custom inspect functions

npm_search_paths.patch, versioned.patch: refreshed

-------------------------------------------------------------------
Fri Jan 28 16:09:53 UTC 2022 - Adam Majer <adam.majer@suse.de>

- Add buildtime version check to determine if we need patched
  openssl Requires: or already in upstream. (bsc#1192489)

-------------------------------------------------------------------
Tue Jan 18 08:29:18 UTC 2022 - Adam Majer <adam.majer@suse.de>

- rsa-pss-revert.patch: dropped, since openssl updated with needed
  functionality

-------------------------------------------------------------------
Tue Jan 11 18:48:04 UTC 2022 - Adam Majer <adam.majer@suse.de>

- update to 16.13.2:
  Security update fixing the following issues:

* Improper handling of URI Subject Alternative Names (Medium)
   (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
   (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
   (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
   (CVE-2022-21824, bsc#1194514)

-------------------------------------------------------------------
Wed Jan  5 20:50:19 UTC 2022 - Adam Majer <adam.majer@suse.de>

- fix_ci_tests.patch: fix tests on s390x

-------------------------------------------------------------------
Tue Jan  4 12:17:19 UTC 2022 - Adam Majer <adam.majer@suse.de>

- rsa-pss-revert.patch: temporarily revert functionality requiring
  newer openssl

-------------------------------------------------------------------
Tue Dec  7 16:42:18 UTC 2021 - Adam Majer <adam.majer@suse.de>

- Update to 16.13.1:
  * deps: upgrade npm to 8.1.2
  * lib: fix regular expression to detect `/` and `\`

- 40670.patch: upstreamed
- fix_ci_tests.patch: refreshed

-------------------------------------------------------------------
Thu Nov 25 12:21:25 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>

- Fix CXXFLAGS in Tumbleweed - boo#1192824

-------------------------------------------------------------------
Tue Nov  9 10:43:16 UTC 2021 - Adam Majer <adam.majer@suse.de>

- BR python 3.6+

-------------------------------------------------------------------
Sat Nov  6 14:13:02 UTC 2021 - Adam Majer <adam.majer@suse.de>

- Update to 16.13.0:
  * Experimental ESM Loader Hooks API
    https://github.com/nodejs/node/pull/37468
  * deps: upgrade npm to 8.1.0 (npm team)
  * vm: add support for import assertions in dynamic imports

- Changes in 16.11.1:
  * deps: update llhttp to 6.0.4
    - HTTP Request Smuggling due to spaced in headers
     (bsc#1191601, CVE-2021-22959)
    - HTTP Request Smuggling when parsing the body
     (bsc#1191602, CVE-2021-22960)

- Changes in 16.11.0:
  * deps: update nghttp2 to v1.45.1

- Changes in 16.10.0:
  * crypto: add rsa-pss keygen parameters
  * fs: make open and close stream override optional when unused
  * http: limit requests per connection
    The maximum number of requests a socket can handle before closing
    keep alive connection can be set with server.maxRequestsPerSocket.
  * src: add --no-global-search-paths cli option
  * stream: add signal support to pipeline generators

- Changes in 16.9.0:
  * Added support for corepack
  * crypto: add RSA-PSS params to asymmetricKeyDetails
  * module: support pattern trailers
  * stream: add stream.compose

- Changes in 16.8.0:
  * doc: deprecate type coercion for dns.lookup options
  * stream: add stream.Duplex.from utility and isDisturbed helper
  * util: expose toUSVString

- Changes in 16.7.0:
  * fs: experimental: add recursive cp method

- refreshed: fix_ci_tests.patch, flaky_test_rerun.patch,
  nodejs-libpath.patch, sle12_python3_compat.patch,
  versioned.patch, node_modules.tar.xz

-------------------------------------------------------------------
Tue Nov  2 14:40:41 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>

- Add 40670.patch: test: fix test-datetime-change-notify after
  daylight change.

-------------------------------------------------------------------
Fri Oct 15 19:57:42 UTC 2021 - Bernhard Voelker <mail@bernhard-voelker.de>

- test-skip-y2038-on-32bit-time_t.patch: Add patch to skip the test
  'test/parallel/test-fs-utimes-y2K38.js' which fails with a FP
  on platforms with 32-bit time_t.
- nodejs16.spec: Reference it.

-------------------------------------------------------------------
Thu Aug 12 13:51:48 UTC 2021 - Adam Majer <adam.majer@suse.de>

- Update to 16.6.2:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
  * deps: upgrade npm to 7.20.3
  * deps: revert ABI-breaking change from V8 9.2
  * module: fix ERR_REQUIRE_ESM error for null frames

- cares_public_headers.patch: don't use private headers

-------------------------------------------------------------------
Mon Aug  2 13:02:58 UTC 2021 - Adam Majer <adam.majer@suse.de>

- Update to 16.6.0:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)

-------------------------------------------------------------------
Thu Jul 22 12:18:32 UTC 2021 - Adam Majer <adam.majer@suse.de>

- legacy_python.patch: fix building with python 3.4 in SLE-12

-------------------------------------------------------------------
Wed Jul 21 21:57:54 UTC 2021 - Adam Majer <adam.majer@suse.de>

- Update to 16.5.0:
  * deps: upgrade npm to 7.19.1
  * fs: allow empty string for temp directory prefix
  * Node.js now exposes an experimental implementation of the
    Web Streams API

-------------------------------------------------------------------
Fri Jul  2 15:17:09 UTC 2021 - Adam Majer <adam.majer@suse.de>

- Update to 16.4.1:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)

-------------------------------------------------------------------
Thu Jul  1 13:34:05 UTC 2021 - Adam Majer <adam.majer@suse.de>

- node-gyp_7.1.2.tar.xz: for SLE-12, use latest node-gyp that
  is compatible with python 3.4

-------------------------------------------------------------------
Wed Jun 23 12:57:04 UTC 2021 - Adam Majer <adam.majer@suse.de>

- Update to 16.4.0:
  * async_hooks: stabilize part of AsyncLocalStorage
  * deps:
    + upgrade npm to 7.18.1
    + update V8 to 9.1.269.36
  * dns: allow --dns-result-order to change default dns verbatim

-------------------------------------------------------------------
Mon Jun 21 05:01:32 UTC 2021 - Andreas Schneider <asn@cryptomilk.org>

- Allow building for Fedora in the OBS

-------------------------------------------------------------------
Fri Jun  4 20:59:13 UTC 2021 - Dirk Müller <dmueller@suse.com>

- update to 16.3.0:
  * add -C alias for --conditions flag
  * add workspaces support to npm install commands

-------------------------------------------------------------------
Mon May 31 16:27:44 UTC 2021 - Adam Majer <adam.majer@suse.de>

- Use libalternatives instead of update-alternatives

-------------------------------------------------------------------
Thu May 20 14:56:23 UTC 2021 - Adam Majer <adam.majer@suse.de>

- New upstream version 16.2.0:
  * async_hooks: use new v8::Context PromiseHook API
  * deps: npm updated to 7.13.0
  * lib: support setting process.env.TZ on windows
  * module: add support for URL to import.meta.resolve
  * process: add 'worker' event
  * util: add util.types.isKeyObject and util.types.isCryptoKey

-------------------------------------------------------------------
Wed May  5 11:21:13 UTC 2021 - Adam Majer <adam.majer@suse.de>

- New upstream version 16.1.0
  fs: allow no-params fsPromises fileHandle read

-------------------------------------------------------------------
Tue May  4 12:00:35 UTC 2021 - Adam Majer <adam.majer@suse.de>

- New upstrean version 16.0.0:
  For complete list of changes since 15.x, please see
https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V16.md#16.0.0

-------------------------------------------------------------------
Wed Mar 17 12:05:50 UTC 2021 - Adam Majer <adam.majer@suse.de>

- Import staging 16.x

 
-------------------------------------------------------------------
Wed Mar 16 11:01:02 UTC 2022 - Adam Majer <adam.majer@suse.de>
​
- update to LTS release 16.14.1:
  * deps: upgrade npm to 8.5.0
  * http2: fix memory leak on nghttp2 hd threshold
​
- 42342.patch: upstreamed, dropped
- versioned.patch: refreshed
​
-------------------------------------------------------------------
Tue Mar 15 13:29:20 UTC 2022 - Adam Majer <adam.majer@suse.de>
​
- 42342.patch: fix expired certificates in unit tests 
​
-------------------------------------------------------------------
Thu Feb 17 12:31:36 UTC 2022 - Adam Majer <adam.majer@suse.de>
​
- update to LTS release 16.14.0:
  * deps: upgrade npm to 8.1.4
  * child_process: add support for URL to cp.fork
  * fs: accept URL as argument for fs.rm and fs.rmSync
  * lib:
    + make AbortSignal cloneable/transferable
    + add AbortSignal.timeout
    + add reason to AbortSignal
    + add unsubscribe method to non-active DC channels
  * process: add getActiveResourcesInfo()
  * src:
    + add x509.fingerprint512 to crypto module
    + add flags for controlling process behavior
  * stream:
    + add map and filter methods to readable
    + deprecate thenable support
  * timers: add experimental scheduler api
  * util:
    + add numericSeparator to util.inspect
    + always visualize cause property in errors during inspection
    + pass through the inspect function to custom inspect functions
​
npm_search_paths.patch, versioned.patch: refreshed
​
-------------------------------------------------------------------
Fri Jan 28 16:09:53 UTC 2022 - Adam Majer <adam.majer@suse.de>
​
- Add buildtime version check to determine if we need patched
  openssl Requires: or already in upstream. (bsc#1192489)
​
-------------------------------------------------------------------
Tue Jan 18 08:29:18 UTC 2022 - Adam Majer <adam.majer@suse.de>
​
- rsa-pss-revert.patch: dropped, since openssl updated with needed
  functionality 
​
-------------------------------------------------------------------
Tue Jan 11 18:48:04 UTC 2022 - Adam Majer <adam.majer@suse.de>
​
- update to 16.13.2:
  Security update fixing the following issues:
​
  * Improper handling of URI Subject Alternative Names (Medium)
   (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
   (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
   (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
   (CVE-2022-21824, bsc#1194514)
​
-------------------------------------------------------------------
Wed Jan  5 20:50:19 UTC 2022 - Adam Majer <adam.majer@suse.de>
​
- fix_ci_tests.patch: fix tests on s390x
​
-------------------------------------------------------------------
Tue Jan  4 12:17:19 UTC 2022 - Adam Majer <adam.majer@suse.de>
​
- rsa-pss-revert.patch: temporarily revert functionality requiring
  newer openssl
​
-------------------------------------------------------------------
Tue Dec  7 16:42:18 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- Update to 16.13.1:
  * deps: upgrade npm to 8.1.2
  * lib: fix regular expression to detect `/` and `\`
​
- 40670.patch: upstreamed
- fix_ci_tests.patch: refreshed
​
-------------------------------------------------------------------
Thu Nov 25 12:21:25 UTC 2021 - Guillaume GARDET <guillaume.gardet@opensuse.org>
​
- Fix CXXFLAGS in Tumbleweed - boo#1192824
​
-------------------------------------------------------------------
Tue Nov  9 10:43:16 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- BR python 3.6+
​
-------------------------------------------------------------------
Sat Nov  6 14:13:02 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- Update to 16.13.0:
  * Experimental ESM Loader Hooks API
    https://github.com/nodejs/node/pull/37468
  * deps: upgrade npm to 8.1.0 (npm team)
  * vm: add support for import assertions in dynamic imports
​
- Changes in 16.11.1:
  * deps: update llhttp to 6.0.4
    - HTTP Request Smuggling due to spaced in headers
     (bsc#1191601, CVE-2021-22959)
    - HTTP Request Smuggling when parsing the body
     (bsc#1191602, CVE-2021-22960)
​
- Changes in 16.11.0:
  * deps: update nghttp2 to v1.45.1
​
- Changes in 16.10.0:
  * crypto: add rsa-pss keygen parameters
  * fs: make open and close stream override optional when unused
  * http: limit requests per connection
    The maximum number of requests a socket can handle before closing
    keep alive connection can be set with server.maxRequestsPerSocket.
  * src: add --no-global-search-paths cli option
  * stream: add signal support to pipeline generators
​
- Changes in 16.9.0:
  * Added support for corepack
  * crypto: add RSA-PSS params to asymmetricKeyDetails
  * module: support pattern trailers
  * stream: add stream.compose
​
- Changes in 16.8.0:
  * doc: deprecate type coercion for dns.lookup options
  * stream: add stream.Duplex.from utility and isDisturbed helper
  * util: expose toUSVString
​
- Changes in 16.7.0:
  * fs: experimental: add recursive cp method
​
- refreshed: fix_ci_tests.patch, flaky_test_rerun.patch,
  nodejs-libpath.patch, sle12_python3_compat.patch,
  versioned.patch, node_modules.tar.xz
​
-------------------------------------------------------------------
Tue Nov  2 14:40:41 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
​
- Add 40670.patch: test: fix test-datetime-change-notify after
  daylight change.
​
-------------------------------------------------------------------
Fri Oct 15 19:57:42 UTC 2021 - Bernhard Voelker <mail@bernhard-voelker.de>
​
- test-skip-y2038-on-32bit-time_t.patch: Add patch to skip the test
  'test/parallel/test-fs-utimes-y2K38.js' which fails with a FP
  on platforms with 32-bit time_t.
- nodejs16.spec: Reference it.
​
-------------------------------------------------------------------
Thu Aug 12 13:51:48 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- Update to 16.6.2:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
  * deps: upgrade npm to 7.20.3
  * deps: revert ABI-breaking change from V8 9.2
  * module: fix ERR_REQUIRE_ESM error for null frames
​
- cares_public_headers.patch: don't use private headers
​
-------------------------------------------------------------------
Mon Aug  2 13:02:58 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- Update to 16.6.0:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
​
-------------------------------------------------------------------
Thu Jul 22 12:18:32 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- legacy_python.patch: fix building with python 3.4 in SLE-12
​
-------------------------------------------------------------------
Wed Jul 21 21:57:54 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- Update to 16.5.0:
  * deps: upgrade npm to 7.19.1
  * fs: allow empty string for temp directory prefix
  * Node.js now exposes an experimental implementation of the
    Web Streams API
​
-------------------------------------------------------------------
Fri Jul  2 15:17:09 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- Update to 16.4.1:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
​
-------------------------------------------------------------------
Thu Jul  1 13:34:05 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- node-gyp_7.1.2.tar.xz: for SLE-12, use latest node-gyp that
  is compatible with python 3.4
​
-------------------------------------------------------------------
Wed Jun 23 12:57:04 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- Update to 16.4.0:
  * async_hooks: stabilize part of AsyncLocalStorage
  * deps:
    + upgrade npm to 7.18.1
    + update V8 to 9.1.269.36
  * dns: allow --dns-result-order to change default dns verbatim
​
-------------------------------------------------------------------
Mon Jun 21 05:01:32 UTC 2021 - Andreas Schneider <asn@cryptomilk.org>
​
- Allow building for Fedora in the OBS
​
-------------------------------------------------------------------
Fri Jun  4 20:59:13 UTC 2021 - Dirk Müller <dmueller@suse.com>
​
- update to 16.3.0:
  * add -C alias for --conditions flag
  * add workspaces support to npm install commands
​
-------------------------------------------------------------------
Mon May 31 16:27:44 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- Use libalternatives instead of update-alternatives
​
-------------------------------------------------------------------
Thu May 20 14:56:23 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- New upstream version 16.2.0:
  * async_hooks: use new v8::Context PromiseHook API
  * deps: npm updated to 7.13.0
  * lib: support setting process.env.TZ on windows
  * module: add support for URL to import.meta.resolve
  * process: add 'worker' event
  * util: add util.types.isKeyObject and util.types.isCryptoKey
​
-------------------------------------------------------------------
Wed May  5 11:21:13 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- New upstream version 16.1.0
  fs: allow no-params fsPromises fileHandle read
​
-------------------------------------------------------------------
Tue May  4 12:00:35 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- New upstrean version 16.0.0:
  For complete list of changes since 15.x, please see
https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V16.md#16.0.0
​
-------------------------------------------------------------------
Wed Mar 17 12:05:50 UTC 2021 - Adam Majer <adam.majer@suse.de>
​
- Import staging 16.x
 
​

Places

File nodejs16.changes of Package nodejs16

Places