This repository has been archived by the owner on Jul 30, 2024. It is now read-only.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
20.11.0-bullseye-slim
->20.11.1-bullseye-slim
Release Notes
nodejs/node (node)
v20.11.1
: 2024-02-14, Version 20.11.1 'Iron' (LTS), @RafaelGSS prepared by @marco-ippolitoCompare Source
Notable changes
This is a security release.
Notable changes
Commits
7079c062bb
] - crypto: disable PKCS#1 padding for privateDecrypt (Michael Dawson) nodejs-private/node-private#525186a6e1ffb
] - deps: fix GHSA-f74f-cvh7-c6q6/CVE-2024-24806 (Santiago Gimeno) #51737686da19abb
] - deps: disable io_uring support in libuv by default (Tobias Nießen) nodejs-private/node-private#529f7b44bfbce
] - deps: update archs files for openssl-3.0.13+quic1 (Node.js GitHub Bot) #516147a30fecea2
] - deps: upgrade openssl sources to quictls/openssl-3.0.13+quic1 (Node.js GitHub Bot) #51614480fc169a8
] - fs: protect against modified Buffer internals in possiblyTransformPath (Tobias Nießen) nodejs-private/node-private#49777ac7c3153
] - http: add maximum chunk extension size (Paolo Insogna) nodejs-private/node-private#519ed7d149675
] - lib: use cache fs internals against path traversal (RafaelGSS) nodejs-private/node-private#51689bd5fc38f
] - lib: update undici to v5.28.3 (Matteo Collina) nodejs-private/node-private#539d01dd4291d
] - permission: fix wildcard when children > 1 (Rafael Gonzaga) #5120940ff37dfcc
] - src: fix HasOnly(capability) in node::credentials (Tobias Nießen) nodejs-private/node-private#5053f6addd590
] - src,deps: disable setuid() etc if io_uring enabled (Tobias Nießen) nodejs-private/node-private#529d6da413aa4
] - test,doc: clarify wildcard usage (RafaelGSS) nodejs-private/node-private#517c213910aea
] - zlib: pause stream if outgoing buffer is full (Matteo Collina) nodejs-private/node-private#541Configuration
📅 Schedule: Branch creation - "every weekend" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.