Releases: balena-io-modules/open-balena-base
Releases · balena-io-modules/open-balena-base
v18.0.13
Update dependency node to v22.8.0
Notable changes
- Branch coverage: Use
--test-coverage-branches=<threshold> - Function coverage: Use
--test-coverage-functions=<threshold> - Line coverage: Use
--test-coverage-lines=<threshold> - [
1f2cc2fa47] - (SEMVER-MINOR) src,lib: add performance.uvMetricsInfo (Rafael Gonzaga) #54413 - [
1e01bdc0d0] - (SEMVER-MINOR) net: exclude ipv6 loopback addresses from server.listen (Giovanni Bucci) #54264 - [
97fa075c2e] - (SEMVER-MINOR) test_runner: support running tests in process (Colin Ihrig) #53927 - [
858b583c88] - (SEMVER-MINOR) test_runner: defer inheriting hooks until run() (Colin Ihrig) #53927 - [
94985df9d6] - benchmark: fix benchmark for file path and URL conversion (Early Riser) #54190 - [
ac178b094b] - buffer: truncate instead of throw when writing beyond buffer (Robert Nagy) #54524 - [
afd8c1eb4f] - buffer: allow invalid encoding in from (Robert Nagy) #54533 - [
6f0cf35cd3] - build: reclaim disk space on macOS GHA runner (jakecastelli) #54658 - [
467ac3aec4] - build: don't clean obj.target directory if it doesn't exist (Joyee Cheung) #54337 - [
71fdf961df] - build: update required python version to 3.8 (Aviv Keller) #54358 - [
73604cf1c5] - deps: update nghttp2 to 1.63.0 (Node.js GitHub Bot) #54589 - [
b00c087285] - deps: V8: cherry-picke74d0f4(Joyee Cheung) #54279 - [
33a6b3c7a9] - deps: backport ICU-22787 to fix ClangCL on Windows (Stefan Stojanovic) #54502 - [
fe56949cbb] - deps: update c-ares to v1.33.1 (Node.js GitHub Bot) #54549 - [
290f6ce619] - deps: update amaro to 0.1.8 (Node.js GitHub Bot) #54520 - [
b5843568b4] - deps: update amaro to 0.1.7 (Node.js GitHub Bot) #54473 - [
9c709209b4] - deps: update undici to 6.19.8 (Node.js GitHub Bot) #54456 - [
a5ce24181b] - deps: sqlite: fix Windows compilation (Colin Ihrig) #54433 - [
3caf29ea88] - deps: update sqlite to 3.46.1 (Node.js GitHub Bot) #54433 - [
68758d4b08] - doc: add support me link for anonrig (Yagiz Nizipli) #54611 - [
f5c5529266] - doc: add alert on REPL from TCP socket (Rafael Gonzaga) #54594 - [
bf824483cd] - doc: fix typo in styleText description (Rafael Gonzaga) #54616 - [
825d933fd4] - doc: add getHeapStatistics() property descriptions (Benji Marinacci) #54584 - [
80e5150160] - doc: fix module compile cache description (沈鸿飞) #54625 - [
7fd033fe56] - doc: run license-builder (github-actions[bot]) #54562 - [
c499913732] - doc: fix information about including coverage files (Aviv Keller) #54527 - [
c3dc83befc] - doc: support collaborators - talk amplification (Michael Dawson) #54508 - [
fc57beaad3] - doc: add note about shasum generation failure (Marco Ippolito) #54487 - [
1800a58f49] - doc: update websocket flag description to reflect stable API status (Yelim Koo) #54482 - [
61affd77a7] - doc: fix capitalization in module.md (shallow-beach) #54488 - [
25419915c7] - doc: add esm examples to node:https (Alfredo González) #54399 - [
83b5efeb54] - doc: reserve ABI 130 for Electron 33 (Calvin) #54383 - [
6ccbd32ae8] - doc, meta: add missing,toBUILDING.md(Aviv Keller) #54409 - [
fc08a9b0cd] - fs: refactor handleTimestampsAndMode to remove redundant call (HEESEUNG) #54369 - [
4a664b5fcb] - lib: respect terminal capabilities on styleText (Rafael Gonzaga) #54389 - [
a9ce2b6a28] - lib: fix emit warning for debuglog.time when disabled (Vinicius Lourenço) #54275 - [
b5a23c9783] - meta: remind users to use a supported version in bug reports (Aviv Keller) #54481 - [
0d7171d8e9] - meta: add more labels to dep-updaters (Aviv Keller) #54454 - [
c4996c189f] - meta: run coverage-windows whenvcbuild.batupdated (Aviv Keller) #54412 - [
3cf645768e] - module: use amaro default transform values (Marco Ippolito) #54517 - [
336496b90e] - module: add sourceURL magic comment hinting generated source (Chengzhong Wu) #54402 - [
04f83b50ad] - Revert "net: validate host name for server listen" (jakecastelli) #54554 - [
3cd10a3f40] - node-api: remove RefBase and CallbackWrapper (Vladimir Morozov) #53590 - [
72c554abab] - sqlite: return results with null prototype (Michaël Zasso) #54350 - [
e071651bb2] - src: disable fast methods forbuffer.write(Michaël Zasso) #54565 - [
f8cbbc685a] - src: use v8::Isolate::GetDefaultLocale() to compute navigator.language (Joyee Cheung) #54279 - [
4baf4637eb] - (SEMVER-MINOR) src: add JS APIs for compile cache and NODE_DISABLE_COMPILE_CACHE (Joyee Cheung) #54501 - [[
101e299656](https://togithub.com/nodejs/node/c...
v18.0.12
Update dependency npm to v10.8.3
Notable changes
7e61151#7759 docs: init usage description corrected (#7759) (@milaninfy)2404c7e#7738 publish: consider package-spec when inside workspace dir (#7738) (@milaninfy)91e46a3#7721 init: use locally installed version of given package (#7721) (@milaninfy)4e81a6a#7674 always set exit code if exiting uncleanly (#7674) (@wraithgar, @hashtagchris)a947f25#7679 update lifecycle script list in run-script (#7679) (@sonsurim)e674987#7743 update docs for npmrc and package-json (#7743) (@milaninfy)24d5350#7742 fix and update scoped configuration example (#7742) (@demedos)3fd7a48#7737[email protected]d7e462b#7737[email protected]df58b0c#7737[email protected]7342c24#7737[email protected]2986f4e#7737[email protected]a44ab26#7737[email protected]4e965ad#7737[email protected]12587fa#7737[email protected]1a9ac86#7737[email protected]a303ddd#7737[email protected]1772276#7756 fix duplicate changelog entries (@wraithgar)8035725#7756@npmcli/[email protected](@wraithgar)ed4add1#7737 dev dependency updates (@wraithgar)86b05fc#7683 allow for longer timer values (#7683) (@wraithgar)- workspace:
[email protected]
npm/cli (npm)
v10.8.3
Bug Fixes
7e61151#7759 docs: init usage description corrected (#7759) (@milaninfy)2404c7e#7738 publish: consider package-spec when inside workspace dir (#7738) (@milaninfy)91e46a3#7721 init: use locally installed version of given package (#7721) (@milaninfy)4e81a6a#7674 always set exit code if exiting uncleanly (#7674) (@wraithgar, @hashtagchris)a947f25#7679 update lifecycle script list in run-script (#7679) (@sonsurim)
Documentation
e674987#7743 update docs for npmrc and package-json (#7743) (@milaninfy)24d5350#7742 fix and update scoped configuration example (#7742) (@demedos)
Dependencies
3fd7a48#7737[email protected]d7e462b#7737[email protected]df58b0c#7737[email protected]7342c24#7737[email protected]2986f4e#7737[email protected]a44ab26#7737[email protected]4e965ad#7737[email protected]12587fa#7737[email protected]1a9ac86#7737[email protected]a303ddd#7737[email protected]
Chores
1772276#7756 fix duplicate changelog entries (@wraithgar)8035725#7756@npmcli/[email protected](@wraithgar)ed4add1#7737 dev dependency updates (@wraithgar)86b05fc[#...
v18.0.11
Update dependency node to v22.7.0
Notable changes
- [
911de7dd6d] - (SEMVER-MINOR) inspector: supportNetwork.loadingFailedevent (Kohei Ueno) #54246 - [
9ee4b16bd8] - (SEMVER-MINOR) lib: rewrite AsyncLocalStorage without async_hooks (Stephen Belanger) #48528 - [
c6544ff5a6] - benchmark: use assert.ok searchparams (Rafael Gonzaga) #54334 - [
51b8576897] - benchmark: add stream.compose benchmark (jakecastelli) #54308 - [
c166036515] - benchmark: rename count to n (Rafael Gonzaga) #54271 - [
1be0ee76ef] - benchmark: change assert() to assert.ok() (Rafael Gonzaga) #54254 - [
4dd229f546] - benchmark: support --help in CLI (Aviv Keller) #53358 - [
a5a320cd5b] - benchmark: remove force option as force defaults to true (Yelim Koo) #54203 - [
db0a80a0eb] - benchmark: use assert.ok instead of assert (Rafael Gonzaga) #54176 - [
8ba53ae7b7] - buffer: properly apply dst offset and src length on fast path (Robert Nagy) #54391 - [
a5a60e6823] - buffer: use fast API for writing one-byte strings (Robert Nagy) #54311 - [
7b641bc2bd] - buffer: optimize byteLength for short strings (Robert Nagy) #54345 - [
28ca678f81] - buffer: optimize byteLength for common encodings (Robert Nagy) #54342 - [
12785559be] - buffer: optimize createFromString (Robert Nagy) #54324 - [
f7f7b0c498] - buffer: optimize for common encodings (Robert Nagy) #54319 - [
37631f826b] - buffer: add JSDoc to blob bytes method (Roberto Simonini) #54117 - [
ab6fae9dbf] - buffer: faster type check (Robert Nagy) #54088 - [
9f8f26eb2f] - buffer: use native copy impl (Robert Nagy) #54087 - [
019ebf03c1] - buffer: use faster integer argument check (Robert Nagy) #54089 - [
c640a2f24c] - build: always disable strict aliasing (Michaël Zasso) #54339 - [
6aa1d9e855] - build: updateruffto0.5.2(Aviv Keller) #53909 - [
350e699443] - build: supportlint-js-fixinvcbuild.bat(Aviv Keller) #53695 - [
98fed763f7] - build: add--without-amarobuild flag (Antoine du Hamel) #54136 - [
1ca598c5ce] - cli: allow--test-[name/skip]-patterninNODE_OPTIONS(Aviv Keller) #53001 - [
37960a67ae] - console: use validateOneOf for colorMode validation (HEESEUNG) #54245 - [
d52f515bab] - crypto: include NODE_EXTRA_CA_CERTS in all secure contexts by default (Eric Bickle) #44529 - [
b6a3e61353] - deps: update amaro to 0.1.6 (Node.js GitHub Bot) #54374 - [
0d716ad3f3] - deps: update simdutf to 5.3.4 (Node.js GitHub Bot) #54312 - [
18bfea5f33] - deps: update zlib to 1.3.0.1-motley-71660e1 (Node.js GitHub Bot) #53464 - [
d0c23f332f] - deps: update zlib to 1.3.0.1-motley-c2469fd (Node.js GitHub Bot) #53464 - [
e7db63972c] - deps: update zlib to 1.3.0.1-motley-68e57e6 (Node.js GitHub Bot) #53464 - [
713ae95555] - deps: update zlib to 1.3.0.1-motley-8b7eff8 (Node.js GitHub Bot) #53464 - [
758c9df36e] - deps: update zlib to 1.3.0.1-motley-e432200 (Node.js GitHub Bot) #53464 - [
fe7e6c9563] - deps: update zlib to 1.3.0.1-motley-887bb57 (Node.js GitHub Bot) #53464 - [
35722b7bca] - deps: update simdjson to 3.10.0 (Node.js GitHub Bot) #54197 - [
a2a41557db] - deps: fix GN build warning in ncrypto (Cheng) #54222 - [
869da204d7] - deps: update c-ares to v1.33.0 (Node.js GitHub Bot) #54198 - [
e0d503a715] - deps: update nbytes to 0.1.1 (Node.js GitHub Bot) #54277 - [
b0c768dae1] - deps: update undici to 6.19.7 (Node.js GitHub Bot) #54286 - [
ef9a950cb9] - deps: update acorn to 8.12.1 (Node.js GitHub Bot) #53465 - [
1597a1139a] - deps: update undici to 6.19.5 (Node.js GitHub Bot) #54076 - [
103e4db3e0] - deps: update simdutf to 5.3.1 (Node.js GitHub Bot) #54196 - [
9f115ba9e9] - doc: fix error description of the max header size (Egawa Ryo) #54125 - [
f967ab3810] - doc: add git node security --cleanup (Rafael Gonzaga) #54381 - [
8883c01afa] - doc: add note on weakness of permission model (Tobias Nießen) #54268 - [
824bd58bc5] - doc: add versions when--watch-preserve-outputwas added (Théo LUDWIG) #54328 - [
33795cfd49] - doc: replace v19 mention in Current release (Rafael Gonzaga) #54361 - [
aa6e770ea5] - doc: correct peformance entry types (Jason Zhang) #54263 - [
4b099ce1bd] - doc: fix typo in method name in the sea doc (Eliyah Sundström) #54027 - [
8a8d1d2281] - doc: mark process.nextTick legacy (Marco Ippolito) [#51280](http...
v18.0.10
Update dependency node to v22.6.0
Notable changes
List of commits
a368a66 (Update dependency node to v22.6.0, 2024-08-06)
v18.0.8
v18.0.7
Update dependency node to v22.5.1
Notable changes
- Crash with
FATAL ERROR: v8::Object::GetCreationContextChecked No creation context available#53902 - npm errors with
npm error Exit handler never called!npm/cli#7657 - yarn hangs or outputs
Usage Error: Couldn't find the node_modules state file - running an install might help (findPackageLocation)yarnpkg/berry#6398 - [
e2deeedc6e] - Revert "fs: add v8 fast api to closeSync" (Aviv Keller) #53904
nodejs/node (node)
v22.5.1: 2024-07-19, Version 22.5.1 (Current), @richardlau
Notable Changes
This release fixes a regression introduced in Node.js 22.5.0. The problem is known to display the following symptoms:
- Crash with
FATAL ERROR: v8::Object::GetCreationContextChecked No creation context available#53902 - npm errors with
npm error Exit handler never called!npm/cli#7657 - yarn hangs or outputs
Usage Error: Couldn't find the node_modules state file - running an install might help (findPackageLocation)yarnpkg/berry#6398
Commits
- [
e2deeedc6e] - Revert "fs: add v8 fast api to closeSync" (Aviv Keller) #53904
List of commits
v18.0.6
Update dependency npm to v10.8.2
Notable changes
3101a40#7631 limit concurrent open files during 'npm cache verify' (#7631) (@oikumene)2273183#7595 outdated: fixed wanted range for alias with version range (#7595) (@milaninfy)15be6dd#7574 don't try parsing workspaces if none exist (@wraithgar)ac937d4#7616 install: add save-peer flag (#7616) (@drew4237)55639ef#7615 use git+https in package.com url examples (#7615) (@MikeMcC399)93883bb#7582 Improve manpage section forpackage.jsonfundingproperties (#7582) (@kemitchell)92e71e6#7576 fix links to community discussions (#7576) (@leobalter)1c1adae#7636[email protected]5e4fa18#7636[email protected]d8fa116#7636[email protected]76dab91#7636[email protected]094c4ea#7636[email protected]1c8d41d#7636@npmcli/[email protected]e5451e1#7605[email protected]7b584d3#7605[email protected]941d0d7#7605[email protected]8b8ce7a#7605[email protected]4646768#7605[email protected]6f0d7ce#7605@npmcli/[email protected]29204c8#7605@npmcli/[email protected]04d6910#7574@npmcli/[email protected]4ef4830#7574 remove read-package-json-fast
npm/cli (npm)
v10.8.2
Bug Fixes
3101a40#7631 limit concurrent open files during 'npm cache verify' (#7631) (@oikumene)2273183#7595 outdated: fixed wanted range for alias with version range (#7595) (@milaninfy)15be6dd#7574 don't try parsing workspaces if none exist (@wraithgar)
Documentation
ac937d4#7616 install: add save-peer flag (#7616) (@drew4237)55639ef#7615 use git+https in package.com url examples (#7615) (@MikeMcC399)93883bb#7582 Improve manpage section forpackage.jsonfundingproperties (#7582) (@kemitchell)92e71e6#7576 fix links to community discussions (#7576) (@leobalter)
Dependencies
1c1adae#7636[email protected]5e4fa18#7636[email protected]d8fa116#7636[email protected]76dab91#7636[email protected]094c4ea#7636[email protected]1c8d41d#7636@npmcli/[email protected]e5451e1#7605[email protected]7b584d3#7605[email protected]941d0d7#7605[email protected]8b8ce7a#7605[email protected]4646768#7605[email protected]6f0d7ce#7605@npmcli/[email protected]29204c8#7605@npmcli/[email protected]04d6910#7574@npmcli/[email protected]4ef4830#7574 remove read-package-json-fast
List of commits
360585a (Update dependency npm to v10.8.2, 2024-07-10)
v18.0.5
Update dependency node to v22.4.1
Notable changes
- CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
- CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
- CVE-2024-22018 - fs.lstat bypasses permission model (Low)
- CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
- CVE-2024-37372 - Permission model improperly processes UNC paths (Low)
- [
110902ff5e] - lib,esm: handle bypass network-import via data: (RafaelGSS) nodejs-private/node-private#522 - [
0a0de3d491] - lib,permission: support fs.lstat (RafaelGSS) - [
93574335ff] - lib,permission: disable fchmod/fchown when pm enabled (RafaelGSS) nodejs-private/node-private#584 - [
09899e6302] - src: handle permissive extension on cmd check (RafaelGSS) nodejs-private/node-private#596 - [
5d9c811634] - src,permission: fix UNC path resolution (RafaelGSS) nodejs-private/node-private#581
nodejs/node (node)
v22.4.1: 2024-07-08, Version 22.4.1 (Current), @RafaelGSS
This is a security release.
Notable Changes
- CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
- CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
- CVE-2024-22018 - fs.lstat bypasses permission model (Low)
- CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
- CVE-2024-37372 - Permission model improperly processes UNC paths (Low)
Commits
- [
110902ff5e] - lib,esm: handle bypass network-import via data: (RafaelGSS) nodejs-private/node-private#522 - [
0a0de3d491] - lib,permission: support fs.lstat (RafaelGSS) - [
93574335ff] - lib,permission: disable fchmod/fchown when pm enabled (RafaelGSS) nodejs-private/node-private#584 - [
09899e6302] - src: handle permissive extension on cmd check (RafaelGSS) nodejs-private/node-private#596 - [
5d9c811634] - src,permission: fix UNC path resolution (RafaelGSS) nodejs-private/node-private#581
List of commits
2391aba (Update dependency node to v22.4.1, 2024-07-08)
v18.0.4
Update dependency node to v22.4.0
Notable changes
- [
9e30724b53] - (SEMVER-MINOR) deps,lib,src: add experimental web storage (Colin Ihrig) #52435 - [
201266706b] - doc: movenode --runstability to rc (Yagiz Nizipli) #53433 - [
16c0884d48] - doc: mark WebSocket as stable (Matthew Aitken) #53352 - [
cf375e73c1] - doc: mark --heap-prof and related flags stable (Joyee Cheung) #53343 - [
0160745057] - doc: mark --cpu-prof and related flags stable (Joyee Cheung) #53343 - [
df4762722c] - doc: doc-only deprecate OpenSSL engine-based APIs (Richard Lau) #53329 - [
ad5282e196] - inspector: fix disable async hooks onDebugger.setAsyncCallStackDepth(Joyee Cheung) #53473 - [
e95af740fc] - (SEMVER-MINOR) lib: add diagnostics_channel events to module loading (RafaelGSS) #44340 - [
50733a1abe] - (SEMVER-MINOR) util: support--no-for argument with boolean type for parseArgs (Zhenwei Jin) #53107 - [
9f32002397] - assert,util: correct comparison when both contain same reference (Daniel Lemire) #53431 - [
dfdc062111] - buffer: make indexOf(byte) faster (Tobias Nießen) #53455 - [
1de437527e] - build: configure with shared sqlite3 (Chengzhong Wu) #53519 - [
c7d44ba1f3] - build: find version of Clang installed on Windows (Stefan Stojanovic) #53228 - [
36aad8b204] - build: fix spacing before NINJA_ARGS (jakecastelli) #53181 - [
82092cdaa3] - crypto: improve GetECGroupBits signature (Tobias Nießen) #53364 - [
073c231607] - deps: update c-ares to v1.31.0 (Node.js GitHub Bot) #53554 - [
977beab729] - (SEMVER-MINOR) deps: sqlite: fix Windows compilation (Colin Ihrig) #52435 - [
e69b8d202c] - deps: update undici to 6.19.2 (Node.js GitHub Bot) #53468 - [
c4a7e051c8] - deps: update undici to 6.19.1 (Node.js GitHub Bot) #53468 - [
fa34f8fcf0] - deps: update undici to 6.19.1 (Node.js GitHub Bot) #53468 - [
0b40bfad43] - deps: update undici to 6.19.0 (Node.js GitHub Bot) #53468 - [
1877f22a79] - deps: update simdjson to 3.9.4 (Node.js GitHub Bot) #53467 - [
1b84964b8d] - deps: patch V8 to 12.4.254.21 (Node.js GitHub Bot) #53470 - [
6acadeb59b] - deps: update acorn-walk to 8.3.3 (Node.js GitHub Bot) #53466 - [
7a7f438841] - deps: update zlib to 1.3.0.1-motley-209717d (Node.js GitHub Bot) #53156 - [
bf891bf64c] - deps: update c-ares to v1.30.0 (Node.js GitHub Bot) #53416 - [
bd68888261] - deps: V8: cherry-picka3cc852(kxxt) #53412 - [
2defaaf771] - deps: V8: cherry-pick6ea594f(kxxt) #53412 - [
608cc05de1] - doc: recommend not using libuv node-api function (Michael Dawson) #53521 - [
30858eca59] - doc: add additional guidance for PRs to deps (Michael Dawson) #53499 - [
a5852cc710] - doc: only apply content-visibility on all.html (Filip Skokan) #53510 - [
befabe5c58] - doc: update the description of the return type for options.filter (Zhenwei Jin) #52742 - [
5ed1a036ba] - doc: remove first timer badge (Aviv Keller) #53338 - [
46a7681cc4] - doc: add Buffer.from(string) to functions that use buffer pool (Christian Bates-White) #52801 - [
ec5364f6de] - doc: add initial text for ambassadors program (Michael Dawson) #52857 - [
fa113b8fc7] - doc: fix typo (EhsanKhaki) #53397 - [
d9182d0086] - doc: define more cases for stream event emissions (Aviv Keller) #53317 - [
923d24b6f2] - doc: remove mentions of policy model from security info (Aviv Keller) #53249 - [
48f78cd31b] - doc: fix mistakes in the moduleloadhook api (István Donkó) #53349 - [
6e12d9f049] - doc: remove IRC from man page (Tobias Nießen) #53344 - [
24c7a9415b] - doc, http: addrejectNonStandardBodyWritesoption, clear its behaviour (jakecastelli) #53396 - [
ec38f3dc6a] - doc, meta: organize contributing to Node-API guide (Aviv Keller) #53243 - [
cf5a973c42] - doc, meta: use markdown rather than HTML in CONTRIBUTING.md (Aviv Keller) #53235 - [
105b006fd2] - fs: moveToNamespacedPathto c++ (Yagiz Nizipli) #52135 - [
568377f7f0] - fs: do not crash if the watched file is removed while setting up watch (Matteo Collina) #53452 - [
fad179307c] - fs: add fast api forInternalModuleStat(Yagiz Nizipli) #51344 - [
41100b65f6] - http2: reject failed http2.connect when used with promisify (ehsankhfr) #53475 - [
ad5282e196] - inspector: fix disable async hooks on Debugger.setAsyncCallStackDepth (Joyee Cheung) #53473 - [[
b5fc227344](https://togithub.com/nodejs/node/commit/b5f...
v18.0.3
4d7156b (Empty commit to rebuild open-balena-base to fix CVE-2024-6387., 2024-07-01)