@node-core/utils 5.9.0 → 5.10.0

package/lib/security_blog.js

@@ -101,7 +101,7 @@ export default class SecurityBlog extends SecurityRelease {
       dependencyUpdates: content.dependencies
     };
 
-    const pathToBlogPosts = path.resolve(nodejsOrgFolder, 'apps/site/pages/en/blog/release');
+    const pathToBlogPosts = path.resolve(nodejsOrgFolder, 'apps/site/pages/en/blog/vulnerability');
     const pathToBannerJson = path.resolve(nodejsOrgFolder, 'apps/site/site.json');
 
     const preReleasePath = path.resolve(pathToBlogPosts, data.slug + '.md');
@@ -250,12 +250,8 @@ export default class SecurityBlog extends SecurityRelease {
     if (Object.keys(dependencyUpdates).length === 0) return '';
     let template = '\nThis security release includes the following dependency' +
       ' updates to address public vulnerabilities:\n';
-    for (const dependencyUpdate of Object.values(dependencyUpdates)) {
-      for (const dependency of dependencyUpdate) {
-        const title = dependency.title.substring(dependency.title.indexOf(':') + ':'.length).trim();
-        template += `- ${title}\
- on ${dependency.affectedVersions.join(', ')}\n`;
-      }
+    for (const [dependency, { versions, affectedVersions }] of Object.entries(dependencyUpdates)) {
+      template += `- ${dependency} (${versions.join(', ')}) on ${affectedVersions.join(', ')}\n`;
     }
     return template;
   }

package/lib/update-v8/constants.js

@@ -41,6 +41,9 @@ const fp16Ignore = `!/third_party/fp16
 const fastFloatReplace = `/third_party/fast_float/src/*
 !/third_party/fast_float/src/include`;
 
+const highwayIgnore = `/third_party/highway/src/*
+!/third_party/highway/src/hwy`;
+
 export const v8Deps = [
   {
     name: 'trace_event',
@@ -115,5 +118,14 @@ export const v8Deps = [
       replace: fastFloatReplace
     },
     since: 130
+  },
+  {
+    name: 'highway',
+    repo: 'third_party/highway/src',
+    gitignore: {
+      match: '/third_party/highway/src',
+      replace: highwayIgnore
+    },
+    since: 134
   }
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node-core/utils",
-  "version": "5.9.0",
+  "version": "5.10.0",
   "description": "Utilities for Node.js core collaborators",
   "type": "module",
   "engines": {
@@ -34,35 +34,35 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@inquirer/prompts": "^6.0.1",
-    "@listr2/prompt-adapter-enquirer": "^2.0.11",
+    "@inquirer/prompts": "^7.2.3",
+    "@listr2/prompt-adapter-enquirer": "^2.0.12",
     "@node-core/caritat": "^1.6.0",
     "@pkgjs/nv": "^0.2.2",
     "branch-diff": "^3.1.1",
-    "chalk": "^5.3.0",
+    "chalk": "^5.4.1",
     "changelog-maker": "^4.3.1",
     "cheerio": "^1.0.0",
     "clipboardy": "^4.0.0",
     "core-validate-commit": "^4.1.0",
     "figures": "^6.1.0",
-    "ghauth": "^6.0.7",
+    "ghauth": "^6.0.10",
     "git-secure-tag": "^2.3.1",
     "js-yaml": "^4.1.0",
-    "listr2": "^8.2.4",
+    "listr2": "^8.2.5",
     "lodash": "^4.17.21",
     "log-symbols": "^7.0.0",
-    "ora": "^8.1.0",
-    "replace-in-file": "^8.2.0",
-    "undici": "^6.19.8",
-    "which": "^4.0.0",
+    "ora": "^8.1.1",
+    "replace-in-file": "^8.3.0",
+    "undici": "^7.2.2",
+    "which": "^5.0.0",
     "yargs": "^17.7.2"
   },
   "devDependencies": {
-    "@reporters/github": "^1.7.1",
-    "c8": "^10.1.2",
+    "@reporters/github": "^1.7.2",
+    "c8": "^10.1.3",
     "eslint": "^8.57.1",
     "eslint-config-standard": "^17.1.0",
-    "eslint-plugin-import": "^2.30.0",
+    "eslint-plugin-import": "^2.31.0",
     "eslint-plugin-n": "^16.6.2",
     "eslint-plugin-promise": "^6.6.0",
     "sinon": "^19.0.2"