@node-core/utils 6.1.0 → 6.2.0

package/components/git/release.js

@@ -4,7 +4,7 @@ import ReleasePreparation from '../../lib/prepare_release.js';
 import ReleasePromotion from '../../lib/promote_release.js';
 import TeamInfo from '../../lib/team_info.js';
 import Request from '../../lib/request.js';
-import { runPromise } from '../../lib/run.js';
+import { forceRunAsync, runPromise } from '../../lib/run.js';
 
 export const command = 'release [prid..]';
 export const describe = 'Manage an in-progress release or start a new one.';
@@ -87,8 +87,8 @@ export function builder(yargs) {
       'Prepare a new security release of Node.js with auto-determined version')
     .example('git node release --prepare --newVersion=1.2.3',
       'Prepare a new release of Node.js tagged v1.2.3')
-    .example('git node release --promote 12345',
-      'Promote a prepared release of Node.js with PR #12345')
+    .example('git node release --promote https://github.com/nodejs/node/pull/12345 https://github.com/nodejs/node/pull/54321',
+      'Promote two prepared releases of Node.js with PR #12345 and #54321')
     .example('git node --prepare --startLTS',
       'Prepare the first LTS release');
 }
@@ -114,7 +114,7 @@ function release(state, argv) {
     cli.setAssumeYes();
   }
 
-  return runPromise(main(state, argv, cli, dir)).catch((err) => {
+  return runPromise(wrapStash(() => main(state, argv, cli, dir))).catch((err) => {
     if (cli.spinner.enabled) {
       cli.spinner.fail();
     }
@@ -122,6 +122,22 @@ function release(state, argv) {
   });
 }
 
+async function wrapStash(fn) {
+  const stashTip = await forceRunAsync('git', ['stash', 'list', '-1', '--format="%gd"'],
+    { ignoreFailure: false, captureStdout: true });
+  await forceRunAsync('git', ['stash', '--include-untracked'], { ignoreFailure: false });
+  const newStashTip = await forceRunAsync('git', ['stash', 'list', '-1', '--format="%gd"'],
+    { ignoreFailure: false, captureStdout: true });
+  const hasStashed = newStashTip !== stashTip && newStashTip.trim();
+  try {
+    await fn();
+  } finally {
+    if (hasStashed) {
+      await forceRunAsync('git', ['stash', 'pop'], { ignoreFailure: false });
+    }
+  }
+}
+
 async function main(state, argv, cli, dir) {
   if (state === PREPARE) {
     const release = new ReleasePreparation(argv, cli, dir);
@@ -182,7 +198,11 @@ async function main(state, argv, cli, dir) {
         console.info(`E.g. --fetch-from=git@github.com:${owner}/${repo}.git`);
         throw new Error('You need to tell what remote use to fetch security release proposal.');
       }
-      releases.push(await release.preparePromotion({ owner, repo, prid: Number(prid) }));
+      releases.push(await release.preparePromotion({
+        owner: owner ?? release.owner,
+        repo: repo ?? release.repo,
+        prid: Number(prid)
+      }));
     }
     return release.promote(releases);
   }

package/components/git/wpt.js

@@ -48,7 +48,9 @@ async function main(argv) {
   let supported = [
     'dom',
     'html',
-    'webcrypto'
+    'webcrypto',
+    'webcrypto-secure-curves',
+    'webcrypto-modern-algos',
   ];
   if (fs.existsSync(statusFolder)) {
     const jsons = fs.readdirSync(statusFolder);

package/lib/auth.js

@@ -12,7 +12,7 @@ function errorExit(message) {
   process.exit(1);
 }
 
-function check(username, token) {
+function check(username, token, format = /^[A-Za-z0-9_]+$/) {
   if (typeof username !== 'string') {
     errorExit(`username must be a string, received ${typeof username}`);
   }
@@ -25,7 +25,7 @@ function check(username, token) {
   if (typeof token !== 'string') {
     errorExit(`token must be a string, received ${typeof token}`);
   }
-  if (!/^[A-Za-z0-9_]+$/.test(token)) {
+  if (!format.test(token)) {
     errorExit(`token is misformatted: ${token}`);
   }
 }
@@ -107,7 +107,7 @@ async function auth(
 
     get h1() {
       const { h1_username, h1_token } = getMergedConfig();
-      check(h1_username, h1_token);
+      check(h1_username, h1_token, /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
       const h1 = encode(h1_username, h1_token);
       setOwnProperty(result, 'h1', h1);
       return h1;

package/lib/pr_checker.js

@@ -128,20 +128,26 @@ export default class PRChecker {
     }
   }
 
-  checkReviewsAndWait(now, checkComments) {
+  checkReviewsAndWait(now, checkComments, isReleaseProposal) {
     const {
       pr, cli, reviewers
     } = this;
     const { requestedChanges, approved } = reviewers;
+
+    const dateStr = new Date(pr.createdAt).toUTCString();
+    cli.info(`This PR was created on ${dateStr}`);
+    this.displayReviews(checkComments);
+
+    if (isReleaseProposal) {
+      cli.info('This PR is a release proposal');
+      return approved.length !== 0;
+    }
+
     const labels = pr.labels.nodes.map((l) => l.name);
 
     let isFastTracked = labels.includes('fast-track');
     const isCodeAndLearn = labels.includes('code-and-learn');
     const isSemverMajor = labels.includes('semver-major');
-
-    const dateStr = new Date(pr.createdAt).toUTCString();
-    cli.info(`This PR was created on ${dateStr}`);
-    this.displayReviews(checkComments);
     // NOTE: a semver-major PR with fast-track should have either one of
     // these labels removed because that doesn't make sense
     if (isFastTracked) {
@@ -359,8 +365,13 @@ export default class PRChecker {
       return false;
     }
 
+    let hasFailures = false;
+    const failedJobs = [];
+    const cancelledJobs = [];
+    const pendingJobs = [];
+
     // GitHub new Check API
-    for (const { status, conclusion, app } of checkSuites.nodes) {
+    for (const { status, conclusion, app, checkRuns } of checkSuites.nodes) {
       if (app.slug !== 'github-actions') {
         // Ignore all non-github check suites, such as Dependabot and Codecov.
         // They are expected to show up on PRs whose head branch is not on a
@@ -369,16 +380,80 @@ export default class PRChecker {
       }
 
       if (status !== 'COMPLETED') {
-        cli.error('GitHub CI is still running');
-        return false;
+        pendingJobs.push({ app: app.slug, status, conclusion });
+        continue;
       }
 
       if (!GITHUB_SUCCESS_CONCLUSIONS.includes(conclusion)) {
-        cli.error('Last GitHub CI failed');
-        return false;
+        hasFailures = true;
+
+        // If we have detailed checkRuns, show specific failing jobs
+        if (checkRuns && checkRuns.nodes && checkRuns.nodes.length > 0) {
+          for (const checkRun of checkRuns.nodes) {
+            if (checkRun.status === 'COMPLETED' &&
+                !GITHUB_SUCCESS_CONCLUSIONS.includes(checkRun.conclusion)) {
+              if (checkRun.conclusion === 'CANCELLED') {
+                cancelledJobs.push({
+                  name: checkRun.name,
+                  conclusion: checkRun.conclusion,
+                  url: checkRun.detailsUrl
+                });
+              } else {
+                failedJobs.push({
+                  name: checkRun.name,
+                  conclusion: checkRun.conclusion,
+                  url: checkRun.detailsUrl
+                });
+              }
+            }
+          }
+        } else {
+          // Fallback to check suite level information if no checkRuns
+          if (conclusion === 'CANCELLED') {
+            cancelledJobs.push({
+              name: app.slug,
+              conclusion,
+              url: null
+            });
+          } else {
+            failedJobs.push({
+              name: app.slug,
+              conclusion,
+              url: null
+            });
+          }
+        }
+      }
+    }
+
+    // Report pending jobs
+    if (pendingJobs.length > 0) {
+      cli.error('GitHub CI is still running');
+      return false;
+    }
+
+    // Report failed jobs
+    if (failedJobs.length > 0) {
+      cli.error(`${failedJobs.length} GitHub CI job(s) failed:`);
+      for (const job of failedJobs) {
+        const urlInfo = job.url ? ` (${job.url})` : '';
+        cli.error(`  - ${job.name}: ${job.conclusion}${urlInfo}`);
+      }
+    }
+
+    // Report cancelled jobs
+    if (cancelledJobs.length > 0) {
+      cli.error(`${cancelledJobs.length} GitHub CI job(s) cancelled:`);
+      for (const job of cancelledJobs) {
+        const urlInfo = job.url ? ` (${job.url})` : '';
+        cli.error(`  - ${job.name}: ${job.conclusion}${urlInfo}`);
       }
     }
 
+    if (hasFailures) {
+      return false;
+    }
+
     // GitHub old commit status API
     if (commit.status) {
       const { state } = commit.status;
@@ -388,7 +463,7 @@ export default class PRChecker {
       }
 
       if (!['SUCCESS', 'EXPECTED'].includes(state)) {
-        cli.error('Last GitHub CI failed');
+        cli.error(`GitHub CI failed with status: ${state}`);
         return false;
       }
     }

package/lib/promote_release.js

@@ -56,18 +56,12 @@ export default class ReleasePromotion extends Session {
       cli.warn('Current HEAD is not the release commit');
       localCloneIsClean = false;
     }
-    try {
-      await forceRunAsync('git', ['--no-pager', 'diff', '--exit-code'], { ignoreFailure: false });
-    } catch {
-      cli.warn('Some local changes have not been committed');
-      localCloneIsClean = false;
-    }
     if (!localCloneIsClean) {
-      if (await cli.prompt('Should we reset the local HEAD to be the release proposal?')) {
+      if (await cli.prompt('Should we checkout the release proposal?')) {
         cli.startSpinner('Fetching the proposal upstream...');
         await forceRunAsync('git', ['fetch', proposalUpstreamRemote, releaseCommitSha],
           { ignoreFailure: false });
-        await forceRunAsync('git', ['reset', releaseCommitSha, '--hard'], { ignoreFailure: false });
+        await forceRunAsync('git', ['checkout', releaseCommitSha], { ignoreFailure: false });
         cli.stopSpinner('Local HEAD is now in sync with the proposal');
       } else {
         cli.error('Local clone is not ready');
@@ -248,7 +242,7 @@ export default class ReleasePromotion extends Session {
     const checker = new PRChecker(cli, data, { prid, owner, repo }, { maxCommits: 0 });
     const jenkinsReady = checker.checkJenkinsCI();
     const githubCIReady = checker.checkGitHubCI();
-    const isApproved = checker.checkReviewsAndWait(new Date(), false);
+    const isApproved = checker.checkReviewsAndWait(new Date(), false, true);
 
     return {
       githubCIReady,

package/lib/queries/PRCommits.gql

@@ -31,7 +31,15 @@ query Commits($prid: Int!, $owner: String!, $repo: String!, $after: String) {
                   slug
                 }
                 conclusion,
-                status
+                status,
+                checkRuns(first: 40) {
+                  nodes {
+                    name
+                    status
+                    conclusion
+                    detailsUrl
+                  }
+                }
               }
             }
             status {

package/lib/update_security_release.js

@@ -141,46 +141,55 @@ export default class UpdateSecurityRelease extends SecurityRelease {
     const vulnerabilitiesJSONPath = this.getVulnerabilitiesJSONPath();
     const content = this.readVulnerabilitiesJSON(vulnerabilitiesJSONPath);
     const { reports } = content;
+    this.validateReportsForCVE(reports);
     const req = new Request(credentials);
     const programId = await this.getNodeProgramId(req);
-    const cves = await this.promptCVECreation(req, reports, programId);
-    this.assignCVEtoReport(cves, reports);
-    this.updateVulnerabilitiesJSON(content);
-    this.updateHackonerReportCve(req, reports);
+    await this.promptCVECreation(req, reports, programId, content);
   }
 
-  assignCVEtoReport(cves, reports) {
-    for (const cve of cves) {
-      const report = reports.find(report => report.id === cve.reportId);
-      report.cveIds = [cve.cve_identifier];
-      report.patchedVersions = cve.patchedVersions;
+  validateReportsForCVE(reports) {
+    const invalid = [];
+    for (const report of reports) {
+      if (report.cveIds?.length) continue;
+      const missing = [];
+      if (!report.summary) missing.push('description');
+      if (!report.severity?.weakness_id) missing.push('weakness_id');
+      if (!report.severity?.cvss_vector_string) missing.push('cvss_vector_string');
+      if (missing.length) {
+        invalid.push({ id: report.id, missing });
+      }
+    }
+    if (invalid.length) {
+      for (const { id, missing } of invalid) {
+        this.cli.error(`Report ${id} is missing: ${missing.join(', ')}`);
+      }
+      throw new Error('Some reports are missing required fields for CVE request. ' +
+        'Run `git node security --sync` to update them.');
     }
   }
 
-  async updateHackonerReportCve(req, reports) {
-    for (const report of reports) {
-      const { id, cveIds } = report;
-      this.cli.startSpinner(`Updating report ${id} with CVEs ${cveIds}..`);
-      const body = {
-        data: {
-          type: 'report-cves',
-          attributes: {
-            cve_ids: cveIds
-          }
+  async updateHackonerReportCve(req, report) {
+    const { id, cveIds } = report;
+    this.cli.startSpinner(`Updating report ${id} with CVEs ${cveIds}..`);
+    const body = {
+      data: {
+        type: 'report-cves',
+        attributes: {
+          cve_ids: cveIds
         }
-      };
-      const response = await req.updateReportCVE(id, body);
-      if (response.errors) {
-        this.cli.error(`Error updating report ${id}`);
-        this.cli.error(JSON.stringify(response.errors, null, 2));
       }
-      this.cli.stopSpinner(`Done updating report ${id} with CVEs ${cveIds}..`);
+    };
+    const response = await req.updateReportCVE(id, body);
+    if (response.errors) {
+      this.cli.error(`Error updating report ${id}`);
+      this.cli.error(JSON.stringify(response.errors, null, 2));
     }
+    this.cli.stopSpinner(`Done updating report ${id} with CVEs ${cveIds}..`);
   }
 
-  async promptCVECreation(req, reports, programId) {
+  async promptCVECreation(req, reports, programId, content) {
     const supportedVersions = (await nv('supported'));
-    const cves = [];
+    const eolVersions = (await nv('eol'));
     for (const report of reports) {
       const { id, summary, title, affectedVersions, cveIds, link } = report;
       // skip if already has a CVE
@@ -222,7 +231,7 @@ Summary: ${summary}\n`,
       if (!create) continue;
 
       const { h1AffectedVersions, patchedVersions } =
-        await this.calculateVersions(affectedVersions, supportedVersions);
+        await this.calculateVersions(affectedVersions, supportedVersions, eolVersions);
       const body = {
         data: {
           type: 'cve-request',
@@ -243,16 +252,18 @@ Summary: ${summary}\n`,
           }
         }
       };
-      const { data } = await req.requestCVE(programId, body);
-      if (data.errors) {
+      const response = await req.requestCVE(programId, body);
+      if (response.errors) {
         this.cli.error(`Error requesting CVE for report ${id}`);
-        this.cli.error(JSON.stringify(data.errors, null, 2));
+        this.cli.error(JSON.stringify(response.errors, null, 2));
         continue;
       }
-      const { cve_identifier } = data.attributes;
-      cves.push({ cve_identifier, reportId: id, patchedVersions });
+      const { cve_identifier } = response.data.attributes;
+      report.cveIds = [cve_identifier];
+      report.patchedVersions = patchedVersions;
+      this.updateVulnerabilitiesJSON(content);
+      await this.updateHackonerReportCve(req, report);
     }
-    return cves;
   }
 
   async getNodeProgramId(req) {
@@ -266,7 +277,7 @@ Summary: ${summary}\n`,
     }
   }
 
-  async calculateVersions(affectedVersions, supportedVersions) {
+  async calculateVersions(affectedVersions, supportedVersions, eolVersions) {
     const h1AffectedVersions = [];
     const patchedVersions = [];
     let isPatchRelease = true;
@@ -300,6 +311,22 @@ Summary: ${summary}\n`,
         affected: true
       });
     }
+
+    // All EOL versions are affected since they no longer receive security patches
+    for (const eolVersion of eolVersions) {
+      const version = semver.valid(eolVersion.version);
+      if (version) {
+        h1AffectedVersions.push({
+          vendor: 'nodejs',
+          product: 'node',
+          func: '<=',
+          version,
+          versionType: 'semver',
+          affected: true
+        });
+      }
+    }
+
     return { h1AffectedVersions, patchedVersions };
   }
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@node-core/utils",
-  "version": "6.1.0",
+  "version": "6.2.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@node-core/utils",
-      "version": "6.1.0",
+      "version": "6.2.0",
       "license": "MIT",
       "dependencies": {
         "@inquirer/prompts": "^7.4.1",
@@ -17,7 +17,7 @@
         "chalk": "^5.4.1",
         "changelog-maker": "^4.4.1",
         "cheerio": "^1.0.0",
-        "clipboardy": "^4.0.0",
+        "clipboardy": "^5.0.2",
         "core-validate-commit": "^4.1.0",
         "figures": "^6.1.0",
         "ghauth": "^6.0.12",
@@ -296,9 +296,9 @@
       }
     },
     "node_modules/@eslint/js": {
-      "version": "9.39.1",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.39.1.tgz",
-      "integrity": "sha512-S26Stp4zCy88tH94QbBv3XCuzRQiZ9yXofEILmglYTh/Ug/a9/umqvgFtYBAo3Lp0nsI/5/qH1CCrbdK3AP1Tw==",
+      "version": "9.39.2",
+      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.39.2.tgz",
+      "integrity": "sha512-q1mjIoW1VX4IvSocvM/vbTiveKC4k9eLrajNEuSsmjymSDEbpGddtpfOoN7YGAqBK3NG+uqo8ia4PDTt8buCYA==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -1209,6 +1209,12 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@sec-ant/readable-stream": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/@sec-ant/readable-stream/-/readable-stream-0.4.1.tgz",
+      "integrity": "sha512-831qok9r2t8AlxLko40y2ebgSDhenenCatLVeW/uBtnHPyhHOvG0C7TvfgecV+wHzIm5KUICgzmVpWS+IMEAeg==",
+      "license": "MIT"
+    },
     "node_modules/@sindresorhus/is": {
       "version": "4.6.0",
       "resolved": "https://registry.npmjs.org/@sindresorhus/is/-/is-4.6.0.tgz",
@@ -1221,6 +1227,18 @@
         "url": "https://github.com/sindresorhus/is?sponsor=1"
       }
     },
+    "node_modules/@sindresorhus/merge-streams": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@sindresorhus/merge-streams/-/merge-streams-4.0.0.tgz",
+      "integrity": "sha512-tlqY9xq5ukxTUZBmoOp+m61cqwQD5pHJtFY3Mn8CA8ps6yghLH/Hw8UPdqg4OLmFW3IFlcXnQNmo/dh8HzXYIQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/@sinonjs/commons": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/@sinonjs/commons/-/commons-3.0.1.tgz",
@@ -2867,17 +2885,18 @@
       }
     },
     "node_modules/clipboardy": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/clipboardy/-/clipboardy-4.0.0.tgz",
-      "integrity": "sha512-5mOlNS0mhX0707P2I0aZ2V/cmHUEO/fL7VFLqszkhUsxt7RwnmrInf/eEQKlf5GzvYeHIjT+Ov1HRfNmymlG0w==",
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/clipboardy/-/clipboardy-5.0.2.tgz",
+      "integrity": "sha512-3IG8i8Yfb410yqDlCx9Ve3lYLFN3bD1IkrWcowT1kyTo6y4bwYf2guK9Q8a6zck5vWm7afm6Y61i7BG/Ir3FMA==",
       "license": "MIT",
       "dependencies": {
-        "execa": "^8.0.1",
+        "execa": "^9.6.0",
+        "is-wayland": "^0.1.0",
         "is-wsl": "^3.1.0",
         "is64bit": "^2.0.0"
       },
       "engines": {
-        "node": ">=18"
+        "node": ">=20"
       },
       "funding": {
         "url": "https://github.com/sponsors/sindresorhus"
@@ -3757,9 +3776,9 @@
       }
     },
     "node_modules/eslint": {
-      "version": "9.39.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.39.0.tgz",
-      "integrity": "sha512-iy2GE3MHrYTL5lrCtMZ0X1KLEKKUjmK0kzwcnefhR66txcEmXZD2YWgR5GNdcEwkNx3a0siYkSvl0vIC+Svjmg==",
+      "version": "9.39.2",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.39.2.tgz",
+      "integrity": "sha512-LEyamqS7W5HB3ujJyvi0HQK/dtVINZvd5mAAp9eT5S/ujByGjiZLCzPcHVzuXbpJDJF/cxwHlfceVUDZ2lnSTw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -3769,7 +3788,7 @@
         "@eslint/config-helpers": "^0.4.2",
         "@eslint/core": "^0.17.0",
         "@eslint/eslintrc": "^3.3.1",
-        "@eslint/js": "9.39.0",
+        "@eslint/js": "9.39.2",
         "@eslint/plugin-kit": "^0.4.1",
         "@humanfs/node": "^0.16.6",
         "@humanwhocodes/module-importer": "^1.0.1",
@@ -4222,19 +4241,6 @@
         "url": "https://opencollective.com/eslint"
       }
     },
-    "node_modules/eslint/node_modules/@eslint/js": {
-      "version": "9.39.0",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.39.0.tgz",
-      "integrity": "sha512-BIhe0sW91JGPiaF1mOuPy5v8NflqfjIcDNpC+LbW9f609WVRX1rArrhi6Z2ymvrAry9jw+5POTj4t2t62o8Bmw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "url": "https://eslint.org/donate"
-      }
-    },
     "node_modules/eslint/node_modules/ansi-styles": {
       "version": "4.3.0",
       "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
@@ -4339,23 +4345,26 @@
       "license": "MIT"
     },
     "node_modules/execa": {
-      "version": "8.0.1",
-      "resolved": "https://registry.npmjs.org/execa/-/execa-8.0.1.tgz",
-      "integrity": "sha512-VyhnebXciFV2DESc+p6B+y0LjSm0krU4OgJN44qFAhBY0TJ+1V61tYD2+wHusZ6F9n5K+vl8k0sTy7PEfV4qpg==",
+      "version": "9.6.1",
+      "resolved": "https://registry.npmjs.org/execa/-/execa-9.6.1.tgz",
+      "integrity": "sha512-9Be3ZoN4LmYR90tUoVu2te2BsbzHfhJyfEiAVfz7N5/zv+jduIfLrV2xdQXOHbaD6KgpGdO9PRPM1Y4Q9QkPkA==",
       "license": "MIT",
       "dependencies": {
-        "cross-spawn": "^7.0.3",
-        "get-stream": "^8.0.1",
-        "human-signals": "^5.0.0",
-        "is-stream": "^3.0.0",
-        "merge-stream": "^2.0.0",
-        "npm-run-path": "^5.1.0",
-        "onetime": "^6.0.0",
+        "@sindresorhus/merge-streams": "^4.0.0",
+        "cross-spawn": "^7.0.6",
+        "figures": "^6.1.0",
+        "get-stream": "^9.0.0",
+        "human-signals": "^8.0.1",
+        "is-plain-obj": "^4.1.0",
+        "is-stream": "^4.0.1",
+        "npm-run-path": "^6.0.0",
+        "pretty-ms": "^9.2.0",
         "signal-exit": "^4.1.0",
-        "strip-final-newline": "^3.0.0"
+        "strip-final-newline": "^4.0.0",
+        "yoctocolors": "^2.1.1"
       },
       "engines": {
-        "node": ">=16.17"
+        "node": "^18.19.0 || >=20.5.0"
       },
       "funding": {
         "url": "https://github.com/sindresorhus/execa?sponsor=1"
@@ -4640,12 +4649,16 @@
       }
     },
     "node_modules/get-stream": {
-      "version": "8.0.1",
-      "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-8.0.1.tgz",
-      "integrity": "sha512-VaUJspBffn/LMCJVoMvSAdmscJyS1auj5Zulnn5UoYcY531UWmdwhRWkcGKnGU93m5HSXP9LP2usOryrBtQowA==",
+      "version": "9.0.1",
+      "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-9.0.1.tgz",
+      "integrity": "sha512-kVCxPF3vQM/N0B1PmoqVUqgHP+EeVjmZSQn+1oCRPxd2P21P2F19lIgbR3HBosbB1PUhOAoctJnfEn2GbN2eZA==",
       "license": "MIT",
+      "dependencies": {
+        "@sec-ant/readable-stream": "^0.4.1",
+        "is-stream": "^4.0.1"
+      },
       "engines": {
-        "node": ">=16"
+        "node": ">=18"
       },
       "funding": {
         "url": "https://github.com/sponsors/sindresorhus"
@@ -4683,9 +4696,9 @@
       }
     },
     "node_modules/ghauth": {
-      "version": "6.0.13",
-      "resolved": "https://registry.npmjs.org/ghauth/-/ghauth-6.0.13.tgz",
-      "integrity": "sha512-wdeDPCl3RBSoYEhZ4J/PXK7/b1xYQj1zKgWx9QyUEo0ZGvwFiwe8HWMkpbtuDgo6kwaRUYw7izV7LtO233J5iw==",
+      "version": "6.0.19",
+      "resolved": "https://registry.npmjs.org/ghauth/-/ghauth-6.0.19.tgz",
+      "integrity": "sha512-eiZtW8EyJjk++Gs8vdY1/gJccbaPl3cH40z9VikfvBou5dkI4L/m9bbauLiGnQ6SdYhu0wT4DlDuoRpUMwbyIg==",
       "license": "MIT",
       "dependencies": {
         "application-config": "^2.0.0",
@@ -5397,12 +5410,12 @@
       }
     },
     "node_modules/human-signals": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/human-signals/-/human-signals-5.0.0.tgz",
-      "integrity": "sha512-AXcZb6vzzrFAUE61HnN4mpLqd/cSIwNQjtNWR0euPm6y0iqx3G4gOXaIDdtdDwZmhwe82LA6+zinmW4UBWVePQ==",
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/human-signals/-/human-signals-8.0.1.tgz",
+      "integrity": "sha512-eKCa6bwnJhvxj14kZk5NCPc6Hb6BdsU9DZcOnmQKSnO1VKrfV0zCvtttPZUsBvjmNDn8rpcJfpwSYnHBjc95MQ==",
       "license": "Apache-2.0",
       "engines": {
-        "node": ">=16.17.0"
+        "node": ">=18.18.0"
       }
     },
     "node_modules/hyperquest": {
@@ -5997,12 +6010,12 @@
       }
     },
     "node_modules/is-stream": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-3.0.0.tgz",
-      "integrity": "sha512-LnQR4bZ9IADDRSkvpqMGvt/tEJWclzklNgSw48V5EAaAeDd6qGvN8ei6k5p0tvxSR171VmGyHuTiAOfxAbr8kA==",
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-4.0.1.tgz",
+      "integrity": "sha512-Dnz92NInDqYckGEUJv689RbRiTSEHCQ7wOVeALbkOz999YpqT46yMRIGtSNl2iCL1waAZSx40+h59NV/EwzV/A==",
       "license": "MIT",
       "engines": {
-        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+        "node": ">=18"
       },
       "funding": {
         "url": "https://github.com/sponsors/sindresorhus"
@@ -6083,6 +6096,18 @@
       "integrity": "sha512-rMYPYvCzsXywIsldgLaSoPlw5PfoB/ssr7hY4pLfcodrA5M/eArza1a9VmTiNIBNMjOGr1Ow9mTyU2o69U6U9Q==",
       "license": "MIT"
     },
+    "node_modules/is-wayland": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/is-wayland/-/is-wayland-0.1.0.tgz",
+      "integrity": "sha512-QkbMsWkIfkrzOPxenwye0h56iAXirZYHG9eHVPb22fO9y+wPbaX/CHacOWBa/I++4ohTcByimhM1/nyCsH8KNA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/is-weakmap": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/is-weakmap/-/is-weakmap-2.0.2.tgz",
@@ -6957,12 +6982,6 @@
         "url": "https://opencollective.com/unified"
       }
     },
-    "node_modules/merge-stream": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz",
-      "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==",
-      "license": "MIT"
-    },
     "node_modules/merge2": {
       "version": "1.4.1",
       "resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz",
@@ -7550,18 +7569,6 @@
         "node": ">=8.6"
       }
     },
-    "node_modules/mimic-fn": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-4.0.0.tgz",
-      "integrity": "sha512-vqiC06CuhBTUdZH+RYl8sFrL096vA45Ok5ISO6sE/Mr1jRbGH4Csnhi8f3wKVl7x8mO4Au7Ir9D3Oyv1VYMFJw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/mimic-function": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/mimic-function/-/mimic-function-5.0.1.tgz",
@@ -7743,15 +7750,16 @@
       }
     },
     "node_modules/npm-run-path": {
-      "version": "5.3.0",
-      "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-5.3.0.tgz",
-      "integrity": "sha512-ppwTtiJZq0O/ai0z7yfudtBpWIoxM8yE6nHi1X47eFR2EWORqfbu6CnPlNsjeN683eT0qG6H/Pyf9fCcvjnnnQ==",
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-6.0.0.tgz",
+      "integrity": "sha512-9qny7Z9DsQU8Ou39ERsPU4OZQlSTP47ShQzuKZ6PRXpYLtIFgl/DEBYEXKlvcEa+9tHVcK8CF81Y2V72qaZhWA==",
       "license": "MIT",
       "dependencies": {
-        "path-key": "^4.0.0"
+        "path-key": "^4.0.0",
+        "unicorn-magic": "^0.3.0"
       },
       "engines": {
-        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+        "node": ">=18"
       },
       "funding": {
         "url": "https://github.com/sponsors/sindresorhus"
@@ -7922,21 +7930,6 @@
         "wrappy": "1"
       }
     },
-    "node_modules/onetime": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/onetime/-/onetime-6.0.0.tgz",
-      "integrity": "sha512-1FlR+gjXK7X+AsAHso35MnyN5KqGwJRi/31ft6x0M194ht7S+rWAvd7PHss9xSKMzE0asv1pyIHaJYq+BbacAQ==",
-      "license": "MIT",
-      "dependencies": {
-        "mimic-fn": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/optionator": {
       "version": "0.9.4",
       "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz",
@@ -8139,6 +8132,18 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/parse-ms": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/parse-ms/-/parse-ms-4.0.0.tgz",
+      "integrity": "sha512-TXfryirbmq34y8QBwgqCVLi+8oA3oWx2eAnSn62ITyEhEYaWRlVZ2DvMM9eZbMs/RfxPu/PK/aBLyGj4IrqMHw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/parse5": {
       "version": "7.3.0",
       "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.3.0.tgz",
@@ -8337,6 +8342,21 @@
         "node": ">= 0.8.0"
       }
     },
+    "node_modules/pretty-ms": {
+      "version": "9.3.0",
+      "resolved": "https://registry.npmjs.org/pretty-ms/-/pretty-ms-9.3.0.tgz",
+      "integrity": "sha512-gjVS5hOP+M3wMm5nmNOucbIrqudzs9v/57bWRHQWLYklXqoXKrVfYW2W9+glfGsqtPgpiz5WwyEEB+ksXIx3gQ==",
+      "license": "MIT",
+      "dependencies": {
+        "parse-ms": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/prop-types": {
       "version": "15.8.1",
       "resolved": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz",
@@ -9898,9 +9918,9 @@
       "license": "MIT"
     },
     "node_modules/semver": {
-      "version": "7.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
-      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "version": "7.7.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
+      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"
@@ -10483,12 +10503,12 @@
       }
     },
     "node_modules/strip-final-newline": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-3.0.0.tgz",
-      "integrity": "sha512-dOESqjYr96iWYylGObzd39EuNTa5VJxyvVAEm5Jnh7KGo75V43Hk1odPQkNDyXNmUR6k+gEiDVXnjB8HJ3crXw==",
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-4.0.0.tgz",
+      "integrity": "sha512-aulFJcD6YK8V1G7iRB5tigAP4TsHBZZrOV8pjV++zdUwmeV8uzbY7yn6h9MswN62adStNZFuCIx4haBnRuMDaw==",
       "license": "MIT",
       "engines": {
-        "node": ">=12"
+        "node": ">=18"
       },
       "funding": {
         "url": "https://github.com/sponsors/sindresorhus"
@@ -10944,6 +10964,18 @@
       "integrity": "sha512-9UJ2xGDvQ43tYyVMpuHlsgApydB8ZKfVYTsLDhXkFL/6gfkp+U8xTGdh8pMJv1SpZna0zxG1DwsKZsreLbXBxw==",
       "license": "MIT"
     },
+    "node_modules/unicorn-magic": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/unicorn-magic/-/unicorn-magic-0.3.0.tgz",
+      "integrity": "sha512-+QBBXBCvifc56fsbuxZQ6Sic3wqqc3WWaqxs58gvJrcOuN83HGTCwz3oS5phzU9LthRNE9VrJCFCLUgHeeFnfA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/unified": {
       "version": "11.0.5",
       "resolved": "https://registry.npmjs.org/unified/-/unified-11.0.5.tgz",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node-core/utils",
-  "version": "6.1.0",
+  "version": "6.2.0",
   "description": "Utilities for Node.js core collaborators",
   "type": "module",
   "engines": {
@@ -43,7 +43,7 @@
     "chalk": "^5.4.1",
     "changelog-maker": "^4.4.1",
     "cheerio": "^1.0.0",
-    "clipboardy": "^4.0.0",
+    "clipboardy": "^5.0.2",
     "core-validate-commit": "^4.1.0",
     "figures": "^6.1.0",
     "ghauth": "^6.0.12",