node-aix-ppc64 21.7.0 → 21.7.2

package/CHANGELOG.md

@@ -8,6 +8,8 @@
 </tr>
 <tr>
 <td>
+<a href="#21.7.2">21.7.2</a><br/>
+<a href="#21.7.1">21.7.1</a><br/>
 <a href="#21.7.0">21.7.0</a><br/>
 <a href="#21.6.2">21.6.2</a><br/>
 <a href="#21.6.1">21.6.1</a><br/>
@@ -45,6 +47,68 @@
   * [io.js](CHANGELOG_IOJS.md)
   * [Archive](CHANGELOG_ARCHIVE.md)
 
+<a id="21.7.2"></a>
+
+## 2024-04-03, Version 21.7.2 (Current), @RafaelGSS prepared by @marco-ippolito
+
+This is a security release.
+
+### Notable changes
+
+* CVE-2024-27983 - Assertion failed in node::http2::Http2Session::\~Http2Session() leads to HTTP/2 server crash- (High)
+* CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation- (Medium)
+* llhttp version 9.2.1
+* undici version 6.11.1
+
+### Commits
+
+* \[[`3dfc10c851`](https://github.com/nodejs/node/commit/3dfc10c851)] - **deps**: update undici to 6.11.1 (Node.js GitHub Bot) [#52328](https://github.com/nodejs/node/pull/52328)
+* \[[`aceea1c5e7`](https://github.com/nodejs/node/commit/aceea1c5e7)] - **deps**: update undici to 6.10.2 (Node.js GitHub Bot) [#52227](https://github.com/nodejs/node/pull/52227)
+* \[[`5f0f96b275`](https://github.com/nodejs/node/commit/5f0f96b275)] - **deps**: update llhttp to 9.2.0 (Node.js GitHub Bot) [#51719](https://github.com/nodejs/node/pull/51719)
+* \[[`1a65e98e22`](https://github.com/nodejs/node/commit/1a65e98e22)] - **http**: do not allow OBS fold in headers by default (Paolo Insogna) [nodejs-private/node-private#556](https://github.com/nodejs-private/node-private/pull/556)
+* \[[`3bd39fb474`](https://github.com/nodejs/node/commit/3bd39fb474)] - **src**: ensure to close stream when destroying session (RafaelGSS) [nodejs-private/node-private#561](https://github.com/nodejs-private/node-private/pull/561)
+
+<a id="21.7.1"></a>
+
+## 2024-03-08, Version 21.7.1 (Current), @targos
+
+### Notable Changes
+
+This release reverts [#51389](https://github.com/nodejs/node/pull/51389), which
+landed in Node.js 21.7.0. It is a documented feature that `t.after()` hooks are
+run even if a test has no subtests. The hook can be used to clean up the test
+itself.
+
+### Commits
+
+* \[[`0dfe810ac7`](https://github.com/nodejs/node/commit/0dfe810ac7)] - **benchmark**: update iterations of benchmark/async\_hooks/async-local- (Lei Shi) [#51420](https://github.com/nodejs/node/pull/51420)
+* \[[`625c9e0ac9`](https://github.com/nodejs/node/commit/625c9e0ac9)] - **benchmark**: update iterations of benchmark/domain/domain-fn-args.js (Lei Shi) [#51408](https://github.com/nodejs/node/pull/51408)
+* \[[`7ff3551bad`](https://github.com/nodejs/node/commit/7ff3551bad)] - **build**: fix arm64 host cross-compilation in GN (Cheng Zhao) [#51903](https://github.com/nodejs/node/pull/51903)
+* \[[`fd86ea8b71`](https://github.com/nodejs/node/commit/fd86ea8b71)] - _**Revert**_ "**build**: workaround for node-core-utils" (Richard Lau) [#51975](https://github.com/nodejs/node/pull/51975)
+* \[[`23c32ab3a7`](https://github.com/nodejs/node/commit/23c32ab3a7)] - **build**: respect the `NODE` env variable in `Makefile` (Antoine du Hamel) [#51743](https://github.com/nodejs/node/pull/51743)
+* \[[`9617adc064`](https://github.com/nodejs/node/commit/9617adc064)] - _**Revert**_ "**build**: fix warning in cares under GN build" (Luigi Pinca) [#51865](https://github.com/nodejs/node/pull/51865)
+* \[[`5864534095`](https://github.com/nodejs/node/commit/5864534095)] - **deps**: update nghttp2 to 1.60.0 (Node.js GitHub Bot) [#51948](https://github.com/nodejs/node/pull/51948)
+* \[[`fcf235d623`](https://github.com/nodejs/node/commit/fcf235d623)] - **doc**: add policy for distribution (Geoffrey Booth) [#51918](https://github.com/nodejs/node/pull/51918)
+* \[[`87d2acc8b1`](https://github.com/nodejs/node/commit/87d2acc8b1)] - **doc**: fix actual result of example is different in events (Deokjin Kim) [#51925](https://github.com/nodejs/node/pull/51925)
+* \[[`5908c121c6`](https://github.com/nodejs/node/commit/5908c121c6)] - **doc**: clarify Corepack threat model (Antoine du Hamel) [#51917](https://github.com/nodejs/node/pull/51917)
+* \[[`20e0ba3b94`](https://github.com/nodejs/node/commit/20e0ba3b94)] - **doc,module**: clarify hook chain execution sequence (Jacob Smith) [#51884](https://github.com/nodejs/node/pull/51884)
+* \[[`4d997971ac`](https://github.com/nodejs/node/commit/4d997971ac)] - **lib**: make sure close net server (theanarkh) [#51929](https://github.com/nodejs/node/pull/51929)
+* \[[`fcc6d54aa3`](https://github.com/nodejs/node/commit/fcc6d54aa3)] - **lib**: return directly if udp socket close before lookup (theanarkh) [#51914](https://github.com/nodejs/node/pull/51914)
+* \[[`10aaabd158`](https://github.com/nodejs/node/commit/10aaabd158)] - **meta**: bump github/codeql-action from 3.23.2 to 3.24.6 (dependabot\[bot]) [#51942](https://github.com/nodejs/node/pull/51942)
+* \[[`78f38a0143`](https://github.com/nodejs/node/commit/78f38a0143)] - **meta**: bump actions/upload-artifact from 4.3.0 to 4.3.1 (dependabot\[bot]) [#51941](https://github.com/nodejs/node/pull/51941)
+* \[[`42ca5452c4`](https://github.com/nodejs/node/commit/42ca5452c4)] - **meta**: bump codecov/codecov-action from 4.0.1 to 4.1.0 (dependabot\[bot]) [#51940](https://github.com/nodejs/node/pull/51940)
+* \[[`015a157375`](https://github.com/nodejs/node/commit/015a157375)] - **meta**: bump actions/cache from 4.0.0 to 4.0.1 (dependabot\[bot]) [#51939](https://github.com/nodejs/node/pull/51939)
+* \[[`e476cb4a32`](https://github.com/nodejs/node/commit/e476cb4a32)] - **meta**: bump actions/download-artifact from 4.1.1 to 4.1.3 (dependabot\[bot]) [#51938](https://github.com/nodejs/node/pull/51938)
+* \[[`67e8001790`](https://github.com/nodejs/node/commit/67e8001790)] - **meta**: bump actions/setup-node from 4.0.1 to 4.0.2 (dependabot\[bot]) [#51937](https://github.com/nodejs/node/pull/51937)
+* \[[`50343636e8`](https://github.com/nodejs/node/commit/50343636e8)] - **src**: fix --disable-single-executable-application (Joyee Cheung) [#51808](https://github.com/nodejs/node/pull/51808)
+* \[[`a48c9ca0db`](https://github.com/nodejs/node/commit/a48c9ca0db)] - **stream**: do not defer construction by one microtick (Matteo Collina) [#52005](https://github.com/nodejs/node/pull/52005)
+* \[[`bee3b364f9`](https://github.com/nodejs/node/commit/bee3b364f9)] - **test**: add regression test for test\_runner after hook (Colin Ihrig) [#51998](https://github.com/nodejs/node/pull/51998)
+* \[[`fff7f48f50`](https://github.com/nodejs/node/commit/fff7f48f50)] - **test**: reduce flakiness of `test-runner-output` (Antoine du Hamel) [#51952](https://github.com/nodejs/node/pull/51952)
+* \[[`57ba8f5acb`](https://github.com/nodejs/node/commit/57ba8f5acb)] - **test**: fix flaky http-chunk-extensions-limit test (Ethan Arrowood) [#51943](https://github.com/nodejs/node/pull/51943)
+* \[[`9d2c03990a`](https://github.com/nodejs/node/commit/9d2c03990a)] - **test**: remove flaky designation (Luigi Pinca) [#51736](https://github.com/nodejs/node/pull/51736)
+* \[[`e992af81d3`](https://github.com/nodejs/node/commit/e992af81d3)] - **test**: skip SEA tests when SEA generation fails (Joyee Cheung) [#51887](https://github.com/nodejs/node/pull/51887)
+* \[[`85aa6ca850`](https://github.com/nodejs/node/commit/85aa6ca850)] - _**Revert**_ "**test\_runner**: do not invoke after hook when test is empty" (Colin Ihrig) [#51998](https://github.com/nodejs/node/pull/51998)
+
 <a id="21.7.0"></a>
 
 ## 2024-03-06, Version 21.7.0 (Current), @RafaelGSS prepared by @marco-ippolito
@@ -473,7 +537,7 @@ Node.js 21.6.0 comes with several fixes for the experimental permission model an
 We're adding a new flag `--allow-addons` to enable addon usage when using the Permission Model.
 
 ```console
-$ node --experimental-permission --allow-addons
+node --experimental-permission --allow-addons
 ```
 
 Contributed by Rafael Gonzaga in [#51183](https://github.com/nodejs/node/pull/51183)
@@ -482,7 +546,7 @@ And relative paths are now supported through the `--allow-fs-*` flags.
 Therefore, with this release one can use:
 
 ```console
-$ node --experimental-permission --allow-fs-read=./index.js
+node --experimental-permission --allow-fs-read=./index.js
 ```
 
 To give only read access to the entrypoint of the application.
@@ -494,7 +558,7 @@ Contributed by Rafael Gonzaga and Carlos Espa in [#50758](https://github.com/nod
 We are adding a new flag `--build-snapshot-config` to configure snapshots through a custom JSON configuration file.
 
 ```console
-$ node --build-snapshot-config=/path/to/myconfig.json
+node --build-snapshot-config=/path/to/myconfig.json
 ```
 
 When using this flag, additional script files provided on the command line will

package/include/node/node.exp

@@ -5980,15 +5980,15 @@ _GLOBAL__F__ZN2v88internal6torque5Block13SetInputTypesERKNS1_5StackIPKNS1_4TypeE
 _GLOBAL__F__ZN2v88internal6torque9KytheData21AddConstantDefinitionEPKNS1_5ValueE
 _GLOBAL__F__ZNK2v88internal6torque3cpp8Function22PrintDeclarationHeaderERSoi
 _GLOBAL__F__ZNK2v88internal6torque4Rule9RunActionEPKNS1_4ItemERKNS1_11LexerResultE
-_GLOBAL__I_65535_0_.._deps_v8_src_common_ptr_compr.cc_87E8306D_0x336befb04d4166be
+_GLOBAL__I_65535_0_.._deps_v8_src_common_ptr_compr.cc_87E8306D_0x7ad2cb38b5bbc8b2
 _GLOBAL__I_65535_0_.._deps_v8_src_compiler_int64_lowering.cc_E21CEA7D_0x1ac90f5e4394c074
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0x2db78c2d750af15c
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0x83b97329f83d321
 _GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0xd5582dde01019a40
 _GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_DFF67DD7_0xfc307f2e5da7a714
 _GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0xca19078f607b442e
 _GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_7874F2D3_0x19fe1aa8a1fbc856
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_FE345EE0_0x758ef5ebc5e8f817
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0x789d0ef05d4f3c23
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_FE345EE0_0x191434e6c1d5c8e3
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0x12712529d4ebff30
 _GLOBAL__I_65535_0_.._deps_v8_src_heap_heap_verifier.cc_7874F2D3_0x98e85742896c204e
 _GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0x4c0f84d7016fc70d
 _GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_87E8306D_0xa1e14aa90c304163
@@ -88942,10 +88942,10 @@ llhttp__internal__c_test_flags_3
 llhttp__internal__c_test_flags_4
 llhttp__internal__c_test_lenient_flags
 llhttp__internal__c_test_lenient_flags_1
-llhttp__internal__c_test_lenient_flags_19
 llhttp__internal__c_test_lenient_flags_2
-llhttp__internal__c_test_lenient_flags_21
-llhttp__internal__c_test_lenient_flags_23
+llhttp__internal__c_test_lenient_flags_20
+llhttp__internal__c_test_lenient_flags_22
+llhttp__internal__c_test_lenient_flags_24
 llhttp__internal__c_test_lenient_flags_3
 llhttp__internal__c_test_lenient_flags_4
 llhttp__internal__c_test_lenient_flags_7
@@ -89211,6 +89211,8 @@ nghttp2_check_header_value_rfc9113
 nghttp2_check_method
 nghttp2_check_path
 nghttp2_cpymem
+nghttp2_data_provider_wrap_v1
+nghttp2_data_provider_wrap_v2
 nghttp2_downcase
 nghttp2_enable_strict_preface
 nghttp2_extpri_from_uint8
@@ -89291,8 +89293,10 @@ nghttp2_hd_deflate_get_max_dynamic_table_size
 nghttp2_hd_deflate_get_num_table_entries
 nghttp2_hd_deflate_get_table_entry
 nghttp2_hd_deflate_hd
+nghttp2_hd_deflate_hd2
 nghttp2_hd_deflate_hd_bufs
 nghttp2_hd_deflate_hd_vec
+nghttp2_hd_deflate_hd_vec2
 nghttp2_hd_deflate_init
 nghttp2_hd_deflate_init2
 nghttp2_hd_deflate_new
@@ -89317,6 +89321,7 @@ nghttp2_hd_inflate_get_num_table_entries
 nghttp2_hd_inflate_get_table_entry
 nghttp2_hd_inflate_hd
 nghttp2_hd_inflate_hd2
+nghttp2_hd_inflate_hd3
 nghttp2_hd_inflate_hd_nv
 nghttp2_hd_inflate_init
 nghttp2_hd_inflate_new
@@ -89379,6 +89384,7 @@ nghttp2_outbound_queue_init
 nghttp2_outbound_queue_pop
 nghttp2_outbound_queue_push
 nghttp2_pack_settings_payload
+nghttp2_pack_settings_payload2
 nghttp2_pq_each
 nghttp2_pq_empty
 nghttp2_pq_free
@@ -89426,6 +89432,7 @@ nghttp2_session_callbacks_del
 nghttp2_session_callbacks_new
 nghttp2_session_callbacks_set_before_frame_send_callback
 nghttp2_session_callbacks_set_data_source_read_length_callback
+nghttp2_session_callbacks_set_data_source_read_length_callback2
 nghttp2_session_callbacks_set_error_callback
 nghttp2_session_callbacks_set_error_callback2
 nghttp2_session_callbacks_set_on_begin_frame_callback
@@ -89442,9 +89449,13 @@ nghttp2_session_callbacks_set_on_invalid_header_callback
 nghttp2_session_callbacks_set_on_invalid_header_callback2
 nghttp2_session_callbacks_set_on_stream_close_callback
 nghttp2_session_callbacks_set_pack_extension_callback
+nghttp2_session_callbacks_set_pack_extension_callback2
 nghttp2_session_callbacks_set_recv_callback
+nghttp2_session_callbacks_set_recv_callback2
 nghttp2_session_callbacks_set_select_padding_callback
+nghttp2_session_callbacks_set_select_padding_callback2
 nghttp2_session_callbacks_set_send_callback
+nghttp2_session_callbacks_set_send_callback2
 nghttp2_session_callbacks_set_send_data_callback
 nghttp2_session_callbacks_set_unpack_extension_callback
 nghttp2_session_change_extpri_stream_priority
@@ -89491,7 +89502,9 @@ nghttp2_session_is_my_stream_id
 nghttp2_session_keep_closed_stream
 nghttp2_session_keep_idle_stream
 nghttp2_session_mem_recv
+nghttp2_session_mem_recv2
 nghttp2_session_mem_send
+nghttp2_session_mem_send2
 nghttp2_session_on_altsvc_received
 nghttp2_session_on_data_received
 nghttp2_session_on_goaway_received
@@ -89568,6 +89581,8 @@ nghttp2_stream_update_remote_initial_window_size
 nghttp2_strerror
 nghttp2_submit_altsvc
 nghttp2_submit_data
+nghttp2_submit_data2
+nghttp2_submit_data_shared
 nghttp2_submit_extension
 nghttp2_submit_goaway
 nghttp2_submit_headers
@@ -89577,7 +89592,9 @@ nghttp2_submit_priority
 nghttp2_submit_priority_update
 nghttp2_submit_push_promise
 nghttp2_submit_request
+nghttp2_submit_request2
 nghttp2_submit_response
+nghttp2_submit_response2
 nghttp2_submit_rst_stream
 nghttp2_submit_settings
 nghttp2_submit_shutdown_notice

package/include/node/node_version.h

@@ -24,7 +24,7 @@
 
 #define NODE_MAJOR_VERSION 21
 #define NODE_MINOR_VERSION 7
-#define NODE_PATCH_VERSION 0
+#define NODE_PATCH_VERSION 2
 
 #define NODE_VERSION_IS_LTS 0
 #define NODE_VERSION_LTS_CODENAME ""

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-aix-ppc64",
-  "version": "v21.7.0",
+  "version": "v21.7.2",
   "description": "node",
   "bin": {
     "node": "bin/node"