node-linux-arm64 21.7.0 → 21.7.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +67 -3
- package/bin/node +0 -0
- package/include/node/node_version.h +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -8,6 +8,8 @@
|
|
|
8
8
|
</tr>
|
|
9
9
|
<tr>
|
|
10
10
|
<td>
|
|
11
|
+
<a href="#21.7.2">21.7.2</a><br/>
|
|
12
|
+
<a href="#21.7.1">21.7.1</a><br/>
|
|
11
13
|
<a href="#21.7.0">21.7.0</a><br/>
|
|
12
14
|
<a href="#21.6.2">21.6.2</a><br/>
|
|
13
15
|
<a href="#21.6.1">21.6.1</a><br/>
|
|
@@ -45,6 +47,68 @@
|
|
|
45
47
|
* [io.js](CHANGELOG_IOJS.md)
|
|
46
48
|
* [Archive](CHANGELOG_ARCHIVE.md)
|
|
47
49
|
|
|
50
|
+
<a id="21.7.2"></a>
|
|
51
|
+
|
|
52
|
+
## 2024-04-03, Version 21.7.2 (Current), @RafaelGSS prepared by @marco-ippolito
|
|
53
|
+
|
|
54
|
+
This is a security release.
|
|
55
|
+
|
|
56
|
+
### Notable changes
|
|
57
|
+
|
|
58
|
+
* CVE-2024-27983 - Assertion failed in node::http2::Http2Session::\~Http2Session() leads to HTTP/2 server crash- (High)
|
|
59
|
+
* CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation- (Medium)
|
|
60
|
+
* llhttp version 9.2.1
|
|
61
|
+
* undici version 6.11.1
|
|
62
|
+
|
|
63
|
+
### Commits
|
|
64
|
+
|
|
65
|
+
* \[[`3dfc10c851`](https://github.com/nodejs/node/commit/3dfc10c851)] - **deps**: update undici to 6.11.1 (Node.js GitHub Bot) [#52328](https://github.com/nodejs/node/pull/52328)
|
|
66
|
+
* \[[`aceea1c5e7`](https://github.com/nodejs/node/commit/aceea1c5e7)] - **deps**: update undici to 6.10.2 (Node.js GitHub Bot) [#52227](https://github.com/nodejs/node/pull/52227)
|
|
67
|
+
* \[[`5f0f96b275`](https://github.com/nodejs/node/commit/5f0f96b275)] - **deps**: update llhttp to 9.2.0 (Node.js GitHub Bot) [#51719](https://github.com/nodejs/node/pull/51719)
|
|
68
|
+
* \[[`1a65e98e22`](https://github.com/nodejs/node/commit/1a65e98e22)] - **http**: do not allow OBS fold in headers by default (Paolo Insogna) [nodejs-private/node-private#556](https://github.com/nodejs-private/node-private/pull/556)
|
|
69
|
+
* \[[`3bd39fb474`](https://github.com/nodejs/node/commit/3bd39fb474)] - **src**: ensure to close stream when destroying session (RafaelGSS) [nodejs-private/node-private#561](https://github.com/nodejs-private/node-private/pull/561)
|
|
70
|
+
|
|
71
|
+
<a id="21.7.1"></a>
|
|
72
|
+
|
|
73
|
+
## 2024-03-08, Version 21.7.1 (Current), @targos
|
|
74
|
+
|
|
75
|
+
### Notable Changes
|
|
76
|
+
|
|
77
|
+
This release reverts [#51389](https://github.com/nodejs/node/pull/51389), which
|
|
78
|
+
landed in Node.js 21.7.0. It is a documented feature that `t.after()` hooks are
|
|
79
|
+
run even if a test has no subtests. The hook can be used to clean up the test
|
|
80
|
+
itself.
|
|
81
|
+
|
|
82
|
+
### Commits
|
|
83
|
+
|
|
84
|
+
* \[[`0dfe810ac7`](https://github.com/nodejs/node/commit/0dfe810ac7)] - **benchmark**: update iterations of benchmark/async\_hooks/async-local- (Lei Shi) [#51420](https://github.com/nodejs/node/pull/51420)
|
|
85
|
+
* \[[`625c9e0ac9`](https://github.com/nodejs/node/commit/625c9e0ac9)] - **benchmark**: update iterations of benchmark/domain/domain-fn-args.js (Lei Shi) [#51408](https://github.com/nodejs/node/pull/51408)
|
|
86
|
+
* \[[`7ff3551bad`](https://github.com/nodejs/node/commit/7ff3551bad)] - **build**: fix arm64 host cross-compilation in GN (Cheng Zhao) [#51903](https://github.com/nodejs/node/pull/51903)
|
|
87
|
+
* \[[`fd86ea8b71`](https://github.com/nodejs/node/commit/fd86ea8b71)] - _**Revert**_ "**build**: workaround for node-core-utils" (Richard Lau) [#51975](https://github.com/nodejs/node/pull/51975)
|
|
88
|
+
* \[[`23c32ab3a7`](https://github.com/nodejs/node/commit/23c32ab3a7)] - **build**: respect the `NODE` env variable in `Makefile` (Antoine du Hamel) [#51743](https://github.com/nodejs/node/pull/51743)
|
|
89
|
+
* \[[`9617adc064`](https://github.com/nodejs/node/commit/9617adc064)] - _**Revert**_ "**build**: fix warning in cares under GN build" (Luigi Pinca) [#51865](https://github.com/nodejs/node/pull/51865)
|
|
90
|
+
* \[[`5864534095`](https://github.com/nodejs/node/commit/5864534095)] - **deps**: update nghttp2 to 1.60.0 (Node.js GitHub Bot) [#51948](https://github.com/nodejs/node/pull/51948)
|
|
91
|
+
* \[[`fcf235d623`](https://github.com/nodejs/node/commit/fcf235d623)] - **doc**: add policy for distribution (Geoffrey Booth) [#51918](https://github.com/nodejs/node/pull/51918)
|
|
92
|
+
* \[[`87d2acc8b1`](https://github.com/nodejs/node/commit/87d2acc8b1)] - **doc**: fix actual result of example is different in events (Deokjin Kim) [#51925](https://github.com/nodejs/node/pull/51925)
|
|
93
|
+
* \[[`5908c121c6`](https://github.com/nodejs/node/commit/5908c121c6)] - **doc**: clarify Corepack threat model (Antoine du Hamel) [#51917](https://github.com/nodejs/node/pull/51917)
|
|
94
|
+
* \[[`20e0ba3b94`](https://github.com/nodejs/node/commit/20e0ba3b94)] - **doc,module**: clarify hook chain execution sequence (Jacob Smith) [#51884](https://github.com/nodejs/node/pull/51884)
|
|
95
|
+
* \[[`4d997971ac`](https://github.com/nodejs/node/commit/4d997971ac)] - **lib**: make sure close net server (theanarkh) [#51929](https://github.com/nodejs/node/pull/51929)
|
|
96
|
+
* \[[`fcc6d54aa3`](https://github.com/nodejs/node/commit/fcc6d54aa3)] - **lib**: return directly if udp socket close before lookup (theanarkh) [#51914](https://github.com/nodejs/node/pull/51914)
|
|
97
|
+
* \[[`10aaabd158`](https://github.com/nodejs/node/commit/10aaabd158)] - **meta**: bump github/codeql-action from 3.23.2 to 3.24.6 (dependabot\[bot]) [#51942](https://github.com/nodejs/node/pull/51942)
|
|
98
|
+
* \[[`78f38a0143`](https://github.com/nodejs/node/commit/78f38a0143)] - **meta**: bump actions/upload-artifact from 4.3.0 to 4.3.1 (dependabot\[bot]) [#51941](https://github.com/nodejs/node/pull/51941)
|
|
99
|
+
* \[[`42ca5452c4`](https://github.com/nodejs/node/commit/42ca5452c4)] - **meta**: bump codecov/codecov-action from 4.0.1 to 4.1.0 (dependabot\[bot]) [#51940](https://github.com/nodejs/node/pull/51940)
|
|
100
|
+
* \[[`015a157375`](https://github.com/nodejs/node/commit/015a157375)] - **meta**: bump actions/cache from 4.0.0 to 4.0.1 (dependabot\[bot]) [#51939](https://github.com/nodejs/node/pull/51939)
|
|
101
|
+
* \[[`e476cb4a32`](https://github.com/nodejs/node/commit/e476cb4a32)] - **meta**: bump actions/download-artifact from 4.1.1 to 4.1.3 (dependabot\[bot]) [#51938](https://github.com/nodejs/node/pull/51938)
|
|
102
|
+
* \[[`67e8001790`](https://github.com/nodejs/node/commit/67e8001790)] - **meta**: bump actions/setup-node from 4.0.1 to 4.0.2 (dependabot\[bot]) [#51937](https://github.com/nodejs/node/pull/51937)
|
|
103
|
+
* \[[`50343636e8`](https://github.com/nodejs/node/commit/50343636e8)] - **src**: fix --disable-single-executable-application (Joyee Cheung) [#51808](https://github.com/nodejs/node/pull/51808)
|
|
104
|
+
* \[[`a48c9ca0db`](https://github.com/nodejs/node/commit/a48c9ca0db)] - **stream**: do not defer construction by one microtick (Matteo Collina) [#52005](https://github.com/nodejs/node/pull/52005)
|
|
105
|
+
* \[[`bee3b364f9`](https://github.com/nodejs/node/commit/bee3b364f9)] - **test**: add regression test for test\_runner after hook (Colin Ihrig) [#51998](https://github.com/nodejs/node/pull/51998)
|
|
106
|
+
* \[[`fff7f48f50`](https://github.com/nodejs/node/commit/fff7f48f50)] - **test**: reduce flakiness of `test-runner-output` (Antoine du Hamel) [#51952](https://github.com/nodejs/node/pull/51952)
|
|
107
|
+
* \[[`57ba8f5acb`](https://github.com/nodejs/node/commit/57ba8f5acb)] - **test**: fix flaky http-chunk-extensions-limit test (Ethan Arrowood) [#51943](https://github.com/nodejs/node/pull/51943)
|
|
108
|
+
* \[[`9d2c03990a`](https://github.com/nodejs/node/commit/9d2c03990a)] - **test**: remove flaky designation (Luigi Pinca) [#51736](https://github.com/nodejs/node/pull/51736)
|
|
109
|
+
* \[[`e992af81d3`](https://github.com/nodejs/node/commit/e992af81d3)] - **test**: skip SEA tests when SEA generation fails (Joyee Cheung) [#51887](https://github.com/nodejs/node/pull/51887)
|
|
110
|
+
* \[[`85aa6ca850`](https://github.com/nodejs/node/commit/85aa6ca850)] - _**Revert**_ "**test\_runner**: do not invoke after hook when test is empty" (Colin Ihrig) [#51998](https://github.com/nodejs/node/pull/51998)
|
|
111
|
+
|
|
48
112
|
<a id="21.7.0"></a>
|
|
49
113
|
|
|
50
114
|
## 2024-03-06, Version 21.7.0 (Current), @RafaelGSS prepared by @marco-ippolito
|
|
@@ -473,7 +537,7 @@ Node.js 21.6.0 comes with several fixes for the experimental permission model an
|
|
|
473
537
|
We're adding a new flag `--allow-addons` to enable addon usage when using the Permission Model.
|
|
474
538
|
|
|
475
539
|
```console
|
|
476
|
-
|
|
540
|
+
node --experimental-permission --allow-addons
|
|
477
541
|
```
|
|
478
542
|
|
|
479
543
|
Contributed by Rafael Gonzaga in [#51183](https://github.com/nodejs/node/pull/51183)
|
|
@@ -482,7 +546,7 @@ And relative paths are now supported through the `--allow-fs-*` flags.
|
|
|
482
546
|
Therefore, with this release one can use:
|
|
483
547
|
|
|
484
548
|
```console
|
|
485
|
-
|
|
549
|
+
node --experimental-permission --allow-fs-read=./index.js
|
|
486
550
|
```
|
|
487
551
|
|
|
488
552
|
To give only read access to the entrypoint of the application.
|
|
@@ -494,7 +558,7 @@ Contributed by Rafael Gonzaga and Carlos Espa in [#50758](https://github.com/nod
|
|
|
494
558
|
We are adding a new flag `--build-snapshot-config` to configure snapshots through a custom JSON configuration file.
|
|
495
559
|
|
|
496
560
|
```console
|
|
497
|
-
|
|
561
|
+
node --build-snapshot-config=/path/to/myconfig.json
|
|
498
562
|
```
|
|
499
563
|
|
|
500
564
|
When using this flag, additional script files provided on the command line will
|
package/bin/node
CHANGED
|
Binary file
|