Skip to content
This repository has been archived by the owner on May 3, 2024. It is now read-only.

fix(node): bump node to 16.20.1 for security patches #1040

Merged
merged 1 commit into from
Jun 30, 2023

Conversation

PixnBits
Copy link
Contributor

@PixnBits PixnBits commented Jun 30, 2023

Description

Bump the node version used by One App to 16.20.1

Motivation and Context

This is a security patch
https://github.com/nodejs/node/releases/tag/v16.20.1

The 16.x release line of Node.js is vulnerable to 4 medium severity issues, and 1 high severity issues [sic].

https://nodejs.org/en/blog/vulnerability/june-2023-security-releases

How Has This Been Tested?

GitHub workflow will run

Types of Changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation (adding or updating documentation)
  • Dependency update
  • Security update

Checklist:

  • My change requires a change to the documentation and I have updated the documentation accordingly.
  • These changes should be applied to a maintenance branch.
  • This change requires cross browser checks.
  • Performance tests should be ran against the server prior to merging.
  • This change impacts caching for client browsers.
  • This change impacts HTTP headers.
  • This change adds additional environment variable requirements for One App users.
  • I have added the Apache 2.0 license header to any new files created.

What is the Impact to Developers Using One App?

transparent header parsing fix, so no impact expected

@github-actions
Copy link
Contributor

Size Change: 0 B

Total Size: 667 kB

ℹ️ View Unchanged
Filename Size
./build/app/app.js 161 kB
./build/app/app~vendors.js 377 kB
./build/app/runtime.js 7.07 kB
./build/app/service-worker-client.js 7.26 kB
./build/app/vendors.js 114 kB

compressed-size-action

@JAdshead JAdshead enabled auto-merge (squash) June 30, 2023 21:53
@PixnBits PixnBits requested a review from a team June 30, 2023 23:14
@JAdshead JAdshead merged commit 770a1c0 into 5.x.x Jun 30, 2023
@JAdshead JAdshead deleted the fix/node-june-2023-security-release-16.20.1 branch June 30, 2023 23:17
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants