Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): update node.js to v22.13.1 #873

Merged
merged 1 commit into from
Jan 30, 2025
Merged

Conversation

serious-scaffold[bot]
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
node image-name patch 22.13.0 -> 22.13.1

Release Notes

nodejs/node (node)

v22.13.1: 2025-01-21, Version 22.13.1 'Jod' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
  • CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
  • CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

  • CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@huxuan huxuan force-pushed the renovate-github/node-22.x branch from bcf32d2 to cb5fb54 Compare January 30, 2025 01:12
@huxuan huxuan enabled auto-merge (squash) January 30, 2025 01:12
@huxuan huxuan merged commit 672c8b0 into main Jan 30, 2025
18 checks passed
@huxuan huxuan deleted the renovate-github/node-22.x branch January 30, 2025 01:15
@serious-scaffold
Copy link
Contributor Author

🎉 This PR is included in version 0.0.63 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant