chore(deps): update dependency node to v20.5.1 #258
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
20.5.0
->20.5.1
Release Notes
nodejs/node (node)
v20.5.1
: 2023-08-09, Version 20.5.1 (Current), @RafaelGSSCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.
Commits
92300b51b4
] - deps: update archs files for openssl-3.0.10+quic1 (Node.js GitHub Bot) #49036559698abf2
] - deps: upgrade openssl sources to quictls/openssl-3.0.10+quic1 (Node.js GitHub Bot) #490361bf3429e8e
] - lib,permission: restrict process.binding when pm is enabled (RafaelGSS) nodejs-private/node-private#43898a83a67e6
] - permission: ensure to resolve path when calling mkdtemp (RafaelGSS) nodejs-private/node-private#4641f0cde466b
] - permission: handle buffer path on fs calls (RafaelGSS) nodejs-private/node-private#439bd094d60ea
] - permission: handle fstatfs and add pm supported list (RafaelGSS) nodejs-private/node-private#4417337d21484
] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#417cf348ec640
] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#397Configuration
📅 Schedule: Branch creation - "* 0-5 * * *" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.