Commit 18148a4
authored
chore(deps): update node.js to v20.15.1 (#28)
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [node](https://togithub.com/nodejs/node) | stage | patch |
`20.15.0-bookworm` -> `20.15.1-bookworm` | [](https://securityscorecards.dev/viewer/?uri=github.com/nodejs/node)
|
---
### Release Notes
<details>
<summary>nodejs/node (node)</summary>
###
[`v20.15.1`](https://togithub.com/nodejs/node/releases/tag/v20.15.1):
2024-07-08, Version 20.15.1 'Iron' (LTS), @​RafaelGSS
[Compare
Source](https://togithub.com/nodejs/node/compare/v20.15.0...v20.15.1)
This is a security release.
##### Notable Changes
- CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
- CVE-2024-22020 - Bypass network import restriction via data URL
(Medium)
- CVE-2024-22018 - fs.lstat bypasses permission model (Low)
- CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
- CVE-2024-37372 - Permission model improperly processes UNC paths (Low)
##### Commits
- \[[`60e184a6e4`](https://togithub.com/nodejs/node/commit/60e184a6e4)]
- **lib,esm**: handle bypass network-import via data: (RafaelGSS)
[nodejs-private/node-private#522](https://togithub.com/nodejs-private/node-private/pull/522)
- \[[`025cbd6936`](https://togithub.com/nodejs/node/commit/025cbd6936)]
- **lib,permission**: support fs.lstat (RafaelGSS)
[nodejs-private/node-private#486](https://togithub.com/nodejs-private/node-private/pull/486)
- \[[`d38ea17341`](https://togithub.com/nodejs/node/commit/d38ea17341)]
- **lib,permission**: disable fchmod/fchown when pm enabled (RafaelGSS)
[nodejs-private/node-private#584](https://togithub.com/nodejs-private/node-private/pull/584)
- \[[`1ba624cd3b`](https://togithub.com/nodejs/node/commit/1ba624cd3b)]
- **src**: handle permissive extension on cmd check (RafaelGSS)
[nodejs-private/node-private#596](https://togithub.com/nodejs-private/node-private/pull/596)
- \[[`2524d00c3d`](https://togithub.com/nodejs/node/commit/2524d00c3d)]
- **src,permission**: fix UNC path resolution (RafaelGSS)
[nodejs-private/node-private#581](https://togithub.com/nodejs-private/node-private/pull/581)
- \[[`484cb0f13c`](https://togithub.com/nodejs/node/commit/484cb0f13c)]
- **src,permission**: resolve path on fs_permission (Rafael Gonzaga)
[#​52761](https://togithub.com/nodejs/node/pull/52761)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "after 10pm every weekday,before 5am
every weekday,every weekend" (UTC), Automerge - At any time (no schedule
defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/settlemint/btp-smartcontractsets).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjUuMSIsInVwZGF0ZWRJblZlciI6IjM3LjQyNS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent 6cbdeb4 commit 18148a4
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| |||
0 commit comments