Commit 99f2f61
authored
chore(deps): update node.js to v22.13.1 (#109)
This PR contains the following updates:
| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [node](https://redirect.github.com/nodejs/node) | stage | patch |
`22.13.0` -> `22.13.1` | [](https://securityscorecards.dev/viewer/?uri=github.com/nodejs/node)
|
---
### Release Notes
<details>
<summary>nodejs/node (node)</summary>
###
[`v22.13.1`](https://redirect.github.com/nodejs/node/releases/tag/v22.13.1):
2025-01-21, Version 22.13.1 'Jod' (LTS), @​RafaelGSS
[Compare
Source](https://redirect.github.com/nodejs/node/compare/v22.13.0...v22.13.1)
This is a security release.
##### Notable Changes
- CVE-2025-23083 - src,loader,permission: throw on InternalWorker use
when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and
ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows
(Medium)
Dependency update:
- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch()
(Medium)
##### Commits
-
\[[`520da342e0`](https://redirect.github.com/nodejs/node/commit/520da342e0)]
- **(CVE-2025-22150)** **deps**: update undici to v6.21.1 (Matteo
Collina)
[nodejs-private/node-private#662](https://redirect.github.com/nodejs-private/node-private/pull/662)
-
\[[`99f217369f`](https://redirect.github.com/nodejs/node/commit/99f217369f)]
- **(CVE-2025-23084)** **path**: fix path traversal in normalize() on
Windows (Tobias Nießen)
[nodejs-private/node-private#555](https://redirect.github.com/nodejs-private/node-private/pull/555)
-
\[[`984f735e35`](https://redirect.github.com/nodejs/node/commit/984f735e35)]
- **(CVE-2025-23085)** **src**: fix HTTP2 mem leak on premature close
and ERR_PROTO (RafaelGSS)
[nodejs-private/node-private#650](https://redirect.github.com/nodejs-private/node-private/pull/650)
-
\[[`2446870618`](https://redirect.github.com/nodejs/node/commit/2446870618)]
- **(CVE-2025-23083)** **src,loader,permission**: throw on
InternalWorker use (RafaelGSS)
[nodejs-private/node-private#651](https://redirect.github.com/nodejs-private/node-private/pull/651)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/settlemint/solidity-empty).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent 351018a commit 99f2f61
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| |||
0 commit comments