deps: upgrade npm to 8.19.4 #46677

npm-cli-bot · 2023-02-15T20:08:24Z

8.19.4 (2023-02-14)

Documentation

dd51f34 #6155 don't redirect "npm config' to itself (#6155) (@ivanosevitch)

Dependencies

cfab523 #6166 [email protected] (#6166)

github-actions · 2023-02-15T20:08:49Z

Fast-track has been requested by @nodejs-github-bot. Please 👍 to approve.

nodejs-github-bot · 2023-02-16T23:48:14Z

CI: https://ci.nodejs.org/job/node-test-pull-request/49572/

nodejs-github-bot · 2023-02-18T13:44:32Z

CI: https://ci.nodejs.org/job/node-test-pull-request/49686/

nodejs-github-bot · 2023-02-18T20:40:26Z

CI: https://ci.nodejs.org/job/node-test-pull-request/49707/

nodejs-github-bot · 2023-02-19T03:00:41Z

CI: https://ci.nodejs.org/job/node-test-pull-request/49721/

nodejs-github-bot · 2023-02-19T18:03:31Z

CI: https://ci.nodejs.org/job/node-test-pull-request/49734/

yunwu-cn · 2023-02-27T18:52:48Z

Any chance this PR will be merged soon?
As mentioned by @theGOTOguy, this is needed to fix CVE-2022-25881 in docker image.

gzelek8 · 2023-03-05T17:07:18Z

When can merge be expected? I ask in reference to yunwu-cn's comment to patch the vulnerability

anonrig · 2023-03-15T18:16:02Z

I re-added the commit-queue. Hopefully, it will be merged soon.

richardlau · 2023-03-15T18:18:55Z

I re-added the commit-queue. Hopefully, it will be merged soon.

The commit queue only works on main. This PR will land when a releaser has time to do a Node.js 16 release.

jbrizio · 2023-03-22T14:21:46Z

@BethGriggs When this upgrade when be merged? There's a schedule for a new release for Node.js 16x with this included? Thanks.

BethGriggs · 2023-03-22T15:57:46Z

@BethGriggs When this upgrade when be merged? There's a schedule for a new release for Node.js 16x with this included? Thanks.

We had a tentative schedule for March. I'll see if I can get the (likely small) release ready to go for 28th March.

PR-URL: #46677 Reviewed-By: Luke Karrys <[email protected]> Reviewed-By: Luigi Pinca <[email protected]> Reviewed-By: Yagiz Nizipli <[email protected]> Reviewed-By: Beth Griggs <[email protected]>

BethGriggs · 2023-03-23T19:59:17Z

Landed in 7af9bdb

Notable changes: - deps: - update undici to 5.20.0 (Node.js GitHub Bot) #46711 - update c-ares to 1.19.0 (Michaël Zasso) #46415 - upgrade npm to 8.19.4 (npm team) #46677 - update corepack to 0.17.0 (Node.js GitHub Bot) #46842 - (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) [#44376] PR-URL: TODO

Notable changes: - deps: - update undici to 5.20.0 (Node.js GitHub Bot) #46711 - update c-ares to 1.19.0 (Michaël Zasso) #46415 - upgrade npm to 8.19.4 (npm team) #46677 - update corepack to 0.17.0 (Node.js GitHub Bot) #46842 - (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) [#44376] PR-URL: #47272

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://github.com/nodejs/node) | stage | minor | `16.19.1-bullseye` -> `16.20.0-bullseye` | --- ### Release Notes <details> <summary>nodejs/node</summary> ### [`v16.20.0`](https://github.com/nodejs/node/releases/tag/v16.20.0): 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggs [Compare Source](nodejs/node@v16.19.1...v16.20.0) ##### Notable Changes - **deps:** - update undici to 5.20.0 (Node.js GitHub Bot) [#46711](nodejs/node#46711) - update c-ares to 1.19.0 (Michaël Zasso) [#46415](nodejs/node#46415) - upgrade npm to 8.19.4 (npm team) [#46677](nodejs/node#46677) - update corepack to 0.17.0 (Node.js GitHub Bot) [#46842](nodejs/node#46842) - **(SEMVER-MINOR)** **src**: add support for externally shared js builtins (Michael Dawson) [#44376](nodejs/node#44376) ##### Commits - \[[`de6dd67790`](nodejs/node@de6dd67790)] - **crypto**: avoid hang when no algorithm available (Richard Lau) [#46237](nodejs/node#46237) - \[[`4617512788`](nodejs/node@4617512788)] - **crypto**: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) [#46185](nodejs/node#46185) - \[[`24972164fc`](nodejs/node@24972164fc)] - **deps**: update undici to 5.20.0 (Node.js GitHub Bot) [#46711](nodejs/node#46711) - \[[`85f88c6a8d`](nodejs/node@85f88c6a8d)] - **deps**: V8: cherry-pick [`90be99f`](nodejs/node@90be99fab31c) (Michaël Zasso) [#46646](nodejs/node#46646) - \[[`b4ebe6d47b`](nodejs/node@b4ebe6d47b)] - **deps**: update c-ares to 1.19.0 (Michaël Zasso) [#46415](nodejs/node#46415) - \[[`56cbc7fdda`](nodejs/node@56cbc7fdda)] - **deps**: V8: cherry-pick [`c2792e5`](nodejs/node@c2792e58035f) (Jiawen Geng) [#44961](nodejs/node#44961) - \[[`7af9bdb31e`](nodejs/node@7af9bdb31e)] - **deps**: upgrade npm to 8.19.4 (npm team) [#46677](nodejs/node#46677) - \[[`962a7471b5`](nodejs/node@962a7471b5)] - **deps**: update corepack to 0.17.0 (Node.js GitHub Bot) [#46842](nodejs/node#46842) - \[[`748bc96e35`](nodejs/node@748bc96e35)] - **deps**: update corepack to 0.16.0 (Node.js GitHub Bot) [#46710](nodejs/node#46710) - \[[`a467782499`](nodejs/node@a467782499)] - **deps**: update corepack to 0.15.3 (Node.js GitHub Bot) [#46037](nodejs/node#46037) - \[[`1913b6763d`](nodejs/node@1913b6763d)] - **deps**: update corepack to 0.15.2 (Node.js GitHub Bot) [#45635](nodejs/node#45635) - \[[`809371a15f`](nodejs/node@809371a15f)] - **module**: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) [#45147](nodejs/node#45147) - \[[`086bb2f8d4`](nodejs/node@086bb2f8d4)] - ***Revert*** "**src**: let http2 streams end after session close" (Rich Trott) [#46721](nodejs/node#46721) - \[[`6a01d39120`](nodejs/node@6a01d39120)] - **(SEMVER-MINOR)** **src**: add support for externally shared js builtins (Michael Dawson) [#44376](nodejs/node#44376) - \[[`d081032a60`](nodejs/node@d081032a60)] - **test**: fix test-net-connect-reset-until-connected (Vita Batrla) [#46781](nodejs/node#46781) - \[[`efe1be47ec`](nodejs/node@efe1be47ec)] - **test**: skip test depending on `overlapped-checker` when not available (Antoine du Hamel) [#45015](nodejs/node#45015) - \[[`fc47d58abe`](nodejs/node@fc47d58abe)] - **test**: remove cjs loader from stack traces (Geoffrey Booth) [#44197](nodejs/node#44197) - \[[`cf76d0790d`](nodejs/node@cf76d0790d)] - **test**: fix WPT title when no META title is present (Filip Skokan) [#46804](nodejs/node#46804) - \[[`0d1485b924`](nodejs/node@0d1485b924)] - **test**: fix default WPT titles (Filip Skokan) [#46778](nodejs/node#46778) - \[[`088e9cde3d`](nodejs/node@088e9cde3d)] - **test**: add WPTRunner support for variants and generating WPT reports (Filip Skokan) [#46498](nodejs/node#46498) - \[[`908c4dff44`](nodejs/node@908c4dff44)] - **test**: mark test-crypto-key-objects flaky on Linux (Richard Lau) [#46684](nodejs/node#46684) - \[[`768e56227e`](nodejs/node@768e56227e)] - **tools**: make `utils.SearchFiles` deterministic (Bruno Pitrus) [#44496](nodejs/node#44496) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.walbeck.it/mwalbeck/docker-cyberchef/pulls/187 Co-authored-by: renovate-bot <[email protected]> Co-committed-by: renovate-bot <[email protected]>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://github.com/nodejs/node) | stage | minor | `16.19.1-bullseye-slim` -> `16.20.0-bullseye-slim` | --- ### Release Notes <details> <summary>nodejs/node</summary> ### [`v16.20.0`](https://github.com/nodejs/node/releases/tag/v16.20.0): 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggs [Compare Source](nodejs/node@v16.19.1...v16.20.0) ##### Notable Changes - **deps:** - update undici to 5.20.0 (Node.js GitHub Bot) [#46711](nodejs/node#46711) - update c-ares to 1.19.0 (Michaël Zasso) [#46415](nodejs/node#46415) - upgrade npm to 8.19.4 (npm team) [#46677](nodejs/node#46677) - update corepack to 0.17.0 (Node.js GitHub Bot) [#46842](nodejs/node#46842) - **(SEMVER-MINOR)** **src**: add support for externally shared js builtins (Michael Dawson) [#44376](nodejs/node#44376) ##### Commits - \[[`de6dd67790`](nodejs/node@de6dd67790)] - **crypto**: avoid hang when no algorithm available (Richard Lau) [#46237](nodejs/node#46237) - \[[`4617512788`](nodejs/node@4617512788)] - **crypto**: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) [#46185](nodejs/node#46185) - \[[`24972164fc`](nodejs/node@24972164fc)] - **deps**: update undici to 5.20.0 (Node.js GitHub Bot) [#46711](nodejs/node#46711) - \[[`85f88c6a8d`](nodejs/node@85f88c6a8d)] - **deps**: V8: cherry-pick [`90be99f`](nodejs/node@90be99fab31c) (Michaël Zasso) [#46646](nodejs/node#46646) - \[[`b4ebe6d47b`](nodejs/node@b4ebe6d47b)] - **deps**: update c-ares to 1.19.0 (Michaël Zasso) [#46415](nodejs/node#46415) - \[[`56cbc7fdda`](nodejs/node@56cbc7fdda)] - **deps**: V8: cherry-pick [`c2792e5`](nodejs/node@c2792e58035f) (Jiawen Geng) [#44961](nodejs/node#44961) - \[[`7af9bdb31e`](nodejs/node@7af9bdb31e)] - **deps**: upgrade npm to 8.19.4 (npm team) [#46677](nodejs/node#46677) - \[[`962a7471b5`](nodejs/node@962a7471b5)] - **deps**: update corepack to 0.17.0 (Node.js GitHub Bot) [#46842](nodejs/node#46842) - \[[`748bc96e35`](nodejs/node@748bc96e35)] - **deps**: update corepack to 0.16.0 (Node.js GitHub Bot) [#46710](nodejs/node#46710) - \[[`a467782499`](nodejs/node@a467782499)] - **deps**: update corepack to 0.15.3 (Node.js GitHub Bot) [#46037](nodejs/node#46037) - \[[`1913b6763d`](nodejs/node@1913b6763d)] - **deps**: update corepack to 0.15.2 (Node.js GitHub Bot) [#45635](nodejs/node#45635) - \[[`809371a15f`](nodejs/node@809371a15f)] - **module**: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) [#45147](nodejs/node#45147) - \[[`086bb2f8d4`](nodejs/node@086bb2f8d4)] - ***Revert*** "**src**: let http2 streams end after session close" (Rich Trott) [#46721](nodejs/node#46721) - \[[`6a01d39120`](nodejs/node@6a01d39120)] - **(SEMVER-MINOR)** **src**: add support for externally shared js builtins (Michael Dawson) [#44376](nodejs/node#44376) - \[[`d081032a60`](nodejs/node@d081032a60)] - **test**: fix test-net-connect-reset-until-connected (Vita Batrla) [#46781](nodejs/node#46781) - \[[`efe1be47ec`](nodejs/node@efe1be47ec)] - **test**: skip test depending on `overlapped-checker` when not available (Antoine du Hamel) [#45015](nodejs/node#45015) - \[[`fc47d58abe`](nodejs/node@fc47d58abe)] - **test**: remove cjs loader from stack traces (Geoffrey Booth) [#44197](nodejs/node#44197) - \[[`cf76d0790d`](nodejs/node@cf76d0790d)] - **test**: fix WPT title when no META title is present (Filip Skokan) [#46804](nodejs/node#46804) - \[[`0d1485b924`](nodejs/node@0d1485b924)] - **test**: fix default WPT titles (Filip Skokan) [#46778](nodejs/node#46778) - \[[`088e9cde3d`](nodejs/node@088e9cde3d)] - **test**: add WPTRunner support for variants and generating WPT reports (Filip Skokan) [#46498](nodejs/node#46498) - \[[`908c4dff44`](nodejs/node@908c4dff44)] - **test**: mark test-crypto-key-objects flaky on Linux (Richard Lau) [#46684](nodejs/node#46684) - \[[`768e56227e`](nodejs/node@768e56227e)] - **tools**: make `utils.SearchFiles` deterministic (Bruno Pitrus) [#44496](nodejs/node#44496) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.walbeck.it/mwalbeck/docker-jellyfin-livestream/pulls/243 Co-authored-by: renovate-bot <[email protected]> Co-committed-by: renovate-bot <[email protected]>

deps: upgrade npm to 8.19.4

fff49bf

nodejs-github-bot added dont-land-on-v14.x fast-track PRs that do not need to wait for 48 hours to land. needs-ci PRs that need a full CI run. npm Issues and PRs related to the npm client dependency or the npm registry. labels Feb 15, 2023

lukekarrys approved these changes Feb 15, 2023

View reviewed changes

lukekarrys added the request-ci Add this label to start a Jenkins CI on a PR. label Feb 15, 2023

lpinca approved these changes Feb 15, 2023

View reviewed changes

This comment was marked as outdated.

Sign in to view

github-actions bot removed the request-ci Add this label to start a Jenkins CI on a PR. label Feb 16, 2023

github-actions bot mentioned this pull request Feb 19, 2023

CI Reliability 2023-02-19 nodejs/reliability#500

Open

21 tasks

richardlau added the request-ci Add this label to start a Jenkins CI on a PR. label Feb 19, 2023

github-actions bot removed the request-ci Add this label to start a Jenkins CI on a PR. label Feb 19, 2023

This was referenced Feb 20, 2023

CI Reliability 2023-02-20 nodejs/reliability#501

Open

CI Reliability 2023-02-21 nodejs/reliability#502

Open

theGOTOguy mentioned this pull request Feb 21, 2023

CVE-2022-25881 alpinelinux/docker-alpine#302

Open

MylesBorins added the commit-queue Add this label to land a pull request using GitHub Actions. label Feb 21, 2023

anonrig added commit-queue Add this label to land a pull request using GitHub Actions. and removed commit-queue Add this label to land a pull request using GitHub Actions. labels Mar 15, 2023

anonrig approved these changes Mar 15, 2023

View reviewed changes

BethGriggs approved these changes Mar 23, 2023

View reviewed changes

BethGriggs closed this Mar 23, 2023

BethGriggs mentioned this pull request Mar 27, 2023

v16.20.0 proposal #47272

Merged

panva removed the commit-queue Add this label to land a pull request using GitHub Actions. label Nov 27, 2024

wraithgar deleted the npm-v8.19.4 branch June 26, 2025 15:45

Uh oh!

deps: upgrade npm to 8.19.4 #46677

deps: upgrade npm to 8.19.4 #46677

Uh oh!

Conversation

npm-cli-bot commented Feb 15, 2023

8.19.4 (2023-02-14)

Documentation

Dependencies

Uh oh!

github-actions bot commented Feb 15, 2023

Uh oh!

This comment was marked as outdated.

This comment was marked as outdated.

nodejs-github-bot commented Feb 16, 2023

Uh oh!

nodejs-github-bot commented Feb 18, 2023

Uh oh!

nodejs-github-bot commented Feb 18, 2023

Uh oh!

nodejs-github-bot commented Feb 19, 2023

Uh oh!

nodejs-github-bot commented Feb 19, 2023

Uh oh!

yunwu-cn commented Feb 27, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

gzelek8 commented Mar 5, 2023

Uh oh!

anonrig commented Mar 15, 2023

Uh oh!

richardlau commented Mar 15, 2023

Uh oh!

jbrizio commented Mar 22, 2023

Uh oh!

BethGriggs commented Mar 22, 2023

Uh oh!

BethGriggs commented Mar 23, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

12 participants

yunwu-cn commented Feb 27, 2023 •

edited

Loading