Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jul 2, 2025

This PR contains the following updates:

Package Type Update Change
node (source) engines patch >= 18.20.0 -> >= 18.20.8
node uses-with minor 18 -> 18.20.8

Release Notes

nodejs/node (node)

v18.20.8: 2025-03-27, Version 18.20.8 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release updates OpenSSL to 3.0.16 and root certificates to NSS 3.108.

Commits

v18.20.7: 2025-02-20, Version 18.20.7 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
Commits

v18.20.6: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
  • CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

  • CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits

v18.20.5: 2024-11-12, Version 18.20.5 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
  • [ac37e554a5] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #​55333
Commits

v18.20.4: 2024-07-08, Version 18.20.4 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
Commits

v18.20.3: 2024-05-21, Version 18.20.3 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release fixes a regression introduced in Node.js 18.19.0 where http.server.close() was incorrectly closing idle connections.

A fix has also been included for compiling Node.js from source with newer versions of Clang.

The list of keys used to sign releases has been synchronized with the current list from the main branch.

Updated dependencies
  • acorn updated to 8.11.3.
  • acorn-walk updated to 8.3.2.
  • ada updated to 2.7.8.
  • c-ares updated to 1.28.1.
  • corepack updated to 0.28.0.
  • nghttp2 updated to 1.61.0.
  • ngtcp2 updated to 1.3.0.
  • npm updated to 10.7.0. Includes a fix from npm@​10.5.1 to limit the number of open connections npm/cli#7324.
  • simdutf updated to 5.2.4.
  • zlib updated to 1.3.0.1-motley-7d77fb7.
Commits

v18.20.2: 2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows
Commits

v18.20.1: 2024-04-03, Version 18.20.1 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
  • CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
  • llhttp version 9.2.1
  • undici version 5.28.4
Commits
actions/node-versions (node)

v18.20.8: 18.20.8

Compare Source

Node.js 18.20.8

v18.20.7: 18.20.7

Compare Source

Node.js 18.20.7

v18.20.6: 18.20.6

Compare Source

Node.js 18.20.6

v18.20.5: 18.20.5

Compare Source

Node.js 18.20.5

v18.20.4: 18.20.4

Compare Source

Node.js 18.20.4

v18.20.3: 18.20.3

Compare Source

Node.js 18.20.3

v18.20.2: 18.20.2

Compare Source

Node.js 18.20.2

v18.20.1: 18.20.1

Compare Source

Node.js 18.20.1

v18.20.0: 18.20.0

Compare Source

Node.js 18.20.0

v18.19.1: 18.19.1

Compare Source

Node.js 18.19.1

v18.19.0: 18.19.0

Compare Source

Node.js 18.19.0

v18.18.2: 18.18.2

Compare Source

Node.js 18.18.2

v18.18.1: 18.18.1

Compare Source

Node.js 18.18.1

v18.18.0: 18.18.0

Compare Source

Node.js 18.18.0

v18.17.1: 18.17.1

Compare Source

Node.js 18.17.1

v18.17.0: 18.17.0

Compare Source

Node.js 18.17.0

v18.16.1: 18.16.1

Compare Source

Node.js 18.16.1

v18.16.0: 18.16.0

Compare Source

Node.js 18.16.0

v18.15.0: 18.15.0

Compare Source

Node.js 18.15.0

v18.14.2: 18.14.2

Compare Source

Node.js 18.14.2

v18.14.1: 18.14.1

Compare Source

Node.js 18.14.1

v18.14.0: 18.14.0

Compare Source

Node.js 18.14.0

v18.13.0: 18.13.0

Compare Source

Node.js 18.13.0

v18.12.1: 18.12.1

Compare Source

Node.js 18.12.1

v18.12.0: 18.12.0

Compare Source

Node.js 18.12.0

v18.11.0: 18.11.0

Compare Source

Node.js 18.11.0

v18.10.0: 18.10.0

Compare Source

Node.js 18.10.0

v18.9.1: 18.9.1

Compare Source

Node.js 18.9.1

v18.9.0: 18.9.0

Compare Source

Node.js 18.9.0

v18.8.0: 18.8.0

Compare Source

Node.js 18.8.0

v18.7.0: 18.7.0

Compare Source

Node.js 18.7.0

v18.6.0: 18.6.0

Compare Source

Node.js 18.6.0

v18.5.0: 18.5.0

Compare Source

Node.js 18.5.0

v18.4.0: 18.4.0

Compare Source

Node.js 18.4.0

v18.3.0: 18.3.0

Compare Source

Node.js 18.3.0

v18.2.0: 18.2.0

Compare Source

Node.js 18.2.0

v18.1.0: 18.1.0

Compare Source

Node.js 18.1.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Jul 2, 2025
@coderabbitai
Copy link

coderabbitai bot commented Jul 2, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@socket-security
Copy link

socket-security bot commented Jul 2, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​nuxt/​test-utils@​3.19.2 ⏵ 3.20.198 +110077 +192 +8100
Updated@​nuxt/​module-builder@​1.0.1 ⏵ 1.0.298 +110010093 +4100
Added@​nuxt/​devtools@​3.1.0100100100100100

View full report

@renovate renovate bot force-pushed the renovate/node-18.x branch from 4366cd9 to cccba91 Compare August 10, 2025 14:10
@renovate renovate bot changed the title chore(deps): update node.js to >= 18.20.8 chore(deps): update node.js Aug 10, 2025
@pkg-pr-new
Copy link

pkg-pr-new bot commented Aug 10, 2025

Open in StackBlitz

npm i https://pkg.pr.new/poupe-ui/eslint-config/@poupe/eslint-config@159

commit: 97d8449

@renovate renovate bot force-pushed the renovate/node-18.x branch 2 times, most recently from e728db9 to 659e03b Compare August 19, 2025 15:59
@renovate renovate bot force-pushed the renovate/node-18.x branch from 659e03b to 9db9fb4 Compare August 31, 2025 12:47
@renovate renovate bot force-pushed the renovate/node-18.x branch from 9db9fb4 to 97d8449 Compare September 28, 2025 10:45
@renovate renovate bot force-pushed the renovate/node-18.x branch from 97d8449 to 5c36df6 Compare October 9, 2025 14:31
@renovate renovate bot force-pushed the renovate/node-18.x branch from 5c36df6 to 55cc949 Compare October 21, 2025 10:02
@renovate renovate bot force-pushed the renovate/node-18.x branch from 55cc949 to 2bd490c Compare November 10, 2025 18:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant