1
0
Fork 0

chore(deps): update node.js to v18.12.1 (#14)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [node](https://github.com/nodejs/node) | volta | patch | [`18.12.0` -> `18.12.1`](https://renovatebot.com/diffs/npm/node/18.12.0/v18.12.1) |

---

### Release Notes

<details>
<summary>nodejs/node</summary>

### [`v18.12.1`](https://github.com/nodejs/node/releases/tag/v18.12.1)

[Compare Source](https://github.com/nodejs/node/compare/v18.12.0...v18.12.1)

This is a security release.

##### Notable changes

The following CVEs are fixed in this release:

-   **[CVE-2022-3602](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3602)**: X.509 Email Address 4-byte Buffer Overflow (High)
-   **[CVE-2022-3786](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3786)**: X.509 Email Address Variable Length Buffer Overflow (High)
-   **[CVE-2022-43548](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548)**: DNS rebinding in --inspect via invalid octal IP address (Medium)

More detailed information on each of the vulnerabilities can be found in [November 2022 Security Releases](https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/) blog post.

##### Commits

-   \[[`39f8a672e3`](https://github.com/nodejs/node/commit/39f8a672e3)] - **deps**: update archs files for quictls/openssl-3.0.7+quic [nodejs/node#&#8203;45286](https://github.com/nodejs/node/pull/45286)
-   \[[`80218127c8`](https://github.com/nodejs/node/commit/80218127c8)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.7+quic [nodejs/node#&#8203;45286](https://github.com/nodejs/node/pull/45286)
-   \[[`165342beac`](https://github.com/nodejs/node/commit/165342beac)] - **inspector**: harden IP address validation again (Tobias Nießen) [nodejs-private/node-private#&#8203;354](https://github.com/nodejs-private/node-private/pull/354)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzMi4yMTcuMCIsInVwZGF0ZWRJblZlciI6IjMyLjIxNy4wIn0=-->

Co-authored-by: Renovate Bot <renovate@whitesourcesoftware.com>
Reviewed-on: #14
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.froth.zone>
Co-committed-by: Renovate Bot <renovate-bot@noreply.git.froth.zone>
This commit is contained in:
Renovate Bot 2022-11-15 15:52:32 +00:00 committed by Sam Therapy
parent 7c3e435434
commit 82f0552dea

View file

@ -38,6 +38,6 @@
"typescript": "4.8.4"
},
"volta": {
"node": "18.12.0"
"node": "18.12.1"
}
}