Skip to content

Commit

Permalink
chore(deps): update node.js to v23.6.1 (#817)
Browse files Browse the repository at this point in the history
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [node](https://redirect.github.com/nodejs/node) | final | patch |
`23.6.0-alpine` -> `23.6.1-alpine` |

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

###
[`v23.6.1`](https://redirect.github.com/nodejs/node/releases/tag/v23.6.1):
2025-01-21, Version 23.6.1 (Current), @&#8203;RafaelGSS

[Compare
Source](https://redirect.github.com/nodejs/node/compare/v23.6.0...v23.6.1)

This is a security release.

##### Notable Changes

- CVE-2025-23083 - src,loader,permission: throw on InternalWorker use
when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and
ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows
(Medium)

Dependency update:

- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch()
(Medium)

##### Commits

-
\[[`f2ad4d3af8`](https://redirect.github.com/nodejs/node/commit/f2ad4d3af8)]
- **(CVE-2025-22150)** **deps**: update undici to v6.21.1 (Matteo
Collina)
[nodejs-private/node-private#654](https://redirect.github.com/nodejs-private/node-private/pull/654)
-
\[[`0afc6f9600`](https://redirect.github.com/nodejs/node/commit/0afc6f9600)]
- **(CVE-2025-23084)** **path**: fix path traversal in normalize() on
Windows (RafaelGSS)
[nodejs-private/node-private#555](https://redirect.github.com/nodejs-private/node-private/pull/555)
-
\[[`3c7686163e`](https://redirect.github.com/nodejs/node/commit/3c7686163e)]
- **(CVE-2025-23085)** **src**: fix HTTP2 mem leak on premature close
and ERR_PROTO (RafaelGSS)
[nodejs-private/node-private#650](https://redirect.github.com/nodejs-private/node-private/pull/650)
-
\[[`51938f023a`](https://redirect.github.com/nodejs/node/commit/51938f023a)]
- **(CVE-2025-23083)** **src,loader,permission**: throw on
InternalWorker use (RafaelGSS)
[nodejs-private/node-private#629](https://redirect.github.com/nodejs-private/node-private/pull/629)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled because a matching PR was automerged
previously.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/Johannes-Andersen/Johannes).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
  • Loading branch information
renovate[bot] authored Jan 24, 2025
1 parent c6fc6ca commit de97cd7
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM node:23.6.0-alpine AS base
FROM node:23.6.1-alpine AS base

ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"
Expand Down

0 comments on commit de97cd7

Please sign in to comment.