unboundsoftware/pre-commit-node
Archived
6
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 27 Activity

chore(deps): update node.js to v20.12.2 #10

Merged
ghost1 merged 1 commits from renovate/node-20.x into main 2024-04-12 11:38:57 +00:00
Conversation 1 Commits 1 Files Changed 1
+1 -1
ghost1 commented 2024-04-11 13:52:44 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

This MR contains the following updates:

Package Type Update Change
node final patch 20.12.1 -> 20.12.2

Release Notes

nodejs/node (node)

v20.12.2: 2024-04-10, Version 20.12.2 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

This MR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://github.com/nodejs/node) | final | patch | `20.12.1` -> `20.12.2` | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v20.12.2`](https://github.com/nodejs/node/releases/tag/v20.12.2): 2024-04-10, Version 20.12.2 &#x27;Iron&#x27; (LTS), @&#8203;RafaelGSS [Compare Source](https://github.com/nodejs/node/compare/v20.12.1...v20.12.2) This is a security release. ##### Notable Changes - CVE-2024-27980 - Command injection via args parameter of `child_process.spawn` without shell option enabled on Windows ##### Commits - \[[`69ffc6d50d`](https://github.com/nodejs/node/commit/69ffc6d50d)] - **src**: disallow direct .bat and .cmd file spawning (Ben Noordhuis) [nodejs-private/node-private#563](https://github.com/nodejs-private/node-private/pull/563) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yODEuNCIsInVwZGF0ZWRJblZlciI6IjM3LjI4MS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
argoyle (Migrated from gitlab.com) merged commit d776cd8756 into main 2024-04-12 11:38:57 +00:00
argoyle commented 2024-04-12 11:38:58 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

mentioned in commit d776cd8756

mentioned in commit d776cd8756da8e7da71a31fa9bd3fae00b2b5130
This repo is archived. You cannot comment on pull requests.
Reviewers
No Reviewers
Labels
Clear labels
dependencies
Pull requests that update a dependency file
 docker
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unboundsoftware/pre-commit-node#10