head 1.4; access; symbols; locks; strict; comment @# @; 1.4 date 2022.05.02.18.59.24; author adam; state dead; branches; next 1.3; commitid lFzbCWl8LMKjUvCD; 1.3 date 2022.03.30.06.52.33; author adam; state Exp; branches; next 1.2; commitid emdm0K1cNkfMWcyD; 1.2 date 2016.10.18.20.44.34; author fhajny; state dead; branches; next 1.1; commitid otH8wm2iM6LItFqz; 1.1 date 2016.10.13.14.09.12; author fhajny; state Exp; branches; next ; commitid PmL4Q1B53V6esZpz; desc @@ 1.4 log @nodejs: updated to 16.15.0 Version 16.15.0 'Gallium' Notable changes Add fetch API Adds experimental support to the fetch API. This adds the --experimental-fetch flag that installs the fetch, Request, Response, Headers, and FormData globals. (SEMVER-MINOR) add fetch (Michaël Zasso) (SEMVER-MINOR) add FormData global when fetch is enabled (Michaël Zasso) Other notable changes build: remove broken x32 arch support (Ben Noordhuis) crypto: (SEMVER-MINOR) add KeyObject.prototype.equals method (Filip Skokan) doc: add @@ShogunPanda to collaborators (Paolo Insogna) add JakobJingleheimer to collaborators list (Jacob Smith) add joesepi to collaborators (Joe Sepi) add marsonya to collaborators (Akhil Marsonya) deprecate string coercion in fs.write, fs.writeFileSync (Livia Medeiros) deprecate notice for process methods (Yash Ladha) esm: (SEMVER-MINOR) support https remotely and http locally under flag (Bradley Farias) module: (SEMVER-MINOR) unflag esm json modules (Geoffrey Booth) node-api: (SEMVER-MINOR) add node_api_symbol_for() (Darshan Sen) process: deprecate multipleResolves (Benjamin Gruenbaum) stream: (SEMVER-MINOR) support some and every (Benjamin Gruenbaum) (SEMVER-MINOR) add toArray (Benjamin Gruenbaum) (SEMVER-MINOR) add forEach method (Benjamin Gruenbaum) @ text @$NetBSD: patch-node.gyp,v 1.3 2022/03/30 06:52:33 adam Exp $ Avoid building vendored OpenSSL. --- node.gyp.orig 2022-03-01 10:28:22.000000000 +0000 +++ node.gyp @@@@ -1393,7 +1393,7 @@@@ ] }], # end aix section # TODO(RaisinTen): Enable this to build on other platforms as well. - ['(OS=="mac" or (OS=="linux" and target_arch=="x64")) and \ + ['(OS=="linux" and target_arch=="x64") and \ node_use_openssl=="true"', { 'targets': [ { @ 1.3 log @nodejs: updated to 16.14.2 Version 16.14.2 'Gallium' (LTS) This is a security release. Notable Changes Update to OpenSSL 1.1.1n, which addresses the following vulnerability: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778) More details are available at https://www.openssl.org/news/secadv/20220315.txt For older changes, see https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V16.md @ text @d1 1 a1 1 $NetBSD$ @ 1.2 log @Update lang/nodejs to 6.9.0. - crypto: Don't automatically attempt to load an OpenSSL configuration file, from the OPENSSL_CONF environment variable or from the default location for the current platform. Always triggering a configuration file load attempt may allow an attacker to load compromised OpenSSL configuration into a Node.js process if they are able to place a file in a default location. - node: Introduce the process.release.lts property, set to "Boron". This value is "Argon" for v4 LTS releases and undefined for all other releases. - V8: Backport fix for CVE-2016-5172, an arbitrary memory read. - v8_inspector: Generate a UUID for each execution of the inspector. This provides additional security to prevent unauthorized clients from connecting to the Node.js process via the v8_inspector port when running with --inspect. @ text @d1 1 a1 1 $NetBSD: patch-node.gyp,v 1.1 2016/10/13 14:09:12 fhajny Exp $ d3 1 a3 2 Backport system zlib fix from upstream master. https://github.com/nodejs/node/pull/9077 d5 1 a5 1 --- node.gyp.orig 2016-10-12 19:04:28.000000000 +0000 d7 9 a15 9 @@@@ -477,6 +477,8 @@@@ }], [ 'node_shared_zlib=="false"', { 'dependencies': [ 'deps/zlib/zlib.gyp:zlib' ], + }, { + 'defines': [ 'ZLIB_CONST' ], }], [ 'node_shared_http_parser=="false"', { @ 1.1 log @Update lang/nodejs to 6.8.0. Notable changes - fs: - SyncWriteStream now inherits from Stream.Writable. - fs.existsSync() has been undeprecated. fs.exists() remains deprecated. - http: http.request() now accepts a timeout option. - module: The module loader now maintains its own realpath cache. - npm: Upgraded to 3.10.8 - stream: Duplex streams now show proper instanceof Stream.Writable. - timers: Improved setTimeout/Interval performance by up to 22%. @ text @d1 1 a1 1 $NetBSD$ @