chore(deps): update dependency node to v20.18.2
This MR contains the following updates:
Package | Update | Change |
---|---|---|
node (source) | patch |
20.18.1 -> 20.18.2
|
Release Notes
nodejs/node (node)
v20.18.2
: 2025-01-21, Version 20.18.2 'Iron' (LTS), @RafaelGSS
This is a security release.
Notable Changes
- CVE-2025-23083 - throw on InternalWorker use when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)
Dependency update:
- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits
- [
df8b9f2c3e
] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#663 - [
42d5821873
] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555 - [
8187a4b9bb
] - src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) - [
389f239a28
] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#652
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.