head	1.20;
access;
symbols
	pkgsrc-2026Q3:1.17.0.2
	pkgsrc-2026Q3-base:1.17
	pkgsrc-2026Q2:1.10.0.2
	pkgsrc-2026Q2-base:1.10
	pkgsrc-2026Q1:1.8.0.2
	pkgsrc-2026Q1-base:1.8
	pkgsrc-2025Q4:1.3.0.2
	pkgsrc-2025Q4-base:1.3;
locks; strict;
comment	@# @;


1.20
date	2026.10.29.10.26.22;	author adam;	state Exp;
branches;
next	1.19;
commitid	ZW84PfRt3CP0km1H;

1.19
date	2026.10.22.11.07.35;	author adam;	state Exp;
branches;
next	1.18;
commitid	ubanLsKxFu94Ms0H;

1.18
date	2026.10.19.09.28.27;	author adam;	state Exp;
branches;
next	1.17;
commitid	EJqRGm3HztVbk40H;

1.17
date	2026.09.09.07.30.58;	author adam;	state Exp;
branches
	1.17.2.1;
next	1.16;
commitid	AzuMsfUmJmswXUUG;

1.16
date	2026.08.27.07.25.31;	author adam;	state Exp;
branches;
next	1.15;
commitid	TDc57PaqdCPwlfTG;

1.15
date	2026.08.06.13.27.41;	author adam;	state Exp;
branches;
next	1.14;
commitid	geud4URGfR6D1AQG;

1.14
date	2026.08.01.17.28.49;	author adam;	state Exp;
branches;
next	1.13;
commitid	nRAPtWM3v4kswXPG;

1.13
date	2026.07.17.20.50.28;	author wiz;	state Exp;
branches;
next	1.12;
commitid	lM2OgJ82SFAr73OG;

1.12
date	2026.06.24.14.18.08;	author adam;	state Exp;
branches;
next	1.11;
commitid	QaDJbmwQnroEG3LG;

1.11
date	2026.06.22.08.55.52;	author adam;	state Exp;
branches;
next	1.10;
commitid	xCyP8tkynMgdYLKG;

1.10
date	2026.05.22.08.07.17;	author adam;	state Exp;
branches
	1.10.2.1;
next	1.9;
commitid	ISiGjc4sX5SfHMGG;

1.9
date	2026.04.16.10.25.21;	author adam;	state Exp;
branches;
next	1.8;
commitid	8vcwoSSXtLNhCaCG;

1.8
date	2026.03.25.16.40.16;	author adam;	state Exp;
branches;
next	1.7;
commitid	GFYeh6OanogLonzG;

1.7
date	2026.02.26.18.20.11;	author adam;	state Exp;
branches;
next	1.6;
commitid	o9eMANe50x8OOUvG;

1.6
date	2026.02.11.20.21.10;	author adam;	state Exp;
branches;
next	1.5;
commitid	ALk9YQFLKhQhYZtG;

1.5
date	2026.01.14.19.08.50;	author adam;	state Exp;
branches;
next	1.4;
commitid	8KelfLo6Ff5ltoqG;

1.4
date	2026.01.07.08.47.39;	author wiz;	state Exp;
branches;
next	1.3;
commitid	1wQ3ICD8eebefrpG;

1.3
date	2025.12.12.09.08.40;	author adam;	state Exp;
branches;
next	1.2;
commitid	Rwv33NVGHcqcd6mG;

1.2
date	2025.11.16.17.43.20;	author wiz;	state Exp;
branches;
next	1.1;
commitid	sqr86T6pEpOETNiG;

1.1
date	2025.11.13.19.00.13;	author adam;	state Exp;
branches;
next	;
commitid	4FCIvJ2B7lXNpqiG;

1.17.2.1
date	2026.10.25.09.16.51;	author bsiegert;	state Exp;
branches;
next	;
commitid	kpepbR0Mqksm4Q0H;

1.10.2.1
date	2026.07.11.17.24.43;	author maya;	state Exp;
branches;
next	;
commitid	kR8htKGgbdeZagNG;


desc
@@


1.20
log
@nodejs24: updated to 24.22.2

24.22.2 'Krypton' (LTS)

- deps: V8: backport 786c1c2d88d4 (Eliau Elkouby)
- deps: V8: backport 1a0089053443 (Jakob Linke)
- deps: V8: backport c9c0abfa51f0 (Jakob Linke)
- deps: V8: backport ebd15783b7ba (Marja Hölttä)
- deps: V8: cherry-pick 853553fe755c (Victor Gomes)
- stream: keep async context of parked writes (Matteo Collina)
@
text
@# $NetBSD: Makefile,v 1.19 2026/10/22 11:07:35 adam Exp $

DISTNAME=	node-v24.22.2
EXTRACT_SUFX=	.tar.xz

USE_LANGUAGES=	c c++

USE_CXX_FEATURES=	c++20 charconv

.include "../../mk/bsd.prefs.mk"

# XXX: figure out a way to add rpaths to torque
MAKE_ENV+=	LD_LIBRARY_PATH=${PREFIX}/lib

CONFIGURE_ARGS+=	--shared-nghttp3
CONFIGURE_ARGS+=	--shared-ngtcp2

CHECK_INTERPRETER_SKIP+=	lib/node_modules/corepack/shims/*.ps1
CHECK_PORTABILITY_SKIP+=	deps/uv/autogen.sh
CHECK_PORTABILITY_SKIP+=	deps/v8/tools/cppgc/export_to_github.sh
CHECK_PORTABILITY_SKIP+=	deps/v8/tools/cppgc/test_cmake.sh
CHECK_PORTABILITY_SKIP+=	tools/macos-installer/pkgbuild/npm/scripts/preinstall

.if ${MACHINE_ARCH} == "i386"
# required for SSE2 code under i386.
CXXFLAGS+=	-mstackrealign
.endif

.PHONY: minusx
post-install: minusx
minusx:
	${CHMOD} -x ${DESTDIR}${PREFIX}/lib/node_modules/corepack/shims/*.cmd

.include "../../lang/nodejs/options.mk"

# Node turns on -latomic for arm, mips and ppc.
.if ${MACHINE_ARCH:M*arm*} || \
    ${MACHINE_ARCH:M*powerpc*} || \
    ${MACHINE_ARCH:M*mips*}
.include "../../devel/libatomic/buildlink3.mk"
.endif

.include "../../lang/nodejs/Makefile.common"

REPLACE_NODEJS+=	deps/corepack/dist/*.js

.include "../../net/ngtcp2/buildlink3.mk"
.include "../../www/nghttp3/buildlink3.mk"
.include "../../mk/atomic64.mk"
.include "../../mk/bsd.pkg.mk"
@


1.19
log
@nodejs24: updated to 24.22.1

24.22.1 'Krypton' (LTS)

Notable Changes

(CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
(CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
(CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
(CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
(CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
(CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
(CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
(CVE-2026-111497) deps: brotli: cherry-pick 0ed4268a4401abcb44720963 (Evgenii Kliuchnikov)
crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
deps: update timezone to 2026e (Node.js GitHub Bot)
deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
deps: update undici to 7.30.1 (Node.js GitHub Bot)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.18 2026/10/19 09:28:27 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.22.1
@


1.18
log
@nodejs24: updated to 24.22.0

24.22.0 'Krypton' (LTS)

Notable Changes

- (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer)
- (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan)
- (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan)
- (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan)
- (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan)
- doc: add araujogui to collaborators (Guilherme Araújo)
- doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel)
- (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford)
- (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell)
- (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell)
- (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell)
- (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell)
- (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo)
- (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo)
- (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell)
- (SEMVER-MINOR) util: implement util.throttle (James M Snell)
- (SEMVER-MINOR) util: implement debounce (James M Snell)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.17 2026/09/09 07:30:58 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.22.0
@


1.17
log
@nodejs24: updated to 24.21.0

24.21.0 'Krypton' (LTS)

Notable Changes

- crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot)
- (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan)
- deps: update OpenSSL to 3.5.8 (Node.js GitHub Bot)
- deps: update Undici to 7.29.1 (Node.js GitHub Bot)
- (SEMVER-MINOR) lib,src: improve histogram implementation (James M Snell)
- (SEMVER-MINOR) net: improve performance of net.BlockList (James M Snell)
- (SEMVER-MINOR) perf_hooks: add statistical hypothesis testing to histogram (James M Snell)
- (SEMVER-MINOR) util: add non-throwing MIMEType.parse (James M Snell)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2026/08/27 07:25:31 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.21.0
@


1.17.2.1
log
@Pullup ticket #7322 - requested by maya
archivers/brotli: security fix
lang/nodejs: security fix
lang/nodejs22: security fix
lang/nodejs24: security fix

Revisions pulled up:
- archivers/brotli/Makefile                                     1.14
- archivers/brotli/distinfo                                     1.15
- lang/nodejs/Makefile                                          1.361-1.364
- lang/nodejs/Makefile.common                                   1.67
- lang/nodejs/distinfo                                          1.332-1.336
- lang/nodejs/patches/patch-common.gypi                         1.15
- lang/nodejs/patches/patch-configure                           deleted
- lang/nodejs/patches/patch-deps_histogram_src_hdr__histogram.c deleted
- lang/nodejs/patches/patch-deps_v8_src_base_memcopy.h          deleted
- lang/nodejs22/Makefile                                        1.27-1.28
- lang/nodejs22/distinfo                                        1.25-1.26
- lang/nodejs22/patches/patch-deps_v8_third__party_abseil-cpp_absl_debugging_internal_elf__mem__image.cc 1.1
- lang/nodejs24/Makefile                                        1.18-1.19
- lang/nodejs24/distinfo                                        1.18-1.20
- lang/nodejs24/patches/patch-deps_histogram_src_hdr__histogram.c 1.1
- lang/nodejs24/patches/patch-deps_v8_src_compiler_turboshaft_int64-lowering-reducer.h 1.1

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Thu Oct 22 11:06:23 UTC 2026

   Modified Files:
           pkgsrc/archivers/brotli: Makefile distinfo

   Log Message:
   brotli: updated to 1.2.1

   1.2.1
   SECURITY
   - CVE-2026-111497: out-of-bounds write permits remote code execution

---
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Mon Oct  5 14:12:00 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs24: distinfo
   Added Files:
            pkgsrc/lang/nodejs24/patches:
   patch-deps_histogram_src_hdr__histogram.c
                patch-deps_v8_src_compiler_turboshaft_int64-lowering-reducer.h

   Log Message:
   lang/nodejs24: Fix build under NetBSD/i386

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Mon Oct 19 09:28:27 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs24: Makefile distinfo

   Log Message:
   nodejs24: updated to 24.22.0

   24.22.0 'Krypton' (LTS)

   Notable Changes

   - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer)
   - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan)
   - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip
   Skokan)
   - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip
   Skokan)
   - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher
   APIs (Filip Skokan)
   - doc: add araujogui to collaborators (Guilherme Araújo)
   - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel)
   - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child
   processes (Guy Bedford)
   - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M
   Snell)
   - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram
   (James M Snell)
   - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M
   Snell)
   - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange
   (James M Snell)
   - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme
   Araújo)
   - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]()
   (Guilherme Araújo)
   - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell)
   - (SEMVER-MINOR) util: implement util.throttle (James M Snell)
   - (SEMVER-MINOR) util: implement debounce (James M Snell)

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Thu Oct 22 11:07:35 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs24: Makefile distinfo

   Log Message:
   nodejs24: updated to 24.22.1

   24.22.1 'Krypton' (LTS)

   Notable Changes

   (CVE-2026-105481) http: ensure agent data guard works without I/O (James M
   Snell)
   (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M
   Snell)
   (CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
   (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
   (CVE-2026-106073) permission: check permission model in realpathSync
   (RafaelGSS)
   (CVE-2026-106074) crypto: reset random caches across snapshots (Filip
   Skokan)
   (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH
   (Antoine du Hamel)
   (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268a4401abcb44720963
   (Evgenii Kliuchnikov)
   crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
   deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
   deps: update timezone to 2026e (Node.js GitHub Bot)
   deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
   deps: update undici to 7.30.1 (Node.js GitHub Bot)

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Mon Oct 12 09:08:41 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs22: Makefile distinfo
   Added Files:
            pkgsrc/lang/nodejs22/patches:

   patch-deps_v8_third__party_abseil-cpp_absl_debugging_internal_elf__mem__image.cc

   Log Message:
   nodejs22: updated to 22.23.3

   22.23.3 'Jod' (LTS)

   Notable Changes

   - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot)
   - deps: update corepack to 0.36.0 (Node.js GitHub Bot)
   - deps: upgrade npm to 10.9.9 (npm team)
   - deps: update icu to 78.3 (Node.js GitHub Bot)
   - deps: update OpenSSL 3.5.8 (Node.js GitHub Bot)
   - deps: update Undici to 6.28.1 (mcollina)
   - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong
   Li)
   - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis)

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Thu Oct 22 11:17:46 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs22: Makefile distinfo

   Log Message:
   nodejs22: updated to 22.23.4

   22.23.4 'Jod' (LTS)

   Notable Changes

   (CVE-2026-105481) http: ensure agent data guard works without I/O (James M
   Snell)
   (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M
   Snell)
   (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
   (CVE-2026-106073) permission: check permission model in realpathSync
   (RafaelGSS)
   (CVE-2026-106074) crypto: reset random caches across snapshots (Filip
   Skokan)
   (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH
   (Antoine du Hamel)
   (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268a4401abcb44720963
   (Evgenii Kliuchnikov)
   crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
   deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
   deps: update timezone to 2026e (Node.js GitHub Bot)
   deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
   deps: update sqlite to 3.53.4 (Node.js GitHub Bot)
   deps: update undici to 6.29.1 (Node.js GitHub Bot)

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Tue Sep 22 09:33:43 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs: Makefile distinfo

   Log Message:
   nodejs: updated to 26.10.0

   26.10.0 (Current)

   Notable Changes

   - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer)
   - doc: add araujogui to collaborators (Guilherme Araújo)
   - (SEMVER-MINOR) ffi: load libraries from a mounted VFS (Matteo Collina)
   - (SEMVER-MINOR) fs: add openAsBlobSync (greenhead)
   - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child
   processes (Guy Bedford)
   - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M
   Snell)
   - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram
   (James M Snell)
   - (SEMVER-MINOR) sqlite: bind undefined to NULL (Trevor Burnham)
   - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell)
   - (SEMVER-MINOR) test: expand histogram test coverage (James M Snell)
   - (SEMVER-MINOR) util: implement util.throttle (James M Snell)
   - (SEMVER-MINOR) util: implement debounce (James M Snell)

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Thu Oct  8 05:49:04 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs: Makefile distinfo
            pkgsrc/lang/nodejs/patches: patch-common.gypi
   Removed Files:
            pkgsrc/lang/nodejs/patches:
   patch-deps_histogram_src_hdr__histogram.c

   Log Message:
   nodejs: updated to 26.11.1

   26.11.1 (Current)

   - Revert "build: toggle doc-kit verbosity based on V" (Antoine du Hamel)
   - Revert "build, doc: move to redesign" (Antoine du Hamel)
   - Revert "tools: bump the doc group in /tools/doc with 4 updates" (Antoine
   du Hamel)

---
   Module Name:    pkgsrc
   Committed By:   ryoon
   Date:           Sun Oct 11 05:48:38 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs: distinfo
   Added Files:
            pkgsrc/lang/nodejs/patches: patch-configure

   Log Message:
   lang/nodejs: Fix build with lang/python315

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Mon Oct 19 09:27:44 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs: Makefile distinfo
   Removed Files:
            pkgsrc/lang/nodejs/patches: patch-configure
                patch-deps_v8_src_base_memcopy.h

   Log Message:
   nodejs: updated to 26.12.0

   26.12.0 (Current)

   Notable Changes

   - (SEMVER-MINOR) doc,lib,src: throw on missing WebAssembly or RX support
   (Paolo Insogna)
   - (SEMVER-MINOR) http: add websocketMask() and websocketUnmask() (James M
   Snell)

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Thu Oct 22 11:08:12 UTC 2026

   Modified Files:
            pkgsrc/lang/nodejs: Makefile Makefile.common distinfo

   Log Message:
   nodejs: updated to 26.12.1

   26.12.1 (Current)

   Notable Changes

   (CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses
   (Matteo Collina) – High
   (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M
   Snell) – High
   (CVE-2026-105483) tls: fix ip normalization regression (James M Snell) –
   High
   (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH
   (Antoine du Hamel) – High
   (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268a4401abcb44720963
   (Evgenii Kliuchnikov) – High
   (CVE-2026-105481) http: ensure agent data guard works without I/O (James M
   Snell) – Medium
   (CVE-2026-106074) crypto: reset random caches across snapshots (Filip
   Skokan) – Medium
   (CVE-2026-106070) zlib: avoid caching invalid ZIP local headers (Matteo
   Collina) – Low
   (CVE-2026-106071) src: fix the fs permission tree node on wildcard nodes
   (James M Snell) – Low
   (CVE-2026-106073) permission: check permission model in realpathSync
   (RafaelGSS) – Low
   deps: V8: backport 93cd21e8254b (Joyee Cheung)
   crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
   tls: reject chains containing blocked public keys (Ulises Gascon)
   deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
   tools: retry Gatekeeper check and stapling after notarization (Ryan
   Aslett)
   crypto: harden X.509 conversion and formatting (Filip Skokan)
@
text
@d1 1
a1 1
# $NetBSD$
d3 1
a3 1
DISTNAME=	node-v24.22.1
@


1.16
log
@nodejs24: updated to 24.20.0

24.20.0 'Krypton' (LTS)

Notable Changes

- (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger)
- (SEMVER-MINOR) buffer: add end parameter (Robert Nagy)
- crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot)
- doc: add MikeMcC399 as collaborator (Mike McCready)
- (SEMVER-MINOR) lib,permission: add permission.drop (Rafael Gonzaga)
- (SEMVER-MINOR) loader: implement package maps (Maël Nison)
- (SEMVER-MINOR) src,permission: add --permission-audit (RafaelGSS)
- (SEMVER-MINOR) stream: add node:stream/iter implementation (James M Snell)
- (SEMVER-MINOR) test_runner: add context.log() and test:log event (Moshe Atlow)
- (SEMVER-MINOR) test_runner: report entryFile in TestStream events (Moshe Atlow)
- (SEMVER-MINOR) wasm: enable JSPI (Guy Bedford)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.15 2026/08/06 13:27:41 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.20.0
@


1.15
log
@nodejs24: updated to 24.19.0

24.19.0 'Krypton' (LTS)

Notable Changes

- (SEMVER-MINOR) buffer: implement blob.textStream() (Matthew Aitken)
- (SEMVER-MINOR) deps: update OpenSSL build config to support compression (Tim Perry)
- (SEMVER-MINOR) doc: update blockList stability status to release candidate (alphaleadership)
- doc: mark stream.compose stable (Matteo Collina)
- (SEMVER-MINOR) esm: add --experimental-import-text flag (Efe)
- (SEMVER-MINOR) fs: support caller-supplied readFile() buffers (Matteo Collina)
- (SEMVER-MINOR) http: add httpValidation option to configure header value validation (RajeshKumar11)
- (SEMVER-MINOR) net: support TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive (Guy Bedford)
- (SEMVER-MINOR) perf_hooks: sample delay per event loop iteration (Pablo Erhard)
- (SEMVER-MINOR) src: allow empty --experimental-config-file (Marco Ippolito)
- (SEMVER-MINOR) stream: expose ReadableStreamTee (Matteo Collina)
- (SEMVER-MINOR) tls: report negotiated TLS groups (Filip Skokan)
- (SEMVER-MINOR) tls: add certificateCompression option (Tim Perry)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2026/08/01 17:28:49 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.19.0
@


1.14
log
@nodejs24: updated to 24.18.1

24.18.1 'Krypton' (LTS)

Notable Changes

(CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
(CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
(CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
(CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
(CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
(CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) – Medium
(CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
(CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
(CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
(CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
(CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
deps: update llhttp to 9.4.3 (Paolo Insogna)
deps: update undici to 7.29.0 (Node.js GitHub Bot)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2026/07/17 20:50:28 wiz Exp $
d3 1
a3 1
DISTNAME=	node-v24.18.1
@


1.13
log
@nodejs24: fix hang on shutdown

patch from upstream pull request

Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2026/06/24 14:18:08 adam Exp $
d3 1
a3 2
DISTNAME=	node-v24.18.0
PKGREVISION=	1
@


1.12
log
@nodejs24: updated to 24.18.0

24.18.0 'Krypton' (LTS)

Notable Changes

- crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot)
- http: avoid stream listeners on idle agent sockets (Matteo Collina)
- (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina)
- (SEMVER-MINOR) crypto: align key argument names in docs and error messages (Filip Skokan)
- (SEMVER-MINOR) crypto: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan)
- (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan)
- (SEMVER-MINOR) http: add writeInformation to send arbitrary 1xx status codes (Tim Perry)
- (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook)
- Revert "stream: noop pause/resume on destroyed streams" (Stewart X Addison)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2026/06/22 08:55:52 adam Exp $
d4 1
@


1.11
log
@nodejs24: updated to 24.17.0

24.17.0 'Krypton' (LTS)

Notable Changes

(CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
(CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
(CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
(CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
(CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
(CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
(CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
(CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
(CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
(CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
(CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2026/05/22 08:07:17 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.17.0
@


1.10
log
@nodejs24: updated to 24.16.0

24.16.0 'Krypton' (LTS)

Notable Changes

- (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378)
- (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung)
- (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin)
- (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang)
- (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina)
- (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat)
- (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor)
- (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini)
- (SEMVER-MINOR) test_runner: align mock timeout api (sangwook)
- (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj)
- (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2026/04/16 10:25:21 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.16.0
@


1.10.2.1
log
@Pullup ticket #7154 - requested by taca
lang/nodejs24: Security fix

Revisions pulled up:
- lang/nodejs24/Makefile                                        1.11
- lang/nodejs24/distinfo                                        1.11

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Mon Jun 22 08:55:52 UTC 2026

   Modified Files:
   	pkgsrc/lang/nodejs24: Makefile distinfo

   Log Message:
   nodejs24: updated to 24.17.0

   24.17.0 'Krypton' (LTS)

   Notable Changes

   (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
   (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
   (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
   (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
   (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
   (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
   (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
   (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
   (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
   (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
   (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
@
text
@d1 1
a1 1
# $NetBSD$
d3 1
a3 1
DISTNAME=	node-v24.17.0
@


1.9
log
@nodejs24: updated to 24.15.0

24.15.0 'Krypton' (LTS)

Notable Changes

- (SEMVER-MINOR) cli: add --max-heap-size option (tannal)
- cli: add --require-module/--no-require-module (Joyee Cheung)
- (SEMVER-MINOR) crypto: add raw key formats support to the KeyObject APIs (Filip Skokan)
- (SEMVER-MINOR) fs: add throwIfNoEntry option for fs.stat and fs.promises.stat (Juan José)
- (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav)
- module: mark require(esm) as stable (Joyee Cheung)
- module: mark module compile cache as stable (Joyee Cheung)
- (SEMVER-MINOR) net: add setTOS and getTOS to Socket (Amol Yadav)
- (SEMVER-MINOR) sqlite: add limits property to DatabaseSync (Mert Can Altin)
- sqlite: mark as release candidate (Matteo Collina)
- (SEMVER-MINOR) src: add C++ support for diagnostics channels (RafaelGSS)
- (SEMVER-MINOR) stream: rename Duplex.toWeb() type option to readableType (René)
- test_runner: add exports option for module mocks (sangwook)
- (SEMVER-MINOR) test_runner: expose worker ID for concurrent test execution (Ali Hassan)
- (SEMVER-MINOR) test_runner: show interrupted test on SIGINT (Matteo Collina)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2026/03/25 16:40:16 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.15.0
@


1.8
log
@nodejs*: updated to 25.8.2, 24.14.1, 22.22.2, 20.20.2

Notable Changes

(CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
(CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
(CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
(CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan) - Medium
(CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
(CVE-2026-21712) handle url crash on different url formats (RafaelGSS) - Medium
(CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low
(CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2026/02/26 18:20:11 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.14.1
@


1.7
log
@nodejs24: updated to 24.14.0

24.14.0 'Krypton' (LTS)

Notable Changes

- (SEMVER-MINOR) async_hooks: add trackPromises option to createHook() (Joyee Cheung)
- build,deps: replace cjs-module-lexer with merve (Yagiz Nizipli)
- (SEMVER-MINOR) deps: add LIEF as a dependency (Joyee Cheung)
- (SEMVER-MINOR) events: repurpose events.listenerCount() to accept EventTargets (René)
- (SEMVER-MINOR) fs: add ignore option to fs.watch (Matteo Collina)
- (SEMVER-MINOR) http: add http.setGlobalProxyFromEnv() (Joyee Cheung)
- (SEMVER-MINOR) module: allow subpath imports that start with
- (SEMVER-MINOR) process: preserve AsyncLocalStorage in queueMicrotask only when needed (Gürgün Dayıoğlu)
- (SEMVER-MINOR) sea: split sea binary manipulation code (Joyee Cheung)
- (SEMVER-MINOR) sqlite: enable defensive mode by default (Bart Louwers)
- (SEMVER-MINOR) sqlite: add sqlite prepare options args (Guilherme Araújo)
- (SEMVER-MINOR) src: add initial support for ESM in embedder API (Joyee Cheung)
- (SEMVER-MINOR) stream: add bytes() method to node:stream/consumers (wantaek)
- (SEMVER-MINOR) stream: do not pass readable.compose() output via Readable.from() (René)
- (SEMVER-MINOR) test: use fixture directories for sea tests (Joyee Cheung)
- (SEMVER-MINOR) test_runner: add env option to run function (Ethan Arrowood)
- (SEMVER-MINOR) test_runner: support expecting a test-case to fail (Jacob Smith)
- (SEMVER-MINOR) util: add convertProcessSignalToExitCode utility (Erick Wendel)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2026/02/11 20:21:10 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.14.0
@


1.6
log
@nodejs24: updated o 24.13.1

24.13.1 'Krypton' (LTS)

Notable Changes

- build: add support for Python 3.14 (Christian Clauss)
- cli: mark --heapsnapshot-near-heap-limit as stable (Joyee Cheung)
- crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot)
- doc: mark --build-snapshot and --build-snapshot-config as stable (Joyee Cheung)
- meta: add avivkeller to collaborators (Aviv Keller)
- meta: add gurgunday to collaborators (Gürgün Dayıoğlu)
- meta: add Renegade334 to collaborators (Renegade334)
- url: update ada to v3.4.2 and support unicode 17 (Yagiz Nizipli)
- v8: mark v8.queryObjects() as stable (Joyee Cheung)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2026/01/14 19:08:50 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.13.1
@


1.5
log
@nodejs24: updated to 24.13.0

24.13.0 'Krypton' (LTS)

lib:

(CVE-2025-59465) add TLSSocket default error handler (RafaelGSS)
(CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS)
lib,permission:
(CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS)
src:
(CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina)
src,lib:
(CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич)
tls:
(CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2026/01/07 08:47:39 wiz Exp $
d3 1
a3 1
DISTNAME=	node-v24.13.0
a8 1
FORCE_CXX_STD=		gnu++20
@


1.4
log
@*: recursive bump for icu 78.1
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2025/12/12 09:08:40 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.12.0
a10 1
PKGREVISION= 1
@


1.3
log
@nodejs24: updated to 24.12.0

24.12.0 'Krypton' (LTS)

Notable Changes

- (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga)
- (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga)
- (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito)
- (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho)
- (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers)
- (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito)
- (SEMVER-MINOR) src: add an option to make compile cache portable (Aditi)
- (SEMVER-MINOR) src,permission: add --allow-inspector ability (Rafael Gonzaga)
- (SEMVER-MINOR) v8: add cpu profile (theanarkh)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2025/11/16 17:43:20 wiz Exp $
d11 1
@


1.2
log
@nodejs24: fix build on NetBSD < 11.99.4
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2025/11/13 19:00:13 adam Exp $
d3 1
a3 1
DISTNAME=	node-v24.11.1
@


1.1
log
@nodejs24: added version 24.11.1

24.11.1 'Krypton' (LTS)

Notable Changes

The known issue relating to Buffer.allocUnsafe incorrectly zero-filling buffers
has now been addressed and now returns uninitialized memory as documented in the
Buffer.allocUnsafe
documentation.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.335 2025/10/30 12:22:28 adam Exp $
d46 2
@