chore(deps): update node.js v22.13.0 → v22.13.1 (#31030)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [node](https://nodejs.org)
([source](https://redirect.github.com/nodejs/node)) | patch | `22.13.0`
-> `22.13.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

###
[`v22.13.1`](https://redirect.github.com/nodejs/node/releases/tag/v22.13.1):
2025-01-21, Version 22.13.1 &#x27;Jod&#x27; (LTS), @&#8203;RafaelGSS

[Compare
Source](https://redirect.github.com/nodejs/node/compare/v22.13.0...v22.13.1)

This is a security release.

##### Notable Changes

- CVE-2025-23083 - src,loader,permission: throw on InternalWorker use
when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and
ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows
(Medium)

Dependency update:

- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch()
(Medium)

##### Commits

-
\[[`520da342e0`](https://redirect.github.com/nodejs/node/commit/520da342e0)]
- **(CVE-2025-22150)** **deps**: update undici to v6.21.1 (Matteo
Collina)
[nodejs-private/node-private#662](https://redirect.github.com/nodejs-private/node-private/pull/662)
-
\[[`99f217369f`](https://redirect.github.com/nodejs/node/commit/99f217369f)]
- **(CVE-2025-23084)** **path**: fix path traversal in normalize() on
Windows (Tobias Nießen)
[nodejs-private/node-private#555](https://redirect.github.com/nodejs-private/node-private/pull/555)
-
\[[`984f735e35`](https://redirect.github.com/nodejs/node/commit/984f735e35)]
- **(CVE-2025-23085)** **src**: fix HTTP2 mem leak on premature close
and ERR_PROTO (RafaelGSS)
[nodejs-private/node-private#650](https://redirect.github.com/nodejs-private/node-private/pull/650)
-
\[[`2446870618`](https://redirect.github.com/nodejs/node/commit/2446870618)]
- **(CVE-2025-23083)** **src,loader,permission**: throw on
InternalWorker use (RafaelGSS)
[nodejs-private/node-private#651](https://redirect.github.com/nodejs-private/node-private/pull/651)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
This commit is contained in:
TrueCharts Bot
2025-01-24 03:31:42 +01:00
committed by GitHub
parent 3433e074a2
commit 68c0188f0d
+1 -1
View File
@@ -1 +1 @@
22.13.0
22.13.1