* crypto: Support for crypto.scrypt() has been added
* fs:
+ APIs that take mode as arguments no longer throw on values
larger than 0o777
+ BigInt support has been added to fs.stat and fs.watchFile
+ Fix crashes in closed event watchers.
* worker_threads: multi-threading has been added behind the
--experimental-worker flag in the worker_threads module.
This feature is *experimental* and may receive breaking changes
at any time.
- npm_search_paths.patch: Fix typo causing npm to not work
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=13
memory consumed when reading from the network into JavaScript
using the net.Socket object directly as a stream
(CVE-2018-7164, bsc#1097537)
+ Unbundled nghttp2 to fix Denial of Service vulnerability
(CVE-2018-1000168, bsc#1097401)
(CVE-2018-7162, bsc#1097538)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=11
* Fixes memory exhaustion DoS (CVE-2018-7164): Fixes a bug
introduced in 9.7.0 that increases the memory consumed when
reading from the network into JavaScript using the net.Socket
object directly as a stream.
* http2:
+ Fixes Denial of Service vulnerability by updating the
http2 implementation to not crash under certain circumstances
during cleanup (CVE-2018-7161, bsc#1097404)
+ Fixes Denial of Service vulnerability by upgrading nghttp2
to 1.32.0 (CVE-2018-1000168, bsc#1097401)
* tls: Fixes Denial of Service vulnerability by updating the TLS
implementation to not crash upon receiving
(CVE-2018-7162)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=9
* deps: update V8 to 6.7.288.43
* stream: ensure Stream.pipeline re-throws errors without callback
- Changes in version 10.3.0:
* deps: upgrade npm to 6.1.0
* fs: fix reads with pos > 4GB
* net: new option to allow IPC servers to be readable and writable
by all users
* stream: fix removeAllListeners() for Stream.Readable to work as
expected when no arguments are passed
npm_search_paths.patch: no longer override explicitly prefixed etc/
versioned.patch, env_shebang.patch: refreshed
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=8
* addons: Fixed a memory leak for users of AsyncResource and N-API.
* assert: The error parameter of assert.throws() can now be
an object containing regular expressions.
* crypto: The authTagLength option has been made more flexible.
* esm: Builtin modules now provide named exports in ES6 modules.
* http: Handling of close and aborted events has been made more
consistent.
* module: add --preserve-symlinks-main
* timers: timeout.refresh() has been added to the public API.
- fix_ci_tests.patch: refreshed
- versioned.patch: refreshed
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=7
* console: make console.table() use colored inspect
* fs: move fs/promises to fs.promises
* http: added aborted property to request
* n-api: initialize a module via a special symbol
* src: add public API to expose the main V8 Platform
- Changes in version 10.0.0:
* Assert:
+ Calling assert.fail() with more than one argument is deprecated.
+ Calling assert.ok() with no arguments will now throw.
+ Calling assert.ifError() will now throw with any argument
other than undefined or null. Previously the method would throw
with any truthy value.
* Async_hooks:
+ Older experimental async_hooks APIs have been removed.
* Buffer:
+ Uses of new Buffer() and Buffer() outside of the node_modules
directory will now emit a runtime deprecation warning.
+ Buffer.isEncoding() now returns undefined for falsy values,
including an empty string.
+ Buffer.fill() will throw if an attempt is made to fill with
an empty Buffer.
* Child Process: Undefined properties of env are ignored.
* console: console.table() method has been added.
* crypto:
+ The crypto.createCipher() and crypto.createDecipher() methods
have been deprecated. Please use crypto.createCipheriv() and
crypto.createDecipheriv() instead.
+ The decipher.finaltol() method has been deprecated.
+ The crypto.DEFAULT_ENCODING property has been deprecated.
+ The ECDH.convertKey() method has been added.
+ The crypto.fips property has been deprecated.
* deps:
+ V8 has been updated to 6.6
+ npm upgraded to 5.8.0
* EventEmitter:
+ The EventEmitter.prototype.off() method has been added as
an alias for EventEmitter.prototype.removeListener().
* File System:
+ The fs/promises API provides experimental promisified
versions of the fs functions.
+ Invalid path errors are now thrown synchronously.
+ fs.readFile() method now partitions reads to avoid thread
pool exhaustion.
* http:
+ Processing of HTTP Status codes 100, 102-199 has been improved.
+ Multi-byte characters in URL paths are now forbidden.
* N-API: The n-api is no longer experimental.
* net: The 'close' event will be emitted after 'end'.
* perf_hooks:
+ The PerformanceObserver class is now an AsyncResource and can
be monitored using async_hooks.
+ Trace events are now emitted for performance events.
+ The performance API has been simplified.
+ Performance milestone marks will be emitted as trace events.
* process:
+ Using non-string values for process.env is deprecated.
+ The process.assert() method is deprecated.
* repl:
+ REPL now experimentally supports top-level await when using
the --experimental-repl-await flag.
+ The previously deprecated "magic mode" has been removed.
+ The previously deprecated NODE_REPL_HISTORY_FILE environment
variable has been removed.
+ Proxy objects are shown as Proxy objects when inspected.
* streams:
+ The 'readable' event is now always deferred with nextTick.
+ A new pipeline() method has been provided for building
end-to-data stream pipelines.
+ support for async for-await has been added to stream.Readable
* timers: The enroll() and unenroll() methods have been deprecated
* tls:
+ The tls.convertNPNProtocols() method has been deprecated.
+ Support for NPN (next protocol negotiation) has been dropped.
+ The ecdhCurve default is now 'auto'.
* Trace Events:
+ A new trace_events top-level module allows trace event
categories to be enabled/disabled at runtime.
* URL: The WHATWG URL API is now a global.
* Util:
+ util.types.is[…] type checks have been added.
+ Support for bigint formatting has been added to util.inspect().
OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/nodejs10?expand=0&rev=1
