Accepting request 1067187 from devel:languages:nodejs

- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes

- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch

OBS-URL: https://build.opensuse.org/request/show/1067187
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nodejs18?expand=0&rev=12

SHASUMS256.txt

@@ -1,34 +1,34 @@
-a65bd3fe91ffeb31d12a208e811943e3ebba4706553a4845a03d857beaeec51e  node-v18.16.0-aix-ppc64.tar.gz
+2e9a2b5cf051e3ecf4e5816aec38c79e4d549db43dd33b523c1b6b9b3ea18326  node-v18.14.2-aix-ppc64.tar.gz
-82c7bb4869419ce7338669e6739a786dfc7e72f276ffbed663f85ffc905dcdb4  node-v18.16.0-darwin-arm64.tar.gz
+19f2e5f0659909e6f4b583fe581c0a5f14d079232f24093a55722d1bcf1b9991  node-v18.14.2-darwin-arm64.tar.gz
-b23cdf4fa0e9f77273720ab18eabdd7691edbb69e08ec3b65afd69bef23fe209  node-v18.16.0-darwin-arm64.tar.xz
+725f06eabcede54d7f235ff90a6a3db71104f6ffe40f854fe598595dd1cae597  node-v18.14.2-darwin-arm64.tar.xz
-cd520da6e2e89fab881c66a3e9aff02cb0d61d68104b1d6a571dd71bef920870  node-v18.16.0-darwin-x64.tar.gz
+137fbd2abf59db87033a1114fab7afb497e3d747c3726dd881b6297d59782da2  node-v18.14.2-darwin-x64.tar.gz
-2c8aa0333111c2411564bfb85be44186aeb581392f73c4be5912cbb125d99043  node-v18.16.0-darwin-x64.tar.xz
+f99dbf696c23d588747dd132f0bfa3bf2bf55326a3d5e38a8adcb93a7046a56b  node-v18.14.2-darwin-x64.tar.xz
-effeb73616e5297922ed89a1b94d2664390040a83184504c1cc1305b0c0c853f  node-v18.16.0-headers.tar.gz
+2a9c2de887310dce67c93e2939230a4192d198b3cf0303c23a6e67d8a526a7c5  node-v18.14.2-headers.tar.gz
-0eb9823c2cc72792c2d4413f57b5a36232e173d7edefb1909c37e364a823f9c7  node-v18.16.0-headers.tar.xz
+e1fc3e63e269b4de0f9b187d6927fe0d981b9a7283232e61615f4fb4afdd6582  node-v18.14.2-headers.tar.xz
-dc3dfaee899ed21682e47eaf15525f85aff29013c392490e9b25219cd95b1c35  node-v18.16.0-linux-arm64.tar.gz
+e5c5d83e65271260ea4135330309d43fdc26c42457156ff237eeba65c6237f58  node-v18.14.2-linux-arm64.tar.gz
-c81dfa0bada232cb4583c44d171ea207934f7356f85f9184b32d0dde69e2e0ea  node-v18.16.0-linux-arm64.tar.xz
+e3e39b9c3d5475857f62bd8d501d4d3f39303691b6357fba81f2c2b6de6e8520  node-v18.14.2-linux-arm64.tar.xz
-a3968db44e5ae17243d126ff79b1756016b198f7cc94c6fad8522aac481b4ff3  node-v18.16.0-linux-armv7l.tar.gz
+a48ec9924ca1d4fe28382b318dcb58f0687ab8e9d2f5a65ecb471fb747d369e2  node-v18.14.2-linux-armv7l.tar.gz
-57ba6b71eb039fa896c329e68669b21f6717622c560c6f61a0c97d18ca866b2d  node-v18.16.0-linux-armv7l.tar.xz
+39c308b9a75591860c4d2c05edae82c10a1157cfb67594837d60666ee960e8fe  node-v18.14.2-linux-armv7l.tar.xz
-b4e66dcda5ba4a3697be3fded122dabb6a677deee3d7f4d3c7c13ebb5a13844c  node-v18.16.0-linux-ppc64le.tar.gz
+93ac8990cca042df5e73ab8bc5d0ee07d6083a3c3e79ea4a78aab376e31efbf7  node-v18.14.2-linux-ppc64le.tar.gz
-c43142fb9ef30658620ed095f8203beca92f469c1121eeb724df9a48bf0e59a5  node-v18.16.0-linux-ppc64le.tar.xz
+5b6d518e3e5756a005565a0d343065298868f5c843ec2f33e87e3d5f49749efc  node-v18.14.2-linux-ppc64le.tar.xz
-a8b607c3c06f585c4fe9ba45be6dc76ce9459238c91b3f43533aa30344caed87  node-v18.16.0-linux-s390x.tar.gz
+d805972f7f8f8c5ad552a4d25e31dbef25944fe7f5d045b42449b44a95529ead  node-v18.14.2-linux-s390x.tar.gz
-39b15c16347000b0be97133437bde0317dd2307d3fdfce15ddd8680b07a963ef  node-v18.16.0-linux-s390x.tar.xz
+43c1ad18b20525ca4e5234fcfe2e0a8278a49655d8d61fe7eb14d3aa42fb473c  node-v18.14.2-linux-s390x.tar.xz
-fc83046a93d2189d919005a348db3b2372b598a145d84eb9781a3a4b0f032e95  node-v18.16.0-linux-x64.tar.gz
+95bdaaf92265eefd40d2055fb9b5cd6cbc3cb2c4495e3ebd4b1b501822d69731  node-v18.14.2-linux-x64.tar.gz
-44d93d9b4627fe5ae343012d855491d62c7381b236c347f7666a7ad070f26548  node-v18.16.0-linux-x64.tar.xz
+de15b44738578367cfb250b6551b4c97e0e0e8050fa931a4a9a7262d374d6034  node-v18.14.2-linux-x64.tar.xz
-156aa5b9580288fb0b3c6134eb8fac64e50745d78d33eebe9e29eb7ff87b8e1e  node-v18.16.0.pkg
+3ecf4871d39427b2fa025b7c58405c0ac788812edbb644af9f03d3104e41175b  node-v18.14.2.pkg
-6a4f5c5d76e5c50cef673099e56f19bc3266ae363f56ca0ab77dd2f3c5088c6d  node-v18.16.0.tar.gz
+850aebb879e3efd904ebfe65325caa97b013773bb94fafd2d0fb794324918252  node-v18.14.2.tar.gz
-33d81a233e235a509adda4a4f2209008d04591979de6b3f0f67c1c906093f118  node-v18.16.0.tar.xz
+fbc364dd25fee2cacc0f2033db2d86115fc07575310ea0e64408b8170d09c685  node-v18.14.2.tar.xz
-007848640ba414f32d968d303e75d9841ecd2cd95d6fdd81f80bc3dcbd74ae44  node-v18.16.0-win-x64.7z
+a29727e85fd649d733a043a70362ede034825f2569103b81b6e9273ed1a0e2fc  node-v18.14.2-win-x64.7z
-4b3bd4cb5570cc217490639e93a7e1b7a7a341981366661e514ce61941824a85  node-v18.16.0-win-x64.zip
+fccac5e259f1196a2a30e82f42211dd7dddd9a48e4fd3f1627900aa23dff4ffa  node-v18.14.2-win-x64.zip
-681be28e0acd057b4798f357d21eec5f49e21bc803bbbefeb1072bb4f166025a  node-v18.16.0-win-x86.7z
+b1e7abe1e962fe568040fd8d3bb185bd430972887f22aa57e05eef080c11dd96  node-v18.14.2-win-x86.7z
-2a7e0fb22e1a36144ee8183c80ef2705cd9754c1d894f94bb6c94a681de47924  node-v18.16.0-win-x86.zip
+30161c71d428a71b62037a63c58a5d4bca34439811a3feea146ca23baf33a70e  node-v18.14.2-win-x86.zip
-5bfb6f3ab89e198539408f7e0e8ec0b0bd5efe8898573ec05b381228efb45a5d  node-v18.16.0-x64.msi
+1152f8163882faf8c6c33dcaaeebb3a03468bdcbe4e33d722d063c1da8f1fc57  node-v18.14.2-x64.msi
-09534d1949c795c3e49d257fb72a9fd865ee28955673b87d569d4aec541333e7  node-v18.16.0-x86.msi
+352ecd456852f870c0c1c63221c810b19993f83f5f0651125f1cee386eecca97  node-v18.14.2-x86.msi
-b548a55c2b5ef5de34f4636610bab27077fb9313d34f52280b9ec11dd25e9dd1  win-x64/node.exe
+8ab627d82d90d62be8017ee3659f38e7f58f32c8cadf4d5dc59a6e4f99507aeb  win-x64/node.exe
-72b7fab9381af8f4958c8212f3d4cdfff8c7c5b1e33eaad0e7d5888293568cd5  win-x64/node.lib
+28973fbe8ae770a132b4851b0166ec9ba435595f786bb05fc47c3611fefb1cf2  win-x64/node.lib
-3b9474e18a1bbb38b05b1876b4b37056063c2af82212d356a8a5cf91c1a3acf3  win-x64/node_pdb.7z
+93157f3a4b89d9ee89485622f06942aa16bf99f00988fc5143e52b9e2b24bef5  win-x64/node_pdb.7z
-6b506b1fe654ca7161373916c7ba7e38f62545236698342fa97fd2faf39ebc4e  win-x64/node_pdb.zip
+741c969d4d30187000d7127d45e166aa5d74fc4b0546905a24c504bfcfdf06ba  win-x64/node_pdb.zip
-36bf0f0a364ca8edc176776764831f9e88bef6d1e8056f6edc474a37b652a794  win-x86/node.exe
+2a11436bc0b9154e5fa878041cd867d7420c66916e06a7755f1f8fc030951ce8  win-x86/node.exe
-6a85c15a69238f0902b9a734d262bf36d211b273a46d5e3249857d4bb7f6d9b7  win-x86/node.lib
+a10d89fbd502902abaf307fe73b604a4733d403ac5c577e536607c1f3b16ac14  win-x86/node.lib
-9256bdefae4491acfd523ca06d4f4344ddc4f1a28aac868b5efb6a72d8023e2a  win-x86/node_pdb.7z
+efd93de17cd01e4ea00e69603d095fda488723e3ef25b640cd3240f9d3f2cded  win-x86/node_pdb.7z
-53c6b29afd58904e5143d9f3298b55695b8ecb2b6c08a9612ed30e9b0ed9589a  win-x86/node_pdb.zip
+2d554f21d9c858412217f37b92026b688f5605f9c6169faccdc20b9e97b289ba  win-x86/node_pdb.zip

linker_lto_jobs.patch

@@ -3,23 +3,31 @@ is run serially over these binaries instead of in parallel.
 OBS workers run out of memory as each executable seems to require
 upward of 5G RAM
 
-Index: node-v18.16.0/node.gyp
+Index: node-v18.14.0/node.gyp
 ===================================================================
---- node-v18.16.0.orig/node.gyp
+--- node-v18.14.0.orig/node.gyp
-+++ node-v18.16.0/node.gyp
++++ node-v18.14.0/node.gyp
-@@ -1220,6 +1220,7 @@
+@@ -1166,6 +1166,7 @@
+         'node_dtrace_header',
+         'node_dtrace_ustack',
          'node_dtrace_provider',
-         'deps/simdutf/simdutf.gyp:simdutf',
++        'cctest',
-         'deps/ada/ada.gyp:ada',
+       ],
-+        'fuzz_env'
+       'includes': [
+         'node.gypi'
+@@ -1312,6 +1313,7 @@
+         'node_dtrace_header',
+         'node_dtrace_ustack',
+         'node_dtrace_provider',
++        'fuzz_env',
        ],
  
        'includes': [
-@@ -1389,6 +1390,7 @@
+@@ -1381,6 +1383,7 @@
+         '<(node_lib_target_name)',
          'deps/histogram/histogram.gyp:histogram',
          'deps/uvwasi/uvwasi.gyp:uvwasi',
-         'deps/ada/ada.gyp:ada',
++        'embedtest'
-+        'cctest'
        ],
  
        'includes': [

node-v18.14.2.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fbc364dd25fee2cacc0f2033db2d86115fc07575310ea0e64408b8170d09c685
+size 40330824

node-v18.9.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c75cc89afead976791900accde02a7b1e7e762702f0f6fa68eaacb01984d9654
-size 38309908

nodejs18.changes

@@ -1,41 +1,8 @@
--------------------------------------------------------------------
-Thu Apr 13 13:49:59 UTC 2023 - Adam Majer <adam.majer@suse.de>
-
-- Update to NodeJS 18.16.0 LTS version
-  * Add initial support for single executable applications
-  * Replace url parser with Ada
-  * buffer: add Buffer.copyBytesFrom
-
-- refreshed patches: versioned.patch linker_lto_jobs.patch
-
--------------------------------------------------------------------
-Mon Mar 13 16:43:33 UTC 2023 - Adam Majer <adam.majer@suse.de>
-
-- relax Requires to Suggests for alts on TW
-
--------------------------------------------------------------------
-Wed Mar  8 13:01:06 UTC 2023 - Adam Majer <adam.majer@suse.de> - 18.15.0
-
-- Update to NodeJS 18.15.0 LTS version:
-  * test_runner:
-    + add initial code coverate support
-    + add reporters
-  * fs: add statfs()
-  * buffer: add isAscii()
-
-- s390.patch, sysctl.patch: upstreamed and removed
-
--------------------------------------------------------------------
-Thu Feb 23 10:41:38 UTC 2023 - Adam Majer <adam.majer@suse.de>
-
-- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
-  npm dependencies.
-
 -------------------------------------------------------------------
 Wed Feb 22 13:59:45 UTC 2023 - Adam Majer <adam.majer@suse.de>
 
 - Update to NodeJS 18.14.2 LTS:
-  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
+  * deps: upgrade npm to 9.5.0
   * deps: update undici to 5.20.0
 
 - Changes in version 18.14.1:

nodejs18.spec

@@ -31,7 +31,7 @@
 %endif
 
 Name:           nodejs18
-Version:        18.16.0
+Version:        18.14.2
 Release:        0
 
 # Double DWZ memory limits
@@ -171,6 +171,8 @@ Patch133:       rsa-pss-revert.patch
 Patch200:       versioned.patch
 
 Patch305:       qemu_timeouts_arches.patch
+Patch307:       s390.patch
+Patch309:       sysctl.patch
 
 BuildRequires:  pkg-config
 BuildRequires:  fdupes
@@ -302,7 +304,7 @@ BuildRequires:  bundled_openssl_should_not_be_required
 %if ! 0%{with intree_cares}
 BuildRequires:  pkgconfig(libcares) >= 1.17.0
 %else
-Provides:       bundled(libcares2) = 1.19.0
+Provides:       bundled(libcares2) = 1.18.1
 %endif
 
 %if ! 0%{with intree_icu}
@@ -314,7 +316,7 @@ Provides:       bundled(icu) = 72.1
 %if ! 0%{with intree_nghttp2}
 BuildRequires:  libnghttp2-devel >= 1.41.0
 %else
-Provides:       bundled(nghttp2) = 1.52.0
+Provides:       bundled(nghttp2) = 1.51.0
 %endif
 
 %if 0%{with valgrind_tests}
@@ -322,7 +324,7 @@ BuildRequires:  valgrind
 %endif
 
 %if %{with libalternatives}
-Suggests:       alts
+Requires:       alts
 %else
 Requires(postun): %{_sbindir}/update-alternatives
 %endif
@@ -363,7 +365,7 @@ ExclusiveArch:  not_buildable
 %endif
 %endif
 
-Provides:       bundled(uvwasi) = 0.0.15
+Provides:       bundled(uvwasi) = 0.0.14
 Provides:       bundled(libuv) = 1.44.2
 Provides:       bundled(v8) = 10.2.154.26
 %if %{with intree_brotli}
@@ -376,17 +378,17 @@ BuildRequires:  pkgconfig(libbrotlidec)
 Provides:       bundled(llhttp) = 6.0.10
 Provides:       bundled(ngtcp2) = 0.8.1
 Provides:       bundled(base64) = 0.5.0
-Provides:       bundled(simdutf) = 3.2.2
+Provides:       bundled(simdutf) = 3.1.0
 # bundled url-ada parser, not ada
-Provides:       bundled(ada) = 1.0.4
 
-Provides:       bundled(node-acorn) = 8.8.2
+
+Provides:       bundled(node-acorn) = 8.8.1
 Provides:       bundled(node-acorn-walk) = 8.2.0
 Provides:       bundled(node-busboy) = 1.6.0
 Provides:       bundled(node-cjs-module-lexer) = 1.2.2
-Provides:       bundled(node-corepack) = 0.17.0
+Provides:       bundled(node-corepack) = 0.15.3
 Provides:       bundled(node-streamsearch) = 1.1.0
-Provides:       bundled(node-undici) = 5.21.0
+Provides:       bundled(node-undici) = 5.20.0
 
 %description
 Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine. Node.js
@@ -415,7 +417,7 @@ Requires:       nodejs-common
 Requires:       nodejs18 = %{version}
 Provides:       nodejs-npm = %{version}
 Obsoletes:      nodejs-npm < 4.0.0
-Provides:       npm(npm) = 9.5.1
+Provides:       npm(npm) = 9.5.0
 Provides:       npm = %{version}
 %if 0%{?suse_version} >= 1500
 %if %{node_version_number} >= 10
@@ -514,18 +516,18 @@ Provides:       bundled(node-jsonparse) = 1.3.1
 Provides:       bundled(node-just-diff) = 5.2.0
 Provides:       bundled(node-just-diff-apply) = 5.5.0
 Provides:       bundled(node-libnpmaccess) = 7.0.2
-Provides:       bundled(node-libnpmdiff) = 5.0.11
+Provides:       bundled(node-libnpmdiff) = 5.0.10
-Provides:       bundled(node-libnpmexec) = 5.0.11
+Provides:       bundled(node-libnpmexec) = 5.0.10
-Provides:       bundled(node-libnpmfund) = 4.0.11
+Provides:       bundled(node-libnpmfund) = 4.0.10
 Provides:       bundled(node-libnpmhook) = 9.0.3
 Provides:       bundled(node-libnpmorg) = 5.0.3
-Provides:       bundled(node-libnpmpack) = 5.0.11
+Provides:       bundled(node-libnpmpack) = 5.0.10
 Provides:       bundled(node-libnpmpublish) = 7.1.0
 Provides:       bundled(node-libnpmsearch) = 6.0.2
 Provides:       bundled(node-libnpmteam) = 5.0.3
 Provides:       bundled(node-libnpmversion) = 4.0.2
 Provides:       bundled(node-lru-cache) = 6.0.0
-Provides:       bundled(node-lru-cache) = 7.16.2
+Provides:       bundled(node-lru-cache) = 7.14.1
 Provides:       bundled(node-make-fetch-happen) = 10.2.1
 Provides:       bundled(node-make-fetch-happen) = 11.0.3
 Provides:       bundled(node-minimatch) = 3.1.2
@@ -564,7 +566,7 @@ Provides:       bundled(node-npmlog) = 6.0.2
 Provides:       bundled(node-npmlog) = 7.0.1
 Provides:       bundled(node-once) = 1.4.0
 Provides:       bundled(node-p-map) = 4.0.0
-Provides:       bundled(node-pacote) = 15.1.1
+Provides:       bundled(node-pacote) = 15.1.0
 Provides:       bundled(node-parse-conflict-json) = 3.0.0
 Provides:       bundled(node-path-is-absolute) = 1.0.1
 Provides:       bundled(node-postcss-selector-parser) = 6.0.11
@@ -706,6 +708,8 @@ popd
 %patch200 -p1
 
 %patch305 -p1
+%patch307 -p1
+%patch309 -p1
 
 %if %{node_version_number} == 12
 # minimist security update - patch50
@@ -999,7 +1003,7 @@ make test-ci
 %defattr(-, root, root)
 %license LICENSE
 %doc doc/changelogs/CHANGELOG_V%{node_version_number}.md
-%doc *.md
+%doc AUTHORS *.md
 %doc deps/v8/tools/gdbinit
 %dir %{_libdir}/node_modules
 %dir %{_datadir}/libalternatives

s390.patch

@@ -0,0 +1,28 @@
+Index: node-v18.13.0/test/parallel/test-whatwg-webstreams-compression.js
+===================================================================
+--- node-v18.13.0.orig/test/parallel/test-whatwg-webstreams-compression.js
++++ node-v18.13.0/test/parallel/test-whatwg-webstreams-compression.js
+@@ -20,11 +20,19 @@ async function test(format) {
+   const reader = gunzip.readable.getReader();
+   const writer = gzip.writable.getWriter();
+ 
++  let compressed_data = [];
++  const reader_function = ({ value, done }) => {
++    if (value)
++      compressed_data.push(value);
++    if (!done)
++      return reader.read().then(reader_function);
++    assert.strictEqual(dec.decode(Buffer.concat(compressed_data)), 'hello');
++  };
++  const reader_promise = reader.read().then(reader_function);
++
+   await Promise.all([
+-    reader.read().then(({ value, done }) => {
+-      assert.strictEqual(dec.decode(value), 'hello');
+-    }),
+-    reader.read().then(({ done }) => assert(done)),
++    reader_promise,
++    reader_promise.then(() => reader.read().then(({ done }) => assert(done))),
+     writer.write('hello'),
+     writer.close(),
+   ]);

sysctl.patch

@@ -0,0 +1,18 @@
+Index: node-v19.5.0/test/parallel/test-cluster-bind-privileged-port.js
+===================================================================
+--- node-v19.5.0.orig/test/parallel/test-cluster-bind-privileged-port.js
++++ node-v19.5.0/test/parallel/test-cluster-bind-privileged-port.js
+@@ -24,11 +24,10 @@ const common = require('../common');
+ const assert = require('assert');
+ const cluster = require('cluster');
+ const net = require('net');
+-const { execSync } = require('child_process');
++const { readFileSync } = require('fs');
+ 
+ if (common.isLinux) {
+-  const sysctlOutput = execSync('sysctl net.ipv4.ip_unprivileged_port_start').toString();
+-  const unprivilegedPortStart = parseInt(sysctlOutput.split(' ')[2], 10);
++  const unprivilegedPortStart = parseInt(readFileSync('/proc/sys/net/ipv4/ip_unprivileged_port_start'));
+   if (unprivilegedPortStart <= 42) {
+     common.skip('Port 42 is unprivileged');
+   }

versioned.patch

@@ -8,10 +8,10 @@ management via update_alternatives.
 
 This is also important for generation of binary
 modules for multiple versions of NodeJS
-Index: node-v18.16.0/Makefile
+Index: node-v18.14.2/Makefile
 ===================================================================
---- node-v18.16.0.orig/Makefile
+--- node-v18.14.2.orig/Makefile
-+++ node-v18.16.0/Makefile
++++ node-v18.14.2/Makefile
 @@ -76,7 +76,7 @@ BUILDTYPE_LOWER := $(shell echo $(BUILDT
  EXEEXT := $(shell $(PYTHON) -c \
  		"import sys; print('.exe' if sys.platform == 'win32' else '')")
@@ -21,10 +21,10 @@ Index: node-v18.16.0/Makefile
  NODE ?= ./$(NODE_EXE)
  NODE_G_EXE = node_g$(EXEEXT)
  NPM ?= ./deps/npm/bin/npm-cli.js
-Index: node-v18.16.0/tools/install.py
+Index: node-v18.14.2/tools/install.py
 ===================================================================
---- node-v18.16.0.orig/tools/install.py
+--- node-v18.14.2.orig/tools/install.py
-+++ node-v18.16.0/tools/install.py
++++ node-v18.14.2/tools/install.py
 @@ -86,7 +86,7 @@ def uninstall(paths, dst):
      try_remove(path, dst)
  
@@ -93,7 +93,7 @@ Index: node-v18.16.0/tools/install.py
 +  ], 'include/node18/')
  
    # Add the expfile that is created on AIX
-   if sys.platform.startswith('aix') or sys.platform == "os400":
+   if sys.platform.startswith('aix'):
 -    action(['out/Release/node.exp'], 'include/node/')
 +    action(['out/Release/node.exp'], 'include/node18/')
  
@@ -122,10 +122,10 @@ Index: node-v18.16.0/tools/install.py
  
    if sys.platform == 'zos':
      zoslibinc = os.environ.get('ZOSLIB_INCLUDES')
-Index: node-v18.16.0/doc/node.1
+Index: node-v18.14.2/doc/node.1
 ===================================================================
---- node-v18.16.0.orig/doc/node.1
+--- node-v18.14.2.orig/doc/node.1
-+++ node-v18.16.0/doc/node.1
++++ node-v18.14.2/doc/node.1
 @@ -31,24 +31,24 @@
  .Dt NODE 1
  .
@@ -155,10 +155,10 @@ Index: node-v18.16.0/doc/node.1
  .Op Fl -v8-options
  .
  .\"======================================================================
-Index: node-v18.16.0/src/node.stp
+Index: node-v18.14.2/src/node.stp
 ===================================================================
---- node-v18.16.0.orig/src/node.stp
+--- node-v18.14.2.orig/src/node.stp
-+++ node-v18.16.0/src/node.stp
++++ node-v18.14.2/src/node.stp
 @@ -19,7 +19,7 @@
  // OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
  // USE OR OTHER DEALINGS IN THE SOFTWARE.
@@ -231,10 +231,10 @@ Index: node-v18.16.0/src/node.stp
  {
    scavenge = 1 << 0;
    compact = 1 << 1;
-Index: node-v18.16.0/deps/npm/man/man1/npm.1
+Index: node-v18.14.2/deps/npm/man/man1/npm.1
 ===================================================================
---- node-v18.16.0.orig/deps/npm/man/man1/npm.1
+--- node-v18.14.2.orig/deps/npm/man/man1/npm.1
-+++ node-v18.16.0/deps/npm/man/man1/npm.1
++++ node-v18.14.2/deps/npm/man/man1/npm.1
 @@ -1,11 +1,11 @@
  .TH "NPM" "1" "February 2023" "" ""
  .SH "NAME"
@@ -282,10 +282,10 @@ Index: node-v18.16.0/deps/npm/man/man1/npm.1
 -npm help publish
 +npm18 help publish
  .RE 0
-Index: node-v18.16.0/src/node_main.cc
+Index: node-v18.14.2/src/node_main.cc
 ===================================================================
---- node-v18.16.0.orig/src/node_main.cc
+--- node-v18.14.2.orig/src/node_main.cc
-+++ node-v18.16.0/src/node_main.cc
++++ node-v18.14.2/src/node_main.cc
 @@ -90,6 +90,7 @@ int wmain(int argc, wchar_t* wargv[]) {
  // UNIX
  
@@ -294,10 +294,10 @@ Index: node-v18.16.0/src/node_main.cc
    return node::Start(argc, argv);
  }
  #endif
-Index: node-v18.16.0/tools/test.py
+Index: node-v18.14.2/tools/test.py
 ===================================================================
---- node-v18.16.0.orig/tools/test.py
+--- node-v18.14.2.orig/tools/test.py
-+++ node-v18.16.0/tools/test.py
++++ node-v18.14.2/tools/test.py
 @@ -954,7 +954,7 @@ class Context(object):
      if self.vm is not None:
        return self.vm
@@ -307,10 +307,10 @@ Index: node-v18.16.0/tools/test.py
      else:
        name = 'out/%s.%s/node' % (arch, mode)
  
-Index: node-v18.16.0/node.gyp
+Index: node-v18.14.2/node.gyp
 ===================================================================
---- node-v18.16.0.orig/node.gyp
+--- node-v18.14.2.orig/node.gyp
-+++ node-v18.16.0/node.gyp
++++ node-v18.14.2/node.gyp
 @@ -25,8 +25,8 @@
      'node_shared_openssl%': 'false',
      'node_v8_options%': '',
@@ -322,10 +322,10 @@ Index: node-v18.16.0/node.gyp
      'node_intermediate_lib_type%': 'static_library',
      'node_builtin_modules_path%': '',
      # We list the deps/ files out instead of globbing them in js2c.py since we
-Index: node-v18.16.0/deps/npm/man/man1/npx.1
+Index: node-v18.14.2/deps/npm/man/man1/npx.1
 ===================================================================
---- node-v18.16.0.orig/deps/npm/man/man1/npx.1
+--- node-v18.14.2.orig/deps/npm/man/man1/npx.1
-+++ node-v18.16.0/deps/npm/man/man1/npx.1
++++ node-v18.14.2/deps/npm/man/man1/npx.1
 @@ -1,14 +1,14 @@
  .TH "NPX" "1" "February 2023" "" ""
  .SH "NAME"