Accepting request 1238489 from devel:languages:nodejs

- Update to 22.13.0: * Upgrades the Permission Model status from Active Development to Stable. * Graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable * net: support blocklist in net.connect and net.Server * dgram: support blocklist in udp * deps updated: > cares -- '1.34.3' -> '1.34.4' > ngtcp2 -- '1.3.0' -> '1.9.1' > npm -- '10.9.0' -> '10.9.2' > simdjson -- '3.10.0' -> '3.10.1' > simdutf -- '5.6.1' -> '5.6.4' > uv -- '1.49.1' -> '1.49.2' - CVE-2024-21538.patch: upstreamed, dropped - linker_lto_jobs.patch: refreshed OBS-URL: https://build.opensuse.org/request/show/1238489 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nodejs22?expand=0&rev=8
2025-01-18 12:17:39 +00:00 · 2025-01-18 12:17:39 +00:00 · 21e917d9f6
commit 21e917d9f6
parent d90b9e27b8 0f072a1906
9 changed files with 99 additions and 139 deletions
--- a/CVE-2024-21538.patch
+++ b/CVE-2024-21538.patch
@ -1,46 +0,0 @@
-Applied following patches,
-
-From 5ff3a07d9add449021d806e45c4168203aa833ff Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Andr=C3=A9=20Cruz?= <andremiguelcruz@msn.com>
-Date: Wed, 6 Nov 2024 22:02:49 +0000
-Subject: [PATCH] fix: disable regexp backtracking (#160)
-
---
- lib/util/escape.js | 6 ++++--
- 1 file changed, 4 insertions(+), 2 deletions(-)
-
-
-From 640d391fde65388548601d95abedccc12943374f Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Andr=C3=A9=20Cruz?= <andre.cruz@uphold.com>
-Date: Thu, 7 Nov 2024 12:50:38 +0000
-Subject: [PATCH] fix: fix escaping bug introduced by backtracking
-
---
- lib/util/escape.js | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-
-Index: node-v18.20.5/deps/npm/node_modules/cross-spawn/lib/util/escape.js
-===================================================================
--- node-v18.20.5.orig/deps/npm/node_modules/cross-spawn/lib/util/escape.js
-+++ node-v18.20.5/deps/npm/node_modules/cross-spawn/lib/util/escape.js
-@@ -15,15 +15,17 @@ function escapeArgument(arg, doubleEscap
-     arg = `${arg}`;
- 
-     // Algorithm below is based on https://qntm.org/cmd
-+    // It's slightly altered to disable JS backtracking to avoid hanging on specially crafted input
-+    // Please see https://github.com/moxystudio/node-cross-spawn/pull/160 for more information
- 
-     // Sequence of backslashes followed by a double quote:
-     // double up all the backslashes and escape the double quote
-    arg = arg.replace(/(\\*)"/g, '$1$1\\"');
-+    arg = arg.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
- 
-     // Sequence of backslashes followed by the end of the string
-     // (which will become a double quote later):
-     // double up all the backslashes
-    arg = arg.replace(/(\\*)$/, '$1$1');
-+    arg = arg.replace(/(?=(\\+?)?)\1$/, '$1$1');
- 
-     // All other backslashes occur literally
- 
--- a/SHASUMS256.txt
+++ b/SHASUMS256.txt
@ -1,41 +1,41 @@
-b4cb7707b22218154cdcf8cbc9bbb5c941dab09961a544cc7aba6ab50da99926  node-v22.12.0-aix-ppc64.tar.gz
-587e4f0fc2c27106e4e758a29db5726b337e660483dd554ea1610a4246fbf71b  node-v22.12.0-arm64.msi
-293dcc6c2408da21562d135b0412525e381bb6fe150d688edb58fe850d0f3e13  node-v22.12.0-darwin-arm64.tar.gz
-0047be0cfda922eb73876f9ef41de361c36b7654c884d13d9b783b0efd1db9aa  node-v22.12.0-darwin-arm64.tar.xz
-52bc25dd026db7247c3c00439afdb83e95087248267f02d6c1a7250d1f896173  node-v22.12.0-darwin-x64.tar.gz
-d68ef0c4c19b3b3b88c0e7408668d0a539607c136a14668e079feed0c6ec8bec  node-v22.12.0-darwin-x64.tar.xz
-c0760383af3c23637f46959a53113490fefb84cb388ac71a08d28761527e7b1b  node-v22.12.0-headers.tar.gz
-3cde28bb5820cf0f7593c7817c7a9ab1f15016dd85a6e5c240bbdf2a9c59130d  node-v22.12.0-headers.tar.xz
-9e7905fdee722f9650a03ae644b51c4c6effd3b98ac93c588700072ab35c9ddb  node-v22.12.0-linux-arm64.tar.gz
-8cfd5a8b9afae5a2e0bd86b0148ca31d2589c0ea669c2d0b11c132e35d90ed68  node-v22.12.0-linux-arm64.tar.xz
-f6f3dc6493befa7844e2f65024f857dc8fbbc0d86089b09f6e73d5eb7e2ce9ad  node-v22.12.0-linux-armv7l.tar.gz
-afedb2695faacb22805adde9534f2a360f2b39cab622ebdfe5e7383a2b58ebb9  node-v22.12.0-linux-armv7l.tar.xz
-a01148778eb1e9c56413e6a69cfe8d4563524c914dc3f9c667948a0d7a1a151a  node-v22.12.0-linux-ppc64le.tar.gz
-199a606ba1ee86cce6d6b369c71f9d00873d2836a6662592afc3b6a5923e2004  node-v22.12.0-linux-ppc64le.tar.xz
-63dd2e20cb50e2145c06f8f55b5682753691965b20fa08797a969a15b751ac8e  node-v22.12.0-linux-s390x.tar.gz
-9b517f8006eb4b451d40c461cbe64f93c6455566dbe2613387ab02412bc06d35  node-v22.12.0-linux-s390x.tar.xz
-e05a4d65232ae2b27b3d77da2e368522fb46b923335b8e0d5f77624c32484044  node-v22.12.0-linux-x64.tar.gz
-22982235e1b71fa8850f82edd09cdae7e3f32df1764a9ec298c72d25ef2c164f  node-v22.12.0-linux-x64.tar.xz
-94068d6877faa376f0b00aa775b490d59ea9accc8dbc5616efaff400f670fee1  node-v22.12.0.pkg
-3157e7c002b6e964bdbefb331ec38db1e2dceb064ab11c038275155461b22ce3  node-v22.12.0.tar.gz
-fe1bc4be004dc12721ea2cb671b08a21de01c6976960ef8a1248798589679e16  node-v22.12.0.tar.xz
-9c8e8fc0e409dc0cf32f159f9ccf11e95f1be5bb26e1a9b34f40bb9a6da3f0e2  node-v22.12.0-win-arm64.7z
-17401720af48976e3f67c41e8968a135fb49ca1f88103a92e0e8c70605763854  node-v22.12.0-win-arm64.zip
-922285593360adbe1fcd16d4e0049a13552dcad085fa53768c21c8d17089a134  node-v22.12.0-win-x64.7z
-2b8f2256382f97ad51e29ff71f702961af466c4616393f767455501e6aece9b8  node-v22.12.0-win-x64.zip
-6fa5480413f3bacc170f94e7aa332e5e8d8c3f9a03f05f802c6cbf6b1a265eef  node-v22.12.0-win-x86.7z
-b52129972529f22f1c8a726655842ca1fc13e0b4c37cd4d397270ba772032d43  node-v22.12.0-win-x86.zip
-5fa43604523be95f8e73c4c98337a5c2bf02450a6525ad25ec2926e464e6bcef  node-v22.12.0-x64.msi
-97fd52500c6947d5886c616ce37c93d40f5b0b811a1f87f89783c25e0de345e3  node-v22.12.0-x86.msi
-cfd2e0d9a708cf37acfecfd11ff237bb141893dc057080b4edb23af6a45d3f55  win-arm64/node.exe
-423502a56ef7f7dd087df41b518f53104ce321ef2ab3031fe4ca22b965382d86  win-arm64/node.lib
-739c03416daf8d2f2efc0bf48a8c2e53e0c14438b8a5889cc2995c5012ae7824  win-arm64/node_pdb.7z
-70f9745e3380cf452d3a8fd156d5ed7ead92a30fdead78ea703afe5331f77e35  win-arm64/node_pdb.zip
-b3b117a08ee61efee09e6fd523ab33c0c018da1b570bde08e4fd914dc1170ed6  win-x64/node.exe
-7980a34112c38a9b269226bcd3a9148bf101411d794750f18dc15c5026b92b30  win-x64/node.lib
-e9fc26cea58f8e1520a5a930c7fc40ac99f22c8470f5617d3e3f09dcd1feb7ef  win-x64/node_pdb.7z
-6a9417c99259f5d15a3c11dbe7a011a1484532b33bb84e5e8f8e3c733af74064  win-x64/node_pdb.zip
-ab2390e667e9abfa16b97a27adf84cd9f08a4788816db54f56bc25893f76e9d1  win-x86/node.exe
-289e832c5ff6ebb6be1644bf06d7078638447947cc6e314122e7f17b30ba268a  win-x86/node.lib
-525560e7fe53036a1caaf63ec3d4e508ea59079111c0f18b4de2bbf1069537ff  win-x86/node_pdb.7z
-82150928ab3f6bc3f50b4cc540b987b3c41ea7f3f93f790e4acf58553572faea  win-x86/node_pdb.zip
+24d17c7f6b9b18fe225ef4b70f030f86bc9e268b47847e5b4d78f82a377274bc  node-v22.13.0-aix-ppc64.tar.gz
+ffb356d8fc3ec6a3bb1ee9333af9de77380c8c34b2697092fda5f497b2c50863  node-v22.13.0-arm64.msi
+bc1e374e7393e2f4b20e5bbc157d02e9b1fb2c634b2f992136b38fb8ca2023b7  node-v22.13.0-darwin-arm64.tar.gz
+71b0893ef6a55295994f38002fada15c9a76a3cedeb36745fde0403741d183c6  node-v22.13.0-darwin-arm64.tar.xz
+cfaaf5edde585a15547f858f5b3b62a292cf5929a23707b6f1e36c29a32487be  node-v22.13.0-darwin-x64.tar.gz
+186d3fa8691e688be431de80af9f0f41f17f091790b324df9efd51578ac20aeb  node-v22.13.0-darwin-x64.tar.xz
+e4a0ba46c194eb9390c2f2177f4a6ab4f43f4c4029f6b0b239bf5cdb701c307d  node-v22.13.0-headers.tar.gz
+6e4f8721c8e9b669f5c91e806e6d7238c4f95db78198f66da0476f54fb9986d4  node-v22.13.0-headers.tar.xz
+e0cc088cb4fb2e945d3d5c416c601e1101a15f73e0f024c9529b964d9f6dce5b  node-v22.13.0-linux-arm64.tar.gz
+5de54a12983d0de6ba23597d4d0194e64933e26b0f04a469db3be9c3e18b6b2b  node-v22.13.0-linux-arm64.tar.xz
+6d1b640276bafc1a409886390bae6d20e07f18dae6904b860127a402409621e0  node-v22.13.0-linux-armv7l.tar.gz
+308687472523deee7abacc342e753e9b402ff4b178025374668039996b5c9699  node-v22.13.0-linux-armv7l.tar.xz
+90b96eb76faf409bdac018b2f7c91343983201f518382ac7f538b7758325ba47  node-v22.13.0-linux-ppc64le.tar.gz
+3b0e5b0c2953b57385b936b415a1e3cd03ff63ceca6b7badc40790f0d4e25759  node-v22.13.0-linux-ppc64le.tar.xz
+bef2a7077a3a6aa66bb0292d1fbaea929471aabcb1937741c8db50d6372b8da4  node-v22.13.0-linux-s390x.tar.gz
+f0a19c73fc8410c8ee649b1ec7a18916a9d555d237d03f7a932481c808e5ebc1  node-v22.13.0-linux-s390x.tar.xz
+9a33e89093a0d946c54781dcb3ccab4ccf7538a7135286528ca41ca055e9b38f  node-v22.13.0-linux-x64.tar.gz
+3ff0d57063c33313d73d0bdcebc4c778ad6be948234584694a042c6fe57164f6  node-v22.13.0-linux-x64.tar.xz
+c56028a0df18075ba3302cf1cc75ce2dde39676b251ddc3e9524e61bf9de8a0b  node-v22.13.0.pkg
+38e15a1d0dd0e95c237bc4651d7c9930a78d3fe7954a7ee7693b403f2d879e46  node-v22.13.0.tar.gz
+e50db6730716ba2ae953cf99d10c80295bd33bb72d3c829d9e99f6af56d626c7  node-v22.13.0.tar.xz
+5f441e2f3da291051971345e1f8bf16bdc1314985fb2dac806217463d99d176a  node-v22.13.0-win-arm64.7z
+8ca2c90ae0373d69e13301293306c31ea9afca2780b8325b6ca059319479e560  node-v22.13.0-win-arm64.zip
+a81087ab40a4336908b7cfd3473b9571549b045f38fcdb7181cca979ceadd018  node-v22.13.0-win-x64.7z
+b0feb09ebf41328628e7383f7a092fb7342ce1e05c867a90cf8f1379205a8429  node-v22.13.0-win-x64.zip
+e7325b3da93357965f756b5473bbf3e8dccaaf72f5607ac58e2aae5eedcc0d84  node-v22.13.0-win-x86.7z
+84678ec9e0a1d52a040187fc50c1932cc17bda146fb27b24ae9d368c2212c795  node-v22.13.0-win-x86.zip
+5c5a0c9a1d2ca9fd342691312d859d26c78b83538720938c243a3269ce64b7af  node-v22.13.0-x64.msi
+8c96b25e8b397d31319b0c0eacc564fa86e1fdae1d08246c4810a2281329ba91  node-v22.13.0-x86.msi
+903ca2cad56d9fe18b90659e037d84c7518f555b8796dcbcb8fb53e2d6eb7904  win-arm64/node.exe
+988eb8c60a5ade17e652dbdb60d56d3c6ad5e599a99ce04932b8c4c86583cdaf  win-arm64/node.lib
+10d6eef5c30032941e807b8a869cbf90956ced1a46c0e18832ce846ef0af1545  win-arm64/node_pdb.7z
+d1f556c3292c9a84b318866a01d622b1a4dea064aa11cf215c4d630ca308724e  win-arm64/node_pdb.zip
+364dbc8442f8d5c04fd4226bcfcf8e60d3268627eb1d7be214a91bb7d74cdbb9  win-x64/node.exe
+65e45757c026c93a170743a811ef1b921ae12d6d9dd62d258bbbca0626687626  win-x64/node.lib
+9d4e041682b08b22549dc6d54960e292962f553d51c4a5c9cac0030667bc3c7d  win-x64/node_pdb.7z
+a6361221cd937c4a0a333cbf38529053ade535047cd2aab7a53c99de72faa0f1  win-x64/node_pdb.zip
+e98ff9f9f847f1040aee0858de49c993df69679adcf552262042cb2cc26bc948  win-x86/node.exe
+79bae10059e833ce7fa4de05e5601034461327e2e7cb75c2144b87d4ab5ac547  win-x86/node.lib
+06064b3fb03e0af9410d1a94a958952e9de82951ea84d835b2a1eb3dbdf8d275  win-x86/node_pdb.7z
+9d6fa1bff9bf6aca45eec7f2cf16b0c387e960ee625596459390ea6ca43b362d  win-x86/node_pdb.zip
--- a/SHASUMS256.txt.sig
+++ b/SHASUMS256.txt.sig
--- a/_scmsync.obsinfo
+++ b/_scmsync.obsinfo
@ -1,3 +1,3 @@
-mtime: 1735597143
-commit: ddec1c9c951e4d20a16a7a5a761b40267c69c7ceb0b019e23077dc077ff04e55
+mtime: 1737040738
+commit: b16b0a9cee76b0ec7b0bf7a4f048097a9f4d21d2e58b2a9ece26a54f91c15dee
 url: https://src.opensuse.org/nodejs/nodejs22.git
--- a/linker_lto_jobs.patch
+++ b/linker_lto_jobs.patch
@ -3,21 +3,21 @@ is run serially over these binaries instead of in parallel.
 OBS workers run out of memory as each executable seems to require
 upward of 5G RAM

-Index: node-v22.12.0/node.gyp
+Index: node-v22.13.0/node.gyp
 ===================================================================
--- node-v22.12.0.orig/node.gyp
-+++ node-v22.12.0/node.gyp
-@@ -1186,6 +1186,7 @@
-         'deps/simdutf/simdutf.gyp:simdutf',
-         'deps/ada/ada.gyp:ada',
+--- node-v22.13.0.orig/node.gyp
+++ node-v22.13.0/node.gyp
+@@ -1180,6 +1180,7 @@
+         'deps/googletest/googletest.gyp:gtest_main',
+         'deps/histogram/histogram.gyp:histogram',
         'deps/nbytes/nbytes.gyp:nbytes',
 +		'fuzz_env'
       ],
 
       'includes': [
-@@ -1264,6 +1265,7 @@
+@@ -1257,6 +1258,7 @@
+         '<(node_lib_target_name)',
         'deps/histogram/histogram.gyp:histogram',
-         'deps/ada/ada.gyp:ada',
         'deps/nbytes/nbytes.gyp:nbytes',
 +		'cctest'
       ],
--- a/node-v22.12.0.tar.xz
+++ b/node-v22.12.0.tar.xz
--- a/node-v22.13.0.tar.xz
+++ b/node-v22.13.0.tar.xz
--- a/nodejs22.changes
+++ b/nodejs22.changes
@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Thu Jan 16 15:00:55 UTC 2025 - Adam Majer <adam.majer@suse.de>
+
+- Update to 22.13.0:
+  * Upgrades the Permission Model status from Active Development to Stable.
+  * Graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable
+  * net: support blocklist in net.connect and net.Server
+  * dgram: support blocklist in udp
+  * deps updated:
+    > cares     -- '1.34.3' -> '1.34.4'
+    > ngtcp2    -- '1.3.0' -> '1.9.1'
+    > npm       -- '10.9.0' -> '10.9.2'
+    > simdjson  -- '3.10.0' -> '3.10.1'
+    > simdutf   -- '5.6.1' -> '5.6.4'
+    > uv       -- '1.49.1' -> '1.49.2'
+- CVE-2024-21538.patch: upstreamed, dropped
+- linker_lto_jobs.patch: refreshed
+
 -------------------------------------------------------------------
 Mon Dec 30 22:17:20 UTC 2024 - Adam Majer <adam.majer@suse.de>

--- a/nodejs22.spec
+++ b/nodejs22.spec
@ -31,7 +31,7 @@
 %endif

 Name:           nodejs22
-Version:        22.12.0
+Version:        22.13.0
 Release:        0

 # Double DWZ memory limits
@ -147,7 +147,6 @@ Patch7:         manual_configure.patch
 Patch13:        openssl_binary_detection.patch


-Patch82:        CVE-2024-21538.patch

 ## Patches specific to SUSE and openSUSE
 Patch100:       linker_lto_jobs.patch
@ -313,7 +312,7 @@ BuildRequires:  bundled_openssl_should_not_be_required
 %if ! 0%{with intree_cares}
 BuildRequires:  pkgconfig(libcares) >= 1.17.0
 %else
-Provides:       bundled(libcares2) = 1.34.3
+Provides:       bundled(libcares2) = 1.34.4
 %endif

 %if %node_version_number >= 22 && 0%{?suse_version} > 1500
@ -379,7 +378,7 @@ ExclusiveArch:  not_buildable
 %endif

 Provides:       bundled(uvwasi) = 0.0.21
-Provides:       bundled(libuv) = 1.49.1
+Provides:       bundled(libuv) = 1.49.2
 Provides:       bundled(v8) = 12.4.254.21
 %if %{with intree_brotli}
 Provides:       bundled(brotli) = 1.1.0
@ -389,10 +388,10 @@ BuildRequires:  pkgconfig(libbrotlidec)


 Provides:       bundled(llhttp) = 9.2.1
-Provides:       bundled(ngtcp2) = 1.3.0
+Provides:       bundled(ngtcp2) = 1.9.1

-Provides:       bundled(simdutf) = 5.6.1
-Provides:       bundled(simdjson) = 3.10.0
+Provides:       bundled(simdutf) = 5.6.4
+Provides:       bundled(simdjson) = 3.10.1
 # bundled url-ada parser, not ada
 Provides:       bundled(ada) = 2.9.2

@ -400,7 +399,7 @@ Provides:       bundled(node-acorn) = 8.14.0
 Provides:       bundled(node-acorn-walk) = 8.3.4
 Provides:       bundled(node-amaro) = 0.2.0
 Provides:       bundled(node-cjs-module-lexer) = 1.4.1
-Provides:       bundled(node-corepack) = 0.29.4
+Provides:       bundled(node-corepack) = 0.30.0
 Provides:       bundled(node-minimatch) = 10.0.1
 Provides:       bundled(node-undici) = 6.21.0

@ -431,7 +430,7 @@ Requires:       nodejs-common
 Requires:       nodejs22 = %{version}
 Provides:       nodejs-npm = %{version}
 Obsoletes:      nodejs-npm < 4.0.0
-Provides:       npm(npm) = 10.9.0
+Provides:       npm(npm) = 10.9.2
 Provides:       npm = %{version}
 %if 0%{?suse_version} >= 1500
 %if %{node_version_number} >= 10
@ -444,7 +443,7 @@ Provides:       bundled(node-abbrev) = 3.0.0
 Provides:       bundled(node-agent-base) = 7.1.1
 Provides:       bundled(node-aggregate-error) = 3.1.0
 Provides:       bundled(node-ansi-regex) = 5.0.1
-Provides:       bundled(node-ansi-regex) = 6.0.1
+Provides:       bundled(node-ansi-regex) = 6.1.0
 Provides:       bundled(node-ansi-styles) = 4.3.0
 Provides:       bundled(node-ansi-styles) = 6.2.1
 Provides:       bundled(node-aproba) = 2.0.0
@ -453,12 +452,11 @@ Provides:       bundled(node-balanced-match) = 1.0.2
 Provides:       bundled(node-bin-links) = 5.0.0
 Provides:       bundled(node-binary-extensions) = 2.3.0
 Provides:       bundled(node-brace-expansion) = 2.0.1
-Provides:       bundled(node-cacache) = 18.0.4
 Provides:       bundled(node-cacache) = 19.0.1
 Provides:       bundled(node-chalk) = 5.3.0
 Provides:       bundled(node-chownr) = 2.0.0
 Provides:       bundled(node-chownr) = 3.0.0
-Provides:       bundled(node-ci-info) = 4.0.0
+Provides:       bundled(node-ci-info) = 4.1.0
 Provides:       bundled(node-cidr-regex) = 4.1.1
 Provides:       bundled(node-clean-stack) = 2.2.0
 Provides:       bundled(node-cli-columns) = 4.0.0
@ -466,9 +464,9 @@ Provides:       bundled(node-cmd-shim) = 7.0.0
 Provides:       bundled(node-color-convert) = 2.0.1
 Provides:       bundled(node-color-name) = 1.1.4
 Provides:       bundled(node-common-ancestor-path) = 1.0.1
-Provides:       bundled(node-cross-spawn) = 7.0.3
+Provides:       bundled(node-cross-spawn) = 7.0.6
 Provides:       bundled(node-cssesc) = 3.0.0
-Provides:       bundled(node-debug) = 4.3.6
+Provides:       bundled(node-debug) = 4.3.7
 Provides:       bundled(node-diff) = 5.2.0
 Provides:       bundled(node-eastasianwidth) = 0.2.0
 Provides:       bundled(node-emoji-regex) = 8.0.0
@ -483,7 +481,7 @@ Provides:       bundled(node-fs-minipass) = 2.1.0
 Provides:       bundled(node-fs-minipass) = 3.0.3
 Provides:       bundled(node-glob) = 10.4.5
 Provides:       bundled(node-graceful-fs) = 4.2.11
-Provides:       bundled(node-hosted-git-info) = 8.0.0
+Provides:       bundled(node-hosted-git-info) = 8.0.2
 Provides:       bundled(node-http-cache-semantics) = 4.1.1
 Provides:       bundled(node-http-proxy-agent) = 7.0.2
 Provides:       bundled(node-https-proxy-agent) = 7.0.5
@ -492,12 +490,11 @@ Provides:       bundled(node-ignore-walk) = 7.0.0
 Provides:       bundled(node-imurmurhash) = 0.1.4
 Provides:       bundled(node-indent-string) = 4.0.0
 Provides:       bundled(node-ini) = 5.0.0
-Provides:       bundled(node-init-package-json) = 7.0.1
+Provides:       bundled(node-init-package-json) = 7.0.2
 Provides:       bundled(node-ip-address) = 9.0.5
 Provides:       bundled(node-ip-regex) = 5.0.0
 Provides:       bundled(node-is-cidr) = 5.1.0
 Provides:       bundled(node-is-fullwidth-code-point) = 3.0.0
-Provides:       bundled(node-is-lambda) = 1.0.1
 Provides:       bundled(node-isexe) = 2.0.0
 Provides:       bundled(node-isexe) = 3.1.1
 Provides:       bundled(node-jackspeak) = 3.4.3
@ -514,19 +511,17 @@ Provides:       bundled(node-libnpmfund) = 6.0.0
 Provides:       bundled(node-libnpmhook) = 11.0.0
 Provides:       bundled(node-libnpmorg) = 7.0.0
 Provides:       bundled(node-libnpmpack) = 8.0.0
-Provides:       bundled(node-libnpmpublish) = 10.0.0
+Provides:       bundled(node-libnpmpublish) = 10.0.1
 Provides:       bundled(node-libnpmsearch) = 8.0.0
 Provides:       bundled(node-libnpmteam) = 7.0.0
 Provides:       bundled(node-libnpmversion) = 7.0.0
 Provides:       bundled(node-lru-cache) = 10.4.3
-Provides:       bundled(node-make-fetch-happen) = 13.0.1
-Provides:       bundled(node-make-fetch-happen) = 14.0.1
+Provides:       bundled(node-make-fetch-happen) = 14.0.3
 Provides:       bundled(node-minimatch) = 9.0.5
 Provides:       bundled(node-minipass) = 3.3.6
 Provides:       bundled(node-minipass) = 5.0.0
 Provides:       bundled(node-minipass) = 7.1.2
 Provides:       bundled(node-minipass-collect) = 2.0.1
-Provides:       bundled(node-minipass-fetch) = 3.0.5
 Provides:       bundled(node-minipass-fetch) = 4.0.0
 Provides:       bundled(node-minipass-flush) = 1.0.5
 Provides:       bundled(node-minipass-pipeline) = 1.2.4
@ -535,37 +530,35 @@ Provides:       bundled(node-minizlib) = 2.1.2
 Provides:       bundled(node-minizlib) = 3.0.1
 Provides:       bundled(node-mkdirp) = 1.0.4
 Provides:       bundled(node-mkdirp) = 3.0.1
-Provides:       bundled(node-ms) = 2.1.2
 Provides:       bundled(node-ms) = 2.1.3
 Provides:       bundled(node-mute-stream) = 2.0.0
-Provides:       bundled(node-negotiator) = 0.6.3
-Provides:       bundled(node-node-gyp) = 10.2.0
-Provides:       bundled(node-nopt) = 7.2.1
+Provides:       bundled(node-negotiator) = 1.0.0
+Provides:       bundled(node-node-gyp) = 11.0.0
 Provides:       bundled(node-nopt) = 8.0.0
 Provides:       bundled(node-normalize-package-data) = 7.0.0
 Provides:       bundled(node-npm-audit-report) = 6.0.0
 Provides:       bundled(node-npm-bundled) = 4.0.0
-Provides:       bundled(node-npm-install-checks) = 7.1.0
+Provides:       bundled(node-npm-install-checks) = 7.1.1
 Provides:       bundled(node-npm-normalize-package-bin) = 4.0.0
 Provides:       bundled(node-npm-package-arg) = 12.0.0
 Provides:       bundled(node-npm-packlist) = 9.0.0
 Provides:       bundled(node-npm-pick-manifest) = 10.0.0
 Provides:       bundled(node-npm-profile) = 11.0.1
-Provides:       bundled(node-npm-registry-fetch) = 18.0.1
+Provides:       bundled(node-npm-registry-fetch) = 18.0.2
 Provides:       bundled(node-npm-user-validate) = 3.0.0
 Provides:       bundled(node-p-map) = 4.0.0
 Provides:       bundled(node-p-map) = 7.0.2
-Provides:       bundled(node-package-json-from-dist) = 1.0.0
-Provides:       bundled(node-pacote) = 19.0.0
+Provides:       bundled(node-package-json-from-dist) = 1.0.1
+Provides:       bundled(node-pacote) = 19.0.1
+Provides:       bundled(node-pacote) = 20.0.0
 Provides:       bundled(node-parse-conflict-json) = 4.0.0
 Provides:       bundled(node-path-key) = 3.1.1
 Provides:       bundled(node-path-scurry) = 1.11.1
 Provides:       bundled(node-postcss-selector-parser) = 6.1.2
-Provides:       bundled(node-proc-log) = 4.2.0
 Provides:       bundled(node-proc-log) = 5.0.0
 Provides:       bundled(node-proggy) = 3.0.0
 Provides:       bundled(node-promise-all-reject-late) = 1.0.1
-Provides:       bundled(node-promise-call-limit) = 3.0.1
+Provides:       bundled(node-promise-call-limit) = 3.0.2
 Provides:       bundled(node-promise-inflight) = 1.0.1
 Provides:       bundled(node-promise-retry) = 2.0.1
 Provides:       bundled(node-promzard) = 2.0.0
@ -580,7 +573,7 @@ Provides:       bundled(node-semver) = 7.6.3
 Provides:       bundled(node-shebang-command) = 2.0.0
 Provides:       bundled(node-shebang-regex) = 3.0.0
 Provides:       bundled(node-signal-exit) = 4.1.0
-Provides:       bundled(node-sigstore) = 2.3.1
+Provides:       bundled(node-sigstore) = 3.0.0
 Provides:       bundled(node-smart-buffer) = 4.2.0
 Provides:       bundled(node-socks) = 2.8.3
 Provides:       bundled(node-socks-proxy-agent) = 8.0.4
@ -588,9 +581,8 @@ Provides:       bundled(node-spdx-correct) = 3.2.0
 Provides:       bundled(node-spdx-exceptions) = 2.5.0
 Provides:       bundled(node-spdx-expression-parse) = 3.0.1
 Provides:       bundled(node-spdx-expression-parse) = 4.0.0
-Provides:       bundled(node-spdx-license-ids) = 3.0.18
+Provides:       bundled(node-spdx-license-ids) = 3.0.20
 Provides:       bundled(node-sprintf-js) = 1.1.3
-Provides:       bundled(node-ssri) = 10.0.6
 Provides:       bundled(node-ssri) = 12.0.0
 Provides:       bundled(node-string-width) = 4.2.3
 Provides:       bundled(node-string-width) = 5.1.2
@ -602,17 +594,14 @@ Provides:       bundled(node-tar) = 7.4.3
 Provides:       bundled(node-text-table) = 0.2.0
 Provides:       bundled(node-tiny-relative-date) = 1.3.0
 Provides:       bundled(node-treeverse) = 3.0.0
-Provides:       bundled(node-tuf-js) = 2.2.1
-Provides:       bundled(node-unique-filename) = 3.0.0
+Provides:       bundled(node-tuf-js) = 3.0.1
 Provides:       bundled(node-unique-filename) = 4.0.0
-Provides:       bundled(node-unique-slug) = 4.0.0
 Provides:       bundled(node-unique-slug) = 5.0.0
 Provides:       bundled(node-util-deprecate) = 1.0.2
 Provides:       bundled(node-validate-npm-package-license) = 3.0.4
 Provides:       bundled(node-validate-npm-package-name) = 6.0.0
 Provides:       bundled(node-walk-up-path) = 3.0.1
 Provides:       bundled(node-which) = 2.0.2
-Provides:       bundled(node-which) = 4.0.0
 Provides:       bundled(node-which) = 5.0.0
 Provides:       bundled(node-wrap-ansi) = 7.0.0
 Provides:       bundled(node-wrap-ansi) = 8.1.0
@ -692,7 +681,6 @@ popd
 %if 0%{with valgrind_tests}
 %endif
 %patch -P 13 -p1
-%patch -P 82 -p1
 %patch -P 100 -p1
 %patch -P 101 -p1
 %if 0%{?suse_version} >= 1500 || 0%{?suse_version} == 0