Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs24 for openSUSE:Factory checked in at 2026-06-25 10:50:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs24 (Old) and /work/SRC/openSUSE:Factory/.nodejs24.new.2088 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs24" Thu Jun 25 10:50:05 2026 rev:11 rq:1361450 version:24.17.0 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs24/nodejs24.changes 2026-04-23 17:09:40.865264254 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs24.new.2088/nodejs24.changes 2026-06-25 10:52:09.662896462 +0200 @@ -1,0 +2,33 @@ +Tue Jun 23 10:10:19 UTC 2026 - Adam Majer <[email protected]> + +- Update to 24.17.0 + (CVE-2026-48618, bsc#1268593) tls: normalize hostname for server identity checks + (CVE-2026-48933, bsc#1268592) crypto: guard WebCrypto cipher output length + (CVE-2026-48615, bsc#1268598) lib,test: redact proxy credentials in tunnel errors + (CVE-2026-48619, bsc#1268618) http2: cap originSet size to prevent unbounded memory growth + (CVE-2026-48928, bsc#1268605) tls: fix case-sensitive SNI context matching + (CVE-2026-48930, bsc#1268606) dns,net: reject hostnames with embedded NUL bytes + (CVE-2026-48934, bsc#1268608) tls: bind reusable sessions to authenticated host + (CVE-2026-48617, bsc#1268554) permission: handle process.chdir on writereport + (CVE-2026-48931, bsc#1268611) http: fix response queue poisoning in http.Agent + (CVE-2026-48935, bsc#1268609) permission: disable FileHandle utimes with permission model + (CVE-2026-48937, bsc#1268555) http2: servers keep accepting data even after sending a `GOAWAY` frame + + (CVE-2026-12151, bsc#1268482) undici: Denial of Service due to unbounded memory growth via WebSocket frames + (CVE-2026-6733, bsc#1268479) undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery + (CVE-2026-9679, bsc#1268477) undici: vulnerable to HTTP header injection via Set-Cookie percent-decoding + (CVE-2026-11525, bsc#1268481) undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header + (CVE-2026-2581, bsc#1268480) undici: Denial of Service due to uncontrolled resource consumption + (CVE-2026-9678, bsc#1268478) undici: Information disclosure due to improper cache-control header parsing + + (CVE-2026-27135, bsc#1259853) nghttp2: assertion failure due to missing state validation can lead to DoS + +- ngtcp2_bsc1262274.patch: (CVE-2026-40170, bsc#1262274) - ngtcp2: qlog parameters_set stack buffer overflow. +- pacote-bsc1266318.patch: (CVE-2026-9496, bsc#1266318) - pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec` value can lead to DoS +- ip-address-bsc1268097.patch: (CVE-2026-42338, bsc#1268097) - ip-address: Cross-site scripting via improper HTML escaping of untrusted input + +- fix_ci_tests.patch: rebased +- For changes in older versions, see + https://github.com/nodejs/node/releases + +------------------------------------------------------------------- Old: ---- node-v24.14.1.tar.xz New: ---- ip-address-bsc1268097.patch ngtcp2_bsc1262274.patch node-v24.17.0.tar.xz pacote-bsc1266318.patch update_npm_tarball.sh ----------(New B)---------- New:- pacote-bsc1266318.patch: (CVE-2026-9496, bsc#1266318) - pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec` value can lead to DoS - ip-address-bsc1268097.patch: (CVE-2026-42338, bsc#1268097) - ip-address: Cross-site scripting via improper HTML escaping of untrusted input New: - ngtcp2_bsc1262274.patch: (CVE-2026-40170, bsc#1262274) - ngtcp2: qlog parameters_set stack buffer overflow. - pacote-bsc1266318.patch: (CVE-2026-9496, bsc#1266318) - pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec` value can lead to DoS New:- ngtcp2_bsc1262274.patch: (CVE-2026-40170, bsc#1262274) - ngtcp2: qlog parameters_set stack buffer overflow. - pacote-bsc1266318.patch: (CVE-2026-9496, bsc#1266318) - pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec` value can lead to DoS - ip-address-bsc1268097.patch: (CVE-2026-42338, bsc#1268097) - ip-address: Cross-site scripting via improper HTML escaping of untrusted input ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs24.spec ++++++ --- /var/tmp/diff_new_pack.Ein14W/_old 2026-06-25 10:52:11.166948549 +0200 +++ /var/tmp/diff_new_pack.Ein14W/_new 2026-06-25 10:52:11.166948549 +0200 @@ -25,7 +25,7 @@ %endif Name: nodejs24 -Version: 24.14.1 +Version: 24.17.0 Release: 0 # Double DWZ memory limits @@ -139,6 +139,10 @@ Patch4: v8_nameclash.patch Patch5: icu_781.patch +Patch10: ngtcp2_bsc1262274.patch +Patch11: pacote-bsc1266318.patch +Patch12: ip-address-bsc1268097.patch + ## Patches specific to SUSE and openSUSE # PATCH-FIX-OPENSUSE -- set correct path for dtrace if it is built Patch101: nodejs-libpath.patch @@ -157,6 +161,7 @@ Patch200: versioned.patch + BuildRequires: pkg-config BuildRequires: fdupes BuildRequires: procps @@ -227,7 +232,7 @@ %else # bundled openssl %if %node_version_number <= 12 && 0%{?suse_version} == 1315 && 0%{?sle_version} < 120400 -Provides: bundled(openssl) = 3.5.5 +Provides: bundled(openssl) = 3.5.7 %else BuildRequires: bundled_openssl_should_not_be_required %endif @@ -251,13 +256,13 @@ %if ! 0%{with intree_icu} BuildRequires: pkgconfig(icu-i18n) >= 71 %else -Provides: bundled(icu) = 78.2 +Provides: bundled(icu) = 78.3 %endif %if ! 0%{with intree_nghttp2} BuildRequires: libnghttp2-devel >= 1.41.0 %else -Provides: bundled(nghttp2) = 1.68.0 +Provides: bundled(nghttp2) = 1.69.0 %endif %if 0%{with valgrind_tests} @@ -307,33 +312,30 @@ %endif %endif -Provides: bundled(uvwasi) = 0.0.23 -Provides: bundled(libuv) = 1.51.0 -Provides: bundled(v8) = 13.6.233.17 +## BEGIN NON-NPM PROVIDES ## %if %{with intree_brotli} Provides: bundled(brotli) = 1.2.0 %else BuildRequires: pkgconfig(libbrotlidec) %endif - -Provides: bundled(LIEF) = 0.17.0 -Provides: bundled(merve) = 1.0.0 -Provides: bundled(llhttp) = 9.3.0 -Provides: bundled(ngtcp2) = 1.11.0 - - -Provides: bundled(simdjson) = 4.2.4 # bundled url-ada parser, not ada -Provides: bundled(ada) = 3.4.2 - -Provides: bundled(node-acorn) = 8.15.0 -Provides: bundled(node-acorn-walk) = 8.3.4 -Provides: bundled(node-amaro) = 1.1.4 -Provides: bundled(node-cjs-module-lexer) = 2.1.0 -Provides: bundled(node-corepack) = 0.34.2 -Provides: bundled(node-minimatch) = 10.0.3 -Provides: bundled(node-undici) = 7.18.2 +Provides: bundled(LIEF) = 0.17.0 +Provides: bundled(ada) = 3.4.4 +Provides: bundled(libuv) = 1.52.1 +Provides: bundled(llhttp) = 9.4.2 +Provides: bundled(merve) = 1.2.2 +Provides: bundled(ngtcp2) = 1.15.1 +Provides: bundled(node-acorn) = 8.16.0 +Provides: bundled(node-acorn-walk) = 8.3.5 +Provides: bundled(node-amaro) = 1.1.9 +Provides: bundled(node-corepack) = 0.35.0 +Provides: bundled(node-minimatch) = 10.2.5 +Provides: bundled(node-undici) = 7.28.0 +Provides: bundled(simdjson) = 4.6.1 +Provides: bundled(uvwasi) = 0.0.23 +Provides: bundled(v8) = 13.6.233.17 +## END NON-NPM PROVIDES ## %description Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine. Node.js @@ -370,166 +372,126 @@ Requires: group(nobody) %endif %endif -Provides: bundled(node-abbrev) = 3.0.1 + +## BEGIN NPM PROVIDES ## +Provides: bundled(node-abbrev) = 4.0.0 Provides: bundled(node-agent-base) = 7.1.4 -Provides: bundled(node-ansi-regex) = 5.0.1 -Provides: bundled(node-ansi-regex) = 6.2.2 -Provides: bundled(node-ansi-styles) = 4.3.0 -Provides: bundled(node-ansi-styles) = 6.2.3 Provides: bundled(node-aproba) = 2.1.0 Provides: bundled(node-archy) = 1.0.0 -Provides: bundled(node-balanced-match) = 1.0.2 -Provides: bundled(node-bin-links) = 5.0.0 +Provides: bundled(node-balanced-match) = 4.0.4 +Provides: bundled(node-bin-links) = 6.0.0 Provides: bundled(node-binary-extensions) = 3.1.0 -Provides: bundled(node-brace-expansion) = 2.0.2 -Provides: bundled(node-cacache) = 19.0.1 -Provides: bundled(node-cacache) = 20.0.1 +Provides: bundled(node-brace-expansion) = 5.0.5 +Provides: bundled(node-cacache) = 20.0.4 Provides: bundled(node-chalk) = 5.6.2 Provides: bundled(node-chownr) = 3.0.0 -Provides: bundled(node-ci-info) = 4.3.1 -Provides: bundled(node-cidr-regex) = 5.0.1 -Provides: bundled(node-cli-columns) = 4.0.0 -Provides: bundled(node-cmd-shim) = 7.0.0 -Provides: bundled(node-color-convert) = 2.0.1 -Provides: bundled(node-color-name) = 1.1.4 -Provides: bundled(node-common-ancestor-path) = 1.0.1 -Provides: bundled(node-cross-spawn) = 7.0.6 +Provides: bundled(node-ci-info) = 4.4.0 +Provides: bundled(node-cidr-regex) = 5.0.4 +Provides: bundled(node-cmd-shim) = 8.0.0 +Provides: bundled(node-common-ancestor-path) = 2.0.0 Provides: bundled(node-cssesc) = 3.0.0 Provides: bundled(node-debug) = 4.4.3 -Provides: bundled(node-diff) = 8.0.2 -Provides: bundled(node-eastasianwidth) = 0.2.0 -Provides: bundled(node-emoji-regex) = 8.0.0 -Provides: bundled(node-emoji-regex) = 9.2.2 -Provides: bundled(node-encoding) = 0.1.13 +Provides: bundled(node-diff) = 8.0.4 Provides: bundled(node-env-paths) = 2.2.1 -Provides: bundled(node-err-code) = 2.0.3 -Provides: bundled(node-exponential-backoff) = 3.1.2 +Provides: bundled(node-exponential-backoff) = 3.1.3 Provides: bundled(node-fastest-levenshtein) = 1.0.16 Provides: bundled(node-fdir) = 6.5.0 -Provides: bundled(node-foreground-child) = 3.3.1 Provides: bundled(node-fs-minipass) = 3.0.3 -Provides: bundled(node-glob) = 10.4.5 -Provides: bundled(node-glob) = 11.0.3 +Provides: bundled(node-glob) = 13.0.6 Provides: bundled(node-graceful-fs) = 4.2.11 Provides: bundled(node-hosted-git-info) = 9.0.2 Provides: bundled(node-http-cache-semantics) = 4.2.0 Provides: bundled(node-http-proxy-agent) = 7.0.2 Provides: bundled(node-https-proxy-agent) = 7.0.6 -Provides: bundled(node-iconv-lite) = 0.6.3 +Provides: bundled(node-iconv-lite) = 0.7.2 Provides: bundled(node-ignore-walk) = 8.0.0 -Provides: bundled(node-imurmurhash) = 0.1.4 -Provides: bundled(node-ini) = 5.0.0 -Provides: bundled(node-init-package-json) = 8.2.2 -Provides: bundled(node-ip-address) = 10.0.1 -Provides: bundled(node-ip-regex) = 5.0.0 -Provides: bundled(node-is-cidr) = 6.0.1 -Provides: bundled(node-is-fullwidth-code-point) = 3.0.0 -Provides: bundled(node-isexe) = 2.0.0 -Provides: bundled(node-isexe) = 3.1.1 -Provides: bundled(node-jackspeak) = 3.4.3 -Provides: bundled(node-jackspeak) = 4.1.1 -Provides: bundled(node-json-parse-even-better-errors) = 4.0.0 +Provides: bundled(node-ini) = 6.0.0 +Provides: bundled(node-init-package-json) = 8.2.5 +Provides: bundled(node-ip-address) = 10.1.0 +Provides: bundled(node-is-cidr) = 6.0.4 +Provides: bundled(node-isexe) = 4.0.0 +Provides: bundled(node-json-parse-even-better-errors) = 5.0.0 Provides: bundled(node-json-stringify-nice) = 1.1.4 Provides: bundled(node-jsonparse) = 1.3.1 Provides: bundled(node-just-diff) = 6.0.2 Provides: bundled(node-just-diff-apply) = 5.5.0 Provides: bundled(node-libnpmaccess) = 10.0.3 -Provides: bundled(node-libnpmdiff) = 8.0.9 -Provides: bundled(node-libnpmexec) = 10.1.8 -Provides: bundled(node-libnpmfund) = 7.0.9 +Provides: bundled(node-libnpmdiff) = 8.1.6 +Provides: bundled(node-libnpmexec) = 10.2.6 +Provides: bundled(node-libnpmfund) = 7.0.20 Provides: bundled(node-libnpmorg) = 8.0.1 -Provides: bundled(node-libnpmpack) = 9.0.9 -Provides: bundled(node-libnpmpublish) = 11.1.2 +Provides: bundled(node-libnpmpack) = 9.1.6 +Provides: bundled(node-libnpmpublish) = 11.1.3 Provides: bundled(node-libnpmsearch) = 9.0.1 Provides: bundled(node-libnpmteam) = 8.0.2 -Provides: bundled(node-libnpmversion) = 8.0.2 -Provides: bundled(node-lru-cache) = 10.4.3 -Provides: bundled(node-lru-cache) = 11.2.2 -Provides: bundled(node-make-fetch-happen) = 14.0.3 -Provides: bundled(node-make-fetch-happen) = 15.0.2 -Provides: bundled(node-minimatch) = 10.0.3 -Provides: bundled(node-minimatch) = 9.0.5 +Provides: bundled(node-libnpmversion) = 8.0.3 +Provides: bundled(node-lru-cache) = 11.3.5 +Provides: bundled(node-make-fetch-happen) = 15.0.5 +Provides: bundled(node-minimatch) = 10.2.5 Provides: bundled(node-minipass) = 3.3.6 -Provides: bundled(node-minipass) = 7.1.2 +Provides: bundled(node-minipass) = 7.1.3 Provides: bundled(node-minipass-collect) = 2.0.1 -Provides: bundled(node-minipass-fetch) = 4.0.1 -Provides: bundled(node-minipass-flush) = 1.0.5 +Provides: bundled(node-minipass-fetch) = 5.0.2 +Provides: bundled(node-minipass-flush) = 1.0.6 Provides: bundled(node-minipass-pipeline) = 1.2.4 -Provides: bundled(node-minipass-sized) = 1.0.3 +Provides: bundled(node-minipass-sized) = 2.0.0 Provides: bundled(node-minizlib) = 3.1.0 Provides: bundled(node-ms) = 2.1.3 -Provides: bundled(node-mute-stream) = 2.0.0 +Provides: bundled(node-mute-stream) = 3.0.0 Provides: bundled(node-negotiator) = 1.0.0 -Provides: bundled(node-node-gyp) = 11.4.2 -Provides: bundled(node-nopt) = 8.1.0 -Provides: bundled(node-npm-audit-report) = 6.0.0 -Provides: bundled(node-npm-bundled) = 4.0.0 -Provides: bundled(node-npm-install-checks) = 7.1.2 -Provides: bundled(node-npm-normalize-package-bin) = 4.0.0 -Provides: bundled(node-npm-package-arg) = 13.0.1 -Provides: bundled(node-npm-packlist) = 10.0.2 -Provides: bundled(node-npm-pick-manifest) = 11.0.1 -Provides: bundled(node-npm-profile) = 12.0.0 -Provides: bundled(node-npm-registry-fetch) = 19.0.0 -Provides: bundled(node-npm-user-validate) = 3.0.0 -Provides: bundled(node-p-map) = 7.0.3 -Provides: bundled(node-package-json-from-dist) = 1.0.1 -Provides: bundled(node-pacote) = 21.0.3 -Provides: bundled(node-parse-conflict-json) = 4.0.0 -Provides: bundled(node-path-key) = 3.1.1 -Provides: bundled(node-path-scurry) = 1.11.1 -Provides: bundled(node-path-scurry) = 2.0.0 -Provides: bundled(node-picomatch) = 4.0.3 -Provides: bundled(node-postcss-selector-parser) = 7.1.0 -Provides: bundled(node-proc-log) = 5.0.0 -Provides: bundled(node-proggy) = 3.0.0 +Provides: bundled(node-node-gyp) = 12.3.0 +Provides: bundled(node-nopt) = 9.0.0 +Provides: bundled(node-npm-audit-report) = 7.0.0 +Provides: bundled(node-npm-bundled) = 5.0.0 +Provides: bundled(node-npm-install-checks) = 8.0.0 +Provides: bundled(node-npm-normalize-package-bin) = 5.0.0 +Provides: bundled(node-npm-package-arg) = 13.0.2 +Provides: bundled(node-npm-packlist) = 10.0.4 +Provides: bundled(node-npm-pick-manifest) = 11.0.3 +Provides: bundled(node-npm-profile) = 12.0.1 +Provides: bundled(node-npm-registry-fetch) = 19.1.1 +Provides: bundled(node-npm-user-validate) = 4.0.0 +Provides: bundled(node-p-map) = 7.0.4 +Provides: bundled(node-pacote) = 21.5.0 +Provides: bundled(node-parse-conflict-json) = 5.0.1 +Provides: bundled(node-path-scurry) = 2.0.2 +Provides: bundled(node-picomatch) = 4.0.4 +Provides: bundled(node-postcss-selector-parser) = 7.1.1 +Provides: bundled(node-proc-log) = 6.1.0 +Provides: bundled(node-proggy) = 4.0.0 Provides: bundled(node-promise-all-reject-late) = 1.0.1 Provides: bundled(node-promise-call-limit) = 3.0.2 -Provides: bundled(node-promise-retry) = 2.0.1 -Provides: bundled(node-promzard) = 2.0.0 +Provides: bundled(node-promzard) = 3.0.1 Provides: bundled(node-qrcode-terminal) = 0.12.0 -Provides: bundled(node-read) = 4.1.0 -Provides: bundled(node-read-cmd-shim) = 5.0.0 -Provides: bundled(node-retry) = 0.12.0 +Provides: bundled(node-read) = 5.0.1 +Provides: bundled(node-read-cmd-shim) = 6.0.0 Provides: bundled(node-safer-buffer) = 2.1.2 -Provides: bundled(node-semver) = 7.7.3 -Provides: bundled(node-shebang-command) = 2.0.0 -Provides: bundled(node-shebang-regex) = 3.0.0 +Provides: bundled(node-semver) = 7.7.4 Provides: bundled(node-signal-exit) = 4.1.0 -Provides: bundled(node-sigstore) = 4.0.0 +Provides: bundled(node-sigstore) = 4.1.0 Provides: bundled(node-smart-buffer) = 4.2.0 Provides: bundled(node-socks) = 2.8.7 Provides: bundled(node-socks-proxy-agent) = 8.0.5 -Provides: bundled(node-spdx-correct) = 3.2.0 Provides: bundled(node-spdx-exceptions) = 2.5.0 -Provides: bundled(node-spdx-expression-parse) = 3.0.1 Provides: bundled(node-spdx-expression-parse) = 4.0.0 -Provides: bundled(node-spdx-license-ids) = 3.0.22 -Provides: bundled(node-ssri) = 12.0.0 -Provides: bundled(node-string-width) = 4.2.3 -Provides: bundled(node-string-width) = 5.1.2 -Provides: bundled(node-strip-ansi) = 6.0.1 -Provides: bundled(node-strip-ansi) = 7.1.2 +Provides: bundled(node-spdx-license-ids) = 3.0.23 +Provides: bundled(node-ssri) = 13.0.1 Provides: bundled(node-supports-color) = 10.2.2 -Provides: bundled(node-tar) = 7.5.1 +Provides: bundled(node-tar) = 7.5.13 Provides: bundled(node-text-table) = 0.2.0 Provides: bundled(node-tiny-relative-date) = 2.0.2 -Provides: bundled(node-tinyglobby) = 0.2.15 +Provides: bundled(node-tinyglobby) = 0.2.16 Provides: bundled(node-treeverse) = 3.0.0 -Provides: bundled(node-tuf-js) = 4.0.0 -Provides: bundled(node-unique-filename) = 4.0.0 -Provides: bundled(node-unique-slug) = 5.0.0 +Provides: bundled(node-tuf-js) = 4.1.0 +Provides: bundled(node-undici) = 6.25.0 Provides: bundled(node-util-deprecate) = 1.0.2 -Provides: bundled(node-validate-npm-package-license) = 3.0.4 -Provides: bundled(node-validate-npm-package-name) = 6.0.2 +Provides: bundled(node-validate-npm-package-name) = 7.0.2 Provides: bundled(node-walk-up-path) = 4.0.0 -Provides: bundled(node-which) = 2.0.2 -Provides: bundled(node-which) = 5.0.0 -Provides: bundled(node-wrap-ansi) = 7.0.0 -Provides: bundled(node-wrap-ansi) = 8.1.0 -Provides: bundled(node-write-file-atomic) = 6.0.0 +Provides: bundled(node-which) = 6.0.1 +Provides: bundled(node-write-file-atomic) = 7.0.1 Provides: bundled(node-yallist) = 4.0.0 Provides: bundled(node-yallist) = 5.0.0 +## END NPM PROVIDES ## %description -n npm24 A package manager for Node.js that allows developers to install and @@ -972,19 +934,19 @@ %if 0%{with libalternatives} %post -if ! [ -e %_sbindir/update-alternatives ]; then +if [ -e %_sbindir/update-alternatives ]; then update-alternatives --remove node-default %{_bindir}/node%{node_version_number} fi %post -n npm%{node_version_number} -if ! [ -e %_sbindir/update-alternatives ]; then +if [ -e %_sbindir/update-alternatives ]; then update-alternatives --remove npm-default %{_bindir}/npm%{node_version_number} update-alternatives --remove npx-default %{_bindir}/npx%{node_version_number} fi %if %{node_version_number} >= 14 %post -n corepack%{node_version_number} -if ! [ -e %_sbindir/update-alternatives ]; then +if [ -e %_sbindir/update-alternatives ]; then update-alternatives --remove corepack-default %{_bindir}/corepack%{node_version_number} fi %endif ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.Ein14W/_old 2026-06-25 10:52:11.266952012 +0200 +++ /var/tmp/diff_new_pack.Ein14W/_new 2026-06-25 10:52:11.278952428 +0200 @@ -1,33 +1,33 @@ -56f6c18c5e97beb00594c24eb3cfa3c70b7247c403b00ca7eae75bba30b85ce5 node-v24.14.1-aix-ppc64.tar.gz -4013ca42741ae0fd599d432985834d0ad4f565b1e4c59f8975d561f105f4af5c node-v24.14.1-arm64.msi -25495ff85bd89e2d8a24d88566d7e2f827c6b0d3d872b2cebf75371f93fcb1fe node-v24.14.1-darwin-arm64.tar.gz -0e2e679d76743d6d9225e61327a1ddc324e4a89a80891c78c337208601d98f77 node-v24.14.1-darwin-arm64.tar.xz -2526230ad7d922be82d4fdb1e7ee1e84303e133e3b4b0ec4c2897ab31de0253d node-v24.14.1-darwin-x64.tar.gz -a87a37a10c2faf65742c7d5812f5bab878eee52b0dffdf578f49b7a808d96ddd node-v24.14.1-darwin-x64.tar.xz -282103054f841fe75ecbbfdd8bb7334d0a4bb693191d97c5770ac6ae9acdd4ff node-v24.14.1-headers.tar.gz -4c7a978a22ae662b48d1225310c294239ca0e67d8ecd1b02c49def3536941459 node-v24.14.1-headers.tar.xz -734ff04fa7f8ed2e8a78d40cacf5ac3fc4515dac2858757cbab313eb483ba8a2 node-v24.14.1-linux-arm64.tar.gz -71e427e28b78846f201d4d5ecc30cb13d1508ca099ef3871889a1256c7d6f67e node-v24.14.1-linux-arm64.tar.xz -06824292e8b40b7f65a6f9973f3d60f3cc0001a9168234bc3d6e30aa13649fd2 node-v24.14.1-linux-ppc64le.tar.gz -95bf0c8dbb73144edb79a57399f03c70af6995b78e1c632926e53e6404662ef5 node-v24.14.1-linux-ppc64le.tar.xz -3ae573f43c93dafdafedc80863fa2a040bfeaa15e6ab83c1a8e0101f09952dc4 node-v24.14.1-linux-s390x.tar.gz -ed3bfbc0ff418b0ec4633f23d53a12a691717a34b041c3fbdb296c8774e5a98a node-v24.14.1-linux-s390x.tar.xz -ace9fa104992ed0829642629c46ca7bd7fd6e76278cb96c958c4b387d29658ea node-v24.14.1-linux-x64.tar.gz -84d38715d449447117d05c3e71acd78daa49d5b1bfa8aacf610303920c3322be node-v24.14.1-linux-x64.tar.xz -2aaeb742f6aa924da6fbee5c79d7c602b8bfcec45457eb6b738717c3052a14d6 node-v24.14.1-win-arm64.7z -a7b7c68490e4a8cde1921fe5a0cfb3001d53f9c839e416903e4f28e727b62f60 node-v24.14.1-win-arm64.zip -05024009bab2fed64b1143c3cc9931441cc1b902acd16f5880404db94beb3543 node-v24.14.1-win-x64.7z -6e50ce5498c0cebc20fd39ab3ff5df836ed2f8a31aa093cecad8497cff126d70 node-v24.14.1-win-x64.zip -fd8ba3e8262738959cad50e6f6e71d689eab7dd09fc7231b51d78abe7852d4ec node-v24.14.1-x64.msi -643b518b5b33dfb5e199e6268307266add568fe8cc981c82e255c9cd1ac51a29 node-v24.14.1.pkg -8298cf1f5774093ca819f41b8dd392fd2cff058688b4d5c8805026352e2d31b3 node-v24.14.1.tar.gz -7822507713f202cf2a551899d250259643f477b671706db421a6fb55c4aa0991 node-v24.14.1.tar.xz -557ba2ad04fd08464edc2ee3e399b58ff11eaba35a00bb05671661557dc6f79e win-arm64/node.exe -59f1c42e5962e9333bb1673c21125b7a7ce9a6908299aee8f7673803c2e24212 win-arm64/node.lib -ab56402e34b2a385ba6987cb7e022b377bbdcba068886d0f6d61beaf71e26e79 win-arm64/node_pdb.7z -223757455be292ec8a00404e0890f6e345d76824875e188e0be30710ebbe4cf4 win-arm64/node_pdb.zip -58e74bf02fc5bbacc41dcb8bef089961cd5bddd37830b87784e4fc624d145d1f win-x64/node.exe -35fcdd35d3d22e283c0e2e095cc43ef676301bb85f950c344a73d59231bd7e61 win-x64/node.lib -005ea57d4ebca610dcf87a08668977f701cbe91d28595f143c0511c344f675f2 win-x64/node_pdb.7z -4a755bfa6387bbe68a586e4beb8153891ec7f55df772147f59f9fccdf5f0b57c win-x64/node_pdb.zip +31e9fc249c74a3a6dfeca4758229f003620459b42c3749f7c423f2999d09a727 node-v24.17.0-aix-ppc64.tar.gz +adee7826d2840efd66cec5e79c9b4e151f4815ac0e24f92cf334bc28d7f1f83c node-v24.17.0-arm64.msi +4fc3266a3702eebc39cc37661cf4eeceeade307e242ab64e4d7ce7949197e11f node-v24.17.0-darwin-arm64.tar.gz +cf7e9152d7bd86c140f6eccf3577abfbaf8960be1ca49d9d900e8484984dcb9a node-v24.17.0-darwin-arm64.tar.xz +80da552fe037290cb130e9dea590f5eeeb7aa450636f0c89ab41415511c1ec27 node-v24.17.0-darwin-x64.tar.gz +fe50e386f6a5e0b29ce44b989e543da9fb9a80aed0b91a2f0cb19c55106921fc node-v24.17.0-darwin-x64.tar.xz +ac60c4ba92204658efaac112efea5d3597348b011be679af0eec324d8c08915e node-v24.17.0-headers.tar.gz +aab64d32cd1690e4027326e746877bdac62f0a8458215241638477cbfe0a4192 node-v24.17.0-headers.tar.xz +faa0d59ba7fe7045c950ed09b190578fb8eee73e4358686d38fcc99ca58c1480 node-v24.17.0-linux-arm64.tar.gz +67324b9e515e7d13da72571a5dd522bb23145a820f7dde15497897e466759ab3 node-v24.17.0-linux-arm64.tar.xz +804ed4a1a0ef28d592408b84ac2a85e858ab9124dad933e12b4323609411b809 node-v24.17.0-linux-ppc64le.tar.gz +7657dfb803132a05cfc83353f43f603cba790e1d2366caeb36083aa8f351124b node-v24.17.0-linux-ppc64le.tar.xz +a659e9c26fcd648f3359dbfd292f078434168040f2fb1acf3c9c1bcd3fc37b2b node-v24.17.0-linux-s390x.tar.gz +a8e6f79fac2e17e5a9a9d479bad3b6f19921049bbb5888fa238347427502f23c node-v24.17.0-linux-s390x.tar.xz +e0472427aa791ad80bdc426ff7cc73cdd28ed0f616d1ff9689a23a7f47f1265f node-v24.17.0-linux-x64.tar.gz +ab343a1b747c7cbf3630dfd7dbf818c5423fab2eb4f5ad1afc896f6bd121a917 node-v24.17.0-linux-x64.tar.xz +0ef6a68334882bb74f5afd2d370cf2cdabc3ef823c8fdd649d9d779478c09607 node-v24.17.0-win-arm64.7z +4957712f67fce55779cc794d9b4df9e0e802a18c841ad5a4e42f17be490e634d node-v24.17.0-win-arm64.zip +91382ab13fea6cfdd475fc0f5b74727c979f609a94905ae338f8b9f1cce32457 node-v24.17.0-win-x64.7z +f2aa33b35b75aca5f3f7b85675a6f6423201053e9381911e64961f3bda2528ab node-v24.17.0-win-x64.zip +ae5d9e9f6c85b8d35717f499ba907259ec80672c289858bae19074355906a240 node-v24.17.0-x64.msi +6d795ec7986972ac377bcf017eb2a4f970962f36e1584bfebe79326a194f365f node-v24.17.0.pkg +66a10e05fa7875ff1d7d669de405ea6ce8725f2352bd07550f520dea2f880825 node-v24.17.0.tar.gz +a7ab562ed2369a29c68b72fa00e3103bcdfe37063dff799c6acc8e404e275fcd node-v24.17.0.tar.xz +44999f9ec6486d01202d8961f343eac8c9f2847b234a8637c3fd0f1e2bb3288a win-arm64/node.exe +d32c3ff35f34b9593e5fcddc23ca779f4b40abfb9aa5a031d620f1ecb44ca935 win-arm64/node.lib +60c69df69e22db238ab670efb7ad57ab6da92adcea33c6eea152daf3c2182ad6 win-arm64/node_pdb.7z +93262aebc5c28f3f2218cad37a7635b9fb95ea89cb068c124b7eac9446682029 win-arm64/node_pdb.zip +c6335d08331c23d68b9f2b18adb102002d76ef150b47248e954c507e0d033664 win-x64/node.exe +4ab42af597bc4f0957e9e2dcd5db18bdf223406a0c8e0b6be0f28e57977b808b win-x64/node.lib +0e2a2937823b7fbca4d4ed344ed13d6c8a519d06460f77966fce59e1d146826b win-x64/node_pdb.7z +bd231782ef5e062395d6d2a259c3aaee994db694df9bdcd4beeb9d6bac9e69ec win-x64/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.Ein14W/_old and /var/tmp/diff_new_pack.Ein14W/_new differ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.Ein14W/_old 2026-06-25 10:52:11.342954644 +0200 +++ /var/tmp/diff_new_pack.Ein14W/_new 2026-06-25 10:52:11.346954783 +0200 @@ -1,6 +1,6 @@ -mtime: 1776788064 -commit: 6dee0197b5dc41881fa60c919219e79299263e7231af6b5e4e7931488aee4621 -url: https://src.opensuse.org/nodejs/nodejs24.git -revision: 6dee0197b5dc41881fa60c919219e79299263e7231af6b5e4e7931488aee4621 +mtime: 1782220864 +commit: d1e20dae2aa664af79ef9bef86fc44e4a6ae670e1e58e3871b6482b380483c57 +url: https://src.opensuse.org/nodejs/nodejs24 +revision: d1e20dae2aa664af79ef9bef86fc44e4a6ae670e1e58e3871b6482b380483c57 projectscmsync: https://src.opensuse.org/nodejs/_ObsPrj.git ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-06-23 15:21:04.000000000 +0200 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/update_npm_tarball.sh new/update_npm_tarball.sh --- old/update_npm_tarball.sh 1970-01-01 01:00:00.000000000 +0100 +++ new/update_npm_tarball.sh 2026-06-23 15:21:04.000000000 +0200 @@ -0,0 +1,13 @@ +#!/bin/bash + +# +# Fetch npm module tarball that is required to run unit tests +# which are not provided by upstream tarball +# +set -e + +tar Jxf node-v*.tar.xz +cd node-v*/tools/doc +npm ci +cd ../.. +exec tar Jcf ../node_modules.tar.xz tools/doc/node_modules ++++++ fix_ci_tests.patch ++++++ --- /var/tmp/diff_new_pack.Ein14W/_old 2026-06-25 10:52:11.578962818 +0200 +++ /var/tmp/diff_new_pack.Ein14W/_new 2026-06-25 10:52:11.582962956 +0200 @@ -2,10 +2,10 @@ Date: Dec 20 09:18:49 UTC 2017 Summary: Fix CI unit tests framework for OBS building -Index: node-v24.14.1/test/parallel/test-module-loading-globalpaths.js +Index: node-v24.17.0/test/parallel/test-module-loading-globalpaths.js =================================================================== ---- node-v24.14.1.orig/test/parallel/test-module-loading-globalpaths.js -+++ node-v24.14.1/test/parallel/test-module-loading-globalpaths.js +--- node-v24.17.0.orig/test/parallel/test-module-loading-globalpaths.js ++++ node-v24.17.0/test/parallel/test-module-loading-globalpaths.js @@ -11,6 +11,9 @@ const { addLibraryPath } = require('../c addLibraryPath(process.env); @@ -16,10 +16,10 @@ if (process.argv[2] === 'child') { console.log(require(pkgName).string); } else { -Index: node-v24.14.1/test/parallel/test-tls-passphrase.js +Index: node-v24.17.0/test/parallel/test-tls-passphrase.js =================================================================== ---- node-v24.14.1.orig/test/parallel/test-tls-passphrase.js -+++ node-v24.14.1/test/parallel/test-tls-passphrase.js +--- node-v24.17.0.orig/test/parallel/test-tls-passphrase.js ++++ node-v24.17.0/test/parallel/test-tls-passphrase.js @@ -223,7 +223,7 @@ server.listen(0, common.mustCall(functio }, onSecureConnect()); })).unref(); @@ -29,10 +29,10 @@ // Missing passphrase assert.throws(function() { -Index: node-v24.14.1/test/parallel/test-repl-envvars.js +Index: node-v24.17.0/test/parallel/test-repl-envvars.js =================================================================== ---- node-v24.14.1.orig/test/parallel/test-repl-envvars.js -+++ node-v24.14.1/test/parallel/test-repl-envvars.js +--- node-v24.17.0.orig/test/parallel/test-repl-envvars.js ++++ node-v24.17.0/test/parallel/test-repl-envvars.js @@ -3,6 +3,8 @@ // Flags: --expose-internals @@ -42,10 +42,10 @@ const stream = require('stream'); const { describe, test } = require('node:test'); const REPL = require('internal/repl'); -Index: node-v24.14.1/Makefile +Index: node-v24.17.0/Makefile =================================================================== ---- node-v24.14.1.orig/Makefile -+++ node-v24.14.1/Makefile +--- node-v24.17.0.orig/Makefile ++++ node-v24.17.0/Makefile @@ -406,7 +406,6 @@ ADDONS_HEADERS_PREREQS := tools/install. $(wildcard deps/uv/include/*/*.h) \ $(wildcard deps/v8/include/*.h) \ @@ -72,10 +72,10 @@ echo "Skipping tools/doc/node_modules (no crypto and/or no ICU)"; \ else \ cd tools/doc && $(call available-node,$(run-npm-ci)) \ -Index: node-v24.14.1/tools/test.py +Index: node-v24.17.0/tools/test.py =================================================================== ---- node-v24.14.1.orig/tools/test.py -+++ node-v24.14.1/tools/test.py +--- node-v24.17.0.orig/tools/test.py ++++ node-v24.17.0/tools/test.py @@ -1399,7 +1399,7 @@ def BuildOptions(): result.add_argument("-s", "--suite", help="A test suite", default=[], action="append") @@ -85,10 +85,10 @@ result.add_argument("--arch", help='The architecture to run tests for', default='none') result.add_argument("--snapshot", help="Run the tests with snapshot turned on", -Index: node-v24.14.1/test/parallel/test-crypto-dh.js +Index: node-v24.17.0/test/parallel/test-crypto-dh.js =================================================================== ---- node-v24.14.1.orig/test/parallel/test-crypto-dh.js -+++ node-v24.14.1/test/parallel/test-crypto-dh.js +--- node-v24.17.0.orig/test/parallel/test-crypto-dh.js ++++ node-v24.17.0/test/parallel/test-crypto-dh.js @@ -97,7 +97,7 @@ const { dh3.computeSecret(''); }, { message: hasOpenSSL3 && !hasOpenSSL3WithNewErrorMessage ? @@ -98,10 +98,10 @@ } } -Index: node-v24.14.1/test/parallel/test-dns.js +Index: node-v24.17.0/test/parallel/test-dns.js =================================================================== ---- node-v24.14.1.orig/test/parallel/test-dns.js -+++ node-v24.14.1/test/parallel/test-dns.js +--- node-v24.17.0.orig/test/parallel/test-dns.js ++++ node-v24.17.0/test/parallel/test-dns.js @@ -401,7 +401,7 @@ assert.throws(() => { const server = dgram.createSocket('udp4'); @@ -111,10 +111,10 @@ const parsed = dnstools.parseDNSPacket(msg); const domain = parsed.questions[0].domain; assert.strictEqual(domain, 'example.org'); -Index: node-v24.14.1/test/wpt/test-webcrypto.js +Index: node-v24.17.0/test/wpt/test-webcrypto.js =================================================================== ---- node-v24.14.1.orig/test/wpt/test-webcrypto.js -+++ node-v24.14.1/test/wpt/test-webcrypto.js +--- node-v24.17.0.orig/test/wpt/test-webcrypto.js ++++ node-v24.17.0/test/wpt/test-webcrypto.js @@ -1,7 +1,8 @@ 'use strict'; @@ -125,11 +125,11 @@ common.skip('missing crypto'); const { WPTRunner } = require('../common/wpt'); -Index: node-v24.14.1/test/parallel/test-sqlite.js +Index: node-v24.17.0/test/parallel/test-sqlite.js =================================================================== ---- node-v24.14.1.orig/test/parallel/test-sqlite.js -+++ node-v24.14.1/test/parallel/test-sqlite.js -@@ -230,6 +230,7 @@ suite('SQL APIs enabled at build time', +--- node-v24.17.0.orig/test/parallel/test-sqlite.js ++++ node-v24.17.0/test/parallel/test-sqlite.js +@@ -243,6 +243,7 @@ suite('SQL APIs enabled at build time', }); test('fts3 is enabled', (t) => { @@ -137,15 +137,15 @@ const db = new DatabaseSync(':memory:'); db.exec(` CREATE VIRTUAL TABLE t1 USING fts3(content TEXT); -@@ -245,6 +246,7 @@ suite('SQL APIs enabled at build time', +@@ -258,6 +259,7 @@ suite('SQL APIs enabled at build time', }); - test('fts3 parenthesis', (t) => { -+ t.skip(); return; + test('fts3 parenthesis is enabled', (t) => { ++ t.skip(); return; const db = new DatabaseSync(':memory:'); db.exec(` CREATE VIRTUAL TABLE t1 USING fts3(content TEXT); -@@ -313,6 +315,7 @@ suite('SQL APIs enabled at build time', +@@ -326,6 +328,7 @@ suite('SQL APIs enabled at build time', }); test('geopoly is enabled', (t) => { @@ -153,10 +153,10 @@ const db = new DatabaseSync(':memory:'); db.exec(` CREATE VIRTUAL TABLE t1 USING geopoly(a,b,c); -Index: node-v24.14.1/test/parallel/test-internal-util-construct-sab.js +Index: node-v24.17.0/test/parallel/test-internal-util-construct-sab.js =================================================================== ---- node-v24.14.1.orig/test/parallel/test-internal-util-construct-sab.js -+++ node-v24.14.1/test/parallel/test-internal-util-construct-sab.js +--- node-v24.17.0.orig/test/parallel/test-internal-util-construct-sab.js ++++ node-v24.17.0/test/parallel/test-internal-util-construct-sab.js @@ -1,7 +1,6 @@ // Flags: --enable-sharedarraybuffer-per-context --expose-internals 'use strict'; @@ -165,10 +165,10 @@ const assert = require('assert'); const { kMaxLength } = require('buffer'); const { isSharedArrayBuffer } = require('util/types'); -Index: node-v24.14.1/test/common/index.js +Index: node-v24.17.0/test/common/index.js =================================================================== ---- node-v24.14.1.orig/test/common/index.js -+++ node-v24.14.1/test/common/index.js +--- node-v24.17.0.orig/test/common/index.js ++++ node-v24.17.0/test/common/index.js @@ -925,6 +925,7 @@ function sleepSync(ms) { const common = { @@ -177,10 +177,10 @@ buildType, canCreateSymLink, childShouldThrowAndAbort, -Index: node-v24.14.1/test/common/index.mjs +Index: node-v24.17.0/test/common/index.mjs =================================================================== ---- node-v24.14.1.orig/test/common/index.mjs -+++ node-v24.14.1/test/common/index.mjs +--- node-v24.17.0.orig/test/common/index.mjs ++++ node-v24.17.0/test/common/index.mjs @@ -5,6 +5,7 @@ const common = require('./index.js'); const { @@ -189,18 +189,4 @@ buildType, canCreateSymLink, childShouldThrowAndAbort, -Index: node-v24.14.1/test/parallel/test-buffer-concat.js -=================================================================== ---- node-v24.14.1.orig/test/parallel/test-buffer-concat.js -+++ node-v24.14.1/test/parallel/test-buffer-concat.js -@@ -84,8 +84,7 @@ assert.throws(() => { - Buffer.concat([Buffer.from('hello')], -2); - }, { - code: 'ERR_OUT_OF_RANGE', -- message: 'The value of "length" is out of range. It must be >= 0 && <= 9007199254740991. ' + -- 'Received -2' -+ message: /^The value of "length" is out of range. It must be >= 0 && <= \d+. Received -2$/ - }); - - // eslint-disable-next-line node-core/crypto-check ++++++ ip-address-bsc1268097.patch ++++++ ++++ 2553 lines (skipped) ++++++ ngtcp2_bsc1262274.patch ++++++ Index: node-v24.17.0/deps/ngtcp2/ngtcp2/lib/ngtcp2_qlog.c =================================================================== --- node-v24.17.0.orig/deps/ngtcp2/ngtcp2/lib/ngtcp2_qlog.c +++ node-v24.17.0/deps/ngtcp2/ngtcp2/lib/ngtcp2_qlog.c @@ -935,7 +935,7 @@ void ngtcp2_qlog_pkt_sent_end(ngtcp2_qlo void ngtcp2_qlog_parameters_set_transport_params( ngtcp2_qlog *qlog, const ngtcp2_transport_params *params, int server, ngtcp2_qlog_side side) { - uint8_t buf[1024]; + uint8_t buf[2048]; uint8_t *p = buf; const ngtcp2_preferred_addr *paddr; const ngtcp2_sockaddr_in *sa_in; ++++++ node-v24.14.1.tar.xz -> node-v24.17.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs24/node-v24.14.1.tar.xz /work/SRC/openSUSE:Factory/.nodejs24.new.2088/node-v24.17.0.tar.xz differ: char 26, line 1 ++++++ pacote-bsc1266318.patch ++++++ Index: node-v24.17.0/deps/npm/node_modules/pacote/lib/util/add-git-sha.js =================================================================== --- node-v24.17.0.orig/deps/npm/node_modules/pacote/lib/util/add-git-sha.js +++ node-v24.17.0/deps/npm/node_modules/pacote/lib/util/add-git-sha.js @@ -8,7 +8,10 @@ const addGitSha = (spec, sha) => { return `${base}#${sha}` } else { // don't use new URL for this, because it doesn't handle scp urls - return spec.rawSpec.replace(/#.*$/, '') + `#${sha}` + // strip the committish with indexOf/slice to avoid a regexp redos + const hashIndex = spec.rawSpec.indexOf('#') + const base = hashIndex === -1 ? spec.rawSpec : spec.rawSpec.slice(0, hashIndex) + return `${base}#${sha}` } } ++++++ update_npm_tarball.sh ++++++ #!/bin/bash # # Fetch npm module tarball that is required to run unit tests # which are not provided by upstream tarball # set -e tar Jxf node-v*.tar.xz cd node-v*/tools/doc npm ci cd ../.. exec tar Jcf ../node_modules.tar.xz tools/doc/node_modules
