Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs26 for openSUSE:Factory checked in at 2026-08-02 23:13:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs26 (Old) and /work/SRC/openSUSE:Factory/.nodejs26.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nodejs26" Sun Aug 2 23:13:56 2026 rev:3 rq:1369027 version:26.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs26/nodejs26.changes 2026-07-02 20:16:13.227421425 +0200 +++ /work/SRC/openSUSE:Factory/.nodejs26.new.16738/nodejs26.changes 2026-08-02 23:14:34.096571368 +0200 @@ -1,0 +2,29 @@ +Fri Jul 31 14:14:15 UTC 2026 - Adam Majer <[email protected]> + +- Update to 26.5.1: + - CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits (bsc#1272941) + - CVE-2026-56848: HTTP/2 re-entrant send can cause heap-use-after-free (bsc#1272942) + - CVE-2026-58043: Permission Model path matching can over-grant filesystem access (bsc#1272943) + - CVE-2026-56850: HTTPS Agent can reuse mTLS identities across PFX certificates (bsc#1272944) + - CVE-2026-58040: HTTPS Agent session reuse can skip hostname verification (bsc#1272945) + - CVE-2026-58041: node:sqlite SQLTagStore iterator replay can re-execute writes (bsc#1272946) + - CVE-2026-58042: dns.resolveAny() can abort on DNS responses with many A records (bsc#1272947) + - CVE-2026-58045: node:zlib sync APIs can crash on spoofed TypedArray length (bsc#1272948) + - CVE-2026-56847: Permission Model allows trace events to write outside the allowlist (bsc#1272949) + - CVE-2026-58039: Permission Model allows process reports to write outside the allowlist (bsc#1272950) + - CVE-2026-58044: HTTP parser header truncation can enable request smuggling (bsc#1272951) + +- Changes in 26.5.0: + - buffer: implement blob.textStream() + - esm: add --experimental-import-text flag + - perf_hooks: sample delay per event loop iteration + - stream: expose ReadableStreamTee + - tls: report negotiated TLS groups + +------------------------------------------------------------------- +Fri Jul 31 07:34:43 UTC 2026 - Guillaume GARDET <[email protected]> + +- Add upstream patch to fix build on aarch64: + * nodejs-add-missing-include.patch + +------------------------------------------------------------------- Old: ---- node-v26.4.0.tar.xz New: ---- node-v26.5.1.tar.xz nodejs-add-missing-include.patch ----------(New B)---------- New:- Add upstream patch to fix build on aarch64: * nodejs-add-missing-include.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs26.spec ++++++ --- /var/tmp/diff_new_pack.cQKrAf/_old 2026-08-02 23:14:35.672625465 +0200 +++ /var/tmp/diff_new_pack.cQKrAf/_new 2026-08-02 23:14:35.672625465 +0200 @@ -25,7 +25,7 @@ %endif Name: nodejs26 -Version: 26.4.0 +Version: 26.5.1 Release: 0 # Double DWZ memory limits @@ -133,6 +133,8 @@ # PATCH-FIX-OPENSUSE -- install user global npm packages to /usr/local # instead of /usr Patch104: npm_search_paths.patch +# PATCH-FIX-UPSTREAM - https://github.com/nodejs/node/pull/63287 +Patch105: nodejs-add-missing-include.patch Patch120: flaky_test_rerun.patch @@ -301,14 +303,14 @@ Provides: bundled(LIEF) = 0.17.0 Provides: bundled(ada) = 3.4.4 Provides: bundled(libuv) = 1.52.1 -Provides: bundled(llhttp) = 9.4.2 +Provides: bundled(llhttp) = 9.4.3 Provides: bundled(merve) = 1.2.2 -Provides: bundled(ngtcp2) = 1.22.1 -Provides: bundled(node-acorn) = 8.16.0 +Provides: bundled(ngtcp2) = 1.23.0 +Provides: bundled(node-acorn) = 8.17.0 Provides: bundled(node-acorn-walk) = 8.3.5 -Provides: bundled(node-amaro) = 1.1.9 +Provides: bundled(node-amaro) = 1.1.10 Provides: bundled(node-minimatch) = 10.2.5 -Provides: bundled(node-undici) = 8.5.0 +Provides: bundled(node-undici) = 8.9.0 Provides: bundled(simdjson) = 4.6.4 Provides: bundled(uvwasi) = 0.0.23 Provides: bundled(v8) = 14.6.202.34 @@ -393,11 +395,11 @@ Provides: bundled(node-just-diff) = 6.0.2 Provides: bundled(node-just-diff-apply) = 5.5.0 Provides: bundled(node-libnpmaccess) = 10.0.3 -Provides: bundled(node-libnpmdiff) = 8.1.9 -Provides: bundled(node-libnpmexec) = 10.2.9 -Provides: bundled(node-libnpmfund) = 7.0.23 +Provides: bundled(node-libnpmdiff) = 8.1.10 +Provides: bundled(node-libnpmexec) = 10.3.0 +Provides: bundled(node-libnpmfund) = 7.0.24 Provides: bundled(node-libnpmorg) = 8.0.1 -Provides: bundled(node-libnpmpack) = 9.1.9 +Provides: bundled(node-libnpmpack) = 9.1.10 Provides: bundled(node-libnpmpublish) = 11.2.0 Provides: bundled(node-libnpmsearch) = 9.0.1 Provides: bundled(node-libnpmteam) = 8.0.2 @@ -416,7 +418,7 @@ Provides: bundled(node-ms) = 2.1.3 Provides: bundled(node-mute-stream) = 3.0.0 Provides: bundled(node-negotiator) = 1.0.0 -Provides: bundled(node-node-gyp) = 12.3.0 +Provides: bundled(node-node-gyp) = 12.4.0 Provides: bundled(node-nopt) = 9.0.0 Provides: bundled(node-npm-audit-report) = 7.0.0 Provides: bundled(node-npm-bundled) = 5.0.0 @@ -429,11 +431,11 @@ Provides: bundled(node-npm-registry-fetch) = 19.1.1 Provides: bundled(node-npm-user-validate) = 4.0.0 Provides: bundled(node-p-map) = 7.0.4 -Provides: bundled(node-pacote) = 21.5.0 +Provides: bundled(node-pacote) = 21.5.1 Provides: bundled(node-parse-conflict-json) = 5.0.1 Provides: bundled(node-path-scurry) = 2.0.2 Provides: bundled(node-picomatch) = 4.0.4 -Provides: bundled(node-postcss-selector-parser) = 7.1.1 +Provides: bundled(node-postcss-selector-parser) = 7.1.4 Provides: bundled(node-proc-log) = 6.1.0 Provides: bundled(node-proggy) = 4.0.0 Provides: bundled(node-promise-all-reject-late) = 1.0.1 @@ -443,7 +445,7 @@ Provides: bundled(node-read) = 5.0.1 Provides: bundled(node-read-cmd-shim) = 6.0.0 Provides: bundled(node-safer-buffer) = 2.1.2 -Provides: bundled(node-semver) = 7.8.1 +Provides: bundled(node-semver) = 7.8.4 Provides: bundled(node-signal-exit) = 4.1.0 Provides: bundled(node-sigstore) = 4.1.1 Provides: bundled(node-smart-buffer) = 4.2.0 @@ -454,10 +456,10 @@ Provides: bundled(node-spdx-license-ids) = 3.0.23 Provides: bundled(node-ssri) = 13.0.1 Provides: bundled(node-supports-color) = 10.2.2 -Provides: bundled(node-tar) = 7.5.15 +Provides: bundled(node-tar) = 7.5.16 Provides: bundled(node-text-table) = 0.2.0 Provides: bundled(node-tiny-relative-date) = 2.0.2 -Provides: bundled(node-tinyglobby) = 0.2.16 +Provides: bundled(node-tinyglobby) = 0.2.17 Provides: bundled(node-treeverse) = 3.0.0 Provides: bundled(node-tuf-js) = 4.1.0 Provides: bundled(node-undici) = 6.26.0 ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.cQKrAf/_old 2026-08-02 23:14:35.720627113 +0200 +++ /var/tmp/diff_new_pack.cQKrAf/_new 2026-08-02 23:14:35.720627113 +0200 @@ -1,33 +1,33 @@ -60269b7e2f214eb546bddc976d40dba628f63ee440488ebc2594abfc06873258 node-v26.4.0-aix-ppc64.tar.gz -76d6c1b2fee84474374e445606b90cf6f1d8ffa22033f438c5008a21dd54fb35 node-v26.4.0-arm64.msi -4f4fbcacf6b1ff1a95deedba7bd7b2d79efecaa53a8ecb0530546dc9063fefbc node-v26.4.0-darwin-arm64.tar.gz -bef4c7e75087c029835f519a7ba640eba52fa617fadb3a9049828ff3b45b57dd node-v26.4.0-darwin-arm64.tar.xz -eb3bdd8dec3ff2558ee10e284da7d2a3865af0cbda21f06d397b0265837c641e node-v26.4.0-darwin-x64.tar.gz -06607eef24180c3d1299455efe315bfef67b68b271dc307841cb3fb3af39e211 node-v26.4.0-darwin-x64.tar.xz -2caa0b6addb7e63c38ccd2b1d78d78ba4418b35b5daed0bc9daea23e8ab769c5 node-v26.4.0-headers.tar.gz -6eb5714cf9e917c5627f1f4df8ba126080333ddd51bca64bc0d424f82162c434 node-v26.4.0-headers.tar.xz -773d9ec67266838270ddc105c2548ae8aaff28bc8fe6f34c55d1094043c4165e node-v26.4.0-linux-arm64.tar.gz -f6d8eedc52170667d45730ac2f413c4aa1e7cd2165c9cac5746ef3cb0f4ec45a node-v26.4.0-linux-arm64.tar.xz -d550366058fb29aade118fe0552f2fadc694da9ea63aadf4a73d6a523398e139 node-v26.4.0-linux-ppc64le.tar.gz -2feb9010b184e13c17150a81c8e12801a8f166513cccea0a5a1ea9d3e521ff20 node-v26.4.0-linux-ppc64le.tar.xz -70ebd033c50f9083be53d8a0583c215049c63212087835da719c3c06cce4117b node-v26.4.0-linux-s390x.tar.gz -55c161e3ff9bec97fe70e6dce64f5e844457de151f6fe602461c79038ec524b1 node-v26.4.0-linux-s390x.tar.xz -f221dab30d0e9d544332f06fbee2c62186c97d864d5cac8482dba34f1e38b8dc node-v26.4.0-linux-x64.tar.gz -5c4286dcd5bbd5acb1ccc7eb0e088bd5eb1e3affad671ee9364004f8f6a4a431 node-v26.4.0-linux-x64.tar.xz -e810f99f1ed6e4ae719e548b9574bede57a98aadb747d1ad8364a2adcfa5dae9 node-v26.4.0-win-arm64.7z -394cb72e664faaa518ca1877bcc20bb03a3e2f51ed1f6cfce53e1a306e8c97f6 node-v26.4.0-win-arm64.zip -5adb7d769da5384d3ef7c41599b921f2b6e18cbadc487b27b96b35ef018e1497 node-v26.4.0-win-x64.7z -5f87d038c6ec442aa46b9126f8ca170acbd2f3b9b9152ca798cf54596a31e214 node-v26.4.0-win-x64.zip -c9df873c4cf0463c63b79774d96b2e126ca6ba9d9f86529846864d41775101d6 node-v26.4.0-x64.msi -e9cbc19b609a6a919169c8565355c51899ecc82ce0197ba6f687540ca8901b50 node-v26.4.0.pkg -b1d9ebb2f4bea2058f2d105710d8cffbd1af3c0c5c690b1886ce54df098bea16 node-v26.4.0.tar.gz -9eceb3621024069d91035b5471d2ebe86aa04d22dbeba72a782eaf36ff9183ac node-v26.4.0.tar.xz -e9b3ccbbecfe76918bc4e2b931024ae699a0c2753de745c5a34ac1f85728e029 win-arm64/node.exe +0bafe816b17bcaee285e79e325b7a44eea605d12d81b2caa78cddcadf5d1b5f6 node-v26.5.1-aix-ppc64.tar.gz +01875f52263953ad81972d304263f36a71e5e97873fa9fa60989e8973d18d00b node-v26.5.1-arm64.msi +f4387df0b46556516d19abf2f2d6806481ac8368aa7f9d96bafed422a56a1d01 node-v26.5.1-darwin-arm64.tar.gz +f4665a1e764653ec6fe7686309e8907e9ebb9ba68c4b88b9185fdc29f221559b node-v26.5.1-darwin-arm64.tar.xz +077d5c936868dab19d21f77f1e71ce13697e80b3e86a399dcab238902a2ebf93 node-v26.5.1-darwin-x64.tar.gz +4436be8db0e2bd5ca3dee8c48aa8a157c9a8fef99580036ff1da8ef6aba44708 node-v26.5.1-darwin-x64.tar.xz +598a3139679db65461f8af50463d668008eaee5e0d09df4eeaa27f3eeefecc03 node-v26.5.1-headers.tar.gz +f72d24a5a34b40ba738f6d28cdcd50e3f4976558d4f14bebfa64fdbdcfc4951a node-v26.5.1-headers.tar.xz +21194bbf41c18d9ec277545c4d14cce8597d57a9d9f494c323d8121a25de33e8 node-v26.5.1-linux-arm64.tar.gz +0b6b0cc2a1eecbe736f9918de8b5a6c9a48d286b88bec1298a3c1e3376182ea8 node-v26.5.1-linux-arm64.tar.xz +cf518dd2772ea7e5046daf4a4ba9e348fce01e2b9741f32ba21b4bbd87b8dfaf node-v26.5.1-linux-ppc64le.tar.gz +692d0c45896bf232e22b8b64a4a826ed0a70fec75545f208d120c109d0a86752 node-v26.5.1-linux-ppc64le.tar.xz +af5a58fca0c3fc130c6a649bd6c29f4b000145055eb7a364bde189abdf1516f5 node-v26.5.1-linux-s390x.tar.gz +ff4635062f82308dda7c7164337ad9bb383568dac984ff64b35b888e7d7a4ef3 node-v26.5.1-linux-s390x.tar.xz +2b07f09c218d473a26442bff5a90151f53f7b7c0a23bad244eda2c26303a2ba7 node-v26.5.1-linux-x64.tar.gz +cc7b3484ade63bd203a9d304f21ec37a3b622b988d7bdecf1dc4d68fc44a91b7 node-v26.5.1-linux-x64.tar.xz +a6e6cfdb0af6d7d68b50a6f663b8ff321923089309076ea7943a19dbe5eb662a node-v26.5.1-win-arm64.7z +467f425228a2fdcc83a330f5f38b124b5b43b42f5033d7848b4e47c9becc36f9 node-v26.5.1-win-arm64.zip +0c8a1a3604e57400432089cf7e179eac4f25b26445a156aaa98cca5619e50f5c node-v26.5.1-win-x64.7z +c432c996b95cbf7568f13a0fbb37526de84a27e3a5c520c3be15f05a9a168212 node-v26.5.1-win-x64.zip +826a4551bb9d3c00c61c17a2521a1e901ac7304e3090a3c2d07c1e0fe2b4d60d node-v26.5.1-x64.msi +ae175856e12aadc081a539af37a70a71d3233b2e710fa00266137e23e24faca2 node-v26.5.1.pkg +1143281232fc4640188aaa20afb0f9c4f06031f554cd3f1e5ac86e8a0387511a node-v26.5.1.tar.gz +df7770a9a99346f8b73ba6d31ad89bd6f868b51c7387c3627dcb44ca065f4948 node-v26.5.1.tar.xz +c6ca33154ee426f46e02aa9f5676d69b768808b564aa22652fe18bb08c188fe5 win-arm64/node.exe c01ce0d5e4e956f0e5e73cdba925d15a6d6f86883aa49f8f0b0de87aa93508ce win-arm64/node.lib -c754877c17bc575185b9968ac3bb5844a9dfe632d1a926e7b1eb0c752ef65d10 win-arm64/node_pdb.7z -4ba7764244218f743e312cfef7ffb090e9d10266121c4b33c10bfebd2b8c1f87 win-arm64/node_pdb.zip -3193d7f751b8a07bd4acc70e81946ae9c6efdee83e07ad1c8d0e4089df7c5cef win-x64/node.exe +83961c8a59f1771a2e0ffcf89487b3fa0a7ca18a69f1061683c27671b36665e5 win-arm64/node_pdb.7z +7b40fa280b35d3aef700852220075f262a25c4cdd9a6f90fb8a3a4b1bed9cf8b win-arm64/node_pdb.zip +b48b0224081224cda1f49374e2fc63d143041ade51754f0cc6608fe8510ba29e win-x64/node.exe 56f06350037085fce04930befd98327afc86ee46f52af6f6f8a68a03630e8380 win-x64/node.lib -c9f08aab3593db3469bb7e0d393983edc0af9012e6aaa4f76287119ece3ceaef win-x64/node_pdb.7z -ca8034bca696d38ab4bdf69baabd5d31ae30a0b659f0a1292229dfdea861fe93 win-x64/node_pdb.zip +cbd18315c40cb831d1a398c0df64a43876999e77eb56b52589b64ee8a5bf93d0 win-x64/node_pdb.7z +fb3b232e033a25d0aae20c0413589569688807471e98a1620ef7f7ec959fbf83 win-x64/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.cQKrAf/_old and /var/tmp/diff_new_pack.cQKrAf/_new differ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.cQKrAf/_old 2026-08-02 23:14:35.768628761 +0200 +++ /var/tmp/diff_new_pack.cQKrAf/_new 2026-08-02 23:14:35.772628898 +0200 @@ -1,6 +1,6 @@ -mtime: 1782830699 -commit: 045f4d2f438b9a5bdf2f30a7073d75da769a20fcb15d4f5db332158378643a78 +mtime: 1785512532 +commit: 10a80b222b7bb32dde8050f3c4136021153459322528c63d4f3a05030fead613 url: https://src.opensuse.org/nodejs/nodejs26 -revision: 045f4d2f438b9a5bdf2f30a7073d75da769a20fcb15d4f5db332158378643a78 +revision: 10a80b222b7bb32dde8050f3c4136021153459322528c63d4f3a05030fead613 projectscmsync: https://src.opensuse.org/nodejs/_ObsPrj.git ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-31 17:42:12.000000000 +0200 @@ -0,0 +1,8 @@ +*.obscpio +*.osc +_build.* +.pbuild +.assets +*.obsinfo +_service:* +nodejs26-*-build/ ++++++ maintainer_scripts.obscpio ++++++ ++++++ node-v26.4.0.tar.xz -> node-v26.5.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs26/node-v26.4.0.tar.xz /work/SRC/openSUSE:Factory/.nodejs26.new.16738/node-v26.5.1.tar.xz differ: char 26, line 1 ++++++ node_modules.obscpio ++++++ /work/SRC/openSUSE:Factory/nodejs26/node_modules.obscpio /work/SRC/openSUSE:Factory/.nodejs26.new.16738/node_modules.obscpio differ: char 49, line 1 ++++++ nodejs-add-missing-include.patch ++++++ >From 305813b6039fe2ef5d5f4b246355078c2bb620da Mon Sep 17 00:00:00 2001 From: tjuhasz <[email protected]> Date: Wed, 13 May 2026 15:26:14 +0200 Subject: [PATCH] deps: fix V8 build failures by adding climits include Add explicit #include <climits> to memcopy.h to fix build failures caused by recent GCC/Clang versions removing transient inclusions of the climits header. Fixes compilation errors when using newer toolchain versions. --- deps/v8/src/base/memcopy.h | 1 + 1 file changed, 1 insertion(+) diff --git a/deps/v8/src/base/memcopy.h b/deps/v8/src/base/memcopy.h index b1d8a36b4cfe..82e9a75c24a8 100644 --- a/deps/v8/src/base/memcopy.h +++ b/deps/v8/src/base/memcopy.h @@ -5,6 +5,7 @@ #ifndef V8_BASE_MEMCOPY_H_ #define V8_BASE_MEMCOPY_H_ +#include <climits> #include <stdlib.h> #include <atomic>
