#34013: Bump node version to v10.19
-------------------------------------------------+-------------------------
Reporter: gk | Owner: gk
Type: defect | Status:
| needs_review
Priority: High | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-mobile, tbb-rbm, | Actual Points:
TorBrowserTeam202005R, GeorgKoppen202005 |
Parent ID: #33184 | Points:
Reviewer: | Sponsor:
-------------------------------------------------+-------------------------
Comment (by gk):
Replying to [comment:5 acat]:
> Looks good to me. Would it be worth deviating from mozilla and use the
latest v10 version instead? (currently v10.20.1)
I am not convinced it would be. First, Mozilla might have a reason to
stick to this particular version (we have seen [comment:7:ticket:30321
weird bugs in node before] which we'd maybe need to work around
otherwise). Second, [https://trac.torproject.org/projects/tor/ticket/34108
I plan to have a script] to alert us once we deviate from Mozilla's
toolchain requirements so we can adapt. I believe the more we differ from
what Mozilla is using the harder it will be to keep track. Third, it's a
compile-time dependency, no runtime dependency. Thus, updating to the
latest and greatest version security-wise is not as urgent IMO.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/34013#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
