| Message ID | 20211022164011.78007-1-aduskett@gmail.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [1/1] package/nodejs: bump to version 14.18.1 | expand |
On Fri, 22 Oct 2021 09:40:11 -0700 Adam Duskett <aduskett@gmail.com> wrote: > Update license hash due to updating Acorn to v8.4.1 > > Signed-off-by: Adam Duskett <aduskett@gmail.com> > --- > package/nodejs/nodejs.hash | 4 ++-- > package/nodejs/nodejs.mk | 2 +- > 2 files changed, 3 insertions(+), 3 deletions(-) Applied to master, thanks. Thomas
>>>>> "Adam" == Adam Duskett <aduskett@gmail.com> writes: > Update license hash due to updating Acorn to v8.4.1 > Signed-off-by: Adam Duskett <aduskett@gmail.com> Please clearly mention when version bumps fix security issues, E.G.: https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14.18.1 I'll send a patch to bump 2021.02.x / 2021.08.x to 12.22.7, which contains the same fixes.
diff --git a/package/nodejs/nodejs.hash b/package/nodejs/nodejs.hash index 098049c021..3a4571e8e5 100644 --- a/package/nodejs/nodejs.hash +++ b/package/nodejs/nodejs.hash @@ -1,5 +1,5 @@ # From https://nodejs.org/dist/v14.17.6/SHASUMS256.txt -sha256 f458cd0b1cb1540611cb08709d833c0c59c74da79310ae1984cc8bad1404ad5e node-v14.17.6.tar.xz +sha256 3fa1d71adddfab2f5e3e41874b4eddbdf92b65cade4a43922fb1e437afcf89ed node-v14.18.1.tar.xz # Hash for license file -sha256 4c3016fb267bc473af18b305068f7f2d206ccd5ab98297ec593e1c32d73ad4fc LICENSE +sha256 b3a67885b5a6ac35e8bbe8190509e41b79b0d9a2e3fbd47186f2ac4727f63be5 LICENSE diff --git a/package/nodejs/nodejs.mk b/package/nodejs/nodejs.mk index 32f4947c0d..42ef1baa64 100644 --- a/package/nodejs/nodejs.mk +++ b/package/nodejs/nodejs.mk @@ -4,7 +4,7 @@ # ################################################################################ -NODEJS_VERSION = 14.17.6 +NODEJS_VERSION = 14.18.1 NODEJS_SOURCE = node-v$(NODEJS_VERSION).tar.xz NODEJS_SITE = http://nodejs.org/dist/v$(NODEJS_VERSION) NODEJS_DEPENDENCIES = host-qemu host-python3 host-nodejs c-ares \
Update license hash due to updating Acorn to v8.4.1 Signed-off-by: Adam Duskett <aduskett@gmail.com> --- package/nodejs/nodejs.hash | 4 ++-- package/nodejs/nodejs.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-)