Update Node.js to v14.13.1

Created by: renovate[bot]

This PR contains the following updates:

Package	Update	New value	References	Sourcegraph
node	minor	14.13.1	source

---

Release Notes

nodejs/node

v14.13.1

Compare Source

v14.13.0

Compare Source

Notable Changes

• [19b95a7fa9] - (SEMVER-MINOR) deps: upgrade to libuv 1.40.0 (Colin Ihrig) #​35333
• [f551f52f83] - (SEMVER-MINOR) module: named exports for CJS via static analysis (Guy Bedford) #​35249
• [505731871e] - (SEMVER-MINOR) module: exports pattern support (Guy Bedford) #​34718
• [0d8eaa3942] - (SEMVER-MINOR) src: allow N-API addon in AddLinkedBinding() (Anna Henningsen) #​35301

Commits

• [19b95a7fa9] - (SEMVER-MINOR) deps: upgrade to libuv 1.40.0 (Colin Ihrig) #​35333
• [353a567235] - deps: upgrade to c-ares v1.16.1 (Shelley Vohr) #​35324
• [2e10616d48] - doc: remove http2 non-link anchor tags (Rich Trott) #​35161
• [02db136c49] - doc: alphabetize error list (Rich Trott) #​35219
• [46a4154cab] - doc: packages docs feedback (Guy Bedford) #​35370
• [70ad69ba46] - doc: outline when origin is set to unhandledRejection (Matthieu Larcher) #​35294
• [010173a4b7] - doc: edit n-api.md for minor improvements (Rich Trott) #​35361
• [86ac7497e0] - doc: add history entry for breaking destroy() change (Gil Pedersen) #​35326
• [857e321baf] - doc: set encoding to hex before piping hash (Victor Antonio Barzana Crespo) #​35338
• [87dfed012c] - doc: add gpg key export directions to releases doc (Danielle Adams) #​35298
• [1758ac8237] - doc: added version 7 to N-API version matrix (NickNaso) #​35319
• [5da5d41b1c] - doc: refine require/import conditions constraints (Guy Bedford) #​35311
• [482ce6ce1d] - doc: improve N-API string-to-native doc (Gabriel Schulhof) #​35322
• [6dc6dadfc6] - doc: avoid referring to C array size (Tobias Nießen) #​35300
• [0a847ca729] - doc: update napi_make_callback documentation (Gerhard Stoebich) #​35321
• [a8d3a7f742] - doc: put landing specifics in details tag (Rich Trott) #​35296
• [dd530364d0] - doc: fixup lutimes metadata (Anna Henningsen) #​35328
• [d7282c0ae3] - doc: edit subpath export patterns introduction (Rich Trott) #​35254
• [1d1ce1fc2c] - doc: document support for package.json fields (Antoine du HAMEL) #​34970
• [ef0d2ef5a2] - doc: move package config docs to separate page (Antoine du HAMEL) #​34748
• [b9d767c4d5] - doc: change type of child_process.signalCode to string (Linn Dahlgren) #​35223
• [b4514d464d] - doc: replace "this guide" link text with guide title (Rich Trott) #​35283
• [1893449724] - doc: revise dependency redirection text in policy.md (Rich Trott) #​35276
• [0c4540b050] - doc: fix heading space bug in assert.md (Thomas Hunter II) #​35310
• [ec6b78ae73] - doc: add socket.readyState (Clark Kozak) #​35262
• [2a4ae0926d] - doc: update crypto.createSecretKey accepted types (Filip Skokan) #​35246
• [c09f3dc2f3] - doc: put release script specifics in details (Myles Borins) #​35260
• [99a79e32a6] - fs: fix fs.promises.writeFile with typed arrays (Michaël Zasso) #​35376
• [ab7d0e92b1] - meta: update module pages in CODEOWNERS (Antoine du Hamel) #​34932
• [f551f52f83] - (SEMVER-MINOR) module: named exports for CJS via static analysis (Guy Bedford) #​35249
• [505731871e] - (SEMVER-MINOR) module: exports pattern support (Guy Bedford) #​34718
• [68ea7f5560] - module: fix crash on multiline named cjs imports (Christoph Tavan) #​35275
• [0f4ecaa741] - repl: standardize Control key indications (Rich Trott) #​35270
• [1e1cb94e69] - src: fix incorrect SIGSEGV handling in NODE_USE_V8_WASM_TRAP_HANDLER (Anatoly Korniltsev) #​35282
• [0d8eaa3942] - (SEMVER-MINOR) src: allow N-API addon in AddLinkedBinding() (Anna Henningsen) #​35301
• [f2635b317e] - test: replace annonymous functions with arrow (Pooja D.P) #​34921
• [d7c28c9243] - test,child_process: add tests for signalCode value (Rich Trott) #​35327
• [80eb22185e] - tools: update ESLint to 7.10.0 (Colin Ihrig) #​35366
• [7f355735df] - tools: ignore build folder when checking links (Ash Cripps) #​35315
• [c5d27e1e29] - tools,doc: enforce alphabetical order for md refs (Antoine du Hamel) #​35244
• [9d91842a9d] - tools,doc: upgrade dependencies (Antoine du Hamel) #​35244

v14.12.0

Compare Source

Notable changes

• deps:
  • update to uvwasi 0.0.11 (Colin Ihrig) #​35104
• n-api:
  • create N-API version 7 (Gabriel Schulhof) #​35199
  • add more property defaults (Gerhard Stoebich) #​35214

Commits

• [5229ffadcf] - buffer: adjust validation to account for buffer.kMaxLength (Anna Henningsen) #​35134
• [3d78686987] - build: increase API requests for stale action (Phillip Johnsen) #​35235
• [f2cc1c22c1] - build: filter issues & PRs to auto close by matching on stalled label (Phillip Johnsen) #​35159
• [f3c45a1cef] - Revert "build: require "allow edits" to be checked" (Rich Trott) #​35094
• [1bb0ed3c6a] - crypto: improve invalid arg type message for randomInt() (Rich Trott) #​35089
• [3573545315] - crypto: improve randomInt out-of-range error message (Rich Trott) #​35088
• [d4389b59b4] - deps: update to uvwasi 0.0.11 (Colin Ihrig) #​35104
• [836680a4ea] - doc: use present tense in error messages (Rich Trott) #​35164
• [b860a7f61c] - doc: standardize on _backward_ (Rich Trott) #​35243
• [d82dd0c773] - doc: revise stability section of values doc (Rich Trott) #​35242
• [2bc335dcf6] - doc: clarify napi_property_attributes text (Rich Trott) #​35253
• [b62d9b47be] - doc: remove excessive formatting in dgram.md (Rich Trott) #​35234
• [b9161f408f] - doc: sort repl references in ASCII order (Rich Trott) #​35230
• [d195d20dbc] - doc: relax prohibition on personal pronouns (Rich Trott) #​34353
• [6119e9511c] - doc: clarify use of NAPI_EXPERIMENTAL (Michael Dawson) #​35195
• [6d4ab36175] - doc: update attributes used by n-api samples (#​35220) (Gerhard Stoebich)
• [7610fe500e] - doc: add issue labels sections to release guide (Michaël Zasso) #​35224
• [2308be06b3] - doc: fix header level for error code (Rich Trott) #​35219
• [64ac5c68aa] - doc: fix small grammatical issues in timers.md (Turner Jabbour) #​35203
• [92a14d3c72] - doc: add technical values document (Michael Dawson) #​35145
• [dbfd3b261d] - doc: remove "end user" (Rich Trott) #​35200
• [c1c93a6cde] - doc: use command-line/command line consistently (Rich Trott) #​35198
• [70ec369b76] - doc: replace "you should do X" with "do X" (Rich Trott) #​35194
• [e5fffe2f8f] - doc: fix missing word in dgram.md (Tom Atkinson) #​35231
• [c1e16d15dd] - doc: fix deprecation documentation inconsistencies (Antoine du HAMEL) #​35082
• [910deff2de] - doc: fix broken link in crypto.md (Rich Trott) #​35181
• [066148d229] - doc: remove problematic auto-linking of curl man pages (Rich Trott) #​35174
• [aea3f77c8d] - doc: update eventLoopUtilization documentation (Anna Henningsen) #​35155
• [32d1731ae1] - doc: update process.release (schamberg97) #​35167
• [176e9e4054] - doc: fix broken links in modules.md (Rich Trott) #​35182
• [dc4c5696da] - doc: add missing copyFile change history (Shelley Vohr) #​35056
• [e8d479ed67] - doc: perform cleanup on security-release-process.md (Rich Trott) #​35154
• [99785e48ea] - doc: fix minor punctuation issue in path.md (Amila Welihinda) #​35127
• [ae85228e54] - doc: perform minor cleanup on cli.md (Rich Trott) #​35152
• [e4105140e7] - doc: improve table accessibility (Rich Trott) #​35146
• [7dbcd24541] - doc: fix left nav color contrast (Rich Trott) #​35141
• [331142ca25] - doc: update contact info for Ash Cripps (Ash Cripps) #​35139
• [df70861863] - doc: simplify circular dependencies text in modules.md (Rich Trott) #​35126
• [f4e714aaf5] - doc: update my email address (Michael Dawson) #​35121
• [46b9f4b376] - doc: add missing changes entry for breakEvalOnSigint REPL option (Anna Henningsen) #​35143
• [122edad98b] - doc: update security process (Michael Dawson) #​35107
• [aa93c1c22d] - doc: fix broken link in perf_hooks.md (Rich Trott) #​35113
• [5c8d2083c5] - doc: fix broken link in http2.md (Rich Trott) #​35112
• [f4e958fc0c] - doc: fix broken link in fs.md (Rich Trott) #​35111
• [79c6d92e49] - doc: fix broken links in deprecations.md (Rich Trott) #​35109
• [93e4d545d8] - doc: add note about path.basename on Windows (Tobias Nießen) #​35065
• [0a2610a7aa] - doc: avoid double-while sentence in perf_hooks.md (Rich Trott) #​35078
• [1cf9934e4e] - doc: make minor improvements to module.md (Rich Trott) #​35083
• [fb89be63be] - doc: use correct Error type for EventEmitter.defaultMaxListener (Rich Trott) #​35069
• [b75822dd93] - doc,test: specify and test CLI option precedence rules (Anna Henningsen) #​35106
• [4bde865145] - errors: simplify ERR_REQUIRE_ESM message generation (Rich Trott) #​35123
• [6e622d6337] - esm: better package.json parser errors (Guy Bedford) #​35117
• [beb75bd031] - fs: loosen validation to allow objects with an own toString function (Jordan Harband) #​34993
• [8ea28536d0] - http: only set keep-alive when not exists (atian25@​qq.com) #​35138
• [977b0ed865] - http: allow Content-Length header for 304 responses (Arnaud Lefebvre) #​34835
• [d8b57140b4] - https: set requestTimeout default to 0 (Robert Nagy) #​35264
• [12f2934224] - meta: add links to OpenJSF Slack (Mary Marchini) #​35128
• [f21a5c6200] - meta: update my collab entry (devsnek) #​35160
• [76e24f9aa9] - module: use isURLInstance instead of instanceof (Antoine du HAMEL) #​34951
• [314483cd09] - module: fix specifier resolution option value (himself65) #​35098
• [ca1181615e] - (SEMVER-MINOR) n-api: create N-API version 7 (Gabriel Schulhof) #​35199
• [7f3b2b2a1f] - (SEMVER-MINOR) n-api: add more property defaults (Gerhard Stoebich) #​35214
• [4f4faa8e3c] - readline: fix key name for function keys with modifiers (DrunkenPoney) #​35268
• [e29e2daf4c] - test: improve assertions in pummel/test-timers (Rich Trott) #​35216
• [8357b56984] - test: add wasi readdir() test (Colin Ihrig) #​35202
• [49da459ce6] - test: improve pummel/test-timers.js (Rich Trott) #​35175
• [379c5cefd7] - test: revise test-policy-integrity (Rich Trott) #​35101
• [6627c1f8e4] - test: remove setMaxListeners in test-crypto-random (Tobias Nießen) #​35079
• [bc38485fb1] - test: fix comment about DNS lookup test (Tobias Nießen) #​35080
• [9faaa659b2] - test: separate the test fixtures between ICU and URL (Leko) #​35077
• [25f93f3ec3] - test: add more valid results to test-trace-atomics-wait (Anna Henningsen) #​35066
• [0a97f44b50] - tools: update ESLint to 7.9.0 (Colin Ihrig) #​35170

v14.11.0

Compare Source

Notable Changes

This is a security release.

Vulnerabilities fixed:

• CVE-2020-8251: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests (Critical).
• CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion (High).

Commits

• [dd828376a0] - deps: update llhttp to 2.1.2 (Fedor Indutny) nodejs-private/node-private#​215
• [753f3b247a] - http: add requestTimeout (Matteo Collina, Paolo Insogna, Robert Nagy) nodejs-private/node-private#​208

v14.10.1

Compare Source

Notable Changes

Node.js 14.10.0 included a streams regression with async generators and a docs rendering regression that are being fixed in this release.

Commits

• [3c92f93b44] - doc: restore color for visited links (Rich Trott) #​35108
• [0f94c6b4e4] - Revert "stream: simpler and faster Readable async iterator" (Richard Lau)

v14.10.0

Compare Source

Notable Changes

• [2ab33c58ae] - (SEMVER-MINOR) buffer: also alias BigUInt methods (Anna Henningsen) #​34960
• [44d89a9faa] - (SEMVER-MINOR) crypto: add randomInt function (Oli Lalonde) #​34600
• [8aac42caf2] - (SEMVER-MINOR) perf_hooks: add idleTime and event loop util (Trevor Norris) #​34938
• [4bb40078da] - (SEMVER-MINOR) stream: simpler and faster Readable async iterator (Robert Nagy) #​34035
• [ffae5f3809] - (SEMVER-MINOR) stream: save error in state (Robert Nagy) #​34103

Commits

• [1fdfaa578f] - bootstrap: correct --frozen-intrinsics override fix (Guy Bedford) #​35041
• [2ab33c58ae] - (SEMVER-MINOR) buffer: also alias BigUInt methods (Anna Henningsen) #​34960
• [1be6956ee0] - build: require "allow edits" to be checked (Jordan Harband) #​35002
• [7b7299012e] - build: comment about auto close when stalled via with github action (Phillip Johnsen) #​34555
• [d6c796b4ab] - build: close stalled issues and PRs with github action (Phillip Johnsen) #​34555
• [46766a10df] - build: use autorebase option for git node land (Denys Otrishko) #​34969
• [7afb67f491] - build: use latest node-core-utils from npm (Denys Otrishko) #​34969
• [d06e158253] - build: add support for build on arm64 (Evan Lucas) #​34238
• [755f9e4bc8] - build,deps: add gen-openssl target (Evan Lucas) #​34642
• [178a740caf] - crypto: simplify KeyObject constructor (Rich Trott) #​35064
• [a12d92c97b] - crypto: fix randomInt range check (Tobias Nießen) #​35052
• [6d0d5b2ec2] - crypto: align parameter names with documentation (Rich Trott) #​35054
• [44d89a9faa] - (SEMVER-MINOR) crypto: add randomInt function (Oli Lalonde) #​34600
• [791a85b880] - deps: V8: cherry-pick 6be2f6e (Benjamin Coe) #​35055
• [96ae05a770] - deps: V8: backport 3f071e3 (Milad Farazmand) #​35036
• [90f9348297] - deps: update brotli to v1.0.9 (Anna Henningsen) #​34937
• [f1fcd6646d] - deps: add openssl support for arm64 (Evan Lucas) #​34238
• [bbf7b925a2] - doc: use present tense in events.md (Rich Trott) #​35068
• [f6b2286e12] - doc: change stablility-2 color for accessibility (Rich Trott) #​35061
• [8044533e87] - doc: add link to safe integer definition (Tobias Nießen) #​35049
• [f03a4d78a2] - doc: format exponents better (Tobias Nießen) #​35050
• [1a9ca52716] - doc: add ESM examples in module API doc page (Antoine du HAMEL) #​34875
• [0ac7d5423f] - doc: add deprecated badge to legacy URL methods (Antoine du HAMEL) #​34931
• [a08e853edc] - doc: spruce up user journey to local docs browsing (Derek Lewis) #​34986
• [83a3e3b681] - doc: update syntax highlighting color for accessibility (Rich Trott) #​35063
• [5bd0e0803d] - doc: fix incorrect URL in cli.md (Rich Trott) #​35043
• [28e89f6766] - doc: remove style for empty links (Antoine du HAMEL) #​35034
• [cdc1198a62] - doc: fix certificate display in tls doc (Rich Trott) #​35032
• [72d03cd802] - doc: remove duplicate error code entry (Rich Trott) #​35031
• [680782ea64] - doc: use consistent header typography (Rich Trott) #​35030
• [1ae674c67a] - doc: fix malformed hashes in assert.md (Rich Trott) #​35028
• [c3a3cb69aa] - doc: fix a typo of microtaskMode (Shigma) #​34980
• [a846a9f116] - doc: change 'be will' to 'will be' (Victory Osikwemhe) #​34999
• [593236ad33] - doc: change color contrast for accessibility (Rich Trott) #​35047
• [8c207c67d1] - doc: refactor deprecation anchors (Antoine du HAMEL) #​34955
• [cc0aaf2384] - doc: error code fix in resolver spec (Guy Bedford) #​34998
• [a4201843e7] - doc: use period consistently in man page (Rich Trott) #​34939
• [f1217d6d8b] - doc: revise commit-queue.md (Rich Trott) #​35006
• [9aba579acb] - doc: change effected to affected (Turner Jabbour) #​34989
• [2598527112] - doc: drop the --production flag for installing windows-build-tools (DeeDeeG) #​34979
• [287ce7b810] - doc: fix broken link to response.writableFinished in deprecations doc (Rich Trott) #​34983
• [a0656ff863] - doc: fix broken link to response.finished in deprecations doc (Rich Trott) #​34982
• [f4524b8936] - doc: fix broken link to writableEnded in deprecations doc (Rich Trott) #​34984
• [514a538f64] - doc: fix typos in buffer doc (Robert Williams) #​34981
• [df76c89b78] - doc: recommend URL() over url.parse() in http2 doc (Rich Trott) #​34978
• [ca0302e4f1] - doc: arrange perf_hooks entries alphabetically (Rich Trott) #​34973
• [94c6e09367] - doc: replace require() with reference links in http2.md (Rich Trott) #​34956
• [2407a7a671] - doc: add a note about possible missing lines to readline.asyncIterator (Igor Mikhalev) #​34675
• [31098a4c0e] - doc: make minor improvements to query string sentence in http2.md (Rich Trott) #​34929
• [1589f0e6f4] - doc: make general copy-edit changes to policy.md (Rich Trott) #​34943
• [aee3b8510b] - doc: simplify "make use of" to "use" (Rich Trott) #​34861
• [0e09ff8ab1] - doc: make minor fixes to maintaining-openssl.md (Rich Trott) #​34926
• [b091681d25] - doc: fix CHANGELOG.md parsing issue (Juan José Arboleda) #​34923
• [fbd18be459] - doc: provide more guidance about process.version (Rich Trott) #​34909
• [4782ec7b3b] - doc: use consistent typography for node-addon-api (Rich Trott) #​34910
• [2fe95094fd] - doc: improve link-local text in dgram.md (Rich Trott) #​34868
• [657292e2dd] - doc: fix broken markdown/display in cli.html (Rich Trott) #​34892
• [4cf93bb3cf] - doc: use "previous"/"preceding" instead of "above" as modifier (Rich Trott) #​34877
• [29b048b06b] - doc: use links to MS guide in style guide (Rich Trott) #​34871
• [52be37cf39] - doc,tools: remove malfunctioning Linux manpage linker (Rich Trott) #​34985
• [fffba3a270] - errors: use ErrorPrototypeToString from primordials object (ExE Boss) #​34891
• [db8c66b8c2] - esm: shorten ERR_UNSUPPORTED_ESM_URL_SCHEME message (Rich Trott) #​34836
• [be71e717c5] - meta: enable wasi for CODEOWNERS (gengjiawen) #​34889
• [a43b7ff72e] - meta: remove non-existent quic from CODEOWNERS (Richard Lau) #​34947
• [3c32fe09e9] - n-api: re-implement async env cleanup hooks (Gabriel Schulhof) #​34819
• [fcb211f38a] - net: replace usage of internal stream state with public api (Denys Otrishko) #​34885
• [8aac42caf2] - (SEMVER-MINOR) perf_hooks: add idleTime and event loop util (Trevor Norris) #​34938
• [18b04ab4c8] - policy: implement scopes field (Bradley Farias) #​34552
• [1bf5d1a39b] - querystring: manage percent character at unescape (Daijiro Wachi) #​35013
• [f21d78d537] - src: shutdown libuv before exit() (Anna Henningsen) #​35021
• [789798bedf] - src: add get/set pair for env context awareness (Shelley Vohr) #​35024
• [73ef3f2f05] - src: disallow JS execution during exit() (Anna Henningsen) #​35020
• [f6a5999a9d] - src,doc: fix wording to refer to context, not environment (Turner Jabbour) #​34880
• [bcc1d431f8] - src,doc: fix grammar due to missing 'is' (Turner Jabbour) #​34897
• [044297ff10] - src,doc: rephrase for clarity (Turner Jabbour) #​34879
• [4bb40078da] - (SEMVER-MINOR) stream: simpler and faster Readable async iterator (Robert Nagy) #​34035
• [ffae5f3809] - (SEMVER-MINOR) stream: save error in state (Robert Nagy) #​34103
• [5f24cea11a] - stream: fix Readable stream state properties (Denys Otrishko) #​34886
• [f537c868b9] - stream: allow using .push()/.unshift() during once('data') (Anna Henningsen) #​34957
• [4d533858cf] - test: make .out checks embedder-friendly (Shelley Vohr) #​35040
• [a756b92c4a] - test: use mustCall() in test-http-timeout (Pooja D.P) #​34996
• [9011c87c1c] - test: change var to let (Pooja D.P) #​34902
• [b698d2ec81] - test: remove incorrect debug() in test-policy-integrity (Rich Trott) #​34961
• [ee6a583b9f] - test: fix typo in test/parallel/test-icu-punycode.js (Daijiro Wachi) #​34934
• [9057a1644d] - test: add readline test for escape sequence (Rich Trott) #​34952
• [75d16125e1] - test: make test-tls-reuse-host-from-socket pass without internet (Rich Trott) #​34953
• [971b7ac087] - test: simplify test-vm-memleak (Rich Trott) #​34881
• [577978a96c] - tools: fix docopen target (Antoine du HAMEL) #​35062
• [2b445bb3ee] - tools: fix doc build targets (Antoine du HAMEL) #​35060
• [3d41ff25b7] - tools: add banner to lint-md.js by rollup.config.js (KuthorX) #​34233
• [62cc3b8249] - tools: update ESLint to 7.8.1 (cjihrig) #​35004
• [c47d319ac6] - tools: update ESLint to 7.8.0 (cjihrig) #​35004
• [b6f3ae8ffc] - tools,doc: allow page titles to contain inline code (Antoine du HAMEL) #​35003
• [fb2111e300] - tools,doc: fix global table of content active element (Antoine du Hamel) #​34976
• [7ad629e4e4] - tools,doc: remove "toc" anchor name (Rich Trott) #​34893
• [94528f510e] - zlib: replace usage of internal stream state with public api (Denys Otrishko) #​34884

---

Renovate configuration

📅 Schedule: "on the 1st through 7th day of the month" in timezone America/Los_Angeles.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by WhiteSource Renovate. View repository job log here.