Update Node.js to v13.5.0

Created by: renovate[bot]

This PR contains the following updates:

Package	Update	New value	References	Sourcegraph
node	minor	13.5.0	source

---

Release Notes

nodejs/node

v13.5.0

Compare Source

Notable Changes

• cli:
  • add --trace-exit cli option (legendecas) #​30516
• http,https:
  • increase server headers timeout (Tim Costa) #​30071
• readline:
  • update ansi-regex (Ruben Bridgewater) #​30907
  • promote _getCursorPos to public api (Jeremy Albright) #​30687
• repl:
  • add completion preview (Ruben Bridgewater) #​30907
• util:
  • add Set and map size to inspect output (Ruben Bridgewater) #​30225
• wasi:
  • require CLI flag to require() wasi module (Colin Ihrig) #​30963

Commits

• [e10917f8ba] - async_hooks: ensure proper handling in runInAsyncScope (Anatoli Papirovski) #​30965
• [b6ddbc1291] - benchmark: use let/const instead of var in buffers (dnlup) #​30945
• [00cbf5b1b6] - build: auto-load ICU data from --with-icu-default-data-dir (Stephen Gallagher) #​30825
• [60225c171e] - build: fix missing x64 arch suffix in binary tar name (legendecas) #​30877
• [10a77d3cd1] - build,win: fix goto exit in vcbuild (João Reis) #​30931
• [f371562e30] - build,win: support building MSI with VS2019 (João Reis) #​30895
• [d8ce9a0e23] - (SEMVER-MINOR) cli: add --trace-exit cli option (legendecas) #​30516
• [30e2d28ac5] - cluster: remove unnecessary bind (Anatoli Papirovski) #​28131
• [4f3eca5d42] - console: unregister temporary error listener (Robert Nagy) #​30852
• [a221017ee8] - crypto: cast oaepLabel to unsigned char* (Shelley Vohr) #​30917
• [3abcb69c3e] - doc: add note about fs.close() about undefined behavior (Robert Nagy) #​30966
• [13b5ace4db] - doc: explain napi_run_script (Tobias Nießen) #​30918
• [559284b20a] - doc: add "Be direct." to the style guide (Rich Trott) #​30935
• [eb6443dc11] - doc: clarify expectations for PR commit messages (Derek Lewis) #​30922
• [df5ae1a8ef] - doc: fix description of N-API exception handlers (Tobias Nießen) #​30893
• [b53e2a84ec] - doc: improve doc writable streams: 'finish' event (dev-313) #​30889
• [ad5b71525d] - fs: remove unnecessary bind (Anatoli Papirovski) #​28131
• [3bc9b09ce6] - http: use for...of in http library code (Trivikram Kamat) #​30958
• [7a756cb539] - http: remove unnecessary bind (Anatoli Papirovski) #​28131
• [172228047a] - http,https: increase server headers timeout (Tim Costa) #​30071
• [52aab47766] - http2: remove unnecessary bind from setImmediate (Anatoli Papirovski) #​28131
• [88731adff6] - lib: replace Symbol.species by SymbolSpecies (Sebastien Ahkrin) #​30950
• [f51b5bd3dc] - lib: replace Symbol.hasInstance by SymbolHasInstance (Sebastien Ahkrin) #​30948
• [92475e998d] - lib: replace Symbol.asyncIterator by SymbolAsyncIterator (Sebastien Ahkrin) #​30947
• [19f05cab39] - lib: enforce use of Promise from primordials (Michaël Zasso) #​30936
• [698e0a2095] - lib: add TypedArray constructors to primordials (Sebastien Ahkrin) #​30740
• [cbe29ce4cf] - lib: change var to let/const (rene.herrmann) #​30910
• [2430dd8ecb] - lib: use strict equality comparison (Donggeon Lim) #​30898
• [30d32492a0] - lib: refactor NativeModule (Joyee Cheung) #​30856
• [a326309a74] - lib: replace Symbol.toPrimitive to SymbolToPrimitive primordials (Sebastien Ahkrin) #​30905
• [0d2172fb5d] - lib: update Symbol.toStringTag by SymbolToStringTag primordial (Sebastien Ahkrin) #​30908
• [4e67d38f42] - perf_hooks: remove unnecessary bind (Anatoli Papirovski) #​28131
• [510edead69] - process: refs --unhandled-rejections documentation in warning message (Antoine du HAMEL) #​30564
• [954793f363] - process: fix promise catching (Rongjian Zhang) #​30957
• [5b49ded22a] - (SEMVER-MINOR) readline: promote _getCursorPos to public api (Jeremy Albright) #​30687
• [424c37baba] - (SEMVER-MINOR) readline: update ansi-regex (Ruben Bridgewater) #​30907
• [02f3fe4b60] - (SEMVER-MINOR) repl: fix preview bug in case of long lines (Ruben Bridgewater) #​30907
• [6a3e79f953] - (SEMVER-MINOR) repl: add completion preview (Ruben Bridgewater) #​30907
• [1a8f828c17] - (SEMVER-MINOR) repl: improve completion (Ruben Bridgewater) #​30907
• [8b92223ed1] - (SEMVER-MINOR) repl: simplify code (Ruben Bridgewater) #​30907
• [f7eeb8cc0b] - (SEMVER-MINOR) repl: simplify repl autocompletion (Ruben Bridgewater) #​30907
• [d549daef18] - (SEMVER-MINOR) repl: remove dead code (Ruben Bridgewater) #​30907
• [e11acc5a45] - repl: fix autocomplete when useGlobal is false (Michaël Zasso) #​30883
• [3906e145ca] - (SEMVER-MINOR) repl,readline: refactor for simplicity (Ruben Bridgewater) #​30907
• [f6f298e3cf] - (SEMVER-MINOR) repl,readline: refactor common code (Ruben Bridgewater) #​30907
• [d456aa0a57] - src: unregister Isolate with platform before disposing (Anna Henningsen) #​30909
• [c43461ac56] - src: make debug_options getters public (Shelley Vohr) #​30494
• [5ca29d860b] - stream: use for...of (Trivikram Kamat) #​30960
• [0c18c49f0e] - stream: do not chunk strings and Buffer in Readable.from (Matteo Collina) #​30912
• [663a6b4938] - stream: make all streams error in a pipeline (Matteo Collina) #​30869
• [5e268b8dbe] - test: simplify test-wasi-start-validation.js (Colin Ihrig) #​30972
• [c2d95529f6] - test: improve WASI start() coverage (Colin Ihrig) #​30972
• [72b4aee745] - test: improve test coverage in child_process (Juan José Arboleda) #​26282
• [f30b771fd2] - (SEMVER-MINOR) test: add multiple repl preview tests (Ruben Bridgewater) #​30907
• [69aaab0e2c] - test: improve dns lookup coverage (Kirill Ponomarev) #​30777
• [b6b917dda0] - test: avoid leftover report file (Gerhard Stoebich) #​30925
• [51d1a919bf] - test: add missing test flags (Colin Ihrig) #​30971
• [60485dcc8e] - test: add test for validation for wasi.start() argument (Rich Trott) #​30919
• [7a25c2c073] - test: improve assertion error message in test-debug-usage (Rich Trott) #​30913
• [b7a0574d6f] - test: make test-os-checked-function work without test harness (Rich Trott) #​30914
• [7e6510bcfb] - test: delay loading 'os' in test/common module (Rich Trott) #​30914
• [956dec8b6b] - tls: for...of in _tls_common.js (Trivikram Kamat) #​30961
• [b20ddde2f6] - tools: enable Markdown linter's usage information (Derek Lewis) #​30216
• [f62a7679a3] - util: add Set and map size to inspect output (Ruben Bridgewater) #​30225
• [f830a7dd73] - util: refactor inspect code for constistency (Ruben Bridgewater) #​30225
• [8dec909aa7] - (SEMVER-MINOR) util: inspect (user defined) prototype properties (Ruben Bridgewater) #​30768
• [453be95edc] - (SEMVER-MINOR) util: fix built-in detection (Ruben Bridgewater) #​30768
• [2b0e2c280f] - v8: use of TypedArray constructors from primordials (Sebastien Ahkrin) #​30740
• [54d51dbe4c] - wasi: require CLI flag to require() wasi module (Colin Ihrig) #​30963

v13.4.0

Compare Source

This is a security release.

For more details about the vulnerability please consult the npm blog:

https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli

Notable Changes

• deps:
  • update npm to 6.13.4 #​30904
  • update uvwasi (Anna Henningsen) #​30745
  • upgrade to libuv 1.34.0 (Colin Ihrig) #​30783
• doc:
  • docs deprecate http finished (Robert Nagy) #​28679
• events:
  • add captureRejection option (Matteo Collina) #​27867
• http:
  • add captureRejection support (Matteo Collina) #​27867
  • llhttp opt-in insecure HTTP header parsing (Sam Roberts) #​30567
• http2:
  • implement capture rection for 'request' and 'stream' events (Matteo Collina) #​27867
• net:
  • implement capture rejections for 'connection' event (Matteo Collina) #​27867
• repl:
  • support previews by eager evaluating input (Ruben Bridgewater) #​30811
• stream:
  • add support for captureRejection option (Matteo Collina) #​27867
• tls:
  • implement capture rejections for 'secureConnection' event (Matteo Collina) #​27867
  • expose IETF name for current cipher suite (Sam Roberts) #​30637
• worker:
  • add argv constructor option (legendecas) #​30559

Commits

• [1c4b2f15d9] - assert,util: stricter type comparison using deep equal comparisons (Ruben Bridgewater) #​30764
• [78eaf50693] - benchmark: improve --filter pattern matching (Matheus Marchini) #​29987
• [ad4d52d1b5] - benchmark: add more util inspect and format benchmarks (Ruben Bridgewater) #​30767
• [d90815d08e] - build: on Android, use android log library to print stack traces (Giovanni Campagna) #​29388
• [d1c4fccde2] - build: fix library version and compile flags on Android (Giovanni Campagna) #​29388
• [dfd3a4d6c1] - (SEMVER-MINOR) build: add flag to enable pointer compression (Matteo Collina) #​30463
• [3d05d4beea] - build: ease DragonFlyBSD build (David Carlier) #​30201
• [43e947a155] - build: remove (almost) unused macros/constants (Benjamin Coe) #​30755
• [0379fb65c1] - deps: update npm to 6.13.4 (Isaac Z. Schlueter) #​30904
• [13fe9f7cc8] - deps: update uvwasi (Anna Henningsen) #​30745
• [ca47f72868] - (SEMVER-MINOR) deps: upgrade to libuv 1.34.0 (Colin Ihrig) #​30783
• [458860691c] - deps: fix OPENSSLDIR on Windows (Shigeki Ohtsu) #​29456
• [b3ae532392] - doc: clarify build support text (Rich Trott) #​30899
• [8bf0da6c93] - doc: edit colorMode information (Rich Trott) #​30887
• [df9df1883e] - doc: fix argument type of setAAD (Tobias Nießen) #​30863
• [9d1c793ceb] - doc: clarify Tier 2 implications in BUILDING.md (Rich Trott) #​30866
• [1cce00073e] - doc: add code example to inspector.url() method (Juan José Arboleda) #​29496
• [93ca4f4098] - doc: deprecate http finished (Robert Nagy) #​28679
• [0022d7544a] - doc: improve doc Http2Stream: FrameError, Timeout and Trailers (dev-313) #​30373
• [2123d53c28] - doc: include line/cursor in readline documentation (Jeremy Albright) #​30667
• [1baa6ab075] - doc: improve napi formatting (Ruben Bridgewater) #​30772
• [1d5c4e21de] - doc: add documentation about node_mksnapshot and mkcodecache (Joyee Cheung) #​30773
• [67823e8fc4] - doc: remove imprecise and redundant testing text (Rich Trott) #​30763
• [7cb84fdbe5] - doc: remove usage of "Node" in favor of "Node.js" (Rich Trott) #​30758
• [510eb3a6eb] - doc: revise addons introduction for brevity and clarity (Rich Trott) #​30756
• [543bf9d8ea] - doc: fix up N-API doc (NickNaso) #​30656
• [2c0f1edfd5] - doc: adds assert doc for strict mode with pointer to strict equality (Shobhit Chittora) #​30486
• [9428304d4a] - doc: Buffer.toString(): add note about invalid data (Jan-Philip Gehrcke) #​30706
• [8369562757] - doc: clarify text about using 'session' event for compatibility (Rich Trott) #​30746
• [145f881ff9] - doc: update status of Python 3 support (Michael Dawson) #​30722
• [bbbba76f2c] - doc,benchmark: move benchmark guide to benchmark directory (Rich Trott) #​30781
• [eb4f443a5a] - esm: make specifier flag clearly experimental (Myles Borins) #​30678
• [220a6001c6] - (SEMVER-MINOR) events: add captureRejection option (Matteo Collina) #​27867
• [6c07a72833] - fs: synchronize close with other I/O for streams (Anna Henningsen) #​30837
• [18758ef183] - fs: retry unlink operations in rimraf (Colin Ihrig) #​30569
• [5e98de1751] - fs: only operate on buffers in rimraf (Colin Ihrig) #​30569
• [7e1dee3347] - fs: reduce unnecessary sync rimraf retries (Colin Ihrig) #​30785
• [5523950b47] - fs: add synchronous retries to rimraf (Colin Ihrig) #​30785
• [60b1e1ad61] - fs: fix existsSync for invalid symlink at win32 (Rongjian Zhang) #​30556
• [daca0780b1] - (SEMVER-MINOR) http: llhttp opt-in insecure HTTP header parsing (Sam Roberts) #​30567
• [334d4f6256] - (SEMVER-MINOR) http: add captureRejection support to OutgoingMessage (Matteo Collina) #​27867
• [33a6bf3a83] - (SEMVER-MINOR) http: implement capture rejections for 'request' event (Matteo Collina) #​27867
• [822fb00dbe] - http2: forward debug message in debugStreamObj (Denys Otrishko) #​30840
• [d17ea8f584] - http2: track nghttp2-allocated memory in heap snapshot (Anna Henningsen) #​30745
• [8a9f57d0d5] - http2: use shared memory tracking implementation (Anna Henningsen) #​30745
• [71bb026e0c] - http2: streamline OnStreamRead streamline memory accounting (Denys Otrishko) #​30351
• [3840abed11] - http2: small clean up in OnStreamRead (Denys Otrishko) #​30351
• [c3ac4c85a5] - (SEMVER-MINOR) http2: implement capture rection for 'request' and 'stream' events (Matteo Collina) #​27867
• [d3f0dd2148] - inspector: do not access queueMicrotask from global (Michaël Zasso) #​30732
• [71c6d44efa] - lib: enforce use of BigInt from primordials (Michaël Zasso) #​30882
• [64ab5c9c84] - lib: replace Symbol.iterator by SymbolIterator (Sebastien Ahkrin) #​30859
• [39898a9db4] - lib: replace every Symbol.for by SymbolFor primordials (Sebastien Ahkrin) #​30857
• [0a34fcb086] - lib: replace var with let/const (jens-cappelle) #​30384
• [af014170a7] - lib: replace Symbol global by the primordials Symbol (Sebastien Ahkrin) #​30737
• [2c439bb8ad] - lib: add parent to ERR_UNKNOWN_FILE_EXTENSION (qualitymanifest) #​30728
• [d9d64754f9] - lib: add warning on dynamic import es modules (Juan José Arboleda) #​30720
• [325128e469] - lib: delay access to CLI option to pre-execution (Joyee Cheung) #​30778
• [94f237e5ac] - lib,test: improves ERR_REQUIRE_ESM message (Juan José Arboleda) #​30694
• [e61f4ead93] - module: conditional exports import condition (Guy Bedford) #​30799
• [8e16093b64] - module: fix require in node repl (Yongsheng Zhang) #​30835
• [d4aa656d57] - module: fix dynamic import from eval (Corey Farrell) #​30624
• [a7ec78f34e] - module: fixup lint and test regressions (Guy Bedford) #​30802
• [bd2f1270f7] - module: ignore resolution failures for inspect-brk (Maël Nison) #​30336
• [851f3135ab] - module: add warnings for experimental flags (Rongjian Zhang) #​30617
• [123327d4c1] - net: remove duplicate _undestroy (Robert Nagy) #​30833
• [4eecee089d] - (SEMVER-MINOR) net: implement capture rejections for 'connection' event (Matteo Collina) #​27867
• [2f1ae4f2bf] - readline: eagerly load string_decoder (Ruben Bridgewater) #​30807
• [e551c169b8] - (SEMVER-MINOR) repl: support previews by eager evaluating input (Ruben Bridgewater) #​30811
• [c440f3fa3d] - repl: use better uncaught exceptions indicator (Ruben Bridgewater) #​29676
• [de368200f3] - src: accept single argument in getProxyDetails (Ruben Bridgewater) #​30858
• [60886036c9] - src: fix the false isatty() issue on IBMi (Xu Meng) #​30829
• [7ed867dddb] - src: improve checked uv loop close output (Anna Henningsen) #​30814
• [041daaa273] - src: port memory-tracking allocator from QUIC repo (Anna Henningsen) #​30745
• [ccf0917aef] - src: don't use deprecated OpenSSL APIs (Rosen Penev) #​30812
• [8ad53ab2b7] - src: free preopen memory in WASI::New() (Colin Ihrig) #​30809
• [e6e379ea41] - src: use checked allocations in WASI::New() (Colin Ihrig) #​30809
• [838ae10a9b] - src: delete redundant method in node_dir.h (gengjiawen) #​30747
• [66db8746c7] - src: remove redundant cast in node_dir.cc (gengjiawen) #​30747
• [cb69ff47f6] - src: improve node_crypto.cc memory allocation (Priyanka Kore) #​30751
• [b51b26ffef] - src: fix node_dir.cc memory allocation (Priyanka Kore) #​30750
• [89bc571490] - (SEMVER-MINOR) stream: add support for captureRejection option (Matteo Collina) #​27867
• [1b534d571a] - test: work around ENOTEMPTY when cleaning tmp dir (Ben Noordhuis) #​30849
• [eb6e32c2fc] - test: disable colorMode in test-console-group (Rich Trott) #​30886
• [5f42b1fc6b] - test: assert: fix deepStrictEqual comparing a real array and fake array (Jordan Harband) #​30743
• [ce21fc7154] - test: wait for stream close before writing to file (Anna Henningsen) #​30836
• [cc4a6ed645] - test: use fs rimraf to refresh tmpdir (Colin Ihrig) #​30569
• [5ae3a858f7] - test: refactor test-accessor-properties (himself65) #​29943
• [97e0efeedf] - test: scale keepalive timeouts for slow machines (Ben Noordhuis) #​30834
• [305e45a041] - test: mark tests as flaky (João Reis) #​30848
• [4dc9d8db13] - test: mark addons/openssl-bindings/test flaky on arm (Richard Lau) #​30838
• [25e3696a07] - test: improve WASI options validation (Rich Trott) #​30800
• [a574cb0ab9] - test: remove common.busyLoop() (Colin Ihrig) #​30787
• [3557659afb] - test: run more assert tests (Ruben Bridgewater) #​30764
• [5067463f3c] - test: use callback arguments in getconnections test (Rich Trott) #​30775
• [30756e36e7] - test: improve wasi test coverage (Rich Trott) #​30770
• [fb31ab52c0] - test: simplify tmpdir import in wasi tests (Rich Trott) #​30770
• [55a270b583] - test: remove duplicate entries from root.status (Richard Lau) #​30769
• [54a266c878] - test: increase debugging information in subprocess test (Rich Trott) #​30761
• [a0fa327365] - test: use block-scoping in test-net-server-address (Rich Trott) #​30754
• [9bd5c72104] - test: move test-child-process-fork-getconnections to parallel (Rich Trott) #​30749
• [50ab1fa013] - test: change common.PORT to arbitrary port (Rich Trott) #​30749
• [255cd7e572] - (SEMVER-MINOR) tls: expose IETF name for current cipher suite (Sam Roberts) #​30637
• [5ad3efbfb3] - (SEMVER-MINOR) tls: implement capture rejections for 'secureConnection' event (Matteo Collina) #​27867
• [5203ffb2f4] - tools: update link to google styleguide for cpplint (Daniel Bevenius) #​30876
• [1ed1a645f2] - tools: use CC instead of CXX when pointing to gcc (Milad Farazmand) #​30817
• [2b687af852] - tools: update remark-preset-lint-node to 1.11.0 (Rich Trott) #​30789
• [0cb7720dd8] - tools: update icu to 65.1 (Albert Wang) #​30232
• [7b9400ce63] - tools: update ESLint to 6.7.2 (Rich Trott) #​30762
• [5ab3ca4f96] - url: declare iterator inside loop (Trivikram Kamat) #​30509
• [dc69cbeb05] - util: add internal sleep() function (Colin Ihrig) #​30787
• [3898b2387b] - util: never trigger any proxy traps using format() (Ruben Bridgewater) #​30767
• [eeaeb51dcc] - util: improve performance inspecting proxies (Ruben Bridgewater) #​30767
• [608d720834] - (SEMVER-MINOR) util: add more predefined color codes to inspect.colors (Ruben Bridgewater) #​30659
• [77ffd5482d] - (SEMVER-MINOR) util: improve inspect's customInspect performance (Ruben Bridgewater) #​30659
• [14269d15cf] - wasi: use memory-tracking allocator (Anna Henningsen) #​30745
• [71d43a5569] - (SEMVER-MINOR) worker: add argv constructor option (legendecas) #​30559

---

Renovate configuration

📅 Schedule: "on the 1st through 7th day of the month" in timezone America/Los_Angeles.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or if you modify the PR title to begin with "rebase!".

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Newsflash: Renovate has joined WhiteSource, and is now free for all use. Learn more or view updated terms and privacy policies.