Skip to content

Update Node.js to v13.9.0

Warren Gifford requested to merge renovate/node-13.x into master

Created by: renovate[bot]

This PR contains the following updates:

Package Update New value References Sourcegraph
node minor 13.9.0 source code search for "node"

Release Notes

nodejs/node

v13.9.0

Compare Source

Notable changes
  • async_hooks
    • add executionAsyncResource (Matteo Collina) #​30959
  • crypto
    • add crypto.diffieHellman (Tobias Nießen) #​31178
    • add DH support to generateKeyPair (Tobias Nießen) #​31178
    • simplify DH groups (Tobias Nießen) #​31178
    • add key type 'dh' (Tobias Nießen) #​31178
  • test
    • skip keygen tests on arm systems (Tobias Nießen) #​31178
  • perf_hooks
    • add property flags to GCPerformanceEntry (Kirill Fomichev) #​29547
  • process
    • report ArrayBuffer memory in memoryUsage() (Anna Henningsen) #​31550
  • readline
    • make tab size configurable (Ruben Bridgewater) #​31318
  • report
    • add support for Workers (Anna Henningsen) #​31386
  • worker
    • add ability to take heap snapshot from parent thread (Anna Henningsen) #​31569
  • added new collaborators
    • add ronag to collaborators (Robert Nagy) #​31498
Commits

v13.8.0

Compare Source

Notable Changes

This is a security release.

Vulnerabilities fixed:

  • CVE-2019-15606: HTTP header values do not have trailing OWS trimmed.
  • CVE-2019-15605: HTTP request smuggling using malformed Transfer-Encoding header.
  • CVE-2019-15604: Remotely trigger an assertion on a TLS server with a malformed certificate string.

Also, HTTP parsing is more strict to be more secure. Since this may cause problems in interoperability with some non-conformant HTTP implementations, it is possible to disable the strict checks with the --insecure-http-parser command line flag, or the insecureHTTPParser http option. Using the insecure HTTP parser should be avoided.

Commits

Renovate configuration

📅 Schedule: "on the 1st through 7th day of the month" in timezone America/Los_Angeles.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

Merge request reports

Loading