From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id cIPgK33DRGWGNQAA9RJhRA:P1 (envelope-from ) for ; Fri, 03 Nov 2023 10:55:09 +0100 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id cIPgK33DRGWGNQAA9RJhRA (envelope-from ) for ; Fri, 03 Nov 2023 10:55:09 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6A9455FBF9 for ; Fri, 3 Nov 2023 10:55:09 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1699005309; a=rsa-sha256; cv=none; b=rDHYCW6BhOz+8ivnp2Bq9oy8n9i60ltdVjK0fD1Ky9BANKPVkNgkTzzx1z9JwantAoMwO7 grRdEn+kD7QisUSO5xc+wVqpjTtqYEVwEE8naWJl5o5cFPJX7M6RCFObmfLkx9iy7FrDLW z0qdGwAzr+HYhALzE7OJgFzqqHyR2NyXlnKom5E/pZHfVdr+9dzertAzx235B20O0GlBB4 EKgb1pcGk01O2Qbq9Y5vnZqjI055fRYofxsAn1EkUnwtZFmyy6piy7PNuzkmdcJFRSDt87 TTdeLrkeVq7B2MSd03dcX34aOngOQ9v7BZHqbcQTrR09rfbaTnRK5+obtsmAgQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1699005309; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post; bh=htWV5bAXeHlssB+PP6SKw9nn8+eG5aVrb3kOAstSXHc=; b=m11OVUZmh6mpzXVSsUhZ7q/XmzQqCQzlU+RjSPGT1FnqViZPmhQgoUkXTROl5YpxdqnXqI 9DbmLhXFq8OWdzX02JsrlAEyoveHf6+c0gW4epmfLZn4jwVdsgsgsOd0sg6RLEaBzp9Wja pN6x1A//Rz0B5C/5J7H20kvlLvgCNB3B2E3lO6y8uGAIYa/lWGGaKRe+dQ+Pv08vCDpyeU CMBNPQ8LFBC0GWv52D8FLW3lrcwT0WQdmuXr3EaLJzbc1CmJ8NBCKIe4tKqgmDnjKMxA4j JUCFZzZ/wc9MVRqO7WfW1jiDpW3CX255E69Hp6F8eN5GIA2oWec1fsok/aQIVQ== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qyqsn-0007iL-Au; Fri, 03 Nov 2023 05:54:29 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qyqsl-0007hi-3M for guix-patches@gnu.org; Fri, 03 Nov 2023 05:54:27 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qyqsk-0004F9-RP for guix-patches@gnu.org; Fri, 03 Nov 2023 05:54:26 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qyqtK-0002AC-8c for guix-patches@gnu.org; Fri, 03 Nov 2023 05:55:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#66158] [PATCH v2] gnu: node-lts: Update to 18.18.2. Resent-From: Christopher Baines Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Fri, 03 Nov 2023 09:55:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 66158 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: jlicht@fsfe.org Cc: 66158@debbugs.gnu.org X-Debbugs-Original-Cc: 66158@debbugs.gnu.org, guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16990052998304 (code B ref -1); Fri, 03 Nov 2023 09:55:02 +0000 Received: (at submit) by debbugs.gnu.org; 3 Nov 2023 09:54:59 +0000 Received: from localhost ([127.0.0.1]:56836 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qyqtG-00029r-K8 for submit@debbugs.gnu.org; Fri, 03 Nov 2023 05:54:59 -0400 Received: from lists.gnu.org ([2001:470:142::17]:33432) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qyqtE-00029V-Iz for submit@debbugs.gnu.org; Fri, 03 Nov 2023 05:54:56 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qyqsZ-0007fu-QY for guix-patches@gnu.org; Fri, 03 Nov 2023 05:54:15 -0400 Received: from mira.cbaines.net ([212.71.252.8]) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qyqsY-00047F-7z for guix-patches@gnu.org; Fri, 03 Nov 2023 05:54:15 -0400 Received: from localhost (unknown [193.96.224.61]) by mira.cbaines.net (Postfix) with ESMTPSA id 5928827BBE2; Fri, 3 Nov 2023 09:54:13 +0000 (GMT) Received: from felis (localhost [127.0.0.1]) by localhost (OpenSMTPD) with ESMTP id bd6e9c18; Fri, 3 Nov 2023 09:54:12 +0000 (UTC) References: User-agent: mu4e 1.10.7; emacs 29.1 From: Christopher Baines Date: Fri, 03 Nov 2023 09:53:24 +0000 In-reply-to: Message-ID: <87cywrnovx.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=212.71.252.8; envelope-from=mail@cbaines.net; helo=mira.cbaines.net X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Queue-Id: 6A9455FBF9 X-Migadu-Scanner: mx12.migadu.com X-Migadu-Spam-Score: -8.21 X-Spam-Score: -8.21 X-TUID: QtlzSAHUXBJ8 --=-=-= Content-Type: text/plain jlicht@fsfe.org writes: > From: Jelle Licht > > * gnu/packages/node.scm (node-lts): Update to 18.18.2. > [arguments]: Add 'install-node-gyp-wrapper phase. > > Change-Id: I6b17de33313505558a8fa9560126adef486fd0e3 > --- > I tried my hand at introducing a small wrapper script that works around the > node-gyp regression introduced in the version of npm bundled with node 18.18.2. > > It's not quite clear yet whether upstream considers this a regression that > will still be fixed or just behaviour that be kept as-is going forward. > > This patch series also leaves Node vulnerable to a recently reported CVE in > many HTTP2 server implementations, such as nghttp2, but I believe this can be > addressed by https://issues.guix.gnu.org/issue/66658 > > Changes in v2: > - Re-bump from 18.18.0 to 18.18.2 > - Fix 'node-gyp' regression. > > gnu/packages/node.scm | 25 ++++++++++++++++++++++--- > 1 file changed, 22 insertions(+), 3 deletions(-) Looking at QA, there seems to be some issues on aarch64-linux. The build logs do differ between the failed builds, so I've submitted a few more. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKlBAEBCgCPFiEEPonu50WOcg2XVOCyXiijOwuE9XcFAmVEw0JfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcRHG1haWxAY2Jh aW5lcy5uZXQACgkQXiijOwuE9XeM3BAAiumVvHqjytyDPFBAQaqyRO6+uJaTgtvO BZoR5aXWzgMNqSD77pnNtqoRukMiVdHTApt2sjScentcNpOdNxTKcm5rD7NnRO+H JolVrHQHoRrMNoGWjey0ikVU5cO8INhu+OiqDotCGsZFo524lmwiN/Tfhmp4mT/j pmHaZZhGcK1h+WX8rHN2Gvqux0cb+JNkrm6UHUma1UKIqGjPRMszg0hOTN0TDvS5 jMll+oiCani1dDqLjbMh8pD21iGhJajpgORKilJa9e1iICin5+BzF8WkULCEfK8L gg5U95fIKcg9Z0B4nc6nVXAR1TpHcsIR0EkDxwZjaUV0DyLbQzFqpeMKxpip7D9+ 58soWTTZXiHoXq0QJ+mZD0Dwlwa69k9pWoTnMSHUJ5TgJ82u3sTlz0W/4crk7TGI AzslbLKpXi3tOJg5idFDBkd6hZ97XacMC5Y6U87fV04Re/yG/NTpxtgGVUGzUmAH Vq5lI7R8smi7Yei7NcGCkK+q/BxcH4kZFW2TRyzF5bb+DV2HPp4CgMyBwuOw80af g1IUGFC+fj0EwauqRtp9JSOmwTInbSbWejGEf55C3zBX5ae3Jem2ovLRf4qOH4/y q52n3YUGHQ28EMAtr3VoF0brKdvBnPE5ev7rRRzkb64gX4FoONi3X77BOLqvraOU AYCbNmMr43I= =8eTc -----END PGP SIGNATURE----- --=-=-=--