From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id cNA1NG4Y5GM1GAAAbAwnHQ (envelope-from ) for ; Wed, 08 Feb 2023 22:47:26 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id AKIkNG4Y5GOucQAAauVa8A (envelope-from ) for ; Wed, 08 Feb 2023 22:47:26 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 9B8E3ED92 for ; Wed, 8 Feb 2023 22:47:26 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pPrdj-0004lm-Sn; Wed, 08 Feb 2023 16:06:03 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pPrdi-0004jq-E9 for guix-patches@gnu.org; Wed, 08 Feb 2023 16:06:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pPrdi-0006DI-5S for guix-patches@gnu.org; Wed, 08 Feb 2023 16:06:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pPrdh-00045D-Q6 for guix-patches@gnu.org; Wed, 08 Feb 2023 16:06:01 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#59188] [PATCH v3 00/16] Updating node-lts to 18.X References: In-Reply-To: Resent-From: jlicht@fsfe.org Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 08 Feb 2023 21:06:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 59188 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 59188@debbugs.gnu.org Cc: Jelle Licht Received: via spool by 59188-submit@debbugs.gnu.org id=B59188.167589033815454 (code B ref 59188); Wed, 08 Feb 2023 21:06:01 +0000 Received: (at 59188) by debbugs.gnu.org; 8 Feb 2023 21:05:38 +0000 Received: from localhost ([127.0.0.1]:56747 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pPrdJ-000415-Lx for submit@debbugs.gnu.org; Wed, 08 Feb 2023 16:05:38 -0500 Received: from mail1.fsfe.org ([217.69.89.151]:40950) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pPrdH-00040b-G7 for 59188@debbugs.gnu.org; Wed, 08 Feb 2023 16:05:36 -0500 From: jlicht@fsfe.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fsfe.org; s=2021100501; t=1675890333; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=Rk5mdthxN2Ia8Sotx3VmaenMoIWTeNeiGsi8dP12hXU=; b=FUyCfNOZTQoptbAlb9qcFCpVBqhRNeljyuTfu0lKqdFKjVLCyRf3O4gK3j8L65sajDJdq/ ibnyoQoQnWhOi1ngFFSOXS+IS9BPEfFL46goWTAj4D+4xFFQy+1lM5fHk/inMl2YQNIWcp RdfYQAqcjSh/6um5A3K/wKTijH2d2+A= Date: Wed, 8 Feb 2023 22:05:15 +0100 Message-Id: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1675892846; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=Rk5mdthxN2Ia8Sotx3VmaenMoIWTeNeiGsi8dP12hXU=; b=oI9q2QgnY0G3DhfzS4DSC3MkmGcEuwybjdvq9jENyQSQXhVpl/lNT+tWRV5gQjQyf3ligB Hst/8a3oE351lcYTqKN/PMAcW6UP9QoWKHO4ez18+o7H3uxzRDQuClZH4MWVGMVym9dYz9 bkib1bFF8Y4qk/cFjZZG9/oF7RLPrSuDEpqwfyZ/mZMY5d3XQlcFAbHmWxwMtKwSuegzyy xPJ/n0dJnjDr9Xeu85L6UbqinoCBPdChAcMueEx6lvbJwXJKoSyygHy8xhNTJtEKWIEf9H Jab3NRudtmYnVCVcrcJtYb336/iTlrP7f7NfHvmSwJ10Z8X9E8uvHNYlgwKtjw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=fsfe.org header.s=2021100501 header.b=FUyCfNOZ; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=fsfe.org (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1675892846; a=rsa-sha256; cv=none; b=Nc/MbrLXUsw4nxGKFzirBAGMR67r5aXkCR5s8NsQXwaXLBZwXt4/3Uhk2+4OmYd80CmgQA 28kYkgei0FwE7lzMZn7UcxTLQMACOoj/S+yKurHjW1ewPyxfN85dIAb59w8qhZXM+h1dGa 3qw9WcEEq+pjtkwS4UJ7MCEe8XScNtNPz16+HJho7KoAIzYrxx6E3KWymEm1AR2hq1DiOk yepiQviKHvczER8QG9TNGSjI4xeatlSLOMCwJ1nED2wTDi67rrCvAj90Jmja7T9zZuH9Fw FpQpnEwPokRCq6AGlxnZRod74npz+AwFEmUm66Cs/vkxu6BTynTjxxdbRWf6OA== X-Spam-Score: 6.90 X-Migadu-Queue-Id: 9B8E3ED92 X-Migadu-Scanner: scn0.migadu.com Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=fsfe.org header.s=2021100501 header.b=FUyCfNOZ; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=fsfe.org (policy=none) X-Migadu-Spam-Score: 6.90 X-TUID: +uDR5PwljjoE From: Jelle Licht Folks, This should at least build for x86_64, and I'm sending in a 'new' patch series in the hopes of QA picking things up this time. Hilton, I've taken the liberty of adding in a copyright line for your node-lts update: I've also tweaked some versions so there would be less manual patching and backports to do, namely: * libuv-for-node to 1.44.2 * node-lts to 18.14.0 I needed to tweak some of our existing packages so they actually explicitly state which dependencies they do not care about; with the npm bundled with node < 16, things "Just Worked", but since then npm has become a bit stricter. After applying my patches they should build with either node@14 (current packaged version) or node@18 (Hilton's version). Hilton Chain (4): gnu: libuv-for-node: Update to 1.44.2. gnu: llhttp-bootstrap: Update to 6.0.10. gnu: node-lts: Update to 18.14.0. gnu: libnode: Use node-lts as base. Jelle Licht (12): gnu: node-acorn: Disable tests. gnu: node-acorn: Remove lifecycle script. gnu: node-acorn: Fix broken transpilation. gnu: node-buffer-crc32: Ignore development dependencies. gnu: node-crx3: Ignore development dependencies. gnu: node-minimist: Ignore development dependencies. gnu: node-pbf: Ignore development dependencies. gnu: node-protocol-buffers-schema: Ignore development dependencies. gnu: node-resolve-protobuf-schema: Ignore development dependencies. gnu: node-ieee754: Ignore development dependencies. gnu: node-yazl: Ignore development dependencies. gnu: node-uglify-js: Update to 3.14.2. gnu/local.mk | 1 - gnu/packages/cran.scm | 2 +- gnu/packages/libevent.scm | 4 +- gnu/packages/node-xyz.scm | 110 +++++++++++++----- gnu/packages/node.scm | 49 +++++--- .../llhttp-bootstrap-CVE-2020-8287.patch | 100 ---------------- gnu/packages/uglifyjs.scm | 4 +- 7 files changed, 121 insertions(+), 149 deletions(-) delete mode 100644 gnu/packages/patches/llhttp-bootstrap-CVE-2020-8287.patch base-commit: 07e74b63d4969de0b51c48edb586f0d7d8c08db7 -- 2.39.1