From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id eNwXNFdmJ2dmGAAA62LTzQ:P1 (envelope-from ) for ; Sun, 03 Nov 2024 12:02:32 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id eNwXNFdmJ2dmGAAA62LTzQ (envelope-from ) for ; Sun, 03 Nov 2024 13:02:31 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=in7ZWgkd; dkim=fail ("headers rsa verify failed") header.d=fsfe.org header.s=2021081301 header.b=IL4AicXh; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=fsfe.org (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1730635344; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=2ZD6vdVdnB0ZZIyju7mPovbif+7uFs1oIcSOosuZ/HY=; b=lSudU5SbHhEzQpaICrE27ZWna6z2kgY8QE+QU1Pc48aSYFZC7MhGA3ZkK7JBF2RuURxnLq C3DY4OSsoAYxgYD+L+GM7H25tXi/8SRuE1IthwxnrjMffaNId2IvOtAspVr2BVFlh3TeF0 C0Wf5Xdg7n9u8nM6vWv5Pk3qSDE1K4yHcc32HCVKg2fXf7Ooo8QFZPBPUXLIMuGLEuAznv G4YGYc5duEIvKQXnfqNiLkbayN0hO6Z0o1f34qAkHQBdjdIAn3++seH2ShpAAjcAOVsjp2 ThLgRs/r07+NOZ5LrzNOYhsciQVBWaePx3B3h1Esr6qAikJBI0jHoOXk99so3w== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=in7ZWgkd; dkim=fail ("headers rsa verify failed") header.d=fsfe.org header.s=2021081301 header.b=IL4AicXh; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=fsfe.org (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1730635344; a=rsa-sha256; cv=none; b=gxjxSCbqq7pZoxCcnfyIyX7VhLf1wLHwg7Ca/edyMZBsyxpU4rhlxX/S3tZH2b/0JkXNCH kNebBhaeDONF6GA95DfYH7fFxlx0E+1a5iSMz9Lysf41BnTHyBr+FNKt23ZZVibgKYP3X1 aomXYcXYMvLGJfA1H6TsHAWIYyaMY32mutYQ2zah3svm1yZCfZepoflODnoGtE0408rI5r QZ/KMreuTzZVS8ZlzHBHKChTBwcvUKvNR84MvuDb+u43KtXpKdzPIv6ByoP2TaM0yiiQqI JV+CrkxrIGAr6uucswXz8y35PRPYoEpiK6IEHrbIDZZmTSkYVviToLQCxtSP7A== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 91F5584AF1 for ; Sun, 03 Nov 2024 13:02:23 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t7ZIy-0006g3-0v; Sun, 03 Nov 2024 07:02:04 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7ZIw-0006fq-EU for guix-patches@gnu.org; Sun, 03 Nov 2024 07:02:02 -0500 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t7ZIw-00034M-66 for guix-patches@gnu.org; Sun, 03 Nov 2024 07:02:02 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:From:To:Subject; bh=2ZD6vdVdnB0ZZIyju7mPovbif+7uFs1oIcSOosuZ/HY=; b=in7ZWgkds8EoiBAewLHj+F/qkZkmWtsKoZcS3zBvzKPLhRRocbvDivC3eSp0OKz1WD8M8PqsccPHQOdrcNZcq3Ndq9hn7FXH2JuyiP49yH8O1R1IEWNTRWyvjZM+0sqi/sA88fdkpMAPufdZm3l+7+kNV8FZ0v+hCB7r1jR7l+bCY1mrfhXIsmFY9dBF6/dAOwnYBczFNUQXMNHZ/6QgXxZV+Llseyupkgh4b/mTk0cuBs2qPOffE3xqSPlYY3D9usN7h84EmoOMFZJhQtE1P0qC96j1GKWDGTmsDKvX0SlExkSRox1VBlV87M9ZliV6CW7dTF34qJwcsey9BuKBGQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t7ZIv-0004GV-Sx for guix-patches@gnu.org; Sun, 03 Nov 2024 07:02:01 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#74187] [PATCH 00/20] Bumping node to 20.18.0 and beyond Resent-From: jlicht@fsfe.org Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 12:02:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 74187 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74187@debbugs.gnu.org Cc: Jelle Licht X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173063527516358 (code B ref -1); Sun, 03 Nov 2024 12:02:01 +0000 Received: (at submit) by debbugs.gnu.org; 3 Nov 2024 12:01:15 +0000 Received: from localhost ([127.0.0.1]:59887 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7ZIB-0004Fm-CW for submit@debbugs.gnu.org; Sun, 03 Nov 2024 07:01:15 -0500 Received: from lists.gnu.org ([209.51.188.17]:45952) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7ZI8-0004Fg-9W for submit@debbugs.gnu.org; Sun, 03 Nov 2024 07:01:13 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7ZI7-0006dF-0i for guix-patches@gnu.org; Sun, 03 Nov 2024 07:01:11 -0500 Received: from mail2.fsfe.org ([213.95.165.55]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7ZI2-00031U-EF for guix-patches@gnu.org; Sun, 03 Nov 2024 07:01:10 -0500 From: jlicht@fsfe.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fsfe.org; s=2021081301; t=1730635259; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=2ZD6vdVdnB0ZZIyju7mPovbif+7uFs1oIcSOosuZ/HY=; b=IL4AicXhZ+geGFB7SkGpGK1fVaMHByGDkVXzM2yKbkvPprM7v7n29HPlBxhjKqF3kqtbKD ufK+TvVGZgCmoMPq9LY2JQlhp+u1lPMS6CPFUeSjbvA3DxtmKMeTISWusEiPTo+83iIFRE TCpPlXGTNiuGiFTX70N4QLsha8dOVGM= Date: Sun, 3 Nov 2024 13:01:31 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=213.95.165.55; envelope-from=jlicht@fsfe.org; helo=mail2.fsfe.org X-Spam_score_int: -70 X-Spam_score: -7.1 X-Spam_bar: ------- X-Spam_report: (-7.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Scanner: mx11.migadu.com X-Migadu-Spam-Score: 4.95 X-Spam-Score: 4.95 X-Migadu-Queue-Id: 91F5584AF1 X-TUID: /WBkNfNG7VDM From: Jelle Licht Hey folks, As our current node-lts package has quite some security issues, here a bump to a recent release of something that is maintained. After this has been merged, a version bump to the Active LTS version of node (22) is in the works as well. I also opted to finally move everything and everyone away from the (very insecure) node@10/node-bootstrap package in this series. In case it makes sense to add a deprecated package alias for the now-removed `node` variable, please let me know; I sincerely hope nobody was still using node@10 anywhere. guix refresh tells me the following: Building the following 126 packages would ensure 223 dependent packages are rebuilt. I'd appreciate a reminder as to whether this means this can go straight to master, or rather should be relegated to a specialised branch for the merge train(s). Jelle Licht (20): gnu: node: Replace customized nghttp2-for-node by nghttp2. gnu: Remove nghttp2-for-node. gnu: node-lts: Replace customized c-ares-for-node by c-ares. gnu: Remove c-ares-for-node. gnu: Add libuv-for-node-lts. gnu: llhttp-bootstrap: Update to 8.1.2. gnu: node-lts: Update to 20.18.0 [security fixes]. gnu: r-v8: Fix build with node-lts@20. gnu: cwltool: Use node-lts instead of node. gnu: python-cwl-utils: Use node-lts instead of node. gnu: ocaml-ezjsonm: Use node-lts instead of node. gnu: js-of-ocaml: Use node-lts instead of node. gnu: fmp: Use node-lts instead of node. gnu: python-cloudscraper: Use node-lts instead of node. gnu: qtwebengine-5: Use node-lts instead of node. gnu: ruby-autoprefixer-rails: Use node-lts instead of node. gnu: ruby-execjs: Use node-lts instead of node. gnu: vlang: Use node-lts instead of node. gnu: esbuild-node: Use node-lts instead of node. gnu: node: Rename variable node-bootstrap and hide package. gnu/packages/adns.scm | 22 ---------- gnu/packages/bioinformatics.scm | 4 +- gnu/packages/cran.scm | 2 +- gnu/packages/libevent.scm | 24 +++++++++++ gnu/packages/node.scm | 67 +++++++++++++++++++---------- gnu/packages/ocaml.scm | 4 +- gnu/packages/package-management.scm | 2 +- gnu/packages/python-web.scm | 2 +- gnu/packages/qt.scm | 2 +- gnu/packages/rails.scm | 2 +- gnu/packages/ruby.scm | 2 +- gnu/packages/vlang.scm | 2 +- gnu/packages/web.scm | 39 +---------------- 13 files changed, 82 insertions(+), 92 deletions(-) base-commit: a26ba23cdd476cb5eb8378c4785ccf1bc4145f17 -- 2.46.0