rpms/nodejs
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import UBI nodejs-20.20.2-1.module+el9.7.0+24193+41b7b572

Browse Source
This commit is contained in:
AlmaLinux RelEng Bot 2026-04-13 16:35:49 -04:00
parent e20a947544
commit 1e10f3dd59
5 changed files with 21863 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.gitignore vendored
View File

@ -1,6 +1,6 @@
SOURCES/cjs-module-lexer-2.1.0.tar.gz
SOURCES/icu4c-77_1-src.tgz
SOURCES/node-v20.20.0-stripped.tar.gz
SOURCES/undici-6.23.0.tar.gz
SOURCES/cjs-module-lexer-2.2.0.tar.gz
SOURCES/icu4c-78.2-sources.tgz
SOURCES/node-v20.20.2-stripped.tar.gz
SOURCES/undici-v6.24.1.tar.gz
SOURCES/wasi-sdk-12.tar.gz
SOURCES/wasi-sdk-20.tar.gz

8
.nodejs.metadata
View File

@ -1,6 +1,6 @@
de6568bd7b90343b2932471c446773b8e65ba1d6 SOURCES/cjs-module-lexer-2.1.0.tar.gz
3039d3833f6359bc5f01da8f8640da5a8fcfbd3e SOURCES/icu4c-77_1-src.tgz
47b0a614cdad50001d52fabc13f307096de7b202 SOURCES/node-v20.20.0-stripped.tar.gz
dea077cc25c1b33836a79b2e8137e43061c9d150 SOURCES/undici-6.23.0.tar.gz
5f43eacd6ba7994206fbfc75268bcad2cdf4e727 SOURCES/cjs-module-lexer-2.2.0.tar.gz
a62283d2e6a1bcddea1cab0d1cd09dbe5da6c96f SOURCES/icu4c-78.2-sources.tgz
fa9a32bd62dfd9f5587381d421a828d4a7691494 SOURCES/node-v20.20.2-stripped.tar.gz
529f2a07ae08400b365a56d0c064ac59a1389ae5 SOURCES/undici-v6.24.1.tar.gz
5ea3a1deb65a52a36ceb41324da690f54b2a4805 SOURCES/wasi-sdk-12.tar.gz
da40abcb73a6dddafced6174d24ed49e414cda3c SOURCES/wasi-sdk-20.tar.gz

21800
SOURCES/0001-deps-update-nghttp2-to-1.68.1.patch Normal file
View File

File diff suppressed because it is too large Load Diff

45
SOURCES/test-should-pass.txt
View File

@ -1460,12 +1460,20 @@ parallel/test-http2-client-request-options-errors.js
parallel/test-http2-client-rststream-before-connect.js
parallel/test-http2-client-setLocalWindowSize.js
parallel/test-http2-client-setNextStreamID-errors.js
parallel/test-http2-client-set-priority.js
# Disabled on 26.3.2026
# Due to necessary update of nghttp2
# Some unit test are still not adjusted
# For this version
# parallel/test-http2-client-set-priority.js
parallel/test-http2-client-settings-before-connect.js
parallel/test-http2-client-shutdown-before-connect.js
parallel/test-http2-client-socket-destroy.js
parallel/test-http2-client-stream-destroy-before-connect.js
parallel/test-http2-client-unescaped-path.js
# Disabled on 26.3.2026
# Due to necessary update of nghttp2
# Some unit test are still not adjusted
# For this version
# parallel/test-http2-client-unescaped-path.js
parallel/test-http2-client-upload.js
parallel/test-http2-client-upload-reject.js
parallel/test-http2-client-write-before-connect.js
@ -1560,16 +1568,28 @@ parallel/test-http2-large-writes-session-memory-leak.js
parallel/test-http2-malformed-altsvc.js
parallel/test-http2-many-writes-and-destroy.js
parallel/test-http2-max-concurrent-streams.js
parallel/test-http2-max-invalid-frames.js
# Disabled on 26.3.2026
# Due to necessary update of nghttp2
# Some unit test are still not adjusted
# For this version
# parallel/test-http2-max-invalid-frames.js
parallel/test-http2-max-session-memory-leak.js
parallel/test-http2-max-settings.js
parallel/test-http2-methods.js
parallel/test-http2-misbehaving-flow-control.js
parallel/test-http2-misbehaving-flow-control-paused.js
# Disabled on 26.3.2026
# Due to necessary update of nghttp2
# Some unit test are still not adjusted
# For this version
# parallel/test-http2-misbehaving-flow-control.js
# parallel/test-http2-misbehaving-flow-control-paused.js
parallel/test-http2-misbehaving-multiplex.js
parallel/test-http2-misc-util.js
parallel/test-http2-misused-pseudoheaders.js
parallel/test-http2-multi-content-length.js
# Disabled on 26.3.2026
# Due to necessary update of nghttp2
# Some unit test are still not adjusted
# For this version
# parallel/test-http2-multi-content-length.js
parallel/test-http2-multiheaders.js
parallel/test-http2-multiheaders-raw.js
parallel/test-http2-multiplex.js
@ -1594,13 +1614,21 @@ parallel/test-http2-pipe.js
parallel/test-http2-pipe-named-pipe.js
parallel/test-http2-premature-close.js
parallel/test-http2-priority-cycle-.js
parallel/test-http2-priority-event.js
# Disabled on 26.3.2026
# Due to necessary update of nghttp2
# Some unit test are still not adjusted
# For this version
# parallel/test-http2-priority-event.js
parallel/test-http2-propagate-session-destroy-code.js
parallel/test-http2-removed-header-stays-removed.js
parallel/test-http2-request-remove-connect-listener.js
parallel/test-http2-request-response-proto.js
parallel/test-http2-res-corked.js
parallel/test-http2-reset-flood.js
# Disabled on 26.3.2026
# Due to necessary update of nghttp2
# Some unit test are still not adjusted
# For this version
# parallel/test-http2-reset-flood.js
parallel/test-http2-respond-errors.js
parallel/test-http2-respond-file-204.js
parallel/test-http2-respond-file-304.js
@ -2388,7 +2416,6 @@ parallel/test-net-socket-close-after-end.js
parallel/test-net-socket-connecting.js
parallel/test-net-socket-connect-invalid-autoselectfamilyattempttimeout.js
parallel/test-net-socket-connect-invalid-autoselectfamily.js
parallel/test-net-socket-connect-without-cb.js
parallel/test-net-socket-constructor.js
parallel/test-net-socket-destroy-send.js
parallel/test-net-socket-destroy-twice.js

31
SPECS/nodejs.spec
View File

@ -44,7 +44,7 @@
%global nodejs_epoch 1
%global nodejs_major 20
%global nodejs_minor 20
%global nodejs_patch 0
%global nodejs_patch 2
%global nodejs_abi %{nodejs_major}.%{nodejs_minor}
# nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
%global nodejs_soversion 115
@ -71,13 +71,13 @@
%global c_ares_version 1.34.6
# llhttp - from deps/llhttp/include/llhttp.h
%global llhttp_version 9.3.0
%global llhttp_version 9.3.1
# libuv - from deps/uv/include/uv/version.h
%global libuv_version 1.46.0
# nghttp2 - from deps/nghttp2/lib/includes/nghttp2/nghttp2ver.h
%global nghttp2_version 1.61.0
%global nghttp2_version 1.68.1
# nghttp3 - from deps/ngtcp2/nghttp3/lib/includes/nghttp3/version.h
%global nghttp3_version 0.7.0
@ -86,8 +86,8 @@
%global ngtcp2_version 1.1.0
# ICU - from tools/icu/current_ver.dep
%global icu_major 77
%global icu_minor 1
%global icu_major 78
%global icu_minor 2
%global icu_version %{icu_major}.%{icu_minor}
%global icudatadir %{nodejs_datadir}/icudata
@ -156,7 +156,7 @@ ExclusiveArch: %{nodejs_arches}
Source0: node-v%{nodejs_version}-stripped.tar.gz
Source1: npmrc
Source2: btest402.js
Source3: https://github.com/unicode-org/icu/releases/download/release-%{icu_major}-%{icu_minor}/icu4c-%{icu_major}_%{icu_minor}-src.tgz
Source3: https://github.com/unicode-org/icu/releases/download/release-%{icu_major}.%{icu_minor}/icu4c-%{icu_major}.%{icu_minor}-sources.tgz
Source100: %{name}-tarball.sh
# The native module Requires generator remains in the nodejs SRPM, so it knows
@ -172,17 +172,17 @@ Source8: npmrc.builtin.in
# Recipes for creating these blobs are included in the sources.
# Version: jq '.version' deps/cjs-module-lexer/src/package.json
# Original: https://github.com/nodejs/cjs-module-lexer/archive/refs/tags/2.1.0.tar.gz
# Adjustments: rm -f cjs-module-lexer-2.1.0/lib/lexer.wasm
# Original: https://github.com/nodejs/cjs-module-lexer/archive/refs/tags/2.2.0.tar.gz
# Adjustments: rm -f cjs-module-lexer-2.2.0/lib/lexer.wasm
# wasi-sdk version can be found in Makefile
Source101: cjs-module-lexer-2.1.0.tar.gz
Source101: cjs-module-lexer-2.2.0.tar.gz
Source111: https://github.com/WebAssembly/wasi-sdk/archive/refs/tags/wasi-sdk-12.tar.gz
# Version: jq '.version' deps/undici/src/package.json
# Original: https://github.com/nodejs/undici/archive/v6.23.0/undici-v6.23.0.tar.gz
# Adjustments: rm -f undici-v6.23.0/lib/llhttp/llhttp*.wasm
# Original: https://github.com/nodejs/undici/archive/v6.24.1/undici-v6.24.1.tar.gz
# Adjustments: rm -f undici-6.24.1/lib/llhttp/llhttp*.wasm
# wasi-sdk version can be found in lib/llhttp/wasm_build_env.txt
Source102: undici-6.23.0.tar.gz
Source102: undici-v6.24.1.tar.gz
Source112: https://github.com/WebAssembly/wasi-sdk/archive/refs/tags/wasi-sdk-20.tar.gz
Source300: test-runner.sh
Source301: test-should-pass.txt
@ -190,6 +190,7 @@ Source301: test-should-pass.txt
# Disable running gyp on bundled deps we don't use
Patch1: 0001-Disable-running-gyp-on-shared-deps.patch
Patch2: 0002-Disable-FIPS-options.patch
Patch3: 0001-deps-update-nghttp2-to-1.68.1.patch
BuildRequires: make
BuildRequires: python3-devel
@ -648,6 +649,12 @@ LD_LIBRARY_PATH=%{buildroot}%{_libdir} \
%changelog
* Wed Apr 1 2026 Tomas Juhasz <tjuhasz@redhat.com> - 1:20.20.2-1
- Update to version 20.20.2
Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change.
Resolves: RHEL-164336
Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710
* Wed Jan 14 2026 Tomas Juhasz <tjuhasz@redhat.com> - 1:20.20.0-1
- Update to version 20.20.0
Resolves: RHEL-141917