Commit Graph

743 Commits

Author SHA1 Message Date
Ivan Trubach
80e825ede8 nodejs: do not run patchShebangs with build inputs 2023-08-28 12:16:30 +03:00
Ivan Trubach
3751f6abb0 nodejs_{18,20}: fix cross compilation from aarch64-linux
This change adds a fix for Node.js build system passing flags intended
for the target toolchain to the host toolchain.
2023-08-28 12:16:30 +03:00
Ivan Trubach
deb5cc6dc8 nodejs: do not pass --without-snapshot
Building --without-snapshot is no longer possible since v14. See
0822bfaa9f
2023-08-28 12:16:30 +03:00
Ivan Trubach
b0312f6daf nodejs_18: backport v8 trap handler conditional compilation 2023-08-28 12:16:29 +03:00
Mario Rodas
510f1b9733 nodejs_20: 20.5.0 -> 20.5.1
Changelog: https://github.com/nodejs/node/releases/tag/v20.5.1
2023-08-09 04:20:00 +00:00
Mario Rodas
25441183e2 nodejs_18: 18.17.0 -> 18.17.1
Changelog: https://github.com/nodejs/node/releases/tag/v18.17.1
2023-08-09 04:20:00 +00:00
Mario Rodas
b72c3a8fa9 nodejs_16: 16.20.1 -> 16.20.2
Changelog: https://github.com/nodejs/node/releases/tag/v16.20.2
2023-08-09 04:20:00 +00:00
github-actions[bot]
941ae3102b
Merge staging-next into staging 2023-07-22 12:02:07 +00:00
Mario Rodas
9267d4fae5 nodejs_20: 20.4.0 -> 20.5.0
Changelog: https://github.com/nodejs/node/releases/tag/v20.5.0
2023-07-20 04:20:00 +00:00
R. Ryantm
aa0b11935a nodejs: 18.16.1 -> 18.17.0 2023-07-19 21:01:22 +00:00
Randy Eckenrode
87478fdfdf
nodejs: use a response file with llvm-ar
nodejs produces a static archive in its `postInstall`. It detects if the
`ar` is GNU ar and uses a response file. Otherwise, it adds the files
individually. This is apparently very slow with `llvm-ar`, which Darwin
now uses by default. Fortunately, `llvm-ar` also supports response
files, so detect whether the `ar` is `llvm-ar` and use a response file.

I tested the build on aarch64-darwin. `postInstall` took less than a
minute to generate a 59 MiB static archive. Comparing to the build on
master, the only difference between the two archives is `llvm-ar` zeroes
out the dates, uids, and gids by default. Compared disassembly of the
archives appeared identical.

This fixes the timeouts on staging-next. #241951

https://hydra.nixos.org/build/227170390
2023-07-15 10:58:26 -06:00
Mario Rodas
fc4810bfca nodejs_20: 20.3.1 -> 20.4.0
Changelog: https://github.com/nodejs/node/releases/tag/v20.4.0
2023-07-06 04:20:00 +00:00
Pol Dellaiera
4968ffb38a pkgs/top-level/release: allow nodejs 16.20.1 to be cached on Hydra temporarily 2023-06-23 18:06:16 +02:00
Mario Rodas
12bbce3e6c nodejs_20: 20.3.0 -> 20.3.1
The following CVEs are fixed in this release:
- CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
- CVE-2023-30584: Path Traversal Bypass in Experimental Permission Model (High)
- CVE-2023-30587: Bypass of Experimental Permission Model via Node.js Inspector (High)
- CVE-2023-30582: Inadequate Permission Model Allows Unauthorized File Watching (Medium)
- CVE-2023-30583: Bypass of Experimental Permission Model via fs.openAsBlob() (Medium)
- CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- CVE-2023-30586: Bypass of Experimental Permission Model via Arbitrary OpenSSL Engines (Medium)
- CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
- CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
- CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)

https://github.com/nodejs/node/releases/tag/v20.3.1
2023-06-21 04:20:00 +00:00
Mario Rodas
75f22e0d83 nodejs_18: 18.16.0 -> 18.16.1
The following CVEs are fixed in this release:
- CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
- CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
- CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
- CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)

https://github.com/nodejs/node/releases/tag/v18.16.1
2023-06-21 04:20:00 +00:00
Mario Rodas
805e754620 nodejs_16: 16.20.0 -> 16.20.1
The following CVEs are fixed in this release:
- CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
- CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
- CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
- CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)

https://github.com/nodejs/node/releases/tag/v16.20.1
2023-06-21 04:20:00 +00:00
github-actions[bot]
622850f61f
Merge staging-next into staging 2023-06-09 18:01:50 +00:00
Mario Rodas
42754a724d nodejs_20: 20.2.0 -> 20.3.0
https://github.com/nodejs/node/releases/tag/v20.3.0
2023-06-09 04:20:00 +00:00
Cheng Shao
204136bd95 nodejs: add -licuuc to libv8 pkg-config file
-licuuc is required when linking against libv8 output of nodejs.
2023-05-30 09:37:53 +00:00
Lily Foster
9f6f397165
Merge pull request #206477 from winterqt/build-npm-package-patch-npm
buildNpmPackage: patch npm to work around various roadblocks
2023-05-21 11:16:56 -04:00
Lily Foster
dd23a1203c
nodejs_16: add helper patch for buildNpmPackage 2023-05-20 18:29:43 -04:00
Lily Foster
47efc60157
nodejs: add helper patch for buildNpmPackage 2023-05-20 18:29:36 -04:00
Martin Weinelt
b7a9deb5bd
Merge pull request #229910 from helsinki-systems/nodejs-14-insecure
nodejs_14: is EOL on 2023-04-30, nodejs_16: goes EOL during 23.05 release
2023-05-19 15:21:59 +02:00
Mario Rodas
b1c0f3bec2 nodejs_19: drop
Node.js 19 reaches End-of-Life on 2023-06-01.
2023-05-17 04:20:00 +00:00
Mario Rodas
793d346304 nodejs_20: 20.1.0 -> 20.2.0
https://github.com/nodejs/node/releases/tag/v20.2.0
2023-05-17 04:20:00 +00:00
Theo Paris
025062c31f
nodejs: 20.0.0 -> 20.1.0 (#229774) 2023-05-08 16:41:06 +02:00
ajs124
f68ae132f8 nodejs_16: also mark EOL
because it will reach its EOL 2023-09-11, before the EOL of NixOS 23.05
2023-05-08 13:35:13 +02:00
ajs124
f75ad820a1 nodejs_14: is EOL on 2023-04-30 2023-05-04 16:30:11 +02:00
github-actions[bot]
e4b6ca8521
Merge master into staging-next 2023-04-20 18:01:06 +00:00
Jamie Magee
7c1f952db3
nodejs-20_x: init at 20.0.0 2023-04-19 21:36:44 -07:00
github-actions[bot]
6176f16de2
Merge staging-next into staging 2023-04-14 12:02:03 +00:00
Sergei Trofimovich
916d029b63
Merge pull request #225264 from trofi/nodejs-no-CA
nodejs: explicitly disable __contentAddressed
2023-04-14 08:53:08 +01:00
Mario Rodas
aae28d05fe nodejs-18_x: 18.15.0 -> 18.16.0
https://github.com/nodejs/node/releases/tag/v18.16.0
2023-04-13 04:20:00 +00:00
Mario Rodas
53a1930a17 nodejs-19_x: 19.8.1 -> 19.9.0
https://github.com/nodejs/node/releases/tag/v19.9.0
2023-04-10 04:20:00 +00:00
Sergei Trofimovich
5eea756074 nodejs: explicitly disable __contentAddressed
Without the change attempt to enable content addressing on nodejs
breaks the `nodejs` binary:

    $ nix build -f. nodejs --arg config '{ contentAddressedByDefault = true; }'
    $ LANG=C ./result/bin/node
    #
    # Fatal error in , line 0
    # Check failed: VerifyChecksum(blob).
    #
    #
    #
    #FailureMessage Object: 0x7ffce2820790
     1: 0xb2a2c5  [./result/bin/node]
     2: 0x1866d9a V8_Fatal(char const*, ...) [./result/bin/node]
     3: 0x12d7473 v8::internal::Snapshot::Initialize(v8::internal::Isolate*) [./result/bin/node]
     4: 0xce85e6 v8::Isolate::Initialize(v8::Isolate*, v8::Isolate::CreateParams const&) [./result/bin/node]
     5: 0x9e0614 node::NewIsolate(v8::Isolate::CreateParams*, uv_loop_s*, node::MultiIsolatePlatform*, bool) [./result/bin/node]
     6: 0xafdcb2 node::NodeMainInstance::NodeMainInstance(node::SnapshotData const*, uv_loop_s*, node::MultiIsolatePlatform*, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) [./result/bin/node]
     7: 0xa670a3 node::LoadSnapshotDataAndRun(node::SnapshotData const**, node::InitializationResult const*) [./result/bin/node]
     8: 0xa6ac9c node::Start(int, char**) [./result/bin/node]
     9: 0x7f2b7002924e  [/nix/store/h9w6fix9k2lrbc05p4a6inw2r9sywlb1-glibc-2.35-224/lib/libc.so.6]
    10: 0x7f2b70029309 __libc_start_main [/nix/store/h9w6fix9k2lrbc05p4a6inw2r9sywlb1-glibc-2.35-224/lib/libc.so.6]
    11: 0x9da7f5 _start [./result/bin/node]
    Trace/breakpoint trap (core dumped)

Let's override the default by always disable content addressing.
2023-04-08 07:54:46 +01:00
Mario Rodas
05c41a9b3c nodejs-16_x: 16.19.1 -> 16.20.0
https://github.com/nodejs/node/releases/tag/v16.20.0
2023-03-30 04:20:00 +00:00
github-actions[bot]
80a0ae17b5
Merge master into staging-next 2023-03-16 12:01:29 +00:00
github-actions[bot]
b28670c667
Merge staging-next into staging 2023-03-15 12:02:01 +00:00
Mario Rodas
f8cf72796e nodejs-19_x: 19.8.0 -> 19.8.1
https://github.com/nodejs/node/releases/tag/v19.8.1
2023-03-15 04:20:00 +00:00
Mario Rodas
50982761c0 nodejs-19_x: 19.7.0 -> 19.8.0
https://github.com/nodejs/node/releases/tag/v19.8.0
2023-03-14 04:20:00 +00:00
Mario Rodas
708dcbce92 nodejs-18_x: 18.14.2 -> 18.15.0
https://github.com/nodejs/node/releases/tag/v18.15.0
2023-03-07 04:20:00 +00:00
Mario Rodas
78b645172f nodejs-19_x: 19.6.1 -> 19.7.0
https://github.com/nodejs/node/releases/tag/v19.7.0
2023-02-21 04:20:00 +00:00
Mario Rodas
4a5744b789 nodejs-18_x: 18.14.1 -> 18.14.2
https://github.com/nodejs/node/releases/tag/v18.14.2
2023-02-21 04:20:00 +00:00
Mario Rodas
d42631d6c5 nodejs-19_x: 19.6.0 -> 19.6.1
https://github.com/nodejs/node/releases/tag/v19.6.1
2023-02-17 04:20:00 +00:00
Mario Rodas
cfdcb8d7fa nodejs-18_x: 18.14.0 -> 18.14.1
https://github.com/nodejs/node/releases/tag/v18.14.1
2023-02-17 04:20:00 +00:00
Mario Rodas
4313c6360f nodejs-16_x: 16.19.0 -> 16.19.1
https://github.com/nodejs/node/releases/tag/v16.19.1
2023-02-17 04:20:00 +00:00
Mario Rodas
0037110278 nodejs-14_x: 14.21.2 -> 14.21.3
https://github.com/nodejs/node/releases/tag/v14.21.3
2023-02-17 04:20:00 +00:00
Vladimír Čunát
d0d8c15bad
Merge branch 'master' into staging-next
pkgs/development/web/nodejs/v18.nix conflict:
  the fetched patch was already included in this release.
2023-02-03 23:02:19 +01:00
Mario Rodas
bb6c33b6bd nodejs-19_x: 19.5.0 -> 19.6.0
https://github.com/nodejs/node/releases/tag/v19.6.0
2023-02-03 04:20:00 +00:00
Mario Rodas
4a53b3bede nodejs-18_x: 18.13.0 -> 18.14.0
https://github.com/nodejs/node/releases/tag/v18.14.0
2023-02-03 04:20:00 +00:00
github-actions[bot]
e11b11e738
Merge staging-next into staging 2023-01-27 12:01:56 +00:00
Shawn8901
a59dda942c treewide: remove global with lib; statements in pkgs/development 2023-01-26 18:31:02 +01:00
github-actions[bot]
588d9ab6e2
Merge staging-next into staging 2023-01-25 12:02:09 +00:00
Mario Rodas
6e0448abf7 nodejs-19_x: 19.4.0 -> 19.5.0
https://github.com/nodejs/node/releases/tag/v19.5.0
2023-01-24 04:20:00 +00:00
Zhaofeng Li
d62bfb194d nodejs: Fix build on RISC-V 2023-01-23 14:16:29 -07:00
Guillaume Girol
33afbf39f6 treewide: switch to nativeCheckInputs
checkInputs used to be added to nativeBuildInputs. Now we have
nativeCheckInputs to do that instead. Doing this treewide change allows
to keep hashes identical to before the introduction of
nativeCheckInputs.
2023-01-21 12:00:00 +00:00
Anthony Roussel
ba5367b708
nodejs-19_x: 19.2.0 -> 19.4.0 2023-01-13 17:32:18 +01:00
Anthony Roussel
7146e2a152
nodejs-18_x: 18.12.1 -> 18.13.0 2023-01-13 17:27:25 +01:00
Anthony Roussel
920bb038e9
nodejs-16_x: 16.18.1 -> 16.19.0 2023-01-13 17:27:24 +01:00
Anthony Roussel
275ddaec53
nodejs-14_x: 14.21.1 -> 14.21.2 2023-01-13 17:27:24 +01:00
Winter
6a5211f123 nodejs-{16,18,19}_x: backport npm pack fixes from npm v9 2022-12-13 19:40:27 -05:00
Mario Rodas
a454ae19af nodejs-19_x: 19.1.0 -> 19.2.0
https://github.com/nodejs/node/releases/tag/v19.2.0
2022-11-30 04:20:00 +00:00
Mario Rodas
4324d95bf9 nodejs-19_x: 19.0.1 -> 19.1.0
https://github.com/nodejs/node/releases/tag/v19.1.0
2022-11-18 04:20:00 +00:00
Mario Rodas
bf8eaefc86 nodejs-19_x: 19.0.0 -> 19.0.1
https://github.com/nodejs/node/releases/tag/v19.0.1
2022-11-04 04:20:00 +00:00
Mario Rodas
57ea1f2119 nodejs-18_x: 18.12.0 -> 18.12.1
https://github.com/nodejs/node/releases/tag/v18.12.1
2022-11-04 04:20:00 +00:00
Mario Rodas
a3d5f09dfd nodejs-16_x: 16.18.0 -> 16.18.1
https://github.com/nodejs/node/releases/tag/v16.18.1
2022-11-04 04:20:00 +00:00
Mario Rodas
7ce8eb28f0 nodejs-14_x: 14.21.0 -> 14.21.1
https://github.com/nodejs/node/releases/tag/v14.21.1
2022-11-04 04:20:00 +00:00
github-actions[bot]
d6b8789005
Merge master into staging-next 2022-11-02 06:04:45 +00:00
Mario Rodas
e94a8ee1d3 nodejs-14_x: 14.20.1 -> 14.21.0
https://github.com/nodejs/node/releases/tag/v14.21.0
2022-11-01 04:20:00 +00:00
Mario Rodas
1cdd36c0d2 nodejs-18_x: 18.11.0 -> 18.12.0
https://github.com/nodejs/node/releases/tag/v18.12.0
2022-10-22 04:20:00 +00:00
Mario Rodas
81165aa69e nodejs-19_x: init at 19.0.0
https://github.com/nodejs/node/releases/tag/v19.0.0
2022-10-20 04:20:00 +00:00
Mario Rodas
d8043fe30e nodejs-18_x: 18.10.0 -> 18.11.0
https://github.com/nodejs/node/releases/tag/v18.11.0
2022-10-14 04:20:00 +00:00
Mario Rodas
faddae9ab3 nodejs-16_x: 16.17.1 -> 16.18.0
https://github.com/nodejs/node/releases/tag/v16.18.0
2022-10-14 04:20:00 +00:00
Lily Foster
2998b31b02 nodejs: add back newer bypass-xcrun patch 2022-10-01 08:54:20 +09:00
R. Ryantm
95059b974e nodejs-18_x: 18.9.1 -> 18.10.0 2022-09-29 10:41:03 +00:00
Mario Rodas
117f0a80ec
Merge pull request #192784 from RaitoBezarius/fix-yarn2nix-moretea-for-older-openssl
yarn2nix-moretea-openssl_1_1: pass openssl for Node.js v18, unbreak it
2022-09-24 11:25:07 -05:00
Raito Bezarius
e7585fad46 yarn2nix-moretea-openssl_1_1: pass openssl for Node.js v18, unbreak this module 2022-09-24 17:58:07 +02:00
Mario Rodas
4c7bfc6000 nodejs-18_x: 18.9.0 -> 18.9.1
https://github.com/nodejs/node/releases/tag/v18.9.1
2022-09-23 04:20:00 +00:00
Mario Rodas
5b647c67af nodejs-16_x: 16.17.0 -> 16.17.1
https://github.com/nodejs/node/releases/tag/v16.17.1
2022-09-23 04:20:00 +00:00
Mario Rodas
8b89d8d5bd nodejs-14_x: 14.20.0 -> 14.20.1
https://github.com/nodejs/node/releases/tag/v14.20.1
2022-09-23 04:20:00 +00:00
github-actions[bot]
60b28ae00d
Merge master into staging-next 2022-09-08 18:01:13 +00:00
Mario Rodas
53af2c93ce nodejs-18_x: 18.8.0 -> 18.9.0
https://github.com/nodejs/node/releases/tag/v18.9.0
2022-09-08 04:20:00 +00:00
Ivar Scholten
71b85973dd
nodejs-18_x: fix cross compilation to aarch64-linux
This adds a patch reverting https://github.com/nodejs/node/pull/43200 because it breaks
cross compilation to aarch64-linux. Gcc would not recognize the
`-msign-return-address=all` flag causing compilation to fail.
2022-09-06 03:17:12 +02:00
github-actions[bot]
c91ed9564a
Merge master into staging-next 2022-08-25 12:01:30 +00:00
Mario Rodas
dd845813db nodejs-18_x: 18.7.0 -> 18.8.0
https://github.com/nodejs/node/releases/tag/v18.8.0
2022-08-25 04:20:00 +00:00
ajs124
262d3eba50 Revert "nodejs_18: fix eval"
This reverts commit 64d5ca085a.
2022-08-21 21:49:41 +02:00
Sandro Jäckel
64d5ca085a
nodejs_18: fix eval 2022-08-21 05:32:49 +02:00
github-actions[bot]
77394c111b
Merge staging-next into staging 2022-08-20 18:02:00 +00:00
Mario Rodas
dcccf22104 nodejs-18_x: add patch to fix npm fail without a HOME directory
Similar to 37580d6187
2022-08-20 04:20:00 +00:00
ajs124
ed3fab5173 nodejs-14_x: pin to openssl_1_1 2022-08-17 20:16:19 +02:00
Mario Rodas
6e2536f1b0 nodejs-16_x: 16.16.0 -> 16.17.0
https://github.com/nodejs/node/releases/tag/v16.17.0
2022-08-16 04:20:00 +00:00
Mario Rodas
5daf999436 nodejs-18_x: 18.6.0 -> 18.7.0
https://github.com/nodejs/node/releases/tag/v18.7.0
2022-07-26 04:20:00 +00:00
Mario Rodas
37580d6187 nodejs-16_x: 16.15.0 -> 16.16.0
https://github.com/nodejs/node/releases/tag/v16.15.1
https://github.com/nodejs/node/releases/tag/v16.16.0
2022-07-22 04:20:00 +00:00
R. Ryantm
5ad0643e1c nodejs-18_x: 18.5.0 -> 18.6.0 2022-07-14 10:05:53 +00:00
Mario Rodas
939e4a8d94
Merge pull request #180665 from r-ryantm/auto-update/nodejs-18_x
nodejs-18_x: 18.4.0 -> 18.5.0
2022-07-09 00:32:04 -05:00
R. Ryantm
c23ba198fe nodejs-18_x: 18.4.0 -> 18.5.0 2022-07-08 08:21:41 +00:00
R. Ryantm
f62dd75433 elmPackages.nodejs: 14.19.3 -> 14.20.0 2022-07-08 02:36:42 +00:00
ajs124
2674894432 nodejs-12_x: remove 2022-07-04 15:33:59 +02:00
Mario Rodas
a0f7526c81 nodejs-18_x: 18.3.0 -> 18.4.0
https://github.com/nodejs/node/releases/tag/v18.4.0
2022-06-16 04:20:00 +00:00
Mario Rodas
97d05d24b6 Revert "nodejs-16_x: 16.15.0 -> 16.15.1"
Node.js 16.15.1 updated its vendored npm, which breaks sandboxed builds

See: https://github.com/NixOS/nixpkgs/issues/176127

This reverts commit e6188b6576.
2022-06-09 04:20:00 +00:00