CVS commit: pkgsrc/lang/nodejs

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat Aug  1 17:28:22 UTC 2026

Modified Files:
        pkgsrc/lang/nodejs: Makefile distinfo

Log Message:
nodejs: updated to 26.5.1

26.5.1 (Current)

Notable Changes

(CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
(CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
(CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
(CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
(CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) – Medium
(CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
(CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
(CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
(CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
(CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
deps: update llhttp to 9.4.3 (Paolo Insogna)
deps: update undici to 8.9.0 (Node.js GitHub Bot)


To generate a diff of this commit:
cvs rdiff -u -r1.356 -r1.357 pkgsrc/lang/nodejs/Makefile
cvs rdiff -u -r1.324 -r1.325 pkgsrc/lang/nodejs/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs/Makefile
diff -u pkgsrc/lang/nodejs/Makefile:1.356 pkgsrc/lang/nodejs/Makefile:1.357
--- pkgsrc/lang/nodejs/Makefile:1.356   Wed Jul  8 17:38:00 2026
+++ pkgsrc/lang/nodejs/Makefile Sat Aug  1 17:28:22 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.356 2026/07/08 17:38:00 adam Exp $
+# $NetBSD: Makefile,v 1.357 2026/08/01 17:28:22 adam Exp $
 
-DISTNAME=      node-v26.5.0
+DISTNAME=      node-v26.5.1
 EXTRACT_SUFX=  .tar.xz
 
 USE_CXX_FEATURES=      c++20 charconv

Index: pkgsrc/lang/nodejs/distinfo
diff -u pkgsrc/lang/nodejs/distinfo:1.324 pkgsrc/lang/nodejs/distinfo:1.325
--- pkgsrc/lang/nodejs/distinfo:1.324   Wed Jul  8 17:38:00 2026
+++ pkgsrc/lang/nodejs/distinfo Sat Aug  1 17:28:22 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.324 2026/07/08 17:38:00 adam Exp $
+$NetBSD: distinfo,v 1.325 2026/08/01 17:28:22 adam Exp $
 
-BLAKE2s (node-v26.5.0.tar.xz) = 277dc2d02231257e445ae040a1ed698eea1b55859d696b3d990a8ce0c5a9cc94
-SHA512 (node-v26.5.0.tar.xz) = 2694a62987e90f42b4fb9943a880849eb51eef0f0ae5feb59722cb3f69cc6c2287840f44a1dfe2906bf81cee1fd316b15125439d506b89cbb86d09d19d202e80
-Size (node-v26.5.0.tar.xz) = 61405476 bytes
+BLAKE2s (node-v26.5.1.tar.xz) = ee8e1eff3a3697c2c39c06de994268a58d29514f92ab9bcc27b826b0228e5aa8
+SHA512 (node-v26.5.1.tar.xz) = 7a42bd0a547a8c6b40f211edd4d10b5af5d9e9fc297944397acfc05a813b208a5a0a06f75c14eeb7fed38ee96d86c1d75c45c315523293d16803192631c7675e
+Size (node-v26.5.1.tar.xz) = 60388776 bytes
 SHA1 (patch-common.gypi) = 4620bcaf4d953bc415319a957fe41e1a70b94357
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = 29f0c382b68f77749a71ce39fa2ca37338ca18ec