CVS commit: pkgsrc/lang/nodejs24

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat Aug  1 17:28:50 UTC 2026

Modified Files:
        pkgsrc/lang/nodejs24: Makefile distinfo

Log Message:
nodejs24: updated to 24.18.1

24.18.1 'Krypton' (LTS)

Notable Changes

(CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
(CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
(CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
(CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
(CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
(CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) – Medium
(CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
(CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
(CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
(CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
(CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
deps: update llhttp to 9.4.3 (Paolo Insogna)
deps: update undici to 7.29.0 (Node.js GitHub Bot)


To generate a diff of this commit:
cvs rdiff -u -r1.13 -r1.14 pkgsrc/lang/nodejs24/Makefile \
    pkgsrc/lang/nodejs24/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs24/Makefile
diff -u pkgsrc/lang/nodejs24/Makefile:1.13 pkgsrc/lang/nodejs24/Makefile:1.14
--- pkgsrc/lang/nodejs24/Makefile:1.13  Fri Jul 17 20:50:28 2026
+++ pkgsrc/lang/nodejs24/Makefile       Sat Aug  1 17:28:49 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.13 2026/07/17 20:50:28 wiz Exp $
+# $NetBSD: Makefile,v 1.14 2026/08/01 17:28:49 adam Exp $
 
-DISTNAME=      node-v24.18.0
-PKGREVISION=   1
+DISTNAME=      node-v24.18.1
 EXTRACT_SUFX=  .tar.xz
 
 USE_LANGUAGES= c c++
Index: pkgsrc/lang/nodejs24/distinfo
diff -u pkgsrc/lang/nodejs24/distinfo:1.13 pkgsrc/lang/nodejs24/distinfo:1.14
--- pkgsrc/lang/nodejs24/distinfo:1.13  Fri Jul 17 20:50:28 2026
+++ pkgsrc/lang/nodejs24/distinfo       Sat Aug  1 17:28:49 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.13 2026/07/17 20:50:28 wiz Exp $
+$NetBSD: distinfo,v 1.14 2026/08/01 17:28:49 adam Exp $
 
-BLAKE2s (node-v24.18.0.tar.xz) = 0cf04eff7767f7860e9edacfa75f1feb59d01b2a09183a4af1fc59a782bf6383
-SHA512 (node-v24.18.0.tar.xz) = 8267d57834fe4563a54ea814c09b38fc9520369b3e030cae36d7024d06278465c2675d7b9422de6215a281658cfb7db079124d5ac9f6b90d630d7c1ed3766df8
-Size (node-v24.18.0.tar.xz) = 55425872 bytes
+BLAKE2s (node-v24.18.1.tar.xz) = dd2d335a7da4d0e7bd8ed6a1b730d28d7036123016c57334278f5a618d07d91d
+SHA512 (node-v24.18.1.tar.xz) = a52545711d8872b129eaa9dd874ed6d7c3664fb9f6b5953e82e38a857cfb7fa47fb05c4c53583ab0ee0206e048803f05cc3cc54ecc06576c9b2512bb9a0a5742
+Size (node-v24.18.1.tar.xz) = 54650432 bytes
 SHA1 (patch-common.gypi) = 4620bcaf4d953bc415319a957fe41e1a70b94357
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = 29f0c382b68f77749a71ce39fa2ca37338ca18ec