CVS commit: pkgsrc/lang/nodejs22

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat Aug  1 17:29:19 UTC 2026

Modified Files:
        pkgsrc/lang/nodejs22: Makefile distinfo

Log Message:
nodejs22: updated to 22.23.2

22.23.2 'Jod' (LTS)

Notable Changes

(CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
(CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
(CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
(CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
(CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
(CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
(CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
(CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
(CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
(CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
deps: update llhttp to 9.4.3 (Paolo Insogna)
deps: update undici to 6.28.0 (Node.js GitHub Bot)


To generate a diff of this commit:
cvs rdiff -u -r1.25 -r1.26 pkgsrc/lang/nodejs22/Makefile
cvs rdiff -u -r1.23 -r1.24 pkgsrc/lang/nodejs22/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs22/Makefile
diff -u pkgsrc/lang/nodejs22/Makefile:1.25 pkgsrc/lang/nodejs22/Makefile:1.26
--- pkgsrc/lang/nodejs22/Makefile:1.25  Wed Jun 24 14:17:21 2026
+++ pkgsrc/lang/nodejs22/Makefile       Sat Aug  1 17:29:19 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.25 2026/06/24 14:17:21 adam Exp $
+# $NetBSD: Makefile,v 1.26 2026/08/01 17:29:19 adam Exp $
 
-DISTNAME=      node-v22.23.1
+DISTNAME=      node-v22.23.2
 EXTRACT_SUFX=  .tar.xz
 
 USE_LANGUAGES= c c++

Index: pkgsrc/lang/nodejs22/distinfo
diff -u pkgsrc/lang/nodejs22/distinfo:1.23 pkgsrc/lang/nodejs22/distinfo:1.24
--- pkgsrc/lang/nodejs22/distinfo:1.23  Wed Jun 24 14:17:21 2026
+++ pkgsrc/lang/nodejs22/distinfo       Sat Aug  1 17:29:19 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.23 2026/06/24 14:17:21 adam Exp $
+$NetBSD: distinfo,v 1.24 2026/08/01 17:29:19 adam Exp $
 
-BLAKE2s (node-v22.23.1.tar.xz) = fd30e00c175c2fe475a00c2e6cf155c7d327d4106350979f543cf2d40b199299
-SHA512 (node-v22.23.1.tar.xz) = 5eda22dae8b4724fa264b2f308966d87de914037b7cf675f045b3e0207acb8837e6ec4f6672985523b30ac918893a58f69e203dd6e698432ed31d3eb95f54a49
-Size (node-v22.23.1.tar.xz) = 50507104 bytes
+BLAKE2s (node-v22.23.2.tar.xz) = f70e7dda3c2172665ba9fd515be76d772bd191107701c06103fcf3ad2754a362
+SHA512 (node-v22.23.2.tar.xz) = 92b959098fb7fcfe80776a983d2ae52479692a63c49087c97a0ee2423147a5222b1e1994e98ff650483322cf3a1f1cca8a51f3389993c0ff5fc13b6d1f4ef4ef
+Size (node-v22.23.2.tar.xz) = 51362684 bytes
 SHA1 (patch-common.gypi) = 41fc3ddf9e43c0b0a3d6ef845e7ee2847f4e12ce
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = 29f0c382b68f77749a71ce39fa2ca37338ca18ec