CVS commit: pkgsrc/lang/nodejs

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Oct 22 11:08:12 UTC 2026

Modified Files:
        pkgsrc/lang/nodejs: Makefile Makefile.common distinfo

Log Message:
nodejs: updated to 26.12.1

26.12.1 (Current)

Notable Changes

(CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina) – High
(CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) – High
(CVE-2026-105483) tls: fix ip normalization regression (James M Snell) – High
(CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) – High
(CVE-2026-111497) deps: brotli: cherry-pick 0ed4268a4401abcb44720963 (Evgenii Kliuchnikov) – High
(CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) – Medium
(CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan) – Medium
(CVE-2026-106070) zlib: avoid caching invalid ZIP local headers (Matteo Collina) – Low
(CVE-2026-106071) src: fix the fs permission tree node on wildcard nodes (James M Snell) – Low
(CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS) – Low
deps: V8: backport 93cd21e8254b (Joyee Cheung)
crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
tls: reject chains containing blocked public keys (Ulises Gascon)
deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett)
crypto: harden X.509 conversion and formatting (Filip Skokan)


To generate a diff of this commit:
cvs rdiff -u -r1.363 -r1.364 pkgsrc/lang/nodejs/Makefile
cvs rdiff -u -r1.66 -r1.67 pkgsrc/lang/nodejs/Makefile.common
cvs rdiff -u -r1.335 -r1.336 pkgsrc/lang/nodejs/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs/Makefile
diff -u pkgsrc/lang/nodejs/Makefile:1.363 pkgsrc/lang/nodejs/Makefile:1.364
--- pkgsrc/lang/nodejs/Makefile:1.363   Mon Oct 19 09:27:44 2026
+++ pkgsrc/lang/nodejs/Makefile Thu Oct 22 11:08:12 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.363 2026/10/19 09:27:44 adam Exp $
+# $NetBSD: Makefile,v 1.364 2026/10/22 11:08:12 adam Exp $
 
-DISTNAME=      node-v26.12.0
+DISTNAME=      node-v26.12.1
 EXTRACT_SUFX=  .tar.xz
 
 USE_CXX_FEATURES=      c++20 charconv

Index: pkgsrc/lang/nodejs/Makefile.common
diff -u pkgsrc/lang/nodejs/Makefile.common:1.66 pkgsrc/lang/nodejs/Makefile.common:1.67
--- pkgsrc/lang/nodejs/Makefile.common:1.66     Fri Jul  3 14:11:58 2026
+++ pkgsrc/lang/nodejs/Makefile.common  Thu Oct 22 11:08:12 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.66 2026/07/03 14:11:58 wiz Exp $
+# $NetBSD: Makefile.common,v 1.67 2026/10/22 11:08:12 adam Exp $
 # used by lang/nodejs/Makefile
 # used by lang/nodejs22/Makefile
 # used by lang/nodejs24/Makefile
@@ -45,14 +45,14 @@ CONFIGURE_ENV+=             GYP_DEFINES="linux_use_
 .endif
 
 # see patch-configure.py and patch-tools_gyp_pylib_gyp_input.py
-TOOL_DEPENDS+=         ${PYPKGPREFIX}-packaging-[0-9]*:../../devel/py-packaging
+TOOL_DEPENDS+=         ${PYPKGPREFIX}-packaging>=0:../../devel/py-packaging
 
 REPLACE_NODEJS+=       deps/npm/bin/*.js
 REPLACE_PYTHON+=       configure
 REPLACE_PYTHON+=       tools/gyp/pylib/gyp/flock_tool.py
 
 .if ${OPSYS} == "NetBSD"
-TOOL_DEPENDS+=         lockf-[0-9]*:../../sysutils/lockf
+TOOL_DEPENDS+=         lockf>=0:../../sysutils/lockf
 BUILDLINK_TRANSFORM+=  rm:-ldl
 .endif
 
@@ -85,6 +85,7 @@ paxctl:
 .if ${OPSYS} != "Darwin"
 .include "../../devel/libexecinfo/buildlink3.mk"
 .endif
+BUILDLINK_API_DEPENDS.brotli+= brotli>=1.2.1
 .include "../../archivers/brotli/buildlink3.mk"
 .include "../../databases/sqlite3/buildlink3.mk"
 BUILDLINK_API_DEPENDS.libuv+=  libuv>=1.49

Index: pkgsrc/lang/nodejs/distinfo
diff -u pkgsrc/lang/nodejs/distinfo:1.335 pkgsrc/lang/nodejs/distinfo:1.336
--- pkgsrc/lang/nodejs/distinfo:1.335   Mon Oct 19 09:27:44 2026
+++ pkgsrc/lang/nodejs/distinfo Thu Oct 22 11:08:12 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.335 2026/10/19 09:27:44 adam Exp $
+$NetBSD: distinfo,v 1.336 2026/10/22 11:08:12 adam Exp $
 
-BLAKE2s (node-v26.12.0.tar.xz) = bc81390e7242221a25f96fe0d95233c0f79abaee93dd268ef2cb4adf5611fc55
-SHA512 (node-v26.12.0.tar.xz) = c3c41462198c6bedc1f2136a7f421a7cc757996ae49486c4c82b7ee75b2294b298c14f7e838b83da04a789f50722247ab448dd3bac8a07ac0d49047ee33c1c05
-Size (node-v26.12.0.tar.xz) = 62434260 bytes
+BLAKE2s (node-v26.12.1.tar.xz) = 1afb13ee9f319ff3bbde5c6ccc0ac3cda90df92af4556fb4994ab0779fd30dee
+SHA512 (node-v26.12.1.tar.xz) = f6f76e258af33f7f877c65a2141d281ea307aae017a90bb8a75a7d4df271ad9d17c7d0edfd5751a977edd6bdb03c704d727628c4c7215c878d421787a35240f2
+Size (node-v26.12.1.tar.xz) = 62570464 bytes
 SHA1 (patch-common.gypi) = 901ec961585bd0726e9f1ea1ee2dbc0c791bb6c7
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = 29f0c382b68f77749a71ce39fa2ca37338ca18ec