CVS commit: pkgsrc/lang/nodejs

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Jun 22 08:55:22 UTC 2026

Modified Files:
        pkgsrc/lang/nodejs: Makefile distinfo

Log Message:
nodejs: updated to 26.3.1

26.3.1 (Current)

Notable Changes

(CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
(CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
(CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
(CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
(CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
(CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
(CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
(CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
(CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
(CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
(CVE-2026-48936) permission: guard pipe open and chmod with net scope (RafaelGSS) – Low


To generate a diff of this commit:
cvs rdiff -u -r1.353 -r1.354 pkgsrc/lang/nodejs/Makefile
cvs rdiff -u -r1.321 -r1.322 pkgsrc/lang/nodejs/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/nodejs/Makefile
diff -u pkgsrc/lang/nodejs/Makefile:1.353 pkgsrc/lang/nodejs/Makefile:1.354
--- pkgsrc/lang/nodejs/Makefile:1.353   Mon Jun  1 20:17:11 2026
+++ pkgsrc/lang/nodejs/Makefile Mon Jun 22 08:55:22 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.353 2026/06/01 20:17:11 adam Exp $
+# $NetBSD: Makefile,v 1.354 2026/06/22 08:55:22 adam Exp $
 
-DISTNAME=      node-v26.3.0
+DISTNAME=      node-v26.3.1
 EXTRACT_SUFX=  .tar.xz
 
 USE_CXX_FEATURES=      c++20 charconv

Index: pkgsrc/lang/nodejs/distinfo
diff -u pkgsrc/lang/nodejs/distinfo:1.321 pkgsrc/lang/nodejs/distinfo:1.322
--- pkgsrc/lang/nodejs/distinfo:1.321   Mon Jun  1 20:17:11 2026
+++ pkgsrc/lang/nodejs/distinfo Mon Jun 22 08:55:22 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.321 2026/06/01 20:17:11 adam Exp $
+$NetBSD: distinfo,v 1.322 2026/06/22 08:55:22 adam Exp $
 
-BLAKE2s (node-v26.3.0.tar.xz) = e796c7c16f76491a60587eab9d09a0881e7b8580d3f388ad27be9d140e661faf
-SHA512 (node-v26.3.0.tar.xz) = 464a24d2536f3ead35325cfb268355fcc66a95260519174cba847efa4037ae2529c24781595b11aae45810570f41c0d2f2d7db2ed365baccda1017a7131a7efe
-Size (node-v26.3.0.tar.xz) = 59811728 bytes
+BLAKE2s (node-v26.3.1.tar.xz) = 52db1a5a2bcdf3fec88f4a8fd24b89e4574e6be0dc0e186faff109f399942251
+SHA512 (node-v26.3.1.tar.xz) = 9662dd1ba1261fc8e6a1cbb792a7a16acf44073caf32a41b70175f7f4ca83648251eb757ee98fe293d2385ff7eb69a7a4ab8e68eaebfea18ea4d2d9593c0f831
+Size (node-v26.3.1.tar.xz) = 59836520 bytes
 SHA1 (patch-common.gypi) = 4620bcaf4d953bc415319a957fe41e1a70b94357
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = 29f0c382b68f77749a71ce39fa2ca37338ca18ec