Skip to content

[pull] main from nodejs:main#309

Open
pull[bot] wants to merge 623 commits intoSimenB:mainfrom
nodejs:main
Open

[pull] main from nodejs:main#309
pull[bot] wants to merge 623 commits intoSimenB:mainfrom
nodejs:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Feb 18, 2023

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull bot added the ⤵️ pull label Feb 18, 2023
tianon and others added 29 commits May 30, 2025 15:11
It is no longer supported.
Remove arm32 from Node 24
Add Alpine 3.22 (remove Alpine 3.20)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@f49aabe...05b42c6)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
feat: drop EOL Node.js 23
…corecard-action-2.4.2

chore(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2
feat: Node.js 22.17.0, 24.3.0
…ad" checks

This solves for the case of `gpg --recv-keys` receiving enough valid data that it doesn't return a non-zero exit code, but that it also doesn't import a key by explicitly checking afterwards that it did import the key we asked for (so that the fallback to keyserver.ubuntu.com actually happens appropriately for keys whose UID are no longer validated on keys.openpgp.org).
feat: Node.js 22.17.1, 24.4.1
Before commit 3f6cb08 (fix: only update yarn if there are other changes
to the dockerfile), yarnVersion depended on SKIP, so the substitute that
followed made sense. This commit removed the condition and changed it to
just substitute the version with itself, which doesn't make much sense.

Just remove it, and also move the real replace inside SKIP condition.

Also remove initial assignment to alpine_version, which is never used.
chore: Simplify yarn and alpine version update
Remove stray * for linux*-s390x in slim images
There are linux32-s390x and linux64-s390x[1].

Copilot review was misleading.

This reverts commit ec45cd2.

[1] https://github.com/nodejs/node/tree/main/deps/openssl/config/archs
Revert "Remove stray * for linux*-s390x in slim images"
nodejs-github-bot and others added 30 commits March 11, 2026 11:14
docs: add #nodejs-distributions Slack link to CONTRIBUTING
feat: in-line Yarn data to templates
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.6 to 4.33.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@0d579ff...b1bff81)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.33.0 to 4.34.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@b1bff81...3869755)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
security: Node.js 20.20.2, 22.22.2, 24.14.1, and 25.8.2
fix: Don't fail on Alpine checksums for Security releases
correct and update example options to use current Node.js versions
and latest Debian release
docs: remove reference to EOL Alpine 3.18
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@3869755...c10b806)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.