Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update docker dependencies - autoclosed #91

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
composer final minor 2.5.8 -> 2.7.1
mlocati/php-extension-installer stage minor 2.1.49 -> 2.2.2
nginx final patch 1.25.2-alpine -> 1.25.4-alpine
node final minor 18.16.0-alpine -> 18.19.1-alpine
postgres minor 14.9-alpine -> 14.11-alpine

Release Notes

mlocati/docker-php-extension-installer (mlocati/php-extension-installer)

v2.2.2

Compare Source

v2.2.1

Compare Source

  • Fix installing AOM on Debian 10 with arm architecture (#​886)

v2.2.0

Compare Source

  • Always enable (fast) support for AVIF on Debian 12 (Bookworm) (#​884)

v2.1.85

Compare Source

  • Update libaom 3.3.0 > 3.8.1, libdav1d 0.9.2 > 1.3.0, libyuv 25d0a51 > d359a9f, libavif 0.9.3 > 1.0.3 (#​883)

v2.1.84

Compare Source

  • Use GitHub mirror instead of VideoLAN's for reliability. (#​879)

v2.1.83

Compare Source

  • Fix installing datadog_trace when specifying the version (#​881)

v2.1.82

Compare Source

  • sqlsrv/pdo_sqlsrv: fix installing on PHP 8.0, update msodbcsql on Alpine (#​877)

v2.1.81

Compare Source

  • Upgrade cmark from v0.30.3 to v0.31.0 (#​876)

v2.1.80

Compare Source

  • Install swoole 5.0 in 32-bit systems (#​874)

v2.1.79

Compare Source

  • Remove useless dependency when installing FTP (#​872)

v2.1.78

Compare Source

  • Add support for installing FTP with SSL on PHP 8.2+ (#​871)

v2.1.77

Compare Source

  • spx: upgrade to 0.4.15 (support for PHP 5.5 and PHP 8.3) (#​867)

v2.1.76

Compare Source

  • solr: add support for PHP 8.3, fix installing on PHP 7.0/7.1/7.2/7.3 (#​863)

v2.1.75

Compare Source

  • ds: add support for PHP 8.3, fix installing on PHP 7.3 (#​860)

v2.1.74

Compare Source

  • Fix installing jsonpath on php 7.4 (#​858)

v2.1.73

Compare Source

  • Add support for openswoole on PHP 8.3 (#​832)

v2.1.72

Compare Source

  • Add support for imagick on Alpine 3.19 (#​856)

v2.1.71

Compare Source

  • Fix installing libssl on Alpine 3.19 (#​852)

v2.1.70

Compare Source

  • Label org.opencontainers.image.source (#​848)

v2.1.69

Compare Source

  • Fix segmentation fault of swoole on PHP 8.3 (#​847)

v2.1.68

Compare Source

  • Install stable xdebug version on PHP 8.3 (#​844)

v2.1.67

Compare Source

v2.1.66

Compare Source

  • Support Xdebug on PHP 8.3 (#​837)

v2.1.65

Compare Source

  • Fix installing mongodb on PHP 7.2/7.3, configure mongodb on PHP 7.4+ (#​835)

v2.1.64

Compare Source

  • Allow specifying stability when wanting a compatible PECL version (#​833)

v2.1.63

Compare Source

  • Fix installing openswoole on PHP 7.4/8.0 (#​831)

v2.1.62

Compare Source

  • [Alpine] Update libgearman from v1.1.20 to v1.1.21 (#​829)

v2.1.61

Compare Source

  • Fix installing protobuf on PHP 7.x (#​827)

v2.1.60

Compare Source

  • Only install msodbcsql18 on debian 12 Bookworm (#​824)

v2.1.59

Compare Source

  • Fix installing pdo_sqlsrv/sqlsrv on Debian Bookworm (#​820)

v2.1.58

Compare Source

  • Install the latest version of rust, cargo, and datadog_trace (#​814)

v2.1.57

Compare Source

  • Add support for PHP 8.3 RC

v2.1.56

Compare Source

  • Add support for predefined processor count (#​809)

v2.1.55

Compare Source

  • Add support for memcached on Debian Bookworm (#​807)

v2.1.54

Compare Source

  • Install snuffleupagus 0.10.0 by default (#​806)

v2.1.53

Compare Source

  • Add support for Tensor on PHP up to 8.2 (#​805)

v2.1.52

Compare Source

  • Fix installing redis on PHP 7.0/7.1, add support for msgpack/lz4 to redis on PHP 7.2+ (#​801)

v2.1.51

Compare Source

  • MS ODBC Sql on Alpine: support arm64, install 18.3.1.1-1 instead of 18.0.1.1-1 (#​799)

v2.1.50

Compare Source

  • Don't force the latest version of grpc and protobuf (#​798)
nodejs/node (node)

v18.19.1: 2024-02-14, Version 18.19.1 'Hydrogen' (LTS), @​RafaelGSS prepared by @​marco-ippolito

Compare Source

Notable changes

This is a security release.

Notable changes
  • CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
  • CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
  • CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
  • CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
  • undici version 5.28.3
  • npm version 10.2.4
Commits

v18.19.0: 2023-11-29, Version 18.19.0 'Hydrogen' (LTS), @​targos

Compare Source

Notable Changes
npm updated to v10

After two months of baking time in Node.js 20, npm 10 is backported, so that all
release lines include a supported version of npm. This release includes npm v10.2.3.

Refer to nodejs/Release#884 for the plan to land npm 10.

ESM and customization hook changes
Leverage loaders when resolving subsequent loaders

Loaders now apply to subsequent loaders, for example: --experimental-loader ts-node --experimental-loader loader-written-in-typescript.

Contributed by Maël Nison in #​43772.

New node:module API register for module customization hooks; new initialize hook

There is a new API register available on node:module to specify a file that exports module customization hooks, and pass data to the hooks, and establish communication channels with them. The “define the file with the hooks” part was previously handled by a flag --experimental-loader, but when the hooks moved into a dedicated thread in 20.0.0 there was a need to provide a way to communicate between the main (application) thread and the hooks thread. This can now be done by calling register from the main thread and passing data, including MessageChannel instances.

We encourage users to migrate to an approach that uses --import with register, such as:

node --import ./file-that-calls-register.js ./app.js

Using --import ensures that the customization hooks are registered before any application code runs, even the entry point.

Contributed by João Lenon and Jacob Smith in #​46826, Izaak Schroeder and Jacob Smith in #​48842 and #​48559.

import.meta.resolve unflagged

In ES modules, import.meta.resolve(specifier)
can be used to get an absolute URL string to which specifier resolves, similar
to require.resolve in CommonJS. This aligns Node.js with browsers and other server-side runtimes.

Contributed by Guy Bedford in #​49028.

--experimental-default-type flag to flip module defaults

The new flag --experimental-default-type can be used to flip the default
module system used by Node.js. Input that is already explicitly defined as ES
modules or CommonJS, such as by a package.json "type" field or .mjs/.cjs
file extension or the --input-type flag, is unaffected. What is currently
implicitly CommonJS would instead be interpreted as ES modules under
--experimental-default-type=module:

  • String input provided via --eval or STDIN, if --input-type is unspecified.

  • Files ending in .js or with no extension, if there is no package.json file
    present in the same folder or any parent folder.

  • Files ending in .js or with no extension, if the nearest parent
    package.json field lacks a type field; unless the folder is inside a
    node_modules folder.

In addition, extensionless files are interpreted as Wasm if
--experimental-wasm-modules is passed and the file contains the "magic bytes"
Wasm header.

Contributed by Geoffrey Booth in #​49869.

Other ESM-related changes
  • [ed2d46f4cc] - doc: move and rename loaders section (Geoffrey Booth) #​49261
  • [92734d4480] - esm: use import attributes instead of import assertions (Antoine du Hamel) #​50140
  • [e96f7ef881] - (SEMVER-MINOR) vm: use import attributes instead of import assertions (Antoine du Hamel) #​50141
Test runner changes

Many changes to the built-in test runner have been backported. This includes
the following additions:

Other notable changes
  • [0c4a84e8e9] - (SEMVER-MINOR) deps: update uvwasi to 0.0.19 (Node.js GitHub Bot) #​49908
  • [fae60c5841] - stream: use bitmap in readable state (Benjamin Gruenbaum) #​49745
  • [17246be158] - (SEMVER-MINOR) lib: add api to detect whether source-maps are enabled (翠 / green) #​46391
  • [2e9f7284a1] - (SEMVER-MINOR) lib: add tracing channel to diagnostics_channel (Stephen Belanger) #​44943
  • [cc7bf1f641] - (SEMVER-MINOR) src: add cjs_module_lexer_version base64_version (Jithil P Ponnan) #​45629
  • [b5d16cd8f0] - (SEMVER-MINOR) tls: add ALPNCallback server option for dynamic ALPN negotiation (Tim Perry) #​45190
Commits

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@gsanchietti gsanchietti requested a review from Tbaile October 2, 2023 07:01
@renovate renovate bot force-pushed the renovate/docker-dependencies branch from 50f6879 to 9b30c3c Compare November 1, 2023 00:59
@renovate renovate bot force-pushed the renovate/docker-dependencies branch from 9b30c3c to 69f9c98 Compare December 1, 2023 01:49
@renovate renovate bot force-pushed the renovate/docker-dependencies branch from 69f9c98 to eee29b4 Compare January 1, 2024 00:22
@renovate renovate bot force-pushed the renovate/docker-dependencies branch from eee29b4 to 73c11be Compare February 1, 2024 00:52
@renovate renovate bot force-pushed the renovate/docker-dependencies branch from 73c11be to 63434fb Compare March 1, 2024 01:54
@renovate renovate bot changed the title chore(deps): update docker dependencies chore(deps): update docker dependencies - autoclosed Mar 22, 2024
@renovate renovate bot closed this Mar 22, 2024
@renovate renovate bot deleted the renovate/docker-dependencies branch March 22, 2024 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant