Changelog for npm-10.7.0-1.20.14.0.1.module_el9.4.0+104+aa1fab67.x86_64.rpm :

* Tue Jun 11 2024 Jan Staněk - 1:20.14.0-1- Update to version 20.14.0
* Tue Apr 16 2024 Jan Staněk - 1:20.12.2-2- Backport nghttp2 patch for CVE-2024-28182
* Tue Apr 16 2024 Jan Staněk - 1:20.12.2-1- Rebase to version 20.12.0 Fixes: CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node) Fixes: CVE-2024-25629 (c-ares)
* Tue Mar 05 2024 Lukas Javorsky - 1:20.11.1-1- Rebase to version 20.11.1- Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)- Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)
* Fri Jan 12 2024 Jan Staněk - 1:20.11.0-1- Rebase to version 20.11.0 Resolves: RHEL-21188
* Thu Nov 09 2023 Zuzana Svetlikova - 1:20.9.0-1- Rebase to LTS- Resolves: RHEL-16161
* Wed Oct 18 2023 Zuzana Svetlikova - 1:20.8.1-1- Update node and nghttp- Add fips patch- Fixes CVE-2023-44487 (nghttp)- Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333
* Thu Aug 10 2023 Zuzana Svetlikova - 1:20.5.1-1- Rebase to new security release- Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)- Address CVE-2023-32006, CVE-2023-32559 (medium)- Address CVE-2023-32005, CVE-2023-32003 (low)- Resolves: #2186717- Resolves RHELPLAN-155639
* Thu Jul 27 2023 Zuzana Svetlikova - 1:20.5.0-1- Update to v20.5.0- Remove dtrace support- bcond corepack, so we don\'t provide it by default- Decrease debuginfo verbosity for all arches- Resolves: #2186717- Resolves RHELPLAN-155639
* Wed Jul 12 2023 Jan Staněk - 1:18.16.1-1- Rebase to 18.16.1 Resolves: rhbz#2188292 rhbz#2187683 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590- Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2222285
* Tue May 30 2023 Jan Staněk - 1:18.14.2-3- Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067
* Tue Mar 21 2023 Zuzana Svetlikova - 1:18.14.2-2- Provide simduft- Resolves: #2159389
* Mon Mar 20 2023 Zuzana Svetlikova - 1:18.14.2-1- Rebase to 18.14.2- Resolves: #2159389- Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807- Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920
* Wed Nov 16 2022 Zuzana Svetlikova - 1:18.12.1-1- Rebase + CVEs- Resolves: #2142809- Resolves: #2142830, #2142856
* Sun Oct 09 2022 Zuzana Svetlikova - 1:18.10.0-3- Resolves: #2111861- Add proper sources for undici
* Fri Oct 07 2022 Zuzana Svetlikova - 1:18.10.0-2- Resolves: #2130565- Add missing file
* Thu Oct 06 2022 Zuzana Svetlikova - 1:18.10.0-1- Update to latest release- Resolves: #2130565- Resolves #2111009, #2111861, #2132732
* Fri Aug 26 2022 Zuzana Svetlikova - 1:18.8.0-1- Update to latest release- Resolves: RHBZ#2111009- Provide undici and cjs-module-lexer + wasi-sdk sources- Resolves: RBHZ#2111861
* Mon Aug 08 2022 Zuzana Svetlikova - 1:18.7.0-1- Update to latest release- Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215- Resolves CVE-2022-29244- Resolves: RHBZ#2111009
* Mon Jun 20 2022 Zuzana Svetlikova - 1:18.2.0-2- Disable LTO- Related: #1990096- Build without python3 fixup by default