# changelog

author: adam.majer@suse.de
changelog:
  - Some applications do not like warnings or notices on stderr
    as they use it for other things. So make nodejs-common quiet
    unless we have a fatal error.


author: adam.majer@suse.de
changelog:
  - Rework default versions and include specifics for ALP
  - Default version for SLE-12 is set to be 16 - no further updates
    expected since W&S module is not supported in LTSS
  - 15 SP6 uses nodejs20 as default (PED-4819)


author: Adam Majer <adam.majer@suse.de>
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High) (bsc#1222244)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length
      Obfuscation- (Medium) (bsc#1222384)
    * updated dependencies:
      + llhttp version 9.2.1
      + undici version 5.28.4 (bsc#1222530, bsc#1222603,
      CVE-2024-30260, CVE-2024-30261)
  - node-gyp-addon-gypi.patch: adapted for new unit test layouts
  - fix_ci_tests.patch: add benchmark fix


author: Adam Majer <adam.majer@suse.de>
changelog:
  - Update to 20.13.1:
    * buffer: improve base64 and base64url performance
    * crypto: deprecate implicitly shortened GCM tags
    * events,doc: mark CustomEvent as stable
    * fs: add stacktrace to fs/promises
    * report: add --report-exclude-network option
    * src: add uv_get_available_memory to report and process
    * stream: support typed arrays
    * util: support array of formats in util.styleText
    * v8: implement v8.queryObjects() for memory leak regression testing
    * watch: mark as stable
  - versioned.patch: refreshed
  - cares_sle12_capabilities.patch: SLES12 compatibility


author: Adam Majer <adam.majer@suse.de>
changelog:
  - Update to 20.15.1:
    * Bypass incomplete fix of CVE-2024-27980 (bsc#1227560, CVE-2024-36138)
    * Bypass network import restriction via data URL (bsc#1227554, CVE-2024-22020)
    * fs.lstat bypasses permission model (bsc#1227562, CVE-2024-22018)
    * fs.fchown/fchmod bypasses permission model (bsc#1227561, CVE-2024-36137)
    * Permission model improperly processes UNC paths (bsc#1227563, CVE-2024-37372)
  - Changes in 20.15.0:
    * test_runner: support test plans
    * inspector: introduce the --inspect-wait flag
    * zlib: expose zlib.crc32()
    * cli: allow running wasm in limited vmem with --disable-wasm-trap-handler
  - Changes in 20.14.0
    * src,permission: throw async errors on async APIs
    * test_runner: support forced exit
  - fix_ci_tests.patch, npm_search_paths.patch: refreshed
  - skip_no_console.patch: dropped, upstreamed


author: Adam Majer <adam.majer@suse.de>
changelog:
  - Update to 20.18.1
    * Experimental Network Inspection Support in Node.js
    * Exposes X509_V_FLAG_PARTIAL_CHAIN to tls.createSecureContext
    * New option for vm.createContext() to create a context with a
      freezable globalThis
    * buffer: optimize createFromString
  - Changes in 20.17.0:
    * module: support require()ing synchronous ESM graphs
    * path: add matchesGlob method
    * stream: expose DuplexPair API
  - Changes in 20.16.0:
    * process: add process.getBuiltinModule(id)
    * inspector: fix disable async hooks on Debugger.setAsyncCallStackDepth
    * buffer: add .bytes() method to Blob
  - CVE-2024-21538.patch: fixes regular expression denial of service
    (bsc#1233856, CVE-2024-21538)
  - linker_lto_jobs.patch: refreshed
  - fix_ci_tests.patch: fix dns test vs. older c-ares
  - nodejs.keyring: sync keys with upstream


author: Adam Majer <adam.majer@suse.de>
changelog:
  - Update to 20.18.2:
    * src,loader,permission: throw on InternalWorker use when
      permission model is enabled (bsc#1236251, CVE-2025-23083)
    * src: fix HTTP2 mem leak on premature close and ERR_PROTO
      (bsc#1236250, CVE-2025-23085)
    * deps: Use of Insufficiently Random Values in undici fetch()
      (bsc#1236258, CVE-2025-22150)


author: Adam Majer <adam.majer@suse.de>
changelog:
  - Update to 20.19.0:
    * esm: mark import attributes and JSON module as stable
    * module:
      + require(esm) is now enabled by default
      + Module syntax detection is now enabled by default
    * worker: add postMessageToThread
  - Build with PIE (bsc#1239949)
  - nodejs-libpath.patch: refreshed


author: Adam Majer <adam.majer@suse.de>
changelog:
  - Update to 20.19.2:
    * fix error handling on async crypto operation (bsc#1243218, CVE-2025-23166)
    * add missing call to uv_fs_req_cleanup (bsc#1243217, CVE-2025-23165)
    * update llhttp to 9.2.0 (bsc#1243220, CVE-2025-23167)
  - Changes in 20.19.1:
    * deps: update undici to 6.21.2
    * dns: restore dns query cache ttl
  - fix_ci_tests.patch: refreshed


author: Adam Majer <adam.majer@suse.de>
changelog:
  - Changes in 20.19.5:
    * see https://nodejs.org/en/blog/release/v20.19.5
  - Changes in 20.19.3:
    * crypto: graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable
    * crypto: update root certificates to NSS 3.108
    * deps: update timezone to 2025b
    * doc: add dario-piotrowicz to collaborators


author: Adam Majer <adam.majer@suse.de>
changelog:
  - Update to 20.20.0:
    * deps: updated undici to 6.23.0 (bsc#1256848, CVE-2026-22036)
    * deps: updated bundled c-ares to 1.34.6 (if used)
    * add TLSSocket default error handler (bsc#1256573, CVE-2025-59465)
    * disable futimes when permission model is enabled (bsc#1256571, CVE-2025-55132)
    * require full read and write to symlink APIs (bsc#1256569, CVE-2025-55130)
    * rethrow stack overflow exceptions in async_hooks (bsc#1256574, CVE-2025-59466)
    * refactor unsafe buffer creation to remove zero-fill toggle (bsc#1256570, CVE-2025-55131)
    * route callback exceptions through error handlers (bsc#1256576, CVE-2026-21637)


author: Markéta Machová <mmachova@suse.com>
changelog:
  - Update to 1.15.1
    * This release requires Python 3.10-3.13 and NumPy 1.23.5 or greater.
    * Sparse arrays are now fully functional for 1-D and 2-D arrays. We recommend
      that all new code use sparse arrays instead of sparse matrices and that
      developers start to migrate their existing code from sparse matrix to sparse
      array: migration_to_sparray. Both sparse.linalg and sparse.csgraph
      work with either sparse matrix or sparse array and work internally with
      sparse array.
    * Sparse arrays now provide basic support for n-D arrays in the COO format
      including add, subtract, reshape, transpose, matmul,
      dot, tensordot and others.
    * Preliminary support for free-threaded Python 3.13.
    * New probability distribution features in scipy.stats can be used to improve
      the speed and accuracy of existing continuous distributions and perform new
      probability calculations.
    * Several new features support vectorized calculations with Python Array API
      Standard compatible input
    * scipy.interpolate.AAA adds the AAA algorithm for barycentric rational
      approximation of real or complex functions.
    * scipy.special adds new functions offering improved Legendre function
      implementations with a more consistent interface.
  - Drop upstreamed patches:
    * scipy-pr21063-gcc14.patch
    * scipy-pybind11-2.13.patch


author: Markéta Machová <mmachova@suse.com>
changelog:
  - Update to 1.16.0
    * This release requires Python 3.11-3.13 and NumPy 1.25.2 or greater.
    * Support for free-threaded Python 3.13
    * Improved experimental support for the Python array API standard.
    * scipy.optimize now uses the new Python implementation from the
      PRIMA package for COBYLA.
    * scipy.sparse.coo_array now supports n-D arrays with reshaping, arithmetic and
      reduction operations like sum/mean/min/max. No n-D indexing or
      scipy.sparse.random_array support yet.
    * Nearly all functions in the scipy.linalg namespace that accept array
      arguments now support N-dimensional arrays to be processed as a batch.
    * A new class, scipy.spatial.transform.RigidTransform, provides functionality
      to convert between different representations of rigid transforms in 3-D
      space.
    * A new function scipy.ndimage.vectorized_filter for generic filters that
      take advantage of a vectorized Python callable was added.
  - Drop merged test_hyp2fi-tolerance.patch


author: Markéta Machová <mmachova@suse.com>
changelog:
  - Update to 1.16.3
    * bug-fix release with no new features compared to 1.16.2
  - Add cython32.patch to allow build with Cython 3.2


author: Daniel Garcia <daniel.garcia@suse.com>
changelog:
  - Update to 1.17.1
    * SciPy 1.17.1 is a bug-fix release with no new features compared to
      1.17.0.
  - 1.17.0:
    SciPy 1.17.0 is the culmination of 6 months of hard work. It contains
    many new features, numerous bug-fixes, improved test coverage and better
    documentation. There have been a number of deprecations and API changes
    in this release, which are documented below. All users are encouraged to
    upgrade to this release, as there are a large number of bug-fixes and
    optimizations. Before upgrading, we recommend that users check that
    their own code does not use deprecated SciPy functionality (to do so,
    run your code with python -Wd and check for DeprecationWarning s).
    Our development attention will now shift to bug-fix releases on the
    1.17.x branch, and on adding new features on the main branch.
    This release requires Python 3.11-3.14 and NumPy 1.26.4 or greater.
    [#]# Highlights of this release
    * Many SciPy functions have gained native support for batching of N-dimensional
      array input and additional support for the array API standard. An overall
      summary of the latter is now available in a set of tables.
    * In scipy.sparse, coo_array now supports indexing. This includes integers,
      slices, arrays, np.newaxis, Ellipsis, in 1D, 2D and the relatively
      new nD. In scipy.sparse.linalg, ARPACK and PROPACK rewrites from Fortran77
      to C now empower the use of external pseudorandom number generators, e.g.
      from numpy.
    * In scipy.spatial, transform.Rotation and transform.RigidTransform
      have been extended to support N-D arrays. geometric_slerp now has support
      for extrapolation.
      scipy.stats has gained the matrix t and logistic distributions and many
      performance and accuracy improvements.
    * Initial support for 64-bit integer (ILP64) BLAS and LAPACK libraries has
      been added, including for MKL and Apple Accelerate. Please report any issues with
      ILP64 you encounter.
    * Full changelog can be found here:
      https://docs.scipy.org/doc/scipy/release/1.17.0-notes.html
  - Drop upstream patches:
    * pytest-run-parallel-compat.patch
    * cython32.patch


