Skip to content

Conversation

@MylesBorins
Copy link
Contributor

2019-12-17, Version 12.14.0 'Erbium' (LTS), @MylesBorins

This is a security release.

This release includes a single commit, an update to npm to 6.13.4.

For more details about the vulnerability please consult the npm blog:

https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli

Notable changes

  • deps: update npm to 6.13.4 #30904

Commits

PR-URL: #30904 Reviewed-By: Ruben Bridgewater <[email protected]> Reviewed-By: Rich Trott <[email protected]> Reviewed-By: Jiawen Geng <[email protected]> Reviewed-By: Michael Dawson <[email protected]> Reviewed-By: Daijiro Wachi <[email protected]>
@MylesBorins
Copy link
ContributorAuthor

@nodejs-github-botnodejs-github-bot added meta Issues and PRs related to the general management of the project. npm Issues and PRs related to the npm client dependency or the npm registry. v12.x labels Dec 13, 2019
MylesBorins added a commit that referenced this pull request Dec 13, 2019
This is a security release. This release includes a single commit, an update to npm to 6.13.4. For more details about the vulnerability please consult the npm blog: https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli Notable Changes: * deps: update npm to 6.13.4 - #30904 PR-URL: #30938
@richardlau
Copy link
Member

Is the CI expected to pass without recent commits for Windows by @joaocgreis?

@joaocgreis
Copy link
Member

CI needs 8dd5eec to pass.

Ref: #30937 (comment)

PR-URL: #30724 Refs: nodejs/build#1996 Reviewed-By: Rod Vagg <[email protected]> Reviewed-By: Sam Roberts <[email protected]> Reviewed-By: Rich Trott <[email protected]>
MylesBorins added a commit that referenced this pull request Dec 16, 2019
This is a security release. This release includes a single commit, an update to npm to 6.13.4. For more details about the vulnerability please consult the npm blog: https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli Notable Changes: * deps: update npm to 6.13.4 - #30904 PR-URL: #30938
@nodejs-github-bot
Copy link
Collaborator

nodejs-github-bot commented Dec 16, 2019

This is a security release. For more details about the vulnerability please consult the npm blog: https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli Notable Changes: * deps: update npm to 6.13.4 #30904 PR-URL: #30938
@nodejs-github-bot

This comment has been minimized.

@nodejs-github-bot

This comment has been minimized.

@nodejs-github-bot
Copy link
Collaborator

nodejs-github-bot commented Dec 17, 2019

@nodejsnodejs deleted a comment from nodejs-github-botDec 17, 2019
@MylesBorinsMylesBorins added the author ready PRs that have at least one approval, no pending requests for changes, and a CI started. label Dec 17, 2019
@MylesBorins
Copy link
ContributorAuthor

CI is green and CITGM failures look to be unrelated to this release.

MylesBorins added a commit that referenced this pull request Dec 17, 2019
@MylesBorinsMylesBorins merged commit f88d466 into v12.xDec 17, 2019
MylesBorins added a commit that referenced this pull request Dec 17, 2019
This is a security release. For more details about the vulnerability please consult the npm blog: https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli Notable Changes: * deps: update npm to 6.13.4 #30904 PR-URL: #30938
MylesBorins added a commit to nodejs/nodejs.org that referenced this pull request Dec 17, 2019
@devsnekdevsnek deleted the v12.14.0-proposal branch February 19, 2020 07:55
@targostargos added release Issues and PRs related to Node.js releases. and removed author ready PRs that have at least one approval, no pending requests for changes, and a CI started. meta Issues and PRs related to the general management of the project. npm Issues and PRs related to the npm client dependency or the npm registry. labels Jun 6, 2021
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

releaseIssues and PRs related to Node.js releases.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

12 participants

@MylesBorins@richardlau@joaocgreis@nodejs-github-bot@Trott@cjihrig@gengjiawen@BethGriggs@BridgeAR@targos@ruyadorno