Skip to content

Conversation

@rvagg
Copy link
Member

@rvaggrvagg commented Dec 8, 2015

Since others seem to be busy with Node Interactive and this is long overdue, here's a proposal for release maybe as soon as tomorrow.

Commits list could do with some review, is there anything in here that shouldn't be in v5.x?



Commits that are on master since v5.1.0 that are not labelled with semver-major but are not included in v5.x are:

I think we need a label for these to say they shouldn't be cherry-picked to v5.x.


@rvagg
Copy link
MemberAuthor

rvagg commented Dec 8, 2015

@nodejs/release I've just made a dont-land-on-v5.x label and applied it to a bunch of V8 and release notes commits so this is now even more useful for finding commits that need to be cherry-picked to v5.x:

branch-diff v5.x master --start-ref=v5.1.0 --exclude-label=semver-major,dont-land-on-v5.x 

As of now it only shows commits that don't have PR-URL in them, there are 4. Let's try and remember to put PR-URL into release commits and Working on .. commits too and we'll make it even cleaner.

@mscdexmscdex added the meta Issues and PRs related to the general management of the project. label Dec 8, 2015
@bnoordhuis
Copy link
Member

I would either back out 1f0e8dc or add 49440b7. #4021 bakes the tick processor script into the binary.

@rvagg
Copy link
MemberAuthor

rvagg commented Dec 8, 2015

thanks @bnoordhuis, great to see that land. I've included it now and assume the changes to install.py invalidate the work in 1f0e8dc so I've left that in place.

@rvagg
Copy link
MemberAuthor

rvagg commented Dec 8, 2015

@rvagg
Copy link
MemberAuthor

rvagg commented Dec 8, 2015

Here's my Notable changes section:

  • build:
    • Add support for Intel's VTune JIT profiling when compiled with --enable-vtune-profiling. For more information about VTune, see https://software.intel.com/en-us/node/544211. (Chunyang Dai) #3785.
    • Properly enable V8 snapshots by default. Due to a configuration error, snapshots have been kept off by default when the intention is for the feature to be enabled. (Fedor Indutny) #3962.
  • crypto:
    • Generate a public key when explicitly setting a private key for ECDH (Elliptic Curve Diffie-Hellman) exchange objects (created via crypto.createECDH(curve_name)). Also deprecated the setPublicKey() method for ECDH objects as this can lead to an inconsistent state. The validity of the keypair is now checked when setting a private key. (Michael Ruddy) #3511.
    • Update root certificates from the current list stored maintained by Mozilla NSS. (Ben Noordhuis) #3951.
  • tools: Include a tick processor in core, exposed via the --prof-process commandline argument which can be used to process V8 profiling output files generated when using the --prof commandline argument. (Matt Loring) #3032, #4021.

Please review @cdai2, @indutny, @mruddy, @bnoordhuis, @matthewloring

CHANGELOG.md Outdated

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What you have is good/usable. I'd say it like the following (but, no big deal if you want to use what you have):

Simplifies using ECDH (Elliptic Curve Diffie-Hellman) objects with private keys that are not dynamically generated via generateKeys(). The public key is now computed when explicitly setting a private key. Added validity checks to reduce the possibility of computing weak or invalid shared secrets. Also, deprecated the setPublicKey() method for ECDH objects as its usage is unnecessary and can lead to inconsistent state. (Michael Ruddy) #3511.

Copy link
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks @mruddy, that's perfect so I'm going with your wording

@matthewloring
Copy link

My only note would have been to remove the link to #3032 which was subsumed by #4021 but it seems that's already been done in the latest revision. The tools section looks good to me.

@bnoordhuis
Copy link
Member

LGTM

@rvaggrvaggforce-pushed the v5.2.0-proposal branch 2 times, most recently from 7782aac to 275243bCompareDecember 9, 2015 02:41
@rvagg
Copy link
MemberAuthor

rvagg commented Dec 9, 2015

Added to crypto:

@rvagg
Copy link
MemberAuthor

rvagg commented Dec 9, 2015

CI @ https://ci.nodejs.org/job/node-test-commit/1395/
Linux CI re-run @ https://ci.nodejs.org/job/node-test-commit-linux/1466/
Single windows failure is known flaky and currently being addressed

Building @ https://ci.nodejs.org/job/iojs+release/319/, will move on to some further smoke testing before releasing

Notable changes: * build: - Add support for Intel's VTune JIT profiling when compiled with --enable-vtune-profiling. For more information about VTune, see https://software.intel.com/en-us/node/544211. (Chunyang Dai) #3785. - Properly enable V8 snapshots by default. Due to a configuration error, snapshots have been kept off by default when the intention is for the feature to be enabled. (Fedor Indutny) #3962. * crypto: - Simplify use of ECDH (Elliptic Curve Diffie-Hellman) objects (created via crypto.createECDH(curve_name)) with private keys that are not dynamically generated via generateKeys(). The public key is now computed when explicitly setting a private key. Added validity checks to reduce the possibility of computing weak or invalid shared secrets. Also, deprecated the setPublicKey() method for ECDH objects as its usage is unnecessary and can lead to inconsistent state. (Michael Ruddy) #3511. - Update root certificates from the current list stored maintained by Mozilla NSS. (Ben Noordhuis) #3951. - Multiple CA certificates can now be passed with the ca option to TLS methods as an array of strings or in a single new-line separated string. (Ben Noordhuis) #4099 * tools: Include a tick processor in core, exposed via the --prof-process command-line argument which can be used to process V8 profiling output files generated when using the --prof command-line argument. (Matt Loring) #4021. PR-URL: #4181
@rvagg
Copy link
MemberAuthor

rvagg commented Dec 9, 2015

a couple of very minor typos in the changelog and commit message, not in a hurry so rebuilding, will release as soon as it's done, tests are all 👍

@rvaggrvagg merged commit 65b86c0 into v5.xDec 9, 2015
rvagg added a commit that referenced this pull request Dec 9, 2015
rvagg added a commit that referenced this pull request Dec 9, 2015
Notable changes: * build: - Add support for Intel's VTune JIT profiling when compiled with --enable-vtune-profiling. For more information about VTune, see https://software.intel.com/en-us/node/544211. (Chunyang Dai) #3785. - Properly enable V8 snapshots by default. Due to a configuration error, snapshots have been kept off by default when the intention is for the feature to be enabled. (Fedor Indutny) #3962. * crypto: - Simplify use of ECDH (Elliptic Curve Diffie-Hellman) objects (created via crypto.createECDH(curve_name)) with private keys that are not dynamically generated via generateKeys(). The public key is now computed when explicitly setting a private key. Added validity checks to reduce the possibility of computing weak or invalid shared secrets. Also, deprecated the setPublicKey() method for ECDH objects as its usage is unnecessary and can lead to inconsistent state. (Michael Ruddy) #3511. - Update root certificates from the current list stored maintained by Mozilla NSS. (Ben Noordhuis) #3951. - Multiple CA certificates can now be passed with the ca option to TLS methods as an array of strings or in a single new-line separated string. (Ben Noordhuis) #4099 * tools: Include a tick processor in core, exposed via the --prof-process command-line argument which can be used to process V8 profiling output files generated when using the --prof command-line argument. (Matt Loring) #4021. PR-URL: #4181
@rvaggrvagg deleted the v5.2.0-proposal branch December 9, 2015 05:27
@rvagg
Copy link
MemberAuthor

rvagg commented Dec 9, 2015

built, tagged, promoted and announced, http://nodejs.org/en/blog/release/v5.2.0/ & https://nodejs.org/download/release/v5.2.0/, thanks all, on to v5.2.1

Starefossen pushed a commit to Starefossen/official-images that referenced this pull request Dec 9, 2015
Related: nodejs/node#4181 Related: nodejs/docker-node#76 Signed-off-by: Hans Kristian Flaatten <[email protected]>
@jasnelljasnell mentioned this pull request Dec 17, 2015
@rvaggrvagg mentioned this pull request Dec 23, 2015
pierreozoux pushed a commit to pierreozoux/official-images that referenced this pull request Jan 7, 2016
Related: nodejs/node#4181 Related: nodejs/docker-node#76 Signed-off-by: Hans Kristian Flaatten <[email protected]>
scovetta pushed a commit to scovetta/node that referenced this pull request Apr 2, 2016
Notable changes: * build: - Add support for Intel's VTune JIT profiling when compiled with --enable-vtune-profiling. For more information about VTune, see https://software.intel.com/en-us/node/544211. (Chunyang Dai) nodejs#3785. - Properly enable V8 snapshots by default. Due to a configuration error, snapshots have been kept off by default when the intention is for the feature to be enabled. (Fedor Indutny) nodejs#3962. * crypto: - Simplify use of ECDH (Elliptic Curve Diffie-Hellman) objects (created via crypto.createECDH(curve_name)) with private keys that are not dynamically generated via generateKeys(). The public key is now computed when explicitly setting a private key. Added validity checks to reduce the possibility of computing weak or invalid shared secrets. Also, deprecated the setPublicKey() method for ECDH objects as its usage is unnecessary and can lead to inconsistent state. (Michael Ruddy) nodejs#3511. - Update root certificates from the current list stored maintained by Mozilla NSS. (Ben Noordhuis) nodejs#3951. - Multiple CA certificates can now be passed with the ca option to TLS methods as an array of strings or in a single new-line separated string. (Ben Noordhuis) nodejs#4099 * tools: Include a tick processor in core, exposed via the --prof-process command-line argument which can be used to process V8 profiling output files generated when using the --prof command-line argument. (Matt Loring) nodejs#4021. PR-URL: nodejs#4181
RichardScothern pushed a commit to RichardScothern/official-images that referenced this pull request Jun 14, 2016
Related: nodejs/node#4181 Related: nodejs/docker-node#76 Signed-off-by: Hans Kristian Flaatten <[email protected]>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

metaIssues and PRs related to the general management of the project.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants

@rvagg@bnoordhuis@matthewloring@mruddy@mscdex