FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

tools: disable automated libuv updates by RafaelGSS · Pull Request #51775 · nodejs/node · GitHub

/ node Public

tools: disable automated libuv updates - #51775

Merged
nodejs-github-bot merged 1 commit into
nodejs:mainfrom
RafaelGSS:disable-libuv-update
Feb 24, 2024
Merged

tools: disable automated libuv updates#51775
nodejs-github-bot merged 1 commit into
nodejs:mainfrom
RafaelGSS:disable-libuv-update

Conversation

Copy link
Copy Markdown
Member

Because the previous security release modified the bundled version of libuv, we cannot automatically update libuv without potentially undoing those changes.

cc: @nodejs/security-wg

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/actions
  • @nodejs/security-wg

nodejs-github-bot added the meta Issues and PRs related to the general management of the project. label Feb 15, 2024
RafaelGSS force-pushed the disable-libuv-update branch from 6359c62 to 9f8e928 Compare February 15, 2024 20:38
Comment thread .github/workflows/tools.yml Outdated

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Can we just comment this out instead of removing, I assume we will want to add it back at some point?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

The other question is if we could have the update apply a patch required to re-apply the changes?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

I don't know, technically we could, but we'll need to review it carefully all libuv automatic updates + resolve conflicts.

RafaelGSS force-pushed the disable-libuv-update branch from 9f8e928 to a2fba64 Compare February 19, 2024 14:18
RafaelGSS requested a review from mhdawson February 19, 2024 14:19
Comment thread .github/workflows/tools.yml Outdated
Because the previous security release modified the bundled version of
libuv, we cannot automatically update libuv without potentially undoing
those changes.
RafaelGSS force-pushed the disable-libuv-update branch from a2fba64 to 847748d Compare February 19, 2024 21:16

Copy link
Copy Markdown
Member Author

ping @nodejs/actions @nodejs/security-wg

UlisesGascon left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

LGTM

RafaelGSS added the commit-queue Add this label to land a pull request using GitHub Actions. label Feb 24, 2024
nodejs-github-bot removed the commit-queue Add this label to land a pull request using GitHub Actions. label Feb 24, 2024
nodejs-github-bot merged commit a492646 into nodejs:main Feb 24, 2024

Copy link
Copy Markdown
Collaborator

Landed in a492646

marco-ippolito pushed a commit that referenced this pull request Feb 26, 2024
Because the previous security release modified the bundled version of
libuv, we cannot automatically update libuv without potentially undoing
those changes.

PR-URL: #51775
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
marco-ippolito pushed a commit that referenced this pull request Feb 27, 2024
Because the previous security release modified the bundled version of
libuv, we cannot automatically update libuv without potentially undoing
those changes.

PR-URL: #51775
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
marco-ippolito mentioned this pull request Mar 1, 2024
richardlau pushed a commit that referenced this pull request Mar 25, 2024
Because the previous security release modified the bundled version of
libuv, we cannot automatically update libuv without potentially undoing
those changes.

PR-URL: #51775
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
richardlau mentioned this pull request Mar 25, 2024
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

meta Issues and PRs related to the general management of the project.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants


Back | FazBrowse Home | New Git URL