Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1675424960255540"
MIME-Version: 1.0
Date: Fri, 3 Feb 2023 11:49:20 +0000
From: "Adam Ciarcinski" <adam@netbsd.org>
Subject: CVS commit: pkgsrc/lang/nodejs18
To: pkgsrc-changes@NetBSD.org
Reply-To: adam@netbsd.org
Message-Id: <20230203114920.27EC5FA90@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

This is a multi-part message in MIME format.

--_----------=_1675424960255540
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"

Module Name:	pkgsrc
Committed By:	adam
Date:		Fri Feb  3 11:49:20 UTC 2023

Modified Files:
	pkgsrc/lang/nodejs18: Makefile distinfo

Log Message:
nodejs18: updated to 18.14.0

Version 18.14.0 'Hydrogen' (LTS)

Notable changes

Updated npm to 9.3.1

Based on the list of guidelines we've established on integrating npm and node, here is a grouped list of the breaking changes with the reasoning as to why they fit within the guidelines linked above. Note that all the breaking changes were made in 9.0.0. All subsequent minor and patch releases after npm@9.0.0 do not contain any breaking changes.

Engines

Explanation: the node engines supported by npm@9 make it safe to allow npm@9 as the default in any LTS version of 14 or 16, as well as anything later than or including 18.0.0
npm is now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0
Filesystem

Explanation: when run as root previous versions of npm attempted to manage file ownership automatically on the user's behalf. this behavior was problematic in many cases and has been removed in favor of allowing users to manage their own filesystem permissions
npm will no longer attempt to modify ownership of files it creates.
Auth

Explanation: any errors thrown from users having unsupported auth configurations will show npm config fix in the remediation instructions, which will allow the user to automatically have their auth config fixed.
The presence of auth related settings that are not scoped to a specific registry found in a config file is no longer supported and will throw errors.
Login

Explanation: the default auth-type has changed and users can opt back into the old behavior with npm config set auth-type=legacy. login and adduser have also been seperated making each command more closely match it's name instead of being aliases for each other.
Legacy auth types sso, saml & legacy have been consolidated into "legacy".
auth-type defaults to "web"
login and adduser are now separate commands that send different data to the registry.
auth-type config values web and legacy only try their respective methods, npm no longer tries them all and waits to see which one doesn't fail.
Tarball Packing

Explanation: previously using multiple ignore/allow lists when packing was an undefined behavior, and now the order of operations is strictly defined when packing a tarball making it easier to follow and should only affect users relying on the previously undefined behavior.
npm pack now follows a strict order of operations when applying ignore rules. If a files array is present in the package.json, then rules in .gitignore and .npmignore files from the root will be ignored.
Display/Debug/Timing Info

Explanation: these changes center around the display of information to the terminal including timing and debug log info. We do not anticipate these changes breaking any existing workflows.
Links generated from git urls will now use HEAD instead of master as the default ref.
timing has been removed as a value for --loglevel.
--timing will show timing information regardless of --loglevel, except when --silent.
When run with the --timing flag, npm now writes timing data to a file alongside the debug log data, respecting the logs-dir option and falling back to <CACHE>/_logs/ dir, instead of directly inside the cache directory.
The timing file data is no longer newline delimited JSON, and instead each run will create a uniquely named <ID>-timing.json file, with the <ID> portion being the same as the debug log.
npm now outputs some json errors on stdout. Previously npm would output all json formatted errors on stderr, making it difficult to parse as the stderr stream usually has logs already written to it.
Config/Command Deprecations or Removals

Explanation: install-links is the only config or command in the list that has an effect on package installs. We fixed a number of issues that came up during prereleases with this change. It will also only be applied to new package trees created without a package-lock.json file. Any install with an existing lock file will not be changed.
Deprecate boolean install flags in favor of --install-strategy.
npm config set will no longer accept deprecated or invalid config options.
install-links config defaults to "true".
node-version config has been removed.
npm-version config has been removed.
npm access subcommands have been renamed.
npm birthday has been removed.
npm set-script has been removed.
npm bin has been removed (use npx or npm exec to execute binaries).


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/nodejs18/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/lang/nodejs18/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_1675424960255540
Content-Disposition: inline
Content-Length: 1692
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/lang/nodejs18/Makefile
diff -u pkgsrc/lang/nodejs18/Makefile:1.3 pkgsrc/lang/nodejs18/Makefile:1.4
--- pkgsrc/lang/nodejs18/Makefile:1.3	Wed Jan 11 17:33:48 2023
+++ pkgsrc/lang/nodejs18/Makefile	Fri Feb  3 11:49:19 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.3 2023/01/11 17:33:48 adam Exp $
+# $NetBSD: Makefile,v 1.4 2023/02/03 11:49:19 adam Exp $
 
-DISTNAME=	node-v18.13.0
+DISTNAME=	node-v18.14.0
 EXTRACT_SUFX=	.tar.xz
 
 USE_LANGUAGES=	c gnu++17

Index: pkgsrc/lang/nodejs18/distinfo
diff -u pkgsrc/lang/nodejs18/distinfo:1.2 pkgsrc/lang/nodejs18/distinfo:1.3
--- pkgsrc/lang/nodejs18/distinfo:1.2	Wed Jan 11 17:33:48 2023
+++ pkgsrc/lang/nodejs18/distinfo	Fri Feb  3 11:49:19 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.2 2023/01/11 17:33:48 adam Exp $
+$NetBSD: distinfo,v 1.3 2023/02/03 11:49:19 adam Exp $
 
-BLAKE2s (node-v18.13.0.tar.xz) = 68f7495a85d2c6fb61f94dc51940afa6e43bc194f86bc7ca044ef36bf072d90b
-SHA512 (node-v18.13.0.tar.xz) = d32c8e333d8ee7ba24c9420c943a0e57f5a48e734ce7ced210a2977fc274db133bb01ba4f604cc06271357675fde0b6e9b5cd208de4d5202b08e722e9f32e20d
-Size (node-v18.13.0.tar.xz) = 40324048 bytes
+BLAKE2s (node-v18.14.0.tar.xz) = cd283af85d9e9369f974c9bf864d05eaa47b5bdd7eae07e4899af6c4d09d5a95
+SHA512 (node-v18.14.0.tar.xz) = bf1072d17a5ae003310f792b5acf7c36c2f294a802aadbb0977df240e8214344b0d4e9c3ee6fc8351e6249154b4468f1e5db15561168715ae1ecdeb8868b884b
+Size (node-v18.14.0.tar.xz) = 41425240 bytes
 SHA1 (patch-common.gypi) = 80f3645498853b9939167d152365b4fa49528b70
 SHA1 (patch-deps_cares_cares.gyp) = 22b44f2ac59963f694dfe4f4585e08960b3dec32
 SHA1 (patch-deps_uv_common.gypi) = d38a9c8d9e3522f15812aec2f5b1e1e636d4bab3


--_----------=_1675424960255540--