lang/node: Update to v22.22.0
Fixes
CVE-2025-59465 add TLSSocket default error handler
CVE-2025-55132 disable futimes when permission model is enabled
CVE-2025-55130 require full read and write to symlink APIs
CVE-2025-59466 rethrow stack overflow exceptions in async_hooks
CVE-2025-55131 refactor unsafe buffer creation to remove zero-fill toggle
CVE-2026-21637 route callback exceptions through error handlers
In addition, use the port version of textproc/simdutf.
lang/node: Update to v22.22.0
CVE-2025-59465 add TLSSocket default error handler
CVE-2025-55132 disable futimes when permission model is enabled
CVE-2025-55130 require full read and write to symlink APIs
CVE-2025-59466 rethrow stack overflow exceptions in async_hooks
CVE-2025-55131 refactor unsafe buffer creation to remove zero-fill toggle
CVE-2026-21637 route callback exceptions through error handlers
fine with sthen@
Tentative fix for ffmpeg on mips64
Avoid building code that clang rejects:
:src/libavcodec/mips/cabac.h:160:77: error: instruction requires a CPU feature not currently enabled
: 160 | PTR_SUBU "%[tmp1], %[c_low], %[tmp1] \n\t"
: | ^
:<inline asm>:13:2: note: instantiated into assembly here
: 13 | movz $15, $13, $24
: | ^
A smarter approach is left as an exercise for the reader.
Disable build on aarch64. The JIT isn't supported on it.
ok kurt@ who tested building it, however this segfaults.
Leave PR link in comment about the ongoing work on a fix.
py-lockfile tweaks:
- drop unneeded RDEP on py-pbr
- fix dash-separated fields in setup.cfg (deprecation warning)
- note in DESCR/COMMENT that this is deprecated (since a looong time) and
that 'fasteners' is an alternative