Skip to content

Conversation

@sandeepkarambelkar
Copy link
Contributor

@sandeepkarambelkar sandeepkarambelkar commented Dec 24, 2025

Merge Checklist

All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)

  • The toolchain has been rebuilt successfully (or no changes were made to it)
  • The toolchain/worker package manifests are up-to-date
  • Any updated packages successfully build (or no packages were changed)
  • Packages depending on static components modified in this PR (Golang, *-static subpackages, etc.) have had their Release tag incremented.
  • Package tests (%check section) have been verified with RUN_CHECK=y for existing SPEC files, or added to new SPEC files
  • All package sources are available
  • cgmanifest files are up-to-date and sorted (./cgmanifest.json, ./toolkit/scripts/toolchain/cgmanifest.json, .github/workflows/cgmanifest.json)
  • LICENSE-MAP files are up-to-date (./LICENSES-AND-NOTICES/SPECS/data/licenses.json, ./LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md, ./LICENSES-AND-NOTICES/SPECS/LICENSE-EXCEPTIONS.PHOTON)
  • All source files have up-to-date hashes in the *.signatures.json files
  • sudo make go-tidy-all and sudo make go-test-coverage pass
  • Documentation has been updated to match any changes to the build system
  • Ready to merge

Summary

Upgrade nodejs to 24.12.0 and add fix for runtime internationalization support

Change Log
  • nodejs is upgraded to 24.12.1
Does this affect the toolchain?

NO

Test Methodology

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades Node.js from version 20.14.0 to 24.11.1 and adds runtime internationalization (i18n) support by incorporating ICU data files. The upgrade removes multiple CVE patches that are resolved in the new version.

Key changes:

Reviewed changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated 5 comments.

File Description
SPECS/nodejs/nodejs.spec Main spec file upgraded to version 24.11.1-1, adds ICU support macros, new full-i18n subpackage, downloads ICU data files, and removes resolved CVE patches
SPECS/nodejs/nodejs.signatures.json Updates signatures for the new Node.js tarball and adds signatures for the new ICU data files and test script
SPECS/nodejs/btest402.js New test script to validate ECMAScript 402 internationalization support
SPECS/nodejs/CVE-*.patch Multiple CVE patch files removed as they are resolved in Node.js 24.11.1
Comments suppressed due to low confidence (1)

SPECS/nodejs/nodejs.spec:199

  • Multiple changelog entries have dates in the future (2025), including entries dated November 2025, May 2025, March 2025, and February 2025. These dates should be corrected to 2024 or the actual dates when these changes were made. This affects lines 180, 183, 186, 189, 192, 196, and 199.
* Fri Nov 07 2025 Azure Linux Security Servicing Account <azurelinux-security@microsoft.com> - 20.14.0-10
- Patch for CVE-2025-5222

* Tue May 27 2025 Aninda Pradhan <v-anipradhan@microsoft.com> - 20.14.0-9
- Patch CVE-2025-23165, CVE-2025-23166

* Wed May 21 2025 Aninda Pradhan <v-anipradhan@microsoft.com> - 20.14.0-8
- Patch CVE-2025-47279

* Mon Mar 10 2025 Sandeep Karambelkar <skarambelkar@microsoft.com> - 20.14.0-7
- Patch CVE-2025-27516

* Wed Feb 12 2025 Kevin Lockwood <v-klockwood@microsoft.com> - 20.14.0-6
- Patch CVE-2020-28493
- Patch CVE-2024-34064

* Tue Feb 11 2025 Kanishk Bansal <kanbansal@microsoft.com> - 20.14.0-5
- Patch CVE-2025-22150, CVE-2025-23085, CVE-2024-22020, CVE-2024-22195

* Mon Jan 27 2025 Sumedh Sharma <sumsharma@microsoft.com> - 20.14.0-4

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@sandeepkarambelkar sandeepkarambelkar changed the title Upgrade nodejs to 24.11.1 and add fix for runtime internationalization support Upgrade nodejs to 24.12.0 and add fix for runtime internationalization support Dec 24, 2025
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 13 out of 13 changed files in this pull request and generated 2 comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

sandeepkarambelkar and others added 2 commits December 24, 2025 16:24
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
sandeepkarambelkar and others added 2 commits December 24, 2025 16:27
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@sandeepkarambelkar
Copy link
Contributor Author

sandeepkarambelkar commented Dec 24, 2025

Buddy Build after integrating review comments from github copilot.

https://dev.azure.com/mariner-org/mariner/_build/results?buildId=1011912&view=results

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 13 out of 13 changed files in this pull request and generated 7 comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

for ( var n=0; n<locs.length; n++ ) {
var loc = locs[n];
var lsummary = summary[loc] = {};

Copy link

Copilot AI Dec 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trailing whitespace detected on this line. This should be removed to maintain code cleanliness.

Suggested change

Copilot uses AI. Check for mistakes.
console.log("----------------");
console.log( "SUMMARY:" + stxt );
}

Copy link

Copilot AI Dec 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trailing whitespace detected on this line. This should be removed to maintain code cleanliness.

Suggested change

Copilot uses AI. Check for mistakes.
console = { log: print };
console.log("Now you have console.log.");
}

Copy link

Copilot AI Dec 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trailing whitespace detected on this line. This should be removed to maintain code cleanliness.

Copilot uses AI. Check for mistakes.
var stxt = "";
if( summary.haveIntl ) {
console.log("* You have the 'Intl' object. Congratulations! You have the possibility of being EcmaScript 402 compliant.");
stxt += "Have Intl, ";
Copy link

Copilot AI Dec 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trailing whitespace detected on this line. This should be removed to maintain code cleanliness.

Copilot uses AI. Check for mistakes.

%check
# Make sure i18n support is working
NODE_PATH=%{buildroot}%{_prefix}/lib/node_modules:%{buildroot}%{_prefix}/lib/node_modules/npm/node_modules LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}/%{_bindir}/node --icu-data-dir=%{buildroot}%{icudatadir} %{SOURCE3}
Copy link

Copilot AI Dec 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The test command in the check section has a very long line that would benefit from being split across multiple lines for better readability. Consider using line continuation (backslash) to break this command into multiple lines.

Copilot uses AI. Check for mistakes.
// for a complete test, see http://test262.ecmascript.org
//
// Usage: node btest402.js

Copy link

Copilot AI Dec 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trailing whitespace detected on this line. This should be removed to maintain code cleanliness.

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3.0-dev PRs Destined for AzureLinux 3.0 Packaging

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants