feat(deps): update dependency node to v18.18.2

This MR contains the following updates:

Package	Update	Change
node (source)	patch	18.18.0 -> 18.18.2

---

Release Notes

nodejs/node (node)

v18.18.2: 2023-10-13, Version 18.18.2 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

• CVE-2023-44487: nghttp2 Security Release (High)
• CVE-2023-45143: undici Security Release (High)
• CVE-2023-38552: Integrity checks according to policies can be circumvented (Medium)
• CVE-2023-39333: Code injection via WebAssembly export names (Low)

More detailed information on each of the vulnerabilities can be found in October 2023 Security Releases blog post.

Commits

• [55028468db] - deps: update undici to v5.26.3 (Matteo Collina) #​50153
• [a792bbc515] - deps: update nghttp2 to 1.57.0 (James M Snell) #​50121
• [f6444defa4] - deps: update nghttp2 to 1.56.0 (Node.js GitHub Bot) #​49582
• [7e9b08dfd4] - deps: update nghttp2 to 1.55.1 (Node.js GitHub Bot) #​48790
• [85672c153f] - deps: update nghttp2 to 1.55.0 (Node.js GitHub Bot) #​48746
• [300a902422] - deps: update nghttp2 to 1.53.0 (Node.js GitHub Bot) #​47997
• [7d83ed0bf6] - Revert "deps: update nghttp2 to 1.55.0" (Richard Lau) #​50151
• [1193ca5fdb] - lib: let deps require node prefixed modules (Matthew Aitken) #​50047
• [eaf9083cf1] - module: fix code injection through export names (Tobias Nießen) nodejs-private/node-private#461
• [1c538938cc] - policy: use tamper-proof integrity check function (Tobias Nießen) nodejs-private/node-private#462

v18.18.1: 2023-10-10, Version 18.18.1 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release addresses some regressions that appeared in Node.js 18.18.0:

• (Windows) FS can not handle certain characters in file name #​48673
• 18 and 20 node images give error - Text file busy (after re-build images) nodejs/docker-node#1968
• libuv update in 18.18.0 breaks webpack's thread-loader #​49911

The libuv 1.45.0 and 1.46.0 updates that were released in Node.js 18.18.0 have been temporarily reverted.

Commits

• [3e3a75cc46] - Revert "build: sync libuv header change" (Richard Lau) #​50036
• [14ece2c479] - Revert "deps: upgrade to libuv 1.45.0" (Richard Lau) #​50036
• [022352acbe] - Revert "deps: upgrade to libuv 1.46.0" (Richard Lau) #​50036
• [d9f138189c] - Revert "deps: add missing thread-common.c in uv.gyp" (Richard Lau) #​50036
• [7a3e1ffbb8] - fs: make sure to write entire buffer (Robert Nagy) #​49211
• [04cba95a67] - test: add tmpdir.resolve() (Livia Medeiros) #​49079

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.