Skip to content

[AUTO-CHERRYPICK] [AutoPR- Security] Patch nodejs for CVE-2025-55130 [HIGH] - branch 3.0-dev#15703

Merged
jslobodzian merged 4 commits into3.0-devfrom
cblmargh/cherry-pick-pr-15649-to-3.0-dev
Feb 4, 2026
Merged

[AUTO-CHERRYPICK] [AutoPR- Security] Patch nodejs for CVE-2025-55130 [HIGH] - branch 3.0-dev#15703
jslobodzian merged 4 commits into3.0-devfrom
cblmargh/cherry-pick-pr-15649-to-3.0-dev

Conversation

@CBL-Mariner-Bot
Copy link
Collaborator

This is an auto-generated pull request to cherry-pick commit 6cbccc1 to 3.0-dev. Original PR: #15649
In case of no merge conflicts, the PR is merged without approval because it's an automated cherry-pick of an already approved PR.
In case of merge conflicts, an AI-based conflict resolver will attempt to resolve conflicts and might make mistakes. The reviewer must check AI's work before approving.

@CBL-Mariner-Bot CBL-Mariner-Bot added the Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch label Feb 3, 2026
@CBL-Mariner-Bot CBL-Mariner-Bot marked this pull request as ready for review February 3, 2026 15:53
@CBL-Mariner-Bot CBL-Mariner-Bot requested a review from a team as a code owner February 3, 2026 15:53
@CBL-Mariner-Bot
Copy link
Collaborator Author

All conflicts resolved.

Updated changelog entry for nodejs package to reflect version change and added missing entry.
Removed duplicate patch entries for CVE-2025-23165 and CVE-2025-23166.
Copy link
Contributor

@sameluch sameluch left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jslobodzian jslobodzian merged commit 82d82f0 into 3.0-dev Feb 4, 2026
29 of 32 checks passed
@jslobodzian jslobodzian deleted the cblmargh/cherry-pick-pr-15649-to-3.0-dev branch February 4, 2026 02:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3.0-dev PRs Destined for AzureLinux 3.0 Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch Automatic PR Packaging

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants