UI5 / webcomponents-react / 43192084765

86%

push

github

chore(deps): update node.js to v26.13.1 (#9146)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [node](https://nodejs.org)
([source](https://redirect.github.com/nodejs/node)) | patch | `26.13.0`
→ `26.13.1` |

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

###
[`v26.13.1`](https://redirect.github.com/nodejs/node/releases/tag/v26.13.1):
2026-11-11, Version 26.13.1 'Lithium' (LTS), @&#8203;aduh95

[Compare
Source](https://redirect.github.com/nodejs/node/compare/v26.13.0...v26.13.1)

This is a security release.

##### Notable Changes

- (CVE-2026-123863) http2: release headers when a stream is removed
(Matteo Collina) – High
- (CVE-2026-123864) tls,http: prevent nested parser execution from empty
writes (Matteo Collina) – High
- (CVE-2026-123865) http2: detect streams abandoned by nghttp2 (Matteo
Collina) – High
- (CVE-2026-123866) http2: retain buffers until socket writes finish
(Matteo Collina) – High
- (CVE-2026-123872) tls: disable resumption for mTLS with no session id
context (Tim Perry) – High
- (CVE-2026-123872) tls: don't allow renegotiation or HRR to change SNI
(Tim Perry) – High
- (CVE-2026-123872) tls: don't allow TLS resumption to change SNI (Tim
Perry) – High
- (CVE-2026-123874) http2: retain streams during pending writes (Matteo
Collina) – High
- (CVE-2026-126051) tls: fix remotely reachable TLS server crash (Tim
Perry) – High
- (CVE-2026-123828) http2: avoid overflowing ALTSVC buffers (Matteo
Collina) – Medium
- (CVE-2026-123867) tls: apply the CA of SNI contexts without a
certificate (Matteo Collina) – Medium
- (CVE-2026-123868) http2: charge inbound DATA retained by streams to
maxSessionMemory (Matteo Collina) – Medium
- (CVE-2026-123871) http: redact proxy credentials in invalid proxy URL
errors (Matteo Collina) – Medium
- (CVE-2026-123875) http2: guard against null write request on cancelled
stream (Matteo Collina) – Medium
- (CVE-2026-123877) https: isolate Agent TLS p... (continued)

4154 of 5204 branches covered (79.82%)

Branch coverage included in aggregate %.

7274 of 8129 relevant lines covered (89.48%)

557348.72 hits per line