NodeBB (update)
-
Nouvelle update :
# ./nodebb stop Stopping NodeBB. Goodbye! # git fetch remote: Enumerating objects: 266, done. remote: Counting objects: 100% (51/51), done. remote: Compressing objects: 100% (26/26), done. remote: Total 266 (delta 27), reused 31 (delta 25), pack-reused 215 (from 2) Receiving objects: 100% (266/266), 610.87 KiB | 5.31 MiB/s, done. Resolving deltas: 100% (124/124), completed with 3 local objects. From https://github.com/NodeBB/NodeBB 232738315f..0f9b8fa67f develop -> origin/develop 7ec8c0951f..5282092037 master -> origin/master + 6498b15f22...b7b8e22a21 renovate/apidevtools-swagger-parser-12.x -> origin/renovate/apidevtools-swagger-parser-12.x (forced update) + 9909b04fd3...7df2a1b5d1 renovate/husky-9.x -> origin/renovate/husky-9.x (forced update) * [new branch] renovate/satori-0.x -> origin/renovate/satori-0.x 534b565148..217f6ed81c v4.x -> origin/v4.x * [new tag] v4.14.2 -> v4.14.2 # git reset --hard v4.14.2 HEAD is now at 9e495b3d94 chore: incrementing version number - v4.14.2 # ./nodebb upgrade Updating NodeBB... 1. Updating package.json file with defaults... OK 2. Bringing base dependencies up to date... started > nodebb@4.14.2 postinstall > if [ "$NODE_ENV" != "production" ]; then npx husky install; fi changed 1 package, and audited 869 packages in 9s 137 packages are looking for funding run `npm fund` for details 4 vulnerabilities (1 moderate, 3 high) To address all issues (including breaking changes), run: npm audit fix --force Run `npm audit` for details. 3. Checking installed plugins for updates...Checking installed plugins and themes for updates... OK All packages up-to-date! 4. Updating NodeBB data store schema... Parsing upgrade scripts... OK | 0 script(s) found, 180 skipped Schema update complete! 5. Rebuilding assets... started 2026-07-23T18:29:07.510Z [4567/567717] - info: [build] Building in parallel mode 2026-07-23T18:29:07.516Z [4567/567717] - info: [build] plugin static dirs build started 2026-07-23T18:29:07.518Z [4567/567717] - info: [build] requirejs modules build started 2026-07-23T18:29:07.520Z [4567/567717] - info: [build] client js bundle build started 2026-07-23T18:29:07.521Z [4567/567717] - info: [build] admin js bundle build started 2026-07-23T18:29:07.523Z [4567/567717] - info: [build] client side styles build started 2026-07-23T18:29:07.524Z [4567/567717] - info: [build] admin control panel styles build started 2026-07-23T18:29:07.528Z [4567/567717] - info: [build] templates build started 2026-07-23T18:29:07.530Z [4567/567717] - info: [build] languages build started 2026-07-23T18:29:08.321Z [4567/567717] - info: [build] plugin static dirs build completed in 0.805sec 2026-07-23T18:29:08.662Z [4567/567717] - info: [build] client js bundle build completed in 1.142sec 2026-07-23T18:29:08.832Z [4567/567717] - info: [build] admin js bundle build completed in 1.311sec 2026-07-23T18:29:14.111Z [4567/567717] - info: [build] requirejs modules build completed in 6.593sec 2026-07-23T18:29:14.112Z [4567/567717] - info: [build] Bundling with Webpack. 2026-07-23T18:29:14.437Z [4567/567717] - info: [build] admin control panel styles build completed in 6.913sec 2026-07-23T18:29:14.471Z [4567/567717] - info: [build] client side styles build completed in 6.948sec [10%] building (23/247 modules) [10%] building (293/403 modules) 338 assets 541 modules ERROR in ./build/public/scripts-client.js 3433:5 Module parse failed: Unexpected token (3433:5) You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders | }); | > ;CC0 1.0 Universal | | Statement of Purpose webpack 5.108.4 compiled with 1 error in 9594 ms 2026-07-23T18:29:24.977Z [4567/567717] - info: [build] Asset compilation successful. Completed in 17.461sec. NodeBB Upgrade Complete! # ./nodebb start Starting NodeBB "./nodebb stop" to stop the NodeBB server "./nodebb log" to view server output "./nodebb help" for more commands -
Quand je vais sur Réaction c’est vide :
-
Mes versions :
# npm --version 11.16.0 # node --version v24.18.0J’ai essayé :
# ./nodebb reset -t 2026-07-23T18:35:29.129Z [4567/568251] - info: [reset] Theme reset to nodebb-theme-harmony and default skin 2026-07-23T18:35:29.130Z [4567/568251] - info: [reset] Reset complete. Please run `./nodebb build` to rebuild assets.Avec un rebuild.
-
J’ai essayé :
# npm config set legacy-peer-deps true ... # npm install @nodebb/nodebb-plugin-reaction ...Pas mieux.
-
Recherche des mise à jours :
# npm outdated Package Current Wanted Latest Location Depended by @apidevtools/swagger-parser 10.1.0 10.1.0 12.1.0 node_modules/@apidevtools/swagger-parser nodebb @fontsource-utils/scss 0.2.2 0.2.2 0.2.4 node_modules/@fontsource-utils/scss nodebb @fontsource/inter 5.2.8 5.2.8 5.3.0 node_modules/@fontsource/inter nodebb @fontsource/poppins 5.2.7 5.2.7 5.3.0 node_modules/@fontsource/poppins nodebb @fortawesome/fontawesome-free 7.3.0 7.3.0 7.3.1 node_modules/@fortawesome/fontawesome-free nodebb @json2csv/node 7.0.6 7.0.6 7.0.7 node_modules/@json2csv/node nodebb @nodebb/nodebb-plugin-user-level 1.0.2 1.0.4 3.0.0 node_modules/@nodebb/nodebb-plugin-user-level nodebb autoprefixer 10.5.2 10.5.2 10.5.4 node_modules/autoprefixer nodebb cropperjs 1.6.2 1.6.2 2.1.1 node_modules/cropperjs nodebb express 4.22.2 4.22.2 5.2.1 node_modules/express nodebb helmet 8.2.0 8.2.0 8.3.0 node_modules/helmet nodebb husky 8.0.3 8.0.3 9.1.7 node_modules/husky nodebb jquery 3.7.1 3.7.1 4.0.0 node_modules/jquery nodebb lint-staged 17.0.8 17.0.8 17.2.0 node_modules/lint-staged nodebb mocha 8.1.3 8.4.0 11.7.6 node_modules/mocha nodebb nodebb-plugin-2factor 8.0.1 8.0.1 8.0.5 node_modules/nodebb-plugin-2factor nodebb nodebb-plugin-composer-default 11.0.4 11.0.4 11.0.7 node_modules/nodebb-plugin-composer-default nodebb nodebb-plugin-emoji 6.0.14 6.0.14 6.0.16 node_modules/nodebb-plugin-emoji nodebb nodebb-plugin-imagemagick 2.1.1 2.1.1 3.0.0 node_modules/nodebb-plugin-imagemagick nodebb nodebb-plugin-markdown 13.2.6 13.2.6 13.2.7 node_modules/nodebb-plugin-markdown nodebb nodebb-plugin-spam-be-gone 2.3.4 2.3.4 2.3.5 node_modules/nodebb-plugin-spam-be-gone nodebb nodebb-plugin-web-push 0.8.1 0.8.1 0.9.2 node_modules/nodebb-plugin-web-push nodebb nodebb-theme-harmony 3.1.7 3.1.7 3.1.8 node_modules/nodebb-theme-harmony nodebb nodebb-theme-lavender 8.0.6 8.0.6 8.1.0 node_modules/nodebb-theme-lavender nodebb nodebb-theme-peace 3.0.6 3.0.6 3.1.1 node_modules/nodebb-theme-peace nodebb nodebb-theme-persona 15.0.11 15.0.11 15.1.4 node_modules/nodebb-theme-persona nodebb nodebb-widget-essentials 8.0.4 8.0.4 8.0.5 node_modules/nodebb-widget-essentials nodebb postcss 8.5.16 8.5.16 8.5.22 node_modules/postcss nodebb postcss-clean 1.2.0 1.2.0 1.2.2 node_modules/postcss-clean nodebb redis 5.12.1 5.12.1 6.1.0 node_modules/redis nodebb sanitize-html 2.17.5 2.17.5 2.17.6 node_modules/sanitize-html nodebb sass 1.101.0 1.101.0 1.101.6 node_modules/sass nodebb satori 0.26.0 0.26.0 0.29.0 node_modules/satori nodebb undici 8.7.0 8.7.0 8.8.0 node_modules/undici nodebb -
Nouvelle commande :
# npx npm-check-updates -u Need to install the following packages: npm-check-updates@22.2.9 Ok to proceed? (y) y [====================] 164/164 100% @apidevtools/swagger-parser 10.1.0 → 12.1.0 @fontsource-utils/scss 0.2.2 → 0.2.4 @fontsource/inter 5.2.8 → 5.3.0 @fontsource/poppins 5.2.7 → 5.3.0 @fortawesome/fontawesome-free 7.3.0 → 7.3.1 @json2csv/node 7.0.6 → 7.0.7 @nodebb/nodebb-plugin-user-level ^1.0.4 → ^3.0.0 autoprefixer 10.5.2 → 10.5.4 cropperjs 1.6.2 → 2.1.1 express 4.22.2 → 5.2.1 helmet 8.2.0 → 8.3.0 husky 8.0.3 → 9.1.7 jquery 3.7.1 → 4.0.0 lint-staged 17.0.8 → 17.2.0 mocha ^8.4.0 → ^11.7.6 nodebb-plugin-2factor 8.0.1 → 8.0.5 nodebb-plugin-composer-default 11.0.4 → 11.0.7 nodebb-plugin-emoji 6.0.14 → 6.0.16 nodebb-plugin-imagemagick ^2.1.1 → ^3.0.0 nodebb-plugin-markdown 13.2.6 → 13.2.7 nodebb-plugin-spam-be-gone 2.3.4 → 2.3.5 nodebb-plugin-web-push 0.8.1 → 0.9.2 nodebb-theme-harmony 3.1.7 → 3.1.8 nodebb-theme-lavender 8.0.6 → 8.1.0 nodebb-theme-peace 3.0.6 → 3.1.1 nodebb-theme-persona 15.0.11 → 15.1.4 nodebb-widget-essentials 8.0.4 → 8.0.5 postcss 8.5.16 → 8.5.22 postcss-clean 1.2.0 → 1.2.2 redis 5.12.1 → 6.1.0 sanitize-html 2.17.5 → 2.17.6 sass 1.101.0 → 1.101.6 satori 0.26.0 → 0.29.0 undici 8.7.0 → 8.8.0 Run npm install to install new versions. # npm install ... # npx npm-check-updates -u Upgrading /home/farias/nodebb/package.json [====================] 164/164 100% All dependencies match the latest package versions :) -
J’ai vu l’erreur :
[92%] sealing (asset processing TerserPlugin) 2026-07-24T09:47:43.437Z [4567/570572] - info: [build] client side styles build completed in 48.726sec 338 assets 541 modules ERROR in ./build/public/scripts-client.js 3433:5 Module parse failed: Unexpected token (3433:5) You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders | }); | > ;CC0 1.0 Universal | | Statement of Purpose webpack 5.108.4 compiled with 1 error in 50842 ms 2026-07-24T09:48:04.989Z [4567/570572] - info: [build] Asset compilation successful. Completed in 70.275sec. [cluster] Restarting... 2026-07-24T09:48:06.260Z [4567/570572] - info: [app] Shutdown (SIGTERM/SIGINT/SIGQUIT) Initialised. Clustering enabled: Spinning up 1 process(es). 2026-07-24T09:48:06.264Z [4567/570572] - info: [app] Web server closed to connections. 2026-07-24T09:48:07.157Z [4567/575731] - info: Initializing NodeBB v4.14.2 https://lemmy.cyber-neurones.org 2026-07-24T09:48:08.276Z [4567/570572] - info: [app] Live analytics saved. 2026-07-24T09:48:08.317Z [4567/570572] - info: [app] Database connection closed. 2026-07-24T09:48:08.317Z [4567/570572] - info: [app] Shutdown complete. [cluster] Child Process (570572) has exited (code: 0, signal: null) 2026-07-24T09:48:17.087Z [4567/575731] - info: [socket.io] Restricting access to origin: https://lemmy.cyber-neurones.org:* video started 2026-07-24T09:48:20.016Z [4567/575731] - warn: [plugins/load] The following plugins may not be compatible with your version of NodeBB. This may cause unintended behaviour or crashing. In the event of an unresponsive NodeBB caused by this plugin, run `./nodebb reset -p PLUGINNAME` to disable it. * nodebb-plugin-emoji-android * nodebb-plugin-imagemagick 2026-07-24T09:48:20.184Z [4567/575731] - info: [plugins/web-push] VAPID keys OK. 2026-07-24T09:48:20.274Z [4567/575731] - info: Regex recompiled: (?<url>https?:\/\/[^\s]+\/(?<filename>[\w_0-9\-\.]+\.(jpg|jpeg|gif|gifv|png|svg))([^\s]*)?) 2026-07-24T09:48:20.276Z [4567/575731] - info: Cache initialized to size 3 2026-07-24T09:48:20.367Z [4567/575731] - info: [api] Adding 3 route(s) to `api/v3/plugins` 2026-07-24T09:48:20.403Z [4567/575731] - info: [router] Routes added 2026-07-24T09:48:20.461Z [4567/575731] - info: 🎉 NodeBB Ready 2026-07-24T09:48:20.466Z [4567/575731] - info: 🤝 Setting 'trust proxy' to true 2026-07-24T09:48:20.474Z [4567/575731] - info: 📡 NodeBB is now listening on: 0.0.0.0:4567 2026-07-24T09:48:20.474Z [4567/575731] - info: 🔗 Canonical URL: https://lemmy.cyber-neurones.orgj’ai donc fait :
# ./nodebb reset -p nodebb-plugin-emoji-android 2026-07-24T09:49:55.269Z [4567/575924] - info: [reset] Plugin `nodebb-plugin-emoji-android` disabled 2026-07-24T09:49:55.270Z [4567/575924] - info: [reset] Reset complete. Please run `./nodebb build` to rebuild assets. # ./nodebb reset -p nodebb-plugin-imagemagick 2026-07-24T09:50:05.732Z [4567/575964] - info: [reset] Plugin `nodebb-plugin-imagemagick` disabled 2026-07-24T09:50:05.733Z [4567/575964] - info: [reset] Reset complete. Please run `./nodebb build` to rebuild assets. # ./nodebb build -
Toujours des problèmes lors de la mise à jours :
# git fetch remote: Enumerating objects: 970, done. remote: Counting objects: 100% (349/349), done. remote: Compressing objects: 100% (82/82), done. remote: Total 970 (delta 293), reused 282 (delta 267), pack-reused 621 (from 3) Receiving objects: 100% (970/970), 827.77 KiB | 7.46 MiB/s, done. Resolving deltas: 100% (575/575), completed with 69 local objects. From https://github.com/NodeBB/NodeBB 0f9b8fa67f..e9beb46935 develop -> origin/develop 5282092037..065c02dddf master -> origin/master + b7b8e22a21...60fc1e1db0 renovate/apidevtools-swagger-parser-12.x -> origin/renovate/apidevtools-swagger-parser-12.x (forced update) + 27d3b4d9ba...bc6e529bbb renovate/cropperjs-2.x -> origin/renovate/cropperjs-2.x (forced update) + 7df2a1b5d1...e7b2b0b0e1 renovate/husky-9.x -> origin/renovate/husky-9.x (forced update) + 8e7903e29c...f202b4e96f renovate/jquery-4.x -> origin/renovate/jquery-4.x (forced update) * [new branch] renovate/jsdom-30.x -> origin/renovate/jsdom-30.x + 118255d0c7...2f3350c094 renovate/redis-6.x -> origin/renovate/redis-6.x (forced update) * [new branch] renovate/webpack-5.x -> origin/renovate/webpack-5.x 217f6ed81c..c91bec416a v4.x -> origin/v4.x * [new tag] v4.14.3 -> v4.14.3 * [new tag] v4.14.4 -> v4.14.4 # git reset --hard v4.14.4 HEAD is now at 9f9a69acd2 chore: incrementing version number - v4.14.4 # ./nodebb upgrade Updating NodeBB... 1. Updating package.json file with defaults... OK 2. Bringing base dependencies up to date... started npm notice run nodebb@4.14.4 postinstall npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi changed 3 packages, and audited 855 packages in 10s 137 packages are looking for funding run `npm fund` for details 10 vulnerabilities (1 moderate, 9 high) To address issues that do not require attention, run: npm audit fix To address all issues (including breaking changes), run: npm audit fix --force Run `npm audit` for details. npm warn install-scripts 2 packages had install scripts blocked because they are not covered by allowScripts: npm warn install-scripts @parcel/watcher@2.6.0 (install: node-gyp rebuild) npm warn install-scripts snyk@1.1306.1 (postinstall: node wrapper_dist/bootstrap.js exec) npm warn install-scripts npm warn install-scripts Run `npm install-scripts ls` to review, or `npm install-scripts approve <pkg>` to allow. 3. Checking installed plugins for updates...Checking installed plugins and themes for updates... OK A total of 1 package(s) can be upgraded: * @nodebb/nodebb-plugin-reactions (3.0.2 -> 3.0.3) Proceed with upgrade (y|n)? y Upgrading packages... 4. Updating NodeBB data store schema... Parsing upgrade scripts... OK | 2 script(s) found, 180 skipped → [2026/7/28] Backfill trust_proxy for upgraded installs... OK (0.00 seconds) → [2026/7/29] Backfill trust_proxy into the config file specified via --config... OK (0.00 seconds) Schema update complete! 5. Rebuilding assets... started 2026-07-30T05:58:17.922Z [4567/24107] - info: [build] Building in parallel mode 2026-07-30T05:58:17.927Z [4567/24107] - info: [build] plugin static dirs build started 2026-07-30T05:58:17.929Z [4567/24107] - info: [build] requirejs modules build started 2026-07-30T05:58:17.930Z [4567/24107] - info: [build] client js bundle build started 2026-07-30T05:58:17.932Z [4567/24107] - info: [build] admin js bundle build started 2026-07-30T05:58:17.933Z [4567/24107] - info: [build] client side styles build started 2026-07-30T05:58:17.934Z [4567/24107] - info: [build] admin control panel styles build started 2026-07-30T05:58:17.938Z [4567/24107] - info: [build] templates build started 2026-07-30T05:58:17.939Z [4567/24107] - info: [build] languages build started 2026-07-30T05:58:18.515Z [4567/24107] - info: [build] plugin static dirs build completed in 0.587sec 2026-07-30T05:58:19.980Z [4567/24107] - info: [build] client js bundle build completed in 2.049sec 2026-07-30T05:58:19.982Z [4567/24107] - info: [build] admin js bundle build completed in 2.05sec 2026-07-30T05:58:24.069Z [4567/24107] - info: [build] requirejs modules build completed in 6.141sec 2026-07-30T05:58:24.070Z [4567/24107] - info: [build] Bundling with Webpack. [10%] building (0/0 modules) [10%] building (1/19 modules) [10%] building (23/247 modules) [10%] building (351/424 modules) 338 assets 541 modules ERROR in ./build/public/scripts-client.js 3435:5 Module parse failed: Unexpected token (3435:5) You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders | }); | > ;CC0 1.0 Universal | | Statement of Purpose webpack 5.108.4 compiled with 1 error in 9148 ms 2026-07-30T05:58:34.829Z [4567/24107] - info: [build] Asset compilation successful. Completed in 16.9sec. NodeBB Upgrade Complete! -
Misère.
# npm install-scripts ls 2 packages have install scripts blocked because they are not covered by allowScripts: @parcel/watcher@2.6.0 (install: node-gyp rebuild) snyk@1.1306.1 (postinstall: node wrapper_dist/bootstrap.js exec) # npm install-scripts approve @parcel/watcher@2.6.0 Approved @parcel/watcher: removed-stale @parcel/watcher@2.5.1 added @parcel/watcher@2.6.0 # npm install-scripts approve snyk@1.1306.1 Approved snyk: removed-stale snyk@1.1300.2 added snyk@1.1306.1 -
# npm audit fix --force npm warn using --force Recommended protections disabled. npm warn audit Updating postcss to 8.5.25, which is outside your stated dependency range. npm warn audit Updating @nodebb/nodebb-plugin-user-level to 1.0.2, which is a SemVer major change. npm warn audit Updating grunt to 1.6.3, which is outside your stated dependency range. npm warn audit Updating mocha to 11.3.0, which is a SemVer major change. npm warn audit Updating nodebb-plugin-dbsearch to 3.0.8, which is a SemVer major change. npm warn audit No fix available for coveralls@* npm warn audit Updating grunt-contrib-watch to 0.4.4, which is a SemVer major change. npm warn deprecated osenv@0.1.5: This package is no longer supported. npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful. npm warn deprecated har-validator@5.1.5: this library is no longer supported npm warn deprecated glob@7.1.7: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me npm warn deprecated minimatch@0.4.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue npm warn deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue npm warn deprecated minimatch@0.3.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue npm warn deprecated uuid@3.4.0: uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028). npm warn deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142 npm warn deprecated glob@3.2.11: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me added 405 packages, removed 17 packages, changed 11 packages, and audited 1243 packages in 26s 202 packages are looking for funding run `npm fund` for details # npm audit report async 2.0.0 - 2.6.3 Severity: high Prototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25 fix available via `npm audit fix --force` Will install nodebb-plugin-dbsearch@7.0.0, which is a breaking change node_modules/nodebb-plugin-dbsearch/node_modules/async nodebb-plugin-dbsearch 2.0.0 - 4.0.7 Depends on vulnerable versions of async node_modules/nodebb-plugin-dbsearch brace-expansion <=5.0.7 Severity: high brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash - https://github.com/advisories/GHSA-mh99-v99m-4gvg fix available via `npm audit fix --force` Will install mocha@8.1.3, which is a breaking change node_modules/brace-expansion node_modules/mocha/node_modules/brace-expansion minimatch <=10.0.2 Depends on vulnerable versions of brace-expansion node_modules/fileset/node_modules/glob/node_modules/minimatch node_modules/fileset/node_modules/minimatch node_modules/gaze/node_modules/minimatch node_modules/minimatch node_modules/mocha/node_modules/glob/node_modules/minimatch node_modules/mocha/node_modules/minimatch fileset 0.1.0 - 0.2.1 Depends on vulnerable versions of glob Depends on vulnerable versions of minimatch node_modules/fileset gaze <=0.3.4 Depends on vulnerable versions of fileset Depends on vulnerable versions of minimatch node_modules/gaze grunt-contrib-watch <=0.5.3 || 1.0.0 - 1.0.1 Depends on vulnerable versions of gaze Depends on vulnerable versions of tiny-lr node_modules/grunt-contrib-watch glob 3.0.0 - 10.5.0 Depends on vulnerable versions of minimatch Depends on vulnerable versions of minimatch node_modules/fileset/node_modules/glob node_modules/glob node_modules/mocha/node_modules/glob grunt >=1.0.0-rc1 Depends on vulnerable versions of glob Depends on vulnerable versions of minimatch node_modules/grunt mocha 3.0.0-0 - 12.0.0-beta-9 Depends on vulnerable versions of glob Depends on vulnerable versions of minimatch Depends on vulnerable versions of serialize-javascript node_modules/mocha debug <=2.6.8 Severity: high debug Inefficient Regular Expression Complexity vulnerability - https://github.com/advisories/GHSA-9vvw-cc9w-f27h Regular Expression Denial of Service in debug - https://github.com/advisories/GHSA-gxpj-cx7g-858c fix available via `npm audit fix --force` Will install grunt-contrib-watch@1.1.0, which is a breaking change node_modules/tiny-lr/node_modules/debug tiny-lr <=1.0.4 Depends on vulnerable versions of debug Depends on vulnerable versions of qs node_modules/tiny-lr form-data <=2.5.5 Severity: critical form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4 form-data: CRLF injection in form-data via unescaped multipart field names and filenames - https://github.com/advisories/GHSA-hmw2-7cc7-3qxx No fix available node_modules/form-data request * Depends on vulnerable versions of form-data Depends on vulnerable versions of qs Depends on vulnerable versions of tough-cookie Depends on vulnerable versions of uuid node_modules/request coveralls * Depends on vulnerable versions of request node_modules/coveralls qs <=6.14.0 Severity: high Prototype Pollution Protection Bypass in qs - https://github.com/advisories/GHSA-gqgv-6jq5-jjj9 Denial-of-Service Extended Event Loop Blocking in qs - https://github.com/advisories/GHSA-f9cm-p3w6-xvr3 Denial-of-Service Memory Exhaustion in qs - https://github.com/advisories/GHSA-jjv7-qpx3-h62q qs vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-hrpp-h998-j3pp qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion - https://github.com/advisories/GHSA-6rw7-vpxm-498p fix available via `npm audit fix --force` Will install grunt-contrib-watch@1.1.0, which is a breaking change node_modules/request/node_modules/qs node_modules/tiny-lr/node_modules/qs serialize-javascript <=7.0.4 Severity: high Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() - https://github.com/advisories/GHSA-5c6j-r48x-rmvq Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects - https://github.com/advisories/GHSA-qj8w-gfj5-8c6v fix available via `npm audit fix --force` Will install mocha@8.1.3, which is a breaking change node_modules/serialize-javascript tough-cookie <4.1.3 Severity: moderate tough-cookie Prototype Pollution vulnerability - https://github.com/advisories/GHSA-72xf-g2v4-qvf3 No fix available node_modules/request/node_modules/tough-cookie uuid <11.1.1 Severity: moderate uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided - https://github.com/advisories/GHSA-w5hq-g745-h8pq No fix available node_modules/uuid 19 vulnerabilities (3 moderate, 14 high, 2 critical) To address all issues possible (including breaking changes), run: npm audit fix --force Some issues need review, and may require choosing a different dependency. -
Toujours pareil …
# npx npm-check-updates -u npm notice run nodebb@4.14.4 npx npm notice run 'ncu' -u Upgrading /home/farias/nodebb/package.json [====================] 164/164 100% Patch Backwards-compatible bug fixes @fortawesome/fontawesome-free 7.3.0 → 7.3.1 @json2csv/node 7.0.6 → 7.0.7 autoprefixer 10.5.2 → 10.5.4 nodebb-plugin-2factor 8.0.1 → 8.0.5 nodebb-plugin-emoji 6.0.14 → 6.0.16 nodebb-plugin-markdown 13.2.6 → 13.2.7 nodebb-plugin-spam-be-gone 2.3.4 → 2.3.5 nodebb-widget-essentials 8.0.4 → 8.0.5 postcss-clean 1.2.0 → 1.2.2 sanitize-html 2.17.5 → 2.17.6 Minor Backwards-compatible features @fontsource/inter 5.2.8 → 5.3.0 @fontsource/poppins 5.2.7 → 5.3.0 fs-extra 11.3.6 → 11.4.0 globals 17.7.0 → 17.8.0 helmet 8.2.0 → 8.3.0 lint-staged 17.0.8 → 17.2.0 nodebb-theme-lavender 8.0.6 → 8.1.0 nodebb-theme-peace 3.0.6 → 3.1.1 sass 1.101.0 → 1.102.0 spdx-license-list 6.11.0 → 6.12.0 undici 8.7.0 → 8.9.0 webpack 5.108.4 → 5.109.2 yargs 18.0.0 → 18.1.0 Major Potentially breaking API changes @apidevtools/swagger-parser 10.1.0 → 12.1.0 @nodebb/nodebb-plugin-user-level ^1.0.2 → ^3.0.0 chalk 5.6.2 → 6.0.0 connect-redis 9.0.0 → 10.0.0 cropperjs 1.6.2 → 2.1.1 express 4.22.2 → 5.2.1 grunt-contrib-watch ^0.4.4 → ^1.1.0 husky 8.0.3 → 9.1.7 jquery 3.7.1 → 4.0.0 jsdom 29.1.1 → 30.0.1 mocha ^8.1.3 → ^11.7.6 nodebb-plugin-dbsearch ^3.0.8 → ^7.0.0 redis 5.12.1 → 6.1.0 Major version zero Anything may change @fontsource-utils/scss 0.2.2 → 0.2.4 nodebb-plugin-web-push 0.8.1 → 0.9.2 satori 0.26.0 → 0.29.0 Run npm install to install new versions. # npm install npm warn deprecated raw-body@1.1.7: No longer maintained. Please upgrade to a stable version. npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me npm notice run nodebb@4.14.4 postinstall npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi npm notice run nodebb@4.14.4 npx npm notice run 'husky' install husky - install command is DEPRECATED added 89 packages, removed 70 packages, changed 78 packages, and audited 1255 packages in 36s 204 packages are looking for funding run `npm fund` for details 22 vulnerabilities (1 low, 6 moderate, 13 high, 2 critical) To address all issues possible (including breaking changes), run: npm audit fix --force Some issues need review, and may require choosing a different dependency. Run `npm audit` for details. # npx npm-check-updates npm notice run nodebb@4.14.4 npx npm notice run 'ncu' Checking /home/farias/nodebb/package.json [====================] 164/164 100% All dependencies match the latest package versions :) # ./nodebb stop Dependencies outdated or not yet installed. Error Code: DEP_WRONG_VERSION TypeError: Incorrect dependency version: chalk at checkVersion (/home/farias/nodebb/src/cli/index.js:41:14) at Object.<anonymous> (/home/farias/nodebb/src/cli/index.js:50:2) at Module._compile (node:internal/modules/cjs/loader:1871:14) at Object..js (node:internal/modules/cjs/loader:2002:10) at Module.load (node:internal/modules/cjs/loader:1594:32) at Module._load (node:internal/modules/cjs/loader:1396:12) at wrapModuleLoad (node:internal/modules/cjs/loader:255:19) at Module.require (node:internal/modules/cjs/loader:1617:12) at require (node:internal/modules/helpers:153:16) at Object.<anonymous> (/home/farias/nodebb/nodebb:5:1) Installing them now... npm notice run nodebb@4.14.4 postinstall npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi added 14 packages, removed 436 packages, changed 47 packages, and audited 833 packages in 18s 129 packages are looking for funding run `npm fund` for details 5 vulnerabilities (1 moderate, 4 high) To address all issues (including breaking changes), run: npm audit fix --force Run `npm audit` for details. OK Stopping NodeBB. Goodbye! # ./nodebb upgrade upgrade Updating NodeBB... 1. Updating package.json file with defaults... OK 2. Bringing base dependencies up to date... started npm notice run nodebb@4.14.4 postinstall npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi up to date, audited 833 packages in 6s 129 packages are looking for funding run `npm fund` for details 5 vulnerabilities (1 moderate, 4 high) To address all issues (including breaking changes), run: npm audit fix --force Run `npm audit` for details. 3. Checking installed plugins for updates...Checking installed plugins and themes for updates... OK All packages up-to-date! 4. Updating NodeBB data store schema... Parsing upgrade scripts... OK | 0 script(s) found, 182 skipped Schema update complete! 5. Rebuilding assets... started 2026-07-30T06:10:32.067Z [4567/25380] - info: [build] Building in parallel mode 2026-07-30T06:10:32.072Z [4567/25380] - info: [build] plugin static dirs build started 2026-07-30T06:10:32.073Z [4567/25380] - info: [build] requirejs modules build started 2026-07-30T06:10:32.075Z [4567/25380] - info: [build] client js bundle build started 2026-07-30T06:10:32.077Z [4567/25380] - info: [build] admin js bundle build started 2026-07-30T06:10:32.077Z [4567/25380] - info: [build] client side styles build started 2026-07-30T06:10:32.079Z [4567/25380] - info: [build] admin control panel styles build started 2026-07-30T06:10:32.083Z [4567/25380] - info: [build] templates build started 2026-07-30T06:10:32.084Z [4567/25380] - info: [build] languages build started 2026-07-30T06:10:32.976Z [4567/25380] - info: [build] plugin static dirs build completed in 0.904sec 2026-07-30T06:10:34.210Z [4567/25380] - info: [build] admin js bundle build completed in 2.133sec 2026-07-30T06:10:34.210Z [4567/25380] - info: [build] client js bundle build completed in 2.135sec 2026-07-30T06:10:37.757Z [4567/25380] - info: [build] requirejs modules build completed in 5.684sec 2026-07-30T06:10:37.758Z [4567/25380] - info: [build] Bundling with Webpack. [10%] building (0/0 modules) 2026-07-30T06:10:39.384Z [4567/25380] - info: [build] client side styles build completed in 7.307sec [10%] building (17/233 modules) [10%] building (385/465 modules) 338 assets 541 modules ERROR in ./build/public/scripts-client.js 3435:5 Module parse failed: Unexpected token (3435:5) You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders | }); | > ;CC0 1.0 Universal | | Statement of Purpose webpack 5.108.4 compiled with 1 error in 8050 ms 2026-07-30T06:10:47.164Z [4567/25380] - info: [build] Asset compilation successful. Completed in 15.09sec. NodeBB Upgrade Complete! # ./nodebb start Starting NodeBB "./nodebb stop" to stop the NodeBB server "./nodebb log" to view server output "./nodebb help" for more commands -
Toujours la même erreur :
# ./nodebb upgrade Updating NodeBB... 1. Updating package.json file with defaults... OK 2. Bringing base dependencies up to date... started npm notice run nodebb@4.14.6 postinstall npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi changed 4 packages, and audited 833 packages in 10s 129 packages are looking for funding run `npm fund` for details 8 vulnerabilities (1 moderate, 7 high) To address issues that do not require attention, run: npm audit fix To address all issues (including breaking changes), run: npm audit fix --force Run `npm audit` for details. 3. Checking installed plugins for updates...Checking installed plugins and themes for updates... OK A total of 2 package(s) can be upgraded: * @nodebb/nodebb-plugin-reactions (3.0.3 -> 3.0.4) * nodebb-plugin-feed (4.0.1 -> 4.0.3) Proceed with upgrade (y|n)? y Upgrading packages... 4. Updating NodeBB data store schema... Parsing upgrade scripts... OK | 0 script(s) found, 182 skipped Schema update complete! 5. Rebuilding assets... started 2026-08-04T06:20:09.785Z [4567/57604] - info: [build] Building in parallel mode 2026-08-04T06:20:09.787Z [4567/57604] - info: [build] plugin static dirs build started 2026-08-04T06:20:09.787Z [4567/57604] - info: [build] requirejs modules build started 2026-08-04T06:20:09.788Z [4567/57604] - info: [build] client js bundle build started 2026-08-04T06:20:09.788Z [4567/57604] - info: [build] admin js bundle build started 2026-08-04T06:20:09.789Z [4567/57604] - info: [build] client side styles build started 2026-08-04T06:20:09.789Z [4567/57604] - info: [build] admin control panel styles build started 2026-08-04T06:20:09.791Z [4567/57604] - info: [build] templates build started 2026-08-04T06:20:09.791Z [4567/57604] - info: [build] languages build started 2026-08-04T06:20:10.316Z [4567/57604] - info: [build] plugin static dirs build completed in 0.528sec 2026-08-04T06:20:11.821Z [4567/57604] - info: [build] client js bundle build completed in 2.033sec 2026-08-04T06:20:11.821Z [4567/57604] - info: [build] admin js bundle build completed in 2.033sec 2026-08-04T06:20:15.137Z [4567/57604] - info: [build] requirejs modules build completed in 5.35sec 2026-08-04T06:20:15.138Z [4567/57604] - info: [build] Bundling with Webpack. [10%] building (0/0 modules) 2026-08-04T06:20:16.987Z [4567/57604] - info: [build] client side styles build completed in 7.197sec [10%] building (23/245 modules) [10%] building (411/496 modules) 338 assets 541 modules ERROR in ./build/public/scripts-client.js 3435:5 Module parse failed: Unexpected token (3435:5) You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders | }); | > ;CC0 1.0 Universal | | Statement of Purpose webpack 5.108.4 compiled with 1 error in 10848 ms 2026-08-04T06:20:27.656Z [4567/57604] - info: [build] Asset compilation successful. Completed in 17.861sec. NodeBB Upgrade Complete!
Bonjour ! Vous semblez intéressé par cette conversation, mais vous n’avez pas encore de compte.
Marre de refaire défiler les mêmes messages ? Créez un compte pour retrouver votre position, recevoir des notifications des nouvelles réponses, sauvegarder vos favoris et voter pour les messages que vous appréciez.
Grâce à votre participation, ce message peut devenir encore meilleur 💗
S'inscrire Se connecter