Aller directement au contenu
  • Catégories
  • Récent
  • Mots-clés
  • Populaire
  • Web
  • Utilisateurs
  • Groupes
Habillages
  • Clair
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Sombre
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Défaut (Aucun habillage)
  • Aucun habillage
Réduire

NodeBB

  1. Accueil
  2. Announcements
  3. NodeBB (update)

NodeBB (update)

Planifié Épinglé Verrouillé Déplacé Announcements
updatenodebb
29 Messages 2 Publieurs 516 Vues 1 Abonné
  • Du plus ancien au plus récent
  • Du plus récent au plus ancien
  • Les plus votés
Répondre
  • Répondre à l'aide d'un nouveau sujet
Se connecter pour répondre
Ce sujet a été supprimé. Seuls les utilisateurs avec les droits d'administration peuvent le voir.
  • fariasF Hors-ligne
    fariasF Hors-ligne
    farias
    écrit dernière édition par
    #20

    Mes versions :

    # npm --version
    11.16.0
    # node --version
    v24.18.0
    

    J’ai essayé :

    # ./nodebb reset -t
    2026-07-23T18:35:29.129Z [4567/568251] - info: [reset] Theme reset to nodebb-theme-harmony and default skin
    2026-07-23T18:35:29.130Z [4567/568251] - info: [reset] Reset complete. Please run `./nodebb build` to rebuild assets.
    

    Avec un rebuild.

    1 réponse Dernière réponse
    0
    • fariasF Hors-ligne
      fariasF Hors-ligne
      farias
      écrit dernière édition par
      #21

      J’ai essayé :

      # npm config set legacy-peer-deps true
      ...
      # npm install @nodebb/nodebb-plugin-reaction
      ...
      
      

      Pas mieux.

      1 réponse Dernière réponse
      0
      • fariasF Hors-ligne
        fariasF Hors-ligne
        farias
        écrit dernière édition par
        #22

        Recherche des mise à jours :

        # npm outdated
        Package                           Current   Wanted   Latest  Location                                       Depended by
        @apidevtools/swagger-parser        10.1.0   10.1.0   12.1.0  node_modules/@apidevtools/swagger-parser       nodebb
        @fontsource-utils/scss              0.2.2    0.2.2    0.2.4  node_modules/@fontsource-utils/scss            nodebb
        @fontsource/inter                   5.2.8    5.2.8    5.3.0  node_modules/@fontsource/inter                 nodebb
        @fontsource/poppins                 5.2.7    5.2.7    5.3.0  node_modules/@fontsource/poppins               nodebb
        @fortawesome/fontawesome-free       7.3.0    7.3.0    7.3.1  node_modules/@fortawesome/fontawesome-free     nodebb
        @json2csv/node                      7.0.6    7.0.6    7.0.7  node_modules/@json2csv/node                    nodebb
        @nodebb/nodebb-plugin-user-level    1.0.2    1.0.4    3.0.0  node_modules/@nodebb/nodebb-plugin-user-level  nodebb
        autoprefixer                       10.5.2   10.5.2   10.5.4  node_modules/autoprefixer                      nodebb
        cropperjs                           1.6.2    1.6.2    2.1.1  node_modules/cropperjs                         nodebb
        express                            4.22.2   4.22.2    5.2.1  node_modules/express                           nodebb
        helmet                              8.2.0    8.2.0    8.3.0  node_modules/helmet                            nodebb
        husky                               8.0.3    8.0.3    9.1.7  node_modules/husky                             nodebb
        jquery                              3.7.1    3.7.1    4.0.0  node_modules/jquery                            nodebb
        lint-staged                        17.0.8   17.0.8   17.2.0  node_modules/lint-staged                       nodebb
        mocha                               8.1.3    8.4.0   11.7.6  node_modules/mocha                             nodebb
        nodebb-plugin-2factor               8.0.1    8.0.1    8.0.5  node_modules/nodebb-plugin-2factor             nodebb
        nodebb-plugin-composer-default     11.0.4   11.0.4   11.0.7  node_modules/nodebb-plugin-composer-default    nodebb
        nodebb-plugin-emoji                6.0.14   6.0.14   6.0.16  node_modules/nodebb-plugin-emoji               nodebb
        nodebb-plugin-imagemagick           2.1.1    2.1.1    3.0.0  node_modules/nodebb-plugin-imagemagick         nodebb
        nodebb-plugin-markdown             13.2.6   13.2.6   13.2.7  node_modules/nodebb-plugin-markdown            nodebb
        nodebb-plugin-spam-be-gone          2.3.4    2.3.4    2.3.5  node_modules/nodebb-plugin-spam-be-gone        nodebb
        nodebb-plugin-web-push              0.8.1    0.8.1    0.9.2  node_modules/nodebb-plugin-web-push            nodebb
        nodebb-theme-harmony                3.1.7    3.1.7    3.1.8  node_modules/nodebb-theme-harmony              nodebb
        nodebb-theme-lavender               8.0.6    8.0.6    8.1.0  node_modules/nodebb-theme-lavender             nodebb
        nodebb-theme-peace                  3.0.6    3.0.6    3.1.1  node_modules/nodebb-theme-peace                nodebb
        nodebb-theme-persona              15.0.11  15.0.11   15.1.4  node_modules/nodebb-theme-persona              nodebb
        nodebb-widget-essentials            8.0.4    8.0.4    8.0.5  node_modules/nodebb-widget-essentials          nodebb
        postcss                            8.5.16   8.5.16   8.5.22  node_modules/postcss                           nodebb
        postcss-clean                       1.2.0    1.2.0    1.2.2  node_modules/postcss-clean                     nodebb
        redis                              5.12.1   5.12.1    6.1.0  node_modules/redis                             nodebb
        sanitize-html                      2.17.5   2.17.5   2.17.6  node_modules/sanitize-html                     nodebb
        sass                              1.101.0  1.101.0  1.101.6  node_modules/sass                              nodebb
        satori                             0.26.0   0.26.0   0.29.0  node_modules/satori                            nodebb
        undici                              8.7.0    8.7.0    8.8.0  node_modules/undici                            nodebb
        
        
        
        1 réponse Dernière réponse
        0
        • fariasF Hors-ligne
          fariasF Hors-ligne
          farias
          écrit dernière édition par
          #23

          Nouvelle commande :

          # npx npm-check-updates -u
          Need to install the following packages:
          npm-check-updates@22.2.9
          Ok to proceed? (y) y
          
          [====================] 164/164 100%
          
           @apidevtools/swagger-parser        10.1.0  →   12.1.0
           @fontsource-utils/scss              0.2.2  →    0.2.4
           @fontsource/inter                   5.2.8  →    5.3.0
           @fontsource/poppins                 5.2.7  →    5.3.0
           @fortawesome/fontawesome-free       7.3.0  →    7.3.1
           @json2csv/node                      7.0.6  →    7.0.7
           @nodebb/nodebb-plugin-user-level   ^1.0.4  →   ^3.0.0
           autoprefixer                       10.5.2  →   10.5.4
           cropperjs                           1.6.2  →    2.1.1
           express                            4.22.2  →    5.2.1
           helmet                              8.2.0  →    8.3.0
           husky                               8.0.3  →    9.1.7
           jquery                              3.7.1  →    4.0.0
           lint-staged                        17.0.8  →   17.2.0
           mocha                              ^8.4.0  →  ^11.7.6
           nodebb-plugin-2factor               8.0.1  →    8.0.5
           nodebb-plugin-composer-default     11.0.4  →   11.0.7
           nodebb-plugin-emoji                6.0.14  →   6.0.16
           nodebb-plugin-imagemagick          ^2.1.1  →   ^3.0.0
           nodebb-plugin-markdown             13.2.6  →   13.2.7
           nodebb-plugin-spam-be-gone          2.3.4  →    2.3.5
           nodebb-plugin-web-push              0.8.1  →    0.9.2
           nodebb-theme-harmony                3.1.7  →    3.1.8
           nodebb-theme-lavender               8.0.6  →    8.1.0
           nodebb-theme-peace                  3.0.6  →    3.1.1
           nodebb-theme-persona              15.0.11  →   15.1.4
           nodebb-widget-essentials            8.0.4  →    8.0.5
           postcss                            8.5.16  →   8.5.22
           postcss-clean                       1.2.0  →    1.2.2
           redis                              5.12.1  →    6.1.0
           sanitize-html                      2.17.5  →   2.17.6
           sass                              1.101.0  →  1.101.6
           satori                             0.26.0  →   0.29.0
           undici                              8.7.0  →    8.8.0
          
          Run npm install to install new versions.
          
          # npm install
          ...
          # npx npm-check-updates -u
          Upgrading /home/farias/nodebb/package.json
          [====================] 164/164 100%
          
          All dependencies match the latest package versions :)
          
          
          1 réponse Dernière réponse
          0
          • fariasF Hors-ligne
            fariasF Hors-ligne
            farias
            écrit dernière édition par
            #24

            J’ai vu l’erreur :

            [92%] sealing (asset processing TerserPlugin)
            2026-07-24T09:47:43.437Z [4567/570572] - info: [build]         client side styles  build completed in 48.726sec
            338 assets
            541 modules
            
            ERROR in ./build/public/scripts-client.js 3433:5
            Module parse failed: Unexpected token (3433:5)
            You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
            | });
            | 
            > ;CC0 1.0 Universal
            | 
            | Statement of Purpose
            
            webpack 5.108.4 compiled with 1 error in 50842 ms
            2026-07-24T09:48:04.989Z [4567/570572] - info: [build] Asset compilation successful. Completed in 70.275sec.
            [cluster] Restarting...
            2026-07-24T09:48:06.260Z [4567/570572] - info: [app] Shutdown (SIGTERM/SIGINT/SIGQUIT) Initialised.
            Clustering enabled: Spinning up 1 process(es).
            
            2026-07-24T09:48:06.264Z [4567/570572] - info: [app] Web server closed to connections.
            2026-07-24T09:48:07.157Z [4567/575731] - info: Initializing NodeBB v4.14.2 https://lemmy.cyber-neurones.org
            2026-07-24T09:48:08.276Z [4567/570572] - info: [app] Live analytics saved.
            2026-07-24T09:48:08.317Z [4567/570572] - info: [app] Database connection closed.
            2026-07-24T09:48:08.317Z [4567/570572] - info: [app] Shutdown complete.
            [cluster] Child Process (570572) has exited (code: 0, signal: null)
            2026-07-24T09:48:17.087Z [4567/575731] - info: [socket.io] Restricting access to origin: https://lemmy.cyber-neurones.org:*
            video started
            
            2026-07-24T09:48:20.016Z [4567/575731] - warn: [plugins/load] The following plugins may not be compatible with your version of NodeBB. This may cause unintended behaviour or crashing. In the event of an unresponsive NodeBB caused by this plugin, run `./nodebb reset -p PLUGINNAME` to disable it.
              * nodebb-plugin-emoji-android
              * nodebb-plugin-imagemagick
            
            2026-07-24T09:48:20.184Z [4567/575731] - info: [plugins/web-push] VAPID keys OK.
            2026-07-24T09:48:20.274Z [4567/575731] - info: Regex recompiled: (?<url>https?:\/\/[^\s]+\/(?<filename>[\w_0-9\-\.]+\.(jpg|jpeg|gif|gifv|png|svg))([^\s]*)?)
            2026-07-24T09:48:20.276Z [4567/575731] - info: Cache initialized to size 3
            2026-07-24T09:48:20.367Z [4567/575731] - info: [api] Adding 3 route(s) to `api/v3/plugins`
            2026-07-24T09:48:20.403Z [4567/575731] - info: [router] Routes added
            2026-07-24T09:48:20.461Z [4567/575731] - info: 🎉 NodeBB Ready
            2026-07-24T09:48:20.466Z [4567/575731] - info: 🤝 Setting 'trust proxy' to true
            2026-07-24T09:48:20.474Z [4567/575731] - info: 📡 NodeBB is now listening on: 0.0.0.0:4567
            2026-07-24T09:48:20.474Z [4567/575731] - info: 🔗 Canonical URL: https://lemmy.cyber-neurones.org
            

            j’ai donc fait :

            # ./nodebb reset -p  nodebb-plugin-emoji-android
            2026-07-24T09:49:55.269Z [4567/575924] - info: [reset] Plugin `nodebb-plugin-emoji-android` disabled
            2026-07-24T09:49:55.270Z [4567/575924] - info: [reset] Reset complete. Please run `./nodebb build` to rebuild assets.
            # ./nodebb reset -p nodebb-plugin-imagemagick
            2026-07-24T09:50:05.732Z [4567/575964] - info: [reset] Plugin `nodebb-plugin-imagemagick` disabled
            2026-07-24T09:50:05.733Z [4567/575964] - info: [reset] Reset complete. Please run `./nodebb build` to rebuild assets.
            # ./nodebb build
            
            1 réponse Dernière réponse
            1
            • fariasF Hors-ligne
              fariasF Hors-ligne
              farias
              écrit dernière édition par
              #25

              Toujours des problèmes lors de la mise à jours :

              # git fetch
              remote: Enumerating objects: 970, done.
              remote: Counting objects: 100% (349/349), done.
              remote: Compressing objects: 100% (82/82), done.
              remote: Total 970 (delta 293), reused 282 (delta 267), pack-reused 621 (from 3)
              Receiving objects: 100% (970/970), 827.77 KiB | 7.46 MiB/s, done.
              Resolving deltas: 100% (575/575), completed with 69 local objects.
              From https://github.com/NodeBB/NodeBB
                 0f9b8fa67f..e9beb46935  develop                                  -> origin/develop
                 5282092037..065c02dddf  master                                   -> origin/master
               + b7b8e22a21...60fc1e1db0 renovate/apidevtools-swagger-parser-12.x -> origin/renovate/apidevtools-swagger-parser-12.x  (forced update)
               + 27d3b4d9ba...bc6e529bbb renovate/cropperjs-2.x                   -> origin/renovate/cropperjs-2.x  (forced update)
               + 7df2a1b5d1...e7b2b0b0e1 renovate/husky-9.x                       -> origin/renovate/husky-9.x  (forced update)
               + 8e7903e29c...f202b4e96f renovate/jquery-4.x                      -> origin/renovate/jquery-4.x  (forced update)
               * [new branch]            renovate/jsdom-30.x                      -> origin/renovate/jsdom-30.x
               + 118255d0c7...2f3350c094 renovate/redis-6.x                       -> origin/renovate/redis-6.x  (forced update)
               * [new branch]            renovate/webpack-5.x                     -> origin/renovate/webpack-5.x
                 217f6ed81c..c91bec416a  v4.x                                     -> origin/v4.x
               * [new tag]               v4.14.3                                  -> v4.14.3
               * [new tag]               v4.14.4                                  -> v4.14.4
              
              # git reset --hard  v4.14.4
              HEAD is now at 9f9a69acd2 chore: incrementing version number - v4.14.4
              
              # ./nodebb upgrade
              
              Updating NodeBB...
              
              1. Updating package.json file with defaults...  OK
              
              2. Bringing base dependencies up to date...  started
              npm notice run nodebb@4.14.4 postinstall
              npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
              
              changed 3 packages, and audited 855 packages in 10s
              
              137 packages are looking for funding
                run `npm fund` for details
              
              10 vulnerabilities (1 moderate, 9 high)
              
              To address issues that do not require attention, run:
                npm audit fix
              
              To address all issues (including breaking changes), run:
                npm audit fix --force
              
              Run `npm audit` for details.
              npm warn install-scripts 2 packages had install scripts blocked because they are not covered by allowScripts:
              npm warn install-scripts   @parcel/watcher@2.6.0 (install: node-gyp rebuild)
              npm warn install-scripts   snyk@1.1306.1 (postinstall: node wrapper_dist/bootstrap.js exec)
              npm warn install-scripts
              npm warn install-scripts Run `npm install-scripts ls` to review, or `npm install-scripts approve <pkg>` to allow.
              
              3. Checking installed plugins for updates...Checking installed plugins and themes for updates...   OK
              
              A total of 1 package(s) can be upgraded:
              
                * @nodebb/nodebb-plugin-reactions (3.0.2 -> 3.0.3)
              
              Proceed with upgrade (y|n)? y
              
              Upgrading packages...
              
              4. Updating NodeBB data store schema...
              Parsing upgrade scripts... 
              OK | 2 script(s) found, 180 skipped
                → [2026/7/28] Backfill trust_proxy for upgraded installs... OK (0.00 seconds)
                → [2026/7/29] Backfill trust_proxy into the config file specified via --config... OK (0.00 seconds)
              Schema update complete!
              
              
              5. Rebuilding assets...  started
              2026-07-30T05:58:17.922Z [4567/24107] - info: [build] Building in parallel mode
              2026-07-30T05:58:17.927Z [4567/24107] - info: [build]         plugin static dirs  build started
              2026-07-30T05:58:17.929Z [4567/24107] - info: [build]          requirejs modules  build started
              2026-07-30T05:58:17.930Z [4567/24107] - info: [build]           client js bundle  build started
              2026-07-30T05:58:17.932Z [4567/24107] - info: [build]            admin js bundle  build started
              2026-07-30T05:58:17.933Z [4567/24107] - info: [build]         client side styles  build started
              2026-07-30T05:58:17.934Z [4567/24107] - info: [build] admin control panel styles  build started
              2026-07-30T05:58:17.938Z [4567/24107] - info: [build]                  templates  build started
              2026-07-30T05:58:17.939Z [4567/24107] - info: [build]                  languages  build started
              2026-07-30T05:58:18.515Z [4567/24107] - info: [build]         plugin static dirs  build completed in 0.587sec
              2026-07-30T05:58:19.980Z [4567/24107] - info: [build]           client js bundle  build completed in 2.049sec
              2026-07-30T05:58:19.982Z [4567/24107] - info: [build]            admin js bundle  build completed in 2.05sec
              2026-07-30T05:58:24.069Z [4567/24107] - info: [build]          requirejs modules  build completed in 6.141sec
              2026-07-30T05:58:24.070Z [4567/24107] - info: [build] Bundling with Webpack.
              [10%] building (0/0 modules)
              [10%] building (1/19 modules)
              [10%] building (23/247 modules)
              [10%] building (351/424 modules)
              338 assets
              541 modules
              
              ERROR in ./build/public/scripts-client.js 3435:5
              Module parse failed: Unexpected token (3435:5)
              You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
              | });
              | 
              > ;CC0 1.0 Universal
              | 
              | Statement of Purpose
              
              webpack 5.108.4 compiled with 1 error in 9148 ms
              2026-07-30T05:58:34.829Z [4567/24107] - info: [build] Asset compilation successful. Completed in 16.9sec.
              
              
                                                                                                            NodeBB Upgrade Complete!
              
              
              1 réponse Dernière réponse
              0
              • fariasF Hors-ligne
                fariasF Hors-ligne
                farias
                écrit dernière édition par
                #26

                Misère.

                # npm install-scripts ls
                2 packages have install scripts blocked because they are not covered by allowScripts:
                  @parcel/watcher@2.6.0 (install: node-gyp rebuild)
                  snyk@1.1306.1 (postinstall: node wrapper_dist/bootstrap.js exec)
                # npm install-scripts approve @parcel/watcher@2.6.0
                Approved @parcel/watcher:
                  removed-stale @parcel/watcher@2.5.1
                  added @parcel/watcher@2.6.0
                # npm install-scripts approve snyk@1.1306.1
                Approved snyk:
                  removed-stale snyk@1.1300.2
                  added snyk@1.1306.1
                
                
                1 réponse Dernière réponse
                0
                • fariasF Hors-ligne
                  fariasF Hors-ligne
                  farias
                  écrit dernière édition par
                  #27
                  # npm audit fix --force
                  npm warn using --force Recommended protections disabled.
                  npm warn audit Updating postcss to 8.5.25, which is outside your stated dependency range.
                  npm warn audit Updating @nodebb/nodebb-plugin-user-level to 1.0.2, which is a SemVer major change.
                  npm warn audit Updating grunt to 1.6.3, which is outside your stated dependency range.
                  npm warn audit Updating mocha to 11.3.0, which is a SemVer major change.
                  npm warn audit Updating nodebb-plugin-dbsearch to 3.0.8, which is a SemVer major change.
                  npm warn audit No fix available for coveralls@*
                  npm warn audit Updating grunt-contrib-watch to 0.4.4, which is a SemVer major change.
                  npm warn deprecated osenv@0.1.5: This package is no longer supported.
                  npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
                  npm warn deprecated har-validator@5.1.5: this library is no longer supported
                  npm warn deprecated glob@7.1.7: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
                  npm warn deprecated minimatch@0.4.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
                  npm warn deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
                  npm warn deprecated minimatch@0.3.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
                  npm warn deprecated uuid@3.4.0: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
                  npm warn deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
                  npm warn deprecated glob@3.2.11: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
                  npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
                  
                  added 405 packages, removed 17 packages, changed 11 packages, and audited 1243 packages in 26s
                  
                  202 packages are looking for funding
                    run `npm fund` for details
                  
                  # npm audit report
                  
                  async  2.0.0 - 2.6.3
                  Severity: high
                  Prototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25
                  fix available via `npm audit fix --force`
                  Will install nodebb-plugin-dbsearch@7.0.0, which is a breaking change
                  node_modules/nodebb-plugin-dbsearch/node_modules/async
                    nodebb-plugin-dbsearch  2.0.0 - 4.0.7
                    Depends on vulnerable versions of async
                    node_modules/nodebb-plugin-dbsearch
                  
                  brace-expansion  <=5.0.7
                  Severity: high
                  brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash - https://github.com/advisories/GHSA-mh99-v99m-4gvg
                  fix available via `npm audit fix --force`
                  Will install mocha@8.1.3, which is a breaking change
                  node_modules/brace-expansion
                  node_modules/mocha/node_modules/brace-expansion
                    minimatch  <=10.0.2
                    Depends on vulnerable versions of brace-expansion
                    node_modules/fileset/node_modules/glob/node_modules/minimatch
                    node_modules/fileset/node_modules/minimatch
                    node_modules/gaze/node_modules/minimatch
                    node_modules/minimatch
                    node_modules/mocha/node_modules/glob/node_modules/minimatch
                    node_modules/mocha/node_modules/minimatch
                      fileset  0.1.0 - 0.2.1
                      Depends on vulnerable versions of glob
                      Depends on vulnerable versions of minimatch
                      node_modules/fileset
                        gaze  <=0.3.4
                        Depends on vulnerable versions of fileset
                        Depends on vulnerable versions of minimatch
                        node_modules/gaze
                          grunt-contrib-watch  <=0.5.3 || 1.0.0 - 1.0.1
                          Depends on vulnerable versions of gaze
                          Depends on vulnerable versions of tiny-lr
                          node_modules/grunt-contrib-watch
                      glob  3.0.0 - 10.5.0
                      Depends on vulnerable versions of minimatch
                      Depends on vulnerable versions of minimatch
                      node_modules/fileset/node_modules/glob
                      node_modules/glob
                      node_modules/mocha/node_modules/glob
                        grunt  >=1.0.0-rc1
                        Depends on vulnerable versions of glob
                        Depends on vulnerable versions of minimatch
                        node_modules/grunt
                        mocha  3.0.0-0 - 12.0.0-beta-9
                        Depends on vulnerable versions of glob
                        Depends on vulnerable versions of minimatch
                        Depends on vulnerable versions of serialize-javascript
                        node_modules/mocha
                  
                  debug  <=2.6.8
                  Severity: high
                  debug Inefficient Regular Expression Complexity vulnerability - https://github.com/advisories/GHSA-9vvw-cc9w-f27h
                  Regular Expression Denial of Service in debug - https://github.com/advisories/GHSA-gxpj-cx7g-858c
                  fix available via `npm audit fix --force`
                  Will install grunt-contrib-watch@1.1.0, which is a breaking change
                  node_modules/tiny-lr/node_modules/debug
                    tiny-lr  <=1.0.4
                    Depends on vulnerable versions of debug
                    Depends on vulnerable versions of qs
                    node_modules/tiny-lr
                  
                  form-data  <=2.5.5
                  Severity: critical
                  form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
                  form-data: CRLF injection in form-data via unescaped multipart field names and filenames - https://github.com/advisories/GHSA-hmw2-7cc7-3qxx
                  No fix available
                  node_modules/form-data
                    request  *
                    Depends on vulnerable versions of form-data
                    Depends on vulnerable versions of qs
                    Depends on vulnerable versions of tough-cookie
                    Depends on vulnerable versions of uuid
                    node_modules/request
                      coveralls  *
                      Depends on vulnerable versions of request
                      node_modules/coveralls
                  
                  
                  qs  <=6.14.0
                  Severity: high
                  Prototype Pollution Protection Bypass in qs - https://github.com/advisories/GHSA-gqgv-6jq5-jjj9
                  Denial-of-Service Extended Event Loop Blocking in qs - https://github.com/advisories/GHSA-f9cm-p3w6-xvr3
                  Denial-of-Service Memory Exhaustion in qs - https://github.com/advisories/GHSA-jjv7-qpx3-h62q
                  qs vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-hrpp-h998-j3pp
                  qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion - https://github.com/advisories/GHSA-6rw7-vpxm-498p
                  fix available via `npm audit fix --force`
                  Will install grunt-contrib-watch@1.1.0, which is a breaking change
                  node_modules/request/node_modules/qs
                  node_modules/tiny-lr/node_modules/qs
                  
                  
                  serialize-javascript  <=7.0.4
                  Severity: high
                  Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() - https://github.com/advisories/GHSA-5c6j-r48x-rmvq
                  Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects - https://github.com/advisories/GHSA-qj8w-gfj5-8c6v
                  fix available via `npm audit fix --force`
                  Will install mocha@8.1.3, which is a breaking change
                  node_modules/serialize-javascript
                  
                  tough-cookie  <4.1.3
                  Severity: moderate
                  tough-cookie Prototype Pollution vulnerability - https://github.com/advisories/GHSA-72xf-g2v4-qvf3
                  No fix available
                  node_modules/request/node_modules/tough-cookie
                  
                  uuid  <11.1.1
                  Severity: moderate
                  uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided - https://github.com/advisories/GHSA-w5hq-g745-h8pq
                  No fix available
                  node_modules/uuid
                  
                  19 vulnerabilities (3 moderate, 14 high, 2 critical)
                  
                  To address all issues possible (including breaking changes), run:
                    npm audit fix --force
                  
                  Some issues need review, and may require choosing
                  a different dependency.
                  
                  
                  
                  1 réponse Dernière réponse
                  0
                  • fariasF Hors-ligne
                    fariasF Hors-ligne
                    farias
                    écrit dernière édition par
                    #28

                    Toujours pareil …

                    # npx npm-check-updates -u 
                    npm notice run nodebb@4.14.4 npx
                    npm notice run 'ncu' -u
                    Upgrading /home/farias/nodebb/package.json
                    [====================] 164/164 100%
                    
                    Patch   Backwards-compatible bug fixes
                     @fortawesome/fontawesome-free   7.3.0  →   7.3.1
                     @json2csv/node                  7.0.6  →   7.0.7
                     autoprefixer                   10.5.2  →  10.5.4
                     nodebb-plugin-2factor           8.0.1  →   8.0.5
                     nodebb-plugin-emoji            6.0.14  →  6.0.16
                     nodebb-plugin-markdown         13.2.6  →  13.2.7
                     nodebb-plugin-spam-be-gone      2.3.4  →   2.3.5
                     nodebb-widget-essentials        8.0.4  →   8.0.5
                     postcss-clean                   1.2.0  →   1.2.2
                     sanitize-html                  2.17.5  →  2.17.6
                    
                    Minor   Backwards-compatible features
                     @fontsource/inter        5.2.8  →    5.3.0
                     @fontsource/poppins      5.2.7  →    5.3.0
                     fs-extra                11.3.6  →   11.4.0
                     globals                 17.7.0  →   17.8.0
                     helmet                   8.2.0  →    8.3.0
                     lint-staged             17.0.8  →   17.2.0
                     nodebb-theme-lavender    8.0.6  →    8.1.0
                     nodebb-theme-peace       3.0.6  →    3.1.1
                     sass                   1.101.0  →  1.102.0
                     spdx-license-list       6.11.0  →   6.12.0
                     undici                   8.7.0  →    8.9.0
                     webpack                5.108.4  →  5.109.2
                     yargs                   18.0.0  →   18.1.0
                    
                    Major   Potentially breaking API changes
                     @apidevtools/swagger-parser       10.1.0  →   12.1.0
                     @nodebb/nodebb-plugin-user-level  ^1.0.2  →   ^3.0.0
                     chalk                              5.6.2  →    6.0.0
                     connect-redis                      9.0.0  →   10.0.0
                     cropperjs                          1.6.2  →    2.1.1
                     express                           4.22.2  →    5.2.1
                     grunt-contrib-watch               ^0.4.4  →   ^1.1.0
                     husky                              8.0.3  →    9.1.7
                     jquery                             3.7.1  →    4.0.0
                     jsdom                             29.1.1  →   30.0.1
                     mocha                             ^8.1.3  →  ^11.7.6
                     nodebb-plugin-dbsearch            ^3.0.8  →   ^7.0.0
                     redis                             5.12.1  →    6.1.0
                    
                    Major version zero   Anything may change
                     @fontsource-utils/scss   0.2.2  →   0.2.4
                     nodebb-plugin-web-push   0.8.1  →   0.9.2
                     satori                  0.26.0  →  0.29.0
                    
                    Run npm install to install new versions.
                    
                    
                    # npm install 
                    npm warn deprecated raw-body@1.1.7: No longer maintained. Please upgrade to a stable version.
                    npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
                    npm notice run nodebb@4.14.4 postinstall
                    npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
                    npm notice run nodebb@4.14.4 npx
                    npm notice run 'husky' install
                    husky - install command is DEPRECATED
                    
                    added 89 packages, removed 70 packages, changed 78 packages, and audited 1255 packages in 36s
                    
                    204 packages are looking for funding
                      run `npm fund` for details
                    
                    22 vulnerabilities (1 low, 6 moderate, 13 high, 2 critical)
                    
                    To address all issues possible (including breaking changes), run:
                      npm audit fix --force
                    
                    Some issues need review, and may require choosing
                    a different dependency.
                    
                    Run `npm audit` for details.
                    
                    
                    # npx npm-check-updates
                    npm notice run nodebb@4.14.4 npx
                    npm notice run 'ncu'
                    Checking /home/farias/nodebb/package.json
                    [====================] 164/164 100%
                    All dependencies match the latest package versions :)
                    
                    # ./nodebb stop
                    Dependencies outdated or not yet installed. Error Code: DEP_WRONG_VERSION
                    TypeError: Incorrect dependency version: chalk
                        at checkVersion (/home/farias/nodebb/src/cli/index.js:41:14)
                        at Object.<anonymous> (/home/farias/nodebb/src/cli/index.js:50:2)
                        at Module._compile (node:internal/modules/cjs/loader:1871:14)
                        at Object..js (node:internal/modules/cjs/loader:2002:10)
                        at Module.load (node:internal/modules/cjs/loader:1594:32)
                        at Module._load (node:internal/modules/cjs/loader:1396:12)
                        at wrapModuleLoad (node:internal/modules/cjs/loader:255:19)
                        at Module.require (node:internal/modules/cjs/loader:1617:12)
                        at require (node:internal/modules/helpers:153:16)
                        at Object.<anonymous> (/home/farias/nodebb/nodebb:5:1)
                    Installing them now...
                    
                    npm notice run nodebb@4.14.4 postinstall
                    npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
                    
                    added 14 packages, removed 436 packages, changed 47 packages, and audited 833 packages in 18s
                    
                    129 packages are looking for funding
                      run `npm fund` for details
                    
                    5 vulnerabilities (1 moderate, 4 high)
                    
                    To address all issues (including breaking changes), run:
                      npm audit fix --force
                    
                    Run `npm audit` for details.
                    OK
                    
                    Stopping NodeBB. Goodbye!
                    
                    
                    # ./nodebb upgrade
                    upgrade
                    
                    Updating NodeBB...
                    
                    1. Updating package.json file with defaults...  OK
                    
                    2. Bringing base dependencies up to date...  started
                    npm notice run nodebb@4.14.4 postinstall
                    npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
                    
                    up to date, audited 833 packages in 6s
                    
                    129 packages are looking for funding
                      run `npm fund` for details
                    
                    5 vulnerabilities (1 moderate, 4 high)
                    
                    To address all issues (including breaking changes), run:
                      npm audit fix --force
                    
                    Run `npm audit` for details.
                    
                    3. Checking installed plugins for updates...Checking installed plugins and themes for updates...   OK
                    All packages up-to-date!
                    
                    4. Updating NodeBB data store schema...
                    Parsing upgrade scripts... 
                    OK | 0 script(s) found, 182 skipped
                    Schema update complete!
                    
                    
                    5. Rebuilding assets...  started
                    2026-07-30T06:10:32.067Z [4567/25380] - info: [build] Building in parallel mode
                    2026-07-30T06:10:32.072Z [4567/25380] - info: [build]         plugin static dirs  build started
                    2026-07-30T06:10:32.073Z [4567/25380] - info: [build]          requirejs modules  build started
                    2026-07-30T06:10:32.075Z [4567/25380] - info: [build]           client js bundle  build started
                    2026-07-30T06:10:32.077Z [4567/25380] - info: [build]            admin js bundle  build started
                    2026-07-30T06:10:32.077Z [4567/25380] - info: [build]         client side styles  build started
                    2026-07-30T06:10:32.079Z [4567/25380] - info: [build] admin control panel styles  build started
                    2026-07-30T06:10:32.083Z [4567/25380] - info: [build]                  templates  build started
                    2026-07-30T06:10:32.084Z [4567/25380] - info: [build]                  languages  build started
                    2026-07-30T06:10:32.976Z [4567/25380] - info: [build]         plugin static dirs  build completed in 0.904sec
                    2026-07-30T06:10:34.210Z [4567/25380] - info: [build]            admin js bundle  build completed in 2.133sec
                    2026-07-30T06:10:34.210Z [4567/25380] - info: [build]           client js bundle  build completed in 2.135sec
                    2026-07-30T06:10:37.757Z [4567/25380] - info: [build]          requirejs modules  build completed in 5.684sec
                    2026-07-30T06:10:37.758Z [4567/25380] - info: [build] Bundling with Webpack.
                    [10%] building (0/0 modules)
                    2026-07-30T06:10:39.384Z [4567/25380] - info: [build]         client side styles  build completed in 7.307sec
                    [10%] building (17/233 modules)
                    [10%] building (385/465 modules)
                    338 assets
                    541 modules
                    
                    ERROR in ./build/public/scripts-client.js 3435:5
                    Module parse failed: Unexpected token (3435:5)
                    You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
                    | });
                    | 
                    > ;CC0 1.0 Universal
                    | 
                    | Statement of Purpose
                    
                    webpack 5.108.4 compiled with 1 error in 8050 ms
                    2026-07-30T06:10:47.164Z [4567/25380] - info: [build] Asset compilation successful. Completed in 15.09sec.
                    
                    
                                                                                                                  NodeBB Upgrade Complete!
                    
                    # ./nodebb start
                    
                    Starting NodeBB
                      "./nodebb stop" to stop the NodeBB server
                      "./nodebb log" to view server output
                      "./nodebb help" for more commands
                    
                    
                    1 réponse Dernière réponse
                    1
                    • fariasF Hors-ligne
                      fariasF Hors-ligne
                      farias
                      écrit dernière édition par
                      #29

                      Toujours la même erreur :

                      # ./nodebb upgrade
                      
                      Updating NodeBB...
                      
                      1. Updating package.json file with defaults...  OK
                      
                      2. Bringing base dependencies up to date...  started
                      npm notice run nodebb@4.14.6 postinstall
                      npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
                      
                      changed 4 packages, and audited 833 packages in 10s
                      
                      129 packages are looking for funding
                        run `npm fund` for details
                      
                      8 vulnerabilities (1 moderate, 7 high)
                      
                      To address issues that do not require attention, run:
                        npm audit fix
                      
                      To address all issues (including breaking changes), run:
                        npm audit fix --force
                      
                      Run `npm audit` for details.
                      
                      3. Checking installed plugins for updates...Checking installed plugins and themes for updates...   OK
                      
                      A total of 2 package(s) can be upgraded:
                      
                        * @nodebb/nodebb-plugin-reactions (3.0.3 -> 3.0.4)
                        * nodebb-plugin-feed (4.0.1 -> 4.0.3)
                      
                      Proceed with upgrade (y|n)? y
                      
                      Upgrading packages...
                      
                      4. Updating NodeBB data store schema...
                      Parsing upgrade scripts... 
                      OK | 0 script(s) found, 182 skipped
                      Schema update complete!
                      
                      
                      5. Rebuilding assets...  started
                      2026-08-04T06:20:09.785Z [4567/57604] - info: [build] Building in parallel mode
                      2026-08-04T06:20:09.787Z [4567/57604] - info: [build]         plugin static dirs  build started
                      2026-08-04T06:20:09.787Z [4567/57604] - info: [build]          requirejs modules  build started
                      2026-08-04T06:20:09.788Z [4567/57604] - info: [build]           client js bundle  build started
                      2026-08-04T06:20:09.788Z [4567/57604] - info: [build]            admin js bundle  build started
                      2026-08-04T06:20:09.789Z [4567/57604] - info: [build]         client side styles  build started
                      2026-08-04T06:20:09.789Z [4567/57604] - info: [build] admin control panel styles  build started
                      2026-08-04T06:20:09.791Z [4567/57604] - info: [build]                  templates  build started
                      2026-08-04T06:20:09.791Z [4567/57604] - info: [build]                  languages  build started
                      2026-08-04T06:20:10.316Z [4567/57604] - info: [build]         plugin static dirs  build completed in 0.528sec
                      2026-08-04T06:20:11.821Z [4567/57604] - info: [build]           client js bundle  build completed in 2.033sec
                      2026-08-04T06:20:11.821Z [4567/57604] - info: [build]            admin js bundle  build completed in 2.033sec
                      2026-08-04T06:20:15.137Z [4567/57604] - info: [build]          requirejs modules  build completed in 5.35sec
                      2026-08-04T06:20:15.138Z [4567/57604] - info: [build] Bundling with Webpack.
                      [10%] building (0/0 modules)
                      2026-08-04T06:20:16.987Z [4567/57604] - info: [build]         client side styles  build completed in 7.197sec
                      [10%] building (23/245 modules)
                      [10%] building (411/496 modules)
                      338 assets
                      541 modules
                      
                      ERROR in ./build/public/scripts-client.js 3435:5
                      Module parse failed: Unexpected token (3435:5)
                      You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
                      | });
                      | 
                      > ;CC0 1.0 Universal
                      | 
                      | Statement of Purpose
                      
                      webpack 5.108.4 compiled with 1 error in 10848 ms
                      2026-08-04T06:20:27.656Z [4567/57604] - info: [build] Asset compilation successful. Completed in 17.861sec.
                      
                      
                                                                                                                    NodeBB Upgrade Complete!
                      
                      
                      
                      1 réponse Dernière réponse
                      0

                      Bonjour ! Vous semblez intéressé par cette conversation, mais vous n’avez pas encore de compte.

                      Marre de refaire défiler les mêmes messages ? Créez un compte pour retrouver votre position, recevoir des notifications des nouvelles réponses, sauvegarder vos favoris et voter pour les messages que vous appréciez.

                      Grâce à votre participation, ce message peut devenir encore meilleur 💗

                      S'inscrire Se connecter
                      Répondre
                      • Répondre à l'aide d'un nouveau sujet
                      Se connecter pour répondre
                      • Du plus ancien au plus récent
                      • Du plus récent au plus ancien
                      • Les plus votés


                      • Se connecter

                      • Vous n'avez pas de compte ? S'inscrire

                      • Connectez-vous ou inscrivez-vous pour faire une recherche.
                      Powered by NodeBB Contributors
                      • Premier message
                        Dernier message
                      0
                      • Catégories
                      • Récent
                      • Mots-clés
                      • Populaire
                      • Web
                      • Utilisateurs
                      • Groupes