Aller directement au contenu
  • Catégories
  • Récent
  • Mots-clés
  • Populaire
  • Web
  • Utilisateurs
  • Groupes
Habillages
  • Clair
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Sombre
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Défaut (Aucun habillage)
  • Aucun habillage
Réduire

NodeBB

  1. Accueil
  2. Announcements
  3. NodeBB (update)

NodeBB (update)

Planifié Épinglé Verrouillé Déplacé Announcements
updatenodebb
29 Messages 2 Publieurs 517 Vues 1 Abonné
  • Du plus ancien au plus récent
  • Du plus récent au plus ancien
  • Les plus votés
Répondre
  • Répondre à l'aide d'un nouveau sujet
Se connecter pour répondre
Ce sujet a été supprimé. Seuls les utilisateurs avec les droits d'administration peuvent le voir.
  • fariasF Hors-ligne
    fariasF Hors-ligne
    farias
    écrit dernière édition par
    #21

    J’ai essayé :

    # npm config set legacy-peer-deps true
    ...
    # npm install @nodebb/nodebb-plugin-reaction
    ...
    
    

    Pas mieux.

    1 réponse Dernière réponse
    0
    • fariasF Hors-ligne
      fariasF Hors-ligne
      farias
      écrit dernière édition par
      #22

      Recherche des mise à jours :

      # npm outdated
      Package                           Current   Wanted   Latest  Location                                       Depended by
      @apidevtools/swagger-parser        10.1.0   10.1.0   12.1.0  node_modules/@apidevtools/swagger-parser       nodebb
      @fontsource-utils/scss              0.2.2    0.2.2    0.2.4  node_modules/@fontsource-utils/scss            nodebb
      @fontsource/inter                   5.2.8    5.2.8    5.3.0  node_modules/@fontsource/inter                 nodebb
      @fontsource/poppins                 5.2.7    5.2.7    5.3.0  node_modules/@fontsource/poppins               nodebb
      @fortawesome/fontawesome-free       7.3.0    7.3.0    7.3.1  node_modules/@fortawesome/fontawesome-free     nodebb
      @json2csv/node                      7.0.6    7.0.6    7.0.7  node_modules/@json2csv/node                    nodebb
      @nodebb/nodebb-plugin-user-level    1.0.2    1.0.4    3.0.0  node_modules/@nodebb/nodebb-plugin-user-level  nodebb
      autoprefixer                       10.5.2   10.5.2   10.5.4  node_modules/autoprefixer                      nodebb
      cropperjs                           1.6.2    1.6.2    2.1.1  node_modules/cropperjs                         nodebb
      express                            4.22.2   4.22.2    5.2.1  node_modules/express                           nodebb
      helmet                              8.2.0    8.2.0    8.3.0  node_modules/helmet                            nodebb
      husky                               8.0.3    8.0.3    9.1.7  node_modules/husky                             nodebb
      jquery                              3.7.1    3.7.1    4.0.0  node_modules/jquery                            nodebb
      lint-staged                        17.0.8   17.0.8   17.2.0  node_modules/lint-staged                       nodebb
      mocha                               8.1.3    8.4.0   11.7.6  node_modules/mocha                             nodebb
      nodebb-plugin-2factor               8.0.1    8.0.1    8.0.5  node_modules/nodebb-plugin-2factor             nodebb
      nodebb-plugin-composer-default     11.0.4   11.0.4   11.0.7  node_modules/nodebb-plugin-composer-default    nodebb
      nodebb-plugin-emoji                6.0.14   6.0.14   6.0.16  node_modules/nodebb-plugin-emoji               nodebb
      nodebb-plugin-imagemagick           2.1.1    2.1.1    3.0.0  node_modules/nodebb-plugin-imagemagick         nodebb
      nodebb-plugin-markdown             13.2.6   13.2.6   13.2.7  node_modules/nodebb-plugin-markdown            nodebb
      nodebb-plugin-spam-be-gone          2.3.4    2.3.4    2.3.5  node_modules/nodebb-plugin-spam-be-gone        nodebb
      nodebb-plugin-web-push              0.8.1    0.8.1    0.9.2  node_modules/nodebb-plugin-web-push            nodebb
      nodebb-theme-harmony                3.1.7    3.1.7    3.1.8  node_modules/nodebb-theme-harmony              nodebb
      nodebb-theme-lavender               8.0.6    8.0.6    8.1.0  node_modules/nodebb-theme-lavender             nodebb
      nodebb-theme-peace                  3.0.6    3.0.6    3.1.1  node_modules/nodebb-theme-peace                nodebb
      nodebb-theme-persona              15.0.11  15.0.11   15.1.4  node_modules/nodebb-theme-persona              nodebb
      nodebb-widget-essentials            8.0.4    8.0.4    8.0.5  node_modules/nodebb-widget-essentials          nodebb
      postcss                            8.5.16   8.5.16   8.5.22  node_modules/postcss                           nodebb
      postcss-clean                       1.2.0    1.2.0    1.2.2  node_modules/postcss-clean                     nodebb
      redis                              5.12.1   5.12.1    6.1.0  node_modules/redis                             nodebb
      sanitize-html                      2.17.5   2.17.5   2.17.6  node_modules/sanitize-html                     nodebb
      sass                              1.101.0  1.101.0  1.101.6  node_modules/sass                              nodebb
      satori                             0.26.0   0.26.0   0.29.0  node_modules/satori                            nodebb
      undici                              8.7.0    8.7.0    8.8.0  node_modules/undici                            nodebb
      
      
      
      1 réponse Dernière réponse
      0
      • fariasF Hors-ligne
        fariasF Hors-ligne
        farias
        écrit dernière édition par
        #23

        Nouvelle commande :

        # npx npm-check-updates -u
        Need to install the following packages:
        npm-check-updates@22.2.9
        Ok to proceed? (y) y
        
        [====================] 164/164 100%
        
         @apidevtools/swagger-parser        10.1.0  →   12.1.0
         @fontsource-utils/scss              0.2.2  →    0.2.4
         @fontsource/inter                   5.2.8  →    5.3.0
         @fontsource/poppins                 5.2.7  →    5.3.0
         @fortawesome/fontawesome-free       7.3.0  →    7.3.1
         @json2csv/node                      7.0.6  →    7.0.7
         @nodebb/nodebb-plugin-user-level   ^1.0.4  →   ^3.0.0
         autoprefixer                       10.5.2  →   10.5.4
         cropperjs                           1.6.2  →    2.1.1
         express                            4.22.2  →    5.2.1
         helmet                              8.2.0  →    8.3.0
         husky                               8.0.3  →    9.1.7
         jquery                              3.7.1  →    4.0.0
         lint-staged                        17.0.8  →   17.2.0
         mocha                              ^8.4.0  →  ^11.7.6
         nodebb-plugin-2factor               8.0.1  →    8.0.5
         nodebb-plugin-composer-default     11.0.4  →   11.0.7
         nodebb-plugin-emoji                6.0.14  →   6.0.16
         nodebb-plugin-imagemagick          ^2.1.1  →   ^3.0.0
         nodebb-plugin-markdown             13.2.6  →   13.2.7
         nodebb-plugin-spam-be-gone          2.3.4  →    2.3.5
         nodebb-plugin-web-push              0.8.1  →    0.9.2
         nodebb-theme-harmony                3.1.7  →    3.1.8
         nodebb-theme-lavender               8.0.6  →    8.1.0
         nodebb-theme-peace                  3.0.6  →    3.1.1
         nodebb-theme-persona              15.0.11  →   15.1.4
         nodebb-widget-essentials            8.0.4  →    8.0.5
         postcss                            8.5.16  →   8.5.22
         postcss-clean                       1.2.0  →    1.2.2
         redis                              5.12.1  →    6.1.0
         sanitize-html                      2.17.5  →   2.17.6
         sass                              1.101.0  →  1.101.6
         satori                             0.26.0  →   0.29.0
         undici                              8.7.0  →    8.8.0
        
        Run npm install to install new versions.
        
        # npm install
        ...
        # npx npm-check-updates -u
        Upgrading /home/farias/nodebb/package.json
        [====================] 164/164 100%
        
        All dependencies match the latest package versions :)
        
        
        1 réponse Dernière réponse
        0
        • fariasF Hors-ligne
          fariasF Hors-ligne
          farias
          écrit dernière édition par
          #24

          J’ai vu l’erreur :

          [92%] sealing (asset processing TerserPlugin)
          2026-07-24T09:47:43.437Z [4567/570572] - info: [build]         client side styles  build completed in 48.726sec
          338 assets
          541 modules
          
          ERROR in ./build/public/scripts-client.js 3433:5
          Module parse failed: Unexpected token (3433:5)
          You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
          | });
          | 
          > ;CC0 1.0 Universal
          | 
          | Statement of Purpose
          
          webpack 5.108.4 compiled with 1 error in 50842 ms
          2026-07-24T09:48:04.989Z [4567/570572] - info: [build] Asset compilation successful. Completed in 70.275sec.
          [cluster] Restarting...
          2026-07-24T09:48:06.260Z [4567/570572] - info: [app] Shutdown (SIGTERM/SIGINT/SIGQUIT) Initialised.
          Clustering enabled: Spinning up 1 process(es).
          
          2026-07-24T09:48:06.264Z [4567/570572] - info: [app] Web server closed to connections.
          2026-07-24T09:48:07.157Z [4567/575731] - info: Initializing NodeBB v4.14.2 https://lemmy.cyber-neurones.org
          2026-07-24T09:48:08.276Z [4567/570572] - info: [app] Live analytics saved.
          2026-07-24T09:48:08.317Z [4567/570572] - info: [app] Database connection closed.
          2026-07-24T09:48:08.317Z [4567/570572] - info: [app] Shutdown complete.
          [cluster] Child Process (570572) has exited (code: 0, signal: null)
          2026-07-24T09:48:17.087Z [4567/575731] - info: [socket.io] Restricting access to origin: https://lemmy.cyber-neurones.org:*
          video started
          
          2026-07-24T09:48:20.016Z [4567/575731] - warn: [plugins/load] The following plugins may not be compatible with your version of NodeBB. This may cause unintended behaviour or crashing. In the event of an unresponsive NodeBB caused by this plugin, run `./nodebb reset -p PLUGINNAME` to disable it.
            * nodebb-plugin-emoji-android
            * nodebb-plugin-imagemagick
          
          2026-07-24T09:48:20.184Z [4567/575731] - info: [plugins/web-push] VAPID keys OK.
          2026-07-24T09:48:20.274Z [4567/575731] - info: Regex recompiled: (?<url>https?:\/\/[^\s]+\/(?<filename>[\w_0-9\-\.]+\.(jpg|jpeg|gif|gifv|png|svg))([^\s]*)?)
          2026-07-24T09:48:20.276Z [4567/575731] - info: Cache initialized to size 3
          2026-07-24T09:48:20.367Z [4567/575731] - info: [api] Adding 3 route(s) to `api/v3/plugins`
          2026-07-24T09:48:20.403Z [4567/575731] - info: [router] Routes added
          2026-07-24T09:48:20.461Z [4567/575731] - info: 🎉 NodeBB Ready
          2026-07-24T09:48:20.466Z [4567/575731] - info: 🤝 Setting 'trust proxy' to true
          2026-07-24T09:48:20.474Z [4567/575731] - info: 📡 NodeBB is now listening on: 0.0.0.0:4567
          2026-07-24T09:48:20.474Z [4567/575731] - info: 🔗 Canonical URL: https://lemmy.cyber-neurones.org
          

          j’ai donc fait :

          # ./nodebb reset -p  nodebb-plugin-emoji-android
          2026-07-24T09:49:55.269Z [4567/575924] - info: [reset] Plugin `nodebb-plugin-emoji-android` disabled
          2026-07-24T09:49:55.270Z [4567/575924] - info: [reset] Reset complete. Please run `./nodebb build` to rebuild assets.
          # ./nodebb reset -p nodebb-plugin-imagemagick
          2026-07-24T09:50:05.732Z [4567/575964] - info: [reset] Plugin `nodebb-plugin-imagemagick` disabled
          2026-07-24T09:50:05.733Z [4567/575964] - info: [reset] Reset complete. Please run `./nodebb build` to rebuild assets.
          # ./nodebb build
          
          1 réponse Dernière réponse
          1
          • fariasF Hors-ligne
            fariasF Hors-ligne
            farias
            écrit dernière édition par
            #25

            Toujours des problèmes lors de la mise à jours :

            # git fetch
            remote: Enumerating objects: 970, done.
            remote: Counting objects: 100% (349/349), done.
            remote: Compressing objects: 100% (82/82), done.
            remote: Total 970 (delta 293), reused 282 (delta 267), pack-reused 621 (from 3)
            Receiving objects: 100% (970/970), 827.77 KiB | 7.46 MiB/s, done.
            Resolving deltas: 100% (575/575), completed with 69 local objects.
            From https://github.com/NodeBB/NodeBB
               0f9b8fa67f..e9beb46935  develop                                  -> origin/develop
               5282092037..065c02dddf  master                                   -> origin/master
             + b7b8e22a21...60fc1e1db0 renovate/apidevtools-swagger-parser-12.x -> origin/renovate/apidevtools-swagger-parser-12.x  (forced update)
             + 27d3b4d9ba...bc6e529bbb renovate/cropperjs-2.x                   -> origin/renovate/cropperjs-2.x  (forced update)
             + 7df2a1b5d1...e7b2b0b0e1 renovate/husky-9.x                       -> origin/renovate/husky-9.x  (forced update)
             + 8e7903e29c...f202b4e96f renovate/jquery-4.x                      -> origin/renovate/jquery-4.x  (forced update)
             * [new branch]            renovate/jsdom-30.x                      -> origin/renovate/jsdom-30.x
             + 118255d0c7...2f3350c094 renovate/redis-6.x                       -> origin/renovate/redis-6.x  (forced update)
             * [new branch]            renovate/webpack-5.x                     -> origin/renovate/webpack-5.x
               217f6ed81c..c91bec416a  v4.x                                     -> origin/v4.x
             * [new tag]               v4.14.3                                  -> v4.14.3
             * [new tag]               v4.14.4                                  -> v4.14.4
            
            # git reset --hard  v4.14.4
            HEAD is now at 9f9a69acd2 chore: incrementing version number - v4.14.4
            
            # ./nodebb upgrade
            
            Updating NodeBB...
            
            1. Updating package.json file with defaults...  OK
            
            2. Bringing base dependencies up to date...  started
            npm notice run nodebb@4.14.4 postinstall
            npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
            
            changed 3 packages, and audited 855 packages in 10s
            
            137 packages are looking for funding
              run `npm fund` for details
            
            10 vulnerabilities (1 moderate, 9 high)
            
            To address issues that do not require attention, run:
              npm audit fix
            
            To address all issues (including breaking changes), run:
              npm audit fix --force
            
            Run `npm audit` for details.
            npm warn install-scripts 2 packages had install scripts blocked because they are not covered by allowScripts:
            npm warn install-scripts   @parcel/watcher@2.6.0 (install: node-gyp rebuild)
            npm warn install-scripts   snyk@1.1306.1 (postinstall: node wrapper_dist/bootstrap.js exec)
            npm warn install-scripts
            npm warn install-scripts Run `npm install-scripts ls` to review, or `npm install-scripts approve <pkg>` to allow.
            
            3. Checking installed plugins for updates...Checking installed plugins and themes for updates...   OK
            
            A total of 1 package(s) can be upgraded:
            
              * @nodebb/nodebb-plugin-reactions (3.0.2 -> 3.0.3)
            
            Proceed with upgrade (y|n)? y
            
            Upgrading packages...
            
            4. Updating NodeBB data store schema...
            Parsing upgrade scripts... 
            OK | 2 script(s) found, 180 skipped
              → [2026/7/28] Backfill trust_proxy for upgraded installs... OK (0.00 seconds)
              → [2026/7/29] Backfill trust_proxy into the config file specified via --config... OK (0.00 seconds)
            Schema update complete!
            
            
            5. Rebuilding assets...  started
            2026-07-30T05:58:17.922Z [4567/24107] - info: [build] Building in parallel mode
            2026-07-30T05:58:17.927Z [4567/24107] - info: [build]         plugin static dirs  build started
            2026-07-30T05:58:17.929Z [4567/24107] - info: [build]          requirejs modules  build started
            2026-07-30T05:58:17.930Z [4567/24107] - info: [build]           client js bundle  build started
            2026-07-30T05:58:17.932Z [4567/24107] - info: [build]            admin js bundle  build started
            2026-07-30T05:58:17.933Z [4567/24107] - info: [build]         client side styles  build started
            2026-07-30T05:58:17.934Z [4567/24107] - info: [build] admin control panel styles  build started
            2026-07-30T05:58:17.938Z [4567/24107] - info: [build]                  templates  build started
            2026-07-30T05:58:17.939Z [4567/24107] - info: [build]                  languages  build started
            2026-07-30T05:58:18.515Z [4567/24107] - info: [build]         plugin static dirs  build completed in 0.587sec
            2026-07-30T05:58:19.980Z [4567/24107] - info: [build]           client js bundle  build completed in 2.049sec
            2026-07-30T05:58:19.982Z [4567/24107] - info: [build]            admin js bundle  build completed in 2.05sec
            2026-07-30T05:58:24.069Z [4567/24107] - info: [build]          requirejs modules  build completed in 6.141sec
            2026-07-30T05:58:24.070Z [4567/24107] - info: [build] Bundling with Webpack.
            [10%] building (0/0 modules)
            [10%] building (1/19 modules)
            [10%] building (23/247 modules)
            [10%] building (351/424 modules)
            338 assets
            541 modules
            
            ERROR in ./build/public/scripts-client.js 3435:5
            Module parse failed: Unexpected token (3435:5)
            You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
            | });
            | 
            > ;CC0 1.0 Universal
            | 
            | Statement of Purpose
            
            webpack 5.108.4 compiled with 1 error in 9148 ms
            2026-07-30T05:58:34.829Z [4567/24107] - info: [build] Asset compilation successful. Completed in 16.9sec.
            
            
                                                                                                          NodeBB Upgrade Complete!
            
            
            1 réponse Dernière réponse
            0
            • fariasF Hors-ligne
              fariasF Hors-ligne
              farias
              écrit dernière édition par
              #26

              Misère.

              # npm install-scripts ls
              2 packages have install scripts blocked because they are not covered by allowScripts:
                @parcel/watcher@2.6.0 (install: node-gyp rebuild)
                snyk@1.1306.1 (postinstall: node wrapper_dist/bootstrap.js exec)
              # npm install-scripts approve @parcel/watcher@2.6.0
              Approved @parcel/watcher:
                removed-stale @parcel/watcher@2.5.1
                added @parcel/watcher@2.6.0
              # npm install-scripts approve snyk@1.1306.1
              Approved snyk:
                removed-stale snyk@1.1300.2
                added snyk@1.1306.1
              
              
              1 réponse Dernière réponse
              0
              • fariasF Hors-ligne
                fariasF Hors-ligne
                farias
                écrit dernière édition par
                #27
                # npm audit fix --force
                npm warn using --force Recommended protections disabled.
                npm warn audit Updating postcss to 8.5.25, which is outside your stated dependency range.
                npm warn audit Updating @nodebb/nodebb-plugin-user-level to 1.0.2, which is a SemVer major change.
                npm warn audit Updating grunt to 1.6.3, which is outside your stated dependency range.
                npm warn audit Updating mocha to 11.3.0, which is a SemVer major change.
                npm warn audit Updating nodebb-plugin-dbsearch to 3.0.8, which is a SemVer major change.
                npm warn audit No fix available for coveralls@*
                npm warn audit Updating grunt-contrib-watch to 0.4.4, which is a SemVer major change.
                npm warn deprecated osenv@0.1.5: This package is no longer supported.
                npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
                npm warn deprecated har-validator@5.1.5: this library is no longer supported
                npm warn deprecated glob@7.1.7: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
                npm warn deprecated minimatch@0.4.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
                npm warn deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
                npm warn deprecated minimatch@0.3.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
                npm warn deprecated uuid@3.4.0: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
                npm warn deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
                npm warn deprecated glob@3.2.11: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
                npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
                
                added 405 packages, removed 17 packages, changed 11 packages, and audited 1243 packages in 26s
                
                202 packages are looking for funding
                  run `npm fund` for details
                
                # npm audit report
                
                async  2.0.0 - 2.6.3
                Severity: high
                Prototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25
                fix available via `npm audit fix --force`
                Will install nodebb-plugin-dbsearch@7.0.0, which is a breaking change
                node_modules/nodebb-plugin-dbsearch/node_modules/async
                  nodebb-plugin-dbsearch  2.0.0 - 4.0.7
                  Depends on vulnerable versions of async
                  node_modules/nodebb-plugin-dbsearch
                
                brace-expansion  <=5.0.7
                Severity: high
                brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash - https://github.com/advisories/GHSA-mh99-v99m-4gvg
                fix available via `npm audit fix --force`
                Will install mocha@8.1.3, which is a breaking change
                node_modules/brace-expansion
                node_modules/mocha/node_modules/brace-expansion
                  minimatch  <=10.0.2
                  Depends on vulnerable versions of brace-expansion
                  node_modules/fileset/node_modules/glob/node_modules/minimatch
                  node_modules/fileset/node_modules/minimatch
                  node_modules/gaze/node_modules/minimatch
                  node_modules/minimatch
                  node_modules/mocha/node_modules/glob/node_modules/minimatch
                  node_modules/mocha/node_modules/minimatch
                    fileset  0.1.0 - 0.2.1
                    Depends on vulnerable versions of glob
                    Depends on vulnerable versions of minimatch
                    node_modules/fileset
                      gaze  <=0.3.4
                      Depends on vulnerable versions of fileset
                      Depends on vulnerable versions of minimatch
                      node_modules/gaze
                        grunt-contrib-watch  <=0.5.3 || 1.0.0 - 1.0.1
                        Depends on vulnerable versions of gaze
                        Depends on vulnerable versions of tiny-lr
                        node_modules/grunt-contrib-watch
                    glob  3.0.0 - 10.5.0
                    Depends on vulnerable versions of minimatch
                    Depends on vulnerable versions of minimatch
                    node_modules/fileset/node_modules/glob
                    node_modules/glob
                    node_modules/mocha/node_modules/glob
                      grunt  >=1.0.0-rc1
                      Depends on vulnerable versions of glob
                      Depends on vulnerable versions of minimatch
                      node_modules/grunt
                      mocha  3.0.0-0 - 12.0.0-beta-9
                      Depends on vulnerable versions of glob
                      Depends on vulnerable versions of minimatch
                      Depends on vulnerable versions of serialize-javascript
                      node_modules/mocha
                
                debug  <=2.6.8
                Severity: high
                debug Inefficient Regular Expression Complexity vulnerability - https://github.com/advisories/GHSA-9vvw-cc9w-f27h
                Regular Expression Denial of Service in debug - https://github.com/advisories/GHSA-gxpj-cx7g-858c
                fix available via `npm audit fix --force`
                Will install grunt-contrib-watch@1.1.0, which is a breaking change
                node_modules/tiny-lr/node_modules/debug
                  tiny-lr  <=1.0.4
                  Depends on vulnerable versions of debug
                  Depends on vulnerable versions of qs
                  node_modules/tiny-lr
                
                form-data  <=2.5.5
                Severity: critical
                form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
                form-data: CRLF injection in form-data via unescaped multipart field names and filenames - https://github.com/advisories/GHSA-hmw2-7cc7-3qxx
                No fix available
                node_modules/form-data
                  request  *
                  Depends on vulnerable versions of form-data
                  Depends on vulnerable versions of qs
                  Depends on vulnerable versions of tough-cookie
                  Depends on vulnerable versions of uuid
                  node_modules/request
                    coveralls  *
                    Depends on vulnerable versions of request
                    node_modules/coveralls
                
                
                qs  <=6.14.0
                Severity: high
                Prototype Pollution Protection Bypass in qs - https://github.com/advisories/GHSA-gqgv-6jq5-jjj9
                Denial-of-Service Extended Event Loop Blocking in qs - https://github.com/advisories/GHSA-f9cm-p3w6-xvr3
                Denial-of-Service Memory Exhaustion in qs - https://github.com/advisories/GHSA-jjv7-qpx3-h62q
                qs vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-hrpp-h998-j3pp
                qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion - https://github.com/advisories/GHSA-6rw7-vpxm-498p
                fix available via `npm audit fix --force`
                Will install grunt-contrib-watch@1.1.0, which is a breaking change
                node_modules/request/node_modules/qs
                node_modules/tiny-lr/node_modules/qs
                
                
                serialize-javascript  <=7.0.4
                Severity: high
                Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() - https://github.com/advisories/GHSA-5c6j-r48x-rmvq
                Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects - https://github.com/advisories/GHSA-qj8w-gfj5-8c6v
                fix available via `npm audit fix --force`
                Will install mocha@8.1.3, which is a breaking change
                node_modules/serialize-javascript
                
                tough-cookie  <4.1.3
                Severity: moderate
                tough-cookie Prototype Pollution vulnerability - https://github.com/advisories/GHSA-72xf-g2v4-qvf3
                No fix available
                node_modules/request/node_modules/tough-cookie
                
                uuid  <11.1.1
                Severity: moderate
                uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided - https://github.com/advisories/GHSA-w5hq-g745-h8pq
                No fix available
                node_modules/uuid
                
                19 vulnerabilities (3 moderate, 14 high, 2 critical)
                
                To address all issues possible (including breaking changes), run:
                  npm audit fix --force
                
                Some issues need review, and may require choosing
                a different dependency.
                
                
                
                1 réponse Dernière réponse
                0
                • fariasF Hors-ligne
                  fariasF Hors-ligne
                  farias
                  écrit dernière édition par
                  #28

                  Toujours pareil …

                  # npx npm-check-updates -u 
                  npm notice run nodebb@4.14.4 npx
                  npm notice run 'ncu' -u
                  Upgrading /home/farias/nodebb/package.json
                  [====================] 164/164 100%
                  
                  Patch   Backwards-compatible bug fixes
                   @fortawesome/fontawesome-free   7.3.0  →   7.3.1
                   @json2csv/node                  7.0.6  →   7.0.7
                   autoprefixer                   10.5.2  →  10.5.4
                   nodebb-plugin-2factor           8.0.1  →   8.0.5
                   nodebb-plugin-emoji            6.0.14  →  6.0.16
                   nodebb-plugin-markdown         13.2.6  →  13.2.7
                   nodebb-plugin-spam-be-gone      2.3.4  →   2.3.5
                   nodebb-widget-essentials        8.0.4  →   8.0.5
                   postcss-clean                   1.2.0  →   1.2.2
                   sanitize-html                  2.17.5  →  2.17.6
                  
                  Minor   Backwards-compatible features
                   @fontsource/inter        5.2.8  →    5.3.0
                   @fontsource/poppins      5.2.7  →    5.3.0
                   fs-extra                11.3.6  →   11.4.0
                   globals                 17.7.0  →   17.8.0
                   helmet                   8.2.0  →    8.3.0
                   lint-staged             17.0.8  →   17.2.0
                   nodebb-theme-lavender    8.0.6  →    8.1.0
                   nodebb-theme-peace       3.0.6  →    3.1.1
                   sass                   1.101.0  →  1.102.0
                   spdx-license-list       6.11.0  →   6.12.0
                   undici                   8.7.0  →    8.9.0
                   webpack                5.108.4  →  5.109.2
                   yargs                   18.0.0  →   18.1.0
                  
                  Major   Potentially breaking API changes
                   @apidevtools/swagger-parser       10.1.0  →   12.1.0
                   @nodebb/nodebb-plugin-user-level  ^1.0.2  →   ^3.0.0
                   chalk                              5.6.2  →    6.0.0
                   connect-redis                      9.0.0  →   10.0.0
                   cropperjs                          1.6.2  →    2.1.1
                   express                           4.22.2  →    5.2.1
                   grunt-contrib-watch               ^0.4.4  →   ^1.1.0
                   husky                              8.0.3  →    9.1.7
                   jquery                             3.7.1  →    4.0.0
                   jsdom                             29.1.1  →   30.0.1
                   mocha                             ^8.1.3  →  ^11.7.6
                   nodebb-plugin-dbsearch            ^3.0.8  →   ^7.0.0
                   redis                             5.12.1  →    6.1.0
                  
                  Major version zero   Anything may change
                   @fontsource-utils/scss   0.2.2  →   0.2.4
                   nodebb-plugin-web-push   0.8.1  →   0.9.2
                   satori                  0.26.0  →  0.29.0
                  
                  Run npm install to install new versions.
                  
                  
                  # npm install 
                  npm warn deprecated raw-body@1.1.7: No longer maintained. Please upgrade to a stable version.
                  npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
                  npm notice run nodebb@4.14.4 postinstall
                  npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
                  npm notice run nodebb@4.14.4 npx
                  npm notice run 'husky' install
                  husky - install command is DEPRECATED
                  
                  added 89 packages, removed 70 packages, changed 78 packages, and audited 1255 packages in 36s
                  
                  204 packages are looking for funding
                    run `npm fund` for details
                  
                  22 vulnerabilities (1 low, 6 moderate, 13 high, 2 critical)
                  
                  To address all issues possible (including breaking changes), run:
                    npm audit fix --force
                  
                  Some issues need review, and may require choosing
                  a different dependency.
                  
                  Run `npm audit` for details.
                  
                  
                  # npx npm-check-updates
                  npm notice run nodebb@4.14.4 npx
                  npm notice run 'ncu'
                  Checking /home/farias/nodebb/package.json
                  [====================] 164/164 100%
                  All dependencies match the latest package versions :)
                  
                  # ./nodebb stop
                  Dependencies outdated or not yet installed. Error Code: DEP_WRONG_VERSION
                  TypeError: Incorrect dependency version: chalk
                      at checkVersion (/home/farias/nodebb/src/cli/index.js:41:14)
                      at Object.<anonymous> (/home/farias/nodebb/src/cli/index.js:50:2)
                      at Module._compile (node:internal/modules/cjs/loader:1871:14)
                      at Object..js (node:internal/modules/cjs/loader:2002:10)
                      at Module.load (node:internal/modules/cjs/loader:1594:32)
                      at Module._load (node:internal/modules/cjs/loader:1396:12)
                      at wrapModuleLoad (node:internal/modules/cjs/loader:255:19)
                      at Module.require (node:internal/modules/cjs/loader:1617:12)
                      at require (node:internal/modules/helpers:153:16)
                      at Object.<anonymous> (/home/farias/nodebb/nodebb:5:1)
                  Installing them now...
                  
                  npm notice run nodebb@4.14.4 postinstall
                  npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
                  
                  added 14 packages, removed 436 packages, changed 47 packages, and audited 833 packages in 18s
                  
                  129 packages are looking for funding
                    run `npm fund` for details
                  
                  5 vulnerabilities (1 moderate, 4 high)
                  
                  To address all issues (including breaking changes), run:
                    npm audit fix --force
                  
                  Run `npm audit` for details.
                  OK
                  
                  Stopping NodeBB. Goodbye!
                  
                  
                  # ./nodebb upgrade
                  upgrade
                  
                  Updating NodeBB...
                  
                  1. Updating package.json file with defaults...  OK
                  
                  2. Bringing base dependencies up to date...  started
                  npm notice run nodebb@4.14.4 postinstall
                  npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
                  
                  up to date, audited 833 packages in 6s
                  
                  129 packages are looking for funding
                    run `npm fund` for details
                  
                  5 vulnerabilities (1 moderate, 4 high)
                  
                  To address all issues (including breaking changes), run:
                    npm audit fix --force
                  
                  Run `npm audit` for details.
                  
                  3. Checking installed plugins for updates...Checking installed plugins and themes for updates...   OK
                  All packages up-to-date!
                  
                  4. Updating NodeBB data store schema...
                  Parsing upgrade scripts... 
                  OK | 0 script(s) found, 182 skipped
                  Schema update complete!
                  
                  
                  5. Rebuilding assets...  started
                  2026-07-30T06:10:32.067Z [4567/25380] - info: [build] Building in parallel mode
                  2026-07-30T06:10:32.072Z [4567/25380] - info: [build]         plugin static dirs  build started
                  2026-07-30T06:10:32.073Z [4567/25380] - info: [build]          requirejs modules  build started
                  2026-07-30T06:10:32.075Z [4567/25380] - info: [build]           client js bundle  build started
                  2026-07-30T06:10:32.077Z [4567/25380] - info: [build]            admin js bundle  build started
                  2026-07-30T06:10:32.077Z [4567/25380] - info: [build]         client side styles  build started
                  2026-07-30T06:10:32.079Z [4567/25380] - info: [build] admin control panel styles  build started
                  2026-07-30T06:10:32.083Z [4567/25380] - info: [build]                  templates  build started
                  2026-07-30T06:10:32.084Z [4567/25380] - info: [build]                  languages  build started
                  2026-07-30T06:10:32.976Z [4567/25380] - info: [build]         plugin static dirs  build completed in 0.904sec
                  2026-07-30T06:10:34.210Z [4567/25380] - info: [build]            admin js bundle  build completed in 2.133sec
                  2026-07-30T06:10:34.210Z [4567/25380] - info: [build]           client js bundle  build completed in 2.135sec
                  2026-07-30T06:10:37.757Z [4567/25380] - info: [build]          requirejs modules  build completed in 5.684sec
                  2026-07-30T06:10:37.758Z [4567/25380] - info: [build] Bundling with Webpack.
                  [10%] building (0/0 modules)
                  2026-07-30T06:10:39.384Z [4567/25380] - info: [build]         client side styles  build completed in 7.307sec
                  [10%] building (17/233 modules)
                  [10%] building (385/465 modules)
                  338 assets
                  541 modules
                  
                  ERROR in ./build/public/scripts-client.js 3435:5
                  Module parse failed: Unexpected token (3435:5)
                  You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
                  | });
                  | 
                  > ;CC0 1.0 Universal
                  | 
                  | Statement of Purpose
                  
                  webpack 5.108.4 compiled with 1 error in 8050 ms
                  2026-07-30T06:10:47.164Z [4567/25380] - info: [build] Asset compilation successful. Completed in 15.09sec.
                  
                  
                                                                                                                NodeBB Upgrade Complete!
                  
                  # ./nodebb start
                  
                  Starting NodeBB
                    "./nodebb stop" to stop the NodeBB server
                    "./nodebb log" to view server output
                    "./nodebb help" for more commands
                  
                  
                  1 réponse Dernière réponse
                  1
                  • fariasF Hors-ligne
                    fariasF Hors-ligne
                    farias
                    écrit dernière édition par
                    #29

                    Toujours la même erreur :

                    # ./nodebb upgrade
                    
                    Updating NodeBB...
                    
                    1. Updating package.json file with defaults...  OK
                    
                    2. Bringing base dependencies up to date...  started
                    npm notice run nodebb@4.14.6 postinstall
                    npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
                    
                    changed 4 packages, and audited 833 packages in 10s
                    
                    129 packages are looking for funding
                      run `npm fund` for details
                    
                    8 vulnerabilities (1 moderate, 7 high)
                    
                    To address issues that do not require attention, run:
                      npm audit fix
                    
                    To address all issues (including breaking changes), run:
                      npm audit fix --force
                    
                    Run `npm audit` for details.
                    
                    3. Checking installed plugins for updates...Checking installed plugins and themes for updates...   OK
                    
                    A total of 2 package(s) can be upgraded:
                    
                      * @nodebb/nodebb-plugin-reactions (3.0.3 -> 3.0.4)
                      * nodebb-plugin-feed (4.0.1 -> 4.0.3)
                    
                    Proceed with upgrade (y|n)? y
                    
                    Upgrading packages...
                    
                    4. Updating NodeBB data store schema...
                    Parsing upgrade scripts... 
                    OK | 0 script(s) found, 182 skipped
                    Schema update complete!
                    
                    
                    5. Rebuilding assets...  started
                    2026-08-04T06:20:09.785Z [4567/57604] - info: [build] Building in parallel mode
                    2026-08-04T06:20:09.787Z [4567/57604] - info: [build]         plugin static dirs  build started
                    2026-08-04T06:20:09.787Z [4567/57604] - info: [build]          requirejs modules  build started
                    2026-08-04T06:20:09.788Z [4567/57604] - info: [build]           client js bundle  build started
                    2026-08-04T06:20:09.788Z [4567/57604] - info: [build]            admin js bundle  build started
                    2026-08-04T06:20:09.789Z [4567/57604] - info: [build]         client side styles  build started
                    2026-08-04T06:20:09.789Z [4567/57604] - info: [build] admin control panel styles  build started
                    2026-08-04T06:20:09.791Z [4567/57604] - info: [build]                  templates  build started
                    2026-08-04T06:20:09.791Z [4567/57604] - info: [build]                  languages  build started
                    2026-08-04T06:20:10.316Z [4567/57604] - info: [build]         plugin static dirs  build completed in 0.528sec
                    2026-08-04T06:20:11.821Z [4567/57604] - info: [build]           client js bundle  build completed in 2.033sec
                    2026-08-04T06:20:11.821Z [4567/57604] - info: [build]            admin js bundle  build completed in 2.033sec
                    2026-08-04T06:20:15.137Z [4567/57604] - info: [build]          requirejs modules  build completed in 5.35sec
                    2026-08-04T06:20:15.138Z [4567/57604] - info: [build] Bundling with Webpack.
                    [10%] building (0/0 modules)
                    2026-08-04T06:20:16.987Z [4567/57604] - info: [build]         client side styles  build completed in 7.197sec
                    [10%] building (23/245 modules)
                    [10%] building (411/496 modules)
                    338 assets
                    541 modules
                    
                    ERROR in ./build/public/scripts-client.js 3435:5
                    Module parse failed: Unexpected token (3435:5)
                    You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
                    | });
                    | 
                    > ;CC0 1.0 Universal
                    | 
                    | Statement of Purpose
                    
                    webpack 5.108.4 compiled with 1 error in 10848 ms
                    2026-08-04T06:20:27.656Z [4567/57604] - info: [build] Asset compilation successful. Completed in 17.861sec.
                    
                    
                                                                                                                  NodeBB Upgrade Complete!
                    
                    
                    
                    1 réponse Dernière réponse
                    0

                    Bonjour ! Vous semblez intéressé par cette conversation, mais vous n’avez pas encore de compte.

                    Marre de refaire défiler les mêmes messages ? Créez un compte pour retrouver votre position, recevoir des notifications des nouvelles réponses, sauvegarder vos favoris et voter pour les messages que vous appréciez.

                    Grâce à votre participation, ce message peut devenir encore meilleur 💗

                    S'inscrire Se connecter
                    Répondre
                    • Répondre à l'aide d'un nouveau sujet
                    Se connecter pour répondre
                    • Du plus ancien au plus récent
                    • Du plus récent au plus ancien
                    • Les plus votés


                    • Se connecter

                    • Vous n'avez pas de compte ? S'inscrire

                    • Connectez-vous ou inscrivez-vous pour faire une recherche.
                    Powered by NodeBB Contributors
                    • Premier message
                      Dernier message
                    0
                    • Catégories
                    • Récent
                    • Mots-clés
                    • Populaire
                    • Web
                    • Utilisateurs
                    • Groupes