Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 888ff2c

Browse files
nodejs-github-botnodejs-github-bot
authored
feat: update gyp-next to v0.21.1 (#3273)
1 parent 30cda26 commit 888ff2c

File tree

11 files changed

+29
-35
lines changed

11 files changed

+29
-35
lines changed

‎gyp/.github/workflows/node-gyp.yml‎

Lines changed: 3 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -11,27 +11,21 @@ jobs:
1111
matrix:
1212
os: [macos-latest, ubuntu-latest, windows-latest]
1313
python-version: ["3.10", "3.12", "3.14"]
14-
exclude:
15-
# Windows on Python 3.14 is blocked by nodejs/node#59983
16-
- os: windows-latest
17-
python-version: "3.14"
1814
include:
19-
- os: windows-latest # Windows on Python 3.13 instead of 3.14
20-
python-version: "3.13"
2115
- os: macos-15-intel # macOS on Intel
2216
python-version: "3.14"
2317
- os: ubuntu-24.04-arm # Ubuntu on ARM
2418
python-version: "3.14"
2519
- os: windows-11-arm # Windows on ARM
26-
python-version: "3.13" # Windows on Python 3.13 instead of 3.14
20+
python-version: "3.14"
2721
runs-on: ${{ matrix.os }}
2822
steps:
2923
- name: Clone gyp-next
30-
uses: actions/checkout@v5
24+
uses: actions/checkout@v6
3125
with:
3226
path: gyp-next
3327
- name: Clone nodejs/node-gyp
34-
uses: actions/checkout@v5
28+
uses: actions/checkout@v6
3529
with:
3630
repository: nodejs/node-gyp
3731
path: node-gyp

‎gyp/.github/workflows/nodejs.yml‎

Lines changed: 3 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -11,28 +11,22 @@ jobs:
1111
matrix:
1212
os: [macos-latest, ubuntu-latest, windows-latest]
1313
python-version: ["3.10", "3.12", "3.14"]
14-
exclude:
15-
# Windows on Python 3.14 is blocked by nodejs/node#59983
16-
- os: windows-latest
17-
python-version: "3.14"
1814
include:
19-
- os: windows-latest # Windows on Python 3.13 instead of 3.14
20-
python-version: "3.13"
2115
- os: macos-15-intel # macOS on Intel
2216
python-version: "3.14"
2317
- os: ubuntu-24.04-arm # Ubuntu on ARM
2418
python-version: "3.14"
2519
- os: windows-11-arm # Windows on ARM
26-
python-version: "3.13" # Windows on Python 3.13 instead of 3.14
20+
python-version: "3.14"
2721

2822
runs-on: ${{ matrix.os }}
2923
steps:
3024
- name: Clone gyp-next
31-
uses: actions/checkout@v5
25+
uses: actions/checkout@v6
3226
with:
3327
path: gyp-next
3428
- name: Clone nodejs/node
35-
uses: actions/checkout@v5
29+
uses: actions/checkout@v6
3630
with:
3731
repository: nodejs/node
3832
path: node

‎gyp/.github/workflows/python_tests.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
- os: macos-26
2121
python-version: 3.x
2222
steps:
23-
- uses: actions/checkout@v5
23+
- uses: actions/checkout@v6
2424
- name: Set up Python ${{ matrix.python-version }}
2525
uses: actions/setup-python@v6
2626
with:

‎gyp/.github/workflows/release-please.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,11 @@ jobs:
2424
if: ${{ needs.release-please.outputs.release_created }} # only publish on release
2525
runs-on: ubuntu-latest
2626
steps:
27-
- uses: actions/checkout@v5
27+
- uses: actions/checkout@v6
2828
- name: Build a binary wheel and a source tarball
2929
run: pipx run build
3030
- name: Store the distribution packages
31-
uses: actions/upload-artifact@v5
31+
uses: actions/upload-artifact@v6
3232
with:
3333
name: python-package-distributions
3434
path: dist/
@@ -48,7 +48,7 @@ jobs:
4848
id-token: write # IMPORTANT: mandatory for trusted publishing
4949
steps:
5050
- name: Download all the dists
51-
uses: actions/download-artifact@v6
51+
uses: actions/download-artifact@v7
5252
with:
5353
name: python-package-distributions
5454
path: dist/
@@ -68,12 +68,12 @@ jobs:
6868
id-token: write # IMPORTANT: mandatory for sigstore
6969
steps:
7070
- name: Download all the dists
71-
uses: actions/download-artifact@v6
71+
uses: actions/download-artifact@v7
7272
with:
7373
name: python-package-distributions
7474
path: dist/
7575
- name: Sign the dists with Sigstore
76-
uses: sigstore/gh-action-sigstore-python@v3.1.0
76+
uses: sigstore/gh-action-sigstore-python@v3.2.0
7777
with:
7878
inputs: >-
7979
./dist/*.tar.gz

‎gyp/.release-please-manifest.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
{
2-
".": "0.21.0"
2+
".": "0.21.1"
33
}

‎gyp/CHANGELOG.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,12 @@
11
# Changelog
22

3+
## [0.21.1](https://github.com/nodejs/gyp-next/compare/v0.21.0...v0.21.1) (2026-01-24)
4+
5+
6+
### Bug Fixes
7+
8+
* replace weak hash functions with SHA-256 ([#329](https://github.com/nodejs/gyp-next/issues/329)) ([958029e](https://github.com/nodejs/gyp-next/commit/958029e6e4969a871d15e78cd083bb102bebb381))
9+
310
## [0.21.0](https://github.com/nodejs/gyp-next/compare/v0.20.5...v0.21.0) (2025-11-04)
411

512

‎gyp/pylib/gyp/MSVSNew.py‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ def MakeGuid(name, seed="msvs_new"):
3434
3535
Args:
3636
name: Target name.
37-
seed: Seed for MD5 hash.
37+
seed: Seed for SHA-256 hash.
3838
Returns:
3939
A GUID-line string calculated from the name and seed.
4040
@@ -44,8 +44,8 @@ def MakeGuid(name, seed="msvs_new"):
4444
determine the GUID to refer to explicitly. It also means that the GUID will
4545
not change when the project for a target is rebuilt.
4646
"""
47-
# Calculate a MD5 signature for the seed and name.
48-
d = hashlib.md5((str(seed) + str(name)).encode("utf-8")).hexdigest().upper()
47+
# Calculate a SHA-256 signature for the seed and name.
48+
d = hashlib.sha256((str(seed) + str(name)).encode("utf-8")).hexdigest().upper()
4949
# Convert most of the signature to GUID form (discard the rest)
5050
guid = (
5151
"{"

‎gyp/pylib/gyp/generator/make.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2169,7 +2169,7 @@ def WriteMakeRule(
21692169
# - The multi-output rule will have an do-nothing recipe.
21702170

21712171
# Hash the target name to avoid generating overlong filenames.
2172-
cmddigest = hashlib.sha1(
2172+
cmddigest = hashlib.sha256(
21732173
(command or self.target).encode("utf-8")
21742174
).hexdigest()
21752175
intermediate = "%s.intermediate" % cmddigest

‎gyp/pylib/gyp/generator/ninja.py‎

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -809,9 +809,8 @@ def cygwin_munge(path):
809809
outputs = [self.GypPathToNinja(o, env) for o in outputs]
810810
if self.flavor == "win":
811811
# WriteNewNinjaRule uses unique_name to create a rsp file on win.
812-
extra_bindings.append(
813-
("unique_name", hashlib.md5(outputs[0]).hexdigest())
814-
)
812+
unique_name = hashlib.sha256(outputs[0].encode("utf-8")).hexdigest()
813+
extra_bindings.append(("unique_name", unique_name))
815814

816815
self.ninja.build(
817816
outputs,
@@ -2803,7 +2802,7 @@ def GenerateOutputForConfig(target_list, target_dicts, data, params, config_name
28032802
build_file, name, toolset
28042803
)
28052804
qualified_target_for_hash = qualified_target_for_hash.encode("utf-8")
2806-
hash_for_rules = hashlib.md5(qualified_target_for_hash).hexdigest()
2805+
hash_for_rules = hashlib.sha256(qualified_target_for_hash).hexdigest()
28072806

28082807
base_path = os.path.dirname(build_file)
28092808
obj = "obj"

‎gyp/pylib/gyp/xcodeproj_file.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -429,7 +429,7 @@ def _HashUpdate(hash, data):
429429
hash.update(data)
430430

431431
if seed_hash is None:
432-
seed_hash = hashlib.sha1()
432+
seed_hash = hashlib.sha256()
433433

434434
hash = seed_hash.copy()
435435

0 commit comments

Comments
 (0)