#1040
[Snyk] Upgrade node-gyp from 12.2.0 to 12.3.0
Snyk has created this PR to upgrade node-gyp from 12.2.0 to 12.3.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
-
The recommended version is 1 version ahead of your current version.
-
The recommended version was released 2 months ago.
Issues fixed by the recommended upgrade:
| Issue | Score | Exploit Maturity | |
|---|---|---|---|
| Cross-site Scripting (XSS) SNYK-JS-IPADDRESS-16636412 | 68 | No Known Exploit |
Release notes
Package name: node-gyp
-
12.3.0 - 2026-04-21
12.3.0 (2026-04-21)
Features
- replace make-fetch-happen with built-in fetch (#3302) (393ec2b)
- update gyp-next to v0.22.1 (#3295) (f4242fb)
Bug Fixes
Core
-
12.2.0 - 2026-01-27
12.2.0 (2026-01-26)
Features
- include built package version in error logs (#3254) (ee9cbdd)
- update gyp-next to v0.21.1 (#3273) (888ff2c)
Bug Fixes
- cpu concurrency detection on some platforms (#3255) (f15b79a), closes #3191
- python is no longer a valid npm config setting (#3258) (c7c678f)
- Switch to URL instead of url.parse (#3256) (3f81949)
- Test Windows on Python 3.14, not 3.13 (#3262) (7b4f315)
Core
Doc
- add a note about changes in gyp folder (#3259) (a52bc81)
- correct typos (#3269) (0f2bc7d)
- remove obsolete Microsoft Node.js Guidelines link (#3268) (30cda26)
- update Python manual install instructions for Windows (#3265) (0407877)
Miscellaneous
- deps: upgrade tar to 7.5.4 to address CVE-2026-23950 (#3271) (7bf371c)
IMPORTANT
- Check the changes in this PR to ensure they won't cause issues with your project.
- This PR was automatically created by Snyk using the credentials of a real user.
- Max score is 1000. Note that the real score may have changed since the PR was raised.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: