#1086
[Snyk] Upgrade node-gyp from 12.2.0 to 12.4.0
Snyk has created this PR to upgrade node-gyp from 12.2.0 to 12.4.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
-
The recommended version is 2 versions ahead of your current version.
-
The recommended version was released 2 months ago.
Issues fixed by the recommended upgrade:
| Issue | Score | Exploit Maturity | |
|---|---|---|---|
| Server-side Request Forgery (SSRF) SNYK-JS-IPADDRESS-18516623 | 118 | Proof of Concept | |
| Cross-site Scripting (XSS) SNYK-JS-IPADDRESS-16636412 | 118 | No Known Exploit |
Breaking Change Risk
Notice: This assessment is enhanced by AI.
Release notes
Package name: node-gyp
-
12.4.0 - 2026-06-05
12.4.0 (2026-05-15)
Features
Bug Fixes
- retry downloads on retryable errors (#3308) (0793489)
- stop testing end-of-life Node.js v20 (#3315) (5c0ec47)
- test on Node.js v26 (#3314) (0e65639)
Miscellaneous
-
12.3.0 - 2026-04-21
12.3.0 (2026-04-21)
Features
- replace make-fetch-happen with built-in fetch (#3302) (393ec2b)
- update gyp-next to v0.22.1 (#3295) (f4242fb)
Bug Fixes
Core
-
12.2.0 - 2026-01-27
12.2.0 (2026-01-26)
Features
- include built package version in error logs (#3254) (ee9cbdd)
- update gyp-next to v0.21.1 (#3273) (888ff2c)
Bug Fixes
- cpu concurrency detection on some platforms (#3255) (f15b79a), closes #3191
- python is no longer a valid npm config setting (#3258) (c7c678f)
- Switch to URL instead of url.parse (#3256) (3f81949)
- Test Windows on Python 3.14, not 3.13 (#3262) (7b4f315)
Core
Doc
- add a note about changes in gyp folder (#3259) (a52bc81)
- correct typos (#3269) (0f2bc7d)
- remove obsolete Microsoft Node.js Guidelines link (#3268) (30cda26)
- update Python manual install instructions for Windows (#3265) (0407877)
Miscellaneous
- deps: upgrade tar to 7.5.4 to address CVE-2026-23950 (#3271) (7bf371c)
IMPORTANT
- Check the changes in this PR to ensure they won't cause issues with your project.
- This PR was automatically created by Snyk using the credentials of a real user.
- Max score is 1000. Note that the real score may have changed since the PR was raised.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
This is a minor version upgrade for
node-gypthat includes new features, bug fixes, and dependency updates.Key changes include:
make-fetch-happendependency with the built-infetchfor downloads. [3]No breaking changes or mandatory code modifications are documented in this version range. The upgrade is considered safe for general use.
Source: GitHub Releases