Bump Node to patched releases (mastodon/sockethub 24.22.1, RTL 22.23.4). Force the pinned major's latest patch in kosmos-nodejs: nodejs_install only selects the repo major and a bare `package nodejs` never upgrades an already installed package. For hosts stuck on Node 16 (no patched 16.x), run the services with NODE_OPTIONS=--use-openssl-ca so they use the patched system trust store: ipfs-pinner, kredits-github, hubot botka/hal8000, sockethub.
18 lines
484 B
Ruby
18 lines
484 B
Ruby
#
|
|
# Cookbook Name:: kosmos-nodejs
|
|
# Recipe:: default
|
|
#
|
|
|
|
nodejs_install 'nodejs' do
|
|
install_method 'package'
|
|
version node["kosmos_nodejs"]["version"]
|
|
end
|
|
|
|
# nodejs_install only uses the version to select the Nodesource repo major, then
|
|
# runs a bare `package nodejs`, which Chef considers up to date for an already
|
|
# installed package. Force an upgrade so a newer patch of the same major (e.g.
|
|
# 22.23.1 -> 22.23.4) is actually installed.
|
|
package 'nodejs' do
|
|
action :upgrade
|
|
end
|