nodejs · ronag · Jan 22, 2020 · Jan 30, 2020 · Mar 4, 2020 · Mar 8, 2020
diff --git a/.gitignore b/.gitignore
@@ -33,6 +33,7 @@
 /doc/api.xml
 /node
 /node_g
+/gon-config.json
 /*.exe
 /*.swp
 /out

diff --git a/BUILDING.md b/BUILDING.md
@@ -167,7 +167,7 @@ Binaries at <https://nodejs.org/download/release/> are produced on:
 | Binary package        | Platform and Toolchain                                                   |
 | --------------------- | ------------------------------------------------------------------------ |
 | aix-ppc64             | AIX 7.1 TL05 on PPC64BE with GCC 6                                       |
-| darwin-x64 (and .pkg) | macOS 10.11, Xcode Command Line Tools 10 with -mmacosx-version-min=10.10 |
+| darwin-x64 (and .pkg) | macOS 10.15, Xcode Command Line Tools 11 with -mmacosx-version-min=10.10 |
 | linux-arm64           | CentOS 7 with devtoolset-6 / GCC 6                                       |
 | linux-armv7l          | Cross-compiled on Ubuntu 16.04 x64 with [custom GCC toolchain](https://github.com/rvagg/rpi-newer-crosstools)   |
 | linux-ppc64le         | CentOS 7 with devtoolset-6 / GCC 6 <sup>[7](#fn7)</sup>                  |

diff --git a/Makefile b/Makefile
@@ -1003,6 +1003,7 @@ $(PKG): release-only
 		--resources $(MACOSOUTDIR)/installer/productbuild/Resources \
 		--package-path $(MACOSOUTDIR)/pkgs ./$(PKG)
 	SIGN="$(PRODUCTSIGN_CERT)" PKG="$(PKG)" bash tools/osx-productsign.sh
+	bash tools/osx-notarize.sh $(FULLVERSION)
 
 .PHONY: pkg
 # Builds the macOS installer for releases.

diff --git a/README.md b/README.md
@@ -157,6 +157,8 @@ For information about the governance of the Node.js project, see
 **Anatoli Papirovski** &lt;[email protected]&gt; (he/him)
 * [BethGriggs](https://github.com/BethGriggs) -
 **Beth Griggs** &lt;[email protected]&gt; (she/her)
+* [BridgeAR](https://github.com/BridgeAR) -
+**Ruben Bridgewater** &lt;[email protected]&gt; (he/him)
 * [ChALkeR](https://github.com/ChALkeR) -
 **Сковорода Никита Андреевич** &lt;[email protected]&gt; (he/him)
 * [cjihrig](https://github.com/cjihrig) -
@@ -265,8 +267,6 @@ For information about the governance of the Node.js project, see
 **Сковорода Никита Андреевич** &lt;[email protected]&gt; (he/him)
 * [cjihrig](https://github.com/cjihrig) -
 **Colin Ihrig** &lt;[email protected]&gt; (he/him)
-* [claudiorodriguez](https://github.com/claudiorodriguez) -
-**Claudio Rodriguez** &lt;[email protected]&gt;
 * [codebytere](https://github.com/codebytere) -
 **Shelley Vohr** &lt;[email protected]&gt; (she/her)
 * [danbev](https://github.com/danbev) -
@@ -309,12 +309,8 @@ For information about the governance of the Node.js project, see
 **Yang Guo** &lt;[email protected]&gt; (he/him)
 * [hiroppy](https://github.com/hiroppy) -
 **Yuta Hiroto** &lt;[email protected]&gt; (he/him)
-* [iarna](https://github.com/iarna) -
-**Rebecca Turner** &lt;[email protected]&gt;
 * [indutny](https://github.com/indutny) -
 **Fedor Indutny** &lt;[email protected]&gt;
-* [italoacasas](https://github.com/italoacasas) -
-**Italo A. Casas** &lt;[email protected]&gt; (he/him)
 * [JacksonTian](https://github.com/JacksonTian) -
 **Jackson Tian** &lt;[email protected]&gt;
 * [jasnell](https://github.com/jasnell) -
@@ -351,8 +347,6 @@ For information about the governance of the Node.js project, see
 **Julien Gilli** &lt;[email protected]&gt;
 * [mmarchini](https://github.com/mmarchini) -
 **Matheus Marchini** &lt;[email protected]&gt;
-* [MoonBall](https://github.com/MoonBall) -
-**Chen Gang** &lt;[email protected]&gt;
 * [mscdex](https://github.com/mscdex) -
 **Brian White** &lt;[email protected]&gt;
 * [MylesBorins](https://github.com/MylesBorins) -
@@ -407,8 +401,6 @@ For information about the governance of the Node.js project, see
 **Tiancheng "Timothy" Gu** &lt;[email protected]&gt; (he/him)
 * [tniessen](https://github.com/tniessen) -
 **Tobias Nießen** &lt;[email protected]&gt;
-* [trevnorris](https://github.com/trevnorris) -
-**Trevor Norris** &lt;[email protected]&gt;
 * [trivikr](https://github.com/trivikr) -
 **Trivikram Kamat** &lt;[email protected]&gt;
 * [Trott](https://github.com/Trott) -
@@ -444,6 +436,8 @@ For information about the governance of the Node.js project, see
 **Calvin Metcalf** &lt;[email protected]&gt;
 * [chrisdickinson](https://github.com/chrisdickinson) -
 **Chris Dickinson** &lt;[email protected]&gt;
+* [claudiorodriguez](https://github.com/claudiorodriguez) -
+**Claudio Rodriguez** &lt;[email protected]&gt;
 * [DavidCai1993](https://github.com/DavidCai1993) -
 **David Cai** &lt;[email protected]&gt; (he/him)
 * [eljefedelrodeodeljefe](https://github.com/eljefedelrodeodeljefe) -
@@ -454,12 +448,16 @@ For information about the governance of the Node.js project, see
 **Daniel Wang** &lt;[email protected]&gt;
 * [glentiki](https://github.com/glentiki) -
 **Glen Keane** &lt;[email protected]&gt; (he/him)
+* [iarna](https://github.com/iarna) -
+**Rebecca Turner** &lt;[email protected]&gt;
 * [imran-iq](https://github.com/imran-iq) -
 **Imran Iqbal** &lt;[email protected]&gt;
 * [imyller](https://github.com/imyller) -
 **Ilkka Myller** &lt;[email protected]&gt;
 * [isaacs](https://github.com/isaacs) -
 **Isaac Z. Schlueter** &lt;[email protected]&gt;
+* [italoacasas](https://github.com/italoacasas) -
+**Italo A. Casas** &lt;[email protected]&gt; (he/him)
 * [jasongin](https://github.com/jasongin) -
 **Jason Ginchereau** &lt;[email protected]&gt;
 * [jbergstroem](https://github.com/jbergstroem) -
@@ -486,6 +484,8 @@ For information about the governance of the Node.js project, see
 **Mikeal Rogers** &lt;[email protected]&gt;
 * [monsanto](https://github.com/monsanto) -
 **Christopher Monsanto** &lt;[email protected]&gt;
+* [MoonBall](https://github.com/MoonBall) -
+**Chen Gang** &lt;[email protected]&gt;
 * [not-an-aardvark](https://github.com/not-an-aardvark) -
 **Teddy Katz** &lt;[email protected]&gt; (he/him)
 * [Olegas](https://github.com/Olegas) -
@@ -520,6 +520,8 @@ For information about the governance of the Node.js project, see
 **Christian Tellnes** &lt;[email protected]&gt;
 * [thlorenz](https://github.com/thlorenz) -
 **Thorsten Lorenz** &lt;[email protected]&gt;
+* [trevnorris](https://github.com/trevnorris) -
+**Trevor Norris** &lt;[email protected]&gt;
 * [tunniclm](https://github.com/tunniclm) -
 **Mike Tunnicliffe** &lt;[email protected]&gt;
 * [vkurchatkin](https://github.com/vkurchatkin) -

diff --git a/common.gypi b/common.gypi
@@ -30,16 +30,12 @@
     'openssl_fips%': '',
     'openssl_no_asm%': 0,
 
-    # Some STL containers (e.g. std::vector) do not preserve ABI compatibility
-    # between debug and non-debug mode.
-    'disable_glibcxx_debug': 1,
-
     # Don't use ICU data file (icudtl.dat) from V8, we use our own.
     'icu_use_data_file_flag%': 0,
 
     # Reset this number to 0 on major V8 upgrades.
     # Increment by one for each non-official patch applied to deps/v8.
-    'v8_embedder_string': '-node.29',
+    'v8_embedder_string': '-node.30',
 
     ##### V8 defaults for Node.js #####
 

diff --git a/deps/npm/AUTHORS b/deps/npm/AUTHORS
@@ -682,3 +682,9 @@ Zhenya Vinogradov <[email protected]>
 Rafael Hengles <[email protected]>
 Jan-Philip Gehrcke <[email protected]>
 Caleb Sacks <[email protected]>
+Kyle Getz <[email protected]>
+Sean Healy <[email protected]>
+Netanel Gilad <[email protected]>
+Dave Nicolson <[email protected]>
+Ajay Narain Mathur <[email protected]>
+Vitaliy Markitanov <[email protected]>
diff --git a/deps/npm/CHANGELOG.md b/deps/npm/CHANGELOG.md
@@ -1,3 +1,41 @@
+## 6.14.1 (2020-02-26)
+
+* [`303e5c11e`](https://github.com/npm/cli/commit/303e5c11e7db34cf014107aecd2e81c821bfde8d)
+  `[email protected]`
+  Fixes a regression where scp-style git urls are passed to the WhatWG URL
+  parser, which does not handle them properly.
+  ([@isaacs](https://github.com/isaacs))
+
+## 6.14.0 (2020-02-25)
+
+### FEATURES
+* [`30f170877`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#731](https://github.com/npm/cli/pull/731) add support for multiple funding sources ([@ljharb](https://github.com/ljharb) & [@ruyadorno](hhttps://github.com/ruyadorno/))
+
+### BUG FIXES
+* [`55916b130`](https://github.com/npm/cli/commit/55916b130ef52984584678f2cc17c15c1f031cb5) [#508](https://github.com/npm/cli/pull/508) fix: check `npm.config` before accessing its members ([@kaiyoma](https://github.com/kaiyoma))
+* [`7d0cd65b2`](https://github.com/npm/cli/commit/7d0cd65b23c0986b631b9b54d87bbe74902cc023) [#733](https://github.com/npm/cli/pull/733) fix: access grant with unscoped packages ([@netanelgilad](https://github.com/netanelgilad))
+* [`28c3d40d6`](https://github.com/npm/cli/commit/28c3d40d65eef63f9d6ccb60b99ac57f5057a46e), [`0769c5b20`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#945](https://github.com/npm/cli/pull/945), [#697](https://github.com/npm/cli/pull/697) fix: allow new major versions of node to be automatically considered "supported" ([@isaacs](https://github.com/isaacs), [@ljharb](https://github.com/ljharb))
+
+### DEPENDENCIES
+* [`6f39e93`](https://github.com/npm/hosted-git-info/commit/6f39e93bae9162663af6f15a9d10bce675dd5de3) `[email protected]` ([@darcyclarke](https://github.com/darcyclarke))
+  * fix: passwords & usernames are escaped properly in git deps ([@stevenhilder](https://github.com/stevenhilder))
+* [`f14b594ee`](https://github.com/npm/cli/commit/f14b594ee9dbfc98ed0b65c65d904782db4f31ad) `[email protected]` ([@isaacs](https://github.com/isaacs))
+* [`77044150b`](https://github.com/npm/cli/commit/77044150b763d67d997f9ff108219132ea922678) `[email protected]` ([@isaacs](https://github.com/isaacs))
+* [`1d112461a`](https://github.com/npm/cli/commit/1d112461ad8dc99e5ff7fabb5177e8c2f89a9755) `[email protected]` ([@isaacs](https://github.com/isaacs))
+  * [`ba8b4fe`](https://github.com/npm/npm-registry-fetch/commit/ba8b4fe60eb6cdf9b39012560aec596eda8ce924) fix: always bypass cache when ?write=true
+* [`a47fed760`](https://github.com/npm/cli/commit/a47fed7603a6ed31dcc314c0c573805f05a96830) `[email protected]`
+  * [`3bbf2d6`](https://github.com/nodejs/readable-stream/commit/3bbf2d6feb45b03f4e46a2ae8251601ad2262121) fix: babel's "loose mode" class transform enbrittles BufferList ([@ljharb](https://github.com/ljharb))
+
+### DOCUMENTATION
+* [`284c1c055`](https://github.com/npm/cli/commit/284c1c055a28c4b334496101799acefe3c54ceb3), [`fbb5f0e50`](https://github.com/npm/cli/commit/fbb5f0e50e54425119fa3f03c5de93e4cb6bfda7) [#729](https://github.com/npm/cli/pull/729) update lifecycle hooks docs
+  ([@seanhealy](https://github.com/seanhealy), [@mikemimik](https://github.com/mikemimik))
+* [`1c272832d`](https://github.com/npm/cli/commit/1c272832d048300e409882313305c416dc6f21a2) [#787](https://github.com/npm/cli/pull/787) fix: trademarks typo ([@dnicolson](https://github.com/dnicolson))
+* [`f6ff41776`](https://github.com/npm/cli/commit/f6ff417767d52418cc8c9e7b9731ede2c3916d2e) [#936](https://github.com/npm/cli/pull/936) fix: postinstall example ([@ajaymathur](https://github.com/ajaymathur))
+* [`373224b16`](https://github.com/npm/cli/commit/373224b16e019b7b63d8f0b4c5d4adb7e5cb80dd) [#939](https://github.com/npm/cli/pull/939) fix: bad links in publish docs ([@vit100](https://github.com/vit100))
+
+### MISCELLANEOUS
+* [`85c79636d`](https://github.com/npm/cli/commit/85c79636df31bac586c0e380c4852ee155a7723c) [#736](https://github.com/npm/cli/pull/736) add script to update dist-tags ([@mikemimik](https://github.com/mikemimik))
+
 ## 6.13.7 (2020-01-28)
 
 ### BUG FIXES

diff --git a/deps/npm/docs/content/cli-commands/npm-fund.md b/deps/npm/docs/content/cli-commands/npm-fund.md
@@ -21,7 +21,8 @@ a given project. If no package name is provided, it will list all
 dependencies that are looking for funding in a tree-structure in which
 are listed the type of funding and the url to visit. If a package name
 is provided then it tries to open its funding url using the `--browser`
-config param.
+config param; if there are multiple funding sources for the package, the
+user will be instructed to pass the `--which` command to disambiguate.
 
 The list will avoid duplicated entries and will stack all packages
 that share the same type/url as a single entry. Given this nature the
@@ -38,8 +39,8 @@ The browser that is called by the `npm fund` command to open websites.
 
 #### json
 
-* Default: false
 * Type: Boolean
+* Default: false
 
 Show information in JSON format.
 
@@ -51,6 +52,13 @@ Show information in JSON format.
 Whether to represent the tree structure using unicode characters.
 Set it to `false` in order to use all-ansi output.
 
+#### which
+
+* Type: Number
+* Default: undefined
+
+If there are multiple funding sources, which 1-indexed source URL to open.
+
 ## See Also
 
 * [npm docs](/cli-commands/npm-docs)

diff --git a/deps/npm/docs/content/cli-commands/npm-publish.md b/deps/npm/docs/content/cli-commands/npm-publish.md
@@ -73,9 +73,9 @@ included and packs them into a tarball to be uploaded to the registry.
 
 * [npm registry](/using-npm/registry)
 * [npm scope](/using-npm/scope)
-* [npm adduser](/cli-commands/npm-adduser)
-* [npm owner](/cli-commands/npm-owner)
-* [npm deprecate](/cli-commands/npm-deprecate)
-* [npm dist-tag](/cli-commands/npm-dist-tag)
-* [npm pack](/cli-commands/npm-pack)
-* [npm profile](/cli-commands/npm-profile)
+* [npm adduser](/cli-commands/adduser)
+* [npm owner](/cli-commands/owner)
+* [npm deprecate](/cli-commands/deprecate)
+* [npm dist-tag](/cli-commands/dist-tag)
+* [npm pack](/cli-commands/pack)
+* [npm profile](/cli-commands/profile)
diff --git a/deps/npm/docs/content/configuring-npm/package-json.md b/deps/npm/docs/content/configuring-npm/package-json.md
@@ -197,7 +197,8 @@ npm also sets a top-level "maintainers" field with your npm user info.
 ### funding
 
 You can specify an object containing an URL that provides up-to-date
-information about ways to help fund development of your package:
+information about ways to help fund development of your package, or
+a string URL, or an array of these:
 
     "funding": {
       "type" : "individual",
@@ -209,10 +210,26 @@ information about ways to help fund development of your package:
       "url" : "https://www.patreon.com/my-account"
     }
 
+    "funding": "http://example.com/donate"
+
+    "funding": [
+      {
+        "type" : "individual",
+        "url" : "http://example.com/donate"
+      },
+      "http://example.com/donateAlso",
+      {
+        "type" : "patreon",
+        "url" : "https://www.patreon.com/my-account"
+      }
+    ]
+
+
 Users can use the `npm fund` subcommand to list the `funding` URLs of all
 dependencies of their project, direct and indirect. A shortcut to visit each
 funding url is also available when providing the project name such as:
-`npm fund <projectname>`.
+`npm fund <projectname>` (when there are multiple URLs, the first one will be
+visited)
 
 ### files
 

diff --git a/deps/npm/docs/content/using-npm/disputes.md b/deps/npm/docs/content/using-npm/disputes.md
@@ -105,7 +105,7 @@ If you see bad behavior like this, please report it to <[email protected]> right
 away. **You are never expected to resolve abusive behavior on your own. We are
 here to help.**
 
-### Trademarkss
+### Trademarks
 
 If you think another npm publisher is infringing your trademark, such as by
 using a confusingly similar package name, email <[email protected]> with a link to
-Original file line number
+Diff line change
@@ Expand Up / @@ -33,6 +33,7 @@ @@
     /doc/api.xml
     /node
     /node_g
+    /gon-config.json
     /*.exe
     /*.swp
     /out
@@ Expand Down @@