chore(deps): update node.js to v20.11.1 (#6)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [node](https://togithub.com/nodejs/node) | stage | patch |
`20.11.0-bookworm` -> `20.11.1-bookworm` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/nodejs/node/badge)](https://securityscorecards.dev/viewer/?uri=github.com/nodejs/node)
|

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

###
[`v20.11.1`](https://togithub.com/nodejs/node/releases/tag/v20.11.1):
2024-02-14, Version 20.11.1 &#x27;Iron&#x27; (LTS), @&#8203;RafaelGSS
prepared by @&#8203;marco-ippolito

[Compare
Source](https://togithub.com/nodejs/node/compare/v20.11.0...v20.11.1)

##### Notable changes

This is a security release.

##### Notable changes

- CVE-2024-21892 - Code injection and privilege escalation through Linux
capabilities- (High)
- CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded
chunk extension allows DoS attacks- (High)
- CVE-2024-21896 - Path traversal by monkey-patching Buffer internals-
(High)
- CVE-2024-22017 - setuid() does not drop all privileges due to io_uring
- (High)
- CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing
variant of the Bleichenbacher attack against
[PKCS#1](https://togithub.com/PKCS/node/issues/1) v1.5 padding) -
(Medium)
- CVE-2024-21891 - Multiple permission model bypasses due to improper
path traversal sequence sanitization - (Medium)
- CVE-2024-21890 - Improper handling of wildcards in --allow-fs-read and
--allow-fs-write (Medium)
- CVE-2024-22025 - Denial of Service by resource exhaustion in fetch()
brotli decoding - (Medium)
-   undici version 5.28.3
-   libuv version 1.48.0
-   OpenSSL version 3.0.13+quic1

##### Commits

- \[[`7079c062bb`](https://togithub.com/nodejs/node/commit/7079c062bb)]
- **crypto**: disable [PKCS#1](https://togithub.com/PKCS/node/issues/1)
padding for privateDecrypt (Michael Dawson)
[nodejs-private/node-private#525](https://togithub.com/nodejs-private/node-private/pull/525)
- \[[`186a6e1ffb`](https://togithub.com/nodejs/node/commit/186a6e1ffb)]
- **deps**: fix GHSA-f74f-cvh7-c6q6/CVE-2024-24806 (Santiago Gimeno)
[#&#8203;51737](https://togithub.com/nodejs/node/pull/51737)
- \[[`686da19abb`](https://togithub.com/nodejs/node/commit/686da19abb)]
- **deps**: disable io_uring support in libuv by default (Tobias Nießen)
[nodejs-private/node-private#529](https://togithub.com/nodejs-private/node-private/pull/529)
- \[[`f7b44bfbce`](https://togithub.com/nodejs/node/commit/f7b44bfbce)]
- **deps**: update archs files for openssl-3.0.13+quic1 (Node.js GitHub
Bot) [#&#8203;51614](https://togithub.com/nodejs/node/pull/51614)
- \[[`7a30fecea2`](https://togithub.com/nodejs/node/commit/7a30fecea2)]
- **deps**: upgrade openssl sources to quictls/openssl-3.0.13+quic1
(Node.js GitHub Bot)
[#&#8203;51614](https://togithub.com/nodejs/node/pull/51614)
- \[[`480fc169a8`](https://togithub.com/nodejs/node/commit/480fc169a8)]
- **fs**: protect against modified Buffer internals in
possiblyTransformPath (Tobias Nießen)
[nodejs-private/node-private#497](https://togithub.com/nodejs-private/node-private/pull/497)
- \[[`77ac7c3153`](https://togithub.com/nodejs/node/commit/77ac7c3153)]
- **http**: add maximum chunk extension size (Paolo Insogna)
[nodejs-private/node-private#519](https://togithub.com/nodejs-private/node-private/pull/519)
- \[[`ed7d149675`](https://togithub.com/nodejs/node/commit/ed7d149675)]
- **lib**: use cache fs internals against path traversal (RafaelGSS)
[nodejs-private/node-private#516](https://togithub.com/nodejs-private/node-private/pull/516)
- \[[`89bd5fc38f`](https://togithub.com/nodejs/node/commit/89bd5fc38f)]
- **lib**: update undici to v5.28.3 (Matteo Collina)
[nodejs-private/node-private#539](https://togithub.com/nodejs-private/node-private/pull/539)
- \[[`d01dd4291d`](https://togithub.com/nodejs/node/commit/d01dd4291d)]
- **permission**: fix wildcard when children > 1 (Rafael Gonzaga)
[#&#8203;51209](https://togithub.com/nodejs/node/pull/51209)
- \[[`40ff37dfcc`](https://togithub.com/nodejs/node/commit/40ff37dfcc)]
- **src**: fix HasOnly(capability) in node::credentials (Tobias Nießen)
[nodejs-private/node-private#505](https://togithub.com/nodejs-private/node-private/pull/505)
- \[[`3f6addd590`](https://togithub.com/nodejs/node/commit/3f6addd590)]
- **src,deps**: disable setuid() etc if io_uring enabled (Tobias Nießen)
[nodejs-private/node-private#529](https://togithub.com/nodejs-private/node-private/pull/529)
- \[[`d6da413aa4`](https://togithub.com/nodejs/node/commit/d6da413aa4)]
- **test,doc**: clarify wildcard usage (RafaelGSS)
[nodejs-private/node-private#517](https://togithub.com/nodejs-private/node-private/pull/517)
- \[[`c213910aea`](https://togithub.com/nodejs/node/commit/c213910aea)]
- **zlib**: pause stream if outgoing buffer is full (Matteo Collina)
[nodejs-private/node-private#541](https://togithub.com/nodejs-private/node-private/pull/541)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 10pm every weekday,before 5am
every weekday,every weekend" (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/settlemint/solidity-supplychain).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMzguMSIsInVwZGF0ZWRJblZlciI6IjM3LjI0NS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:20.11.0-bookworm as build
+FROM node:20.11.1-bookworm as build
 
 ENV FOUNDRY_DIR /usr/local
 RUN curl -L https://foundry.paradigm.xyz | bash && \