chore(deps): update node.js to v24 #63
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/node-24.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
hydrogen-alpine3.21->^24.0.0-alpine3.21hydrogen-alpine3.21->^24.0.0-alpine3.21Release Notes
nodejs/node (node)
v24.11.1: 2025-11-11, Version 24.11.1 'Krypton' (LTS), @aduh95Compare Source
Notable Changes
The known issue relating to
Buffer.allocUnsafeincorrectly zero-filling buffershas now been addressed and now returns uninitialized memory as documented in the
Buffer.allocUnsafedocumentation.
Commits
0a15ccf3f4] - benchmark: improve cpu.sh for safety and usability (Nam Yooseong) #60162a1c7d1dac9] - benchmark: add benchmark for leaf source text modules (Joyee Cheung) #6020599e2acf46b] - benchmark: add vm.SourceTextModule benchmark (Joyee Cheung) #59396c01c72b407] - benchmark: use non-deprecated WriteUtf8V2 method (Michaël Zasso) #60173a42dbd138e] - build: ibmi follow aix visibility (SRAVANI GUNDEPALLI) #603605673a54a5d] - build: use call command when calling python configure (Jacob Nichols) #60098c67cb727cb] - build: build v8 with -fvisibility=hidden -fvisibility-inlines-hidden (Joyee Cheung) #56290b03f7b93b1] - build: remove V8_COMPRESS_POINTERS_IN_ISOLATE_CAGE defs (Joyee Cheung) #602962505568531] - build, src: fix include paths for vtune files (Rahul) #5999995330b036f] - crypto: update root certificates to NSS 3.116 (Node.js GitHub Bot) #59956c221d892ef] - deps: update corepack to 0.34.2 (Node.js GitHub Bot) #60550bc00aa4c77] - deps: update simdjson to 4.0.7 (Node.js GitHub Bot) #59883d03b89ec53] - deps: update corepack to 0.34.1 (Node.js GitHub Bot) #60314b7882090de] - deps: update inspector_protocol toaf7f5a8(Node.js GitHub Bot) #603127007f9dd65] - deps: update googletest to279f847(Node.js GitHub Bot) #60219a56aa9ffa8] - deps: upgrade npm to 11.6.2 (npm team) #601680bf8952721] - doc: mention more codemods indeprecations.md(Augustin Mauroy) #602432473ca77f6] - doc: add missing CAA type to dns.resolveAny() & dnsPromises.resolveAny() (Jimmy Leung) #5889939ddd8522e] - doc: useanyforworker_threads.Worker'error' event argumenterr(Jonas Geiler) #60300eaa825fd97] - doc: update decorator documentation to reflect actual policy (Muhammad Salman Aziz) #60288a744e42282] - doc: document wildcard supported by tools/test.py (Joyee Cheung) #60265ec0d5beb09] - doc: add --heap-snapshot-on-oom to useful v8 flag (jakecastelli) #6026013da0df12a] - doc: fixblob.bytes()heading level (XTY) #602528e771632b7] - doc: fix not working code example in vm docs (Artur Gawlik) #6022470c2080bff] - doc: improve code snippet alternative of url.parse() using WHATWG URL (Steven) #60209beadcf176e] - doc:createSQLTagStore->createTagStore(Aviv Keller) #60182b0da3b9c6a] - doc: use markdown when branch-diff major release (Rafael Gonzaga) #60179688115aa6b] - doc: update teams in collaborator-guide.md and add links (Bart Louwers) #60065923082a064] - doc: disambiguate top-levelworker_threadsmodule exports (René) #598907be4330870] - doc: add known issue to v24.11.0 release notes (Richard Lau) #604674d8f62aeaf] - doc, module: change async customization hooks to experimental (Gerhard Stöbich) #60302d86a118bbd] - http: lazy allocate cookies array (Robert Nagy) #597348c256d4139] - http: fix http client leaky with double response (theanarkh) #60062265e9d59fa] - http2: rename variable to additionalPseudoHeaders (Tobias Nießen) #6020865bec037e2] - http2: do not crash on mismatched ping buffer length (René) #601359b83ef53b7] - inspector: add network payload buffer size limits (Chengzhong Wu) #6023603ac05c458] - inspector: support handshake response for websocket inspection (Shima Ryuhei) #60225aa04f06190] - lib: fix typo in createBlobReaderStream (SeokHun) #601325aea1a429e] - lib: fix constructor in _errnoException stack tree (SeokHun) #601564f7745acc7] - lib: fix typo in QuicSessionStats (SeokHun) #60155f8725861ea] - lib: remove redundant destroyHook checks (Gürgün Dayıoğlu) #60120696c20bf3f] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #6032590434ff99a] - meta: loop userland-migrations in deprecations (Chengzhong Wu) #60299ffbc0ae60a] - module: refactor and clarify async loader hook customizations (Joyee Cheung) #602786ed6062f7d] - module: handle null source from async loader hooks in sync hooks (Joyee Cheung) #59929a2871baed2] - msi: fix WiX warnings (Stefan Stojanovic) #602516199541d67] - src: fix timing of snapshot serialize callback (Joyee Cheung) #6043413b687959a] - src: add COUNT_GENERIC_USAGE utility for tests (Joyee Cheung) #60434a587623b4f] - src: conditionally disable source phase imports by default (Shelley Vohr) #60364e483267995] - src: use cached primordials_string (Sohyeon Kim) #602554c9a64fbaf] - src: replace Environment::GetCurrent with args.GetIsolate (Sohyeon Kim) #60256eb8a0493d1] - src: initial enablement of IsolateGroups (James M Snell) #60254463c6450cf] - src: useUtf8ValueandTwoByteValueinstead of V8 helpers (Anna Henningsen) #60244b370e02789] - src: add a default branch for module phase (Chengzhong Wu) #602614e1c5c5601] - src: make additional cleanups in node locks impl (James M Snell) #60061f00d4c10fc] - src: update locks to use DictionaryTemplate (James M Snell) #600611c8716e97c] - test: increase debugger waitFor timeout on macOS (Chengzhong Wu) #6036717b4f38e9c] - test: put helper in test-runner-output into common (Joyee Cheung) #6033043b9ea8389] - test: fix small compile warning in test_network_requests_buffer.cc (xiaocainiao633) #6028138a62980ad] - test: split test-runner-watch-mode-kill-signal (Joyee Cheung) #6029834e4c8c84f] - test: fix incorrect calculation in test-perf-hooks.js (Joyee Cheung) #602714481feb17b] - test: parallelize test-without-async-context-frame correctly (Joyee Cheung) #6027391ea9b06e0] - test: skip sea tests on x64 macOS (Joyee Cheung) #60250cedba09e60] - test: move sea tests into test/sea (Joyee Cheung) #60250635af55e12] - Revert "test: ensure message event fires in worker message port test" (Luigi Pinca) #6012668f678028e] - test: skip tests that cause timeouts on IBM i (SRAVANI GUNDEPALLI) #60148cc3a70598c] - test: deflake test-fs-promises-watch-iterator (Luigi Pinca) #600603d784dd766] - test: prepare junit file attribute normalization (sangwook) #5943284974d97ad] - test: skip failing test on macOS 15.7+ (Antoine du Hamel) #60419fabf8e4975] - test,crypto: fix conditional SHA3-* skip on BoringSSL (Filip Skokan) #603798faa494bf2] - test,crypto: sha3 algorithms aren't supported with BoringSSL (Shelley Vohr) #60374538a00c0f6] - test,doc: skip --max-old-space-size-percentage on 32-bit platforms (Asaf Federman) #601449ac5dbb694] - test_runner: use module.registerHooks in module mocks (Joyee Cheung) #60326f6ff6e7166] - test_runner: fix suite timeout (Moshe Atlow) #59853455bfeb52d] - test_runner: add junit file attribute support (sangwook) #59432223c5e105d] - tools: update gyp-next to 0.20.5 (Node.js GitHub Bot) #603132949408fc1] - tools: limit inspector protocol PR title length (Chengzhong Wu) #60324b36a898650] - tools: fix inspector_protocol updater (Chengzhong Wu) #60277d60f002b62] - tools: optimize wildcard execution in tools/test.py (Joyee Cheung) #602669d4e422419] - tools: add inspector_protocol updater (Chengzhong Wu) #602452f93a9894f] - tools: use cooldown property correctly (Rafael Gonzaga) #601349468ade95d] - typings: add missing properties and method in Worker (Woohyun Sung) #60257f611ec0a9e] - typings: add missing properties in HTTPParser (Woohyun Sung) #60257301c1347a1] - typings: delete undefined property in ConfigBinding (Woohyun Sung) #6025780fdb3d39b] - typings: add buffer internalBinding typing (방진혁) #601638cb3b77039] - util: use more defensive code when inspecting error objects (Antoine du Hamel) #60139748d4f6430] - util: mark special properties when inspecting them (Ruben Bridgewater) #601316183a759d7] - vm: make vm.Module.evaluate() conditionally synchronous (Joyee Cheung) #602054b8506628f] - win: upgrade Visual Studio workload from 2019 to 2022 (Jiawen Geng) #60318v24.11.0: 2025-10-28, Version 24.11.0 'Krypton' (LTS), @richardlauCompare Source
Notable Changes
This release marks the transition of Node.js 24.x into Long Term Support (LTS)
with the codename 'Krypton'. It will continue to receive updates through to
the end of April 2028.
Other than updating metadata, such as the
process.releaseobject, to reflectthat the release is LTS, no further changes from Node.js 24.10.0 are included.
Known issue
An issue has been identified in the Node.js 24.x line with
Buffer.allocUnsafeunintentionally returning zero-filled buffers. This API is
documented to return uninitialized memory.
The documented behavior will be restored in the next Node.js 24.x LTS release to bring
it back in line with previous releases. For more information, see
#60423.
v24.10.0: 2025-10-08, Version 24.10.0 (Current), @RafaelGSSCompare Source
Notable Changes
31bb476895] - (SEMVER-MINOR) console: allow per-streaminspectOptionsoption (Anna Henningsen) #600823b92be2fb8] - (SEMVER-MINOR) lib: remove util.getCallSite (Rafael Gonzaga) #5998018c79d9e1c] - (SEMVER-MINOR) sqlite: create authorization api (Guilherme Araújo) #59928Commits
e8cff3d51e] - benchmark: remove unused variable from util/priority-queue (Bruno Rodrigues) #5987203294252ab] - benchmark: update count to n in permission startup (Bruno Rodrigues) #598723c8a609d9b] - benchmark: update num to n in dgram offset-length (Bruno Rodrigues) #598727b2032b13e] - benchmark: adjust dgram offset-length len values (Bruno Rodrigues) #59708552d887aee] - benchmark: update num to n in dgram offset-length (Bruno Rodrigues) #5970831bb476895] - (SEMVER-MINOR) console: allow per-streaminspectOptionsoption (Anna Henningsen) #600820bf022d4c0] - console,util: improve array inspection performance (Ruben Bridgewater) #6003704d568e591] - deps: V8: cherry-pickf93055f(Olivier Flückiger) #60105621058b3bf] - deps: update archs files for openssl-3.5.4 (Node.js GitHub Bot) #6010181b3009fe6] - deps: upgrade openssl sources to openssl-3.5.4 (Node.js GitHub Bot) #60101dc44c9f349] - deps: upgrade npm to 11.6.1 (npm team) #60012ec0f137198] - deps: update ada to 3.3.0 (Node.js GitHub Bot) #60045f490f91874] - deps: update amaro to 1.1.4 (pmarchini) #60044de7a7cd0d7] - deps: update ada to 3.2.9 (Node.js GitHub Bot) #59987a533e5b5db] - doc: add automated migration info to deprecations (Augustin Mauroy) #600227fb8fe4875] - doc: fix typo on child_process.md (Angelo Gazzola) #6011424c1ef9846] - doc: remove optional title prefixes (Aviv Keller) #6008708b9eb8e19] - doc: mark.envfiles support as stable (Santeri Hiltunen) #5992566d90b8063] - doc: mention reverse proxy and include simple example (Steven) #5973614aa1119cb] - doc: provide alternative tourl.parse()using WHATWG URL (Steven) #59736f9412324f6] - doc: fix typo of built-in module specifier in worker_threads (Deokjin Kim) #5999264e738a342] - doc,crypto: reorder ML-KEM in the asymmetric key types table (Filip Skokan) #600671b25008b41] - http: improve writeEarlyHints by avoiding for-of loop (Haram Jeong) #5995835f9b6b28f] - inspector: improve batch diagnostic channel subscriptions (Chengzhong Wu) #600093b92be2fb8] - (SEMVER-MINOR) lib: remove util.getCallSite (Rafael Gonzaga) #59980c495e1fe57] - lib: optimize priority queue (Gürgün Dayıoğlu) #600396be31fb9f3] - lib: implement passive listener behavior per spec (BCD1me) #59995c5e4aa763b] - meta: bump actions/setup-python from 5.6.0 to 6.0.0 (dependabot[bot]) #6009050fa1f4a76] - meta: bump ossf/scorecard-action from 2.4.2 to 2.4.3 (dependabot[bot]) #60096def4ce976c] - meta: bump actions/cache from 4.2.4 to 4.3.0 (dependabot[bot]) #6009524b5abc0e9] - meta: bump step-security/harden-runner from 2.12.2 to 2.13.1 (dependabot[bot]) #600948ccf2b0b34] - meta: bump actions/setup-node from 4.4.0 to 5.0.0 (dependabot[bot]) #6009378580147ef] - meta: bump actions/stale from 9.1.0 to 10.0.0 (dependabot[bot]) #60092705686b5c4] - meta: bump codecov/codecov-action from 5.5.0 to 5.5.1 (dependabot[bot]) #60091423a6bc744] - meta: bump github/codeql-action from 3.30.0 to 3.30.5 (dependabot[bot]) #600899d9bd0fb4f] - meta: move Michael to emeritus (Michael Dawson) #60070dbeee55824] - module: use sync cjs when importing cts (Marco Ippolito) #60072a722f677ac] - perf_hooks: fix histogram fast call signatures (Renegade334) #59600b3295b8353] - process: fix wrong asyncContext under unhandled-rejections=strict (Shima Ryuhei) #60103cff4a7608a] - process: fix defaultenvforprocess.execve(Richard Lau) #60029cd034e927f] - process: fix hrtime fast call signatures (Renegade334) #5960018c79d9e1c] - (SEMVER-MINOR) sqlite: create authorization api (Guilherme Araújo) #59928d949222043] - sqlite: replaceToLocalCheckedand improve filter error handling (Edy Silva) #600286417dc879e] - src: bring permissions macros in line with general C/C++ standards (Anna Henningsen) #60053e273c2020c] - src: update contextify to use DictionaryTemplate (James M Snell) #600595f9ff60664] - src: removeAnalyzeTemporaryDtorsoption from .clang-tidy (iknoom) #600089db54adccc] - src: update cares_wrap to use DictionaryTemplates (James M Snell) #60033fc0ceb7b82] - src: correct the error handling in StatementExecutionHelper (James M Snell) #600403e8fdc1d8d] - src: remove unused variables from report (Moonki Choi) #60047d744324d8e] - src: avoid unnecessary string allocations in SPrintF impl (Anna Henningsen) #60052de65a5c719] - src: make ToLower/ToUpper input args more flexible (Anna Henningsen) #60052354026df5a] - src: allowstd::string_viewarguments toSPrintF()and friends (Anna Henningsen) #6005842f7d7cb20] - src: remove unnecessarystd::stringerror messages (Anna Henningsen) #6005730c2c0fedd] - src: remove unnecessary shadowed functions on Utf8Value & BufferValue (Anna Henningsen) #60056eb99eec09b] - src: avoid unnecessary string ->char*-> string round trips (Anna Henningsen) #60055c1f1dbdce2] - src: remove useless dereferencing inTHROW_...(Anna Henningsen) #60054ea0f5e575d] - src: filloptions_args,options_envafter vectors are finalized (iknoom) #59945415fff217a] - src: use RAII for uv_process_options_t (iknoom) #59945982b03ecbd] - test: marktest-runner-run-watchflaky on macOS (Richard Lau) #60115831a0d3d28] - test: ensure that the message event is fired (Luigi Pinca) #599525538cfc1e8] - test: replace diagnostics_channel stackframe in output snapshots (Chengzhong Wu) #6002477ec400d90] - test: mark test-web-locks skip on IBM i (SRAVANI GUNDEPALLI) #599961aaadb9e31] - test: ensure message event fires in worker message port test (Jarred Sumner) #598851d5cc5e57a] - test: mark sea tests flaky on macOS x64 (Richard Lau) #60068c412b1855d] - test: expand tls-check-server-identity coverage (Diango Gavidia) #60002ad87975029] - test: fix typo of test-benchmark-readline.js (Deokjin Kim) #59993bad4b9b878] - test: add newstartNewREPLSevertesting utility (Dario Piotrowicz) #59964ef90b0f456] - test: verify tracing channel doesn't swallow unhandledRejection (Gerhard Stöbich) #59974d7285459fe] - timers: fix binding fast call signatures (Renegade334) #596006529ae9b0c] - tools: add message on auto-fixing js lint issues in gh workflow (Dario Piotrowicz) #591281ca116a6ea] - tools: verify signatures when updating nghttp* (Antoine du Hamel) #6011320d10a2398] - tools: use dependabot cooldown and move tools/doc (Rafael Gonzaga) #59978275c07064c] - typings: update 'types' binding (René) #596928c21c4b286] - wasi: fix WasiFunction fast call signature (Renegade334) #59600b865074641] - win,tools: add description to signature (Martin Costello) #59877v24.9.0: 2025-09-25, Version 24.9.0 (Current), @targosCompare Source
Notable Changes
9b043a9096] - (SEMVER-MINOR) http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) #59824a6456ab90a] - (SEMVER-MINOR) sqlite: cleanup ERM support and export Session class (James M Snell) #583785563361d22] - (SEMVER-MINOR) sqlite: add tagged template (0hm☘️) #5874804013ee933] - (SEMVER-MINOR) worker: add heap profile API (theanarkh) #59846Commits
cbec4fd6de] - benchmark: calibrate config dgram multi-buffer (Bruno Rodrigues) #596969a4bbdc3c5] - benchmark: calibrate config cluster/echo.js (Nam Yooseong) #598360b284d86e8] - build: add the missing macro definitions for OpenHarmony (hqzing) #5980443e6e54d66] - build: do not include custom ESLint rules testing in tarball (Antoine du Hamel) #59809039ac19154] - crypto: expose signatureAlgorithm on X509Certificate (Patrick Costa) #59235647c332704] - crypto: usereturn awaitwhen returning Promises from async functions (Renegade334) #598418ed4587cf0] - crypto: use async functions for non-stub Promise-returning functions (Renegade334) #59841bb051c56ef] - crypto: avoid calls topromise.catch()(Renegade334) #5984105e560dd25] - deps: update googletest to50b8600(Node.js GitHub Bot) #59955fa40d3a785] - deps: update archs files for openssl-3.5.3 (Node.js GitHub Bot) #599018c85570d18] - deps: upgrade openssl sources to openssl-3.5.3 (Node.js GitHub Bot) #59901b71125664e] - deps: update undici to 7.16.0 (Node.js GitHub Bot) #59830dea5dd7077] - dgram: restore buffer optimization in fixBufferList (Yoo) #59934b0c1e67532] - diagnostics_channel: fix race condition with diagnostics_channel and GC (Ugaitz Urien) #599100b37b594c3] - doc: use "WebAssembly" instead of "Web Assembly" (Tobias Nießen) #599541e723f9c6b] - doc: fix typo in section on microtask order (Tobias Nießen) #59932a28962a85c] - doc: update V8 fast API guidance (René) #58999bd767c5d1b] - doc: add security escalation policy (Ulises Gascón) #598069df91e59e1] - doc: type improvement of filehttp.md(yusheng chen) #58189e4f571680b] - doc: deprecate closingfs.Diron garbage collection (Livia Medeiros) #59839e9cb986fa5] - doc: rephrase dynamic import() description (Nam Yooseong) #59224026d4e33f7] - doc,crypto: update subtle.generateKey and subtle.importKey (Filip Skokan) #598512b2591db52] - esm: make hasAsyncGraph non-enumerable (Joyee Cheung) #59905993f05d323] - fs,win: do not add a second trailing slash in readdir (Gerhard Stöbich) #598477aec53b607] - (SEMVER-MINOR) http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) #5982483ae6102e7] - http: optimize checkIsHttpToken for short strings (방진혁) #598326695067636] - http,https: handle IPv6 with proxies (Joyee Cheung) #59894c5d910a0a9] - http2: fix allowHttp1+Upgrade, broken by shouldUpgradeCallback (Tim Perry) #59924acada1fb82] - inspector: ensure adequate memory allocation forBinary::toBase64(René) #59870396cc8ec65] - lib: update inspect output format for subclasses (Miguel Marcondes Filho) #59687fed1dac8de] - lib: update isDeepStrictEqual to support options (Miguel Marcondes Filho) #59762d785929fd7] - lib: add source map support for assert messages (Chengzhong Wu) #59751ff13d1d61e] - lib,src: cache ModuleWrap.hasAsyncGraph (Chengzhong Wu) #59703b200cd8470] - lib,src: refactor assert to load error source from memory (Chengzhong Wu) #59751e94c57301b] - meta: add .npmrc with ignore-scripts=true (Joyee Cheung) #59914728472a57b] - module: only put directly require-d ESM into require.cache (Joyee Cheung) #59874be48760b93] - node-api: added SharedArrayBuffer api (Mert Can Altin) #59071f006a14522] - node-api: make napi_delete_reference use node_api_basic_env (Jeetu Suthar) #596840f46c1c3b0] - repl: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater) #598573eeb7b47ea] - sqlite: fix crash session extension callbacks with workers (Bart Louwers) #598480fe53375ec] - (SEMVER-MINOR) sqlite: cleanup ERM support and export Session class (James M Snell) #583789a3e58a007] - (SEMVER-MINOR) sqlite: add tagged template (0hm☘️) #58748f14ed5ab7b] - src: simplify watchdog instantiations viastd::optional(Anna Henningsen) #59960e330f03f84] - src: update crypto objects to use DictionaryTemplate (James M Snell) #5994269b5607cf4] - src: simplify is_callable by making it a concept (Tobias Nießen) #5816986150f3401] - src: rename private fields to follow naming convention (Moonki Choi) #59923d17f299539] - src: use DictionaryTemplate more in URLPattern (James M Snell) #59892ac784912ac] - src: reduce the nearest parent package JSON cache size (Michael Smith) #59888abecdcb536] - src: replace FIXED_ONE_BYTE_STRING with Environment-cached strings (Moonki Choi) #598912bb152500b] - src: create strings inFIXED_ONE_BYTE_STRINGas internalized (Anna Henningsen) #5982603116a7cd8] - src: removestd::arrayoverload ofFIXED_ONE_BYTE_STRING(Anna Henningsen) #598268a5325d6e3] - src: ensurev8::Eternalis empty before setting it (Anna Henningsen) #59825f0c20ccd81] - src: remove unnecessaryEnvironment::GetCurrent()calls (Moonki Choi) #59814213188e491] - stream: use new AsyncResource instead of bind (Matteo Collina) #59867ce8435b003] - test: testcase demonstrating issue 59541 (Eric Rannaud) #598018f32746142] - test: guard write to proxy client if proxy connection is ended (Joyee Cheung) #597426790093fcb] - tls: load bundled and extra certificates off-thread (Joyee Cheung) #59856f5d3f919d8] - tls: only do off-thread certificate loading on loading tls (Joyee Cheung) #5985687bbaa23a0] - tools: fixtools/make-v8.shfor clang (Richard Lau) #598930d23fd525b] - tools: skip test-internet workflow for draft PRs (Michaël Zasso) #59817e17c73731a] - tools: copyeditbuild-tarball.yml(Antoine du Hamel) #5980897c4e1bac9] - typings: remove unused imports (Nam Yooseong) #598808b29bbca76] - url: replaced slice with at (Mikhail) #591816458867a6b] - url: add type checking to urlToHttpOptions() (simon-id) #597533c62b3886f] - util: inspect objects with throwing Symbol.toStringTag (Ruben Bridgewater) #598606133a82875] - util: fix debuglog.enabled not being present with callback logger (Ruben Bridgewater) #598589347ddddf4] - vm: explain how to share promises between contexts w/ afterEvaluate (Eric Rannaud) #5980144ce971619] - vm: "afterEvaluate", evaluate() return a promise from the outer context (Eric Rannaud) #598016e586a1409] - vm: expose hasTopLevelAwait on SourceTextModule (Chengzhong Wu) #5986549747a58a3] - (SEMVER-MINOR) worker: add heap profile API (theanarkh) #59846b970c0bbc2] - zlib: reduce code duplication (jhofstee) #578109782ca2b1b] - zlib: implement fast path for crc32 (Gürgün Dayıoğlu) #59813v24.8.0: 2025-09-10, Version 24.8.0 (Current), @targosCompare Source
Notable Changes
HTTP/2 Network Inspection Support in Node.js
Node.js now supports inspection of HTTP/2 network calls in Chrome DevTools for Node.js.
Usage
Write a
test.jsscript that makes HTTP/2 requests.Run it with these options:
Open
about:inspecton Google Chrome and click onOpen dedicated DevTools for Node.The
Networktab will let you track your HTTP/2 calls.Contributed by Darshan Sen in #59611.
Other Notable Changes
7a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #59537d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428Commits
d913872369] - assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong) #595787bbbcf6666] - benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues) #5970944d7b92271] - benchmark: calibrate config array-vs-concat (Rafael Gonzaga) #595877f347fc551] - build: fix getting OpenSSL version on Windows (Michaël Zasso) #596094a317150d5] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #59547bda32af587] - build: usewindows-2025runner (Michaël Zasso) #59673a4a8ed8f6e] - build: compile bundled uvwasi conditionally (Carlo Cabrera) #59622d944a87761] - crypto: refactor subtle methods to use synchronous import (Filip Skokan) #597717a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #595370d1e53d935] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #5979168732cf426] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #59689f12c1ad961] - deps: update googletest toeb2d85e(Node.js GitHub Bot) #5933545af6966ae] - deps: upgrade npm to 11.6.0 (npm team) #5975057617244a4] - deps: V8: cherry-pick6b1b9bc(Xiao-Tao) #592832e6225a747] - deps: update amaro to 1.1.2 (Node.js GitHub Bot) #596161f7f6dfae6] - diagnostics_channel: revoke DEP0163 (René) #597588671a6cdb3] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707583b1b255d] - doc: update OpenSSL default security level to 2 (Jeetu Suthar) #597239b5eb6eb50] - doc: fix missing links in theerrorspage (Nam Yooseong) #59427e7bf712c57] - doc: update "Type stripping in dependencies" section (Josh Kelley) #5965296db47f91e] - doc: add Miles Guicent as triager (Miles Guicent) #5956287f829bd0c] - doc: markpath.matchesGlobas stable (Aviv Keller) #59572062b2f705e] - doc: improve documentation for raw headers in HTTP/2 APIs (Tim Perry) #596336ab9306370] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #59579c8d6b60da6] - doc: fix quic session instance typo (jakecastelli) #5964261d0a2d1ba] - doc: fix filehandle.read typo (Ruy Adorno) #596353276bfa0d0] - doc: update migration recomendations forutil.is**()deprecations (Augustin Mauroy) #5926911de6c7ebb] - doc: fix missing link to the Error documentation in thehttppage (Alexander Makarenko) #59080f5b6829bba] - doc,crypto: add description to the KEM and supports() methods (Filip Skokan) #596445bfdc7ee74] - doc,crypto: cleanup unlinked and self method references webcrypto.md (Filip Skokan) #59608010458d061] - esm: populate separate cache for require(esm) in imported CJS (Joyee Cheung) #59679dbe6e63baf] - esm: fix missed renaming in ModuleJob.runSync (Joyee Cheung) #597248eb0d9d834] - fs: fix wrong order of file names in cpSync error message (Nicholas Paun) #59775e69be5611f] - fs: fix dereference: false on cpSync (Nicholas Paun) #596812865d2ac20] - http: unbreak keepAliveTimeoutBuffer (Robert Nagy) #59784ade1175475] - http: use cached '1.1' http version string (Robert Nagy) #5971774a09482de] - inspector: undici as shared-library should pass tests (Aras Abbasi) #59837772f8f415a] - inspector: add http2 tracking support (Darshan Sen) #596113d225572d7] - Revert "lib: optimize writable stream buffer clearing" (Yoo) #597434fd213ce73] - lib: fix isReadable and isWritable return type value (Gabriel Quaresma) #5908939befddb87] - lib: prefer TypedArrayPrototype primordials (Filip Skokan) #597660748160d2e] - lib: fix DOMException subclass support (Chengzhong Wu) #596801a93df808c] - lib: revert to using default derived class constructors (René) #59650bb0755df37] - meta: bumpcodecov/codecov-action(dependabot[bot]) #5972645d148d9be] - meta: bump actions/download-artifact from 4.3.0 to 5.0.0 (dependabot[bot]) #5972901b66b122e] - meta: bump github/codeql-action from 3.29.2 to 3.30.0 (dependabot[bot]) #5972834f7ab5502] - meta: bump actions/cache from 4.2.3 to 4.2.4 (dependabot[bot]) #597275806ea02af] - meta: bump actions/checkout from 4.2.2 to 5.0.0 (dependabot[bot]) #59725f667215583] - path: refactor path joining logic for clarity and performance (Lee Jiho) #597810340fe92a6] - repl: do not cause side effects in tab completion (Anna Henningsen) #59774a414c1eb51] - repl: fix REPL completion under unary expressions (Kingsword) #59744c206f8dd87] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #596070bf9775ee2] - sea: implement sea.getAssetKeys() (Joyee Cheung) #59661bf26b478d8] - sea: allow using inspector command line flags with SEA (Joyee Cheung) #5956892128a8fe2] - src: use DictionaryTemplate for node_url_pattern (James M Snell) #59802bcb29fb84f] - src: correctly report memory changes to V8 (Yaksh Bariya) #5962344c24657d3] - src: fixup node_messaging error handling (James M Snell) #597922cd6a3b7ec] - src: track async resources via pointers to stack-allocated handles (Anna Henningsen) #5970434d752586f] - src: fix build on NetBSD (Thomas Klausner) #5971815fa779ac5] - src: fix race on process exit and off thread CA loading (Chengzhong Wu) #5963215cbd3966a] - src: separate module.hasAsyncGraph and module.hasTopLevelAwait (Joyee Cheung) #5967588d1ca8990] - src: use non-deprecated Get/SetPrototype methods (Michaël Zasso) #5967156ac9a2d46] - src: migrate WriteOneByte to WriteOneByteV2 (Chengzhong Wu) #596343d88aa9f2f] - src: remove duplicate code (theanarkh) #596490718a70b2a] - src: add name for more threads (theanarkh) #596010379a8b254] - src: remove JSONParser (Joyee Cheung) #5961990d0a1b2e9] - src,sqlite: refactor value conversion (Edy Silva) #596595e025c7ca7] - stream: replace manual function validation with validateFunction (방진혁) #59529155a999bed] - test: skip tests failing when run under root (Livia Medeiros) #597796313706c69] - test: update WPT for urlpattern tocff1ac1(Node.js GitHub Bot) #5960241245ad4c7] - test: skip more sea tests on Linux ppc64le (Richard Lau) #59755df63d37ec4] - test: fix internet/test-dns (Michaël Zasso) #596601f6c335e82] - test: mark test-inspector-network-fetch as flaky again (Joyee Cheung) #596401798683df1] - test: skip test-fs-cp* tests that are constantly failing on Windows (Joyee Cheung) #596374c48ec09e5] - test: deflake test-http-keep-alive-empty-line (Luigi Pinca) #59595dcdb259e85] - test_runner: fix todo inheritance (Moshe Atlow) #5972124177973a2] - test_runner: set mock timer's interval undefined (hotpineapple) #5947983d11f8a7a] - tools: print appropriate output when test aborted (hotpineapple) #597941eca2cc548] - tools: use sparse checkout inbuild-tarball.yml(Antoine du Hamel) #5978889fa1a929d] - tools: remove unused actions frombuild-tarball.yml(Antoine du Hamel) #59787794ca3511d] - tools: do not attempt to compress tgz archive (Antoine du Hamel) #59785377bdb9b7e] - tools: add v8windbg target (Chengzhong Wu) #597676696d1d6c9] - tools: improve error handling in node_mksnapshot (James M Snell) #594378dbd0f13e8] - tools: add sccache totest-internetworkflow (Antoine du Hamel) #597206523c2d7d9] - tools: update gyp-next to 0.20.4 (Node.js GitHub Bot) #5969019d633f40c] - tools: add script to make reviewing backport PRs easier (Antoine du Hamel) #5916115e547b3a4] - typings: add typing for 'uv' (방진혁) #59606ad5cfcc901] - typings: add missing properties in ConfigBinding (Lee Jiho) #5958570d2d6d479] - url: add err.input to ERR_INVALID_FILE_URL_PATH (Joyee Cheung) #59730e476e43c17] - util: fix numericSeparator with negative fractional numbers (sangwook) #59379b2e8f40d15] - util: remove unnecessary template strings (btea) #592016f79450ea2] - util: remove outdated TODO comment (haramjeong) #5976032731432ef] - util: use getOptionValue('--no-deprecation') in deprecated() (haramjeong) #5976065e4e68c90] - util: hide duplicated stack frames when using util.inspect (Ruben Bridgewater) #594472086f3365f] - vm: sync-ify SourceTextModule linkage (Chengzhong Wu) #59000c16163511d] - wasi: fixcleantarget intest/wasi/Makefile(Antoine du Hamel) #595762e54411cb6] - worker: optimize cpu profile implement (theanarkh) #59683d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428v24.7.0: 2025-08-27, Version 24.7.0 (Current), @targosCompare Source
Notable Changes
Post-Quantum Cryptography in
node:cryptoOpenSSL 3.5 on 24.x kicked off post-quantum cryptography efforts in Node.js by
allowing use of NIST's post-quantum cryptography standards for future-proofing
applications against quantum computing threats. The following post-quantum
algorithms are now available in
node:crypto:crypto.encapsulate()andcrypto.decapsulate()methods.crypto.sign()andcrypto.verify()methods.Contributed by Filip Skokan in #59259 and #59491.
Modern Algorithms in Web Cryptography API
The second substantial extension to the Web Cryptography API
(
globalThis.crypto.subtle) was recently accepted for incubation by WICG.The following algorithms and methods from this extension are now available in
the Node.js Web Cryptography API implementation:
subtle.getPublicKey()SubtleCrypto.supports()Contributed by Filip Skokan in #59365, #59569, #59461, and #59539.
Node.js execution argument support in single executable applications
The single executable application configuration now supports additional fields
to specify Node.js execution arguments and control how they can be extended when
the application is run.
execArgvtakes an array of strings for the execution arguments to be used.execArgvExtensiontakes one of the following values:"none": No additional execution arguments are allowed."cli": Additional execution arguments can be provided via a special command-line flag--node-options="--flag1 --flag2=value"at run time."env"(default): Additional execution arguments can be provided via theNODE_OPTIONSenvironment variable at run time.For example, with the following configuration:
If the generated single executable application is named
sea, then running:Would be equivalent to running:
Contributed by Joyee Cheung in #59314 and #59560.
Root certificates updated to NSS 3.114
Certificates added:
Certificates removed:
Other Notable Changes
d3afc63c44] - (SEMVER-MINOR) crypto: add argon2() and argon2Sync() methods (Ranieri Althoff) #503536ae202fcdf] - (SEMVER-MINOR) http: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) #59315dafee05358] - (SEMVER-MINOR) http2: add support for raw header arrays in h2Stream.respond() (Tim Perry) #594558dc6f5b696] - (SEMVER-MINOR) stream: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) #59464Commits
0fa22cbf7c] - benchmark: calibrate config v8/serialize.js (Rafael Gonzaga) #59586f5ece45b45] - benchmark: reduce readfile-permission-enabled config (Rafael Gonzaga) #595898ebd4f4434] - benchmark: calibrate length of util.diff (Rafael Gonzaga) #595887dee3ffd14] - benchmark: reflect current OpenSSL in crypto key benchmarks (Filip Skokan) #59459027b861ca1] - benchmark, test: replace CRLF variable with string literal (Lee Jiho) #5946689dd770889] - build: do not set-mminimal-tocwithclang(Richard Lau) #59484e13de4542f] - child_process: remove unsafe array iteration (hotpineapple) #5934789fe63551e] - crypto: load system CA certificates off thread (Joyee Cheung) #59550152c5ef518] - (SEMVER-MINOR) crypto: add AES-OCB Web Cryptography algorithm (Filip Skokan) #59539c6c418343d] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #5957118a2ee5b6c] - (SEMVER-MINOR) crypto: support ML-KEM in Web Cryptography (Filip Skokan) #5956972937e5144] - crypto: require HMAC key length with SHA-3 hashes in Web Cryptography (Filip Skokan) #59567b7383186c7] - crypto: fix subtle.getPublicKey error for secret type key inputs (Filip Skokan) #595582d05c046db] - crypto: return cached copies from CryptoKey algorithm and usages getters (Filip Skokan) #59538207ffbeb07] - crypto: use CryptoKey internal slots in Web Cryptography (Filip Skokan) #595384276516781] - crypto: normalize RsaHashedKeyParams publicExponent (Filip Skokan) #5953814741539a7] - (SEMVER-MINOR) crypto: support ML-KEM, DHKEM, and RSASVE key encapsulation mechanisms (Filip Skokan) #59491d3afc63c44] - (SEMVER-MINOR) crypto: add argon2() and argon2Sync() methods (Ranieri Althoff) #503534fe383e45a] - (SEMVER-MINOR) crypto: support ML-DSA spki/pkcs8 key formats in Web Cryptography (Filip Skokan) #59365a95386fbf9] - (SEMVER-MINOR) crypto: subject some algorithms in Web Cryptography on BoringSSL absence (Filip Skokan) #593653f47a2fb63] - (SEMVER-MINOR) crypto: add ChaCha20-Poly1305 Web Cryptography algorithm (Filip Skokan) #593656fcce9058a] - (SEMVER-MINOR) crypto: add subtle.getPublicKey() utility function in Web Cryptography (Filip Skokan) #5936576cde76429] - (SEMVER-MINOR) crypto: add SHA-3 Web Cryptography digest algorithms (Filip Skokan) #59365247d017501] - (SEMVER-MINOR) crypto: add SHAKE Web Cryptography digest algorithms (Filip Skokan) #59365f4fbcca5ce] - (SEMVER-MINOR) crypto: add SubtleCrypto.supports feature detection in Web Cryptography (Filip Skokan) #59365a55382214f] - (SEMVER-MINOR) crypto: support ML-DSA in Web Cryptography (Filip Skokan) #59365c38988c860] - crypto: fix EVPKeyCtxPointer::publicCheck() (Tobias Nießen) #5947161c3bcdc56] - (SEMVER-MINOR) crypto: support ML-KEM KeyObject (Filip Skokan) #594610821b446fb] - deps: update undici to 7.14.0 (Node.js GitHub Bot) #59507b3af17c065] - deps: V8: cherry-pick7b91e3e(Milad Fa) #594859b69baf146] - deps: V8: cherry-pick59d52e3(Milad Fa) #59485b4f202c2f1] - doc: improvesqlite.backup()progress/fulfillment documentation (René) #5959840b217a2f9] - doc: clarify experimental platform vulnerability policy (Matteo Collina) #59591cf84fffea5] - doc: link toTypedArray.from()in signature (Aviv Keller) #592264bf6ed0bf5] - doc: fix typos inenvironment_variables.md(PhistucK) #595361784c35a49] - doc: add security incident reponse plan (Rafael Gonzaga) #59470b962560240] - doc: clarify maxRSS unit inprocess.resourceUsage()(Alex Yang) #59511e6a6cdb9df] - doc: add missing Zstd strategy constants (RANDRIAMANANTENA Narindra Tiana Annaick) #59312a6a31cb467] - (SEMVER-MINOR) doc: compress Web Cryptography Algorithm matrix (Filip Skokan) #593658f8960cfcb] - doc: fix the version tls.DEFAULT_CIPHERS was added (Allon Murienik) #592479e76089f1a] - doc: clarify glob's exclude option behavior (hotpineapple) #59245dd5f835af7] - doc: add RafaelGSS as performance strategic lead (Rafael Gonzaga) #594452b7a7a525e] - doc,crypto: add supported asymmetric key types section (Filip Skokan) #594922fafe4c3bb] - esm: link modules synchronously when no async loader hooks are used (Joyee Cheung) #595195347c4997a] - esm: show race error message for inner module job race (Joyee Cheung) #59519b56d8af2fe] - esm: sync-ify module translation (Joyee Cheung) #59453b4a23d6a69] - http: trim off brackets from IPv6 addresses with string operations (Krishnadas PC) #594206ae202fcdf] - (SEMVER-MINOR) http: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) #59315dafee05358] - (SEMVER-MINOR) http2: add support for raw header arrays in h2Stream.respond() (Tim Perry) #59455b7ea39d860] - http2: report sent headers object in client stream dcs (Darshan Sen) #59419ebe9272dae] - inspector: initial support websocket inspection (Shima Ryuhei) #59404b35041c7dc] - inspector: prevent propagation of promise hooks to noPromise hooks (Shima Ryuhei) #58841fe7176d7c6] - lib: do not modify prototype deprecated asyncResource (encore) (Szymon Łągiewka) #5951893fc80a1e2] - (SEMVER-MINOR) lib: refactor kSupportedAlgorithms (Filip Skokan) #593659a12f71ad9] - lib: simplify IPv6 checks in isLoopback() (Krishnadas) #59375566fb04c82] - meta: update devcontainer to the latest schema (Aviv Keller) #54347389a24bbff] - module: allow overriding linked requests for a ModuleWrap (Chengzhong Wu) #595277880978fe3] - module: correctly detect top-level await in ambiguous contexts (Shima Ryuhei) #5864699128d9244] - node-api: link to other programming language bindings (Chengzhong Wu) #5951665c870e6cb] - node-api: clarify enum value ABI stability (Chengzhong Wu) #59085352d63541a] - sea: implement execArgvExtension (Joyee Cheung) #59560c6e3d5d98d] - (SEMVER-MINOR) sea: support execArgv in sea config (Joyee Cheung) #59314e7084df4db] - sqlite: add sqlite-type symbol for DatabaseSync (Alex Yang) #59405e2b6bdc640] - sqlite: handle ?NNN parameters as positional (Edy Silva) #5935099e4a12731] - sqlite: avoid useless call to FromMaybe() (Tobias Nießen) #59490dfd4962e5f] - src: enforce assumptions in FIXED_ONE_BYTE_STRING (Tobias Nießen) #5815593a368df04] - src: use simdjson to parse --snapshot-config (Joyee Cheung) #59473716750fcf8] - src: fix order of CHECK_NOT_NULL/dereference (Tobias Nießen) #5948744a8ecf8d4] - src: assert memory calc for max-old-space-size-percentage (Asaf Federman) #594603462b46fca] - src: use simdjson::pad (0hm☘️) #593913e1551d845] - src: move shared_ptr objects in KeyObjectData (Tobias Nießen) #59472c022c1f85a] - src: add internal GetOptionsAsFlags (Pietro Marchini) #59138c0f08454a3] - src: iterate metadata version entries with std::array (Chengzhong Wu) #57866f87836f3ae] - src: internalizev8::ConvertableToTraceFormatin traces (Chengzhong Wu) #57866852b8e46d8] - src: remove duplicate assignment ofO_EXCLin node_constants.cc (Daniel Osvaldo R) #5904964ffde608f] - src: add Intel CET properties to large_pages.S (tjuhaszrh) #59363823dce32ec] - src: update OpenSSL pqc checks (Filip Skokan) #594368dc6f5b696] - (SEMVER-MINOR) stream: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) #59464b2b8383755] - test: use mustSucceed in test-repl-tab-complete-import (Sohyeon Kim) #59368e3ad5cc2c6] - test: skip sea tests on Linux ppc64le (Richard Lau) #59563f78f47ca5a] - test: support standalone env comment in tests (Pietro Marchini) #595460e8bc2c7ac] - test: rename test-net-server-drop-connections-in-cluster.js to -http- (Meghan Denny) #59532ed339580af] - test: lazy-load internalTTy (Pietro Marchini) #59517fe86bc6da8] - test: fixtest-setproctitlestatus whenpsis not available (Antoine du Hamel) #59523e517792973] - test: add parseTestMetadata support (Pietro Marchini) #5950331092972d6] - test: update WPT for WebCryptoAPI toff26d9b(Node.js GitHub Bot) #5949716afd103cc] - (SEMVER-MINOR) test: add Web Cryptography wrap/unwrap vectors (Filip Skokan) #593655598baf34e] - (SEMVER-MINOR) test: cleanup test-webcrypto-supports (Filip Skokan) #59365e7809d6ddb] - test: make test-debug-process locale-independent (BCD1me) #59254ca7856e73c] - test: mark test-wasi-pthread as flaky (Joyee Cheung) #594880ecd82197f] - test: split test-wasi.js (Joyee Cheung) #594880930c218d6] - test: deflake connection refused proxy tests (Joyee Cheung) #594767f457f886a] - test: use case-insensitive path checking on Windows in fs.cpSync tests (Joyee Cheung) #5947537809115f9] - test: add missing hasPostData in test-inspector-emit-protocol-event (Shima Ryuhei) #59412f4722b1672] - test: refactor error checks to use assert.ifError/mustSucceed (Sohyeon Kim) #594249ff71a672d] - test: fix typos (Lee Jiho) #593309a7700da62] - test: skip test-watch-mode inspect when no inspector (James M Snell) #59440e964c4334e] - test_runner: do not error when gettingfullNameof root context (René) #59377e076f7857c] - test_runner: add option to rerun only failed tests (Moshe Atlow) #59443eb8b1939a4] - test_runner: fix isSkipped check in junit (Sungwon) #594144e02ea1c52] - tools: update gyp-next to 0.20.3 (Node.js GitHub Bot) #5960399da7fbe11] - tools: avoid parsing test files twice (Pietro Marchini) #595269a6a8e319b] - tools: update coverage GitHub Actions to fixed version (Rich Trott) #595128d28236aff] - tools: fix return value of try_check_compiler (theanarkh) #5943452ab64ec3a] - tools: bump @eslint/plugin-kit from 0.3.3 to 0.3.4 in /tools/eslint (dependabot[bot]) #59271baa22893bb] - typings: add missing URLBinding methods (성우현 | Woohyun Sung) #59468b68e0d1eca] - util: fix error's namespaced node_modules highlighting using inspect (Ruben Bridgewater) #5944615ae21b88a] - util: add some additional error classes towellKnownPrototypes(Mark S. Miller) #59456c38b7cfa35] - worker: fix worker name with \0 (theanarkh) #59214f54ace694a] - worker: add worker name to report (theanarkh) #58935v24.6.0: 2025-08-14, Version 24.6.0 (Current), @RafaelGSSCompare Source
Notable Changes
471fe712b3] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #5927638aedfbf73] - (SEMVER-MINOR) crypto: support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259201304537e] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240e79c93a5d0] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243c144d69efc] - lib: docs deprecate _http_* (Sebastian Beltran) #59293aeb4de55a7] - (SEMVER-MINOR) fs: port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897Commits
f7484575ff] - assert: change utils to use index instead of for...of (방진혁) #59278269cd16185] - benchmark: remove deprecated _extend from benchmark (Rafael Gonzaga) #59228848e49c20b] - benchmark: add fs warmup to writefile-promises (Bruno Rodrigues) #592158c609be1b1] - benchmark: add calibrate-n script (Rafael Gonzaga) #591866a3bf772d8] - build: fix node_use_sqlite for GN builds (Shelley Vohr) #59017471fe712b3] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #5927638aedfbf73] - (SEMVER-MINOR) crypto: support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259a312e706cf] - crypto: prepare webcrypto key import/export for modern algorithms (Filip Skokan) #592843a7c2c3a47] - deps: update ada to 3.2.7 (Node.js GitHub Bot) #593368d9ceeaf6a] - deps: update archs files for openssl-3.5.2 (Node.js GitHub Bot) #5937133b06df354] - deps: upgrade openssl sources to openssl-3.5.2 (Node.js GitHub Bot) #59371fa70f1af77] - deps: support madvise(3C) across ALL illumos revisions (Dan McDonald) #58237f834a6be59] - deps: update undici to 7.13.0 (Node.js GitHub Bot) #59338db2417487e] - deps: update sqlite to 3.50.4 (Node.js GitHub Bot) #5933741978adb08] - deps: V8: backport493cb53(Chengzhong Wu) #5923805667991ca] - deps: V8: backport1c3e018(Renegade334) #58818fd61588bb4] - doc: rename x509.extKeyUsage to x509.keyUsage (Filip Skokan) #59332a271ae4360] - doc: fix Pbkdf2Params hash attribute heading (Filip Skokan) #5939572cfff165b] - doc: fix missing reference links for server.keepAliveTimeoutBuffer (Lee Jiho) #593568341916772] - doc: fix grammar in global dispatcher usage (Eng Zer Jun) #59344e3e489706b] - doc: run license-builder (github-actions[bot]) #5934346527e8cea] - doc: correct orthographyeg.→e.g.(Jacob Smith) #59329d140c3713e] - doc: clarify the need of compiler compatible with c++20 (Rafael Gonzaga) #5929795e9cabf9d] - doc: clarify release candidate stability index (Filip Skokan) #59295a056dd36d2] - doc: add WDYT to glossary (btea) #592801e2c52f5c4] - doc: add manpage entry for --use-system-ca (Joyee Cheung) #5927331a46fdeb4] - doc: add path.join and path.normalize clarification (Rafael Gonzaga) #59262cff3725ff9] - doc: fix typo intest/common/README.md(Yoo) #5918031a9283591] - doc: add note on process memoryUsage (fengmk2) #590265a98bff6b8] - doc: format safely fordoc-kit(Aviv Keller) #5922995b8b7ea5c] - domain: remove deprecated API call (Alex Yang) #593392990f178bd] - fs: fix glob TypeError on restricted dirs (Sylphy-0xd3ac) #58674e2fb4caf9c] - fs: correct error message when FileHandle is transferred (Alex Yang) #59156aeb4de55a7] - (SEMVER-MINOR) fs: port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897e79c93a5d0] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #592430fb005a53f] - http2: set Http2Stream#sentHeaders for raw headers (Darshan Sen) #59244e055539604] - lib: add trace-sigint APIs (theanarkh) #59040d2183d860a] - lib: optimize writable stream buffer clearing (Yoo) #5940647543a7e17] - lib: handle windows reserved device names on UNC (Rafael Gonzaga) #59286c6911f0717] - lib: do not modify prototype deprecated asyncResource (RafaelGSS) #591953c88b769bb] - lib: restructure assert to become a class (Miguel Marcondes Filho) #58253e91b54df59] - lib: handle superscript variants on windows device (Rafael Gonzaga) #592614ee467905d] - lib: use validateString (hotpineapple) #59296c144d69efc] - lib: docs deprecate _http_* (Sebastian Beltran) #59293c89b67e681] - lib: add type names in source mapped stack traces (Chengzhong Wu) #589765b2363be8d] - lib: prefer AsyncIteratorPrototype primordial (René) #5909741b4f4d694] - meta: clarify pr objection process further (James M Snell) #590960eb5962f1e] - meta: add mailmap entry for aditi-1400 (Aditi) #59316a2b72c2304] - meta: add tsc and build team as codeowners building.md (Rafael Gonzaga) #59298d69f3ee1e0] - meta: add nodejs/path to path files (Rafael Gonzaga) #592891e37eab865] - node-api: reword "implementation in an alternative VM" as implementable (Chengzhong Wu) #5903664add6302a] - src: use simdjson to parse SEA configuration (Joyee Cheung) #59323e9c6636585] - src: mark realm leaf classes final (Anna Henningsen) #5935542ef8147d1] - src: warn about FastOneByteString invalidation (James M Snell) #592758686b8037a] - src: remove unused DSAKeyExportJob (Filip Skokan) #592911e5f632666] - src: use C++20contains()method (iknoom) #5930422d4683cfe] - src: added CHECK_NOT_NULL check for multiple eq_wrap_async (F3lixTheCat) #592676a47ff4943] - src: clear all linked module caches once instantiated (Chengzhong Wu) #5911733728cb4ca] - src: add nullptr checks inStreamPipe::New(Burkov Egor) #576134a907bdad1] - src: add percentage support to --max-old-space-size (Asaf Federman) #590827c189d4f55] - test: deflake sequential/test-tls-session-timeout (Joyee Cheung) #59423fb0a6fb57f] - test: exclude mock from coverage (Shima Ryuhei) #593487e10f95f13] - test: split test-fs-cp.js (Joyee Cheung) #5940841bcf5f659] - test: update WPT resources,WebCryptoAPI,webstorage (Filip Skokan) #59311f9f3dc94cb] - test: add known issue test for fs.cpSync dereference bug (James M Snell) #58941244d0c38a8] - test: deflake stream-readable-to-web test (Ethan Arrowood) #58948564e604a1a] - test: make test-inspector-network-resource sequential (Shima Ryuhei) #591047ab13b7477] - test: don't use expose internals in test-http-outgoing-buffer.js (Meghan Denny) #59219319df3859a] - test,crypto: skip unsupported ciphers (Shelley Vohr) #59388713c70c32a] - test_runner: remove unused callee convertion (Alex Yang) #59221e4ca30e115] - tools: disable nullability-completeness warnings (Michaël Zasso) #59392dab7f6b542] - tools: check for std::vector<v8::Local> in lint (Aditi) #584977b94982eb0] - tools: allow selecting test subsystems with numbers in their names (Darshan Sen) #5924216bbcd8881] - typings: improve internal binding types (Nam Yooseong) #5935176bc4d659b] - typings: improve internal binding types (Michaël Zasso) #59176eecd3272a6] - worker: add name for worker (theanarkh) #5921384c3513ce2] - worker: implements nits in Web Locks code (Antoine du Hamel) #59270bd68fbd753] - worker: add cpuUsage for worker (theanarkh) #59177201304537e] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240v24.5.0: 2025-07-31, Version 24.5.0 (Current), @aduh95Compare Source
Notable Changes
Upgrade to OpenSSL 3.5
This release is distributed with OpenSSL 3.5.1, following the announcement that
OpenSSL 3.5 will be supported until April 2030, while Node.js 24 will be
supported until April 2028. Read more about OpenSSL support in their blog post:
https://openssl-library.org/post/2025-02-20-openssl-3.5-lts/.
Contributed by Richard Lau in #58100.
Unflag
--experimental-wasm-modulesNode.js supports both source phase imports and instance phase imports to WebAssembly
modules and for WASM imports to JavaScript, in line with the current Phase 3
WebAssembly ESM Integration proposal.
The implementation and the specification are still subject to change.
Contributed by Guy Bedford in #57038.
Built-in proxy support in
request()andAgentnode:httpandnode:httpsnow support proxies. WhenNODE_USE_ENV_PROXYis set to
1, the default global agent would parse thehttp_proxy/HTTP_PROXY,https_proxy/HTTPS_PROXY,no_proxy/NO_PROXYsettings from theenvironment variables, and proxy the requests sent through the built-in http/https
client accordingly.
To use global proxy support from the command line:
In addition,
http.Agentandhttps.Agentnow support the customproxyEnvoptions.For reference,
fetch()already supportsNODE_USE_ENV_PROXYas of Node.js 24.0.0.Contributed by Joyee Cheung in #58980.
Add
setDefaultCACertificates()tonode:tlsThis API allows dynamically configuring CA certificates that will be used by the
Node.js TLS clients by default.
Once called, the provided certificates will become the default CA certificate list
returned by
tls.getCACertificates('default')and used by TLS connections thatdon't specify their own CA certificates.
To add system CA certificates to the default bundle (which includes the Mozilla
CA certificates):
Contributed by Joyee Cheung in #58822.
Other notable changes
d5640ca58a] - (SEMVER-MINOR) cli: support${pid}placeholder in--cpu-prof-name(Haram Jeong) #59072c52aaacfc5] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #58440927742b342] - doc: update the instruction on how to verify releases (Antoine du Hamel) #59113f753645cd8] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #580879791ff3480] - (SEMVER-MINOR) worker: add web locks api (ishabi) #58666Commits
5457c7a8a1] - benchmark: adjust configuration for string-decoder bench (Rafael Gonzaga) #5918728538f2255] - benchmark: add --track to benchmark (Rafael Gonzaga) #59174a28d804497] - benchmark: small lint fix on _cli.js (Rafael Gonzaga) #5917209717eb68e] - benchmark: drop misc/punycode benchmark (Rafael Gonzaga) #59171ad6757ef02] - benchmark: fix sqlite-is-transaction (Rafael Gonzaga) #591707fc3143f61] - benchmark: reduce N for diagnostics_channel subscribe benchmark (Arthur Angelo) #59116f2812723a0] - buffer: cache Environment::GetCurrent to avoid repeated calls (Mert Can Altin) #59043e3e729ca60] - build: remove suppressions.supp (Rafael Gonzaga) #59079dc66422768] - build,deps,tools: prepare to update to OpenSSL 3.5 (Richard Lau) #58100f5da4947d9] - cli: add --use-env-proxy (Joyee Cheung) #59151d5640ca58a] - (SEMVER-MINOR) cli: support${pid}placeholder in --cpu-prof-name (Haram Jeong) #59072eeeb40e95b] - (SEMVER-MINOR) crypto: add tls.setDefaultCACertificates() (Joyee Cheung) #58822135fca5b72] - crypto: avoid copying buffers to UTF-8 strings incrypto.hash()(Renegade334) #59067998cef10e3] - deps: update archs files for openssl-3.5.1 (Node.js GitHub Bot) #592341f06ca956a] - deps: upgrade openssl sources to openssl-3.5.1 (Node.js GitHub Bot) #5923455a90eed8d] - deps: upgrade npm to 11.5.1 (npm team) #591992b5d451ae0] - deps: update amaro to 1.1.1 (Node.js GitHub Bot) #59141af789d9b5c] - deps: update undici to 7.12.0 (Node.js GitHub Bot) #59135a34e44545e] - deps: update sqlite to 3.50.3 (Node.js GitHub Bot) #59132bfe4781c7d] - deps: update googletest to7e17b15(Node.js GitHub Bot) #5913172adf52e51] - deps: update ada to 3.2.6 (Node.js GitHub Bot) #589662a5f35b589] - deps: V8: cherry-pick3d750c2(Michaël Zasso) #587503f813eaba7] - deps: update archs files for openssl-3.0.17 (Node.js GitHub Bot) #59134fb52d0d8df] - deps: upgrade openssl sources to openssl-3.0.17 (Node.js GitHub Bot) #59134f122602f9d] - deps: update corepack to 0.34.0 (Node.js GitHub Bot) #59133c52aaacfc5] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #58440927742b342] - doc: update the instruction on how to verify releases (Antoine du Hamel) #591139a8d2020ad] - doc: copyedit SECURITY.md (Rich Trott) #591903da5bc0668] - doc: fix broken sentence inURL.parse(Superchupu) #5916406cd7461e0] - doc: improve onboarding instructions (Joyee Cheung) #59159dfb72d158b] - doc: add constraints for mem leak to threat model (Rafael Gonzaga) #5891751b8dfd5c6] - doc: add Aditi-1400 to collaborators (Aditi) #591574ffa756ce3] - doc: avoid suggesting testing fast api with intense loop (Chengzhong Wu) #591116f81b274f7] - doc: fix typo in writing-test.md (SeokHun) #5912388e434e687] - doc: add new environment variables doc page (Dario Piotrowicz) #59052b1a318d706] - doc: update release key for aduh95 (Antoine du Hamel) #5887734c49000c9] - doc: add missing section forsetReturnArraysinsqlite.md(Edy Silva) #590749b2e965aff] - doc: add RafaelGSS as steward July 25 (Rafael Gonzaga) #590782d1dcb87e6] - doc: clarify ERR_FS_FILE_TOO_LARGE to reflect fs.readFile() I/O limit (Haram Jeong) #59050999b5e51e7] - doc: run license-builder (github-actions[bot]) #590561940a2cb46] - doc: fix typed list formatting (Aviv Keller) #590196cb5e0d22f] - doc: refineutil.parseArgsdefaultdefinition (Slayer95) #58958d2e7f8e13a] - doc: remove unused import inzlib.md(coderaiser) #590419d02960149] - doc: add missing environment variables to manpage (amir lavasani) #5896345ffdb34fb] - doc: add stability index to the--watch-kill-signalflag (Dario Piotrowicz) #589973924c43600] - doc: add missing<code>blocks (Antoine du Hamel) #58995cb95e183f3] - doc: add scroll margin to links (Roman Reiss) #58982c9ded6ba15] - doc: add sponsorship link to RafaelGSS (Rafael Gonzaga) #58983b919fe0447] - (SEMVER-MINOR) esm: unflag --experimental-wasm-modules (Guy Bedford) #5703871bb6cd077] - esm: js-string Wasm builtins in ESM Integration (Guy Bedford) #590208d869e6d62] - fs: fix return value of fs APIs (theanarkh) #589967f654cee9e] - (SEMVER-MINOR) http,https: add built-in proxy support in http/https.request and Agent (Joyee Cheung) #5898085d6a28f4f] - inspector: initial support for Network.loadNetworkResource (Shima Ryuhei) #58077cfaa299f2e] - lib: fix incorrectArrayBufferPrototypeGetDetachedprimordial type (Dario Piotrowicz) #58978d555db22ad] - lib: flag to conditionally modify proto on deprecate (Rafael Gonzaga) #5892896c9dd79e6] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #59140324d9fc9d4] - meta: enable jsdoc/check-tag-names rule (Yagiz Nizipli) #5852104c751463b] - meta: add marco-ippolito to security release stewards (Marco Ippolito) #58944fe0195fdcc] - module: fix conditions override in synchronous resolve hooks (Joyee Cheung) #59011515b581d47] - module: throw error when re-runing errored module jobs (Joyee Cheung) #58957f753645cd8] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #5808715e6c28d82] - node-api,doc: update links to ecma262 with section names (Chengzhong Wu) #59087f67b686551] - perf_hooks: do not expose SafeMap via Histogram wrapper (René) #590943d2f919f7c] - process: make execve's args argument optional (Allon Murienik) #584121a44265810] - repl: handle errors from getters during completion (Shima Ryuhei) #59044467dbd31e6] - repl: fix repl crashing on variable declarations without init (Dario Piotrowicz) #590323a3eb6852d] - repl: improve REPL disabling completion on proxies and getters (Dario Piotrowicz) #5889155838e79b8] - src: call unmask after install signal handler (theanarkh) #5905977649ad93b] - src: useFastStringKeyforTrackV8FastApiCall(Anna Henningsen) #5914886babf9c4b] - src: use C++20constevalforFastStringKey(Anna Henningsen) #5914888b99eeae1] - src: remove declarations of removed BaseObject static fns (Anna Henningsen) #59093d89390fc8f] - src: add cache to nearest parent package json (Ilyas Shabi) #5908621780075e4] - src: check import attributes value types as strings (Chengzhong Wu) #58986ef89c2fac9] - src,test: fix config file parsing for flags defaulted to true (Edy Silva) #591101e990866e0] - test: mark web lock held test as flaky (Ilyas Shabi) #59144ba8e95a785] - test: use mustSucceed in test-fs-read (Sungwon) #5920439978f507f] - test: prepare test-crypto-rsa-dsa for newer OpenSSL (Richard Lau) #581001c3aadb9d6] - test: fix flaky test-worker-message-port-transfer-filehandle test (Alex Yang) #59158a0d22e9c51] - test: remove timeout in test-https-proxy-request-handshake-failure (Joyee Cheung) #591657e0a0fccc1] - test: expand linting rules aroundassertw literal messages (Anna Henningsen) #59147c6070046c3] - test: update WPT for WebCryptoAPI toab08796(Node.js GitHub Bot) #5912915d8cc908e] - test: update WPT for WebCryptoAPI to19d82c5(Node.js GitHub Bot) #5912983023e5144] - test: skip tests that cause timeouts on IBM i (Abdirahim Musse) #5901482d4175ec3] - test: updatestartCLIto set--port=0by default (Dario Piotrowicz) #5904216dc53c143] - (SEMVER-MINOR) test: move http proxy tests to test/client-proxy (Joyee Cheung) #58980a9511a6066] - test: mark test-inspector-network-fetch as flaky on Windows (Joyee Cheung) #590911cffcc02a3] - test: add missing port=0 arg in test-debugger-extract-function-name (Dario Piotrowicz) #5897783cdf1701b] - test_runner: clean up promisified interval generation (René) #58824195d6038dc] - tools: clarify README linter error message (Joyee Cheung) #5916051f578a3bf] - tools: add support for URLs to PR commits inmerge.sh(Antoine du Hamel) #5916220be9012eb] - tools: bump @eslint/plugin-kit from 0.3.1 to 0.3.3 in /tools/eslint (dependabot[bot]) #59119623e264e93] - tools: ignore CVE mention when linting release proposals (Antoine du Hamel) #590370e547e09ab] - tools,test: enforce best practices to detect never settling promises (Antoine du Hamel) #58992075d1968db] - util: respect nested formats in styleText (Alex Yang) #590989791ff3480] - (SEMVER-MINOR) worker: add web locks api (ishabi) #58666v24.4.1: 2025-07-15, Version 24.4.1 (Current), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Commits
c33223f1a5] - (CVE-2025-27209) deps: V8: revert rapidhash commits (Michaël Zasso) nodejs-private/node-private#71356f9db2aaa] - (CVE-2025-27210) lib: handle all windows reserved driver name (RafaelGSS) nodejs-private/node-private#721v24.4.0: 2025-07-09, Version 24.4.0 (Current), @RafaelGSSCompare Source
Notable Changes
22b60e8a57] - (SEMVER-MINOR) crypto: support outputLength option in crypto.hash for XOF functions (Aditi) #5812180dec9849d] - (SEMVER-MINOR) doc: add all watch-mode related flags to node.1 (Dario Piotrowicz) #5871987f4d078b3] - (SEMVER-MINOR) fs: add disposable mkdtempSync (Kevin Gibbons) #585169623c50b53] - (SEMVER-MINOR) permission: propagate permission model flags on spawn (Rafael Gonzaga) #58853797ec4da04] - (SEMVER-MINOR) sqlite: add support for readBigInts option in db connection level (Miguel Marcondes Filho) #58697ed966a0215] - (SEMVER-MINOR) src,permission: add support to permission.has(addon) (Rafael Gonzaga) #58951fe17f5d285] - (SEMVER-MINOR) watch: add--watch-kill-signalflag (Dario Piotrowicz) #58719Commits
a118bfc536] - assert: remove dead code (Yoshiya Hinosawa) #5876031252b9af1] - benchmark: add source map and source map cache (Miguel Marcondes Filho) #581254170359bcd] - bootstrap: initialize http proxy after user module loader setup (Joyee Cheung) #58938c76585d10e] - build: disable v8_enable_pointer_compression_shared_cage on non-64bit (Shelley Vohr) #58867049c838609] - build: option to use custom inspector_protocol path (Shelley Vohr) #5883922b60e8a57] - (SEMVER-MINOR) crypto: support outputLength option in crypto.hash for XOF functions (Aditi) #5812177712ae2a1] - crypto: fix SHAKE128/256 breaking change introduced with OpenSSL 3.4 (Filip Skokan) #5894293e1a33b81] - crypto: fix inclusion of OPENSSL_IS_BORINGSSL define (Shelley Vohr) #58845573171deb0] - deps: V8: cherry-pick0ce2edb(Levi Zim) #58773bf66291382] - deps: V8: cherry-pick1d71595(Michaël Zasso) #58749f735b8b8d0] - deps: update sqlite to 3.50.2 (Node.js GitHub Bot) #588828e9622e494] - deps: update undici to 7.11.0 (Node.js GitHub Bot) #588598741da81c7] - deps: update googletest to35b75a2(Node.js GitHub Bot) #58710028ce40e25] - deps: update minimatch to 10.0.3 (Node.js GitHub Bot) #587123afb15b715] - dns: fix parse memory leaky (theanarkh) #58973f40ac32f3e] - dns: set timeout to 1000ms when timeout < 0 (theanarkh) #58441921b563999] - doc: remove broken link to permission model source code (Juan José) #5897278628d6158] - doc: clarify details of TSC public and private meetings (James M Snell) #58925ab834a8b94] - doc: mark stability markers consistent inglobals.md(Antoine du Hamel) #589328d4f6a0016] - doc: move "Core Promise APIs" to "Completed initiatives" (Antoine du Hamel) #5893494725fced5] - doc: fixfetchsubsections inglobals.md(Antoine du Hamel) #58933a7a4870014] - doc: add missingClass:mentions (Antoine du Hamel) #5893198f29fa2fd] - doc: remove myself from security steward rotation (Michael Dawson) #58927710e13d436] - doc: add ovflowd back to core collaborators (Claudio W.) #589118b93008dc0] - doc: update email address for Richard Lau (Richard Lau) #589109ff81d21ed] - doc: update vm doc links (Chengzhong Wu) #58885ff2efd266d] - doc: fix links in test.md (Vas Sudanagunta) #588765e854e1f61] - doc: add missing comma inchild_process.md(ronijames008) #5886248f5d6d686] - doc: add guidelines for introduction of ERM support (James M Snell) #5852680dec9849d] - (SEMVER-MINOR) doc: add all watch-mode related flags to node.1 (Dario Piotrowicz) #58719b36fa0fda1] - doc: fix jsdoc definition of assert.ifError() fn in lib/assert.js (jesh) #58573cebb93ea12] - doc: add array type in http request headers (Michael Henrique) #580496e6b373da1] - doc: add missing colon to headers inglobals.md(Aviv Keller) #588251519b75191] - doc: fixstream.mdsection order (Antoine du Hamel) #5881187f4d078b3] - (SEMVER-MINOR) fs: add disposable mkdtempSync (Kevin Gibbons) #58516b378fc3ac0] - fs: close dir before throwing ifoptions.bufferSizeis invalid (Livia Medeiros) #5885623bd4d1867] - fs: special input-1onchown,lchownandfchown(Alex Yang) #58836d07ce8e90c] - fs: throwERR_INVALID_THISon illegal invocations (Livia Medeiros) #588480d969a66dc] - inspector: support undici traffic data inspection (Chengzhong Wu) #58953839b25e371] - lib: exposesetupInstancemethod on WASI class (toyobayashi) #57214d8f3f649c2] - lib: fixgetTypeScriptParsingModejsdoc (沈鸿飞) #58681d534706211] - meta: bump step-security/harden-runner from 2.12.0 to 2.12.2 (dependabot[bot]) #589233ec5fe04d0] - meta: bump github/codeql-action from 3.28.18 to 3.29.2 (dependabot[bot]) #58922bd4a1a5b06] - meta: add IlyasShabi to collaborators (Ilyas Shabi) #58916d29b195b51] - module: link module with a module request record (Chengzhong Wu) #58886a78385c4bd] - module: convert schema-only core module onconvertCJSFilenameToURL(Alex Yang) #58612e0de362319] - module: update tests for combined ambiguous module syntax error (Mert Can Altin) #558747f7a833e82] - os: fix GetInterfaceAddresses memory lieaky (theanarkh) #589409623c50b53] - (SEMVER-MINOR) permission: propagate permission model flags on spawn (Rafael Gonzaga) #58853efe19b50b6] - repl: fix eval errors thrown after close throwingERR_USE_AFTER_CLOSE(Dario Piotrowicz) #58791c891db1c05] - repl: improve tab completion on computed properties (Dario Piotrowicz) #58775797ec4da04] - (SEMVER-MINOR) sqlite: add support for readBigInts option in db connection level (Miguel Marcondes Filho) #586978eecaa264d] - src: -Wunreachable-code-break in node_config_file.cc (Shelley Vohr) #58901143379df56] - src: -Wunreachable-code error in crypto_context.cc (Shelley Vohr) #58901056a1af197] - src: fix -Wunreachable-code-return in src/node_contextify.cc (Shelley Vohr) #58901ba661459f5] - src: fix -Wunreachable-code in src/node_api.cc (Shelley Vohr) #589016af0163dda] - src: simplify adding fast APIs to ExternalReferenceRegistry (René) #58896210e608938] - src: cleanup uv_fs_req before uv_fs_stat on existSync (RafaelGSS) #589152445f86dc9] - src: -Wmismatched-new-delete in debug_utils.cc (Shelley Vohr) #5884412286c9f64] - src: use ranges library (C++20) more systematically (Daniel Lemire) #58028ed966a0215] - (SEMVER-MINOR) src,permission: add support to permission.has(addon) (Rafael Gonzaga) #58951dd54910ab1] - src,permission: enhance permission model debug (Rafael Gonzaga) #5889894f9424d78] - test: deflake test-runner-watch-mode-kill-signal (Dario Piotrowicz) #58952b6ff6c8d20] - test: add known issue tests for recursive readdir calls with Buffer path (Dario Piotrowicz) #58893c300f107ac] - test: add known issue tests for fs.cp (James M Snell) #58883d8a86a622e] - test: add tests to ensure that node.1 is kept in sync with cli.md (Dario Piotrowicz) #5887857c69acb78] - test: replace.filter()[0]with.find()(Livia Medeiros) #5887267b3f4fbee] - test: remove reliance on in-treedeps/undici(Richard Lau) #58866df85b02a00] - test: close dirs infs-opendirtest (Livia Medeiros) #58855692f1aebf0] - test: update WPT for urlpattern to84b75f0(Node.js GitHub Bot) #587853a119be362] - test: save the config file in a temporary directory (Luigi Pinca) #58799924cf1ef25] - test: deflake test-config-file (Luigi Pinca) #58799b5c7e645c9] - test_runner: correctly filter --experimental-config-file (Pietro Marchini) #58833d0faf723c7] - test_runner: fix timeout not propagated to the child process in run (jakecastelli) #588316052d8c1ac] - test_runner: correct "already mocked" error punctuation placement (Jacob Smith) #58840e8dd1897d5] - tools: compile maglev files into v8_compiler if maglev is disabled (Yao Zi) #58861191396260c] - tools: bump the eslint group in /tools/eslint with 6 updates (dependabot[bot]) #589211e423e0680] - tools: update inspector_protocol to69d69dd(Shelley Vohr) #589000def4e23b1] - tools: update gyp-next to 0.20.2 (Node.js GitHub Bot) #58788adb950cde2] - tools,doc: move more MDN links to types (Antoine du Hamel) #589301ee539a3aa] - tty: treat emptyNO_COLORsame as absentNO_COLOR(Antoine du Hamel) #580742b34867ba9] - v8: fix missing callback in heap utils destroy (Ruben Bridgewater) #58846a1f4333695] - vm: expose import phase on SourceTextModule.moduleRequests (Chengzhong Wu) #58829fe17f5d285] - (SEMVER-MINOR) watch: add--watch-kill-signalflag (Dario Piotrowicz) #58719v24.3.0: 2025-06-24, Version 24.3.0 (Current), @RafaelGSSCompare Source
Notable Changes
841609ac1c] - doc: add islandryu to collaborators (Shima Ryuhei) #58714839964ece8] - (SEMVER-MINOR) fs: allow correct handling of burst in fs-events with AsyncIterator (Philipp Dunkel) #584909b28f40834] - (SEMVER-MINOR) module: remove experimental warning from type stripping (Marco Ippolito) #586437cdda927fa] - test: fix test-timeout-flag after revert of auto subtest wait (Pietro Marchini) #58282dce1995c55] - Revert "test_runner: remove promises returned by t.test()" (Romain Menke) #582828b0c5edbb6] - Revert "test_runner: remove promises returned by test()" (Romain Menke) #58282713fbad7b6] - (SEMVER-MINOR) test_runner: support object property mocking (Idan Goshen) #58438ef0230abaf] - (SEMVER-MINOR) url: add fileURLToPathBuffer API (James M Snell) #58700Commits
2ba2c93dee] - build: fix typo 'Stoage' to 'Storage' in help text (ganglike) #5877711811c15da] - deps: update nghttp2 to 1.66.0 (Node.js GitHub Bot) #587867643ce9322] - deps: update acorn to 8.15.0 (Node.js GitHub Bot) #587114b61f10eb6] - deps: V8: cherry-picke3df60f(Chengzhong Wu) #58691fa6854f083] - deps: update amaro to 1.1.0 (Node.js GitHub Bot) #5875468671f4314] - deps: upgrade npm to 11.4.2 (npm team) #58696450f4815b3] - deps: update amaro to 1.0.0 (Node.js GitHub Bot) #586393aa2762e96] - deps: update sqlite to 3.50.1 (Node.js GitHub Bot) #5863080eac147e6] - deps: update simdjson to 3.13.0 (Node.js GitHub Bot) #58629dc1023878c] - deps: update zlib to 1.3.1-470d3a2 (Node.js GitHub Bot) #5862897fbfd82af] - doc: fix stability 1.x links excluding the decimal digit (Dario Piotrowicz) #58783e2e88d4971] - doc: fix wrong RFC number in http2 (Deokjin Kim) #587537bb1246c8f] - doc: add history entry for TS support in hooks (Antoine du Hamel) #58732f125310d3a] - doc: run license-builder (github-actions[bot]) #58722841609ac1c] - doc: add islandryu to collaborators (Shima Ryuhei) #587141cc77c7ee6] - doc: punctuation fix for Node-API versioning clarification (Jiacai Liu) #58599d59680348e] - doc: add path rules and validation for export targets in package.json (0hm☘️) #58604b6760b3379] - esm: syncify default path ofModuleLoader.load(Jacob Smith) #5741996c78d726c] - fs: makeDirdisposers idempotent (René) #5869262b5879d88] - fs: avoid computing time coefficient constants in runtime (Livia Medeiros) #58728af18c0e81a] - fs: remove IIFE in glob (LiviaMedeiros) #58418fb4378b72e] - fs: add UV_ENOSPC to list of things to pass to err directly (Jacky Zhao) #56918839964ece8] - (SEMVER-MINOR) fs: allow correct handling of burst in fs-events with AsyncIterator (Philipp Dunkel) #58490c9dc0a8903] - http: fix keep-alive not timing out after post-request empty line (Shima Ryuhei) #58178b11da1115e] - http2: fix DEP0194 message (KaKa) #58669b1f60d2f18] - http2: add diagnostics channel 'http2.server.stream.close' (Darshan Sen) #58602be93091694] - inspector: add protocol methods retrieving sent/received data (Chengzhong Wu) #5864520089e2a2e] - lib: renamevalidateInternalFieldintovalidateThisInternalField(LiviaMedeiros) #5876574983832f9] - lib: makevalidateInternalField()throwERR_INVALID_THIS(LiviaMedeiros) #58765081c70878f] - lib: make domexception a native error (Chengzhong Wu) #586916390f70da2] - lib,src: support DOMException ser-des (Chengzhong Wu) #586494c2c100f63] - meta: add @nodejs/inspector as codeowner (Chengzhong Wu) #58790ff8a3691c4] - module: fix typescript import.meta.main (Marco Ippolito) #5866145f7d160ed] - module: refactor commonjs typescript loader (Marco Ippolito) #586579b28f40834] - (SEMVER-MINOR) module: remove experimental warning from type stripping (Marco Ippolito) #58643a3c7a63c73] - module: allow cycles in require() in the CJS handling in ESM loader (Joyee Cheung) #58598d0e42ffa58] - repl: avoid deprecatedrequire.extensionsin tab completion (baki gul) #5865382b18ba890] - repl: fix tab completion not working with computer string properties (Dario Piotrowicz) #587098c2089683e] - src: add FromV8Value<T>() for integral and enum types (Aditi) #57931a0b1378a20] - src: pass resource on permission checks for spawn (Rafael Gonzaga) #58758dfb0144490] - src: enhance error messages for unknown options (Pietro Marchini) #58677e9c6fa514c] - src: replace std::array with static arrays in contextify (Mert Can Altin) #585804347ce3dba] - src: add new CopyUtimes function to reduce code duplication (Dario Piotrowicz) #58625893999e0ee] - src: replace V8 Fast API todo comment with note comment (Dario Piotrowicz) #586147cdda927fa] - test: fix test-timeout-flag after revert of auto subtest wait (Pietro Marchini) #58282d9c2b7054b] - test: refactor repl save-load tests (Dario Piotrowicz) #587153faa4e8b56] - test: deflake test-buffer-large-size-buffer-alloc-unsafe (Luigi Pinca) #587718eec789888] - test: correct SIMD support comment (Richard Lau) #587676e0ee39b6d] - test: skip the test if the buffer allocation fails (Luigi Pinca) #58738d94b184700] - test: deflake test-buffer-large-size-buffer-alloc (Luigi Pinca) #58734704b1fa075] - test: add tests for REPL custom evals (Dario Piotrowicz) #57850c39d570871] - test: reduce the use of private symbols in test-events-once.js (Yoshiya Hinosawa) #58685b7e488c77f] - test: refactor repl tab complete tests (Dario Piotrowicz) #58636ec808b3e06] - test: usecommon.skipIfInspectorDisabled()to skip tests (Dario Piotrowicz) #5867594e53d4f6c] - test: update WPT for urlpattern to3ffda23(Node.js GitHub Bot) #58537fa089d610f] - test: update WPT for dom/abort todc92816(Node.js GitHub Bot) #58644aa657f0fc4] - test: split indirect eval import tests (Chengzhong Wu) #5863776e3c8aaf2] - test: update WPT for es-exceptions to2f96fa1(Node.js GitHub Bot) #586407e34aa4eaa] - test: skip tests failing when run under root (Livia Medeiros) #5861085f062c22e] - test: deflake async-hooks/test-improper-order on AIX (Baki Gul) #58567181014a8fe] - test: cleanup status files (Filip Skokan) #58633a4d756068d] - test: close FileHandle objects in tests explicitly (James M Snell) #58615a1529d5d99] - test_runner: automatically wait for subtests to finish (Colin Ihrig) #58800dce1995c55] - Revert "test_runner: remove promises returned by t.test()" (Romain Menke) #582828b0c5edbb6] - Revert "test_runner: remove promises returned by test()" (Romain Menke) #582826ef7329c8c] - Revert "test_runner: automatically wait for subtests to finish" (Romain Menke) #58282c9e7b5e43a] - test_runner: preferAtomicsprimordials (Renegade334) #58716713fbad7b6] - (SEMVER-MINOR) test_runner: support object property mocking (Idan Goshen) #584389df1cfe402] - tools: make nodedownload module compatible with Python 3.14 (Lumír 'Frenzy' Balhar) #58752b5ff3f42b8] - tools: include toolchain.gypi in abseil.gyp (Chengzhong Wu) #58678dc2f23e986] - tools: bumpbrace-expansionin/tools/clang-format(dependabot[bot]) #58699e6a1787140] - tools: bump brace-expansion from 1.1.11 to 1.1.12 in /tools/eslint (dependabot[bot]) #58698b22e970774] - tools: switch to@stylistic/eslint-plugin(Michaël Zasso) #58623268c8c1799] - tools: remove config.status undermake distclean(René) #58603c1f9791844] - tools: edit commit-queue workflow file (Antoine du Hamel) #58667afbaf9277b] - tools: improve release proposal linter (Antoine du Hamel) #5864717df800b90] - typings: add Atomics primordials (Renegade334) #58577ffff8ce3a4] - typings: add ZSTD_COMPRESS, ZSTD_DECOMPRESS to internalBinding (Meghan Denny) #58655ef0230abaf] - (SEMVER-MINOR) url: add fileURLToPathBuffer API (James M Snell) #587006f7b89516f] - util: inspect: do not crash on an Error stack pointing to itself (Sam Verschueren) #58196v24.2.0: 2025-06-09, Version 24.2.0 (Current), @aduh95Compare Source
Notable Changes
Remove support for HTTP/2 priority signaling
The support for priority signaling has been removed in nghttp2, following its
deprecation in the RFC 9113.
As a consequence of this, priority signaling is deprecated on all release lines of Node.js,
and removed from Node.js 24 so we can include latest updates from nghttp2.
Contributed by Matteo Collina and Antoine du Hamel in
#58293.
import.meta.mainis now availableBoolean value available in ECMAScript modules, which can be used to detect
whether the current module was the entry point of the current process.
Contributed by Joe and Antoine du Hamel in
#57804.
Other Notable Changes
e13930bbe0] - doc: add Filip Skokan to TSC (Rafael Gonzaga) #58499984894b38c] - doc: deprecateutil.isNativeErrorin favor ofError.isError(Miguel Marcondes Filho) #58262d261274b0f] - doc: deprecate passing an empty string tooptions.shell(Antoine du Hamel) #58564510872a522] - (SEMVER-MINOR) doc: graduateSymbol.dispose/asyncDisposefrom experimental (James M Snell) #584676f4c9dd423] - (SEMVER-MINOR) fs: addautoCloseoption toFileHandlereadableWebStream (James M Snell) #5854832efb63242] - http: deprecate instantiating classes without new (Yagiz Nizipli) #585180234a8ef53] - (SEMVER-MINOR) http2: add diagnostics channelhttp2.server.stream.finish(Darshan Sen) #585600f1e94f731] - (SEMVER-MINOR) lib: graduate error codes that have been around for years (James M Snell) #5854113abca3c26] - (SEMVER-MINOR) perf_hooks: make event loop delay histogram disposable (James M Snell) #583848ea1fc5f3b] - (SEMVER-MINOR) src: support namespace options in configuration file (Pietro Marchini) #58073d6ea36ad6c] - src,permission: implicit allow-fs-read to app entrypoint (Rafael Gonzaga) #585795936cef60a] - (SEMVER-MINOR) test: add disposable histogram test (James M Snell) #583847a91f4aaa1] - (SEMVER-MINOR) test: add test for async disposable worker thread (James M Snell) #58385532c173cf2] - (SEMVER-MINOR) util: addnonestyle to styleText (James M Snell) #58437aeb9ab4c4c] - (SEMVER-MINOR) worker: make Worker async disposable (James M Snell) #58385Commits
6c92329b1b] - Revert "benchmark: fix broken fs.cpSync benchmark" (Yuesong Jake Li) #584768bc045264e] - benchmark: fix broken fs.cpSync benchmark (Dario Piotrowicz) #5847246aa079cce] - benchmark: add callback-basedfs.globto glob benchmark (Livia Medeiros) #58417a57b05e105] - benchmark: add more options to cp-sync (Sonny) #582788b5ada4b31] - buffer: use Utf8LengthV2() instead of Utf8Length() (Tobias Nießen) #5815622e97362f3] - build: search for libnode.so in multiple places (Jan Staněk) #582130b4056c573] - build: add support for OpenHarmony operating system (hqzing) #58350db7f413dd3] - build: fix pointer compression builds (Joyee Cheung) #581717ff37183e5] - build: fix defaults for shared llhttp (Antoine du Hamel) #58269b8c33190fe] - build,win: fix dll build (Stefan Stojanovic) #58357ef9ecbe8a6] - child_process: give names toChildProcessfunctions (Livia Medeiros) #58370cec9d9d016] - crypto: forward auth tag to OpenSSL immediately (Tobias Nießen) #585479fccb0609f] - crypto: expose crypto.constants.OPENSSL_IS_BORINGSSL (Shelley Vohr) #58387e7c69b9345] - deps: update nghttp2 to 1.65.0 (Node.js GitHub Bot) #57269d0b89598a3] - deps: use proper C standard when building libuv (Yaksh Bariya) #585878a1fe7bc6a] - deps: update simdjson to 3.12.3 (Node.js GitHub Bot) #5768236b639b1eb] - deps: update googletest toe9092b1(Node.js GitHub Bot) #58565f8a2a1ef52] - deps: update corepack to 0.33.0 (Node.js GitHub Bot) #58566efb28f7895] - deps: V8: cherry-pick249de88(Michaël Zasso) #5856188e621ea97] - deps: update sqlite to 3.50.0 (Node.js GitHub Bot) #582728d2ba386f1] - deps: update OpenSSL gen container to Ubuntu 22.04 (Michaël Zasso) #584327e62a77a7f] - deps: update undici to 7.10.0 (Node.js GitHub Bot) #5844587eebd7bad] - deps: keep required OpenSSL doc files (Michaël Zasso) #5843110910660f6] - deps: update undici to 7.9.0 (Node.js GitHub Bot) #582685e27078ca2] - deps: update ada to 3.2.4 (Node.js GitHub Bot) #581523b1e4bdbbb] - deps: update libuv to 1.51.0 (Node.js GitHub Bot) #581246bddf587ae] - dns: fix dns query cache implementation (Ethan Arrowood) #58404984894b38c] - doc: deprecate utilisNativeError in favor of ErrorisError (Miguel Marcondes Filho) #58262377ef3ce3a] - doc: add support link for panva (Filip Skokan) #5859133a69ff9e4] - doc: update metadata for _transformState deprecation (James M Snell) #58530d261274b0f] - doc: deprecate passing an empty string tooptions.shell(Antoine du Hamel) #58564447ca11010] - doc: correct formatting of example definitions for--test-shard(Jacob Smith) #585712f555e0e19] - doc: clarify DEP0194 scope (Antoine du Hamel) #58504af0446edcb] - doc: deprecate HTTP/2 priority signaling (Matteo Collina) #5831380cc17f1ec] - doc: explain child_process code and signal null values everywhere (Darshan Sen) #58479e13930bbe0] - doc: add Filip Skokan to TSC (Rafael Gonzaga) #584995f3f045ecc] - doc: updategit node releaseexample (Antoine du Hamel) #584754bbd026cde] - doc: add missing options.info for ZstdOptions (Jimmy Leung) #58360a6d0d2a0d7] - doc: add missing options.info for BrotliOptions (Jimmy Leung) #58359510872a522] - (SEMVER-MINOR) doc: graduate Symbol.dispose/asyncDispose from experimental (James M Snell) #5846708685256cd] - doc: clarify x509.checkIssued only checks metadata (Filip Skokan) #58457095794fc24] - doc: add links to parent class fornode:zlibclasses (Antoine du Hamel) #584337acac70bce] - doc: remove remaining uses of@@​wellknownsyntax (René) #5841362056d40c7] - doc: clarify behavior of --watch-path and --watch flags (Juan Ignacio Benito) #58136e6e6ae887d] - doc: fix the order ofprocess.mdsections (Allon Murienik) #58403d2f6c82c0f] - doc,lib: update source map links to ECMA426 (Chengzhong Wu) #58597a994d3d51a] - doc,src,test: fix typos (Noritaka Kobayashi) #58477252acc1e89] - errors: show url of unsupported attributes in the error message (Aditi) #58303767e88cbc3] - esm: unwrap WebAssembly.Global on Wasm Namespaces (Guy Bedford) #57525adef9af3ae] - (SEMVER-MINOR) esm: implement import.meta.main (Joe) #57804308f4cac4b] - esm: add support for dynamic source phase hook (Guy Bedford) #58147fcef56cb05] - fs: improve cpSync no-filter copyDir performance (Dario Piotrowicz) #58461996fdb05ab] - fs: fix cp handle existing symlinks (Yuesong Jake Li) #58476d2931e50e3] - fs: fix cpSync handle existing symlinks (Yuesong Jake Li) #584766f4c9dd423] - (SEMVER-MINOR) fs: add autoClose option to FileHandle readableWebStream (James M Snell) #585488870bb8677] - fs: improvecpSyncdest overriding performance (Dario Piotrowicz) #58160f2e2301559] - fs: unexpose internal constants (Chengzhong Wu) #5832732efb63242] - http: deprecate instantiating classes without new (Yagiz Nizipli) #585180b987e5741] - (SEMVER-MAJOR) http2: remove support for priority signaling (Matteo Collina) #5829344ca874b2c] - http2: add lenient flag for RFC-9113 (Carlos Fuentes) #581160234a8ef53] - (SEMVER-MINOR) http2: add diagnostics channel 'http2.server.stream.finish' (Darshan Sen) #585602b868e8aa7] - http2: add diagnostics channel 'http2.server.stream.error' (Darshan Sen) #58512b4df8d38cd] - http2: add diagnostics channel 'http2.server.stream.start' (Darshan Sen) #58449d86ff608bb] - http2: remove no longer userful options.selectPadding (Jimmy Leung) #5837313dbbdc8a8] - http2: add diagnostics channel 'http2.server.stream.created' (Darshan Sen) #5839008855464ec] - http2: add diagnostics channel 'http2.client.stream.close' (Darshan Sen) #58329566fc567b8] - http2: add diagnostics channel 'http2.client.stream.finish' (Darshan Sen) #58317f30b9117d4] - http2: add diagnostics channel 'http2.client.stream.error' (Darshan Sen) #5830679b852a692] - inspector: add mimeType and charset support to Network.Response (Shima Ryuhei) #58192402ac8b1d8] - inspector: add protocol method Network.dataReceived (Chengzhong Wu) #5800129f34a7f86] - lib: disable REPL completion on proxies and getters (Dario Piotrowicz) #579090f1e94f731] - (SEMVER-MINOR) lib: graduate error codes that have been around for years (James M Snell) #58541cc1aacabb0] - lib: make ERM functions into wrappers returning undefined (Livia Medeiros) #584008df4dee38c] - lib: remove no-mixed-operators eslint rule (Ruben Bridgewater) #58375104d173f58] - meta: bump github/codeql-action from 3.28.16 to 3.28.18 (dependabot[bot]) #58552b454e8386c] - meta: bump codecov/codecov-action from 5.4.2 to 5.4.3 (dependabot[bot]) #58551f31e014b81] - meta: bump step-security/harden-runner from 2.11.0 to 2.12.0 (dependabot[bot]) #581094da920cc13] - meta: bump ossf/scorecard-action from 2.4.1 to 2.4.2 (dependabot[bot]) #58550eb9bb95fe2] - meta: bump rtCamp/action-slack-notify from 2.3.2 to 2.3.3 (dependabot[bot]) #5810827ada1f18c] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #584564606a6792b] - meta: bump github/codeql-action from 3.28.11 to 3.28.16 (dependabot[bot]) #581127dfe448b7f] - meta: bump codecov/codecov-action from 5.4.0 to 5.4.2 (dependabot[bot]) #5811018bb5f7e7e] - meta: bump actions/download-artifact from 4.2.1 to 4.3.0 (dependabot[bot]) #5810672f2a22889] - module: clarify cjs global-like error on ModuleJobSync (Carlos Espa) #56491b0e0b1afae] - net: always publish to 'net.client.socket' diagnostics channel (Darshan Sen) #58349f373d6a540] - node-api: use WriteOneByteV2 in napi_get_value_string_latin1 (Chengzhong Wu) #58325429c38db1b] - node-api: use WriteV2 in napi_get_value_string_utf16 (Tobias Nießen) #58165b882148999] - path: improve path.resolve() performance when used as process.cwd() (Ruben Bridgewater) #5836213abca3c26] - (SEMVER-MINOR) perf_hooks: make event loop delay histogram disposable (James M Snell) #583841cd417d823] - permission: remove useless conditional (Juan José) #58514462c4b0c24] - readline: add stricter validation for functions called after closed (Dario Piotrowicz) #58283e3e36f902c] - repl: extract and standardize history from both repl and interface (Giovanni Bucci) #58225cbb2a0172f] - report: use uv_getrusage_thread in report (theanarkh) #584053a6bd9c4c4] - sqlite: handle thrown errors in result callback (Colin Ihrig) #584260d761bbccd] - src: env_vars caching and local variable scope optimization (Mert Can Altin) #576248ea1fc5f3b] - (SEMVER-MINOR) src: support namespace options in configuration file (Pietro Marchini) #58073f72ce2ef75] - src: remove fast API for InternalModuleStat (Joyee Cheung) #584898a1eaea151] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #58500d99d657842] - src: fix FIPS init error handling (Tobias Nießen) #5837911e4cd698b] - src: fix possible dereference of null pointer (Eusgor) #58459ca0f5a0188] - src: add env->cppgc_allocation_handle() convenience method (James M Snell) #58483440d4f42bd] - src: fix -Wreturn-stack-address error (Shelley Vohr) #5843908615b1020] - src: prepare for v8 sandboxing (James M Snell) #5837663f643e844] - src: reorganize ContextifyFunction methods (Chengzhong Wu) #584343b6895a506] - src: improve CompileFunctionAndCacheResult error handling (Chengzhong Wu) #584347f1c95aee8] - src: make a number of minor improvements to buffer (James M Snell) #58377ce081bcb9a] - src: fix build when using shared simdutf (Antoine du Hamel) #58407a35cc216e5] - src: track cppgc wrappers with a list in Realm (Joyee Cheung) #56534947c1c2cd5] - src,lib: obtain sourceURL in magic comments from V8 (Chengzhong Wu) #58389d6ea36ad6c] - src,permission: implicit allow-fs-read to app entrypoint (Rafael Gonzaga) #58579e8a07f2198] - stream: making DecompressionStream spec compilent for trailing junk (0hm☘️) #583163caa2f71c1] - stream: test explicit resource management implicitly (LiviaMedeiros) #582969ccdf4fdb4] - test: improve flakiness detection on stack corruption tests (Darshan Sen) #58601d3fea003df] - test: mark timeouts & flaky test as flaky on IBM i (Abdirahim Musse) #585838347ef6b53] - test: dispose of filehandles in filehandle.read tests (Livia Medeiros) #5854334e86f91aa] - test: rewrite test-child-process-spawn-args (Michaël Zasso) #58546d7a2458a58] - test: make sqlite-database-sync tests work with system sqlite (Jelle Licht) #585074d9d6830e0] - test: force slow JSON.stringify path for overflow (Shelley Vohr) #58181bef67e45e3] - test: account for truthy signal in flaky async_hooks tests (Darshan Sen) #58478007c82f206] - test: marktest-http2-debugas flaky on LinuxONE (Richard Lau) #5849421f6400098] - test: update WPT for WebCryptoAPI to591c95c(Node.js GitHub Bot) #581761deb5f06a5] - test: remove --no-warnings flag (Tobias Nießen) #58424beba631a10] - test: add tests ensuring worker threads cannot access internals (Joe) #583325936cef60a] - (SEMVER-MINOR) test: add disposable histogram test (James M Snell) #583847a91f4aaa1] - (SEMVER-MINOR) test: add test for async disposable worker thread (James M Snell) #583855fc4706280] - test: leverage process.features.openssl_is_boringssl in test (Shelley Vohr) #584214629b18397] - test: fix test-buffer-tostring-range on allocation failure (Joyee Cheung) #584164c445a8c85] - test: skip in test-buffer-tostring-rangeerror on allocation failure (Joyee Cheung) #5841553cb29898b] - test: fix missing edge case in test-blob-slice-with-large-size (Joyee Cheung) #5841489fdfdedc1] - test: make crypto tests work with BoringSSL (Shelley Vohr) #581173b5d0e62b1] - test: test reordering of setAAD and setAuthTag (Tobias Nießen) #58396029440bec5] - test: switch from deprecatedoptparsetoargparse(Aviv Keller) #58224d05263edcc] - test: do not skip OCB decryption in FIPS mode (Tobias Nießen) #5838223474cb257] - test: show more information in test-http2-debug upon failure (Joyee Cheung) #58391d0302e7b3d] - test: remove loop over single element (Tobias Nießen) #5836833f615897d] - test: add chacha20-poly1305 to auth tag order test (Tobias Nießen) #583678f09a1f502] - test: skip wasm-allocation tests for pointer compression builds (Joyee Cheung) #581714ae6a1a5ed] - test: remove references to create(De|C)ipher (Tobias Nießen) #583634d647271b2] - test_runner: emit event when file changes in watch mode (Jacopo Martinelli) #579031eda87c365] - test_runner: add level parameter to reporter.diagnostic (Jacopo Martinelli) #5792313377512be] - tools: bump the eslint group in/tools/eslintwith 6 updates (dependabot[bot]) #58549fcc881de0d] - tools: supportDisposableStackandAsyncDisposableStackin linter (LiviaMedeiros) #58454208d6a5754] - tools: support explicit resource management in eslint (LiviaMedeiros) #5829632070f304a] - tools: add missing highway defines for IBM i (Abdirahim Musse) #58335ddab63a323] - tty: improve color terminal color detection (Ruben Bridgewater) #58146c094bea8d9] - tty: use terminal VT mode on Windows (Anna Henningsen) #58358dc21054a1e] - typings: add inspector internalBinding typing (Shima Ryuhei) #584923499285904] - typings: remove no longer validFixedSizeBlobCopyJobtype (Dario Piotrowicz) #583051ed2deb2c8] - typings: remove no longer validrevokeDataObjecttype (Dario Piotrowicz) #58305532c173cf2] - (SEMVER-MINOR) util: add 'none' style to styleText (James M Snell) #584372d5a1ef528] - vm: import call should return a promise in the current context (Chengzhong Wu) #58309588c2449f2] - win,tools: use Azure Trusted Signing (Stefan Stojanovic) #58502aeb9ab4c4c] - (SEMVER-MINOR) worker: make Worker async disposable (James M Snell) #5838523416cce0a] - worker: give names toMessagePortfunctions (Livia Medeiros) #5830744df21b7fb] - zlib: remove mentions of unexposed Z_TREES constant (Jimmy Leung) #58371v24.1.0: 2025-05-21, Version 24.1.0 (Current), @aduh95Compare Source
Notable Changes
9d35b4ce95] - doc: add JonasBa to collaborators (Jonas Badalic) #58355b7d1bfa7b4] - doc: add puskin to collaborators (Giovanni Bucci) #58308fcead7c28e] - (SEMVER-MINOR) fs: add toDirsupport for explicit resource management (Antoine du Hamel) #58206f7041b9369] - Revert "test_runner: change ts default glob" (Théo LUDWIG) #58202Commits
b33e8d2a71] - async_hooks: ensure AsyncLocalStore instances work isolated (Gerhard Stöbich) #58149a1b078b18c] - buffer: give names toBuffer.prototype.*Write()functions (Livia Medeiros) #582584c967b73c3] - buffer: use constexpr where possible (Yagiz Nizipli) #58141327095a928] - build: fix uvwasi pkgname (Antoine du Hamel) #582702e54653d3d] - build: use FILE_OFFSET_BITS=64 esp. on 32-bit arch (RafaelGSS) #580907e4453fe93] - build: escape > metachar in vcbuild (Gerhard Stöbich) #581577dabf079b1] - child_process: give names to promisifiedexec()andexecFile()(LiviaMedeiros) #57916a896eff1f2] - crypto: handle missing OPENSSL_TLS_SECURITY_LEVEL (Shelley Vohr) #581036403aa458f] - crypto: merge CipherBase.initiv into constructor (Tobias Nießen) #5816630897d915c] - deps: V8: backport1d3362c(Shu-yu Guo) #5823063f5d69d2b] - deps: V8: cherry-pick4f38995(Shu-yu Guo) #582305a5f6bb1d4] - deps: V8: cherry-pick044b9b6(Rezvan Mahdavi Hezaveh) #58230db57f0a4c0] - deps: patch V8 to 13.6.233.10 (Michaël Zasso) #58230f54a7a44ab] - Revert "deps: patch V8 to support compilation with MSVC" (Michaël Zasso) #58187e3193eeca4] - Revert "deps: always define V8_EXPORT_PRIVATE as no-op" (Michaël Zasso) #58187e75ecf8ad1] - Revert "deps: disable V8 concurrent sparkplug compilation" (Michaël Zasso) #58187a0ca15558d] - deps: update llhttp to 9.3.0 (Fedor Indutny) #5814490d4c11992] - deps: update amaro to 0.5.3 (Node.js GitHub Bot) #581749d35b4ce95] - doc: add JonasBa to collaborators (Jonas Badalic) #583552676ca0cf5] - doc: add latest security release steward (Rafael Gonzaga) #58339c35cc1bdd9] - doc: document default test-reporter change (Nico Jansen) #583022bb433d4a5] - doc: fix CryptoKey.algorithm type and other interfaces in webcrypto.md (Filip Skokan) #58294f04f09d783] - doc: mark the callback argument of crypto.generatePrime as mandatory (Allon Murienik) #582993b9b010844] - doc: remove comma delimiter mention on permissions doc (Rafael Gonzaga) #58297f0cf1a028d] - doc: make Stability labels not sticky in Stability index (Livia Medeiros) #58291a1b937bdee] - doc: update commit-queue documentation (Dario Piotrowicz) #58275b7d1bfa7b4] - doc: add puskin to collaborators (Giovanni Bucci) #58308fc30cdd8d2] - doc: update stability status for diagnostics_channel to experimental (Idan Goshen) #58261290a5ab8ca] - doc: clarify napi_get_value_string_* for bufsize 0 (Tobias Nießen) #58158c26863a683] - doc: fix typo of filehttp.md,outgoingMessage.setTimeoutsection (yusheng chen) #5818862dbd36dcb] - doc: update return types for eventNames method in EventEmitter (Yukihiro Hasegawa) #58083130c135f38] - fs: add support forURLforfs.glob'scwdoption (Antoine du Hamel) #58182fcead7c28e] - (SEMVER-MINOR) fs: add toDirsupport for explicit resource management (Antoine du Hamel) #58206655326ba9f] - fs: glob is stable, so should not emit experimental warnings (Théo LUDWIG) #582366ebcce7625] - fs: ensuredir.read()does not throw synchronously (Antoine du Hamel) #582287715722323] - http: remove unused functions and add todos (Yagiz Nizipli) #5814374a807e31f] - http,https: give names to anonymous or misnamed functions (Livia Medeiros) #5818024a9aefb08] - http2: add diagnostics channel 'http2.client.stream.start' (Darshan Sen) #582922cb86a3cd6] - http2: add diagnostics channel 'http2.client.stream.created' (Darshan Sen) #582468f1aee90d9] - http2: give name to promisifiedconnect()(LiviaMedeiros) #57916b66f1b0be6] - inspector: support for worker inspection in chrome devtools (Shima Ryuhei) #56759868e72e367] - lib: fix sourcemaps with ts module mocking (Marco Ippolito) #58193570cb6f6b6] - meta: ignore mailmap changes in linux ci (Jonas Badalic) #58356b94f63b865] - module: handle instantiated async module jobs in require(esm) (Joyee Cheung) #58067714b706f2e] - repl: add proper vertical cursor movements (Giovanni Bucci) #58003629a954477] - repl: add possibility to edit multiline commands while adding them (Giovanni Bucci) #5800317746129f3] - sqlite: setnameandlengthonsqlite.backup()(Livia Medeiros) #58251908782b1c0] - sqlite: add build option to build without sqlite (Michael Dawson) #58122a92a4074e4] - src: remove unusedinternalVerifyIntegrityinternal binding (Dario Piotrowicz) #58285e0355b71ba] - src: add a variant of ToV8Value() for primitive arrays (Aditi) #57576cb24fc71c4] - src: remove unusedcheckMessagePortinternal binding (Dario Piotrowicz) #582674db5d0bc49] - src: remove unusedshouldRetryAsESMinternal binding (Dario Piotrowicz) #582653b8d4e32ca] - src: add a couple fast apis in node_os (James M Snell) #58210a135c0aea3] - src: remove unneeded explicit V8 flags (Michaël Zasso) #58230abeb5c4cdc] - src: fix module buffer allocation (X-BW) #577389ca4b46eb3] - src: use String::WriteV2() in TwoByteValue (Tobias Nießen) #58164bb28e2bfd7] - src: remove overzealous tcsetattr error check (Ben Noordhuis) #58200329e008e73] - src: refactor WriteUCS2 and remove flags argument (Tobias Nießen) #58163c815f29d61] - src: remove NonCopyableMaybe (Tobias Nießen) #58168685d137dec] - test: reduce iteration count in test-child-process-stdout-flush-exit (Antoine du Hamel) #5827340dc092e25] - test: remove unnecessaryconsole.logfrom test-repl-null-thrown (Dario Piotrowicz) #58281a3af644dda] - test: allowtmpDir.pathto be modified (Aviv Keller) #5817397f80374a6] - test: addFloat16Arraytocommon.getArrayBufferViews()(Livia Medeiros) #5823365683735ab] - test: fix executable flags (Livia Medeiros) #58250ebb82aa1c3] - test: deflake test-http2-client-socket-destroy (Luigi Pinca) #58212eb4f130b17] - test: remove Float16Array flag (Livia Medeiros) #5818409a85fdeb1] - test: skip test-buffer-tostring-rangeerror when low on memory (Ruben Bridgewater) #5814265446632b1] - test: reduce flakiness in test-heapdump-http2 (Joyee Cheung) #58148f7041b9369] - Revert "test_runner: change ts default glob" (Théo LUDWIG) #58202287454298d] - test_runner: unify --require and --import behavior when isolation none (Pietro Marchini) #579246301b003f7] - tools: ignoredeps/andbenchmark/for CodeQL (Rafael Gonzaga) #582542d5de7e309] - tools: add read permission to workflows that read contents (Antoine du Hamel) #58255b8d4715527] - tools: support environment variables via comments (Pietro Marchini) #58186d8e88f2c17] - typings: add missing typings forTypedArray(Jason Zhang) #582484c6f73c5d5] - url: improve performance of the format function (Giovanni Bucci) #5709994c720c4ee] - util: add internalassignFunctionName()function (LiviaMedeiros) #579163ed159afd1] - watch: fix watch args not being properly filtered (Dario Piotrowicz) #58279v24.0.2: 2025-05-14, Version 24.0.2 (Current), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Commits
7d0c17b2ad] - (CVE-2025-23166) src: fix error handling on async crypto operations (RafaelGSS) nodejs-private/node-private#688v24.0.1: 2025-05-08, Version 24.0.1 (Current), @aduh95Compare Source
Notable Changes
2e1d9581e0] - Revert "buffer: move SlowBuffer to EOL" (Filip Skokan) #58211Commits
d38e811c5b] - benchmark: fix typo in method name for error-stack (Miguel Marcondes Filho) #581282e1d9581e0] - Revert "buffer: move SlowBuffer to EOL" (Filip Skokan) #58211a883b0c979] - build: use //third_party/simdutf by default in GN (Shelley Vohr) #581153d84b5c7a4] - doc: add HBSPS as triager (Wiyeong Seo) #579801e57cb686e] - doc: add history entries to--input-typesection (Antoine du Hamel) #581750b54f06b6f] - doc: add ambassaor message (Brian Muenzenmeyer) #5760046bee52d57] - doc: fix misaligned options in vm.compileFunction() (Jimmy Leung) #58145e732a8bfdd] - doc: fix typo in benchmark script path (Miguel Marcondes Filho) #58129d49ff34adb] - doc: add missing options.signal to readlinePromises.createInterface() (Jimmy Leung) #55456bc9f5a2e79] - doc: fix typo of filezlib.md(yusheng chen) #58093c8e8558958] - doc: clarify future Corepack removal in v25+ (Trivikram Kamat) #57825b13d5d14bd] - meta: bump actions/setup-node from 4.3.0 to 4.4.0 (dependabot[bot]) #581110ebb17a300] - meta: bump actions/setup-python from 5.5.0 to 5.6.0 (dependabot[bot]) #581075946785bf4] - tools: exclude deps/v8/tools from CodeQL scans (Rich Trott) #581320708497c7f] - tools: bump the eslint group in /tools/eslint with 6 updates (dependabot[bot]) #58105v24.0.0: 2025-05-06, Version 24.0.0 (Current), @RafaelGSS and @juanarbolCompare Source
We’re excited to announce the release of Node.js 24! This release brings
several significant updates, including the upgrade of the V8 JavaScript
engine to version 13.6 and npm to version 11. Starting with
Node.js 24, support for MSVC has been removed, and ClangCL is now required
to compile Node.js on Windows. The
AsyncLocalStorageAPI now usesAsyncContextFrameby default, andURLPatternis available globally.These changes, along with many other improvements, continue to push the
platform forward.
As a reminder, Node.js 24 will enter long-term support (LTS) in October,
but until then, it will be the "Current" release for the next six months.
We encourage you to explore the new features and benefits offered by this
latest release and evaluate their potential impact on your applications.
Notable Changes
V8 13.6
The V8 engine is updated to version 13.6, which includes several new
JavaScript features:
Float16ArrayRegExp.escapeError.isErrorThe V8 update was a contribution by Michaël Zasso in #58070.
npm 11
Node.js 24 comes with npm 11, which includes several improvements and new
features. This update brings enhanced performance, improved security features,
and better compatibility with modern JavaScript packages.
The npm update was a contribution by the npm team in #56274.
AsyncLocalStoragedefaults toAsyncContextFrameAsyncLocalStoragenow usesAsyncContextFrameby default, which provides amore efficient implementation of asynchronous context tracking.
This change improves performance and makes the API more robust for advanced
use cases.
This change was a contribution by Stephen Belanger in #55552.
URLPatternas a globalThe
URLPatternAPI is now exposed on the global object, making it easier to use without
explicit imports. This API provides a powerful pattern matching system for URLs,
similar to how regular expressions work for strings.
This feature was a contribution by Jonas Badalič in #56950.
Permission Model Improvements
The experimental Permission Model introduced in Node.js 20 has been improved,
and the flag has been changed from
--experimental-permissionto simply--permission, indicating its increasing stability and readiness for broaderadoption.
This change was a contribution by Rafael Gonzaga in #56240.
Test Runner Enhancements
The test runner module now automatically waits for subtests to finish,
eliminating the need to manually await test promises. This makes writing tests
more intuitive and reduces common errors related to unhandled promises.
The test runner improvements were contributions by Colin Ihrig in #56664.
Undici 7
Node.js 24 includes Undici 7, which brings numerous improvements to the
HTTP client capabilities, including better performance and support for newer
HTTP features.
Deprecations and Removals
Several APIs have been deprecated or removed in this release:
url.parse()- use the WHATWG URL API instead (#55017)tls.createSecurePair(#57361)SlowBuffer(#55175)new(#55718)argstospawnandexecFilein child_process (#57199)Semver-Major Commits
c6b934380a] - (SEMVER-MAJOR) src: enableFloat16Arrayon global object (Michaël Zasso) #5815469efb81a73] - (SEMVER-MAJOR) src: enable explicit resource management (Michaël Zasso) #58154b00ff4270e] - (SEMVER-MAJOR) src,test: unregister the isolate after disposal and before freeing (Joyee Cheung) #58070b81697d860] - (SEMVER-MAJOR) src: use non-deprecated WriteUtf8V2() method (Yagiz Nizipli) #580701f06169b87] - (SEMVER-MAJOR) src: use non-deprecated Utf8LengthV2() method (Yagiz Nizipli) #58070eae9a296f0] - (SEMVER-MAJOR) src: use V8-owned CppHeap (Joyee Cheung) #58070087c254a11] - (SEMVER-MAJOR) test: fix test-fs-write for V8 13.6 (Michaël Zasso) #580709e49bedd8e] - (SEMVER-MAJOR) build: update list of installed cppgc headers (Michaël Zasso) #5807093cca8a43e] - (SEMVER-MAJOR) tools: update V8 gypfiles for 13.6 (Michaël Zasso) #58070347daa07be] - (SEMVER-MAJOR) tools: update V8 gypfiles for 13.5 (Michaël Zasso) #580702a35d5a86c] - (SEMVER-MAJOR) build: fix V8 TLS config for shared lib builds (Michaël Zasso) #58070b0fb5a09cf] - (SEMVER-MAJOR) build: pass-fPICto linker as well for shared builds (Michaël Zasso) #58070dd4c5d6c73] - (SEMVER-MAJOR) src,test: add V8 API to test the hash seed (Michaël Zasso) #580701d5d7b6eed] - (SEMVER-MAJOR) src: usev8::ExternalMemoryAccounter(Michaël Zasso) #580703779e43cce] - (SEMVER-MAJOR) tools: update license-builder and LICENSE for V8 deps (Michaël Zasso) #5807082c2255206] - (SEMVER-MAJOR) deps: remove deps/simdutf (Michaël Zasso) #580708a258eb7b1] - (SEMVER-MAJOR) test: handle explicit resource management globals (Michaël Zasso) #580709e0d9b6024] - (SEMVER-MAJOR) test: adapt assert tests to stack trace changes (Michaël Zasso) #58070f7406aa56d] - (SEMVER-MAJOR) test: update test-linux-perf-logger (Michaël Zasso) #58070c7493fac5e] - (SEMVER-MAJOR) Revert "test: disable fast API call count checks" (Michaël Zasso) #5807050a8527867] - (SEMVER-MAJOR) src: replace uses of FastApiTypedArray (Michaël Zasso) #580709c1ebb713c] - (SEMVER-MAJOR) build: add/bigobjto compile V8 on Windows (Michaël Zasso) #58070fb3d5ea45d] - (SEMVER-MAJOR) tools: update V8 gypfiles for 13.4 (Michaël Zasso) #58070756abacf73] - (SEMVER-MAJOR) build,src,tools: adapt build config for V8 13.3 (Michaël Zasso) #58070f8953e54b0] - (SEMVER-MAJOR) tools: update V8 gypfiles for 13.2 (Michaël Zasso) #58070c8a0e205e1] - (SEMVER-MAJOR) tools: update V8 gypfiles for 13.1 (Michaël Zasso) #580701689ee84ce] - (SEMVER-MAJOR) build: enable shared RO heap with ptr compression (Michaël Zasso) #5807015f2fb9467] - (SEMVER-MAJOR) build: remove support for s390 32-bit (Richard Lau) #580704ab254c9f2] - (SEMVER-MAJOR) deps: V8: backport954187b(Joyee Cheung) #58070732923b927] - (SEMVER-MAJOR) deps: patch V8 to support compilation with MSVC (StefanStojanovic) #58070972834d7c0] - (SEMVER-MAJOR) deps: always define V8_EXPORT_PRIVATE as no-op (Michaël Zasso) #580707098bff3a9] - (SEMVER-MAJOR) deps: disable V8 concurrent sparkplug compilation (Michaël Zasso) #58070dc82c40d4a] - (SEMVER-MAJOR) deps: use std::map in MSVC STL for EphemeronRememberedSet (Joyee Cheung) #5807042f5130ee2] - (SEMVER-MAJOR) deps: patch V8 for illumos (Dan McDonald) #5807023b17dbd9e] - (SEMVER-MAJOR) deps: remove problematic comment from v8-internal (Michaël Zasso) #58070c5d71fcdab] - (SEMVER-MAJOR) deps: define V8_PRESERVE_MOST as no-op on Windows (Stefan Stojanovic) #58070fbc2005b15] - (SEMVER-MAJOR) deps: fix FP16 bitcasts.h (Stefan Stojanovic) #5807057f9430503] - (SEMVER-MAJOR) deps: patch V8 to avoid duplicated zlib symbol (Michaël Zasso) #58070f26cab1b85] - (SEMVER-MAJOR) src: update NODE_MODULE_VERSION to 137 (Michaël Zasso) #58070f8923a4f17] - (SEMVER-MAJOR) build: reset embedder string to "-node.0" (Michaël Zasso) #58070c7964bc02b] - (SEMVER-MAJOR) deps: update V8 to 13.6.233.8 (Michaël Zasso) #580706682861d6f] - (SEMVER-MAJOR) build: downgrade armv7 support to experimental (Michaël Zasso) #580710579e0ec93] - (SEMVER-MAJOR) buffer: move SlowBuffer to EOL (James M Snell) #58008a55f5d5e63] - (SEMVER-MAJOR) readline: add stricter validation for functions called after closed (Dario Piotrowicz) #57680d16b0bae55] - (SEMVER-MAJOR) http2: session tracking and graceful server close (Kushagra Pandey) #57586e2b94dc3f9] - (SEMVER-MAJOR) readline: fix unicode line separators being ignored (Dario Piotrowicz) #575914a47ce5ff9] - (SEMVER-MAJOR) Revert "assert,util: revert recursive breaking change" (Ruben Bridgewater) #576227d4db69049] - (SEMVER-MAJOR) http: remove outgoingmessage _headers and _headersList (Yagiz Nizipli) #57551fabf9384e0] - (SEMVER-MAJOR) fs: remove ability to call truncate with fd (Yagiz Nizipli) #57567a587bd2ee2] - (SEMVER-MAJOR) net: make _setSimultaneousAccepts() end-of-life deprecated (Yagiz Nizipli) #57550c6bca3fd34] - (SEMVER-MAJOR) child_process: deprecate passingargstospawnandexecFile(Daniel Venable) #57199e42c01b56d] - (SEMVER-MAJOR) buffer: makebuflenin integer range (zhenweijin) #51821cc08ad56b8] - (SEMVER-MAJOR) tls: remove deprecated tls.createSecurePair (Jonas) #573616f2a6b262b] - (SEMVER-MAJOR) tls: make server.prototype.setOptions end-of-life (Yagiz Nizipli) #573390c371d919e] - (SEMVER-MAJOR) lib: remove obsolete Cipher export (James M Snell) #572662cbf3c38db] - (SEMVER-MAJOR) timers: check for immediate instance in clearImmediate (Gürgün Dayıoğlu) #570694f512faf4a] - (SEMVER-MAJOR) lib: unexpose six process bindings (Michaël Zasso) #571498b40221777] - (SEMVER-MAJOR) build: bump supported macOS version to 13.5 (Michaël Zasso) #571155d7091f1bc] - (SEMVER-MAJOR) timers: set several methods EOL (Yagiz Nizipli) #56966d1f8ccb10d] - (SEMVER-MAJOR) url: expose urlpattern as global (Jonas) #56950ed52ab913b] - (SEMVER-MAJOR) build: increase minimum Xcode version to 16.1 (Michaël Zasso) #568241a2eb15bc6] - (SEMVER-MAJOR) test_runner: remove promises returned by t.test() (Colin Ihrig) #5666496718268fe] - (SEMVER-MAJOR) test_runner: remove promises returned by test() (Colin Ihrig) #56664aa3523ec22] - (SEMVER-MAJOR) test_runner: automatically wait for subtests to finish (Colin Ihrig) #566646857dbc018] - (SEMVER-MAJOR) test: disable fast API call count checks (Michaël Zasso) #5501489f661dd66] - (SEMVER-MAJOR) build: link V8 with atomic library (Michaël Zasso) #550147e8752006a] - (SEMVER-MAJOR) src: update GetForegroundTaskRunner override (Etienne Pierre-doray) #5501444b0e423dc] - (SEMVER-MAJOR) build: remove support for ppc 32-bit (Michaël Zasso) #550146f965260dd] - (SEMVER-MAJOR) tools: update V8 gypfiles for 13.0 (Michaël Zasso) #5501452d39441d0] - (SEMVER-MAJOR) deps: V8: cherry-pickf915fa4(Olivier Flückiger) #5501499ffe3555a] - (SEMVER-MAJOR) deps: V8: cherry-pick0d5d6e7(Yagiz Nizipli) #550145d8011d91c] - (SEMVER-MAJOR) deps: V8: cherry-pick0c11fee(Michaël Zasso) #55014d85d2f8350] - (SEMVER-MAJOR) deps: define V8_PRESERVE_MOST as no-op on Windows (Stefan Stojanovic) #55014e8f55f7b7a] - (SEMVER-MAJOR) deps: always define V8_NODISCARD as no-op (Michaël Zasso) #55014b3c1b63a5d] - (SEMVER-MAJOR) deps: fix FP16 bitcasts.h (Stefan Stojanovic) #55014d0361f0bba] - (SEMVER-MAJOR) deps: patch V8 to support compilation with MSVC (StefanStojanovic) #55014a4e0fce896] - (SEMVER-MAJOR) deps: patch V8 to avoid duplicated zlib symbol (Michaël Zasso) #550144f8fd566cc] - (SEMVER-MAJOR) deps: disable V8 concurrent sparkplug compilation (Michaël Zasso) #550141142f78f1d] - (SEMVER-MAJOR) deps: always define V8_EXPORT_PRIVATE as no-op (Michaël Zasso) #550147917b67313] - (SEMVER-MAJOR) src: update NODE_MODULE_VERSION to 134 (Michaël Zasso) #550141f654e655c] - (SEMVER-MAJOR) build: reset embedder string to "-node.0" (Michaël Zasso) #550145edec0e39a] - (SEMVER-MAJOR) deps: update V8 to 13.0.245.25 (Michaël Zasso) #5501425b22e4754] - (SEMVER-MAJOR) deps: upgrade npm to 11.0.0 (npm team) #56274529b56ef9d] - (SEMVER-MAJOR) fs: deprecate passing invalid types infs.existsSync(Carlos Espa) #55753bf3bc4ec2f] - (SEMVER-MAJOR) src: drop --experimental-permission in favour of --permission (Rafael Gonzaga) #56240fd8de670da] - (SEMVER-MAJOR) stream: catch and forward error from dest.write (jakecastelli) #5527047b80c293d] - (SEMVER-MAJOR) deps: update undici to 7.0.0 (Node.js GitHub Bot) #5607058982d712b] - (SEMVER-MAJOR) src: add async context frame to AsyncResource (Gerhard Stöbich) #560824ee87b8bc3] - (SEMVER-MAJOR) zlib: deprecate classes usage withoutnew(Yagiz Nizipli) #55718b02cd411c2] - (SEMVER-MAJOR) fs: runtime deprecatefs.F_OK,fs.R_OK,fs.W_OK,fs.X_OK(Livia Medeiros) #49686d9540b51eb] - (SEMVER-MAJOR) fs: removedirent.path(Antoine du Hamel) #555480368f2f662] - (SEMVER-MAJOR) repl: runtime deprecate instantiating without new (Aviv Keller) #5486903dcd7077a] - (SEMVER-MAJOR) src: nuke deprecated and un-used enum members inOptionEnvvarSettings(Juan José) #5307951ae57673d] - (SEMVER-MAJOR) lib: make ALS default to AsyncContextFrame (Stephen Belanger) #5555211fbdd8c9d] - (SEMVER-MAJOR) url: runtime deprecate url.parse (Yagiz Nizipli) #55017019efe1453] - (SEMVER-MAJOR) lib: runtime deprecate SlowBuffer (Rafael Gonzaga) #55175Semver-Minor Commits
bf9f25719a] - (SEMVER-MINOR) esm: graduate import.meta properties (James M Snell) #58011947c6a4405] - (SEMVER-MINOR) src: add ExecutionAsyncId getter for any Context (Attila Szegedi) #57820ea04184328] - (SEMVER-MINOR) worker: add worker.getHeapStatistics() (Matteo Collina) #57888ec79f7686d] - (SEMVER-MINOR) util: addtypes.isFloat16Array()(Livia Medeiros) #5787913dee58d0e] - (SEMVER-MINOR) test_runner: add global setup and teardown functionality (Pietro Marchini) #57438932c2d9c70] - (SEMVER-MINOR) stream: preserve AsyncLocalStorage context in finished() (Gürgün Dayıoğlu) #5786518d6249580] - (SEMVER-MINOR) repl: add support for multiline history (Giovanni Bucci) #57400c3e44342d9] - (SEMVER-MINOR) lib: add defaultValue and name options to AsyncLocalStorage (James M Snell) #57766f99f815641] - (SEMVER-MINOR) doc: graduate multiple experimental apis (James M Snell) #5776521f3c96199] - (SEMVER-MINOR) esm: support top-level Wasm without package type (Guy Bedford) #57610ada34bd0ea] - (SEMVER-MINOR) http: support http proxy for fetch under NODE_USE_ENV_PROXY (Joyee Cheung) #5716505cf1410b1] - (SEMVER-MINOR) assert: mark partialDeepStrictEqual() as stable (Ruben Bridgewater) #5737057e49ee777] - (SEMVER-MINOR) esm: support source phase imports for WebAssembly (Guy Bedford) #5691955413004c8] - (SEMVER-MINOR) stream: handle generator destruction from Duplex.from() (Matthieu Sieben) #55096Semver-Patch Commits
7df9558efc] - assert: supportFloat16Arrayin loose deep equality checks (Livia Medeiros) #57881d9e78c00c1] - assert,util: fix constructor lookup in deep equal comparison (Ruben Bridgewater) #57876f4572f0826] - assert,util: improve deep object comparison performance (Ruben Bridgewater) #576482e9fb6e1e0] - assert,util: improve unequal number comparison performance (Ruben Bridgewater) #576195f9cc5ecbb] - assert,util: improve array comparison (Ruben Bridgewater) #57619b5b192314c] - async_hooks: enable AsyncLocalStorage once constructed (Chengzhong Wu) #58029442b4162fb] - benchmark: add sqlite prepare select get (Vinícius Lourenço) #580402d894eacae] - benchmark: add sqlite prepare select all (Vinícius Lourenço) #580404d47f3afef] - benchmark: add sqlite is transaction (Vinícius Lourenço) #5804085f2bbc02b] - benchmark: add sqlite prepare insert (Vinícius Lourenço) #58040e61b38e47d] - benchmark: disambiguatefilenameanddirnameread perf (Antoine du Hamel) #58056ca86c93390] - buffer: avoid creating unnecessary environment (Yagiz Nizipli) #58053dc22890dd8] - buffer: improve byteLength performance (Yagiz Nizipli) #58048619bf86fe9] - buffer: define global v8::CFunction objects as const (Mert Can Altin) #57676d24414ceec] - build: use$(BUILDTYPE)when cleaning coverage files (Aviv Keller) #57995004913992c] - build: define python when generatingout/Makefile(Aviv Keller) #5797077d11f9c7c] - build: fix zstd libname (Antoine du Hamel) #5799974473af8ee] - build: use clang-cl in coverage-windows workflow (Michaël Zasso) #5791946fc497e7b] - build: fix missing files warning (Luigi Pinca) #57870403264c02e] - build: remove redundant-mXXflags for V8 (Michaël Zasso) #57907e55b02b368] - build: drop support for python 3.8 (Aviv Keller) #55239234c71077b] - crypto: fix cross-realmSharedArrayBuffervalidation (Antoine du Hamel) #5797414367588d8] - crypto: fix cross-realm check ofArrayBuffer(Felipe Forbeck) #578280f55a96e9c] - crypto: forbid passingFloat16ArraytogetRandomValues()(Livia Medeiros) #57880dce6f43a4f] - crypto: revert dangerous uses of std::string_view (Tobias Nießen) #57816fd3fb0c347] - crypto: fix misleading positional argument (Tobias Nießen) #5784392aae40dce] - crypto: make auth tag size assumption explicit (Tobias Nießen) #578034793bb2fdc] - crypto: remove CipherBase::Init (Tobias Nießen) #57787e567952388] - crypto: remove BoringSSL dh-primes addition (Shelley Vohr) #57023270ab65ee4] - deps: update ada to 3.2.3 (Node.js GitHub Bot) #58045f725127c19] - deps: update zstd to 1.5.7 (Node.js GitHub Bot) #57940fd6adb7de6] - deps: update simdutf to 6.5.0 (Node.js GitHub Bot) #57939cdedec7e29] - deps: update undici to 7.8.0 (Node.js GitHub Bot) #57770878dc9337e] - deps: update zlib to 1.3.0.1-motley-780819f (Node.js GitHub Bot) #577683e885e1441] - deps: update timezone to 2025b (Node.js GitHub Bot) #57857e92e100c9d] - deps: update amaro to 0.5.2 (Node.js GitHub Bot) #57871afc49db038] - deps: update simdutf to 6.4.2 (Node.js GitHub Bot) #5785570bd8bc174] - deps: delete OpenSSL demos, doc and test folders (Michaël Zasso) #5783540dcd4a3d1] - deps: upgrade npm to 11.3.0 (npm team) #57801678d82b9be] - deps: update c-ares to v1.34.5 (Node.js GitHub Bot) #57792f079c4aa37] - deps: update simdutf to 6.4.0 (Node.js GitHub Bot) #56764ec29f563a9] - deps: update ada to 3.2.2 (Yagiz Nizipli) #5769395296d0d84] - deps: update amaro to 0.5.1 (Marco Ippolito) #57704c377394657] - deps: update undici to 7.6.0 (nodejs-github-bot) #57685a56175561a] - deps: update amaro to 0.5.0 (nodejs-github-bot) #57687a86912a462] - deps: update icu to 77.1 (Node.js GitHub Bot) #574550b2cf1b642] - deps: update undici to 7.5.0 (Node.js GitHub Bot) #57427c3927aa558] - deps: upgrade npm to 11.2.0 (npm team) #573349c7bc95f56] - deps: update undici to 7.4.0 (Node.js GitHub Bot) #572369dee7b94bf] - deps: update undici to 7.3.0 (Node.js GitHub Bot) #56624cadc4ed067] - deps: upgrade npm to 11.1.0 (npm team) #568185770972dc6] - deps: update undici to 7.2.1 (Node.js GitHub Bot) #5656967b647edc7] - deps: update undici to 7.2.0 (Node.js GitHub Bot) #563356c03beba46] - deps: update undici to 7.1.0 (Node.js GitHub Bot) #561798b4bacdf1a] - dns: restore dns query cache ttl (Ethan Arrowood) #57640f6a085da3f] - doc: mark Node.js 18 as End-of-Life (Richard Lau) #58084ca67c002d6] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102cdb3d01194] - doc: fix formatting ofimport.meta.filenamesection (Antoine du Hamel) #580790557d60f41] - doc: fix env variable name inutil.styleText(Antoine du Hamel) #58072d5783af1fe] - doc: add returns for https.get (Eng Zer Jun) #58025a2260a4a18] - doc: fix typo inbuffer.md(chocolateboy) #58052352df168da] - doc: reserve module version 136 for Electron 37 (Calvin) #57979ebbbdd15a1] - doc: correct deprecation type ofassert.CallTracker(René) #5799736b0a296db] - doc: fixAsyncLocalStorageexample response changes after node v18 (Naor Tedgi (Abu Emma)) #579698b4adfb439] - doc: fix linter errors (Antoine du Hamel) #57987626b26d888] - doc: mark devtools integration section as active development (Chengzhong Wu) #5788656a808d20b] - doc: fix typo inmodule.md(Alex Schwartz) #57889df90bd9656] - doc: increase z-index of header element (Dario Piotrowicz) #5785174c415d46a] - doc: add missing TS formats forloadhooks (Antoine du Hamel) #57837ce1b5aabd4] - doc: clarify the multi REPL example (Dario Piotrowicz) #57759deb434e61f] - doc: fix deprecation type forDEP0148(Livia Medeiros) #57785a5ef2e8858] - doc: list DOMException as a potential error raised by Node.js (Chengzhong Wu) #57783f66a2717ee] - doc: add missing v0.x changelog entries (Antoine du Hamel) #5777905098668ba] - doc: fix typo in writing-docs (Sebastian Beltran) #57776379718e26e] - doc: clarify examples section in REPL doc (Dario Piotrowicz) #57762952a212377] - doc: explicitly state that corepack will be removed in v25+ (Trivikram Kamat) #5774781066717d0] - doc: update position type to integer | null in fs (Yukihiro Hasegawa) #57745a00fec62f9] - doc: allow the $schema property in node.config.json (Remco Haszing) #57560cc848986ad] - doc: update CI instructions (Antoine du Hamel) #57743576a6df5bb] - doc: update example of usingawaitin REPL (Dario Piotrowicz) #576530a15b00d34] - doc: add back mention of visa fees to onboarding doc (Darshan Sen) #57730766d9a8eac] - doc: remove link toQUIC.md(Antoine du Hamel) #57729a8da209796] - doc: process.execve is only unavailable for Windows (Yaksh Bariya) #57726d066d1fcec] - doc: mark type stripping as release candidate (Marco Ippolito) #5770535096b7353] - doc: clarifyunhandledRejectionevents behaviors in process doc (Dario Piotrowicz) #5765427b113dced] - doc: improved fetch docs (Alessandro Miliucci) #57296310ccb5b7d] - doc: document REPL custom eval arguments (Dario Piotrowicz) #5769044dfbeca23] - doc: classify Chrome DevTools Protocol as tier 2 (Chengzhong Wu) #576341e920a06c7] - doc: mark multiple vm module APIS stable (James M Snell) #57513db770a0b3b] - doc: correct status of require(esm) warning in v20 changelog (Joyee Cheung) #5752924c460dc0c] - doc: reserve NMV 135 for Electron 36 (David Sanders) #571515119049ca6] - doc: fix faulty YAML metadata (Antoine du Hamel) #565087bedcfd4a2] - doc: fix typo (Alex Yang) #56125069ec1b983] - doc: consolidate history table of CustomEvent (Edigleysson Silva (Edy)) #55758304f164f52] - doc,build,win: update docs with clang (Stefan Stojanovic) #57991c4ca0d7ab1] - esm: avoidimport.metasetup costs for unused properties (Antoine du Hamel) #57286073d40be42] - fs: added test for missing call to uv_fs_req_cleanup (Justin Nietzel) #5781152e4967f45] - fs: add missing call to uv_fs_req_cleanup (Justin Nietzel) #578113edea66431] - fs: improve globSync performance (Rich Trott) #57725b8865dfda5] - fs: only show deprecation warning when error code matches (Antoine du Hamel) #56549c91ce2120c] - fs: fixgetDirent().parentPathwhen type isUV_DIRENT_UNKNOWN(Livia Medeiros) #555535e9cac2714] - http2: add raw header array support to h2Session.request() (Tim Perry) #57917924ebcd7f7] - http2: use args.This() instead of args.Holder() (Joyee Cheung) #58004a3655645d9] - http2: fix graceful session close (Kushagra Pandey) #57808406b06b046] - http2: fix check forframe->hd.type(hanguanqiang) #576448f3aeea613] - http2: skip writeHead if stream is closed (Shima Ryuhei) #57686398674a25a] - lib: avoid StackOverflow onserializeError(Chengzhong Wu) #580754ef6376cff] - lib: resolve the issue of not adhering to the specified buffer size (0hm☘️🏳️⚧️) #558965edcb28583] - lib: fix AbortSignal.any() with timeout signals (Gürgün Dayıoğlu) #5786768c5954d59] - lib: use Map primordial for ActiveAsyncContextFrame (Gürgün Dayıoğlu) #5767062640750fd] - meta: allow penetration testing on live system with prior authorization (Matteo Collina) #5796633803a5fbb] - meta: fix subsystem in commit title (Luigi Pinca) #579457e195ec8f8] - meta: bump Mozilla-Actions/sccache-action from 0.0.8 to 0.0.9 (dependabot[bot]) #577206ab9db9552] - meta: bump actions/download-artifact from 4.1.9 to 4.2.1 (dependabot[bot]) #57719f0c84a6aab] - meta: bump actions/setup-python from 5.4.0 to 5.5.0 (dependabot[bot]) #57718eb1a515c99] - meta: bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (dependabot[bot]) #5771789c156d715] - meta: bump github/codeql-action from 3.28.10 to 3.28.13 (dependabot[bot]) #577168e27c827fa] - meta: bump actions/cache from 4.2.2 to 4.2.3 (dependabot[bot]) #57715dd5e580acd] - meta: bump actions/setup-node from 4.2.0 to 4.3.0 (dependabot[bot]) #577144876e1658f] - meta: bump actions/upload-artifact from 4.6.1 to 4.6.2 (dependabot[bot]) #57713004914722f] - module: fix incorrect formatting in require(esm) cycle error message (haykam821) #57453a5406899db] - module: improvegetPackageTypeperformance (Dario Piotrowicz) #575996adbbe2887] - module: remove unnecessaryreadPackagefunction (Dario Piotrowicz) #575961e490aa570] - module: improve typescript error message format (Marco Ippolito) #57687ecd081df82] - node-api: add nested object wrap and napi_ref test (Chengzhong Wu) #57981b4f6aa8a87] - node-api: convert NewEnv to node_napi_env__::New (Vladimir Morozov) #578348cd98220af] - os: fix netmask format check condition in getCIDR function (Wiyeong Seo) #573248b83ab39e3] - process: disable building execve on IBM i (Abdirahim Musse) #578839230f22029] - process: remove support for undocumented symbol (Antoine du Hamel) #565525835de65ee] - quic: fix debug log (jakecastelli) #5768914b357940c] - Revert "readline: add stricter validation for functions called after closed" (Dario Piotrowicz) #58024ab99ee6f4c] - repl: fix multiline history editing string order (Giovanni Bucci) #57874160da87484] - repl: deprecaterepl.builtinModules(Dario Piotrowicz) #5750810eb2b079e] - sqlite: add location method (Edy Silva) #57860da05addc5e] - sqlite: add getter to detect transactions (Colin Ihrig) #579250df87e07a0] - sqlite: add timeout options to DatabaseSync (Edy Silva) #577522b2a0bf96b] - sqlite: add setReturnArrays method to StatementSync (Gürgün Dayıoğlu) #57542064e0ebc90] - sqlite: enable common flags (Edy Silva) #5762126fa594454] - sqlite: refactor prepared statement iterator (Colin Ihrig) #575690bf2c2827c] - sqlite,doc,test: add aggregate function (Edy Silva) #56600da281d7651] - sqlite,src: refactor sqlite value conversion (Edy Silva) #57571413e93ce7d] - src: only block on user blocking worker tasks (Joyee Cheung) #58047a5d01667e1] - src: use priority queue to run worker tasks (Joyee Cheung) #58047d2f5ceb757] - src: add more debug logs and comments in NodePlatform (Joyee Cheung) #58047130eaa20a4] - src: improve parsing of boolean options (Edy Silva) #58039f7ab6300de] - src: remove unused detachArrayBuffer method (Yagiz Nizipli) #58055d712aa4cc0] - src: fix internalModuleStat v8 fast path (Yagiz Nizipli) #58054902cbe66a2] - src: fix EnvironmentOptions.async_context_frame default value (Chengzhong Wu) #58030cfb39b9adb] - src: annotate BaseObjects in the heap snapshots correctly (Joyee Cheung) #574174e02f239e4] - src: use macros to reduce code duplication is cares_wrap (James M Snell) #57937f36d30043a] - src: improve error handling in cares_wrap (James M Snell) #5793788f047b828] - src: use ranges library (C++20) to simplify code (Daniel Lemire) #5797509206e9731] - src: fix -Wunreachable-code-return in node_sea (Shelley Vohr) #5766487fd838a73] - src: add dcheck_eq for Object::New constructor calls (Jonas) #579432877207e19] - src: move windows specific fns to_WIN32(Yagiz Nizipli) #57951b4055150bd] - src: avoid calling SetPrototypeV2() (Yagiz Nizipli) #5794946062f14e7] - src: change DCHECK to CHECK (Wuli Zuo) #57948a1106cc878] - src: improve thread safety of TaskQueue (Shelley Vohr) #5791099ed5034ea] - src: fixup errorhandling more in various places (James M Snell) #57852227f2cb9a8] - src: fix typo in comments (Edy Silva) #57868a7d614a930] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #576464e7ae97dce] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #57642aab4adb34e] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #57578fded233676] - src: migrate from deprecated SnapshotCreator constructor (Joyee Cheung) #553378c5f9b4708] - src: improve error message for invalid child stdio type in spawn_sync (Dario Piotrowicz) #5758914d751a736] - src: implement util.types fast API calls (Ruben Bridgewater) #578195e14fd13aa] - src: enter and lock isolate properly in json parser (Joyee Cheung) #5782334350019f8] - src: add BaseObjectPtr nullptr operations (Chengzhong Wu) #56585d50b8a8815] - src: removevoid*->char*->void*casts (Tobias Nießen) #577912b0f65ed5f] - src: improve error handling innode_env_var.cc(Antoine du Hamel) #57767fc5295521a] - src: improve error handling in node_http2 (James M Snell) #57764c707633f45] - src: improve error handing in node_messaging (James M Snell) #577604093de6ff5] - src: improve error handling in crypto_x509 (James M Snell) #57757d309712820] - src: improve error handling in callback.cc (James M Snell) #577586d39c47ee8] - src: improve StringBytes error handling (James M Snell) #577063ff37a844f] - src: initialize privateSymbols for per_context (Jason Zhang) #5747956380df40c] - src: improve error handling in process.env handling (James M Snell) #57707db8b29d282] - src: remove unused variable in crypto_x509.cc (Michaël Zasso) #57754ed72044cca] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #5773350f57073d8] - src: fix kill signal 0 on Windows (Stefan Stojanovic) #57695e144b69044] - src: fixup fs SyncCall to propagate errors correctly (James M Snell) #57711f58c12078b] - src: fix inefficient usage of v8_inspector::StringView (Simon Zünd) #52372a3ad331ce5] - src: disable abseil deadlock detection (Chengzhong Wu) #57582e4ff2b6fad] - src: remove deleted tls file (Shelley Vohr) #57481d5db63a1a8] - Revert "src: do not expose simdjson.h in node_config_file.h" (James M Snell) #57197076a99f11d] - src: do not expose simdjson.h in node_config_file.h (Cheng) #57173ad845588d0] - Revert "src: modernize cleanup queue to use c++20" (Richard Lau) #56846581b44421a] - src: modernize cleanup queue to use c++20 (Yagiz Nizipli) #56063a154352215] - src,permission: make ERR_ACCESS_DENIED more descriptive (Rafael Gonzaga) #575856156f8a6d5] - Revert "stream: handle generator destruction from Duplex.from()" (jakecastelli) #56278a0077c9b8b] - test: remove deadlock workaround (Joyee Cheung) #580471f2b26172a] - test: prevent extraneous HOSTNAME substitution in test-runner-output (René) #580769ba16469c3] - test: update WPT for WebCryptoAPI tob48efd6(Node.js GitHub Bot) #580443d708e0132] - test: add missing newlines to repl .exit writes (Dario Piotrowicz) #580413457aee009] - test: use validateByRetainingPath in heapdump tests (Joyee Cheung) #574173d34c5f5e3] - test: add fast api tests for getLibuvNow() (Yagiz Nizipli) #58022b8b019245b] - test: add ALS test using http agent keep alive (Gerhard Stöbich) #58017cbd2abeb8d] - test: deflake test-http2-options-max-headers-block-length (Luigi Pinca) #5795921d052a578] - test: rename to getCallSites (Wuli Zuo) #57948f2fd19e641] - test: force GC in test-file-write-stream4 (Luigi Pinca) #579307039173398] - test: enable skipped colorize test (Shima Ryuhei) #57887baa6968f95] - test: update WPT for WebCryptoAPI to164426a(Node.js GitHub Bot) #57854660d238798] - test: deflake test-buffer-large-size (jakecastelli) #57789ce2274d52f] - test: add test for frame count being 0.5 (Jake Yuesong Li) #577329d2a09db00] - test: fix the decimal fractions explaination (Jake Yuesong Li) #5773212f4124af8] - Revert "test: add tests for REPL custom evals" (Tobias Nießen) #577933cdf8ec7c7] - test: add tests for REPL custom evals (Dario Piotrowicz) #576919af8b92fb4] - test: update expected error message for macOS (Antoine du Hamel) #57742eaec2b5169] - test: fix dangling promise in test_runner no isolation test setup (Jacob Smith) #5759551ded6eaeb] - test: improve test description (jakecastelli) #5694375b9c1cdd8] - test: remove test-macos-app-sandbox flaky designation (Luigi Pinca) #5647172537f5631] - test: remove flaky test-pipe-file-to-http designation (Luigi Pinca) #56472984a472137] - test: remove test-runner-watch-mode-complex flaky designation (Luigi Pinca) #5647023275cc7bc] - test: add test case forutil.inspect(Jordan Harband) #5577899e4685636] - test_runner: support mocking json modules (Jacob Smith) #580078207828aad] - test_runner: recalculate run duration on watch restart (Pietro Marchini) #577867416a7f35a] - test_runner: match minimum file column to 'all files' (Shima Ryuhei) #5784887ac6cfed7] - test_runner: improve --test-timeout to be per test (jakecastelli) #57672ae08210e37] - tools: ignore V8 tests in CodeQL scans (Rich Trott) #5808125c17ab365] - tools: enable CodeQL config file (Rich Trott) #58036c3d2a1c723] - tools: ignore test directory in CodeQL scans (Rich Trott) #57978d31e630462] - tools: add semver-major release support to release-lint (Antoine du Hamel) #578923a99975a88] - tools: add codeql nightly (Rafael Gonzaga) #5778877dee41a5d] - tools: edit create-release-proposal workflow to handle pr body length (Elves Vieira) #578416592803bd0] - tools: add zstd updater to workflow (KASEYA\yahor.siarheyenka) #57831c08349393b] - tools: remove unusedosx-pkg-postinstall.sh(Antoine du Hamel) #5766782bb228796] - tools: do not use temp files when merging PRs (Antoine du Hamel) #57790f2cdc98e75] - tools: update gyp-next to 0.20.0 (Node.js GitHub Bot) #5768302d36cd61d] - tools: update doc to new version (Node.js GitHub Bot) #5776974ac98c78e] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #57721dcba975031] - tools: enable linter intest/fixtures/source-map/output(Antoine du Hamel) #57700b9043c9e9b] - tools: enable linter intest/fixtures/errors(Antoine du Hamel) #57701bbbf49812e] - tools: enable linter intest/fixtures/test-runner/output(Antoine du Hamel) #576989f1ad3c6da] - tools: enable linter intest/fixtures/eval(Antoine du Hamel) #5769998df74464f] - tools: enable linter on some fixtures file (Antoine du Hamel) #57674cf02cdb799] - tools: update ESLint to 9.23 (Antoine du Hamel) #576738790348303] - tools: update doc to new version (Node.js GitHub Bot) #57085b1ee186a62] - tools: update doc to new version (Node.js GitHub Bot) #51192be34b5e7fc] - tools: disable doc building when ICU is not available (Antoine du Hamel) #511926a486347fb] - url: improve canParse() performance for non-onebyte strings (Yagiz Nizipli) #580237e3503fff1] - util: fix parseEnv handling of invalid lines (Augustin Mauroy) #57798594269fcca] - util: fix formatting of objects with built-in Symbol.toPrimitive (Shima Ryuhei) #578328ca56a8db8] - util: preservelengthof deprecated functions (Livia Medeiros) #578066add4c56aa] - util: fix parseEnv incorrectly splitting multiple ‘=‘ in value (HEESEUNG) #57421e577618227] - util: inspect: enumerable Symbols no longer have square brackets (Jordan Harband) #55778cb7eb15161] - watch: clarify completion/failure watch mode messages (Dario Piotrowicz) #5792665562127bd] - watch: check parent and child path properly (Jason Zhang) #57425b39fb9aa7f] - win: fix SIGQUIT on ClangCL (Stefan Stojanovic) #5765976c5ea669d] - worker: add ESM version examples to worker docs (fisker Cheung) #5764517965eb33d] - zlib: fix pointer alignment (jhofstee) #57727v22.21.1: 2025-10-28, Version 22.21.1 'Jod' (LTS), @aduh95Compare Source
Commits
af33e8e668] - benchmark: remove unused variable from util/priority-queue (Bruno Rodrigues) #598726764ce8756] - benchmark: update count to n in permission startup (Bruno Rodrigues) #598724e8d99f0dc] - benchmark: update num to n in dgram offset-length (Bruno Rodrigues) #59872af0a8ba7f8] - benchmark: adjust dgram offset-length len values (Bruno Rodrigues) #5970878efd1be4a] - benchmark: update num to n in dgram offset-length (Bruno Rodrigues) #59708df72dc96e9] - console,util: improve array inspection performance (Ruben Bridgewater) #60037ef67d09f50] - http: improve writeEarlyHints by avoiding for-of loop (Haram Jeong) #5995823468fd76b] - http2: fix allowHttp1+Upgrade, broken by shouldUpgradeCallback (Tim Perry) #5992456abc4ac76] - lib: optimize priority queue (Gürgün Dayıoğlu) #60039ea5cfd98c5] - lib: implement passive listener behavior per spec (BCD1me) #59995c2dd6eed2f] - process: fix wrong asyncContext under unhandled-rejections=strict (Shima Ryuhei) #6010381a3055710] - process: fix defaultenvforprocess.execve(Richard Lau) #60029fe492c7ace] - process: fix hrtime fast call signatures (Renegade334) #5960076b4cab8fc] - src: bring permissions macros in line with general C/C++ standards (Anna Henningsen) #6005321970970c7] - src: removeAnalyzeTemporaryDtorsoption from .clang-tidy (iknoom) #60008609c063e81] - src: remove unused variables from report (Moonki Choi) #60047987841a773] - src: avoid unnecessary string allocations in SPrintF impl (Anna Henningsen) #600526e386c0632] - src: make ToLower/ToUpper input args more flexible (Anna Henningsen) #60052c3be1226c7] - src: allowstd::string_viewarguments toSPrintF()and friends (Anna Henningsen) #60058764d35647d] - src: remove unnecessarystd::stringerror messages (Anna Henningsen) #600571289ef89ec] - src: remove unnecessary shadowed functions on Utf8Value & BufferValue (Anna Henningsen) #60056d1fb8a538d] - src: avoid unnecessary string ->char*-> string round trips (Anna Henningsen) #6005554b439fb5a] - src: filloptions_args,options_envafter vectors are finalized (iknoom) #59945c7c597e2ca] - src: use RAII for uv_process_options_t (iknoom) #59945b928ea9716] - test: ensure that the message event is fired (Luigi Pinca) #59952e4b95a5158] - test: replace diagnostics_channel stackframe in output snapshots (Chengzhong Wu) #600244206406694] - test: mark test-web-locks skip on IBM i (SRAVANI GUNDEPALLI) #5999626394cd5bf] - test: expand tls-check-server-identity coverage (Diango Gavidia) #60002b58df47995] - test: fix typo of test-benchmark-readline.js (Deokjin Kim) #59993af3a59dba8] - test: verify tracing channel doesn't swallow unhandledRejection (Gerhard Stöbich) #59974cee362242b] - timers: fix binding fast call signatures (Renegade334) #5960040fea57fdd] - tools: add message on auto-fixing js lint issues in gh workflow (Dario Piotrowicz) #59128aac90d351b] - tools: verify signatures when updating nghttp* (Antoine du Hamel) #601139fae03c7d9] - tools: use dependabot cooldown and move tools/doc (Rafael Gonzaga) #5997881548abdf6] - wasi: fix WasiFunction fast call signature (Renegade334) #59600v22.21.0: 2025-10-20, Version 22.21.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
1486fedea1] - (SEMVER-MINOR) cli: add--use-env-proxy(Joyee Cheung) #59151bedaaa11fc] - (SEMVER-MINOR) http: support http proxy for fetch underNODE_USE_ENV_PROXY(Joyee Cheung) #57165af8b5fa29d] - (SEMVER-MINOR) http: addshouldUpgradeCallbackto let servers control HTTP upgrades (Tim Perry) #5982442102594b1] - (SEMVER-MINOR) http,https: add built-in proxy support inhttp/https.requestandAgent(Joyee Cheung) #58980686ac49b82] - (SEMVER-MINOR) src: add percentage support to--max-old-space-size(Asaf Federman) #59082Commits
a71dd592e3] - benchmark: calibrate config dgram multi-buffer (Bruno Rodrigues) #5969616c4b466f4] - benchmark: calibrate config cluster/echo.js (Nam Yooseong) #5983653cb9f3b6c] - build: add the missing macro definitions for OpenHarmony (hqzing) #59804ec5290fe01] - build: do not include custom ESLint rules testing in tarball (Antoine du Hamel) #598091486fedea1] - (SEMVER-MINOR) cli: add --use-env-proxy (Joyee Cheung) #591511f93913446] - crypto: usereturn awaitwhen returning Promises from async functions (Renegade334) #59841f488b2ff73] - crypto: use async functions for non-stub Promise-returning functions (Renegade334) #59841aed9fd5ac4] - crypto: avoid calls topromise.catch()(Renegade334) #5984137c2d186f0] - deps: update amaro to 1.1.4 (pmarchini) #6004428aea13419] - deps: update archs files for openssl-3.5.4 (Node.js GitHub Bot) #60101ddbc1aa0bb] - deps: upgrade openssl sources to openssl-3.5.4 (Node.js GitHub Bot) #60101badbba2da9] - deps: update googletest to50b8600(Node.js GitHub Bot) #5995548aaf98a08] - deps: update archs files for openssl-3.5.3 (Node.js GitHub Bot) #59901e02a562ea6] - deps: upgrade openssl sources to openssl-3.5.3 (Node.js GitHub Bot) #599017e0e86cb92] - deps: upgrade npm to 10.9.4 (npm team) #6007491dda5facf] - deps: update undici to 6.22.0 (Matteo Collina) #601123a3220a2f0] - dgram: restore buffer optimization in fixBufferList (Yoo) #5993409bdcce6b8] - diagnostics_channel: fix race condition with diagnostics_channel and GC (Ugaitz Urien) #59910b3eeb3bd13] - doc: provide alternative tourl.parse()using WHATWG URL (Steven) #597361ddaab1904] - doc: mention reverse proxy and include simple example (Steven) #597363b3b71e99c] - doc: mark.envfiles support as stable (Santeri Hiltunen) #59925d37f67d1bd] - doc: remove optional title prefixes (Aviv Keller) #60087ca2dff63f9] - doc: fix typo on child_process.md (Angelo Gazzola) #601143fca564a05] - doc: add automated migration info to deprecations (Augustin Mauroy) #600224bc366fc16] - doc: use "WebAssembly" instead of "Web Assembly" (Tobias Nießen) #599544808dbdd9a] - doc: fix typo in section on microtask order (Tobias Nießen) #59932d6e303d645] - doc: update V8 fast API guidance (René) #589990a3a3f729e] - doc: add security escalation policy (Ulises Gascón) #598068fd669c70d] - doc: type improvement of filehttp.md(yusheng chen) #581899833dc6060] - doc: rephrase dynamic import() description (Nam Yooseong) #592242870a73681] - doc,crypto: update subtle.generateKey and subtle.importKey (Filip Skokan) #5985185818db93c] - fs,win: do not add a second trailing slash in readdir (Gerhard Stöbich) #59847bedaaa11fc] - (SEMVER-MINOR) http: support http proxy for fetch under NODE_USE_ENV_PROXY (Joyee Cheung) #57165af8b5fa29d] - (SEMVER-MINOR) http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) #59824758271ae66] - http: optimize checkIsHttpToken for short strings (방진혁) #5983242102594b1] - (SEMVER-MINOR) http,https: add built-in proxy support in http/https.request and Agent (Joyee Cheung) #58980a33ed9bf96] - inspector: ensure adequate memory allocation forBinary::toBase64(René) #5987034c686be2b] - lib: update inspect output format for subclasses (Miguel Marcondes Filho) #5968712e553529c] - lib: add source map support for assert messages (Chengzhong Wu) #59751d2a70571f8] - lib,src: refactor assert to load error source from memory (Chengzhong Wu) #5975120a9e86b5d] - meta: move Michael to emeritus (Michael Dawson) #60070c591cca15c] - meta: bump github/codeql-action from 3.30.0 to 3.30.5 (dependabot[bot]) #60089090ba141b1] - meta: bump codecov/codecov-action from 5.5.0 to 5.5.1 (dependabot[bot]) #60091a0ba6884a5] - meta: bump actions/stale from 9.1.0 to 10.0.0 (dependabot[bot]) #600920feca0c541] - meta: bump actions/setup-node from 4.4.0 to 5.0.0 (dependabot[bot]) #600937cd2b42d18] - meta: bump step-security/harden-runner from 2.12.2 to 2.13.1 (dependabot[bot]) #600941f3b9d66ac] - meta: bump actions/cache from 4.2.4 to 4.3.0 (dependabot[bot]) #600950fedbb3de7] - meta: bump ossf/scorecard-action from 2.4.2 to 2.4.3 (dependabot[bot]) #6009604590b8267] - meta: bump actions/setup-python from 5.6.0 to 6.0.0 (dependabot[bot]) #600902bf0a9318f] - meta: add .npmrc with ignore-scripts=true (Joyee Cheung) #59914e10dc7b81c] - module: allow overriding linked requests for a ModuleWrap (Chengzhong Wu) #595272237142369] - module: link module with a module request record (Chengzhong Wu) #588866d24b88fbc] - node-api: added SharedArrayBuffer api (Mert Can Altin) #590714cc84c96f4] - node-api: make napi_delete_reference use node_api_basic_env (Jeetu Suthar) #59684e790eb6b50] - repl: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater) #5985799ea08dc43] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #59607e4a4f63019] - sqlite: fix crash session extension callbacks with workers (Bart Louwers) #5984842c5544b97] - src: assert memory calc for max-old-space-size-percentage (Asaf Federman) #59460686ac49b82] - (SEMVER-MINOR) src: add percentage support to --max-old-space-size (Asaf Federman) #5908284701ff668] - src: clear all linked module caches once instantiated (Chengzhong Wu) #591178e182e561f] - src: remove unnecessaryEnvironment::GetCurrent()calls (Moonki Choi) #59814c9cde35c4d] - src: simplify is_callable by making it a concept (Tobias Nießen) #58169892b425ee1] - src: rename private fields to follow naming convention (Moonki Choi) #5992336b68db7f5] - src: reduce the nearest parent package JSON cache size (Michael Smith) #5988826b40bad02] - src: replace FIXED_ONE_BYTE_STRING with Environment-cached strings (Moonki Choi) #5989134dcb7dc32] - src: create strings inFIXED_ONE_BYTE_STRINGas internalized (Anna Henningsen) #598264d748add05] - src: removestd::arrayoverload ofFIXED_ONE_BYTE_STRING(Anna Henningsen) #59826bb6fd7c2d1] - src: ensurev8::Eternalis empty before setting it (Anna Henningsen) #598257a91282bf9] - src: use simdjson::pad (0hm☘️) #59391ba00875f01] - stream: use new AsyncResource instead of bind (Matteo Collina) #59867ebec3ef68b] - (SEMVER-MINOR) test: move http proxy tests to test/client-proxy (Joyee Cheung) #589807067d79fb3] - test: mark sea tests flaky on macOS x64 (Richard Lau) #60068ca1942c9d5] - test: testcase demonstrating issue 59541 (Eric Rannaud) #59801660d57355e] - test,doc: skip --max-old-space-size-percentage on 32-bit platforms (Asaf Federman) #6014419a7b1ef26] - tls: load bundled and extra certificates off-thread (Joyee Cheung) #59856095e7a81fc] - tls: only do off-thread certificate loading on loading tls (Joyee Cheung) #59856c42c1204c7] - tools: fixtools/make-v8.shfor clang (Richard Lau) #59893b632a1d98d] - tools: skip test-internet workflow for draft PRs (Michaël Zasso) #598176021c3ac76] - tools: copyeditbuild-tarball.yml(Antoine du Hamel) #59808ef005d0c9b] - typings: update 'types' binding (René) #5969228ef564ecd] - typings: remove unused imports (Nam Yooseong) #59880f88752ddb6] - url: replaced slice with at (Mikhail) #5918124c224960c] - url: add type checking to urlToHttpOptions() (simon-id) #59753f2fbcc576d] - util: fix debuglog.enabled not being present with callback logger (Ruben Bridgewater) #598586277058e43] - vm: sync-ify SourceTextModule linkage (Chengzhong Wu) #590005bf21a4309] - vm: explain how to share promises between contexts w/ afterEvaluate (Eric Rannaud) #59801312b33a083] - vm: "afterEvaluate", evaluate() return a promise from the outer context (Eric Rannaud) #598011eadab863c] - win,tools: add description to signature (Martin Costello) #59877816e1befb1] - zlib: reduce code duplication (jhofstee) #57810v22.20.0: 2025-09-24, Version 22.20.0 'Jod' (LTS), @richardlauCompare Source
Notable Changes
OpenSSL updated to 3.5.2
For official Node.js builds, or builds using the default build configuration, Node.js now bundles OpenSSL 3.5.2. This update allows Node.js 22.x to be supported through to the planned End-of-Life date of 2027-04-30 as the previously bundled OpenSSL 3.0.x goes out of support in September 2026.
This change does not affect third-party builds of Node.js that link to an external OpenSSL (or OpenSSL-compatible) library.
Other notable changes
5b83e1e0a2] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #5957134b25fd97b] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707bf41218ed9] - doc: markpath.matchesGlobas stable (Aviv Keller) #595721dbad2058f] - (SEMVER-MINOR) http: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) #59315062e837d5f] - (SEMVER-MINOR) http2: add support for raw header arrays in h2Stream.respond() (Tim Perry) #59455b8066611c3] - inspector: add http2 tracking support (Darshan Sen) #596119b7dd40da8] - (SEMVER-MINOR) sea: implement execArgvExtension (Joyee Cheung) #5956048bfbd3dca] - (SEMVER-MINOR) sea: support execArgv in sea config (Joyee Cheung) #59314cf06e74076] - (SEMVER-MINOR) stream: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) #5946462bb80c17e] - (SEMVER-MINOR) test_runner: support object property mocking (Idan Goshen) #584389e2aa23be9] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428Commits
b7b78fd565] - assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong) #595789da50a6c53] - benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues) #597094c1538770e] - benchmark: calibrate config array-vs-concat (Rafael Gonzaga) #59587fc3f82d683] - benchmark: calibrate config v8/serialize.js (Rafael Gonzaga) #59586e95c9b2950] - benchmark: reduce readfile-permission-enabled config (Rafael Gonzaga) #59589e4fea38b31] - benchmark: calibrate length of util.diff (Rafael Gonzaga) #59588c5d68c4a0f] - benchmark, test: replace CRLF variable with string literal (Lee Jiho) #59466129a1d673b] - build: fix getting OpenSSL version on Windows (Michaël Zasso) #596099f53db7162] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #595473839593e07] - build: usewindows-2025runner (Michaël Zasso) #59673e430464669] - build: compile bundled uvwasi conditionally (Carlo Cabrera) #59622e2c9cab0cd] - build: do not set-mminimal-tocwithclang(Richard Lau) #59484208bc810a1] - child_process: remove unsafe array iteration (hotpineapple) #59347d74799d90c] - crypto: load system CA certificates off thread (Joyee Cheung) #595505b83e1e0a2] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #59571d289b1d1af] - deps: V8: cherry-picke3df60f(Chengzhong Wu) #58691cf5d91e2a6] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #597911cf24a0445] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #596898638bd3f2e] - deps: update googletest toeb2d85e(Node.js GitHub Bot) #593353ff4eb5b37] - deps: update amaro to 1.1.2 (Node.js GitHub Bot) #596164d268ac034] - deps: V8: cherry-pick7b91e3e(Milad Fa) #5948583410eb0e3] - deps: V8: cherry-pick59d52e3(Milad Fa) #594855780af02cb] - deps: update amaro to 1.1.1 (Node.js GitHub Bot) #591412986eca821] - deps: V8: cherry-pick6b1b9bc(zhoumingtao) #5928398e399b3ea] - deps: update archs files for openssl-3.5.2 (Node.js GitHub Bot) #593712b983a7520] - deps: upgrade openssl sources to openssl-3.5.2 (Node.js GitHub Bot) #593717ffbb42454] - deps: update archs files for openssl-3.5.1 (Node.js GitHub Bot) #59234bd48a60a75] - deps: upgrade openssl sources to openssl-3.5.1 (Node.js GitHub Bot) #5923424762a10ca] - deps: fix OpenSSL security level at 1 (Richard Lau) #598591233e92d10] - diagnostics_channel: revoke DEP0163 (René) #5975834b25fd97b] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707d7adf8be64] - doc: update "Type stripping in dependencies" section (Josh Kelley) #59652a1d7e4fdbf] - doc: add Miles Guicent as triager (Miles Guicent) #59562bf41218ed9] - doc: markpath.matchesGlobas stable (Aviv Keller) #59572afaa1ccb74] - doc: improve documentation for raw headers in HTTP/2 APIs (Tim Perry) #59633b95ff56102] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #595796ff939b8d3] - doc: fix filehandle.read typo (Ruy Adorno) #59635963bfa9d6f] - doc: fix missing link to the Error documentation in thehttppage (Alexander Makarenko) #590800e10a8ea27] - doc: improvesqlite.backup()progress/fulfillment documentation (René) #5959818ceefbabd] - doc: clarify experimental platform vulnerability policy (Matteo Collina) #5959166cdd00368] - doc: link toTypedArray.from()in signature (Aviv Keller) #592269f058ce7c0] - doc: fix typos inenvironment_variables.md(PhistucK) #595363cfec820e9] - doc: add security incident reponse plan (Rafael Gonzaga) #5947046aa3434e6] - doc: clarify maxRSS unit inprocess.resourceUsage()(Alex Yang) #59511adf98f600a] - doc: add missing Zstd strategy constants (RANDRIAMANANTENA Narindra Tiana Annaick) #59312f335989942] - doc: fix the version tls.DEFAULT_CIPHERS was added (Allon Murienik) #592477fa14fcf54] - doc: clarify glob's exclude option behavior (hotpineapple) #5924585b8d255c9] - doc: add RafaelGSS as performance strategic lead (Rafael Gonzaga) #5944516b1f7a602] - doc: add new environment variables doc page (Dario Piotrowicz) #59052b4a43ed83a] - doc: add missing environment variables to manpage (amir lavasani) #58963c923cfe898] - doc: fix links in test.md (Vas Sudanagunta) #58876a93a8b5eda] - doc: mark type stripping as release candidate (Marco Ippolito) #57705d302cb3bb2] - esm: add experimental support for addon modules (Chengzhong Wu) #55844d55c3e7f0b] - esm: link modules synchronously when no async loader hooks are used (Joyee Cheung) #595199e1fbb620f] - esm: show race error message for inner module job race (Joyee Cheung) #595198c4dcd5199] - esm: sync-ify module translation (Joyee Cheung) #5945371038932d3] - fs: fix wrong order of file names in cpSync error message (Nicholas Paun) #597755692dec451] - fs: fix dereference: false on cpSync (Nicholas Paun) #59681dafd561d37] - fs: fix return value of fs APIs (theanarkh) #58996da6e8cb75b] - http: unbreak keepAliveTimeoutBuffer (Robert Nagy) #59784673a48f0a2] - http: use cached '1.1' http version string (Robert Nagy) #597171dbad2058f] - (SEMVER-MINOR) http: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) #59315062e837d5f] - (SEMVER-MINOR) http2: add support for raw header arrays in h2Stream.respond() (Tim Perry) #594554d4fb51b89] - http2: report sent headers object in client stream dcs (Darshan Sen) #59419b8066611c3] - inspector: add http2 tracking support (Darshan Sen) #596119b2c013032] - inspector: prevent propagation of promise hooks to noPromise hooks (Shima Ryuhei) #58841a2329895e7] - lib: fix DOMException subclass support (Chengzhong Wu) #59680edb9248bdd] - lib: make domexception a native error (Chengzhong Wu) #58691ccf29cda19] - Revert "lib: optimize writable stream buffer clearing" (Yoo) #59743f291eda277] - lib: fix isReadable and isWritable return type value (Gabriel Quaresma) #5908910ae8684ea] - lib: revert to using default derived class constructors (René) #596505d3b80d62d] - lib: do not modify prototype deprecated asyncResource (encore) (Szymon Łągiewka) #595183c4541f878] - lib: simplify IPv6 checks in isLoopback() (Krishnadas) #593750b631bbffa] - lib: handle windows reserved device names on UNC (Rafael Gonzaga) #59286297f62ba1f] - meta: bumpcodecov/codecov-action(dependabot[bot]) #597263dcd8446b6] - meta: bump actions/download-artifact from 4.3.0 to 5.0.0 (dependabot[bot]) #59729d0d357f683] - meta: bump github/codeql-action from 3.29.2 to 3.30.0 (dependabot[bot]) #597282a0e264949] - meta: bump actions/cache from 4.2.3 to 4.2.4 (dependabot[bot]) #597270a013d1da1] - meta: bump actions/checkout from 4.2.2 to 5.0.0 (dependabot[bot]) #59725c690b53d24] - meta: update devcontainer to the latest schema (Aviv Keller) #5434761171c7756] - module: correctly detect top-level await in ambiguous contexts (Shima Ryuhei) #5864675bf3f4a87] - node-api: link to other programming language bindings (Chengzhong Wu) #595169a05107558] - node-api: clarify enum value ABI stability (Chengzhong Wu) #59085658c31d60c] - path: refactor path joining logic for clarity and performance (Lee Jiho) #597819cc89f55f7] - path,win: fix bug in resolve and normalize (Hüseyin Açacak) #5562324e825f8f5] - sea: implement sea.getAssetKeys() (Joyee Cheung) #59661c66af21e55] - sea: allow using inspector command line flags with SEA (Joyee Cheung) #595689b7dd40da8] - (SEMVER-MINOR) sea: implement execArgvExtension (Joyee Cheung) #5956048bfbd3dca] - (SEMVER-MINOR) sea: support execArgv in sea config (Joyee Cheung) #593145559456fe4] - sqlite: add sqlite-type symbol for DatabaseSync (Alex Yang) #594053478130da3] - sqlite: handle ?NNN parameters as positional (Edy Silva) #59350312bc4e5d1] - sqlite: avoid useless call to FromMaybe() (Tobias Nießen) #59490937e9bb1c6] - src: track BaseObjects with an efficient list (Chengzhong Wu) #55104be2a5e170d] - src: track async resources via pointers to stack-allocated handles (Anna Henningsen) #59704f232bf2c11] - src: fix build on NetBSD (Thomas Klausner) #59718e9a685bc3d] - src: fix race on process exit and off thread CA loading (Chengzhong Wu) #5963224428fc8fb] - src: add name for more threads (theanarkh) #59601fd7559f8c3] - src: remove JSONParser (Joyee Cheung) #596198c296bac99] - src: enforce assumptions in FIXED_ONE_BYTE_STRING (Tobias Nießen) #581551b4885a3f2] - src: use simdjson to parse --snapshot-config (Joyee Cheung) #594739f798de6b0] - src: fix order of CHECK_NOT_NULL/dereference (Tobias Nießen) #59487f764be27dc] - src: move shared_ptr objects in KeyObjectData (Tobias Nießen) #59472d30287fe12] - src: iterate metadata version entries with std::array (Chengzhong Wu) #57866b2bf620c7b] - src: internalizev8::ConvertableToTraceFormatin traces (Chengzhong Wu) #57866b3c507c8ef] - src: remove duplicate assignment ofO_EXCLin node_constants.cc (Daniel Osvaldo R) #5904920aec239d4] - src: add Intel CET properties to large_pages.S (tjuhaszrh) #593638e0f9cd061] - src: remove unused DSAKeyExportJob (Filip Skokan) #592910c2b6df94f] - src,sqlite: refactor value conversion (Edy Silva) #59659b95cfdf0e5] - stream: replace manual function validation with validateFunction (방진혁) #59529cf06e74076] - (SEMVER-MINOR) stream: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) #59464903ebd373a] - test: skip more sea tests on Linux ppc64le (Richard Lau) #59755e961060bb6] - test: fix internet/test-dns (Michaël Zasso) #59660c2b22f50a8] - test: mark test-inspector-network-fetch as flaky again (Joyee Cheung) #596404ae958e59b] - test: skip test-fs-cp* tests that are constantly failing on Windows (Joyee Cheung) #59637d5b0a64598] - test: deflake test-http-keep-alive-empty-line (Luigi Pinca) #59595eb311f1754] - test: use mustSucceed in test-repl-tab-complete-import (Sohyeon Kim) #593688e047e32be] - test: skip sea tests on Linux ppc64le (Richard Lau) #595634a250479d8] - test: rename test-net-server-drop-connections-in-cluster.js to -http- (Meghan Denny) #59532d22f113aaf] - test: lazy-load internalTTy (Pietro Marchini) #5951736dd856897] - test: fixtest-setproctitlestatus whenpsis not available (Antoine du Hamel) #59523fd02295da6] - test: update WPT for WebCryptoAPI toff26d9b(Node.js GitHub Bot) #59497cce938c5f9] - test: make test-debug-process locale-independent (BCD1me) #592545a8f03df9e] - test: mark test-wasi-pthread as flaky (Joyee Cheung) #5948894f6d6b969] - test: split test-wasi.js (Joyee Cheung) #59488162ac9393c] - test: use case-insensitive path checking on Windows in fs.cpSync tests (Joyee Cheung) #59475ce9d6776c9] - test: add missing hasPostData in test-inspector-emit-protocol-event (Shima Ryuhei) #59412717ea2866d] - test: refactor error checks to use assert.ifError/mustSucceed (Sohyeon Kim) #59424b1c3e4a17c] - test: fix typos (Lee Jiho) #593303f4bd94b1f] - test: skip test-watch-mode inspect when no inspector (James M Snell) #594408b7a8efe96] - test: exclude mock from coverage (Shima Ryuhei) #59348f39352b55c] - test: split test-fs-cp.js (Joyee Cheung) #59408fb4180e9f6] - test_runner: fix todo inheritance (Moshe Atlow) #5972176bf6b908d] - test_runner: set mock timer's interval undefined (hotpineapple) #594790a05d06fcc] - test_runner: do not error when gettingfullNameof root context (René) #593773fdfb187d6] - test_runner: fix isSkipped check in junit (Sungwon) #5941437c6f7d7d8] - test_runner: remove unused callee convertion (Alex Yang) #5922157c30093e3] - test_runner: clean up promisified interval generation (René) #5882488bf1bab91] - test_runner: correct "already mocked" error punctuation placement (Jacob Smith) #58840d3259d660a] - test_runner: preferAtomicsprimordials (Renegade334) #5871662bb80c17e] - (SEMVER-MINOR) test_runner: support object property mocking (Idan Goshen) #584384b19439dea] - tools: print appropriate output when test aborted (hotpineapple) #59794847963bbba] - tools: use sparse checkout inbuild-tarball.yml(Antoine du Hamel) #59788ef11d118a4] - tools: remove unused actions frombuild-tarball.yml(Antoine du Hamel) #59787daa0615967] - tools: do not attempt to compress tgz archive (Antoine du Hamel) #59785fdc85e5045] - tools: add v8windbg target (Chengzhong Wu) #5976725801b9009] - tools: improve error handling in node_mksnapshot (James M Snell) #5943792100a813f] - tools: add sccache totest-internetworkflow (Antoine du Hamel) #597205f0090af53] - tools: update gyp-next to 0.20.4 (Node.js GitHub Bot) #5969031ee7fc3e9] - tools: add script to make reviewing backport PRs easier (Antoine du Hamel) #5916145906b0d5c] - tools: update gyp-next to 0.20.3 (Node.js GitHub Bot) #596036197eeee9b] - tools: avoid parsing test files twice (Pietro Marchini) #59526027ae4f67e] - tools: fix return value of try_check_compiler (theanarkh) #5943477682b52a1] - tools: bump @eslint/plugin-kit from 0.3.3 to 0.3.4 in /tools/eslint (dependabot[bot]) #5927191fa83fffd] - tools: disable nullability-completeness warnings (Michaël Zasso) #59392079a68d392] - typings: add typing for 'uv' (방진혁) #59606b8927967d9] - typings: add missing properties in ConfigBinding (Lee Jiho) #595859b66ce5ef7] - typings: add missing URLBinding methods (성우현 | Woohyun Sung) #59468ba5b6597aa] - url: add err.input to ERR_INVALID_FILE_URL_PATH (Joyee Cheung) #59730f660943471] - util: fix numericSeparator with negative fractional numbers (sangwook) #59379aed1b883f1] - util: remove unnecessary template strings (btea) #5920191e9b8d135] - util: remove outdated TODO comment (haramjeong) #59760421ab3c294] - util: use getOptionValue('--no-deprecation') in deprecated() (haramjeong) #597607864ad13bb] - util: hide duplicated stack frames when using util.inspect (Ruben Bridgewater) #59447a2d2003daa] - util: fix error's namespaced node_modules highlighting using inspect (Ruben Bridgewater) #59446f64d0def94] - util: add some additional error classes towellKnownPrototypes(Mark S. Miller) #594569807ffd6a0] - vm: expose import attributes on SourceTextModule.moduleRequests (Chengzhong Wu) #58829f334e2d539] - wasi: fixcleantarget intest/wasi/Makefile(Antoine du Hamel) #595769e2aa23be9] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428c5a93a3355] - worker: fix worker name with \0 (theanarkh) #59214a5ed96bb97] - worker: add worker name to report (theanarkh) #5893598cd7e27d4] - worker: add name for worker (theanarkh) #59213v22.19.0: 2025-08-28, Version 22.19.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
8e2076a24f] - (SEMVER-MINOR) cli: addNODE_USE_SYSTEM_CA=1(Joyee Cheung) #59276e592d739c2] - (SEMVER-MINOR) cli: support${pid}placeholder in--cpu-prof-name(Haram Jeong) #59072cda1dab6e2] - (SEMVER-MINOR) crypto: addtls.setDefaultCACertificates()(Joyee Cheung) #588221f184513e9] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #58440bace73a173] - doc: update the instruction on how to verify releases (Antoine du Hamel) #59113fa9a9e9c69] - (SEMVER-MINOR) esm: unflag--experimental-wasm-modules(Guy Bedford) #57038390a9dc20b] - (SEMVER-MINOR) http: addserver.keepAliveTimeoutBufferoption (Haram Jeong) #59243c12c5343ad] - lib: docs deprecate_http_*(Sebastian Beltran) #59293f57ee3d71f] - (SEMVER-MINOR) net: updatenet.blocklistto allow file save and file management (alphaleadership) #58087035da74c31] - (SEMVER-MINOR) process: addthreadCpuUsage(Paolo Insogna) #564678e697d1884] - (SEMVER-MINOR) zlib: add dictionary support tozstdCompressandzstdDecompress(lluisemper) #59240Commits
73aa0ae37f] - assert: change utils to use index instead of for...of (방진혁) #59278dfe3a11eed] - benchmark: remove deprecated _extend from benchmark (Rafael Gonzaga) #592289b9d30042a] - benchmark: add fs warmup to writefile-promises (Bruno Rodrigues) #59215a663f7f954] - benchmark: add calibrate-n script (Rafael Gonzaga) #591861b9b5bddd6] - benchmark: adjust configuration for string-decoder bench (Rafael Gonzaga) #59187d0ac3319f9] - benchmark: add --track to benchmark (Rafael Gonzaga) #591742044968b86] - benchmark: small lint fix on _cli.js (Rafael Gonzaga) #591724e519934cb] - benchmark: drop misc/punycode benchmark (Rafael Gonzaga) #5917107e173d969] - benchmark: fix sqlite-is-transaction (Rafael Gonzaga) #591708440b6177f] - benchmark: reduce N for diagnostics_channel subscribe benchmark (Arthur Angelo) #591168615ea6db0] - buffer: cache Environment::GetCurrent to avoid repeated calls (Mert Can Altin) #590433deb5361d2] - build: fix node_use_sqlite for GN builds (Shelley Vohr) #590170f0ce63116] - build: remove suppressions.supp (Rafael Gonzaga) #59079b30a2117dc] - build,deps,tools: prepare to update to OpenSSL 3.5 (Richard Lau) #581008e2076a24f] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276e592d739c2] - (SEMVER-MINOR) cli: support${pid}placeholder in --cpu-prof-name (Haram Jeong) #59072b5571047ed] - crypto: prepare webcrypto key import/export for modern algorithms (Filip Skokan) #59284cda1dab6e2] - (SEMVER-MINOR) crypto: add tls.setDefaultCACertificates() (Joyee Cheung) #5882276dab34fb7] - deps: support madvise(3C) across ALL illumos revisions (Dan McDonald) #5823719d3ed64b6] - deps: update sqlite to 3.50.4 (Node.js GitHub Bot) #5933738bafc59e0] - deps: V8: backport493cb53(Chengzhong Wu) #59238e8da171cc3] - deps: update sqlite to 3.50.3 (Node.js GitHub Bot) #59132fd4ba38ab6] - deps: update googletest to7e17b15(Node.js GitHub Bot) #59131f71f427b95] - deps: update archs files for openssl-3.0.17 (Node.js GitHub Bot) #5913479c5a8f4d2] - deps: upgrade openssl sources to openssl-3.0.17 (Node.js GitHub Bot) #591340dcc84cf53] - deps: update corepack to 0.34.0 (Node.js GitHub Bot) #591331f184513e9] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #58440f64f5df80e] - doc: fix--use-system-cahistory (Joyee Cheung) #59411e22aeaa38f] - doc: add missing section forsetReturnArraysinsqlite.md(Edy Silva) #59074e44ef07235] - doc: rename x509.extKeyUsage to x509.keyUsage (Filip Skokan) #593322c5d0aac5e] - doc: fix Pbkdf2Params hash attribute heading (Filip Skokan) #59395fde94346e5] - doc: fix missing reference links for server.keepAliveTimeoutBuffer (Lee Jiho) #593569af8bcea58] - doc: fix grammar in global dispatcher usage (Eng Zer Jun) #593440edf17198f] - doc: run license-builder (github-actions[bot]) #593437f767a2e38] - doc: correct orthographyeg.→e.g.(Jacob Smith) #59329a46ed50350] - doc: clarify the need of compiler compatible with c++20 (Rafael Gonzaga) #59297212263a305] - doc: clarify release candidate stability index (Filip Skokan) #59295ce93b8b556] - doc: add WDYT to glossary (btea) #59280ebaaf2c67f] - doc: add manpage entry for --use-system-ca (Joyee Cheung) #5927343b5a21916] - doc: add path.join and path.normalize clarification (Rafael Gonzaga) #59262409c66d328] - doc: fix typo intest/common/README.md(Yoo) #59180cbb0a8eb13] - doc: add note on process memoryUsage (fengmk2) #590269892b15d81] - doc: format safely fordoc-kit(Aviv Keller) #59229bace73a173] - doc: update the instruction on how to verify releases (Antoine du Hamel) #59113b549deac02] - doc: copyedit SECURITY.md (Rich Trott) #59190ef1bc3f344] - doc: fix broken sentence inURL.parse(Superchupu) #591643c6639e8ec] - doc: improve onboarding instructions (Joyee Cheung) #591596ffaac66bc] - doc: add constraints for mem leak to threat model (Rafael Gonzaga) #58917e419d20144] - doc: add Aditi-1400 to collaborators (Aditi Singh) #59157ba380f7bf3] - doc: avoid suggesting testing fast api with intense loop (Chengzhong Wu) #59111fa1a532f2b] - doc: fix typo in writing-test.md (SeokHun) #591230b93ca3d19] - doc: add RafaelGSS as steward July 25 (Rafael Gonzaga) #590787d747aeac8] - doc: clarify ERR_FS_FILE_TOO_LARGE to reflect fs.readFile() I/O limit (Haram Jeong) #590500b5613f9fe] - doc: run license-builder (github-actions[bot]) #590561b6b5e72d3] - doc: fix typed list formatting (Aviv Keller) #59019756c7dd639] - doc: refineutil.parseArgsdefaultdefinition (Slayer95) #589580b840523a2] - doc: remove unused import inzlib.md(coderaiser) #590413e9ed4b080] - doc: add stability index to the--watch-kill-signalflag (Dario Piotrowicz) #58997cb08a5d43f] - doc: add missing<code>blocks (Antoine du Hamel) #589954a42360fe5] - doc: add scroll margin to links (Roman Reiss) #589829d073f32da] - doc: add sponsorship link to RafaelGSS (Rafael Gonzaga) #589833cc11fc9ac] - domain: remove deprecated API call (Alex Yang) #59339fa9a9e9c69] - (SEMVER-MINOR) esm: unflag --experimental-wasm-modules (Guy Bedford) #57038177ed3b3dd] - esm: js-string Wasm builtins in ESM Integration (Guy Bedford) #590204619fe0e04] - fs: fix glob TypeError on restricted dirs (Sylphy-0xd3ac) #58674ad2089e32d] - fs: correct error message when FileHandle is transferred (Alex Yang) #59156390a9dc20b] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243659002359d] - http2: set Http2Stream#sentHeaders for raw headers (Darshan Sen) #59244d02831ef73] - inspector: initial support for Network.loadNetworkResource (Shima Ryuhei) #58077264a838779] - lib: add trace-sigint APIs (theanarkh) #59040d22d2fa6d4] - lib: optimize writable stream buffer clearing (Yoo) #59406a5e9759409] - lib: do not modify prototype deprecated asyncResource (RafaelGSS) #591959254257fc0] - lib: restructure assert to become a class (Miguel Marcondes Filho) #58253946eab8d77] - lib: handle superscript variants on windows device (Rafael Gonzaga) #59261cd857a97b5] - lib: use validateString (hotpineapple) #59296c12c5343ad] - lib: docs deprecate _http_* (Sebastian Beltran) #59293a28e5f0938] - lib: add type names in source mapped stack traces (Chengzhong Wu) #589766aec5aee7c] - lib: prefer AsyncIteratorPrototype primordial (René) #59097e704349858] - lib: fix incorrectArrayBufferPrototypeGetDetachedprimordial type (Dario Piotrowicz) #589782fc25fd400] - lib: flag to conditionally modify proto on deprecate (Rafael Gonzaga) #58928446ee98e00] - meta: clarify pr objection process further (James M Snell) #5909646c339e4f3] - meta: add mailmap entry for aditi-1400 (Aditi) #5931670a586261f] - meta: add tsc and build team as codeowners building.md (Rafael Gonzaga) #59298e666e06781] - meta: add nodejs/path to path files (Rafael Gonzaga) #59289251b65dd6c] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #59140c8a7964da8] - meta: add marco-ippolito to security release stewards (Marco Ippolito) #589440eec5cc492] - module: fix conditions override in synchronous resolve hooks (Joyee Cheung) #590114acf7cd6d3] - module: throw error when re-runing errored module jobs (Joyee Cheung) #58957f57ee3d71f] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #580874aefcfc318] - node-api: reword "implementation in an alternative VM" as implementable (Chengzhong Wu) #59036ff6be2ed5d] - node-api,doc: update links to ecma262 with section names (Chengzhong Wu) #590878d60602677] - perf_hooks: do not expose SafeMap via Histogram wrapper (René) #59094035da74c31] - (SEMVER-MINOR) process: add threadCpuUsage (Paolo Insogna) #5646774e1aa4d06] - process: make execve's args argument optional (Allon Murienik) #584123366e60bd9] - src: use simdjson to parse SEA configuration (Joyee Cheung) #5932363cc06977a] - src: mark realm leaf classes final (Anna Henningsen) #59355133d410cd9] - src: use C++20contains()method (iknoom) #5930457fe96fe49] - src: added CHECK_NOT_NULL check for multiple eq_wrap_async (F3lixTheCat) #59267a8f381a6c5] - src: add nullptr checks inStreamPipe::New(Burkov Egor) #576130769e5a0dc] - src: call unmask after install signal handler (theanarkh) #590591e7639e9e1] - src: useFastStringKeyforTrackV8FastApiCall(Anna Henningsen) #591489075a1a4bf] - src: use C++20constevalforFastStringKey(Anna Henningsen) #591485a0fd5689b] - src: remove declarations of removed BaseObject static fns (Anna Henningsen) #59093c637a2c41d] - src: add cache to nearest parent package json (Ilyas Shabi) #590863375a6cfee] - test: deflake sequential/test-tls-session-timeout (Joyee Cheung) #59423438cb11a15] - test: update WPT resources,WebCryptoAPI,webstorage (Filip Skokan) #5931168bec19f76] - test: add known issue test for fs.cpSync dereference bug (James M Snell) #58941a100cce379] - test: deflake stream-readable-to-web test (Ethan Arrowood) #58948b7577d853b] - test: make test-inspector-network-resource sequential (Shima Ryuhei) #59104667ee82443] - test: don't use expose internals in test-http-outgoing-buffer.js (Meghan Denny) #59219feec26d3bb] - test: use mustSucceed in test-fs-read (Sungwon) #59204d7e23769ab] - test: prepare test-crypto-rsa-dsa for newer OpenSSL (Richard Lau) #581003a9aca91c6] - test: fix flaky test-worker-message-port-transfer-filehandle test (Alex Yang) #591583aee7625b9] - test: expand linting rules aroundassertw literal messages (Anna Henningsen) #59147667c2ced38] - test: update WPT for WebCryptoAPI toab08796(Node.js GitHub Bot) #5912989ac344393] - test: update WPT for WebCryptoAPI to19d82c5(Node.js GitHub Bot) #59129d332957ac6] - test: skip tests that cause timeouts on IBM i (Abdirahim Musse) #59014a23562ff72] - test: updatestartCLIto set--port=0by default (Dario Piotrowicz) #590424a12f5d83b] - test: mark test-inspector-network-fetch as flaky on Windows (Joyee Cheung) #59091ac4f7aa69c] - test: add missing port=0 arg in test-debugger-extract-function-name (Dario Piotrowicz) #589778dd09267e3] - test,crypto: skip unsupported ciphers (Shelley Vohr) #5938845200b43ea] - tools: update coverage GitHub Actions to fixed version (Rich Trott) #595128f2b8b3dc4] - tools: allow selecting test subsystems with numbers in their names (Darshan Sen) #59242f9bc2573dd] - tools: clarify README linter error message (Joyee Cheung) #59160cba0de128d] - tools: add support for URLs to PR commits inmerge.sh(Antoine du Hamel) #59162039949ef5b] - tools: bump @eslint/plugin-kit from 0.3.1 to 0.3.3 in /tools/eslint (dependabot[bot]) #591196a8a73aa35] - tools: ignore CVE mention when linting release proposals (Antoine du Hamel) #59037d0f40f3a3a] - tools,test: enforce best practices to detect never settling promises (Antoine du Hamel) #589929d801a3f00] - typings: improve internal binding types (Nam Yooseong) #593516dbda6cb25] - typings: improve internal binding types (Michaël Zasso) #59176e22dddf859] - util: respect nested formats in styleText (Alex Yang) #59098491f390515] - worker: add cpuUsage for worker (theanarkh) #591778e697d1884] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240v22.18.0: 2025-07-31, Version 22.18.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
Type stripping is enabled by default
Node.js will be able to execute TypeScript files without additional configuration:
There are some limitations in the supported syntax documented at
https://nodejs.org/api/typescript.html#type-stripping.
This feature is experimental and is subject to change. Disable it by passing
--no-experimental-strip-typesCLI flag.Contributed by Marco Ippolito in #56350.
Other notable changes
26f3711228] - (SEMVER-MINOR) deps: update amaro to 1.1.0 (Node.js GitHub Bot) #56350d80ef2a71f] - (SEMVER-MINOR) doc: add all watch-mode related flags to node.1 (Dario Piotrowicz) #587198ab24d21c9] - doc: add islandryu to collaborators (Shima Ryuhei) #58714430e66b9b8] - (SEMVER-MINOR) esm: implementimport.meta.main(Joe) #5780462f7926b6a] - (SEMVER-MINOR) fs: allow correct handling of burst in fs-events with AsyncIterator (Philipp Dunkel) #5849065f19a00c3] - (SEMVER-MINOR) permission: propagate permission model flags on spawn (Rafael Gonzaga) #58853ccca1517f9] - (SEMVER-MINOR) sqlite: add support forreadBigIntsoption in db connection level (Miguel Marcondes Filho) #5869748003e87e8] - (SEMVER-MINOR) src,permission: add support topermission.has(addon)(Rafael Gonzaga) #58951fe4290a0e6] - (SEMVER-MINOR) url: addfileURLToPathBufferAPI (James M Snell) #587004dc6b4c67a] - (SEMVER-MINOR) watch: add--watch-kill-signalflag (Dario Piotrowicz) #587198dbc6b210f] - (SEMVER-MINOR) worker: makeWorkerasync disposable (James M Snell) #58385Commits
b19ffebea7] - assert: remove dead code (Yoshiya Hinosawa) #587605bc828beae] - benchmark: add source map and source map cache (Miguel Marcondes Filho) #58125f7c16985a7] - build: disable v8_enable_pointer_compression_shared_cage on non-64bit (Shelley Vohr) #58867ba42c72f7f] - build: option to use custom inspector_protocol path (Shelley Vohr) #588394fd8911653] - build: fix typo 'Stoage' to 'Storage' in help text (ganglike) #58777114cd95919] - crypto: fix inclusion of OPENSSL_IS_BORINGSSL define (Shelley Vohr) #588456699c75eac] - crypto: fix SHAKE128/256 breaking change introduced with OpenSSL 3.4 (Filip Skokan) #58942f99aa748c0] - deps: upgrade npm to 10.9.3 (npm team) #5884702e971190b] - deps: update sqlite to 3.50.2 (Node.js GitHub Bot) #58882de2b85b5ae] - deps: update googletest to35b75a2(Node.js GitHub Bot) #58710e7591d7a19] - deps: update minimatch to 10.0.3 (Node.js GitHub Bot) #587128c61b96c43] - deps: update acorn to 8.15.0 (Node.js GitHub Bot) #58711113f4e2d3c] - deps: update sqlite to 3.50.1 (Node.js GitHub Bot) #586307ccd848995] - deps: update simdjson to 3.13.0 (Node.js GitHub Bot) #58629e9c51deb5c] - deps: update zlib to 1.3.1-470d3a2 (Node.js GitHub Bot) #5862826f3711228] - (SEMVER-MINOR) deps: update amaro to 1.1.0 (Node.js GitHub Bot) #56350752dde182f] - (SEMVER-MINOR) deps: update amaro to 1.0.0 (Node.js GitHub Bot) #56350258534d0dc] - (SEMVER-MINOR) deps: update amaro to 0.5.3 (Node.js GitHub Bot) #563507fcf675503] - (SEMVER-MINOR) deps: update amaro to 0.5.2 (Node.js GitHub Bot) #5635081a10a67d5] - (SEMVER-MINOR) deps: update amaro to 0.5.1 (Marco Ippolito) #5635025f8682a62] - (SEMVER-MINOR) deps: update amaro to 0.5.0 (nodejs-github-bot) #563504baf2167e7] - dns: fix parse memory leaky (theanarkh) #58973e8f4a7df22] - dns: set timeout to 1000ms when timeout < 0 (theanarkh) #584411e373a0a25] - doc: update release key for aduh95 (Antoine du Hamel) #58877d5c104246f] - doc: remove broken link to permission model source code (Juan José) #58972b8885a25ff] - doc: clarify details of TSC public and private meetings (James M Snell) #58925aa05823b37] - doc: mark stability markers consistent inglobals.md(Antoine du Hamel) #589323856aee9b2] - doc: move "Core Promise APIs" to "Completed initiatives" (Antoine du Hamel) #58934c2f9735422] - doc: fixfetchsubsections inglobals.md(Antoine du Hamel) #589335f4c7a9d2d] - doc: add missingClass:mentions (Antoine du Hamel) #5893188ee38b37c] - doc: remove myself from security steward rotation (Michael Dawson) #5892702031a9b0d] - doc: add ovflowd back to core collaborators (Claudio W.) #589119551fa3c8f] - doc: update email address for Richard Lau (Richard Lau) #58910cd6bc982c0] - doc: update vm doc links (Chengzhong Wu) #58885ce49303cd0] - doc: add missing comma inchild_process.md(ronijames008) #58862d80ef2a71f] - (SEMVER-MINOR) doc: add all watch-mode related flags to node.1 (Dario Piotrowicz) #58719f8fcb1c83a] - doc: fix jsdoc definition of assert.ifError() fn in lib/assert.js (jesh) #5857328fddc04ca] - doc: add array type in http request headers (Michael Henrique) #580498bd698b688] - doc: add missing colon to headers inglobals.md(Aviv Keller) #58825fa5818e3c1] - doc: fixstream.mdsection order (Antoine du Hamel) #588112384bfdcbd] - doc: fix stability 1.x links excluding the decimal digit (Dario Piotrowicz) #587834e9fe670c9] - doc: fix wrong RFC number in http2 (Deokjin Kim) #58753bbe4ad7351] - doc: add history entry for TS support in hooks (Antoine du Hamel) #58732ec60473ab1] - doc: run license-builder (github-actions[bot]) #587228ab24d21c9] - doc: add islandryu to collaborators (Shima Ryuhei) #587148c641105cd] - doc: punctuation fix for Node-API versioning clarification (Jiacai Liu) #58599133b10a0bb] - doc: add path rules and validation for export targets in package.json (0hm☘️) #58604354a68c460] - doc: add history entries to--input-typesection (Antoine du Hamel) #56350430e66b9b8] - (SEMVER-MINOR) esm: implement import.meta.main (Joe) #5780442c4ca6024] - esm: syncify default path ofModuleLoader.load(Jacob Smith) #574193ac8c686a3] - esm: unwrap WebAssembly.Global on Wasm Namespaces (Guy Bedford) #57525c7ebf2e245] - fs: close dir before throwing ifoptions.bufferSizeis invalid (Livia Medeiros) #5885638ffed8744] - fs: special input-1onchown,lchownandfchown(Alex Yang) #588360e82f72a46] - fs: throwERR_INVALID_THISon illegal invocations (Livia Medeiros) #58848141b2b1954] - fs: makeDirdisposers idempotent (René) #58692dedd9d1961] - fs: avoid computing time coefficient constants in runtime (Livia Medeiros) #58728a029a06b49] - fs: add UV_ENOSPC to list of things to pass to err directly (Jacky Zhao) #5691862f7926b6a] - (SEMVER-MINOR) fs: allow correct handling of burst in fs-events with AsyncIterator (Philipp Dunkel) #58490927d2e77f3] - http: fix keep-alive not timing out after post-request empty line (Shima Ryuhei) #581785cd8145612] - http2: add diagnostics channel 'http2.server.stream.close' (Darshan Sen) #586020f2b31cba4] - inspector: add protocol methods retrieving sent/received data (Chengzhong Wu) #5864579428d8946] - lib: fixgetTypeScriptParsingModejsdoc (沈鸿飞) #586812c205d857c] - lib: renamevalidateInternalFieldintovalidateThisInternalField(LiviaMedeiros) #58765f67e927a5f] - lib: makevalidateInternalField()throwERR_INVALID_THIS(LiviaMedeiros) #58765914701d4f8] - lib,src: support DOMException ser-des (Chengzhong Wu) #5864912a75dca8b] - meta: bump step-security/harden-runner from 2.12.0 to 2.12.2 (dependabot[bot]) #589230d56fec6f0] - meta: bump github/codeql-action from 3.28.18 to 3.29.2 (dependabot[bot]) #589227f4f6e0409] - meta: add IlyasShabi to collaborators (Ilyas Shabi) #5891650b62c9663] - meta: add @nodejs/inspector as codeowner (Chengzhong Wu) #587902fc89892ab] - module: fix typescript import.meta.main (Marco Ippolito) #58661bfc68c8ae8] - module: convert schema-only core module onconvertCJSFilenameToURL(Alex Yang) #5861254634f5e53] - module: update tests for combined ambiguous module syntax error (Mert Can Altin) #5587410eb3db4af] - module: allow cycles in require() in the CJS handling in ESM loader (Joyee Cheung) #58598fe7994eb0c] - module: improve typescript error message format (Marco Ippolito) #56350c898491017] - (SEMVER-MINOR) module: remove experimental warning from type stripping (Marco Ippolito) #56350c07745a436] - module: refactor commonjs typescript loader (Marco Ippolito) #563508d1f5df313] - (SEMVER-MINOR) module: unflag --experimental-strip-types (Marco Ippolito) #56350a8a1c9a960] - os: fix GetInterfaceAddresses memory lieaky (theanarkh) #5894065f19a00c3] - (SEMVER-MINOR) permission: propagate permission model flags on spawn (Rafael Gonzaga) #58853f0a165d89f] - repl: fix eval errors thrown after close throwingERR_USE_AFTER_CLOSE(Dario Piotrowicz) #587919ef1cd1607] - repl: avoid deprecatedrequire.extensionsin tab completion (baki gul) #5865322a4c60e08] - repl: fix tab completion not working with computer string properties (Dario Piotrowicz) #58709ccca1517f9] - (SEMVER-MINOR) sqlite: add support for readBigInts option in db connection level (Miguel Marcondes Filho) #58697690525881e] - src: simplify adding fast APIs to ExternalReferenceRegistry (René) #58896a381b4d990] - src: remove fast API for InternalModuleStat (Joyee Cheung) #58489390654e996] - src: fix internalModuleStat v8 fast path (Yagiz Nizipli) #58054b722647572] - src: fix -Wunreachable-code in src/node_api.cc (Shelley Vohr) #589016d1fe67f56] - src: -Wunreachable-code error in crypto_context.cc (Shelley Vohr) #589012d8e65c6db] - src: fix -Wunreachable-code-return in src/node_contextify.cc (Shelley Vohr) #58901e07adb3b18] - src: cleanup uv_fs_req before uv_fs_stat on existSync (RafaelGSS) #589156b30c0a511] - src: -Wmismatched-new-delete in debug_utils.cc (Shelley Vohr) #5884474ef07f2e7] - src: add FromV8Value<T>() for integral and enum types (Aditi) #5793128bf6ed87d] - src: pass resource on permission checks for spawn (Rafael Gonzaga) #58758daf65d479b] - src: replace std::array with static arrays in contextify (Mert Can Altin) #585809cb671fdb1] - src: add new CopyUtimes function to reduce code duplication (Dario Piotrowicz) #58625e515eb861c] - src: replace V8 Fast API todo comment with note comment (Dario Piotrowicz) #5861448003e87e8] - (SEMVER-MINOR) src,permission: add support to permission.has(addon) (Rafael Gonzaga) #5895172f75bb976] - src,permission: enhance permission model debug (Rafael Gonzaga) #5889866fccc252b] - (SEMVER-MINOR) test: add test for async disposable worker thread (James M Snell) #5838543d2ad8599] - test: deflake test-runner-watch-mode-kill-signal (Dario Piotrowicz) #589527c54085698] - test: add known issue tests for recursive readdir calls with Buffer path (Dario Piotrowicz) #58893cd2a5d9a51] - test: add known issue tests for fs.cp (James M Snell) #5888326072a7953] - test: add tests to ensure that node.1 is kept in sync with cli.md (Dario Piotrowicz) #588783fd187f559] - test: replace.filter()[0]with.find()(Livia Medeiros) #588720d538abb15] - test: remove reliance on in-treedeps/undici(Richard Lau) #58866e24dede403] - test: close dirs infs-opendirtest (Livia Medeiros) #58855ac6b8222e6] - test: correct SIMD support comment (Richard Lau) #587679d3e451181] - test: add tests for REPL custom evals (Dario Piotrowicz) #5785017a3246718] - test: reduce the use of private symbols in test-events-once.js (Yoshiya Hinosawa) #58685bbf33efcd0] - test: usecommon.skipIfInspectorDisabled()to skip tests (Dario Piotrowicz) #58675d6660baff7] - test: update WPT for dom/abort todc92816(Node.js GitHub Bot) #586446d9d5deb44] - test: split indirect eval import tests (Chengzhong Wu) #58637abd5b5fd20] - test: deflake async-hooks/test-improper-order on AIX (Baki Gul) #585673fc630e7cf] - test: close FileHandle objects in tests explicitly (James M Snell) #586157f0560dc4b] - test: skip broken sea on rhel8 (Marco Ippolito) #58914898e68a915] - test: save the config file in a temporary directory (Luigi Pinca) #587999f2132a4f6] - test: deflake test-config-file (Luigi Pinca) #58799f1b74cff9a] - test: skip tests failing when run under root (Livia Medeiros) #586104b0ee14a97] - tools: bump the eslint group in /tools/eslint with 6 updates (dependabot[bot]) #58921a84935fb0e] - tools: update inspector_protocol to69d69dd(Shelley Vohr) #58900af805186cd] - tools: update gyp-next to 0.20.2 (Node.js GitHub Bot) #58788a2d2d36bb1] - tools: make nodedownload module compatible with Python 3.14 (Lumír 'Frenzy' Balhar) #58752cc8b9aa43d] - tools: include toolchain.gypi in abseil.gyp (Chengzhong Wu) #58678fbbf49a7d3] - tools: bumpbrace-expansionin/tools/clang-format(dependabot[bot]) #586998db92a41c5] - tools: bump brace-expansion from 1.1.11 to 1.1.12 in /tools/eslint (dependabot[bot]) #586983a099cf88f] - tools: switch to@stylistic/eslint-plugin(Michaël Zasso) #586239798511e7c] - tools: remove config.status undermake distclean(René) #58603011290a4eb] - tools: edit commit-queue workflow file (Antoine du Hamel) #58667a7406f56da] - tools: improve release proposal linter (Antoine du Hamel) #58647c855310f83] - tools,doc: move more MDN links to types (Antoine du Hamel) #58930805239c824] - typings: add Atomics primordials (Renegade334) #58577d28b2aa0a2] - typings: add ZSTD_COMPRESS, ZSTD_DECOMPRESS to internalBinding (Meghan Denny) #58655fe4290a0e6] - (SEMVER-MINOR) url: add fileURLToPathBuffer API (James M Snell) #58700db648b92c1] - util: inspect: do not crash on an Error stack pointing to itself (Sam Verschueren) #58196791ecfac14] - v8: fix missing callback in heap utils destroy (Ruben Bridgewater) #588464dc6b4c67a] - (SEMVER-MINOR) watch: add--watch-kill-signalflag (Dario Piotrowicz) #587198dbc6b210f] - (SEMVER-MINOR) worker: make Worker async disposable (James M Snell) #58385v22.17.1: 2025-07-15, Version 22.17.1 'Jod' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Commits
8cf5d66ab7] - (CVE-2025-27210) lib: handle all windows reserved driver name (RafaelGSS) nodejs-private/node-private#7219c0cb487ec] - win,build: fix MSVS v17.14 compilation issue (StefanStojanovic) #58902v22.17.0: 2025-06-24, Version 22.17.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
⚠️ Deprecations
Instantiating
node:httpclasses withoutnewConstructing classes like
IncomingMessageorServerResponsewithout thenewkeyword is now discouraged. This clarifies API expectations and aligns with standard
JavaScript behavior. It may warn or error in future versions.
Contributed by Yagiz Nizipli in #58518.
options.shell = ""innode:child_processUsing an empty string for
shellpreviously had undefined behavior. This changeencourages explicit choices (e.g.,
shell: trueor a shell path) and avoidsrelying on implementation quirks.
Contributed by Antoine du Hamel and Renegade334 #58564.
HTTP/2 priority signaling
The HTTP/2 prioritization API (e.g.,
stream.priority) is now deprecated due topoor real-world support. Applications should avoid using priority hints and expect future removal.
Contributed by Matteo Collina and Antoine du Hamel #58313.
✅ Features graduated to stable
assert.partialDeepStrictEqual()This method compares only a subset of properties in deep object comparisons,
useful for flexible test assertions. Its stabilization means it's now safe for
general use and won't change unexpectedly in future releases.
Contributed by Ruben Bridgewater in #57370.
Miscellaneous
dirent.parentPathfilehandle.readableWebStream()fs.glob()fs.openAsBlob()node:readline/promisesport.hasRef()readable.compose()readable.iterator()readable.readableAbortedreadable.readableDidReadDuplex.fromWeb()Duplex.toWeb()Readable.fromWeb()Readable.isDisturbed()Readable.toWeb()stream.isErrored()stream.isReadable()URL.createObjectURL()URL.revokeObjectURL()v8.setHeapSnapshotNearHeapLimit()Writable.fromWeb()Writable.toWeb()writable.writableAbortedERR_INPUT_TYPE_NOT_ALLOWEDERR_UNKNOWN_FILE_EXTENSIONERR_UNKNOWN_MODULE_FORMATERR_USE_AFTER_CLOSEContributed by James M Snell in
#57513 and
#58541.
Semver-minor features
🔧
fs.FileHandle.readableWebStreamgetsautoCloseoptionThis gives developers explicit control over whether the file descriptor should
be closed when the stream ends. Helps avoid subtle resource leaks.
Contributed by James M Snell in #58548.
🔧
fs.Dirnow supports explicit resource managementThis improves ergonomics around async iteration of directories. Developers can
now manually control when a directory is closed using
.close()or withSymbol.asyncDispose.Contributed by Antoine du Hamel in #58206.
📊
http2gains diagnostics channel:http2.server.stream.finishAdds observability support for when a stream finishes. Useful for logging,
monitoring, and debugging HTTP/2 behavior without patching internals.
Contributed by Darshan Sen in #58560.
🔐 Permissions: implicit allow-fs-read to entrypoint
Node.js permissions model now allows read access to the entry file by default.
It makes running permission-restricted apps smoother while preserving security.
Contributed by Rafael Gonzaga in #58579.
🎨
util.styleText()adds'none'styleThis lets developers remove styling cleanly without hacks. Useful for overriding
inherited terminal styles when composing styled strings.
Contributed by James M Snell in #58437.
🧑💻 Community updates
0105c13556] - doc: add Filip Skokan to TSC (Rafael Gonzaga) #584993b857735ef] - doc: add JonasBa to collaborators (Jonas Badalic) #58355fdf7612735] - doc: add puskin to collaborators (Giovanni Bucci) #58308Commits
ffe7e1ace0] - (SEMVER-MINOR) assert: mark partialDeepStrictEqual() as stable (Ruben Bridgewater) #57370269931f289] - async_hooks: ensure AsyncLocalStore instances work isolated (Gerhard Stöbich) #581499e0746a4ff] - benchmark: fix broken fs.cpSync benchmark (Dario Piotrowicz) #58472dee8cb5bcb] - benchmark: add more options to cp-sync (Sonny) #58278e840fd5b85] - benchmark: fix typo in method name for error-stack (Miguel Marcondes Filho) #58128b9a16e97e0] - buffer: give names toBuffer.prototype.*Write()functions (Livia Medeiros) #58258d56a5e40af] - buffer: use constexpr where possible (Yagiz Nizipli) #58141215587feca] - build: add support for OpenHarmony operating system (hqzing) #583509bcef6821c] - build: fix uvwasi pkgname (Antoine du Hamel) #582707c3883c2ae] - build: search for libnode.so in multiple places (Jan Staněk) #582133f954accb3] - build: fix pointer compression builds (Joyee Cheung) #5817104c8f59f84] - build: use FILE_OFFSET_BITS=64 esp. on 32-bit arch (RafaelGSS) #580908c2cf3a372] - build: use //third_party/simdutf by default in GN (Shelley Vohr) #58115cff8006792] - child_process: give names toChildProcessfunctions (Livia Medeiros) #583706816d779b6] - child_process: give names to promisifiedexec()andexecFile()(LiviaMedeiros) #579165572cecca4] - crypto: expose crypto.constants.OPENSSL_IS_BORINGSSL (Shelley Vohr) #58387d6aa02889c] - deps: use proper C standard when building libuv (Yaksh Bariya) #58587375a6413d5] - deps: update simdjson to 3.12.3 (Node.js GitHub Bot) #57682e0cd138e52] - deps: update googletest toe9092b1(Node.js GitHub Bot) #5856531e592631f] - deps: update corepack to 0.33.0 (Node.js GitHub Bot) #58566386c24260b] - deps: update sqlite to 3.50.0 (Node.js GitHub Bot) #58272f84998d40b] - deps: update OpenSSL gen container to Ubuntu 22.04 (Michaël Zasso) #58432d49fd29859] - deps: update llhttp to 9.3.0 (Fedor Indutny) #58144e397980a1a] - deps: update libuv to 1.51.0 (Node.js GitHub Bot) #58124a28c33645c] - dns: fix dns query cache implementation (Ethan Arrowood) #584046939b0c624] - doc: fix the order ofprocess.mdsections (Allon Murienik) #584031ca253c363] - doc: add support link for panva (Filip Skokan) #585918319edbcf6] - doc: update metadata for _transformState deprecation (James M Snell) #58530697d258136] - doc: deprecate passing an empty string tooptions.shell(Antoine du Hamel) #58564132fc804e8] - doc: correct formatting of example definitions for--test-shard(Jacob Smith) #585717d0df646f6] - doc: clarify DEP0194 scope (Antoine du Hamel) #585041e6d7da0ce] - doc: deprecate HTTP/2 priority signaling (Matteo Collina) #583135a917bc1d0] - doc: explain child_process code and signal null values everywhere (Darshan Sen) #584790105c13556] - doc: add Filip Skokan to TSC (Rafael Gonzaga) #584992bdc87cd64] - doc: updategit node releaseexample (Antoine du Hamel) #5847528f9b43186] - doc: add missing options.info for ZstdOptions (Jimmy Leung) #58360e19496dfc1] - doc: add missing options.info for BrotliOptions (Jimmy Leung) #583597f905863db] - doc: clarify x509.checkIssued only checks metadata (Filip Skokan) #584575cc97df637] - doc: add links to parent class fornode:zlibclasses (Antoine du Hamel) #5843336e0d5539b] - doc: remove remaining uses of@@​wellknownsyntax (René) #584132f36f8e863] - doc: clarify behavior of --watch-path and --watch flags (Juan Ignacio Benito) #581363b857735ef] - doc: add JonasBa to collaborators (Jonas Badalic) #583559d5e969bb6] - doc: add latest security release steward (Rafael Gonzaga) #58339b22bb03167] - doc: fix CryptoKey.algorithm type and other interfaces in webcrypto.md (Filip Skokan) #58294670f31060b] - doc: mark the callback argument of crypto.generatePrime as mandatory (Allon Murienik) #5829939d9a61239] - doc: remove comma delimiter mention on permissions doc (Rafael Gonzaga) #58297573b0b7bfe] - doc: make Stability labels not sticky in Stability index (Livia Medeiros) #58291a5a686a3ae] - doc: update commit-queue documentation (Dario Piotrowicz) #58275fdf7612735] - doc: add puskin to collaborators (Giovanni Bucci) #58308be492a1708] - doc: update stability status for diagnostics_channel to experimental (Idan Goshen) #582617d00fc2206] - doc: clarify napi_get_value_string_* for bufsize 0 (Tobias Nießen) #58158c8500a2c4a] - doc: fix typo of filehttp.md,outgoingMessage.setTimeoutsection (yusheng chen) #5818834a9b856c3] - doc: update return types for eventNames method in EventEmitter (Yukihiro Hasegawa) #58083faedee59d2] - doc: fix typo in benchmark script path (Miguel Marcondes Filho) #58129570d8d3f10] - doc: clarify future Corepack removal in v25+ (Trivikram Kamat) #57825a71b9fc2ff] - doc: mark multiple APIs stable (James M Snell) #5751373a97d47f3] - doc,lib: update source map links to ECMA426 (Chengzhong Wu) #585978b41429499] - doc,src,test: fix typos (Noritaka Kobayashi) #584770cea14ec7f] - errors: show url of unsupported attributes in the error message (Aditi) #58303b9586bf898] - (SEMVER-MINOR) fs: add autoClose option to FileHandle readableWebStream (James M Snell) #5854872a1b061f3] - fs: unexpose internal constants (Chengzhong Wu) #583275c36510dec] - fs: add support forURLforfs.glob'scwdoption (Antoine du Hamel) #581823642b0d944] - fs: improve cpSync no-filter copyDir performance (Dario Piotrowicz) #5846124865bc7e8] - fs: improvecpSyncdest overriding performance (Dario Piotrowicz) #581601b3847694d] - (SEMVER-MINOR) fs: add toDirsupport for explicit resource management (Antoine du Hamel) #58206cff62e3265] - fs: ensuredir.read()does not throw synchronously (Antoine du Hamel) #58228cb39e4ca1f] - fs: glob is stable, so should not emit experimental warnings (Théo LUDWIG) #58236597bfefbe1] - http: deprecate instantiating classes without new (Yagiz Nizipli) #585185298da0102] - http: remove unused functions and add todos (Yagiz Nizipli) #58143cff440e0fa] - http,https: give names to anonymous or misnamed functions (Livia Medeiros) #5818043bf1f619a] - http2: add raw header array support to h2Session.request() (Tim Perry) #57917e8a0f5b063] - http2: add lenient flag for RFC-9113 (Carlos Fuentes) #5811649cb90d4a5] - (SEMVER-MINOR) http2: add diagnostics channel 'http2.server.stream.finish' (Darshan Sen) #585606a56c68728] - http2: add diagnostics channel 'http2.server.stream.error' (Darshan Sen) #5851259806b41d3] - http2: add diagnostics channel 'http2.server.stream.start' (Darshan Sen) #58449d3d662ae47] - http2: remove no longer userful options.selectPadding (Jimmy Leung) #58373dec6c9af8c] - http2: add diagnostics channel 'http2.server.stream.created' (Darshan Sen) #583909e98899986] - http2: add diagnostics channel 'http2.client.stream.close' (Darshan Sen) #5832986610389d8] - http2: add diagnostics channel 'http2.client.stream.finish' (Darshan Sen) #583172d3071671e] - http2: add diagnostics channel 'http2.client.stream.error' (Darshan Sen) #583066c3e426d6f] - http2: add diagnostics channel 'http2.client.stream.start' (Darshan Sen) #58292b99d131a61] - http2: add diagnostics channel 'http2.client.stream.created' (Darshan Sen) #58246b0644330f5] - http2: give name to promisifiedconnect()(LiviaMedeiros) #579164092d3611a] - inspector: add mimeType and charset support to Network.Response (Shima Ryuhei) #58192d7d8599f7c] - inspector: add protocol method Network.dataReceived (Chengzhong Wu) #58001aabafbc28f] - inspector: support for worker inspection in chrome devtools (Shima Ryuhei) #5675920d978de9a] - lib: make ERM functions into wrappers returning undefined (Livia Medeiros) #5840013567eac5f] - (SEMVER-MINOR) lib: graduate error codes that have been around for years (James M Snell) #58541342b5a0d7a] - lib: remove no-mixed-operators eslint rule (Ruben Bridgewater) #58375af7baef75a] - lib: fix sourcemaps with ts module mocking (Marco Ippolito) #581938f73f42d4e] - meta: bump github/codeql-action from 3.28.16 to 3.28.18 (dependabot[bot]) #585525dfedbeb86] - meta: bump codecov/codecov-action from 5.4.2 to 5.4.3 (dependabot[bot]) #5855153c50f66f5] - meta: bump step-security/harden-runner from 2.11.0 to 2.12.0 (dependabot[bot]) #58109a1a7024831] - meta: bump ossf/scorecard-action from 2.4.1 to 2.4.2 (dependabot[bot]) #58550a379988ef6] - meta: bump rtCamp/action-slack-notify from 2.3.2 to 2.3.3 (dependabot[bot]) #58108f6a46c87f2] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #5845698b6aa0dcd] - meta: bump github/codeql-action from 3.28.11 to 3.28.16 (dependabot[bot]) #581125202b262e3] - meta: bump codecov/codecov-action from 5.4.0 to 5.4.2 (dependabot[bot]) #58110d97616ac6e] - meta: bump actions/download-artifact from 4.2.1 to 4.3.0 (dependabot[bot]) #58106f4065074cf] - meta: ignore mailmap changes in linux ci (Jonas Badalic) #58356e6d1224e54] - meta: bump actions/setup-node from 4.3.0 to 4.4.0 (dependabot[bot]) #5811126da160ab2] - meta: bump actions/setup-python from 5.5.0 to 5.6.0 (dependabot[bot]) #581074cc4195493] - module: handle instantiated async module jobs in require(esm) (Joyee Cheung) #5806772fac71b92] - module: clarify cjs global-like error on ModuleJobSync (Carlos Espa) #56491fecd841c93] - net: always publish to 'net.client.socket' diagnostics channel (Darshan Sen) #5834925ee328d2b] - path: improve path.resolve() performance when used as process.cwd() (Ruben Bridgewater) #583626fd1b23260] - permission: remove useless conditional (Juan José) #585145b2cca51a3] - report: use uv_getrusage_thread in report (theanarkh) #5840563ec23e84b] - sqlite: add build option to build without sqlite (Michael Dawson) #581229d8677bff5] - sqlite: handle thrown errors in result callback (Colin Ihrig) #584263490c75760] - sqlite: setnameandlengthonsqlite.backup()(Livia Medeiros) #5825150bdd94e0b] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #585007de58417cc] - src: env_vars caching and local variable scope optimization (Mert Can Altin) #576246d99ec33a4] - src: fix FIPS init error handling (Tobias Nießen) #583794c23a9575e] - src: fix possible dereference of null pointer (Eusgor) #58459eb143e902b] - src: fix -Wreturn-stack-address error (Shelley Vohr) #5843931058b8785] - src: reorganize ContextifyFunction methods (Chengzhong Wu) #584347521077299] - src: improve CompileFunctionAndCacheResult error handling (Chengzhong Wu) #584340c9efccb12] - src: fix build when using shared simdutf (Antoine du Hamel) #58407aa00f5946f] - src: add a variant of ToV8Value() for primitive arrays (Aditi) #5757629a11506fc] - src: remove unusedcheckMessagePortinternal binding (Dario Piotrowicz) #582670ce3feed5b] - src: remove unusedshouldRetryAsESMinternal binding (Dario Piotrowicz) #58265517219613d] - src: add a couple fast apis in node_os (James M Snell) #582103f834da09e] - src: fix module buffer allocation (X-BW) #57738a793706db0] - src: remove overzealous tcsetattr error check (Ben Noordhuis) #582005656c74517] - src: remove NonCopyableMaybe (Tobias Nießen) #58168cab242334b] - src: improve parsing of boolean options (Edy Silva) #58039a5df778150] - src,lib: obtain sourceURL in magic comments from V8 (Chengzhong Wu) #58389bd6743b434] - src,permission: implicit allow-fs-read to app entrypoint (Rafael Gonzaga) #585795bd99e4a4d] - stream: making DecompressionStream spec compilent for trailing junk (0hm☘️) #583166582b19488] - test: reduce flakiness in test-heapdump-http2 (Joyee Cheung) #581480f6a262744] - test: improve flakiness detection on stack corruption tests (Darshan Sen) #58601983affaea2] - test: mark timeouts & flaky test as flaky on IBM i (Abdirahim Musse) #585833603362b6f] - test: rewrite test-child-process-spawn-args (Michaël Zasso) #5854693900b0c17] - test: make sqlite-database-sync tests work with system sqlite (Jelle Licht) #585077d505f4185] - test: force slow JSON.stringify path for overflow (Shelley Vohr) #581812e8570b8f9] - test: account for truthy signal in flaky async_hooks tests (Darshan Sen) #584781f1e194c0f] - test: update WPT for WebCryptoAPI to591c95c(Node.js GitHub Bot) #58176d822632d91] - test: remove --no-warnings flag (Tobias Nießen) #5842401377713d7] - test: add tests ensuring worker threads cannot access internals (Joe) #5833299a20902fc] - test: leverage process.features.openssl_is_boringssl in test (Shelley Vohr) #58421b3e0cf1b15] - test: fix test-buffer-tostring-range on allocation failure (Joyee Cheung) #584161d4b3451c5] - test: skip in test-buffer-tostring-rangeerror on allocation failure (Joyee Cheung) #58415612c393c71] - test: fix missing edge case in test-blob-slice-with-large-size (Joyee Cheung) #58414b11b9cdad8] - test: make crypto tests work with BoringSSL (Shelley Vohr) #5811799711ee548] - test: test reordering of setAAD and setAuthTag (Tobias Nießen) #58396828aaaa3f7] - test: switch from deprecatedoptparsetoargparse(Aviv Keller) #582249af305408e] - test: do not skip OCB decryption in FIPS mode (Tobias Nießen) #583829527c876bf] - test: show more information in test-http2-debug upon failure (Joyee Cheung) #583919be0601112] - test: remove loop over single element (Tobias Nießen) #5836840a03d3d14] - test: add chacha20-poly1305 to auth tag order test (Tobias Nießen) #58367cccb15df7e] - test: skip wasm-allocation tests for pointer compression builds (Joyee Cheung) #58171f18041ae8e] - test: remove references to create(De|C)ipher (Tobias Nießen) #58363ca8d66c1fc] - test: remove unnecessaryconsole.logfrom test-repl-null-thrown (Dario Piotrowicz) #58281455372023d] - test: allowtmpDir.pathto be modified (Aviv Keller) #581731f1fab60c7] - test: fix executable flags (Livia Medeiros) #582508bafc0f061] - test: deflake test-http2-client-socket-destroy (Luigi Pinca) #5821297aac9f17a] - test: skip test-buffer-tostring-rangeerror when low on memory (Ruben Bridgewater) #581422896760da1] - test: marktest-http2-debugas flaky on LinuxONE (Richard Lau) #584947327d14780] - test: reduce iteration count in test-child-process-stdout-flush-exit (Antoine du Hamel) #582731bd7a2edf9] - test_runner: support mocking json modules (Jacob Smith) #58007a3877c53b1] - test_runner: add level parameter to reporter.diagnostic (Jacopo Martinelli) #57923253772c2d9] - tools: bump the eslint group in/tools/eslintwith 6 updates (dependabot[bot]) #58549b7feda97b0] - tools: disable failing coverage jobs (Antoine du Hamel) #587708a47096093] - tools: ignoredeps/andbenchmark/for CodeQL (Rafael Gonzaga) #5825470be158126] - tools: add read permission to workflows that read contents (Antoine du Hamel) #58255e4373be766] - tools: exclude deps/v8/tools from CodeQL scans (Rich Trott) #5813223ceb364d4] - tools: bump the eslint group in /tools/eslint with 6 updates (dependabot[bot]) #581055b6ced3255] - tty: improve color terminal color detection (Ruben Bridgewater) #581467be70979c6] - tty: use terminal VT mode on Windows (Anna Henningsen) #58358b7d7ffe793] - typings: add inspector internalBinding typing (Shima Ryuhei) #584920056d1a2e2] - typings: remove no longer validFixedSizeBlobCopyJobtype (Dario Piotrowicz) #58305581c0738f9] - typings: remove no longer validrevokeDataObjecttype (Dario Piotrowicz) #583051db1c870f0] - typings: add missing typings forTypedArray(Jason Zhang) #582486d3f43c9a6] - url: improve performance of the format function (Giovanni Bucci) #5709954288bdb42] - (SEMVER-MINOR) util: add 'none' style to styleText (James M Snell) #584376af5358f9c] - util: add internalassignFunctionName()function (LiviaMedeiros) #579169f2e5aad38] - vm: import call should return a promise in the current context (Chengzhong Wu) #5830992304a5e62] - watch: fix watch args not being properly filtered (Dario Piotrowicz) #58279539df8e98d] - win,tools: use Azure Trusted Signing (Stefan Stojanovic) #58502ef66357637] - worker: give names toMessagePortfunctions (Livia Medeiros) #58307b3cd847528] - zlib: remove mentions of unexposed Z_TREES constant (Jimmy Leung) #58371v22.16.0: 2025-05-21, Version 22.16.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
c3ceaebb7a] - deps: update timezone to 2025b (Node.js GitHub Bot) #578575059a746ec] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102c8ceaaf397] - (SEMVER-MINOR) doc: graduate multiple experimental apis (James M Snell) #57765e21b37d9df] - (SEMVER-MINOR) esm: graduate import.meta properties (James M Snell) #58011832640c35e] - (SEMVER-MINOR) esm: support top-level Wasm without package type (Guy Bedford) #57610c510391d2f] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.columns() (Colin Ihrig) #574905d1230bec0] - (SEMVER-MINOR) src: set default config asnode.config.json(Marco Ippolito) #5717130bb1ccbb0] - (SEMVER-MINOR) src: createTHROW_ERR_OPTIONS_BEFORE_BOOTSTRAPPING(Marco Ippolito) #570160350c6f478] - (SEMVER-MINOR) src: add config file support (Marco Ippolito) #57016e1d3a9e192] - (SEMVER-MINOR) src: add ExecutionAsyncId getter for any Context (Attila Szegedi) #578200ec912f452] - (SEMVER-MINOR) stream: preserve AsyncLocalStorage context in finished() (Gürgün Dayıoğlu) #5786543490c8797] - (SEMVER-MINOR) util: addtypes.isFloat16Array()(Livia Medeiros) #57879dda6ca9172] - (SEMVER-MINOR) worker: add worker.getHeapStatistics() (Matteo Collina) #57888Commits
4252dc798c] - assert: supportFloat16Arrayin loose deep equality checks (Livia Medeiros) #578811c7396b078] - assert,util: fix constructor lookup in deep equal comparison (Ruben Bridgewater) #578761ded5f25c8] - assert,util: improve deep object comparison performance (Ruben Bridgewater) #57648696b5f85ca] - assert,util: improve unequal number comparison performance (Ruben Bridgewater) #57619775ee4d40f] - assert,util: improve array comparison (Ruben Bridgewater) #576193766992ba4] - benchmark: add sqlite prepare select get (Vinícius Lourenço) #580408390276be3] - benchmark: add sqlite prepare select all (Vinícius Lourenço) #580406a9b79e5c1] - benchmark: add sqlite is transaction (Vinícius Lourenço) #58040f689f98344] - benchmark: add sqlite prepare insert (Vinícius Lourenço) #5804014a82804d7] - benchmark: disambiguatefilenameanddirnameread perf (Antoine du Hamel) #58056e7e8256d35] - buffer: avoid creating unnecessary environment (Yagiz Nizipli) #58053d7d8e8e994] - buffer: define global v8::CFunction objects as const (Mert Can Altin) #57676f37633e85a] - build: use$(BUILDTYPE)when cleaning coverage files (Aviv Keller) #57995e5bf67fe77] - build: define python when generatingout/Makefile(Aviv Keller) #57970718f874ae0] - build: fix zstd libname (Antoine du Hamel) #5799953c5fdcae1] - crypto: fix cross-realmSharedArrayBuffervalidation (Antoine du Hamel) #5797478f4ffee5d] - crypto: fix cross-realm check ofArrayBuffer(Felipe Forbeck) #57828f606352b63] - crypto: forbid passingFloat16ArraytogetRandomValues()(Livia Medeiros) #5788023c4e941c2] - crypto: remove BoringSSL dh-primes addition (Shelley Vohr) #570238339d9bc14] - deps: V8: cherry-pickf915fa4(Chengzhong Wu) #55484c2111dd126] - deps: V8: backporte5dbbba(Darshan Sen) #581204cc49be951] - deps: update zstd to 1.5.7 (Node.js GitHub Bot) #57940c956d37c84] - deps: update zlib to 1.3.0.1-motley-780819f (Node.js GitHub Bot) #57768c3ceaebb7a] - deps: update timezone to 2025b (Node.js GitHub Bot) #57857b5cd0eb590] - deps: update simdutf to 6.4.2 (Node.js GitHub Bot) #578553eb6b814e9] - deps: update simdutf to 6.4.0 (Node.js GitHub Bot) #567640be9fa3218] - deps: update icu to 77.1 (Node.js GitHub Bot) #57455d5cf4254fb] - doc: add HBSPS as triager (Wiyeong Seo) #57980ad0861dba0] - doc: add ambassaor message (Brian Muenzenmeyer) #576000d3ec1aafe] - doc: fix misaligned options in vm.compileFunction() (Jimmy Leung) #581451f70baf3b0] - doc: add missing options.signal to readlinePromises.createInterface() (Jimmy Leung) #55456ec6a48621f] - doc: fix typo of filezlib.md(yusheng chen) #5809337e360e386] - doc: make stability labels more consistent (Antoine du Hamel) #575162b5d63d36e] - doc: allow the $schema property in node.config.json (Remco Haszing) #57560a2063638e2] - doc: fixAsyncLocalStorageexample response changes after node v18 (Naor Tedgi (Abu Emma)) #57969474c2b14c3] - doc: mark Node.js 18 as End-of-Life (Richard Lau) #580845059a746ec] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #581021eec170fc3] - doc: fix formatting ofimport.meta.filenamesection (Antoine du Hamel) #580797f108de525] - doc: fix env variable name inutil.styleText(Antoine du Hamel) #5807254b3f7fffc] - doc: add returns for https.get (Eng Zer Jun) #5802566f2c605a8] - doc: fix typo inbuffer.md(chocolateboy) #58052b0256dd42b] - doc: correct deprecation type ofassert.CallTracker(René) #57997581439c9e6] - doc: mark devtools integration section as active development (Chengzhong Wu) #57886a2a2a2f027] - doc: fix typo inmodule.md(Alex Schwartz) #57889c0ec4e2935] - doc: increase z-index of header element (Dario Piotrowicz) #5785193d19ec6cd] - doc: add missing TS formats forloadhooks (Antoine du Hamel) #57837f5ea06c61f] - doc: clarify the multi REPL example (Dario Piotrowicz) #5775980c4fe1b70] - doc: fix deprecation type forDEP0148(Livia Medeiros) #5778501cad99da0] - doc: list DOMException as a potential error raised by Node.js (Chengzhong Wu) #57783a08b714a46] - doc: add missing v0.x changelog entries (Antoine du Hamel) #57779d0b48350fd] - doc: fix typo in writing-docs (Sebastian Beltran) #57776bde3725f8b] - doc: clarify examples section in REPL doc (Dario Piotrowicz) #57762c8ceaaf397] - (SEMVER-MINOR) doc: graduate multiple experimental apis (James M Snell) #5776592428c2609] - doc: explicitly state that corepack will be removed in v25+ (Trivikram Kamat) #57747298969e1dd] - doc: update position type to integer | null in fs (Yukihiro Hasegawa) #57745a9d28e27c9] - doc: update CI instructions (Antoine du Hamel) #57743133d2878a1] - doc: update example of usingawaitin REPL (Dario Piotrowicz) #57653fc5f126629] - doc: add back mention of visa fees to onboarding doc (Darshan Sen) #57730945f4ac538] - doc: process.execve is only unavailable for Windows (Yaksh Bariya) #57726f3b885bb5e] - doc: clarifyunhandledRejectionevents behaviors in process doc (Dario Piotrowicz) #576547326dda5b0] - doc: improved fetch docs (Alessandro Miliucci) #572966906c5eb1f] - doc: document REPL custom eval arguments (Dario Piotrowicz) #5769047a7564e8f] - doc: classify Chrome DevTools Protocol as tier 2 (Chengzhong Wu) #57634e274cc1310] - doc: replace NOTE that does not render properly (Colin Ihrig) #57484bef06b11df] - esm: avoidimport.metasetup costs for unused properties (Antoine du Hamel) #57286e21b37d9df] - (SEMVER-MINOR) esm: graduate import.meta properties (James M Snell) #58011832640c35e] - (SEMVER-MINOR) esm: support top-level Wasm without package type (Guy Bedford) #576108f643471ef] - fs: improve globSync performance (Rich Trott) #57725bf9e17ecc6] - http2: use args.This() instead of args.Holder() (Joyee Cheung) #58004137717354f] - http2: fix graceful session close (Kushagra Pandey) #578089baf580269] - http2: fix check forframe->hd.type(hanguanqiang) #57644b8189242b2] - http2: skip writeHead if stream is closed (Shima Ryuhei) #576864e02a1650a] - lib: remove unused filefetch_module(Michaël Zasso) #55880d9700fef26] - lib: avoid StackOverflow onserializeError(Chengzhong Wu) #58075f3a16b6d9c] - lib: resolve the issue of not adhering to the specified buffer size (0hm☘️🏳️⚧️) #55896d4fc282f73] - lib: fix AbortSignal.any() with timeout signals (Gürgün Dayıoğlu) #57867f7e2902861] - lib: use Map primordial for ActiveAsyncContextFrame (Gürgün Dayıoğlu) #576708652b0e168] - meta: set nodejs/config as codeowner (Marco Ippolito) #57237e98504ed95] - meta: allow penetration testing on live system with prior authorization (Matteo Collina) #57966340731bea0] - meta: fix subsystem in commit title (Luigi Pinca) #57945d767cbffcf] - meta: bump Mozilla-Actions/sccache-action from 0.0.8 to 0.0.9 (dependabot[bot]) #57720575f904b13] - meta: bump actions/download-artifact from 4.1.9 to 4.2.1 (dependabot[bot]) #57719acd323c069] - meta: bump actions/setup-python from 5.4.0 to 5.5.0 (dependabot[bot]) #5771821246fec20] - meta: bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (dependabot[bot]) #5771797f32d5849] - meta: bump github/codeql-action from 3.28.10 to 3.28.13 (dependabot[bot]) #5771690ddbb8cfa] - meta: bump actions/cache from 4.2.2 to 4.2.3 (dependabot[bot]) #57715728425d03e] - meta: bump actions/setup-node from 4.2.0 to 4.3.0 (dependabot[bot]) #577141f799140e0] - meta: bump actions/upload-artifact from 4.6.1 to 4.6.2 (dependabot[bot]) #57713021b174a1f] - module: tidy code string concat → string templates (Jacob Smith) #5582044c5718476] - module: fix incorrect formatting in require(esm) cycle error message (haykam821) #57453bb09b4d4ae] - module: improvegetPackageTypeperformance (Dario Piotrowicz) #575999e6054e715] - module: remove unnecessaryreadPackagefunction (Dario Piotrowicz) #575964a8db273ba] - node-api: add nested object wrap and napi_ref test (Chengzhong Wu) #579813c65058f20] - node-api: convert NewEnv to node_napi_env__::New (Vladimir Morozov) #57834a4105db1f7] - os: fix netmask format check condition in getCIDR function (Wiyeong Seo) #57324248c938139] - process: disable building execve on IBM i (Abdirahim Musse) #57883972275697a] - repl: deprecaterepl.builtinModules(Dario Piotrowicz) #575087485309d7e] - sqlite: add location method (Edy Silva) #57860c12cd2a190] - sqlite: add timeout options to DatabaseSync (Edy Silva) #577525e0503a967] - sqlite: add setReturnArrays method to StatementSync (Gürgün Dayıoğlu) #57542ed9d2fd51a] - sqlite: enable common flags (Edy Silva) #5762106dcb318bc] - sqlite: refactor prepared statement iterator (Colin Ihrig) #57569c510391d2f] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.columns() (Colin Ihrig) #574904e24456a1a] - sqlite: reset statement immediately in run() (Colin Ihrig) #57350a9a6891b0b] - sqlite: fix coverity warnings related to backup() (Colin Ihrig) #56961d2e1bcf3d4] - sqlite: fix use-after-free in StatementSync due to premature GC (Divy Srivastava) #56840cfe15ca7b4] - sqlite: handle conflicting SQLite and JS errors (Colin Ihrig) #567870e999eb65f] - sqlite: add getter to detect transactions (Colin Ihrig) #5792520b27331c0] - sqlite, test: expose sqlite online backup api (Edy Silva) #562538856712171] - sqlite,doc,test: add aggregate function (Edy Silva) #56600120050db97] - sqlite,src: refactor sqlite value conversion (Edy Silva) #575714c5555d558] - src: initialize privateSymbols for per_context (Jason Zhang) #57479d2ce9023b1] - src: ensure primordials are initialized exactly once (Chengzhong Wu) #5751906179be6ca] - src: disable abseil deadlock detection (Chengzhong Wu) #575825121c47990] - src: fix node_config_file.h compilation error in GN build (Cheng) #572105d1230bec0] - (SEMVER-MINOR) src: set default config asnode.config.json(Marco Ippolito) #57171ccee741c43] - src: namespace config file flags (Marco Ippolito) #5717030bb1ccbb0] - (SEMVER-MINOR) src: createTHROW_ERR_OPTIONS_BEFORE_BOOTSTRAPPING(Marco Ippolito) #570160350c6f478] - (SEMVER-MINOR) src: add config file support (Marco Ippolito) #57016eef37d00cb] - src: add more debug logs and comments in NodePlatform (Joyee Cheung) #58047678e8f57c0] - src: add dcheck_eq for Object::New constructor calls (Jonas) #57943aee45e2036] - src: move windows specific fns to_WIN32(Yagiz Nizipli) #579516206a8edbc] - src: improve thread safety of TaskQueue (Shelley Vohr) #5791003936f31c1] - src: fixup errorhandling more in various places (James M Snell) #57852010dd91a19] - src: fix typo in comments (Edy Silva) #57868e00c1ecbd2] - src: add BaseObjectPtr nullptr operations (Chengzhong Wu) #56585648ad252e1] - src: removevoid*->char*->void*casts (Tobias Nießen) #57791680b434a62] - src: improve error handing in node_messaging (James M Snell) #5776018f5301747] - src: remove unused detachArrayBuffer method (Yagiz Nizipli) #58055065e8cd670] - src: use macros to reduce code duplication is cares_wrap (James M Snell) #5793739af5d678f] - src: improve error handling in cares_wrap (James M Snell) #57937ca020fdc4e] - src: fix -Wunreachable-code-return in node_sea (Shelley Vohr) #5766432b6e7094a] - src: change DCHECK to CHECK (Wuli Zuo) #57948e1d3a9e192] - (SEMVER-MINOR) src: add ExecutionAsyncId getter for any Context (Attila Szegedi) #5782096243a723a] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #576460f2cbc17c7] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #57642d1c6f861d5] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #57578ab0d3a38db] - src: improve error message for invalid child stdio type in spawn_sync (Dario Piotrowicz) #5758924b182e7b3] - src: implement util.types fast API calls (Ruben Bridgewater) #57819dda6423be9] - src: enter and lock isolate properly in json parser (Joyee Cheung) #578234754c693f8] - src: improve error handling innode_env_var.cc(Antoine du Hamel) #57767db483bbe63] - src: improve error handling in node_http2 (James M Snell) #57764b0277700d6] - src: improve error handling in crypto_x509 (James M Snell) #57757353587f984] - src: improve error handling in callback.cc (James M Snell) #57758bec053ab20] - src: remove unused variable in crypto_x509.cc (Michaël Zasso) #5775438a329a857] - src: fix kill signal 0 on Windows (Stefan Stojanovic) #5769570bb387f82] - src: fix inefficient usage of v8_inspector::StringView (Simon Zünd) #52372be038f0273] - src,permission: make ERR_ACCESS_DENIED more descriptive (Rafael Gonzaga) #575850ec912f452] - (SEMVER-MINOR) stream: preserve AsyncLocalStorage context in finished() (Gürgün Dayıoğlu) #578656ffb66f82f] - test: fix permission fixtures lint (Rafael Gonzaga) #55819fd37891186] - test: add repl preview timeout test (Chengzhong Wu) #554841be5a8c1b4] - test: skiptest-config-json-schemawith quic (Richard Lau) #57225e90583b657] - test: add more coverage tonode_config_file(Marco Ippolito) #57170df2a36bfcc] - test: remove deadlock workaround (Joyee Cheung) #58047103034b051] - test: prevent extraneous HOSTNAME substitution in test-runner-output (René) #580763e58f81a38] - test: update WPT for WebCryptoAPI tob48efd6(Node.js GitHub Bot) #580442f4e4164a3] - test: add missing newlines to repl .exit writes (Dario Piotrowicz) #58041b40769292e] - test: add fast api tests for getLibuvNow() (Yagiz Nizipli) #58022cbd5768d47] - test: add ALS test using http agent keep alive (Gerhard Stöbich) #580179e31ab502a] - test: deflake test-http2-options-max-headers-block-length (Luigi Pinca) #5795913f8f9cc12] - test: rename to getCallSites (Wuli Zuo) #5794892dce6ed6b] - test: force GC in test-file-write-stream4 (Luigi Pinca) #57930aa755d3acf] - test: enable skipped colorize test (Shima Ryuhei) #57887331f44c78c] - test: update WPT for WebCryptoAPI to164426a(Node.js GitHub Bot) #578544aaa8438b4] - test: add test for frame count being 0.5 (Jake Yuesong Li) #57732fb51d3a0c5] - test: fix the decimal fractions explaination (Jake Yuesong Li) #57732c6a45a9087] - Revert "test: add tests for REPL custom evals" (Tobias Nießen) #57793f3a4d03963] - test: add tests for REPL custom evals (Dario Piotrowicz) #57691a3be0df337] - test: update expected error message for macOS (Antoine du Hamel) #57742a7e73a0a74] - test: fix dangling promise in test_runner no isolation test setup (Jacob Smith) #57595edb7dd1ec7] - test_runner: match minimum file column to 'all files' (Shima Ryuhei) #57848c56f495e83] - tools: extract target abseil to abseil.gyp (Chengzhong Wu) #572891b37161a27] - tools: ignore V8 tests in CodeQL scans (Rich Trott) #5808123386308dd] - tools: enable CodeQL config file (Rich Trott) #580369c21abc169] - tools: ignore test directory in CodeQL scans (Rich Trott) #57978f210a1530d] - tools: add semver-major release support to release-lint (Antoine du Hamel) #57892234c417e98] - tools: add codeql nightly (Rafael Gonzaga) #57788938f1532da] - tools: edit create-release-proposal workflow to handle pr body length (Elves Vieira) #57841b362339f72] - tools: add zstd updater to workflow (KASEYA\yahor.siarheyenka) #5783161180db9c0] - tools: remove unusedosx-pkg-postinstall.sh(Antoine du Hamel) #576673ae04c94eb] - tools: do not use temp files when merging PRs (Antoine du Hamel) #57790d623c2c2b4] - tools: update gyp-next to 0.20.0 (Node.js GitHub Bot) #5768343ea4c532a] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #577215703147470] - tools: enable linter intest/fixtures/source-map/output(Antoine du Hamel) #5770080d58c372d] - tools: enable linter intest/fixtures/errors(Antoine du Hamel) #57701ef5275b7be] - tools: enable linter intest/fixtures/test-runner/output(Antoine du Hamel) #57698631733e41f] - tools: enable linter intest/fixtures/eval(Antoine du Hamel) #576996d0128695f] - tools: enable linter on some fixtures file (Antoine du Hamel) #57674f4d7cbae89] - tools: update ESLint to 9.23 (Antoine du Hamel) #576735a39a24cd1] - typings: fixModulesBindingtypes (Antoine du Hamel) #555492df7ce9ebd] - util: fix parseEnv handling of invalid lines (Augustin Mauroy) #57798416052a9f2] - util: fix formatting of objects with built-in Symbol.toPrimitive (Shima Ryuhei) #5783243490c8797] - (SEMVER-MINOR) util: addtypes.isFloat16Array()(Livia Medeiros) #5787930060e13d3] - util: preservelengthof deprecated functions (Livia Medeiros) #578069837e08a84] - util: fix parseEnv incorrectly splitting multiple ‘=‘ in value (HEESEUNG) #57421af41dd3c07] - watch: clarify completion/failure watch mode messages (Dario Piotrowicz) #579267229a29b47] - watch: check parent and child path properly (Jason Zhang) #574251b5a7c6dc8] - win: fix SIGQUIT on ClangCL (Stefan Stojanovic) #57659e935c3c6f2] - worker: add ESM version examples to worker docs (fisker Cheung) #57645dda6ca9172] - (SEMVER-MINOR) worker: add worker.getHeapStatistics() (Matteo Collina) #57888f2159f2a44] - zlib: fix pointer alignment (jhofstee) #57727v22.15.1: 2025-05-14, Version 22.15.1 'Jod' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Commits
edaf54da00] - fs: added test for missing call to uv_fs_req_cleanup (Justin Nietzel) #578119f403e98ef] - (CVE-2025-23165) fs: add missing call to uv_fs_req_cleanup (Justin Nietzel) #57811f4494d38f1] - (CVE-2025-23166) src: fix error handling on async crypto operations (RafaelGSS) nodejs-private/node-private#709v22.15.0: 2025-04-23, Version 22.15.0 'Jod' (LTS), @UlisesGascon prepared by @RafaelGSSCompare Source
Notable Changes
3c88f3938b] - (SEMVER-MINOR) assert: implement partial error comparison (Ruben Bridgewater) #57370db19a3f9fc] - (SEMVER-MINOR) assert: improve partialDeepStrictEqual (Ruben Bridgewater) #573701ee5f840b4] - (SEMVER-MINOR) cli: allow --cpu-prof* in NODE_OPTIONS (Carlos Espa) #57018872ee0f2ac] - crypto: update root certificates to NSS 3.108 (Node.js GitHub Bot) #5738103a0f3a56b] - (SEMVER-MINOR) crypto: support --use-system-ca on Windows (Joyee Cheung) #5683394647bbdb2] - (SEMVER-MINOR) crypto: added support for reading certificates from macOS system store (Tim Jacomb) #565998f7b86a6e7] - deps: update timezone to 2025a (Node.js GitHub Bot) #56876f9f611fb58] - (SEMVER-MINOR) deps,tools: add zstd 1.5.6 (Jan Martin) #5210007a6d5f8cf] - (SEMVER-MINOR) dns: add TLSA record query and parsing (Rithvik Vibhu) #52983d8a83ef2f3] - doc: add @geeksilva97 to collaborators (Edy Silva) #572416b93ba723b] - (SEMVER-MINOR) module: use synchronous hooks for preparsing in import(cjs) (Joyee Cheung) #55698b2e44a8079] - (SEMVER-MINOR) module: implement module.registerHooks() (Joyee Cheung) #55698dc91ae7471] - (SEMVER-MINOR) process: add execve (Paolo Insogna) #56496bc672fcfdd] - (SEMVER-MINOR) sqlite: allow returningArrayBufferViews from user-defined functions (René) #567905edee197ab] - (SEMVER-MINOR) tls: implement tls.getCACertificates() (Joyee Cheung) #57107f9fe0e09ee] - (SEMVER-MINOR) util: expose diff function used by the assertion errors (Giovanni Bucci) #57462673a424180] - (SEMVER-MINOR) v8: add v8.getCppHeapStatistics() method (Aditi) #571464991e5d826] - (SEMVER-MINOR) zlib: add zstd support (Jan Martin) #52100Commits
ea70a379c3] - assert: improve partialDeepStrictEqual performance (Ruben Bridgewater) #575092b419d7e79] - (SEMVER-MINOR) assert: implement partial error comparison (Ruben Bridgewater) #57370d817c17fd7] - (SEMVER-MINOR) assert: improve partialDeepStrictEqual (Ruben Bridgewater) #573707af0440073] - assert: improve myers diff performance (Giovanni Bucci) #5727901cf5fb871] - (SEMVER-MINOR) assert,util: improve performance (Ruben Bridgewater) #57370a58842cee4] - (SEMVER-MINOR) benchmark: adjust assert runtimes (Ruben Bridgewater) #57370b20b3697aa] - (SEMVER-MINOR) benchmark: skip running some assert benchmarks by default (Ruben Bridgewater) #57370ec5570fd1e] - (SEMVER-MINOR) benchmark: add assert partialDeepStrictEqual benchmark (Ruben Bridgewater) #57370b991bf4ca6] - benchmark: add a warmup on bench-openSync (Elves Vieira) #570514a455bc806] - build: fix update-wpt workflow (Jonas) #574686ec397e61c] - build: fix compatibility with V8'sdepot_tools(Richard Lau) #57330475aaca336] - build: print 'Formatting Markdown...' for long task markdown formatting (1ilsang) #5710873fced7a97] - build: fix GN build failure (Cheng) #57013af05f91425] - build: fix GN build of uv (Cheng) #56955fd3053e947] - build: gyp exclude libm linking on macOS (deepak1556) #569015ec6b9a50f] - build: remove explicit linker call to libm on macOS (deepak1556) #56901a893da9be7] - build: link with Security.framework in GN build (Cheng) #5689502cd8e0a50] - build: do not put commands in sources variables (Cheng) #5688573dc8c2140] - build: add double quotes around <(python) (Luigi Pinca) #5682665a3b5f73c] - build: add build option suppress_all_error_on_warn (Michael Dawson) #56647424aacc942] - build,win: disable node pch with ccache (Stefan Stojanovic) #57224901685c723] - build,win: enable ccache (Stefan Stojanovic) #5684779987676c1] - cli: clarify --cpu-prof-name allowed values (Eugenio Ceschia) #57433503d4237aa] - (SEMVER-MINOR) cli: allow --cpu-prof* in NODE_OPTIONS (Carlos Espa) #57018ada572b733] - crypto: ensure expected JWK alg in SubtleCrypto.importKey RSA imports (Filip Skokan) #574507e5aabde55] - crypto: update root certificates to NSS 3.108 (Node.js GitHub Bot) #573817ea6ac1e09] - crypto: add support for intermediate certs in --use-system-ca (Tim Jacomb) #5716444b19ec534] - crypto: support --use-system-ca on non-Windows and non-macOS (Joyee Cheung) #57009e21d126438] - crypto: fix missing OPENSSL_NO_ENGINE guard (Shelley Vohr) #570122fdf82b357] - crypto: cleanup root certificates and skip PEM deserialization (Joyee Cheung) #5699903a0f3a56b] - (SEMVER-MINOR) crypto: support --use-system-ca on Windows (Joyee Cheung) #56833bbdb10bc2c] - crypto: fix X509* leak in --use-system-ca (Joyee Cheung) #568325470cab6d3] - crypto: add api to get openssl security level (Michael Dawson) #5660194647bbdb2] - (SEMVER-MINOR) crypto: added support for reading certificates from macOS system store (Tim Jacomb) #56599caf81ca549] - debugger: fix behavior of plain object exec in debugger repl (Dario Piotrowicz) #574981d703fe220] - deps: update c-ares to v1.34.5 (Node.js GitHub Bot) #5779298457dfea3] - deps: update undici to 6.21.2 (Matteo Collina) #574424a852ba11b] - deps: V8: cherry-pickc172ffc(Choongwoo Han) #5743754a12e0bcc] - deps: update googletest to0bdccf4(Node.js GitHub Bot) #573802e350963e5] - deps: update acorn to 8.14.1 (Node.js GitHub Bot) #5738295e5d01c25] - deps: update amaro to 0.4.1 (marco-ippolito) #57121ef216deb05] - deps: update amaro to 0.3.2 (marco-ippolito) #569164ef4d6ecf6] - deps: update amaro to 0.3.1 (Node.js GitHub Bot) #56785a8bf5ef4a7] - deps: update simdjson to 3.12.2 (Node.js GitHub Bot) #570840bd612bb32] - deps: update archs files for openssl-3.0.16 (Node.js GitHub Bot) #573357d65f79306] - deps: upgrade openssl sources to quictls/openssl-3.0.16 (Node.js GitHub Bot) #573355c88c52491] - deps: update corepack to 0.32.0 (Node.js GitHub Bot) #57265fa04bf4999] - deps: update gyp file for ngtcp2 1.11.0 (Richard Lau) #57225ca6b07258d] - deps: update cjs-module-lexer to 2.1.0 (Node.js GitHub Bot) #571800a72b16fe1] - deps: update ngtcp2 to 1.11.0 (Node.js GitHub Bot) #57179600fb41f54] - deps: update sqlite to 3.49.1 (Node.js GitHub Bot) #571787eb3b44010] - deps: update zlib to 1.3.0.1-motley-788cb3c (Node.js GitHub Bot) #56655257d22e181] - deps: update sqlite to 3.49.0 (Node.js GitHub Bot) #5665453a7bfce01] - deps: V8: cherry-pick9ab4059(Levi Zim) #56781636f65cb1a] - deps: update cjs-module-lexer to 2.0.0 (Michael Dawson) #568558f7b86a6e7] - deps: update timezone to 2025a (Node.js GitHub Bot) #56876db31276bfa] - deps: update simdjson to 3.12.0 (Node.js GitHub Bot) #56874d1d58d6198] - deps: update googletest toe235eb3(Node.js GitHub Bot) #5687305b3dff275] - deps: update simdjson to 3.11.6 (Node.js GitHub Bot) #56250f9f611fb58] - (SEMVER-MINOR) deps,tools: add zstd 1.5.6 (Jan Martin) #52100ef212a41a7] - dns: restore dns query cache ttl (Ethan Arrowood) #576407a10b01e97] - dns: remove redundant code using common variable (Deokjin Kim) #57386bc2603f086] - (SEMVER-MINOR) dns: add TLSA record query and parsing (Rithvik Vibhu) #5298338a2e5d60b] - doc: add gurgunday as triager (Gürgün Dayıoğlu) #57594b7ac0bd129] - doc: clarify behaviour of node-api adjust function (Michael Dawson) #57463fa834896c8] - doc: remove Corepack documentation (Antoine du Hamel) #576358988173286] - doc: remove mention of--requirenot supporting ES modules (Huáng Jùnliàng) #576203a7d179dbd] - doc: mention reports should align with Node.js CoC (Rafael Gonzaga) #57607983c5087f6] - doc: add section stating that very stale PRs should be closed (Dario Piotrowicz) #57541f4e1f702d4] - doc: add bjohansebas as triager (Sebastian Beltran) #575649b7fd6b076] - doc: update support channels (Claudio W.) #57538ef624aff55] - doc: remove cryptoStream API reference (Jonas) #575794a2afc255a] - doc: module resolution pseudocode corrections (Marcel Laverdet) #57080ee5059426d] - doc: add history entry for DEP0190 inchild_process.md(Antoine du Hamel) #575444deebb4fca] - doc: remove deprecated pattern inchild_process.md(Antoine du Hamel) #575686cd7b37d9c] - doc: mark multiple experimental APIS as stable (James M Snell) #57510c2f1fa0928] - doc: remove mertcanaltin from Triagers (Mert Can Altin) #575319b6047e520] - doc: recommend watching the collaborators repo in the onboarding doc (Darshan Sen) #57527bf1e297079] - doc: remove mention of visa fees from onboarding doc (Darshan Sen) #575261041331094] - doc: deprecate passingargstospawnandexecFile(Antoine du Hamel) #5738906994d5a75] - doc: remove some inconsistencies indeprecations.md(Antoine du Hamel) #57512707f851ba3] - doc: run license-builder (github-actions[bot]) #57511a7793195d6] - doc: add new writing-docs contributing md (Dario Piotrowicz) #5750230d4a43b3d] - doc: add node.js streams references to Web Streams doc (Dario Piotrowicz) #57393e08365980b] - doc: prefer to sign commits under nodejs repository (Rafael Gonzaga) #57311c35e1f9048] - doc: fixed the incorrect splitting of multiple words (letianpailove) #574543e1f3bc2bb] - doc: add review guidelines for collaborator nominations (Antoine du Hamel) #57449fef3f82a41] - doc: add history info for --use-system-ca (Darshan Sen) #5743296afdf949d] - doc: remove typo YAML snippet from tls.getCACertificates doc (Darshan Sen) #57459800d61d47e] - doc: fix typo in sqlite.md (Tobias Nießen) #574734876aee775] - doc: explicit mention arbitrary code execution as a vuln (Rafael Gonzaga) #574262dd72c658f] - doc: update maintaining-openssl.md for openssl (Richard Lau) #57413a49fd31f04] - doc: add missingdeprecatedbadges infs.md(Yukihiro Hasegawa) #573843a4ed77674] - doc: add note about sync nodejs-private branches (Rafael Gonzaga) #574041025e6dc7c] - doc: update Xcode version used for arm64 and pkg (Michaël Zasso) #5710477b9e04a70] - doc: improve type stripping documentation (Marco Ippolito) #569163a75e8410d] - doc: specificy support for erasable ts syntax (Marco Ippolito) #5691669f12f9686] - doc: make first parameter optional inutil.getCallSites(Deokjin Kim) #573872b4e737ffb] - doc: fix usage of module.registerSync in comment (Timo Kössler) #57328f320593958] - doc: add Darshan back as voting TSC member (Michael Dawson) #574022b7765469a] - doc: revise webcrypto.md types, interfaces, and added versions (Filip Skokan) #57376649828c74a] - doc: add info on how project manages social media (Michael Dawson) #573182a2e1cfd71] - doc: revisetsconfig.jsonnote (Steven) #5735317883b1d46] - doc: use more clear name in getSystemErrorMessage's example (ikuma-t) #573107feed9989b] - doc: recommend settingnoEmit: trueintsconfig.json(Steven) #57320fe707ab162] - doc: ping nodejs/tsc for each security pull request (Rafael Gonzaga) #57309f3c58ab693] - doc: fix Windows ccache section position (Stefan Stojanovic) #57326e69170bacd] - doc: update node-api version matrix (Chengzhong Wu) #572870bc1fd2245] - doc: recommenderasableSyntaxOnlyin ts docs (Rob Palmer) #57271068013744e] - doc: clarifypath.isAbsoluteis not path traversal mitigation (Eric Fortis) #57073238b0e856e] - doc: fix rendering of DEP0174 description (David Sanders) #56835db0bcefd14] - doc: add 1ilsang to triage team (1ilsang) #5718352a593feab] - doc: add @geeksilva97 to collaborators (Edy Silva) #5724189f4475e32] - doc: add missing assert return types (Colin Ihrig) #5721962b6d94c03] - doc: add streamResetBurst and streamResetRate (Sujal Raj) #57195f150017e70] - doc: add esm examples to node:util (Alfredo González) #5679399465ffa9c] - doc: update options to filehandle.appendFile() (Hasegawa-Yukihiro) #569726242520a90] - doc: add additional caveat for fs.watch (Michael Dawson) #5715019cda4791a] - doc: fix typo in Windows building instructions (Tim Jacomb) #57158ef206add59] - doc: fix web.libera.chat link in pull-requests.md (Samuel Bronson) #570767243c1713d] - doc: remove buffered flag from performance hooks examples (Pavel Romanov) #52607617fe71f67] - doc: fix 'introduced_in' version in typescript module (1ilsang) #571096cc15b8dc9] - doc: fix link and history ofSourceMapsections (Antoine du Hamel) #570986be8189041] - doc: addmodule namespace objectlinks (Dario Piotrowicz) #570938611c4a3ea] - doc: disambiguate pseudo-code statement (Dario Piotrowicz) #5709279da145a55] - doc: update clang-cl on Windows building guide (Joyee Cheung) #57087845eaf91be] - doc: fix wrong articles used to address modules (Dario Piotrowicz) #5709042c5e23eb1] - doc:modules.md: fixdistancedefinition (Alexander “weej” Jones) #57046bda851aaa3] - doc: fix wrong verb form (Dario Piotrowicz) #5709164e13fd36e] - doc: fix transpiler loader hooks documentation (Joyee Cheung) #5703751494d8b78] - doc: add a note aboutrequire('../common')in testing documentation (Aditi) #56953053b128e9c] - doc: recommend writing tests in new files and including comments (Joyee Cheung) #57028a20c62a00c] - doc: improve documentation on argument validation (Aditi) #569542921658813] - doc: buffer: fix typo onBuffer.copyBytesFrom(offsetoption (tpoisseau) #570156f4ab1c9b2] - doc: update cleanup to trust on vuln db automation (Rafael Gonzaga) #570045285facb3e] - doc: move stability index after history section for consistency (Antoine du Hamel) #56997a7646e17ff] - doc: addsignaltofilehandle.writeFile()options (Yukihiro Hasegawa) #56804ba031089e6] - doc: run license-builder (github-actions[bot]) #56985afa6f93a32] - doc: update history of stream.Readable.toWeb() (Jimmy Leung) #56928cc644de126] - doc: make MDN links to global classes more consistent (Antoine du Hamel) #5692493bba4eee1] - doc: make MDN links to global classes more consistent inassert.md(Antoine du Hamel) #56920ad03c85f98] - doc: make MDN links to global classes more consistent (Antoine du Hamel) #5692396c2a90dee] - doc: make MDN links to global classes more consistent inutil.md(Antoine du Hamel) #569226bb73c0745] - doc: make MDN links to global classes more consistent inbuffer.md(Antoine du Hamel) #56921824cf35475] - doc: update post sec release process (Rafael Gonzaga) #56907027749eb17] - doc: update websocket link to avoid linking to self (Chengzhong Wu) #568975dcb9d632b] - doc: mark--env-file-if-existsflag as experimental (Juan José) #568934f6d751bf5] - doc: fix typo in cjs example ofutil.styleText(Deokjin Kim) #56769313d9db7a5] - doc: clarify sqlite user-defined function behaviour (René) #56786eff42956c4] - doc: correct customization hook types & clarify descriptions (Jacob Smith) #5645464180421c2] - events: getMaxListeners detects 0 listeners (Matthew Aitken) #568072de27787b4] - fs: apply exclude function to root path (Rich Trott) #57420b6df9e350a] - fs: handle UV_ENOTDIR infs.statSyncwiththrowIfNoEntryprovided (Juan José Arboleda) #5699614b2d496a0] - fs: makeFileHandle.readableWebStreamalways create byte streams (Ian Kerins) #5546110d2f1d898] - http: coerce content-length to number (Marco Ippolito) #574589192b7fa25] - http: be more generational GC friendly (ywave620) #567671cf98a8788] - inspector: convert event params to protocol without json (Chengzhong Wu) #570276dcad868bb] - inspector: skip promise hook in the inspector async hook (Joyee Cheung) #57148787e93f75a] - inspector: add Network.Initiator in inspector protocol (Chengzhong Wu) #56805c7c04d0dc8] - inspector: fix GN build (Cheng) #56798177da9c3c3] - inspector: fix StringUtil::CharacterCount for unicodes (Chengzhong Wu) #567881b5418eeea] - lib: add warning when binding inspector to public IP (Demian Parkhomenko) #55736cc4d33842b] - lib: limit split function calls to prevent excessive array length (Gürgün Dayıoğlu) #575010546612d1d] - lib: make getCallSites sourceMap option truly optional (James M Snell) #57388d7d54e6bf3] - lib: optimize priority queue (Gürgün Dayıoğlu) #5710062761c73a1] - lib: fixup incorrect argument order in assertEncoding (James M Snell) #571775dce55c376] - meta: add some clarification to the nomination process (James M Snell) #57503a2a4cf1d95] - meta: remove collaborator self-nomination (Rich Trott) #57537244f74b844] - meta: edit collaborator nomination process (Antoine du Hamel) #57483dec204bb3f] - meta: move ovflowd to emeritus (Claudio W.) #57443c0b8b84384] - meta: bump codecov/codecov-action from 5.3.1 to 5.4.0 (dependabot[bot]) #5725714cbe292da] - meta: bump github/codeql-action from 3.28.8 to 3.28.10 (dependabot[bot]) #5725469d2dd69e2] - meta: bump ossf/scorecard-action from 2.4.0 to 2.4.1 (dependabot[bot]) #572535f3428ded6] - meta: move RaisinTen back to collaborators, triagers and SEA champion (Darshan Sen) #572923eea8c72fc] - meta: bump actions/download-artifact from 4.1.8 to 4.1.9 (dependabot[bot]) #572602508893edb] - meta: bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (dependabot[bot]) #57259fc09523f44] - meta: bump step-security/harden-runner from 2.10.4 to 2.11.0 (dependabot[bot]) #57258b162402440] - meta: bump actions/cache from 4.2.0 to 4.2.2 (dependabot[bot]) #57256f781be1332] - meta: bump actions/upload-artifact from 4.6.0 to 4.6.1 (dependabot[bot]) #572557934ad9fc0] - meta: bumpactions/setup-pythonfrom 5.3.0 to 5.4.0 (dependabot[bot]) #56867eb4fb9ce90] - meta: bumppeter-evans/create-pull-requestfrom 7.0.5 to 7.0.6 (dependabot[bot]) #56866a14e7f1cc4] - meta: bumpmozilla-actions/sccache-actionfrom 0.0.6 to 0.0.7 (dependabot[bot]) #568656c8a9e3d0d] - meta: bumpcodecov/codecov-actionfrom 5.0.7 to 5.3.1 (dependabot[bot]) #56864f438c27cbf] - meta: bumpstep-security/harden-runnerfrom 2.10.2 to 2.10.4 (dependabot[bot]) #5686324b7fcb153] - meta: bumpactions/cachefrom 4.1.2 to 4.2.0 (dependabot[bot]) #56862a0afc47988] - meta: bumpactions/stalefrom 9.0.0 to 9.1.0 (dependabot[bot]) #568608abf4e5d7d] - meta: bumpgithub/codeql-actionfrom 3.27.5 to 3.28.8 (dependabot[bot]) #56859c5bff736e9] - meta: add CODEOWNERS for SQLite (Colin Ihrig) #57147fd2abaa088] - meta: update last name for jkrems (Jan Martin) #570062383f00aae] - meta: bumpactions/upload-artifactfrom 4.4.3 to 4.6.0 (dependabot[bot]) #5686135b3140d03] - meta: bumpactions/setup-nodefrom 4.1.0 to 4.2.0 (dependabot[bot]) #56868815fcef73d] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #5688908001127a2] - meta: add @nodejs/url as codeowner (Chengzhong Wu) #567833ceda2a035] - module: handle cached linked async jobs in require(esm) (Joyee Cheung) #571874c29cc7e6b] - module: add dynamic file-specific ESM warnings (Mert Can Altin) #56628d1845edd21] - module: improve error message from asynchronicity in require(esm) (Joyee Cheung) #5712641fa7d3c21] - module: allow omitting context in synchronous next hooks (Joyee Cheung) #57056deddecce3a] - module: fix require.resolve() crash on non-string paths (Aditi) #56942926b887534] - module: fixing url change in load sync hook chain (Vitalii Akimov) #564026b93ba723b] - (SEMVER-MINOR) module: use synchronous hooks for preparsing in import(cjs) (Joyee Cheung) #55698b2e44a8079] - (SEMVER-MINOR) module: implement module.registerHooks() (Joyee Cheung) #55698e79e67f6dc] - net: validate non-string host for socket.connect (Daeyeon Jeong) #57198e23056212e] - net: replace brand checks with identity checks (Yagiz Nizipli) #573419c0d5e140b] - net: emit an error when custom lookup resolves to a non-string address (Edy Silva) #571922ce79787de] - (SEMVER-MINOR) process: add execve (Paolo Insogna) #56496712db2232c] - readline: add support forSymbol.dispose(Antoine du Hamel) #5727655fb81c0f1] - readline: fix unresolved promise on abortion (Daniel Venable) #54030dfcd9b1ac2] - sea: suppress builtin warning with disableExperimentalSEAWarning option (koooge) #57086bd5c90654a] - sqlite: add support for unknown named parameters (Colin Ihrig) #57552ec571382a4] - sqlite: add DatabaseSync.prototype.isOpen (Colin Ihrig) #57522bb3bbed126] - sqlite: add DatabaseSync.prototype[Symbol.dispose]() (Colin Ihrig) #575066067bea027] - sqlite: restore changes from #55373 (Colin Ihrig) #56908bc672fcfdd] - (SEMVER-MINOR) sqlite: allow returningArrayBufferViews from user-defined functions (René) #56790227603dc30] - sqlite,test,doc: allow Buffer and URL as database location (Edy Silva) #569919dd324467a] - src: cleanup aliased_buffer.h (Mohammed Keyvanzadeh) #5739545a2b8532b] - src: do not pass nullptr to std::string ctor (Charles Kerr) #57354854370a06c] - src: fix process exit listeners not receiving unsettled tla codes (Dario Piotrowicz) #56872f7fb259193] - src: refactor SubtleCrypto algorithm and length validations (Filip Skokan) #57319c7bcc2d6c8] - src: allow embedder customization of OOMErrorHandler (Shelley Vohr) #57325fbd8862156] - src: use Maybe<void> in ProcessEmitWarningSync (Daeyeon Jeong) #5725004de550289] - src: make even more improvements to error handling (James M Snell) #57264f1c5e46f89] - src: use cachedemitv8::String (Daeyeon Jeong) #5724965b8e12689] - src: refactor SubtleCrypto algorithm and length validations (Filip Skokan) #57273b6091a8b21] - src: make more error handling improvements (James M Snell) #572623bd8a6c76e] - src: fix typo in comment (Antoine du Hamel) #57291f7e39385ae] - src: improve error handling innode_messaging.cc(James M Snell) #572111bb561bede] - src: improve error handling intty_wrap.cc(James M Snell) #57211567d321a40] - src: improve error handling intcp_wrap.cc(James M Snell) #57211f8bee871f7] - src: fix ThrowInvalidURL call in PathToFileURL (Daniel M Brasil) #57141817f7d0e2e] - src: improve error handling in buffer and dotenv (James M Snell) #5718911ef7f9d9c] - src: improve error handling in module_wrap (James M Snell) #571883b08d718b1] - src: improve error handling in spawn_sync (James M Snell) #571859221c2ad87] - src: detect whether the string is one byte representation or not (theweipeng) #56147e323694772] - src: fix crash when lazy getter is invoked in a vm context (Chengzhong Wu) #571689363b05a91] - src: do not format single string argument for THROW_ERR_* (Joyee Cheung) #571265d6a1bc35b] - src: move instead of copy shared pointer in node_blob (Michaël Zasso) #571205dab48fd9f] - src: replace NewFromUtf8 with OneByteString where appropriate (James M Snell) #570960fe60b478d] - src: portdefineLazyPropertiesto native code (Antoine du Hamel) #57081792959db1d] - src: improve error handling in node_blob (James M Snell) #57078e05e2cfb1e] - src: fix accessing empty string (Cheng) #57014619e52ce8d] - src: lock the isolate properly in IsolateData destructor (Joyee Cheung) #57031844a4a884d] - src: add self-assigment memcpy checks (Burkov Egor) #569860d1e79740f] - src: improve node::Dotenv trimming (Dario Piotrowicz) #5698350f164e23b] - src: improve error handling in string_bytes/decoder (James M Snell) #5697893aa4393a4] - src: improve error handling in process_wrap (James M Snell) #56977c1c824e38d] - src: useargs.This()in zlib (Michaël Zasso) #569880a8e474bdc] - src: add nullptr handling forNativeKeyObject(Burkov Egor) #569001ea6198a5a] - src: disallow copy/move fns/constructors (Yagiz Nizipli) #56811e4100853cb] - src: add a hard dependency v8_inspector_headers (Chengzhong Wu) #56805a1f92898c0] - src: improve error handling in encoding_binding.cc (James M Snell) #56915dee8793d94] - src: improve error handling in permission.cc (James M Snell) #56904f41bc4cfd7] - src: improve error handling in node_sqlite (James M Snell) #56891e4df6181bf] - src: improve error handling in node_os by removing ToLocalChecked (James M Snell) #568882c96e7a32c] - src: improve error handling in node_url (James M Snell) #5688636926ae8d8] - src: add check for Bignum in GroupOrderSize (Burkov Egor) #56702a68f127a30] - src: reduce string allocations on sqlite (Yagiz Nizipli) #57227e41b1735f1] - stream: fix sizeAlgorithm validation in WritableStream (Daeyeon Jeong) #572803bc877dc5c] - test: add more number cases for buffer.indexOf (Meghan Denny) #57200cac9a4e832] - test: update parallel/test-tls-dhe for OpenSSL 3.5 (Richard Lau) #574773082ab3a64] - test: module syntax should throw (Marco Ippolito) #571219b0dfc9a44] - test: update snapshots for amaro v0.3.2 (Marco Ippolito) #569162defc35ea8] - test: test runner run plan (Pietro Marchini) #57304ccb3df70be] - test: update WPT for WebCryptoAPI toedd42c0(Node.js GitHub Bot) #57365528103c5d0] - test: simplify test-tls-connect-abort-controller.js (Yagiz Nizipli) #5733817e21e6eb5] - test: useassert.matchintest-esm-import-meta(Antoine du Hamel) #5729077bbee5184] - test: update compression wpt (Yagiz Nizipli) #569604fe88f8f53] - Revert "test: temporary remove resource check from fs read-write" (Rafael Gonzaga) #56906766efc7758] - test: more common.mustNotCall in net, tls (Meghan Denny) #57246562e635e11] - test: swap assert.strictEqual() parameters (Luigi Pinca) #5721764fdfd5622] - test: assert write return values in buffer-bigint64 (Meghan Denny) #57212dd538e7cf1] - test: allow embedder running async context frame test (Shelley Vohr) #57193937bbeb2b6] - test: resolve race condition in test-net-write-fully-async-* (Matteo Collina) #5702232df9f27d8] - test: add doAppendAndCancel test (Hasegawa-Yukihiro) #5697290c98df258] - test: fix test-without-async-context-frame.mjs in debug mode (Joyee Cheung) #57034974817c9fc] - test: make eval snapshot comparison more flexible (Shelley Vohr) #5702009741cd129] - test: simplify test-http2-client-promisify-connect-error (Luigi Pinca) #5714489f3feb364] - test: improve error output of test-http2-client-promisify-connect-error (Antoine du Hamel) #5713525751eba4d] - test: add case for unrecognised fields within pjson "exports" (Jacob Smith) #57026bf0b9fa7c0] - test: remove unnecessary assert requiring from tests (Dario Piotrowicz) #570088cfb2df466] - test: reduce flakiness on test-net-write-fully-async-buffer (Yagiz Nizipli) #5697143c8c101da] - test: remove flakiness on macOS test (Yagiz Nizipli) #56971bd47178f7f] - test: improve timeout duration for debugger events (Yagiz Nizipli) #5697065694aa2fd] - test: remove unnecessary syscall to cpuinfo (Yagiz Nizipli) #569685633c4b2df] - test: update webstorage wpt (Yagiz Nizipli) #569632244a2776a] - test: execute shell directly for refresh() (Yagiz Nizipli) #55051afae4b1216] - test: change jenkins reporter (Carlos Espa) #56808b26592a7c4] - test: fix race condition in test-child-process-bad-stdio (Colin Ihrig) #5684572c2279649] - test: adjust check to use OpenSSL sec level (Michael Dawson) #568199551b27651] - test: test-crypto-scrypt.js doesn't need internals (Meghan Denny) #566733095db84be] - test: settest-fs-cpas flaky (Stefan Stojanovic) #5679931f98d7ccd] - test: search cctest files (Chengzhong Wu) #56791267f17d5f6] - test: convert test_encoding_binding.cc to a JS test (Chengzhong Wu) #56791a875d7bdd1] - test: test-crypto-prime.js doesn't need internals (Meghan Denny) #5667585482d69c6] - test: temporary remove resource check from fs read-write (Rafael Gonzaga) #56789ec63d72f16] - test: mark test-without-async-context-frame flaky on windows (James M Snell) #56753f16acc8521] - test: remove unnecessary code (Luigi Pinca) #567840573c19a97] - test: marktest-esm-loader-hooks-inspect-waitflaky (Richard Lau) #5680348e0fd3f13] - test: update WPT for url toa23788b(Node.js GitHub Bot) #56779642959b87f] - test: remove duplicate error reporter from ci (Carlos Espa) #567392023237b4e] - test,crypto: make tests work for BoringSSL (Shelley Vohr) #570211b33b976ec] - test_runner: refactor testPlan counter increse (Pietro Marchini) #56765d860f2bf42] - test_runner: differentiate test types in enqueue dequeue events (Eddie Abbondanzio) #54049993bab646c] - test_runner: print formatted errors on summary (Pietro Marchini) #569113ed3ba438f] - test_runner: allow special characters in snapshot keys (Carlos Espa) #57017d1da9a3a2f] - timers: optimize timer functions with improved argument handling (Gürgün Dayıoğlu) #5707244aa13990a] - timers: remove unnecessary allocation of _onTimeout (Gürgün Dayıoğlu) #57497401b965977] - timers: remove unused parameter from insertGuarded (Gürgün Dayıoğlu) #572519eac9c02c9] - timers: simplify the compareTimersLists function (Gürgün Dayıoğlu) #5711001215af350] - tls: remove unnecessary type check on normalize (Yagiz Nizipli) #57336f5e2b12a60] - (SEMVER-MINOR) tls: implement tls.getCACertificates() (Joyee Cheung) #571077a777cdb58] - tools: fix WPT update cron string (Antoine du Hamel) #57665c6d90dbf9b] - tools: remove stalled label on unstalled issues and PRs (Rich Trott) #5763096f7f64602] - tools: update sccache to support GH cache changes (Michaël Zasso) #575730b87027520] - tools: bump @babel/helpers from 7.26.9 to 7.26.10 in /tools/eslint (dependabot[bot]) #574447d561eb90c] - tools: add config subspace (Marco Ippolito) #5723946efdbf59f] - tools: import rather than require ESLint plugins (Michaël Zasso) #57315502bfaf876] - tools: switch back to official OpenSSL (Richard Lau) #57301ea821f419d] - tools: revert to use @stylistic/eslint-plugin-js v3 (Joyee Cheung) #57314bb857615d3] - tools: add more details about rolling inspector_protocol (Chengzhong Wu) #571673f29d39c1b] - tools: bump the eslint group in /tools/eslint with 5 updates (dependabot[bot]) #57261b3caac83d4] - tools: remove deps/zlib/GN-scraper.py (Chengzhong Wu) #57238ace99ffe79] - tools: run Linux tests on GitHub arm64 runners as well (Dennis Ameling) #57162e65e6269b7] - tools: consolidate 'introduced_in' check for docs (1ilsang) #57109890841e64b] - tools: do not run major-release workflow on forks (Rich Trott) #57064e3f86c5a0c] - tools: fix release URL computation in update-root-certs.mjs (Joyee Cheung) #56843280316f773] - tools: add support forimport sourcesyntax in linter (Antoine du Hamel) #56992998b2ae3cd] - tools: bump eslint version (dependabot[bot]) #56869ca4121b95a] - tools: remove test-asan/ubsan workflows (Michaël Zasso) #56823866ac37255] - tools: run macOS test workflow with Xcode 16.1 (Michaël Zasso) #5683155ca46ad8e] - tools: update sccache and sccache-action (Michaël Zasso) #56815be9c1c93a8] - tools: fix license-builder for inspector_protocol (Michaël Zasso) #568146dab980fab] - typings: fixImportModuleDynamicallyCallbackreturn type (Chengzhong Wu) #57160e301098854] - util: avoid run debug when enabled is false (fengmk2) #5749417016d7722] - (SEMVER-MINOR) util: expose diff function used by the assertion errors (Giovanni Bucci) #5746242b9e19f6b] - util: enforce shouldColorize in styleText array arg (Marco Ippolito) #567225ed6d8be40] - (SEMVER-MINOR) v8: add v8.getCppHeapStatistics() method (Aditi) #57146c06d218b23] - win,build: add option to enable Control Flow Guard (Hüseyin Açacak) #566058202211140] - win,test: disable test case failing with ClangCL (Stefan Stojanovic) #573971a12b4c119] - zlib: use modern class syntax for zstd classes (Yagiz Nizipli) #56965f9b3680268] - zlib: make all zstd functions experimental (Yagiz Nizipli) #569644991e5d826] - (SEMVER-MINOR) zlib: add zstd support (Jan Martin) #52100v22.14.0: 2025-02-11, Version 22.14.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
82a9000e9e] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #56566b7fe54fc88] - (SEMVER-MINOR) fs: allowexcludeoption in globs to accept glob patterns (Daeyeon Jeong) #564893ac92ef607] - (SEMVER-MINOR) lib: add typescript support to STDIN eval (Marco Ippolito) #563591614e8e7bc] - (SEMVER-MINOR) module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX (Marco Ippolito) #566106d6cffa9cc] - (SEMVER-MINOR) module: addfindPackageJSONutil (Jacob Smith) #55412d35333ae18] - (SEMVER-MINOR) process: add process.ref() and process.unref() methods (James M Snell) #5640007ff3ddcb5] - (SEMVER-MINOR) sqlite: support TypedArray and DataView inStatementSync(Alex Yang) #5638594d3fe1b62] - (SEMVER-MINOR) src: add --disable-sigusr1 to prevent signal i/o thread (Rafael Gonzaga) #564415afffb4415] - (SEMVER-MINOR) src,worker: add isInternalWorker (Carlos Espa) #56469697a851fb3] - (SEMVER-MINOR) test_runner: add TestContext.prototype.waitFor() (Colin Ihrig) #56595047537b48c] - (SEMVER-MINOR) test_runner: add t.assert.fileSnapshot() (Colin Ihrig) #56459926cf84e95] - (SEMVER-MINOR) test_runner: add assert.register() API (Colin Ihrig) #56434c658a8afdf] - (SEMVER-MINOR) worker: add eval ts input (Marco Ippolito) #56394Commits
bad1ad8650] - assert: make myers_diff function more performant (Giovanni Bucci) #56303e222e36f3b] - assert: make partialDeepStrictEqual work with urls and File prototypes (Giovanni Bucci) #56231e232789fe2] - assert: show diff when doing partial comparisons (Giovanni Bucci) #56211c99de1fdcf] - assert: make partialDeepStrictEqual throw when comparing [0] with [-0] (Giovanni) #562372386fd5840] - benchmark: add validateStream to styleText bench (Rafael Gonzaga) #56556b197dfa7ec] - build: fix GN build for ngtcp2 (Cheng) #563002a3cdd34ff] - build: test macos-13 on GitHub actions (Michaël Zasso) #5630712f716be0a] - build: build v8 with -fvisibility=hidden on macOS (Joyee Cheung) #56275c5ca15bd34] - child_process: fix parsing messages with splitted length field (Maksim Gorkov) #561068346b8fc2c] - crypto: add missing return value check (Michael Dawson) #5661582a9000e9e] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #56566890eef20a1] - crypto: fix checkPrime crash with large buffers (Santiago Gimeno) #565595edb7b5e87] - crypto: fix warning of ignoring return value (Cheng) #56527b89f123a0b] - crypto: make generatePrime/checkPrime interruptible (James M Snell) #5646063c1859e01] - deps: update corepack to 0.31.0 (Node.js GitHub Bot) #56795a48430d4d3] - deps: move inspector_protocol to deps (Chengzhong Wu) #5664974cccc824f] - deps: macro ENODATA is deprecated in libc++ (Cheng) #56698fa869ea0f2] - deps: fixup some minor coverity warnings (James M Snell) #566121a4fa2b015] - deps: update amaro to 0.3.0 (Node.js GitHub Bot) #56568b47076fd82] - deps: update amaro to 0.2.2 (Node.js GitHub Bot) #5656846bd4b8731] - deps: update simdutf to 6.0.3 (Node.js GitHub Bot) #565678ead9c693b] - deps: update simdutf to 5.7.2 (Node.js GitHub Bot) #5638818d4b502af] - deps: update amaro to 0.2.1 (Node.js GitHub Bot) #56390d938d7cc86] - deps: update googletest to7d76a23(Node.js GitHub Bot) #563879761e7dccb] - deps: update googletest toe54519b(Node.js GitHub Bot) #563708319dc6bc5] - deps: update ngtcp2 to 1.10.0 (Node.js GitHub Bot) #563346eacd19d6a] - deps: update simdutf to 5.7.0 (Node.js GitHub Bot) #5633228bec2dda3] - diagnostics_channel: capture console messages (Stephen Belanger) #56292d519d33502] - doc: update macOS and Xcode versions for releases (Michaël Zasso) #56337fcfe650507] - doc: add note for features usingInternalWorkerwith permission model (Antoine du Hamel) #56706efbba182b5] - doc: add entry to changelog about SQLite Session Extension (Bart Louwers) #5631831bf9c7dd9] - doc: move anatoli to emeritus (Michael Dawson) #565926096e38c7c] - doc: fix styles of the expandable TOC (Antoine du Hamel) #56755d423638281] - doc: add "Skip to content" button (Antoine du Hamel) #56750edeb157d75] - doc: improve accessibility of expandable lists (Antoine du Hamel) #567491a79e87687] - doc: add note regarding commit message trailers (Dario Piotrowicz) #56736927c7e47e4] - doc: fix typo in example code for util.styleText (Robin Mehner) #56720fade522538] - doc: fix inconsistencies inWeakSetandWeakMapcomparison details (Shreyans Pathak) #5668355533bf147] - doc: add RafaelGSS as latest sec release stewards (Rafael Gonzaga) #566828e978bdee1] - doc: clarify cjs/esm diff inqueueMicrotask()vsprocess.nextTick()(Dario Piotrowicz) #56659ae360c30dc] - doc:WeakSetandWeakMapcomparison details (Shreyans Pathak) #56648acd2a2fda5] - doc: mention prepare --security (Rafael Gonzaga) #56617d3c0a2831d] - doc: tweak info on reposts in ambassador program (Michael Dawson) #565893299505b49] - doc: add type stripping to ambassadors program (Marco Ippolito) #56598b1a6ffa4e4] - doc: improve internal documentation on built-in snapshot (Joyee Cheung) #565051641a28930] - doc: document CLI way to open the nodejs/bluesky PR (Antoine du Hamel) #565062042628fda] - doc: add section about using npx with permission model (Rafael Gonzaga) #56539ace19a0263] - doc: update gcc-version for ubuntu-lts (Kunal Kumar) #565534aa57b50f8] - doc: fix parentheses in options (Tobias Nießen) #56563b40b01b4d3] - doc: include CVE to EOL lines as sec release process (Rafael Gonzaga) #565206701360113] - doc: add esm examples to node:trace_events (Alfredo González) #56514d3207cca3e] - doc: add message for Ambassadors to promote (Michael Dawson) #5623597ece4ae06] - doc: allow request for TSC reviews via the GitHub UI (Antoine du Hamel) #5649303f25055ab] - doc: add example for piping ReadableStream (Gabriel Schulhof) #56415516d07482c] - doc: expand description ofparseArg'sdefault(Kevin Gibbons) #54431a6491effcb] - doc: use<ul>instead of<ol>inSECURITY.md(Antoine du Hamel) #56346e4ec134b21] - doc: clarify that WASM is trusted (Matteo Collina) #563450f7aed8a59] - doc: fix thecrc32documentation (Kevin Toshihiro Uehara) #55898721104a296] - doc: fix links inmodule.md(Antoine du Hamel) #56283928540d792] - doc: fix typos (Nathan Baulch) #55066e69d35f03b] - doc: add history info for Permission Model (Antoine du Hamel) #56707c6fd867ab5] - esm: fix jsdoc type refs toModuleJobBasein esm/loader (Jacob Smith) #564999cf9046bd7] - Revert "events: add hasEventListener util for validate" (origranot) #56282b7fe54fc88] - (SEMVER-MINOR) fs: allowexcludeoption in globs to accept glob patterns (Daeyeon Jeong) #564896ca27c2a59] - http2: omit server name when HTTP2 host is IP address (islandryu) #565309f1fa199bf] - inspector: roll inspector_protocol (Chengzhong Wu) #566490dae4bb3ab] - inspector: add undici http tracking support (Chengzhong Wu) #564882c6124cec4] - inspector: report loadingFinished until the response data is consumed (Chengzhong Wu) #5637296ec862ce2] - lib: refactor execution.js (Marco Ippolito) #563583ac92ef607] - (SEMVER-MINOR) lib: add typescript support to STDIN eval (Marco Ippolito) #56359d5bf3db0cf] - lib: allow skipping source maps in node_modules (Chengzhong Wu) #56639d33eaf2bcb] - lib: ensure FORCE_COLOR forces color output in non-TTY environments (Pietro Marchini) #55404dc003218a8] - lib: optimizeprepareStackTraceon builtin frames (Chengzhong Wu) #56299df06524863] - lib: suppress source map lookup exceptions (Chengzhong Wu) #5629935335a5a66] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #565801faabdb150] - meta: add codeowners of security release document (Rafael Gonzaga) #56521b4ece22ef5] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #563429ec67e7ce0] - meta: move MoLow to TSC regular member (Moshe Atlow) #56276bae4b2e20a] - module: use more defensive code when handling SWC errors (Antoine du Hamel) #566461614e8e7bc] - (SEMVER-MINOR) module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX (Marco Ippolito) #56610174d88eab1] - module: support eval with ts syntax detection (Marco Ippolito) #56285299d6fa829] - module: fix jsdoc forformatparameter in cjs/loader (pacexy) #565010307e4dd59] - module: unify TypeScript and .mjs handling in CommonJS (Joyee Cheung) #555901f4f9be93d] - module: fix async resolution error within the syncfindPackageJSON(Jacob Smith) #56382bbedffa0f0] - module: simplifyfindPackageJSONimplementation (Antoine du Hamel) #555436d6cffa9cc] - (SEMVER-MINOR) module: addfindPackageJSONutil (Jacob Smith) #55412cd7ce18233] - module: fix badrequire.resolvewith option paths for.and..(Dario Piotrowicz) #56735152df4da21] - module: rethrow amaro error message (Marco Ippolito) #56568acba5dc87e] - module: use buffer.toString base64 (Chengzhong Wu) #5631501e69be8ff] - node-api: define version 10 (Gabriel Schulhof) #55676724524528e] - node-api: remove deprecated attribute from napi_module_register (Vladimir Morozov) #56162c78e11064f] - process: remove support for undocumented symbol (Antoine du Hamel) #565523f69b18a23] - process: fix symbol key and mark experimental newnode:processmethods (Antoine du Hamel) #56517d35333ae18] - (SEMVER-MINOR) process: add process.ref() and process.unref() methods (James M Snell) #56400fa49f0f7d5] - punycode: limit deprecation warning (Colin Ihrig) #56632d77c7073b7] - sqlite: disable memstatus APIs at build time (Colin Ihrig) #5654107ff3ddcb5] - (SEMVER-MINOR) sqlite: support TypedArray and DataView inStatementSync(Alex Yang) #56385b6c2e91365] - sqlite: enable SQL math functions (Colin Ihrig) #564473462263e8b] - sqlite: pass conflict type to conflict resolution handler (Bart Louwers) #5635289ba3af743] - src: add nullptr handling from X509_STORE_new() (Burkov Egor) #5670089a7c82e0c] - src: add default value for RSACipherConfig mode field (Burkov Egor) #567017bae51e62e] - src: fix build with GCC 15 (tjuhaszrh) #56740432a4b8bd6] - src: fix to generate path from wchar_t via wstring (yamachu) #566968c9eaf82f0] - src: initialize FSReqWrapSync in path that uses it (Michaël Zasso) #56613bcdb42d40b] - src: handle duplicate paths granted (Rafael Gonzaga) #56591d6a7acc207] - src: update ECKeyPointer in ncrypto (James M Snell) #5652601922f8b1f] - src: update ECPointPointer in ncrypto (James M Snell) #565262a3a36eceb] - src: update ECGroupPointer in ncrypto (James M Snell) #5652667c10cdacb] - src: update ECDASSigPointer implementation in ncrypto (James M Snell) #5652617f931c68b] - src: cleaning up more crypto internals for ncrypto (James M Snell) #5652694d3fe1b62] - (SEMVER-MINOR) src: add --disable-sigusr1 to prevent signal i/o thread (Rafael Gonzaga) #564416594ee8dff] - src: fix undefined script name in error source (Chengzhong Wu) #56502b46bad3e91] - src: refactor --trace-env to reuse option selection and handling (Joyee Cheung) #5629376921b822b] - src: minor cleanups on OneByteString usage (James M Snell) #564823f0d1dd4fe] - src: move more crypto impl detail to ncrypto dep (James M Snell) #5642104f623b283] - src: fixup more ToLocalChecked uses in node_file (James M Snell) #564845aa436f5a1] - src: make some minor ToLocalChecked cleanups (James M Snell) #564836eec5e7ec2] - src: lock the thread properly in snapshot builder (Joyee Cheung) #563275614993968] - src: drain platform tasks before creating startup snapshot (Chengzhong Wu) #5640348493e9fd5] - src: use LocalVector in more places (James M Snell) #564577e5ea0681e] - src: use v8::LocalVector consistently with other minor cleanups (James M Snell) #56417ad3d857f2b] - src: use starts_with in fs_permission.cc (ishabi) #558115afffb4415] - (SEMVER-MINOR) src,worker: add isInternalWorker (Carlos Espa) #564697d1676e72e] - stream: fix typo in ReadableStreamBYOBReader.readIntoRequests (Mattias Buelens) #56560e658ea6b26] - stream: validate undefined sizeAlgorithm in WritableStream (Jason Zhang) #56067e4f133c20c] - test: add ts eval snapshots (Marco Ippolito) #56358f041742400] - test: remove empty lines from snapshots (Marco Ippolito) #56358801cde91f6] - test: reduce number of written chunks (Luigi Pinca) #567576fdf1879ab] - test: fix invalid common.mustSucceed() usage (Luigi Pinca) #56756d2bfbfa364] - test: use strict mode in global setters test (Rich Trott) #567425c030da42f] - test: cleanup and simplify test-crypto-aes-wrap (James M Snell) #56748f1442d6eaf] - test: do not use common.isMainThread (Luigi Pinca) #5676849405bd9e7] - test: make some requires lazy in common/index (James M Snell) #5671552ef376788] - test: add test that uses multibyte for path and resolves modules (yamachu) #56696b811dea85a] - test: replace more uses ofglobalwithglobalThis(James M Snell) #56712eb97076199] - test: make common/index slightly less node.js specific (James M Snell) #567121795202d19] - test: rely less on duplicative common test harness utilities (James M Snell) #567125be29a274e] - test: simplify common/index.js (James M Snell) #5671292e99780f0] - test: move hasMultiLocalhost to common/net (James M Snell) #567161c3204a4cc] - test: move crypto related common utilities in common/crypto (James M Snell) #56714fe79d63be0] - test: add missing test for env file (Jonas) #56642e08af61537] - test: enforce strict mode in test-zlib-const (Rich Trott) #56689c96792d7f8] - test: fix localization data for ICU 74.2 (Antoine du Hamel) #5666148b72f1195] - test: use --permission instead of --experimental-permission (Rafael Gonzaga) #56685de81d90fce] - test: test-stream-compose.js doesn't need internals (Meghan Denny) #56619f5b8499ad0] - test: add maxCount and gcOptions to gcUntil() (Joyee Cheung) #56522d9e5a81041] - test: add line break at end of file (Rafael Gonzaga) #5658859be346fbf] - test: mark test-worker-prof as flaky on smartos (Joyee Cheung) #5658312a2cae9e5] - test: update test-child-process-bad-stdio to use node:test (Colin Ihrig) #565622dc4a30e19] - test: disable openssl 3.4.0 incompatible tests (Jelle van der Waa) #561601950fbf51d] - test: make test-crypto-hash compatible with OpenSSL > 3.4.0 (Jelle van der Waa) #56160a533420a91] - test: clarify fork inherit permission flags (Rafael Gonzaga) #56523697e799dc1] - test: add error only reporter for node:test (Carlos Espa) #564384844fa212d] - test: mark test-http-server-request-timeouts-mixed as flaky (Joyee Cheung) #56503843c2389b9] - test: update error code in tls-psk-circuit for for OpenSSL 3.4 (sebastianas) #56420ccb2ddbd83] - test: update compiled sqlite tests to match other tests (Colin Ihrig) #56446b40f50324d] - test: add initial test426 coverage (Chengzhong Wu) #56436059f81e4fd] - test: update test-set-http-max-http-headers to use node:test (Colin Ihrig) #56439ec2940b418] - test: update test-child-process-windows-hide to use node:test (Colin Ihrig) #564370362924880] - test: use unusual chars in the path to ensure our tests are robust (Antoine du Hamel) #48409b6c3869910] - test: improve abort signal dropping test (Edy Silva) #56339cc648ef923] - test: enable ts test on win arm64 (Marco Ippolito) #5634968819b4997] - test: deflake test-watch-file-shared-dependency (Luigi Pinca) #56344ca6ed2190c] - test: skiptest-sqlite-extensionswhen SQLite is not built by us (Antoine du Hamel) #563418ffeb8b58c] - test: increase spin for eventloop test on s390 (Michael Dawson) #562286ae9950f08] - test: migrate message eval tests from Python to JS (Yiyun Lei) #504824352bf69e9] - test: check typescript loader (Marco Ippolito) #54657406e7db9c3] - test: remove async-hooks/test-writewrap flaky designation (Luigi Pinca) #56048fa56ab2bba] - test: deflake test-esm-loader-hooks-inspect-brk (Luigi Pinca) #560508e149aac99] - test: add test case for listeners (origranot) #56282a3f5ef22cd] - test: maketest-permission-sqlite-load-extensionmore robust (Antoine du Hamel) #562958cbb7cc838] - test_runner: print failing assertion only once with spec reporter (Pietro Marchini) #566621f426bad9a] - test_runner: remove unused errors (Pietro Marchini) #56607697a851fb3] - (SEMVER-MINOR) test_runner: add TestContext.prototype.waitFor() (Colin Ihrig) #56595047537b48c] - (SEMVER-MINOR) test_runner: add t.assert.fileSnapshot() (Colin Ihrig) #5645919b4aa4b14] - test_runner: run single test file benchmark (Pietro Marchini) #56479926cf84e95] - (SEMVER-MINOR) test_runner: add assert.register() API (Colin Ihrig) #56434fb4661a4cf] - test_runner: finish marking snapshot testing as stable (Colin Ihrig) #56425900c6c3940] - tls: fix error stack conversion in cryptoErrorListToException() (Joyee Cheung) #56554e9f185b658] - tools: update doc to new version (Node.js GitHub Bot) #562597644c7e619] - tools: update inspector_protocol roller (Chengzhong Wu) #56649362272b0a4] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #56704df8b835953] - tools: fix tools-deps-update (Daniel Lemire) #56684feba5d3274] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #566959827f7d395] - tools: fix permissions inlint-release-proposalworkflow (Antoine du Hamel) #5661414c562c0dc] - tools: remove github reporter (Carlos Espa) #56468ed1785d0ae] - tools: editcreate-release-proposalworkflow (Antoine du Hamel) #56540294e4c42f5] - tools: validate commit list as part oflint-release-commit(Antoine du Hamel) #5629198d3474267] - tools: fix loong64 build failed (Xiao-Tao) #564663e729ceec8] - tools: disable unneeded rule ignoring in Python linting (Rich Trott) #56429d5c05328e2] - tools: use a configurable value for number of open dependabot PRs (Antoine du Hamel) #564271705cbe002] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #5642653b29b0469] - tools: fixrequire-common-firstlint rule from subfolder (Antoine du Hamel) #56325105c4ed4fb] - tools: add release line label when opening release proposal (Antoine du Hamel) #5631730f61f4aa5] - url: use resolved path to convert UNC paths to URL (Antoine du Hamel) #56302a0aef4dfb6] - util: inspect: do not crash on an Error stack that contains a Symbol (Jordan Harband) #56573a8a060341f] - util: inspect: do not crash on an Error with a regexname(Jordan Harband) #56574ea66bf3553] - util: rename CallSite.column to columnNumber (Chengzhong Wu) #565849cdc3b373c] - util: do not crash on inspecting function withSymbolname (Jordan Harband) #565720bfbb68569] - util: expose CallSite.scriptId (Chengzhong Wu) #565515dd7116e09] - watch: reload env file for --env-file-if-exists (Jonas) #56643c658a8afdf] - (SEMVER-MINOR) worker: add eval ts input (Marco Ippolito) #563942e5d038f48] - worker: refactor stdio to improve performance (Matteo Collina) #56630f959805d01] - worker: flush stdout and stderr on exit (Matteo Collina) #56428v22.13.1: 2025-01-21, Version 22.13.1 'Jod' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Dependency update:
Commits
520da342e0] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#66299f217369f] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555984f735e35] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#6502446870618] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#651v22.13.0: 2025-01-07, Version 22.13.0 'Jod' (LTS), @ruyadornoCompare Source
Notable Changes
Stabilize Permission Model
Upgrades the Permission Model status from Active Development to Stable.
Contributed by Rafael Gonzaga #56201
Graduate WebCryptoAPI
Ed25519and X25519 algorithms as stableFollowing the merge of Curve25519 into the Web Cryptography API Editor's Draft the
Ed25519andX25519algorithm identifiers are now stable and will no longer emit an ExperimentalWarning upon use.Contributed by (Filip Skokan) #56142
Other Notable Changes
05d6227a88] - (SEMVER-MINOR) assert: add partialDeepStrictEqual (Giovanni Bucci) #54630a933103499] - (SEMVER-MINOR) cli: implement --trace-env and --trace-env-[js|native]-stack (Joyee Cheung) #55604ba9d5397de] - (SEMVER-MINOR) dgram: support blocklist in udp (theanarkh) #56087f6d0c01303] - doc: stabilize util.styleText (Rafael Gonzaga) #5626534c68827af] - doc: move typescript support to active development (Marco Ippolito) #55536dd14b80350] - doc: add LJHarb to collaborators (Jordan Harband) #561325263086169] - (SEMVER-MINOR) doc: add report version and history section (Chengzhong Wu) #561308cb3c2018d] - (SEMVER-MINOR) doc: sort --report-exclude alphabetically (Rafael Gonzaga) #5578855239a48b6] - (SEMVER-MINOR) doc,lib,src,test: unflag sqlite module (Colin Ihrig) #558907cbe3de1d8] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #561946575b76042] - (SEMVER-MINOR) module: add module.stripTypeScriptTypes (Marco Ippolito) #55282bacfe6d5c9] - (SEMVER-MINOR) net: support blocklist in net.connect (theanarkh) #56075b47888d390] - (SEMVER-MINOR) net: support blocklist for net.Server (theanarkh) #56079566f0a1d25] - (SEMVER-MINOR) net: add SocketAddress.parse (James M Snell) #56076ed7eab1421] - (SEMVER-MINOR) net: add net.BlockList.isBlockList(value) (James M Snell) #56078ea4891856d] - (SEMVER-MINOR) process: deprecatefeatures.{ipv6,uv}andfeatures.tls_*(René) #5554501eb308f26] - (SEMVER-MINOR) report: fix typos in report keys and bump the version (Yuan-Ming Hsu) #5606897c38352d0] - (SEMVER-MINOR) sqlite: aggregate constants in a single property (Edigleysson Silva (Edy)) #56213b4041e554a] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.iteratemethod (tpoisseau) #542132e3ca1bbdd] - (SEMVER-MINOR) src: add cli option to preserve env vars on diagnostic reports (Rafael Gonzaga) #55697bcfe9c80fc] - (SEMVER-MINOR) util: add sourcemap support to getCallSites (Marco Ippolito) #55589Commits
e9024779c0] - assert: make Maps be partially compared in partialDeepStrictEqual (Giovanni Bucci) #561954c13d8e587] - assert: make partialDeepStrictEqual work with ArrayBuffers (Giovanni Bucci) #56098a4fa31a86e] - assert: optimize partial comparison of twoSets (Antoine du Hamel) #5597005d6227a88] - (SEMVER-MINOR) assert: add partialDeepStrictEqual (Giovanni Bucci) #546305e1321abd7] - buffer: document concat zero-fill (Duncan) #55562be5ba7c648] - build: set DESTCPU correctly for 'make binary' on loongarch64 (吴小白) #5627138cf37ee2d] - build: fix missing fp16 dependency in d8 builds (Joyee Cheung) #56266dbb7557455] - build: add major release action (Rafael Gonzaga) #5619927cc90f3be] - build: fix C string encoding forPRODUCT_DIR_ABS(Anna Henningsen) #56111376561c2b4] - build: use variable for simdutf path (Shelley Vohr) #56196126ae15000] - build: allow overriding clang usage (Shelley Vohr) #5601697bb8f7c76] - build: remove defaults for create-release-proposal (Rafael Gonzaga) #56042a8fb1a06f3] - build: set node_arch to target_cpu in GN (Shelley Vohr) #559679f48ca27f1] - build: use variable for crypto dep path (Shelley Vohr) #55928e47ccd2287] - build: fix GN build for sqlite (Cheng) #559128d70b99a5a] - build: compile bundled simdutf conditionally (Jakub Jirutka) #55886826fd35242] - build: compile bundled simdjson conditionally (Jakub Jirutka) #558861015b22085] - build: compile bundled ada conditionally (Jakub Jirutka) #5588677e2869ca6] - build: use glob for dependencies of out/Makefile (Richard Lau) #55789a933103499] - (SEMVER-MINOR) cli: implement --trace-env and --trace-env-[js|native]-stack (Joyee Cheung) #5560472e8e0684e] - crypto: graduate WebCryptoAPIEd25519and X25519 algorithms as stable (Filip Skokan) #56142fe2b344ddb] - crypto: ensure CryptoKey usages and algorithm are cached objects (Filip Skokan) #561089ee9f524a7] - crypto: allow non-multiple of 8 in SubtleCrypto.deriveBits (Filip Skokan) #5529676f242d993] - deps: update nghttp3 to 1.6.0 (Node.js GitHub Bot) #56258c7ff2ea6b5] - deps: update simdutf to 5.6.4 (Node.js GitHub Bot) #5625504230be1ef] - deps: update libuv to 1.49.2 (Luigi Pinca) #5622488589b85b7] - deps: update c-ares to v1.34.4 (Node.js GitHub Bot) #562565c2e0618f3] - deps: define V8_PRESERVE_MOST as no-op on Windows (Stefan Stojanovic) #562389f8f3c9658] - deps: update sqlite to 3.47.2 (Node.js GitHub Bot) #5617817b6931d3b] - deps: update ngtcp2 to 1.9.1 (Node.js GitHub Bot) #5609522b453b619] - deps: upgrade npm to 10.9.2 (npm team) #56135d7eb41b382] - deps: update sqlite to 3.47.1 (Node.js GitHub Bot) #56094669c722aa9] - deps: update zlib to 1.3.0.1-motley-82a5fec (Node.js GitHub Bot) #55980f61a0454d2] - deps: update corepack to 0.30.0 (Node.js GitHub Bot) #55977d98bf0b891] - deps: update ngtcp2 to 1.9.0 (Node.js GitHub Bot) #55975fc362624bf] - deps: update simdutf to 5.6.3 (Node.js GitHub Bot) #55973f61dcc4df4] - deps: upgrade npm to 10.9.1 (npm team) #55951bfe7982491] - deps: update zlib to 1.3.0.1-motley-7e2e4d7 (Node.js GitHub Bot) #54432d714367ef8] - deps: update simdjson to 3.10.1 (Node.js GitHub Bot) #54678ccc9b105ec] - deps: update simdutf to 5.6.2 (Node.js GitHub Bot) #55889ba9d5397de] - (SEMVER-MINOR) dgram: support blocklist in udp (theanarkh) #560877ddbf94849] - dgram: check udp buffer size to avoid fd leak (theanarkh) #56084360d68de0f] - doc: fix color contrast issue in light mode (Rich Trott) #56272f6d0c01303] - doc: stabilize util.styleText (Rafael Gonzaga) #562659436c3c949] - doc: clarify util.aborted resource usage (Kunal Kumar) #55780b1cec2cef9] - doc: add esm examples to node:repl (Alfredo González) #55432d6a84cf781] - doc: add esm examples to node:readline (Alfredo González) #55335a11ac1c0f2] - doc: fix 'which' to 'that' and add commas (Selveter Senitro) #562165331df7911] - doc: fix winget config path (Alex Yang) #562337a8071b43c] - doc: add esm examples to node:tls (Alfredo González) #562297d8c1e72d5] - doc: add esm examples to node:perf_hooks (Alfredo González) #55257ea53c4b1ae] - doc:sea.getRawAsset(key)always returns an ArrayBuffer (沈鸿飞) #562067a94100a3e] - doc: update announce documentation for releases (Rafael Gonzaga) #5620044c4e57e32] - doc: update blog link to /vulnerability (Rafael Gonzaga) #561985e5b4b0cbd] - doc: call out import.meta is only supported in ES modules (Anton Kastritskii) #56186a83de32d35] - doc: add ambassador message - benefits of Node.js (Michael Dawson) #56085bb880dd21a] - doc: fix incorrect link to style guide (Yuan-Ming Hsu) #5618139ce902e58] - doc: fix c++ addon hello world sample (Edigleysson Silva (Edy)) #5617219c72c4acc] - doc: update blog release-post link (Ruy Adorno) #56123b667cc4669] - doc: fix module.md headings (Chengzhong Wu) #5613134c68827af] - doc: move typescript support to active development (Marco Ippolito) #55536c4a97d810b] - doc: mention-aflag for the release script (Ruy Adorno) #56124dd14b80350] - doc: add LJHarb to collaborators (Jordan Harband) #561322feb0781ed] - doc: add create-release-action to process (Rafael Gonzaga) #5599371f6263942] - doc: rename file to advocacy-ambassador-program.md (Tobias Nießen) #560468efa240500] - doc: remove unused import from sample code (Blended Bram) #55570e64cef8bf4] - doc: add FAQ to releases section (Rafael Gonzaga) #559924bb0f30f92] - doc: move history entry to class description (Luigi Pinca) #559916d02bd6873] - doc: add history entry for textEncoder.encodeInto() (Luigi Pinca) #55990e239382ed8] - doc: improve GN build documentation a bit (Shelley Vohr) #5596878b6aef6bc] - doc: fix deprecation codes (Filip Skokan) #56018474bf80a44] - doc: remove confusing and outdated sentence (Luigi Pinca) #5598857381076c5] - doc: deprecate passing invalid types infs.existsSync(Carlos Espa) #55892e529cf6b26] - doc: add doc for PerformanceObserver.takeRecords() (skyclouds2001) #55786a6ef0f6f6e] - doc: add vetted courses to the ambassador benefits (Matteo Collina) #5593463526049f2] - doc: ordernode:cryptoAPIs alphabetically (Julian Gassner) #5583136080b7b61] - doc: doc how to add message for promotion (Michael Dawson) #5584312b2ad4287] - doc: add esm example for zlib (Leonardo Peixoto) #55946352daac296] - doc: fix typo (Alex Yang) #561256e7e9a126d] - doc: document approach for building wasm in deps (Michael Dawson) #559400b3ac05422] - doc: remove RedYetiDev from triagers team (Aviv Keller) #5594720be5e2f80] - doc: add esm examples to node:timers (Alfredo González) #558573ba9b57436] - doc: fix relative path mention in --allow-fs (Rafael Gonzaga) #557913e6b3a9a8b] - doc: include git node release --promote to steps (Rafael Gonzaga) #558355bdfde8dc6] - doc: add history entry for import assertion removal (Antoine du Hamel) #55883c842146c05] - doc: add a note on console stream behavior (Gireesh Punathil) #556165263086169] - (SEMVER-MINOR) doc: add report version and history section (Chengzhong Wu) #561308cb3c2018d] - (SEMVER-MINOR) doc: sort --report-exclude alphabetically (Rafael Gonzaga) #5578855239a48b6] - (SEMVER-MINOR) doc,lib,src,test: unflag sqlite module (Colin Ihrig) #5589004d7c7a349] - fs: make mutatingoptionsin Callbackreaddir()not affect results (LiviaMedeiros) #5605792bcd528e7] - fs: make mutatingoptionsin Promisesreaddir()not affect results (LiviaMedeiros) #560573a55bd9448] - fs: lazily load ReadFileContext (Gürgün Dayıoğlu) #559980331b3fdd3] - fs,win: fix readdir for named pipe (Hüseyin Açacak) #5611079152b54e9] - http: add setDefaultHeaders option to http.request (Tim Perry) #5611219782855a8] - http: don't emit error after destroy (Robert Nagy) #554578494512c17] - http2: remove duplicate codeblock (Vitaly Aminev) #55915d2f82223d1] - http2: support ALPNCallback option (ZYSzys) #561872616f1247a] - http2: fix memory leak caused by premature listener removing (ywave620) #55966598fe048f2] - lib: remove redundant global regexps (Gürgün Dayıoğlu) #56182a3c8739530] - lib: clean up persisted signals when they are settled (Edigleysson Silva (Edy)) #5600111144ab158] - lib: handle Float16Array in node:v8 serdes (Bartek Iwańczuk) #5599681c94a32e4] - lib: disable default memory leak warning for AbortSignal (Lenz Weber-Tronic) #5581668dda61420] - lib: add validation for options in compileFunction (Taejin Kim) #56023d2007aec28] - lib: fixfs.readdirrecursive async (Rafael Gonzaga) #560410571d5556f] - lib: avoid excluding symlinks in recursive fs.readdir with filetypes (Juan José) #55714843943d0ce] - meta: bump github/codeql-action from 3.27.0 to 3.27.5 (dependabot[bot]) #561031529027f03] - meta: bump actions/checkout from 4.1.7 to 4.2.2 (dependabot[bot]) #561028e265de9f5] - meta: bump step-security/harden-runner from 2.10.1 to 2.10.2 (dependabot[bot]) #561010fba3a3b9b] - meta: bump actions/setup-node from 4.0.3 to 4.1.0 (dependabot[bot]) #561002e3fdfdb19] - meta: add releasers as CODEOWNERS to proposal action (Rafael Gonzaga) #560437cbe3de1d8] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #561948a5429c9b3] - module: prevent main thread exiting before esm worker ends (Shima Ryuhei) #561836575b76042] - (SEMVER-MINOR) module: add module.stripTypeScriptTypes (Marco Ippolito) #552820794861bc3] - module: simplify ts under node_modules check (Marco Ippolito) #5544028a11adf14] - module: mark evaluation rejection in require(esm) as handled (Joyee Cheung) #56122bacfe6d5c9] - (SEMVER-MINOR) net: support blocklist in net.connect (theanarkh) #56075566f0a1d25] - (SEMVER-MINOR) net: add SocketAddress.parse (James M Snell) #56076ed7eab1421] - (SEMVER-MINOR) net: add net.BlockList.isBlockList(value) (James M Snell) #56078b47888d390] - (SEMVER-MINOR) net: support blocklist for net.Server (theanarkh) #56079481770a38f] - node-api: allow napi_delete_reference in finalizers (Chengzhong Wu) #556202beb4f1f8c] - permission: ignore internalModuleStat on module loading (Rafael Gonzaga) #55797ea4891856d] - (SEMVER-MINOR) process: deprecatefeatures.{ipv6,uv}andfeatures.tls_*(René) #55545c907b2f358] - quic: update more QUIC implementation (James M Snell) #5598643c25e2e0d] - quic: multiple updates to quic impl (James M Snell) #5597101eb308f26] - (SEMVER-MINOR) report: fix typos in report keys and bump the version (Yuan-Ming Hsu) #560681cfa31fb82] - sea: only assert snapshot main function for main threads (Joyee Cheung) #5612097c38352d0] - (SEMVER-MINOR) sqlite: aggregate constants in a single property (Edigleysson Silva (Edy)) #562132268c1ea8b] - sqlite: add support for custom functions (Colin Ihrig) #55985f5c6955722] - sqlite: supportdb.loadExtension(Alex Yang) #539009a60bea6b7] - sqlite: deps includesqlite3ext.h(Alex Yang) #56010b4041e554a] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.iteratemethod (tpoisseau) #542132889e8da04] - src: fix outdated js2c.cc references (Chengzhong Wu) #561335ce020b0c9] - src: use spaceship operator in SocketAddress (James M Snell) #56059a32fa30847] - src: add missing qualifiers to env.cc (Yagiz Nizipli) #56062974b7b61ef] - src: use std::string_view for process emit fns (Yagiz Nizipli) #560864559fac862] - src: remove dead code in async_wrap (Gerhard Stöbich) #56065e42e4b20be] - src: avoid copy on getV8FastApiCallCount (Yagiz Nizipli) #56081c188660e8b] - src: fix check fd (theanarkh) #56000d894cb76ff] - src: safely remove the last line from dotenv (Shima Ryuhei) #559822ca9f4b65a] - src: fix kill signal on Windows (Hüseyin Açacak) #555142e3ca1bbdd] - (SEMVER-MINOR) src: add cli option to preserve env vars on dr (Rafael Gonzaga) #55697359fff1c4e] - src,build: add no user defined deduction guides of CTAD check (Chengzhong Wu) #5607157bb983215] - (SEMVER-MINOR) src,lib: stabilize permission model (Rafael Gonzaga) #56201d352b0465a] - stream: commit pull-into descriptors after filling from queue (Mattias Buelens) #56072eef9bd1bf6] - test: remove test-sqlite-statement-sync flaky designation (Luigi Pinca) #560518718135a5d] - test: use --permission over --experimental-permission (Rafael Gonzaga) #562399c68d4f180] - test: remove exludes for sea tests on PPC (Michael Dawson) #56217c5d0472968] - test: fix test-abortsignal-drop-settled-signals flakiness (Edigleysson Silva (Edy)) #561974adf518689] - test: move localizationd data fromtest-icu-envto external file (Livia Medeiros) #5561802383b4267] - test: update WPT for url to6fa3fe8(Node.js GitHub Bot) #561360e24eebf24] - test: removehasOpenSSL3xutils (Antoine du Hamel) #56164381e705385] - test: update streams wpt (Mattias Buelens) #56072ad107ca0d9] - test: remove test-fs-utimes flaky designation (Luigi Pinca) #56052e15c5dab79] - test: ensurecli.mdis in alphabetical order (Antoine du Hamel) #56025d0302e7d2d] - test: update WPT for WebCryptoAPI to3e3374e(Node.js GitHub Bot) #56093a0b1e8f400] - test: update WPT for WebCryptoAPI to76dfa54(Node.js GitHub Bot) #56093211f058a12] - test: move test-worker-arraybuffer-zerofill to parallel (Luigi Pinca) #56053c52bc5d71c] - test: update WPT for url to67880a4(Node.js GitHub Bot) #559991a78bde8d4] - test: make HTTP/1.0 connection test more robust (Arne Keller) #55959ff7b1445a0] - test: convert readdir test to use test runner (Thomas Chetwin) #55750b296b5a4e4] - test: make x509 crypto tests work with BoringSSL (Shelley Vohr) #5592797458ad74b] - test: fix determining lower priority (Livia Medeiros) #55908bb4aa7a296] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #55997fb98fa4967] - test_runner: refactor Promise chain in run() (Colin Ihrig) #5595818c94961f8] - test_runner: refactor build Promise in Suite() (Colin Ihrig) #55958bf3967fd3a] - test_runner: simplify hook running logic (Colin Ihrig) #559638c065dc61e] - test_runner: mark context.plan() as stable (Colin Ihrig) #558958ff082cf48] - test_runner: mark snapshot testing as stable (Colin Ihrig) #558977ae125cef4] - tools: fixnode:enforcement for docs (Antoine du Hamel) #562840b489116a3] - tools: update github_reporter to 1.7.2 (Node.js GitHub Bot) #562055306819fac] - tools: add REPLACEME check to workflow (Mert Can Altin) #562514e3cab44cb] - tools: usegithub.actorinstead of bot username for release proposals (Antoine du Hamel) #562323e8938463a] - Revert "tools: disable automated libuv updates" (Luigi Pinca) #5622398ea499e36] - tools: update gyp-next to 0.19.1 (Anna Henningsen) #561112e76cd2a8b] - tools: fix release proposal linter to support more than 1 folk preparing (Antoine du Hamel) #562039fa0e41665] - tools: enable linter fortools/icu/**(Livia Medeiros) #56176d6e1efcc59] - tools: use commit title as PR title when creating release proposal (Antoine du Hamel) #56165a88e4ce55e] - tools: update gyp-next to 0.19.0 (Node.js GitHub Bot) #56158bd0760efbc] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #56099c5b1cf4b12] - tools: improve release proposal PR opening (Antoine du Hamel) #5616112baefb13d] - tools: updatecreate-release-proposalworkflow (Antoine du Hamel) #56054e6e1495f1a] - tools: fix update-undici script (Michaël Zasso) #56069ed635c90da] - tools: allow dispatch oftools.ymlfrom forks (Antoine du Hamel) #560081e628d1f37] - tools: fix nghttp3 updater script (Antoine du Hamel) #560071af3599b7e] - tools: filter release keys to reduce interactivity (Antoine du Hamel) #559501893be4a9c] - tools: update WPT updater (Antoine du Hamel) #56003f89bd2ba8a] - tools: add WPT updater for specific subsystems (Mert Can Altin) #5446061901372d5] - tools: use tokenless Codecov uploads (Michaël Zasso) #55943312bb4dff8] - tools: lint js indoc/**/*.md(Livia Medeiros) #559047b476f637c] - tools: add linter for release commit proposals (Antoine du Hamel) #5592322d7017191] - tools: fix riscv64 build failed (Lu Yahan) #52888f4f777f4d2] - tools: bump cross-spawn from 7.0.3 to 7.0.5 in /tools/eslint (dependabot[bot]) #55894a648e4c44a] - util: harden more built-in classes against prototype pollution (Antoine du Hamel) #562254a1b51b5a9] - util: fix Latin1 decoding to return string output (Mert Can Altin) #562229e98e86604] - util: do not rely on mutableObjectandFunction'constructorprop (Antoine du Hamel) #56188374eb415fd] - util: add fast path for Latin1 decoding (Mert Can Altin) #55275bcfe9c80fc] - (SEMVER-MINOR) util: add sourcemap support to getCallSites (Marco Ippolito) #555892aa77c8a8f] - v8,tools: expose experimental wasm revectorize feature (Yolanda-Chen) #54896bfd11d7661] - worker: fix crash when a worker joins after exit (Stephen Belanger) #56191v22.12.0: 2024-12-03, Version 22.12.0 'Jod' (LTS), @ruyadornoCompare Source
Notable Changes
require(esm) is now enabled by default
Support for loading native ES modules using require() had been available on v20.x and v22.x under the command line flag --experimental-require-module, and available by default on v23.x. In this release, it is now no longer behind a flag on v22.x.
This feature is still experimental, and we are looking for user feedback to make more final tweaks before fully stabilizing it. For this reason, on v22.x, when the Node.js instance encounters a native ES module in require() for the first time, it will emit an experimental warning unless
require()comes from a path that containsnode_modules. If there happens to be any regressions caused by this feature, users can report it to the Node.js issue tracker. Meanwhile this feature can also be disabled using--no-experimental-require-moduleas a workaround.With this feature enabled, Node.js will no longer throw
ERR_REQUIRE_ESMifrequire()is used to load a ES module. It can, however, throwERR_REQUIRE_ASYNC_MODULEif the ES module being loaded or its dependencies contain top-levelawait. When the ES module is loaded successfully byrequire(), the returned object will either be a ES module namespace object similar to what's returned byimport(), or what gets exported as"module.exports"in the ES module.Users can check
process.features.require_moduleto see whetherrequire(esm)is enabled in the current Node.js instance. For packages, the"module-sync"exports condition can be used as a way to detectrequire(esm)support in the current Node.js instance and allow bothrequire()andimportto load the same native ES module. See the documentation for more details about this feature.Contributed by Joyee Cheung in #55085
Added resizable
ArrayBuffersupport inBufferWhen a
Bufferis created using a resizableArrayBuffer, theBufferlength will now correctly change as the underlyingArrayBuffersize is changed.Contributed by James Snell in #55377
Update root certificates to NSS 3.104
This is the version of NSS that shipped in Firefox 131.0 on 2024-10-01.
Certificates added:
Contributed by Richard Lau in #55681
Other Notable Changes
4920869935] - (SEMVER-MINOR) assert: make assertion_error use Myers diff algorithm (Giovanni Bucci) #54862ccffd3b819] - doc: enforce strict policy to semver-major releases (Rafael Gonzaga) #55732acc6806900] - doc: add jazelly to collaborators (Jason Zhang) #5553188d91e8bc2] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #5533398bfc7dce5] - (SEMVER-MINOR) http: add diagnostic channelhttp.client.request.created(Marco Ippolito) #55586337f61fb25] - (SEMVER-MINOR) lib: add UV_UDP_REUSEPORT for udp (theanarkh) #554031628c48ad6] - (SEMVER-MINOR) net: add UV_TCP_REUSEPORT for tcp (theanarkh) #55408457e73f4c9] - (SEMVER-MINOR) sqlite: add support for SQLite Session Extension (Bart Louwers) #54181Commits
f6885e1c68] - assert: fix the string length check for printing the simple diff (Giovanni Bucci) #55474907484f04d] - assert: fix deepEqual always return true on URL (Xuguang Mei) #50853301844e249] - assert: differentiate cases wherecauseisundefinedor missing (Antoine du Hamel) #5573889ccd3e3f4] - assert: fixdeepStrictEqualon errors whencauseis not undefined (Edigleysson Silva (Edy)) #554064920869935] - (SEMVER-MINOR) assert: make assertion_error use Myers diff algorithm (Giovanni Bucci) #54862c67aec368e] - benchmark: addtest-reporters(Aviv Keller) #5575749774cc2c0] - benchmark: addtest_runner/mock-fn(Aviv Keller) #557714caaeb47b2] - benchmark: add nodeTiming.uvmetricsinfo bench (RafaelGSS) #55614cac58564a1] - benchmark: add --runs support to run.js (Rafael Gonzaga) #551585c3ee886fc] - benchmark: adjust byte size for buffer-copy (Rafael Gonzaga) #552956023e1bdb2] - (SEMVER-MINOR) buffer: make Buffer work with resizable ArrayBuffer (James M Snell) #55377a6c00c2204] - build: add create release proposal action (Rafael Gonzaga) #55690b4e413933b] - build: implement node_use_amaro flag in GN build (Cheng) #55798d1db202d4a] - build: apply cpp linting and formatting to ncrypto (Aviv Keller) #553628c670496da] - build: use rclone instead of aws CLI (Michaël Zasso) #55617827e2065bd] - build: stop pre-compilinglint-md(Aviv Keller) #55266c3ca978d9c] - build: fix building with system icu 76 (Michael Cho) #5556323e3287bbe] - build: fix GN arg used in generate_config_gypi.py (Shelley Vohr) #555302b561abb0d] - build: fix GN build for sqlite and nghttp2 (Shelley Vohr) #555297008f29d79] - build: fix GN build for cares/uv deps (Cheng) #554776ee94a394f] - build: fix uninstall script for AIX 7.1 (Cloorc) #55438edbbd4a374] - build: conditionally compile bundled sqlite (Richard Lau) #554093d8e3a657c] - build: tidy up cares.gyp (Richard Lau) #55445f0c12e8fcb] - build: synchronize list of c-ares source files (Richard Lau) #554458daa8a62f8] - build: fix path concatenation (Mohammed Keyvanzadeh) #5538712faf0466e] - build: fix make errors that occur in Makefile (minkyu_kim) #55287a21be0294d] - build,win: enable pch for clang-cl (Stefan Stojanovic) #552497ed058cd00] - cli: add--heap-profflag available toNODE_OPTIONS(Juan José) #54259c26b1bfe6a] - crypto: allow length=0 for HKDF and PBKDF2 in SubtleCrypto.deriveBits (Filip Skokan) #55866a1201d0392] - crypto: update root certificates to NSS 3.104 (Richard Lau) #5568120483aab7a] - crypto: fixRSA_PKCS1_PADDINGerror message (Richard Lau) #55629d345662d50] - crypto: include openssl/rand.h explicitly (Shelley Vohr) #55425166ab3209d] - deps: update simdutf to 5.6.1 (Node.js GitHub Bot) #55850934979e12e] - deps: update undici to 6.21.0 (Node.js GitHub Bot) #55851af77f66424] - deps: update c-ares to v1.34.3 (Node.js GitHub Bot) #55803948a88d2f4] - deps: update icu to 76.1 (Node.js GitHub Bot) #55551fa4c58a983] - deps: update acorn to 8.14.0 (Node.js GitHub Bot) #55699c91155f22e] - deps: update sqlite to 3.47.0 (Node.js GitHub Bot) #55557d1cb7af95c] - deps: update amaro to 0.2.0 (Node.js GitHub Bot) #55601655e5600cb] - deps: update nghttp2 to 1.64.0 (Node.js GitHub Bot) #55559992450c469] - deps: update acorn to 8.13.0 (Node.js GitHub Bot) #55558abd2bd4f64] - deps: update undici to 6.20.1 (Node.js GitHub Bot) #555037dc2c2edad] - deps: update googletest todf1544b(Node.js GitHub Bot) #55465fa9329c024] - deps: update c-ares to v1.34.2 (Node.js GitHub Bot) #5546341a2bcd335] - deps: update ada to 2.9.1 (Node.js GitHub Bot) #54679a3b793defd] - deps: update simdutf to 5.6.0 (Node.js GitHub Bot) #55379551b8f897d] - deps: update c-ares to v1.34.1 (Node.js GitHub Bot) #5536926861eaf4e] - Revert "deps: disable io_uring support in libuv by default" (Santiago Gimeno) #5511441c50bc15e] - deps: update libuv to 1.49.1 (Santiago Gimeno) #5511426fcc04084] - deps: update amaro to 0.1.9 (Node.js GitHub Bot) #553480ee6715921] - diagnostics_channel: fix unsubscribe during publish (simon-id) #55116bf68733e7f] - dns: stop using deprecatedares_query(Aviv Keller) #55430ef6707eb9b] - dns: honor the order option (Luigi Pinca) #553920f3810f3e5] - doc: add added tag and fix typo sqlite.md (Bart Louwers) #56012d1bd0ef1b7] - doc: remove non-working example (Antoine du Hamel) #55856824ac650ed] - doc: addnode:sqliteto mandatorynode:prefix list (翠 / green) #55846b3ea42d887] - doc: add-Sflag release preparation example (Antoine du Hamel) #558360bd5d8b9d9] - doc: clarify UV_THREADPOOL_SIZE env var usage (Preveen P) #5583227b0236a99] - doc: add notable-change mention to sec release (Rafael Gonzaga) #55830476075bada] - doc: fix history info forURL.prototype.toJSON(Antoine du Hamel) #558182743b7b1d3] - doc: correct max-semi-space-size statement (Joe Bowbeer) #558123013870093] - doc: update unflag info ofimport.meta.resolve(skyclouds2001) #5581027bcd103e7] - doc: run license-builder (github-actions[bot]) #5581372d4b30ead] - doc: clarify triager role (Gireesh Punathil) #55775a30defe9dd] - doc: clarify removal of experimental API does not require a deprecation (Antoine du Hamel) #55746ccffd3b819] - doc: enforce strict policy to semver-major releases (Rafael Gonzaga) #55732b6d2a4e816] - doc: add path aliases typescript doc (Carlos Espa) #55766a435affa11] - doc: add esm example inpath.md(Aviv Keller) #5574591443c2711] - doc: consistent use of word child process (Gireesh Punathil) #5565483fb0079d4] - doc: clarity to available addon options (Preveen P) #557156ca851457a] - doc: update--max-semi-space-sizedescription (Joe Bowbeer) #55495e17fffc0ff] - doc: brokenPerformanceObservercode sample (Dom Harrington) #542278bd5777f0f] - doc: add write flag when open file as the demo code's intention (robberfree) #54626f1e0e0ba55] - doc: remove mention of ECDH-ES in crypto.diffieHellman (Filip Skokan) #556111d60b7ec97] - doc: improve c++ embedder API doc (Gireesh Punathil) #55597bbf51d7000] - doc: capitalize "MIT License" (Aviv Keller) #555750e69f6d123] - doc: add suggested tsconfig for type stripping (Marco Ippolito) #5553467beb37f50] - doc: add esm examples to node:string_decoder (Alfredo González) #55507acc6806900] - doc: add jazelly to collaborators (Jason Zhang) #55531a6b3ed54ae] - doc: changed the command used to verify SHASUMS256 (adriancuadrado) #554200ad7ca4f1d] - doc: move dual package shipping docs to separate repo (Joyee Cheung) #55444e99a98ddfd] - doc: add note about stdio streams in child_process (Ederin (Ed) Igharoro) #5532220302851a9] - doc: addisBigIntObjectto documentation (leviscar) #5545050d983e80b] - doc: remove outdated remarks abouthighWaterMarkin fs (Ian Kerins) #5546207c2fb2045] - doc: move Danielle Adams key to old gpg keys (RafaelGSS) #5539941b045170d] - doc: move Bryan English key to old gpg keys (RafaelGSS) #5539913724dcc20] - doc: move Beth Griggs keys to old gpg keys (RafaelGSS) #553990230fb1ead] - doc: spell out condition restrictions (Jan Martin) #5518766e41f044d] - doc: add instructions for WinGet build (Hüseyin Açacak) #5535623d89da3f1] - doc: add missing return values in buffer docs (Karl Horky) #552736e7b33a0ef] - doc: fix ambasador markdown list (Rafael Gonzaga) #55361d8c552a060] - doc: edit onboarding guide to clarify when mailmap addition is needed (Antoine du Hamel) #55334c7f82ec978] - doc: fix the return type of outgoingMessage.setHeaders() (Jimmy Leung) #55290f1b9791694] - doc: updaterequire(ESM)history and stability status (Antoine du Hamel) #551999ffd2dd43b] - doc: consolidate history table of CustomEvent (Edigleysson Silva (Edy)) #5575864fb9e6516] - doc: add history entries for JSON modules stabilization (Antoine du Hamel) #55855ae2ae2fef1] - esm: fix import.meta.resolve crash (Marco Ippolito) #5577715dd43dd6e] - esm: add a fallback when importer in not a file (Antoine du Hamel) #55471aed758d270] - esm: fix inconsistency withimportAssertioninresolvehook (Wei Zhu) #5536588d91e8bc2] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #55333a2c8de7fba] - events: add hasEventListener util for validate (Sunghoon) #552304f84cdc8a2] - events: optimize EventTarget.addEventListener (Robert Nagy) #55312c17601557b] - fs: prevent unwanteddependencyOwnersremoval (Carlos Espa) #555654dd609c685] - fs: fix bufferSize option for opendir recursive (Ethan Arrowood) #55744d695bd4c4f] - fs: pass correct path toDirentFromStatsduringglob(Aviv Keller) #550715357338b8e] - fs: usewstringon Windows paths (jazelly) #551710a7f301a36] - http: add diagnostic channelhttp.server.response.created(Marco Ippolito) #5562298bfc7dce5] - (SEMVER-MINOR) http: add diagnostic channelhttp.client.request.created(Marco Ippolito) #55586d2430ee363] - http2: fix client async storage persistence (Orgad Shaneh) #55460753cbede2a] - lib: remove startsWith/endsWith primordials for char checks (Gürgün Dayıoğlu) #554076e3e99c81e] - lib: prefer logical assignment (Aviv Keller) #5504403902ebb74] - lib: replacecreateDeferredPromiseutil withPromise.withResolvers(Yagiz Nizipli) #54836ee17fcd6f3] - lib: prefer symbol to number in webidltypefunction (Antoine du Hamel) #5573718f0f07e92] - lib: implement webidl dictionary converter and use it in structuredClone (Jason Zhang) #55489bcead24e24] - lib: prefer number to string in webidltypefunction (Jason Zhang) #55489d48c5da039] - lib: convert transfer sequence to array in js (Jason Zhang) #55317cefce4cbb0] - lib: remove unnecessary optional chaining (Gürgün Dayıoğlu) #55728f2561fdeec] - lib: usePromise.withResolvers()in timers (Yagiz Nizipli) #55720337f61fb25] - (SEMVER-MINOR) lib: add UV_UDP_REUSEPORT for udp (theanarkh) #554034f89059f63] - lib: add flag to drop connection when running in cluster mode (theanarkh) #5492729f7325e73] - lib: test_runner#mock:timers respeced timeout_max behaviour (BadKey) #5537568bcec64b8] - lib: remove settled dependant signals when they are GCed (Edigleysson Silva (Edy)) #553543f8a5d8a28] - meta: bump actions/setup-python from 5.2.0 to 5.3.0 (dependabot[bot]) #55688644ad5d60d] - meta: bump actions/setup-node from 4.0.4 to 4.1.0 (dependabot[bot]) #55687334fa69c31] - meta: bump rtCamp/action-slack-notify from 2.3.0 to 2.3.2 (dependabot[bot]) #55686fb3fa8bee2] - meta: bump actions/upload-artifact from 4.4.0 to 4.4.3 (dependabot[bot]) #556851aca3a8289] - meta: bump actions/cache from 4.0.2 to 4.1.2 (dependabot[bot]) #55684a6c73eb9c2] - meta: bump actions/checkout from 4.2.0 to 4.2.2 (dependabot[bot]) #5568306445bc4e3] - meta: bump github/codeql-action from 3.26.10 to 3.27.0 (dependabot[bot]) #5568237bafce2d8] - meta: make review-wanted message minimal (Aviv Keller) #556074cca54b161] - meta: show PR/issue title on review-wanted (Aviv Keller) #5560668decbf935] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #5538107fc40d823] - meta: assign CODEOWNERS for /deps/ncrypto/* (Filip Skokan) #55426139e8f1579] - meta: change color to blue notify review-wanted (Rafael Gonzaga) #55423c0614dc92c] - meta: bump codecov/codecov-action from 4.5.0 to 4.6.0 (dependabot[bot]) #5522247b6c6748b] - meta: bump github/codeql-action from 3.26.6 to 3.26.10 (dependabot[bot]) #552216c836aa97e] - meta: bump step-security/harden-runner from 2.9.1 to 2.10.1 (dependabot[bot]) #55220c81c818a21] - module: throw ERR_NO_TYPESCRIPT when compiled without amaro (Marco Ippolito) #55332d6d1479fcc] - module: simplify --inspect-brk handling (Joyee Cheung) #5567991fdec3a52] - module: fix error thrown from require(esm) hitting TLA repeatedly (Joyee Cheung) #55520cb527a925d] - module: do not warn when require(esm) comes from node_modules (Joyee Cheung) #5596016119f206f] - module: trim off internal stack frames for require(esm) warnings (Joyee Cheung) #5549628b5b9a57d] - module: allow ESM that failed to be required to be re-imported (Joyee Cheung) #555026ac3400960] - module: include module information in require(esm) warning (Joyee Cheung) #55397fcdd6167d8] - module: check --experimental-require-module separately from detection (Joyee Cheung) #55250d8c34ced43] - module: use kNodeModulesRE to detect node_modules (Joyee Cheung) #55243545c069eb5] - module: support 'module.exports' interop export in require(esm) (Guy Bedford) #5456358d6871c45] - (SEMVER-MINOR) module: unflag --experimental-require-module (Joyee Cheung) #550851628c48ad6] - (SEMVER-MINOR) net: add UV_TCP_REUSEPORT for tcp (theanarkh) #55408a5590083cd] - node-api: add napi_create_buffer_from_arraybuffer method (Mert Can Altin) #5450521ec855feb] - os: improve path check with direct index access (Mert Can Altin) #554341fdaa15226] - report: fix network queries in getReport libuv with exclude-network (Adrien Foulon) #55602457e73f4c9] - (SEMVER-MINOR) sqlite: add support for SQLite Session Extension (Bart Louwers) #54181428701a6d8] - sqlite: improve error handling using MaybeLocal (Tobias Nießen) #555714e5878536a] - sqlite: add readOnly option (Tobias Nießen) #555678c35ad12de] - sqlite: refactor open options (Tobias Nießen) #55442c3c403040a] - sqlite: cache column names in stmt.all() (Fedor Indutny) #553736858f7a4d3] - src: use env strings to create sqlite results (Michaël Zasso) #55785db01eaf318] - src: improvenode:osuserInfo performance (Yagiz Nizipli) #55719383d28489d] - src: provide workaround for container-overflow (Daniel Lemire) #555913477b6b4a5] - src: move more key related stuff to ncrypto (James M Snell) #5536838c047e38f] - src: refactor ECDHBitsJob signature (Filip Skokan) #55610acbb62902a] - src: fix dns crash when failed to create NodeAresTask (theanarkh) #55521547cab9433] - src: use NewFromUtf8Literal in NODE_DEFINE_CONSTANT (Charles Kerr) #55581231fe7b953] - src: do not run IsWindowsBatchFile on non-windows (Yagiz Nizipli) #55560bde374ee6a] - src: remove icu basedToASCIIandToUnicode(Yagiz Nizipli) #551566ad23e74be] - src: fix winapi_strerror error string (Hüseyin Açacak) #5520763bc40550b] - src: remove uv__node_patch_is_using_io_uring (Santiago Gimeno) #551142af72a7671] - src: implement IsInsideNodeModules() in C++ (Joyee Cheung) #55286e14fb2defb] - src,lib: optimize nodeTiming.uvMetricsInfo (RafaelGSS) #55614e14dba3ee5] - src,lib: introduceutil.getSystemErrorMessage(err)(Juan José) #540758f59c41d52] - stream: propagate AbortSignal reason (Marvin ROGER) #554737acb96362c] - test: increase coverage ofpathToFileURL(Antoine du Hamel) #554935861135ddb] - test: improve test coverage for child process message sending (Juan José) #55710554d4ace2f] - test: ensure that test priority is not higher than current priority (Livia Medeiros) #55739b0ce62a9bd] - test: add buffer to fs_permission tests (Rafael Gonzaga) #557349d9ad81d54] - test: improve test coverage forServerResponse(Juan José) #55711273f84e01c] - test: updateperformance-timelinewpt (RedYetiDev) #5519789c9c46185] - test: ignore unrelated events in FW watch tests (Carlos Espa) #55605fc69080669] - test: refactor some esm tests (Antoine du Hamel) #55472a80c166733] - test: split up test-runner-mock-timers test (Julian Gassner) #555068c2fc11f7c] - test: remove unneeded listeners (Luigi Pinca) #554861c5872dbde] - test: avoidapply()calls with large amount of elements (Livia Medeiros) #555012194eb4909] - test: increase test coverage forhttp.OutgoingMessage.appendHeader()(Juan José) #55467ad7e81379a] - test: make test-node-output-v8-warning more flexible (Shelley Vohr) #554016aeeaa719b] - test: fix addons and node-api test assumptions (Antoine du Hamel) #5544173ab14fd8f] - test: update wpt test for webmessaging/broadcastchannel (devstone) #55205ded1b68d10] - test: deflaketest-cluster-shared-handle-bind-privileged-port(Aviv Keller) #553780e873c3031] - test: updateconsolewpt (Aviv Keller) #55192832300533b] - test: remove duplicate tests (Luigi Pinca) #55393310a734c1b] - test: update test_util.cc for coverage (minkyu_kim) #55291254badd480] - test: updatecompressionwpt (Aviv Keller) #55191c52a808ac9] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #55703445d117b67] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #55512cd0d748ede] - test,crypto: make crypto tests work with BoringSSL (Shelley Vohr) #554918bac7c27c8] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #55427363e7d5a76] - test_runner: error on mocking an already mocked date (Aviv Keller) #55858f41d329e98] - test_runner: add support for scheduler.wait on mock timers (Erick Wendel) #55244b9200c33ae] - test_runner: require--enable-source-mapsfor sourcemap coverage (Aviv Keller) #55359f11d93d8ef] - tools: enforce ordering of error codes inerrors.md(Antoine du Hamel) #5532485ca31a90a] - tools: bump @eslint/plugin-kit from 0.2.0 to 0.2.3 in /tools/eslint (dependabot[bot]) #55875506aac567b] - tools: fix exclude labels for commit-queue (Richard Lau) #5580914ffac9995] - tools: make commit-queue check blocked label (Marco Ippolito) #55781eb22ec87e6] - tools: remove non-existent file from eslint config (Aviv Keller) #557725844565fb2] - tools: fix c-ares updater script for Node.js 18 (Richard Lau) #557170a79ebd257] - tools: update ESLint to 9.14.0 (dependabot[bot]) #5568912543d560a] - tools: useutil.parseArgsinlint-md(Aviv Keller) #55694d95aa244c2] - tools: fix root certificate updater (Richard Lau) #556813626891f8e] - tools: compact jq output in daily-wpt-fyi.yml action (Filip Skokan) #5569502c902e68a] - tools: run daily WPT.fyi report on all supported releases (Filip Skokan) #55619456b02351b] - tools: lint README lists more strictly (Antoine du Hamel) #5562583a5983c7d] - tools: update lint-md-dependencies (Node.js GitHub Bot) #5547072b4a8df6a] - tools: update gyp-next to 0.18.3 (Node.js GitHub Bot) #554646b6e6a5590] - tools: add script to synch c-ares source lists (Richard Lau) #55445a6c444291b] - tools: fix typos (Nathan Baulch) #55061d5e915ba5d] - tools: addpolyfilledoption toprefer-primordialsrule (Antoine du Hamel) #55318c8e7f767b7] - typings: add missing type ofArrayBufferPrototypeGetByteLength(Wuli Zuo) #554396317f77942] - url: refactorpathToFileURLto native (Antoine du Hamel) #554765418d40256] - url: handle "unsafe" characters properly inpathToFileURL(Antoine du Hamel) #54545fce8c32c19] - util: do not mark experimental feature as deprecated (Antoine du Hamel) #55740940d22ffe1] - (SEMVER-MINOR) util: fix util.getCallSites plurality (Chengzhong Wu) #5562642ac0c2af3] - util: do not catch on circular@@​toStringTagerrors (Aviv Keller) #55544v22.11.0: 2024-10-29, Version 22.11.0 'Jod' (LTS), @richardlauCompare Source
Notable Changes
This release marks the transition of Node.js 22.x into Long Term Support (LTS)
with the codename 'Jod'. The 22.x release line now moves into "Active LTS"
and will remain so until October 2025. After that time, it will move into
"Maintenance" until end of life in April 2027.
Other than updating metadata, such as the
process.releaseobject, to reflectthat the release is LTS, no further changes from Node.js 22.10.0 are included.
OpenSSL 3.x
Official binaries for Node.js 22.x currently include OpenSSL 3.0.x (more
specifically, the quictls OpenSSL fork).
OpenSSL 3.0.x is the currently designated long term support version that is
scheduled to be supported until 7th September 2026, which is within the expected
lifetime of Node.js 22.x. We are expecting upstream OpenSSL to announce a
successor long term support version prior to that date and since OpenSSL now
follows a semantic versioning-like versioning scheme we expect to be able to
update to the next long term supported version of OpenSSL during the lifetime of
Node.js 22.x.
v22.10.0: 2024-10-16, Version 22.10.0 (Current), @aduh95Compare Source
Notable Changes
New
"module-sync"exports conditionThis release introduces a
"module-sync"exports condition that's enabled whenrequire(esm)is enabled, so packages can supply a synchronous ES module to theNode.js module loader, no matter if it's being required or imported. This is
similar to the
"module"condition that bundlers have been using to supportrequire(esm)in Node.js, and allows dual-package authors to opt into ESM-firstonly on newer versions of Node.js that supports
require(esm)to avoid thedual-package hazard.
Or if the package is only meant to be run on Node.js and wants to fallback to
CJS on older versions that don't have
require(esm):For package authors: this only serves as a feature-detection mechanism for
packages that wish to support both CJS and ESM users during the period when some
active Node.js LTS versions support
require(esm)while some older ones don't.When all active Node.js LTS lines support
require(esm), packages can simplifytheir distributions by bumping the major version, dropping their CJS exports,
and removing the
module-syncexports condition (with onlymainordefaulttargetting the ESM exports). If the package needs to support both bundlers and
being run unbundled on Node.js during the transition period, use both
module-syncandmoduleand point them to the same ESM file. If the packagealready doesn't want to support older versions of Node.js that doesn't support
require(esm), don't use this export condition.For bundlers/tools: they should avoid implementing this stop-gap condition.
Most existing bundlers implement the de-facto bundler standard
moduleexports condition, and that should be enough to support users who want to bundle
ESM from CJS consumers. Users who want both bundlers and Node.js to recognize
the ESM exports can use both
module/module-syncconditions during thetransition period, and can drop
module-sync+modulewhen they no longer needto support older versions of Node.js. If tools do want to support this
condition, it's recommended to make the resolution rules in the graph pointed by
this condition match the Node.js native ESM rules to avoid divergence.
We ended up implementing a condition with a different name instead of reusing
"module", because existing code in the ecosystem using the"module"condition sometimes also expect the module resolution for these ESM files to
work in CJS style, which is supported by bundlers, but the native Node.js loader
has intentionally made ESM resolution different from CJS resolution (e.g.
forbidding
import './noext'orimport './directory'), so it would bebreaking to implement a
"module"condition without implementing the forbiddenESM resolution rules. For now, this just implements a new condition as
semver-minor so it can be backported to older LTS.
Contributed by Joyee Cheung in #54648.
node --runis now stableThis CLI flag runs a specified command from a
package.json's"scripts"object.For the following
package.json:You can run
node --run testand that would start the test suite.Contributed by Yagiz Nizipli in #53763.
Other notable changes
f0b441230a] - (SEMVER-MINOR) crypto: addKeyObject.prototype.toCryptoKey(Filip Skokan) #55262349d2ed07b] - (SEMVER-MINOR) crypto: add Date fields forvalidToandvalidFrom(Andrew Moon) #54159bebc95ed58] - doc: add abmusse to collaborators (Abdirahim Musse) #55086914db60159] - (SEMVER-MINOR) http2: exposenghttp2_option_set_stream_reset_rate_limitas an option (Maël Nison) #54875f7c3b03759] - (SEMVER-MINOR) lib: propagate aborted state to dependent signals before firing events (jazelly) #5482632261fc98a] - (SEMVER-MINOR) module: support loading entrypoint as url (RedYetiDev) #5493306957ff355] - (SEMVER-MINOR) module: implementflushCompileCache()(Joyee Cheung) #549712dcf70c347] - (SEMVER-MINOR) module: throw when invalid argument is passed toenableCompileCache()(Joyee Cheung) #54971f9b19d7c44] - (SEMVER-MINOR) module: write compile cache to temporary file and then rename it (Joyee Cheung) #54971e95163b170] - (SEMVER-MINOR) process: addprocess.features.require_module(Joyee Cheung) #552414050f68e5d] - (SEMVER-MINOR) process: addprocess.features.typescript(Aviv Keller) #5429586f7cb802d] - (SEMVER-MINOR) test_runner: support custom arguments inrun()(Aviv Keller) #55126b62f2f8259] - (SEMVER-MINOR) test_runner: add'test:summary'event (Colin Ihrig) #54851d7c708aec5] - (SEMVER-MINOR) test_runner: add support for coverage viarun()(Chemi Atlow) #539375fda4a1498] - (SEMVER-MINOR) worker: addmarkAsUncloneableapi (Jason Zhang) #55234Commits
e3619510c8] - assert: show the diff when deep comparing data with a custom message (Giovanni) #5475939c7a9e70c] - benchmark: adjust config for deepEqual object (Rafael Gonzaga) #55254263526d5d0] - benchmark: rewrite detect-esm-syntax benchmark (Joyee Cheung) #55238cd0795fb00] - benchmark: add no-warnings to process.has bench (Rafael Gonzaga) #551594352d9cc31] - benchmark: create benchmark for typescript (Marco Ippolito) #54904452bc9b48d] - benchmark: add webstorage benchmark (jakecastelli) #55040d4d5ba3a9b] - benchmark: include ascii to fs/readfile (Rafael Gonzaga) #5498823b628db65] - benchmark: add dotenv benchmark (Aviv Keller) #54278b1ebb0d8ca] - buffer: coerce extrema to int inblob.slice(Antoine du Hamel) #551413a6e72483f] - buffer: extract Blob's .arrayBuffer() & webidl changes (Matthew Aitken) #53372d109f1c4ff] - buffer: use simdutf convert_latin1_to_utf8_safe (Robert Nagy) #5479877f8a3f9c2] - build: fix notify-on-review-wanted action (Rafael Gonzaga) #553040d93b1ed0c] - build: fix not valid json in coverage (jakecastelli) #55179f89664d890] - build: include.nycrcin coverage workflows (Wuli Zuo) #55210d7a9df6417] - build: notify via slack when review-wanted (Rafael Gonzaga) #5510268822cc861] - build: add more information to Makefile help (Aviv Keller) #53381f3ca9c669b] - build: update ruff and addlint-py-fix(Aviv Keller) #54410d99ae548d7] - build: remove -v flag to reduce noise (iwuliz) #55025d3dfbe7ff9] - build: display free disk space after build in the test-macOS workflow (iwuliz) #550253077f6a5b7] - build: support up to python 3.13 in android-configure (Aviv Keller) #54529a929c71281] - build: add the option to generate compile_commands.json in vcbuild.bat (Segev Finer) #52279a81f368b99] - build: fix eslint makefile target (Aviv Keller) #54999c8b7a645ae] - Revert "build: upgrade clang-format to v18" (Chengzhong Wu) #549947861ca5dc3] - build: printRunning XYZ linter...for py and yml (Aviv Keller) #54386aaea3944e5] - build,win: add winget config to set up env (Hüseyin Açacak) #5472930d47220bb] - build,win: float VS 17.11 compilation patch (Stefan Stojanovic) #54970048a1ab350] - cli: ensure --run has proper pwd (Yagiz Nizipli) #54949a97841ee10] - cli: fix spacing for port range error (Aviv Keller) #544951dcc5eedff] - Revert "console: colorize console error and warn" (Aviv Keller) #54677f0b441230a] - (SEMVER-MINOR) crypto: add KeyObject.prototype.toCryptoKey (Filip Skokan) #55262d3f8c35320] - crypto: ensure invalid SubtleCrypto JWK data import results in DataError (Filip Skokan) #55041349d2ed07b] - (SEMVER-MINOR) crypto: add Date fields forvalidToandvalidFrom(Andrew Moon) #5415934ca36a397] - deps: update undici to 6.20.0 (Node.js GitHub Bot) #55329f703652e84] - deps: upgrade npm to 10.9.0 (npm team) #55255b533a51856] - deps: V8: backport0d5d6e7(Yagiz Nizipli) #551152f65b3fd07] - deps: V8: partially cherry-pick8953e49(Ben Noordhuis) #55274bb9f77d53a] - deps: update archs files for openssl-3.0.15+quic1 (Node.js GitHub Bot) #5518463d51c82fe] - deps: upgrade openssl sources to quictls/openssl-3.0.15+quic1 (Node.js GitHub Bot) #5518429e6484f3c] - deps: update archs files for openssl-3.0.14+quic1 (Node.js GitHub Bot) #54336283927ec88] - deps: upgrade openssl sources to quictls/openssl-3.0.14+quic1 (Node.js GitHub Bot) #54336b0636a1e88] - deps: update timezone to 2024b (Node.js GitHub Bot) #55056173464d76f] - deps: update acorn-walk to 8.3.4 (Node.js GitHub Bot) #549500d4536543b] - deps: update corepack to 0.29.4 (Node.js GitHub Bot) #548451de5512383] - deps: V8: cherry-pick217457d(Michaël Zasso) #548831921d7a37c] - doc: add release key for aduh95 (Antoine du Hamel) #55349d8e42be1b2] - doc: moveERR_INVALID_PERFORMANCE_MARKto legacy errors (Antoine du Hamel) #552475ea8aa183c] - doc: fix Markdown linter (Antoine du Hamel) #55344873588888d] - Revert "doc: update test context.assert" (Antoine du Hamel) #55344707e7cc702] - doc: add pmarchini to collaborators (Pietro Marchini) #55331b03272b9a1] - doc: fixevents.once()example usingAbortSignal(Ivo Janssen) #5514485b765953d] - doc: add onboarding details for ambassador program (Marco Ippolito) #552845d41b8a8b0] - doc: updaterequire(ESM)history and stability status (Antoine du Hamel) #55199195df659e9] - doc: moveERR_NAPI_TSFN_START/STOP_IDLE_LOOPto legacy errors (Antoine du Hamel) #552488eae0d3f3c] - doc: fix initial default value of autoSelectFamily (Ihor Rohovets) #55245297cb0da5a] - doc: tweak onboarding instructions (Michael Dawson) #552127ddbfe8c2b] - doc: update test context.assert (Pietro Marchini) #551868a57550d20] - doc: fix unordered error anchors (Antoine du Hamel) #55242286ea4ed3d] - doc: mention addons to experimental permission (Rafael Gonzaga) #551667c9ceabf38] - doc: use correct dash in stability status (Antoine du Hamel) #55200781ffd8ba1] - doc: fix link intest/README.md(Livia Medeiros) #5516561b9ed3bf2] - doc: add esm examples to node:net (Alfredo González) #55134bb3499038d] - doc: remove outdated https import reference (Edigleysson Silva (Edy)) #551116cc49518c7] - doc: move the YAML changes element (sendoru) #55112b12b4a23e4] - doc: remove random horizontal separators inprocess.md(Antoine du Hamel) #551497186ede388] - doc: put --env-file-if-exists=config right under --env-file=config (Edigleysson Silva (Edy)) #551318ad0dfff10] - doc: fix the require resolve algorithm inmodules.md(chirsz) #55117fd40f0873f] - doc: update style guide (Aviv Keller) #5322312c9d9780f] - doc: add missing:torun()'sglobPatterns(Aviv Keller) #5513573b05cfb04] - doc: correctcleanupoption in stream.(promises.)finished (René) #55043bebc95ed58] - doc: add abmusse to collaborators (Abdirahim Musse) #55086a97c80c6ae] - doc: add note about--expose-internals(Aviv Keller) #5286189aeae63bd] - doc: removeparseREPLKeywordfrom REPL documentation (Aviv Keller) #54749b3e0490b8b] - doc: add missing EventSource docs to globals (Matthew Aitken) #55022516c775fa5] - doc: cover --experimental-test-module-mocks flag (Jonathan Sharpe) #550214244f1a269] - doc: add more details for localStorage and sessionStorage (Batuhan Tomo) #5388139a728c2e3] - doc: change backporting guide with updated info (Aviv Keller) #537463a5fe95ad7] - doc: add missing definitions tointernal-api.md(Aviv Keller) #53303f2d74a26a3] - doc: fix history ofprocess.features(Antoine du Hamel) #5498229866ca438] - doc: fix typo callsite.lineNumber (Rafael Gonzaga) #54969c1d73abd29] - doc: update documentation for externalizing deps (Michael Dawson) #54792eca9668231] - doc: add documentation for process.features (Marco Ippolito) #548970fb446e207] - esm: do not interpret"main"as a URL (Antoine du Hamel) #55003be2fe4b249] - events: allow null/undefined eventInitDict (Matthew Aitken) #54643cb47e169a0] - events: returncurrentTargetwhen dispatching (Matthew Aitken) #54642dbfae3fe14] - fs: acknowledgesignaloption infilehandle.createReadStream()(Livia Medeiros) #551481c94725c07] - fs: check subdir correctly in cpSync (Jason Zhang) #5503379ffefab2a] - fs: convert to u8 string for filesystem path (Jason Zhang) #54653914db60159] - (SEMVER-MINOR) http2: expose nghttp2_option_set_stream_reset_rate_limit as an option (Maël Nison) #5487508b5e6c794] - lib: fix module print timing when specifier includes"(Antoine du Hamel) #55150bf7d7aef4b] - lib: fix typos (Nathan Baulch) #55065d803355d92] - lib: prefer optional chaining (Aviv Keller) #55045d4873bcd6d] - lib: remove lib/internal/idna.js (Yagiz Nizipli) #55050f7c3b03759] - (SEMVER-MINOR) lib: propagate aborted state to dependent signals before firing events (jazelly) #54826397ae418db] - lib: the REPL should survive deletion of Array.prototype methods (Jordan Harband) #31457566179c9ec] - lib, tools: remove duplicate requires (Aviv Keller) #54987c9a1bbbef2] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #55300d7b73bbd1d] - meta: bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 (dependabot[bot]) #552250f4269faa9] - meta: bump actions/checkout from 4.1.7 to 4.2.0 (dependabot[bot]) #5522433be1990d8] - meta: bump actions/setup-node from 4.0.3 to 4.0.4 (dependabot[bot]) #55223f5b4ae5bf8] - meta: bump peter-evans/create-pull-request from 7.0.1 to 7.0.5 (dependabot[bot]) #552191985d9016e] - meta: add mailmap entry for abmusse (Abdirahim Musse) #5518293b215d5e6] - meta: add more information about nightly releases (Aviv Keller) #55084aeae5973c3] - meta: addlinuxto OS labels in collaborator guide (Aviv Keller) #549864fb2c3baa8] - meta: remove never-used workflow trigger (Aviv Keller) #54983e1f36d0da8] - meta: remove unneeded ignore rules from ruff (Aviv Keller) #54360ce0d0c1ec8] - meta: removebuild-windows.yml(Aviv Keller) #54662ca67c97f33] - meta: add links to alternative issue trackers (Aviv Keller) #544016fcac73738] - module: wrap swc error in ERR_INVALID_TYPESCRIPT_SYNTAX (Marco Ippolito) #553160412ac8bf3] - module: add internal type def forflushCompileCache(Jacob Smith) #5522632261fc98a] - (SEMVER-MINOR) module: support loading entrypoint as url (RedYetiDev) #54933111261e245] - (SEMVER-MINOR) module: implement the "module-sync" exports condition (Joyee Cheung) #54648b6fc9adf5b] - module: remove duplicated import (Aviv Keller) #5494206957ff355] - (SEMVER-MINOR) module: implement flushCompileCache() (Joyee Cheung) #549712dcf70c347] - (SEMVER-MINOR) module: throw when invalid argument is passed to enableCompileCache() (Joyee Cheung) #54971f9b19d7c44] - (SEMVER-MINOR) module: write compile cache to temporary file and then rename it (Joyee Cheung) #549711d169764db] - module: report unfinished TLA in ambiguous modules (Antoine du Hamel) #54980c89c93496d] - module: refator ESM loader for adding future synchronous hooks (Joyee Cheung) #54769108cef22e6] - module: remove bogus assertion in CJS entrypoint handling with --import (Joyee Cheung) #5459267ecb10c78] - module: fix discrepancy between .ts and .js (Marco Ippolito) #544613300d5990f] - os: use const with early return for path (Trivikram Kamat) #5495990cce6ec7c] - path: remove repetitive conditional operator inposix.resolve(Wiyeong Seo) #54835cbfc980f89] - perf_hooks: add missing type argument to getEntriesByName (Luke Taher) #54767e95163b170] - (SEMVER-MINOR) process: add process.features.require_module (Joyee Cheung) #552410655d3a384] - process: fixprocess.features.typescriptwhen Amaro is unavailable (Antoine du Hamel) #553234050f68e5d] - (SEMVER-MINOR) process: addprocess.features.typescript(Aviv Keller) #5429575073c50ae] - quic: start adding in the internal quic js api (James M Snell) #53256538b1eb5b0] - repl: catch\vand\rin new-line detection (Aviv Keller) #5451257a9d3f15e] - sqlite: disable DQS misfeature by default (Tobias Nießen) #55297c126543374] - sqlite: make sourceSQL and expandedSQL string-valued properties (Tobias Nießen) #5472167f5f46c56] - sqlite: enable foreign key constraints by default (Tobias Nießen) #5477709999491bf] - src: handle errors correctly in webstorage (Michaël Zasso) #54544295c17c4ea] - src: make minor tweaks to quic c++ for c++20 (James M Snell) #53256b1d47d06f9] - src: apply getCallSite optimization (RafaelGSS) #55174d6bcc44829] - src: modernize likely/unlikely hints (Yagiz Nizipli) #551551af5ad61ca] - src: fixup Error.stackTraceLimit during snapshot building (Joyee Cheung) #55121b229083235] - src: parse --stack-trace-limit and use it in --trace-* flags (Joyee Cheung) #55121942ad54e08] - src: move more key handling to ncrypto (James M Snell) #551080bb5584288] - src: add receiver to fast api callback methods (Carlos Espa) #54408706e9611f0] - src: fix typos (Nathan Baulch) #55064a96d5d1bcc] - src: move more stuff over to use Maybe<void> (James M Snell) #54831ee0a98b5a2] - src: decode native error messages as UTF-8 (Joyee Cheung) #550241fc8edecf8] - src: update clang-tidy and focus on modernization (Yagiz Nizipli) #537573a1485a1a3] - src: move evp stuff to ncrypto (James M Snell) #549119ae80e1e4d] - src: revert filesystem::path changes (Yagiz Nizipli) #55015465d05018a] - src: mark node --run as stable (Yagiz Nizipli) #53763ef546c872c] - src: cleanup per env handles directly without a list (Chengzhong Wu) #549930876f78411] - src: add unistd.h import if node posix credentials is defined (Jonas) #54528284db53866] - src: remove duplicate code setting AF_INET (He Yang) #54939f332c4c4fc] - src: useMaybe<void>where bool isn't needed (Michaël Zasso) #54575c7ed2ff920] - stream: handle undefined chunks correctly in decode stream (devstone) #55153a9675a0cbc] - stream: treat null asyncIterator as undefined (Jason Zhang) #55119bf69ae1406] - stream: set stream prototype to closest transferable superclass (Jason Zhang) #550673273707a3a] - test: fix tests when Amaro is unavailable (Richard Lau) #55320ff3cc3b2ab] - test: use more informative errors intest-runner-cli(Antoine du Hamel) #5532117d2f9de6d] - test: maketest-loaders-workers-spawnedless flaky (Antoine du Hamel) #551721b1104e69b] - test: add resource to internal module stat test (RafaelGSS) #55157b36f8c2146] - test: update multiple assert tests to use node:test (James M Snell) #545851b30f7fdd6] - test: move coverage source map tests to new file (Aviv Keller) #55123ce67e7b5b3] - test: adding more tests for strip-types (Kevin Toshihiro Uehara) #54929a57c8ba3ef] - test: update wpt test for encoding (devstone) #5515165fbe94d45] - test: addescapePOSIXShellutil (Antoine du Hamel) #55125cc8838252e] - test: remove unnecessaryawaitin test-watch-mode (Wuli) #551429aeba48bf0] - test: fix typos (Nathan Baulch) #550630999b5e493] - test: remove duplicated test descriptions (Christos Koutsiaris) #54140e99d4a4cb8] - test: deflake test/pummel/test-timers.js (jakecastelli) #55098fb8470afd7] - test: deflake test-http-remove-header-stays-removed (Luigi Pinca) #55004e879c5edf2] - test: fix test-tls-junk-closes-server (Michael Dawson) #55089b885f0583c] - test: fix more tests that fail when path contains a space (Antoine du Hamel) #5508885f1187942] - test: fixassertSnapshotwhen path contains a quote (Antoine du Hamel) #55087fdae57f1e1] - test: fix some tests when path contains%(Antoine du Hamel) #5508236c9ea8912] - Revert "test: mark test-fs-watch-non-recursive flaky on Windows" (Luigi Pinca) #5507980da5993cc] - test: remove interval and give more time to unsync (Pietro Marchini) #5500693c23e74b3] - test: deflake test-inspector-strip-types (Luigi Pinca) #5505843bbca2c08] - test: maketest-runner-assertmore robust (Aviv Keller) #55036268f1ec08f] - test: update tls test to support OpenSSL32 (Michael Dawson) #55030a50dd21423] - test: do not assumeprocess.execPathcontains no spaces (Antoine du Hamel) #55028c56e324cb8] - test: fixtest-vm-context-dont-contextifywhen path contains a space (Antoine du Hamel) #550266d42e44264] - test: adjust tls-set-ciphers for OpenSSL32 (Michael Dawson) #5501622e601a76c] - test: addutil.stripVTControlCharacterstest (RedYetiDev) #54865a6796696d7] - test: improve coverage for timer promises schedular (Aviv Keller) #533709506f77b3e] - test: removegetCallSitefrom common (RedYetiDev) #5494720d3a806ea] - test: remove unused common utilities (RedYetiDev) #54825341b6d9b94] - test: deflake test-http-header-overflow (Luigi Pinca) #549781e53c10853] - test: fixsoucretosource(Aviv Keller) #550386843ca7e0d] - test: add asserts to validate test assumptions (Michael Dawson) #5499798ff615c5e] - test: add runner watch mode isolation tests (Pietro Marchini) #54888327a8f7b59] - test: fix invalid wasm test (Aviv Keller) #549355b012f544c] - test: move test-http-max-sockets to parallel (Luigi Pinca) #5497722b413910e] - test: remove test-http-max-sockets flaky designation (Luigi Pinca) #5497662b8640550] - test: refactor test-whatwg-webstreams-encoding to be shorter (David Dong) #545691f11d68173] - test: adjust key sizes to support OpenSSL32 (Michael Dawson) #5497290a87ca8f7] - test: update test to support OpenSSL32 (Michael Dawson) #549689b7834536a] - test: update DOM events web platform tests (Matthew Aitken) #546421c001550a2] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #55029800f7c44ed] - test_runner: throw on invalid source map (Aviv Keller) #550550f7e3f017f] - test_runner: assert entry is a valid object (Edigleysson Silva (Edy)) #55231c308862d2e] - test_runner: avoid spread operator on arrays (Antoine du Hamel) #5514312401972b7] - test_runner: support typescript files in default glob (Aviv Keller) #5508119cfa3140f] - test_runner: close and flush destinations on forced exit (Colin Ihrig) #5509986f7cb802d] - (SEMVER-MINOR) test_runner: support custom arguments inrun()(Aviv Keller) #551267eaeba499a] - test_runner: fix mocking modules with quote in their URL (Antoine du Hamel) #550838818c6c88a] - test_runner: report error on missing sourcemap source (Aviv Keller) #55037b62f2f8259] - (SEMVER-MINOR) test_runner: add 'test:summary' event (Colin Ihrig) #54851449dad0db0] - test_runner: usetest:symbol on second print of parent test (RedYetiDev) #549564b962a78c7] - test_runner: replace ansi clear with ansi reset (Pietro Marchini) #55013d7c708aec5] - (SEMVER-MINOR) test_runner: add support for coverage via run() (Chemi Atlow) #5393793c6c90219] - test_runner: support typescript module mocking (Marco Ippolito) #548781daec9a63f] - test_runner: avoid coverage report partial file names (Pietro Marchini) #54379d51e5a8667] - tools: enforce errors to not be documented in legacy section (Aviv Keller) #552186a7d201b80] - tools: update gyp-next to 0.18.2 (Node.js GitHub Bot) #55160c988e7e2e5] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #552277982d3d4ed] - tools: only check teams on the default branch (Antoine du Hamel) #5512460a35eddb0] - tools: makechoco installscript more readable (Aviv Keller) #54002b7b1fa6dd3] - tools: bump Rollup from 4.18.1 to 4.22.4 forlint-md(dependabot[bot]) #550933304bf387f] - tools: unlock versions of irrelevant DB deps (Michaël Zasso) #5504265c376a819] - tools: remove redudant code from eslint require rule (Aviv Keller) #54892295f684b69] - tools: update error message for ICU in license-builder (Aviv Keller) #54742ce4b6e403d] - tools: refactor js2c.cc to use c++20 (Yagiz Nizipli) #5484931f0ef6ea3] - tools: bump the eslint group in /tools/eslint with 7 updates (dependabot[bot]) #54821676d0a09a0] - tools: update github_reporter to 1.7.1 (Node.js GitHub Bot) #549510f01f38aea] - tty: fix links for terminal colors (Aviv Keller) #54596d264639f5f] - util: update ansi regex (Aviv Keller) #54865ea7aaf37bf] - v8: out of bounds copy (Robert Nagy) #55261fa695facf5] - watch: preserve output when gracefully restarted (Théo LUDWIG) #543235fda4a1498] - (SEMVER-MINOR) worker: addmarkAsUncloneableapi (Jason Zhang) #55234d65334c454] - worker: throw InvalidStateError in postMessage after close (devstone) #55206fc90d7c63a] - worker: handle--input-typemore consistently (Antoine du Hamel) #54979a9fa2da870] - zlib: throw brotli initialization error from c++ (Yagiz Nizipli) #546989abd1c7288] - zlib: remove prototype primordials usage (Yagiz Nizipli) #54695v22.9.0: 2024-09-17, Version 22.9.0 (Current), @RafaelGSSCompare Source
New API to retrieve execution Stack Trace
A new API
getCallSitehas been introduced to theutilmodule. This API allows usersto retrieve the stacktrace of the current execution. Example:
Thanks to Rafael Gonzaga for making this work on #54380.
Disable V8 Maglev
We have seen several crashes/unexpected JS behaviors with maglev on v22
(which ships V8 v12.4). The bugs lie in the codegen so it would be difficult for
users to work around them or even figure out where the bugs are coming from.
Some bugs are fixed in the upstream while some others probably remain.
As v22 will get stuck with V8 v12.4 as LTS, it will be increasingly difficult to
backport patches for them even if the bugs are fixed. So disable it by default
on v22 to reduce the churn and troubles for users.
Thanks to Joyee Cheung for making this work on #54384
Exposes X509_V_FLAG_PARTIAL_CHAIN to tls.createSecureContext
This releases introduces a new option to the API
tls.createSecureContext. Fornow on users can use
tls.createSecureContext({ allowPartialTrustChain: true })to treat intermediate (non-self-signed) certificates in the trust CA certificate
list as trusted.
Thanks to Anna Henningsen for making this work on #54790
Other Notable Changes
5c9599af5a] - src: create handle scope in FastInternalModuleStat (Joyee Cheung) #54384e2307d87e8] - (SEMVER-MINOR) stream: relocate the status checking code in the onwritecomplete (YoonSoo_Shin) #54032Deprecations
8433032948] - repl: doc-deprecate instantiatingnode:replclasses withoutnew(Aviv Keller) #548428c4c85cf31] - zlib: deprecate instantiating classes without new (Yagiz Nizipli) #54708Commits
027b0ffe84] - async_hooks: add an InactiveAsyncContextFrame class (Bryan English) #54510022767028e] - benchmark: --no-warnings to avoid DEP/ExpWarn log (Rafael Gonzaga) #54928af1988c147] - benchmark: add buffer.isAscii benchmark (RafaelGSS) #5474040c6849964] - benchmark: add buffer.isUtf8 bench (RafaelGSS) #54740237d7dfbde] - benchmark: add access async version to bench (Rafael Gonzaga) #54747ebe91db827] - benchmark: enhance dc publish benchmark (Rafael Gonzaga) #54745060164485b] - benchmark: add match and doesNotMatch bench (RafaelGSS) #547342844180c7e] - benchmark: add rejects and doesNotReject bench (RafaelGSS) #54734af7689ed02] - benchmark: add throws and doesNotThrow bench (RafaelGSS) #54734456a1fe222] - benchmark: add strictEqual and notStrictEqual bench (RafaelGSS) #54734721c63c858] - benchmark: adds groups to better separate benchmarks (Giovanni Bucci) #5439368e45b406e] - benchmark,doc: add CPU scaling governor to perf (Rafael Gonzaga) #54723d19efd7a50] - benchmark,doc: mention bar.R to the list of scripts (Rafael Gonzaga) #547221fb67afa2f] - buffer: fix out of range for toString (Jason Zhang) #5455385b5ed5d41] - buffer: re-enable Fast API for Buffer.write (Robert Nagy) #545269a075279ec] - build: upgrade clang-format to v18 (Aviv Keller) #5395769ec9d8d2b] - build: fix conflicting V8 object print flags (Daeyeon Jeong) #54785948bba396c] - build: do not build with code cache for core coverage collection (Joyee Cheung) #546336200cf4fb6] - build: don't store eslint locally (Aviv Keller) #542313b5ed97fe9] - build: turn off-Wrestrict(Richard Lau) #54737e38e305a35] - build,win: enable clang-cl compilation (Stefan Stojanovic) #546555bba0781b0] - crypto: reject dh,x25519,x448 in {Sign,Verify}Final (Huáng Jùnliàng) #537743981853c00] - crypto: return a clearer error when loading an unsupported pkcs12 (Tim Perry) #5448502ac5376b9] - crypto: remove unusedkHashTypesinternal (Antoine du Hamel) #54627323d9da3c9] - deps: update cjs-module-lexer to 1.4.1 (Node.js GitHub Bot) #54846bf4bf7cc6b] - deps: update simdutf to 5.5.0 (Node.js GitHub Bot) #5443461047dd130] - deps: upgrade npm to 10.8.3 (npm team) #546192351da5034] - deps: update cjs-module-lexer to 1.4.0 (Node.js GitHub Bot) #547130659516823] - deps: allow amaro to be externalizable (Michael Dawson) #546466a32645dbc] - deps: fix sign-compare warning in ncrypto (Cheng) #546248f62f19197] - doc: fix broken Android building link (Niklas Wenzel) #54922440c256d76] - doc: add support link for aduh95 (Antoine du Hamel) #5486656aca2a1ca] - doc: run license-builder (github-actions[bot]) #548548931f569c6] - doc: experimental flag for global accessible APIs (Chengzhong Wu) #543306f8a6e9eb6] - doc: addERR_INVALID_ADDRESStoerrors.md(Aviv Keller) #54661c1b92e05e7] - doc: add support link for mcollina (Matteo Collina) #547861def18122a] - doc: mark--conditionsCLI flag as stable (Guy Bedford) #54209b8ae36b6c3] - doc: fix typo in recognizing-contributors (Tobias Nießen) #548222c2ae80924] - doc: clarify--max-old-space-sizeand--max-semi-space-sizeunits (Alexandre ABRIOUX) #544775bd4be5ce7] - doc: replace --allow-fs-read by --allow-fs-write in related section (M1CK431) #54427c0f3e4603f] - doc: add support link for marco-ippolito (Marco Ippolito) #54789dc69eb8276] - doc: fix typo in module.md (Tobias Nießen) #54794de225f5db9] - doc: specify that preloaded modules affect subprocesses (Aviv Keller) #5293962b0007cbe] - doc: clarify expandedSQL behavior (Tobias Nießen) #546851c7bdf95db] - doc: render type references in SQLite docs (Tobias Nießen) #546845555095531] - doc: fix typo (Michael Dawson) #54640754baa4efa] - doc: fix webcrypto.md AES-GCM backticks (Filip Skokan) #546215bfb4bcf45] - doc: add documentation about os.tmpdir() overrides (Joyee Cheung) #5461322d873208e] - doc, build: fixup build docs (Aviv Keller) #548995e081a12b6] - doc, child_process: add esm snippets (Aviv Keller) #536162b68c30a26] - doc, meta: fix broken link inonboarding.md(Aviv Keller) #54886a624002fff] - esm: throwERR_REQUIRE_ESMinstead ofERR_INTERNAL_ASSERTION(Antoine du Hamel) #5486831d4ef91ee] - esm: fix support forURLinstances inimport.meta.resolve(Antoine du Hamel) #5469040ba89e452] - esm: use Undici/fetchdata:URL parser (Matthew Aitken) #5474893116dd7b1] - fs: translate error code properly in cpSync (Jason Zhang) #54906375cbb592e] - fs: refactor rimraf to avoid using primordials (Yagiz Nizipli) #54834ee89c3149e] - fs: respect dereference when copy symlink directory (Jason Zhang) #547327123bf7ca4] - http: reduce likelihood of race conditions on keep-alive timeout (jazelly) #5486304ef3e4afd] - https: only use default ALPNProtocols when appropriate (Brian White) #54411dc5593ba1e] - lib: remove unnecessary async (jakecastelli) #548292b9a6373da] - lib: make WeakRef safe in abort_controller (jazelly) #547915f02e1b850] - lib: moveSymbol[Async]Disposepolyfills tointernal/util(Antoine du Hamel) #54853fc78ced7e4] - lib: convert signals to array before validation (Jason Zhang) #5471421fef34a53] - lib: add note about removingnode:sysmodule (Rafael Gonzaga) #54743a37d805489] - (SEMVER-MINOR) lib: add util.getCallSite() API (Rafael Gonzaga) #543802a1f56cce6] - lib: ensure no holey array in fixed_queue (Jason Zhang) #54537540b1dbaf6] - lib: refactor SubtleCrypto experimental warnings (Filip Skokan) #54620b59c8b88c7] - lib,src: use built-in array buffer detach, transfer (Yagiz Nizipli) #54837c1cc046de9] - meta: bump peter-evans/create-pull-request from 6.1.0 to 7.0.1 (dependabot[bot]) #5482082c08ef483] - meta: addWindows ARM64to flaky-tests list (Aviv Keller) #54693df30e8efa1] - meta: ping @nodejs/performance on bench changes (Rafael Gonzaga) #54752bdd9fbb905] - meta: bump actions/setup-python from 5.1.1 to 5.2.0 (Rich Trott) #5469119574a8403] - meta: update sccache to v0.8.1 (Aviv Keller) #547209ebcfb2b28] - meta: bump step-security/harden-runner from 2.9.0 to 2.9.1 (dependabot[bot]) #54704ea58feb959] - meta: bump actions/upload-artifact from 4.3.4 to 4.4.0 (dependabot[bot]) #54703c6bd9e443e] - meta: bump github/codeql-action from 3.25.15 to 3.26.6 (dependabot[bot]) #5470279b358af2e] - meta: fix links inSECURITY.md(Aviv Keller) #546966c8a20d650] - meta: fixcontributingcodeowners (Aviv Keller) #54641b7284ed099] - module: do not warn for typeless package.json when there isn't one (Joyee Cheung) #54045ddd24a6e63] - node-api: add external buffer creation benchmark (Chengzhong Wu) #548774a7576efae] - node-api: add support for UTF-8 and Latin-1 property keys (Mert Can Altin) #52984461e523498] - os: improvetmpdirperformance (Yagiz Nizipli) #5470994fb7ab2e7] - path: removeStringPrototypeCharCodeAtfromposix.extname(Aviv Keller) #5454667b1d4cb45] - repl: avoid interpreting 'npm' as a command when errors are recoverable (Shima Ryuhei) #548488433032948] - repl: doc-deprecate instantiatingnode:replclasses withoutnew(Aviv Keller) #548427766349dd0] - sqlite: fix segfault in expandedSQL (Tobias Nießen) #546874c1b98ba2b] - sqlite: remove unnecessary auto assignment (Tobias Nießen) #5468677d162adb6] - src: add--env-file-if-existsflag (Bosco Domingo) #53060424bdc03b4] - src: add Cleanable class to Environment (Gabriel Schulhof) #54880fbd08e3a9f] - src: switch crypto APIs to use Maybe<void> (James M Snell) #547755e72bd3545] - src: eliminate ManagedEVPPkey (James M Snell) #5475197cbcfbb43] - src: fix unhandled error in structuredClone (Daeyeon Jeong) #54764b89cd8d19a] - src: move hkdf, scrypto, pbkdf2 impl to ncrypto (James M Snell) #546515c9599af5a] - src: create handle scope in FastInternalModuleStat (Joyee Cheung) #54384e2307d87e8] - (SEMVER-MINOR) stream: relocate the status checking code in the onwritecomplete (YoonSoo_Shin) #54032ff54cabef6] - test: adjust test-tls-junk-server for OpenSSL32 (Michael Dawson) #5492623fb03beed] - test: remove duplicate skip AIX (Wuli) #549172b5e70816a] - test: adjust tls test for OpenSSL32 (Michael Dawson) #54909cefa692dcb] - test: fix test-http2-socket-close.js (Hüseyin Açacak) #54900097f6d3e7e] - test: improve test-internal-fs-syncwritestream (Sunghoon) #54671ed736a689f] - test: deflake test-dns (Luigi Pinca) #54902bb4849f595] - test: fix test test-tls-dhe for OpenSSL32 (Michael Dawson) #54903d9264bceca] - test: use correct file naming syntax forutil-parse-env(Aviv Keller) #53705115a7ca42a] - test: add missing await (Luigi Pinca) #548287a1d633d77] - test: move more url tests tonode:test(Yagiz Nizipli) #54636ee385d62b9] - test: strip color chars intest-runner-run(Giovanni Bucci) #545522efec6221c] - test: deflake test-http2-misbehaving-multiplex (Luigi Pinca) #54872b198a91404] - test: remove dead code in test-http2-misbehaving-multiplex (Luigi Pinca) #54860194cb83f39] - test: reduce test-esm-loader-hooks-inspect-wait flakiness (Luigi Pinca) #548274b53558e8b] - test: reduce the allocation size in test-worker-arraybuffer-zerofill (James M Snell) #54839c968d65d6d] - test: fix test-tls-client-mindhsize for OpenSSL32 (Michael Dawson) #54739b998bb0933] - test: remove need to make fs call for zlib test (Yagiz Nizipli) #54814f084ea2e01] - test: use platform timeout (jakecastelli) #54591b10e434cf3] - test: add platform timeout support for riscv64 (jakecastelli) #54591b875f2d7de] - test: reduce stack size for test-error-serdes (James M Snell) #54840d1a411480a] - test: reduce fs calls in test-fs-existssync-false (Yagiz Nizipli) #54815b96ee30a09] - test: usenode:testintest-cli-syntax.bad(Aviv Keller) #545135278b8b7a1] - test: move test-http-server-request-timeouts-mixed (James M Snell) #548418345a60d3a] - test: fix Windows async-context-frame memory failure (Stephen Belanger) #54823cad404e1a1] - test: fix volatile for CauseSegfault with clang (Ivan Trubach) #5432541682c7286] - test: settest-http2-socket-closeas flaky (Yagiz Nizipli) #548021e1ac48711] - test: settest-worker-arraybuffer-zerofillas flaky (Yagiz Nizipli) #5480256238debff] - test: settest-runner-run-watchas flaky (Yagiz Nizipli) #548028291de1540] - test: settest-http-server-request-timeouts-mixedas flaky (Yagiz Nizipli) #5480232d340e6b3] - test: settest-single-executable-application-emptyas flaky (Yagiz Nizipli) #548026a2da4c4ca] - test: settest-macos-app-sandboxas flaky (Yagiz Nizipli) #548022f408847a0] - test: settest-fs-utimesas flaky (Yagiz Nizipli) #54802e3b7c40ffc] - test: settest-runner-run-watchas flaky (Yagiz Nizipli) #54802d2ede46946] - test: settest-sqlite-statement-syncas flaky (Yagiz Nizipli) #54802b9f3385808] - test: settest-writewrapas flaky (Yagiz Nizipli) #54802d55fec8f40] - test: settest-async-context-frameas flaky (Yagiz Nizipli) #548023dfb525f3e] - test: settest-esm-loader-hooks-inspect-waitas flaky (Yagiz Nizipli) #54802b0458a88b4] - test: settest-http2-large-fileas flaky (Yagiz Nizipli) #548025f6f8757e5] - test: settest-runner-watch-mode-complexas flaky (Yagiz Nizipli) #548024231af336d] - test: settest-performance-functionas flaky (Yagiz Nizipli) #5480245ef2a868e] - test: settest-debugger-heap-profileras flaky (Yagiz Nizipli) #54802b5137f6405] - test: fixtest-process-load-env-filewhen path contains'(Antoine du Hamel) #54511960116905a] - test: refactor fs-watch tests due to macOS issue (Santiago Gimeno) #54498f074d74bf3] - test: refactortest-esm-type-field-errors(Giovanni Bucci) #5436867e30deced] - test: move more zlib tests to node:test (Yagiz Nizipli) #54609fdb65111a3] - test: improve output of child process utilities (Joyee Cheung) #5462255a12a4190] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #54925de0f445a7f] - test_runner: reimplementassert.okto allow stack parsing (Aviv Keller) #54776a52c199d9d] - (SEMVER-MINOR) test_runner: report coverage thresholds intest:coverage(Aviv Keller) #548136552fddef5] - test_runner: update kPatterns (Pietro Marchini) #547283396a4954d] - test_runner: detect only tests when isolation is off (Colin Ihrig) #54832021f59b6bc] - test_runner: apply filtering when tests begin (Colin Ihrig) #5483236da793350] - test_runner: allow--importwith no isolation (Aviv Keller) #54697de73d1ee4b] - test_runner: improve code coverage cleanup (Colin Ihrig) #548563d478728f2] - timers: avoid generating holey internal arrays (Gürgün Dayıoğlu) #54771b3d567ae0f] - timers: document ref option for scheduler.wait (Paolo Insogna) #54605c2bf0134ce] - (SEMVER-MINOR) tls: addallowPartialTrustChainflag (Anna Henningsen) #54790608a611132] - tools: add readability/fn_size to filter (Rafael Gonzaga) #5474493fab49099] - tools: add util scripts to land and rebase PRs (Antoine du Hamel) #54656d6df542ff8] - tools: remove readability/fn_size rule (Rafael Gonzaga) #54663689d127ee7] - typings: fix TypedArray to a global type (1ilsang) #54063071dff1d34] - typings: correct param type ofSafePromisePrototypeFinally(Wuli) #547275243e3240c] - Revert "v8: enable maglev on supported architectures" (Joyee Cheung) #54384ade9da5b3a] - vm: add vm proto property lookup test (Chengzhong Wu) #546068385958b60] - zlib: add typings for better dx (Yagiz Nizipli) #546998c4c85cf31] - zlib: deprecate instantiating classes without new (Yagiz Nizipli) #54708v22.8.0: 2024-09-03, Version 22.8.0 (Current), @RafaelGSSCompare Source
New JS API for compile cache
This release adds a new API
module.enableCompileCache()that can be used to enable on-disk code caching of all modules loaded after this API is called.Previously this could only be enabled by the
NODE_COMPILE_CACHEenvironment variable, so it could only set by end-users.This API allows tooling and library authors to enable caching of their own code.
This is a built-in alternative to the v8-compile-cache/v8-compile-cache-lib packages,
but have better performance and supports ESM.
Thanks to Joyee Cheung for working on this.
New option for vm.createContext() to create a context with a freezable globalThis
Node.js implements a flavor of
vm.createContext()and friends that creates a context without contextifying its globalobject when vm.constants.DONT_CONTEXTIFY is used. This is suitable when users want to freeze the context
(impossible when the global is contextified i.e. has interceptors installed) or speed up the global access if they
don't need the interceptor behavior.
Thanks to Joyee Cheung for working on this.
Support for coverage thresholds
Node.js now supports requiring code coverage to meet a specific threshold before the process exits successfully.
To use this feature, you need to enable the
--experimental-test-coverageflag.You can set thresholds for the following types of coverage:
--test-coverage-branches=<threshold>--test-coverage-functions=<threshold>--test-coverage-lines=<threshold><threshold>should be an integer between 0 and 100. If an invalid value is provided, aTypeErrorwill be thrown.If the code coverage fails to meet the specified thresholds for any category, the process will exit with code
1.For instance, to enforce a minimum of 80% line coverage and 60% branch coverage, you can run:
Thanks Aviv Keller for working on this.
Other Notable Changes
1f2cc2fa47] - (SEMVER-MINOR) src,lib: add performance.uvMetricsInfo (Rafael Gonzaga) #544131e01bdc0d0] - (SEMVER-MINOR) net: exclude ipv6 loopback addresses from server.listen (Giovanni Bucci) #5426497fa075c2e] - (SEMVER-MINOR) test_runner: support running tests in process (Colin Ihrig) #53927858b583c88] - (SEMVER-MINOR) test_runner: defer inheriting hooks until run() (Colin Ihrig) #53927Commits
94985df9d6] - benchmark: fix benchmark for file path and URL conversion (Early Riser) #54190ac178b094b] - buffer: truncate instead of throw when writing beyond buffer (Robert Nagy) #54524afd8c1eb4f] - buffer: allow invalid encoding in from (Robert Nagy) #545336f0cf35cd3] - build: reclaim disk space on macOS GHA runner (jakecastelli) #54658467ac3aec4] - build: don't clean obj.target directory if it doesn't exist (Joyee Cheung) #5433771fdf961df] - build: update required python version to 3.8 (Aviv Keller) #5435873604cf1c5] - deps: update nghttp2 to 1.63.0 (Node.js GitHub Bot) #54589b00c087285] - deps: V8: cherry-picke74d0f4(Joyee Cheung) #5427933a6b3c7a9] - deps: backport ICU-22787 to fix ClangCL on Windows (Stefan Stojanovic) #54502fe56949cbb] - deps: update c-ares to v1.33.1 (Node.js GitHub Bot) #54549290f6ce619] - deps: update amaro to 0.1.8 (Node.js GitHub Bot) #54520b5843568b4] - deps: update amaro to 0.1.7 (Node.js GitHub Bot) #544739c709209b4] - deps: update undici to 6.19.8 (Node.js GitHub Bot) #54456a5ce24181b] - deps: sqlite: fix Windows compilation (Colin Ihrig) #544333caf29ea88] - deps: update sqlite to 3.46.1 (Node.js GitHub Bot) #5443368758d4b08] - doc: add support me link for anonrig (Yagiz Nizipli) #54611f5c5529266] - doc: add alert on REPL from TCP socket (Rafael Gonzaga) #54594bf824483cd] - doc: fix typo in styleText description (Rafael Gonzaga) #54616825d933fd4] - doc: add getHeapStatistics() property descriptions (Benji Marinacci) #5458480e5150160] - doc: fix module compile cache description (沈鸿飞) #546257fd033fe56] - doc: run license-builder (github-actions[bot]) #54562c499913732] - doc: fix information about including coverage files (Aviv Keller) #54527c3dc83befc] - doc: support collaborators - talk amplification (Michael Dawson) #54508fc57beaad3] - doc: add note about shasum generation failure (Marco Ippolito) #544871800a58f49] - doc: update websocket flag description to reflect stable API status (Yelim Koo) #5448261affd77a7] - doc: fix capitalization in module.md (shallow-beach) #5448825419915c7] - doc: add esm examples to node:https (Alfredo González) #5439983b5efeb54] - doc: reserve ABI 130 for Electron 33 (Calvin) #543836ccbd32ae8] - doc, meta: add missing,toBUILDING.md(Aviv Keller) #54409fc08a9b0cd] - fs: refactor handleTimestampsAndMode to remove redundant call (HEESEUNG) #543694a664b5fcb] - lib: respect terminal capabilities on styleText (Rafael Gonzaga) #54389a9ce2b6a28] - lib: fix emit warning for debuglog.time when disabled (Vinicius Lourenço) #54275b5a23c9783] - meta: remind users to use a supported version in bug reports (Aviv Keller) #544810d7171d8e9] - meta: add more labels to dep-updaters (Aviv Keller) #54454c4996c189f] - meta: run coverage-windows whenvcbuild.batupdated (Aviv Keller) #544123cf645768e] - module: use amaro default transform values (Marco Ippolito) #54517336496b90e] - module: add sourceURL magic comment hinting generated source (Chengzhong Wu) #5440204f83b50ad] - Revert "net: validate host name for server listen" (jakecastelli) #545541e01bdc0d0] - (SEMVER-MINOR) net: exclude ipv6 loopback addresses from server.listen (Giovanni Bucci) #542643cd10a3f40] - node-api: remove RefBase and CallbackWrapper (Vladimir Morozov) #5359072c554abab] - sqlite: return results with null prototype (Michaël Zasso) #54350e071651bb2] - src: disable fast methods forbuffer.write(Michaël Zasso) #54565f8cbbc685a] - src: use v8::Isolate::GetDefaultLocale() to compute navigator.language (Joyee Cheung) #542794baf4637eb] - (SEMVER-MINOR) src: add JS APIs for compile cache and NODE_DISABLE_COMPILE_CACHE (Joyee Cheung) #54501101e299656] - src: move more crypto_dh.cc code to ncrypto (James M Snell) #54459e6e1f4e8bd] - src: remove redundant AESCipherMode (Tobias Nießen) #544381ff3f63f5e] - src: handle errors correctly inpermission.cc(Michaël Zasso) #545414938188682] - src: returnv8::Objectfrom error constructors (Michaël Zasso) #545414578e9485b] - src: use better return types in KVStore (Michaël Zasso) #545397d9e994791] - src: change SetEncodedValue to return Maybe<void> (Tobias Nießen) #54443eef303028f] - src: remove cached data tag from snapshot metadata (Joyee Cheung) #541223a74c400d5] - src: improvebuffer.transcodeperformance (Yagiz Nizipli) #54153909c5320fd] - src: move more crypto code to ncrypto (James M Snell) #543209ba75faf5f] - (SEMVER-MINOR) src,lib: add performance.uvMetricsInfo (Rafael Gonzaga) #54413fffc300c6d] - stream: change stream to use index instead offor...of(Wiyeong Seo) #54474a4a6ef8d29] - test: fix test-tls-client-auth test for OpenSSL32 (Michael Dawson) #5461076345a5d7c] - test: update TLS test for OpenSSL 3.2 (Richard Lau) #54612522d5a359d] - test: run V8 Fast API tests in release mode too (Michaël Zasso) #54570edbecf5209] - test: increase key size for ca2-cert.pem (Michael Dawson) #54599bc976cfc93] - test: update test-abortsignal-cloneable to use node:test (James M Snell) #545819f1ce732a8] - test: update test-assert-typedarray-deepequal to use node:test (James M Snell) #54585c74f2aeb92] - test: update test-assert to use node:test (James M Snell) #54585a0be95e4cc] - test: merge ongc and gcutil into gc.js (tannal) #54355c10aff665e] - test: move a couple of tests over to using node:test (James M Snell) #54582dbbc790949] - test: update test-aborted-util to use node:test (James M Snell) #5457864442fce6b] - test: refactor test-abortcontroller to use node:test (James M Snell) #5457472345dee1c] - test: fix embedding test for Windows (Vladimir Morozov) #53659846e2b2896] - test: refactor test_runner tests to change default reporter (Colin Ihrig) #54547b5eb24c86a] - test: force spec reporter in test-runner-watch-mode.mjs (Colin Ihrig) #5453866ae9f4c0a] - test: use valid hostnames (Luigi Pinca) #5455602d664b75f] - test: fix improper path to URL conversion (Antoine du Hamel) #545098a4f8a9eff] - test: add tests for runner coverage with different stdout column widths (Pietro Marchini) #54494b0ed8dbb2f] - test: prevent V8 from writing into the system's tmpdir (Michaël Zasso) #543955ee234a5a6] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #54593a4bebf8559] - test_runner: ensure test watcher picks up new test files (Pietro Marchini) #54225d4310fe9c1] - (SEMVER-MINOR) test_runner: add support for coverage thresholds (Aviv Keller) #544290cf78aa24b] - test_runner: refactormock_loader(Antoine du Hamel) #5422397fa075c2e] - (SEMVER-MINOR) test_runner: support running tests in process (Colin Ihrig) #53927858b583c88] - (SEMVER-MINOR) test_runner: defer inheriting hooks until run() (Colin Ihrig) #5392745b0250692] - test_runner: account for newline in source maps (Colin Ihrig) #544441c29e74d30] - test_runner: makemock.module'sspecifierconsistent withimport()(Antoine du Hamel) #54416cbe30a02a3] - test_runner: finish build phase before running tests (Colin Ihrig) #544238a4b26f00c] - timers: fix validation (Paolo Insogna) #5440438798140c4] - tools: remove unused python files (Aviv Keller) #53928da6c61def8] - tools: add swc license (Marco Ippolito) #5446216d4c437e1] - typings: provide internal types for wasi bindings (Andrew Moon) #54119fe5666f006] - vm: return all own names and symbols in property enumerator interceptor (Chengzhong Wu) #54522db80eac496] - (SEMVER-MINOR) vm: introduce vanilla contexts via vm.constants.DONT_CONTEXTIFY (Joyee Cheung) #543948ffdd1e2b2] - zlib: simplify validators (Yagiz Nizipli) #54442v22.7.0: 2024-08-22, Version 22.7.0 (Current), @RafaelGSSCompare Source
Experimental transform types support
With the new flag
--experimental-transform-typesit is possible to enable thetransformation of TypeScript-only syntax into JavaScript code.
This feature allows Node.js to support TypeScript syntax such as
Enumandnamespace.Thanks to Marco Ippolito for making this work on #54283.
Module syntax detection is now enabled by default.
Module syntax detection (the
--experimental-detect-moduleflag) is nowenabled by default. Use
--no-experimental-detect-moduleto disable it ifneeded.
Syntax detection attempts to run ambiguous files as CommonJS, and if the module
fails to parse as CommonJS due to ES module syntax, Node.js tries again and runs
the file as an ES module.
Ambiguous files are those with a
.jsor no extension, where the nearest parentpackage.jsonhas no"type"field (either"type": "module"or"type": "commonjs").Syntax detection should have no performance impact on CommonJS modules, but it
incurs a slight performance penalty for ES modules; add
"type": "module"tothe nearest parent
package.jsonfile to eliminate the performance cost.A use case unlocked by this feature is the ability to use ES module syntax in
extensionless scripts with no nearby
package.json.Thanks to Geoffrey Booth for making this work on #53619.
Performance Improvements to Buffer
Performance of Node.js Buffers have been optimized through multiple PR's with significant
improvements to the
Buffer.copyandBuffer.writemethods. These are used throughoutthe codebase and should give a nice boost across the board.
Thanks to Robert Nagy for making this work on #54311,
#54324, and #54087.
Other Notable Changes
911de7dd6d] - (SEMVER-MINOR) inspector: supportNetwork.loadingFailedevent (Kohei Ueno) #542469ee4b16bd8] - (SEMVER-MINOR) lib: rewrite AsyncLocalStorage without async_hooks (Stephen Belanger) #48528Commits
c6544ff5a6] - benchmark: use assert.ok searchparams (Rafael Gonzaga) #5433451b8576897] - benchmark: add stream.compose benchmark (jakecastelli) #54308c166036515] - benchmark: rename count to n (Rafael Gonzaga) #542711be0ee76ef] - benchmark: change assert() to assert.ok() (Rafael Gonzaga) #542544dd229f546] - benchmark: support --help in CLI (Aviv Keller) #53358a5a320cd5b] - benchmark: remove force option as force defaults to true (Yelim Koo) #54203db0a80a0eb] - benchmark: use assert.ok instead of assert (Rafael Gonzaga) #541768ba53ae7b7] - buffer: properly apply dst offset and src length on fast path (Robert Nagy) #54391a5a60e6823] - buffer: use fast API for writing one-byte strings (Robert Nagy) #543117b641bc2bd] - buffer: optimize byteLength for short strings (Robert Nagy) #5434528ca678f81] - buffer: optimize byteLength for common encodings (Robert Nagy) #5434212785559be] - buffer: optimize createFromString (Robert Nagy) #54324f7f7b0c498] - buffer: optimize for common encodings (Robert Nagy) #5431937631f826b] - buffer: add JSDoc to blob bytes method (Roberto Simonini) #54117ab6fae9dbf] - buffer: faster type check (Robert Nagy) #540889f8f26eb2f] - buffer: use native copy impl (Robert Nagy) #54087019ebf03c1] - buffer: use faster integer argument check (Robert Nagy) #54089c640a2f24c] - build: always disable strict aliasing (Michaël Zasso) #543396aa1d9e855] - build: updateruffto0.5.2(Aviv Keller) #53909350e699443] - build: supportlint-js-fixinvcbuild.bat(Aviv Keller) #5369598fed763f7] - build: add--without-amarobuild flag (Antoine du Hamel) #541361ca598c5ce] - cli: allow--test-[name/skip]-patterninNODE_OPTIONS(Aviv Keller) #5300137960a67ae] - console: use validateOneOf for colorMode validation (HEESEUNG) #54245d52f515bab] - crypto: include NODE_EXTRA_CA_CERTS in all secure contexts by default (Eric Bickle) #44529b6a3e61353] - deps: update amaro to 0.1.6 (Node.js GitHub Bot) #543740d716ad3f3] - deps: update simdutf to 5.3.4 (Node.js GitHub Bot) #5431218bfea5f33] - deps: update zlib to 1.3.0.1-motley-71660e1 (Node.js GitHub Bot) #53464d0c23f332f] - deps: update zlib to 1.3.0.1-motley-c2469fd (Node.js GitHub Bot) #53464e7db63972c] - deps: update zlib to 1.3.0.1-motley-68e57e6 (Node.js GitHub Bot) #53464713ae95555] - deps: update zlib to 1.3.0.1-motley-8b7eff8 (Node.js GitHub Bot) #53464758c9df36e] - deps: update zlib to 1.3.0.1-motley-e432200 (Node.js GitHub Bot) #53464fe7e6c9563] - deps: update zlib to 1.3.0.1-motley-887bb57 (Node.js GitHub Bot) #5346435722b7bca] - deps: update simdjson to 3.10.0 (Node.js GitHub Bot) #54197a2a41557db] - deps: fix GN build warning in ncrypto (Cheng) #54222869da204d7] - deps: update c-ares to v1.33.0 (Node.js GitHub Bot) #54198e0d503a715] - deps: update nbytes to 0.1.1 (Node.js GitHub Bot) #54277b0c768dae1] - deps: update undici to 6.19.7 (Node.js GitHub Bot) #54286ef9a950cb9] - deps: update acorn to 8.12.1 (Node.js GitHub Bot) #534651597a1139a] - deps: update undici to 6.19.5 (Node.js GitHub Bot) #54076103e4db3e0] - deps: update simdutf to 5.3.1 (Node.js GitHub Bot) #541969f115ba9e9] - doc: fix error description of the max header size (Egawa Ryo) #54125f967ab3810] - doc: add git node security --cleanup (Rafael Gonzaga) #543818883c01afa] - doc: add note on weakness of permission model (Tobias Nießen) #54268824bd58bc5] - doc: add versions when--watch-preserve-outputwas added (Théo LUDWIG) #5432833795cfd49] - doc: replace v19 mention in Current release (Rafael Gonzaga) #54361aa6e770ea5] - doc: correct peformance entry types (Jason Zhang) #542634b099ce1bd] - doc: fix typo in method name in the sea doc (Eliyah Sundström) #540278a8d1d2281] - doc: mark process.nextTick legacy (Marco Ippolito) #512806f4b5d998e] - doc: add esm examples to node:http2 (Alfredo González) #542921535469c12] - doc: explicitly mention node:fs module restriction (Rafael Gonzaga) #5426926c37f7910] - doc: remove module-based permission doc (Rafael Gonzaga) #54266971b9f31f5] - doc: updatebuffer.constants.MAX_LENGTHsize (Samuli Asmala) #542073106149965] - doc: warn for windows build bug (Jason Zhang) #5421755f8ac3e89] - doc: make some parameters optional intracingChannel.traceCallback(Deokjin Kim) #54068e3e2f22cab] - doc: add esm examples to node:dns (Alfredo González) #541720429b1eb9d] - doc: add KevinEady as a triager (Chengzhong Wu) #541794bfa7d8e54] - doc: add esm examples to node:console (Alfredo González) #541082f5309fc22] - doc: fix sea assets example (Sadzurami) #5419288aef5a39d] - doc: add links to security steward companies (Aviv Keller) #529815175903c23] - doc: moveonreadoption fromsocket.connect()tonew net.socket()(sendoru) #54194144637e845] - doc: move release key for Myles Borins (Richard Lau) #54059358fdacec6] - doc: refresh instructions for building node from source (Liran Tal) #5376811fdaa6ad2] - doc: add documentation for blob.bytes() method (jaexxin) #54114db3b0df42c] - doc: add missing new lines to custom test reporter examples (Eddie Abbondanzio) #541521cafefd2cf] - doc: fix worker threadId/destination typo (Thomas Hunter II) #539337772b46038] - doc: update list of Triagers on theREADME.md(Antoine du Hamel) #54138af99ba3dc9] - doc: remove unused imports from worker_threads.md (Yelim Koo) #54147826edc4341] - doc: expand troubleshooting section (Liran Tal) #53808923195b624] - doc: clarifyuseCodeCachesetting for cross-platform SEA generation (Yelim Koo) #539947c305a4900] - doc, meta: replace command with link to keys (Aviv Keller) #537456f986e0ee6] - doc, test: simplify test README table (Aviv Keller) #53971112228c15a] - fs: remove unnecessary option argument validation (Jonas) #53958911de7dd6d] - (SEMVER-MINOR) inspector: supportNetwork.loadingFailedevent (Kohei Ueno) #542461e825915d5] - inspector: provide detailed info to fix DevTools frontend errors (Kohei Ueno) #54156417120a3a3] - lib: replace spread operator with primordials function (YoonSoo_Shin) #5405309f411e6f6] - lib: avoid for of loop and remove unnecessary variable in zlib (YoonSoo_Shin) #54258b8970570b0] - lib: improve async_context_frame structure (Stephen Belanger) #54239783322fa16] - lib: fix unhandled errors in webstream adapters (Fedor Indutny) #54206425b9562b9] - lib: fix typos in comments within internal/streams (YoonSoo_Shin) #540939ee4b16bd8] - (SEMVER-MINOR) lib: rewrite AsyncLocalStorage without async_hooks (Stephen Belanger) #485288c9a4ae12b] - lib,permission: support Buffer to permission.has (Rafael Gonzaga) #54104c8e358c96c] - meta: add test-permission-* CODEOWNERS (Rafael Gonzaga) #54267581c155cf8] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #542103f0d7344e3] - meta: add module label for the lib/internal/modules folder (Aviv Keller) #528580157ec6bbd] - meta: bumpactions/upload-artifactfrom 4.3.3 to 4.3.4 (dependabot[bot]) #541667fa95d2360] - meta: bumpactions/download-artifactfrom 4.1.7 to 4.1.8 (dependabot[bot]) #54167acc5b9a0c5] - meta: bump actions/setup-python from 5.1.0 to 5.1.1 (dependabot[bot]) #54165dede30a8d0] - meta: bumpstep-security/harden-runnerfrom 2.8.1 to 2.9.0 (dependabot[bot]) #54169b733854eac] - meta: bumpactions/setup-nodefrom 4.0.2 to 4.0.3 (dependabot[bot]) #541706a9f168cc6] - meta: bumpgithub/codeql-actionfrom 3.25.11 to 3.25.15 (dependabot[bot]) #541689bbd85e4fe] - meta: bumpossf/scorecard-actionfrom 2.3.3 to 2.4.0 (dependabot[bot]) #5417133633eebd9] - meta: add typescript team to codeowners (Marco Ippolito) #54101240d9296c1] - (SEMVER-MINOR) module: add --experimental-transform-types flag (Marco Ippolito) #5428366dcb2a571] - (SEMVER-MINOR) module: unflag detect-module (Geoffrey Booth) #53619100225fbe1] - module: do not attempt to strip type when there's no source (Antoine du Hamel) #542871ba2000703] - module: refactor ts parser loading (Marco Ippolito) #5424313cc480030] - module: remove outdated comment (Michaël Zasso) #54118e676d98435] - module,win: fix long path resolve (Hüseyin Açacak) #532949aec536083] - path: changeposix.jointo use array (Wiyeong Seo) #543318a770cf5c9] - path: fix relative on Windows (Hüseyin Açacak) #53991267cd7f361] - path: use the correct name invalidateString(Benjamin Pasero) #5366931adeea855] - sea: don't set code cache flags when snapshot is used (Joyee Cheung) #541207f1bf1ce24] - sqlite: split up large test file (Colin Ihrig) #5401494e2ea6f5c] - sqlite: ensure statement finalization on db close (Colin Ihrig) #54014e077ff1f38] - src: update compile cache storage structure (Joyee Cheung) #542914e4d1def7e] - src: refactor http parser binding initialization (Joyee Cheung) #54276409d9eb09b] - src: shift even moar x509 to ncrypto (James M Snell) #54340f87aa27274] - src: don't match after--inDotenv::GetPathFromArgs(Aviv Keller) #54237b6927dd981] - src: move some X509Certificate stuff to ncrypto (James M Snell) #54241a394219fa5] - src: skip inspector wait in internal workers (Chengzhong Wu) #542198daeccfe92] - src: shift more crypto impl details to ncrypto (James M Snell) #54028e619133ac9] - src: move spkac methods to ncrypto (James M Snell) #53985b52c2fff75] - src: account for OpenSSL unexpected version (Shelley Vohr) #540380b16af1689] - src,test: trackURL.canParsefast API calls (Michaël Zasso) #543562be78b03c3] - src,test: ensure that V8 fast APIs are called (Michaël Zasso) #543179297d29cdb] - stream: make checking pendingcb on WritableStream backward compatible (jakecastelli) #541422a6a12e493] - stream: throw TypeError when criteria fulfilled in getIterator (jakecastelli) #538257f68cc0f7f] - test: make snapshot comparison more flexible (Shelley Vohr) #543753df7938832] - test: make sure current run result is pushed and reset (jakecastelli) #543323e25be7b28] - test: use relative paths in test-cli-permission tests (sendoru) #54188f49f1bb3e9] - test: unmark test-sqlite as flaky (Colin Ihrig) #540142f68a74702] - test: fix timeout not being cleared (Isaac-yz-Liu) #54242f5cfa4454e] - test: refactortest-runner-module-mocking(Antoine du Hamel) #54233b85b13b418] - test: use assert.{s,deepS}trictEqual() (Luigi Pinca) #542086bcbfcd7bc] - test: add subtests to test-node-run (sungpaks) #54204dafe97548f] - test: set test-structuredclone-jstransferable non-flaky (Stefan Stojanovic) #54115be61793db5] - test: update wpt test for streams (devstone) #54129670c796449] - test: fix typo in test (Sonny) #541371a15f3f613] - test: add initial pull delay and prototype pollution prevention tests (Sonny) #540615dbff81b71] - test: add coverage for webstorage quota (jakecastelli) #53964141e9fe7cc] - test_runner: use validateStringArray fortimers.enable()(Deokjin Kim) #49534e70711e190] - test_runner: report failures in filtered suites (Colin Ihrig) #543877766c1dc9b] - test_runner: remove parseCommandLine() from test.js (Colin Ihrig) #54353961cbf0be0] - test_runner: refactor hook creation (Colin Ihrig) #5435369c78ca2f5] - test_runner: return setup() from parseCommandLine() (Colin Ihrig) #54353ed1ede8c26] - test_runner: pass global options to createTestTree() (Colin Ihrig) #543531e88045a69] - test_runner: pass harness object as option to root test (Colin Ihrig) #54353e3378f0679] - test_runner: use run() argument names in parseCommandLine() (Colin Ihrig) #54353676bbd5c09] - test_runner: fix delete test file cause dependency file not watched (jakecastelli) #53533fe793a6103] - test_runner: do not expose internal loader (Antoine du Hamel) #541067fad771bbf] - test_runner: fix erroneous diagnostic warning when only: false (Pietro Marchini) #54116dc465736fb] - test_runner: make mock_loader not confuse CJS and ESM resolution (Sung Ye In) #538465a1afb2139] - test_runner: remove outdated comment (Colin Ihrig) #5414620a01fcc39] - test_runner: run after hooks even if test is aborted (Colin Ihrig) #54151df428adb6c] - tools: remove header from c-ares license (Aviv Keller) #54335b659fc0f2b] - tools: add find pyenv path on windows (Marco Ippolito) #54314b93c6d9f38] - tools: make undici updater build wasm from src (Michael Dawson) #541283835131559] - tools: add workflow to ensureREADMElists are in sync with gh teams (Antoine du Hamel) #53901e218b7ca8a] - tools: add strip-types to label system (Marco Ippolito) #541858b35f0e601] - tools: update eslint to 9.8.0 (Node.js GitHub Bot) #54073d83421fbe5] - tty: initialize winSize array with values (Michaël Zasso) #54281a4768374f2] - typings: add util.styleText type definition (Rafael Gonzaga) #54252a4aecd2755] - typings: add missing binding functionwriteFileUtf8()(Jungku Lee) #541100bed600df9] - url: modify pathToFileURL to handle extended UNC path (Early Riser) #54262037672f15d] - url: improve resolveObject with ObjectAssign (Early Riser) #540924d8b53e475] - watch: reload changes in contents of --env-file (Marek Piechut) #54109v22.6.0: 2024-08-06, Version 22.6.0 (Current), @RafaelGSSCompare Source
Experimental TypeScript support via strip types
Node.js introduces the
--experimental-strip-typesflag for initial TypeScript support.This feature strips type annotations from .ts files, allowing them to run
without transforming TypeScript-specific syntax. Current limitations include:
enumsornamespaces.Thanks Marco Ippolito for working on this.
Experimental Network Inspection Support in Node.js
This update introduces the initial support for network inspection in Node.js.
Currently, this is an experimental feature, so you need to enable it using the
--experimental-network-inspectionflag.With this feature enabled, you can inspect network activities occurring within a JavaScript application.
To use network inspection, start your Node.js application with the following command:
Please note that the network inspection capabilities are in active development.
We are actively working on enhancing this feature and will continue to expand its functionality in future updates.
httpandhttpsmodules only.feature request on the Chrome DevTools side is addressed.
Thanks Kohei Ueno for working on this.
Other Notable Changes
15a94e67b1] - lib,src: drop --experimental-network-imports (Rafael Gonzaga) #5382268e444d2d8] - (SEMVER-MINOR) http: add diagnostics channelhttp.client.request.error(Kohei Ueno) #540542d982d3dee] - (SEMVER-MINOR) deps: V8: backport7857eb3(Stephen Belanger) #5399715816bd0dd] - (SEMVER-MINOR) stream: expose DuplexPair API (Austin Wright) #34111893c864542] - (SEMVER-MINOR) test_runner: fix support watch with run(), add globPatterns option (Matteo Collina) #53866048d421ad1] - meta: add jake to collaborators (jakecastelli) #540046ad6e01bf3] - (SEMVER-MINOR) test_runner: refactor snapshots to get file from context (Colin Ihrig) #53853698e44f8e7] - (SEMVER-MINOR) test_runner: add context.filePath (Colin Ihrig) #53853Commits
063f46dc2a] - assert: use isError instead of instanceof in innerOk (Pietro Marchini) #5398010bea42f81] - build: update gcovr to 7.2 and codecov config (Benjamin E. Coe) #540197c417c6cf4] - build: avoid compiling with VS v17.10 (Hüseyin Açacak) #53863ee97c045b4] - build: ensure v8_pointer_compression_sandbox is enabled on 64bit (Shelley Vohr) #53884bfbed0afd5] - build: fix conflict gyp configs (Chengzhong Wu) #536050f1fe63e32] - build: trigger coverage ci when updating codecov (Yagiz Nizipli) #53929ad62b945f0] - build: update codecov coverage build count (Yagiz Nizipli) #539293c40868fd3] - build: disable test-asan workflow (Michaël Zasso) #538442a62d6ca57] - build, tools: drop leading/fromr2dir(Richard Lau) #539519c7b009f47] - build,tools: simplify upload of shasum signatures (Michaël Zasso) #53892057bd44f9f] - child_process: fix incomplete prototype pollution hardening (Liran Tal) #5378166f7c595c7] - cli: document--inspectport0behavior (Aviv Keller) #53782fad3e74b47] - console: fix issues with frozen intrinsics (Vinicius Lourenço) #54070e685ecd7ae] - deps: update corepack to 0.29.3 (Node.js GitHub Bot) #54072e5f7250e6d] - deps: update amaro to 0.0.6 (Node.js GitHub Bot) #541992c1e9082e8] - deps: update amaro to 0.0.5 (Node.js GitHub Bot) #541992d982d3dee] - (SEMVER-MINOR) deps: V8: backport7857eb3(Stephen Belanger) #539971061898462] - deps: update c-ares to v1.32.3 (Node.js GitHub Bot) #54020f4a7ac5e18] - deps: V8: cherry-pick35888fe(Joyee Cheung) #537281176310226] - deps: add gn build files for ncrypto (Cheng) #539407a1d5a4f84] - deps: update c-ares to v1.32.2 (Node.js GitHub Bot) #5386566f6a2aec9] - deps: V8: cherry-pick9812cb4(Michaël Zasso) #539668e66a18ef0] - deps: start working on ncrypto dep (James M Snell) #53803c114082b12] - deps: fix include_dirs of nbytes (Cheng) #53862b7315281be] - doc: move numCPUs require to top of file in cluster CJS example (Alfredo González) #539328e7c30c2a4] - doc: update security-release process to automated one (Rafael Gonzaga) #5387752a4206be2] - doc: fix typo in technical-priorities.md (YoonSoo_Shin) #5409430e18a04a3] - doc: fix typo in diagnostic tooling support tiers document (Taejin Kim) #5405858aebfd31e] - doc: move GeoffreyBooth to TSC regular member (Geoffrey Booth) #54047c1634c7213] - doc: correct typescript stdin support (Marco Ippolito) #5403664812d5c22] - doc: fix typo in recognizing-contributors (Marco Ippolito) #539906b35994b6f] - doc: fix documentation for--run(Aviv Keller) #5397604d203a233] - doc: update boxstarter README (Aviv Keller) #5378586fa46db1c] - doc: add info about prefix-only modules tomodule.builtinModules(Grigory) #53954defdc3c568] - doc: removescroll-behavior: smooth;(Cloyd Lau) #53942e907236dd9] - doc: move --test-coverage-{ex,in}clude to proper location (Colin Ihrig) #539268bf9960b98] - doc: add--experimental-sqlitenote (Aviv Keller) #53907d7615004d8] - doc: updateapi_assetsREADME for new files (Aviv Keller) #5367663cf715aa0] - doc: add MattiasBuelens to collaborators (Mattias Buelens) #538955b8dd78112] - doc: fix release date for 22.5.0 (Antoine du Hamel) #53889dd2c0f349a] - doc: fix casing of GitHub handle for two collaborators (Antoine du Hamel) #53857b47c2308e1] - doc: update release-post nodejs.org script (Rafael Gonzaga) #5376288539527d5] - doc, test: tracing channel hasSubscribers getter (Thomas Hunter II) #5290844a08f75b0] - doc,tools: enforce use ofnode:prefix (Antoine du Hamel) #5395087bab76df2] - doc,tty: add documentation for ReadStream and WriteStream (jakecastelli) #53567dcca9ba560] - esm: refactorget_format(Antoine du Hamel) #538725e03c17aae] - fs: optimizefs.cpSyncjs calls (Yagiz Nizipli) #53614e0054ee0a7] - fs: ensure consistency for mkdtemp in both fs and fs/promises (YieldRay) #537768086337ea9] - fs: remove unnecessary option argument validation (Jonas) #53861b377b93a3f] - fs: correctly pass dirent to excludewithFileTypes(RedYetiDev) #5382368e444d2d8] - (SEMVER-MINOR) http: add diagnostics channelhttp.client.request.error(Kohei Ueno) #54054de1fbc292f] - (SEMVER-MINOR) inspector: add initial support for network inspection (Kohei Ueno) #53593744df0be24] - lib: support dynamic trace events on debugWithTimer (Vinicius Lourenço) #53913546dab29c1] - lib: optimize copyError with ObjectAssign in primordials (HEESEUNG) #53999494df9835a] - lib: improve cluster/primary code (Ehsan Khakifirooz) #5375603f353293b] - lib: improve error message when index not found on cjs (Vinicius Lourenço) #53859d8375d6236] - lib: decorate async stack trace in source maps (Chengzhong Wu) #5386015a94e67b1] - lib,src: drop --experimental-network-imports (Rafael Gonzaga) #53822a6eedc401d] - meta: addsqliteto js subsystems (Alex Yang) #5391121098856de] - meta: move tsc member to emeritus (Michael Dawson) #54029048d421ad1] - meta: add jake to collaborators (jakecastelli) #5400420a8c96c41] - meta: remove license for hljs (Aviv Keller) #539702fd4ac4859] - meta: make more bug-report information required (Aviv Keller) #53718b312ec0b0c] - meta: reword linter messages (Aviv Keller) #53949d2526126a9] - meta: store actions secrets in environment (Aviv Keller) #539301688f00dce] - meta: move anonrig to tsc voting members (Yagiz Nizipli) #53888c20e8418de] - module: fix strip-types interaction with detect-module (Marco Ippolito) #54164ab1f0b415f] - module: fix extensionless typescript in cjs loader (Marco Ippolito) #5406292439fc160] - (SEMVER-MINOR) module: add --experimental-strip-types (Marco Ippolito) #53725f755d31bec] - node-api: add property keys benchmark (Chengzhong Wu) #540127382eefae5] - node-api: rename nogc to basic (Gabriel Schulhof) #538302c4470625b] - process: unify experimental warning messages (Aviv Keller) #5370498a7ad2e0d] - src: expose LookupAndCompile with parameters (Shelley Vohr) #53886dd3c66be0a] - src: simplify AESCipherTraits::AdditionalConfig (Tobias Nießen) #53890ee82f224ff] - src: remove redundant RsaPointer (use RSAPointer) (James M Snell) #540032d77bd2929] - src: fix -Wshadow warning (Shelley Vohr) #53885bd4a9ffe8c] - src: start using ncrypto for CSPRNG calls (James M Snell) #539843fdcf7a47d] - src: returnundefinedif no rows are returned in SQLite (Deokjin Kim) #53981ca6854443d] - src: fix slice of slice of file-backed Blob (Josh Lee) #53972c457f9ed5a] - src: cache invariant code motion (Rafael Gonzaga) #53879fd0da6c2cf] - src: avoid strcmp in ImportJWKAsymmetricKey (Tobias Nießen) #53813fbf74bcf99] - src: switch from ToLocalChecked to ToLocal in node_webstorage (James M Snell) #5395904bb6778e5] - src: moveToNamespacedPathcall of webstorage (Yagiz Nizipli) #538759ffaf763e9] - src: use Maybe<void> in SecureContext (Tobias Nießen) #53883a94c3ae06f] - src: replace ToLocalChecked uses with ToLocal in node-file (James M Snell) #5386955461be05f] - src: refactor webstorage implementation (Yagiz Nizipli) #53876c53cf449a6] - src: fix env-file flag to ignore spaces before quotes (Mohit Malhotra) #53786bac3a485f6] - src: fix potential segmentation fault in SQLite (Tobias Nießen) #53850df5083e5f9] - src,lib: expose getCategoryEnabledBuffer to use on node.http (Vinicius Lourenço) #536028664b9ad60] - src,test: disallow unsafe integer coercion in SQLite (Tobias Nießen) #5385115816bd0dd] - (SEMVER-MINOR) stream: expose DuplexPair API (Austin Wright) #34111718f6bc78c] - test: do not swallow uncaughtException errors in exit code tests (Meghan Denny) #54039c6656c9251] - test: move shared module totest/common(Rich Trott) #54042e471e32d46] - test: skip sea tests with more accurate available disk space estimation (Chengzhong Wu) #5399661971ec929] - test: remove unnecessary console log (KAYYY) #538121344bd2d6f] - test: add comments and rename test for timer robustness (Rich Trott) #54008da3573409c] - test: add test for one arg timers to increase coverage (Carlos Espa) #54007fc67abd97e] - test: mark 'test/parallel/test-sqlite.js' as flaky (Colin Ihrig) #54031aa0ac3b57c] - test: mark test-pipe-file-to-http as flaky (jakecastelli) #5375152bc8ec360] - test: compare paths on Windows without considering case (Early Riser) #539937e8a609579] - test: skip sea tests in large debug builds (Chengzhong Wu) #5391830a94ca0c4] - test: skip --title check on IBM i (Abdirahim Musse) #539525cea7ed706] - test: reduce flakiness oftest-assert-esm-cjs-message-verify(Antoine du Hamel) #5396758cb0dd8a6] - test: usePYTHONexecutable from env inassertSnapshot(Antoine du Hamel) #53938c247582591] - test: deflake test-blob-file-backed (Luigi Pinca) #539203999021653] - test_runner: switched to internal readline interface (Emil Tayeb) #540003fb97a90ee] - test_runner: remove redundant bootstrap boolean (Colin Ihrig) #54013edd80e2bdc] - test_runner: do not throw on mocked clearTimeout() (Aksinya Bykova) #54005893c864542] - (SEMVER-MINOR) test_runner: fix support watch with run(), add globPatterns option (Matteo Collina) #538664887213f2e] - test_runner: added colors to dot reporter (Giovanni) #53450c4848c53e6] - test_runner: cleanup global event listeners after run (Eddie Abbondanzio) #53878876e7b3226] - test_runner: refactor coverage to pass in config options (Colin Ihrig) #53931f45edb4b5e] - test_runner: refactor and simplify internals (Colin Ihrig) #539216ad6e01bf3] - (SEMVER-MINOR) test_runner: refactor snapshots to get file from context (Colin Ihrig) #53853698e44f8e7] - (SEMVER-MINOR) test_runner: add context.filePath (Colin Ihrig) #5385397da7ca11b] - test_runner: consolidate option parsing (Colin Ihrig) #5384943afcbf9dd] - tools: fixSLACK_TITLEin invalid commit workflow (Antoine du Hamel) #53912eed0963391] - typings: apply lint (1ilsang) #54065e8ea49b256] - typings: fix typo on quic onSessionDatagram (1ilsang) #54064v22.5.1: 2024-07-19, Version 22.5.1 (Current), @richardlauCompare Source
Notable Changes
This release fixes a regression introduced in Node.js 22.5.0. The problem is known to display the following symptoms:
FATAL ERROR: v8::Object::GetCreationContextChecked No creation context available#53902npm error Exit handler never called!npm/cli#7657Usage Error: Couldn't find the node_modules state file - running an install might help (findPackageLocation)yarnpkg/berry#6398Commits
e2deeedc6e] - Revert "fs: add v8 fast api to closeSync" (Aviv Keller) #53904v22.5.0: 2024-07-17, Version 22.5.0 (Current), @RafaelGSS prepared by @aduh95Compare Source
Notable Changes
1367c5558e] - (SEMVER-MINOR) http: expose websockets (Natalia Venditto) #53721b31394920d] - (SEMVER-MINOR) lib: addnode:sqlitemodule (Colin Ihrig) #53752aa7df9551d] - module: add__esModuletorequire()'d ESM (Joyee Cheung) #521668743c4d65a] - (SEMVER-MINOR) path: addmatchesGlobmethod (Aviv Keller) #5288177936c3d24] - (SEMVER-MINOR) process: port on-exit-leak-free to core (Vinicius Lourenço) #5323982d88a83f8] - (SEMVER-MINOR) stream: pipeline wait for close before calling the callback (jakecastelli) #534623a0fcbb17a] - test_runner: support glob matching coverage files (Aviv Keller) #5355322ca334090] - (SEMVER-MINOR) worker: addpostMessageToThread(Paolo Insogna) #53682Commits
eb4e370933] - benchmark: add require-esm benchmark (Joyee Cheung) #521664d4a8338db] - benchmark: add cpSync benchmark (Yagiz Nizipli) #536123d60b38afa] - build: fix build warning of c-ares under GN build (Cheng) #53750a45c801048] - build: fix build error in sqlite under GN build (Cheng) #5368640032eb623] - build: add gn files for deps/nbytes (Cheng) #53685082799debb] - build: fix mac build error of c-ares under GN (Cheng) #53687b05394ea6a] - build: add version-specific library path for AIX (Richard Lau) #535856237172eaf] - cli: updatenode.1to reflect Atom's sunset (Aviv Keller) #537345697938cb7] - crypto: avoid std::function (Tobias Nießen) #536833cc01aa314] - crypto: make deriveBits length parameter optional and nullable (Filip Skokan) #53601f82e20fdea] - crypto: avoid taking ownership of OpenSSL objects (Tobias Nießen) #53460ad1e5610ec] - deps: update googletest to4b21f1a(Node.js GitHub Bot) #53842d285d610a0] - deps: update minimatch to 10.0.1 (Node.js GitHub Bot) #5384170f5209c9f] - deps: update corepack to 0.29.2 (Node.js GitHub Bot) #538384930e12a45] - deps: update simdutf to 5.3.0 (Node.js GitHub Bot) #53837d346833364] - deps: update ada to 2.9.0 (Node.js GitHub Bot) #53748ab8abb5367] - deps: upgrade npm to 10.8.2 (npm team) #537991ad664905a] - deps: update nbytes and add update script (Yagiz Nizipli) #53790a66f11e798] - deps: update googletest to34ad51b(Node.js GitHub Bot) #531579bf61d6a0d] - deps: update googletest to305e5a2(Node.js GitHub Bot) #531578542ace488] - deps: V8: cherry-pick9ebca66(Chengzhong Wu) #5375529a734c21d] - deps: V8: cherry-picke061cf9(Joyee Cheung) #53755c7624af44a] - deps: update c-ares to v1.32.1 (Node.js GitHub Bot) #53753bbcec9e129] - deps: update minimatch to 9.0.5 (Node.js GitHub Bot) #5364676032fd980] - deps: update c-ares to v1.32.0 (Node.js GitHub Bot) #5372226386046ad] - doc: move MylesBorins to emeritus (Myles Borins) #53760362875bda0] - doc: add Rafael to the last security release (Rafael Gonzaga) #53769a1a5ad848d] - doc: use mock.callCount() in examples (Sébastien Règne) #53754bb960c5471] - doc: clarify authenticity of plaintexts in update (Tobias Nießen) #537845dd3018eb4] - doc: add option to have support me link (Michael Dawson) #533120f95ad3d7d] - doc: add OpenSSL security level to TLS docs (Afanasii Kurakin) #536472d92ec2831] - doc: updatescroll-padding-topto 4rem (Cloyd Lau) #53662933359a786] - doc: mention v8.setFlagsFromString to pm (Rafael Gonzaga) #53731e17c2618e3] - doc: remove the last <pre> tag (Claudio W) #537417f18a5f47a] - doc: exclude voting and regular TSC from spotlight (Michael Dawson) #53694df3dcd1bd1] - doc: fix releases guide for recent Git versions (Michaël Zasso) #5370950987ea833] - doc: requirenode:processin assert doc examples (Alfredo González) #53702fa58d01497] - doc: add additional explanation to the wildcard section in permissions (jakecastelli) #5366428bf1e48ef] - doc: mark NODE_MODULE_VERSION for Node.js 22.0.0 (Michaël Zasso) #536501cc0b41f00] - doc: include node.module_timer on available categories (Vinicius Lourenço) #53638d224e9eab5] - doc: fix module customization hook examples (Elliot Goodrich) #536372cf60964e6] - doc: fix doc for correct usage with plan & TestContext (Emil Tayeb) #536156df86ae056] - doc: remove some news issues that are no longer (Michael Dawson) #5360842b9408f3e] - doc: add issue for news from ambassadors (Michael Dawson) #536072d1ff91953] - doc: add esm example for os (Leonardo Peixoto) #53604de99d69d75] - doc: clarify usage of coverage reporters (Eliphaz Bouye) #53523519c328dcf] - doc: document addition testing options (Aviv Keller) #53569c6166cdfe4] - doc: clarify that fs.exists() may return false for existing symlink (Tobias Nießen) #535669139ab2848] - doc: note http.closeAllConnections excludes upgraded sockets (Rob Hogan) #5356019b3718ee1] - doc, meta: add PTAL to glossary (Aviv Keller) #5377080c1f5ce8a] - doc, typings: events.once accepts symbol event type (René) #535421a21e0f61e] - esm: improvedefaultResolveperformance (Yagiz Nizipli) #53711262f2cb3b6] - esm: remove unnecessary toNamespacedPath calls (Yagiz Nizipli) #53656e29c9453a9] - esm: move hooks test with others (Geoffrey Booth) #535588368555289] - fs: add v8 fast api to closeSync (Yagiz Nizipli) #53627628a539810] - fs: reduce throwing unnecessary errors on glob (Yagiz Nizipli) #53632076e82ca40] - fs: moveToNamespacedPathdir calls to c++ (Yagiz Nizipli) #53630128e514d81] - fs: improve error performance offs.dir(Yagiz Nizipli) #53667603c2c5c08] - fs: fix typings (Yagiz Nizipli) #536261367c5558e] - (SEMVER-MINOR) http: expose websockets (Natalia Venditto) #537217debb6c36e] - http: remove prototype primordials (Antoine du Hamel) #53698b13aea5698] - http, readline: replace sort with toSorted (Benjamin Gruenbaum) #536231397f5d9f4] - http2: remove prototype primordials (Antoine du Hamel) #53696f57d3cee2c] - lib: make navigator not runtime-lookup process.version/arch/platform (Jordan Harband) #537650a01abbd45] - lib: refactorplatformutility methods (Daniel Bayley) #53817afe7f4f819] - lib: remove path.resolve from permissions.js (Rafael Gonzaga) #53729cbe77b30ca] - lib: moveToNamespacedPathcall to c++ (Yagiz Nizipli) #536540f146aac2c] - lib: make navigator properties lazy (James M Snell) #536490540308bd7] - lib: add toJSON to PerformanceMeasure (theanarkh) #53603b31394920d] - (SEMVER-MINOR) lib,src,test,doc: add node:sqlite module (Colin Ihrig) #537521a7c2dc5ea] - meta: remove redudant logging from dep updaters (Aviv Keller) #53783ac5d7b709d] - meta: change email address of anonrig (Yagiz Nizipli) #53829085ec5533c] - meta: addnode_sqlite.cto PR label config (Aviv Keller) #53797c68d873e99] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #537585ae8ea489d] - meta: use HTML entities in commit-queue comment (Aviv Keller) #53744ecd8fceb68] - meta: move regular TSC member to emeritus (Michael Dawson) #5369305058f9809] - meta: bump codecov/codecov-action from 4.4.1 to 4.5.0 (dependabot[bot]) #53675e272ffa3d6] - meta: bump mozilla-actions/sccache-action from 0.0.4 to 0.0.5 (dependabot[bot]) #53674a39407560c] - meta: bump github/codeql-action from 3.25.7 to 3.25.11 (dependabot[bot]) #53673e4ce92ee31] - meta: bump actions/checkout from 4.1.6 to 4.1.7 (dependabot[bot]) #536724cf98febe7] - meta: bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (dependabot[bot]) #53671c28af95bf5] - meta: bump step-security/harden-runner from 2.8.0 to 2.8.1 (dependabot[bot]) #53670dd2157bc83] - meta: move member from TSC regular to emeriti (Michael Dawson) #53599508abfe178] - meta: warnings bypass deprecation cycle (Benjamin Gruenbaum) #535133c5ec839e3] - meta: prevent constant references to issues in versioning (Aviv Keller) #53564aa7df9551d] - module: add __esModule to require()'d ESM (Joyee Cheung) #521668743c4d65a] - (SEMVER-MINOR) path: addmatchesGlobmethod (Aviv Keller) #5288177936c3d24] - (SEMVER-MINOR) process: port on-exit-leak-free to core (Vinicius Lourenço) #532395e4ca9fbb6] - src: update outdated references to spec sections (Tobias Nießen) #53832c22d9d5167] - src: use Maybe<void> in ManagedEVPPKey (Tobias Nießen) #53811d41ed44f49] - src: moveloadEnvFiletoNamespacedPath call (Yagiz Nizipli) #53658dc99dd391f] - src: fix error handling in ExportJWKAsymmetricKey (Tobias Nießen) #53767ab1e03e8cd] - src: use Maybe<void> in node::crypto::error (Tobias Nießen) #537669bde9b254d] - src: fix implementation ofPropertySetterCallback(Igor Sheludko) #53576021e2cf40f] - src: remove unused ContextifyContext::WeakCallback (Chengzhong Wu) #5351787121a17c4] - src: fix typo in node.h (Daeyeon Jeong) #5375994c7054c8d] - src: document the Node.js context embedder data (Joyee Cheung) #53611c181940e83] - src: zero-initialize data that are copied into the snapshot (Joyee Cheung) #535638cda2db64c] - Revert "src: make sure that memcpy-ed structs in snapshot have no padding" (Joyee Cheung) #5356381767f6089] - src: fix Worker termination when '--inspect-brk' is passed (Daeyeon Jeong) #53724a9db553935] - src: refactor embedded entrypoint loading (Joyee Cheung) #535733ab8aba478] - src: do not get string_view from temp string (Cheng) #53688664bf6c28f] - src: replacekPathSeparatorwith std::filesystem (Yagiz Nizipli) #53063cc1f49751a] - src: moveFromNamespacedPathto path.cc (Yagiz Nizipli) #53540e43a4e07ec] - src: usestarts_within node_dotenv.cc (Yagiz Nizipli) #5353919488fd4ce] - src,test: further cleanup references to osx (Daniel Bayley) #538204bf62f6cbd] - stream: improve inspector ergonomics (Benjamin Gruenbaum) #5380082d88a83f8] - (SEMVER-MINOR) stream: pipeline wait for close before calling the callback (jakecastelli) #5346253a7dd7790] - test: update wpt test (Mert Can Altin) #53814bc480902ab] - test: update WPT WebIDL interfaces (Filip Skokan) #53720d13153d90f] - test: un-set inspector-async-hook-setup-at-inspect-brk as flaky (Abdirahim Musse) #53692ac9c2e6bf2] - test: use python3 instead of python in pummel test (Mathis Wiehl) #53057bac28678e6] - test: do not assume cwd in snapshot tests (Antoine du Hamel) #5314641e106c0c6] - test: useSet.difference()(Richard Lau) #535978aab680f66] - test: fix OpenSSL version checks (Richard Lau) #535036aa4f0f266] - test: refactor, add assertion to http-request-end (jakecastelli) #53411fbc5cbb617] - test_runner: remove plan option from run() (Colin Ihrig) #53834c590828ad8] - test_runner: fix escaping in snapshot tests (Julian Kniephoff) #538333a0fcbb17a] - test_runner: support glob matching coverage files (Aviv Keller) #53553e6a1eeb73d] - test_runner: support module detection in module mocks (Geoffrey Booth) #536424d777de7d4] - tls: add setKeyCert() to tls.Socket (Brian White) #53636ab9adfc42a] - tls: remove prototype primordials (Antoine du Hamel) #5369903d378ffb9] - tools: update lint-md-dependencies (Node.js GitHub Bot) #5384006377b1b11] - tools: update eslint to 9.7.0 (Node.js GitHub Bot) #53839d6629a2d84] - tools: use v8_features.json to populate config.gypi (Cheng) #53749d3653fe8ac] - tools: update eslint to 9.6.0 (Node.js GitHub Bot) #536451e930e93d4] - tools: update lint-md-dependencies to unified@11.0.5 (Node.js GitHub Bot) #53555317a13b30f] - tools: replace reference to NodeMainInstance with SnapshotBuilder (codediverdev) #535440e25faea0a] - typings: addfs_dirtypes (Yagiz Nizipli) #536317637f291be] - url: fix typo (KAYYY) #538272c6548afd1] - url: reduce unnecessary string copies (Yagiz Nizipli) #536280f2b57d1bc] - url: make URL.parse enumerable (Filip Skokan) #537201300169f80] - url: add missing documentation forURL.parse()(Yagiz Nizipli) #53733c55e72ed8b] - util: fix crashing when emitting new Buffer() deprecation warning #53075 (Aras Abbasi) #530895aa216320e] - v8: moveToNamespacedPathto c++ (Yagiz Nizipli) #536559fd976b09d] - vm,src: add property query interceptors (Chengzhong Wu) #5351722ca334090] - (SEMVER-MINOR) worker: add postMessageToThread (Paolo Insogna) #536825aecbefbd5] - worker: allow copied NODE_OPTIONS in the env setting (Joyee Cheung) #53596v22.4.1: 2024-07-08, Version 22.4.1 (Current), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Commits
110902ff5e] - lib,esm: handle bypass network-import via data: (RafaelGSS) nodejs-private/node-private#5220a0de3d491] - lib,permission: support fs.lstat (RafaelGSS)93574335ff] - lib,permission: disable fchmod/fchown when pm enabled (RafaelGSS) nodejs-private/node-private#58409899e6302] - src: handle permissive extension on cmd check (RafaelGSS) nodejs-private/node-private#5965d9c811634] - src,permission: fix UNC path resolution (RafaelGSS) nodejs-private/node-private#581v22.4.0: 2024-07-02, Version 22.4.0 (Current), @targosCompare Source
Notable Changes
Experimental Web Storage API
9e30724b53] - (SEMVER-MINOR) deps,lib,src: add experimental web storage (Colin Ihrig) #52435API stability updates
201266706b] - doc: movenode --runstability to rc (Yagiz Nizipli) #5343316c0884d48] - doc: mark WebSocket as stable (Matthew Aitken) #53352cf375e73c1] - doc: mark --heap-prof and related flags stable (Joyee Cheung) #533430160745057] - doc: mark --cpu-prof and related flags stable (Joyee Cheung) #53343Other Notable Changes
df4762722c] - doc: doc-only deprecate OpenSSL engine-based APIs (Richard Lau) #53329ad5282e196] - inspector: fix disable async hooks onDebugger.setAsyncCallStackDepth(Joyee Cheung) #53473e95af740fc] - (SEMVER-MINOR) lib: add diagnostics_channel events to module loading (RafaelGSS) #4434050733a1abe] - (SEMVER-MINOR) util: support--no-for argument with boolean type for parseArgs (Zhenwei Jin) #53107Commits
9f32002397] - assert,util: correct comparison when both contain same reference (Daniel Lemire) #53431dfdc062111] - buffer: make indexOf(byte) faster (Tobias Nießen) #534551de437527e] - build: configure with shared sqlite3 (Chengzhong Wu) #53519c7d44ba1f3] - build: find version of Clang installed on Windows (Stefan Stojanovic) #5322836aad8b204] - build: fix spacing before NINJA_ARGS (jakecastelli) #5318182092cdaa3] - crypto: improve GetECGroupBits signature (Tobias Nießen) #53364073c231607] - deps: update c-ares to v1.31.0 (Node.js GitHub Bot) #53554977beab729] - (SEMVER-MINOR) deps: sqlite: fix Windows compilation (Colin Ihrig) #52435e69b8d202c] - deps: update undici to 6.19.2 (Node.js GitHub Bot) #53468c4a7e051c8] - deps: update undici to 6.19.1 (Node.js GitHub Bot) #53468fa34f8fcf0] - deps: update undici to 6.19.1 (Node.js GitHub Bot) #534680b40bfad43] - deps: update undici to 6.19.0 (Node.js GitHub Bot) #534681877f22a79] - deps: update simdjson to 3.9.4 (Node.js GitHub Bot) #534671b84964b8d] - deps: patch V8 to 12.4.254.21 (Node.js GitHub Bot) #534706acadeb59b] - deps: update acorn-walk to 8.3.3 (Node.js GitHub Bot) #534667a7f438841] - deps: update zlib to 1.3.0.1-motley-209717d (Node.js GitHub Bot) #53156bf891bf64c] - deps: update c-ares to v1.30.0 (Node.js GitHub Bot) #53416bd68888261] - deps: V8: cherry-picka3cc852(kxxt) #534122defaaf771] - deps: V8: cherry-pick6ea594f(kxxt) #534129e30724b53] - (SEMVER-MINOR) deps,lib,src: add experimental web storage (Colin Ihrig) #52435608cc05de1] - doc: recommend not using libuv node-api function (Michael Dawson) #5352130858eca59] - doc: add additional guidance for PRs to deps (Michael Dawson) #53499a5852cc710] - doc: only apply content-visibility on all.html (Filip Skokan) #53510befabe5c58] - doc: update the description of the return type for options.filter (Zhenwei Jin) #527425ed1a036ba] - doc: remove first timer badge (Aviv Keller) #53338201266706b] - doc: movenode --runstability to rc (Yagiz Nizipli) #5343346a7681cc4] - doc: add Buffer.from(string) to functions that use buffer pool (Christian Bates-White) #52801ec5364f6de] - doc: add initial text for ambassadors program (Michael Dawson) #52857fa113b8fc7] - doc: fix typo (EhsanKhaki) #53397d9182d0086] - doc: define more cases for stream event emissions (Aviv Keller) #53317923d24b6f2] - doc: remove mentions of policy model from security info (Aviv Keller) #5324948f78cd31b] - doc: fix mistakes in the moduleloadhook api (István Donkó) #5334916c0884d48] - doc: mark WebSocket as stable (Matthew Aitken) #53352df4762722c] - doc: doc-only deprecate OpenSSL engine-based APIs (Richard Lau) #53329cf375e73c1] - doc: mark --heap-prof and related flags stable (Joyee Cheung) #533430160745057] - doc: mark --cpu-prof and related flags stable (Joyee Cheung) #533436e12d9f049] - doc: remove IRC from man page (Tobias Nießen) #5334424c7a9415b] - doc, http: addrejectNonStandardBodyWritesoption, clear its behaviour (jakecastelli) #53396ec38f3dc6a] - doc, meta: organize contributing to Node-API guide (Aviv Keller) #53243cf5a973c42] - doc, meta: use markdown rather than HTML in CONTRIBUTING.md (Aviv Keller) #53235105b006fd2] - fs: moveToNamespacedPathto c++ (Yagiz Nizipli) #52135568377f7f0] - fs: do not crash if the watched file is removed while setting up watch (Matteo Collina) #53452fad179307c] - fs: add fast api forInternalModuleStat(Yagiz Nizipli) #5134441100b65f6] - http2: reject failed http2.connect when used with promisify (ehsankhfr) #53475ad5282e196] - inspector: fix disable async hooks on Debugger.setAsyncCallStackDepth (Joyee Cheung) #53473b5fc227344] - lib: fix typo in comment (codediverdev) #53543e95af740fc] - (SEMVER-MINOR) lib: add diagnostics_channel events to module loading (RafaelGSS) #44340123910f1de] - lib: remove the unused code (theanarkh) #53463452011b719] - lib: speed up MessageEvent creation internally (Matthew Aitken) #52951710cf7758c] - lib: reduce amount of caught URL errors (Yagiz Nizipli) #5265845b59e58d1] - lib: fix naming convention ofSymbol(Deokjin Kim) #53387515dd24ee7] - lib: fix timer leak (theanarkh) #5333777166137be] - meta: use correct source for workflow in PR (Aviv Keller) #53490d1c10fee53] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #53480a5026386bf] - meta: fix typo in dependency updates (Aviv Keller) #534710b9191da99] - meta: bump step-security/harden-runner from 2.7.1 to 2.8.0 (dependabot[bot]) #5324549cfb9d001] - src: resetprocess.versionsduring pre-execution (Richard Lau) #5344415df4edd22] - src: useargs.This()instead ofHolder(Michaël Zasso) #53474e16a04e852] - src: fix dynamically linked OpenSSL version (Richard Lau) #534565961253824] - src: removebase64fromprocess.versions(Richard Lau) #5344211dd15c0b5] - src: removeSetEncodingfrom StringEncoder (Yagiz Nizipli) #534410c7e69acd2] - src: simplifysize() == 0checks (Yagiz Nizipli) #53440f077afafda] - src: add utilities to help debugging reproducibility of snapshots (Joyee Cheung) #50983004b9ea4c4] - src: make sure that memcpy-ed structs in snapshot have no padding (Joyee Cheung) #50983bfc5236423] - src: return non-empty data in context data serializer (Joyee Cheung) #50983955454ba4d] - src: fix typo in env.cc (EhsanKhaki) #534187d8787768c] - src: avoid strcmp in favor of operator== (Tobias Nießen) #53439599e7c3d8e] - src: remove ArrayBufferAllocator::Reallocate override (Shu-yu Guo) #52910f9075ff38e] - src: print v8::OOMDetails::detail when it's available (Joyee Cheung) #533604704270443] - src: fix IsIPAddress for IPv6 (Hüseyin Açacak) #5340063f62d76de] - src: fix permission inspector crash (theanarkh) #5338970bbc02dac] - src, deps: add nbytes library (James M Snell) #535078b877099d0] - stream: update outdated highwatermark doc (Jay Kim) #53494eded1e9768] - stream: support dispose in writable (Benjamin Gruenbaum) #48547b3372a8b0e] - stream: callback should be called when pendingcb is 0 (jakecastelli) #53438f4efb7f625] - stream: make sure _destroy is called (jakecastelli) #532137dde37591c] - stream: prevent stream unexpected pause when highWaterMark set to 0 (jakecastelli) #532616e66d9763f] - test: marktest-benchmark-cryptoas flaky (Antoine du Hamel) #529551eebcbf9bf] - test: skip reproducible snapshot test on 32-bit (Michaël Zasso) #5359291b2850303] - test: extend env fortest-node-output-errors(Richard Lau) #53535bcad560726] - test: updatecompressionweb-platform tests (Yagiz Nizipli) #53478b8f436c755] - test: update encoding web-platform tests (Yagiz Nizipli) #53477d2c169a4f6] - test: updateurlweb-platform tests (Yagiz Nizipli) #53472513e6aa4c7] - test: check against run-time OpenSSL version (Richard Lau) #53456602b9d63c4] - test: update tests for OpenSSL 3.0.14 (Richard Lau) #533734a3525bb08] - test: fix test-http-server-keepalive-req-gc (Etienne Pierre-doray) #532927349edb28b] - test: update TLS tests for OpenSSL 3.2 (Richard Lau) #53384a11a05763d] - tls: check result of SSL_CTX_set_*_proto_version (Tobias Nießen) #534594b47f89eb2] - tls: avoid taking ownership of OpenSSL objects (Tobias Nießen) #53436ac8adeb99f] - tls: use SSL_get_peer_tmp_key (Tobias Nießen) #53366d5c380bb09] - tools: lock versions of irrelevant DB deps (Michaël Zasso) #5354671321bb249] - tools: fix skip detection of test runner output (Richard Lau) #53545ca198f4125] - tools: update eslint to 9.5.0 (Node.js GitHub Bot) #5351530fdd482a1] - tools: move ESLint to tools/eslint (Michaël Zasso) #53413fe85e05ba9] - tools: fix c-ares update script (Marco Ippolito) #534148eb7bdf81b] - tools: update lint-md-dependencies (Node.js GitHub Bot) #531589ece63d415] - tools: do not run Corepack code before it's reviewed (Antoine du Hamel) #53405ab2021492b] - tools: move ESLint tools to tools/eslint (Michaël Zasso) #5339378a9037a6d] - tools: use Ubuntu 24.04 and Clang on GitHub actions (Michaël Zasso) #53212855eb25dad] - tools: add stream label on PR when related files being changed in lib (jakecastelli) #5326950733a1abe] - (SEMVER-MINOR) util: support--no-for argument with boolean type for parseArgs (Zhenwei Jin) #53107v22.3.0: 2024-06-11, Version 22.3.0 (Current), @RafaelGSSCompare Source
Notable Changes
5a41bcf9ca] - (SEMVER-MINOR) src: traverse parent folders while running--run(Yagiz Nizipli) #531541d5934524b] - (SEMVER-MINOR) buffer: add .bytes() method to Blob (Matthew Aitken) #5322175e5612fae] - (SEMVER-MINOR) src,permission: --allow-wasi & prevent WASI exec (Rafael Gonzaga) #53124b5c30e2f5e] - (SEMVER-MINOR) module: print amount of load time of a cjs module (Vinicius Lourenço) #522138c6dffc269] - (SEMVER-MINOR) test_runner: add snapshot testing (Colin Ihrig) #53169048478d351] - (SEMVER-MINOR) doc: add context.assert docs (Colin Ihrig) #53169f6d2af8ee7] - (SEMVER-MINOR) test_runner: add context.fullName (Colin Ihrig) #53169a0766bdf0e] - (SEMVER-MINOR) net: add new net.server.listen tracing channel (Paolo Insogna) #53136374743cd4e] - (SEMVER-MINOR) process: add process.getBuiltinModule(id) (Joyee Cheung) #527621eb55f3550] - (SEMVER-MINOR) doc: improve explanation about built-in modules (Joyee Cheung) #527626165894774] - fs: mark recursive cp methods as stable (Théo LUDWIG) #53127db5dd0c6df] - doc: add StefanStojanovic to collaborators (StefanStojanovic) #53118cfcde78513] - (SEMVER-MINOR) cli: addNODE_RUN_PACKAGE_JSON_PATHenv (Yagiz Nizipli) #530587a67ecf161] - (SEMVER-MINOR) test_runner: support module mocking (Colin Ihrig) #52848ee56aecced] - (SEMVER-MINOR) lib: add EventSource Client (Aras Abbasi) #515756413769bc7] - (SEMVER-MINOR) lib: replace MessageEvent with undici's (Matthew Aitken) #52370c70b2f7a76] - (SEMVER-MINOR) cli: addNODE_RUN_SCRIPT_NAMEenv tonode --run(Yagiz Nizipli) #53032badec0c38b] - doc: add Marco Ippolito to TSC (Rafael Gonzaga) #53008Commits
feb0ba2860] - benchmark: fix napi/ref addon (Michaël Zasso) #53233bb844de4e1] - benchmark: fix api restriction for the permission category (Ryan Tsien) #515281d5934524b] - (SEMVER-MINOR) buffer: add .bytes() method to Blob (Matthew Aitken) #53221d87f9af5aa] - buffer: make compare/equals faster (Tobias Nießen) #52993ec83431d71] - build: generate binlog in out directories (Chengzhong Wu) #533250976439417] - build: fix --v8-lite-mode build (Daeyeon Jeong) #52725350c733ae6] - build: support python 3.13 (Chengzhong Wu) #5319074cefa55a2] - build: update ruff to v0.4.5 (Yagiz Nizipli) #5318033242ff042] - build: add--skip-teststotest-ci-jstarget (Antoine du Hamel) #53105edcadf7f8a] - build: fix building embedtest in GN build (Cheng) #53145d711942fce] - build: use broader detection for 'help' (Aviv Keller) #53045ca655b61a7] - build: fix -j propagation to ninja (Tobias Nießen) #530885fba67ff9f] - build: exit on unsupported host OS for Android (Mohammed Keyvanzadeh) #52882b7d7e9a084] - build: fix--enable-d8builds (Richard Lau) #5310614547c5d32] - build: fix ./configure --help format error (Zhenwei Jin) #53066f9490806d3] - build: set "clang" in config.gypi in GN build (Cheng) #53004638b510ce7] - cli: add--expose-gcflag available toNODE_OPTIONS(Juan José) #53078cfcde78513] - (SEMVER-MINOR) cli: addNODE_RUN_PACKAGE_JSON_PATHenv (Yagiz Nizipli) #53058c70b2f7a76] - (SEMVER-MINOR) cli: addNODE_RUN_SCRIPT_NAMEenv tonode --run(Yagiz Nizipli) #5303234f20983fd] - crypto: fix propagation of "memory limit exceeded" (Tobias Nießen) #53300fef067f4f4] - deps: update nghttp2 to 1.62.1 (Node.js GitHub Bot) #52966fc949928ac] - deps: update nghttp2 to 1.62.0 (Node.js GitHub Bot) #529664a17dda8dc] - deps: update undici to 6.18.2 (Node.js GitHub Bot) #53255e45cc2a551] - deps: update ada to 2.8.0 (Node.js GitHub Bot) #5325477907a2619] - deps: update corepack to 0.28.2 (Node.js GitHub Bot) #53253b688050778] - deps: update simdjson to 3.9.3 (Node.js GitHub Bot) #532526303f19cbe] - deps: patch V8 to 12.4.254.20 (Node.js GitHub Bot) #53159257004c68f] - deps: update c-ares to 1.29.0 (Node.js GitHub Bot) #531550b375a3e36] - deps: upgrade npm to 10.8.1 (npm team) #53207728c861b1c] - deps: fix FP16 bitcasts.h (Stefan Stojanovic) #5313452a78737b1] - deps: patch V8 to 12.4.254.19 (Node.js GitHub Bot) #530944d27b32e58] - deps: update undici to 6.18.1 (Node.js GitHub Bot) #53073b94199240b] - deps: update undici to 6.18.0 (Node.js GitHub Bot) #53073793af1b3e7] - deps: update undici to 6.17.0 (Node.js GitHub Bot) #53034fe00becc03] - deps: update undici to 6.16.1 (Node.js GitHub Bot) #5294896f72ae54f] - deps: update undici to 6.15.0 (Matthew Aitken) #52763af60fbb12b] - deps: update googletest to33af80a(Node.js GitHub Bot) #530537b929df489] - deps: patch V8 to 12.4.254.18 (Node.js GitHub Bot) #53054626037c0fc] - deps: update zlib to 1.3.0.1-motley-4f653ff (Node.js GitHub Bot) #530526d8589e558] - deps: patch V8 to 12.4.254.17 (Node.js GitHub Bot) #52980fd91eaab34] - deps: upgrade npm to 10.8.0 (npm team) #53014133cae0732] - doc: fix broken link instatic-analysis.md(Richard Lau) #533457bc5f964fd] - doc: indicate requirement on VS 17.6 or newer (Chengzhong Wu) #533018c71522ced] - doc: remove cases for keys not containing "*" in PATTERN_KEY_COMPARE (Maarten Zuidhoorn) #53215718a3ab1ab] - doc: add err param to fs.cp callback (Feng Yu) #53234d89bde26ff] - doc: adderrparam to fs.copyFile callback (Feng Yu) #5323491971ee344] - doc: reserve 128 for Electron 32 (Keeley Hammond) #53203812f0e9e14] - doc: add note to ninjia build for macOS using -jn flag (jakecastelli) #53187048478d351] - (SEMVER-MINOR) doc: add context.assert docs (Colin Ihrig) #53169c391923445] - doc: include ESM import for HTTP (Aviv Keller) #531651eb55f3550] - (SEMVER-MINOR) doc: improve explanation about built-in modules (Joyee Cheung) #5276267a766f7d4] - doc: fix minor grammar and style issues in SECURITY.md (Rich Trott) #53168afbfe8922a] - doc: mention pm is not enforced when using fd (Rafael Gonzaga) #531251702d2632e] - doc: fix format inesm.md(Pop Moore) #53170070577e7d7] - doc: fix wrong variable name in example oftimers.tick()(Deokjin Kim) #531477147c1df1f] - doc: fix wrong function name in example ofcontext.plan()(Deokjin Kim) #53140cf47384148] - doc: add note for windows users and symlinks (Aviv Keller) #53117088dff1074] - doc: move all TLS-PSK documentation to its section (Alba Mendez) #35717db5dd0c6df] - doc: add StefanStojanovic to collaborators (StefanStojanovic) #531180f0bc98ad7] - doc: improve ninja build for --built-in-modules-path (jakecastelli) #530074c65c52d30] - doc: avoid hiding by navigation bar in anchor jumping (Cloyd Lau) #4513163fcbcfd62] - doc: remove unavailable youtube link in pull requests (Deokjin Kim) #5298277fd504636] - doc: add missing supported timer values intimers.enable()(Deokjin Kim) #529696708536b03] - fs: fix cp dir/non-dir mismatch error messages (Mathis Wiehl) #531506165894774] - fs: mark recursive cp methods as stable (Théo LUDWIG) #531277940db7be1] - fs: remove basename in favor of std::filesystem (Yagiz Nizipli) #53062505e9a425b] - lib: fix misleading argument of validateUint32 (Tobias Nießen) #5330798ae1ebdd6] - lib: fix the name of the fetch global function (Gabriel Bota) #53227fe007cd1b4] - lib: allow CJS source map cache to be reclaimed (Chengzhong Wu) #51711040be4a7b4] - lib: do not call callback if socket is closed (theanarkh) #52829ee56aecced] - (SEMVER-MINOR) lib: add EventSource Client (Aras Abbasi) #515756413769bc7] - (SEMVER-MINOR) lib: replace MessageEvent with undici's (Matthew Aitken) #52370879679e5a3] - lib,doc: replace references to import assertions (Michaël Zasso) #52998062a0c6f67] - meta: bump ossf/scorecard-action from 2.3.1 to 2.3.3 (dependabot[bot]) #53248e59b744b30] - meta: bump actions/checkout from 4.1.4 to 4.1.6 (dependabot[bot]) #5324796924f48a0] - meta: bump github/codeql-action from 3.25.3 to 3.25.7 (dependabot[bot]) #53246b7f5662dee] - meta: bump codecov/codecov-action from 4.3.1 to 4.4.1 (dependabot[bot]) #53244e079967eb4] - meta: removeinitializeCommandfrom devcontainer (Aviv Keller) #531373afeced572] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #530654b9cdea8a6] - Revert "module: have a single hooks thread for all workers" (Matteo Collina) #53183b5c30e2f5e] - (SEMVER-MINOR) module: print amount of load time of a cjs module (Vinicius Lourenço) #522134cdb05a7a2] - module: do not set CJS variables for Worker eval (Antoine du Hamel) #53050a0766bdf0e] - (SEMVER-MINOR) net: add new net.server.listen tracing channel (Paolo Insogna) #53136374743cd4e] - (SEMVER-MINOR) process: add process.getBuiltinModule(id) (Joyee Cheung) #52762e66eb376a0] - repl: fix await object patterns without values (Luke Haas) #53331cb1329a8cf] - src: use v8::(Des|S)erializeInternalFieldsCallback (Joyee Cheung) #532171886fe99af] - src: use __FUNCSIG__ on Windows in backtrace (Joyee Cheung) #531353bfce6c816] - src: use new V8 API to define stream accessor (Igor Sheludko) #5308411f790d911] - src: do not use deprecated V8 API (ishell) #530846b1731cbcc] - src: convert all endian checks to constexpr (Tobias Nießen) #529747aa9519ad4] - src: fix external module env and kDisableNodeOptionsEnv (Rafael Gonzaga) #52905838fe59787] - src: fix execArgv in worker (theanarkh) #530294a2c6ff05d] - src: reduce unnecessaryGetCwdcalls (Yagiz Nizipli) #53064ec44965b49] - src: simplify node modules traverse path (Yagiz Nizipli) #53061190129b48e] - src: remove unusedbase64_table_url(Yagiz Nizipli) #53040d750a3c5c4] - src: remove calls to recently deprecated V8 APIs (Adam Klein) #52996f1890abb18] - src: replace deprecated GetImportAssertions V8 API (Michaël Zasso) #529974347bd2acb] - src: improve node::Dotenv declarations (Tobias Nießen) #52973e26166f30b] - src,permission: handle process.chdir on pm (Rafael Gonzaga) #5317575e5612fae] - (SEMVER-MINOR) src,permission: --allow-wasi & prevent WASI exec (Rafael Gonzaga) #531247c66b27407] - stream: micro-optimize writable condition (Orgad Shaneh) #53189a656cf6bc8] - stream: fix memory usage regression in writable (Orgad Shaneh) #531880e85a84fdc] - test: fix test when compiled without engine support (Richard Lau) #53232cebbd83e47] - test: update TLS trace tests for OpenSSL >= 3.2 (Richard Lau) #5322945c1eb19f1] - Revert "test: skip v8-updates/test-linux-perf-logger" (Luke Albao) #52869c1138db3c1] - test: unskip v8-updates/test-linux-perf-logger (Luke Albao) #5286965b64cf0f1] - test: fix Windows native test suites (Stefan Stojanovic) #531739a47792cd1] - test: skiptest-setproctitlewhenpsis not available (Antoine du Hamel) #53104a371dea699] - test: increase allocation so it fails for the test (Adam Majer) #530993ce7a9a1b5] - test: remove timers from test-tls-socket-close (Luigi Pinca) #53019494fa542af] - test: replace.substrwith.slice(Antoine du Hamel) #530703f7d55b7db] - test: add AbortController to knownGlobals (Luigi Pinca) #53020c61f909ab6] - test,doc: enable running embedtest for Windows (Vladimir Morozov) #526462d1ecbf827] - test_runner: calculate executed lines using source map (Moshe Atlow) #53315d4f5f80f6c] - test_runner: handle file rename and deletion under watch mode (jakecastelli) #5311407c601e32f] - test_runner: refactor to use min/max ofvalidateInteger(Deokjin Kim) #531488c6dffc269] - (SEMVER-MINOR) test_runner: add snapshot testing (Colin Ihrig) #53169f6d2af8ee7] - (SEMVER-MINOR) test_runner: add context.fullName (Colin Ihrig) #531697a67ecf161] - (SEMVER-MINOR) test_runner: support module mocking (Colin Ihrig) #528483ff174f2bf] - test_runner: fix t.assert methods (Colin Ihrig) #53049e2211a07c2] - test_runner: avoid error when coverage line not found (Moshe Atlow) #53000c249289121] - test_runner,doc: align documentation with actual stdout/stderr behavior (Moshe Atlow) #531315110b19a07] - tls: fix negative sessionTimeout handling (Tobias Nießen) #530020ecb770331] - tools: remove no-goma arg from make-v8 script (Michaël Zasso) #53336e7f3a3c296] - tools: use sccache Github action (Moshe Atlow) #5331698cc094bc5] - tools: update eslint to 9.4.0 (Node.js GitHub Bot) #532986409b1fe65] - tools: update gyp-next to 0.18.1 (Node.js GitHub Bot) #5325186e80dcb9b] - tools: move webcrypto into no-restricted-properties (Zihong Qu) #530236022346f0e] - tools: update error message for Type Error (Aviv Keller) #53047c1b3e0ed6f] - Revert "tools: add --certify-safe to nci-ci" (Antoine du Hamel) #530989f764a873c] - tools: update ESLint to v9 and use flat config (Michaël Zasso) #527802859f4c027] - watch: fix variable naming (jakecastelli) #53101v22.2.0: 2024-05-15, Version 22.2.0 (Current), @targosCompare Source
Notable Changes
fb85d38e80] - (SEMVER-MINOR) cli: allow running wasm in limited vmem with --disable-wasm-trap-handler (Joyee Cheung) #5276623a0d3339f] - doc: add pimterry to collaborators (Tim Perry) #528747d7a762156] - (SEMVER-MINOR) fs: allow 'withFileTypes' to be used with globs (Aviv Keller) #528378748dd6477] - (SEMVER-MINOR) inspector: introduce the--inspect-waitflag (Kohei Ueno) #527349a7ae9b6c4] - lib,src: remove --experimental-policy (Rafael Gonzaga) #525831f7c2a93fc] - (SEMVER-MINOR) perf_hooks: adddeliveryTypeandresponseStatusfields (Matthew Aitken) #515892f59529dc5] - (SEMVER-MINOR) test_runner: support test plans (Colin Ihrig) #528606b4dac3eb5] - (SEMVER-MINOR) zlib: expose zlib.crc32() (Joyee Cheung) #52692Commits
0f5716c364] - assert: add deep equal check for more Error type (Zhenwei Jin) #518052c7d7caa8a] - benchmark: filter non-present deps fromstart-cli-version(Adam Majer) #517465db4c54bd6] - bootstrap: print--helpmessage usingconsole.log(Jacob Hummer) #5146367fcb6b85e] - buffer: even faster atob (Daniel Lemire) #52443a5d63f9052] - buffer: use size_t instead of uint32_t to avoid segmentation fault (Xavier Stouder) #48033f1bc994826] - buffer: remove lines setting indexes to integer value (Zhenwei Jin) #52588a97ff753ab] - build: add option to enable clang-cl on Windows (Michaël Zasso) #52870f96466a92c] - build: enable building with shared uvwasi lib (Pooja D P) #43987b463385aa8] - build: remove deprecated calls for argument groups (Mohammed Keyvanzadeh) #52913daeb7dbb3e] - build: sync V8 warning cflags with BUILD.gn (Michaël Zasso) #52873eed967430d] - build: harmonize Clang checks (Michaël Zasso) #52873e4b187433d] - build: compile with C++20 support (Michaël Zasso) #52838aea6ca25ba] - build: drop base64 dep in GN build (Cheng) #528567f866a8225] - build: make simdjson a public dep in GN build (Cheng) #52755e1bd53c098] - build: defineNOMINMAXin common.gypi (Chengzhong Wu) #5279418c530f8f7] - build, tools: copy release assets to staging R2 bucket once built (flakey5) #51394fb85d38e80] - (SEMVER-MINOR) cli: allow running wasm in limited vmem with --disable-wasm-trapConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.