chore(deps): update node docker tag to v22.13.1 #72
Loading…
x
Reference in New Issue
Block a user
No description provided.
Delete Branch "renovate/node-22.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
22.11.0-slim->22.13.1-slim22.11.0-slim->22.13.1-slimRelease Notes
nodejs/node (node)
v22.13.1: 2025-01-21, Version 22.13.1 'Jod' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Dependency update:
Commits
520da342e0] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#66299f217369f] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555984f735e35] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#6502446870618] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#651v22.13.0: 2025-01-07, Version 22.13.0 'Jod' (LTS), @ruyadornoCompare Source
Notable Changes
Stabilize Permission Model
Upgrades the Permission Model status from Active Development to Stable.
Contributed by Rafael Gonzaga #56201
Graduate WebCryptoAPI
Ed25519and X25519 algorithms as stableFollowing the merge of Curve25519 into the Web Cryptography API Editor's Draft the
Ed25519andX25519algorithm identifiers are now stable and will no longer emit an ExperimentalWarning upon use.Contributed by (Filip Skokan) #56142
Other Notable Changes
05d6227a88] - (SEMVER-MINOR) assert: add partialDeepStrictEqual (Giovanni Bucci) #54630a933103499] - (SEMVER-MINOR) cli: implement --trace-env and --trace-env-[js|native]-stack (Joyee Cheung) #55604ba9d5397de] - (SEMVER-MINOR) dgram: support blocklist in udp (theanarkh) #56087f6d0c01303] - doc: stabilize util.styleText (Rafael Gonzaga) #5626534c68827af] - doc: move typescript support to active development (Marco Ippolito) #55536dd14b80350] - doc: add LJHarb to collaborators (Jordan Harband) #561325263086169] - (SEMVER-MINOR) doc: add report version and history section (Chengzhong Wu) #561308cb3c2018d] - (SEMVER-MINOR) doc: sort --report-exclude alphabetically (Rafael Gonzaga) #5578855239a48b6] - (SEMVER-MINOR) doc,lib,src,test: unflag sqlite module (Colin Ihrig) #558907cbe3de1d8] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #561946575b76042] - (SEMVER-MINOR) module: add module.stripTypeScriptTypes (Marco Ippolito) #55282bacfe6d5c9] - (SEMVER-MINOR) net: support blocklist in net.connect (theanarkh) #56075b47888d390] - (SEMVER-MINOR) net: support blocklist for net.Server (theanarkh) #56079566f0a1d25] - (SEMVER-MINOR) net: add SocketAddress.parse (James M Snell) #56076ed7eab1421] - (SEMVER-MINOR) net: add net.BlockList.isBlockList(value) (James M Snell) #56078ea4891856d] - (SEMVER-MINOR) process: deprecatefeatures.{ipv6,uv}andfeatures.tls_*(René) #5554501eb308f26] - (SEMVER-MINOR) report: fix typos in report keys and bump the version (Yuan-Ming Hsu) #5606897c38352d0] - (SEMVER-MINOR) sqlite: aggregate constants in a single property (Edigleysson Silva (Edy)) #56213b4041e554a] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.iteratemethod (tpoisseau) #542132e3ca1bbdd] - (SEMVER-MINOR) src: add cli option to preserve env vars on diagnostic reports (Rafael Gonzaga) #55697bcfe9c80fc] - (SEMVER-MINOR) util: add sourcemap support to getCallSites (Marco Ippolito) #55589Commits
e9024779c0] - assert: make Maps be partially compared in partialDeepStrictEqual (Giovanni Bucci) #561954c13d8e587] - assert: make partialDeepStrictEqual work with ArrayBuffers (Giovanni Bucci) #56098a4fa31a86e] - assert: optimize partial comparison of twoSets (Antoine du Hamel) #5597005d6227a88] - (SEMVER-MINOR) assert: add partialDeepStrictEqual (Giovanni Bucci) #546305e1321abd7] - buffer: document concat zero-fill (Duncan) #55562be5ba7c648] - build: set DESTCPU correctly for 'make binary' on loongarch64 (吴小白) #5627138cf37ee2d] - build: fix missing fp16 dependency in d8 builds (Joyee Cheung) #56266dbb7557455] - build: add major release action (Rafael Gonzaga) #5619927cc90f3be] - build: fix C string encoding forPRODUCT_DIR_ABS(Anna Henningsen) #56111376561c2b4] - build: use variable for simdutf path (Shelley Vohr) #56196126ae15000] - build: allow overriding clang usage (Shelley Vohr) #5601697bb8f7c76] - build: remove defaults for create-release-proposal (Rafael Gonzaga) #56042a8fb1a06f3] - build: set node_arch to target_cpu in GN (Shelley Vohr) #559679f48ca27f1] - build: use variable for crypto dep path (Shelley Vohr) #55928e47ccd2287] - build: fix GN build for sqlite (Cheng) #559128d70b99a5a] - build: compile bundled simdutf conditionally (Jakub Jirutka) #55886826fd35242] - build: compile bundled simdjson conditionally (Jakub Jirutka) #558861015b22085] - build: compile bundled ada conditionally (Jakub Jirutka) #5588677e2869ca6] - build: use glob for dependencies of out/Makefile (Richard Lau) #55789a933103499] - (SEMVER-MINOR) cli: implement --trace-env and --trace-env-[js|native]-stack (Joyee Cheung) #5560472e8e0684e] - crypto: graduate WebCryptoAPIEd25519and X25519 algorithms as stable (Filip Skokan) #56142fe2b344ddb] - crypto: ensure CryptoKey usages and algorithm are cached objects (Filip Skokan) #561089ee9f524a7] - crypto: allow non-multiple of 8 in SubtleCrypto.deriveBits (Filip Skokan) #5529676f242d993] - deps: update nghttp3 to 1.6.0 (Node.js GitHub Bot) #56258c7ff2ea6b5] - deps: update simdutf to 5.6.4 (Node.js GitHub Bot) #5625504230be1ef] - deps: update libuv to 1.49.2 (Luigi Pinca) #5622488589b85b7] - deps: update c-ares to v1.34.4 (Node.js GitHub Bot) #562565c2e0618f3] - deps: define V8_PRESERVE_MOST as no-op on Windows (Stefan Stojanovic) #562389f8f3c9658] - deps: update sqlite to 3.47.2 (Node.js GitHub Bot) #5617817b6931d3b] - deps: update ngtcp2 to 1.9.1 (Node.js GitHub Bot) #5609522b453b619] - deps: upgrade npm to 10.9.2 (npm team) #56135d7eb41b382] - deps: update sqlite to 3.47.1 (Node.js GitHub Bot) #56094669c722aa9] - deps: update zlib to 1.3.0.1-motley-82a5fec (Node.js GitHub Bot) #55980f61a0454d2] - deps: update corepack to 0.30.0 (Node.js GitHub Bot) #55977d98bf0b891] - deps: update ngtcp2 to 1.9.0 (Node.js GitHub Bot) #55975fc362624bf] - deps: update simdutf to 5.6.3 (Node.js GitHub Bot) #55973f61dcc4df4] - deps: upgrade npm to 10.9.1 (npm team) #55951bfe7982491] - deps: update zlib to 1.3.0.1-motley-7e2e4d7 (Node.js GitHub Bot) #54432d714367ef8] - deps: update simdjson to 3.10.1 (Node.js GitHub Bot) #54678ccc9b105ec] - deps: update simdutf to 5.6.2 (Node.js GitHub Bot) #55889ba9d5397de] - (SEMVER-MINOR) dgram: support blocklist in udp (theanarkh) #560877ddbf94849] - dgram: check udp buffer size to avoid fd leak (theanarkh) #56084360d68de0f] - doc: fix color contrast issue in light mode (Rich Trott) #56272f6d0c01303] - doc: stabilize util.styleText (Rafael Gonzaga) #562659436c3c949] - doc: clarify util.aborted resource usage (Kunal Kumar) #55780b1cec2cef9] - doc: add esm examples to node:repl (Alfredo González) #55432d6a84cf781] - doc: add esm examples to node:readline (Alfredo González) #55335a11ac1c0f2] - doc: fix 'which' to 'that' and add commas (Selveter Senitro) #562165331df7911] - doc: fix winget config path (Alex Yang) #562337a8071b43c] - doc: add esm examples to node:tls (Alfredo González) #562297d8c1e72d5] - doc: add esm examples to node:perf_hooks (Alfredo González) #55257ea53c4b1ae] - doc:sea.getRawAsset(key)always returns an ArrayBuffer (沈鸿飞) #562067a94100a3e] - doc: update announce documentation for releases (Rafael Gonzaga) #5620044c4e57e32] - doc: update blog link to /vulnerability (Rafael Gonzaga) #561985e5b4b0cbd] - doc: call out import.meta is only supported in ES modules (Anton Kastritskii) #56186a83de32d35] - doc: add ambassador message - benefits of Node.js (Michael Dawson) #56085bb880dd21a] - doc: fix incorrect link to style guide (Yuan-Ming Hsu) #5618139ce902e58] - doc: fix c++ addon hello world sample (Edigleysson Silva (Edy)) #5617219c72c4acc] - doc: update blog release-post link (Ruy Adorno) #56123b667cc4669] - doc: fix module.md headings (Chengzhong Wu) #5613134c68827af] - doc: move typescript support to active development (Marco Ippolito) #55536c4a97d810b] - doc: mention-aflag for the release script (Ruy Adorno) #56124dd14b80350] - doc: add LJHarb to collaborators (Jordan Harband) #561322feb0781ed] - doc: add create-release-action to process (Rafael Gonzaga) #5599371f6263942] - doc: rename file to advocacy-ambassador-program.md (Tobias Nießen) #560468efa240500] - doc: remove unused import from sample code (Blended Bram) #55570e64cef8bf4] - doc: add FAQ to releases section (Rafael Gonzaga) #559924bb0f30f92] - doc: move history entry to class description (Luigi Pinca) #559916d02bd6873] - doc: add history entry for textEncoder.encodeInto() (Luigi Pinca) #55990e239382ed8] - doc: improve GN build documentation a bit (Shelley Vohr) #5596878b6aef6bc] - doc: fix deprecation codes (Filip Skokan) #56018474bf80a44] - doc: remove confusing and outdated sentence (Luigi Pinca) #5598857381076c5] - doc: deprecate passing invalid types infs.existsSync(Carlos Espa) #55892e529cf6b26] - doc: add doc for PerformanceObserver.takeRecords() (skyclouds2001) #55786a6ef0f6f6e] - doc: add vetted courses to the ambassador benefits (Matteo Collina) #5593463526049f2] - doc: ordernode:cryptoAPIs alphabetically (Julian Gassner) #5583136080b7b61] - doc: doc how to add message for promotion (Michael Dawson) #5584312b2ad4287] - doc: add esm example for zlib (Leonardo Peixoto) #55946352daac296] - doc: fix typo (Alex Yang) #561256e7e9a126d] - doc: document approach for building wasm in deps (Michael Dawson) #559400b3ac05422] - doc: remove RedYetiDev from triagers team (Aviv Keller) #5594720be5e2f80] - doc: add esm examples to node:timers (Alfredo González) #558573ba9b57436] - doc: fix relative path mention in --allow-fs (Rafael Gonzaga) #557913e6b3a9a8b] - doc: include git node release --promote to steps (Rafael Gonzaga) #558355bdfde8dc6] - doc: add history entry for import assertion removal (Antoine du Hamel) #55883c842146c05] - doc: add a note on console stream behavior (Gireesh Punathil) #556165263086169] - (SEMVER-MINOR) doc: add report version and history section (Chengzhong Wu) #561308cb3c2018d] - (SEMVER-MINOR) doc: sort --report-exclude alphabetically (Rafael Gonzaga) #5578855239a48b6] - (SEMVER-MINOR) doc,lib,src,test: unflag sqlite module (Colin Ihrig) #5589004d7c7a349] - fs: make mutatingoptionsin Callbackreaddir()not affect results (LiviaMedeiros) #5605792bcd528e7] - fs: make mutatingoptionsin Promisesreaddir()not affect results (LiviaMedeiros) #560573a55bd9448] - fs: lazily load ReadFileContext (Gürgün Dayıoğlu) #559980331b3fdd3] - fs,win: fix readdir for named pipe (Hüseyin Açacak) #5611079152b54e9] - http: add setDefaultHeaders option to http.request (Tim Perry) #5611219782855a8] - http: don't emit error after destroy (Robert Nagy) #554578494512c17] - http2: remove duplicate codeblock (Vitaly Aminev) #55915d2f82223d1] - http2: support ALPNCallback option (ZYSzys) #561872616f1247a] - http2: fix memory leak caused by premature listener removing (ywave620) #55966598fe048f2] - lib: remove redundant global regexps (Gürgün Dayıoğlu) #56182a3c8739530] - lib: clean up persisted signals when they are settled (Edigleysson Silva (Edy)) #5600111144ab158] - lib: handle Float16Array in node:v8 serdes (Bartek Iwańczuk) #5599681c94a32e4] - lib: disable default memory leak warning for AbortSignal (Lenz Weber-Tronic) #5581668dda61420] - lib: add validation for options in compileFunction (Taejin Kim) #56023d2007aec28] - lib: fixfs.readdirrecursive async (Rafael Gonzaga) #560410571d5556f] - lib: avoid excluding symlinks in recursive fs.readdir with filetypes (Juan José) #55714843943d0ce] - meta: bump github/codeql-action from 3.27.0 to 3.27.5 (dependabot[bot]) #561031529027f03] - meta: bump actions/checkout from 4.1.7 to 4.2.2 (dependabot[bot]) #561028e265de9f5] - meta: bump step-security/harden-runner from 2.10.1 to 2.10.2 (dependabot[bot]) #561010fba3a3b9b] - meta: bump actions/setup-node from 4.0.3 to 4.1.0 (dependabot[bot]) #561002e3fdfdb19] - meta: add releasers as CODEOWNERS to proposal action (Rafael Gonzaga) #560437cbe3de1d8] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #561948a5429c9b3] - module: prevent main thread exiting before esm worker ends (Shima Ryuhei) #561836575b76042] - (SEMVER-MINOR) module: add module.stripTypeScriptTypes (Marco Ippolito) #552820794861bc3] - module: simplify ts under node_modules check (Marco Ippolito) #5544028a11adf14] - module: mark evaluation rejection in require(esm) as handled (Joyee Cheung) #56122bacfe6d5c9] - (SEMVER-MINOR) net: support blocklist in net.connect (theanarkh) #56075566f0a1d25] - (SEMVER-MINOR) net: add SocketAddress.parse (James M Snell) #56076ed7eab1421] - (SEMVER-MINOR) net: add net.BlockList.isBlockList(value) (James M Snell) #56078b47888d390] - (SEMVER-MINOR) net: support blocklist for net.Server (theanarkh) #56079481770a38f] - node-api: allow napi_delete_reference in finalizers (Chengzhong Wu) #556202beb4f1f8c] - permission: ignore internalModuleStat on module loading (Rafael Gonzaga) #55797ea4891856d] - (SEMVER-MINOR) process: deprecatefeatures.{ipv6,uv}andfeatures.tls_*(René) #55545c907b2f358] - quic: update more QUIC implementation (James M Snell) #5598643c25e2e0d] - quic: multiple updates to quic impl (James M Snell) #5597101eb308f26] - (SEMVER-MINOR) report: fix typos in report keys and bump the version (Yuan-Ming Hsu) #560681cfa31fb82] - sea: only assert snapshot main function for main threads (Joyee Cheung) #5612097c38352d0] - (SEMVER-MINOR) sqlite: aggregate constants in a single property (Edigleysson Silva (Edy)) #562132268c1ea8b] - sqlite: add support for custom functions (Colin Ihrig) #55985f5c6955722] - sqlite: supportdb.loadExtension(Alex Yang) #539009a60bea6b7] - sqlite: deps includesqlite3ext.h(Alex Yang) #56010b4041e554a] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.iteratemethod (tpoisseau) #542132889e8da04] - src: fix outdated js2c.cc references (Chengzhong Wu) #561335ce020b0c9] - src: use spaceship operator in SocketAddress (James M Snell) #56059a32fa30847] - src: add missing qualifiers to env.cc (Yagiz Nizipli) #56062974b7b61ef] - src: use std::string_view for process emit fns (Yagiz Nizipli) #560864559fac862] - src: remove dead code in async_wrap (Gerhard Stöbich) #56065e42e4b20be] - src: avoid copy on getV8FastApiCallCount (Yagiz Nizipli) #56081c188660e8b] - src: fix check fd (theanarkh) #56000d894cb76ff] - src: safely remove the last line from dotenv (Shima Ryuhei) #559822ca9f4b65a] - src: fix kill signal on Windows (Hüseyin Açacak) #555142e3ca1bbdd] - (SEMVER-MINOR) src: add cli option to preserve env vars on dr (Rafael Gonzaga) #55697359fff1c4e] - src,build: add no user defined deduction guides of CTAD check (Chengzhong Wu) #5607157bb983215] - (SEMVER-MINOR) src,lib: stabilize permission model (Rafael Gonzaga) #56201d352b0465a] - stream: commit pull-into descriptors after filling from queue (Mattias Buelens) #56072eef9bd1bf6] - test: remove test-sqlite-statement-sync flaky designation (Luigi Pinca) #560518718135a5d] - test: use --permission over --experimental-permission (Rafael Gonzaga) #562399c68d4f180] - test: remove exludes for sea tests on PPC (Michael Dawson) #56217c5d0472968] - test: fix test-abortsignal-drop-settled-signals flakiness (Edigleysson Silva (Edy)) #561974adf518689] - test: move localizationd data fromtest-icu-envto external file (Livia Medeiros) #5561802383b4267] - test: update WPT for url to6fa3fe8(Node.js GitHub Bot) #561360e24eebf24] - test: removehasOpenSSL3xutils (Antoine du Hamel) #56164381e705385] - test: update streams wpt (Mattias Buelens) #56072ad107ca0d9] - test: remove test-fs-utimes flaky designation (Luigi Pinca) #56052e15c5dab79] - test: ensurecli.mdis in alphabetical order (Antoine du Hamel) #56025d0302e7d2d] - test: update WPT for WebCryptoAPI to3e3374e(Node.js GitHub Bot) #56093a0b1e8f400] - test: update WPT for WebCryptoAPI to76dfa54(Node.js GitHub Bot) #56093211f058a12] - test: move test-worker-arraybuffer-zerofill to parallel (Luigi Pinca) #56053c52bc5d71c] - test: update WPT for url to67880a4(Node.js GitHub Bot) #559991a78bde8d4] - test: make HTTP/1.0 connection test more robust (Arne Keller) #55959ff7b1445a0] - test: convert readdir test to use test runner (Thomas Chetwin) #55750b296b5a4e4] - test: make x509 crypto tests work with BoringSSL (Shelley Vohr) #5592797458ad74b] - test: fix determining lower priority (Livia Medeiros) #55908bb4aa7a296] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #55997fb98fa4967] - test_runner: refactor Promise chain in run() (Colin Ihrig) #5595818c94961f8] - test_runner: refactor build Promise in Suite() (Colin Ihrig) #55958bf3967fd3a] - test_runner: simplify hook running logic (Colin Ihrig) #559638c065dc61e] - test_runner: mark context.plan() as stable (Colin Ihrig) #558958ff082cf48] - test_runner: mark snapshot testing as stable (Colin Ihrig) #558977ae125cef4] - tools: fixnode:enforcement for docs (Antoine du Hamel) #562840b489116a3] - tools: update github_reporter to 1.7.2 (Node.js GitHub Bot) #562055306819fac] - tools: add REPLACEME check to workflow (Mert Can Altin) #562514e3cab44cb] - tools: usegithub.actorinstead of bot username for release proposals (Antoine du Hamel) #562323e8938463a] - Revert "tools: disable automated libuv updates" (Luigi Pinca) #5622398ea499e36] - tools: update gyp-next to 0.19.1 (Anna Henningsen) #561112e76cd2a8b] - tools: fix release proposal linter to support more than 1 folk preparing (Antoine du Hamel) #562039fa0e41665] - tools: enable linter fortools/icu/**(Livia Medeiros) #56176d6e1efcc59] - tools: use commit title as PR title when creating release proposal (Antoine du Hamel) #56165a88e4ce55e] - tools: update gyp-next to 0.19.0 (Node.js GitHub Bot) #56158bd0760efbc] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #56099c5b1cf4b12] - tools: improve release proposal PR opening (Antoine du Hamel) #5616112baefb13d] - tools: updatecreate-release-proposalworkflow (Antoine du Hamel) #56054e6e1495f1a] - tools: fix update-undici script (Michaël Zasso) #56069ed635c90da] - tools: allow dispatch oftools.ymlfrom forks (Antoine du Hamel) #560081e628d1f37] - tools: fix nghttp3 updater script (Antoine du Hamel) #560071af3599b7e] - tools: filter release keys to reduce interactivity (Antoine du Hamel) #559501893be4a9c] - tools: update WPT updater (Antoine du Hamel) #56003f89bd2ba8a] - tools: add WPT updater for specific subsystems (Mert Can Altin) #5446061901372d5] - tools: use tokenless Codecov uploads (Michaël Zasso) #55943312bb4dff8] - tools: lint js indoc/**/*.md(Livia Medeiros) #559047b476f637c] - tools: add linter for release commit proposals (Antoine du Hamel) #5592322d7017191] - tools: fix riscv64 build failed (Lu Yahan) #52888f4f777f4d2] - tools: bump cross-spawn from 7.0.3 to 7.0.5 in /tools/eslint (dependabot[bot]) #55894a648e4c44a] - util: harden more built-in classes against prototype pollution (Antoine du Hamel) #562254a1b51b5a9] - util: fix Latin1 decoding to return string output (Mert Can Altin) #562229e98e86604] - util: do not rely on mutableObjectandFunction'constructorprop (Antoine du Hamel) #56188374eb415fd] - util: add fast path for Latin1 decoding (Mert Can Altin) #55275bcfe9c80fc] - (SEMVER-MINOR) util: add sourcemap support to getCallSites (Marco Ippolito) #555892aa77c8a8f] - v8,tools: expose experimental wasm revectorize feature (Yolanda-Chen) #54896bfd11d7661] - worker: fix crash when a worker joins after exit (Stephen Belanger) #56191v22.12.0: 2024-12-03, Version 22.12.0 'Jod' (LTS), @ruyadornoCompare Source
Notable Changes
require(esm) is now enabled by default
Support for loading native ES modules using require() had been available on v20.x and v22.x under the command line flag --experimental-require-module, and available by default on v23.x. In this release, it is now no longer behind a flag on v22.x.
This feature is still experimental, and we are looking for user feedback to make more final tweaks before fully stabilizing it. For this reason, on v22.x, when the Node.js instance encounters a native ES module in require() for the first time, it will emit an experimental warning unless
require()comes from a path that containsnode_modules. If there happens to be any regressions caused by this feature, users can report it to the Node.js issue tracker. Meanwhile this feature can also be disabled using--no-experimental-require-moduleas a workaround.With this feature enabled, Node.js will no longer throw
ERR_REQUIRE_ESMifrequire()is used to load a ES module. It can, however, throwERR_REQUIRE_ASYNC_MODULEif the ES module being loaded or its dependencies contain top-levelawait. When the ES module is loaded successfully byrequire(), the returned object will either be a ES module namespace object similar to what's returned byimport(), or what gets exported as"module.exports"in the ES module.Users can check
process.features.require_moduleto see whetherrequire(esm)is enabled in the current Node.js instance. For packages, the"module-sync"exports condition can be used as a way to detectrequire(esm)support in the current Node.js instance and allow bothrequire()andimportto load the same native ES module. See the documentation for more details about this feature.Contributed by Joyee Cheung in #55085
Added resizable
ArrayBuffersupport inBufferWhen a
Bufferis created using a resizableArrayBuffer, theBufferlength will now correctly change as the underlyingArrayBuffersize is changed.Contributed by James Snell in #55377
Update root certificates to NSS 3.104
This is the version of NSS that shipped in Firefox 131.0 on 2024-10-01.
Certificates added:
Contributed by Richard Lau in #55681
Other Notable Changes
4920869935] - (SEMVER-MINOR) assert: make assertion_error use Myers diff algorithm (Giovanni Bucci) #54862ccffd3b819] - doc: enforce strict policy to semver-major releases (Rafael Gonzaga) #55732acc6806900] - doc: add jazelly to collaborators (Jason Zhang) #5553188d91e8bc2] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #5533398bfc7dce5] - (SEMVER-MINOR) http: add diagnostic channelhttp.client.request.created(Marco Ippolito) #55586337f61fb25] - (SEMVER-MINOR) lib: add UV_UDP_REUSEPORT for udp (theanarkh) #554031628c48ad6] - (SEMVER-MINOR) net: add UV_TCP_REUSEPORT for tcp (theanarkh) #55408457e73f4c9] - (SEMVER-MINOR) sqlite: add support for SQLite Session Extension (Bart Louwers) #54181Commits
f6885e1c68] - assert: fix the string length check for printing the simple diff (Giovanni Bucci) #55474907484f04d] - assert: fix deepEqual always return true on URL (Xuguang Mei) #50853301844e249] - assert: differentiate cases wherecauseisundefinedor missing (Antoine du Hamel) #5573889ccd3e3f4] - assert: fixdeepStrictEqualon errors whencauseis not undefined (Edigleysson Silva (Edy)) #554064920869935] - (SEMVER-MINOR) assert: make assertion_error use Myers diff algorithm (Giovanni Bucci) #54862c67aec368e] - benchmark: addtest-reporters(Aviv Keller) #5575749774cc2c0] - benchmark: addtest_runner/mock-fn(Aviv Keller) #557714caaeb47b2] - benchmark: add nodeTiming.uvmetricsinfo bench (RafaelGSS) #55614cac58564a1] - benchmark: add --runs support to run.js (Rafael Gonzaga) #551585c3ee886fc] - benchmark: adjust byte size for buffer-copy (Rafael Gonzaga) #552956023e1bdb2] - (SEMVER-MINOR) buffer: make Buffer work with resizable ArrayBuffer (James M Snell) #55377a6c00c2204] - build: add create release proposal action (Rafael Gonzaga) #55690b4e413933b] - build: implement node_use_amaro flag in GN build (Cheng) #55798d1db202d4a] - build: apply cpp linting and formatting to ncrypto (Aviv Keller) #553628c670496da] - build: use rclone instead of aws CLI (Michaël Zasso) #55617827e2065bd] - build: stop pre-compilinglint-md(Aviv Keller) #55266c3ca978d9c] - build: fix building with system icu 76 (Michael Cho) #5556323e3287bbe] - build: fix GN arg used in generate_config_gypi.py (Shelley Vohr) #555302b561abb0d] - build: fix GN build for sqlite and nghttp2 (Shelley Vohr) #555297008f29d79] - build: fix GN build for cares/uv deps (Cheng) #554776ee94a394f] - build: fix uninstall script for AIX 7.1 (Cloorc) #55438edbbd4a374] - build: conditionally compile bundled sqlite (Richard Lau) #554093d8e3a657c] - build: tidy up cares.gyp (Richard Lau) #55445f0c12e8fcb] - build: synchronize list of c-ares source files (Richard Lau) #554458daa8a62f8] - build: fix path concatenation (Mohammed Keyvanzadeh) #5538712faf0466e] - build: fix make errors that occur in Makefile (minkyu_kim) #55287a21be0294d] - build,win: enable pch for clang-cl (Stefan Stojanovic) #552497ed058cd00] - cli: add--heap-profflag available toNODE_OPTIONS(Juan José) #54259c26b1bfe6a] - crypto: allow length=0 for HKDF and PBKDF2 in SubtleCrypto.deriveBits (Filip Skokan) #55866a1201d0392] - crypto: update root certificates to NSS 3.104 (Richard Lau) #5568120483aab7a] - crypto: fixRSA_PKCS1_PADDINGerror message (Richard Lau) #55629d345662d50] - crypto: include openssl/rand.h explicitly (Shelley Vohr) #55425166ab3209d] - deps: update simdutf to 5.6.1 (Node.js GitHub Bot) #55850934979e12e] - deps: update undici to 6.21.0 (Node.js GitHub Bot) #55851af77f66424] - deps: update c-ares to v1.34.3 (Node.js GitHub Bot) #55803948a88d2f4] - deps: update icu to 76.1 (Node.js GitHub Bot) #55551fa4c58a983] - deps: update acorn to 8.14.0 (Node.js GitHub Bot) #55699c91155f22e] - deps: update sqlite to 3.47.0 (Node.js GitHub Bot) #55557d1cb7af95c] - deps: update amaro to 0.2.0 (Node.js GitHub Bot) #55601655e5600cb] - deps: update nghttp2 to 1.64.0 (Node.js GitHub Bot) #55559992450c469] - deps: update acorn to 8.13.0 (Node.js GitHub Bot) #55558abd2bd4f64] - deps: update undici to 6.20.1 (Node.js GitHub Bot) #555037dc2c2edad] - deps: update googletest todf1544b(Node.js GitHub Bot) #55465fa9329c024] - deps: update c-ares to v1.34.2 (Node.js GitHub Bot) #5546341a2bcd335] - deps: update ada to 2.9.1 (Node.js GitHub Bot) #54679a3b793defd] - deps: update simdutf to 5.6.0 (Node.js GitHub Bot) #55379551b8f897d] - deps: update c-ares to v1.34.1 (Node.js GitHub Bot) #5536926861eaf4e] - Revert "deps: disable io_uring support in libuv by default" (Santiago Gimeno) #5511441c50bc15e] - deps: update libuv to 1.49.1 (Santiago Gimeno) #5511426fcc04084] - deps: update amaro to 0.1.9 (Node.js GitHub Bot) #553480ee6715921] - diagnostics_channel: fix unsubscribe during publish (simon-id) #55116bf68733e7f] - dns: stop using deprecatedares_query(Aviv Keller) #55430ef6707eb9b] - dns: honor the order option (Luigi Pinca) #553920f3810f3e5] - doc: add added tag and fix typo sqlite.md (Bart Louwers) #56012d1bd0ef1b7] - doc: remove non-working example (Antoine du Hamel) #55856824ac650ed] - doc: addnode:sqliteto mandatorynode:prefix list (翠 / green) #55846b3ea42d887] - doc: add-Sflag release preparation example (Antoine du Hamel) #558360bd5d8b9d9] - doc: clarify UV_THREADPOOL_SIZE env var usage (Preveen P) #5583227b0236a99] - doc: add notable-change mention to sec release (Rafael Gonzaga) #55830476075bada] - doc: fix history info forURL.prototype.toJSON(Antoine du Hamel) #558182743b7b1d3] - doc: correct max-semi-space-size statement (Joe Bowbeer) #558123013870093] - doc: update unflag info ofimport.meta.resolve(skyclouds2001) #5581027bcd103e7] - doc: run license-builder (github-actions[bot]) #5581372d4b30ead] - doc: clarify triager role (Gireesh Punathil) #55775a30defe9dd] - doc: clarify removal of experimental API does not require a deprecation (Antoine du Hamel) #55746ccffd3b819] - doc: enforce strict policy to semver-major releases (Rafael Gonzaga) #55732b6d2a4e816] - doc: add path aliases typescript doc (Carlos Espa) #55766a435affa11] - doc: add esm example inpath.md(Aviv Keller) #5574591443c2711] - doc: consistent use of word child process (Gireesh Punathil) #5565483fb0079d4] - doc: clarity to available addon options (Preveen P) #557156ca851457a] - doc: update--max-semi-space-sizedescription (Joe Bowbeer) #55495e17fffc0ff] - doc: brokenPerformanceObservercode sample (Dom Harrington) #542278bd5777f0f] - doc: add write flag when open file as the demo code's intention (robberfree) #54626f1e0e0ba55] - doc: remove mention of ECDH-ES in crypto.diffieHellman (Filip Skokan) #556111d60b7ec97] - doc: improve c++ embedder API doc (Gireesh Punathil) #55597bbf51d7000] - doc: capitalize "MIT License" (Aviv Keller) #555750e69f6d123] - doc: add suggested tsconfig for type stripping (Marco Ippolito) #5553467beb37f50] - doc: add esm examples to node:string_decoder (Alfredo González) #55507acc6806900] - doc: add jazelly to collaborators (Jason Zhang) #55531a6b3ed54ae] - doc: changed the command used to verify SHASUMS256 (adriancuadrado) #554200ad7ca4f1d] - doc: move dual package shipping docs to separate repo (Joyee Cheung) #55444e99a98ddfd] - doc: add note about stdio streams in child_process (Ederin (Ed) Igharoro) #5532220302851a9] - doc: addisBigIntObjectto documentation (leviscar) #5545050d983e80b] - doc: remove outdated remarks abouthighWaterMarkin fs (Ian Kerins) #5546207c2fb2045] - doc: move Danielle Adams key to old gpg keys (RafaelGSS) #5539941b045170d] - doc: move Bryan English key to old gpg keys (RafaelGSS) #5539913724dcc20] - doc: move Beth Griggs keys to old gpg keys (RafaelGSS) #553990230fb1ead] - doc: spell out condition restrictions (Jan Martin) #5518766e41f044d] - doc: add instructions for WinGet build (Hüseyin Açacak) #5535623d89da3f1] - doc: add missing return values in buffer docs (Karl Horky) #552736e7b33a0ef] - doc: fix ambasador markdown list (Rafael Gonzaga) #55361d8c552a060] - doc: edit onboarding guide to clarify when mailmap addition is needed (Antoine du Hamel) #55334c7f82ec978] - doc: fix the return type of outgoingMessage.setHeaders() (Jimmy Leung) #55290f1b9791694] - doc: updaterequire(ESM)history and stability status (Antoine du Hamel) #551999ffd2dd43b] - doc: consolidate history table of CustomEvent (Edigleysson Silva (Edy)) #5575864fb9e6516] - doc: add history entries for JSON modules stabilization (Antoine du Hamel) #55855ae2ae2fef1] - esm: fix import.meta.resolve crash (Marco Ippolito) #5577715dd43dd6e] - esm: add a fallback when importer in not a file (Antoine du Hamel) #55471aed758d270] - esm: fix inconsistency withimportAssertioninresolvehook (Wei Zhu) #5536588d91e8bc2] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #55333a2c8de7fba] - events: add hasEventListener util for validate (Sunghoon) #552304f84cdc8a2] - events: optimize EventTarget.addEventListener (Robert Nagy) #55312c17601557b] - fs: prevent unwanteddependencyOwnersremoval (Carlos Espa) #555654dd609c685] - fs: fix bufferSize option for opendir recursive (Ethan Arrowood) #55744d695bd4c4f] - fs: pass correct path toDirentFromStatsduringglob(Aviv Keller) #550715357338b8e] - fs: usewstringon Windows paths (jazelly) #551710a7f301a36] - http: add diagnostic channelhttp.server.response.created(Marco Ippolito) #5562298bfc7dce5] - (SEMVER-MINOR) http: add diagnostic channelhttp.client.request.created(Marco Ippolito) #55586d2430ee363] - http2: fix client async storage persistence (Orgad Shaneh) #55460753cbede2a] - lib: remove startsWith/endsWith primordials for char checks (Gürgün Dayıoğlu) #554076e3e99c81e] - lib: prefer logical assignment (Aviv Keller) #5504403902ebb74] - lib: replacecreateDeferredPromiseutil withPromise.withResolvers(Yagiz Nizipli) #54836ee17fcd6f3] - lib: prefer symbol to number in webidltypefunction (Antoine du Hamel) #5573718f0f07e92] - lib: implement webidl dictionary converter and use it in structuredClone (Jason Zhang) #55489bcead24e24] - lib: prefer number to string in webidltypefunction (Jason Zhang) #55489d48c5da039] - lib: convert transfer sequence to array in js (Jason Zhang) #55317cefce4cbb0] - lib: remove unnecessary optional chaining (Gürgün Dayıoğlu) #55728f2561fdeec] - lib: usePromise.withResolvers()in timers (Yagiz Nizipli) #55720337f61fb25] - (SEMVER-MINOR) lib: add UV_UDP_REUSEPORT for udp (theanarkh) #554034f89059f63] - lib: add flag to drop connection when running in cluster mode (theanarkh) #5492729f7325e73] - lib: test_runner#mock:timers respeced timeout_max behaviour (BadKey) #5537568bcec64b8] - lib: remove settled dependant signals when they are GCed (Edigleysson Silva (Edy)) #553543f8a5d8a28] - meta: bump actions/setup-python from 5.2.0 to 5.3.0 (dependabot[bot]) #55688644ad5d60d] - meta: bump actions/setup-node from 4.0.4 to 4.1.0 (dependabot[bot]) #55687334fa69c31] - meta: bump rtCamp/action-slack-notify from 2.3.0 to 2.3.2 (dependabot[bot]) #55686fb3fa8bee2] - meta: bump actions/upload-artifact from 4.4.0 to 4.4.3 (dependabot[bot]) #556851aca3a8289] - meta: bump actions/cache from 4.0.2 to 4.1.2 (dependabot[bot]) #55684a6c73eb9c2] - meta: bump actions/checkout from 4.2.0 to 4.2.2 (dependabot[bot]) #5568306445bc4e3] - meta: bump github/codeql-action from 3.26.10 to 3.27.0 (dependabot[bot]) #5568237bafce2d8] - meta: make review-wanted message minimal (Aviv Keller) #556074cca54b161] - meta: show PR/issue title on review-wanted (Aviv Keller) #5560668decbf935] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #5538107fc40d823] - meta: assign CODEOWNERS for /deps/ncrypto/* (Filip Skokan) #55426139e8f1579] - meta: change color to blue notify review-wanted (Rafael Gonzaga) #55423c0614dc92c] - meta: bump codecov/codecov-action from 4.5.0 to 4.6.0 (dependabot[bot]) #5522247b6c6748b] - meta: bump github/codeql-action from 3.26.6 to 3.26.10 (dependabot[bot]) #552216c836aa97e] - meta: bump step-security/harden-runner from 2.9.1 to 2.10.1 (dependabot[bot]) #55220c81c818a21] - module: throw ERR_NO_TYPESCRIPT when compiled without amaro (Marco Ippolito) #55332d6d1479fcc] - module: simplify --inspect-brk handling (Joyee Cheung) #5567991fdec3a52] - module: fix error thrown from require(esm) hitting TLA repeatedly (Joyee Cheung) #55520cb527a925d] - module: do not warn when require(esm) comes from node_modules (Joyee Cheung) #5596016119f206f] - module: trim off internal stack frames for require(esm) warnings (Joyee Cheung) #5549628b5b9a57d] - module: allow ESM that failed to be required to be re-imported (Joyee Cheung) #555026ac3400960] - module: include module information in require(esm) warning (Joyee Cheung) #55397fcdd6167d8] - module: check --experimental-require-module separately from detection (Joyee Cheung) #55250d8c34ced43] - module: use kNodeModulesRE to detect node_modules (Joyee Cheung) #55243545c069eb5] - module: support 'module.exports' interop export in require(esm) (Guy Bedford) #5456358d6871c45] - (SEMVER-MINOR) module: unflag --experimental-require-module (Joyee Cheung) #550851628c48ad6] - (SEMVER-MINOR) net: add UV_TCP_REUSEPORT for tcp (theanarkh) #55408a5590083cd] - node-api: add napi_create_buffer_from_arraybuffer method (Mert Can Altin) #5450521ec855feb] - os: improve path check with direct index access (Mert Can Altin) #554341fdaa15226] - report: fix network queries in getReport libuv with exclude-network (Adrien Foulon) #55602457e73f4c9] - (SEMVER-MINOR) sqlite: add support for SQLite Session Extension (Bart Louwers) #54181428701a6d8] - sqlite: improve error handling using MaybeLocal (Tobias Nießen) #555714e5878536a] - sqlite: add readOnly option (Tobias Nießen) #555678c35ad12de] - sqlite: refactor open options (Tobias Nießen) #55442c3c403040a] - sqlite: cache column names in stmt.all() (Fedor Indutny) #553736858f7a4d3] - src: use env strings to create sqlite results (Michaël Zasso) #55785db01eaf318] - src: improvenode:osuserInfo performance (Yagiz Nizipli) #55719383d28489d] - src: provide workaround for container-overflow (Daniel Lemire) #555913477b6b4a5] - src: move more key related stuff to ncrypto (James M Snell) #5536838c047e38f] - src: refactor ECDHBitsJob signature (Filip Skokan) #55610acbb62902a] - src: fix dns crash when failed to create NodeAresTask (theanarkh) #55521547cab9433] - src: use NewFromUtf8Literal in NODE_DEFINE_CONSTANT (Charles Kerr) #55581231fe7b953] - src: do not run IsWindowsBatchFile on non-windows (Yagiz Nizipli) #55560bde374ee6a] - src: remove icu basedToASCIIandToUnicode(Yagiz Nizipli) #551566ad23e74be] - src: fix winapi_strerror error string (Hüseyin Açacak) #5520763bc40550b] - src: remove uv__node_patch_is_using_io_uring (Santiago Gimeno) #551142af72a7671] - src: implement IsInsideNodeModules() in C++ (Joyee Cheung) #55286e14fb2defb] - src,lib: optimize nodeTiming.uvMetricsInfo (RafaelGSS) #55614e14dba3ee5] - src,lib: introduceutil.getSystemErrorMessage(err)(Juan José) #540758f59c41d52] - stream: propagate AbortSignal reason (Marvin ROGER) #554737acb96362c] - test: increase coverage ofpathToFileURL(Antoine du Hamel) #554935861135ddb] - test: improve test coverage for child process message sending (Juan José) #55710554d4ace2f] - test: ensure that test priority is not higher than current priority (Livia Medeiros) #55739b0ce62a9bd] - test: add buffer to fs_permission tests (Rafael Gonzaga) #557349d9ad81d54] - test: improve test coverage forServerResponse(Juan José) #55711273f84e01c] - test: updateperformance-timelinewpt (RedYetiDev) #5519789c9c46185] - test: ignore unrelated events in FW watch tests (Carlos Espa) #55605fc69080669] - test: refactor some esm tests (Antoine du Hamel) #55472a80c166733] - test: split up test-runner-mock-timers test (Julian Gassner) #555068c2fc11f7c] - test: remove unneeded listeners (Luigi Pinca) #554861c5872dbde] - test: avoidapply()calls with large amount of elements (Livia Medeiros) #555012194eb4909] - test: increase test coverage forhttp.OutgoingMessage.appendHeader()(Juan José) #55467ad7e81379a] - test: make test-node-output-v8-warning more flexible (Shelley Vohr) #554016aeeaa719b] - test: fix addons and node-api test assumptions (Antoine du Hamel) #5544173ab14fd8f] - test: update wpt test for webmessaging/broadcastchannel (devstone) #55205ded1b68d10] - test: deflaketest-cluster-shared-handle-bind-privileged-port(Aviv Keller) #553780e873c3031] - test: updateconsolewpt (Aviv Keller) #55192832300533b] - test: remove duplicate tests (Luigi Pinca) #55393310a734c1b] - test: update test_util.cc for coverage (minkyu_kim) #55291254badd480] - test: updatecompressionwpt (Aviv Keller) #55191c52a808ac9] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #55703445d117b67] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #55512cd0d748ede] - test,crypto: make crypto tests work with BoringSSL (Shelley Vohr) #554918bac7c27c8] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #55427363e7d5a76] - test_runner: error on mocking an already mocked date (Aviv Keller) #55858f41d329e98] - test_runner: add support for scheduler.wait on mock timers (Erick Wendel) #55244b9200c33ae] - test_runner: require--enable-source-mapsfor sourcemap coverage (Aviv Keller) #55359f11d93d8ef] - tools: enforce ordering of error codes inerrors.md(Antoine du Hamel) #5532485ca31a90a] - tools: bump @eslint/plugin-kit from 0.2.0 to 0.2.3 in /tools/eslint (dependabot[bot]) #55875506aac567b] - tools: fix exclude labels for commit-queue (Richard Lau) #5580914ffac9995] - tools: make commit-queue check blocked label (Marco Ippolito) #55781eb22ec87e6] - tools: remove non-existent file from eslint config (Aviv Keller) #557725844565fb2] - tools: fix c-ares updater script for Node.js 18 (Richard Lau) #557170a79ebd257] - tools: update ESLint to 9.14.0 (dependabot[bot]) #5568912543d560a] - tools: useutil.parseArgsinlint-md(Aviv Keller) #55694d95aa244c2] - tools: fix root certificate updater (Richard Lau) #556813626891f8e] - tools: compact jq output in daily-wpt-fyi.yml action (Filip Skokan) #5569502c902e68a] - tools: run daily WPT.fyi report on all supported releases (Filip Skokan) #55619456b02351b] - tools: lint README lists more strictly (Antoine du Hamel) #5562583a5983c7d] - tools: update lint-md-dependencies (Node.js GitHub Bot) #5547072b4a8df6a] - tools: update gyp-next to 0.18.3 (Node.js GitHub Bot) #554646b6e6a5590] - tools: add script to synch c-ares source lists (Richard Lau) #55445a6c444291b] - tools: fix typos (Nathan Baulch) #55061d5e915ba5d] - tools: addpolyfilledoption toprefer-primordialsrule (Antoine du Hamel) #55318c8e7f767b7] - typings: add missing type ofArrayBufferPrototypeGetByteLength(Wuli Zuo) #554396317f77942] - url: refactorpathToFileURLto native (Antoine du Hamel) #554765418d40256] - url: handle "unsafe" characters properly inpathToFileURL(Antoine du Hamel) #54545fce8c32c19] - util: do not mark experimental feature as deprecated (Antoine du Hamel) #55740940d22ffe1] - (SEMVER-MINOR) util: fix util.getCallSites plurality (Chengzhong Wu) #5562642ac0c2af3] - util: do not catch on circular@@​toStringTagerrors (Aviv Keller) #55544Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.