chore(deps): update node.js to v18.18.0
This MR contains the following updates:
Package | Type | Update | Change | Age | Adoption | Passing | Confidence |
---|---|---|---|---|---|---|---|
node | minor |
18.16.0 -> 18.18.0
|
|||||
node | image | minor |
18.16.0 -> 18.18.0
|
||||
@types/node (source) | devDependencies | minor | 18.15.13 -> 18.18.1 |
Release Notes
nodejs/node
v18.18.0
: 2023-09-18, Version 18.18.0 'Hydrogen' (LTS), @ruyadorno
Notable Changes
- [
7dc731d4bf
] - build: sync libuv header change (Jiawen Geng) #48078 - [
490fc004b0
] - crypto: update root certificates to NSS 3.93 (Node.js GitHub Bot) #49341 - [
dd8cd97d4d
] - crypto: update root certificates to NSS 3.90 (Node.js GitHub Bot) #48416 - [
ea23870bec
] - deps: add missing thread-common.c in uv.gyp (Santiago Gimeno) #48078 - [
88855e0b1b
] - deps: upgrade to libuv 1.46.0 (Santiago Gimeno) #48078 - [
fb2b80fca0
] - deps: upgrade to libuv 1.45.0 (Santiago Gimeno) #48078 - [
249879e46c
] - doc: add atlowChemi to collaborators (atlowChemi) #48757 - [
e8dc7bde6a
] - doc: add vmoroz to collaborators (Vladimir Morozov) #48527 - [
a30f2fbcc1
] - doc: add kvakil to collaborators (Keyhan Vakil) #48449 - [
c39b7c240e
] - (SEMVER-MINOR) esm: add--import
flag (Moshe Atlow) #43942 - [
a68a67f54d
] - (SEMVER-MINOR) events: allow safely adding listener to abortSignal (Chemi Atlow) #48596 - [
3a8586bee2
] - fs, stream: initialSymbol.dispose
andSymbol.asyncDispose
support (Moshe Atlow) #48518 - [
863bdb785d
] - net: add autoSelectFamily global getter and setter (Paolo Insogna) #45777 - [
c59ae86ba0
] - (SEMVER-MINOR) url: add value argument to has and delete methods (Sankalp Shubham) #47885
Commits
- [
d1f43317ea
] - benchmark: add bar.R (Rafael Gonzaga) #47729 - [
4f74be3c92
] - benchmark: refactor crypto oneshot (Filip Skokan) #48267 - [
fe9da9df0f
] - benchmark: add crypto.create*Key (Filip Skokan) #48284 - [
9cb18b3e9d
] - build: do not pass target toolchain flags to host toolchain (Ivan Trubach) #48597 - [
7dc731d4bf
] - build: sync libuv header change (Jiawen Geng) #48078 - [
211a4f88a9
] - build: update action to close stale MRs (Michael Dawson) #48196 - [
cc33a1864b
] - child_process: harden against prototype pollution (Livia Medeiros) #48726 - [
b5df084e1e
] - child_process: use addAbortListener (atlowChemi) #48550 - [
611db8df1a
] - child_process: supportSymbol.dispose
(Moshe Atlow) #48551 - [
490fc004b0
] - crypto: update root certificates to NSS 3.93 (Node.js GitHub Bot) #49341 - [
dd8cd97d4d
] - crypto: update root certificates to NSS 3.90 (Node.js GitHub Bot) #48416 - [
b2bc839d4c
] - crypto: remove OPENSSL_FIPS guard for OpenSSL 3 (Richard Lau) #48392 - [
c8da8c80b9
] - deps: update nghttp2 to 1.55.0 (Node.js GitHub Bot) #48746 - [
7e04242dcb
] - deps: update minimatch to 9.0.3 (Node.js GitHub Bot) #48704 - [
ea23870bec
] - deps: add missing thread-common.c in uv.gyp (Santiago Gimeno) #48078 - [
88855e0b1b
] - deps: upgrade to libuv 1.46.0 (Santiago Gimeno) #48078 - [
fb2b80fca0
] - deps: upgrade to libuv 1.45.0 (Santiago Gimeno) #48078 - [
59fca4e09a
] - deps: update acorn to 8.10.0 (Node.js GitHub Bot) #48713 - [
bcb255d5a8
] - deps: V8: cherry-pickcb00db4
(Keyhan Vakil) #48671 - [
65a6c90fc6
] - deps: update acorn to 8.9.0 (Node.js GitHub Bot) #48484 - [
6b6d5d91e9
] - deps: update zlib to 1.2.13.1-motley-f81f385 (Node.js GitHub Bot) #48541 - [
56249b0770
] - deps: update googletest toec4fed9
(Node.js GitHub Bot) #48538 - [
8914a5204a
] - deps: update minimatch to 9.0.2 (Node.js GitHub Bot) #48542 - [
1b960d9988
] - deps: update icu to 73.2 (Node.js GitHub Bot) #48502 - [
f0e2e3c549
] - deps: update zlib to 1.2.13.1-motley-3ca9f16 (Node.js GitHub Bot) #48413 - [
9cf8fe6b93
] - deps: upgrade npm to 9.8.1 (npm team) #48838 - [
d9ff473ff3
] - deps: upgrade npm to 9.8.0 (npm team) #48665 - [
4a6177daad
] - deps: upgrade npm to 9.7.2 (npm team) #48514 - [
104b58feb1
] - deps: update ada to 2.6.0 (Node.js GitHub Bot) #48896 - [
7f7a125d78
] - deps: update corepack to 0.19.0 (Node.js GitHub Bot) #48540 - [
5e1eb451d1
] - deps: update corepack to 0.18.1 (Node.js GitHub Bot) #48483 - [
3be53358bc
] - deps: add loong64 config into openssl gypi (Shi Pujin) #48043 - [
555982c59e
] - deps: upgrade npm to 9.7.1 (npm team) #48378 - [
3c03ec0832
] - deps: update simdutf to 3.2.14 (Node.js GitHub Bot) #48344 - [
a2964a4583
] - deps: update ada to 2.5.1 (Node.js GitHub Bot) #48319 - [
38f6e0d8cd
] - deps: update zlib to982b036
(Node.js GitHub Bot) #48327 - [
f4617a4f81
] - deps: add loongarch64 into openssl Makefile and gen openssl-loongarch64 (Shi Pujin) #46401 - [
573eb4be12
] - dgram: socket addasyncDispose
(atlowChemi) #48717 - [
f3c4300e00
] - dgram: use addAbortListener (atlowChemi) #48550 - [
d3041df738
] - doc: expand on squashing and rebasing to land a MR (Chengzhong Wu) #48751 - [
249879e46c
] - doc: add atlowChemi to collaborators (atlowChemi) #48757 - [
42ecd46d1f
] - doc: fix ambiguity in http.md and https.md (an5er) #48692 - [
e78824e053
] - doc: add release key for Ulises Gascon (Ulises Gascón) #49196 - [
1aa798d69f
] - doc: clarify transform._transform() callback argument logic (Rafael Sofi-zada) #48680 - [
d723e870a2
] - doc: mention git node release prepare (Rafael Gonzaga) #48644 - [
a9a1394388
] - doc: fix options order (Luigi Pinca) #48617 - [
989ea6858f
] - doc: update security release stewards (Rafael Gonzaga) #48569 - [
f436ac1803
] - doc: update return type for describe (Shrujal Shah) #48572 - [
fbe89e6320
] - doc: run license-builder (github-actions[bot]) #48552 - [
f18b287bc3
] - doc: add description of autoAllocateChunkSize in ReadableStream (Debadree Chatterjee) #48004 - [
e2f3ed1444
] - doc: fixfilename
type inwatch
result (Dmitry Semigradsky) #48032 - [
1fe75dc2b0
] - doc: unnestmime
andMIMEParams
from MIMEType constructor (Dmitry Semigradsky) #47950 - [
e1339d58e8
] - doc: update security-release-process.md (Rafael Gonzaga) #48504 - [
e8dc7bde6a
] - doc: add vmoroz to collaborators (Vladimir Morozov) #48527 - [
f8ba672c7b
] - doc: link to Runtime Keys in export conditions (Jacob Hummer) #48408 - [
0056cb93e9
] - doc: update fs flags documentation (sinkhaha) #48463 - [
3cf3fb9479
] - doc: reviseerror.md
introduction (Antoine du Hamel) #48423 - [
7575d8b90e
] - doc: add preveen-stack to triagers (Preveen P) #48387 - [
820aa550a4
] - doc: refine when file is undefined in test events (Moshe Atlow) #48451 - [
a30f2fbcc1
] - doc: add kvakil to collaborators (Keyhan Vakil) #48449 - [
239b4ea66f
] - doc: mark--import
as experimental (Moshe Atlow) #44067 - [
2a561aefe2
] - doc: add additional info on TSFN dispatch (Michael Dawson) #48367 - [
5cc6eee30d
] - doc: add link for news from security wg (Michael Dawson) #48396 - [
ffece88452
] - doc: fix typo in events.md (Darshan Sen) #48436 - [
06513585dc
] - doc: run license-builder (github-actions[bot]) #48336 - [
d9a800ee5c
] - esm: fix emit deprecation on legacy main resolve (Antoine du Hamel) #48664 - [
c39b7c240e
] - (SEMVER-MINOR) esm: add--import
flag (Moshe Atlow) #43942 - [
a00464ee06
] - esm: fix specifier resolution and symlinks (Zack Newsham) #47674 - [
3b8ec348b0
] - events: fix bug listenerCount don't compare wrapped listener (yuzheng14) #48592 - [
a68a67f54d
] - (SEMVER-MINOR) events: allow safely adding listener to abortSignal (Chemi Atlow) #48596 - [
5354af3dab
] - fs: call the callback with an error if writeSync fails (killa) #47949 - [
c3a27d1d3d
] - fs: remove unneeded return statement (Luigi Pinca) #48526 - [
3a8586bee2
] - fs, stream: initialSymbol.dispose
andSymbol.asyncDispose
support (Moshe Atlow) #48518 - [
01746c71df
] - http: null the joinDuplicateHeaders property on cleanup (Luigi Pinca) #48608 - [
d47eb73a85
] - http: remove useless ternary in test (geekreal) #48481 - [
977e9a38b4
] - http: fix for handling on boot timers headers and request (Franciszek Koltuniuk) #48291 - [
be88f7cd22
] - http2: use addAbortListener (atlowChemi) #48550 - [
7c7230a85c
] - http2: send RST code 8 on AbortController signal (Devraj Mehta) #48573 - [
f74c2fc72a
] - lib: use addAbortListener (atlowChemi) #48550 - [
db355d1f37
] - lib: add option to force handling stopped events (Chemi Atlow) #48301 - [
5d682c55a5
] - lib: reduce url getters onmakeRequireFunction
(Yagiz Nizipli) #48492 - [
5260f53e55
] - lib: add support for inherited custom inspection methods (Antoine du Hamel) #48306 - [
69aaf8b1d1
] - lib: remove invalid parameter to toASCII (Yagiz Nizipli) #48878 - [
51863b80e4
] - meta: bump actions/checkout from 3.5.2 to 3.5.3 (dependabot[bot]) #48625 - [
7ec370991d
] - meta: bump step-security/harden-runner from 2.4.0 to 2.4.1 (dependabot[bot]) #48626 - [
34b8e980d4
] - meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0 (dependabot[bot]) #48628 - [
dfed9a7da9
] - meta: bump github/codeql-action from 2.3.6 to 2.20.1 (dependabot[bot]) #48627 - [
071eaadc5a
] - module: add SourceMap.findOrigin (Isaac Z. Schlueter) #47790 - [
bf1525c549
] - module: reduce url invocations in esm/load.js (Yagiz Nizipli) #48337 - [
f8921630a2
] - net: server addasyncDispose
(atlowChemi) #48717 - [
b5f53d9a0b
] - net: fix family autoselection SSL connection handling (Paolo Insogna) #48189 - [
267439fc34
] - net: rework autoSelectFamily implementation (Paolo Insogna) #46587 - [
d3637cdbbf
] - net: fix address iteration with autoSelectFamily (Fedor Indutny) #48258 - [
e8289a83f1
] - net: fix family autoselection timeout handling (Paolo Insogna) #47860 - [
863bdb785d
] - net: add autoSelectFamily global getter and setter (Paolo Insogna) #45777 - [
04dc090bfa
] - node-api: provide napi_define_properties fast path (Gabriel Schulhof) #48440 - [
feb6a54dc3
] - node-api: implement external strings (Gabriel Schulhof) #48339 - [
121f74c463
] - perf_hooks: convert maxSize to IDL value in setResourceTimingBufferSize (Chengzhong Wu) #44902 - [
804d880589
] - permission: fix data types in PrintTree (Tobias Nießen) #48770 - [
7aaecce9bf
] - permission: add debug log when inserting fs nodes (Rafael Gonzaga) #48677 - [
cb51ef2905
] - readline: use addAbortListener (atlowChemi) #48550 - [
07065d0814
] - report: disable js stack when no context is entered (Chengzhong Wu) #48495 - [
572b82ffef
] - src: make BaseObject iteration order deterministic (Joyee Cheung) #48702 - [
3f65598a41
] - src: remove kEagerCompile for CompileFunction (Keyhan Vakil) #48671 - [
f43eacac9b
] - src: deduplicate X509 getter implementations (Tobias Nießen) #48563 - [
0c19621bdc
] - src: fix uninitialized field access in AsyncHooks (Jan Olaf Krems) #48566 - [
0c38184d62
] - src: fix Coverity issue regarding unnecessary copy (Yagiz Nizipli) #48565 - [
0d73009ba3
] - src: refactorSplitString
in util (Yagiz Nizipli) #48491 - [
6c72622df9
] - src: handle wasm out of bound in osx will raise SIGBUS correctly (Congcong Cai) #46561 - [
e4261809b0
] - src: replace idna functions with ada::idna (Yagiz Nizipli) #47735 - [
3dd82b1820
] - stream: use addAbortListener (atlowChemi) #48550 - [
786fbdb824
] - stream: fix premature pipeline end (Robert Nagy) #48435 - [
c224e1b255
] - stream: fix deadlock when pipeing to full sink (Robert Nagy) #48691 - [
2c75b9ece2
] - test: fix flaky test-string-decode.js on x86 (Stefan Stojanovic) #48750 - [
279c4f64c1
] - test: mark test-http-regr-gh-2928 as flaky (Joyee Cheung) #49565 - [
01eacccd9a
] - test: deflake test-net-throttle (Luigi Pinca) #48599 - [
33886b271c
] - test: move test-net-throttle to parallel (Luigi Pinca) #48599 - [
a79112b5f4
] - Revert "test: remove test-crypto-keygen flaky designation" (Luigi Pinca) #48652 - [
6ec57984db
] - test: add missing assertions to test-runner-cli (Moshe Atlow) #48593 - [
dd1805e802
] - test: remove test-crypto-keygen flaky designation (Luigi Pinca) #48575 - [
df9a9afc99
] - test: remove test-timers-immediate-queue flaky designation (Luigi Pinca) #48575 - [
3ae96ae380
] - test: make IsolateData per-isolate in cctest (Joyee Cheung) #48450 - [
f2ce8e0c06
] - test: define NAPI_VERSION before including node_api.h (Chengzhong Wu) #48376 - [
13ac0a5e26
] - test: remove unnecessary noop function args tomustNotCall()
(Antoine du Hamel) #48513 - [
8fdd4c55b3
] - test: skip test-runner-watch-mode on IBMi (Moshe Atlow) #48473 - [
9d90409241
] - test: fix flaky test-watch-mode (Moshe Atlow) #48147 - [
27a4bc7c32
] - test: add missing <algorithm> include for std::find (Sam James) #48380 - [
cb92c4b9fe
] - test: update url web-platform tests (Yagiz Nizipli) #48319 - [
f35c4d3190
] - test: ignore the copied entry_point.c (Luigi Pinca) #48297 - [
41d1e6888f
] - test: refactor test-gc-http-client-timeout (Luigi Pinca) #48292 - [
125bca621a
] - test: update encoding web-platform tests (Yagiz Nizipli) #48320 - [
e9ac111d02
] - test: update FileAPI web-platform tests (Yagiz Nizipli) #48322 - [
3da57d17f5
] - test: update user-timing web-platform tests (Yagiz Nizipli) #48321 - [
c728b8a29b
] - test: fixtest-net-autoselectfamily
for kernel without IPv6 support (Livia Medeiros) #45856 - [
6de7aa1d19
] - test: movetest-tls-autoselectfamily-servername
totest/internet
(Antoine du Hamel) #47029 - [
2de9868292
] - test: validate host with commas on url.parse (Yagiz Nizipli) #48878 - [
e7d2e8ef2a
] - test: delete test-net-bytes-per-incoming-chunk-overhead (Michaël Zasso) #48811 - [
f5494fa1b0
] - test_runner: fixedtest
shorthands return type (Shocker) #48555 - [
7051cafdfa
] - test_runner: make--test-name-pattern
recursive (Moshe Atlow) #48382 - [
f302286442
] - test_runner: refactor coverage report output for readability (Damien Seguin) #47791 - [
7822a541e5
] - timers: support Symbol.dispose (Moshe Atlow) #48633 - [
3eeca52db1
] - tls: fix bugs of double TLS (rogertyang) #48969 - [
4826379516
] - tools: run fetch_deps.py with Python 3 (Richard Lau) #48729 - [
e2688c8d79
] - tools: update doc to [email protected] [email protected] (Node.js GitHub Bot) #48714 - [
7399481096
] - tools: update lint-md-dependencies to [email protected] (Node.js GitHub Bot) #48705 - [
31c07153ce
] - tools: update eslint to 8.44.0 (Node.js GitHub Bot) #48632 - [
4e53f51e24
] - tools: update lint-md-dependencies to [email protected] (Node.js GitHub Bot) #48631 - [
7d52950a96
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #48544 - [
e168eab3ee
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #48486 - [
9711bc24f6
] - tools: replace sed with perl (Luigi Pinca) #48499 - [
9c1937c0a7
] - tools: update eslint to 8.43.0 (Node.js GitHub Bot) #48487 - [
9449f05ab1
] - tools: update doc to [email protected] (Node.js GitHub Bot) #48485 - [
79dcd968b1
] - tools: prepare tools/doc for to-vfile 8.0.0 (Rich Trott) #48485 - [
538f388ac0
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #48417 - [
01bc10dcd5
] - tools: update create-or-update-pull-request-action (Richard Lau) #48398 - [
590a072657
] - tools: update eslint-plugin-jsdoc (Richard Lau) #48393 - [
6a5805491e
] - tools: update eslint to 8.42.0 (Node.js GitHub Bot) #48328 - [
2eb13e3986
] - tools: disable jsdoc/no-defaults rule (Luigi Pinca) #48328 - [
3363cfa6c7
] - typings: remove unused primordials (Yagiz Nizipli) #48509 - [
c59ae86ba0
] - (SEMVER-MINOR) url: add value argument to has and delete methods (Sankalp Shubham) #47885 - [
f59c9636f4
] - url: conform to origin getter spec changes (Yagiz Nizipli) #48319 - [
0beb5ab93d
] - url: ensure getter access do not mutate observable symbols (Antoine du Hamel) #48897 - [
0a022c496d
] - util: useprimordials.ArrayPrototypeIndexOf
instead of mutable method (DaisyDogs07) #48586
v18.17.1
: 2023-08-09, Version 18.17.1 'Hydrogen' (LTS), @RafaelGSS
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
- CVE-2023-32002: Policies can be bypassed via Module._load (High)
- CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
- CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
- OpenSSL Security Releases
More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.
Commits
- [
fe3abdf82e
] - deps: update archs files for openssl-3.0.10+quic1 (Node.js GitHub Bot) #49036 - [
2c5a522d9c
] - deps: upgrade openssl sources to quictls/openssl-3.0.10+quic1 (Node.js GitHub Bot) #49036 - [
15bced0bde
] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#417 - [
d4570fae35
] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#460
v18.17.0
: 2023-07-18, Version 18.17.0 'Hydrogen' (LTS), @danielleadams
Notable Changes
Ada 2.0
Node.js v18.17.0 comes with the latest version of the URL parser, Ada. This update brings significant performance improvements to URL parsing, including enhancements to the url.domainToASCII and url.domainToUnicode functions in node:url.
Ada 2.0 has been integrated into the Node.js codebase, ensuring that all parts of the application can benefit from the improved performance. Additionally, Ada 2.0 features a significant performance boost over its predecessor, Ada 1.0.4, while also eliminating the need for the ICU requirement for URL hostname parsing.
Contributed by Yagiz Nizipli and Daniel Lemire in #47339
Web Crypto API
Web Crypto API functions' arguments are now coerced and validated as per their WebIDL definitions like in other Web Crypto API implementations. This further improves interoperability with other implementations of Web Crypto API.
Contributed by Filip Skokan in #46067
-
crypto:
- update root certificates to NSS 3.89 (Node.js GitHub Bot) #47659
-
dns:
- (SEMVER-MINOR) expose getDefaultResultOrder (btea) #46973
- doc:
-
events:
- (SEMVER-MINOR) add getMaxListeners method (Matthew Aitken) #47039
-
fs:
- (SEMVER-MINOR) add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084
- (SEMVER-MINOR) add recursive option to readdir and opendir (Ethan Arrowood) #41439
- (SEMVER-MINOR) add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084
- (SEMVER-MINOR) implement byob mode for readableWebStream() (Debadree Chatterjee) #46933
- http:
- lib:
-
module:
- change default resolver to not throw on unknown scheme (Gil Tayar) #47824
- node-api:
- stream:
-
test:
- unflake test-vm-timeout-escape-nexttick (Santiago Gimeno) #48078
- test_runner:
-
tools:
- update LICENSE and license-builder.sh (Santiago Gimeno) #48078
-
url:
- (SEMVER-MINOR) implement URL.canParse (Matthew Aitken) #47179
-
wasi:
- (SEMVER-MINOR) no longer require flag to enable wasi (Michael Dawson) #47286
Commits
- [
2ba08ac002
] - benchmark: usecluster.isPrimary
instead ofcluster.isMaster
(Deokjin Kim) #48002 - [
60ca69d96c
] - benchmark: add eventtarget creation bench (Rafael Gonzaga) #47774 - [
d8233d96bb
] - benchmark: add a benchmark fordefaultResolve
(Antoine du Hamel) #47543 - [
a1aabb6912
] - benchmark: fix invalid requirementsURL (Deokjin Kim) #47378 - [
394c61caf9
] - bootstrap: support namespaced builtins in snapshot scripts (Joyee Cheung) #47467 - [
0165a765a0
] - bootstrap: do not expand process.argv[1] for snapshot entry points (Joyee Cheung) #47466 - [
cca557cdd9
] - buffer: combine checking range of sourceStart inbuf.copy
(Deokjin Kim) #47758 - [
4c69be467c
] - buffer: use private properties for brand checks in File (Matthew Aitken) #47154 - [
d002f9b6e2
] - build: revert unkonwn ruff selector (Moshe Atlow) #48753 - [
93f77cb762
] - build: set v8_enable_webassembly=false when lite mode is enabled (Cheng Shao) #48248 - [
1662e894f3
] - build: add action to close stale MRs (Michael Dawson) #48051 - [
5ca437b288
] - build: use pathlib for paths (Mohammed Keyvanzadeh) #47581 - [
72443bc54b
] - build: refactor configure.py (Mohammed Keyvanzadeh) #47667 - [
d4eecb5be9
] - build: add devcontainer configuration (Tierney Cyren) #40825 - [
803ed41144
] - build: bump ossf/scorecard-action from 2.1.2 to 2.1.3 (dependabot[bot]) #47367 - [
48468c4413
] - build: replace Python linter flake8 with ruff (Christian Clauss) #47519 - [
3ceb2c4387
] - build: add node-core-utils to setup (Jiawen Geng) #47442 - [
fdc59b8e14
] - build: bump github/codeql-action from 2.2.6 to 2.2.9 (dependabot[bot]) #47366 - [
3924893023
] - build: update stale action from v7 to v8 (Rich Trott) #47357 - [
753185c5b0
] - build: remove Python pip--no-user
option (Christian Clauss) #47372 - [
67af0a6a2b
] - build: avoid usage of pipes library (Mohammed Keyvanzadeh) #47271 - [
db910dd6b2
] - build, deps, tools: avoid excessive LTO (Konstantin Demin) #47313 - [
35d1def891
] - child_process: use signal.reason in child process abort (Debadree Chatterjee) #47817 - [
7692d2e7b9
] - cluster: use ObjectPrototypeHasOwnProperty (Daeyeon Jeong) #48141 - [
7617772762
] - crypto: use openssl's own memory BIOs in crypto_context.cc (GauriSpears) #47160 - [
8cabfe7c6e
] - crypto: fix setEngine() when OPENSSL_NO_ENGINE set (Tobias Nießen) #47977 - [
de1338da05
] - crypto: fix webcrypto private/secret import with empty usages (Filip Skokan) #47877 - [
27a696fda9
] - crypto: update root certificates to NSS 3.89 (Node.js GitHub Bot) #47659 - [
e2292f936e
] - crypto: remove INT_MAX restriction in randomBytes (Tobias Nießen) #47559 - [
a5f214c00c
] - crypto: replace THROW with CHECK for scrypt keylen (Tobias Nießen) #47407 - [
dd42214fd4
] - crypto: unify validation of checkPrime checks (Tobias Nießen) #47165 - [
76e4d12fb3
] - crypto: re-add padding for AES-KW wrapped JWKs (Filip Skokan) #46563 - [
9d894c17dd
] - crypto: use WebIDL converters in WebCryptoAPI (Filip Skokan) #46067 - [
6f3a8b45a5
] - deps: update ada to 2.5.0 (Node.js GitHub Bot) #48223 - [
075b6db919
] - deps: update ada to 2.4.2 (Node.js GitHub Bot) #48092 - [
a4ee1f652c
] - deps: update ada to 2.4.1 (Node.js GitHub Bot) #48036 - [
81b514d3f0
] - deps: update ada to 2.4.0 (Node.js GitHub Bot) #47922 - [
575ddf694f
] - deps: update ada to 2.3.1 (Node.js GitHub Bot) #47893 - [
2d03d5f458
] - deps: update ada to 2.3.0 (Node.js GitHub Bot) #47737 - [
42e690f2d5
] - deps: update ada to 2.2.0 (Node.js GitHub Bot) #47678 - [
08dd271521
] - deps: update ada to 2.1.0 (Node.js GitHub Bot) #47598 - [
96c50ba71f
] - deps: update ada to 2.0.0 (Node.js GitHub Bot) #47339 - [
4d1c38b758
] - deps: update zlib to337322d
(Node.js GitHub Bot) #48218 - [
74206b2549
] - deps: update histogram 0.11.8 (Marco Ippolito) #47742 - [
fbb4b3775d
] - deps: update histogram to 0.11.7 (Marco Ippolito) #47742 - [
e88c079022
] - deps: update simdutf to 3.2.12 (Node.js GitHub Bot) #48118 - [
48bd1248b9
] - deps: update minimatch to 9.0.1 (Node.js GitHub Bot) #48094 - [
d4572d31fa
] - deps: update corepack to 0.18.0 (Node.js GitHub Bot) #48091 - [
8090d29dc4
] - deps: update uvwasi to 0.0.18 (Node.js GitHub Bot) #47866 - [
169c8eea2e
] - deps: update uvwasi to 0.0.17 (Node.js GitHub Bot) #47866 - [
6acbb23380
] - deps: upgrade npm to 9.6.7 (npm team) #48062 - [
e8f2c0a58b
] - deps: update undici to 5.22.1 (Node.js GitHub Bot) #47994 - [
9309fd3120
] - deps: update simdutf to 3.2.9 (Node.js GitHub Bot) #47983 - [
b796d3560a
] - deps: upgrade npm to 9.6.6 (npm team) #47862 - [
cce372e14e
] - deps: V8: cherry-pickc5ab3e4
(Richard Lau) #47736 - [
7283486adb
] - deps: update undici to 5.22.0 (Node.js GitHub Bot) #47679 - [
2ea6e03003
] - deps: add minimatch as a dependency (Moshe Atlow) #47499 - [
261e1d23d1
] - deps: update ICU to 73.1 release (Steven R. Loomis) #47456 - [
f532f9df5f
] - deps: update undici to 5.21.2 (Node.js GitHub Bot) #47508 - [
dcb8c038b9
] - deps: update simdutf to 3.2.8 (Node.js GitHub Bot) #47507 - [
6c8456d61f
] - deps: update undici to 5.21.1 (Node.js GitHub Bot) #47488 - [
d3b2e8a438
] - deps: update simdutf to 3.2.7 (Node.js GitHub Bot) #47473 - [
64a5fe0499
] - deps: update corepack to 0.17.2 (Node.js GitHub Bot) #47474 - [
6f0f61a7d3
] - deps: upgrade npm to 9.6.4 (npm team) #47432 - [
443a72e207
] - deps: update zlib to upstream5edb52d
(Luigi Pinca) #47151 - [
dc3bc46914
] - deps: update simdutf to 3.2.3 (Node.js GitHub Bot) #47331 - [
b2f2bebbc2
] - deps: update timezone to 2023c (Node.js GitHub Bot) #47302 - [
c10729ffa7
] - deps: upgrade npm to 9.6.3 (npm team) #47325 - [
420deac1de
] - deps: update corepack to 0.17.1 (Node.js GitHub Bot) #47156 - [
966ba28491
] - deps: V8: cherry-pick3e4952c
(Richard Lau) #47236 - [
fc6ab26824
] - deps: update timezone to 2023b (Node.js GitHub Bot) #47256 - [
2700e70215
] - deps: upgrade npm to 9.6.2 (npm team) #47108 - [
29ba98a0a5
] - deps: V8: cherry-pick975ff4d
(Debadree Chatterjee) #47209 - [
be34777be8
] - deps: cherry-pick win/arm64/clang fixes (Cheng Zhao) #47011 - [
b52aacb614
] - deps: update uvwasi to v0.0.16 (Michael Dawson) #46434 - [
27a76cf5e0
] - deps,test: update postject to 1.0.0-alpha.6 (Node.js GitHub Bot) #48072 - [
b171c1a3a4
] - dgram: convert macro to template (Tobias Nießen) #47891 - [
709bf1c758
] - (SEMVER-MINOR) dns: expose getDefaultResultOrder (btea) #46973 - [
2f202c93e7
] - doc: clarify array args to Buffer.from() (Bryan English) #48274 - [
27f195f8d8
] - doc: document watch option for node:test run() (Moshe Atlow) #48256 - [
7558ef350a
] - doc: update documentation for FIPS support (Richard Lau) #48194 - [
f2bb1919e5
] - doc: improve the documentation of the stdio option (Kumar Arnav) #48110 - [
a2aa52ba92
] - doc: update Buffer.allocUnsafe description (sinkhaha) #48183 - [
19ad471d52
] - doc: update codeowners with website team (Claudio Wunder) #48197 - [
67b2c2a98f
] - doc: fix broken link to new folder doc/contributing/maintaining (Andrea Fassina) #48205 - [
795ca70815
] - doc: add atlowChemi to triagers (Chemi Atlow) #48104 - [
e437a0aff1
] - doc: fix typo in readline completer function section (Vadym) #48188 - [
92e0ea496d
] - doc: remove broken link for keygen (Rich Trott) #48176 - [
fe15dae8e6
] - doc: addauto
intrinsic height to prevent jitter/flicker (Daniel Holbert) #48195 - [
230335e21f
] - doc: add version info on the SEA docs (Antoine du Hamel) #48173 - [
e6f37d1b80
] - doc: add Ruy to list of TSC members (Michael Dawson) #48172 - [
69205a250c
] - doc: update socket.remote* properties documentation (Saba Kharanauli) #48139 - [
e4a5d6298c
] - doc: update outdated section on TLSv1.3-PSK (Tobias Nießen) #48123 - [
d14018ed99
] - doc: improve HMAC key recommendations (Tobias Nießen) #48121 - [
e9d4baf770
] - doc: clarify mkdir() recursive behavior (Stephen Odogwu) #48109 - [
3e4a469139
] - doc: fix typo in crypto legacy streams API section (Tobias Nießen) #48122 - [
bdf366ab88
] - doc: update SEA source link (Rich Trott) #48080 - [
2a4f79a75f
] - doc: clarify tty.isRaw (Roberto Vidal) #48055 - [
98c6e4be03
] - doc: use secure key length for HMAC generateKey (Tobias Nießen) #48052 - [
8ae5c8cf9d
] - doc: update broken EVP_BytesToKey link (Rich Trott) #48064 - [
3c713e7caa
] - doc: update broken spkac link (Rich Trott) #48063 - [
c22f739e94
] - doc: document node-api version process (Chengzhong Wu) #47972 - [
ce859f9f9f
] - doc: fix typo in binding functions (Deokjin Kim) #48003 - [
070c3457b7
] - doc: mark Node.js 14 as End-of-Life (Richard Lau) #48023 - [
3611027d8e
] - doc: clarify CRYPTO_CUSTOM_ENGINE_NOT_SUPPORTED (Tobias Nießen) #47976 - [
dbffad958c
] - doc: add missing deprecated blocks to cluster (Tobias Nießen) #47981 - [
035356f711
] - doc: update description of global (Tobias Nießen) #47969 - [
081a6ffaea
] - doc: update measure memory rejection information (Yash Ladha) #41639 - [
3460cf9c23
] - doc: fix broken link to TC39 import attributes proposal (Rich Trott) #47954 - [
3b018c8aa9
] - doc: fix broken link (Rich Trott) #47953 - [
244db960a9
] - doc: remove broken link (Rich Trott) #47942 - [
2cc8715bb9
] - doc: document make lint-md-clean (Matteo Collina) #47926 - [
b80e006c17
] - doc: mark global object as legacy (Mert Can Altın) #47819 - [
bf4eb058f3
] - doc: ntfs junction points must link to directories (Ben Noordhuis) #47907 - [
49875f0d69
] - doc: fix params names (Dmitry Semigradsky) #47853 - [
94b5eaaf17
] - doc: update supported version of FreeBSD to 12.4 (Michaël Zasso) #47838 - [
0114201825
] - doc: swap Matteo with Rafael in the stewards (Rafael Gonzaga) #47841 - [
8bcfcc0af9
] - doc: add valgrind suppression details (Kevin Eady) #47760 - [
75d397ecab
] - doc: replace EOL versions in README (Tobias Nießen) #47833 - [
2b0c57cb80
] - doc: add ovflowd to collaborators (Claudio Wunder) #47844 - [
be4966977c
] - doc: update BUILDING.md previous versions links (Tobias Nießen) #47835 - [
a9e8a20fb8
] - doc: create maintaining folder for deps (Marco Ippolito) #47589 - [
fd0f362d7c
] - doc: remove MoLow from Triagers (Moshe Atlow) #47792 - [
0927c67ab6
] - doc: fix typo in webstreams.md (Christian Takle) #47766 - [
994be578da
] - doc: move BethGriggs to regular member (Rich Trott) #47776 - [
64d19f4678
] - doc: move addaleax to TSC emeriti (Anna Henningsen) #47752 - [
33ec10e6b8
] - doc: add link to news for Node.js core (Michael Dawson) #47704 - [
2a682b5efe
] - doc: async_hooks asynchronous content example add mjs code (btea) #47401 - [
4f541c3ca3
] - doc: clarify concurrency model of test runner (Tobias Nießen) #47642 - [
ffcff68f0d
] - doc: fix typos (Mohammed Keyvanzadeh) #47685 - [
290b2b7afc
] - doc: fix capitalization of ASan (Mohammed Keyvanzadeh) #47676 - [
b4ca788878
] - doc: fix typos in SECURITY.md (Mohammed Keyvanzadeh) #47677 - [
971c545a47
] - doc: update error code of buffer (Deokjin Kim) #47617 - [
ec5c919928
] - doc: change offset of example inBuffer.copyBytesFrom
(Deokjin Kim) #47606 - [
980bf052c7
] - doc: remove markdown link from heading (Tobias Nießen) #47585 - [
e96451ec5e
] - doc: fix release-post script location (Rafael Gonzaga) #47517 - [
61ea15339c
] - doc: add link for news from uvwasi team (Michael Dawson) #47531 - [
d40bcdd73e
] - doc: add missing setEncoding call in ESM example (Anna Henningsen) #47558 - [
924dc909b3
] - doc: fix typo in util.types.isNativeError() (Julian Dax) #47532 - [
a24d72a6fb
] - doc: add KhafraDev to collaborators (Matthew Aitken) #47510 - [
b0196378b6
] - doc: create maintaining-brotli.md (Marco Ippolito) #47380 - [
3902be8fe8
] - doc: info on handling unintended breaking changes (Michael Dawson) #47426 - [
670f9a591d
] - doc: add performance initiative (Yagiz Nizipli) #47424 - [
89a5d04a8e
] - doc: do not create a backup file (Luigi Pinca) #47151 - [
7f2bccc5d6
] - doc: add MoLow to the TSC (Colin Ihrig) #47436 - [
7db2e889ac
] - doc: add a note about os.cpus() returning an empty list (codedokode) #47363 - [
289a8e30d6
] - doc: clarify reports are only evaluated on active versions (Rafael Gonzaga) #47341 - [
dc22edb4d2
] - doc: remove Vladimir de Turckheim from Security release stewards (Vladimir de Turckheim) #47318 - [
3e74a74da3
] - doc: add importing util to example of `process.report.getReport' (Deokjin Kim) #47298 - [
ece029f64e
] - doc: vm.SourceTextModule() without context option (Axel Kittenberger) #47295 - [
c7227204cc
] - doc: document process for sharing project news (Michael Dawson) #47189 - [
2865cbb4bd
] - doc: revise example of assert.CallTracker (Deokjin Kim) #47252 - [
81ebaf2670
] - doc: fix typo in SECURITY.md (Rich Trott) #47282 - [
faabd48f11
] - doc: use serial comma in cli docs (Tobias Nießen) #47262 - [
3a85794089
] - doc: improve example for Error.captureStackTrace() (Julian Dax) #46886 - [
2114fa472b
] - doc: clarify http error events after calling destroy() (Zach Bjornson) #46903 - [
d15f522d1f
] - doc: update output of example in AbortController (Deokjin Kim) #47227 - [
ab6588e343
] - doc: drop one-week branch sync on major releases (Rafael Gonzaga) #47149 - [
6ac52e3061
] - doc: fix grammar in the collaborator guide (Mohammed Keyvanzadeh) #47245 - [
13175774a6
] - doc: update stream.reduce concurrency note (Raz Luvaton) #47166 - [
1e97ccd6d4
] - doc: remove use of DEFAULT_ENCODING in PBKDF2 docs (Tobias Nießen) #47181 - [
d562a7c461
] - doc: fix typos in async_context.md (Shubham Sharma) #47155 - [
9a11788cdf
] - doc: update collaborator guide to reflect TSC changes (Rich Trott) #47126 - [
5fc2bb763f
] - doc: clarify thatfs.create{Read,Write}Stream
supportAbortSignal
(Antoine du Hamel) #47122 - [
2dd3b0213e
] - doc: improve documentation for util.types.isNativeError() (Julian Dax) #46840 - [
ce4636e36b
] - doc: rename the startup performance initiative to startup snapshot (#47111) (Joyee Cheung) - [
309d017f15
] - doc: fix "maintaining dependencies" heading typos (Keyhan Vakil) #47082 - [
230a984eb3
] - doc: include webstreams in finished() and Duplex.from() parameters (Debadree Chatterjee) #46312 - [
8651ea822e
] - doc,fs: update description of fs.stat() method (Mert Can Altın) #47654 - [
e4539e1f19
] - doc,test: update the v8.startupSnapshot doc and test the example (Joyee Cheung) #47468 - [
3dddc0175f
] - doc,test: fix concurrency option of test() (Tobias Nießen) #47734 - [
563f9fe06a
] - doc,vm: clarify usage of cachedData in vm.compileFunction() (Darshan Sen) #48193 - [
316016ffac
] - esm: avoid accessing lazy getters for urls (Yagiz Nizipli) #47542 - [
e5e385d2b2
] - esm: increase test coverage of edge cases (Antoine du Hamel) #47033 - [
061fb20660
] - (SEMVER-MINOR) events: add getMaxListeners method (Matthew Aitken) #47039 - [
ed0b62cc01
] - (SEMVER-MINOR) fs: add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084 - [
9b44c56c9a
] - fs: make readdir recursive algorithm iterative (Ethan Arrowood) #47650 - [
7273ef53b3
] - (SEMVER-MINOR) fs: add recursive option to readdir and opendir (Ethan Arrowood) #41439 - [
3f0636d2c1
] - (SEMVER-MINOR) fs: add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084 - [
a0b9853251
] - (SEMVER-MINOR) fs: implement byob mode for readableWebStream() (Debadree Chatterjee) #46933 - [
709e368708
] - http: send implicit headers on HEAD with no body (Matteo Collina) #48108 - [
dc318f26c0
] - (SEMVER-MINOR) http: prevent writing to the body when not allowed by HTTP spec (Gerrard Lindsay) #47732 - [
4b2a015642
] - (SEMVER-MINOR) http: remove internal error in assignSocket (Matteo Collina) #47723 - [
7cef6aa721
] - (SEMVER-MINOR) http: add highWaterMark opt in http.createServer (HinataKah0) #47405 - [
9186f3a0ef
] - http2: improve nghttp2 error callback (Tobias Nießen) #47840 - [
cc7e5dd4cd
] - inspector: add tips for Session (theanarkh) #47195 - [
70c0e882d3
] - inspector: log response and requests in the inspector for debugging (Joyee Cheung) #46941 - [
6099d2d08b
] - inspector: fix session.disconnect crash (theanarkh) #46942 - [
156292d44a
] - lib: create weakRef only if any signals provided (Chemi Atlow) #48448 - [
efaa073303
] - (SEMVER-MINOR) lib: implement AbortSignal.any() (Chemi Atlow) #47821 - [
c46b31f3bf
] - lib: support FORCE_COLOR for non TTY streams (Moshe Atlow) #48034 - [
286c358832
] - lib: do not disable linter for entire files (Antoine du Hamel) #48299 - [
a2552ab7c0
] - lib: use existingisWindows
variable (sinkhaha) #48134 - [
2b65625281
] - lib: update comment (sinkhaha) #47884 - [
fa447b5120
] - lib: use webidl DOMString converter in EventTarget (Matthew Aitken) #47514 - [
33f32dc318
] - lib: define Event.isTrusted in the prototype (Santiago Gimeno) #46974 - [
50789a5e4a
] - lib: refactor to usevalidateBuffer
(Deokjin Kim) #46489 - [
3658abea26
] - (SEMVER-MINOR) lib: add webstreams to Duplex.from() (Debadree Chatterjee) #46190 - [
fcf3781d22
] - lib,src,test: lint codebase according new rules for v18.x (Juan José Arboleda) #48697 - [
b55dc53422
] - meta: bump github/codeql-action from 2.3.3 to 2.3.6 (dependabot[bot]) #48287 - [
8ac4579d85
] - meta: bump actions/setup-python from 4.6.0 to 4.6.1 (dependabot[bot]) #48286 - [
b1854fe9c1
] - meta: bump codecov/codecov-action from 3.1.3 to 3.1.4 (dependabot[bot]) #48285 - [
d9448b8d93
] - meta: remove dont-land-on-v14 auto labeling (Shrujal Shah) #48031 - [
bb859768b6
] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #48010 - [
af90fb939b
] - meta: bump step-security/harden-runner from 2.3.1 to 2.4.0 (Rich Trott) #47980 - [
4dcf5e2052
] - meta: bump github/codeql-action from 2.3.2 to 2.3.3 (Rich Trott) #47979 - [
dab3186ea2
] - meta: bump actions/setup-python from 4.5.0 to 4.6.0 (Rich Trott) #47968 - [
546224c13c
] - meta: add security-wg ping to permission.js (Rafael Gonzaga) #47941 - [
353dfbd2d6
] - meta: bump step-security/harden-runner from 2.2.1 to 2.3.1 (dependabot[bot]) #47808 - [
20a5cc27ec
] - meta: bump actions/setup-python from 4.5.0 to 4.6.0 (dependabot[bot]) #47806 - [
eef6442d8d
] - meta: bump actions/checkout from 3.3.0 to 3.5.2 (dependabot[bot]) #47805 - [
e30e6a718a
] - meta: remove extra space in scorecard workflow (Mestery) #47805 - [
2d13cdebc4
] - meta: bump github/codeql-action from 2.2.9 to 2.3.2 (dependabot[bot]) #47809 - [
f0d8352ed8
] - meta: bump codecov/codecov-action from 3.1.1 to 3.1.3 (dependabot[bot]) #47807 - [
7e95fba0ff
] - meta: fix dependabot commit message (Mestery) #47810 - [
d31d9c7c28
] - meta: ping nodejs/startup for startup test changes (Joyee Cheung) #47771 - [
077686055b
] - meta: add mailmap entry for KhafraDev (Rich Trott) #47512 - [
e50eb6570a
] - meta: ping security-wg team on permission model changes (Rafael Gonzaga) #47483 - [
2df1a36214
] - meta: ping startup and realm team on src/node_realm* changes (Joyee Cheung) #47448 - [
c7dc6e321b
] - meta: fix notable-change comment label url (Filip Skokan) #47300 - [
e859ca44d5
] - meta: clarify the threat model to explain the JSON.parse case (Matteo Collina) #47276 - [
1f08f4848d
] - meta: update link to collaborators discussion page (Michaël Zasso) #47211 - [
3b524cbf86
] - meta: automate description requests when notable change label is added (Danielle Adams) #47078 - [
da16ca7c59
] - meta: move TSC voting member(s) to regular member(s) (Node.js GitHub Bot) #47180 - [
0c80e60d7e
] - meta: move TSC voting member to regular membership (Node.js GitHub Bot) #46985 - [
0edcfed895
] - meta: update GOVERNANCE.md to reflect TSC charter changes (Rich Trott) #47126 - [
baada5d035
] - meta: ask expected behavior reason in bug template (Ben Noordhuis) #47049 - [
5d75ec402e
] - module: reduce the number of URL initializations (Yagiz Nizipli) #48272 - [
c5af5a4f4f
] - module: change default resolver to not throw on unknown scheme (Gil Tayar) #47824 - [
cf8845d001
] - module: block requiringtest/reporters
without scheme (Moshe Atlow) #47831 - [
ce7e6c6765
] - (SEMVER-MINOR) node-api: define version 9 (Chengzhong Wu) #48151 - [
53c02b20b8
] - node-api: add status napi_cannot_run_js (Gabriel Schulhof) #47986 - [
4b280d5361
] - node-api: napi_ref on all types is experimental (Vladimir Morozov) #47975 - [
e2553b12e7
] - (NODE-API-SEMVER-MAJOR) node-api: get Node API version used by addon (Vladimir Morozov) #45715 - [
beaad7f692
] - node-api: test passing NULL to napi_define_class (Gabriel Schulhof) #47567 - [
6ab892780c
] - node-api: test passing NULL to number APIs (Gabriel Schulhof) #47549 - [
a67e5ea89c
] - node-api: remove unused mark_arraybuffer_as_untransferable (Chengzhong Wu) #47557 - [
7019d48ba1
] - (SEMVER-MINOR) node-api: deprecate napi_module_register (Vladimir Morozov) #46319 - [
395c56bd7c
] - node-api: extend type-tagging to externals (Gabriel Schulhof) #47141 - [
6e66371eee
] - node-api: document node-api shutdown finalization (Chengzhong Wu) #45903 - [
d8d2d33efb
] - node-api: verify cleanup hooks order (Chengzhong Wu) #46692 - [
b34eaf393e
] - path: indicate index of wrong resolve() parameter (sosoba) #47660 - [
13bc5488a1
] - permission: remove unused function declaration (Deokjin Kim) #47957 - [
5f8aef477e
] - quic: address recent coverity warning (Michael Dawson) #47753 - [
75d7024ecd
] - quic: add more QUIC implementation (James M Snell) #47494 - [
24840832bd
] - quic: add more QUIC impl (James M Snell) #47348 - [
114b8479b4
] - readline: fix issue with newline-less last line (Ian Harris) #47317 - [
e668efac6b
] - repl: preserve preview on ESCAPE key press (Xuguang Mei) #46878 - [
7306b0f733
] - sea: fix memory leak detected by asan (Darshan Sen) #47309 - [
1f2c91f98a
] - src: use std::array for passing argv in node::url (Anna Henningsen) #47035 - [
36bf06904f
] - src: add Realm document in the src README.md (Chengzhong Wu) #47932 - [
5445835671
] - src: check node_extra_ca_certs after openssl cfg (Raghu Saxena) #48159 - [
eb96856555
] - src: include missing header in node_sea.h (Joyee Cheung) #48152 - [
2a35462045
] - src: deduplicate X509Certificate::Fingerprint* (Tobias Nießen) #47978 - [
4c556816bd
] - src: move BlobSerializerDeserializer to a separate header file (Darshan Sen) #47933 - [
4bad757012
] - src: rename SKIP_CHECK_SIZE to SKIP_CHECK_STRLEN (Tobias Nießen) #47845 - [
33daa89dac
] - src: register ext reference for Fingerprint512 (Tobias Nießen) #47892 - [
30b7133008
] - src: clarify the parameter name inPermission::Apply
(Daeyeon Jeong) #47874 - [
274c0f2e0a
] - src: avoid strcmp() with Utf8Value (Tobias Nießen) #47827 - [
559c98f468
] - src: prefer data accessor of string and vector (Mohammed Keyvanzadeh) #47750 - [
933673de61
] - src: avoid copying string in fs_permission (Yagiz Nizipli) #47746 - [
77f2b97197
] - src: fix typo in comment in quic/sessionticket.cc (Tobias Nießen) #47754 - [
8e6af9fcf4
] - src: mark fatal error functions as noreturn (Chengzhong Wu) #47695 - [
d0ad873b0e
] - src: prevent changing FunctionTemplateInfo after publish (Shelley Vohr) #46979 - [
71fb476781
] - src: use v8::Boolean(b) over b ? True() : False() (Tobias Nießen) #47554 - [
175b78bc02
] - src: fix typo in process.env accessor error message (Moritz Raho) #47014 - [
2c2b6d1661
] - src: replace static const string_view by static constexpr (Daniel Lemire) #47524 - [
3840bb586e
] - src: fix CSMRNG when length exceeds INT_MAX (Tobias Nießen) #47515 - [
f6aa38dc5f
] - src: use correct variable in node_builtins.cc (Michaël Zasso) #47343 - [
e88e249838
] - src: slim down stream_base-inl.h (lilsweetcaligula) #46972 - [
b34de64442
] - src: allow simdutf::convert_* functions to return zero (Daniel Lemire) #47471 - [
ded4a5eb8f
] - src: remove usage ofstd::shared_ptr<T>::unique()
(Darshan Sen) #47315 - [
0fbfb28cf5
] - src: use stricter compile-time guidance (Tobias Nießen) #46509 - [
a8430ad211
] - src: remove unused variable in crypto_x509.cc (Michaël Zasso) #47344 - [
24dabf8965
] - src: don't reset embeder signal handlers (Dmitry Vyukov) #47188 - [
4add36872c
] - src: replace impossible THROW with CHECK (Tobias Nießen) #47168 - [
e1007ff6a8
] - src: remove dead comments about return_code_cache (Keyhan Vakil) #47083 - [
5501d12713
] - src: remove SSL_CTX_get_tlsext_ticket_keys guards (Tobias Nießen) #47068 - [
716d289874
] - src: fix clang 14 linker error (Keyhan Vakil) #47057 - [
8809adfdb6
] - src: clarify OptionEnvvarSettings member names (Chengzhong Wu) #45057 - [
05f5c79574
] - src: per-realm binding data (Chengzhong Wu) #46556 - [
a7620d19c8
] - src,http2: ensure cleanup if a frame is not sent (ywave620) #47244 - [
585d62848e
] - stream: deprecate asIndexedPairs (Chemi Atlow) #48102 - [
d3449ca010
] - stream: prevent pipeline hang with generator functions (Debadree Chatterjee) #47712 - [
5e4b2434a6
] - (SEMVER-MINOR) stream: preserve object mode in compose (Raz Luvaton) #47413 - [
912eb308ab
] - (SEMVER-MINOR) stream: add setter & getter for default highWaterMark (#46929) (Robert Nagy) #46929 - [
c59887744a
] - stream: expose stream symbols (Robert Nagy) #45671 - [
4edc1abf0b
] - stream: dont wait for next item in take when finished (Raz Luvaton) #47132 - [
cfb18d816d
] - stream: remove brandchecks from stream duplexify (Debadree Chatterjee) #46315 - [
9d4025c411
] - test: mark test-child-process-pipe-dataflow as flaky (Moshe Atlow) #48334 - [
c29b6874d4
] - test: unflake test-vm-timeout-escape-nexttick (Santiago Gimeno) #48078 - [
0e3312b01b
] - test: fix zlib version regex (Luigi Pinca) #48227 - [
a9d0b8d005
] - test: use lower security level in s_client (Luigi Pinca) #48192 - [
7250d8c2f1
] - Revert "test: unskip negative-settimeout.any.js WPT" (Filip Skokan) #48182 - [
18476697bd
] - test: mark test_cannot_run_js as flaky (Keyhan Vakil) #48181 - [
446f6118ff
] - test: fix flaky test-runner-watch-mode (Moshe Atlow) #48144 - [
7fa144e3fe
] - test: skip test-http-pipeline-flood on IBM i (Abdirahim Musse) #48048 - [
5c5b1d2867
] - test: ignore helper files in WPTs (Filip Skokan) #48079 - [
3b2cee071b
] - test: movetest-cluster-primary-error
flaky test (Yagiz Nizipli) #48039 - [
7b816b4922
] - test: fix suite signal (Benjamin Gruenbaum) #47800 - [
ca4a0e3717
] - test: fix parsing test flags (Daeyeon Jeong) #48012 - [
a3f0504556
] - test: mark test-esm-loader-http-imports as flaky (Tobias Nießen) #47987 - [
ab36a30143
] - test: unskip negative-settimeout.any.js WPT (Filip Skokan) #47946 - [
7c80439b21
] - test: use appropriate usages for a negative import test (Filip Skokan) #47878 - [
81d8d95ba0
] - test: fix webcrypto wrap unwrap tests (Filip Skokan) #47876 - [
1b84e85576
] - test: fix output tests when path includes node version (Moshe Atlow) #47843 - [
95972aac8d
] - test: migrate a pseudo_tty test to use assertSnapshot (Moshe Atlow) #47803 - [
f1e131283d
] - test: fix WPT state when process exits but workers are still running (Filip Skokan) #47826 - [
03dcf7bc94
] - test: migrate message tests to use assertSnapshot (Moshe Atlow) #47498 - [
dedbeee336
] - test: refactor to usegetEventListeners
in timers (Deokjin Kim) #47759 - [
11a2d1c4e4
] - test: add and use tmpdir.hasEnoughSpace() (Tobias Nießen) #47767 - [
d669714e57
] - test: remove spaces from test runner test names (Tobias Nießen) #47733 - [
3a9c43a6d7
] - test: mark test-cluster-primary-error flaky on asan (Yagiz Nizipli) #47422 - [
bd1eb14cb0
] - test: remove unnecessary status check on test-release-npm (RafaelGSS) #47516 - [
914f68d953
] - test: mark test/parallel/test-file-write-stream4 as flaky (Yagiz Nizipli) #47423 - [
7c4178cb11
] - test: remove unused callback variables (angellovc) #47167 - [
d0bda902dc
] - test: migrate test runner message tests to snapshot (Moshe Atlow) #47392 - [
095ca5ccf2
] - test: remove stale entry from known_issues.status (Richard Lau) #47454 - [
8820d5415b
] - test: move more inspector sequential tests to parallel (Joyee Cheung) #47412 - [
f6ef5c4ad3
] - test: use random port in test-inspector-enabled (Joyee Cheung) #47412 - [
e97ceeca69
] - test: use random port in test-inspector-debug-brk-flag (Joyee Cheung) #47412 - [
a2e4643981
] - test: use random port in NodeInstance.startViaSignal() (Joyee Cheung) #47412 - [
a779261732
] - test: fix flaky test-watch-mode-inspect (Moshe Atlow) #47403 - [
116df2ad3e
] - test: move debugger tests with --port=0 to parallel (Joyee Cheung) #47274 - [
016b8bd27d
] - test: use --port=0 in debugger tests that do not have to work on 9229 (Joyee Cheung) #47274 - [
3c157cb7a3
] - test: run doctool tests in parallel (Joyee Cheung) #47273 - [
44f08ed941
] - test: move test-shadow-realm-gc.js to known_issues (Joyee Cheung) #47355 - [
e2b5d968c3
] - test: update wasm/jsapi WPT (Michaël Zasso) #47210 - [
53d9eb5950
] - test: skip test-wasm-web-api on ARM (Michaël Zasso) #47299 - [
b620f5fcd6
] - test: skip instantiateStreaming-bad-imports WPT (Michaël Zasso) #47292 - [
1e6fe56333
] - test: fix test-child-process-exec-cwd (Stefan Stojanovic) #47235 - [
0dc4971aab
] - test: skip broken tests win arm64 (Stefan Stojanovic) #47020 - [
6fee6050e3
] - test: fix 'checks' validation test for checkPrime (Tobias Nießen) #47139 - [
6b85472f01
] - test: update URL web-platform-tests (Yagiz Nizipli) #47135 - [
732a98e1ba
] - test: reduce flakiness of test-http-remove-header-stays-removed.js (Debadree Chatterjee) #46855 - [
713b412ee9
] - test: mark test-http-max-sockets as flaky on win32 (Tobias Nießen) #47134 - [
b3b7dbc395
] - test: update web-platform tests for url (Xuguang Mei) #46860 - [
2edd0fdb5b
] - test: mark test-child-process-stdio-reuse-readable-stdio flaky (Luigi Pinca) #48537 - [
fae240e492
] - test: mark test-child-process-pipe-dataflow as flaky (Moshe Atlow) #48334 - [
9ca3cc0f2a
] - test: remove useless require('../common') from WPTs (Filip Skokan) #46796 - [
4bece055a5
] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #47921 - [
7ef169b706
] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #47222 - [
873606b355
] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #47131 - [
8f1fc0bc99
] - test,doc,sea: run SEA tests on ppc64 (Darshan Sen) #48111 - [
5d910ca389
] - test_runner: add enqueue and dequeue events (Moshe Atlow) #48428 - [
d795c0ab0c
] - test_runner: dont split lines ontest:stdout
(Moshe Atlow) #48057 - [
04eb1f85da
] - test_runner: pass FORCE_COLOR to child process (Moshe Atlow) #48057 - [
2262653148
] - test_runner: applyrunOnly
on suites (Moshe Atlow) #48279 - [
033d0bb3e1
] - test_runner: emittest:watch:drained
event (Moshe Atlow) #48259 - [
618a9e1c09
] - test_runner: stop watch mode when abortSignal aborted (Moshe Atlow) #48259 - [
6a82fbd006
] - test_runner: fix global after hook (Moshe Atlow) #48231 - [
d1295d7b10
] - test_runner: remove redundant check from coverage (Colin Ihrig) #48070 - [
47602fe73b
] - test_runner: fix test deserialize edge cases (Moshe Atlow) #48106 - [
b18a78cd0b
] - test_runner: delegate stderr and stdout formatting to reporter (Shiba) #48045 - [
e0d0b19c30
] - test_runner: display dot report as wide as the terminal width (Raz Luvaton) #48038 - [
bdca468a79
] - test_runner: use v8.serialize instead of TAP (Moshe Atlow) #47867 - [
866ed6a887
] - (SEMVER-MINOR) test_runner: add shorthands totest
(Chemi Atlow) #47909 - [
4737314865
] - test_runner: fix ordering of test hooks (Phil Nash) #47931 - [
ea543d95f6
] - test_runner: omit inaccessible files from coverage (Colin Ihrig) #47850 - [
8398bca842
] - test_runner: fix --require with --experimental-loader (Moshe Atlow) #47751 - [
4c0036ba1b
] - (SEMVER-MINOR) test_runner: support combining coverage reports (Colin Ihrig) #47686 - [
cb3abda9aa
] - test_runner: remove no-op validation (Colin Ihrig) #47687 - [
323881f60b
] - test_runner: fix test runner concurrency (Moshe Atlow) #47675 - [
3bbb1fc990
] - test_runner: fix test counting (Moshe Atlow) #47675 - [
0ea63717ba
] - test_runner: fix nested hooks (Moshe Atlow) #47648 - [
fa18b17d88
] - test_runner: add testNamePatterns to run api (atlowChemi) #47648 - [
2033691bfc
] - test_runner: support coverage of unnamed functions (Colin Ihrig) #47652 - [
882c6127ae
] - test_runner: move coverage collection to root.postRun() (Colin Ihrig) #47651 - [
e97eefa538
] - (SEMVER-MINOR) test_runner: execute before hook on test (Chemi Atlow) #47586 - [
4bce39108c
] - test_runner: avoid reporting parents of failing tests in summary (Moshe Atlow) #47579 - [
688078b93a
] - test_runner: fix spec skip detection (Moshe Atlow) #47537 - [
0b32a8c8a3
] - test_runner: color errors only when colors are available (Moshe Atlow) #47394 - [
d5fc8236bf
] - test_runner: hide failing tests title when all tests pass (Moshe Atlow) #47370 - [
1d453e4d31
] - test_runner: stringify AssertError expected and actual (Moshe Atlow) #47088 - [
99312a55f2
] - test_runner: add code coverage support to spec reporter (Pulkit Gupta) #46674 - [
2091b4718f
] - (SEMVER-MINOR) test_runner: expose reporter for use in run api (Chemi Atlow) #47238 - [
9cbf89717e
] - test_runner: report failing tests after summary (HinataKah0) #47164 - [
460bcc042e
] - test_runner: count nested tests (Moshe Atlow) #47094 - [
c62e6b2e54
] - test_runner: accept \x1b as a escape symbol (Debadree Chatterjee) #47050 - [
ddf819f810
] - test_runner: support defining test reporter in NODE_OPTIONS (Steve Herzog) #46688 - [
e049ce296a
] - tls: reapply servername on happy eyeballs connect (Fedor Indutny) #48255 - [
19b0f244b2
] - tls: accept SecureContext object in server.addContext() (HinataKah0) #47570 - [
7786d7cece
] - tools: pin ruff version number (Rich Trott) #48505 - [
a2bfe02289
] - tools: remove non-existing file from CODEOWNERS file (Juan José Arboleda) #48697 - [
87562c9af0
] - tools: update rollup lint-md-dependencies (Node.js GitHub Bot) #48329 - [
1cde4a4299
] - Revert "tools: open issue when update workflow fails" (Marco Ippolito) #48312 - [
361cf8cffc
] - tools: don't gitignore base64 config.h (Ben Noordhuis) #48174 - [
0cfdb3affa
] - tools: update LICENSE and license-builder.sh (Santiago Gimeno) #48078 - [
715cf81b4a
] - tools: automate histogram update (Marco Ippolito) #48171 - [
d9afffab03
] - tools: use shasum instead of sha256sum (Luigi Pinca) #48229 - [
1a5cddfc1f
] - tools: harmonizedep_updaters
scripts (Antoine du Hamel) #48201 - [
24abe07dda
] - tools: log and verify sha256sum (Andrea Fassina) #48088 - [
9aed8683aa
] - tools: open issue when update workflow fails (Marco Ippolito) #48018 - [
4c5c63fd82
] - tools: alphabetize CODEOWNERS (Rich Trott) #48124 - [
9b849a7270
] - tools: use latest upstream commit for zlib updates (Andrea Fassina) #48054 - [
e18c1258ae
] - tools: add security-wg as dep updaters owner (Marco Ippolito) #48113 - [
999a289dd9
] - tools: fix race condition when npm installing (Tobias Nießen) #48101 - [
25b0033b86
] - tools: refloat 7 Node.js patches to cpplint.py (Rich Trott) #48098 - [
87b36b3a8a
] - tools: update cpplint to 1.6.1 (Yagiz Nizipli) #48098 - [
64ff6fe443
] - tools: update eslint to 8.41.0 (Node.js GitHub Bot) #48097 - [
739c314851
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #48096 - [
6674ed1901
] - tools: update doc to [email protected] (Node.js GitHub Bot) #48095 - [
0b0818caab
] - tools: add debug logs (Marco Ippolito) #48060 - [
168d080f40
] - tools: fix zconf.h path (Luigi Pinca) #48089 - [
ccd2795f42
] - tools: update remark-preset-lint-node to 4.0.0 (Node.js GitHub Bot) #47995 - [
89e068a550
] - tools: debug log for nghttp3 (Marco Ippolito) #47992 - [
3bf2bd4ec6
] - tools: automate icu-small update (Marco Ippolito) #47727 - [
fdf9681dc0
] - tools: update lint-md-dependencies to [email protected] (Node.js GitHub Bot) #47903 - [
52532c2cb1
] - tools: update eslint to 8.40.0 (Node.js GitHub Bot) #47906 - [
951cc7b624
] - tools: update eslint to 8.39.0 (Node.js GitHub Bot) #47789 - [
706c87db50
] - tools: fix jsdoc lint (Moshe Atlow) #47789 - [
8eef5f5f5f
] - tools: update doc to [email protected] (Node.js GitHub Bot) #47786 - [
899eea6237
] - tools: update lint-md-dependencies to [email protected] (Node.js GitHub Bot) #47787 - [
8ca50b6ac9
] - tools: move update-npm to dep updaters (Marco Ippolito) #47619 - [
5ee554397d
] - tools: fix update-v8-patch cache (Marco Ippolito) #47725 - [
4e0d19e1bd
] - tools: automate v8 patch update (Marco Ippolito) #47594 - [
64c3154bdf
] - tools: fix skip message in update-cjs-module-lexer (Tobias Nießen) #47701 - [
6535ab90d9
] - tools: update lint-md-dependencies to @rollup/plugin-commonjs@24.1.0 (Node.js GitHub Bot) #47577 - [
7cfc00d072
] - tools: keep MR titles/description up-to-date (Tobias Nießen) #47621 - [
d6b555e2c8
] - tools: fix updating root certificates (Richard Lau) #47607 - [
0d3e3ddea6
] - tools: update MR label config (Mohammed Keyvanzadeh) #47593 - [
fa52c472b8
] - tools: add execution permission to uvwasi script (Mert Can Altın) #47600 - [
f6955a6b0c
] - tools: add update script for googletest (Tobias Nießen) #47482 - [
4e1d87e752
] - tools: add option to run workflow with specific tool id (Michaël Zasso) #47591 - [
e605402590
] - tools: automate zlib update (Marco Ippolito) #47417 - [
b6ca57e8d0
] - tools: add url and whatwg-url labels automatically (Yagiz Nizipli) #47545 - [
d5c9bc4f8e
] - tools: add performance label to benchmark changes (Yagiz Nizipli) #47545 - [
c5227628a9
] - tools: automate uvwasi dependency update (Ranieri Innocenti Spada) #47509 - [
5ffdb57302
] - tools: add missing pinned dependencies (Mateo Nunez) #47346 - [
c7b898d4e4
] - tools: automate ngtcp2 and nghttp3 update (Marco Ippolito) #47402 - [
e696a48225
] - tools: move update-undici.sh to dep_updaters and create maintain md (Marco Ippolito) #47380 - [
056067286a
] - tools: makejs2c.py
usable for other build systems (Cheng Zhao) #46930 - [
d11c6ba2eb
] - tools: move update-acorn.sh to dep_updaters and create maintaining md (Marco Ippolito) #47382 - [
0a65c7c300
] - tools: update eslint to 8.38.0 (Node.js GitHub Bot) #47475 - [
60dc249cd5
] - tools: update eslint to 8.38.0 (Node.js GitHub Bot) #47475 - [
1271b0eded
] - tools: automate cjs-module-lexer dependency update (Marco Ippolito) #47446 - [
26905572d4
] - tools: fix notify-on-push Slack messages (Antoine du Hamel) #47453 - [
3c62663797
] - tools: update lint-md-dependencies to @rollup/plugin-node-resolve@15.0.2 (Node.js GitHub Bot) #47431 - [
c57dabe360
] - tools: add root certificate update script (Richard Lau) #47425 - [
f27680e37c
] - tools: fix update-openssl.yml compare version (Marco Ippolito) #47384 - [
35e6cf2944
] - tools: use ref_name to get branch pushed on (Debadree Chatterjee) #47358 - [
28935a86f8
] - tools: add a at here tag for slack messages (Debadree Chatterjee) #47358 - [
e1846ee4f1
] - tools: disable Codecov commit statuses (Michaël Zasso) #47306 - [
d1c8229da4
] - tools: update eslint to 8.37.0 (Node.js GitHub Bot) #47333 - [
6ab22151c4
] - tools: fix duration_ms to be milliseconds (Moshe Atlow) #44490 - [
5d46c594a7
] - tools: automate brotli update (Marco Ippolito) #47205 - [
d324c15227
] - tools: fix typo in nghttp2 path (Marco Ippolito) #47330 - [
b1bcdceef5
] - tools: add scorecard workflow (Mateo Nunez) #47254 - [
281362bcc2
] - tools: pin actions by hash for auto-start-ci.yml (Gabriela Gutierrez) #46820 - [
6cae1bd377
] - tools: standardize base64 update (Marco Ippolito) #47201 - [
a682bd0714
] - tools: update codecov branch (Rich Trott) #47285 - [
1061e17c66
] - tools: standardize update-llhttp.sh (Marco Ippolito) #47198 - [
9781185943
] - tools: upgrade Windows digital signature to SHA256 (Tobias Nießen) #47206 - [
37638e43c5
] - tools: add button to copy code example to clipboard (jakecastelli) #46928 - [
05cb503f02
] - tools: standardize update-nghttp2.sh (Marco Ippolito) #47197 - [
816e215701
] - tools: fix Slack notification action (Antoine du Hamel) #47237 - [
9ac01ecc59
] - tools: notify on Slack when invalid commit lands (Antoine du Hamel) #47178 - [
13eb029b4f
] - tools: update daily wpt actions summary (Filip Skokan) #47138 - [
e0a00ebfc5
] - tools: allow test tap output to include unicode characters (Moshe Atlow) #47175 - [
fca3391d0b
] - tools: update lint-md-dependencies to [email protected] (Node.js GitHub Bot) #47045 - [
c0fd6a3721
] - tools: update eslint to 8.36.0 (Node.js GitHub Bot) #47046 - [
7d971daf29
] - tools,meta: update README and tools to reflect changes in TSC charter (Rich Trott) #47126 - [
d078d66bdc
] - typings: fix syntax error in tsconfig (Mohammed Keyvanzadeh) #47584 - [
889730512c
] - url: handle URL.canParse without base parameter (Yagiz Nizipli) #47547 - [
0dc485eb28
] - url: drop ICU requirement for parsing hostnames (Yagiz Nizipli) #47339 - [
b395b16c40
] - url: use ada::url_aggregator for parsing urls (Yagiz Nizipli) #47339 - [
11f48e02a8
] - (SEMVER-MINOR) url: implement URL.canParse (Matthew Aitken) #47179 - [
977a8bad35
] - url: fix array overrun in node:url::SetArgs() (Yagiz Nizipli) #47001 - [
4784e64850
] - url: allow extension of user provided URL objects (Antoine du Hamel) #46989 - [
f495cb6bf4
] - url: backport non-major changes from #46904 (Yagiz Nizipli) #46904 - [
aa4f485388
] - url: setformatUrl
method as no side effect (Yagiz Nizipli) #46884 - [
c79e1b72f2
] - url: offloadURLSearchParams
initialization (Yagiz Nizipli) #46867 - [
3db235b822
] - url: remove unusedkFormat
from url (Yagiz Nizipli) #46867 - [
b9df1a9668
] - url: clean vertical alignment of docs (Robin Ury) #48037 - [
9a2354d4a9
] - url: do not use object as hashmap (Timothy Gu) #47415 - [
4850ba4bd4
] - url: improve URLSearchParams creation performance (Yagiz Nizipli) #47190 - [
7fb1980fd9
] - url: add pending-deprecation tourl.parse()
(Yagiz Nizipli) #47203 - [
b04ea5aa9b
] - url: allow extension of user provided URL objects (Antoine du Hamel) #46989 - [
972c851918
] - url: remove unnecessary call toFunctionPrototypeBind
(Antoine du Hamel) #46870 - [
87ef1b2859
] - util: fix inspecting error with a throwing getter forcause
(Antoine du Hamel) #47163 - [
4729d30c1e
] - v8: fix ERR_NOT_BUILDING_SNAPSHOT is not a constructor (Chengzhong Wu) #47721 - [
d9a68b821e
] - vm: properly handle defining symbol props (Nicolas DUBIEN) #47572 - [
0d0fad8f0a
] - vm: fix crash when setting __proto__ on context's globalThis (Feng Yu) #47939 - [
fb90b6b3fb
] - vm: properly handle defining props on any value (Nicolas DUBIEN) #46615 - [
4b2aa3d27c
] - vm,lib: refactor microtaskQueue assignment logic (Khaidi Chu) #47765 - [
58afcc27f6
] - (SEMVER-MINOR) wasi: no longer require flag to enable wasi (Michael Dawson) #47286 - [
407af51cf5
] - wasi: add wasi sock_accept stub (Michael Dawson) #46434 - [
d3e0229948
] - watch: fix watch path with equals (Moshe Atlow) #47369 - [
78972d4696
] - worker: support more cases when (de)serializing errors (Moshe Atlow) #47925
v18.16.1
: 2023-06-20, Version 18.16.1 'Hydrogen' (LTS), @RafaelGSS
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
-
CVE-2023-30581:
mainModule.__proto__
Bypass Experimental Policy Mechanism (High) - CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
- CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
- CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
- OpenSSL Security Releases
- c-ares vulnerabilities:
More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.
Commits
- [
bf3e2c8928
] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen) nodejs-private/node-private#393 - [
70f9449072
] - deps: setCARES_RANDOM_FILE
for c-ares (Richard Lau) #48156 - [
35d4efb57b
] - deps: update c-ares to 1.19.1 (RafaelGSS) #48115 - [
392dfedc77
] - deps: update archs files for openssl-3.0.9-quic1 (Node.js GitHub Bot) #48402 - [
46cd5fe38b
] - deps: upgrade openssl sources to quictls/openssl-3.0.9-quic1 (Node.js GitHub Bot) #48402 - [
7e3d2d85c2
] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#426 - [
4ff6ba050a
] - http: disable request smuggling via rempty headers (Paolo Insogna) nodejs-private/node-private#428 - [
ab269129a6
] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#408 - [
925e8f5619
] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#416 - [
d6fae8e47e
] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #47851
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.