chore(deps): update dependency nodejs/node to v18.20.3
This MR contains the following updates:
Package | Update | Change |
---|---|---|
nodejs/node (source) | minor |
18.16.0 -> 18.20.3
|
Release Notes
nodejs/node (nodejs/node)
v18.20.3
: 2024-05-21, Version 18.20.3 'Hydrogen' (LTS), @richardlau
Notable Changes
This release fixes a regression introduced in Node.js 18.19.0 where http.server.close()
was incorrectly closing idle connections.
A fix has also been included for compiling Node.js from source with newer versions of Clang.
The list of keys used to sign releases has been synchronized with the current list from the main
branch.
Updated dependencies
- acorn updated to 8.11.3.
- acorn-walk updated to 8.3.2.
- ada updated to 2.7.8.
- c-ares updated to 1.28.1.
- corepack updated to 0.28.0.
- nghttp2 updated to 1.61.0.
- ngtcp2 updated to 1.3.0.
- npm updated to 10.7.0. Includes a fix from npm@10.5.1 to limit the number of open connections npm/cli#7324.
- simdutf updated to 5.2.4.
- zlib updated to 1.3.0.1-motley-7d77fb7.
Commits
- [
0c260e10e7
] - deps: update zlib to 1.3.0.1-motley-7d77fb7 (Node.js GitHub Bot) #52516 - [
1152d7f919
] - deps: update zlib to 1.3.0.1-motley-24c07df (Node.js GitHub Bot) #52199 - [
755399db9d
] - deps: update zlib to 1.3.0.1-motley-24342f6 (Node.js GitHub Bot) #52123 - [
af3e32073b
] - deps: update ada to 2.7.8 (Node.js GitHub Bot) #52517 - [
e4ea2db58b
] - deps: update c-ares to 1.28.1 (Node.js GitHub Bot) #52285 - [
14e857bea2
] - deps: update corepack to 0.28.0 (Node.js GitHub Bot) #52616 - [
7f5dd44ca6
] - deps: upgrade npm to 10.7.0 (npm team) #52767 - [
78f84ebb09
] - deps: update ngtcp2 to 1.3.0 (Node.js GitHub Bot) #51796 - [
1f489a3753
] - deps: update ngtcp2 to 1.2.0 (Node.js GitHub Bot) #51584 - [
3034968225
] - deps: update ngtcp2 to 1.1.0 (Node.js GitHub Bot) #51319 - [
1aa9da467f
] - deps: add nghttp3/**/.deps to .gitignore (Luigi Pinca) #51400 - [
28c0c78c9a
] - deps: update ngtcp2 and nghttp3 (James M Snell) #51291 - [
8fd5a35364
] - deps: upgrade npm to 10.5.2 (npm team) #52458 - [
2c53ff31c9
] - deps: update acorn-walk to 8.3.2 (Node.js GitHub Bot) #51457 - [
12f28f33c2
] - deps: update acorn to 8.11.3 (Node.js GitHub Bot) #51317 - [
dddb7eb3e0
] - deps: update acorn-walk to 8.3.1 (Node.js GitHub Bot) #50457 - [
c86550e607
] - deps: update acorn-walk to 8.3.0 (Node.js GitHub Bot) #50457 - [
9500817f66
] - deps: update acorn to 8.11.2 (Node.js GitHub Bot) #50460 - [
7a8c7b6275
] - deps: update ada to 2.7.7 (Node.js GitHub Bot) #52028 - [
b199889943
] - deps: update corepack to 0.26.0 (Node.js GitHub Bot) #52027 - [
052b0ba0c6
] - deps: upgrade npm to 10.5.1 (npm team) #52351 - [
209823d3af
] - deps: update simdutf to 5.2.4 (Node.js GitHub Bot) #52473 - [
5114cbe18a
] - deps: update simdutf to 5.2.3 (Yagiz Nizipli) #52381 - [
be30309ea0
] - deps: update simdutf to 5.0.0 (Daniel Lemire) #52138 - [
b56f66e250
] - deps: update simdutf to 4.0.9 (Node.js GitHub Bot) #51655 - [
a9f3b9d9d1
] - deps: update nghttp2 to 1.61.0 (Node.js GitHub Bot) #52395 - [
1b6fa70620
] - deps: update nghttp2 to 1.60.0 (Node.js GitHub Bot) #51948 - [
3c9dbbf4d4
] - deps: update nghttp2 to 1.59.0 (Node.js GitHub Bot) #51581 - [
e28316da54
] - deps: update nghttp2 to 1.58.0 (Node.js GitHub Bot) #50441 - [
678641f470
] - deps: V8: cherry-pickd15d49b
(Bo Anderson) #52337 - [
1147fee7d9
] - doc: remove ableist language from crypto (Jamie King) #52063 - [
5e93eae972
] - doc: add release key for marco-ippolito (marco-ippolito) #52257 - [
6689a98488
] - http: remove closeIdleConnections function while calling server close (Kumar Rishav) #52336 - [
71616e8a8a
] - node-api: make tsfn accept napi_finalize once more (Gabriel Schulhof) #51801 - [
d9d9e62474
] - src: avoid draining platform tasks at FreeEnvironment (Chengzhong Wu) #51290 - [
e5fc8ec9fc
] - test: skip v8-updates/test-linux-perf (Michaël Zasso) #49639 - [
351ef189ca
] - test: v8: Add test-linux-perf-logger test suite (Luke Albao) #50352 - [
5cec2efc31
] - test: reduce the number of requests and parsers (Luigi Pinca) #50240 - [
5186e453d9
] - test: deflake test-http-regr-gh-2928 (Luigi Pinca) #49574 - [
c60cd67e1c
] - test: skip test for dynamically linked OpenSSL (Richard Lau) #52542
v18.20.2
: 2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @RafaelGSS
This is a security release.
Notable Changes
- CVE-2024-27980 - Command injection via args parameter of
child_process.spawn
without shell option enabled on Windows
Commits
- [
6627222409
] - src: disallow direct .bat and .cmd file spawning (Ben Noordhuis) nodejs-private/node-private#564
v18.20.1
: 2024-04-03, Version 18.20.1 'Hydrogen' (LTS), @RafaelGSS
This is a security release.
Notable Changes
- CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
- CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
- llhttp version 9.2.1
- undici version 5.28.4
Commits
- [
60d24938de
] - deps: update undici to v5.28.4 (Matteo Collina) nodejs-private/node-private#577 - [
5d4d5848cf
] - http: do not allow OBS fold in headers by default (Paolo Insogna) nodejs-private/node-private#558 - [
0fb816dbcc
] - src: ensure to close stream when destroying session (Anna Henningsen) nodejs-private/node-private#561
v18.20.0
: 2024-03-26, Version 18.20.0 'Hydrogen' (LTS), @richardlau
Notable Changes
Added support for import attributes
Support has been added for import attributes, to replace the old import assertions syntax. This will aid migration by making the new syntax available across all currently supported Node.js release lines.
This adds the with
keyword which should be used in place of the previous
assert
keyword, which will be removed in a future semver-major Node.js
release.
For example,
import "foo" assert { ... }
should be replaced with
import "foo" with { ... }
For more details, see
Contributed by Nicolò Ribaudo in #51136 and Antoine du Hamel in #50140.
dirent.path
Doc deprecation for Please use newly added dirent.parentPath
instead.
Contributed by Antoine du Hamel in #50976 and #51020.
Experimental node-api feature flags
Introduces an experimental feature to segregate finalizers that affect GC state.
A new type called node_api_nogc_env
has been introduced as the const version
of napi_env
and node_api_nogc_finalize
as a variant of napi_finalize
that
accepts a node_api_nogc_env
as its first argument.
This feature can be turned off by defining
NODE_API_EXPERIMENTAL_NOGC_ENV_OPT_OUT
.
Contributed by Gabriel Schulhof in #50060.
Root certificates updated to NSS 3.98
Certificates added:
- Telekom Security TLS ECC Root 2020
- Telekom Security TLS RSA Root 2023
Certificates removed:
- Security Communication Root CA
Updated dependencies
- ada updated to 2.7.6.
- base64 updated to 0.5.2.
- c-ares updated to 1.27.0.
- corepack updated to 0.25.2.
- ICU updated to 74.2. Includes CLDR 44.1 and Unicode 15.1.
- npm updated to 10.5.0. Fixes a regression in signals not being passed onto child processes.
- simdutf8 updated to 4.0.8.
- Timezone updated to 2024a.
- zlib updated to 1.3.0.1-motley-40e35a7.
vm: fix V8 compilation cache support for vm.Script
Previously repeated compilation of the same source code using vm.Script
stopped hitting the V8 compilation cache after v16.x when support for
importModuleDynamically
was added to vm.Script
, resulting in a performance
regression that blocked users (in particular Jest users) from upgrading from
v16.x.
The recent fixes allow the compilation cache to be hit again
for vm.Script
when --experimental-vm-modules
is not used even in the
presence of the importModuleDynamically
option, so that users affected by the
performance regression can now upgrade. Ongoing work is also being done to
enable compilation cache support for vm.CompileFunction
.
Contributed by Joyee Cheung in #49950 and #50137.
Commits
- [
c70383b8d4
] - build: support Python 3.12 (Shi Pujin) #50209 - [
4b960c3a4a
] - build: fix incorrect g++ warning message (Richard Lau) #51695 - [
8fdea67694
] - crypto: update root certificates to NSS 3.98 (Node.js GitHub Bot) #51794 - [
812b126dd9
] - deps: V8: cherry-pickd90d453
(Michaël Zasso) #50077 - [
9ab8c3db87
] - deps: update c-ares to 1.27.0 (Node.js GitHub Bot) #51846 - [
c688680387
] - deps: update c-ares to 1.26.0 (Node.js GitHub Bot) #51582 - [
9498ac8a47
] - deps: compile c-ares with C11 support (Michaël Zasso) #51410 - [
8fb743642f
] - deps: update c-ares to 1.25.0 (Node.js GitHub Bot) #51385 - [
7bea2d7c12
] - deps: update zlib to 1.3.0.1-motley-40e35a7 (Node.js GitHub Bot) #51274 - [
57a38c8f75
] - deps: update zlib to 1.3.0.1-motley-dd5fc13 (Node.js GitHub Bot) #51105 - [
b0ca084a6b
] - deps: update zlib to 1.3-22124f5 (Node.js GitHub Bot) #50910 - [
4b43823f37
] - deps: update zlib to 1.2.13.1-motley-5daffc7 (Node.js GitHub Bot) #50803 - [
f0da591812
] - deps: update zlib to 1.2.13.1-motley-dfc48fc (Node.js GitHub Bot) #50456 - [
16d28a883a
] - deps: update base64 to 0.5.2 (Node.js GitHub Bot) #51455 - [
13a9e81cb6
] - deps: update base64 to 0.5.1 (Node.js GitHub Bot) #50629 - [
b4502d3ac5
] - deps: update simdutf to 4.0.8 (Node.js GitHub Bot) #51000 - [
183cf8a74a
] - deps: update simdutf to 4.0.4 (Node.js GitHub Bot) #50772 - [
11ba8593ea
] - deps: update ada to 2.7.6 (Node.js GitHub Bot) #51542 - [
73a946d55c
] - deps: update ada to 2.7.5 (Node.js GitHub Bot) #51542 - [
cc434c1a39
] - deps: update ada to 2.7.4 (Node.js GitHub Bot) #50815 - [
3a3808a6ae
] - deps: upgrade npm to 10.5.0 (npm team) #51913 - [
c8876d765c
] - deps: upgrade npm to 10.3.0 (npm team) #51431 - [
5aec3af460
] - deps: update corepack to 0.25.2 (Node.js GitHub Bot) #51810 - [
a593985326
] - deps: update corepack to 0.24.1 (Node.js GitHub Bot) #51459 - [
d1a9237bf5
] - deps: update corepack to 0.24.0 (Node.js GitHub Bot) #51318 - [
adac0c7a63
] - deps: update corepack to 0.23.0 (Node.js GitHub Bot) #50563 - [
4a6f83e32a
] - deps: escape Python strings correctly (Michaël Zasso) #50695 - [
c13969e52a
] - deps: V8: cherry-pickea996ad
(Nicolò Ribaudo) #51136 - [
6fbf0ba5c3
] - deps: V8: cherry-picka0fd320
(Nicolò Ribaudo) #51136 - [
68fd7516e1
] - deps: update timezone to 2024a (Michaël Zasso) #51723 - [
f9b229ebe1
] - deps: update icu to 74.2 (Michaël Zasso) #51723 - [
90c73d2eb4
] - deps: update timezone to 2023d (Node.js GitHub Bot) #51461 - [
2a2bf57028
] - deps: update icu to 74.1 (Node.js GitHub Bot) #50515 - [
425e011e52
] - deps: add v8::Object::SetInternalFieldForNodeCore() (Joyee Cheung) #49874 - [
58c70344a2
] - deps: V8: cherry-pick705e374
(Joyee Cheung) #51004 - [
b0e88899e1
] - deps: V8: cherry-pick1fada6b
(Joyee Cheung) #51004 - [
d87a810b81
] - deps: V8: cherry-pick3dd9576
(Joyee Cheung) #51004 - [
6d50966876
] - deps: V8: cherry-pick94e8282
(Joyee Cheung) #51004 - [
fafbacdfec
] - deps: V8: cherry-pick9a98f96
(Joyee Cheung) #51004 - [
d4a530ed8d
] - deps: V8: cherry-pick7f5daed
(Joyee Cheung) #51004 - [
1ce901b164
] - deps: V8: cherry-pickc400af4
(Joyee Cheung) #51004 - [
f232064f35
] - doc: fix historical experimental fetch flag (Kenrick) #51506 - [
194ff6a40f
] - (SEMVER-MINOR) doc: add deprecation notice todirent.path
(Antoine du Hamel) #50976 - [
0f09267dc6
] - (SEMVER-MINOR) doc: deprecatedirent.path
(Antoine du Hamel) #50976 - [
8bfb8f5b2f
] - doc,crypto: further clarify RSA_PKCS1_PADDING support (Tobias Nießen) #51799 - [
c7baf7b274
] - doc,crypto: add changelog and note about disabled RSA_PKCS1_PADDING (Filip Skokan) #51782 - [
a193be3dc2
] - esm: use import attributes instead of import assertions (Antoine du Hamel) #50140 - [
26e8f7793e
] - (SEMVER-MINOR) fs: introducedirent.parentPath
(Antoine du Hamel) #50976 - [
5b5e5192f7
] - lib: fix compileFunction throws range error for negative numbers (Jithil P Ponnan) #49855 - [
7552de6806
] - module: fix the leak in SourceTextModule and ContextifySript (Joyee Cheung) #48510 - [
2e05cf1c60
] - module: fix leak of vm.SyntheticModule (Joyee Cheung) #48510 - [
a86a2e14a3
] - module: use symbol in WeakMap to manage host defined options (Joyee Cheung) #48510 - [
32906ddcac
] - node-api: segregate nogc APIs from rest via type system (Gabriel Schulhof) #50060 - [
1aa71c26ff
] - node-api: factor out common code into macros (Gabriel Schulhof) #50664 - [
3d0b233f52
] - node-api: introduce experimental feature flags (Gabriel Schulhof) #50991 - [
96514a8b9f
] - src: iterate on import attributes array correctly (Michaël Zasso) #50703 - [
2c2892bf88
] - src: set ModuleWrap internal fields only once (Joyee Cheung) #49391 - [
ff334cb774
] - src: cast v8::Object::GetInternalField() return value to v8::Value (Joyee Cheung) #48943 - [
270b519971
] - stream: do not defer construction by one microtick (Matteo Collina) #52005 - [
95d7a75084
] - test: fix dns test case failures after c-ares update to 1.21.0+ (Brad House) #50743 - [
cd613e5167
] - test: handle relative https redirect (Richard Lau) #51121 - [
40f10eafcf
] - test: fixinternet/test-inspector-help-page
(Richard Lau) #51693 - [
5e426511b1
] - test: deflake test-vm-contextified-script-leak (Joyee Cheung) #49710 - [
0b156c6d28
] - test: use checkIfCollectable in vm leak tests (Joyee Cheung) #49671 - [
1586c11b3c
] - test: add checkIfCollectable to test/common/gc.js (Joyee Cheung) #49671 - [
902d8b3d4b
] - test: fix flaky http-chunk-extensions-limit test (Ethan Arrowood) #51943 - [
1743d2bdc1
] - test: test surrogate pair filenames on windows (Mert Can Altın) #51800 - [
1c1a7ec22d
] - test: increase platform timeout zlib-brotli-16gb (Rafael Gonzaga) #51792 - [
931d02fe3e
] - test, v8: fix wrong import attributes test (Nicolò Ribaudo) #52184 - [
d9ea6c1f8d
] - tls: fix order of setting cipher before setting cert and key (Kumar Rishav) #50186 - [
3184befa2e
] - tools: fix update-icu.sh (Michaël Zasso) #51723 - [
06646e11be
] - (SEMVER-MINOR) vm: use import attributes instead of import assertions (Antoine du Hamel) #50141 - [
fe66e9d06e
] - vm: reject in importModuleDynamically without --experimental-vm-modules (Joyee Cheung) #50137 - [
052e095c6b
] - vm: use internal versions of compileFunction and Script (Joyee Cheung) #50137 - [
9f7899ed0a
] - vm: unify host-defined option generation in vm.compileFunction (Joyee Cheung) #50137 - [
6291c107d0
] - vm: use default HDO when importModuleDynamically is not set (Joyee Cheung) #49950
v18.19.1
: 2024-02-14, Version 18.19.1 'Hydrogen' (LTS), @RafaelGSS prepared by @marco-ippolito
Notable changes
This is a security release.
Notable changes
- CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
- CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
- CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
- CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
- undici version 5.28.3
- npm version 10.2.4
Commits
- [
69e0a1dba8
] - crypto: update root certificates to NSS 3.95 (Node.js GitHub Bot) #50805 - [
d3d357ab09
] - crypto: disable PKCS#1 padding for privateDecrypt (Michael Dawson) nodejs-private/node-private#525 - [
3d27175c42
] - deps: fix GHSA-f74f-cvh7-c6q6/CVE-2024-24806 (Santiago Gimeno) #51614 - [
331558b8ab
] - deps: update archs files for openssl-3.0.13+quic1 (Node.js GitHub Bot) #51614 - [
99b77dfb9c
] - deps: upgrade openssl sources to quictls/openssl-3.0.13+quic1 (Node.js GitHub Bot) #51614 - [
6cdc71bff1
] - deps: upgrade npm to 10.2.4 (npm team) #50751 - [
911cb33cda
] - http: add maximum chunk extension size (Paolo Insogna) nodejs-private/node-private#520 - [
f48b89689d
] - lib: update undici to v5.28.3 (Matteo Collina) nodejs-private/node-private#536 - [
e6b4c105e0
] - src: fix HasOnly(capability) in node::credentials (Tobias Nießen) nodejs-private/node-private#505 - [
97c49076cd
] - test: skip test-child-process-stdio-reuse-readable-stdio on Windows (Joyee Cheung) #49621 - [
60affdde8e
] - tools: add macOS notarization verification step (Ulises Gascón) #50833 - [
ccc676a327
] - tools: use macOS keychain to notarize the releases (Ulises Gascón) #50715 - [
31f1ceb380
] - tools: remove unused file (Ulises Gascon) #50622 - [
bd5f6fb92a
] - tools: add macOS notarization stapler (Ulises Gascón) #50625 - [
4168c4f71b
] - tools: improve macOS notarization process output readability (Ulises Gascón) #50389 - [
4622f775aa
] - tools: remove unusedversion
function (Ulises Gascón) #50390 - [
b90804b1e7
] - win,tools: upgrade Windows signing to smctl (Stefan Stojanovic) #50956 - [
f31d47e135
] - zlib: pause stream if outgoing buffer is full (Matteo Collina) nodejs-private/node-private#542
v18.19.0
: 2023-11-29, Version 18.19.0 'Hydrogen' (LTS), @targos
Notable Changes
npm updated to v10
After two months of baking time in Node.js 20, npm 10 is backported, so that all release lines include a supported version of npm. This release includes npm v10.2.3.
Refer to nodejs/Release#884 for the plan to land npm 10.
ESM and customization hook changes
Leverage loaders when resolving subsequent loaders
Loaders now apply to subsequent loaders, for example: --experimental-loader ts-node --experimental-loader loader-written-in-typescript
.
Contributed by Maël Nison in #43772.
node:module
API register
for module customization hooks; new initialize
hook
New There is a new API register
available on node:module
to specify a file that exports module customization hooks, and pass data to the hooks, and establish communication channels with them. The “define the file with the hooks” part was previously handled by a flag --experimental-loader
, but when the hooks moved into a dedicated thread in 20.0.0 there was a need to provide a way to communicate between the main (application) thread and the hooks thread. This can now be done by calling register
from the main thread and passing data, including MessageChannel
instances.
We encourage users to migrate to an approach that uses --import
with register
, such as:
node --import ./file-that-calls-register.js ./app.js
Using --import
ensures that the customization hooks are registered before any application code runs, even the entry point.
Contributed by João Lenon and Jacob Smith in #46826, Izaak Schroeder and Jacob Smith in #48842 and #48559.
import.meta.resolve
unflagged
In ES modules, import.meta.resolve(specifier)
can be used to get an absolute URL string to which specifier
resolves, similar
to require.resolve
in CommonJS. This aligns Node.js with browsers and other server-side runtimes.
Contributed by Guy Bedford in #49028.
--experimental-default-type
flag to flip module defaults
The new flag --experimental-default-type
can be used to flip the default
module system used by Node.js. Input that is already explicitly defined as ES
modules or CommonJS, such as by a package.json
"type"
field or .mjs
/.cjs
file extension or the --input-type
flag, is unaffected. What is currently
implicitly CommonJS would instead be interpreted as ES modules under
--experimental-default-type=module
:
-
String input provided via
--eval
or STDIN, if--input-type
is unspecified. -
Files ending in
.js
or with no extension, if there is nopackage.json
file present in the same folder or any parent folder. -
Files ending in
.js
or with no extension, if the nearest parentpackage.json
field lacks atype
field; unless the folder is inside anode_modules
folder.
In addition, extensionless files are interpreted as Wasm if
--experimental-wasm-modules
is passed and the file contains the "magic bytes"
Wasm header.
Contributed by Geoffrey Booth in #49869.
Other ESM-related changes
- [
ed2d46f4cc
] - doc: move and rename loaders section (Geoffrey Booth) #49261 - [
92734d4480
] - esm: use import attributes instead of import assertions (Antoine du Hamel) #50140 - [
e96f7ef881
] - (SEMVER-MINOR) vm: use import attributes instead of import assertions (Antoine du Hamel) #50141
Test runner changes
Many changes to the built-in test runner have been backported. This includes the following additions:
- [
b283ae4238
] - (SEMVER-MINOR) test_runner: accepttestOnly
inrun
(Moshe Atlow) #49753 - [
059b1945d8
] - (SEMVER-MINOR) test_runner: add junit reporter (Moshe Atlow) #49614 - [
d61a505546
] - (SEMVER-MINOR) test_runner: expose location of tests (Colin Ihrig) #48975 - [
b55eb2a8d1
] - (SEMVER-MINOR) test_runner: add shards support (Raz Luvaton) #48639 - [
05e7f28b40
] - (SEMVER-MINOR) test_runner: add initial draft for fakeTimers (Erick Wendel) #47775 - [
428301ad27
] - (SEMVER-MINOR) test_runner, cli: add --test-concurrency flag (Colin Ihrig) #49996
Other notable changes
- [
0c4a84e8e9
] - (SEMVER-MINOR) deps: update uvwasi to 0.0.19 (Node.js GitHub Bot) #49908 - [
fae60c5841
] - stream: use bitmap in readable state (Benjamin Gruenbaum) #49745 - [
17246be158
] - (SEMVER-MINOR) lib: add api to detect whether source-maps are enabled (翠 / green) #46391 - [
2e9f7284a1
] - (SEMVER-MINOR) lib: add tracing channel to diagnostics_channel (Stephen Belanger) #44943 - [
cc7bf1f641
] - (SEMVER-MINOR) src: add cjs_module_lexer_version base64_version (Jithil P Ponnan) #45629 - [
b5d16cd8f0
] - (SEMVER-MINOR) tls: add ALPNCallback server option for dynamic ALPN negotiation (Tim Perry) #45190
Commits
- [
0d0eb47e2a
] - benchmark: add benchmarks for the test_runner (Raz Luvaton) #48931 - [
8bb03d10f4
] - benchmark: differentiate whatwg and legacy url (Yagiz Nizipli) #47377 - [
3d7734cbe3
] - benchmark: lower URL.canParse runs (Khafra) #47351 - [
24d3fcf415
] - benchmark: stablize encode benchmark (Joyee Cheung) #46658 - [
e08fd98bcc
] - bootstrap: use correct descriptor for Symbol.{dispose,asyncDispose} (Jordan Harband) #48703 - [
cf9ddcd6c8
] - bootstrap: simplify initialization of source map handlers (Joyee Cheung) #48304 - [
12d731e431
] - bootstrap: log isolate data info in mksnapshot debug logs (Joyee Cheung) #47768 - [
d66873871a
] - bootstrap: store internal loaders in C++ via a binding (Joyee Cheung) #47215 - [
1a499c5082
] - bootstrap: optimize modules loaded in the built-in snapshot (Joyee Cheung) #45849 - [
e0e09caafe
] - bootstrap: make CJS loader snapshotable (Joyee Cheung) #45849 - [
5f37decd56
] - bootstrap: include event_target into the built-in snapshot (Joyee Cheung) #45849 - [
c3f56a3dee
] - bootstrap: support module_wrap binding in snapshot (Joyee Cheung) #45849 - [
6466acbc89
] - bootstrap: lazy load non-essential modules (Joyee Cheung) #45659 - [
a0d4b69df4
] - bootstrap: lazy-load Performance.prototype.timeOrigin (Joyee Cheung) #46425 - [
c1bc8118e3
] - bootstrap: generate bootstrapper arguments in BuiltinLoader (Joyee Cheung) #44488 - [
075c57e88b
] - build: add symlink tocompile_commands.json
file if needed (Juan José) #49260 - [
9e1c531b8d
] - build: expand when we run internet tests (Michael Dawson) #49218 - [
a781d24624
] - build: fix typolibray
->library
(configure.py) (michalbiesek) #49106 - [
f2eccb7a04
] - build: fixconfigure --link-module
(Richard Lau) #48522 - [
a44d555494
] - build: fix IBM i build with Python 3.9 (Richard Lau) #48056 - [
7f68e14ea2
] - child_process: improve spawn performance on Linux (Keyhan Vakil) #48523 - [
76e4d4117c
] - crypto: ensure valid point on elliptic curve in SubtleCrypto.importKey (Filip Skokan) #50234 - [
7af54279b5
] - deps: V8: cherry-pick70caf33
(kxxt) #50506 - [
49c5495339
] - deps: update zlib to 1.2.13.1-motley-fef5869 (Node.js GitHub Bot) #50085 - [
e0fd52bf07
] - deps: update googletest to2dd1c13
(Node.js GitHub Bot) #50081 - [
1b103cc567
] - deps: update googletest toe47544a
(Node.js GitHub Bot) #49982 - [
736c869eeb
] - deps: update googletest tod1467f5
(Node.js GitHub Bot) #49676 - [
cd99ee1f35
] - deps: update googletest to8a6feab
(Node.js GitHub Bot) #49463 - [
5c338573ff
] - deps: update zlib to 1.2.13.1-motley-f5fd0ad (Node.js GitHub Bot) #49252 - [
374ec3d623
] - deps: update googletest to7e33b6a
(Node.js GitHub Bot) #49034 - [
c15dd6679b
] - deps: update zlib to 1.2.13.1-motley-526382e (Node.js GitHub Bot) #49033 - [
588bd5e524
] - deps: update googletest toc875c4e
(Node.js GitHub Bot) #48964 - [
6059b59018
] - deps: update zlib to 1.2.13.1-motley-61dc0bd (Node.js GitHub Bot) #48788 - [
e455dd4003
] - deps: update googletest tocc36671
(Node.js GitHub Bot) #48789 - [
747fbb49ca
] - deps: V8: cherry-pick1a782f6
(Keyhan Vakil) #48523 - [
272e55c66f
] - deps: upgrade npm to 10.2.3 (npm team) #50531 - [
3f6dcc62e5
] - deps: update archs files for openssl-3.0.12+quic1 (Node.js GitHub Bot) #50411 - [
da26cdbe84
] - deps: upgrade openssl sources to quictls/openssl-3.0.12+quic1 (Node.js GitHub Bot) #50411 - [
23069c34b2
] - deps: V8: cherry-pickd69c793
(Michaël Zasso) #46425 - [
5f852cc9fe
] - deps: V8: cherry-pickf7d000a
(Luke Albao) #50344 - [
0c4a84e8e9
] - (SEMVER-MINOR) deps: update uvwasi to 0.0.19 (Node.js GitHub Bot) #49908 - [
8682b90d02
] - deps: update simdutf to 3.2.18 (Node.js GitHub Bot) #50091 - [
11ecd06aeb
] - deps: update simdutf to 3.2.17 (Node.js GitHub Bot) #49019 - [
43bfe5f020
] - deps: upgrade npm to 10.2.0 (npm team) #50027 - [
a140bc284b
] - deps: upgrade npm to 10.1.0 (npm team) #49570 - [
65ca41c276
] - (SEMVER-MINOR) deps: upgrade npm to 10.0.0 (npm team) #49423 - [
df1ff8e3da
] - deps: fix call to undeclared functions 'ntohl' and 'htons' (MatteoBax) #49979 - [
f228dc7955
] - deps: update corepack to 0.22.0 (Node.js GitHub Bot) #50325 - [
4324ebab67
] - deps: update corepack to 0.21.0 (Node.js GitHub Bot) #50088 - [
1cabb77659
] - deps: update corepack to 0.20.0 (Node.js GitHub Bot) #49464 - [
04227b287e
] - deps: update c-ares to 1.20.1 (Node.js GitHub Bot) #50082 - [
13e69ee11c
] - deps: update c-ares to 1.20.0 (Node.js GitHub Bot) #50082 - [
ac717df17e
] - deps: update ada to 2.7.2 (Node.js GitHub Bot) #50338 - [
6885fc9386
] - deps: update ada to 2.6.10 (Node.js GitHub Bot) #49984 - [
76c5f4039f
] - deps: update ada to 2.6.9 (Node.js GitHub Bot) #49340 - [
597ea77422
] - deps: update ada to 2.6.8 (Node.js GitHub Bot) #49340 - [
8e7dcba553
] - deps: update ada to 2.6.7 (Node.js GitHub Bot) #49340 - [
9f2037e8ee
] - deps: update ada to 2.6.5 (Node.js GitHub Bot) #49340 - [
4723976703
] - deps: update ada to 2.6.3 (Node.js GitHub Bot) #49340 - [
7ccb478664
] - deps: update undici to 5.26.4 (Node.js GitHub Bot) #50274 - [
88f9ebb770
] - diagnostics_channel: fix ref counting bug when reaching zero subscribers (Stephen Belanger) #47520 - [
284a869540
] - dns: callada::idna::to_ascii
directly from c++ (Yagiz Nizipli) #47920 - [
10968370b5
] - doc: drop github actions check in sec release process (Rafael Gonzaga) #48978 - [
07c3b88c74
] - doc: remove@anonrig
from performance initiative (Yagiz Nizipli) #49641 - [
e26b89e8be
] - doc: fix node-api call example (Chengzhong Wu) #49395 - [
4c93905f6c
] - doc: add news issue for Diagnostics WG (Michael Dawson) #49306 - [
3f1a237a8f
] - doc: add print results for examples inStringDecoder
(Jungku Lee) #49326 - [
45caad82bb
] - doc: update outdated reference to NIST SP 800-131A (Tobias Nießen) #49316 - [
62f823d5a2
] - doc: usecjs
as block code's type inMockTimers
(Deokjin Kim) #49309 - [
0dda724d3f
] - doc: updateoptions.filter
description forfs.cp
(Shubham Pandey) #49289 - [
4ba11e352b
] - doc: avoid "not currently recommended" (Tobias Nießen) #49300 - [
9ca85b58b3
] - doc: modify param description for end(),write() inStringDecoder
(Jungku Lee) #49285 - [
3f771cab67
] - doc: use NODE_API_SUPPORTED_VERSION_MAX in release doc (Cheng Zhao) #49268 - [
f181c37e75
] - doc: fix typo instream.finished
documentation (Antoine du Hamel) #49271 - [
c70945ddc2
] - doc: update description forpercent_encode
sets inWHATWG API
(Jungku Lee) #49258 - [
f9c2a3fb3e
] - doc: clarify use of Uint8Array for n-api (Fedor Indutny) #48742 - [
bf22a5f66e
] - doc: use same name in the doc as in the code (Hyunjin Kim) #49216 - [
72bd527fb6
] - doc: add notable-change label mention to MR template (Rafael Gonzaga) #49188 - [
2247e52fe0
] - doc: add h1 summary to security release process (Rafael Gonzaga) #49112 - [
3b82e9aed1
] - doc: fix wording in napi_async_init (Tobias Nießen) #49180 - [
55171d88a0
] - doc: fixType
notation in webstreams (Deokjin Kim) #49121 - [
79c0497398
] - doc: make the NODE_VERSION_IS_RELEASE revert clear (Rafael Gonzaga) #49114 - [
7ee26fb8df
] - doc: update with latest security release (Rafael Gonzaga) #49085 - [
9ce73964be
] - doc: add description for--port
flag ofnode inspect
(Michael Bianco) #48785 - [
633b8cd181
] - doc: add missing period (Rich Trott) #49094 - [
6daa9ec2a4
] - doc: add ESM examples in http.md (btea) #47763 - [
12b83e81b9
] - doc: detailed description of keystrokes Ctrl-Y and Meta-Y (Ray) #43529 - [
ead654f976
] - doc: clarify use of process.env in worker threads on Windows (Daeyeon Jeong) #49008 - [
4047947838
] - doc: remove v14 mention (Rafael Gonzaga) #49005 - [
833c643eb4
] - doc: run license-builder (github-actions[bot]) #48898 - [
cb43717c97
] - doc: add ver of 18.x where Node-api 9 is supported (Michael Dawson) #48876 - [
a8d5c16a2a
] - doc: include experimental features assessment (Rafael Gonzaga) #48824 - [
e6d8735e2b
] - doc: add new TSC members (Michael Dawson) #48841 - [
d4fe00d0c7
] - doc: refactor node-api support matrix (Michael Dawson) #48774 - [
629132d84c
] - doc: declarepath
on example ofasync_hooks.executionAsyncId()
(Deokjin Kim) #48556 - [
dfd368ac9f
] - doc: remove the . in the end to reduce confusing (Jason) #48719 - [
74d8f96413
] - doc: nodejs-social over nodejs/tweet (Rafael Gonzaga) #48769 - [
73a7e00d06
] - doc: add missing history info forimport.meta.resolve
(Antoine du Hamel) #49700 - [
c20fdb4e52
] - doc: editimport.meta.resolve
documentation (Antoine du Hamel) #49247 - [
1ac389ecef
] - doc: update module hooks docs (Geoffrey Booth) #49265 - [
ed2d46f4cc
] - doc: move and rename loaders section (Geoffrey Booth) #49261 - [
258df0e72d
] - doc: add signature formodule.register
(Geoffrey Booth) #49251 - [
58eaf3f6ae
] - doc: caveat unavailability ofimport.meta.resolve
in custom loaders (Jacob Smith) #49242 - [
2fef28b2b9
] - doc: fix name of the flag ininitialize()
docs (Antoine du Hamel) #49158 - [
15280fb42c
] - doc: add steps about signing the binary in single-executable docs (Darshan Sen) #46764 - [
e374ba296c
] - doc: add "type" to test runner event details (Phil Nash) #49014 - [
ec0a6c1f1b
] - doc: add new reporter events to custom reporter examples (Chemi Atlow) #48903 - [
e8a32fb49b
] - doc: change duration to duration_ms on test documentation (Ardi_Nugraha) #48892 - [
2b30c8b8a3
] - doc: fixglobalPreload
example (bmacnaughton) #50300 - [
8a57182769
] - doc,test: extend the list of platforms supported by single-executables (Darshan Sen) #47026 - [
92734d4480
] - esm: use import attributes instead of import assertions (Antoine du Hamel) #50140 - [
c3c945e654
] - esm: bypass CommonJS loader under --default-type (Geoffrey Booth) #49986 - [
fe691984b2
] - esm: unflag extensionless javascript and wasm in module scope (Geoffrey Booth) #49974 - [
56bd9a88ac
] - esm: --experimental-default-type flag to flip module defaults (Geoffrey Booth) #49869 - [
72644d62e7
] - esm: improve JSDoc annotation of internal functions (Antoine du Hamel) #49959 - [
957725f601
] - esm: require braces for modules code (Geoffrey Booth) #49657 - [
c12685f82d
] - esm: fix cache collision on JSON files using file: URL (Antoine du Hamel) #49887 - [
ed8dd33493
] - esm: identify parent importing a url with invalid host (Jacob Smith) #49736 - [
46d730ab75
] - esm: fix return type ofimport.meta.resolve
(Antoine du Hamel) #49698 - [
12cb700478
] - esm: update loaders warning (Geoffrey Booth) #49633 - [
47193a347e
] - esm: fix support forURL
instances inregister
(Antoine du Hamel) #49655 - [
51ced0f1a1
] - esm: clarify ERR_REQUIRE_ESM errors (Daniel Compton) #49521 - [
4be5612bae
] - esm: remove return value forModule.register
(Antoine du Hamel) #49529 - [
0875867e27
] - esm: refactor test-esm-loader-resolve-type (Geoffrey Booth) #49493 - [
9b7c9d93e9
] - esm: refactor test-esm-named-exports (Geoffrey Booth) #49493 - [
d1f5514917
] - esm: refactor mocking test (Geoffrey Booth) #49465 - [
01ca6d277d
] - esm: fixglobalPreload
warning (Antoine du Hamel) #49069 - [
c1a84398b4
] - esm: unflag import.meta.resolve (Guy Bedford) #49028 - [
ef43f084e9
] - esm: import.meta.resolve exact module not found errors should return (Guy Bedford) #49038 - [
385f24c9cc
] - esm: protectERR_UNSUPPORTED_DIR_IMPORT
against prototype pollution (Antoine du Hamel) #49060 - [
10e7c3a376
] - esm: addinitialize
hook, integrate withregister
(Izaak Schroeder) #48842 - [
f96b610268
] - esm: fix typoparentUrl
->parentURL
(Antoine du Hamel) #48999 - [
03c1b5e647
] - esm: unflagModule.register
and allow nested loaderimport()
(Izaak Schroeder) #48559 - [
63aa5d7270
] - esm: add backglobalPreload
tests and fix failing ones (Antoine du Hamel) #48779 - [
1c7be606f1
] - esm: remove support for arrays inimport
internal method (Antoine du Hamel) #48296 - [
655111fa00
] - esm: handleglobalPreload
hook returning a nullish value (Antoine du Hamel) #48249 - [
9938a8bf13
] - esm: handle more error types thrown from the loader thread (Antoine du Hamel) #48247 - [
8cab32a5d1
] - esm: do not use'beforeExit'
on the main thread (Antoine du Hamel) #47964 - [
b61efcce95
] - esm: renameURLCanParse
to be consistent (Antoine du Hamel) #47668 - [
ca20f5931d
] - esm: remove support for deprecated hooks (Antoine du Hamel) #47580 - [
5de37a1e37
] - esm: initializeimport.meta
on eval (Antoine du Hamel) #47551 - [
39fbce7313
] - esm: propagateprocess.exit
from the loader thread to the main thread (Antoine du Hamel) #47548 - [
2a528b76e6
] - esm: avoid try/catch when validating urls (Yagiz Nizipli) #47541 - [
bac9b1758f
] - esm: move hook execution to separate thread (Jacob Smith) #44710 - [
dfa444477a
] - esm: skip file: URL conversion to path when possible (Antoine du Hamel) #46305 - [
45de8d1bd7
] - esm: allow resolve to return import assertions (Geoffrey Booth) #46153 - [
5ffc90a06b
] - esm: move hooks handling into separate class (Geoffrey Booth) #45869 - [
490b598dbf
] - esm: leverage loaders when resolving subsequent loaders (Maël Nison) #43772 - [
acd987287c
] - events: remove weak listener for event target (Raz Luvaton) #48952 - [
69b7f91a92
] - fs: remove redundant code in readableWebStream() (Deokjin Kim) #49298 - [
ae8bb162b4
] - fs: remove redundantnullCheck
(Livia Medeiros) #48826 - [
48c25b154b
] - fs: makemkdtemp
accept buffers and URL (LiviaMedeiros) #48828 - [
edf46c1b59
] - fs: move fs_use_promises_symbol to per-isolate symbols (Joyee Cheung) #47768 - [
fe41d22afc
] - fs: use kResistStopPropagation (Chemi Atlow) #48521 - [
7c758f60ab
] - fs: fix readdir recursive sync & callback (Ethan Arrowood) #48698 - [
8874b2e11d
] - http: start connections checking interval on listen (Paolo Insogna) #48611 - [
29697229b6
] - https: fix connection checking interval not clearing on server close (Nitzan Uziely) #48383 - [
981aa7866d
] - lib: fix MIME overmatch in data URLs (André Alves) #49104 - [
fe26f8a860
] - lib: merge cjs and esm package json reader caches (Yagiz Nizipli) #48477 - [
17246be158
] - (SEMVER-MINOR) lib: add api to detect whether source-maps are enabled (翠 / green) #46391 - [
2e9f7284a1
] - (SEMVER-MINOR) lib: add tracing channel to diagnostics_channel (Stephen Belanger) #44943 - [
04dad9c2f6
] - lib: fix BroadcastChannel initialization location (Shelley Vohr) #46864 - [
671d2c0067
] - lib: fix DOMException property descriptors after being lazy loaded (Filip Skokan) #46799 - [
9a4b57d6d4
] - lib: improve esm resolve performance (Yagiz Nizipli) #46652 - [
c6b2f56723
] - lib: lazy-load deps in modules/run_main.js (Joyee Cheung) #45849 - [
baa280a4f6
] - lib: lazy-load deps in source_map_cache.js (Joyee Cheung) #45849 - [
00bdb72b6e
] - lib: add getLazy() method to internal/util (Joyee Cheung) #45849 - [
b77a6b2376
] - loader: use default loader as cascaded loader in the in loader worker (Joyee Cheung) #47620 - [
7778e190b0
] - meta: move Trott to TSC regular member (Rich Trott) #50297 - [
5b9575dd30
] - meta: ping TSC for offboarding (Tobias Nießen) #50147 - [
d24c3a0692
] - meta: update website team with new name (Rich Trott) #49883 - [
332d2aedb4
] - meta: fix linter error (Antoine du Hamel) #49755 - [
dc70c444f4
] - meta: add primordials strategic initiative (Benjamin Gruenbaum) #49706 - [
213a9f8a4b
] - meta: bump rtCamp/action-slack-notify from 2.2.0 to 2.2.1 (dependabot[bot]) #49437 - [
2827779faa
] - meta: remove modules team from CODEOWNERS (Benjamin Gruenbaum) #49412 - [
5d6daf0d01
] - meta: add test/reporters to codeowners (Chemi Atlow) #49186 - [
dee7dc5d54
] - meta: bump actions/upload-artifact from 3.1.2 to 3.1.3 (dependabot[bot]) #50000 - [
98294fdeee
] - meta: bump actions/cache from 3.3.1 to 3.3.2 (dependabot[bot]) #50003 - [
79270327d0
] - meta: bump github/codeql-action from 2.21.5 to 2.21.9 (dependabot[bot]) #50002 - [
6591a03c89
] - meta: bump github/codeql-action from 2.21.2 to 2.21.5 (dependabot[bot]) #49438 - [
3a107f80bc
] - meta: bump actions/checkout from 3.6.0 to 4.1.0 (dependabot[bot]) #50001 - [
26c5c3c4a2
] - meta: bump actions/checkout from 3.5.3 to 3.6.0 (dependabot[bot]) #49436 - [
0fc0b88d97
] - meta: bump step-security/harden-runner from 2.5.0 to 2.5.1 (dependabot[bot]) #49435 - [
dad5785d5d
] - meta: bump actions/setup-node from 3.7.0 to 3.8.1 (dependabot[bot]) #49434 - [
155a275acb
] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #49264 - [
bd17f0b992
] - meta: mention nodejs/tsc when changing GH templates (Rafael Gonzaga) #49189 - [
f6e68a0238
] - meta: bump github/codeql-action from 2.20.1 to 2.21.2 (dependabot[bot]) #48986 - [
5c352eeecb
] - meta: bump step-security/harden-runner from 2.4.1 to 2.5.0 (dependabot[bot]) #48985 - [
42ac5a6e5f
] - meta: bump actions/setup-node from 3.6.0 to 3.7.0 (dependabot[bot]) #48984 - [
b0d769fe7c
] - meta: bump actions/setup-python from 4.6.1 to 4.7.0 (dependabot[bot]) #48983 - [
f62b24276c
] - meta: add mailmap entry for atlowChemi (Chemi Atlow) #48810 - [
8c55f317a3
] - module: move helpers out of cjs loader (Geoffrey Booth) #49912 - [
14e148ee6c
] - module: ensure successful import returns the same result (Antoine du Hamel) #46662 - [
65dfe85f03
] - module: implementregister
utility (João Lenon) #46826 - [
6f0458d0a6
] - module: refactor to usenormalizeRequirableId
in the CJS module loader (Darshan Sen) #47896 - [
89ed24b94a
] - module: do less CJS module loader initialization at run time (Joyee Cheung) #47194 - [
939c8764b8
] - module: move callbacks and conditions into modules/esm/utils.js (Joyee Cheung) #45849 - [
a3b0f4cf55
] - module: move modules/cjs/helpers.js to modules/helpers.js (Joyee Cheung) #45849 - [
97579895f2
] - module, esm: jsdoc for modules files (Geoffrey Booth) #49523 - [
daca87bbef
] - net: use asserts in JS Socket Stream to catch races in future (Tim Perry) #49400 - [
03063bd022
] - net: fix crash due to simultaneous close/shutdown on JS Stream Sockets (Tim Perry) #49400 - [
67fe7d8822
] - net: fix setting of value in 'setDefaultAutoSelectFamilyAttemptTimeout' (Deokjin Kim) #47012 - [
f449b222fd
] - node-api: update headers for better wasm support (Toyo Li) #49037 - [
5148f030b8
] - node-api: run finalizers directly from GC (Vladimir Morozov) #42651 - [
edef4fa668
] - node-api: enable uncaught exceptions policy by default (Chengzhong Wu) #49313 - [
48a1b9336b
] - node-api: fix compiler warning in node_api.h (Michael Graeb) #49103 - [
57966318fe
] - node-api: avoid macro redefinition (Tobias Nießen) #48879 - [
d4f26f4651
] - policy: fix path to URL conversion (Antoine du Hamel) #49133 - [
a625f22acb
] - readline: add paste bracket mode (Jakub Jankiewicz) #47150 - [
bbafd42d75
] - repl: display dynamic import variant in static import error messages (Hemanth HM) #48129 - [
b8634eeb16
] - sea: allow requiring core modules with the "node:" prefix (Darshan Sen) #47779 - [
066d9d4492
] - src: remove unused functionGetName()
in node_perf (Jungku Lee) #49244 - [
158c91a38a
] - src: use ARES_SUCCESS instead of 0 (Jungku Lee) #49048 - [
8c33731ac6
] - src: add a condition if the argument ofDomainToUnicode
is empty (Jungku Lee) #49097 - [
67dba57d77
] - src: use ARES_SUCCESS instead of 0 (Hyunjin Kim) #48834 - [
97d87495c7
] - src: remove unnecessary temporary creation (Jason) #48734 - [
f5384c3262
] - src: fix nullptr access on realm (Jan Olaf Krems) #48802 - [
358273d77f
] - src: remove OnScopeLeaveImpl's move assignment overload (Jason) #48732 - [
cc7bf1f641
] - (SEMVER-MINOR) src: add cjs_module_lexer_version base64_version (Jithil P Ponnan) #45629 - [
0a950c3752
] - src: add missing to_ascii method in dns queries (Daniel Lemire) #48354 - [
3552afb904
] - src: fix duplication of externalized builtin code (Keyhan Vakil) #47079 - [
66e4ba5062
] - src: fix AliasedBuffer memory attribution in heap snapshots (Joyee Cheung) #46817 - [
946f19b5e3
] - src: move AliasedBuffer implementation to -inl.h (Joyee Cheung) #46817 - [
d35f8702c9
] - src: bootstrap prepare stack trace callback in shadow realm (Chengzhong Wu) #47107 - [
3551a19205
] - src: make BuiltinLoader threadsafe and non-global (Anna Henningsen) #45942 - [
92311a0801
] - src: define per-isolate internal bindings registration callback (Chengzhong Wu) #45547 - [
629fc774ca
] - src: use an array for faster binding data lookup (Joyee Cheung) #46620 - [
62e2e590fc
] - src: fix TLSWrap lifetime bug in ALPN callback (Ben Noordhuis) #49635 - [
fae60c5841
] - stream: use bitmap in readable state (Benjamin Gruenbaum) #49745 - [
ee4fc7d78c
] - stream: use Buffer.from when constructor is a Buffer (Matthew Aitken) #49250 - [
651e4504ce
] - stream: addhighWaterMark
for the map operator (Raz Luvaton) #49249 - [
d585d13127
] - stream: improve WebStreams performance (Raz Luvaton) #49089 - [
7f39f8e805
] - test: replace forEach with for..of in test-http-perf_hooks.js (Niya Shiyas) #49818 - [
2f0ffde842
] - test: replace forEach with for..of in test-net-isipv4.js (Niya Shiyas) #49822 - [
bbd302b5ab
] - test: replace forEach with for..of in test-http2-server (Niya Shiyas) #49819 - [
128ca3e213
] - test: replace forEach with for..of in test-http2-client-destroy.js (Niya Shiyas) #49820 - [
a2ca1a605f
] - test: print instruction for creating missing snapshot in assertSnapshot (Raz Luvaton) #48914 - [
a0bb30cdca
] - test: settest-watch-mode-inspect
as flaky (Yagiz Nizipli) #50259 - [
1047d95698
] - test: settest-emit-after-on-destroyed
as flaky (Yagiz Nizipli) #50246 - [
91a3b57962
] - test: set inspector async stack test as flaky (Yagiz Nizipli) #50244 - [
b41aa7b82a
] - test: set test-worker-nearheaplimit-deadlock flaky (StefanStojanovic) #50277 - [
e81b066fb1
] - test: settest-cli-node-options
as flaky (Yagiz Nizipli) #50296 - [
0c05c25c4e
] - test: set crypto-timing test as flaky (Yagiz Nizipli) #50232 - [
83e339dbba
] - test: settest-structuredclone-*
as flaky (Yagiz Nizipli) #50261 - [
866a399488
] - test: set inspector async hook test as flaky (Yagiz Nizipli) #50252 - [
cb0bd2116b
] - test: set parallel http server test as flaky (Yagiz Nizipli) #50227 - [
54f3d877ae
] - test: set test-worker-nearheaplimit-deadlock flaky (Stefan Stojanovic) #50238 - [
5953a255b6
] - test: settest-runner-watch-mode
as flaky (Yagiz Nizipli) #50221 - [
5820d7e14d
] - test: deflake test-runner-output (Moshe Atlow) #49878 - [
1d75da43f2
] - Revert "test: mark test-http-regr-gh-2928 as flaky" (Luigi Pinca) #49708 - [
5df23520e7
] - test: mark test-runner-watch-mode as flaky (Joyee Cheung) #49627 - [
7e714e6497
] - test: remove --no-warnings flag in test_runner fixtures (Raz Luvaton) #48989 - [
0fea550641
] - test: reorder test files fixtures for better understanding (Raz Luvaton) #48787 - [
c5857bde42
] - test: avoid copying test source files (Chengzhong Wu) #49515 - [
67cb6f9a34
] - test: reduce length in crypto keygen tests (Joyee Cheung) #49221 - [
958e114655
] - test: split JWK async elliptic curve keygen tests (Joyee Cheung) #49221 - [
344592dc00
] - test: split test-crypto-keygen.js (Joyee Cheung) #49221 - [
5f1a1aeeed
] - test: rename test-crypto-modp1-error (Tobias Nießen) #49348 - [
107015b45d
] - test: migrate message source map tests from Python to JS (Yiyun Lei) #49238 - [
ddebd29515
] - test: fix compiler warning in NodeCryptoEnv (Tobias Nießen) #49206 - [
0261c5de56
] - test: make test-perf-hooks more robust and work with workers (Joyee Cheung) #49197 - [
e18de802c8
] - test: use gcUntil() in test-v8-serialize-leak (Joyee Cheung) #49168 - [
52d5dd8dba
] - test: add expectSyncExitWithoutError() and expectSyncExit() utils (Joyee Cheung) #49020 - [
67925bb914
] - test: add Symbol.dispose support to mock timers (Benjamin Gruenbaum) #48549 - [
00c08539b6
] - test: fix edge snapshot stack traces (Geoffrey Booth) #49659 - [
48f6d9a975
] - test: refactortest-node-output-errors
(Antoine du Hamel) #48992 - [
c1a8ae38c0
] - test: deflaketest-loaders-workers-spawned
(Antoine du Hamel) #50251 - [
d5cc5d7956
] - test: deflaketest-esm-loader-resolve-type
(Antoine du Hamel) #50273 - [
866d646b0e
] - test: increase coverage ofModule.register
andinitialize
hook (Antoine du Hamel) #49532 - [
65201ab36b
] - test: isolateglobalPreload
tests (Geoffrey Booth) #49545 - [
65058d9a35
] - test: addtmpdir.fileURL()
(Livia Medeiros) #49040 - [
e1c6f46926
] - test: reduce flakiness oftest-esm-loader-hooks
(Antoine du Hamel) #49248 - [
e8d475ffc4
] - test: refactortest-esm-loader-hooks
for easier debugging (Antoine du Hamel) #49131 - [
26f01669fc
] - test: reduce flakiness oftest-esm-loader-hooks
(Antoine du Hamel) #49105 - [
d5a1153970
] - test: usefixtures.fileURL
when appropriate (Antoine du Hamel) #48990 - [
3424793013
] - test: fix snapshot tests when cwd contains spaces or backslashes (Antoine du Hamel) #48959 - [
a9347a4635
] - test: ordercommon.mjs
in ASCII order (Antoine du Hamel) #48960 - [
adb9280d8e
] - test: fix some assumptions in tests (Antoine du Hamel) #48958 - [
f02637e805
] - test: fixes-module/test-esm-initialization
(Antoine du Hamel) #48880 - [
8c918e5e59
] - test: relax version check with shared OpenSSL (Luigi Pinca) #50505 - [
c6caf13ad5
] - test: fix crypto-dh error message for OpenSSL 3.x (Kerem Kat) #50395 - [
65b41ebd1f
] - test: split test-crypto-dh to avoid timeout on slow machines in the CI (Joyee Cheung) #49492 - [
7606921e1d
] - test: fix testsuite against zlib version 1.3 (Dominique Leuenberger) #50364 - [
4f78233254
] - test: verify tracePromise does not do runStores (Stephen Belanger) #47349 - [
cb6ef74cf2
] - test: fix IPv6 checks on IBM i (Abdirahim Musse) #46546 - [
bcf97ab1b2
] - test: fix flaky test-runner-exit-code.js (Colin Ihrig) #46138 - [
f0e8ff90eb
] - test: use an array for WPT gloablThis initialization scripts (Joyee Cheung) #46425 - [
0e0dd1fe90
] - test: adapt tests for OpenSSL 3.1 (OttoHollmann) #47859 - [
e3ea906988
] - test: disambiguate AIX and IBM i (Richard Lau) #48056 - [
088460d80c
] - test: add os setPriority, getPriority test coverage (Wael) #38771 - [
b011a498c5
] - test,benchmark: usetmpdir.fileURL()
(Livia Medeiros) #49138 - [
54168b7364
] - test_runner: add test location for FileTests (Colin Ihrig) #49999 - [
1d9c37161d
] - test_runner: replace spurious if with else (Colin Ihrig) #49943 - [
b283ae4238
] - (SEMVER-MINOR) test_runner: accepttestOnly
inrun
(Moshe Atlow) #49753 - [
103c4a088a
] - test_runner: catch reporter errors (Moshe Atlow) #49646 - [
e459598cf2
] - test_runner: fix test runner watch mode when no positional arguments (Moshe Atlow) #49578 - [
059b1945d8
] - (SEMVER-MINOR) test_runner: add junit reporter (Moshe Atlow) #49614 - [
76a35632d3
] - test_runner: add jsdocs to mock.js (Caio Borghi) #49555 - [
ba57c24fde
] - test_runner: fix invalid timer call (Erick Wendel) #49477 - [
5949ae016f
] - test_runner: add jsdocs to MockTimers (Erick Wendel) #49476 - [
429846f258
] - test_runner: fix typescript coverage (Moshe Atlow) #49406 - [
760c98280e
] - test_runner: preserve original property descriptor (Erick Wendel) #49433 - [
95cc98e14b
] - test_runner: expose spec reporter as newable function (Chemi Atlow) #49184 - [
d83964031b
] - test_runner: reland run global after() hook earlier (Colin Ihrig) #49116 - [
d61a505546
] - (SEMVER-MINOR) test_runner: expose location of tests (Colin Ihrig) #48975 - [
00c70e12f7
] - test_runner: dont set exit code on todo tests (Moshe Atlow) #48929 - [
71f7ed728d
] - test_runner: fix global after not failing the tests (Raz Luvaton) #48913 - [
11fbd924ed
] - test_runner: add support for setImmediate (Erick Wendel) #49397 - [
fb64d415be
] - test_runner: fix timeout in *Each hook failing further tests (Raz Luvaton) #48925 - [
67d7faddb2
] - test_runner: cleanup test timeout abort listener (Raz Luvaton) #48915 - [
d217435cd3
] - test_runner: fix todo and only in spec reporter (Moshe Atlow) #48929 - [
9f122be15a
] - test_runner: unwrap error message in TAP reporter (Colin Ihrig) #48942 - [
3a74316624
] - test_runner: add__proto__
null (Raz Luvaton) #48663 - [
66ea9bdb4d
] - test_runner: fix global before not called when no global test exists (Raz Luvaton) #48877 - [
0bd9704018
] - test_runner: use os.availableParallelism() (Colin Ihrig) #45969 - [
b55eb2a8d1
] - (SEMVER-MINOR) test_runner: add shards support (Raz Luvaton) #48639 - [
c2575c8db0
] - test_runner: fix test_runnertest:fail
event type (Ethan Arrowood) #48854 - [
6b186d41cd
] - test_runner: fix async callback in describe not awaited (Raz Luvaton) #48856 - [
2d4511baab
] - test_runner: call abort on test finish (Raz Luvaton) #48827 - [
05e7f28b40
] - (SEMVER-MINOR) test_runner: add initial draft for fakeTimers (Erick Wendel) #47775 - [
428301ad27
] - (SEMVER-MINOR) test_runner, cli: add --test-concurrency flag (Colin Ihrig) #49996 - [
4b2e258c76
] - test_runner,test: fix flaky test-runner-cli-concurrency.js (Colin Ihrig) #50108 - [
b5d16cd8f0
] - (SEMVER-MINOR) tls: add ALPNCallback server option for dynamic ALPN negotiation (Tim Perry) #45190 - [
a1c94037ab
] - tools: fix --v8-non-optimized-debug for v18.x (Joyee Cheung) #50612 - [
3b65c61f5c
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #50083 - [
07941a3609
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #49983 - [
ad6e7a6270
] - tools: update lint-md-dependencies to rollup@3.29.2 (Node.js GitHub Bot) #49679 - [
3511b13c94
] - tools: update lint-md-dependencies to rollup@3.29.0 unified@11.0.3 (Node.js GitHub Bot) #49584 - [
b6522a2b6b
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #49342 - [
01b2588acf
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #49253 - [
0cb42ccb5c
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #49122 - [
caa7ecca30
] - tools: update lint-md-dependencies to rollup@3.27.2 (Node.js GitHub Bot) #49035 - [
42846a02b3
] - tools: limit the number of auto start CIs (Antoine du Hamel) #49067 - [
9cc3b2061f
] - tools: update lint-md-dependencies to rollup@3.27.0 (Node.js GitHub Bot) #48965 - [
1cbb186039
] - tools: update lint-md-dependencies to rollup@3.26.3 (Node.js GitHub Bot) #48888 - [
f7d6e9ba43
] - tools: update lint-md-dependencies to @rollup/plugin-commonjs@25.0.3 (Node.js GitHub Bot) #48791 - [
a98addb626
] - tools: skip ruff on tools/node_modules (Moshe Atlow) #49838 - [
6cf8dd95d1
] - tools: update eslint to 8.51.0 (Node.js GitHub Bot) #50084 - [
b8d2a29ff5
] - tools: update eslint to 8.50.0 (Node.js GitHub Bot) #49989 - [
1c1cbf06f0
] - tools: update eslint to 8.49.0 (Node.js GitHub Bot) #49586 - [
92d21864c5
] - tools: update eslint to 8.48.0 (Node.js GitHub Bot) #49343 - [
0940de36ee
] - tools: update eslint to 8.47.0 (Node.js GitHub Bot) #49124 - [
4880a05fa2
] - tools: update eslint to 8.46.0 (Node.js GitHub Bot) #48966 - [
e9632454cd
] - tools: update eslint to 8.45.0 (Node.js GitHub Bot) #48793 - [
ae49f319c4
] - tools: drop support for osx notarization with gon (Ulises Gascón) #50291 - [
014b65e9b7
] - tools: use osx notarytool for future releases (Ulises Gascon) #48701 - [
71c386a25c
] - typings: update JSDoc forcwd
inchild_process
(LiviaMedeiros) #49029 - [
4d70a2c344
] - typings: sync JSDoc with the actual implementation (Hyunjin Kim) #48853 - [
945609487c
] - typings: fix missing property inExportedHooks
(Antoine du Hamel) #49567 - [
2ef80f12b9
] - typings: fix JSDoc in ESM loader modules (Antoine du Hamel) #48424 - [
7fc15b6d42
] - url: fixisURL
detection by checkingpath
(Zhuo Zhang) #48928 - [
916a63b124
] - url: improveisURL
detection (Yagiz Nizipli) #47886 - [
ac27431372
] - url: validatepathToFileURL(path)
argument as string (LiviaMedeiros) #49161 - [
f256b160bf
] - url: handle unicode hostname if empty (Yagiz Nizipli) #49396 - [
2441415c68
] - url: reducepathToFileURL
cpp calls (Yagiz Nizipli) #48709 - [
227e749888
] - url: validate URL constructor arg length (Matthew Aitken) #47513 - [
bf4ee17d18
] - url: validate argument length in canParse (Matthew Aitken) #47513 - [
a67fa2a107
] - util: addgetCwdSafe
internal util fn (João Lenon) #48434 - [
e96f7ef881
] - (SEMVER-MINOR) vm: use import attributes instead of import assertions (Antoine du Hamel) #50141 - [
525de686a7
] - (SEMVER-MINOR) wasi: updates required for latest uvwasi version (Michael Dawson) #49908 - [
f27d505805
] - watch: decrease debounce rate (Moshe Atlow) #48926 - [
83a6d20d70
] - watch: use debounce instead of throttle (Moshe Atlow) #48926 - [
879b958184
] - worker: protect against user mutating well-known prototypes (Antoine du Hamel) #49270
v18.18.2
: 2023-10-13, Version 18.18.2 'Hydrogen' (LTS), @RafaelGSS
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
-
CVE-2023-44487:
nghttp2
Security Release (High) -
CVE-2023-45143:
undici
Security Release (High) - CVE-2023-38552: Integrity checks according to policies can be circumvented (Medium)
- CVE-2023-39333: Code injection via WebAssembly export names (Low)
More detailed information on each of the vulnerabilities can be found in October 2023 Security Releases blog post.
Commits
- [
55028468db
] - deps: update undici to v5.26.3 (Matteo Collina) #50153 - [
a792bbc515
] - deps: update nghttp2 to 1.57.0 (James M Snell) #50121 - [
f6444defa4
] - deps: update nghttp2 to 1.56.0 (Node.js GitHub Bot) #49582 - [
7e9b08dfd4
] - deps: update nghttp2 to 1.55.1 (Node.js GitHub Bot) #48790 - [
85672c153f
] - deps: update nghttp2 to 1.55.0 (Node.js GitHub Bot) #48746 - [
300a902422
] - deps: update nghttp2 to 1.53.0 (Node.js GitHub Bot) #47997 - [
7d83ed0bf6
] - Revert "deps: update nghttp2 to 1.55.0" (Richard Lau) #50151 - [
1193ca5fdb
] - lib: let deps requirenode
prefixed modules (Matthew Aitken) #50047 - [
eaf9083cf1
] - module: fix code injection through export names (Tobias Nießen) nodejs-private/node-private#461 - [
1c538938cc
] - policy: use tamper-proof integrity check function (Tobias Nießen) nodejs-private/node-private#462
v18.18.1
: 2023-10-10, Version 18.18.1 'Hydrogen' (LTS), @richardlau
Notable Changes
This release addresses some regressions that appeared in Node.js 18.18.0:
- (Windows) FS can not handle certain characters in file name #48673
- 18 and 20 node images give error - Text file busy (after re-build images) nodejs/docker-node#1968
- libuv update in 18.18.0 breaks webpack's thread-loader #49911
The libuv 1.45.0 and 1.46.0 updates that were released in Node.js 18.18.0 have been temporarily reverted.
Commits
- [
3e3a75cc46
] - Revert "build: sync libuv header change" (Richard Lau) #50036 - [
14ece2c479
] - Revert "deps: upgrade to libuv 1.45.0" (Richard Lau) #50036 - [
022352acbe
] - Revert "deps: upgrade to libuv 1.46.0" (Richard Lau) #50036 - [
d9f138189c
] - Revert "deps: add missing thread-common.c in uv.gyp" (Richard Lau) #50036 - [
7a3e1ffbb8
] - fs: make sure to write entire buffer (Robert Nagy) #49211 - [
04cba95a67
] - test: addtmpdir.resolve()
(Livia Medeiros) #49079
v18.18.0
: 2023-09-18, Version 18.18.0 'Hydrogen' (LTS), @ruyadorno
Notable Changes
- [
7dc731d4bf
] - build: sync libuv header change (Jiawen Geng) #48078 - [
490fc004b0
] - crypto: update root certificates to NSS 3.93 (Node.js GitHub Bot) #49341 - [
dd8cd97d4d
] - crypto: update root certificates to NSS 3.90 (Node.js GitHub Bot) #48416 - [
ea23870bec
] - deps: add missing thread-common.c in uv.gyp (Santiago Gimeno) #48078 - [
88855e0b1b
] - deps: upgrade to libuv 1.46.0 (Santiago Gimeno) #48078 - [
fb2b80fca0
] - deps: upgrade to libuv 1.45.0 (Santiago Gimeno) #48078 - [
249879e46c
] - doc: add atlowChemi to collaborators (atlowChemi) #48757 - [
e8dc7bde6a
] - doc: add vmoroz to collaborators (Vladimir Morozov) #48527 - [
a30f2fbcc1
] - doc: add kvakil to collaborators (Keyhan Vakil) #48449 - [
c39b7c240e
] - (SEMVER-MINOR) esm: add--import
flag (Moshe Atlow) #43942 - [
a68a67f54d
] - (SEMVER-MINOR) events: allow safely adding listener to abortSignal (Chemi Atlow) #48596 - [
3a8586bee2
] - fs, stream: initialSymbol.dispose
andSymbol.asyncDispose
support (Moshe Atlow) #48518 - [
863bdb785d
] - net: add autoSelectFamily global getter and setter (Paolo Insogna) #45777 - [
c59ae86ba0
] - (SEMVER-MINOR) url: add value argument to has and delete methods (Sankalp Shubham) #47885
Commits
- [
d1f43317ea
] - benchmark: add bar.R (Rafael Gonzaga) #47729 - [
4f74be3c92
] - benchmark: refactor crypto oneshot (Filip Skokan) #48267 - [
fe9da9df0f
] - benchmark: add crypto.create*Key (Filip Skokan) #48284 - [
9cb18b3e9d
] - build: do not pass target toolchain flags to host toolchain (Ivan Trubach) #48597 - [
7dc731d4bf
] - build: sync libuv header change (Jiawen Geng) #48078 - [
211a4f88a9
] - build: update action to close stale MRs (Michael Dawson) #48196 - [
cc33a1864b
] - child_process: harden against prototype pollution (Livia Medeiros) #48726 - [
b5df084e1e
] - child_process: use addAbortListener (atlowChemi) #48550 - [
611db8df1a
] - child_process: supportSymbol.dispose
(Moshe Atlow) #48551 - [
490fc004b0
] - crypto: update root certificates to NSS 3.93 (Node.js GitHub Bot) #49341 - [
dd8cd97d4d
] - crypto: update root certificates to NSS 3.90 (Node.js GitHub Bot) #48416 - [
b2bc839d4c
] - crypto: remove OPENSSL_FIPS guard for OpenSSL 3 (Richard Lau) #48392 - [
c8da8c80b9
] - deps: update nghttp2 to 1.55.0 (Node.js GitHub Bot) #48746 - [
7e04242dcb
] - deps: update minimatch to 9.0.3 (Node.js GitHub Bot) #48704 - [
ea23870bec
] - deps: add missing thread-common.c in uv.gyp (Santiago Gimeno) #48078 - [
88855e0b1b
] - deps: upgrade to libuv 1.46.0 (Santiago Gimeno) #48078 - [
fb2b80fca0
] - deps: upgrade to libuv 1.45.0 (Santiago Gimeno) #48078 - [
59fca4e09a
] - deps: update acorn to 8.10.0 (Node.js GitHub Bot) #48713 - [
bcb255d5a8
] - deps: V8: cherry-pickcb00db4
(Keyhan Vakil) #48671 - [
65a6c90fc6
] - deps: update acorn to 8.9.0 (Node.js GitHub Bot) #48484 - [
6b6d5d91e9
] - deps: update zlib to 1.2.13.1-motley-f81f385 (Node.js GitHub Bot) #48541 - [
56249b0770
] - deps: update googletest toec4fed9
(Node.js GitHub Bot) #48538 - [
8914a5204a
] - deps: update minimatch to 9.0.2 (Node.js GitHub Bot) #48542 - [
1b960d9988
] - deps: update icu to 73.2 (Node.js GitHub Bot) #48502 - [
f0e2e3c549
] - deps: update zlib to 1.2.13.1-motley-3ca9f16 (Node.js GitHub Bot) #48413 - [
9cf8fe6b93
] - deps: upgrade npm to 9.8.1 (npm team) #48838 - [
d9ff473ff3
] - deps: upgrade npm to 9.8.0 (npm team) #48665 - [
4a6177daad
] - deps: upgrade npm to 9.7.2 (npm team) #48514 - [
104b58feb1
] - deps: update ada to 2.6.0 (Node.js GitHub Bot) #48896 - [
7f7a125d78
] - deps: update corepack to 0.19.0 (Node.js GitHub Bot) #48540 - [
5e1eb451d1
] - deps: update corepack to 0.18.1 (Node.js GitHub Bot) #48483 - [
3be53358bc
] - deps: add loong64 config into openssl gypi (Shi Pujin) #48043 - [
555982c59e
] - deps: upgrade npm to 9.7.1 (npm team) #48378 - [
3c03ec0832
] - deps: update simdutf to 3.2.14 (Node.js GitHub Bot) #48344 - [
a2964a4583
] - deps: update ada to 2.5.1 (Node.js GitHub Bot) #48319 - [
38f6e0d8cd
] - deps: update zlib to982b036
(Node.js GitHub Bot) #48327 - [
f4617a4f81
] - deps: add loongarch64 into openssl Makefile and gen openssl-loongarch64 (Shi Pujin) #46401 - [
573eb4be12
] - dgram: socket addasyncDispose
(atlowChemi) #48717 - [
f3c4300e00
] - dgram: use addAbortListener (atlowChemi) #48550 - [
d3041df738
] - doc: expand on squashing and rebasing to land a MR (Chengzhong Wu) #48751 - [
249879e46c
] - doc: add atlowChemi to collaborators (atlowChemi) #48757 - [
42ecd46d1f
] - doc: fix ambiguity in http.md and https.md (an5er) #48692 - [
e78824e053
] - doc: add release key for Ulises Gascon (Ulises Gascón) #49196 - [
1aa798d69f
] - doc: clarify transform._transform() callback argument logic (Rafael Sofi-zada) #48680 - [
d723e870a2
] - doc: mention git node release prepare (Rafael Gonzaga) #48644 - [
a9a1394388
] - doc: fix options order (Luigi Pinca) #48617 - [
989ea6858f
] - doc: update security release stewards (Rafael Gonzaga) #48569 - [
f436ac1803
] - doc: update return type for describe (Shrujal Shah) #48572 - [
fbe89e6320
] - doc: run license-builder (github-actions[bot]) #48552 - [
f18b287bc3
] - doc: add description of autoAllocateChunkSize in ReadableStream (Debadree Chatterjee) #48004 - [
e2f3ed1444
] - doc: fixfilename
type inwatch
result (Dmitry Semigradsky) #48032 - [
1fe75dc2b0
] - doc: unnestmime
andMIMEParams
from MIMEType constructor (Dmitry Semigradsky) #47950 - [
e1339d58e8
] - doc: update security-release-process.md (Rafael Gonzaga) #48504 - [
e8dc7bde6a
] - doc: add vmoroz to collaborators (Vladimir Morozov) #48527 - [
f8ba672c7b
] - doc: link to Runtime Keys in export conditions (Jacob Hummer) #48408 - [
0056cb93e9
] - doc: update fs flags documentation (sinkhaha) #48463 - [
3cf3fb9479
] - doc: reviseerror.md
introduction (Antoine du Hamel) #48423 - [
7575d8b90e
] - doc: add preveen-stack to triagers (Preveen P) #48387 - [
820aa550a4
] - doc: refine when file is undefined in test events (Moshe Atlow) #48451 - [
a30f2fbcc1
] - doc: add kvakil to collaborators (Keyhan Vakil) #48449 - [
239b4ea66f
] - doc: mark--import
as experimental (Moshe Atlow) #44067 - [
2a561aefe2
] - doc: add additional info on TSFN dispatch (Michael Dawson) #48367 - [
5cc6eee30d
] - doc: add link for news from security wg (Michael Dawson) #48396 - [
ffece88452
] - doc: fix typo in events.md (Darshan Sen) #48436 - [
06513585dc
] - doc: run license-builder (github-actions[bot]) #48336 - [
d9a800ee5c
] - esm: fix emit deprecation on legacy main resolve (Antoine du Hamel) #48664 - [
c39b7c240e
] - (SEMVER-MINOR) esm: add--import
flag (Moshe Atlow) #43942 - [
a00464ee06
] - esm: fix specifier resolution and symlinks (Zack Newsham) #47674 - [
3b8ec348b0
] - events: fix bug listenerCount don't compare wrapped listener (yuzheng14) #48592 - [
a68a67f54d
] - (SEMVER-MINOR) events: allow safely adding listener to abortSignal (Chemi Atlow) #48596 - [
5354af3dab
] - fs: call the callback with an error if writeSync fails (killa) #47949 - [
c3a27d1d3d
] - fs: remove unneeded return statement (Luigi Pinca) #48526 - [
3a8586bee2
] - fs, stream: initialSymbol.dispose
andSymbol.asyncDispose
support (Moshe Atlow) #48518 - [
01746c71df
] - http: null the joinDuplicateHeaders property on cleanup (Luigi Pinca) #48608 - [
d47eb73a85
] - http: remove useless ternary in test (geekreal) #48481 - [
977e9a38b4
] - http: fix for handling on boot timers headers and request (Franciszek Koltuniuk) #48291 - [
be88f7cd22
] - http2: use addAbortListener (atlowChemi) #48550 - [
7c7230a85c
] - http2: send RST code 8 on AbortController signal (Devraj Mehta) #48573 - [
f74c2fc72a
] - lib: use addAbortListener (atlowChemi) #48550 - [
db355d1f37
] - lib: add option to force handling stopped events (Chemi Atlow) #48301 - [
5d682c55a5
] - lib: reduce url getters onmakeRequireFunction
(Yagiz Nizipli) #48492 - [
5260f53e55
] - lib: add support for inherited custom inspection methods (Antoine du Hamel) #48306 - [
69aaf8b1d1
] - lib: remove invalid parameter to toASCII (Yagiz Nizipli) #48878 - [
51863b80e4
] - meta: bump actions/checkout from 3.5.2 to 3.5.3 (dependabot[bot]) #48625 - [
7ec370991d
] - meta: bump step-security/harden-runner from 2.4.0 to 2.4.1 (dependabot[bot]) #48626 - [
34b8e980d4
] - meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0 (dependabot[bot]) #48628 - [
dfed9a7da9
] - meta: bump github/codeql-action from 2.3.6 to 2.20.1 (dependabot[bot]) #48627 - [
071eaadc5a
] - module: add SourceMap.findOrigin (Isaac Z. Schlueter) #47790 - [
bf1525c549
] - module: reduce url invocations in esm/load.js (Yagiz Nizipli) #48337 - [
f8921630a2
] - net: server addasyncDispose
(atlowChemi) #48717 - [
b5f53d9a0b
] - net: fix family autoselection SSL connection handling (Paolo Insogna) #48189 - [
267439fc34
] - net: rework autoSelectFamily implementation (Paolo Insogna) #46587 - [
d3637cdbbf
] - net: fix address iteration with autoSelectFamily (Fedor Indutny) #48258 - [
e8289a83f1
] - net: fix family autoselection timeout handling (Paolo Insogna) #47860 - [
863bdb785d
] - net: add autoSelectFamily global getter and setter (Paolo Insogna) #45777 - [
04dc090bfa
] - node-api: provide napi_define_properties fast path (Gabriel Schulhof) #48440 - [
feb6a54dc3
] - node-api: implement external strings (Gabriel Schulhof) #48339 - [
121f74c463
] - perf_hooks: convert maxSize to IDL value in setResourceTimingBufferSize (Chengzhong Wu) #44902 - [
804d880589
] - permission: fix data types in PrintTree (Tobias Nießen) #48770 - [
7aaecce9bf
] - permission: add debug log when inserting fs nodes (Rafael Gonzaga) #48677 - [
cb51ef2905
] - readline: use addAbortListener (atlowChemi) #48550 - [
07065d0814
] - report: disable js stack when no context is entered (Chengzhong Wu) #48495 - [
572b82ffef
] - src: make BaseObject iteration order deterministic (Joyee Cheung) #48702 - [
3f65598a41
] - src: remove kEagerCompile for CompileFunction (Keyhan Vakil) #48671 - [
f43eacac9b
] - src: deduplicate X509 getter implementations (Tobias Nießen) #48563 - [
0c19621bdc
] - src: fix uninitialized field access in AsyncHooks (Jan Olaf Krems) #48566 - [
0c38184d62
] - src: fix Coverity issue regarding unnecessary copy (Yagiz Nizipli) #48565 - [
0d73009ba3
] - src: refactorSplitString
in util (Yagiz Nizipli) #48491 - [
6c72622df9
] - src: handle wasm out of bound in osx will raise SIGBUS correctly (Congcong Cai) #46561 - [
e4261809b0
] - src: replace idna functions with ada::idna (Yagiz Nizipli) #47735 - [
3dd82b1820
] - stream: use addAbortListener (atlowChemi) #48550 - [
786fbdb824
] - stream: fix premature pipeline end (Robert Nagy) #48435 - [
c224e1b255
] - stream: fix deadlock when pipeing to full sink (Robert Nagy) #48691 - [
2c75b9ece2
] - test: fix flaky test-string-decode.js on x86 (Stefan Stojanovic) #48750 - [
279c4f64c1
] - test: mark test-http-regr-gh-2928 as flaky (Joyee Cheung) #49565 - [
01eacccd9a
] - test: deflake test-net-throttle (Luigi Pinca) #48599 - [
33886b271c
] - test: move test-net-throttle to parallel (Luigi Pinca) #48599 - [
a79112b5f4
] - Revert "test: remove test-crypto-keygen flaky designation" (Luigi Pinca) #48652 - [
6ec57984db
] - test: add missing assertions to test-runner-cli (Moshe Atlow) #48593 - [
dd1805e802
] - test: remove test-crypto-keygen flaky designation (Luigi Pinca) #48575 - [
df9a9afc99
] - test: remove test-timers-immediate-queue flaky designation (Luigi Pinca) #48575 - [
3ae96ae380
] - test: make IsolateData per-isolate in cctest (Joyee Cheung) #48450 - [
f2ce8e0c06
] - test: define NAPI_VERSION before including node_api.h (Chengzhong Wu) #48376 - [
13ac0a5e26
] - test: remove unnecessary noop function args tomustNotCall()
(Antoine du Hamel) #48513 - [
8fdd4c55b3
] - test: skip test-runner-watch-mode on IBMi (Moshe Atlow) #48473 - [
9d90409241
] - test: fix flaky test-watch-mode (Moshe Atlow) #48147 - [
27a4bc7c32
] - test: add missing <algorithm> include for std::find (Sam James) #48380 - [
cb92c4b9fe
] - test: update url web-platform tests (Yagiz Nizipli) #48319 - [
f35c4d3190
] - test: ignore the copied entry_point.c (Luigi Pinca) #48297 - [
41d1e6888f
] - test: refactor test-gc-http-client-timeout (Luigi Pinca) #48292 - [
125bca621a
] - test: update encoding web-platform tests (Yagiz Nizipli) #48320 - [
e9ac111d02
] - test: update FileAPI web-platform tests (Yagiz Nizipli) #48322 - [
3da57d17f5
] - test: update user-timing web-platform tests (Yagiz Nizipli) #48321 - [
c728b8a29b
] - test: fixtest-net-autoselectfamily
for kernel without IPv6 support (Livia Medeiros) #45856 - [
6de7aa1d19
] - test: movetest-tls-autoselectfamily-servername
totest/internet
(Antoine du Hamel) #47029 - [
2de9868292
] - test: validate host with commas on url.parse (Yagiz Nizipli) #48878 - [
e7d2e8ef2a
] - test: delete test-net-bytes-per-incoming-chunk-overhead (Michaël Zasso) #48811 - [
f5494fa1b0
] - test_runner: fixedtest
shorthands return type (Shocker) #48555 - [
7051cafdfa
] - test_runner: make--test-name-pattern
recursive (Moshe Atlow) #48382 - [
f302286442
] - test_runner: refactor coverage report output for readability (Damien Seguin) #47791 - [
7822a541e5
] - timers: support Symbol.dispose (Moshe Atlow) #48633 - [
3eeca52db1
] - tls: fix bugs of double TLS (rogertyang) #48969 - [
4826379516
] - tools: run fetch_deps.py with Python 3 (Richard Lau) #48729 - [
e2688c8d79
] - tools: update doc to unist-util-select@5.0.0 unist-util-visit@5.0.0 (Node.js GitHub Bot) #48714 - [
7399481096
] - tools: update lint-md-dependencies to rollup@3.26.2 (Node.js GitHub Bot) #48705 - [
31c07153ce
] - tools: update eslint to 8.44.0 (Node.js GitHub Bot) #48632 - [
4e53f51e24
] - tools: update lint-md-dependencies to rollup@3.26.0 (Node.js GitHub Bot) #48631 - [
7d52950a96
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #48544 - [
e168eab3ee
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #48486 - [
9711bc24f6
] - tools: replace sed with perl (Luigi Pinca) #48499 - [
9c1937c0a7
] - tools: update eslint to 8.43.0 (Node.js GitHub Bot) #48487 - [
9449f05ab1
] - tools: update doc to to-vfile@8.0.0 (Node.js GitHub Bot) #48485 - [
79dcd968b1
] - tools: prepare tools/doc for to-vfile 8.0.0 (Rich Trott) #48485 - [
538f388ac0
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #48417 - [
01bc10dcd5
] - tools: update create-or-update-pull-request-action (Richard Lau) #48398 - [
590a072657
] - tools: update eslint-plugin-jsdoc (Richard Lau) #48393 - [
6a5805491e
] - tools: update eslint to 8.42.0 (Node.js GitHub Bot) #48328 - [
2eb13e3986
] - tools: disable jsdoc/no-defaults rule (Luigi Pinca) #48328 - [
3363cfa6c7
] - typings: remove unused primordials (Yagiz Nizipli) #48509 - [
c59ae86ba0
] - (SEMVER-MINOR) url: add value argument to has and delete methods (Sankalp Shubham) #47885 - [
f59c9636f4
] - url: conform to origin getter spec changes (Yagiz Nizipli) #48319 - [
0beb5ab93d
] - url: ensure getter access do not mutate observable symbols (Antoine du Hamel) #48897 - [
0a022c496d
] - util: useprimordials.ArrayPrototypeIndexOf
instead of mutable method (DaisyDogs07) #48586
v18.17.1
: 2023-08-09, Version 18.17.1 'Hydrogen' (LTS), @RafaelGSS
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
- CVE-2023-32002: Policies can be bypassed via Module._load (High)
- CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
- CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
- OpenSSL Security Releases
More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.
Commits
- [
fe3abdf82e
] - deps: update archs files for openssl-3.0.10+quic1 (Node.js GitHub Bot) #49036 - [
2c5a522d9c
] - deps: upgrade openssl sources to quictls/openssl-3.0.10+quic1 (Node.js GitHub Bot) #49036 - [
15bced0bde
] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#417 - [
d4570fae35
] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#460
v18.17.0
: 2023-07-18, Version 18.17.0 'Hydrogen' (LTS), @danielleadams
Notable Changes
Ada 2.0
Node.js v18.17.0 comes with the latest version of the URL parser, Ada. This update brings significant performance improvements to URL parsing, including enhancements to the url.domainToASCII and url.domainToUnicode functions in node:url.
Ada 2.0 has been integrated into the Node.js codebase, ensuring that all parts of the application can benefit from the improved performance. Additionally, Ada 2.0 features a significant performance boost over its predecessor, Ada 1.0.4, while also eliminating the need for the ICU requirement for URL hostname parsing.
Contributed by Yagiz Nizipli and Daniel Lemire in #47339
Web Crypto API
Web Crypto API functions' arguments are now coerced and validated as per their WebIDL definitions like in other Web Crypto API implementations. This further improves interoperability with other implementations of Web Crypto API.
Contributed by Filip Skokan in #46067
-
crypto:
- update root certificates to NSS 3.89 (Node.js GitHub Bot) #47659
-
dns:
- (SEMVER-MINOR) expose getDefaultResultOrder (btea) #46973
- doc:
-
events:
- (SEMVER-MINOR) add getMaxListeners method (Matthew Aitken) #47039
-
fs:
- (SEMVER-MINOR) add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084
- (SEMVER-MINOR) add recursive option to readdir and opendir (Ethan Arrowood) #41439
- (SEMVER-MINOR) add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084
- (SEMVER-MINOR) implement byob mode for readableWebStream() (Debadree Chatterjee) #46933
- http:
- lib:
-
module:
- change default resolver to not throw on unknown scheme (Gil Tayar) #47824
- node-api:
- stream:
-
test:
- unflake test-vm-timeout-escape-nexttick (Santiago Gimeno) #48078
- test_runner:
-
tools:
- update LICENSE and license-builder.sh (Santiago Gimeno) #48078
-
url:
- (SEMVER-MINOR) implement URL.canParse (Matthew Aitken) #47179
-
wasi:
- (SEMVER-MINOR) no longer require flag to enable wasi (Michael Dawson) #47286
Commits
- [
2ba08ac002
] - benchmark: usecluster.isPrimary
instead ofcluster.isMaster
(Deokjin Kim) #48002 - [
60ca69d96c
] - benchmark: add eventtarget creation bench (Rafael Gonzaga) #47774 - [
d8233d96bb
] - benchmark: add a benchmark fordefaultResolve
(Antoine du Hamel) #47543 - [
a1aabb6912
] - benchmark: fix invalid requirementsURL (Deokjin Kim) #47378 - [
394c61caf9
] - bootstrap: support namespaced builtins in snapshot scripts (Joyee Cheung) #47467 - [
0165a765a0
] - bootstrap: do not expand process.argv[1] for snapshot entry points (Joyee Cheung) #47466 - [
cca557cdd9
] - buffer: combine checking range of sourceStart inbuf.copy
(Deokjin Kim) #47758 - [
4c69be467c
] - buffer: use private properties for brand checks in File (Matthew Aitken) #47154 - [
d002f9b6e2
] - build: revert unkonwn ruff selector (Moshe Atlow) #48753 - [
93f77cb762
] - build: set v8_enable_webassembly=false when lite mode is enabled (Cheng Shao) #48248 - [
1662e894f3
] - build: add action to close stale MRs (Michael Dawson) #48051 - [
5ca437b288
] - build: use pathlib for paths (Mohammed Keyvanzadeh) #47581 - [
72443bc54b
] - build: refactor configure.py (Mohammed Keyvanzadeh) #47667 - [
d4eecb5be9
] - build: add devcontainer configuration (Tierney Cyren) #40825 - [
803ed41144
] - build: bump ossf/scorecard-action from 2.1.2 to 2.1.3 (dependabot[bot]) #47367 - [
48468c4413
] - build: replace Python linter flake8 with ruff (Christian Clauss) #47519 - [
3ceb2c4387
] - build: add node-core-utils to setup (Jiawen Geng) #47442 - [
fdc59b8e14
] - build: bump github/codeql-action from 2.2.6 to 2.2.9 (dependabot[bot]) #47366 - [
3924893023
] - build: update stale action from v7 to v8 (Rich Trott) #47357 - [
753185c5b0
] - build: remove Python pip--no-user
option (Christian Clauss) #47372 - [
67af0a6a2b
] - build: avoid usage of pipes library (Mohammed Keyvanzadeh) #47271 - [
db910dd6b2
] - build, deps, tools: avoid excessive LTO (Konstantin Demin) #47313 - [
35d1def891
] - child_process: use signal.reason in child process abort (Debadree Chatterjee) #47817 - [
7692d2e7b9
] - cluster: use ObjectPrototypeHasOwnProperty (Daeyeon Jeong) #48141 - [
7617772762
] - crypto: use openssl's own memory BIOs in crypto_context.cc (GauriSpears) #47160 - [
8cabfe7c6e
] - crypto: fix setEngine() when OPENSSL_NO_ENGINE set (Tobias Nießen) #47977 - [
de1338da05
] - crypto: fix webcrypto private/secret import with empty usages (Filip Skokan) #47877 - [
27a696fda9
] - crypto: update root certificates to NSS 3.89 (Node.js GitHub Bot) #47659 - [
e2292f936e
] - crypto: remove INT_MAX restriction in randomBytes (Tobias Nießen) #47559 - [
a5f214c00c
] - crypto: replace THROW with CHECK for scrypt keylen (Tobias Nießen) #47407 - [
dd42214fd4
] - crypto: unify validation of checkPrime checks (Tobias Nießen) #47165 - [
76e4d12fb3
] - crypto: re-add padding for AES-KW wrapped JWKs (Filip Skokan) #46563 - [
9d894c17dd
] - crypto: use WebIDL converters in WebCryptoAPI (Filip Skokan) #46067 - [
6f3a8b45a5
] - deps: update ada to 2.5.0 (Node.js GitHub Bot) #48223 - [
075b6db919
] - deps: update ada to 2.4.2 (Node.js GitHub Bot) #48092 - [
a4ee1f652c
] - deps: update ada to 2.4.1 (Node.js GitHub Bot) #48036 - [
81b514d3f0
] - deps: update ada to 2.4.0 (Node.js GitHub Bot) #47922 - [
575ddf694f
] - deps: update ada to 2.3.1 (Node.js GitHub Bot) #47893 - [
2d03d5f458
] - deps: update ada to 2.3.0 (Node.js GitHub Bot) #47737 - [
42e690f2d5
] - deps: update ada to 2.2.0 (Node.js GitHub Bot) #47678 - [
08dd271521
] - deps: update ada to 2.1.0 (Node.js GitHub Bot) #47598 - [
96c50ba71f
] - deps: update ada to 2.0.0 (Node.js GitHub Bot) #47339 - [
4d1c38b758
] - deps: update zlib to337322d
(Node.js GitHub Bot) #48218 - [
74206b2549
] - deps: update histogram 0.11.8 (Marco Ippolito) #47742 - [
fbb4b3775d
] - deps: update histogram to 0.11.7 (Marco Ippolito) #47742 - [
e88c079022
] - deps: update simdutf to 3.2.12 (Node.js GitHub Bot) #48118 - [
48bd1248b9
] - deps: update minimatch to 9.0.1 (Node.js GitHub Bot) #48094 - [
d4572d31fa
] - deps: update corepack to 0.18.0 (Node.js GitHub Bot) #48091 - [
8090d29dc4
] - deps: update uvwasi to 0.0.18 (Node.js GitHub Bot) #47866 - [
169c8eea2e
] - deps: update uvwasi to 0.0.17 (Node.js GitHub Bot) #47866 - [
6acbb23380
] - deps: upgrade npm to 9.6.7 (npm team) #48062 - [
e8f2c0a58b
] - deps: update undici to 5.22.1 (Node.js GitHub Bot) #47994 - [
9309fd3120
] - deps: update simdutf to 3.2.9 (Node.js GitHub Bot) #47983 - [
b796d3560a
] - deps: upgrade npm to 9.6.6 (npm team) #47862 - [
cce372e14e
] - deps: V8: cherry-pickc5ab3e4
(Richard Lau) #47736 - [
7283486adb
] - deps: update undici to 5.22.0 (Node.js GitHub Bot) #47679 - [
2ea6e03003
] - deps: add minimatch as a dependency (Moshe Atlow) #47499 - [
261e1d23d1
] - deps: update ICU to 73.1 release (Steven R. Loomis) #47456 - [
f532f9df5f
] - deps: update undici to 5.21.2 (Node.js GitHub Bot) #47508 - [
dcb8c038b9
] - deps: update simdutf to 3.2.8 (Node.js GitHub Bot) #47507 - [
6c8456d61f
] - deps: update undici to 5.21.1 (Node.js GitHub Bot) #47488 - [
d3b2e8a438
] - deps: update simdutf to 3.2.7 (Node.js GitHub Bot) #47473 - [
64a5fe0499
] - deps: update corepack to 0.17.2 (Node.js GitHub Bot) #47474 - [
6f0f61a7d3
] - deps: upgrade npm to 9.6.4 (npm team) #47432 - [
443a72e207
] - deps: update zlib to upstream5edb52d
(Luigi Pinca) #47151 - [
dc3bc46914
] - deps: update simdutf to 3.2.3 (Node.js GitHub Bot) #47331 - [
b2f2bebbc2
] - deps: update timezone to 2023c (Node.js GitHub Bot) #47302 - [
c10729ffa7
] - deps: upgrade npm to 9.6.3 (npm team) #47325 - [
420deac1de
] - deps: update corepack to 0.17.1 (Node.js GitHub Bot) #47156 - [
966ba28491
] - deps: V8: cherry-pick3e4952c
(Richard Lau) #47236 - [
fc6ab26824
] - deps: update timezone to 2023b (Node.js GitHub Bot) #47256 - [
2700e70215
] - deps: upgrade npm to 9.6.2 (npm team) #47108 - [
29ba98a0a5
] - deps: V8: cherry-pick975ff4d
(Debadree Chatterjee) #47209 - [
be34777be8
] - deps: cherry-pick win/arm64/clang fixes (Cheng Zhao) #47011 - [
b52aacb614
] - deps: update uvwasi to v0.0.16 (Michael Dawson) #46434 - [
27a76cf5e0
] - deps,test: update postject to 1.0.0-alpha.6 (Node.js GitHub Bot) #48072 - [
b171c1a3a4
] - dgram: convert macro to template (Tobias Nießen) #47891 - [
709bf1c758
] - (SEMVER-MINOR) dns: expose getDefaultResultOrder (btea) #46973 - [
2f202c93e7
] - doc: clarify array args to Buffer.from() (Bryan English) #48274 - [
27f195f8d8
] - doc: document watch option for node:test run() (Moshe Atlow) #48256 - [
7558ef350a
] - doc: update documentation for FIPS support (Richard Lau) #48194 - [
f2bb1919e5
] - doc: improve the documentation of the stdio option (Kumar Arnav) #48110 - [
a2aa52ba92
] - doc: update Buffer.allocUnsafe description (sinkhaha) #48183 - [
19ad471d52
] - doc: update codeowners with website team (Claudio Wunder) #48197 - [
67b2c2a98f
] - doc: fix broken link to new folder doc/contributing/maintaining (Andrea Fassina) #48205 - [
795ca70815
] - doc: add atlowChemi to triagers (Chemi Atlow) #48104 - [
e437a0aff1
] - doc: fix typo in readline completer function section (Vadym) #48188 - [
92e0ea496d
] - doc: remove broken link for keygen (Rich Trott) #48176 - [
fe15dae8e6
] - doc: addauto
intrinsic height to prevent jitter/flicker (Daniel Holbert) #48195 - [
230335e21f
] - doc: add version info on the SEA docs (Antoine du Hamel) #48173 - [
e6f37d1b80
] - doc: add Ruy to list of TSC members (Michael Dawson) #48172 - [
69205a250c
] - doc: update socket.remote* properties documentation (Saba Kharanauli) #48139 - [
e4a5d6298c
] - doc: update outdated section on TLSv1.3-PSK (Tobias Nießen) #48123 - [
d14018ed99
] - doc: improve HMAC key recommendations (Tobias Nießen) #48121 - [
e9d4baf770
] - doc: clarify mkdir() recursive behavior (Stephen Odogwu) #48109 - [
3e4a469139
] - doc: fix typo in crypto legacy streams API section (Tobias Nießen) #48122 - [
bdf366ab88
] - doc: update SEA source link (Rich Trott) #48080 - [
2a4f79a75f
] - doc: clarify tty.isRaw (Roberto Vidal) #48055 - [
98c6e4be03
] - doc: use secure key length for HMAC generateKey (Tobias Nießen) #48052 - [
8ae5c8cf9d
] - doc: update broken EVP_BytesToKey link (Rich Trott) #48064 - [
3c713e7caa
] - doc: update broken spkac link (Rich Trott) #48063 - [
c22f739e94
] - doc: document node-api version process (Chengzhong Wu) #47972 - [
ce859f9f9f
] - doc: fix typo in binding functions (Deokjin Kim) #48003 - [
070c3457b7
] - doc: mark Node.js 14 as End-of-Life (Richard Lau) #48023 - [
3611027d8e
] - doc: clarify CRYPTO_CUSTOM_ENGINE_NOT_SUPPORTED (Tobias Nießen) #47976 - [
dbffad958c
] - doc: add missing deprecated blocks to cluster (Tobias Nießen) #47981 - [
035356f711
] - doc: update description of global (Tobias Nießen) #47969 - [
081a6ffaea
] - doc: update measure memory rejection information (Yash Ladha) #41639 - [
3460cf9c23
] - doc: fix broken link to TC39 import attributes proposal (Rich Trott) #47954 - [
3b018c8aa9
] - doc: fix broken link (Rich Trott) #47953 - [
244db960a9
] - doc: remove broken link (Rich Trott) #47942 - [
2cc8715bb9
] - doc: document make lint-md-clean (Matteo Collina) #47926 - [
b80e006c17
] - doc: mark global object as legacy (Mert Can Altın) #47819 - [
bf4eb058f3
] - doc: ntfs junction points must link to directories (Ben Noordhuis) #47907 - [
49875f0d69
] - doc: fix params names (Dmitry Semigradsky) #47853 - [
94b5eaaf17
] - doc: update supported version of FreeBSD to 12.4 (Michaël Zasso) #47838 - [
0114201825
] - doc: swap Matteo with Rafael in the stewards (Rafael Gonzaga) #47841 - [
8bcfcc0af9
] - doc: add valgrind suppression details (Kevin Eady) #47760 - [
75d397ecab
] - doc: replace EOL versions in README (Tobias Nießen) #47833 - [
2b0c57cb80
] - doc: add ovflowd to collaborators (Claudio Wunder) #47844 - [
be4966977c
] - doc: update BUILDING.md previous versions links (Tobias Nießen) #47835 - [
a9e8a20fb8
] - doc: create maintaining folder for deps (Marco Ippolito) #47589 - [
fd0f362d7c
] - doc: remove MoLow from Triagers (Moshe Atlow) #47792 - [
0927c67ab6
] - doc: fix typo in webstreams.md (Christian Takle) #47766 - [
994be578da
] - doc: move BethGriggs to regular member (Rich Trott) #47776 - [
64d19f4678
] - doc: move addaleax to TSC emeriti (Anna Henningsen) #47752 - [
33ec10e6b8
] - doc: add link to news for Node.js core (Michael Dawson) #47704 - [
2a682b5efe
] - doc: async_hooks asynchronous content example add mjs code (btea) #47401 - [
4f541c3ca3
] - doc: clarify concurrency model of test runner (Tobias Nießen) #47642 - [
ffcff68f0d
] - doc: fix typos (Mohammed Keyvanzadeh) #47685 - [
290b2b7afc
] - doc: fix capitalization of ASan (Mohammed Keyvanzadeh) #47676 - [
b4ca788878
] - doc: fix typos in SECURITY.md (Mohammed Keyvanzadeh) #47677 - [
971c545a47
] - doc: update error code of buffer (Deokjin Kim) #47617 - [
ec5c919928
] - doc: change offset of example inBuffer.copyBytesFrom
(Deokjin Kim) #47606 - [
980bf052c7
] - doc: remove markdown link from heading (Tobias Nießen) #47585 - [
e96451ec5e
] - doc: fix release-post script location (Rafael Gonzaga) #47517 - [
61ea15339c
] - doc: add link for news from uvwasi team (Michael Dawson) #47531 - [
d40bcdd73e
] - doc: add missing setEncoding call in ESM example (Anna Henningsen) #47558 - [
924dc909b3
] - doc: fix typo in util.types.isNativeError() (Julian Dax) #47532 - [
a24d72a6fb
] - doc: add KhafraDev to collaborators (Matthew Aitken) #47510 - [
b0196378b6
] - doc: create maintaining-brotli.md (Marco Ippolito) #47380 - [
3902be8fe8
] - doc: info on handling unintended breaking changes (Michael Dawson) #47426 - [
670f9a591d
] - doc: add performance initiative (Yagiz Nizipli) #47424 - [
89a5d04a8e
] - doc: do not create a backup file (Luigi Pinca) #47151 - [
7f2bccc5d6
] - doc: add MoLow to the TSC (Colin Ihrig) #47436 - [
7db2e889ac
] - doc: add a note about os.cpus() returning an empty list (codedokode) #47363 - [
289a8e30d6
] - doc: clarify reports are only evaluated on active versions (Rafael Gonzaga) #47341 - [
dc22edb4d2
] - doc: remove Vladimir de Turckheim from Security release stewards (Vladimir de Turckheim) #47318 - [
3e74a74da3
] - doc: add importing util to example of `process.report.getReport' (Deokjin Kim) #47298 - [
ece029f64e
] - doc: vm.SourceTextModule() without context option (Axel Kittenberger) #47295 - [
c7227204cc
] - doc: document process for sharing project news (Michael Dawson) #47189 - [
2865cbb4bd
] - doc: revise example of assert.CallTracker (Deokjin Kim) #47252 - [
81ebaf2670
] - doc: fix typo in SECURITY.md (Rich Trott) #47282 - [
faabd48f11
] - doc: use serial comma in cli docs (Tobias Nießen) #47262 - [
3a85794089
] - doc: improve example for Error.captureStackTrace() (Julian Dax) #46886 - [
2114fa472b
] - doc: clarify http error events after calling destroy() (Zach Bjornson) #46903 - [
d15f522d1f
] - doc: update output of example in AbortController (Deokjin Kim) #47227 - [
ab6588e343
] - doc: drop one-week branch sync on major releases (Rafael Gonzaga) #47149 - [
6ac52e3061
] - doc: fix grammar in the collaborator guide (Mohammed Keyvanzadeh) #47245 - [
13175774a6
] - doc: update stream.reduce concurrency note (Raz Luvaton) #47166 - [
1e97ccd6d4
] - doc: remove use of DEFAULT_ENCODING in PBKDF2 docs (Tobias Nießen) #47181 - [
d562a7c461
] - doc: fix typos in async_context.md (Shubham Sharma) #47155 - [
9a11788cdf
] - doc: update collaborator guide to reflect TSC changes (Rich Trott) #47126 - [
5fc2bb763f
] - doc: clarify thatfs.create{Read,Write}Stream
supportAbortSignal
(Antoine du Hamel) #47122 - [
2dd3b0213e
] - doc: improve documentation for util.types.isNativeError() (Julian Dax) #46840 - [
ce4636e36b
] - doc: rename the startup performance initiative to startup snapshot (#47111) (Joyee Cheung) - [
309d017f15
] - doc: fix "maintaining dependencies" heading typos (Keyhan Vakil) #47082 - [
230a984eb3
] - doc: include webstreams in finished() and Duplex.from() parameters (Debadree Chatterjee) #46312 - [
8651ea822e
] - doc,fs: update description of fs.stat() method (Mert Can Altın) #47654 - [
e4539e1f19
] - doc,test: update the v8.startupSnapshot doc and test the example (Joyee Cheung) #47468 - [
3dddc0175f
] - doc,test: fix concurrency option of test() (Tobias Nießen) #47734 - [
563f9fe06a
] - doc,vm: clarify usage of cachedData in vm.compileFunction() (Darshan Sen) #48193 - [
316016ffac
] - esm: avoid accessing lazy getters for urls (Yagiz Nizipli) #47542 - [
e5e385d2b2
] - esm: increase test coverage of edge cases (Antoine du Hamel) #47033 - [
061fb20660
] - (SEMVER-MINOR) events: add getMaxListeners method (Matthew Aitken) #47039 - [
ed0b62cc01
] - (SEMVER-MINOR) fs: add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084 - [
9b44c56c9a
] - fs: make readdir recursive algorithm iterative (Ethan Arrowood) #47650 - [
7273ef53b3
] - (SEMVER-MINOR) fs: add recursive option to readdir and opendir (Ethan Arrowood) #41439 - [
3f0636d2c1
] - (SEMVER-MINOR) fs: add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084 - [
a0b9853251
] - (SEMVER-MINOR) fs: implement byob mode for readableWebStream() (Debadree Chatterjee) #46933 - [
709e368708
] - http: send implicit headers on HEAD with no body (Matteo Collina) #48108 - [
dc318f26c0
] - (SEMVER-MINOR) http: prevent writing to the body when not allowed by HTTP spec (Gerrard Lindsay) #47732 - [
4b2a015642
] - (SEMVER-MINOR) http: remove internal error in assignSocket (Matteo Collina) #47723 - [
7cef6aa721
] - (SEMVER-MINOR) http: add highWaterMark opt in http.createServer (HinataKah0) #47405 - [
9186f3a0ef
] - http2: improve nghttp2 error callback (Tobias Nießen) #47840 - [
cc7e5dd4cd
] - inspector: add tips for Session (theanarkh) #47195 - [
70c0e882d3
] - inspector: log response and requests in the inspector for debugging (Joyee Cheung) #46941 - [
6099d2d08b
] - inspector: fix session.disconnect crash (theanarkh) #46942 - [
156292d44a
] - lib: create weakRef only if any signals provided (Chemi Atlow) #48448 - [
efaa073303
] - (SEMVER-MINOR) lib: implement AbortSignal.any() (Chemi Atlow) #47821 - [
c46b31f3bf
] - lib: support FORCE_COLOR for non TTY streams (Moshe Atlow) #48034 - [
286c358832
] - lib: do not disable linter for entire files (Antoine du Hamel) #48299 - [
a2552ab7c0
] - lib: use existingisWindows
variable (sinkhaha) #48134 - [
2b65625281
] - lib: update comment (sinkhaha) #47884 - [
fa447b5120
] - lib: use webidl DOMString converter in EventTarget (Matthew Aitken) #47514 - [
33f32dc318
] - lib: define Event.isTrusted in the prototype (Santiago Gimeno) #46974 - [
50789a5e4a
] - lib: refactor to usevalidateBuffer
(Deokjin Kim) #46489 - [
3658abea26
] - (SEMVER-MINOR) lib: add webstreams to Duplex.from() (Debadree Chatterjee) #46190 - [
fcf3781d22
] - lib,src,test: lint codebase according new rules for v18.x (Juan José Arboleda) #48697 - [
b55dc53422
] - meta: bump github/codeql-action from 2.3.3 to 2.3.6 (dependabot[bot]) #48287 - [
8ac4579d85
] - meta: bump actions/setup-python from 4.6.0 to 4.6.1 (dependabot[bot]) #48286 - [
b1854fe9c1
] - meta: bump codecov/codecov-action from 3.1.3 to 3.1.4 (dependabot[bot]) #48285 - [
d9448b8d93
] - meta: remove dont-land-on-v14 auto labeling (Shrujal Shah) #48031 - [
bb859768b6
] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #48010 - [
af90fb939b
] - meta: bump step-security/harden-runner from 2.3.1 to 2.4.0 (Rich Trott) #47980 - [
4dcf5e2052
] - meta: bump github/codeql-action from 2.3.2 to 2.3.3 (Rich Trott) #47979 - [
dab3186ea2
] - meta: bump actions/setup-python from 4.5.0 to 4.6.0 (Rich Trott) #47968 - [
546224c13c
] - meta: add security-wg ping to permission.js (Rafael Gonzaga) #47941 - [
353dfbd2d6
] - meta: bump step-security/harden-runner from 2.2.1 to 2.3.1 (dependabot[bot]) #47808 - [
20a5cc27ec
] - meta: bump actions/setup-python from 4.5.0 to 4.6.0 (dependabot[bot]) #47806 - [
eef6442d8d
] - meta: bump actions/checkout from 3.3.0 to 3.5.2 (dependabot[bot]) #47805 - [
e30e6a718a
] - meta: remove extra space in scorecard workflow (Mestery) #47805 - [
2d13cdebc4
] - meta: bump github/codeql-action from 2.2.9 to 2.3.2 (dependabot[bot]) #47809 - [
f0d8352ed8
] - meta: bump codecov/codecov-action from 3.1.1 to 3.1.3 (dependabot[bot]) #47807 - [
7e95fba0ff
] - meta: fix dependabot commit message (Mestery) #47810 - [
d31d9c7c28
] - meta: ping nodejs/startup for startup test changes (Joyee Cheung) #47771 - [
077686055b
] - meta: add mailmap entry for KhafraDev (Rich Trott) #47512 - [
e50eb6570a
] - meta: ping security-wg team on permission model changes (Rafael Gonzaga) #47483 - [
2df1a36214
] - meta: ping startup and realm team on src/node_realm* changes (Joyee Cheung) #47448 - [
c7dc6e321b
] - meta: fix notable-change comment label url (Filip Skokan) #47300 - [
e859ca44d5
] - meta: clarify the threat model to explain the JSON.parse case (Matteo Collina) #47276 - [
1f08f4848d
] - meta: update link to collaborators discussion page (Michaël Zasso) #47211 - [
3b524cbf86
] - meta: automate description requests when notable change label is added (Danielle Adams) #47078 - [
da16ca7c59
] - meta: move TSC voting member(s) to regular member(s) (Node.js GitHub Bot) #47180 - [
0c80e60d7e
] - meta: move TSC voting member to regular membership (Node.js GitHub Bot) #46985 - [
0edcfed895
] - meta: update GOVERNANCE.md to reflect TSC charter changes (Rich Trott) #47126 - [
baada5d035
] - meta: ask expected behavior reason in bug template (Ben Noordhuis) #47049 - [
5d75ec402e
] - module: reduce the number of URL initializations (Yagiz Nizipli) #48272 - [
c5af5a4f4f
] - module: change default resolver to not throw on unknown scheme (Gil Tayar) #47824 - [
cf8845d001
] - module: block requiringtest/reporters
without scheme (Moshe Atlow) #47831 - [
ce7e6c6765
] - (SEMVER-MINOR) node-api: define version 9 (Chengzhong Wu) #48151 - [
53c02b20b8
] - node-api: add status napi_cannot_run_js (Gabriel Schulhof) #47986 - [
4b280d5361
] - node-api: napi_ref on all types is experimental (Vladimir Morozov) #47975 - [
e2553b12e7
] - (NODE-API-SEMVER-MAJOR) node-api: get Node API version used by addon (Vladimir Morozov) #45715 - [
beaad7f692
] - node-api: test passing NULL to napi_define_class (Gabriel Schulhof) #47567 - [
6ab892780c
] - node-api: test passing NULL to number APIs (Gabriel Schulhof) #47549 - [
a67e5ea89c
] - node-api: remove unused mark_arraybuffer_as_untransferable (Chengzhong Wu) #47557 - [
7019d48ba1
] - (SEMVER-MINOR) node-api: deprecate napi_module_register (Vladimir Morozov) #46319 - [
395c56bd7c
] - node-api: extend type-tagging to externals (Gabriel Schulhof) #47141 - [
6e66371eee
] - node-api: document node-api shutdown finalization (Chengzhong Wu) #45903 - [
d8d2d33efb
] - node-api: verify cleanup hooks order (Chengzhong Wu) #46692 - [
b34eaf393e
] - path: indicate index of wrong resolve() parameter (sosoba) #47660 - [
13bc5488a1
] - permission: remove unused function declaration (Deokjin Kim) #47957 - [
5f8aef477e
] - quic: address recent coverity warning (Michael Dawson) #47753 - [
75d7024ecd
] - quic: add more QUIC implementation (James M Snell) #47494 - [
24840832bd
] - quic: add more QUIC impl (James M Snell) #47348 - [
114b8479b4
] - readline: fix issue with newline-less last line (Ian Harris) #47317 - [
e668efac6b
] - repl: preserve preview on ESCAPE key press (Xuguang Mei) #46878 - [
7306b0f733
] - sea: fix memory leak detected by asan (Darshan Sen) #47309 - [
1f2c91f98a
] - src: use std::array for passing argv in node::url (Anna Henningsen) #47035 - [
36bf06904f
] - src: add Realm document in the src README.md (Chengzhong Wu) #47932 - [
5445835671
] - src: check node_extra_ca_certs after openssl cfg (Raghu Saxena) #48159 - [
eb96856555
] - src: include missing header in node_sea.h (Joyee Cheung) #48152 - [
2a35462045
] - src: deduplicate X509Certificate::Fingerprint* (Tobias Nießen) #47978 - [
4c556816bd
] - src: move BlobSerializerDeserializer to a separate header file (Darshan Sen) #47933 - [
4bad757012
] - src: rename SKIP_CHECK_SIZE to SKIP_CHECK_STRLEN (Tobias Nießen) #47845 - [
33daa89dac
] - src: register ext reference for Fingerprint512 (Tobias Nießen) #47892 - [
30b7133008
] - src: clarify the parameter name inPermission::Apply
(Daeyeon Jeong) #47874 - [
274c0f2e0a
] - src: avoid strcmp() with Utf8Value (Tobias Nießen) #47827 - [
559c98f468
] - src: prefer data accessor of string and vector (Mohammed Keyvanzadeh) #47750 - [
933673de61
] - src: avoid copying string in fs_permission (Yagiz Nizipli) #47746 - [
77f2b97197
] - src: fix typo in comment in quic/sessionticket.cc (Tobias Nießen) #47754 - [
8e6af9fcf4
] - src: mark fatal error functions as noreturn (Chengzhong Wu) #47695 - [
d0ad873b0e
] - src: prevent changing FunctionTemplateInfo after publish (Shelley Vohr) #46979 - [
71fb476781
] - src: use v8::Boolean(b) over b ? True() : False() (Tobias Nießen) #47554 - [
175b78bc02
] - src: fix typo in process.env accessor error message (Moritz Raho) #47014 - [
2c2b6d1661
] - src: replace static const string_view by static constexpr (Daniel Lemire) #47524 - [
3840bb586e
] - src: fix CSPRNG when length exceeds INT_MAX (Tobias Nießen) #47515 - [
f6aa38dc5f
] - src: use correct variable in node_builtins.cc (Michaël Zasso) #47343 - [
e88e249838
] - src: slim down stream_base-inl.h (lilsweetcaligula) #46972 - [
b34de64442
] - src: allow simdutf::convert_* functions to return zero (Daniel Lemire) #47471 - [
ded4a5eb8f
] - src: remove usage ofstd::shared_ptr<T>::unique()
(Darshan Sen) #47315 - [
0fbfb28cf5
] - src: use stricter compile-time guidance (Tobias Nießen) #46509 - [
a8430ad211
] - src: remove unused variable in crypto_x509.cc (Michaël Zasso) #47344 - [
24dabf8965
] - src: don't reset embeder signal handlers (Dmitry Vyukov) #47188 - [
4add36872c
] - src: replace impossible THROW with CHECK (Tobias Nießen) #47168 - [
e1007ff6a8
] - src: remove dead comments about return_code_cache (Keyhan Vakil) #47083 - [
5501d12713
] - src: remove SSL_CTX_get_tlsext_ticket_keys guards (Tobias Nießen) #47068 - [
716d289874
] - src: fix clang 14 linker error (Keyhan Vakil) #47057 - [
8809adfdb6
] - src: clarify OptionEnvvarSettings member names (Chengzhong Wu) #45057 - [
05f5c79574
] - src: per-realm binding data (Chengzhong Wu) #46556 - [
a7620d19c8
] - src,http2: ensure cleanup if a frame is not sent (ywave620) #47244 - [
585d62848e
] - stream: deprecate asIndexedPairs (Chemi Atlow) #48102 - [
d3449ca010
] - stream: prevent pipeline hang with generator functions (Debadree Chatterjee) #47712 - [
5e4b2434a6
] - (SEMVER-MINOR) stream: preserve object mode in compose (Raz Luvaton) #47413 - [
912eb308ab
] - (SEMVER-MINOR) stream: add setter & getter for default highWaterMark (#46929) (Robert Nagy) #46929 - [
c59887744a
] - stream: expose stream symbols (Robert Nagy) #45671 - [
4edc1abf0b
] - stream: dont wait for next item in take when finished (Raz Luvaton) #47132 - [
cfb18d816d
] - stream: remove brandchecks from stream duplexify (Debadree Chatterjee) #46315 - [
9d4025c411
] - test: mark test-child-process-pipe-dataflow as flaky (Moshe Atlow) #48334 - [
c29b6874d4
] - test: unflake test-vm-timeout-escape-nexttick (Santiago Gimeno) #48078 - [
0e3312b01b
] - test: fix zlib version regex (Luigi Pinca) #48227 - [
a9d0b8d005
] - test: use lower security level in s_client (Luigi Pinca) #48192 - [
7250d8c2f1
] - Revert "test: unskip negative-settimeout.any.js WPT" (Filip Skokan) #48182 - [
18476697bd
] - test: mark test_cannot_run_js as flaky (Keyhan Vakil) #48181 - [
446f6118ff
] - test: fix flaky test-runner-watch-mode (Moshe Atlow) #48144 - [
7fa144e3fe
] - test: skip test-http-pipeline-flood on IBM i (Abdirahim Musse) #48048 - [
5c5b1d2867
] - test: ignore helper files in WPTs (Filip Skokan) #48079 - [
3b2cee071b
] - test: movetest-cluster-primary-error
flaky test (Yagiz Nizipli) #48039 - [
7b816b4922
] - test: fix suite signal (Benjamin Gruenbaum) #47800 - [
ca4a0e3717
] - test: fix parsing test flags (Daeyeon Jeong) #48012 - [
a3f0504556
] - test: mark test-esm-loader-http-imports as flaky (Tobias Nießen) #47987 - [
ab36a30143
] - test: unskip negative-settimeout.any.js WPT (Filip Skokan) #47946 - [
7c80439b21
] - test: use appropriate usages for a negative import test (Filip Skokan) #47878 - [
81d8d95ba0
] - test: fix webcrypto wrap unwrap tests (Filip Skokan) #47876 - [
1b84e85576
] - test: fix output tests when path includes node version (Moshe Atlow) #47843 - [
95972aac8d
] - test: migrate a pseudo_tty test to use assertSnapshot (Moshe Atlow) #47803 - [
f1e131283d
] - test: fix WPT state when process exits but workers are still running (Filip Skokan) #47826 - [
03dcf7bc94
] - test: migrate message tests to use assertSnapshot (Moshe Atlow) #47498 - [
dedbeee336
] - test: refactor to usegetEventListeners
in timers (Deokjin Kim) #47759 - [
11a2d1c4e4
] - test: add and use tmpdir.hasEnoughSpace() (Tobias Nießen) #47767 - [
d669714e57
] - test: remove spaces from test runner test names (Tobias Nießen) #47733 - [
3a9c43a6d7
] - test: mark test-cluster-primary-error flaky on asan (Yagiz Nizipli) #47422 - [
bd1eb14cb0
] - test: remove unnecessary status check on test-release-npm (RafaelGSS) #47516 - [
914f68d953
] - test: mark test/parallel/test-file-write-stream4 as flaky (Yagiz Nizipli) #47423 - [
7c4178cb11
] - test: remove unused callback variables (angellovc) #47167 - [
d0bda902dc
] - test: migrate test runner message tests to snapshot (Moshe Atlow) #47392 - [
095ca5ccf2
] - test: remove stale entry from known_issues.status (Richard Lau) #47454 - [
8820d5415b
] - test: move more inspector sequential tests to parallel (Joyee Cheung) #47412 - [
f6ef5c4ad3
] - test: use random port in test-inspector-enabled (Joyee Cheung) #47412 - [
e97ceeca69
] - test: use random port in test-inspector-debug-brk-flag (Joyee Cheung) #47412 - [
a2e4643981
] - test: use random port in NodeInstance.startViaSignal() (Joyee Cheung) #47412 - [
a779261732
] - test: fix flaky test-watch-mode-inspect (Moshe Atlow) #47403 - [
116df2ad3e
] - test: move debugger tests with --port=0 to parallel (Joyee Cheung) #47274 - [
016b8bd27d
] - test: use --port=0 in debugger tests that do not have to work on 9229 (Joyee Cheung) #47274 - [
3c157cb7a3
] - test: run doctool tests in parallel (Joyee Cheung) #47273 - [
44f08ed941
] - test: move test-shadow-realm-gc.js to known_issues (Joyee Cheung) #47355 - [
e2b5d968c3
] - test: update wasm/jsapi WPT (Michaël Zasso) #47210 - [
53d9eb5950
] - test: skip test-wasm-web-api on ARM (Michaël Zasso) #47299 - [
b620f5fcd6
] - test: skip instantiateStreaming-bad-imports WPT (Michaël Zasso) #47292 - [
1e6fe56333
] - test: fix test-child-process-exec-cwd (Stefan Stojanovic) #47235 - [
0dc4971aab
] - test: skip broken tests win arm64 (Stefan Stojanovic) #47020 - [
6fee6050e3
] - test: fix 'checks' validation test for checkPrime (Tobias Nießen) #47139 - [
6b85472f01
] - test: update URL web-platform-tests (Yagiz Nizipli) #47135 - [
732a98e1ba
] - test: reduce flakiness of test-http-remove-header-stays-removed.js (Debadree Chatterjee) #46855 - [
713b412ee9
] - test: mark test-http-max-sockets as flaky on win32 (Tobias Nießen) #47134 - [
b3b7dbc395
] - test: update web-platform tests for url (Xuguang Mei) #46860 - [
2edd0fdb5b
] - test: mark test-child-process-stdio-reuse-readable-stdio flaky (Luigi Pinca) #48537 - [
fae240e492
] - test: mark test-child-process-pipe-dataflow as flaky (Moshe Atlow) #48334 - [
9ca3cc0f2a
] - test: remove useless require('../common') from WPTs (Filip Skokan) #46796 - [
4bece055a5
] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #47921 - [
7ef169b706
] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #47222 - [
873606b355
] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #47131 - [
8f1fc0bc99
] - test,doc,sea: run SEA tests on ppc64 (Darshan Sen) #48111 - [
5d910ca389
] - test_runner: add enqueue and dequeue events (Moshe Atlow) #48428 - [
d795c0ab0c
] - test_runner: dont split lines ontest:stdout
(Moshe Atlow) #48057 - [
04eb1f85da
] - test_runner: pass FORCE_COLOR to child process (Moshe Atlow) #48057 - [
2262653148
] - test_runner: applyrunOnly
on suites (Moshe Atlow) #48279 - [
033d0bb3e1
] - test_runner: emittest:watch:drained
event (Moshe Atlow) #48259 - [
618a9e1c09
] - test_runner: stop watch mode when abortSignal aborted (Moshe Atlow) #48259 - [
6a82fbd006
] - test_runner: fix global after hook (Moshe Atlow) #48231 - [
d1295d7b10
] - test_runner: remove redundant check from coverage (Colin Ihrig) #48070 - [
47602fe73b
] - test_runner: fix test deserialize edge cases (Moshe Atlow) #48106 - [
b18a78cd0b
] - test_runner: delegate stderr and stdout formatting to reporter (Shiba) #48045 - [
e0d0b19c30
] - test_runner: display dot report as wide as the terminal width (Raz Luvaton) #48038 - [
bdca468a79
] - test_runner: use v8.serialize instead of TAP (Moshe Atlow) #47867 - [
866ed6a887
] - (SEMVER-MINOR) test_runner: add shorthands totest
(Chemi Atlow) #47909 - [
4737314865
] - test_runner: fix ordering of test hooks (Phil Nash) #47931 - [
ea543d95f6
] - test_runner: omit inaccessible files from coverage (Colin Ihrig) #47850 - [
8398bca842
] - test_runner: fix --require with --experimental-loader (Moshe Atlow) #47751 - [
4c0036ba1b
] - (SEMVER-MINOR) test_runner: support combining coverage reports (Colin Ihrig) #47686 - [
cb3abda9aa
] - test_runner: remove no-op validation (Colin Ihrig) #47687 - [
323881f60b
] - test_runner: fix test runner concurrency (Moshe Atlow) #47675 - [
3bbb1fc990
] - test_runner: fix test counting (Moshe Atlow) #47675 - [
0ea63717ba
] - test_runner: fix nested hooks (Moshe Atlow) #47648 - [
fa18b17d88
] - test_runner: add testNamePatterns to run api (atlowChemi) #47648 - [
2033691bfc
] - test_runner: support coverage of unnamed functions (Colin Ihrig) #47652 - [
882c6127ae
] - test_runner: move coverage collection to root.postRun() (Colin Ihrig) #47651 - [
e97eefa538
] - (SEMVER-MINOR) test_runner: execute before hook on test (Chemi Atlow) #47586 - [
4bce39108c
] - test_runner: avoid reporting parents of failing tests in summary (Moshe Atlow) #47579 - [
688078b93a
] - test_runner: fix spec skip detection (Moshe Atlow) #47537 - [
0b32a8c8a3
] - test_runner: color errors only when colors are available (Moshe Atlow) #47394 - [
d5fc8236bf
] - test_runner: hide failing tests title when all tests pass (Moshe Atlow) #47370 - [
1d453e4d31
] - test_runner: stringify AssertError expected and actual (Moshe Atlow) #47088 - [
99312a55f2
] - test_runner: add code coverage support to spec reporter (Pulkit Gupta) #46674 - [
2091b4718f
] - (SEMVER-MINOR) test_runner: expose reporter for use in run api (Chemi Atlow) #47238 - [
9cbf89717e
] - test_runner: report failing tests after summary (HinataKah0) #47164 - [
460bcc042e
] - test_runner: count nested tests (Moshe Atlow) #47094 - [
c62e6b2e54
] - test_runner: accept \x1b as a escape symbol (Debadree Chatterjee) #47050 - [
ddf819f810
] - test_runner: support defining test reporter in NODE_OPTIONS (Steve Herzog) #46688 - [
e049ce296a
] - tls: reapply servername on happy eyeballs connect (Fedor Indutny) #48255 - [
19b0f244b2
] - tls: accept SecureContext object in server.addContext() (HinataKah0) #47570 - [
7786d7cece
] - tools: pin ruff version number (Rich Trott) #48505 - [
a2bfe02289
] - tools: remove non-existing file from CODEOWNERS file (Juan José Arboleda) #48697 - [
87562c9af0
] - tools: update rollup lint-md-dependencies (Node.js GitHub Bot) #48329 - [
1cde4a4299
] - Revert "tools: open issue when update workflow fails" (Marco Ippolito) #48312 - [
361cf8cffc
] - tools: don't gitignore base64 config.h (Ben Noordhuis) #48174 - [
0cfdb3affa
] - tools: update LICENSE and license-builder.sh (Santiago Gimeno) #48078 - [
715cf81b4a
] - tools: automate histogram update (Marco Ippolito) #48171 - [
d9afffab03
] - tools: use shasum instead of sha256sum (Luigi Pinca) #48229 - [
1a5cddfc1f
] - tools: harmonizedep_updaters
scripts (Antoine du Hamel) #48201 - [
24abe07dda
] - tools: log and verify sha256sum (Andrea Fassina) #48088 - [
9aed8683aa
] - tools: open issue when update workflow fails (Marco Ippolito) #48018 - [
4c5c63fd82
] - tools: alphabetize CODEOWNERS (Rich Trott) #48124 - [
9b849a7270
] - tools: use latest upstream commit for zlib updates (Andrea Fassina) #48054 - [
e18c1258ae
] - tools: add security-wg as dep updaters owner (Marco Ippolito) #48113 - [
999a289dd9
] - tools: fix race condition when npm installing (Tobias Nießen) #48101 - [
25b0033b86
] - tools: refloat 7 Node.js patches to cpplint.py (Rich Trott) #48098 - [
87b36b3a8a
] - tools: update cpplint to 1.6.1 (Yagiz Nizipli) #48098 - [
64ff6fe443
] - tools: update eslint to 8.41.0 (Node.js GitHub Bot) #48097 - [
739c314851
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #48096 - [
6674ed1901
] - tools: update doc to remark-parse@10.0.2 (Node.js GitHub Bot) #48095 - [
0b0818caab
] - tools: add debug logs (Marco Ippolito) #48060 - [
168d080f40
] - tools: fix zconf.h path (Luigi Pinca) #48089 - [
ccd2795f42
] - tools: update remark-preset-lint-node to 4.0.0 (Node.js GitHub Bot) #47995 - [
89e068a550
] - tools: debug log for nghttp3 (Marco Ippolito) #47992 - [
3bf2bd4ec6
] - tools: automate icu-small update (Marco Ippolito) #47727 - [
fdf9681dc0
] - tools: update lint-md-dependencies to rollup@3.21.5 (Node.js GitHub Bot) #47903 - [
52532c2cb1
] - tools: update eslint to 8.40.0 (Node.js GitHub Bot) #47906 - [
951cc7b624
] - tools: update eslint to 8.39.0 (Node.js GitHub Bot) #47789 - [
706c87db50
] - tools: fix jsdoc lint (Moshe Atlow) #47789 - [
8eef5f5f5f
] - tools: update doc to highlight.js@11.8.0 (Node.js GitHub Bot) #47786 - [
899eea6237
] - tools: update lint-md-dependencies to rollup@3.21.1 (Node.js GitHub Bot) #47787 - [
8ca50b6ac9
] - tools: move update-npm to dep updaters (Marco Ippolito) #47619 - [
5ee554397d
] - tools: fix update-v8-patch cache (Marco Ippolito) #47725 - [
4e0d19e1bd
] - tools: automate v8 patch update (Marco Ippolito) #47594 - [
64c3154bdf
] - tools: fix skip message in update-cjs-module-lexer (Tobias Nießen) #47701 - [
6535ab90d9
] - tools: update lint-md-dependencies to @rollup/plugin-commonjs@24.1.0 (Node.js GitHub Bot) #47577 - [
7cfc00d072
] - tools: keep MR titles/description up-to-date (Tobias Nießen) #47621 - [
d6b555e2c8
] - tools: fix updating root certificates (Richard Lau) #47607 - [
0d3e3ddea6
] - tools: update MR label config (Mohammed Keyvanzadeh) #47593 - [
fa52c472b8
] - tools: add execution permission to uvwasi script (Mert Can Altın) #47600 - [
f6955a6b0c
] - tools: add update script for googletest (Tobias Nießen) #47482 - [
4e1d87e752
] - tools: add option to run workflow with specific tool id (Michaël Zasso) #47591 - [
e605402590
] - tools: automate zlib update (Marco Ippolito) #47417 - [
b6ca57e8d0
] - tools: add url and whatwg-url labels automatically (Yagiz Nizipli) #47545 - [
d5c9bc4f8e
] - tools: add performance label to benchmark changes (Yagiz Nizipli) #47545 - [
c5227628a9
] - tools: automate uvwasi dependency update (Ranieri Innocenti Spada) #47509 - [
5ffdb57302
] - tools: add missing pinned dependencies (Mateo Nunez) #47346 - [
c7b898d4e4
] - tools: automate ngtcp2 and nghttp3 update (Marco Ippolito) #47402 - [
e696a48225
] - tools: move update-undici.sh to dep_updaters and create maintain md (Marco Ippolito) #47380 - [
056067286a
] - tools: makejs2c.py
usable for other build systems (Cheng Zhao) #46930 - [
d11c6ba2eb
] - tools: move update-acorn.sh to dep_updaters and create maintaining md (Marco Ippolito) #47382 - [
0a65c7c300
] - tools: update eslint to 8.38.0 (Node.js GitHub Bot) #47475 - [
60dc249cd5
] - tools: update eslint to 8.38.0 (Node.js GitHub Bot) #47475 - [
1271b0eded
] - tools: automate cjs-module-lexer dependency update (Marco Ippolito) #47446 - [
26905572d4
] - tools: fix notify-on-push Slack messages (Antoine du Hamel) #47453 - [
3c62663797
] - tools: update lint-md-dependencies to @rollup/plugin-node-resolve@15.0.2 (Node.js GitHub Bot) #47431 - [
c57dabe360
] - tools: add root certificate update script (Richard Lau) #47425 - [
f27680e37c
] - tools: fix update-openssl.yml compare version (Marco Ippolito) #47384 - [
35e6cf2944
] - tools: use ref_name to get branch pushed on (Debadree Chatterjee) #47358 - [
28935a86f8
] - tools: add a at here tag for slack messages (Debadree Chatterjee) #47358 - [
e1846ee4f1
] - tools: disable Codecov commit statuses (Michaël Zasso) #47306 - [
d1c8229da4
] - tools: update eslint to 8.37.0 (Node.js GitHub Bot) #47333 - [
6ab22151c4
] - tools: fix duration_ms to be milliseconds (Moshe Atlow) #44490 - [
5d46c594a7
] - tools: automate brotli update (Marco Ippolito) #47205 - [
d324c15227
] - tools: fix typo in nghttp2 path (Marco Ippolito) #47330 - [
b1bcdceef5
] - tools: add scorecard workflow (Mateo Nunez) #47254 - [
281362bcc2
] - tools: pin actions by hash for auto-start-ci.yml (Gabriela Gutierrez) #46820 - [
6cae1bd377
] - tools: standardize base64 update (Marco Ippolito) #47201 - [
a682bd0714
] - tools: update codecov branch (Rich Trott) #47285 - [
1061e17c66
] - tools: standardize update-llhttp.sh (Marco Ippolito) #47198 - [
9781185943
] - tools: upgrade Windows digital signature to SHA256 (Tobias Nießen) #47206 - [
37638e43c5
] - tools: add button to copy code example to clipboard (jakecastelli) #46928 - [
05cb503f02
] - tools: standardize update-nghttp2.sh (Marco Ippolito) #47197 - [
816e215701
] - tools: fix Slack notification action (Antoine du Hamel) #47237 - [
9ac01ecc59
] - tools: notify on Slack when invalid commit lands (Antoine du Hamel) #47178 - [
13eb029b4f
] - tools: update daily wpt actions summary (Filip Skokan) #47138 - [
e0a00ebfc5
] - tools: allow test tap output to include unicode characters (Moshe Atlow) #47175 - [
fca3391d0b
] - tools: update lint-md-dependencies to rollup@3.19.1 (Node.js GitHub Bot) #47045 - [
c0fd6a3721
] - tools: update eslint to 8.36.0 (Node.js GitHub Bot) #47046 - [
7d971daf29
] - tools,meta: update README and tools to reflect changes in TSC charter (Rich Trott) #47126 - [
d078d66bdc
] - typings: fix syntax error in tsconfig (Mohammed Keyvanzadeh) #47584 - [
889730512c
] - url: handle URL.canParse without base parameter (Yagiz Nizipli) #47547 - [
0dc485eb28
] - url: drop ICU requirement for parsing hostnames (Yagiz Nizipli) #47339 - [
b395b16c40
] - url: use ada::url_aggregator for parsing urls (Yagiz Nizipli) #47339 - [
11f48e02a8
] - (SEMVER-MINOR) url: implement URL.canParse (Matthew Aitken) #47179 - [
977a8bad35
] - url: fix array overrun in node:url::SetArgs() (Yagiz Nizipli) #47001 - [
4784e64850
] - url: allow extension of user provided URL objects (Antoine du Hamel) #46989 - [
f495cb6bf4
] - url: backport non-major changes from #46904 (Yagiz Nizipli) #46904 - [
aa4f485388
] - url: setformatUrl
method as no side effect (Yagiz Nizipli) #46884 - [
c79e1b72f2
] - url: offloadURLSearchParams
initialization (Yagiz Nizipli) #46867 - [
3db235b822
] - url: remove unusedkFormat
from url (Yagiz Nizipli) #46867 - [
b9df1a9668
] - url: clean vertical alignment of docs (Robin Ury) #48037 - [
9a2354d4a9
] - url: do not use object as hashmap (Timothy Gu) #47415 - [
4850ba4bd4
] - url: improve URLSearchParams creation performance (Yagiz Nizipli) #47190 - [
7fb1980fd9
] - url: add pending-deprecation tourl.parse()
(Yagiz Nizipli) #47203 - [
b04ea5aa9b
] - url: allow extension of user provided URL objects (Antoine du Hamel) #46989 - [
972c851918
] - url: remove unnecessary call toFunctionPrototypeBind
(Antoine du Hamel) #46870 - [
87ef1b2859
] - util: fix inspecting error with a throwing getter forcause
(Antoine du Hamel) #47163 - [
4729d30c1e
] - v8: fix ERR_NOT_BUILDING_SNAPSHOT is not a constructor (Chengzhong Wu) #47721 - [
d9a68b821e
] - vm: properly handle defining symbol props (Nicolas DUBIEN) #47572 - [
0d0fad8f0a
] - vm: fix crash when setting __proto__ on context's globalThis (Feng Yu) #47939 - [
fb90b6b3fb
] - vm: properly handle defining props on any value (Nicolas DUBIEN) #46615 - [
4b2aa3d27c
] - vm,lib: refactor microtaskQueue assignment logic (Khaidi Chu) #47765 - [
58afcc27f6
] - (SEMVER-MINOR) wasi: no longer require flag to enable wasi (Michael Dawson) #47286 - [
407af51cf5
] - wasi: add wasi sock_accept stub (Michael Dawson) #46434 - [
d3e0229948
] - watch: fix watch path with equals (Moshe Atlow) #47369 - [
78972d4696
] - worker: support more cases when (de)serializing errors (Moshe Atlow) #47925
v18.16.1
: 2023-06-20, Version 18.16.1 'Hydrogen' (LTS), @RafaelGSS
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
-
CVE-2023-30581:
mainModule.__proto__
Bypass Experimental Policy Mechanism (High) - CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
- CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
- CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
- OpenSSL Security Releases
- c-ares vulnerabilities:
More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.
Commits
- [
bf3e2c8928
] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen) nodejs-private/node-private#393 - [
70f9449072
] - deps: setCARES_RANDOM_FILE
for c-ares (Richard Lau) #48156 - [
35d4efb57b
] - deps: update c-ares to 1.19.1 (RafaelGSS) #48115 - [
392dfedc77
] - deps: update archs files for openssl-3.0.9-quic1 (Node.js GitHub Bot) #48402 - [
46cd5fe38b
] - deps: upgrade openssl sources to quictls/openssl-3.0.9-quic1 (Node.js GitHub Bot) #48402 - [
7e3d2d85c2
] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#426 - [
4ff6ba050a
] - http: disable request smuggling via rempty headers (Paolo Insogna) nodejs-private/node-private#428 - [
ab269129a6
] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#408 - [
925e8f5619
] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#416 - [
d6fae8e47e
] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #47851
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.