chore(deps): update dependency node to v16.20.2 (!110) · Merge requests · GitLab.com / GitLab Infrastructure Team / slackline

Renovate Bot requested to merge renovate/node-16.x into main Nov 19, 2022

This MR contains the following updates:

Package	Update	Change
node (source)	minor	`16.14.2` -> `16.20.2`

Release Notes

nodejs/node

`v16.20.2`: 2023-08-09, Version 16.20.2 'Gallium' (LTS), @RafaelGSS

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

CVE-2023-32002: Policies can be bypassed via Module._load (High)
CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
OpenSSL Security Releases

More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.

Commits

[40c3958a5a] - deps: update archs files for OpenSSL-1.1.1v (RafaelGSS) #49043
[a9ac9da89a] - deps: fix openssl crypto clean (RafaelGSS) #49043
[362d4c7494] - deps: upgrade openssl sources to OpenSSL_1_1_1v (RafaelGSS) #49043
[d8ccfe9ad4] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#445
[242aaa0caa] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#459

`v16.20.1`: 2023-06-20, Version 16.20.1 'Gallium' (LTS), @RafaelGSS

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
OpenSSL Security Releases
c-ares vulnerabilities:

More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.

Commits

[5a92ea7a3b] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen)
[5df04e893a] - deps: set CARES_RANDOM_FILE for c-ares (Richard Lau) #48156
[c171cbd124] - deps: update c-ares to 1.19.1 (RafaelGSS) #48115
[155d3aac02] - deps: update archs files for OpenSSL-1.1.1u+quic (RafaelGSS) #48369
[8d4c8f8ebe] - deps: upgrade openssl sources to OpenSSL_1_1_1u (RafaelGSS) #48369
[1a5c9284eb] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#426
[e42ff4b018] - http: disable request smuggling via empty headers (Paolo Insogna) nodejs-private/node-private#429
[10042683c8] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#408
[a6f4e87bc9] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#416
[b77000f4d7] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #47851

`v16.20.0`: 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggs

Compare Source

Notable Changes

deps:
- update undici to 5.20.0 (Node.js GitHub Bot) #46711
- update c-ares to 1.19.0 (Michaël Zasso) #46415
- upgrade npm to 8.19.4 (npm team) #46677
- update corepack to 0.17.0 (Node.js GitHub Bot) #46842
(SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #44376

Commits

[de6dd67790] - crypto: avoid hang when no algorithm available (Richard Lau) #46237
[4617512788] - crypto: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) #46185
[24972164fc] - deps: update undici to 5.20.0 (Node.js GitHub Bot) #46711
[85f88c6a8d] - deps: V8: cherry-pick 90be99f (Michaël Zasso) #46646
[b4ebe6d47b] - deps: update c-ares to 1.19.0 (Michaël Zasso) #46415
[56cbc7fdda] - deps: V8: cherry-pick c2792e5 (Jiawen Geng) #44961
[7af9bdb31e] - deps: upgrade npm to 8.19.4 (npm team) #46677
[962a7471b5] - deps: update corepack to 0.17.0 (Node.js GitHub Bot) #46842
[748bc96e35] - deps: update corepack to 0.16.0 (Node.js GitHub Bot) #46710
[a467782499] - deps: update corepack to 0.15.3 (Node.js GitHub Bot) #46037
[1913b6763d] - deps: update corepack to 0.15.2 (Node.js GitHub Bot) #45635
[809371a15f] - module: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) #45147
[086bb2f8d4] - Revert "src: let http2 streams end after session close" (Rich Trott) #46721
[6a01d39120] - (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #44376
[d081032a60] - test: fix test-net-connect-reset-until-connected (Vita Batrla) #46781
[efe1be47ec] - test: skip test depending on overlapped-checker when not available (Antoine du Hamel) #45015
[fc47d58abe] - test: remove cjs loader from stack traces (Geoffrey Booth) #44197
[cf76d0790d] - test: fix WPT title when no META title is present (Filip Skokan) #46804
[0d1485b924] - test: fix default WPT titles (Filip Skokan) #46778
[088e9cde3d] - test: add WPTRunner support for variants and generating WPT reports (Filip Skokan) #46498
[908c4dff44] - test: mark test-crypto-key-objects flaky on Linux (Richard Lau) #46684
[768e56227e] - tools: make utils.SearchFiles deterministic (Bruno Pitrus) #44496

`v16.19.1`: 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlau

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)

Fixed by an update to undici:

CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
- See https://github.com/nodejs/undici/security/advisories/GHSA-5r9g-qh6m-jxff for more information.
CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
- See https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w for more information.

More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.

This security release includes OpenSSL security updates as outlined in the recent OpenSSL security advisory.

Commits

[7fef050447] - build: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) nodejs-private/node-private#374
[b558e9f476] - crypto: clear OpenSSL error on invalid ca cert (RafaelGSS) nodejs-private/node-private#375
[160adb7ffc] - crypto: clear OpenSSL error queue after calling X509_check_private_key() (Filip Skokan) #45495
[d0ece30948] - crypto: clear OpenSSL error queue after calling X509_verify() (Takuro Sato) #45377
[2d9ae4f184] - deps: update undici to v5.19.1 (Matteo Collina) nodejs-private/node-private#388
[d80e8312fd] - deps: cherry-pick Windows ARM64 fix for openssl (Richard Lau) #46568
[de5c8d2c2f] - deps: update archs files for quictls/openssl-1.1.1t+quic (RafaelGSS) #46568
[1a8ccfe908] - deps: upgrade openssl sources to OpenSSL_1_1_1t+quic (RafaelGSS) #46568
[693789780b] - doc: clarify release notes for Node.js 16.19.0 (Richard Lau) #45846
[f95ef064f4] - lib: makeRequireFunction patch when experimental policy (RafaelGSS) nodejs-private/node-private#358
[b02d895137] - policy: makeRequireFunction on mainModule.require (RafaelGSS) nodejs-private/node-private#358
[d7f83c420c] - test: avoid left behind child processes (Richard Lau) #46276

`v16.19.0`: 2022-12-13, Version 16.19.0 'Gallium' (LTS), @richardlau

Compare Source

Notable Changes

OpenSSL 1.1.1s

This update is a bugfix release and does not address any security vulnerabilities.

Root certificates updated to NSS 3.85

Certificates added:

Autoridad de Certificacion Firmaprofesional CIF A626340
Certainly Root E1
Certainly Root R1
D-TRUST BR Root CA 1 2020
D-TRUST EV Root CA 1 2020
DigiCert TLS ECC P384 Root G5
DigiCert TLS RSA4096 Root G5
E-Tugra Global Root CA ECC v3
E-Tugra Global Root CA RSA v3
HiPKI Root CA - G1
ISRG Root X2
Security Communication ECC RootCA1
Security Communication RootCA3
Telia Root CA v2
vTrus ECC Root CA
vTrus Root CA

Certificates removed:

Cybertrust Global Root
DST Root CA X3
GlobalSign Root CA - R2
Hellenic Academic and Research Institutions RootCA 2011

Time zone update to 2022f

Time zone data has been updated to 2022f. This includes changes to Daylight Savings Time (DST) for Fiji and Mexico. For more information, see https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.

Other Notable Changes

[33707dcd03] - dgram: add dgram send queue info (theanarkh) #44149

Dependency updates:

[3b2b70d792] - deps: upgrade npm to 8.19.3 (npm team) #45322

Experimental features:

[1e0dcd1ee0] - cli: add --watch (Moshe Atlow) #44366
[8c73279ebb] - util: add default value option to parsearg (Manuel Spigolon) #44631

Commits

[bbef3c42f6] - build: add version info to timezone update MR (Darshan Sen) #45021
[cc2c7648e0] - build: support Python 3.11 (Luigi Pinca) #45191
[ac24c80663] - build: remove redundant condition from common.gypi (Richard Lau) #45076
[03dcbe3030] - build: fix bad upstream merge (Stephen Gallagher) #44642
[1e0dcd1ee0] - cli: add --watch (Moshe Atlow) #44366
[96d131665e] - cluster: use inspector utils (Moshe Atlow) #44592
[704836033a] - crypto: update root certificates (Luigi Pinca) #45490
[5a776d4a69] - deps: update timezone to 2022f (Richard Lau) #45613
[3b2b70d792] - deps: upgrade npm to 8.19.3 (npm team) #45322
[9fbc8b21db] - deps: update corepack to 0.15.1 (Node.js GitHub Bot) #45331
[87e3d002ca] - deps: update corepack to 0.15.0 (Node.js GitHub Bot) #45235
[e972ff7b13] - deps: V8: backport bbd800c (Chengzhong Wu) #44947
[af9d8217c0] - deps: V8: cherry-pick b953542 (Chengzhong Wu) #44947
[38202d321b] - deps: update undici to 5.12.0 (Node.js GitHub Bot) #45236
[7c0da6adf9] - deps: update archs files for OpenSSL-1.1.1s (RafaelGSS) #45274
[1149ead6f7] - deps: upgrade openssl sources to OpenSSL_1_1_1s (RafaelGSS) #45274
[cd54bce4f5] - deps: update timezone (Node.js GitHub Bot) #44950
[2901abe4f0] - deps: update undici to 5.11.0 (Node.js GitHub Bot) #44929
[c80cf97033] - deps: update corepack to 0.14.2 (Node.js GitHub Bot) #44775
[33707dcd03] - dgram: add dgram send queue info (theanarkh) #44149
[c708d9bb94] - doc: fix typo in parseArgs default value (Tobias Nießen) #45083
[5a0efa05d2] - node-api: handle no support for external buffers (Michael Dawson) #45181
[db31de634e] - readline: refactor to avoid unsafe regex primordials (Antoine du Hamel) #43475
[fbc52e5729] - src: disambiguate terms used to refer to builtins and addons (Joyee Cheung) #44135
[953072d3db] - src: let http2 streams end after session close (Santiago Gimeno) #45153
[54608d8dc3] - src: split property helpers from node::Environment (Chengzhong Wu) #44056
[6733556783] - test: add test to validate changelogs for releases (Richard Lau) #45325
[821d832cef] - test: mark test-watch-mode* as flaky on all platforms (Pierrick Bouvier) #45049
[02a18eac69] - test: fix test-runner-inspect (Moshe Atlow) #44620
[197df63f74] - test: add a test to ensure the correctness of timezone upgrades (Darshan Sen) #45299
[42e9d8016a] - test: fix textdecoder test for small-icu builds (Richard Lau) #45225
[6d736a56d8] - test: fix watch mode test flake (Moshe Atlow) #44739
[543d3d2bf3] - test: deflake watch mode tests (Moshe Atlow) #44621
[97f6caf4eb] - test: split watch mode inspector tests to sequential (Moshe Atlow) #44551
[499750ff7a] - test: update list of known globals (Antoine du Hamel) #45255
[64d343af74] - test_runner: support using --inspect with --test (Moshe Atlow) #44520
[99ee5e484d] - test_runner: fix duration_ms to be milliseconds (Moshe Atlow) #44450
[37e909251c] - test_runner: support programmatically running --test (Moshe Atlow) #44241
[0ae5694f88] - tools: update certdata.txt (Luigi Pinca) #45490
[891368cefd] - tools: remove faulty early termination logic from update-timezone.mjs (Darshan Sen) #44870
[543493c242] - tools: fix timezone update tool (Darshan Sen) #44870
[c77f660b75] - tools: fix create-or-update-pull-request-action hash on GHA (Antoine du Hamel) #45166
[58c30dd049] - tools: update gr2m/create-or-update-pull-request-action (Luigi Pinca) #45022
[749a4b3e5e] - tools: use Python 3.11 in GitHub Actions workflows (Luigi Pinca) #45191
[6f541d99a5] - tools: have test-asan use ubuntu-20.04 (Filip Skokan) #45581
[e7ed56f501] - tools: make license-builder.sh comply with shellcheck 0.8.0 (Rich Trott) #41258
[cc819b4bf8] - tools: fix typo in avoid-prototype-pollution lint rule (Antoine du Hamel) #44446
[254358c81e] - tools: refactor avoid-prototype-pollution lint rule (Antoine du Hamel) #43476
[8c73279ebb] - util: add default value option to parsearg (Manuel Spigolon) #44631

`v16.18.1`: 2022-11-04, Version 16.18.1 'Gallium' (LTS), @BethGriggs

Compare Source

This is a security release.

Notable changes

The following CVEs are fixed in this release:

CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)

More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.

Commits

[9ffddd7098] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354

`v16.18.0`: 2022-10-12, Version 16.18.0 'Gallium' (LTS), @juanarbol

Compare Source

Notable changes

[1cc050eaa8] - (SEMVER-MINOR) assert: add getCalls and reset to callTracker (Moshe Atlow) #44191
[e5c9975f11] - (SEMVER-MINOR) crypto: allow zero-length secret KeyObject (Filip Skokan) #44201
[317cd051ce] - (SEMVER-MINOR) crypto: allow zero-length IKM in HKDF and in webcrypto PBKDF2 (Filip Skokan) #44201
[f80bdc5ef3] - (SEMVER-MINOR) doc: deprecate modp1, modp2, and modp5 groups (Tobias Nießen) #44588
[8398e98b1b] - (SEMVER-MINOR) http: make idle http parser count configurable (theanarkh) #43974
[2cd2f56962] - (SEMVER-MINOR) http: throw error on content-length mismatch (sidwebworks) #44378
[6be761e8a9] - (SEMVER-MINOR) lib: add diagnostics channel for process and worker (theanarkh) #44045
[1400796cef] - (SEMVER-MINOR) net,tls: pass a valid socket on tlsClientError (Daeyeon Jeong) #44021
[092239a7f1] - (SEMVER-MINOR) net: add local family (theanarkh) #43975
[381e11e18e] - (SEMVER-MINOR) report: expose report public native apis (Chengzhong Wu) #44255
[2ba547aa5b] - (SEMVER-MINOR) src: expose environment RequestInterrupt api (Chengzhong Wu) #44362
[6ed3367155] - (SEMVER-MINOR) stream: add ReadableByteStream.tee() (Daeyeon Jeong) #44505
[0fbedac6ce] - (SEMVER-MINOR) test_runner: add before/after/each hooks (Moshe Atlow) #43730
[70563b53c5] - (SEMVER-MINOR) util: add maxArrayLength option to Set and Map (Kohei Ueno) #43576

Commits

[1cc050eaa8] - (SEMVER-MINOR) assert: add getCalls and reset to callTracker (Moshe Atlow) #44191
[2e87cdd1e6] - benchmark: fix startup benchmark (Evan Lucas) #44727
[29c0f9ef30] - benchmark: add stream destroy benchmark (SindreXie) #44533
[f01bb58c1e] - bootstrap: update comments in bootstrap/node.js (Joyee Cheung) #44726
[db151e182f] - bootstrap: stop delaying instantiation of maps in per-context scripts (Darshan Sen) #42934
[f700074c57] - buffer: fix atob input validation (Austin Kelleher) #42662
[e10095a759] - build: update timezone-update.yml (Alex) #44717
[bec2ede687] - build: remove redundant entry in crypto (Jiawen Geng) #44604
[7b3a2c3353] - build: rewritten the Android build system (BuShe Pie) #44207
[e96bb14942] - build: add --libdir flag to configure (Stephen Gallagher) #44361
[2a4491b34d] - build: added NINJA env to customize ninja binary (Jeff Dickey) #44293
[aaad7a64b4] - build: enable pointer authentication for branch protection on arm64 (Jeremiah Gowdy) #43200
[041bb54143] - build: add workflow to label flaky-test platform (Rafael Gonzaga) #44042
[58d85c1109] - build: optimized and fixed building configuration to Android (BuShe) #44016
[5cd8b7bc8b] - build: allow test-internet on forks if not scheduled (Rich Trott) #44073
[9698be9347] - build: skip test-internet run on forks (Rich Trott) #44054
[25e6f48e4a] - child_process: remove lookup of undefined property (Colin Ihrig) #44766
[a3bdd07321] - cluster: fix cluster rr distribute error (theanarkh) #44202
[317cd051ce] - (SEMVER-MINOR) crypto: allow zero-length IKM in HKDF and in webcrypto PBKDF2 (Filip Skokan) #44201
[e5c9975f11] - (SEMVER-MINOR) crypto: allow zero-length secret KeyObject (Filip Skokan) #44201
[7e705d8d74] - crypto: fix webcrypto deriveBits validations (Filip Skokan) #44173
[7ad2a268b9] - crypto: fix webcrypto EC key namedCurve validation errors (Filip Skokan) #44172
[2c938d73ff] - crypto: fix webcrypto operation errors to be OperationError (Filip Skokan) #44171
[a6e2cb40a6] - crypto: fix webcrypto generateKey() AES key length validation error (Filip Skokan) #44170
[7e07cce24b] - crypto: use EVP_PKEY_CTX_set_dsa_paramgen_q_bits when available (David Benjamin) #44561
[1fc6394741] - crypto: restrict PBKDF2 args to signed int (Tobias Nießen) #44575
[9a52ee7577] - crypto: handle invalid prepareAsymmetricKey JWK inputs (Filip Skokan) #44475
[7100baee40] - crypto: use actual option name in error message (Tobias Nießen) #44455
[579e066c3a] - crypto: add digest name to INVALID_DIGEST errors (Tobias Nießen) #44468
[566d80f622] - crypto: improve RSA-PSS digest error messages (Tobias Nießen) #44307
[f717c1e06a] - debugger: decrease timeout used to wait for the port to be free (Joyee Cheung) #44359
[0f2fcaf771] - deps: update to ngtcp2 0.8.1 and nghttp3 0.7.0 (Tobias Nießen) #44622
[1a8aada69d] - deps: update corepack to 0.14.1 (Node.js GitHub Bot) #44704
[e4f18b4f34] - deps: update ngtcp2 update instructions (Tobias Nießen) #44619
[21b5ab1494] - deps: upgrade npm to 8.19.2 (npm team) #44632
[916b319e7a] - deps: update to uvwasi 0.0.13 (Colin Ihrig) #44524
[67cbbcc902] - deps: update corepack to 0.14.0 (Node.js GitHub Bot) #44509
[9f14dc1a8f] - deps: update Acorn to v8.8.0 (Michaël Zasso) #44437
[1811a6aaa8] - deps: update icu tzdata to 2022b (Matías Zúñiga) #44283
[0c4953cbd1] - deps: update undici to 5.9.1 (Node.js GitHub Bot) #44319
[8a921fea74] - deps: upgrade npm to 8.19.1 (npm team) #44486
[763a63c14b] - deps: update corepack to 0.13.0 (Node.js GitHub Bot) #44318
[fdb699c84a] - deps: upgrade npm to 8.18.0 (npm team) #44263
[2a44872f96] - deps: update corepack to 0.12.3 (Node.js GitHub Bot) #44229
[48967e4b34] - deps: upgrade npm to 8.17.0 (npm team) #44205
[0484122f71] - deps: update undici to 5.8.2 (Node.js GitHub Bot) #44187
[e404ac7eed] - deps: update undici to 5.8.1 (Node.js GitHub Bot) #44158
[9a5ee5e9e3] - deps: update corepack to 0.12.2 (Node.js GitHub Bot) #44159
[3657cb277b] - deps: remove unnecessary file (Brian White) #44133
[d66a807596] - deps: upgrade npm to 8.16.0 (npm team) #44119
[ec998be61c] - deps: upgrade npm to 8.15.1 (npm team) #44013
[e9e856ae95] - deps: upgrade base64 to dc6a41c (Brian White) #44032
[8ea9a71b15] - deps,src: use SIMD for normal base64 encoding (Brian White) #39775
[969a12be4b] - doc: remove "currently" and comma splice from child_process.md (Rich Trott) #44789
[5e4a2e94a1] - doc: mention git node backport (RafaelGSS) #44764
[618c9c8260] - doc: ensure to revert node_version changes (Rafael Gonzaga) #44760
[e0fe11c189] - doc: fix description for napi_get_cb_info() in n-api.md (Daeyeon Jeong) #44761
[895719da65] - doc: fix v16.17.1 security release changelog (Ruy Adorno) #44759
[fe832a0647] - doc: update the deprecation for exit code to clarify its scope (Daeyeon Jeong) #44714
[3872abd9a6] - doc: update guidance for adding new modules (Michael Dawson) #44576
[f381a1e86a] - doc: add registry number for Electron 22 (Keeley Hammond) #44748
[8d3cb6c08a] - doc: include code examples for webstreams consumers (Lucas Santos) #44387
[9e83c00e0b] - doc: mention where to push security commits (RafaelGSS) #44691
[bc9f8d24ce] - doc: remove extra space on threadpool usage (Connor Burton) #44734
[3e38ba53cc] - doc: make legacy banner slightly less bright (Rich Trott) #44665
[0f88588f52] - doc: improve building doc for Windows Powershell (Brian Muenzenmeyer) #44625
[5ee0127540] - doc: maintain only one list of MODP groups (Tobias Nießen) #44644
[6881ecb0e2] - doc: add legendecas to TSC list (Michael Dawson) #44662
[3614f5ace3] - doc: remove comma in README.md (Taha-Chaudhry) #44599
[c9af43616c] - doc: use serial comma in report docs (Daeyeon Jeong) #44608
[ff9ef61646] - doc: use serial comma in stream docs (Daeyeon Jeong) #44609
[90eaae3ef1] - doc: remove empty line in YAML block (Claudio Wunder) #44617
[f80bdc5ef3] - (SEMVER-MINOR) doc: deprecate modp1, modp2, and modp5 groups (Tobias Nießen) #44588
[9fac6dd1c1] - doc: remove old OpenSSL ENGINE constants (Tobias Nießen) #44589
[53543c6d81] - doc: fix heading levels for test runner hooks (Fabian Meyer) #44603
[2084ad61a7] - doc: fix errors in http.md (Luigi Pinca) #44587
[cc55e84ddc] - doc: fix vm.Script createCachedData example (Chengzhong Wu) #44487
[8187f03834] - doc: mention how to get commit release (Rafael Gonzaga) #44572
[d068978933] - doc: fix link in process.md (Antoine du Hamel) #44594
[0747facb63] - doc: do not use weak MODP group in example (Tobias Nießen) #44585
[e26d95ef9a] - doc: remove ebpf from supported tooling list (Rafael Gonzaga) #44549
[9d24c7a8c7] - doc: emphasize that createCipher is never secure (Tobias Nießen) #44538
[6d881b8611] - doc: document attribute Script.cachedDataRejected (Chengzhong Wu) #44451
[d846e5bac5] - doc: move policy docs to the permissions scope (Rafael Gonzaga) #44222
[5c721a33c3] - doc: add performance note to --enable-source-maps docs (Saurabh Daware) #43817
[1998bc80b5] - doc: fix release guide example consistency (Ruy Adorno) #44385
[7b691729b1] - doc: note on release guide to update main branch (Ruy Adorno) #44384
[7ec097fa99] - doc: mention cherry-pick edge-case on release (RafaelGSS) #44408
[4a4025181c] - doc: fix spacing issue in --build-snapshot help text (Shohei YOSHIDA) #44435
[a5906a09dc] - doc: apply scroll-margin-top to h2, h3 elements (metonym) #44414
[0e99139df4] - doc: use serial comma in addons docs (Tobias Nießen) #44482
[8ea3e6f839] - doc: do not use "Returns:" for crypto.constants (Tobias Nießen) #44481
[a1dbe4bc79] - doc: add history for net.createServer() options (Luigi Pinca) #44326
[eb90d650d4] - doc: fix typo in test runner code examples (Moshe Atlow) #44351
[17c5b978a5] - doc: add daeyeon to collaborators (Daeyeon Jeong) #44355
[c1458063ee] - doc: fix style of n-api.md (theanarkh) #44377
[cf60c6bc74] - doc: add missing imports in events sample code (Brian Evans) #44337
[89e5ac9676] - doc: add missing parenthesis in TLSSocket section (Tobias Nießen) #44512
[5ac344b2a2] - doc: fix optionality of callback arg of checkPrime (Tobias Nießen) #44311
[87cc487e28] - doc: fix typo (Hana) #44262
[5978eb1ae8] - doc: add TypeScript execution requirements (Michael Dawson) #44030
[42948364e2] - doc: add cola119 to collaborators (cola119) #44248
[6196bcedd0] - doc: improved building doc for Android (BuShe) #44166
[afe6c87bb5] - doc: add MoLow to collaborators (Moshe Atlow) #44214
[82ff3dabc5] - doc: update tags in adding-new-napi-api.md (Chengzhong Wu) #44190
[16d6d45ee8] - doc: fix typo in diagnostics_channel (Evan Lucas) #44199
[ed1d0c9203] - doc: add Retry CI in collaborator guide (Livia Medeiros) #44130
[1022ece43f] - doc: remove unused code in call tracker example (Colin Ihrig) #44127
[0c95d45410] - doc: add theanarkh to collaborators (theanarkh) #44131
[97ad1a0f03] - doc: clarify tls.tlsSocket.getCipher().version (Adam Majer) #44086
[9e10ee70a3] - doc: update repository list in onboarding doc (Rich Trott) #44089
[3171d55ef8] - doc: add ErickWendel to collaborators (Erick Wendel) #44088
[c9c2114a75] - doc: update collaborator email (Ruy Adorno) #44044
[1f9246a24f] - doc: copyedit test.md (Antoine du Hamel) #44061
[76e9cf2a46] - doc: add kvakil to triagers (Keyhan Vakil) #43996
[5a34c575ad] - doc: clarify part of onboarding guide regarding adding to teams (Darshan Sen) #44024
[5d3b8ab2d6] - doc: fix code examples in crypto.md (Antoine du Hamel) #44053
[e59c095b23] - doc: claim ABI version for Electron 21 (Keeley Hammond) #44034
[88b0d406ac] - doc: remove old reference from crypto/README.md (Tobias Nießen) #44012
[58c97216ee] - doc: add missing env vars to man page (cola119) #43492
[c07159215d] - doc: list supported MODP groups explicitly (Tobias Nießen) #43986
[be2feec1f0] - doc: fix typo in packages.md (Dominic Saadi) #44005
[9f7a728168] - doc: fix typos in test.md (Antoine du Hamel) #43997
[21a29d4584] - doc: add missing test runner option (Moshe Atlow) #43989
[6758c63eba] - doc,crypto: cleanup removed pbkdf2 behaviours (Filip Skokan) #44733
[891c4e742f] - doc,inspector: document changes of inspector.close (Chengzhong Wu) #44628
[4308d95d1d] - doc,report: document special filenames (Chengzhong Wu) #44257
[89c837a48d] - doc,worker: document resourceLimits overrides (Keyhan Vakil) #43992
[8f6bd5a402] - doc,worker: deprecate --trace-atomics-wait (Keyhan Vakil) #44093
[9593c37984] - errors: refactor to use optional chaining (SindreXie) #44184
[7cead5968e] - esm: fix duplicated test (Geoffrey Booth) #44779
[5d33dfd787] - esm: do not bind loader hook functions (Antoine du Hamel) #44122
[ec7bf32350] - esm: move package config helpers (Geoffrey Booth) #43967
[42a91e36dd] - esm,loader: tidy ESMLoader internals (Jacob Smith) #44701
[d4e9384ccb] - events: use bitset to save memory (Basit Chonka) #43700
[14ec52b949] - fs: don't hard code name in validatePosition() (Colin Ihrig) #44767
[83cf979a0d] - fs: fix typo in mkdir example (SergeyTsukanov) #44791
[bbbb4460ee] - fs: remove unused option in fs.fstatSync() (Livia Medeiros) #44613
[bf217f8029] - fs: add encoding parameter to benchmarks (Yagiz Nizipli) #44278
[1308e68a16] - gyp: libnode for ios app embedding (chexiongsheng) #44210
[2cee039070] - http: disable chunked encoding when OBS fold is used (Paolo Insogna) #341
[2cd2f56962] - (SEMVER-MINOR) http: throw error on content-length mismatch (sidwebworks) #44378
[8398e98b1b] - (SEMVER-MINOR) http: make idle http parser count configurable (theanarkh) #43974
[fa6183fc7e] - http: add max for http keepalive (theanarkh) #44217
[2f87ba4e03] - http: trace http request / response (theanarkh) #44102
[5f406a3a53] - http: reuse socket only when it is drained (ywave620) #43902
[4e49d5d1b4] - inspector: expose inspector.close on workers (Chengzhong Wu) #44489
[c736927b0b] - inspector: prevent integer overflow in open() (Tobias Nießen) #44367
[a021f1974a] - lib: fix reference leak (falsandtru) #44499
[6be761e8a9] - (SEMVER-MINOR) lib: add diagnostics channel for process and worker (theanarkh) #44045
[ac8d2de3b0] - lib: reset RegExp statics before running user code (Antoine du Hamel) #43741
[4968ebfbe1] - lib: refactor validateInt32 and validateUint32 (mawaregetsuka) #43071
[acff743113] - lib: make validateObject less affected by prototype tampering (Antoine du Hamel) #42929
[59be5f89ca] - lib: use safe Promise alternatives when available (Antoine du Hamel) #43476
[9dad4b0d11] - lib: add diagnostics channel and perf hooks detail (Danielle Adams) #43984
[a99e2368ea] - lib: refactor to avoid prototype pollution (Antoine du Hamel) #43474
[121c54718d] - lib: fix diagnostics channel (theanarkh) #44154
[594d9436c3] - lib: pass env variables to child process on z/OS (alexcfyung) #42255
[9c656c89fc] - lib: add missing env vars to --help (cola119) #43492
[3aaa4109a0] - lib: add Promise methods to avoid-prototype-pollution lint rule (Antoine du Hamel) #43849
[debf7301aa] - lib,test: fix bug in InternalSocketAddress (Tobias Nießen) #44618
[c1d1ed5ae4] - meta: update AUTHORS (Node.js GitHub Bot) #44777
[fe91711ed5] - meta: add mailmap entry for dnlup (Rich Trott) #44716
[b9deb1e84d] - meta: update AUTHORS (Node.js GitHub Bot) #44705
[3564da1c94] - meta: move dnlup to emeriti (dnlup) #44667
[af5d49f186] - meta: update test_runner in label-pr-config (Shrujal Shah) #44615
[7ac9bafd10] - meta: update AUTHORS (Node.js GitHub Bot) #44591
[aa68a31804] - meta: update AUTHORS (Node.js GitHub Bot) #44511
[edb0851539] - meta: update AUTHORS (Node.js GitHub Bot) #44422
[4bdd4a3641] - meta: update AUTHORS (Node.js GitHub Bot) #44321
[dc5478ad12] - meta: update web streams in label-pr-config (Daeyeon Jeong) #44235
[d535190086] - meta: update AUTHORS (Node.js GitHub Bot) #44231
[24e3ad069d] - meta: update AUTHORS (Node.js GitHub Bot) #44161
[1924d897ad] - meta: add codeowner for src/node_snapshot* (Chengzhong Wu) #44113
[1988be9acf] - meta: update AUTHORS (Node.js GitHub Bot) #44065
[261e5acc6b] - meta: shorten PowerShell snippet for bug-report template (NicoNekoru) #44011
[1bb394e691] - module: open stat/readPackage to mutations (Maël Nison) #44537
[b665171911] - module: protect against prototype mutation (Antoine du Hamel) #44007
[092239a7f1] - (SEMVER-MINOR) net: add local family (theanarkh) #43975
[4e0710c3a3] - net: remove unused callback (theanarkh) #44204
[1400796cef] - (SEMVER-MINOR) net,tls: pass a valid socket on tlsClientError (Daeyeon Jeong) #44021
[adae66cbd4] - node-api: add deprecation code of uncaught exception (Chengzhong Wu) #44624
[f38987edcc] - node-api: avoid calling virtual methods in base's dtor (Chengzhong Wu) #44424
[5b5d95d312] - node-api: cleanup redundant static modifiers (Chengzhong Wu) #44301
[8f3e8bb1fd] - (SEMVER-MINOR) os: add machine method (theanarkh) #44416
[3cb28bdde0] - path: change basename() argument from ext to suffix (Rich Trott) #44774
[7c5ce59dba] - perf_hooks: fix gc elapsed time (theanarkh) #44058
[0e2c2064bb] - report: get stack trace with cross origin contexts (Chengzhong Wu) #44398
[5355a46840] - report: fix missing section javascriptHeap on OOMError (Chengzhong Wu) #44398
[381e11e18e] - (SEMVER-MINOR) report: expose report public native apis (Chengzhong Wu) #44255
[30cfe0a156] - report: print javascript stack on fatal error (Chengzhong Wu) #44242
[779761d914] - report: add queue info for udp (theanarkh) #44345
[ff34d48d70] - report: skip report if uncaught exception is handled (Chengzhong Wu) #44208
[3e8569cfbc] - src: remove ParseIP() in cares_wrap.cc (Tobias Nießen) #44771
[916f2c5783] - src: avoid using v8 on Isolate termination (Santiago Gimeno) #44669
[4f056b57e9] - src: remove <unistd.h> from node_os.cc (Tobias Nießen) #44668
[24172ca6fe] - src: avoid copy when creating Blob (Tobias Nießen) #44616
[eda1f4531a] - src: make ReqWrap weak (Rafael Gonzaga) #44074
[ea2957fe77] - src: make NearHeapLimitCallback() more robust (Joyee Cheung) #44581
[eaf2ffc23a] - src: dump isolate stats when process exits (daomingq) #44534
[49cf3459d1] - src: rename misleading arg in ClientHelloParser (Tobias Nießen) #44500
[2ba547aa5b] - (SEMVER-MINOR) src: expose environment RequestInterrupt api (Chengzhong Wu) #44362
[70662f4058] - src: fix cppgc incompatibility in v8 (Shelley Vohr) #43521
[91ef427d2d] - src: nest namespace report in namespace node (Chengzhong Wu) #44069
[e7d30b4b49] - src: use a typed array internally for process._exiting (Darshan Sen) #43883
[d76e7e4e84] - src: improve error handling in CloneSSLCerts (Tobias Nießen) #44410
[cae9c5d5c3] - src: fix incorrect comments in crypto (Tobias Nießen) #44470
[c0875d1f00] - src: avoid casting std::trunc(... / ...) to size_t (Tobias Nießen) #44467
[8f3ed25e08] - src: add error handling to uv_uptime call (Juan José Arboleda) #44386
[c7713f19de] - src: remove base64_select_table and base64_table (Tobias Nießen) #44425
[a3dc7e18ed] - src: fix uv_err_name memory leak (theanarkh) #44421
[a711080061] - src: make Endianness an enum class (Tobias Nießen) #44411
[aa80826651] - src: fix ssize_t error from nghttp2.h (Darshan Sen) #44393
[6b8ed279fd] - src: trace fs async api (theanarkh) #44057
[dd08d6cc57] - src: simplify and optimize GetOpenSSLVersion() (Tobias Nießen) #44395
[4c27d77e5c] - src: simplify ECDH::GetCurves() (Tobias Nießen) #44309
[a6ce1de833] - src: remove KeyObjectData::symmetric_key_len_ (Tobias Nießen) #44346
[f0d841fd7d] - src: fix multiple format string bugs (Tobias Nießen) #44314
[2f3502f345] - src: make minor improvements to SecureBuffer (Tobias Nießen) #44302
[525fbfd122] - src: use imported namespaces in node_contextify.cc (Juan José) #44299
[ac2edbcd8c] - src: refactor to avoid using a moved object (Tobias Nießen) #44269
[b186684b22] - src: extract common context embedder tag checks (Chengzhong Wu) #44258
[8195c8108c] - src: avoid copying BaseObjectPtrs in loop (Tobias Nießen) #44270
[c045faf1ea] - src: fix --heapsnapshot-near-heap-limit error hint (Chengzhong Wu) #44216
[4ee8ac3b6b] - src: prevent copying ArrayBufferViewContents (Keyhan Vakil) #44091
[8f5fd2f06c] - src: fix to use replacement character (Kohei Ueno) #43999
[78c846265f] - src: fix typo in src/README.md (Anna Henningsen) #44009
[ec1645b1f0] - src: fix regression that a source marker is lost (cola119) #43086
[0c01922ff7] - src: remove dead code in base64_encode (Tobias Nießen) #43979
[28911e21b6] - src,buffer: remove unused chars_written parameter (Keyhan Vakil) #44092
[37010cb862] - src,fs: refactor duplicated code in fs.readdir (Daeyeon Jeong) #43204
[1635503704] - src,test: fix typos (SADIK KUZU) #44110
[ffb1c85784] - stream: refactor use es2020 statement (SindreXie) #44533
[6ed3367155] - (SEMVER-MINOR) stream: add ReadableByteStream.tee() (Daeyeon Jeong) #44505
[14c7f4a290] - test: update WPT runner (Filip Skokan) #43455
[4368acd01a] - test: don't clobber RegExp.$_ on startup (Ben Noordhuis) #44864
[5854abc176] - test: use async/await in test-debugger-auto-resume (samyuktaprabhu) #44675
[a7666abe31] - test: migrated from Promise chains to Async/Await (Rathi N Das) #44674
[5bed2d1f46] - test: change promises to async/await in test-debugger-backtrace.js (Juliet Zhang) #44677
[f630881f9b] - test: use async/await in test-debugger-sb-before-load (Hope Olaidé) #44697
[fada3a2ce7] - test: add extra tests for basename with ext option (Connor Burton) #44772
[9386c8581c] - test: refactor to async/await (Divya Mohan) #44694
[af2aa5be45] - test: modify test-debugger-custom-port.js to use async-await (Priya Shastri) #44680
[e9e130925c] - test: update test-debugger-breakpoint-exists.js to use async/await (Archana Kamath) #44682
[510365a036] - test: use async/await in test-debugger-preserve-breaks (poorvitusam) #44696
[2baa3c3ce5] - test: use async/await in test-debugger-profile (surbhirjain) #44684
[ffc4fadf5e] - test: change the promises to async/await in test-debugger-exec-scope.js (Ankita Khiratkar) #44685
[8b8d18ab4e] - test: verify napi_remove_wrap with napi_delete_reference (Chengzhong Wu) #44754
[863361928e] - test: change promises to async/await (Madhulika Sharma) #44683
[2e3aa39c94] - test: use async/await in test-debugger-invalid-args (Nupur Chauhan) #44678
[095cb7eba1] - test: update test-debugger-low-level to use await/async (Meghana Ramesh) #44688
[2752d7c22a] - test: check that sysconf returns a positive value (Tobias Nießen) #44666
[fc1edaf0d7] - test: change promise to async/await in debugger-watcher (“Pooja) #44687
[aae8ff6ace] - test: fix test-performance-measure (smitley) #44637
[f13e06ab85] - test: improve lib/readline.js coverage (MURAKAMI Masahiko) #42686
[a46dd370d7] - test: fix test-repl not validating leaked globals properly (Antoine du Hamel) #44640
[31f809acca] - test: ignore stale process cleanup failures on Windows (Joyee Cheung) #44480
[370b0ec5a1] - test: use python3 instead of python (Luigi Pinca) #44545
[88dfd50079] - test: fix DebugSymbolsTest.ReqWrapList on PPC64LE (Daniel Bevenius) #44341
[371804752a] - test: add more cases for parse-encoding (Tony Gorez) #44427
[0c76e01876] - test: split report OOM tests (Joyee Cheung) #44389
[5af3a5d37e] - test: avoid race in file write stream handle tests (Joyee Cheung) #44380
[edb3335ff2] - test: deflake child process exec timeout tests (Joyee Cheung) #44390
[c3429ab2e3] - test: make the vm timeout escape tests more lenient (Joyee Cheung) #44433
[b5901a0c26] - test: split heap prof tests (Joyee Cheung) #44388
[a139f5d4e0] - test: fix multiple incorrect mustNotCall() uses (Tobias Nießen) #44022
[6990833a4c] - test: raise sleep times in child process tests (Joyee Cheung) #44375
[b2b9de98a2] - test: remove duplicate test (Luigi Pinca) #44313
[c397bb93ad] - test: make tmpdir.js importable from esm (Geoffrey Booth) #44322
[03b8cb8c4c] - test: deflake test-diagnostics-channel-net (Keyhan Vakil) #44144
[73cd9dd860] - test: add coverage for invalid RSA-PSS digests (Tobias Nießen) #44271
[003ab59fcc] - test: move "errors" test to "parallel" (Michaël Zasso) #44233
[4485adeaeb] - test: mark connection leak test flaky on IBM i (Richard Lau) #44215
[8725a87fd9] - test: use mustSucceed instead of mustCall with assert.ifError (MURAKAMI Masahiko) #44196
[41ea42bd82] - test: update hr-time web platform tests (Yagiz Nizipli) #44100
[dd4db8e724] - test: update console web platform tests (Yagiz Nizipli) #44100
[940e31784e] - test: move tests with many workers to sequential (Keyhan Vakil) #44139
[03c0819dd9] - test: deflake gc-http-client tests by restricting number of requests (Nick Sia) #44146
[3d0a3fe246] - test: move test-vm-break-on-sigint to sequential (Keyhan Vakil) #44140
[4cfa9bac90] - test: remove test-http-client-response-timeout flaky designation (Luigi Pinca) #44145
[2f036c857e] - test: s390x z15 accelerated zlib fixes (Adam Majer) #44117
[5ed4f431cf] - test: tune down parallelism for some flaky tests (Keyhan Vakil) #44090
[ec7b932945] - test: fix internet/test-inspector-help-page (Daeyeon Jeong) #44025
[dff6615bbe] - test: remove test-gc-http-client-timeout from flaky list (Feng Yu) #43971
[6c3228361b] - test: reduce loop times for preventing test from timeout (theanarkh) #43981
[a33daadc41] - test: fix test-cluster-concurrent-disconnect (Daeyeon Jeong) #43961
[e009a35d6e] - test: change misleading variable name (Tobias Nießen) #43990
[72fb0133f5] - test: use common.mustNotMutateObjectDeep() in fs tests (LiviaMedeiros) #43819
[4ebb3ef508] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #44223
[9a469bef2c] - test_runner: include stack of uncaught exceptions (Moshe Atlow) #44614
[56dc4b3848] - test_runner: fix test runner hooks failure stack (Moshe Atlow) #44284
[cefb0586d8] - test_runner: refactor to use more primordials (Antoine du Hamel) #44062
[64b07a9d14] - test_runner: verbous error when entire test tree is canceled (Moshe Atlow) #44060
[bfdee2597a] - test_runner: empty pending tests queue post running (Moshe Atlow) #44059
[0fbedac6ce] - (SEMVER-MINOR) test_runner: add before/after/each hooks (Moshe Atlow) #43730
[6ad7a86af6] - test_runner: fix top level describe queuing (Moshe Atlow) #43998
[a2881b7a85] - test_runner: graceful termination on --test only (Moshe Atlow) #43977
[72a8faa087] - test_runner: validate concurrency option (Antoine du Hamel) #43976
[8118fc2980] - tls: fix out-of-bounds read in ClientHelloParser (Tobias Nießen) #44580
[b53ea08d7b] - tls: remove SecureContext setFreeListLength (Tobias Nießen) #44300
[c35a0713b0] - tls: use OpenSSL constant for client random size (Tobias Nießen) #44305
[e4b4b370a1] - tls: use logical OR operator (Mohammed Keyvanzadeh) #44236
[18e1766346] - tools: increase timeout of running WPT (Joyee Cheung) #44574
[006d7f1f2a] - tools: refactor deprecated format in no-unescaped-regexp-dot (Madhuri) #44763
[c6289d632a] - tools: update eslint-check.js to object style (andiemontoyeah) #44706
[b06a78e85d] - tools: update eslint to 8.24.0 (Node.js GitHub Bot) #44778
[ce3397223b] - tools: update lint-md-dependencies to rollup@2.79.1 (Node.js GitHub Bot) #44776
[1079c8099d] - tools: add update-llhttp.sh (Paolo Insogna) #44652
[0b3f49c749] - tools: fix typo in update-nghttp2.sh (Luigi Pinca) #44664
[d190e716ad] - tools: add timezone update workflow (Lenvin Gonsalves) #43988
[b6c232f288] - tools: update eslint to 8.23.1 (Node.js GitHub Bot) #44639
[2c0d9ffb65] - tools: update lint-md-dependencies to @rollup/plugin-node-resolve @14.1.0 (Node.js GitHub Bot) #44638
[f05ce2bff5] - tools: update lint-md-dependencies to @rollup/plugin-node-resolve @14.0.1 (Node.js GitHub Bot) #44590
[657fa792f4] - tools: increase timeout of running WPT (Joyee Cheung) #44574
[602ecaa42f] - tools: fix shebang to use python3 by default (Himself65) #44531
[bad8ecc27f] - tools: update lint-md-dependencies to rollup@2.79.0 (Node.js GitHub Bot) #44510
[255023f80a] - tools: don't use f-strings in test.py (Santiago Gimeno) #44407
[b3629daad7] - tools: update doc to unist-util-visit@4.1.1 (Node.js GitHub Bot) #44370
[2891d9fd0a] - tools: update eslint to 8.23.0 (Node.js GitHub Bot) #44419
[0bf57df711] - tools: update lint-md-dependencies to rollup@2.78.1 (Node.js GitHub Bot) #44320
[9391ebdc0d] - tools: update ESLint to 8.22.0 (Luigi Pinca) #44243
[df49c426f6] - tools: update lint-md-dependencies to rollup@2.78.0 (Node.js GitHub Bot) #44244
[e42227ad3e] - tools: update lint-md-dependencies to rollup@2.77.3 (Node.js GitHub Bot) #44230
[1b6d294e78] - tools: update eslint to 8.21.0 (Node.js GitHub Bot) #44162
[f3dcaaf087] - tools: update lint-md-dependencies to @rollup/plugin-commonjs @22.0.2 (Node.js GitHub Bot) #44160
[5d5971cda7] - tools: update undici CPE in vuln checking script (Facundo Tuesca) #44128
[606b0a08a8] - tools: update lint-md-dependencies to rollup@2.77.2 (Node.js GitHub Bot) #44064
[8a8c7cf6b5] - tools: add verbose flag to find-inactive-collaborators (Rich Trott) #43964
[cb6b57f777] - trace_events: add example (theanarkh) #43253
[be863b7a97] - tty: fix TypeError when stream is closed (Antoine du Hamel) #43803
[a08cdead0b] - typings: add JSDoc for internal/validators (Yagiz Nizipli) #44181
[a6a655de35] - util: increase robustness with primordials (Jordan Harband) #41212
[70563b53c5] - (SEMVER-MINOR) util: add maxArrayLength option to Set and Map (Kohei Ueno) #43576
[0beedb7f1c] - v8: add setHeapSnapshotNearHeapLimit (theanarkh) #44420
[8d259e6086] - win: fix fs.realpath.native for long paths (StefanStojanovic) #44536

`v16.17.1`: 2022-09-23, Version 16.17.1 'Gallium' (LTS), @ruyadorno

Compare Source

This is a security release.

Notable changes

The following CVEs are fixed in this release:

CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
CVE-2022-32213: bypass via obs-fold mechanic (Medium)
CVE-2022-35255: Weak randomness in WebCrypto keygen
CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium)

More detailed information on each of the vulnerabilities can be found in September 22nd 2022 Security Releases blog post.

Commits

[a54283a638] - crypto: fix weak randomness in WebCrypto keygen (Ben Noordhuis) nodejs-private/node-private#346
[0713e21240] - http: disable chunked encoding when using OBS fold is used (Paolo Insogna) nodejs-private/node-private#341
[77fe2f32e4] - src: fix IPv4 non routable validation (RafaelGSS) nodejs-private/node-private#337

`v16.17.0`: 2022-08-16, Version 16.17.0 'Gallium' (LTS), @targos

Compare Source

Notable Changes

Experimental command-line argument parser API

Adds util.parseArgs helper for higher level command-line argument parsing.

Contributed by Benjamin Coe, John Gee, Darcy Clarke, Joe Sepi, Kevin Gibbons, Aaron Casanova, Jessica Nahulan, and Jordan Harband - #42675

Experimental ESM Loader Hooks API

Node.js ESM Loader hooks now support multiple custom loaders, and composition is achieved via "chaining": foo-loader calls bar-loader calls qux-loader (a custom loader must now signal a short circuit when intentionally not calling the next). See the ESM docs for details.

Real-world use-cases are laid out for end-users with working examples in the article Custom ESM loaders: Who, what, when, where, why, how.

Contributed by Jacob Smith, Geoffrey Booth, and Bradley Farias - #42623

Experimental test runner

The node:test module, which was initially introduced in Node.js v18.0.0, is now available with all the changes done to it up to Node.js v18.7.0.

Improved interoperability of the Web Crypto API

To better align Node.js' experimental implementation of the Web Crypto API with other runtimes, several changes were made:

Support for CFRG curves was added, with the 'Ed25519', 'Ed448', 'X25519', and 'X448' algorithms.
The proprietary 'NODE-DSA', 'NODE-DH', 'NODE-SCRYPT', 'NODE-ED25519', 'NODE-ED448', 'NODE-X25519', and 'NODE-X448' algorithms were removed.
The proprietary 'node.keyObject' import/export format was removed.

Contributed by Filip Skokan - #42507, #43310

Dependency updates

Updated Corepack to 0.12.1 - #43965
Updated ICU to 71.1 - #42655
Updated npm to 8.15.0 - #43917
Updated Undici to 5.8.0 - #43886

Other notable changes

[5f1e9e2030] - (SEMVER-MINOR) crypto: make authTagLength optional for CC20P1305 (Tobias Nießen) #42427
[934077a137] - (SEMVER-MINOR) crypto: align webcrypto RSA key import/export with other implementations (Filip Skokan) #42816
[7683e9623c] - (SEMVER-MINOR) dns: export error code constants from dns/promises (Feng Yu) #43176
[302a134b83] - doc: deprecate coercion to integer in process.exit (Daeyeon Jeong) #43738
[4884f18ce5] - (SEMVER-MINOR) doc: deprecate diagnostics_channel object subscribe method (Stephen Belanger) #42714
[90f395dda9] - (SEMVER-MINOR) errors: add support for cause in aborterror (James M Snell) #41008
[7a5de2cc0c] - (SEMVER-MINOR) events: expose CustomEvent on global with CLI flag (Daeyeon Jeong) #43885
[087adbb7a3] - (SEMVER-MINOR) events: add CustomEvent (Daeyeon Jeong) #43514
[979c98a3cb] - (SEMVER-MINOR) events: propagate abortsignal reason in new AbortError ctor in events (James M Snell) #41008
[e04c8a4921] - (SEMVER-MINOR) fs: propagate abortsignal reason in new AbortSignal constructors (James M Snell) #41008
[464830993e] - (SEMVER-MINOR) fs: make params in writing methods optional (LiviaMedeiros) #42601
[3d7808ec3f] - (SEMVER-MINOR) fs: add read(buffer[, options]) versions (LiviaMedeiros) #42768
[082a2630fd] - (SEMVER-MINOR) http: add drop request event for http server (theanarkh) #43806
[5a74939770] - (SEMVER-MINOR) http: add diagnostics channel for http client (theanarkh) #43580
[f05fd1a423] - (SEMVER-MINOR) http: add perf_hooks detail for http request and client (theanarkh) #43361
[9d1b4b7e29] - (SEMVER-MINOR) http: add uniqueHeaders option to request and createServer (Paolo Insogna) #41397
[fa5ac5a2eb] - (SEMVER-MINOR) http2: propagate abortsignal reason in new AbortError constructor (James M Snell) #41008
[94070f152e] - (SEMVER-MINOR) http2: compat support for array headers (OneNail) #42901
[36dd39dec0] - (SEMVER-MINOR) lib: propagate abortsignal reason in new AbortError constructor in blob (James M Snell) #41008
[8adf7d5e91] - (SEMVER-MINOR) lib: add abortSignal.throwIfAborted() (James M Snell) #40951
[3c1ed86840] - (SEMVER-MINOR) lib: improved diagnostics_channel subscribe/unsubscribe (Stephen Belanger) #42714
[e6186af5cc] - (SEMVER-MINOR) module: add isBuiltIn method (hemanth.hm) #43396
[3d851d6d6b] - (SEMVER-MINOR) module,repl: support 'node:'-only core modules (Colin Ihrig) #42325
[303bd08d88] - (SEMVER-MINOR) net: add drop event for net server (theanarkh) #43582
[da03e9f484] - (SEMVER-MINOR) net: add ability to reset a tcp socket (pupilTong) #43112
[73f852e1e3] - (SEMVER-MINOR) node-api: emit uncaught-exception on unhandled tsfn callbacks (Chengzhong Wu) #36510
[6dcdcd7f50] - (SEMVER-MINOR) perf_hooks: add PerformanceResourceTiming (RafaelGSS) #42725
[5750358872] - (SEMVER-MINOR) report: add more heap infos in process report (theanarkh) #43116
[e7b99e8c8d] - (SEMVER-MINOR) src: add --openssl-legacy-provider option (Daniel Bevenius) #40478
[1281a48b89] - (SEMVER-MINOR) src: define fs.constants.S_IWUSR & S_IRUSR for Win (Liviu Ionescu) #42757
[9ea9797d34] - (SEMVER-MINOR) src,doc,test: add --openssl-shared-config option (Daniel Bevenius) #43124
[046debaee0] - (SEMVER-MINOR) stream: use cause options in AbortError constructors (James M Snell) #41008
[6641fda10a] - (SEMVER-MINOR) stream: add iterator helper find (Nitzan Uziely) #41849
[edec73032c] - (SEMVER-MINOR) stream: add writableAborted (Robert Nagy) #40802
[2aae868fa2] - (SEMVER-MINOR) timers: propagate signal.reason in awaitable timers (James M Snell) #41008
[513f52445b] - (SEMVER-MINOR) v8: add v8.startupSnapshot utils (Joyee Cheung) #43329
[a8eca74450] - (SEMVER-MINOR) v8: export more fields in getHeapStatistics (theanarkh) #42784
[845279e331] - (SEMVER-MINOR) worker: add hasRef() to MessagePort (Darshan Sen) #42849

Commits

Semver-minor commits

[58279d5b76] - (SEMVER-MINOR) buffer: graduate Blob from experimental (James M Snell) #41270
[72a0c5c743] - (SEMVER-MINOR) crypto: remove Node.js-specific webcrypto extensions (Filip Skokan) #43310
[2e3a69a2ba] - (SEMVER-MINOR) crypto: add CFRG curves to Web Crypto API (Filip Skokan) #42507
[5f1e9e2030] - (SEMVER-MINOR) crypto: make authTagLength optional for CC20P1305 (Tobias Nießen) #42427
[934077a137] - (SEMVER-MINOR) crypto: align webcrypto RSA key import/export with other implementations (Filip Skokan) #42816
[7683e9623c] - (SEMVER-MINOR) dns: export error code constants from dns/promises (Feng Yu) #43176
[4884f18ce5] - (SEMVER-MINOR) doc: deprecate diagnostics_channel object subscribe method (Stephen Belanger) #42714
[90f395dda9] - (SEMVER-MINOR) errors: add support for cause in aborterror (James M Snell) #41008
[247a6f6e85] - (SEMVER-MINOR) esm: add chaining to loaders (Jacob Smith) #42623
[7a5de2cc0c] - (SEMVER-MINOR) events: expose CustomEvent on global with CLI flag (Daeyeon Jeong) #43885
[087adbb7a3] - (SEMVER-MINOR) events: add CustomEvent (Daeyeon Jeong) #43514
[979c98a3cb] - (SEMVER-MINOR) events: propagate abortsignal reason in new AbortError ctor in events (James M Snell) #41008
[e04c8a4921] - (SEMVER-MINOR) fs: propagate abortsignal reason in new AbortSignal constructors (James M Snell) #41008
[464830993e] - (SEMVER-MINOR) fs: make params in writing methods optional (LiviaMedeiros) #42601
[3d7808ec3f] - (SEMVER-MINOR) fs: add read(buffer[, options]) versions (LiviaMedeiros) #42768
[082a2630fd] - (SEMVER-MINOR) http: add drop request event for http server (theanarkh) #43806
[5a74939770] - (SEMVER-MINOR) http: add diagnostics channel for http client (theanarkh) #43580
[f05fd1a423] - (SEMVER-MINOR) http: add perf_hooks detail for http request and client (theanarkh) #43361
[9d1b4b7e29] - (SEMVER-MINOR) http: add uniqueHeaders option to request and createServer (Paolo Insogna) #41397
[fa5ac5a2eb] - (SEMVER-MINOR) http2: propagate abortsignal reason in new AbortError constructor (James M Snell) #41008
[94070f152e] - (SEMVER-MINOR) http2: compat support for array headers (OneNail) #42901
[36dd39dec0] - (SEMVER-MINOR) lib: propagate abortsignal reason in new AbortError constructor in blob (James M Snell) #41008
[8adf7d5e91] - (SEMVER-MINOR) lib: add abortSignal.throwIfAborted() (James M Snell) #40951
[3c1ed86840] - (SEMVER-MINOR) lib: improved diagnostics_channel subscribe/unsubscribe (Stephen Belanger) #42714
[e6186af5cc] - (SEMVER-MINOR) module: add isBuiltIn method (hemanth.hm) #43396
[3d851d6d6b] - (SEMVER-MINOR) module,repl: support 'node:'-only core modules (Colin Ihrig) #42325
[303bd08d88] - (SEMVER-MINOR) net: add drop event for net server (theanarkh) #43582
[da03e9f484] - (SEMVER-MINOR) net: add ability to reset a tcp socket (pupilTong) #43112
[73f852e1e3] - (SEMVER-MINOR) node-api: emit uncaught-exception on unhandled tsfn callbacks (Chengzhong Wu) #36510
[6dcdcd7f50] - (SEMVER-MINOR) perf_hooks: add PerformanceResourceTiming (RafaelGSS) #42725
[5750358872] - (SEMVER-MINOR) report: add more heap infos in process report (theanarkh) #43116
[e7b99e8c8d] - (SEMVER-MINOR) src: add --openssl-legacy-provider option (Daniel Bevenius) #40478
[1281a48b89] - (SEMVER-MINOR) src: define fs.constants.S_IWUSR & S_IRUSR for Win (Liviu Ionescu) #42757
[9ea9797d34] - (SEMVER-MINOR) src,doc,test: add --openssl-shared-config option (Daniel Bevenius) #43124
[046debaee0] - (SEMVER-MINOR) stream: use cause options in AbortError constructors (James M Snell) #41008
[6641fda10a] - (SEMVER-MINOR) stream: add iterator helper find (Nitzan Uziely) #41849
[edec73032c] - (SEMVER-MINOR) stream: add writableAborted (Robert Nagy) #40802
[9a530832cb] - (SEMVER-MINOR) test: add initial test module (Colin Ihrig) #42325
[61a2ddc597] - (SEMVER-MINOR) test_runner: expose describe and it (Moshe Atlow) #43420
[cd6f24be4c] - (SEMVER-MINOR) test_runner: add initial CLI runner (Colin Ihrig) #42658
[a4b277cb4d] - (SEMVER-MINOR) test_runner: support 'only' tests (Colin Ihrig) #42514
[2aae868fa2] - (SEMVER-MINOR) timers: propagate signal.reason in awaitable timers (James M Snell) #41008
[432e3054be] - (SEMVER-MINOR) util: add tokens to parseArgs (John Gee) #43459
[a1e122be62] - (SEMVER-MINOR) util: add parseArgs module (Benjamin Coe) #42675
[513f52445b] - (SEMVER-MINOR) v8: add v8.startupSnapshot utils (Joyee Cheung) #43329
[a8eca74450] - (SEMVER-MINOR) v8: export more fields in getHeapStatistics (theanarkh) #42784
[845279e331] - (SEMVER-MINOR) worker: add hasRef() to MessagePort (Darshan Sen) #42849

Semver-patch commits

[480a754ddc] - assert: callTracker throw a specific error message when possible (Moshe Atlow) #43640
[ebb334b124] - assert: fix CallTracker wraps the function causes the length to be lost (OneNail) #42909
[7f8f83d4d0] - assert: make assert.fail less affected by prototype tampering (Antoine du Hamel) #42918
[a6a46f9578] - async_hooks: use kEmptyObject (LiviaMedeiros) #43159
[84075821be] - async_hooks: remove destroyed symbol on Promises (Gerhard Stöbich) #42402
[b69396a41a] - async_hooks: avoid decrementing iterator after erase (Gabriel Bota) #42749
[6b7c6192ff] - bootstrap: move global initialization to js (Alena Khineika) #43625
[4fbe24588a] - bootstrap: use the isolate snapshot in workers (Joyee Cheung) #42702
[3a83e5cfd9] - bootstrap: move embedded snapshot to SnapshotBuilder (Joyee Cheung) #42702
[b4201ace9b] - bootstrap: reset process._exit and process.exitCode in pre-execution (Joyee Cheung) #42466
[f8f7c1e5bd] - bootstrap: run inspector and event loop in snapshot builder (Joyee Cheung) #42466
[2d79480fcb] - bootstrap: make I/O streams work with user-land snapshot (Joyee Cheung) #42466
[1b2946b1a4] - bootstrap: refresh options in pre-execution (Joyee Cheung) #42466
[ca57563522] - bootstrap: use SnapshotData to pass snapshot data around (Joyee Cheung) #42360
[60d032b89c] - buffer: do not leak memory if buffer is too big (Keyhan Vakil) #43938
[5ddd367bec] - buffer: improve Blob constructor error message when passing a string (Xuguang Mei) #42338
[691e5d8bf3] - buffer: fix atob input validation (Antoine du Hamel) #42539
[a948fb8b56] - build: add .gitattributes for npm and other shims (Hrishikesh Kadam) #43879
[623dd2a70b] - build: remove precompiled header and debug information for host builds (Niyas Sait) #42538
[129b05e0c5] - build: fix various shared library build issues (William Marlow) #41850
[fba6e96326] - build: fix indeterminacy of icu_locales value (Sergey Nazaryev) #42865
[74bce1c448] - build: improve reliability of find_python.cmd script (Luigi Pinca) #42810
[637af6c068] - build: windows/arm64 native compilation support (Niyas Sait) #42408
[fe661fadad] - build: add --node-snapshot-main configure option (Joyee Cheung) #42466
[daadd58baa] - build,test: increase stack size limit on Windows (Tobias Nießen) #43632
[1e1634ae99] - child_process: do not need to count length when maxBuffer is Infinity (theanarkh) #43822
[2b6e98b6b2] - child_process: improve ipc write performance (rubikscraft) #42931
[7aac430b3f] - child_process: speed up 'advanced' ipc receiving (rubikscraft) #42931
[6844930290] - child_process: use kEmptyObject (LiviaMedeiros) #43159
[72400b7a7b] - child_process: add env contents types in JSDoc (Rich Trott) #42494
[fe57e5685d] - cluster: send connection to other server when worker drop it (theanarkh) #43747
[61b5d4a999] - cluster: fix closing dgram sockets in cluster workers throws errors (Ouyang Yadong) #43709
[97f4cc7766] - cluster: fix fd leak (theanarkh) #43650
[1cb19ec96a] - cluster: use kEmptyObject (LiviaMedeiros) #43159
[c8706f3a7f] - cluster, net: fix listen pipe with readable and writable in cluster (theanarkh) #43634
[35fc1c205e] - console: fix console.dir crash on a revoked proxy (Daeyeon Jeong) #43100
[3449472f3d] - crypto: remove unneeded guard (Rich Trott) #43856
[a3a845b8ba] - crypto: don't disable TLS 1.3 without suites (Adam Majer) #43427
[588a84e11d] - crypto: handle webcrypto generateKey() usages edge case (Filip Skokan) #43454
[224d3f40dc] - crypto: update Wrapping and unwrapping keys webcrypto example (Filip Skokan) #43452
[8dca8d7805] - crypto: fix webcrypto generateKey() with empty usages (Filip Skokan) #43431
[bef600e787] - crypto: fix webcrypto digest() invalid algorithm (Filip Skokan) #43431
[077ad7e90d] - crypto: fix webcrypto RSA generateKey() use of publicExponent (Filip Skokan) #43431
[04572ec914] - crypto: fix webcrypto AES-KW keys accepting encrypt/decrypt usages (Filip Skokan) #43431
[52ea86908d] - crypto: fix webcrypto deriveBits for non-byte lengths (Filip Skokan) #43431
[97b2fef24a] - crypto: fix webcrypto import of cfrg raw public keys (Filip Skokan) #43404
[a57149d14e] - crypto: fix webcrypto JWK EC and OKP import crv check (Filip Skokan) #43346
[1cb267261c] - crypto: test webcrypto ec raw public key import (Filip Skokan) #43405
[02cf57b8d6] - crypto: use kEmptyObject (LiviaMedeiros) #43159
[4600892a45] - crypto: adjust minimum length in generateKey('hmac', ...) (LiviaMedeiros) #42944
[baaf77898b] - crypto: clean up parameter validation in HKDF (Tobias Nießen) #42924
[3f43dadeda] - crypto: validate this in all webcrypto methods and getters (Filip Skokan) #42815
[297e374565] - crypto: do not add undefined hash in webcrypto normalizeAlgorithm (Filip Skokan) #42559
[c764e81a69] - crypto: cleanup webcrypto jwk code (Filip Skokan) #42562
[c605ad1343] - crypto: fix webcrypto derive key lengths (Filip Skokan) #42542
[0b1b616a9c] - crypto: improve prime size argument validation (Tobias Nießen) #42234
[f1c12aa6df] - debugger: throw a more useful error when the frame is missing (Kohei Ueno) #42776
[f75a5a92ec] - debugger: fix inconsistent inspector output of exec new Map() (Kohei Ueno) #42423
[e3d8893265] - deps: V8: backport 22698d2 (Chengzhong Wu) #43751
[06a6bdaf7a] - deps: update corepack to 0.12.1 (Node.js GitHub Bot) #43965
[c7be356dd7] - deps: update hast-util-raw (Moshe Atlow) #43927
[62c27d0d84] - deps: update undici to 5.8.0 (Node.js GitHub Bot) #43886
[92051cb4a1] - deps: cherry-pick libuv/libuv@3a7b955 (Ben Noordhuis) #43950
[8835898e43] - deps: cherry-pick libuv/libuv@abb109f (Ben Noordhuis) #43950
[1566854218] - deps: upgrade npm to 8.15.0 (npm team) #43917
[e6baa8a113] - deps: upgrade npm to 8.14.0 (npm team) #43826
[aa137caac3] - deps: update corepack to 0.12.0 (Node.js GitHub Bot) #43748
[04188e54f5] - deps: update undici to 5.7.0 (Node.js GitHub Bot) #43790
[09f9060f7d] - deps: upgrade npm to 8.13.2 (npm team) #43622
[1343615224] - deps: upgrade npm to 8.13.1 (npm team) #43552
[49080bc42f] - deps: patch V8 to 9.4.146.26 (Michaël Zasso) #43778
[705a8afd81] - deps: update Corepack to 0.11.2 (Maël Nison) #43402
[552e91121b] - deps: update undici to 5.5.1 (Node.js GitHub Bot) #43412
[0ff00945d5] - deps: update undici to 5.4.0 (Node.js GitHub Bot) #43262
[170bec811b] - deps: update undici to 5.3.0 (Node.js GitHub Bot) #43197
[b97075dfec] - deps: update undici to 5.2.0 (Node.js GitHub Bot) #43059
[4d4e00a6b0] - deps: update undici to 5.1.1 (Michaël Zasso) #42939
[cba4f6c8a0] - deps: update Acorn to v8.7.0 (Michaël Zasso) #42667
[a5507fd409] - deps: update ICU to 71.1 (Michaël Zasso) #42655
[cbb253e61e] - deps: upgrade npm to 8.12.1 (npm team) #43301
[01e7d1f349] - deps: cherry-pick 4ab70f6 from V8 upstream (Khaidi Chu) #43328
[fea892a168] - dns: fix getServers return undefined (jiahao.si) #43922
[43a3239d85] - dns: fix cares memory leak (theanarkh) #43912
[8d2a256bf4] - dns: make promise API fully constructed from lib/internal/dns/promises (Feng Yu) #43227
[71f7b00fca] - domain: fix vm promise tracking while keeping isolation (Stephen Belanger) #43556
[9f75f26ad9] - errors: extract type detection & use in ERR_INVALID_RETURN_VALUE (Jacob Smith) #43558
[f5115b4abc] - errors,console: refactor to use ES2021 syntax (小菜) #42872
[85ba4e069d] - errors,vm: update error and use cause (Gus Caplan) #42820
[ae157d9098] - esm: fix loader hooks accepting too many arguments (Jacob Smith) #44109
[3139c110dc] - esm: remove superfluous argument (Rich Trott) #43884
[63228efe08] - esm: throw on any non-2xx response (LiviaMedeiros) #43742
[a6d4d31da5] - esm: fix erroneous re-initialization of ESMLoader (Jacob Smith) #43763
[953e663e58] - esm: treat 307 and 308 as redirects in HTTPS imports (Kid) #43689
[33a2902a33] - esm: restore next<HookName>'s context as optional arg (Jacob Smith) #43553
[df3f5cb93e] - esm: fix chain advances when loader calls next<HookName> multiple times (Jacob Smith) #43303
[eac4e20525] - esm: refactor responseURL handling (Guy Bedford) #43164
[e114ed0cda] - esm: fix http(s) import via custom loader (Jacob Smith) #43130
[6564e69c78] - esm: fix imports from non-file module (Antoine du Hamel) #42881
[e1bc88764d] - esm: graduate top-level-await to stable (Antoine du Hamel) #42875
[14a929b0b0] - esm: emit experimental warnings in common place (Jacob Smith) #42314
[0167988ce3] - events: improve Event compatibility (Daeyeon Jeong) #43461
[e51c0e9939] - events: improve EventListener validation (Daeyeon Jeong) #43491
[393c021d7f] - events: fix adding abort listener in events.once (Daeyeon Jeong) #43373
[a7eaf3981d] - events: use kEmptyObject (LiviaMedeiros) #43159
[fcf74c53d8] - fs: refactor realpath with Map and Set (LiviaMedeiros) #43569
[bfb8a0bfac] - fs: don't end fs promises on Isolate termination (Santiago Gimeno) #42910
[ca4157ea40] - fs: use kEmptyObject (LiviaMedeiros) #43159
[835056cbcb] - fs: remove unnecessary ?? operator (Morgan Roderick) #43073
[8b89c7fbab] - fs: export constants from fs/promises (Feng Yu) #43177
[b0d9915bc6] - fs: add trailing commas (LiviaMedeiros) #43127
[637820d1e3] - fs: fix write methods param validation and docs (LiviaMedeiros) #41677
[5d8b2cb51d] - fs: fix mkdirSync so ENOSPC is correctly reported (Santiago Gimeno) #42811
[58eebaf717] - http: defer reentrant execution of Parser::Execute (Paolo Insogna) #43369
[ea3ca874da] - http: fix http agent keep alive (theanarkh) #43380
[85d93f0bf6] - http: use kEmptyObject (LiviaMedeiros) #43159
[1bfff396ac] - http: document that ClientRequest inherits from OutgoingMessage (K.C.Ashish Kumar) #42642
[db53e9b387] - http2: log debug only when in debug mode (Basit) #43626
[95083cb0ad] - http2: use kEmptyObject (LiviaMedeiros) #43159
[367454205d] - http2: set origin name correctly when servername is empty (ofirbarak) #42838
[c73f739acd] - http2: improve tests and docs (Daeyeon Jeong) #42858
[4fbedffb55] - https: use kEmptyObject (LiviaMedeiros) #43159
[5879642260] - inspector: set sampling interval before start (Shelley Vohr) #43779
[096f7fc59a] - inspector: add missing initialization (Michael Dawson) #43254
[a8c24185f8] - lib: refactor to avoid unsafe regex primordials (Antoine du Hamel) #43475
[2a5d5e0726] - lib: modify DOMException to pass WPT (Khaidi Chu) #41517
[26d63f004f] - lib: implement safe alternatives to Promise static methods (Antoine du Hamel) #43728
[aab5adbcbe] - lib: use null-prototype objects for property descriptors (Antoine du Hamel) #43473
[a97d0ba3af] - lib: fix TODO in freeze_intrinsics (Antoine du Hamel) #43472
[519cdd94c0] - lib: use kEmptyObject in various places (LiviaMedeiros) #43159
[7d5e7b43f6] - lib: give names to promisified methods (LiviaMedeiros) #43218
[cd55e221b5] - lib: use null-prototype objects for property descriptors (Antoine du Hamel) #43270
[9e613f7f3d] - lib: prepare files for no-var lint rule (Rich Trott) #42573
[327da6acde] - lib: source maps filter null prefix (Fabian Cook) #42522
[58f80b0dcc] - lib: improve the coverage of the validator (mawaregetsuka) #42443
[e48ccf5934] - lib: update JSDoc for linting (Rich Trott) #42489
[abc134cacc] - lib,src: add source map support for global eval (Chengzhong Wu) #43428
[288d9fbe5a] - loader: make require.resolve throw for unknown builtin modules (木杉) #43336
[7c4e1ad1ed] - module: also enable subpath imports in REPL (Ray) #43450
[c284eb3745] - module: ensure 'node:'-only modules can access node_modules (Colin Ihrig) #42430
[70a4033841] - module: cjs-module-lexer WebAssembly fallback (Guy Bedford) #43612
[abda05a3a7] - module: prefer async/await in https imports (Benjamin Gruenbaum) #41950
[f66872e36c] - net: fix socket._getpeername (Daeyeon Jeong) #43010
[b2d02bc2c0] - net: remove redundant connecting assignment (Ouyang Yadong) #43710
[ff5310a9c7] - net: fix net keepalive and noDelay (theanarkh) #43561
[265810a1e5] - net: prevent /32 ipv4 mask from matching all ips (supriyo-biswas) #43381
[e4a5bd1cf8] - net: fix net.Server keepalive and noDelay (theanarkh) #43497
[d766cfaca9] - net,dns: move hasObserver out of perf function (theanarkh) #43217
[b240868960] - net,dns: trace tcp connection and dns by perf_hooks (theanarkh) #42390
[112bce394d] - node-api: explicitly set __cdecl for API functions (Vladimir Morozov) #42780
[49103e3240] - node-api: fix napi_get_all_property_names (Vladimir Morozov) #42463
[5a1e1b3f33] - node-api: format Node-API related code (Vladimir Morozov) #42396
[31ee218eff] - node-api,src: fix module registration in MSVC C++ (Vladimir Morozov) #42459
[e7899ba1f7] - os: avoid unnecessary usage of var (Mohammed Keyvanzadeh) #42563
[463f9a6c4f] - perf_hooks: add initiatorType getter (Rafael Gonzaga) #43593
[096a2d9434] - perf_hooks: fix miscounted gc performance entry starttime (#43066) (Xuguang Mei) #43066
[f08a282098] - perf_hooks: use kEmptyObject (LiviaMedeiros) #43159
[8b0ae63316] - perf_hooks: fix start_time of perf_hooks (theanarkh) #43069
[7a5972fe9e] - perf_hooks: fix function wrapped by timerify to work correctly (Kohei Ueno) #43330
[5ab3da3f26] - perf_hooks: return different functions in timerify (Himself65) #42854
[15da462cea] - process: use defineProperty instead of assignment (Mark S. Miller) #43907
[67e91aa20f] - readline: fix to not access a property on an undefined value (Kohei Ueno) #43543
[37066f0319] - readline: use kEmptyObject (LiviaMedeiros) #43159
[d260569b85] - repl: fix overzealous top-level await (Tobias Nießen) #43827
[0bd4a04c42] - repl: use SafePromiseAll and SafePromiseRace (Antoine du Hamel) #43758
[bef9a36024] - repl: make autocomplete case-insensitive (Sergey Petushkov) #41632
[0dc96e4474] - src: pass only Isolate* and env_vars to EnabledDebugList::Parse() (Darshan Sen) #43668
[be3343aed3] - src: use named struct instead of typedef (Tobias Nießen) #43881
[eaa611c53a] - src: use named enum instead of typedef (Tobias Nießen) #43880
[3a32f0ecb2] - src: fix node watchdog race condition (theanarkh) #43780
[67ecd274b7] - src: fix napi_check_object_type_tag() (Daeyeon Jeong) #43788
[364b67cf7e] - src: slim down env-inl.h (Ben Noordhuis) #43745
[ccac1fc2e7] - src: improve and update ByteSource description (Tobias Nießen) #43478
[a1f1ff197e] - src: merge RunInThisContext() with RunInContext() (Daeyeon Jeong) #43225
[3e21ae8733] - src: fix crash on FSReqPromise destructor (Santiago Gimeno) #43533
[b9649a4959] - src: delegate NodeArrayBufferAllocator to v8's allocator (Jeremy Rose) #43594
[26e4dc83a8] - src: remove a stale comment in async_hooks (Daeyeon Jeong) #43317
[733739dd3f] - src: remove CopyBuffer (Tobias Nießen) #43463
[bf553fd26a] - src: register StreamBase while registering LibuvStreamWrap (Darshan Sen) #43321
[f18867b2c0] - src: fix static analysis warning and use smart ptr (Tobias Nießen) #43117
[094d5fc31a] - src: fix json utils escapes for U+000B (Chengzhong Wu) #43206
[c82d992b77] - src: convey potential exceptions during StreamPipe construction (Darshan Sen) #43240
[07b7f8375e] - src: make SecureContext fields private (Tobias Nießen) #43173
[eb2c504542] - src: reuse GetServerName (Tobias Nießen) #43168
[7bdd31929c] - src: remove SecureContext::operator* (Tobias Nießen) #43121
[438c4723f6] - src: replace TraceEventScope with sync events (Chengzhong Wu) #42977
[32446d8c8a] - src: delete AllocatedBuffer (Darshan Sen) #43008
[4cfcb6f883] - src: remove unnecessary comment (Kohei Ueno) #42952
[6adbb062e6] - src: fix memory leak for v8.serialize (liuxingbaoyu) #42695
[e769a0f19b] - src: use node: prefix in example (Antoine du Hamel) #42794
[b19018468c] - src: large page attributing an id on Linux (David CARLIER) #42644
[a26fd031bf] - src: fix coverity report (Michael Dawson) #42663
[8687ba8732] - src: fix alphabetically sorted binding list (Tobias Nießen) #42687
[4e1378b2d6] - src: fix typo in InspectorIoDelegate constructor (Kohei Ueno) #42520
[1dc912ebdc] - src: remove unnecessary static qualifier in crypto_dh.cc (Darshan Sen) #42492
[a280f88266] - src: address 3 useless call coverity warnings (Michael Dawson) #42426
[5195ea3cd2] - src: properly report exceptions from AddressToJS() (Darshan Sen) #42054
[a8553151ee] - src: suppress false coverity warning (Michael Dawson) #42284
[1e8611f048] - src: refactor IsSupportedAuthenticatedMode (Tobias Nießen) #42368
[7778ebecaa] - src: turn SSL_CTX_new CHECK/segfault into JS exception (Anna Henningsen) #42799
[4ffc08861a] - src: add proper mutexes for accessing FIPS state (Anna Henningsen) #42278
[6353a4dc8a] - src,bootstrap: remove NodeMainInstance::registry_ (Darshan Sen) #43392
[1a98f166bf] - src,crypto: remove uses of AllocatedBuffer from crypto_rsa.cc (Darshan Sen) #42852
[c336ffc059] - src,crypto: remove uses of AllocatedBuffer from crypto_ec.cc (Darshan Sen) #42766
[1669b94cd6] - src,crypto: remove uses of AllocatedBuffer from crypto_tls.cc (Darshan Sen) #42589
[6d98a51970] - src,crypto: handle empty maybe correctly in crypto_dh.cc (Darshan Sen) #42492
[5a2e277f93] - src,crypto: remove uses of AllocatedBuffer from crypto_dh.cc (Darshan Sen) #42492
[4a6649cb28] - src,stream: change return type to Maybe (Daeyeon Jeong) #43575
[99a3b19974] - stream: fix 0 transform hwm backpressure (Robert Nagy) #43685
[c4dc8b6297] - stream: add more filter tests (Benjamin Gruenbaum) #41936
[4b17a94b67] - stream: port more test262 tests (Benjamin Gruenbaum) #41974
[3bc12c69a4] - stream: avoid usage of deprecated APIs (Mohammed Keyvanzadeh) #41871
[4ad5a28b54] - stream: refactor to use more validators (Mohammed Keyvanzadeh) #41871
[545b2cd4c2] - stream: use standard for loop instead of for..of (Mohammed Keyvanzadeh) #41871
[3ef9f8da30] - stream: initial port of test262 tests (Benjamin Gruenbaum) #41775
[f793ed550a] - stream: use synchronous error validation & validate abort signal option (iMoses) #41777
[31cee4f914] - stream: never flatten on toArray (Benjamin Gruenbaum) #41615
[d63c4c68a0] - stream: use kEmptyObject (LiviaMedeiros) #43159
[6f9c62206b] - test_runner: add support for boolean values for concurrency option (Lenvin Gonsalves) #43887
[e33f6bd384] - test_runner: validate timeout option (Antoine du Hamel) #43843
[a167daa311] - test_runner: pass signal on timeout (Moshe Atlow) #43911
[b1db85023e] - test_runner: do not report an error when tests are passing (Antoine du Hamel) #43919
[f193ac6cd5] - test_runner: recieve and pass AbortSignal (Moshe Atlow) #43554
[f8f1d16097] - test_runner: fix it concurrency (Moshe Atlow) #43757
[e9ca1efe67] - test_runner: support timeout for tests (Moshe Atlow) #43505
[5dca44d5eb] - test_runner: catch errors thrown within describe (Moshe Atlow) #43729
[0bdc141dd0] - test_runner: protect internals against prototype tampering (Antoine du Hamel) #43578
[4d4dcade90] - test_runner: cancel on termination (Moshe Atlow) #43549
[dccbd9ee95] - test_runner: wait for stderr and stdout to complete (Moshe Atlow) #43666
[27841bee3d] - test_runner: use kEmptyObject (LiviaMedeiros) #43159
[1a4235961e] - test_runner: add Subtest to tap protocol output (Moshe Atlow) #43417
[3fbc5e441c] - timers: use kEmptyObject (LiviaMedeiros) #43159
[444d77391c] - tls: use kEmptyObject (LiviaMedeiros) #43159
[ba3cf5d59e] - tls: fix performance regression in convertALPNProtocols() (LiviaMedeiros) #43250
[4a3a8a6164] - tls: fix convertALPNProtocols accepting ArrayBufferViews (LiviaMedeiros) #43211
[a6710f50c4] - trace_events: trace net connect event (theanarkh) #43903
[8cda4156a5] - url: update WHATWG URL parser to align with latest spec (Feng Yu) #43190
[69f9a3a78e] - url,lib: pass urlsearchparams-constructor.any.js (Khaidi Chu) #41197
[24cabbf32f] - util: remove unicode support todo for perf implications (Rhys) #43762
[0f9d5ac0b0] - util: refactor to use validateObject (Kohei Ueno) #43769
[5edfccfc4c] - util: add AggregateError.prototype.errors to inspect output (LiviaMedeiros) #43646
[fa89a617bc] - util: remove unnecessary template string (Ruben Bridgewater) #41082
[fa74d45e09] - util: mark cwd grey while inspecting errors (Ruben Bridgewater) #41082
[053368c3d0] - util: avoid inline access to Symbol.iterator (Kohei Ueno) #43683
[3959dffc7d] - util: fix TypeError of symbol in template literals (cola119) #42790
[053347ca55] - util: freeze kEnumerableProperty (LiviaMedeiros) #43390
[2cdae4332d] - util: add kEmptyObject to internal/util (LiviaMedeiros) #43159
[49cbed6ced] - v8: serialize BigInt64Array and BigUint64Array (Ben Noordhuis) #43571
[ca8da5f3f8] - vm: use kEmptyObject (LiviaMedeiros) #43159
[3ccf5acd23] - wasi: use WasmMemoryObject handle for perf (#43544) (snek) #43544
[4ff19daf54] - wasi: use kEmptyObject (LiviaMedeiros) #43159
[bbbc54f8d4] - wasi: remove unecessary null check (Michael Dawson) #42819
[51633a23c7] - worker: use kEmptyObject (LiviaMedeiros) #43159
[c4caf20ec3] - worker: fix heap snapshot crash on exit (Chengzhong Wu) #43123
[c583508324] - worker: fix stream racing with terminate (Keyhan Vakil) #42874
[293bab7684] - worker: add hasRef() to the handle object (Darshan Sen) #42756

Documentation commits

[1bd581678c] - doc: update email and mailmap for BethGriggs (Beth Griggs) #43985
[c37f90415b] - doc: inspector.close undefined in worker threads (Keyhan Vakil) #43867
[bd0e463d27] - doc: improve documentation for safe Promise statics alternatives (Antoine du Hamel) #43759
[3022958abd] - doc: recommend git-node-v8 (Keyhan Vakil) #43934
[d528c55c13] - doc: clarify subprocess.stdout/in/err property (Kohei Ueno) #43910
[067d69f051] - doc: fix typo in src/crypto/README.md (Jianru Lin) #43968
[3c85e0c88b] - doc: remind backporter about v8_embedder_string (Keyhan Vakil) #43924
[86fb313fe8] - doc: fix typo in http.md (Airing) #43933
[37cf3b9551] - doc: add F3n67u to collaborators (Feng Yu) #43953
[da6041c89f] - doc: mention Win 32-bit openssl build issue (RafaelGSS) #43853
[c6e2eaec2b] - doc: add security release specifics to releases.md (Beth Griggs) #43835
[7a44613819] - doc: add history info for global.performance (Antoine du Hamel) #43841
[1685332371] - doc: add platform-windows-arm to who to CC (Michael Dawson) #43808
[fcfb2c95c1] - doc: document ES2022's Error "cause" property (James Ide) #43830
[a0d055e945] - doc: add link to diagnostic tools (Rafael Gonzaga) #43736
[8c4cf710a5] - doc: update links to MDN page about dynamic imports (Jannis R) #43847
[302a134b83] - doc: deprecate coercion to integer in process.exit (Daeyeon Jeong) #43738
[2a410975c6] - doc: add MoLow to triagers (Moshe Atlow) #43799
[44291afca4] - doc: revert anachronistic 'node:' module require()s in API history notes (DeeDeeG) #43768
[97bda1fa57] - doc: clarify release process for new releasers (Rafael Gonzaga) #43739
[f7b8340efe] - doc: fix typo in ngtcp2 readme (Dan Castillo) #43767
[c6bdb5cb22] - doc: fix typo in errors.md (Kazuma Ohashi) #43677
[20fa30c871] - doc: add new useful V8 option (JialuZhang-intel) #42575
[2b498fe7f5] - doc: fix typo in util.parseArgs usage example (Michael Ficarra) #43332
[3244217e9a] - doc: improve test runner timeout docs (Tobias Nießen) #43836
[65699a2132] - doc: add code examples to node test runner (Wassim Chegham) #43359
[c7c769fe67] - doc: include last security release date (Rafael Gonzaga) #43774
[3cda9686bd] - doc: remove node-report from support tiers (RafaelGSS) #43737
[ae70ada8cb] - doc: update changelog-maker to the new flags (RafaelGSS) #43696
[f42d674225] - doc: remove extra 'in's (Colin Ihrig) #43705
[cfb236e6ba] - doc: add Geoffrey Booth to TSC (Rich Trott) #43706
[c941798e88] - doc: improve readability of dns.md (0xSanyam) #43694
[a8980b2468] - doc: add note regarding special case of 0 stat.size (Douglas Wilson) #43690
[26cd4e2ae6] - doc: fix default of duplex.allowHalfOpen (Vincent Weevers) #43665
[a8d1670ffa] - doc: improve description of --input-type (cola119) #43507
[50a1b26605] - doc: add daeyeon to triagers (Daeyeon Jeong) #43637
[ee10320c9e] - doc: remove appmetrics from tierlist (Tony Gorez) #43608
[352628244b] - doc: remove systemtap from tierlist (Tony Gorez) #43605
[407beb2bc6] - doc: add single executable application initiative (Michael Dawson) #43611
[e5a7b0ff7c] - doc: remove windows xperf from tierlist (Tony Gorez) #43607
[d514ee763f] - doc: remove lttng from tierlist (Tony Gorez) #43604
[8f475e6d00] - doc: remove dtrace from tierlist (Tony Gorez) #43606
[31f45288f5] - doc: promote 0x to tier 4 (Tony Gorez) #43609
[78bedcd158] - doc: include CVSS mention (Rafael Gonzaga) #43602
[c1ea44db51] - doc: fix icu-small example (Michael Dawson) #43591
[a649d0175d] - doc: add backport-open-vN.x step to backporting guide (LiviaMedeiros) #43590
[267e493448] - doc: move MylesBorins to TSC Emeritus (Myles Borins) #43524
[444c1a6dcd] - doc: add Juan as a security steward (Michael Dawson) #43512
[1da1722be8] - doc: update link to MDN page about dynamic imports (James Scott-Brown) #43530
[70ab660107] - doc: fix Visual Studio 2019 download link (Feng Yu) #43236
[23ec1a8727] - doc: update link of ICU data slicer (Feng Yu) #43483
[cda04013a0] - doc: update v8 doc link to v8.dev (Feng Yu) #43482
[982e99eb6c] - doc: add ESM version examples to events api doc (Feng Yu) #43226
[3d271f16b4] - doc: update default branch name in test/** (Luigi Pinca) #43445
[18789d5b4a] - doc: remove branch name mention in src/README.md (Feng Yu) #43442
[f2dfe9b708] - doc: update default branch name in Makefile (Feng Yu) #43441
[8d0bca586f] - doc: update main branch name in release guide (Richard Lau) #43437
[1945e9ba4a] - doc: update main branch name in onboarding.md (Feng Yu) #43443
[98b27e7f4d] - doc: fixup after rename of primary nodejs branch (Michael Dawson) #43453
[d5832e29b6] - doc: update main branch name in doc/contributing/* (Luigi Pinca) #43438
[3f1ec10a66] - doc: packages documentation updates for 12 EOL (Guy Bedford) #43375
[82dc48d36c] - doc: fix specifier example in esm.md (hiroki osame) #43351
[143186145c] - doc: add missing require to stream api doc (Feng Yu) #43237
[7feff014c4] - doc: use serial comma in worker_threads docs (Tobias Nießen) #43220
[c41bf4dc59] - doc: use serial comma in assert docs (Tobias Nießen) #43154
[b6469537e4] - doc: use consistent method symbol (Paolo Insogna) #42974
[a61b7fabc3] - doc: use serial comma in fs docs (Tobias Nießen) #43104
[14c8f46091] - doc: use serial comma in http docs (Tobias Nießen) #43026
[751f09eb28] - doc: fix examples in cluster.md (OneNail) #42889
[cc398a829b] - doc: add node: prefix for all core modules (Antoine du Hamel) #42752
[2922fbb9b2] - doc: clarify some default values in fs.md (LiviaMedeiros) #42892
[10e9868cbb] - doc: fix napi version for node_api_symbol_for (Danielle Adams) #42878
[3ccb5b4f3f] - doc: add initial doc on how to update cjs-module-lexer (Michael Dawson) #43255
[9515ca6f0a] - doc: clarify use of deps/icu-small (Michael Dawson) #43287
[7de20b518a] - doc: remove llnode from diag tierlist (Tony Gorez) #43289
[5b0ad85fde] - doc: remove ETW from diag tierlist (Tony Gorez) #43295
[5d2a4bd886] - doc: use serial comma in report docs (Tobias Nießen) #43394
[18c6d17f4f] - doc: add fspromises mkdir example (Tierney Cyren) #40843
[e44427954f] - doc: add F3n67u to triagers (Feng Yu) #43350
[fb1566101c] - doc: fix typo in globals.md (Daeyeon Jeong) #43365
[12e7a24b48] - doc: use serial comma in webstreams docs (Tobias Nießen) #43353
[f7bfa10a29] - doc: add undici to glossary (F3n67u) #43327
[961aeffffd] - doc: change glossary link in pull request guide to node's glossary doc (Feng Yu) #43318
[759861d0d4] - doc: improve description of TZ (Tobias Nießen) #43334
[288f6c0c04] - doc: use serial comma in net docs (Tobias Nießen) #43335
[3d47c6655b] - doc: make clear the result of comparison between Symbol.for (Kohei Ueno) #43309
[5029fc3beb] - doc: add CIGTM to glossary.md (Feng Yu) #43316
[7e4dab6ad9] - doc: use serial comma in pull request doc (Feng Yu) #43319
[f94d4ea73b] - doc: use serial comma in ESM docs (Tobias Nießen) #43322
[2f831105a3] - doc: promote cdt to tier 3 (Tony Gorez) #43290
[3e50a1a9e5] - doc: fix chromium document link in pull-requests.md (rikapo) #43265
[b20cd1b756] - doc: fix 404 link of BUILDING.md (Feng Yu) #43234
[b34fce7ad5] - doc: add src/crypto to CC list for nodejs/crypto (Tobias Nießen) #43286
[d50c5585b6] - doc: use serial comma in console docs (Tobias Nießen) #43257
[f453918086] - doc: use serial comma in errors docs (Tobias Nießen) #43242
[ed9e3b7007] - doc: add note regarding %Array.prototype.concat% in primordials.md (Antoine du Hamel) #43166
[1867462f15] - doc: document signal option for EventTarget#addEventListener (Antoine du Hamel) #43170
[ffee27216f] - doc: make minor adjustments (LiviaMedeiros) #43175
[1b97800c2c] - doc: use serial comma in dgram docs (Tobias Nießen) #43191
[a51bdf6f91] - doc: use serial comma in process docs (Tobias Nießen) #43179
[4b4ce99b63] - doc: improved parallel specification (mawaregetsuka) #42679
[c591a2964c] - doc: improve callback params for fs.mkdir (Daeyeon Jeong) #43016
[086f8f426a] - doc: fix errors in Performance hooks doc (OneNail) #43152
[fb18ade83b] - doc: use serial comma in dns docs (Tobias Nießen) #43145
[2071b57666] - doc: use ASCII apostrophes consistently (Tobias Nießen) #43114
[ae2ec73a69] - doc: add strategic initiative for shadow realm (Chengzhong Wu) #43037
[cccc45653a] - doc: use serial comma in events docs (Tobias Nießen) #43113
[6f3d6596b7] - doc: use serial comma in modules docs (Tobias Nießen) #43103
[0eb8c46db6] - doc: use serial comma in util docs (Tobias Nießen) #43063
[2a72a8ae66] - doc: remove git:// protocol, adjust nits in onboarding.md (LiviaMedeiros) #43045
[b559dfe177] - doc: add maintaining info for shared libary option (Michael Dawson) #42517
[9101aa89ce] - doc: add detail for how to update llhttp (Michael Dawson) #43028
[c6f87e7987] - doc: use serial comma in buffer docs (Tobias Nießen) #43048
[f0f3f1c1ec] - doc: add Rafael to the security steward for NearForm (Matteo Collina) #42966
[e913dbf9e7] - doc: mark some node-api functions as experimental (NickNaso) #42987
[65a5d49268] - doc: add LiviaMedeiros to collaborators (LiviaMedeiros) #43039
[5129127db5] - doc: add the preferred name for @himself65 (Himself65) #43024
[d0a95c97b5] - doc: rename N-API to Node-API in test/README.md (Daeyeon Jeong) #42946
[48f6d0b19b] - doc: use serial comma in tls docs (Tobias Nießen) #43001
[14569c7e9d] - doc: improve commit message example for releases (Juan José) #42954
[78a08ab4c0] - doc: use serial comma in cluster docs (Tobias Nießen) #42989
[42783cc205] - doc: fix errors in Web Streams doc (OneNail) #42862
[40f552c4d8] - doc: add additional step to security release process (Michael Dawson) #42916
[cbb20bea42] - doc: add section regarding property definition in primordials.md (Antoine du Hamel) #42921
[841b690359] - doc: reword "test directory" (LiviaMedeiros) #42817
[e1127b6154] - doc: remove legacy -J test.py option from BUILDING.md (LiviaMedeiros) #42817
[64919a59b5] - doc: http2.createServer options as optional (Daeyeon Jeong) #42832
[54ac0102c1] - doc: record March 2022 security release steward (Richard Lau) #42876
[ca117b2fb0] - doc: initial version of security-model-strategy.md (Michael Dawson) #42709
[e45861ff36] - doc: clarify guide on testing internal errors (LiviaMedeiros) #42813
[cf8620394d] - doc: fix markdown formatting in primordials.md (Tobias Nießen) #42877
[619414567f] - doc: add primordials guidelines (Antoine du Hamel) #38635
[92d7214eb2] - doc: elevate node-clinic diagnostic tier (RafaelGSS) #42802
[9ab641ee26] - doc: update WebAssembly strategy with Wasm Web API (Tobias Nießen) #42836
[2c447b4f30] - doc: order vm.Module linker arguments correctly (Simen Bekkhus) #42797
[2974f4042e] - doc: add @kuriyosh to collaborators (Yoshiki Kurihara) #42824
[da97b86a99] - doc: add maintaining-webassembly.md (Michael Dawson) #42660
[2178ccfd77] - doc: delete heapdump from diagnostic tooling support tiers (Tony Gorez) #42783
[b5cac3a4b7] - doc: fix example in assert.md (LiviaMedeiros) #42786
[6e8285a27b] - doc: fix version history for Loaders API (Antoine du Hamel) #42778
[b5a3c0499b] - doc: clarify core modules that can be loaded without a prefix (Antoine du Hamel) #42753
[41ad6fa020] - doc: consolidate use of multiple-byte units (Antoine du Hamel) #42587
[36c0e47bf5] - doc: add documentation for inherited methods (Luigi Pinca) #42691
[665fb3d269] - doc: close tag in n-api.md (LiviaMedeiros) #42751
[3c97384527] - doc: copyedit http.OutgoingMessage documentation (Luigi Pinca) #42733
[2f319825cc] - doc: improve fragment (:target) anchors behavior on HTML version (Antoine du Hamel) #42739
[1b88868adc] - doc: fix added: info for outgoingMessage.writable* (Luigi Pinca) #42737
[0238239de0] - doc: delete mdb_v8 from diagnostic tooling support tiers (Tony Gorez) #42626
[b4b2a0f8b7] - doc: document the 'close' and 'finish' events (Luigi Pinca) #42704
[d7265d8ae4] - doc: fix added: info for outgoingMessage.{,un}cork() (Luigi Pinca) #42711
[1b668d4be6] - doc: revise data imports and node: imports sections (Rich Trott) #42734
[b6c23b0312] - doc: fix ESM JSON/data URL import example (Rich Trott) #42728
[806711346d] - doc: improve doc for http.ServerResponse inheritance (Luigi Pinca) #42693
[7c881b218f] - doc: add RafaelGSS to collaborators (RafaelGSS) #42718
[654e71c29c] - doc: add NodeEdKeyGenParams to CryptoKey.algorithm (Tobias Nießen) #42629
[e566e5c3e4] - doc: fix the example for embedders (Momtchil Momtchev) #42671
[47f7b34831] - doc: change AES-GCM IV recommendation in WebCrypto (Tobias Nießen) #42611
[0a64b14343] - doc: fix added: info for some methods (Luigi Pinca) #42661
[0c9038020a] - doc: remove unneeded new in Buffer example (Niklas Mischkulnig) #42682
[06f7aeb2d2] - doc: mark worker.id as integer in cluster docs (Tobias Nießen) #42684
[1c579ecb78] - doc: recommend fh.createWriteStream for fsPromises methods (Antoine du Hamel) #42653
[3ba17b184d] - doc: fix outgoingMessage.removeHeader() signature (Luigi Pinca) #42652
[ba1f864159] - doc: mark tlsSocket.authorized as boolean property (Tobias Nießen) #42647
[85aeae2cd2] - doc: add missing punctuation in Web Streams doc (Tobias Nießen) #42672
[630cadbc3f] - doc: add missing article in session ticket section (Tobias Nießen) #42632
[b636996499] - doc: link to dynamic import function (Tobias Nießen) #42634
[70f61a57d0] - doc: add note about header values encoding (Paolo Insogna) #42624
[608d777cf8] - doc: add missing word in rootCertificates section (Tobias Nießen) #42633
[dbc993294f] - doc: fix brackets position (LiviaMedeiros) #42649
[a9e97fcc3f] - doc: copyedit corepack.md (Rich Trott) #42620
[6209e295bb] - doc: delete chakra tt from diagnostic tooling support tiers (Tony Gorez) #42627
[198f22d3da] - doc: simplify Http2Stream encoding text (Rich Trott) #42597
[9129f024dc] - doc: remove obsolete stream API selection text (Rich Trott) #42586
[88108da2c1] - doc: remove faulty justification for 128-bit AES (Tobias Nießen) #42578
[8072adf41e] - doc: fix documentation of FileHandle.prototype.appendFile (Antoine du Hamel) #42588
[300b9d15ea] - doc: change "OCSP Request" to "OCSP request" (Tobias Nießen) #42582
[5ee6b07a6b] - doc: aes webcrypto unwrap is not a node-specific extensions (Filip Skokan) #42561
[8850cf99f7] - doc: simplify recommendations in process.md (Rich Trott) #42556
[c361129d7b] - doc: clarify recommendations in stream.md (Rich Trott) #42555
[3bec01f1b9] - doc: simplify recommendation in webcrypto.md (Rich Trott) #42554
[9c307937b4] - doc: update DEP0102 text (Rich Trott) #42553
[73ce20162b] - doc: add introduction sentence for CJS (Antoine du Hamel) #42491
[5783865894] - doc: add @meixg to collaborators (Xuguang Mei) #42576
[a8a075b48b] - doc: consolidate CI sections (Rich Trott) #42534
[816cc5ed8a] - doc: remove extraneous comma (Rich Trott) #42548
[7476fe9431] - doc: guide towards x509.fingerprint256 (Tobias Nießen) #42516
[a6af500919] - doc: fix internal link in collaborator-guide.md (Daeyeon Jeong) #42551
[9a70c3b843] - doc: add suggestion for OpenSSL only sec releases (Michael Dawson) #42456
[28208311bf] - doc: fix comment text in async_hooks example (Rich Trott) #42499
[8fd7ab5d1f] - doc: add stability class to legacy status description (Daniel Roe) #42525
[37366d4ec4] - doc: suggest checkHost in checkServerIdentity docs (Tobias Nießen) #42495
[981d602d8c] - doc: update security release onboarding (Joe Sepi) #42333
[33b14263e9] - doc: remove comma splice in events.md (Rich Trott) #42484
[89e3cedb1a] - doc: clarify napi_finalize behavior (Alba Mendez) #42461
[40b61dbf1b] - doc: expand history for conditional exports changes in v12 (Greg Poole) #42339
[70f982a8fe] - doc: change comma-splice to two sentences (Rich Trott) #42455
[69a4daaa09] - doc: add link to section (Rich Trott) #42428
[7a7030af79] - doc: fix typo in async_context.md (Anupama Codippily) #42444
[3cf80254c7] - doc: add trace_gc to diagnostic tooling support document (Tony Gorez) #42346
[d9ae6c7829] - doc: make header smaller and dropdown click-driven when JS is on (Paolo Insogna) #42165
[01eb1dc8eb] - doc: standardize typography for _semantic versioning_ (Rich Trott) #42401
[d70f9cb2a3] - doc: unify import order in CCM example (Tobias Nießen) #42394
[165ee28853] - doc: update property name (Rich Trott) #42398
[b3a7a689f9] - doc: document breaking change in http.IncomingMessage 'close' event (Paolo Insogna) #42521
[7be07c719c] - doc,test: clarify timingSafeEqual semantics (Tobias Nießen) #43228
[6c00369083] - doc,test: clarify ChaCha20-Poly1305 usage (Tobias Nießen) #42323

Other commits

[3b10a94a95] - benchmark: fix output regression (Brian White) #43635
[f4c4113434] - benchmark: fix fork detection (Paolo Insogna) #43601
[04f651186d] - benchmark: forcefully close processes (Paolo Insogna) #43557
[986fb3e9ae] - benchmark: add node-error benchmark (RafaelGSS) #43077
[c36b02f666] - benchmark: fix misc/startup failure (Antoine du Hamel) #42746
[391e16235c] - build: make GitPod less noisy (Rich Trott) #43829
[5315d9741c] - build: add GitHub token permissions for workflows (Varun Sharma) #43743
[025248bfb0] - build: enable GitPod prebuilds (Rich Trott) #43698
[d9664c3040] - build: clarify missing clang-format tool (Tobias Nießen) #42762
[600505ee71] - build: update main branch name in GH workflow (Feng Yu) #43481
[ab55ff4a52] - build: add nonpm and nocorepack to vcbuild.bat (Darshan Sen) #43219
[cf68280548] - build: set ASAN workaround (Richard Lau) #43085
[c4f7e93964] - build: fix format-cpp (Darshan Sen) #42764
[dd97a9d1fa] - build: improve the format-cpp error message (Darshan Sen) #42765
[fc55a6798f] - build: run clang-format on CI (Darshan Sen) #42681
[46bc3c1af1] - build: consolidate JS and md linting GitHub Actions (Rich Trott) #42572
[dd7aa2d51f] - build: set stale action back to running nightly (Michael Dawson) #42549
[dda77aa63b] - build: bump actions/checkout (Eliaz Bobadilla) #42460
[0d93b425cf] - meta: update AUTHORS (Node.js GitHub Bot) #43966
[7a974457df] - meta: update node-api in label-pr-config (Daeyeon Jeong) #43794
[dff6068c9a] - meta: update AUTHORS (Node.js GitHub Bot) #43872
[80d562b051] - meta: use platform dropdown on flaky template (Rafael Gonzaga) #43855
[162c7cbb54] - meta: enable blank issues (Matteo Collina) #43775
[becfcb4d97] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #43770
[78bb3ab8e8] - meta: update AUTHORS (Node.js GitHub Bot) #43750
[b62574c4bd] - meta: update AUTHORS (Node.js GitHub Bot) #43660
[965367f586] - meta: update AUTHORS (Node.js GitHub Bot) #43573
[3760490c3a] - meta: update AUTHORS (Node.js GitHub Bot) #43480
[5c6021772f] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #43399
[a544a09662] - meta: update AUTHORS (Node.js GitHub Bot) #43387
[d0084daa8a] - meta: move one or more collaborators to emeritus (#43183) (Node.js GitHub Bot) #43183
[bb7b1dcb7a] - meta: update AUTHORS (Node.js GitHub Bot) #43312
[aa868efe15] - meta: update AUTHORS (Node.js GitHub Bot) #43231
[fb5d9b7fb5] - meta: add mailmap entry for legendecas (Chengzhong Wu) #43156
[06578724bd] - meta: add mailmap entry for npm team (Luigi Pinca) #43143
[bd6912def5] - meta: add mailmap entry for Morgan Roderick (Luigi Pinca) #43144
[3db25bfc63] - meta: add mailmap entry for ShogunPanda (Paolo Insogna) #43094
[0ce67e22fb] - meta: update .mailmap for recent README name change (Rich Trott) #43027
[74ed25ddf5] - meta: update AUTHORS (Node.js GitHub Bot) #43004
[72e9ca1a45] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #42937
[c351bf682a] - meta: update AUTHORS (Node.js GitHub Bot) #42848
[54d94d04ca] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #42769
[412b3313c9] - meta: update AUTHORS (Node.js GitHub Bot) #42760
[499d0100a6] - meta: move mmarchini to emeritus (mary marchini) #42750
[7f857d16b8] - meta: update AUTHORS (Node.js GitHub Bot) #42677
[0994001a51] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #42599
[ac1c0122e4] - meta: update .mailmap and AUTHORS (Rich Trott) #42602
[c7264b712b] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #42500
[bc4bd92bb8] - meta: update AUTHORS (Node.js GitHub Bot) #42585
[bcd8a55f37] - meta: update AUTHORS (Node.js GitHub Bot) #42488
[e6db8099f8] - test: refactor ESM tests to improve performance (Jacob Smith) #43784
[0046b9a478] - test: add test on worker process.exit in async modules (Chengzhong Wu) #43751
[3a6df62cfd] - test: update WPT encoding tests (Kohei Ueno) #43958
[ca747ccb7e] - test: remove test-whatwg-events-add-event-listener-options-once.js (Feng Yu) #43877
[e22041734a] - test: work scheduled in process.nextTick can keep the event loop alive (Andreu Botella) #43787
[2730a10a58] - test: simplify test-tls-set-secure-context (Tobias Nießen) #43878
[ec3c331c73] - test: fix test http upload timeout (theanarkh) #43935
[19397a0488] - test: simplify ReplStream.wait() (Tobias Nießen) #43857
[918448e239] - test: ensure NODE_EXTRA_CA_CERTS not set before tests (KrayzeeKev) #43858
[f4cd579ae1] - test: add check to test-fs-readfile-tostring-fail (Richard Lau) #43850
[e271e3403e] - test: use common.mustNotMutateObjectDeep() in immutability tests (LiviaMedeiros) #43196
[409158c919] - test: add common.mustNotMutateObjectDeep() (LiviaMedeiros) #43196
[75e6933a39] - test: fix coverity warning in test (Michael Dawson) #43631
[087fc8dddf] - test: mark test-http-client-response-timeout flaky (Tobias Nießen) #43792
[993bf7b671] - test: mark flaky tests on smartos (Feng Yu) #43596
[a3a2a9ede5] - test: mark test-http-server-request-timeouts-mixed flaky on macOS (F3n67u) #43597
[7cb71c0c7e] - test: skip test-net-connect-reset-until-connected on SmartOS (Filip Skokan) #43449
[b5eb55646f] - test: add test for short-option followed by its value (Kohei Ueno) #43358
[8bd2f4e2b8] - test: use assert.match() instead of assert(regex.test()) (Antoine du Hamel) #42803
[f99b0d02e7] - test: fix typo in test-stream-toArray (Tobias Nießen) #41634
[95a823dc26] - test: fix typo in file name (Antoine du Hamel) #43764
[c291233955] - test: improve lib/internal/test_runner/test.js coverage (MURAKAMI Masahiko) #42745
[a5e16203a3] - test: mark test-net-connect-reset-until-connected flaky on freebsd (Feng Yu) #43613
[42610cc8e2] - test: mark test-gc-http-client-timeout as flaky on arm (Chengzhong Wu) #43754
[cc5f17f128] - test: add test for profile command of node inspect (Kohei Ueno) #43058
[11df17c2f9] - test: use Object for tests variable in fs trace test (Feng Yu) #43585
[61ddd50c38] - test: improve code coverage for performance_entry (Kohei Ueno) #43434
[341799a0c3] - test: add test to ensure repl doesn't support --input-type (cola119) #43507
[9bc4ad0483] - test: fix flaky test-perf-hooks-histogram (Santiago Gimeno) #43567
[4d8daae236] - test: fix Buffer.from(ArrayBufferView) call (LiviaMedeiros) #43614
[8c7597373f] - test: mark test-worker-http2-stream-terminate flaky on all platforms (Finn Yu) #43620
[e8754f3557] - test: improve code coverage for SourceMap class (italo jose) #43285
[93de96f844] - test: refactor to top-level await (Meek Simbule) #43500
[f3e9fd7a00] - test: skip test-v8-serialize-leak on IBM i (Richard Lau) #43511
[65c3e901eb] - test: use unique file names in fs trace test (Ben Noordhuis) #43504
[7ce80d81ed] - test: allow EOVERFLOW errors in fs position tests (Richard Lau) #43510
[bf5adf37f3] - test: add WPT tests for dom/events (Daiki Nishikawa) #43151
[a5df207c2b] - test: replace gc(true) with gc({ type: 'minor' }) (Tobias Nießen) #43493
[222a6e94ed] - test: improve coverage for load hooks (Antoine du Hamel) #43374
[9c1fffc93e] - test: refactor to top-level await (Meek Simbule) #43366
[4ff1c32f44] - test: rename test-eventtarget-whatwg-*.js (Daeyeon Jeong) #43467
[68a138333b] - test: mark test-worker-http2-stream-terminate flaky on Windows (Darshan Sen) #43425
[6fcb349fda] - Revert "test: mark test_buffer/test_finalizer flaky" (Matteo Collina) #43418
[38336403d2] - test: make node-api/test_buffer/test_finalizer not flaky (Matteo Collina) #43418
[8e5e5a10c1] - test: reduce flakiness of test-fs-read-position-validation.mjs (LiviaMedeiros) #42999
[b750ff1452] - test: remove the legacy url parser function

`v16.16.0`: 2022-07-07, Version 16.16.0 'Gallium' (LTS), @danielleadams

Compare Source

This is a security release.

Notable changes

deps:
- upgrade openssl sources to OpenSSL_1_1_1q (RafaelGSS) #43692
src:
- add OpenSSL config appname (Daniel Bevenius) #43124

Commits

[2303fd3fe5] - deps: update archs files for OpenSSL-1.1.1q (RafaelGSS) #43692
[b219a63c28] - deps: upgrade openssl sources to OpenSSL_1_1_1q (RafaelGSS) #43692
[c6553a4ef5] - deps: update archs files for OpenSSL-1.1.1p+quic (RafaelGSS) #43535
[e9084a3e90] - deps: upgrade openssl sources to OpenSSL_1_1_1p+quic (RafaelGSS) #43535
[1da22eb482] - http: stricter Transfer-Encoding and header separator parsing (Paolo Insogna) nodejs-private/node-private#315
[754c9bfde0] - src: fix IPv4 validation in inspector_socket (Tobias Nießen) nodejs-private/node-private#320
[447cf680b0] - (SEMVER-MAJOR) src,deps,build,test: add OpenSSL config appname (Daniel Bevenius) #43124

`v16.15.1`: 2022-06-01, Version 16.15.1 'Gallium' (LTS), @BethGriggs prepared by @juanarbol

Compare Source

Notable Changes

deps:
- upgrade npm to 8.11.0 (npm-cli+bot@github.com) #43210
docs:
- add release key for RafaelGSS (Rafael Gonzaga) #43131
- add release key for Juan Arboleda (Juan José) #42961

Commits

[f7c4ce2255] - deps: V8: cherry-pick 3ebf205 (Liu Yu) #43147
[447f9a0e2e] - deps: upgrade npm to 8.11.0 (npm-cli+bot@github.com) #43210
[68572bdea2] - deps: upgrade npm to 8.10.0 (npm-cli+bot@github.com) #43061
[3dfc632f12] - deps: upgrade npm to 8.9.0 (npm-robot) #42968
[a746943fcb] - deps: update archs files for OpenSSL-1.1.1o (RafaelGSS) #42957
[6efc844922] - deps: upgrade openssl sources to OpenSSL_1_1_1o (RafaelGSS) #42957
[3ceeb574c3] - deps: upgrade npm to 8.8.0 (npm-robot) #42886
[f8b2156e07] - deps: upgrade npm to 8.7.0 (ops+robot@npmjs.com) #42744
[898b4751e9] - deps: upgrade npm to 8.6.0 (npm team) #42550
[617f64a1cd] - doc: add release key for RafaelGSS (Rafael Gonzaga) #43131
[e1b47e6e3d] - doc: add release key for Juan Arboleda (Juan José) #42961
[4185f1f466] - src,inspector: fix empty MaybeLocal crash (Darshan Sen) #42409
[f11b3cfc6a] - test: delete test/pummel/test-repl-empty-maybelocal-crash.js (Darshan Sen) #42720
[feac215e4e] - tools: disable trap handler for Windows cross-compiler (Michaël Zasso) #40488
[47cdddf59b] - tools: update V8 gypfiles for 9.6 (Michaël Zasso) #40488

`v16.15.0`: 2022-04-26, Version 16.15.0 'Gallium' (LTS), @danielleadams

Compare Source

Notable changes

Add fetch API

Adds experimental support to the fetch API. This adds the --experimental-fetch flag that installs the fetch, Request, Response, Headers, and FormData globals.

(SEMVER-MINOR) add fetch (Michaël Zasso) #41749
(SEMVER-MINOR) add FormData global when fetch is enabled (Michaël Zasso) #41956

Other notable changes

build:
- remove broken x32 arch support (Ben Noordhuis) #41905
crypto:
- (SEMVER-MINOR) add KeyObject.prototype.equals method (Filip Skokan) #42093
doc:
- add @ShogunPanda to collaborators (Paolo Insogna) #42362
- add JakobJingleheimer to collaborators list (Jacob Smith) #42185
- add joesepi to collaborators (Joe Sepi) #41914
- add marsonya to collaborators (Akhil Marsonya) #41991
- deprecate string coercion in fs.write, fs.writeFileSync (Livia Medeiros) #42149
- deprecate notice for process methods (Yash Ladha) #41587
esm:
- (SEMVER-MINOR) support https remotely and http locally under flag (Bradley Farias) #36328
module:
- (SEMVER-MINOR) unflag esm json modules (Geoffrey Booth) #41736
node-api:
- (SEMVER-MINOR) add node_api_symbol_for() (Darshan Sen) #41329
process:
- deprecate multipleResolves (Benjamin Gruenbaum) #41872
stream:
- (SEMVER-MINOR) support some and every (Benjamin Gruenbaum) #41573
- (SEMVER-MINOR) add toArray (Benjamin Gruenbaum) #41553
- (SEMVER-MINOR) add forEach method (Benjamin Gruenbaum) #41445

Commits

[3d4df9cd70] - (SEMVER-MINOR) benchmark: add subarray to buffer-slice (Benjamin Gruenbaum) #41596
[d40f5a177a] - buffer: improve blob read performance (Xuguang Mei) #42117
[84752a495f] - (SEMVER-MINOR) buffer: alias subarray and slice (Benjamin Gruenbaum) #41596
[c5da1dda4a] - build: use ccache in make-v8.sh on ppc64le and s390x (Richard Lau) #42204
[ba56e41953] - build: drop shortened URL from lint-commit-message (Richard Lau) #42168
[b2c88ec69c] - build: fix usage of input in feature action (Michael Dawson) #42150
[bcabd70d93] - build: increase max ops for stale feature action (Michael Dawson) #42130
[042fb6f4d5] - build: add corepack to the auto-updated dependencies (Maël Nison) #42090
[611cbf13a6] - build: last test of the stale feature action (Michael Dawson) #42085
[0d8f76ff2f] - build: update feature close action for testing (Michael Dawson) #42082
[bc3d8a752f] - build: cancel running CI jobs when a MR is updated (Michaël Zasso) #42017
[e049173bce] - build: increase operations and test tag (Michael Dawson) #42038
[4c47d59e9b] - build: allow manual run of feature request action (Michael Dawson) #42037
[692ee2ae06] - build: add action to close stale feature requests (Michael Dawson) #41981
[290a2bfd81] - build: prevent concurrent CI and CQ workflow runs (Michaël Zasso) #42016
[d2c1624279] - build: use zoslib_include_dir provided by node-gyp (alexcfyung) #41713
[db4a3dc1a6] - build: move tool updates workflow runtime a day later (Rich Trott) #41982
[24d0c32af4] - build: extend yamllint configuration (Mestery) #41756
[428b967ea4] - build: remove broken x32 arch support (Ben Noordhuis) #41905
[51847e0d24] - build: revert fast-track changes (Filip Skokan) #41892
[1452f8d6f1] - build: improve consistency between workflows (Mestery) #41791
[9677da4b46] - (SEMVER-MINOR) build: add --v8-enable-hugepage flag (Daoming Qiu) #41487
[5468de5317] - build,tools: change the quotes in YAML (Mestery) #41756
[f32c39762c] - child_process: kHideConsoleWindows for spawnSync (Raymond Zhao) #41412
[914f9071ba] - cluster: respect listen backlog set by workers (Elad Nava) #41623
[f990308972] - crypto: fix auth tag length error when mode != GCM (Tobias Nießen) #42383
[7f43f94304] - crypto: fix fingerprint string size calculation (Tobias Nießen) #42175
[602f34eeb8] - crypto: add CHECKs to remaining BIO_s_mem allocs (Tobias Nießen) #42155
[4eecb25125] - crypto: validate this value for webcrypto.getRandomValues (Antoine du Hamel) #41760
[b7599d8b14] - (SEMVER-MINOR) crypto: add KeyObject.prototype.equals method (Filip Skokan) #42093
[70ae0ae8a0] - crypto: check result of BIO_new in X509ToObject (Tobias Nießen) #41979
[36b9028f4f] - crypto: rename X509_NAME_FLAGS (Tobias Nießen) #42001
[a592442218] - (SEMVER-MINOR) crypto: expose Web Crypto API on the global scope (Antoine du Hamel) #41938
[46dda316df] - crypto: do not advertise unsupported algorithms (Brian White) #41864
[adb88fcb46] - (SEMVER-MINOR) crypto: support RFC 2818 compatible checkHost (Tobias Nießen) #41569
[e9d7af1cc6] - debugger: correct typo in inspect_repl.js (Kohei Ueno) #42267
[e6019a4cc0] - debugger: add debugger alias for exec(expr) (Xuguang Mei) #41907
[83691ada5b] - debugger: remove duplicate setPauseOnException call (Balakrishna Avulapati) #41838
[7e73e5e46b] - deps: upgrade npm to 8.5.5 (npm team) #42382
[8d734cbde6] - deps: cares: cherry-pick b5a3d96 (bradh352) #42216
[ba1d949ce0] - deps: V8: cherry-pick c6f6626 (Lu Yahan) #42240
[6b721d7103] - deps: upgrade npm to 8.5.3 (npm team) #42205
[baeb66a35a] - deps: update nghttp2 to 1.47.0 (Yash Ladha) #42127
[1a0f26f55c] - deps: upgrade npm to 8.5.2 (npm team) #42122
[396240bf80] - deps: V8: cherry-pick 77d5154 (Lu Yahan) #42067
[3f09a6d227] - deps: V8: cherry-pick b663343 (Lu Yahan) #42067
[a73536b286] - deps: upgrade npm to 8.5.1 (npm-robot) #42039
[c64b0381ee] - deps: update undici to 5.0.0 (Node.js GitHub Bot) #42583
[a670c1fb5f] - deps: update undici to 4.16.0 (Node.js GitHub Bot) #42414
[721d10751b] - deps: update undici to 4.15.1 (Michaël Zasso) #42246
[83a667621b] - deps: update undici to 3e267ec (Michaël Zasso) #41955
[208ab5723e] - doc: improve README.md usability (Rich Trott) #42378
[682248c980] - doc: add that chacha20-poly1305 is IETF version (Tobias Nießen) #42370
[83391d185c] - doc: document goal to have examples (Michael Dawson) #42274
[7073017efb] - doc: fix Embedder's Guide link to V8 official docs (Aroyan) #42373
[cb07930bda] - doc: remove unneeded lint disable comment (Rich Trott) #42374
[fb42f99514] - doc: revise async_hooks docs (Rich Trott) #42337
[835e65b78e] - doc: add @ShogunPanda to collaborators (Paolo Insogna) #42362
[df1909982d] - doc: update base branch name for nodejs/nodejs.org (Danielle Adams) #42355
[4f6b187059] - doc: fix async iterable pipeline signal examples (Randall Leeds) #42258
[3188dcb390] - doc: clarify path search in child_process.spawn (Damjan Cvetko) #41418
[f53b454e2e] - doc: clarify the meaning of legacy status (Darshan Sen) #42269
[43b8a4fc57] - doc: improve pipe description (Mikael Finstad) #42295
[9fa6e445d5] - doc: remove outdated timeout.unref content (Xuguang Mei) #42241
[a84896ea2c] - doc: deprecate string coercion in fs.write, fs.writeFileSync (Livia Medeiros) #42149
[436bdde654] - doc: remove refs to old OpenSSL list-* commands (Tobias Nießen) #42235
[6763bede4c] - doc: readline 'line' event emits final line (Matt Probert) #42214
[6545094a94] - doc: update stale feature messages (Michael Dawson) #42217
[275b66d54e] - doc: remove erroneous comma in cluster explainer (Tobias Nießen) #42238
[cda623cc1d] - doc: remove "considered" for clarity (Rich Trott) #42218
[17172fef20] - doc: clarify that some modules don't work when compiled without ssl (Antoine du Hamel) #42198
[126045356a] - doc: add note about nghttp2 hd pair size (Rafael Silva) #42172
[63b468f753] - doc: use parenthesis instead of em dash (Antoine du Hamel) #42202
[19b62ddd68] - doc: add next-10 to strategic initiatives (Michael Dawson) #42167
[993a943f2c] - doc: add missing single-quotes to http.OutgoingMessage (Juan José Arboleda) #42162
[d0ce089622] - doc: fix typos (apeltop) #42146
[88e67b8ec3] - doc: add JakobJingleheimer to collaborators list (Jacob Smith) #42185
[5322c73241] - doc: remove reference to obsolete security program (Rich Trott) #42144
[5980b6d133] - doc: remove repeated a word (apeltop) #42138
[a70a1ce3a9] - doc: make building with ninja more discoverable (Balakrishna Avulapati) #41840
[bc457c2339] - doc: document change to IncomingMessage.headers enumerability (Arnold Zokas) #42095
[1eb4d8b89c] - doc: add meixg to triagers (Xuguang Mei) #42066
[3d75c8748c] - doc: clarify persistent ref behavior (Michael Dawson) #42035
[8c26d8cea1] - doc: move bnoordhuis back to collaborators (Ben Noordhuis) #42064
[0c21b58d57] - doc: clarify supported versus enabled TLS ciphers (Tobias Nießen) #42063
[a658437c64] - doc: add missing api entries on performance (legendecas) #42018
[51cb78022e] - doc: fix typo in http2 endAfterHeaders description (Alexandru Comanescu) #42060
[40ddfa4e69] - doc: make minor fixes to contributing guides (T-O-R-U-S) #41966
[60d6409af0] - doc: use openpgp.org for keyserver examples (Nick Schonning) #39227
[9800719237] - doc: adjust a/an word usage (Derek Wolpert) #41915
[43894b1bc4] - doc: capitalize valgrind (T•Ø•R•Ü•S) #41986
[a34cc75026] - doc: fix deprecation number (Antoine du Hamel) #41990
[dd88f54d57] - doc: add marsonya to collaborators (Akhil Marsonya) #41991
[8858950a9f] - doc: deprecate notice for process methods (Yash Ladha) #41587
[d77db88386] - doc: fix bug in readable.unshift code example (Xuguang Mei) #41944
[81e56c9178] - doc: add missing buffer in the stream/consumers import example (Mestery) #41961
[c08efba968] - doc: fix typo in readableStream.locked description (Tobias Nießen) #41923
[e21831bad1] - doc: fix wrong indent in stream documentation (Xuguang Mei) #41943
[e55f340052] - doc: emphasize security warning in vm module doc (Rich Trott) #41916
[ce15007fd7] - doc: clarify tls.Server 'connection' event documentation (Austin Cheney) #41917
[6fc0a25b64] - doc: improve scrollbar appearance in dark mode (Aaron Xie) #41890
[90d955100d] - doc: replace text with paths in toggle SVGs (Brian White) #41885
[6fd538331d] - doc: edit process.config deprecation text (Rich Trott) #41889
[55caa10c54] - doc: add joesepi to collaborators (Joe Sepi) #41914
[73f3a2cf96] - doc: remove unneeded ellipsis in header (Rich Trott) #41888
[b950f5db84] - doc: fix webstream close reject state state doc (Benjamin Gruenbaum) #41860
[e46c7d6f69] - (SEMVER-MINOR) doc: deprecate buffer.slice (Benjamin Gruenbaum) #41596
[83129729c6] - doc: fix backticks around 'default' (Tobias Nießen) #41613
[f8819e86fd] - doc: fix version history for net.Socket and net.Server (Antoine du Hamel) #42268
[12bf85a606] - doc,tools: improve navigability of API docs (Paolo Insogna) #41404
[37f6f92905] - errors: do not access .stack in debug (Benjamin Coe) #42096
[166eb782f9] - esm: fix base URL for network imports (Bradley Farias) #42131
[b68db72746] - esm: fix relative imports for https (Bradley Farias) #42119
[c777cb3368] - esm: make extension-less errors in type:module actionable (Bradley Farias) #42301
[2e42ccf1a5] - esm: improve typings and code coverage (Bradley Farias) #42305
[25017ca107] - esm: add runtime warning for specifier resolution flag (Geoffrey Booth) #42252
[1324023fea] - esm: improve fetch_module test coverage and remove hack (Antoine du Hamel) #41947
[9b8c927d29] - esm: remove erroneous context.parentURL property passed to load hook (Jacob Smith) #41975
[47cefec5c9] - esm: fix typo in fetch_module (Michael Scovetta) #41924
[0d185f7930] - (SEMVER-MINOR) esm: support https remotely and http locally under flag (Bradley Farias) #36328
[b0a83115db] - events: set default handler value (Benjamin Gruenbaum) #41970
[6b55ba2fa2] - fs: adjust default length for fs.readSync and fsPromises/read (Livia Medeiros) #42128
[da87c731b8] - fs: fix default length parameter for fs.read (wbt) #40349
[33e4a32f9e] - (SEMVER-MINOR) fs: support copy of relative links with cp and cpSync (Marcos Bjoerkelund) #41819
[571eb6dc74] - fs: fix cb/sync writev empty array behavior (Benjamin Gruenbaum) #41932
[257a7a5802] - fs: fix writev empty array error behavior (Benjamin Gruenbaum) #41919
[2d165652f1] - fs: refactor to use ES2020 syntax (小菜) #41903
[39fb114dde] - (SEMVER-MINOR) http: trace http client by perf_hooks (theanarkh) #42345
[16c00c6ac8] - http: add default argument for Agent.prototype.getName (小菜) #41906
[d301a8825b] - http2: fix potential integer overflow (Michael Dawson) #42248
[ddef6bbcb8] - http2: add edge case to GOAWAY request (Rafael Silva) #42190
[28af75ef65] - http2: close stream and session on frameError (Rafael Silva) #42147
[ebe2b6d21e] - lib: refactor to use primordials in lib/assert.js (Akhil Marsonya) #41702
[dcebb99dfc] - lib: fix AsyncResource.bind not using 'this' from the caller by default (Roch Devost) #42177
[e1704407ae] - lib: clean after the cancel algorithm throw error (Chen Gang) #41366
[91a06bd629] - lib: add legacy built-in functions to primordials (Antoine du Hamel) #42049
[e80043fb61] - lib: stop installing webcrypto if no_browser_globals is true (Mestery) #41971
[9946b9bceb] - lib: allow respondWithNewView on byob auto allocated streams (Sean Quinlan) #41887
[f4e39171de] - lib: restrict usage of fetch related globals in core internals (Antoine du Hamel) #41957
[b1f0cc6412] - lib: move kEnumerableProperty to internal/util (Mestery) #41877
[2a85e0ac00] - lib: add internal genericNodeError() function (Rich Trott) #41879
[647805a747] - (SEMVER-MINOR) lib: add FormData global when fetch is enabled (Michaël Zasso) #41956
[f17ce913c9] - (SEMVER-MINOR) lib: add fetch (Michaël Zasso) #41749
[2cbf45b8a5] - loader: fix esm resolve for symlink file (Xuguang Mei) #42197
[a363842261] - meta: update AUTHORS (Node.js GitHub Bot) #42404
[a122eb1989] - meta: update AUTHORS (Node.js GitHub Bot) #42317
[c56e15a0eb] - meta: add dependencies label to label-pr-config (Mestery) #42129
[137ca4e1d4] - meta: update AUTHORS (Node.js GitHub Bot) #42227
[09ab04696f] - meta: update AUTHORS (Node.js GitHub Bot) #42142
[d4d9c00949] - meta: correct link to feature request document (Simen Bekkhus) #42092
[2135f8e6cb] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #42068
[b969a278eb] - meta: remove collaborator (Rich Trott) #42073
[de035bceda] - meta: update AUTHORS (Node.js GitHub Bot) #42058
[f5ffa34f77] - meta: use plain emojis instead of escape sequences (Mestery) #41989
[6f1adf1f3e] - meta: update AUTHORS and .mailmap (Rich Trott) #41953
[363028c887] - (SEMVER-MINOR) module: unflag esm json modules (Geoffrey Booth) #41736
[b3afb20b44] - (SEMVER-MINOR) net: add new options to net.Socket and net.Server (Paolo Insogna) #41310
[bd48ad9c16] - node-api: fix typo in node_api.cc (Austin Kelleher) #42110
[11ec3345e7] - (SEMVER-MINOR) node-api: add node_api_symbol_for() (Darshan Sen) #41329
[7c0b8ca5ac] - perf_hooks: do not return all entries with getEntriesBy[Name|Type] (Xuguang Mei) #42104
[b7a307f0ed] - perf_hooks: use arrays to store EntryBuffers (Xuguang Mei) #42032
[61ecdf8f12] - process: fix named report export (madflow) #41861
[bc08165953] - process: deprecate multipleResolves (Benjamin Gruenbaum) #41872
[a88d4a2e2c] - repl: remove preview when press escape (meixg) #42053
[83267aaa7f] - repl: #41690 REPL gives wrong autocomplete on literals (Xuguang Mei) #41883
[73ce911a6f] - src: convert hex2bin() into a regular function (Darshan Sen) #42321
[7fe16ecc7a] - src: fix coverity warnings in node_file.cc (Michael Dawson) #42272
[5b30e28eb4] - src: check EC_POINT_get_affine_coordinates result (Tobias Nießen) #42304
[57b619da46] - src: simplify bound check in ParseArrayIndex (Tobias Nießen) #42306
[0e3e3fda22] - src: avoid returning invalid value from hex2bin (Tobias Nießen) #42307
[5eaa59159f] - src: check return value of HMAC_Final (Tobias Nießen) #42303
[376b3c4293] - src: include internal/options in the snapshot (Joyee Cheung) #42203
[268fd97925] - src: remove redundant buffer size check (Tobias Nießen) #42257
[90ce5c9fc5] - src: perform minor cleanups on zlib code (Anna Henningsen) #42247
[de3748a7e7] - src: use emplace_back instead of push_back (Yash Ladha) #42159
[830f93d892] - src: fix unchecked return warning from coverity (Michael Dawson) #42176
[db9f7752a9] - src: return proper URLs from node_api_get_module_file_name (Anna Henningsen) #41758
[d4b1b5cf85] - src: skip revoke_data_object if uuid is not found (Xuguang Mei) #42212
[3026449009] - src: remove dead code in AddFingerprintDigest (Tobias Nießen) #42145
[29fd5ff37d] - src: combine GetCurveASN1Name and GetCurveNistName (Tobias Nießen) #42118
[447ae8c5a3] - src: simplify TLSWrap::SetSession (Tobias Nießen) #42087
[2fe17f3891] - src: prefer bool over int in crypto_common (Tobias Nießen) #42097
[237f47e38e] - src: simplify arg type of AddFingerprintDigest (Tobias Nießen) #42101
[4244b1a0bb] - src: do not ignore return value of BIO_reset (Tobias Nießen) #42103
[e77a7cf985] - src: simplify GetExponentString (Tobias Nießen) #42121
[c811b8a1cb] - (SEMVER-MINOR) src: allow preventing InitializeInspector in env (Shelley Vohr) #35025
[af73a853f5] - src: use const reference instead of pointer in URL::SerializeURL (Anna Henningsen) #41759
[703593ab2a] - src: reserve string allocation space early in URL::SerializeURL (Anna Henningsen) #41759
[170a6cb33e] - src: fix query/fragment serialization in URL::SerializeURL (Anna Henningsen) #41759
[86b9d3af98] - src: don't print interface if sin6_scope_id is 0 (Santiago Gimeno) #41547
[fdea60e958] - src,buffer: evaluate THROW_AND_RETURN_IF_OOB() expression only once (Darshan Sen) #41945
[bf1f485c8d] - src,crypto: avoid tristate Maybe<bool> in ExportJWKEcKey() (Darshan Sen) #42223
[a5b189cda7] - stream: use .chunk when calling adapters's writev (Xuguang Mei) #42161
[0c690456cf] - stream: add more forEach tests (Benjamin Gruenbaum) #41937
[f12cf6db47] - (SEMVER-MINOR) stream: add reduce (Benjamin Gruenbaum) #41669
[4b6343964e] - stream: use synchronous error validation on iteration helpers (iMoses) #41652
[60e28ba507] - stream: add asIndexedPairs (Benjamin Gruenbaum) #41681
[88a48197c4] - stream: add drop and take (Benjamin Gruenbaum) #41630
[205c018ab4] - (SEMVER-MINOR) stream: support flatMap (Benjamin Gruenbaum) #41612
[0be2321d53] - (SEMVER-MINOR) stream: support some and every (Benjamin Gruenbaum) #41573
[ac8526e9a5] - (SEMVER-MINOR) stream: add toArray (Benjamin Gruenbaum) #41553
[dcc58314b9] - (SEMVER-MINOR) stream: add forEach method (Benjamin Gruenbaum) #41445
[f21f104c7c] - string_decoder: fix crash when calling __proto__.write() (Darshan Sen) #42062
[e3bced182c] - test: give slow tests more time on Rasberry PIs (Michael Dawson) #42380
[04243a85c7] - test: improve https_renew_cert.sh script (Tobias Nießen) #42343
[6d422ad807] - test: improve _http_incoming.js coverage (Yoshiki Kurihara) #42211
[3d37efe588] - test: improve _http_outgoing coverage (Yoshiki Kurihara) #42213
[245577e15c] - test: add test case for reverted 17.7 regression (Rich Trott) #42283
[3cc06de597] - test: use global webcrypto for WPT tests (Antoine du Hamel) #42236
[623be18fa3] - test: cover 32-bit sizes in generatePrime (Tobias Nießen) #42207
[70281e17ad] - test: fix test-process-env-tz.js by using RegExp (Khaidi Chu) #42113
[33b11a3548] - test: update V8 trace events test expectations (Nikolaos Papaspyrou) #42120
[978b50fe44] - test: deflake test-common-expect-warning (Luigi Pinca) #42046
[629d06ace8] - test: validate EventEmitterAsyncResource methods throw on invalid this (Yoshiki Kurihara) #42041
[17af006e38] - test: increase Fibonacci argument to 40 (Rich Trott) #42055
[b06780801c] - test: remove test-stdout-close-catch flaky designation (Rich Trott) #42045
[9ae6982387] - test: check that fetch globals are disabled by default (Michaël Zasso) #42015
[2a1a94bbbb] - test: improve vm test coverage (Yoshiki Kurihara) #41847
[3e354da097] - test: run webmessaging/broadcastchannel WPT (Ben Noordhuis) #41962
[711e863084] - test: fix names of tests marked flaky on IBM i (Richard Lau) #41984
[95eb03c298] - test: fix typographical error (Rich Trott) #41983
[31def41391] - test: fix intl tests on small-icu builds (Antoine du Hamel) #41939
[11e76fcba4] - test: remove lint rule for setTimeout() arguments (Rich Trott) #41901
[fd8bf09608] - test: move test-crypto-engine to addon (Michael Dawson) #41830
[25109a6471] - test: improve stability of oom test (Benjamin Gruenbaum) #41681
[ad17c9ce0c] - test,crypto: add and update empty passphrase regression tests (Darshan Sen) #42319
[9649d656ba] - tls: avoid throw in onerror for bad TLSSocket obj (Valters Jansons) #41523
[789e6041a6] - tools: update lint-md-dependencies to rollup@2.70.1 (Node.js GitHub Bot) #42403
[1c1061549a] - tools: update doc to highlight.js@11.5.0 unified@10.1.2 (Node.js GitHub Bot) #42315
[97aa236083] - tools: update lint-md-dependencies to rollup@2.70.0 unified@10.1.2 (Node.js GitHub Bot) #42316
[7636370bdb] - tools: update eslint to 8.11.0 (Node.js GitHub Bot) #42318
[359395393f] - tools: fix web streams API links (Brian White) #42153
[fe5578b627] - tools: update lint-md-dependencies to rollup@2.69.1 (Node.js GitHub Bot) #42226
[8532f83c8e] - tools: update lint-md rollup dependencies (Node.js GitHub Bot) #42141
[f2a16158a0] - tools: update eslint to 8.10.0 (Node.js GitHub Bot) #42143
[11f747b0e4] - tools: update lint-md-dependencies to rollup@2.67.3 (Node.js GitHub Bot) #42057
[c47b436bd0] - tools: enable es2022 env in ESLint config (Michaël Zasso) #42043
[bbdf285a39] - tools: add console to the list of restricted globals (Antoine du Hamel) #42012
[aace6c2626] - tools: lint deprecation codes (Antoine du Hamel) #41992
[c229889022] - tools: fix bugs in prefer-primordials linter rule (Antoine du Hamel) #42010
[410d0ce44a] - tools: add timers functions to the list of restricted globals (Antoine du Hamel) #42013
[06d8c53e62] - tools: reduce list of globals in ESLint config (Rich Trott) #41996
[82b64f44fc] - tools: update remark-preset-lint-node to 3.3.1 (Rich Trott) #41999
[1db9cc7e59] - tools: update ESLint to 8.9.0 (Luigi Pinca) #41973
[f8c6232f90] - tools: update lint-md-dependencies to rollup@2.67.2 (Node.js GitHub Bot) #41941
[57d5576c4d] - tools: fix typo in prefer-primordials.js (Ikko Ashimine) #41891
[4bba27935a] - tools,lib: remove global and Intl from the list of globals (Antoine du Hamel) #42014
[e918570d10] - url: preserve null char in WHATWG URL errors (Rich Trott) #42263
[962a8ec350] - url: trim leading and trailing C0 control chars (Rich Trott) #42196
[78647edba7] - url, src: modify one special_back_slash (Khaidi Chu) #42112
[a458fbf949] - worker: do not send message if port is closing (Rich Trott) #42357
[604621a275] - worker: fix typo in debug statement (Antoine du Hamel) #42011
[237affc951] - (SEMVER-MINOR) worker: graduate get/setEnvironmentData APIs (James M Snell) #41272

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Aug 10, 2023 by Renovate Bot

chore(deps): update dependency node to v16.20.2

Release Notes

v16.20.2: 2023-08-09, Version 16.20.2 'Gallium' (LTS), @​RafaelGSS

Notable Changes

Commits

v16.20.1: 2023-06-20, Version 16.20.1 'Gallium' (LTS), @​RafaelGSS

Notable Changes

Commits

v16.20.0: 2023-03-29, Version 16.20.0 'Gallium' (LTS), @​BethGriggs

Notable Changes

Commits

v16.19.1: 2023-02-16, Version 16.19.1 'Gallium' (LTS), @​richardlau

Notable Changes

Commits

v16.19.0: 2022-12-13, Version 16.19.0 'Gallium' (LTS), @​richardlau

Notable Changes

OpenSSL 1.1.1s

Root certificates updated to NSS 3.85

Time zone update to 2022f

Other Notable Changes

Commits

v16.18.1: 2022-11-04, Version 16.18.1 'Gallium' (LTS), @​BethGriggs

Notable changes

Commits

v16.18.0: 2022-10-12, Version 16.18.0 'Gallium' (LTS), @​juanarbol

Notable changes

Commits

v16.17.1: 2022-09-23, Version 16.17.1 'Gallium' (LTS), @​ruyadorno

Notable changes

Commits

v16.17.0: 2022-08-16, Version 16.17.0 'Gallium' (LTS), @​targos

Notable Changes

Experimental command-line argument parser API

Experimental ESM Loader Hooks API

Experimental test runner

Improved interoperability of the Web Crypto API

Dependency updates

Other notable changes

Commits

Semver-minor commits

Semver-patch commits

Documentation commits

Other commits

v16.16.0: 2022-07-07, Version 16.16.0 'Gallium' (LTS), @​danielleadams

Notable changes

Commits

v16.15.1: 2022-06-01, Version 16.15.1 'Gallium' (LTS), @​BethGriggs prepared by @​juanarbol

Notable Changes

Commits

v16.15.0: 2022-04-26, Version 16.15.0 'Gallium' (LTS), @​danielleadams

Notable changes

Add fetch API

Other notable changes

Commits

Configuration

Merge request reports

`v16.20.2`: 2023-08-09, Version 16.20.2 'Gallium' (LTS), @RafaelGSS

`v16.20.1`: 2023-06-20, Version 16.20.1 'Gallium' (LTS), @RafaelGSS

`v16.20.0`: 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggs

`v16.19.1`: 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlau

`v16.19.0`: 2022-12-13, Version 16.19.0 'Gallium' (LTS), @richardlau

`v16.18.1`: 2022-11-04, Version 16.18.1 'Gallium' (LTS), @BethGriggs

`v16.18.0`: 2022-10-12, Version 16.18.0 'Gallium' (LTS), @juanarbol

`v16.17.1`: 2022-09-23, Version 16.17.1 'Gallium' (LTS), @ruyadorno

`v16.17.0`: 2022-08-16, Version 16.17.0 'Gallium' (LTS), @targos

`v16.16.0`: 2022-07-07, Version 16.16.0 'Gallium' (LTS), @danielleadams

`v16.15.1`: 2022-06-01, Version 16.15.1 'Gallium' (LTS), @BethGriggs prepared by @juanarbol

`v16.15.0`: 2022-04-26, Version 16.15.0 'Gallium' (LTS), @danielleadams