chore(deps): update node.js to v16.20.2
This MR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
node (source) | volta | minor | 16.17.0 -> 16.20.2 |
Release Notes
nodejs/node (node)
v16.20.2
: 2023-08-09, Version 16.20.2 'Gallium' (LTS), @RafaelGSS
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
- CVE-2023-32002: Policies can be bypassed via Module._load (High)
- CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
- CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
- OpenSSL Security Releases
More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.
Commits
- [
40c3958a5a
] - deps: update archs files for OpenSSL-1.1.1v (RafaelGSS) #49043 - [
a9ac9da89a
] - deps: fix openssl crypto clean (RafaelGSS) #49043 - [
362d4c7494
] - deps: upgrade openssl sources to OpenSSL_1_1_1v (RafaelGSS) #49043 - [
d8ccfe9ad4
] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#445 - [
242aaa0caa
] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#459
v16.20.1
: 2023-06-20, Version 16.20.1 'Gallium' (LTS), @RafaelGSS
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
-
CVE-2023-30581:
mainModule.__proto__
Bypass Experimental Policy Mechanism (High) - CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
- CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
- CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
- OpenSSL Security Releases
- c-ares vulnerabilities:
More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.
Commits
- [
5a92ea7a3b
] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen) - [
5df04e893a
] - deps: setCARES_RANDOM_FILE
for c-ares (Richard Lau) #48156 - [
c171cbd124
] - deps: update c-ares to 1.19.1 (RafaelGSS) #48115 - [
155d3aac02
] - deps: update archs files for OpenSSL-1.1.1u+quic (RafaelGSS) #48369 - [
8d4c8f8ebe
] - deps: upgrade openssl sources to OpenSSL_1_1_1u (RafaelGSS) #48369 - [
1a5c9284eb
] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#426 - [
e42ff4b018
] - http: disable request smuggling via empty headers (Paolo Insogna) nodejs-private/node-private#429 - [
10042683c8
] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#408 - [
a6f4e87bc9
] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#416 - [
b77000f4d7
] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #47851
v16.20.0
: 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggs
Notable Changes
- deps:
- (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #44376
Commits
- [
de6dd67790
] - crypto: avoid hang when no algorithm available (Richard Lau) #46237 - [
4617512788
] - crypto: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) #46185 - [
24972164fc
] - deps: update undici to 5.20.0 (Node.js GitHub Bot) #46711 - [
85f88c6a8d
] - deps: V8: cherry-pick90be99f
(Michaël Zasso) #46646 - [
b4ebe6d47b
] - deps: update c-ares to 1.19.0 (Michaël Zasso) #46415 - [
56cbc7fdda
] - deps: V8: cherry-pickc2792e5
(Jiawen Geng) #44961 - [
7af9bdb31e
] - deps: upgrade npm to 8.19.4 (npm team) #46677 - [
962a7471b5
] - deps: update corepack to 0.17.0 (Node.js GitHub Bot) #46842 - [
748bc96e35
] - deps: update corepack to 0.16.0 (Node.js GitHub Bot) #46710 - [
a467782499
] - deps: update corepack to 0.15.3 (Node.js GitHub Bot) #46037 - [
1913b6763d
] - deps: update corepack to 0.15.2 (Node.js GitHub Bot) #45635 - [
809371a15f
] - module: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) #45147 - [
086bb2f8d4
] - Revert "src: let http2 streams end after session close" (Rich Trott) #46721 - [
6a01d39120
] - (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #44376 - [
d081032a60
] - test: fix test-net-connect-reset-until-connected (Vita Batrla) #46781 - [
efe1be47ec
] - test: skip test depending onoverlapped-checker
when not available (Antoine du Hamel) #45015 - [
fc47d58abe
] - test: remove cjs loader from stack traces (Geoffrey Booth) #44197 - [
cf76d0790d
] - test: fix WPT title when no META title is present (Filip Skokan) #46804 - [
0d1485b924
] - test: fix default WPT titles (Filip Skokan) #46778 - [
088e9cde3d
] - test: add WPTRunner support for variants and generating WPT reports (Filip Skokan) #46498 - [
908c4dff44
] - test: mark test-crypto-key-objects flaky on Linux (Richard Lau) #46684 - [
768e56227e
] - tools: makeutils.SearchFiles
deterministic (Bruno Pitrus) #44496
v16.19.1
: 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlau
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
- CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
- CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
- CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
Fixed by an update to undici:
-
CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
- See https://github.com/nodejs/undici/security/advisories/GHSA-5r9g-qh6m-jxff for more information.
-
CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
- See https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w for more information.
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.
This security release includes OpenSSL security updates as outlined in the recent OpenSSL security advisory.
Commits
- [
7fef050447
] - build: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) nodejs-private/node-private#374 - [
b558e9f476
] - crypto: clear OpenSSL error on invalid ca cert (RafaelGSS) nodejs-private/node-private#375 - [
160adb7ffc
] - crypto: clear OpenSSL error queue after calling X509_check_private_key() (Filip Skokan) #45495 - [
d0ece30948
] - crypto: clear OpenSSL error queue after calling X509_verify() (Takuro Sato) #45377 - [
2d9ae4f184
] - deps: update undici to v5.19.1 (Matteo Collina) nodejs-private/node-private#388 - [
d80e8312fd
] - deps: cherry-pick Windows ARM64 fix for openssl (Richard Lau) #46568 - [
de5c8d2c2f
] - deps: update archs files for quictls/openssl-1.1.1t+quic (RafaelGSS) #46568 - [
1a8ccfe908
] - deps: upgrade openssl sources to OpenSSL_1_1_1t+quic (RafaelGSS) #46568 - [
693789780b
] - doc: clarify release notes for Node.js 16.19.0 (Richard Lau) #45846 - [
f95ef064f4
] - lib: makeRequireFunction patch when experimental policy (RafaelGSS) nodejs-private/node-private#358 - [
b02d895137
] - policy: makeRequireFunction on mainModule.require (RafaelGSS) nodejs-private/node-private#358 - [
d7f83c420c
] - test: avoid left behind child processes (Richard Lau) #46276
v16.19.0
: 2022-12-13, Version 16.19.0 'Gallium' (LTS), @richardlau
Notable Changes
OpenSSL 1.1.1s
This update is a bugfix release and does not address any security vulnerabilities.
Root certificates updated to NSS 3.85
Certificates added:
- Autoridad de Certificacion Firmaprofesional CIF
A626340
- Certainly Root E1
- Certainly Root R1
- D-TRUST BR Root CA 1 2020
- D-TRUST EV Root CA 1 2020
- DigiCert TLS ECC P384 Root G5
- DigiCert TLS RSA4096 Root G5
- E-Tugra Global Root CA ECC v3
- E-Tugra Global Root CA RSA v3
- HiPKI Root CA - G1
- ISRG Root X2
- Security Communication ECC RootCA1
- Security Communication RootCA3
- Telia Root CA v2
- vTrus ECC Root CA
- vTrus Root CA
Certificates removed:
- Cybertrust Global Root
- DST Root CA X3
- GlobalSign Root CA - R2
- Hellenic Academic and Research Institutions RootCA 2011
Time zone update to 2022f
Time zone data has been updated to 2022f. This includes changes to Daylight Savings Time (DST) for Fiji and Mexico. For more information, see https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.
Other Notable Changes
- [
33707dcd03
] - dgram: add dgram send queue info (theanarkh) #44149
Dependency updates:
- [
3b2b70d792
] - deps: upgrade npm to 8.19.3 (npm team) #45322
Experimental features:
- [
1e0dcd1ee0
] - cli: add--watch
(Moshe Atlow) #44366 - [
8c73279ebb
] - util: add default value option to parsearg (Manuel Spigolon) #44631
Commits
- [
bbef3c42f6
] - build: add version info to timezone update MR (Darshan Sen) #45021 - [
cc2c7648e0
] - build: support Python 3.11 (Luigi Pinca) #45191 - [
ac24c80663
] - build: remove redundant condition from common.gypi (Richard Lau) #45076 - [
03dcbe3030
] - build: fix bad upstream merge (Stephen Gallagher) #44642 - [
1e0dcd1ee0
] - cli: add--watch
(Moshe Atlow) #44366 - [
96d131665e
] - cluster: use inspector utils (Moshe Atlow) #44592 - [
704836033a
] - crypto: update root certificates (Luigi Pinca) #45490 - [
5a776d4a69
] - deps: update timezone to 2022f (Richard Lau) #45613 - [
3b2b70d792
] - deps: upgrade npm to 8.19.3 (npm team) #45322 - [
9fbc8b21db
] - deps: update corepack to 0.15.1 (Node.js GitHub Bot) #45331 - [
87e3d002ca
] - deps: update corepack to 0.15.0 (Node.js GitHub Bot) #45235 - [
e972ff7b13
] - deps: V8: backportbbd800c
(Chengzhong Wu) #44947 - [
af9d8217c0
] - deps: V8: cherry-pickb953542
(Chengzhong Wu) #44947 - [
38202d321b
] - deps: update undici to 5.12.0 (Node.js GitHub Bot) #45236 - [
7c0da6adf9
] - deps: update archs files for OpenSSL-1.1.1s (RafaelGSS) #45274 - [
1149ead6f7
] - deps: upgrade openssl sources to OpenSSL_1_1_1s (RafaelGSS) #45274 - [
cd54bce4f5
] - deps: update timezone (Node.js GitHub Bot) #44950 - [
2901abe4f0
] - deps: update undici to 5.11.0 (Node.js GitHub Bot) #44929 - [
c80cf97033
] - deps: update corepack to 0.14.2 (Node.js GitHub Bot) #44775 - [
33707dcd03
] - dgram: add dgram send queue info (theanarkh) #44149 - [
c708d9bb94
] - doc: fix typo in parseArgs default value (Tobias Nießen) #45083 - [
5a0efa05d2
] - node-api: handle no support for external buffers (Michael Dawson) #45181 - [
db31de634e
] - readline: refactor to avoid unsafe regex primordials (Antoine du Hamel) #43475 - [
fbc52e5729
] - src: disambiguate terms used to refer to builtins and addons (Joyee Cheung) #44135 - [
953072d3db
] - src: let http2 streams end after session close (Santiago Gimeno) #45153 - [
54608d8dc3
] - src: split property helpers from node::Environment (Chengzhong Wu) #44056 - [
6733556783
] - test: add test to validate changelogs for releases (Richard Lau) #45325 - [
821d832cef
] - test: mark test-watch-mode* as flaky on all platforms (Pierrick Bouvier) #45049 - [
02a18eac69
] - test: fix test-runner-inspect (Moshe Atlow) #44620 - [
197df63f74
] - test: add a test to ensure the correctness of timezone upgrades (Darshan Sen) #45299 - [
42e9d8016a
] - test: fix textdecoder test for small-icu builds (Richard Lau) #45225 - [
6d736a56d8
] - test: fix watch mode test flake (Moshe Atlow) #44739 - [
543d3d2bf3
] - test: deflake watch mode tests (Moshe Atlow) #44621 - [
97f6caf4eb
] - test: split watch mode inspector tests to sequential (Moshe Atlow) #44551 - [
499750ff7a
] - test: update list of known globals (Antoine du Hamel) #45255 - [
64d343af74
] - test_runner: support using--inspect
with--test
(Moshe Atlow) #44520 - [
99ee5e484d
] - test_runner: fixduration_ms
to be milliseconds (Moshe Atlow) #44450 - [
37e909251c
] - test_runner: support programmatically running--test
(Moshe Atlow) #44241 - [
0ae5694f88
] - tools: update certdata.txt (Luigi Pinca) #45490 - [
891368cefd
] - tools: remove faulty early termination logic from update-timezone.mjs (Darshan Sen) #44870 - [
543493c242
] - tools: fix timezone update tool (Darshan Sen) #44870 - [
c77f660b75
] - tools: fixcreate-or-update-pull-request-action
hash on GHA (Antoine du Hamel) #45166 - [
58c30dd049
] - tools: update gr2m/create-or-update-pull-request-action (Luigi Pinca) #45022 - [
749a4b3e5e
] - tools: use Python 3.11 in GitHub Actions workflows (Luigi Pinca) #45191 - [
6f541d99a5
] - tools: have test-asan use ubuntu-20.04 (Filip Skokan) #45581 - [
e7ed56f501
] - tools: make license-builder.sh comply with shellcheck 0.8.0 (Rich Trott) #41258 - [
cc819b4bf8
] - tools: fix typo inavoid-prototype-pollution
lint rule (Antoine du Hamel) #44446 - [
254358c81e
] - tools: refactoravoid-prototype-pollution
lint rule (Antoine du Hamel) #43476 - [
8c73279ebb
] - util: add default value option to parsearg (Manuel Spigolon) #44631
v16.18.1
: 2022-11-04, Version 16.18.1 'Gallium' (LTS), @BethGriggs
This is a security release.
Notable changes
The following CVEs are fixed in this release:
- CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
- [
9ffddd7098
] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354
v16.18.0
: 2022-10-12, Version 16.18.0 'Gallium' (LTS), @juanarbol
Notable changes
- [
1cc050eaa8
] - (SEMVER-MINOR) assert: addgetCalls
andreset
to callTracker (Moshe Atlow) #44191 - [
e5c9975f11
] - (SEMVER-MINOR) crypto: allow zero-length secret KeyObject (Filip Skokan) #44201 - [
317cd051ce
] - (SEMVER-MINOR) crypto: allow zero-length IKM in HKDF and in webcrypto PBKDF2 (Filip Skokan) #44201 - [
f80bdc5ef3
] - (SEMVER-MINOR) doc: deprecate modp1, modp2, and modp5 groups (Tobias Nießen) #44588 - [
8398e98b1b
] - (SEMVER-MINOR) http: make idle http parser count configurable (theanarkh) #43974 - [
2cd2f56962
] - (SEMVER-MINOR) http: throw error on content-length mismatch (sidwebworks) #44378 - [
6be761e8a9
] - (SEMVER-MINOR) lib: add diagnostics channel for process and worker (theanarkh) #44045 - [
1400796cef
] - (SEMVER-MINOR) net,tls: pass a valid socket ontlsClientError
(Daeyeon Jeong) #44021 - [
092239a7f1
] - (SEMVER-MINOR) net: add local family (theanarkh) #43975 - [
381e11e18e
] - (SEMVER-MINOR) report: expose report public native apis (Chengzhong Wu) #44255 - [
2ba547aa5b
] - (SEMVER-MINOR) src: expose environment RequestInterrupt api (Chengzhong Wu) #44362 - [
6ed3367155
] - (SEMVER-MINOR) stream: addReadableByteStream.tee()
(Daeyeon Jeong) #44505 - [
0fbedac6ce
] - (SEMVER-MINOR) test_runner: add before/after/each hooks (Moshe Atlow) #43730 - [
70563b53c5
] - (SEMVER-MINOR) util: addmaxArrayLength
option to Set and Map (Kohei Ueno) #43576
Commits
- [
1cc050eaa8
] - (SEMVER-MINOR) assert: addgetCalls
andreset
to callTracker (Moshe Atlow) #44191 - [
2e87cdd1e6
] - benchmark: fix startup benchmark (Evan Lucas) #44727 - [
29c0f9ef30
] - benchmark: add stream destroy benchmark (SindreXie) #44533 - [
f01bb58c1e
] - bootstrap: update comments in bootstrap/node.js (Joyee Cheung) #44726 - [
db151e182f
] - bootstrap: stop delaying instantiation of maps in per-context scripts (Darshan Sen) #42934 - [
f700074c57
] - buffer: fixatob
input validation (Austin Kelleher) #42662 - [
e10095a759
] - build: update timezone-update.yml (Alex) #44717 - [
bec2ede687
] - build: remove redundant entry in crypto (Jiawen Geng) #44604 - [
7b3a2c3353
] - build: rewritten the Android build system (BuShe Pie) #44207 - [
e96bb14942
] - build: add --libdir flag to configure (Stephen Gallagher) #44361 - [
2a4491b34d
] - build: added NINJA env to customize ninja binary (Jeff Dickey) #44293 - [
aaad7a64b4
] - build: enable pointer authentication for branch protection on arm64 (Jeremiah Gowdy) #43200 - [
041bb54143
] - build: add workflow to label flaky-test platform (Rafael Gonzaga) #44042 - [
58d85c1109
] - build: optimized and fixed building configuration to Android (BuShe) #44016 - [
5cd8b7bc8b
] - build: allow test-internet on forks if not scheduled (Rich Trott) #44073 - [
9698be9347
] - build: skip test-internet run on forks (Rich Trott) #44054 - [
25e6f48e4a
] - child_process: remove lookup of undefined property (Colin Ihrig) #44766 - [
a3bdd07321
] - cluster: fix cluster rr distribute error (theanarkh) #44202 - [
317cd051ce
] - (SEMVER-MINOR) crypto: allow zero-length IKM in HKDF and in webcrypto PBKDF2 (Filip Skokan) #44201 - [
e5c9975f11
] - (SEMVER-MINOR) crypto: allow zero-length secret KeyObject (Filip Skokan) #44201 - [
7e705d8d74
] - crypto: fix webcrypto deriveBits validations (Filip Skokan) #44173 - [
7ad2a268b9
] - crypto: fix webcrypto EC key namedCurve validation errors (Filip Skokan) #44172 - [
2c938d73ff
] - crypto: fix webcrypto operation errors to be OperationError (Filip Skokan) #44171 - [
a6e2cb40a6
] - crypto: fix webcrypto generateKey() AES key length validation error (Filip Skokan) #44170 - [
7e07cce24b
] - crypto: use EVP_PKEY_CTX_set_dsa_paramgen_q_bits when available (David Benjamin) #44561 - [
1fc6394741
] - crypto: restrict PBKDF2 args to signed int (Tobias Nießen) #44575 - [
9a52ee7577
] - crypto: handle invalid prepareAsymmetricKey JWK inputs (Filip Skokan) #44475 - [
7100baee40
] - crypto: use actual option name in error message (Tobias Nießen) #44455 - [
579e066c3a
] - crypto: add digest name to INVALID_DIGEST errors (Tobias Nießen) #44468 - [
566d80f622
] - crypto: improve RSA-PSS digest error messages (Tobias Nießen) #44307 - [
f717c1e06a
] - debugger: decrease timeout used to wait for the port to be free (Joyee Cheung) #44359 - [
0f2fcaf771
] - deps: update to ngtcp2 0.8.1 and nghttp3 0.7.0 (Tobias Nießen) #44622 - [
1a8aada69d
] - deps: update corepack to 0.14.1 (Node.js GitHub Bot) #44704 - [
e4f18b4f34
] - deps: update ngtcp2 update instructions (Tobias Nießen) #44619 - [
21b5ab1494
] - deps: upgrade npm to 8.19.2 (npm team) #44632 - [
916b319e7a
] - deps: update to uvwasi 0.0.13 (Colin Ihrig) #44524 - [
67cbbcc902
] - deps: update corepack to 0.14.0 (Node.js GitHub Bot) #44509 - [
9f14dc1a8f
] - deps: update Acorn to v8.8.0 (Michaël Zasso) #44437 - [
1811a6aaa8
] - deps: update icu tzdata to 2022b (Matías Zúñiga) #44283 - [
0c4953cbd1
] - deps: update undici to 5.9.1 (Node.js GitHub Bot) #44319 - [
8a921fea74
] - deps: upgrade npm to 8.19.1 (npm team) #44486 - [
763a63c14b
] - deps: update corepack to 0.13.0 (Node.js GitHub Bot) #44318 - [
fdb699c84a
] - deps: upgrade npm to 8.18.0 (npm team) #44263 - [
2a44872f96
] - deps: update corepack to 0.12.3 (Node.js GitHub Bot) #44229 - [
48967e4b34
] - deps: upgrade npm to 8.17.0 (npm team) #44205 - [
0484122f71
] - deps: update undici to 5.8.2 (Node.js GitHub Bot) #44187 - [
e404ac7eed
] - deps: update undici to 5.8.1 (Node.js GitHub Bot) #44158 - [
9a5ee5e9e3
] - deps: update corepack to 0.12.2 (Node.js GitHub Bot) #44159 - [
3657cb277b
] - deps: remove unnecessary file (Brian White) #44133 - [
d66a807596
] - deps: upgrade npm to 8.16.0 (npm team) #44119 - [
ec998be61c
] - deps: upgrade npm to 8.15.1 (npm team) #44013 - [
e9e856ae95
] - deps: upgrade base64 todc6a41c
(Brian White) #44032 - [
8ea9a71b15
] - deps,src: use SIMD for normal base64 encoding (Brian White) #39775 - [
969a12be4b
] - doc: remove "currently" and comma splice from child_process.md (Rich Trott) #44789 - [
5e4a2e94a1
] - doc: mention git node backport (RafaelGSS) #44764 - [
618c9c8260
] - doc: ensure to revert node_version changes (Rafael Gonzaga) #44760 - [
e0fe11c189
] - doc: fix description fornapi_get_cb_info()
inn-api.md
(Daeyeon Jeong) #44761 - [
895719da65
] - doc: fix v16.17.1 security release changelog (Ruy Adorno) #44759 - [
fe832a0647
] - doc: update the deprecation for exit code to clarify its scope (Daeyeon Jeong) #44714 - [
3872abd9a6
] - doc: update guidance for adding new modules (Michael Dawson) #44576 - [
f381a1e86a
] - doc: add registry number for Electron 22 (Keeley Hammond) #44748 - [
8d3cb6c08a
] - doc: include code examples for webstreams consumers (Lucas Santos) #44387 - [
9e83c00e0b
] - doc: mention where to push security commits (RafaelGSS) #44691 - [
bc9f8d24ce
] - doc: remove extra space on threadpool usage (Connor Burton) #44734 - [
3e38ba53cc
] - doc: make legacy banner slightly less bright (Rich Trott) #44665 - [
0f88588f52
] - doc: improve building doc for Windows Powershell (Brian Muenzenmeyer) #44625 - [
5ee0127540
] - doc: maintain only one list of MODP groups (Tobias Nießen) #44644 - [
6881ecb0e2
] - doc: add legendecas to TSC list (Michael Dawson) #44662 - [
3614f5ace3
] - doc: remove comma in README.md (Taha-Chaudhry) #44599 - [
c9af43616c
] - doc: use serial comma in report docs (Daeyeon Jeong) #44608 - [
ff9ef61646
] - doc: use serial comma in stream docs (Daeyeon Jeong) #44609 - [
90eaae3ef1
] - doc: remove empty line in YAML block (Claudio Wunder) #44617 - [
f80bdc5ef3
] - (SEMVER-MINOR) doc: deprecate modp1, modp2, and modp5 groups (Tobias Nießen) #44588 - [
9fac6dd1c1
] - doc: remove old OpenSSL ENGINE constants (Tobias Nießen) #44589 - [
53543c6d81
] - doc: fix heading levels for test runner hooks (Fabian Meyer) #44603 - [
2084ad61a7
] - doc: fix errors in http.md (Luigi Pinca) #44587 - [
cc55e84ddc
] - doc: fix vm.Script createCachedData example (Chengzhong Wu) #44487 - [
8187f03834
] - doc: mention how to get commit release (Rafael Gonzaga) #44572 - [
d068978933
] - doc: fix link inprocess.md
(Antoine du Hamel) #44594 - [
0747facb63
] - doc: do not use weak MODP group in example (Tobias Nießen) #44585 - [
e26d95ef9a
] - doc: remove ebpf from supported tooling list (Rafael Gonzaga) #44549 - [
9d24c7a8c7
] - doc: emphasize that createCipher is never secure (Tobias Nießen) #44538 - [
6d881b8611
] - doc: document attribute Script.cachedDataRejected (Chengzhong Wu) #44451 - [
d846e5bac5
] - doc: move policy docs to the permissions scope (Rafael Gonzaga) #44222 - [
5c721a33c3
] - doc: add performance note to--enable-source-maps
docs (Saurabh Daware) #43817 - [
1998bc80b5
] - doc: fix release guide example consistency (Ruy Adorno) #44385 - [
7b691729b1
] - doc: note on release guide to updatemain
branch (Ruy Adorno) #44384 - [
7ec097fa99
] - doc: mention cherry-pick edge-case on release (RafaelGSS) #44408 - [
4a4025181c
] - doc: fix spacing issue in--build-snapshot
help text (Shohei YOSHIDA) #44435 - [
a5906a09dc
] - doc: apply scroll-margin-top to h2, h3 elements (metonym) #44414 - [
0e99139df4
] - doc: use serial comma in addons docs (Tobias Nießen) #44482 - [
8ea3e6f839
] - doc: do not use "Returns:" for crypto.constants (Tobias Nießen) #44481 - [
a1dbe4bc79
] - doc: add history for net.createServer() options (Luigi Pinca) #44326 - [
eb90d650d4
] - doc: fix typo in test runner code examples (Moshe Atlow) #44351 - [
17c5b978a5
] - doc: add daeyeon to collaborators (Daeyeon Jeong) #44355 - [
c1458063ee
] - doc: fix style of n-api.md (theanarkh) #44377 - [
cf60c6bc74
] - doc: add missing imports in events sample code (Brian Evans) #44337 - [
89e5ac9676
] - doc: add missing parenthesis in TLSSocket section (Tobias Nießen) #44512 - [
5ac344b2a2
] - doc: fix optionality of callback arg of checkPrime (Tobias Nießen) #44311 - [
87cc487e28
] - doc: fix typo (Hana) #44262 - [
5978eb1ae8
] - doc: add TypeScript execution requirements (Michael Dawson) #44030 - [
42948364e2
] - doc: add cola119 to collaborators (cola119) #44248 - [
6196bcedd0
] - doc: improved building doc for Android (BuShe) #44166 - [
afe6c87bb5
] - doc: add MoLow to collaborators (Moshe Atlow) #44214 - [
82ff3dabc5
] - doc: update tags in adding-new-napi-api.md (Chengzhong Wu) #44190 - [
16d6d45ee8
] - doc: fix typo in diagnostics_channel (Evan Lucas) #44199 - [
ed1d0c9203
] - doc: add Retry CI in collaborator guide (Livia Medeiros) #44130 - [
1022ece43f
] - doc: remove unused code in call tracker example (Colin Ihrig) #44127 - [
0c95d45410
] - doc: add theanarkh to collaborators (theanarkh) #44131 - [
97ad1a0f03
] - doc: clarify tls.tlsSocket.getCipher().version (Adam Majer) #44086 - [
9e10ee70a3
] - doc: update repository list in onboarding doc (Rich Trott) #44089 - [
3171d55ef8
] - doc: add ErickWendel to collaborators (Erick Wendel) #44088 - [
c9c2114a75
] - doc: update collaborator email (Ruy Adorno) #44044 - [
1f9246a24f
] - doc: copyedittest.md
(Antoine du Hamel) #44061 - [
76e9cf2a46
] - doc: add kvakil to triagers (Keyhan Vakil) #43996 - [
5a34c575ad
] - doc: clarify part of onboarding guide regarding adding to teams (Darshan Sen) #44024 - [
5d3b8ab2d6
] - doc: fix code examples incrypto.md
(Antoine du Hamel) #44053 - [
e59c095b23
] - doc: claim ABI version for Electron 21 (Keeley Hammond) #44034 - [
88b0d406ac
] - doc: remove old reference from crypto/README.md (Tobias Nießen) #44012 - [
58c97216ee
] - doc: add missing env vars to man page (cola119) #43492 - [
c07159215d
] - doc: list supported MODP groups explicitly (Tobias Nießen) #43986 - [
be2feec1f0
] - doc: fix typo in packages.md (Dominic Saadi) #44005 - [
9f7a728168
] - doc: fix typos intest.md
(Antoine du Hamel) #43997 - [
21a29d4584
] - doc: add missing test runner option (Moshe Atlow) #43989 - [
6758c63eba
] - doc,crypto: cleanup removed pbkdf2 behaviours (Filip Skokan) #44733 - [
891c4e742f
] - doc,inspector: document changes of inspector.close (Chengzhong Wu) #44628 - [
4308d95d1d
] - doc,report: document special filenames (Chengzhong Wu) #44257 - [
89c837a48d
] - doc,worker: document resourceLimits overrides (Keyhan Vakil) #43992 - [
8f6bd5a402
] - doc,worker: deprecate--trace-atomics-wait
(Keyhan Vakil) #44093 - [
9593c37984
] - errors: refactor to use optional chaining (SindreXie) #44184 - [
7cead5968e
] - esm: fix duplicated test (Geoffrey Booth) #44779 - [
5d33dfd787
] - esm: do not bind loader hook functions (Antoine du Hamel) #44122 - [
ec7bf32350
] - esm: move package config helpers (Geoffrey Booth) #43967 - [
42a91e36dd
] - esm,loader: tidy ESMLoader internals (Jacob Smith) #44701 - [
d4e9384ccb
] - events: use bitset to save memory (Basit Chonka) #43700 - [
14ec52b949
] - fs: don't hard code name in validatePosition() (Colin Ihrig) #44767 - [
83cf979a0d
] - fs: fix typo in mkdir example (SergeyTsukanov) #44791 - [
bbbb4460ee
] - fs: remove unused option infs.fstatSync()
(Livia Medeiros) #44613 - [
bf217f8029
] - fs: add encoding parameter to benchmarks (Yagiz Nizipli) #44278 - [
1308e68a16
] - gyp: libnode for ios app embedding (chexiongsheng) #44210 - [
2cee039070
] - http: disable chunked encoding when OBS fold is used (Paolo Insogna) #341 - [
2cd2f56962
] - (SEMVER-MINOR) http: throw error on content-length mismatch (sidwebworks) #44378 - [
8398e98b1b
] - (SEMVER-MINOR) http: make idle http parser count configurable (theanarkh) #43974 - [
fa6183fc7e
] - http: add max for http keepalive (theanarkh) #44217 - [
2f87ba4e03
] - http: trace http request / response (theanarkh) #44102 - [
5f406a3a53
] - http: reuse socket only when it is drained (ywave620) #43902 - [
4e49d5d1b4
] - inspector: expose inspector.close on workers (Chengzhong Wu) #44489 - [
c736927b0b
] - inspector: prevent integer overflow in open() (Tobias Nießen) #44367 - [
a021f1974a
] - lib: fix reference leak (falsandtru) #44499 - [
6be761e8a9
] - (SEMVER-MINOR) lib: add diagnostics channel for process and worker (theanarkh) #44045 - [
ac8d2de3b0
] - lib: resetRegExp
statics before running user code (Antoine du Hamel) #43741 - [
4968ebfbe1
] - lib: refactorvalidateInt32
andvalidateUint32
(mawaregetsuka) #43071 - [
acff743113
] - lib: makevalidateObject
less affected by prototype tampering (Antoine du Hamel) #42929 - [
59be5f89ca
] - lib: use safePromise
alternatives when available (Antoine du Hamel) #43476 - [
9dad4b0d11
] - lib: add diagnostics channel and perf hooks detail (Danielle Adams) #43984 - [
a99e2368ea
] - lib: refactor to avoid prototype pollution (Antoine du Hamel) #43474 - [
121c54718d
] - lib: fix diagnostics channel (theanarkh) #44154 - [
594d9436c3
] - lib: pass env variables to child process on z/OS (alexcfyung) #42255 - [
9c656c89fc
] - lib: add missing env vars to --help (cola119) #43492 - [
3aaa4109a0
] - lib: addPromise
methods toavoid-prototype-pollution
lint rule (Antoine du Hamel) #43849 - [
debf7301aa
] - lib,test: fix bug in InternalSocketAddress (Tobias Nießen) #44618 - [
c1d1ed5ae4
] - meta: update AUTHORS (Node.js GitHub Bot) #44777 - [
fe91711ed5
] - meta: add mailmap entry for dnlup (Rich Trott) #44716 - [
b9deb1e84d
] - meta: update AUTHORS (Node.js GitHub Bot) #44705 - [
3564da1c94
] - meta: move dnlup to emeriti (dnlup) #44667 - [
af5d49f186
] - meta: update test_runner in label-pr-config (Shrujal Shah) #44615 - [
7ac9bafd10
] - meta: update AUTHORS (Node.js GitHub Bot) #44591 - [
aa68a31804
] - meta: update AUTHORS (Node.js GitHub Bot) #44511 - [
edb0851539
] - meta: update AUTHORS (Node.js GitHub Bot) #44422 - [
4bdd4a3641
] - meta: update AUTHORS (Node.js GitHub Bot) #44321 - [
dc5478ad12
] - meta: updateweb streams
in label-pr-config (Daeyeon Jeong) #44235 - [
d535190086
] - meta: update AUTHORS (Node.js GitHub Bot) #44231 - [
24e3ad069d
] - meta: update AUTHORS (Node.js GitHub Bot) #44161 - [
1924d897ad
] - meta: add codeowner for src/node_snapshot* (Chengzhong Wu) #44113 - [
1988be9acf
] - meta: update AUTHORS (Node.js GitHub Bot) #44065 - [
261e5acc6b
] - meta: shorten PowerShell snippet for bug-report template (NicoNekoru) #44011 - [
1bb394e691
] - module: open stat/readPackage to mutations (Maël Nison) #44537 - [
b665171911
] - module: protect against prototype mutation (Antoine du Hamel) #44007 - [
092239a7f1
] - (SEMVER-MINOR) net: add local family (theanarkh) #43975 - [
4e0710c3a3
] - net: remove unused callback (theanarkh) #44204 - [
1400796cef
] - (SEMVER-MINOR) net,tls: pass a valid socket ontlsClientError
(Daeyeon Jeong) #44021 - [
adae66cbd4
] - node-api: add deprecation code of uncaught exception (Chengzhong Wu) #44624 - [
f38987edcc
] - node-api: avoid calling virtual methods in base's dtor (Chengzhong Wu) #44424 - [
5b5d95d312
] - node-api: cleanup redundant static modifiers (Chengzhong Wu) #44301 - [
8f3e8bb1fd
] - (SEMVER-MINOR) os: add machine method (theanarkh) #44416 - [
3cb28bdde0
] - path: change basename() argument from ext to suffix (Rich Trott) #44774 - [
7c5ce59dba
] - perf_hooks: fix gc elapsed time (theanarkh) #44058 - [
0e2c2064bb
] - report: get stack trace with cross origin contexts (Chengzhong Wu) #44398 - [
5355a46840
] - report: fix missing section javascriptHeap on OOMError (Chengzhong Wu) #44398 - [
381e11e18e
] - (SEMVER-MINOR) report: expose report public native apis (Chengzhong Wu) #44255 - [
30cfe0a156
] - report: print javascript stack on fatal error (Chengzhong Wu) #44242 - [
779761d914
] - report: add queue info for udp (theanarkh) #44345 - [
ff34d48d70
] - report: skip report if uncaught exception is handled (Chengzhong Wu) #44208 - [
3e8569cfbc
] - src: remove ParseIP() in cares_wrap.cc (Tobias Nießen) #44771 - [
916f2c5783
] - src: avoid using v8 on Isolate termination (Santiago Gimeno) #44669 - [
4f056b57e9
] - src: remove <unistd.h> from node_os.cc (Tobias Nießen) #44668 - [
24172ca6fe
] - src: avoid copy when creating Blob (Tobias Nießen) #44616 - [
eda1f4531a
] - src: make ReqWrap weak (Rafael Gonzaga) #44074 - [
ea2957fe77
] - src: make NearHeapLimitCallback() more robust (Joyee Cheung) #44581 - [
eaf2ffc23a
] - src: dump isolate stats when process exits (daomingq) #44534 - [
49cf3459d1
] - src: rename misleading arg in ClientHelloParser (Tobias Nießen) #44500 - [
2ba547aa5b
] - (SEMVER-MINOR) src: expose environment RequestInterrupt api (Chengzhong Wu) #44362 - [
70662f4058
] - src: fix cppgc incompatibility in v8 (Shelley Vohr) #43521 - [
91ef427d2d
] - src: nest namespace report in namespace node (Chengzhong Wu) #44069 - [
e7d30b4b49
] - src: use a typed array internally for process._exiting (Darshan Sen) #43883 - [
d76e7e4e84
] - src: improve error handling in CloneSSLCerts (Tobias Nießen) #44410 - [
cae9c5d5c3
] - src: fix incorrect comments in crypto (Tobias Nießen) #44470 - [
c0875d1f00
] - src: avoid casting std::trunc(... / ...) to size_t (Tobias Nießen) #44467 - [
8f3ed25e08
] - src: add error handling touv_uptime
call (Juan José Arboleda) #44386 - [
c7713f19de
] - src: remove base64_select_table and base64_table (Tobias Nießen) #44425 - [
a3dc7e18ed
] - src: fix uv_err_name memory leak (theanarkh) #44421 - [
a711080061
] - src: make Endianness an enum class (Tobias Nießen) #44411 - [
aa80826651
] - src: fix ssize_t error from nghttp2.h (Darshan Sen) #44393 - [
6b8ed279fd
] - src: trace fs async api (theanarkh) #44057 - [
dd08d6cc57
] - src: simplify and optimize GetOpenSSLVersion() (Tobias Nießen) #44395 - [
4c27d77e5c
] - src: simplify ECDH::GetCurves() (Tobias Nießen) #44309 - [
a6ce1de833
] - src: remove KeyObjectData::symmetric_key_len_ (Tobias Nießen) #44346 - [
f0d841fd7d
] - src: fix multiple format string bugs (Tobias Nießen) #44314 - [
2f3502f345
] - src: make minor improvements to SecureBuffer (Tobias Nießen) #44302 - [
525fbfd122
] - src: use imported namespaces innode_contextify.cc
(Juan José) #44299 - [
ac2edbcd8c
] - src: refactor to avoid using a moved object (Tobias Nießen) #44269 - [
b186684b22
] - src: extract common context embedder tag checks (Chengzhong Wu) #44258 - [
8195c8108c
] - src: avoid copying BaseObjectPtrs in loop (Tobias Nießen) #44270 - [
c045faf1ea
] - src: fix --heapsnapshot-near-heap-limit error hint (Chengzhong Wu) #44216 - [
4ee8ac3b6b
] - src: prevent copying ArrayBufferViewContents (Keyhan Vakil) #44091 - [
8f5fd2f06c
] - src: fix to use replacement character (Kohei Ueno) #43999 - [
78c846265f
] - src: fix typo in src/README.md (Anna Henningsen) #44009 - [
ec1645b1f0
] - src: fix regression that a source marker is lost (cola119) #43086 - [
0c01922ff7
] - src: remove dead code in base64_encode (Tobias Nießen) #43979 - [
28911e21b6
] - src,buffer: remove unused chars_written parameter (Keyhan Vakil) #44092 - [
37010cb862
] - src,fs: refactor duplicated code in fs.readdir (Daeyeon Jeong) #43204 - [
1635503704
] - src,test: fix typos (SADIK KUZU) #44110 - [
ffb1c85784
] - stream: refactor use es2020 statement (SindreXie) #44533 - [
6ed3367155
] - (SEMVER-MINOR) stream: addReadableByteStream.tee()
(Daeyeon Jeong) #44505 - [
14c7f4a290
] - test: update WPT runner (Filip Skokan) #43455 - [
4368acd01a
] - test: don't clobber RegExp.$_ on startup (Ben Noordhuis) #44864 - [
5854abc176
] - test: use async/await in test-debugger-auto-resume (samyuktaprabhu) #44675 - [
a7666abe31
] - test: migrated from Promise chains to Async/Await (Rathi N Das) #44674 - [
5bed2d1f46
] - test: change promises to async/await in test-debugger-backtrace.js (Juliet Zhang) #44677 - [
f630881f9b
] - test: use async/await in test-debugger-sb-before-load (Hope Olaidé) #44697 - [
fada3a2ce7
] - test: add extra tests for basename with ext option (Connor Burton) #44772 - [
9386c8581c
] - test: refactor to async/await (Divya Mohan) #44694 - [
af2aa5be45
] - test: modify test-debugger-custom-port.js to use async-await (Priya Shastri) #44680 - [
e9e130925c
] - test: update test-debugger-breakpoint-exists.js to use async/await (Archana Kamath) #44682 - [
510365a036
] - test: use async/await in test-debugger-preserve-breaks (poorvitusam) #44696 - [
2baa3c3ce5
] - test: use async/await in test-debugger-profile (surbhirjain) #44684 - [
ffc4fadf5e
] - test: change the promises to async/await in test-debugger-exec-scope.js (Ankita Khiratkar) #44685 - [
8b8d18ab4e
] - test: verify napi_remove_wrap with napi_delete_reference (Chengzhong Wu) #44754 - [
863361928e
] - test: change promises to async/await (Madhulika Sharma) #44683 - [
2e3aa39c94
] - test: use async/await in test-debugger-invalid-args (Nupur Chauhan) #44678 - [
095cb7eba1
] - test: update test-debugger-low-level to use await/async (Meghana Ramesh) #44688 - [
2752d7c22a
] - test: check that sysconf returns a positive value (Tobias Nießen) #44666 - [
fc1edaf0d7
] - test: change promise to async/await in debugger-watcher (“Pooja) #44687 - [
aae8ff6ace
] - test: fix test-performance-measure (smitley) #44637 - [
f13e06ab85
] - test: improve lib/readline.js coverage (MURAKAMI Masahiko) #42686 - [
a46dd370d7
] - test: fixtest-repl
not validating leaked globals properly (Antoine du Hamel) #44640 - [
31f809acca
] - test: ignore stale process cleanup failures on Windows (Joyee Cheung) #44480 - [
370b0ec5a1
] - test: use python3 instead of python (Luigi Pinca) #44545 - [
88dfd50079
] - test: fix DebugSymbolsTest.ReqWrapList on PPC64LE (Daniel Bevenius) #44341 - [
371804752a
] - test: add more cases for parse-encoding (Tony Gorez) #44427 - [
0c76e01876
] - test: split report OOM tests (Joyee Cheung) #44389 - [
5af3a5d37e
] - test: avoid race in file write stream handle tests (Joyee Cheung) #44380 - [
edb3335ff2
] - test: deflake child process exec timeout tests (Joyee Cheung) #44390 - [
c3429ab2e3
] - test: make the vm timeout escape tests more lenient (Joyee Cheung) #44433 - [
b5901a0c26
] - test: split heap prof tests (Joyee Cheung) #44388 - [
a139f5d4e0
] - test: fix multiple incorrect mustNotCall() uses (Tobias Nießen) #44022 - [
6990833a4c
] - test: raise sleep times in child process tests (Joyee Cheung) #44375 - [
b2b9de98a2
] - test: remove duplicate test (Luigi Pinca) #44313 - [
c397bb93ad
] - test: make tmpdir.js importable from esm (Geoffrey Booth) #44322 - [
03b8cb8c4c
] - test: deflake test-diagnostics-channel-net (Keyhan Vakil) #44144 - [
73cd9dd860
] - test: add coverage for invalid RSA-PSS digests (Tobias Nießen) #44271 - [
003ab59fcc
] - test: move "errors" test to "parallel" (Michaël Zasso) #44233 - [
4485adeaeb
] - test: mark connection leak test flaky on IBM i (Richard Lau) #44215 - [
8725a87fd9
] - test: usemustSucceed
instead ofmustCall
withassert.ifError
(MURAKAMI Masahiko) #44196 - [
41ea42bd82
] - test: update hr-time web platform tests (Yagiz Nizipli) #44100 - [
dd4db8e724
] - test: update console web platform tests (Yagiz Nizipli) #44100 - [
940e31784e
] - test: move tests with many workers to sequential (Keyhan Vakil) #44139 - [
03c0819dd9
] - test: deflake gc-http-client tests by restricting number of requests (Nick Sia) #44146 - [
3d0a3fe246
] - test: move test-vm-break-on-sigint to sequential (Keyhan Vakil) #44140 - [
4cfa9bac90
] - test: remove test-http-client-response-timeout flaky designation (Luigi Pinca) #44145 - [
2f036c857e
] - test: s390x z15 accelerated zlib fixes (Adam Majer) #44117 - [
5ed4f431cf
] - test: tune down parallelism for some flaky tests (Keyhan Vakil) #44090 - [
ec7b932945
] - test: fixinternet/test-inspector-help-page
(Daeyeon Jeong) #44025 - [
dff6615bbe
] - test: remove test-gc-http-client-timeout from flaky list (Feng Yu) #43971 - [
6c3228361b
] - test: reduce loop times for preventing test from timeout (theanarkh) #43981 - [
a33daadc41
] - test: fix test-cluster-concurrent-disconnect (Daeyeon Jeong) #43961 - [
e009a35d6e
] - test: change misleading variable name (Tobias Nießen) #43990 - [
72fb0133f5
] - test: usecommon.mustNotMutateObjectDeep()
in fs tests (LiviaMedeiros) #43819 - [
4ebb3ef508
] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #44223 - [
9a469bef2c
] - test_runner: include stack of uncaught exceptions (Moshe Atlow) #44614 - [
56dc4b3848
] - test_runner: fix test runner hooks failure stack (Moshe Atlow) #44284 - [
cefb0586d8
] - test_runner: refactor to use more primordials (Antoine du Hamel) #44062 - [
64b07a9d14
] - test_runner: verbous error when entire test tree is canceled (Moshe Atlow) #44060 - [
bfdee2597a
] - test_runner: empty pending tests queue post running (Moshe Atlow) #44059 - [
0fbedac6ce
] - (SEMVER-MINOR) test_runner: add before/after/each hooks (Moshe Atlow) #43730 - [
6ad7a86af6
] - test_runner: fix top leveldescribe
queuing (Moshe Atlow) #43998 - [
a2881b7a85
] - test_runner: graceful termination on--test
only (Moshe Atlow) #43977 - [
72a8faa087
] - test_runner: validateconcurrency
option (Antoine du Hamel) #43976 - [
8118fc2980
] - tls: fix out-of-bounds read in ClientHelloParser (Tobias Nießen) #44580 - [
b53ea08d7b
] - tls: remove SecureContext setFreeListLength (Tobias Nießen) #44300 - [
c35a0713b0
] - tls: use OpenSSL constant for client random size (Tobias Nießen) #44305 - [
e4b4b370a1
] - tls: use logical OR operator (Mohammed Keyvanzadeh) #44236 - [
18e1766346
] - tools: increase timeout of running WPT (Joyee Cheung) #44574 - [
006d7f1f2a
] - tools: refactor deprecated format in no-unescaped-regexp-dot (Madhuri) #44763 - [
c6289d632a
] - tools: update eslint-check.js to object style (andiemontoyeah) #44706 - [
b06a78e85d
] - tools: update eslint to 8.24.0 (Node.js GitHub Bot) #44778 - [
ce3397223b
] - tools: update lint-md-dependencies to rollup@2.79.1 (Node.js GitHub Bot) #44776 - [
1079c8099d
] - tools: add update-llhttp.sh (Paolo Insogna) #44652 - [
0b3f49c749
] - tools: fix typo in update-nghttp2.sh (Luigi Pinca) #44664 - [
d190e716ad
] - tools: add timezone update workflow (Lenvin Gonsalves) #43988 - [
b6c232f288
] - tools: update eslint to 8.23.1 (Node.js GitHub Bot) #44639 - [
2c0d9ffb65
] - tools: update lint-md-dependencies to @rollup/plugin-node-resolve@14.1.0 (Node.js GitHub Bot) #44638 - [
f05ce2bff5
] - tools: update lint-md-dependencies to @rollup/plugin-node-resolve@14.0.1 (Node.js GitHub Bot) #44590 - [
657fa792f4
] - tools: increase timeout of running WPT (Joyee Cheung) #44574 - [
602ecaa42f
] - tools: fix shebang to use python3 by default (Himself65) #44531 - [
bad8ecc27f
] - tools: update lint-md-dependencies to rollup@2.79.0 (Node.js GitHub Bot) #44510 - [
255023f80a
] - tools: don't use f-strings in test.py (Santiago Gimeno) #44407 - [
b3629daad7
] - tools: update doc to unist-util-visit@4.1.1 (Node.js GitHub Bot) #44370 - [
2891d9fd0a
] - tools: update eslint to 8.23.0 (Node.js GitHub Bot) #44419 - [
0bf57df711
] - tools: update lint-md-dependencies to rollup@2.78.1 (Node.js GitHub Bot) #44320 - [
9391ebdc0d
] - tools: update ESLint to 8.22.0 (Luigi Pinca) #44243 - [
df49c426f6
] - tools: update lint-md-dependencies to rollup@2.78.0 (Node.js GitHub Bot) #44244 - [
e42227ad3e
] - tools: update lint-md-dependencies to rollup@2.77.3 (Node.js GitHub Bot) #44230 - [
1b6d294e78
] - tools: update eslint to 8.21.0 (Node.js GitHub Bot) #44162 - [
f3dcaaf087
] - tools: update lint-md-dependencies to @rollup/plugin-commonjs@22.0.2 (Node.js GitHub Bot) #44160 - [
5d5971cda7
] - tools: update undici CPE in vuln checking script (Facundo Tuesca) #44128 - [
606b0a08a8
] - tools: update lint-md-dependencies to rollup@2.77.2 (Node.js GitHub Bot) #44064 - [
8a8c7cf6b5
] - tools: add verbose flag to find-inactive-collaborators (Rich Trott) #43964 - [
cb6b57f777
] - trace_events: add example (theanarkh) #43253 - [
be863b7a97
] - tty: fix TypeError when stream is closed (Antoine du Hamel) #43803 - [
a08cdead0b
] - typings: add JSDoc forinternal/validators
(Yagiz Nizipli) #44181 - [
a6a655de35
] - util: increase robustness with primordials (Jordan Harband) #41212 - [
70563b53c5
] - (SEMVER-MINOR) util: addmaxArrayLength
option to Set and Map (Kohei Ueno) #43576 - [
0beedb7f1c
] - v8: add setHeapSnapshotNearHeapLimit (theanarkh) #44420 - [
8d259e6086
] - win: fix fs.realpath.native for long paths (StefanStojanovic) #44536
v16.17.1
: 2022-09-23, Version 16.17.1 'Gallium' (LTS), @ruyadorno
This is a security release.
Notable changes
The following CVEs are fixed in this release:
- CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
- CVE-2022-32213: bypass via obs-fold mechanic (Medium)
- CVE-2022-35255: Weak randomness in WebCrypto keygen
- CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium)
More detailed information on each of the vulnerabilities can be found in September 22nd 2022 Security Releases blog post.
Commits
- [
a54283a638
] - crypto: fix weak randomness in WebCrypto keygen (Ben Noordhuis) nodejs-private/node-private#346 - [
0713e21240
] - http: disable chunked encoding when using OBS fold is used (Paolo Insogna) nodejs-private/node-private#341 - [
77fe2f32e4
] - src: fix IPv4 non routable validation (RafaelGSS) nodejs-private/node-private#337
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.