⬆️ Updates Node.js to v22.19.0

This MR contains the following updates:

Package	Type	Update	Change
node	final	minor	22.18.0-alpine -> 22.19.0-alpine

---

Release Notes

nodejs/node (node)

v22.19.0: 2025-08-28, Version 22.19.0 'Jod' (LTS), @​aduh95

Compare Source

Notable Changes

• [8e2076a24f] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #​59276
• [e592d739c2] - (SEMVER-MINOR) cli: support ${pid} placeholder in --cpu-prof-name (Haram Jeong) #​59072
• [cda1dab6e2] - (SEMVER-MINOR) crypto: add tls.setDefaultCACertificates() (Joyee Cheung) #​58822
• [1f184513e9] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #​58440
• [bace73a173] - doc: update the instruction on how to verify releases (Antoine du Hamel) #​59113
• [fa9a9e9c69] - (SEMVER-MINOR) esm: unflag --experimental-wasm-modules (Guy Bedford) #​57038
• [390a9dc20b] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #​59243
• [c12c5343ad] - lib: docs deprecate _http_* (Sebastian Beltran) #​59293
• [f57ee3d71f] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #​58087
• [035da74c31] - (SEMVER-MINOR) process: add threadCpuUsage (Paolo Insogna) #​56467
• [8e697d1884] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #​59240

Commits

• [73aa0ae37f] - assert: change utils to use index instead of for...of (방진혁) #​59278
• [dfe3a11eed] - benchmark: remove deprecated _extend from benchmark (Rafael Gonzaga) #​59228
• [9b9d30042a] - benchmark: add fs warmup to writefile-promises (Bruno Rodrigues) #​59215
• [a663f7f954] - benchmark: add calibrate-n script (Rafael Gonzaga) #​59186
• [1b9b5bddd6] - benchmark: adjust configuration for string-decoder bench (Rafael Gonzaga) #​59187
• [d0ac3319f9] - benchmark: add --track to benchmark (Rafael Gonzaga) #​59174
• [2044968b86] - benchmark: small lint fix on _cli.js (Rafael Gonzaga) #​59172
• [4e519934cb] - benchmark: drop misc/punycode benchmark (Rafael Gonzaga) #​59171
• [07e173d969] - benchmark: fix sqlite-is-transaction (Rafael Gonzaga) #​59170
• [8440b6177f] - benchmark: reduce N for diagnostics_channel subscribe benchmark (Arthur Angelo) #​59116
• [8615ea6db0] - buffer: cache Environment::GetCurrent to avoid repeated calls (Mert Can Altin) #​59043
• [3deb5361d2] - build: fix node_use_sqlite for GN builds (Shelley Vohr) #​59017
• [0f0ce63116] - build: remove suppressions.supp (Rafael Gonzaga) #​59079
• [b30a2117dc] - build,deps,tools: prepare to update to OpenSSL 3.5 (Richard Lau) #​58100
• [8e2076a24f] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #​59276
• [e592d739c2] - (SEMVER-MINOR) cli: support ${pid} placeholder in --cpu-prof-name (Haram Jeong) #​59072
• [b5571047ed] - crypto: prepare webcrypto key import/export for modern algorithms (Filip Skokan) #​59284
• [cda1dab6e2] - (SEMVER-MINOR) crypto: add tls.setDefaultCACertificates() (Joyee Cheung) #​58822
• [76dab34fb7] - deps: support madvise(3C) across ALL illumos revisions (Dan McDonald) #​58237
• [19d3ed64b6] - deps: update sqlite to 3.50.4 (Node.js GitHub Bot) #​59337
• [38bafc59e0] - deps: V8: backport 493cb53 (Chengzhong Wu) #​59238
• [e8da171cc3] - deps: update sqlite to 3.50.3 (Node.js GitHub Bot) #​59132
• [fd4ba38ab6] - deps: update googletest to 7e17b15 (Node.js GitHub Bot) #​59131
• [f71f427b95] - deps: update archs files for openssl-3.0.17 (Node.js GitHub Bot) #​59134
• [79c5a8f4d2] - deps: upgrade openssl sources to openssl-3.0.17 (Node.js GitHub Bot) #​59134
• [0dcc84cf53] - deps: update corepack to 0.34.0 (Node.js GitHub Bot) #​59133
• [1f184513e9] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #​58440
• [f64f5df80e] - doc: fix --use-system-ca history (Joyee Cheung) #​59411
• [e22aeaa38f] - doc: add missing section for setReturnArrays in sqlite.md (Edy Silva) #​59074
• [e44ef07235] - doc: rename x509.extKeyUsage to x509.keyUsage (Filip Skokan) #​59332
• [2c5d0aac5e] - doc: fix Pbkdf2Params hash attribute heading (Filip Skokan) #​59395
• [fde94346e5] - doc: fix missing reference links for server.keepAliveTimeoutBuffer (Lee Jiho) #​59356
• [9af8bcea58] - doc: fix grammar in global dispatcher usage (Eng Zer Jun) #​59344
• [0edf17198f] - doc: run license-builder (github-actions[bot]) #​59343
• [7f767a2e38] - doc: correct orthography eg. → e.g. (Jacob Smith) #​59329
• [a46ed50350] - doc: clarify the need of compiler compatible with c++20 (Rafael Gonzaga) #​59297
• [212263a305] - doc: clarify release candidate stability index (Filip Skokan) #​59295
• [ce93b8b556] - doc: add WDYT to glossary (btea) #​59280
• [ebaaf2c67f] - doc: add manpage entry for --use-system-ca (Joyee Cheung) #​59273
• [43b5a21916] - doc: add path.join and path.normalize clarification (Rafael Gonzaga) #​59262
• [409c66d328] - doc: fix typo in test/common/README.md (Yoo) #​59180
• [cbb0a8eb13] - doc: add note on process memoryUsage (fengmk2) #​59026
• [9892b15d81] - doc: format safely for doc-kit (Aviv Keller) #​59229
• [bace73a173] - doc: update the instruction on how to verify releases (Antoine du Hamel) #​59113
• [b549deac02] - doc: copyedit SECURITY.md (Rich Trott) #​59190
• [ef1bc3f344] - doc: fix broken sentence in URL.parse (Superchupu) #​59164
• [3c6639e8ec] - doc: improve onboarding instructions (Joyee Cheung) #​59159
• [6ffaac66bc] - doc: add constraints for mem leak to threat model (Rafael Gonzaga) #​58917
• [e419d20144] - doc: add Aditi-1400 to collaborators (Aditi Singh) #​59157
• [ba380f7bf3] - doc: avoid suggesting testing fast api with intense loop (Chengzhong Wu) #​59111
• [fa1a532f2b] - doc: fix typo in writing-test.md (SeokHun) #​59123
• [0b93ca3d19] - doc: add RafaelGSS as steward July 25 (Rafael Gonzaga) #​59078
• [7d747aeac8] - doc: clarify ERR_FS_FILE_TOO_LARGE to reflect fs.readFile() I/O limit (Haram Jeong) #​59050
• [0b5613f9fe] - doc: run license-builder (github-actions[bot]) #​59056
• [1b6b5e72d3] - doc: fix typed list formatting (Aviv Keller) #​59019
• [756c7dd639] - doc: refine util.parseArgs default definition (Slayer95) #​58958
• [0b840523a2] - doc: remove unused import in zlib.md (coderaiser) #​59041
• [3e9ed4b080] - doc: add stability index to the --watch-kill-signal flag (Dario Piotrowicz) #​58997
• [cb08a5d43f] - doc: add missing <code> blocks (Antoine du Hamel) #​58995
• [4a42360fe5] - doc: add scroll margin to links (Roman Reiss) #​58982
• [9d073f32da] - doc: add sponsorship link to RafaelGSS (Rafael Gonzaga) #​58983
• [3cc11fc9ac] - domain: remove deprecated API call (Alex Yang) #​59339
• [fa9a9e9c69] - (SEMVER-MINOR) esm: unflag --experimental-wasm-modules (Guy Bedford) #​57038
• [177ed3b3dd] - esm: js-string Wasm builtins in ESM Integration (Guy Bedford) #​59020
• [4619fe0e04] - fs: fix glob TypeError on restricted dirs (Sylphy-0xd3ac) #​58674
• [ad2089e32d] - fs: correct error message when FileHandle is transferred (Alex Yang) #​59156
• [390a9dc20b] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #​59243
• [659002359d] - http2: set Http2Stream#sentHeaders for raw headers (Darshan Sen) #​59244
• [d02831ef73] - inspector: initial support for Network.loadNetworkResource (Shima Ryuhei) #​58077
• [264a838779] - lib: add trace-sigint APIs (theanarkh) #​59040
• [d22d2fa6d4] - lib: optimize writable stream buffer clearing (Yoo) #​59406
• [a5e9759409] - lib: do not modify prototype deprecated asyncResource (RafaelGSS) #​59195
• [9254257fc0] - lib: restructure assert to become a class (Miguel Marcondes Filho) #​58253
• [946eab8d77] - lib: handle superscript variants on windows device (Rafael Gonzaga) #​59261
• [cd857a97b5] - lib: use validateString (hotpineapple) #​59296
• [c12c5343ad] - lib: docs deprecate _http_* (Sebastian Beltran) #​59293
• [a28e5f0938] - lib: add type names in source mapped stack traces (Chengzhong Wu) #​58976
• [6aec5aee7c] - lib: prefer AsyncIteratorPrototype primordial (René) #​59097
• [e704349858] - lib: fix incorrect ArrayBufferPrototypeGetDetached primordial type (Dario Piotrowicz) #​58978
• [2fc25fd400] - lib: flag to conditionally modify proto on deprecate (Rafael Gonzaga) #​58928
• [446ee98e00] - meta: clarify pr objection process further (James M Snell) #​59096
• [46c339e4f3] - meta: add mailmap entry for aditi-1400 (Aditi) #​59316
• [70a586261f] - meta: add tsc and build team as codeowners building.md (Rafael Gonzaga) #​59298
• [e666e06781] - meta: add nodejs/path to path files (Rafael Gonzaga) #​59289
• [251b65dd6c] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #​59140
• [c8a7964da8] - meta: add marco-ippolito to security release stewards (Marco Ippolito) #​58944
• [0eec5cc492] - module: fix conditions override in synchronous resolve hooks (Joyee Cheung) #​59011
• [4acf7cd6d3] - module: throw error when re-runing errored module jobs (Joyee Cheung) #​58957
• [f57ee3d71f] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #​58087
• [4aefcfc318] - node-api: reword "implementation in an alternative VM" as implementable (Chengzhong Wu) #​59036
• [ff6be2ed5d] - node-api,doc: update links to ecma262 with section names (Chengzhong Wu) #​59087
• [8d60602677] - perf_hooks: do not expose SafeMap via Histogram wrapper (René) #​59094
• [035da74c31] - (SEMVER-MINOR) process: add threadCpuUsage (Paolo Insogna) #​56467
• [74e1aa4d06] - process: make execve's args argument optional (Allon Murienik) #​58412
• [3366e60bd9] - src: use simdjson to parse SEA configuration (Joyee Cheung) #​59323
• [63cc06977a] - src: mark realm leaf classes final (Anna Henningsen) #​59355
• [133d410cd9] - src: use C++20 contains() method (iknoom) #​59304
• [57fe96fe49] - src: added CHECK_NOT_NULL check for multiple eq_wrap_async (F3lixTheCat) #​59267
• [a8f381a6c5] - src: add nullptr checks in StreamPipe::New (Burkov Egor) #​57613
• [0769e5a0dc] - src: call unmask after install signal handler (theanarkh) #​59059
• [1e7639e9e1] - src: use FastStringKey for TrackV8FastApiCall (Anna Henningsen) #​59148
• [9075a1a4bf] - src: use C++20 consteval for FastStringKey (Anna Henningsen) #​59148
• [5a0fd5689b] - src: remove declarations of removed BaseObject static fns (Anna Henningsen) #​59093
• [c637a2c41d] - src: add cache to nearest parent package json (Ilyas Shabi) #​59086
• [3375a6cfee] - test: deflake sequential/test-tls-session-timeout (Joyee Cheung) #​59423
• [438cb11a15] - test: update WPT resources,WebCryptoAPI,webstorage (Filip Skokan) #​59311
• [68bec19f76] - test: add known issue test for fs.cpSync dereference bug (James M Snell) #​58941
• [a100cce379] - test: deflake stream-readable-to-web test (Ethan Arrowood) #​58948
• [b7577d853b] - test: make test-inspector-network-resource sequential (Shima Ryuhei) #​59104
• [667ee82443] - test: don't use expose internals in test-http-outgoing-buffer.js (Meghan Denny) #​59219
• [feec26d3bb] - test: use mustSucceed in test-fs-read (Sungwon) #​59204
• [d7e23769ab] - test: prepare test-crypto-rsa-dsa for newer OpenSSL (Richard Lau) #​58100
• [3a9aca91c6] - test: fix flaky test-worker-message-port-transfer-filehandle test (Alex Yang) #​59158
• [3aee7625b9] - test: expand linting rules around assert w literal messages (Anna Henningsen) #​59147
• [667c2ced38] - test: update WPT for WebCryptoAPI to ab08796 (Node.js GitHub Bot) #​59129
• [89ac344393] - test: update WPT for WebCryptoAPI to 19d82c5 (Node.js GitHub Bot) #​59129
• [d332957ac6] - test: skip tests that cause timeouts on IBM i (Abdirahim Musse) #​59014
• [a23562ff72] - test: update startCLI to set --port=0 by default (Dario Piotrowicz) #​59042
• [4a12f5d83b] - test: mark test-inspector-network-fetch as flaky on Windows (Joyee Cheung) #​59091
• [ac4f7aa69c] - test: add missing port=0 arg in test-debugger-extract-function-name (Dario Piotrowicz) #​58977
• [8dd09267e3] - test,crypto: skip unsupported ciphers (Shelley Vohr) #​59388
• [45200b43ea] - tools: update coverage GitHub Actions to fixed version (Rich Trott) #​59512
• [8f2b8b3dc4] - tools: allow selecting test subsystems with numbers in their names (Darshan Sen) #​59242
• [f9bc2573dd] - tools: clarify README linter error message (Joyee Cheung) #​59160
• [cba0de128d] - tools: add support for URLs to MR commits in merge.sh (Antoine du Hamel) #​59162
• [039949ef5b] - tools: bump @​eslint/plugin-kit from 0.3.1 to 0.3.3 in /tools/eslint (dependabot[bot]) #​59119
• [6a8a73aa35] - tools: ignore CVE mention when linting release proposals (Antoine du Hamel) #​59037
• [d0f40f3a3a] - tools,test: enforce best practices to detect never settling promises (Antoine du Hamel) #​58992
• [9d801a3f00] - typings: improve internal binding types (Nam Yooseong) #​59351
• [6dbda6cb25] - typings: improve internal binding types (Michaël Zasso) #​59176
• [e22dddf859] - util: respect nested formats in styleText (Alex Yang) #​59098
• [491f390515] - worker: add cpuUsage for worker (theanarkh) #​59177
• [8e697d1884] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #​59240

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.