chore(deps): update node.js to v22 #103
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/node-22.x
branch
2 times, most recently
from
64a58df to
e40c2ca
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
5 times, most recently
from
e2cf022 to
2c0a1f5
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
2 times, most recently
from
f9ae491 to
404d3d3
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
from
404d3d3 to
f343ebf
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
3 times, most recently
from
cd43f75 to
3dfdc2d
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
2 times, most recently
from
90e7358 to
306af03
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
2 times, most recently
from
e6ef3e4 to
362213d
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
4 times, most recently
from
50a79c8 to
feb115f
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
2 times, most recently
from
edae687 to
c68e51e
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
3 times, most recently
from
f264710 to
fa000b6
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/node-22.x
branch
from
fa000b6 to
ae8c444
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
from
ae8c444 to
cc1c969
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
3 times, most recently
from
3be16db to
4543cd9
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/node-22.x
branch
from
4543cd9 to
2f11d7b
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
2 times, most recently
from
59159bb to
246f4bc
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
2 times, most recently
from
11babd7 to
94906aa
Compare
renovate
bot
force-pushed
the
renovate/node-22.x
branch
from
94906aa to
fd8ff25
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
18.19.1->22.14.0^20.16.10->^22.14.020-alpine->22-alpineRelease Notes
nodejs/node (node)
v22.14.0: 2025-02-11, Version 22.14.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
82a9000e9e] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #56566b7fe54fc88] - (SEMVER-MINOR) fs: allowexcludeoption in globs to accept glob patterns (Daeyeon Jeong) #564893ac92ef607] - (SEMVER-MINOR) lib: add typescript support to STDIN eval (Marco Ippolito) #563591614e8e7bc] - (SEMVER-MINOR) module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX (Marco Ippolito) #566106d6cffa9cc] - (SEMVER-MINOR) module: addfindPackageJSONutil (Jacob Smith) #55412d35333ae18] - (SEMVER-MINOR) process: add process.ref() and process.unref() methods (James M Snell) #5640007ff3ddcb5] - (SEMVER-MINOR) sqlite: support TypedArray and DataView inStatementSync(Alex Yang) #5638594d3fe1b62] - (SEMVER-MINOR) src: add --disable-sigusr1 to prevent signal i/o thread (Rafael Gonzaga) #564415afffb4415] - (SEMVER-MINOR) src,worker: add isInternalWorker (Carlos Espa) #56469697a851fb3] - (SEMVER-MINOR) test_runner: add TestContext.prototype.waitFor() (Colin Ihrig) #56595047537b48c] - (SEMVER-MINOR) test_runner: add t.assert.fileSnapshot() (Colin Ihrig) #56459926cf84e95] - (SEMVER-MINOR) test_runner: add assert.register() API (Colin Ihrig) #56434c658a8afdf] - (SEMVER-MINOR) worker: add eval ts input (Marco Ippolito) #56394Commits
bad1ad8650] - assert: make myers_diff function more performant (Giovanni Bucci) #56303e222e36f3b] - assert: make partialDeepStrictEqual work with urls and File prototypes (Giovanni Bucci) #56231e232789fe2] - assert: show diff when doing partial comparisons (Giovanni Bucci) #56211c99de1fdcf] - assert: make partialDeepStrictEqual throw when comparing [0] with [-0] (Giovanni) #562372386fd5840] - benchmark: add validateStream to styleText bench (Rafael Gonzaga) #56556b197dfa7ec] - build: fix GN build for ngtcp2 (Cheng) #563002a3cdd34ff] - build: test macos-13 on GitHub actions (Michaël Zasso) #5630712f716be0a] - build: build v8 with -fvisibility=hidden on macOS (Joyee Cheung) #56275c5ca15bd34] - child_process: fix parsing messages with splitted length field (Maksim Gorkov) #561068346b8fc2c] - crypto: add missing return value check (Michael Dawson) #5661582a9000e9e] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #56566890eef20a1] - crypto: fix checkPrime crash with large buffers (Santiago Gimeno) #565595edb7b5e87] - crypto: fix warning of ignoring return value (Cheng) #56527b89f123a0b] - crypto: make generatePrime/checkPrime interruptible (James M Snell) #5646063c1859e01] - deps: update corepack to 0.31.0 (Node.js GitHub Bot) #56795a48430d4d3] - deps: move inspector_protocol to deps (Chengzhong Wu) #5664974cccc824f] - deps: macro ENODATA is deprecated in libc++ (Cheng) #56698fa869ea0f2] - deps: fixup some minor coverity warnings (James M Snell) #566121a4fa2b015] - deps: update amaro to 0.3.0 (Node.js GitHub Bot) #56568b47076fd82] - deps: update amaro to 0.2.2 (Node.js GitHub Bot) #5656846bd4b8731] - deps: update simdutf to 6.0.3 (Node.js GitHub Bot) #565678ead9c693b] - deps: update simdutf to 5.7.2 (Node.js GitHub Bot) #5638818d4b502af] - deps: update amaro to 0.2.1 (Node.js GitHub Bot) #56390d938d7cc86] - deps: update googletest to7d76a23(Node.js GitHub Bot) #563879761e7dccb] - deps: update googletest toe54519b(Node.js GitHub Bot) #563708319dc6bc5] - deps: update ngtcp2 to 1.10.0 (Node.js GitHub Bot) #563346eacd19d6a] - deps: update simdutf to 5.7.0 (Node.js GitHub Bot) #5633228bec2dda3] - diagnostics_channel: capture console messages (Stephen Belanger) #56292d519d33502] - doc: update macOS and Xcode versions for releases (Michaël Zasso) #56337fcfe650507] - doc: add note for features usingInternalWorkerwith permission model (Antoine du Hamel) #56706efbba182b5] - doc: add entry to changelog about SQLite Session Extension (Bart Louwers) #5631831bf9c7dd9] - doc: move anatoli to emeritus (Michael Dawson) #565926096e38c7c] - doc: fix styles of the expandable TOC (Antoine du Hamel) #56755d423638281] - doc: add "Skip to content" button (Antoine du Hamel) #56750edeb157d75] - doc: improve accessibility of expandable lists (Antoine du Hamel) #567491a79e87687] - doc: add note regarding commit message trailers (Dario Piotrowicz) #56736927c7e47e4] - doc: fix typo in example code for util.styleText (Robin Mehner) #56720fade522538] - doc: fix inconsistencies inWeakSetandWeakMapcomparison details (Shreyans Pathak) #5668355533bf147] - doc: add RafaelGSS as latest sec release stewards (Rafael Gonzaga) #566828e978bdee1] - doc: clarify cjs/esm diff inqueueMicrotask()vsprocess.nextTick()(Dario Piotrowicz) #56659ae360c30dc] - doc:WeakSetandWeakMapcomparison details (Shreyans Pathak) #56648acd2a2fda5] - doc: mention prepare --security (Rafael Gonzaga) #56617d3c0a2831d] - doc: tweak info on reposts in ambassador program (Michael Dawson) #565893299505b49] - doc: add type stripping to ambassadors program (Marco Ippolito) #56598b1a6ffa4e4] - doc: improve internal documentation on built-in snapshot (Joyee Cheung) #565051641a28930] - doc: document CLI way to open the nodejs/bluesky PR (Antoine du Hamel) #565062042628fda] - doc: add section about using npx with permission model (Rafael Gonzaga) #56539ace19a0263] - doc: update gcc-version for ubuntu-lts (Kunal Kumar) #565534aa57b50f8] - doc: fix parentheses in options (Tobias Nießen) #56563b40b01b4d3] - doc: include CVE to EOL lines as sec release process (Rafael Gonzaga) #565206701360113] - doc: add esm examples to node:trace_events (Alfredo González) #56514d3207cca3e] - doc: add message for Ambassadors to promote (Michael Dawson) #5623597ece4ae06] - doc: allow request for TSC reviews via the GitHub UI (Antoine du Hamel) #5649303f25055ab] - doc: add example for piping ReadableStream (Gabriel Schulhof) #56415516d07482c] - doc: expand description ofparseArg'sdefault(Kevin Gibbons) #54431a6491effcb] - doc: use<ul>instead of<ol>inSECURITY.md(Antoine du Hamel) #56346e4ec134b21] - doc: clarify that WASM is trusted (Matteo Collina) #563450f7aed8a59] - doc: fix thecrc32documentation (Kevin Toshihiro Uehara) #55898721104a296] - doc: fix links inmodule.md(Antoine du Hamel) #56283928540d792] - doc: fix typos (Nathan Baulch) #55066e69d35f03b] - doc: add history info for Permission Model (Antoine du Hamel) #56707c6fd867ab5] - esm: fix jsdoc type refs toModuleJobBasein esm/loader (Jacob Smith) #564999cf9046bd7] - Revert "events: add hasEventListener util for validate" (origranot) #56282b7fe54fc88] - (SEMVER-MINOR) fs: allowexcludeoption in globs to accept glob patterns (Daeyeon Jeong) #564896ca27c2a59] - http2: omit server name when HTTP2 host is IP address (islandryu) #565309f1fa199bf] - inspector: roll inspector_protocol (Chengzhong Wu) #566490dae4bb3ab] - inspector: add undici http tracking support (Chengzhong Wu) #564882c6124cec4] - inspector: report loadingFinished until the response data is consumed (Chengzhong Wu) #5637296ec862ce2] - lib: refactor execution.js (Marco Ippolito) #563583ac92ef607] - (SEMVER-MINOR) lib: add typescript support to STDIN eval (Marco Ippolito) #56359d5bf3db0cf] - lib: allow skipping source maps in node_modules (Chengzhong Wu) #56639d33eaf2bcb] - lib: ensure FORCE_COLOR forces color output in non-TTY environments (Pietro Marchini) #55404dc003218a8] - lib: optimizeprepareStackTraceon builtin frames (Chengzhong Wu) #56299df06524863] - lib: suppress source map lookup exceptions (Chengzhong Wu) #5629935335a5a66] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #565801faabdb150] - meta: add codeowners of security release document (Rafael Gonzaga) #56521b4ece22ef5] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #563429ec67e7ce0] - meta: move MoLow to TSC regular member (Moshe Atlow) #56276bae4b2e20a] - module: use more defensive code when handling SWC errors (Antoine du Hamel) #566461614e8e7bc] - (SEMVER-MINOR) module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX (Marco Ippolito) #56610174d88eab1] - module: support eval with ts syntax detection (Marco Ippolito) #56285299d6fa829] - module: fix jsdoc forformatparameter in cjs/loader (pacexy) #565010307e4dd59] - module: unify TypeScript and .mjs handling in CommonJS (Joyee Cheung) #555901f4f9be93d] - module: fix async resolution error within the syncfindPackageJSON(Jacob Smith) #56382bbedffa0f0] - module: simplifyfindPackageJSONimplementation (Antoine du Hamel) #555436d6cffa9cc] - (SEMVER-MINOR) module: addfindPackageJSONutil (Jacob Smith) #55412cd7ce18233] - module: fix badrequire.resolvewith option paths for.and..(Dario Piotrowicz) #56735152df4da21] - module: rethrow amaro error message (Marco Ippolito) #56568acba5dc87e] - module: use buffer.toString base64 (Chengzhong Wu) #5631501e69be8ff] - node-api: define version 10 (Gabriel Schulhof) #55676724524528e] - node-api: remove deprecated attribute from napi_module_register (Vladimir Morozov) #56162c78e11064f] - process: remove support for undocumented symbol (Antoine du Hamel) #565523f69b18a23] - process: fix symbol key and mark experimental newnode:processmethods (Antoine du Hamel) #56517d35333ae18] - (SEMVER-MINOR) process: add process.ref() and process.unref() methods (James M Snell) #56400fa49f0f7d5] - punycode: limit deprecation warning (Colin Ihrig) #56632d77c7073b7] - sqlite: disable memstatus APIs at build time (Colin Ihrig) #5654107ff3ddcb5] - (SEMVER-MINOR) sqlite: support TypedArray and DataView inStatementSync(Alex Yang) #56385b6c2e91365] - sqlite: enable SQL math functions (Colin Ihrig) #564473462263e8b] - sqlite: pass conflict type to conflict resolution handler (Bart Louwers) #5635289ba3af743] - src: add nullptr handling from X509_STORE_new() (Burkov Egor) #5670089a7c82e0c] - src: add default value for RSACipherConfig mode field (Burkov Egor) #567017bae51e62e] - src: fix build with GCC 15 (tjuhaszrh) #56740432a4b8bd6] - src: fix to generate path from wchar_t via wstring (yamachu) #566968c9eaf82f0] - src: initialize FSReqWrapSync in path that uses it (Michaël Zasso) #56613bcdb42d40b] - src: handle duplicate paths granted (Rafael Gonzaga) #56591d6a7acc207] - src: update ECKeyPointer in ncrypto (James M Snell) #5652601922f8b1f] - src: update ECPointPointer in ncrypto (James M Snell) #565262a3a36eceb] - src: update ECGroupPointer in ncrypto (James M Snell) #5652667c10cdacb] - src: update ECDASSigPointer implementation in ncrypto (James M Snell) #5652617f931c68b] - src: cleaning up more crypto internals for ncrypto (James M Snell) #5652694d3fe1b62] - (SEMVER-MINOR) src: add --disable-sigusr1 to prevent signal i/o thread (Rafael Gonzaga) #564416594ee8dff] - src: fix undefined script name in error source (Chengzhong Wu) #56502b46bad3e91] - src: refactor --trace-env to reuse option selection and handling (Joyee Cheung) #5629376921b822b] - src: minor cleanups on OneByteString usage (James M Snell) #564823f0d1dd4fe] - src: move more crypto impl detail to ncrypto dep (James M Snell) #5642104f623b283] - src: fixup more ToLocalChecked uses in node_file (James M Snell) #564845aa436f5a1] - src: make some minor ToLocalChecked cleanups (James M Snell) #564836eec5e7ec2] - src: lock the thread properly in snapshot builder (Joyee Cheung) #563275614993968] - src: drain platform tasks before creating startup snapshot (Chengzhong Wu) #5640348493e9fd5] - src: use LocalVector in more places (James M Snell) #564577e5ea0681e] - src: use v8::LocalVector consistently with other minor cleanups (James M Snell) #56417ad3d857f2b] - src: use starts_with in fs_permission.cc (ishabi) #558115afffb4415] - (SEMVER-MINOR) src,worker: add isInternalWorker (Carlos Espa) #564697d1676e72e] - stream: fix typo in ReadableStreamBYOBReader.readIntoRequests (Mattias Buelens) #56560e658ea6b26] - stream: validate undefined sizeAlgorithm in WritableStream (Jason Zhang) #56067e4f133c20c] - test: add ts eval snapshots (Marco Ippolito) #56358f041742400] - test: remove empty lines from snapshots (Marco Ippolito) #56358801cde91f6] - test: reduce number of written chunks (Luigi Pinca) #567576fdf1879ab] - test: fix invalid common.mustSucceed() usage (Luigi Pinca) #56756d2bfbfa364] - test: use strict mode in global setters test (Rich Trott) #567425c030da42f] - test: cleanup and simplify test-crypto-aes-wrap (James M Snell) #56748f1442d6eaf] - test: do not use common.isMainThread (Luigi Pinca) #5676849405bd9e7] - test: make some requires lazy in common/index (James M Snell) #5671552ef376788] - test: add test that uses multibyte for path and resolves modules (yamachu) #56696b811dea85a] - test: replace more uses ofglobalwithglobalThis(James M Snell) #56712eb97076199] - test: make common/index slightly less node.js specific (James M Snell) #567121795202d19] - test: rely less on duplicative common test harness utilities (James M Snell) #567125be29a274e] - test: simplify common/index.js (James M Snell) #5671292e99780f0] - test: move hasMultiLocalhost to common/net (James M Snell) #567161c3204a4cc] - test: move crypto related common utilities in common/crypto (James M Snell) #56714fe79d63be0] - test: add missing test for env file (Jonas) #56642e08af61537] - test: enforce strict mode in test-zlib-const (Rich Trott) #56689c96792d7f8] - test: fix localization data for ICU 74.2 (Antoine du Hamel) #5666148b72f1195] - test: use --permission instead of --experimental-permission (Rafael Gonzaga) #56685de81d90fce] - test: test-stream-compose.js doesn't need internals (Meghan Denny) #56619f5b8499ad0] - test: add maxCount and gcOptions to gcUntil() (Joyee Cheung) #56522d9e5a81041] - test: add line break at end of file (Rafael Gonzaga) #5658859be346fbf] - test: mark test-worker-prof as flaky on smartos (Joyee Cheung) #5658312a2cae9e5] - test: update test-child-process-bad-stdio to use node:test (Colin Ihrig) #565622dc4a30e19] - test: disable openssl 3.4.0 incompatible tests (Jelle van der Waa) #561601950fbf51d] - test: make test-crypto-hash compatible with OpenSSL > 3.4.0 (Jelle van der Waa) #56160a533420a91] - test: clarify fork inherit permission flags (Rafael Gonzaga) #56523697e799dc1] - test: add error only reporter for node:test (Carlos Espa) #564384844fa212d] - test: mark test-http-server-request-timeouts-mixed as flaky (Joyee Cheung) #56503843c2389b9] - test: update error code in tls-psk-circuit for for OpenSSL 3.4 (sebastianas) #56420ccb2ddbd83] - test: update compiled sqlite tests to match other tests (Colin Ihrig) #56446b40f50324d] - test: add initial test426 coverage (Chengzhong Wu) #56436059f81e4fd] - test: update test-set-http-max-http-headers to use node:test (Colin Ihrig) #56439ec2940b418] - test: update test-child-process-windows-hide to use node:test (Colin Ihrig) #564370362924880] - test: use unusual chars in the path to ensure our tests are robust (Antoine du Hamel) #48409b6c3869910] - test: improve abort signal dropping test (Edy Silva) #56339cc648ef923] - test: enable ts test on win arm64 (Marco Ippolito) #5634968819b4997] - test: deflake test-watch-file-shared-dependency (Luigi Pinca) #56344ca6ed2190c] - test: skiptest-sqlite-extensionswhen SQLite is not built by us (Antoine du Hamel) #563418ffeb8b58c] - test: increase spin for eventloop test on s390 (Michael Dawson) #562286ae9950f08] - test: migrate message eval tests from Python to JS (Yiyun Lei) #504824352bf69e9] - test: check typescript loader (Marco Ippolito) #54657406e7db9c3] - test: remove async-hooks/test-writewrap flaky designation (Luigi Pinca) #56048fa56ab2bba] - test: deflake test-esm-loader-hooks-inspect-brk (Luigi Pinca) #560508e149aac99] - test: add test case for listeners (origranot) #56282a3f5ef22cd] - test: maketest-permission-sqlite-load-extensionmore robust (Antoine du Hamel) #562958cbb7cc838] - test_runner: print failing assertion only once with spec reporter (Pietro Marchini) #566621f426bad9a] - test_runner: remove unused errors (Pietro Marchini) #56607697a851fb3] - (SEMVER-MINOR) test_runner: add TestContext.prototype.waitFor() (Colin Ihrig) #56595047537b48c] - (SEMVER-MINOR) test_runner: add t.assert.fileSnapshot() (Colin Ihrig) #5645919b4aa4b14] - test_runner: run single test file benchmark (Pietro Marchini) #56479926cf84e95] - (SEMVER-MINOR) test_runner: add assert.register() API (Colin Ihrig) #56434fb4661a4cf] - test_runner: finish marking snapshot testing as stable (Colin Ihrig) #56425900c6c3940] - tls: fix error stack conversion in cryptoErrorListToException() (Joyee Cheung) #56554e9f185b658] - tools: update doc to new version (Node.js GitHub Bot) #562597644c7e619] - tools: update inspector_protocol roller (Chengzhong Wu) #56649362272b0a4] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #56704df8b835953] - tools: fix tools-deps-update (Daniel Lemire) #56684feba5d3274] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #566959827f7d395] - tools: fix permissions inlint-release-proposalworkflow (Antoine du Hamel) #5661414c562c0dc] - tools: remove github reporter (Carlos Espa) #56468ed1785d0ae] - tools: editcreate-release-proposalworkflow (Antoine du Hamel) #56540294e4c42f5] - tools: validate commit list as part oflint-release-commit(Antoine du Hamel) #5629198d3474267] - tools: fix loong64 build failed (Xiao-Tao) #564663e729ceec8] - tools: disable unneeded rule ignoring in Python linting (Rich Trott) #56429d5c05328e2] - tools: use a configurable value for number of open dependabot PRs (Antoine du Hamel) #564271705cbe002] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #5642653b29b0469] - tools: fixrequire-common-firstlint rule from subfolder (Antoine du Hamel) #56325105c4ed4fb] - tools: add release line label when opening release proposal (Antoine du Hamel) #5631730f61f4aa5] - url: use resolved path to convert UNC paths to URL (Antoine du Hamel) #56302a0aef4dfb6] - util: inspect: do not crash on an Error stack that contains a Symbol (Jordan Harband) #56573a8a060341f] - util: inspect: do not crash on an Error with a regexname(Jordan Harband) #56574ea66bf3553] - util: rename CallSite.column to columnNumber (Chengzhong Wu) #565849cdc3b373c] - util: do not crash on inspecting function withSymbolname (Jordan Harband) #565720bfbb68569] - util: expose CallSite.scriptId (Chengzhong Wu) #565515dd7116e09] - watch: reload env file for --env-file-if-exists (Jonas) #56643c658a8afdf] - (SEMVER-MINOR) worker: add eval ts input (Marco Ippolito) #563942e5d038f48] - worker: refactor stdio to improve performance (Matteo Collina) #56630f959805d01] - worker: flush stdout and stderr on exit (Matteo Collina) #56428v22.13.1: 2025-01-21, Version 22.13.1 'Jod' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Dependency update:
Commits
520da342e0] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#66299f217369f] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555984f735e35] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#6502446870618] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#651v22.13.0: 2025-01-07, Version 22.13.0 'Jod' (LTS), @ruyadornoCompare Source
Notable Changes
Stabilize Permission Model
Upgrades the Permission Model status from Active Development to Stable.
Contributed by Rafael Gonzaga #56201
Graduate WebCryptoAPI
Ed25519and X25519 algorithms as stableFollowing the merge of Curve25519 into the Web Cryptography API Editor's Draft the
Ed25519andX25519algorithm identifiers are now stable and will no longer emit an ExperimentalWarning upon use.Contributed by (Filip Skokan) #56142
Other Notable Changes
05d6227a88] - (SEMVER-MINOR) assert: add partialDeepStrictEqual (Giovanni Bucci) #54630a933103499] - (SEMVER-MINOR) cli: implement --trace-env and --trace-env-[js|native]-stack (Joyee Cheung) #55604ba9d5397de] - (SEMVER-MINOR) dgram: support blocklist in udp (theanarkh) #56087f6d0c01303] - doc: stabilize util.styleText (Rafael Gonzaga) #5626534c68827af] - doc: move typescript support to active development (Marco Ippolito) #55536dd14b80350] - doc: add LJHarb to collaborators (Jordan Harband) #561325263086169] - (SEMVER-MINOR) doc: add report version and history section (Chengzhong Wu) #561308cb3c2018d] - (SEMVER-MINOR) doc: sort --report-exclude alphabetically (Rafael Gonzaga) #5578855239a48b6] - (SEMVER-MINOR) doc,lib,src,test: unflag sqlite module (Colin Ihrig) #558907cbe3de1d8] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #561946575b76042] - (SEMVER-MINOR) module: add module.stripTypeScriptTypes (Marco Ippolito) #55282bacfe6d5c9] - (SEMVER-MINOR) net: support blocklist in net.connect (theanarkh) #56075b47888d390] - (SEMVER-MINOR) net: support blocklist for net.Server (theanarkh) #56079566f0a1d25] - (SEMVER-MINOR) net: add SocketAddress.parse (James M Snell) #56076ed7eab1421] - (SEMVER-MINOR) net: add net.BlockList.isBlockList(value) (James M Snell) #56078ea4891856d] - (SEMVER-MINOR) process: deprecatefeatures.{ipv6,uv}andfeatures.tls_*(René) #5554501eb308f26] - (SEMVER-MINOR) report: fix typos in report keys and bump the version (Yuan-Ming Hsu) #5606897c38352d0] - (SEMVER-MINOR) sqlite: aggregate constants in a single property (Edigleysson Silva (Edy)) #56213b4041e554a] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.iteratemethod (tpoisseau) #542132e3ca1bbdd] - (SEMVER-MINOR) src: add cli option to preserve env vars on diagnostic reports (Rafael Gonzaga) #55697bcfe9c80fc] - (SEMVER-MINOR) util: add sourcemap support to getCallSites (Marco Ippolito) #55589Commits
e9024779c0] - assert: make Maps be partially compared in partialDeepStrictEqual (Giovanni Bucci) #561954c13d8e587] - assert: make partialDeepStrictEqual work with ArrayBuffers (Giovanni Bucci) #56098a4fa31a86e] - assert: optimize partial comparison of twoSetsConfiguration
📅 Schedule: Branch creation - "before 12pm on Sunday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.