chore(deps): update node.js to v20.19.2 #37
No reviewers
Labels
No labels
bug
duplicate
enhancement
help wanted
invalid
question
renovate-bot
renovate-security
security
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: mCaptcha/mcaptcha-api-js#37
Loading…
Add table
Reference in a new issue
No description provided.
Delete branch "renovate/node-20.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
20.15.1->20.19.220.16.0->20.19.2Release Notes
nodejs/node (node)
v20.19.2: 2025-05-14, Version 20.19.2 'Iron' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Commits
eb25047b1b] - deps: update llhttp to 9.2.0 (Node.js GitHub Bot) #5171912dcd8db08] - deps: update llhttp to 9.1.3 (Node.js GitHub Bot) #50080190e45a291] - (SEMVER-MAJOR) (CVE-2025-23167) deps: update llhttp to 9.1.2 (Paolo Insogna) #48981fc68c44e6a] - fs: added test for missing call to uv_fs_req_cleanup (Justin Nietzel) #578119e13bf0a81] - (CVE-2025-23165) fs: add missing call to uv_fs_req_cleanup (Justin Nietzel) #57811bd0aa5d44c] - (CVE-2024-27982) http: do not allow OBS fold in headers by default (Paolo Insogna) nodejs-private/node-private#5566c57465920] - (CVE-2025-23166) src: fix error handling on async crypto operations (RafaelGSS) nodejs-private/node-private#710v20.19.1: 2025-04-22, Version 20.19.1 'Iron' (LTS), @UlisesGascon prepared by @RafaelGSSCompare Source
Notable Changes
d5e73ce0f8] - deps: update undici to 6.21.2 (Matteo Collina) #57442e4a6323ab2] - deps: update c-ares to v1.34.5 (Node.js GitHub Bot) #57792Commits
d5e73ce0f8] - deps: update undici to 6.21.2 (Matteo Collina) #57442e4a6323ab2] - deps: update c-ares to v1.34.5 (Node.js GitHub Bot) #57792b2b9eb36af] - dns: restore dns query cache ttl (Ethan Arrowood) #5764007a99a5c0b] - doc: correct status of require(esm) warning in v20 changelog (Joyee Cheung) #57529d45517ccbf] - meta: bump Mozilla-Actions/sccache-action from 0.0.8 to 0.0.9 (dependabot[bot]) #57720fa93bb2633] - test: update parallel/test-tls-dhe for OpenSSL 3.5 (Richard Lau) #5747729c032403c] - tools: update sccache to support GH cache changes (Michaël Zasso) #57573v20.19.0: 2025-03-13, Version 20.19.0 'Iron' (LTS), @marco-ippolitoCompare Source
Notable Changes
require(esm) is now enabled by default
Support for loading native ES modules using require() had been available on v20.x under the command line flag --experimental-require-module, and available by default on v22.x and v23.x. In this release, it is now no longer behind a flag on v20.x.
This feature has been tested on v23.x and v22.x, and we are looking for user feedback from v20.x to make more final tweaks before fully stabilizing it.
It now no longer emits a warning unless
--trace-require-moduleis explicitly used.If there happens to be any regressions caused by this feature, users can report it to the Node.js issue tracker. Meanwhile this feature can also be disabled using
--no-experimental-require-moduleas a workaround.With this feature enabled, Node.js will no longer throw
ERR_REQUIRE_ESMifrequire()is used to load a ES module. It can, however, throwERR_REQUIRE_ASYNC_MODULEif the ES module being loaded or its dependencies contain top-levelawait. When the ES module is loaded successfully byrequire(), the returned object will either be a ES module namespace object similar to what's returned byimport(), or what gets exported as"module.exports"in the ES module.Users can check
process.features.require_moduleto see whetherrequire(esm)is enabled in the current Node.js instance. For packages, the"module-sync"exports condition can be used as a way to detectrequire(esm)support in the current Node.js instance and allow bothrequire()andimportto load the same native ES module. See the documentation for more details about this feature.Contributed by Joyee Cheung in #55085
Module syntax detection is now enabled by default
Module syntax detection (the
--experimental-detect-moduleflag) is nowenabled by default. Use
--no-experimental-detect-moduleto disable it ifneeded.
Syntax detection attempts to run ambiguous files as CommonJS, and if the module
fails to parse as CommonJS due to ES module syntax, Node.js tries again and runs
the file as an ES module.
Ambiguous files are those with a
.jsor no extension, where the nearest parentpackage.jsonhas no"type"field (either"type": "module"or"type": "commonjs").Syntax detection should have no performance impact on CommonJS modules, but it
incurs a slight performance penalty for ES modules; add
"type": "module"tothe nearest parent
package.jsonfile to eliminate the performance cost.A use case unlocked by this feature is the ability to use ES module syntax in
extensionless scripts with no nearby
package.json.Thanks to Geoffrey Booth for making this work on #53619.
Other Notable Changes
285bb4ee14] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #5656673b5c16684] - (SEMVER-MINOR) worker: add postMessageToThread (Paolo Insogna) #53682de313b2336] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #561944fba01911d] - (SEMVER-MINOR) process: add process.features.require_module (Joyee Cheung) #55241df8a045afe] - (SEMVER-MINOR) module: implement the "module-sync" exports condition (Joyee Cheung) #54648f9dc1eaef5] - (SEMVER-MINOR) module: add __esModule to require()'d ESM (Joyee Cheung) #52166Commits
d84be843e3] - benchmark: add validateStream to styleText bench (Rafael Gonzaga) #56556d8eaf5b9b8] - build: fix compatibility with V8'sdepot_tools(Richard Lau) #573301ee4bf9690] - build: test macos-13 on GitHub actions (Michaël Zasso) #563071cc8d69882] - build: build v8 with -fvisibility=hidden on macOS (Joyee Cheung) #5627552f1f7e22b] - child_process: fix parsing messages with splitted length field (Maksim Gorkov) #561065ef3c3c996] - crypto: add missing return value check (Michael Dawson) #56615285bb4ee14] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #5656646ceb9dc1c] - deps: update timezone to 2025a (Node.js GitHub Bot) #56876d4ca38fe8e] - deps: macro ENODATA is deprecated in libc++ (Cheng) #5669815214e6508] - deps: update simdutf to 6.0.3 (Node.js GitHub Bot) #565671e44f5d84b] - deps: update simdutf to 5.7.2 (Node.js GitHub Bot) #56388b92ff7be38] - deps: update googletest to7d76a23(Node.js GitHub Bot) #56387e1b71a81a9] - deps: update googletest toe54519b(Node.js GitHub Bot) #56370c0d45e7f38] - deps: update simdutf to 5.7.0 (Node.js GitHub Bot) #56332d69107f5a8] - deps: update icu to 76.1 (Node.js GitHub Bot) #555515c9a397699] - deps: V8: backport9ab4059(Lu Yahan) #567818342233f6d] - deps: update corepack to 0.31.0 (Node.js GitHub Bot) #56795561493d35e] - deps,src: simplify base64 encoding (Daniel Lemire) #527146207b2936c] - doc: move anatoli to emeritus (Michael Dawson) #56592b0ab483400] - doc: fix styles of the expandable TOC (Antoine du Hamel) #5675553e4dc2a82] - doc: add "Skip to content" button (Antoine du Hamel) #5675033ee4645c3] - doc: improve accessibility of expandable lists (Antoine du Hamel) #56749b514438418] - doc: add note regarding commit message trailers (Dario Piotrowicz) #56736627f2997e3] - doc: fix typo in example code for util.styleText (Robin Mehner) #5672068548dcb48] - doc: fix inconsistencies inWeakSetandWeakMapcomparison details (Shreyans Pathak) #56683337cfb2549] - doc: add RafaelGSS as latest sec release stewards (Rafael Gonzaga) #56682e890c86d7b] - doc: clarify cjs/esm diff inqueueMicrotask()vsprocess.nextTick()(Dario Piotrowicz) #56659978263923f] - doc:WeakSetandWeakMapcomparison details (Shreyans Pathak) #56648aba280ccd8] - doc: mention prepare --security (Rafael Gonzaga) #566170a009a527b] - doc: tweak info on reposts in ambassador program (Michael Dawson) #56589d2f09e2ab3] - doc: add type stripping to ambassadors program (Marco Ippolito) #56598b0b77d7fbe] - doc: improve internal documentation on built-in snapshot (Joyee Cheung) #565054b3e7fee94] - doc: document CLI way to open the nodejs/bluesky PR (Antoine du Hamel) #5650603878b0384] - doc: update gcc-version for ubuntu-lts (Kunal Kumar) #56553acbbd7c1a6] - doc: fix parentheses in options (Tobias Nießen) #565633fe80c30b8] - doc: include CVE to EOL lines as sec release process (Rafael Gonzaga) #56520ff8af58046] - doc: add esm examples to node:trace_events (Alfredo González) #5651427b9cfd135] - doc: add message for Ambassadors to promote (Michael Dawson) #56235020c939da1] - doc: allow request for TSC reviews via the GitHub UI (Antoine du Hamel) #564931ef9c9a354] - doc: add example for piping ReadableStream (Gabriel Schulhof) #56415e675c3a7fc] - doc: expand description ofparseArg'sdefault(Kevin Gibbons) #54431bc756da876] - doc: use<ul>instead of<ol>inSECURITY.md(Antoine du Hamel) #56346ad59c82a49] - doc: clarify that WASM is trusted (Matteo Collina) #563458e76cc69e5] - doc: move dual package shipping docs to separate repo (Joyee Cheung) #554449fda8e29cd] - doc: mark--env-file-if-existsflag as experimental (Juan José) #568939e975f1a7d] - doc: fix link and history ofSourceMapsections (Antoine du Hamel) #5709864ce95b8fc] - doc: updaterequire(ESM)history and stability status (Antoine du Hamel) #55199697a39248b] - doc: fix history ofprocess.features(Antoine du Hamel) #548977c38e503a3] - doc: add documentation for process.features (Marco Ippolito) #54897c85b386a39] - esm: fix jsdoc type refs toModuleJobBasein esm/loader (Jacob Smith) #564994813a6a66c] - esm: throwERR_REQUIRE_ESMinstead ofERR_INTERNAL_ASSERTION(Antoine du Hamel) #548680d327c8e47] - esm: refactorget_format(Antoine du Hamel) #53872e87db6c9bc] - events: add hasEventListener util for validate (Sunghoon) #55230674b932f33] - http: don't emit error after destroy (Robert Nagy) #554574c24ef8f71] - http2: omit server name when HTTP2 host is IP address (islandryu) #56530533afe8124] - lib: reduce amount of caught URL errors (Yagiz Nizipli) #5265834221a1d6e] - lib: allow CJS source map cache to be reclaimed (Chengzhong Wu) #51711f13589f1f9] - lib,src: iterate module requests of a module wrap in JS (Chengzhong Wu) #520586afee9ea43] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #5658085bb738739] - meta: add codeowners of security release document (Rafael Gonzaga) #5652148f9ca0992] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #563424d724121b4] - meta: move MoLow to TSC regular member (Moshe Atlow) #562765e2dab7868] - module: fix badrequire.resolvewith option paths for.and..(Dario Piotrowicz) #56735f507c05060] - module: simplify --inspect-brk handling (Joyee Cheung) #55679ed2d373e5a] - module: disable require(esm) for policy and network import (Joyee Cheung) #56927de313b2336] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #561943d89e6b6fa] - module: mark evaluation rejection in require(esm) as handled (Joyee Cheung) #56122e01dd4bd4f] - module: do not warn when require(esm) comes from node_modules (Joyee Cheung) #55960011e6e0032] - module: fix error thrown from require(esm) hitting TLA repeatedly (Joyee Cheung) #55520fdf50289c6] - module: trim off internal stack frames for require(esm) warnings (Joyee Cheung) #554968d33f78ca5] - module: allow ESM that failed to be required to be re-imported (Joyee Cheung) #555028192dd6cf3] - module: include module information in require(esm) warning (Joyee Cheung) #553971db210a0ec] - module: check --experimental-require-module separately from detection (Joyee Cheung) #55250cf8701c866] - module: use kNodeModulesRE to detect node_modules (Joyee Cheung) #55243dc66632261] - module: support 'module.exports' interop export in require(esm) (Guy Bedford) #545631ac1dda9a4] - (SEMVER-MINOR) module: unflag --experimental-require-module (Joyee Cheung) #55085683c93f45f] - module: refator ESM loader for adding future synchronous hooks (Joyee Cheung) #54769df8a045afe] - (SEMVER-MINOR) module: implement the "module-sync" exports condition (Joyee Cheung) #54648249d82b686] - module: report unfinished TLA in ambiguous modules (Antoine du Hamel) #549801925d729f9] - module: remove bogus assertion in CJS entrypoint handling with --import (Joyee Cheung) #54592d1331fccb2] - module: do not warn for typeless package.json when there isn't one (Joyee Cheung) #540459916458b44] - (SEMVER-MINOR) module: unflag detect-module (Geoffrey Booth) #53619f9dc1eaef5] - (SEMVER-MINOR) module: add __esModule to require()'d ESM (Joyee Cheung) #52166b86f575504] - module: do not set CJS variables for Worker eval (Antoine du Hamel) #5305030ed93db12] - module: cache synchronous module jobs before linking (Joyee Cheung) #52868a03faf289d] - module: support ESM detection in the CJS loader (Joyee Cheung) #52047b07ad39bda] - module: detect ESM syntax by trying to recompile as SourceTextModule (Joyee Cheung) #52413132a5c190f] - module: eliminate performance cost of detection for cjs entry (Geoffrey Booth) #5209355a57a189f] - node-api: remove deprecated attribute from napi_module_register (Vladimir Morozov) #561624fba01911d] - (SEMVER-MINOR) process: add process.features.require_module (Joyee Cheung) #55241c0fad18ac0] - src: add nullptr handling from X509_STORE_new() (Burkov Egor) #567005b88d48cbb] - src: add default value for RSACipherConfig mode field (Burkov Egor) #56701e3b69e57a6] - src: fix build with GCC 15 (tjuhaszrh) #56740a7c1d8c0e8] - src: initialize FSReqWrapSync in path that uses it (Michaël Zasso) #56613c06ac66356] - src: fix undefined script name in error source (Chengzhong Wu) #56502500f3ccc66] - src: lock the thread properly in snapshot builder (Joyee Cheung) #56327cf25a5edeb] - src: drain platform tasks before creating startup snapshot (Chengzhong Wu) #564038af1b53bb8] - src: safely remove the last line from dotenv (Shima Ryuhei) #55982bb57e909aa] - src: removebase64fromprocess.versions(Richard Lau) #53442b8c89a693e] - src: add--env-file-if-existsflag (Bosco Domingo) #530609097de073a] - src: don't match after--inDotenv::GetPathFromArgs(Aviv Keller) #54237ececd225b6] - src: implement IsInsideNodeModules() in C++ (Joyee Cheung) #5528618593b7d3e] - src: refactor embedded entrypoint loading (Joyee Cheung) #53573d7aefc0524] - stream: fix typo in ReadableStreamBYOBReader.readIntoRequests (Mattias Buelens) #56560fe5f7bcd47] - stream: validate undefined sizeAlgorithm in WritableStream (Jason Zhang) #5606712744c1fd4] - test: reduce number of written chunks (Luigi Pinca) #56757e121d7d62c] - test: fix invalid common.mustSucceed() usage (Luigi Pinca) #5675611b82de7ed] - test: use strict mode in global setters test (Rich Trott) #56742f9d6e35c5e] - test: cleanup and simplify test-crypto-aes-wrap (James M Snell) #56748792ce98699] - test: do not use common.isMainThread (Luigi Pinca) #567684f0cf475e0] - test: add test that uses multibyte for path and resolves modules (yamachu) #566963bc8d273c2] - test: add missing test for env file (Jonas) #56642ad39367712] - test: enforce strict mode in test-zlib-const (Rich Trott) #56689ca79914137] - test: test-stream-compose.js doesn't need internals (Meghan Denny) #5661908bde67101] - test: add maxCount and gcOptions to gcUntil() (Joyee Cheung) #5652240a0f6f6e3] - test: mark test-worker-prof as flaky on smartos (Joyee Cheung) #56583d17bf2f62a] - test: update test-child-process-bad-stdio to use node:test (Colin Ihrig) #565625660b99b43] - test: disable openssl 3.4.0 incompatible tests (Jelle van der Waa) #56160861c99f351] - test: make test-crypto-hash compatible with OpenSSL > 3.4.0 (Jelle van der Waa) #56160597a39b5f9] - test: update error code in tls-psk-circuit for for OpenSSL 3.4 (sebastianas) #56420721e9e1217] - test: add initial test426 coverage (Chengzhong Wu) #56436cfe5380c44] - test: update test-set-http-max-http-headers to use node:test (Colin Ihrig) #5643951ff71a87a] - test: update test-child-process-windows-hide to use node:test (Colin Ihrig) #56437d6aca0cd89] - test: increase spin for eventloop test on s390 (Michael Dawson) #5622882461af6ec] - test: migrate message eval tests from Python to JS (Yiyun Lei) #504825083bbb2bb] - test: remove async-hooks/test-writewrap flaky designation (Luigi Pinca) #56048b4b26e973d] - test: deflake test-esm-loader-hooks-inspect-brk (Luigi Pinca) #56050182be26b8a] - test: update WPT for url to67880a4(Node.js GitHub Bot) #55999e67a84902f] - test_runner: remove unused errors (Pietro Marchini) #566074274c6a015] - test_runner: run single test file benchmark (Pietro Marchini) #56479e57004458b] - tools: update doc to new version (Node.js GitHub Bot) #56259e039f2b571] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #567049a1e314498] - tools: fix tools-deps-update (Daniel Lemire) #56684d6469b5287] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #56695e162476fdc] - tools: fix permissions inlint-release-proposalworkflow (Antoine du Hamel) #56614914b4675c8] - tools: editcreate-release-proposalworkflow (Antoine du Hamel) #565404ff9aa7235] - tools: validate commit list as part oflint-release-commit(Antoine du Hamel) #56291589d0ae8ea] - tools: fix loong64 build failed (Xiao-Tao) #56466bc8c39bff8] - tools: disable unneeded rule ignoring in Python linting (Rich Trott) #564293b130002bb] - tools: add release line label when opening release proposal (Antoine du Hamel) #5631773b5c16684] - (SEMVER-MINOR) worker: add postMessageToThread (Paolo Insogna) #53682v20.18.3: 2025-02-10, Version 20.18.3 'Iron' (LTS), @marco-ippolitoCompare Source
Notable Changes
030f155986] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #55333b9b006331f] - doc: add LJHarb to collaborators (Jordan Harband) #5613239b89e90b4] - doc: enforce strict policy to semver-major releases (Rafael Gonzaga) #55732247fa1959f] - crypto: update root certificates to NSS 3.104 (Richard Lau) #55681adfc2f993a] - tools: fix root certificate updater (Richard Lau) #5568129862ae105] - doc: add jazelly to collaborators (Jason Zhang) #55531Commits
b4f5da18a5] - benchmark: addtest-reporters(Aviv Keller) #55757407992e272] - benchmark: addtest_runner/mock-fn(Aviv Keller) #5577117abec4367] - benchmark: add nodeTiming.uvmetricsinfo bench (RafaelGSS) #5561443f7050338] - benchmark: add --runs support to run.js (Rafael Gonzaga) #55158470789a981] - benchmark: adjust byte size for buffer-copy (Rafael Gonzaga) #55295ea1c97ac16] - buffer: document concat zero-fill (Duncan) #55562ae683a9e1f] - build: set DESTCPU correctly for 'make binary' on loongarch64 (吴小白) #56271af020edf96] - build: fix missing fp16 dependency in d8 builds (Joyee Cheung) #56266d6a1b74404] - build: add major release action (Rafael Gonzaga) #56199bc92a96a5a] - build: allow overriding clang usage (Shelley Vohr) #56016f370ec0989] - build: remove defaults for create-release-proposal (Rafael Gonzaga) #5604225e1862e87] - build: set node_arch to target_cpu in GN (Shelley Vohr) #5596755c205e5f6] - build: add create release proposal action (Rafael Gonzaga) #556909f14ba808d] - build: implement node_use_amaro flag in GN build (Cheng) #55798046430c47e] - build: fix building with system icu 76 (Michael Cho) #555630b6d62c812] - build: fix GN arg used in generate_config_gypi.py (Shelley Vohr) #555308f9c642369] - build: fix GN build for cares/uv deps (Cheng) #55477284e932326] - build: fix uninstall script for AIX 7.1 (Cloorc) #554382f71f168ef] - build: tidy up cares.gyp (Richard Lau) #55445e89e807522] - build: synchronize list of c-ares source files (Richard Lau) #554455eb6c94851] - build: fix path concatenation (Mohammed Keyvanzadeh) #55387720d23f3ac] - build: fix make errors that occur in Makefile (minkyu_kim) #55287dc552c6739] - build,win: enable pch for clang-cl (Stefan Stojanovic) #5524964b140d484] - cli: add--heap-profflag available toNODE_OPTIONS(Juan José) #5425923fb644037] - crypto: ensure CryptoKey usages and algorithm are cached objects (Filip Skokan) #56108247fa1959f] - crypto: update root certificates to NSS 3.104 (Richard Lau) #556813c4262a171] - deps: V8: cherry-pick26fd1df(Shu-yu Guo) #55961558e6588a4] - deps: V8: backportae5a4db(Shu-yu Guo) #55961169bc58447] - deps: update simdutf to 5.6.4 (Node.js GitHub Bot) #56255bc7bb1e269] - deps: update c-ares to v1.34.4 (Node.js GitHub Bot) #56256782bb6cac4] - deps: update zlib to 1.3.0.1-motley-82a5fec (Node.js GitHub Bot) #55980f7131cf178] - deps: update corepack to 0.30.0 (Node.js GitHub Bot) #55977b09f6abcd3] - deps: update simdutf to 5.6.3 (Node.js GitHub Bot) #55973d63ccb60ea] - deps: update zlib to 1.3.0.1-motley-7e2e4d7 (Node.js GitHub Bot) #54432a2f315ef8b] - deps: update simdutf to 5.6.2 (Node.js GitHub Bot) #55889afed723b6c] - deps: update simdutf to 5.6.1 (Node.js GitHub Bot) #55850753c3b322f] - deps: update c-ares to v1.34.3 (Node.js GitHub Bot) #558034f89af8a6f] - deps: update acorn to 8.14.0 (Node.js GitHub Bot) #5569907359ec14f] - deps: update acorn to 8.13.0 (Node.js GitHub Bot) #55558c6236571fc] - deps: update googletest todf1544b(Node.js GitHub Bot) #55465f63413c6f3] - deps: update c-ares to v1.34.2 (Node.js GitHub Bot) #55463ad725c766d] - deps: update ada to 2.9.1 (Node.js GitHub Bot) #5467933367cbd62] - deps: update simdutf to 5.6.0 (Node.js GitHub Bot) #55379f2a55d9d2d] - deps: update c-ares to v1.34.1 (Node.js GitHub Bot) #553691d14886266] - dgram: check udp buffer size to avoid fd leak (theanarkh) #56084de265b9558] - diagnostics_channel: fix unsubscribe during publish (simon-id) #5511622e0d17097] - dns: stop using deprecatedares_query(Aviv Keller) #5543044f3b23749] - dns: honor the order option (Luigi Pinca) #55392f78508cd30] - doc: add history info for Permission Model (Antoine du Hamel) #56707f07be5e3cd] - doc: add note for features usingInternalWorkerwith permission model (Antoine du Hamel) #56706618e005672] - doc: add history entries for JSON modules stabilization (Antoine du Hamel) #55855f89f4ff856] - doc: fix color contrast issue in light mode (Rich Trott) #56272a51ef9d829] - doc: clarify util.aborted resource usage (Kunal Kumar) #557802d88c4b425] - doc: add esm examples to node:repl (Alfredo González) #55432722dada673] - doc: add esm examples to node:readline (Alfredo González) #55335090c7a3b01] - doc: fix 'which' to 'that' and add commas (Selveter Senitro) #56216ae3f6fbe59] - doc:sea.getRawAsset(key)always returns an ArrayBuffer (沈鸿飞) #56206d103917d92] - doc: update announce documentation for releases (Rafael Gonzaga) #5620080e5bb87c4] - doc: update blog link to /vulnerability (Rafael Gonzaga) #56198b739c2a926] - doc: call out import.meta is only supported in ES modules (Anton Kastritskii) #56186bbd0222a10] - doc: add ambassador message - benefits of Node.js (Michael Dawson) #560850e9abf2754] - doc: fix incorrect link to style guide (Yuan-Ming Hsu) #561811dbc7e87d7] - doc: fix c++ addon hello world sample (Edigleysson Silva (Edy)) #56172026f0198c8] - doc: update blog release-post link (Ruy Adorno) #56123c2fa359f7a] - doc: mention-aflag for the release script (Ruy Adorno) #56124b9b006331f] - doc: add LJHarb to collaborators (Jordan Harband) #561327a1365ba62] - doc: add create-release-action to process (Rafael Gonzaga) #5599351262ec84e] - doc: rename file to advocacy-ambassador-program.md (Tobias Nießen) #560466fc7328831] - doc: remove unused import from sample code (Blended Bram) #555709f3ef4a434] - doc: add FAQ to releases section (Rafael Gonzaga) #559921dcf8dfedb] - doc: move history entry to class description (Luigi Pinca) #55991e016f68c73] - doc: add history entry for textEncoder.encodeInto() (Luigi Pinca) #559901b31638262] - doc: improve GN build documentation a bit (Shelley Vohr) #55968d25bcfd0b2] - doc: remove confusing and outdated sentence (Luigi Pinca) #5598865c1784337] - doc: add doc for PerformanceObserver.takeRecords() (skyclouds2001) #55786682ae41f86] - doc: add vetted courses to the ambassador benefits (Matteo Collina) #559349b6cc54b50] - doc: doc how to add message for promotion (Michael Dawson) #55843db5378c8b9] - doc: add esm example for zlib (Leonardo Peixoto) #5594658a6fbb9cf] - doc: document approach for building wasm in deps (Michael Dawson) #5594041e3bcd752] - doc: add esm examples to node:timers (Alfredo González) #5585761de8f9b04] - doc: include git node release --promote to steps (Rafael Gonzaga) #55835559a0bfa2e] - doc: add a note on console stream behavior (Gireesh Punathil) #556163d11a85fe5] - doc: add-Sflag release preparation example (Antoine du Hamel) #55836955690e6cf] - doc: clarify UV_THREADPOOL_SIZE env var usage (Preveen P) #55832d6738e919a] - doc: add notable-change mention to sec release (Rafael Gonzaga) #5583079876f0dfd] - doc: fix history info forURL.prototype.toJSON(Antoine du Hamel) #55818c14776fbaa] - doc: correct max-semi-space-size statement (Joe Bowbeer) #5581283b415e8f3] - doc: run license-builder (github-actions[bot]) #5581307f53b1d75] - doc: clarify triager role (Gireesh Punathil) #557752abfdefcf3] - doc: clarify removal of experimental API does not require a deprecation (Antoine du Hamel) #5574639b89e90b4] - doc: enforce strict policy to semver-major releases (Rafael Gonzaga) #55732d0417eaec9] - doc: add esm example inpath.md(Aviv Keller) #55745032ff07a2d] - doc: consistent use of word child process (Gireesh Punathil) #5565416eef6461e] - doc: clarity to available addon options (Preveen P) #55715a7ce82e3cc] - doc: update--max-semi-space-sizedescription (Joe Bowbeer) #554951bb461e2b6] - doc: add write flag when open file as the demo code's intention (robberfree) #546268cd619f8d7] - doc: remove mention of ECDH-ES in crypto.diffieHellman (Filip Skokan) #556114576d14d0f] - doc: improve c++ embedder API doc (Gireesh Punathil) #5559712bd57fbaa] - doc: capitalize "MIT License" (Aviv Keller) #55575362b01b275] - doc: add esm examples to node:string_decoder (Alfredo González) #5550729862ae105] - doc: add jazelly to collaborators (Jason Zhang) #55531c1b63e5e6b] - doc: changed the command used to verify SHASUMS256 (adriancuadrado) #554209db657532b] - doc: add note about stdio streams in child_process (Ederin (Ed) Igharoro) #55322475e478713] - doc: addisBigIntObjectto documentation (leviscar) #554500487e70475] - doc: remove outdated remarks abouthighWaterMarkin fs (Ian Kerins) #55462e9a8feb44a] - doc: move Danielle Adams key to old gpg keys (RafaelGSS) #55399bfbe651626] - doc: move Bryan English key to old gpg keys (RafaelGSS) #55399c1cab9b4d7] - doc: move Beth Griggs keys to old gpg keys (RafaelGSS) #5539985d8eb397c] - doc: spell out condition restrictions (Jan Martin) #55187de8de542b5] - doc: add missing return values in buffer docs (Karl Horky) #55273a5df7087fd] - doc: fix ambasador markdown list (Rafael Gonzaga) #55361fbfcb0cc08] - doc: edit onboarding guide to clarify when mailmap addition is needed (Antoine du Hamel) #55334e70abce96a] - doc: fix the return type of outgoingMessage.setHeaders() (Jimmy Leung) #55290030f155986] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #5533386cb697b81] - esm: add a fallback when importer in not a file (Antoine du Hamel) #554718c8de30680] - esm: fix inconsistency withimportAssertioninresolvehook (Wei Zhu) #55365a41b0e1247] - events: optimize EventTarget.addEventListener (Robert Nagy) #553122c6dcf7209] - fs: make mutatingoptionsin Promisesreaddir()not affect results (LiviaMedeiros) #560579317feb829] - fs: lazily load ReadFileContext (Gürgün Dayıoğlu) #55998739ee18430] - http2: support ALPNCallback option (ZYSzys) #561877ba6dcf180] - http2: fix memory leak caused by premature listener removing (ywave620) #559664c15bd44a0] - http2: fix client async storage persistence (Orgad Shaneh) #55460ac57dadd9a] - lib: add validation for options in compileFunction (Taejin Kim) #56023a5b0d8900a] - lib: remove startsWith/endsWith primordials for char checks (Gürgün Dayıoğlu) #55407f10857828f] - lib: test_runner#mock:timers respeced timeout_max behaviour (BadKey) #553751a193bf256] - meta: bump github/codeql-action from 3.27.0 to 3.27.5 (dependabot[bot]) #5610323f319803d] - meta: bump actions/checkout from 4.1.7 to 4.2.2 (dependabot[bot]) #56102a953301a1c] - meta: bump step-security/harden-runner from 2.10.1 to 2.10.2 (dependabot[bot]) #56101c58065ae77] - meta: bump actions/setup-node from 4.0.3 to 4.1.0 (dependabot[bot]) #5610012b0cecc20] - meta: add releasers as CODEOWNERS to proposal action (Rafael Gonzaga) #56043070aa9d6a5] - meta: bump actions/setup-python from 5.2.0 to 5.3.0 (dependabot[bot]) #556887a46ffd18a] - meta: bump actions/setup-node from 4.0.4 to 4.1.0 (dependabot[bot]) #556878b4f2e0c6a] - meta: bump rtCamp/action-slack-notify from 2.3.0 to 2.3.2 (dependabot[bot]) #55686024c5b2ab3] - meta: bump actions/upload-artifact from 4.4.0 to 4.4.3 (dependabot[bot]) #556853d06971a15] - meta: bump actions/cache from 4.0.2 to 4.1.2 (dependabot[bot]) #55684c33de63a86] - meta: bump actions/checkout from 4.2.0 to 4.2.2 (dependabot[bot]) #55683ccc1ea0576] - meta: bump github/codeql-action from 3.26.10 to 3.27.0 (dependabot[bot]) #556829c2d0fd242] - meta: make review-wanted message minimal (Aviv Keller) #556070c14cae2b2] - meta: show PR/issue title on review-wanted (Aviv Keller) #55606aeae7e1e6f] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #553816d7b78c3d8] - meta: change color to blue notify review-wanted (Rafael Gonzaga) #554237441e289db] - meta: bump codecov/codecov-action from 4.5.0 to 4.6.0 (dependabot[bot]) #55222158c8ad77c] - meta: bump github/codeql-action from 3.26.6 to 3.26.10 (dependabot[bot]) #552218d3d4a9fab] - meta: bump step-security/harden-runner from 2.9.1 to 2.10.1 (dependabot[bot]) #552206797a35a5b] - module: prevent main thread exiting before esm worker ends (Shima Ryuhei) #56183bd99bf109f] - node-api: allow napi_delete_reference in finalizers (Chengzhong Wu) #556206308c18dbb] - report: fix network queries in getReport libuv with exclude-network (Adrien Foulon) #55602ff2eec7275] - sea: only assert snapshot main function for main threads (Joyee Cheung) #56120f9f3003de7] - src: fix outdated js2c.cc references (Chengzhong Wu) #56133a882536596] - src: fix kill signal on Windows (Hüseyin Açacak) #55514df1002438a] - src: improvenode:osuserInfo performance (Yagiz Nizipli) #55719f17416ec3e] - src: fix dns crash when failed to create NodeAresTask (theanarkh) #555218d5b8c31d8] - src: use NewFromUtf8Literal in NODE_DEFINE_CONSTANT (Charles Kerr) #555810977bb6c1d] - src: remove icu basedToASCIIandToUnicode(Yagiz Nizipli) #5515672817072e2] - src: fix winapi_strerror error string (Hüseyin Açacak) #552076f47f53f90] - src,lib: optimize nodeTiming.uvMetricsInfo (RafaelGSS) #55614ac583d4549] - stream: propagate AbortSignal reason (Marvin ROGER) #554731c8b474319] - test: skip test-buffer-tostring-range on smartos (Marco Ippolito) #5672739d608f9d8] - test: mark test-http-server-request-timeouts-mixed as flaky (Joyee Cheung) #565035c3f18be04] - test: temporary remove resource check from fs read-write (Rafael Gonzaga) #567894196aaf033] - test: remove exludes for sea tests on PPC (Michael Dawson) #562173ea738fc26] - test: removehasOpenSSL3xutils (Antoine du Hamel) #5616421e21a270e] - test: remove test-fs-utimes flaky designation (Luigi Pinca) #56052e464c6f7a5] - test: move test-worker-arraybuffer-zerofill to parallel (Luigi Pinca) #56053e99584cd57] - test: make HTTP/1.0 connection test more robust (Arne Keller) #559592d03f87ef7] - test: convert readdir test to use test runner (Thomas Chetwin) #55750207562fa3d] - test: make x509 crypto tests work with BoringSSL (Shelley Vohr) #55927a17d9e1acf] - test: fix determining lower priority (Livia Medeiros) #5590850b6729d8c] - test: increase coverage ofpathToFileURL(Antoine du Hamel) #554930aa9e74027] - test: improve test coverage for child process message sending (Juan José) #55710ebdbbc3ec8] - test: ensure that test priority is not higher than current priority (Livia Medeiros) #55739b40789e085] - test: add buffer to fs_permission tests (Rafael Gonzaga) #55734a9998799be] - test: improve test coverage forServerResponse(Juan José) #55711d2421f3c92] - test: ignore unrelated events in FW watch tests (Carlos Espa) #556050ac0afc4a9] - test: refactor some esm tests (Antoine du Hamel) #554720f8b8269d1] - test: split up test-runner-mock-timers test (Julian Gassner) #555068f6462f40b] - test: avoidapply()calls with large amount of elements (Livia Medeiros) #55501e9b0ff482b] - test: increase test coverage forhttp.OutgoingMessage.appendHeader()(Juan José) #55467d5ad060073] - test: fix addons and node-api test assumptions (Antoine du Hamel) #55441a28376bb85] - test: deflaketest-cluster-shared-handle-bind-privileged-port(Aviv Keller) #5537822c07867d1] - test: remove duplicate tests (Luigi Pinca) #553935489656b35] - test: update test_util.cc for coverage (minkyu_kim) #55291ceafb3250d] - test,crypto: make crypto tests work with BoringSSL (Shelley Vohr) #554917021b3b276] - test_runner: simplify hook running logic (Colin Ihrig) #55963d9fd632f56] - test_runner: error on mocking an already mocked date (Aviv Keller) #558583fcca16374] - test_runner: add support for scheduler.wait on mock timers (Erick Wendel) #55244f67147ec47] - tools: update github_reporter to 1.7.2 (Node.js GitHub Bot) #562055c819f1043] - tools: add REPLACEME check to workflow (Mert Can Altin) #56251b24a85b00b] - tools: usegithub.actorinstead of bot username for release proposals (Antoine du Hamel) #5623233cd7d3d8c] - tools: fix release proposal linter to support more than 1 folk preparing (Antoine du Hamel) #5620310d55e3d73] - tools: use commit title as PR title when creating release proposal (Antoine du Hamel) #56165b3d40e3be5] - tools: improve release proposal PR opening (Antoine du Hamel) #5616113455ca9ce] - tools: updatecreate-release-proposalworkflow (Antoine du Hamel) #56054851a3d7d8d] - tools: fix update-undici script (Michaël Zasso) #56069e1635fbd4e] - tools: allow dispatch oftools.ymlfrom forks (Antoine du Hamel) #560085f15d8b3f5] - tools: fix nghttp3 updater script (Antoine du Hamel) #56007bbf39b8c46] - tools: filter release keys to reduce interactivity (Antoine du Hamel) #55950954e60b87d] - tools: update WPT updater (Antoine du Hamel) #560031e09d258da] - tools: add WPT updater for specific subsystems (Mert Can Altin) #54460b95c4f5bf0] - tools: use tokenless Codecov uploads (Michaël Zasso) #559436327554706] - tools: add linter for release commit proposals (Antoine du Hamel) #55923aad478e58d] - tools: fix exclude labels for commit-queue (Richard Lau) #558091c8c881aef] - tools: make commit-queue check blocked label (Marco Ippolito) #55781c3913f9c87] - tools: fix c-ares updater script for Node.js 18 (Richard Lau) #55717adfc2f993a] - tools: fix root certificate updater (Richard Lau) #55681d336f8de15] - tools: compact jq output in daily-wpt-fyi.yml action (Filip Skokan) #55695cdb7839a0c] - tools: run daily WPT.fyi report on all supported releases (Filip Skokan) #55619274d0b4062] - tools: update lint-md-dependencies (Node.js GitHub Bot) #554703dceeb8b15] - tools: add script to synch c-ares source lists (Richard Lau) #55445bd0ec907da] - url: handle "unsafe" characters properly inpathToFileURL(Antoine du Hamel) #5454583137bceb6] - util: fix Latin1 decoding to return string output (Mert Can Altin) #56222195cc42935] - util: do not rely on mutableObjectandFunction'constructorprop (Antoine du Hamel) #56188cca7c518de] - util: add fast path for Latin1 decoding (Mert Can Altin) #552757ed346d8fd] - util: do not catch on circular@@​toStringTagerrors (Aviv Keller) #55544aa031b3eec] - worker: fix crash when a worker joins after exit (Stephen Belanger) #56191v20.18.2: 2025-01-21, Version 20.18.2 'Iron' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Dependency update:
Commits
df8b9f2c3e] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#66342d5821873] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#5558187a4b9bb] - src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS)389f239a28] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#652v20.18.1: 2024-11-20, Version 20.18.1 'Iron' (LTS), @marco-ippolitoCompare Source
Notable Changes
7a8992b2d6] - doc: add abmusse to collaborators (Abdirahim Musse) #55086Commits
085c3441fe] - assert: show the diff when deep comparing data with a custom message (Giovanni) #5475901f0b0e7b4] - benchmark: adjust config for deepEqual object (Rafael Gonzaga) #55254a45537269b] - benchmark: rewrite detect-esm-syntax benchmark (Joyee Cheung) #552381a0d8ef64f] - benchmark: add no-warnings to process.has bench (Rafael Gonzaga) #551592be5d611ce] - benchmark: create benchmark for typescript (Marco Ippolito) #54904a2aa4fa477] - benchmark: include ascii to fs/readfile (Rafael Gonzaga) #5498809849105fe] - benchmark: add dotenv benchmark (Aviv Keller) #542786b3c24dbad] - buffer: fix out of range for toString (Jason Zhang) #54553f25a5b6dc4] - build: use rclone instead of aws CLI (Michaël Zasso) #556170bbeb605de] - build: fix notify-on-review-wanted action (Rafael Gonzaga) #553045b35836732] - build: include.nycrcin coverage workflows (Wuli Zuo) #55210f38d1e90e0] - build: notify via slack when review-wanted (Rafael Gonzaga) #551020b985ec4bb] - build: remove -v flag to reduce noise (iwuliz) #5502509f75b27a1] - build: display free disk space after build in the test-macOS workflow (iwuliz) #55025f25760c4a2] - build: add the option to generate compile_commands.json in vcbuild.bat (Segev Finer) #52279746e78c4f3] - Revert "build: upgrade clang-format to v18" (Chengzhong Wu) #5499467834ee646] - build: printRunning XYZ linter...for py and yml (Aviv Keller) #54386ae34e276a2] - build: pin doc workflow to Node.js 20 (Richard Lau) #55755d0e871a706] - build,win: add winget config to set up env (Hüseyin Açacak) #5472993ac799b6b] - cli: fix spacing for port range error (Aviv Keller) #544953ba2e7bf97] - Revert "console: colorize console error and warn" (Aviv Keller) #546772f678ea53b] - crypto: ensure invalid SubtleCrypto JWK data import results in DataError (Filip Skokan) #550415d28d98542] - deps: update undici to 6.20.0 (Node.js GitHub Bot) #553290c7f2fc421] - deps: update archs files for openssl-3.0.15+quic1 (Node.js GitHub Bot) #55184da15e7edf5] - deps: upgrade openssl sources to quictls/openssl-3.0.15+quic1 (Node.js GitHub Bot) #55184381f1f9d08] - deps: update archs files for openssl-3.0.14+quic1 (Node.js GitHub Bot) #5433648d643f78a] - deps: upgrade openssl sources to quictls/openssl-3.0.14+quic1 (Node.js GitHub Bot) #543367b1796803b] - deps: update timezone to 2024b (Node.js GitHub Bot) #550568f1956c588] - deps: update acorn-walk to 8.3.4 (Node.js GitHub Bot) #5495020501a7350] - deps: update corepack to 0.29.4 (Node.js GitHub Bot) #548450f81eafecc] - doc: fix Markdown linter (Antoine du Hamel) #55344df713f0a98] - Revert "doc: update test context.assert" (Antoine du Hamel) #55344fd6fc61d2c] - doc: add pmarchini to collaborators (Pietro Marchini) #55331b963db9ee2] - doc: fixevents.once()example usingAbortSignal(Ivo Janssen) #5514450b13bfb12] - doc: add onboarding details for ambassador program (Marco Ippolito) #5528427564b7811] - doc: fix initial default value of autoSelectFamily (Ihor Rohovets) #552459e7be23aa5] - doc: tweak onboarding instructions (Michael Dawson) #55212f412a029c3] - doc: update test context.assert (Pietro Marchini) #551862f7828debb] - doc: fix unordered error anchors (Antoine du Hamel) #55242d08e4c235b] - doc: mention addons to experimental permission (Rafael Gonzaga) #55166d65c2458dc] - doc: use correct dash in stability status (Antoine du Hamel) #55200d9839c16cf] - doc: fix link intest/README.md(Livia Medeiros) #551651ad659afa4] - doc: add esm examples to node:net (Alfredo González) #5513481ad69d50f] - doc: move the YAML changes element (sendoru) #551127a51a161be] - doc: fix the require resolve algorithm inmodules.md(chirsz) #5511780edcdf899] - doc: update style guide (Aviv Keller) #53223388c754dd2] - doc: add missing:torun()'sglobPatterns(Aviv Keller) #5513594302b6a76] - doc: add abmusse to collaborators (Abdirahim Musse) #5508627ff2da964] - doc: add note about--expose-internals(Aviv Keller) #52861df6dc753b7] - doc: removeparseREPLKeywordfrom REPL documentation (Aviv Keller) #547494baa5c4d10] - doc: change backporting guide with updated info (Aviv Keller) #537469947fc112f] - doc: add missing definitions tointernal-api.md(Aviv Keller) #53303a4586f0e94] - doc: update documentation for externalizing deps (Michael Dawson) #5479270504f8522] - doc: updaterequire(ESM)history and stability status (Antoine du Hamel) #551999d0041ac40] - doc: add release key for aduh95 (Antoine du Hamel) #553490c1666a52a] - events: allow null/undefined eventInitDict (Matthew Aitken) #54643453df77f99] - events: returncurrentTargetwhen dispatching (Matthew Aitken) #546420decaab9db] - fs: acknowledgesignaloption infilehandle.createReadStream()(Livia Medeiros) #5514800a2fc7166] - lib: moveSymbol[Async]Disposepolyfills tointernal/util(Antoine du Hamel) #548538e6b606ac4] - lib: remove lib/internal/idna.js (Yagiz Nizipli) #55050c96e5cb664] - lib: the REPL should survive deletion of Array.prototype methods (Jordan Harband) #31457748ed2e559] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #553008b8d35f015] - meta: bump mozilla-actions/sccache-action from 0.0.5 to 0.0.6 (dependabot[bot]) #55225d3441ff0c8] - meta: bump actions/checkout from 4.1.7 to 4.2.0 (dependabot[bot]) #552241c20908558] - meta: bump actions/setup-node from 4.0.3 to 4.0.4 (dependabot[bot]) #552238a529abd69] - meta: bump peter-evans/create-pull-request from 7.0.1 to 7.0.5 (dependabot[bot]) #552199053d210ab] - meta: add mailmap entry for abmusse (Abdirahim Musse) #55182db2496c125] - meta: add more information about nightly releases (Aviv Keller) #55084d2ce003b2f] - meta: addlinuxto OS labels in collaborator guide (Aviv Keller) #5498637b0bea247] - meta: remove never-used workflow trigger (Aviv Keller) #54983ae27e2dcd7] - meta: add links to alternative issue trackers (Aviv Keller) #544016e5d524b0f] - module: remove duplicated import (Aviv Keller) #549423a682cca03] - path: remove repetitive conditional operator inposix.resolve(Wiyeong Seo) #54835ac1cb8dfdb] - perf_hooks: add missing type argument to getEntriesByName (Luke Taher) #5476785b3edc83b] - repl: catch\vand\rin new-line detection (Aviv Keller) #54512df1f04999e] - src: decode native error messages as UTF-8 (Joyee Cheung) #5502486d718177a] - src: update clang-tidy and focus on modernization (Yagiz Nizipli) #537577d01b6a9c5] - src: cleanup per env handles directly without a list (Chengzhong Wu) #54993a730cdb622] - src: remove duplicate code setting AF_INET (He Yang) #54939f10d9ad283] - stream: treat null asyncIterator as undefined (Jason Zhang) #551196027084245] - test: maketest-loaders-workers-spawnedless flaky (Antoine du Hamel) #5517266a87d19bd] - test: update multiple assert tests to use node:test (James M Snell) #545855105188c47] - test: update wpt test for encoding (devstone) #5515181bcec0b82] - test: deflake test/pummel/test-timers.js (jakecastelli) #5509882c402265a] - test: deflake test-http-remove-header-stays-removed (Luigi Pinca) #5500478021701ed] - test: fix test-tls-junk-closes-server (Michael Dawson) #55089c908b8a2d8] - test: fix more tests that fail when path contains a space (Antoine du Hamel) #55088afc1628e73] - test: fixassertSnapshotwhen path contains a quote (Antoine du Hamel) #550877c88739b83] - test: fix some tests when path contains%(Antoine du Hamel) #55082eb4d468671] - Revert "test: mark test-fs-watch-non-recursive flaky on Windows" (Luigi Pinca) #55079bc7b5249d4] - test: maketest-runner-assertmore robust (Aviv Keller) #550366c2a1386f7] - test: update tls test to support OpenSSL32 (Michael Dawson) #5503096406610fa] - test: fixtest-vm-context-dont-contextifywhen path contains a space (Antoine du Hamel) #5502639a80eed4f] - test: adjust tls-set-ciphers for OpenSSL32 (Michael Dawson) #55016bd8fd4fceb] - test: addutil.stripVTControlCharacterstest (RedYetiDev) #54865333b5a02d0] - test: improve coverage for timer promises schedular (Aviv Keller) #53370f48992f433] - test: remove unused common utilities (RedYetiDev) #5482593a098c56d] - test: deflake test-http-header-overflow (Luigi Pinca) #54978f849cf677d] - test: fixsoucretosource(Aviv Keller) #550381a007ea814] - test: add asserts to validate test assumptions (Michael Dawson) #549976f53c096f8] - test: move test-http-max-sockets to parallel (Luigi Pinca) #54977aba9dc775e] - test: remove test-http-max-sockets flaky designation (Luigi Pinca) #54976ee5624bffe] - test: adjust key sizes to support OpenSSL32 (Michael Dawson) #549725c11a61140] - test: update test to support OpenSSL32 (Michael Dawson) #5496862f21470e4] - test: update DOM events web platform tests (Matthew Aitken) #54642426851705c] - test_runner: assert entry is a valid object (Edigleysson Silva (Edy)) #55231b1cad519d7] - test_runner: usetest:symbol on second print of parent test (RedYetiDev) #5495663c8f3d436] - test_runner: replace ansi clear with ansi reset (Pietro Marchini) #550130b3fb344f7] - tools: addpolyfilledoption toprefer-primordialsrule (Antoine du Hamel) #553188981309bd9] - tools: makechoco installscript more readable (Aviv Keller) #540027310abeae1] - tools: bump Rollup from 4.18.1 to 4.22.4 forlint-md(dependabot[bot]) #55093083311e8af] - tools: remove redudant code from eslint require rule (Aviv Keller) #54892ae4b2aece1] - tools: update error message for ICU in license-builder (Aviv Keller) #547423ebd31684d] - tools: update github_reporter to 1.7.1 (Node.js GitHub Bot) #54951397be8a10e] - tty: fix links for terminal colors (Aviv Keller) #54596a3c2ef9e98] - util: update ansi regex (Aviv Keller) #54865efdccc88a2] - watch: preserve output when gracefully restarted (Théo LUDWIG) #54323226836c5ac] - worker: throw InvalidStateError in postMessage after close (devstone) #55206f39ff4d14b] - worker: handle--input-typemore consistently (Antoine du Hamel) #5497930383ffb9a] - zlib: throw brotli initialization error from c++ (Yagiz Nizipli) #54698v20.18.0: 2024-10-03, Version 20.18.0 'Iron' (LTS), @targosCompare Source
Notable Changes
Experimental Network Inspection Support in Node.js
This update introduces the initial support for network inspection in Node.js.
Currently, this is an experimental feature, so you need to enable it using the
--experimental-network-inspectionflag.With this feature enabled, you can inspect network activities occurring within a JavaScript application.
To use network inspection, start your Node.js application with the following command:
Please note that the network inspection capabilities are in active development.
We are actively working on enhancing this feature and will continue to expand its functionality in future updates.
httpandhttpsmodules only.feature request on the Chrome DevTools side is addressed.
Contributed by Kohei Ueno in #53593 and #54246
Exposes X509_V_FLAG_PARTIAL_CHAIN to tls.createSecureContext
This releases introduces a new option to the API
tls.createSecureContext. Fromnow on,
tls.createSecureContext({ allowPartialTrustChain: true })can be usedto treat intermediate (non-self-signed) certificates in the trust CA certificate
list as trusted.
Contributed by Anna Henningsen in #54790
New option for vm.createContext() to create a context with a freezable globalThis
Node.js implements a flavor of
vm.createContext()and friends that creates a context without contextifying its globalobject when vm.constants.DONT_CONTEXTIFY is used. This is suitable when users want to freeze the context
(impossible when the global is contextified i.e. has interceptors installed) or speed up the global access if they
don't need the interceptor behavior.
Contributed by Joyee Cheung in #54394
Deprecations
64aa31f6e5] - repl: doc-deprecate instantiatingnode:replclasses withoutnew(Aviv Keller) #548424c52ee3d7f] - zlib: deprecate instantiating classes without new (Yagiz Nizipli) #54708Other Notable Changes
b80da2f964] - buffer: optimize createFromString (Robert Nagy) #5432402b36cbd2d] - (SEMVER-MINOR) lib: add EventSource Client (Aras Abbasi) #51575879546a9bf] - (SEMVER-MINOR) src,lib: add performance.uvMetricsInfo (Rafael Gonzaga) #54413f789f4c92d] - (SEMVER-MINOR) test_runner: support module mocking (Colin Ihrig) #528484eb0749b6c] - (SEMVER-MINOR) url: implement parse method for safer URL parsing (Ali Hassan) #52280Commits
013c48f0e9] - benchmark: --no-warnings to avoid DEP/ExpWarn log (Rafael Gonzaga) #54928194fc113ac] - benchmark: add buffer.isAscii benchmark (RafaelGSS) #547407410d51cb9] - benchmark: add buffer.isUtf8 bench (RafaelGSS) #547402393f21e8a] - benchmark: add access async version to bench (Rafael Gonzaga) #54747b8779721f0] - benchmark: enhance dc publish benchmark (Rafael Gonzaga) #547454078aa83ff] - benchmark: add match and doesNotMatch bench (RafaelGSS) #5473466acab9976] - benchmark: add rejects and doesNotReject bench (RafaelGSS) #547346db777fb3a] - benchmark: add throws and doesNotThrow bench (RafaelGSS) #547348f101560ce] - benchmark: add strictEqual and notStrictEqual bench (RafaelGSS) #547342c9e4c936e] - benchmark: adds groups to better separate benchmarks (Giovanni Bucci) #54393671c3ac633] - benchmark: fix benchmark for file path and URL conversion (Early Riser) #541908c8708cb5b] - benchmark: use assert.ok searchparams (Rafael Gonzaga) #543348b71fa79e2] - benchmark: add stream.compose benchmark (jakecastelli) #5430893ee36e3a0] - benchmark: rename count to n (Rafael Gonzaga) #54271f2971b6f0b] - benchmark: change assert() to assert.ok() (Rafael Gonzaga) #54254f48f2c212c] - benchmark: support --help in CLI (Aviv Keller) #533580309b0520b] - benchmark: remove force option as force defaults to true (Yelim Koo) #54203b6e8305b2d] - benchmark: use assert.ok instead of assert (Rafael Gonzaga) #5417690c660d26a] - benchmark: add require-esm benchmark (Joyee Cheung) #521661b8584b52e] - benchmark,doc: add CPU scaling governor to perf (Rafael Gonzaga) #547230b9161b330] - benchmark,doc: mention bar.R to the list of scripts (Rafael Gonzaga) #5472284bf93b7ea] - buffer: allow invalid encoding in from (Robert Nagy) #54533d04246a0d7] - buffer: optimize byteLength for common encodings (Robert Nagy) #54342f36831f694] - buffer: optimize createFromString (Robert Nagy) #54324f5f40c8088] - buffer: optimize for common encodings (Robert Nagy) #5431976c37703be] - buffer: add JSDoc to blob bytes method (Roberto Simonini) #541173012d31404] - buffer: use faster integer argument check (Robert Nagy) #540893505782801] - buffer: make indexOf(byte) faster (Tobias Nießen) #53455d285fc1f68] - build: upgrade clang-format to v18 (Aviv Keller) #53957d288ec3b0a] - build: fix conflicting V8 object print flags (Daeyeon Jeong) #54785e862eecac9] - build: do not build with code cache for core coverage collection (Joyee Cheung) #54633f7a606eb96] - build: turn off-Wrestrict(Richard Lau) #5473771ca2665e4] - build: reclaim disk space on macOS GHA runner (jakecastelli) #5465882d8051c39] - build: don't clean obj.target directory if it doesn't exist (Joyee Cheung) #543376e550b1f26] - build: updateruffto0.5.2(Aviv Keller) #53909e2ea7b26d7] - build: fix ./configure --help format error (Zhenwei Jin) #53066eb2402d569] - build: enable building with shared uvwasi lib (Pooja D P) #4398745732314d4] - build: sync V8 warning cflags with BUILD.gn (Michaël Zasso) #528736e0a2bb54c] - build: harmonize Clang checks (Michaël Zasso) #528733f78d4eb28] - cli: add--expose-gcflag available toNODE_OPTIONS(Juan José) #53078a110409b2a] - console: use validateOneOf for colorMode validation (HEESEUNG) #54245231ab788ea] - crypto: reject dh,x25519,x448 in {Sign,Verify}Final (Huáng Jùnliàng) #53774a5984e4570] - crypto: return a clearer error when loading an unsupported pkcs12 (Tim Perry) #54485f287cd77bd] - crypto: remove unusedkHashTypesinternal (Antoine du Hamel) #546271fc904f8c4] - deps: update cjs-module-lexer to 1.4.1 (Node.js GitHub Bot) #5484695b55c39b1] - deps: update simdutf to 5.5.0 (Node.js GitHub Bot) #54434cf6ded5dd3] - deps: update cjs-module-lexer to 1.4.0 (Node.js GitHub Bot) #547137f8edce3f1] - deps: update c-ares to v1.33.1 (Node.js GitHub Bot) #545499a4a7b7ecc] - deps: update undici to 6.19.8 (Node.js GitHub Bot) #5445687ca1d7fee] - deps: update simdutf to 5.3.4 (Node.js GitHub Bot) #54312d3a743f182] - deps: update zlib to 1.3.0.1-motley-71660e1 (Node.js GitHub Bot) #53464926981aa9f] - deps: update zlib to 1.3.0.1-motley-c2469fd (Node.js GitHub Bot) #53464654c8d1fdc] - deps: update zlib to 1.3.0.1-motley-68e57e6 (Node.js GitHub Bot) #534642477e79172] - deps: update zlib to 1.3.0.1-motley-8b7eff8 (Node.js GitHub Bot) #534643d8113faf5] - deps: update zlib to 1.3.0.1-motley-e432200 (Node.js GitHub Bot) #53464ac294e3db4] - deps: update zlib to 1.3.0.1-motley-887bb57 (Node.js GitHub Bot) #53464239588b968] - deps: update c-ares to v1.33.0 (Node.js GitHub Bot) #541986e7de37ed3] - deps: update undici to 6.19.7 (Node.js GitHub Bot) #5428638aa9d6ea9] - deps: update acorn to 8.12.1 (Node.js GitHub Bot) #53465d30145f663] - deps: update undici to 6.19.5 (Node.js GitHub Bot) #54076c169d9c12b] - deps: update simdutf to 5.3.1 (Node.js GitHub Bot) #5419692f3447957] - doc: add missing EventSource docs to globals (Matthew Aitken) #550222879ce9681] - doc: fix broken Android building link (Niklas Wenzel) #54922096623b59a] - doc: add support link for aduh95 (Antoine du Hamel) #548661dfd238781] - doc: run license-builder (github-actions[bot]) #54854a6c748fffb] - doc: experimental flag for global accessible APIs (Chengzhong Wu) #54330d48a22fa14] - doc: addERR_INVALID_ADDRESStoerrors.md(Aviv Keller) #546614a840cecfa] - doc: add support link for mcollina (Matteo Collina) #54786ec22d86512] - doc: mark--conditionsCLI flag as stable (Guy Bedford) #5420977c702ca07] - doc: fix typo in recognizing-contributors (Tobias Nießen) #5482262953ef9fb] - doc: clarify--max-old-space-sizeand--max-semi-space-sizeunits (Alexandre ABRIOUX) #54477e2bab0f2b2] - doc: replace --allow-fs-read by --allow-fs-write in related section (M1CK431) #544279cbfd5b33a] - doc: add support link for marco-ippolito (Marco Ippolito) #5478953167b29ef] - doc: fix typo (Michael Dawson) #5464087f78a35f7] - doc: fix webcrypto.md AES-GCM backticks (Filip Skokan) #546217c83c15221] - doc: add documentation about os.tmpdir() overrides (Joyee Cheung) #546134bfd832d70] - doc: add support me link for anonrig (Yagiz Nizipli) #5461122a103e5ec] - doc: add alert on REPL from TCP socket (Rafael Gonzaga) #54594b6374c24e1] - doc: fix typo in styleText description (Rafael Gonzaga) #546162f5b98ee1f] - doc: add getHeapStatistics() property descriptions (Benji Marinacci) #54584482302b99b] - doc: fix information about including coverage files (Aviv Keller) #54527b3708e7df4] - doc: support collaborators - talk amplification (Michael Dawson) #54508c86fe23012] - doc: add note about shasum generation failure (Marco Ippolito) #54487d53e6cf755] - doc: fix capitalization in module.md (shallow-beach) #54488cdc6713f18] - doc: add esm examples to node:https (Alfredo González) #543991ac1fe4e65] - doc: fix error description of the max header size (Egawa Ryo) #54125244542b720] - doc: add git node security --cleanup (Rafael Gonzaga) #5438169fb71f54c] - doc: add note on weakness of permission model (Tobias Nießen) #5426883b2cb908b] - doc: add versions when--watch-preserve-outputwas added (Théo LUDWIG) #54328460fb49483] - doc: replace v19 mention in Current release (Rafael Gonzaga) #54361994b46a160] - doc: correct peformance entry types (Jason Zhang) #54263f142e668cb] - doc: fix typo in method name in the sea doc (Eliyah Sundström) #540279529a30dba] - doc: mark process.nextTick legacy (Marco Ippolito) #512807e25fabb91] - doc: add esm examples to node:http2 (Alfredo González) #542926a4f05e384] - doc: explicitly mention node:fs module restriction (Rafael Gonzaga) #5426953f5c54997] - doc: warn for windows build bug (Jason Zhang) #5421707bde054f3] - doc: make some parameters optional intracingChannel.traceCallback(Deokjin Kim) #5406862bf03b5f1] - doc: add esm examples to node:dns (Alfredo González) #54172fb2b19184b] - doc: add KevinEady as a triager (Chengzhong Wu) #5417924976bfba0] - doc: add esm examples to node:console (Alfredo González) #541084e7edc40f7] - doc: fix sea assets example (Sadzurami) #54192322b5d91e1] - doc: add links to security steward companies (Aviv Keller) #529816ab271510e] - doc: moveonreadoption fromsocket.connect()tonew net.socket()(sendoru) #5419439c30ea08f] - doc: move release key for Myles Borins (Richard Lau) #54059e9fc54804a] - doc: refresh instructions for building node from source (Liran Tal) #53768f131dc625a] - doc: add documentation for blob.bytes() method (jaexxin) #541148d41bb900b] - doc: add missing new lines to custom test reporter examples (Eddie Abbondanzio) #541522acaeaba77] - doc: update list of Triagers on theREADME.md(Antoine du Hamel) #54138fff8eb2792] - doc: expand troubleshooting section (Liran Tal) #53808402121520f] - doc: clarifyuseCodeCachesetting for cross-platform SEA generation (Yelim Koo) #53994272484b8b2] - doc: test for cli options (Aras Abbasi) #51623c4d0ca4710] - doc, build: fixup build docs (Aviv Keller) #548992e3e17748b] - doc, child_process: add esm snippets (Aviv Keller) #53616c40b4b4f27] - doc, meta: fix broken link inonboarding.md(Aviv Keller) #54886beff587b94] - doc, meta: add missing,toBUILDING.md(Aviv Keller) #54409c114585430] - doc, meta: replace command with link to keys (Aviv Keller) #537450843077a99] - doc, test: simplify test README table (Aviv Keller) #539712df7bc0e32] - doc,tools: enforce use ofnode:prefix (Antoine du Hamel) #539500dd4639391] - esm: fix support forURLinstances inimport.meta.resolve(Antoine du Hamel) #54690f0c55e206d] - fs: refactor rimraf to avoid using primordials (Yagiz Nizipli) #54834f568384bbd] - fs: refactor handleTimestampsAndMode to remove redundant call (HEESEUNG) #543692fb7cc9715] - fs: fix typings (Yagiz Nizipli) #53626596940cfa0] - http: reduce likelihood of race conditions on keep-alive timeout (jazelly) #548636e13a7ba02] - http: remove prototype primordials (Antoine du Hamel) #5369899f96eb3f7] - http2: remove prototype primordials (Antoine du Hamel) #5369641f5eacc1a] - https: only use default ALPNProtocols when appropriate (Brian White) #5441159a39520e1] - (SEMVER-MINOR) inspector: supportNetwork.loadingFailedevent (Kohei Ueno) #54246d1007fb1a9] - inspector: provide detailed info to fix DevTools frontend errors (Kohei Ueno) #541563b93507949] - (SEMVER-MINOR) inspector: add initial support for network inspection (Kohei Ueno) #53593fc37b801c8] - lib: remove unnecessary async (jakecastelli) #54829d86f24787b] - lib: make WeakRef safe in abort_controller (jazelly) #5479177c59224e5] - lib: add note about removingnode:sysmodule (Rafael Gonzaga) #54743b8c06dce02] - lib: ensure no holey array in fixed_queue (Jason Zhang) #54537b85c8ce1fc] - lib: refactor SubtleCrypto experimental warnings (Filip Skokan) #54620e84812c1b5] - lib: respect terminal capabilities on styleText (Rafael Gonzaga) #54389c004abaf17] - lib: replace spread operator with primordials function (YoonSoo_Shin) #54053b79aeabc4d] - lib: avoid for of loop and remove unnecessary variable in zlib (YoonSoo_Shin) #54258f4085363c6] - lib: fix unhandled errors in webstream adapters (Fedor Indutny) #542061ad857e748] - lib: fix typos in comments within internal/streams (YoonSoo_Shin) #5409302b36cbd2d] - (SEMVER-MINOR) lib: add EventSource Client (Aras Abbasi) #51575afbf2c0530] - lib,permission: support Buffer to permission.has (Rafael Gonzaga) #5410454af47395d] - meta: bump peter-evans/create-pull-request from 6.1.0 to 7.0.1 (dependabot[bot]) #54820a0c10f2ed9] - meta: addWindows ARM64to flaky-tests list (Aviv Keller) #5469327b06880e1] - meta: bump actions/setup-python from 5.1.1 to 5.2.0 (Rich Trott) #546918747af1037] - meta: update sccache to v0.8.1 (Aviv Keller) #547203f753d87a6] - meta: bump step-security/harden-runner from 2.9.0 to 2.9.1 (dependabot[bot]) #547046f103ae25d] - meta: bump actions/upload-artifact from 4.3.4 to 4.4.0 (dependabot[bot]) #547033e6a9bb04e] - meta: bump github/codeql-action from 3.25.15 to 3.26.6 (dependabot[bot]) #54702c666ebc4e4] - meta: fix links inSECURITY.md(Aviv Keller) #546964d361b3bed] - meta: fixcontributingcodeowners (Aviv Keller) #5464136931aa183] - meta: remind users to use a supported version in bug reports (Aviv Keller) #54481cf283d9ca7] - meta: run coverage-windows whenvcbuild.batupdated (Aviv Keller) #5441267ca397c9f] - meta: add test-permission-* CODEOWNERS (Rafael Gonzaga) #54267b61a2f5b79] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #54210dd8ab83667] - meta: add module label for the lib/internal/modules folder (Aviv Keller) #52858db78978d17] - meta: bumpactions/upload-artifactfrom 4.3.3 to 4.3.4 (dependabot[bot]) #54166ca808dd9e5] - meta: bumpactions/download-artifactfrom 4.1.7 to 4.1.8 (dependabot[bot]) #54167a35d980146] - meta: bump actions/setup-python from 5.1.0 to 5.1.1 (dependabot[bot]) #541653a103c3a17] - meta: bumpstep-security/harden-runnerfrom 2.8.1 to 2.9.0 (dependabot[bot]) #54169775ebbe0e8] - meta: bumpactions/setup-nodefrom 4.0.2 to 4.0.3 (dependabot[bot]) #541707d5dd6f1d1] - meta: bumpgithub/codeql-actionfrom 3.25.11 to 3.25.15 (dependabot[bot]) #5416880dd38dde3] - meta: bumpossf/scorecard-actionfrom 2.3.3 to 2.4.0 (dependabot[bot]) #5417190b632ee02] - module: warn on detection in typeless package (Geoffrey Booth) #521683011927aab] - node-api: add external buffer creation benchmark (Chengzhong Wu) #548777611093e11] - node-api: add support for UTF-8 and Latin-1 property keys (Mert Can Altin) #52984d65a8f377c] - node-api: remove RefBase and CallbackWrapper (Vladimir Morozov) #53590309cb1cbd2] - path: removeStringPrototypeCharCodeAtfromposix.extname(Aviv Keller) #545462859b4ba9a] - path: changeposix.jointo use array (Wiyeong Seo) #54331c61cee2138] - path: fix relative on Windows (Hüseyin Açacak) #53991329be5cc35] - path: use the correct name invalidateString(Benjamin Pasero) #53669a9837267cb] - repl: avoid interpreting 'npm' as a command when errors are recoverable (Shima Ryuhei) #54848d6a2317961] - repl: doc-deprecate instantiatingnode:replclasses withoutnew(Aviv Keller) #548427f09d983f3] - sea: don't set code cache flags when snapshot is used (Joyee Cheung) #5412085542b094c] - src: add Cleanable class to Environment (Gabriel Schulhof) #548808422064127] - src: remove redundant AESCipherMode (Tobias Nießen) #54438342c32483a] - src: handle errors correctly inpermission.cc(Michaël Zasso) #5454190ff714699] - src: returnv8::Objectfrom error constructors (Michaël Zasso) #54541872856cfcb] - src: improvebuffer.transcodeperformance (Yagiz Nizipli) #5415391936ebd12] - src: skip inspector wait in internal workers (Chengzhong Wu) #542199759049427] - src: account for OpenSSL unexpected version (Shelley Vohr) #5403887167fa248] - src: useargs.This()instead ofHolder(Michaël Zasso) #53474b05c56e4be] - src: simplifysize() == 0checks (Yagiz Nizipli) #53440d53e53699c] - src: fix execArgv in worker (theanarkh) #5302921776a34b5] - src: make sure pass theargvto worker threads (theanarkh) #528273aaae68ec8] - (SEMVER-MINOR) src,lib: add performance.uvMetricsInfo (Rafael Gonzaga) #54413ef1c0d7def] - src,permission: handle process.chdir on pm (Rafael Gonzaga) #531750c32918eef] - stream: change stream to use index instead offor...of(Wiyeong Seo) #54474337cd412b5] - stream: make checking pendingcb on WritableStream backward compatible (jakecastelli) #54142713fc0c9eb] - stream: throw TypeError when criteria fulfilled in getIterator (jakecastelli) #538259686153616] - stream: fix util.inspect for compression/decompressionStream (Mert Can Altin) #5228376110b0b43] - test: adjust test-tls-junk-server for OpenSSL32 (Michael Dawson) #549264092889371] - test: adjust tls test for OpenSSL32 (Michael Dawson) #549095d48543a16] - test: fix test-http2-socket-close.js (Hüseyin Açacak) #549008048c2eaed] - test: improve test-internal-fs-syncwritestream (Sunghoon) #54671597bc14c90] - test: deflake test-dns (Luigi Pinca) #54902a9fc8d9cfa] - test: fix test test-tls-dhe for OpenSSL32 (Michael Dawson) #549031b3b4f4a9f] - test: use correct file naming syntax forutil-parse-env(Aviv Keller) #537059db46b5ea3] - test: add missing await (Luigi Pinca) #54828124f715679] - test: move more url tests tonode:test(Yagiz Nizipli) #54636d2ec96150a] - test: strip color chars intest-runner-run(Giovanni Bucci) #54552747d9ae72e] - test: deflake test-http2-misbehaving-multiplex (Luigi Pinca) #548727b7687eadc] - test: remove dead code in test-http2-misbehaving-multiplex (Luigi Pinca) #5486060f5f5426d] - test: reduce test-esm-loader-hooks-inspect-wait flakiness (Luigi Pinca) #54827f5e77385c5] - test: reduce the allocation size in test-worker-arraybuffer-zerofill (James M Snell) #54839f26cf09d6b] - test: fix test-tls-client-mindhsize for OpenSSL32 (Michael Dawson) #54739c6f9afec94] - test: use platform timeout (jakecastelli) #545918f49b7c3ee] - test: reduce fs calls in test-fs-existssync-false (Yagiz Nizipli) #54815e2c69c9844] - test: move test-http-server-request-timeouts-mixed (James M Snell) #54841f7af8ca021] - test: fix volatile for CauseSegfault with clang (Ivan Trubach) #54325d1bae5ede5] - test: settest-worker-arraybuffer-zerofillas flaky (Yagiz Nizipli) #54802b5b5cc811f] - test: settest-http-server-request-timeouts-mixedas flaky (Yagiz Nizipli) #548029808feecac] - test: settest-single-executable-application-emptyas flaky (Yagiz Nizipli) #5480297d41c62e3] - test: settest-macos-app-sandboxas flaky (Yagiz Nizipli) #5480257ae68001c] - test: settest-fs-utimesas flaky (Yagiz Nizipli) #5480238afc4da03] - test: settest-runner-run-watchas flaky (Yagiz Nizipli) #5480268e19748a6] - test: settest-writewrapas flaky (Yagiz Nizipli) #54802e8cb03d530] - test: settest-async-context-frameas flaky (Yagiz Nizipli) #548023a56517220] - test: settest-esm-loader-hooks-inspect-waitas flaky (Yagiz Nizipli) #54802c98cd1227d] - test: settest-http2-large-fileas flaky (Yagiz Nizipli) #5480216176a6323] - test: settest-runner-watch-mode-complexas flaky (Yagiz Nizipli) #54802eed0537533] - test: settest-performance-functionas flaky (Yagiz Nizipli) #54802d0f208d2e9] - test: settest-debugger-heap-profileras flaky (Yagiz Nizipli) #5480268891a6363] - test: fixtest-process-load-env-filewhen path contains'(Antoine du Hamel) #545114f82673139] - test: refactor fs-watch tests due to macOS issue (Santiago Gimeno) #544983606c53fdc] - test: refactortest-esm-type-field-errors(Giovanni Bucci) #5436899566aea97] - test: improve output of child process utilities (Joyee Cheung) #54622ed2377c1a1] - test: fix test-tls-client-auth test for OpenSSL32 (Michael Dawson) #54610d2a7e45946] - test: update TLS test for OpenSSL 3.2 (Richard Lau) #54612a50bbca78a] - test: increase key size for ca2-cert.pem (Michael Dawson) #54599d7ac3262de] - test: update test-assert-typedarray-deepequal to use node:test (James M Snell) #54585916a73cd8f] - test: update test-assert to use node:test (James M Snell) #5458510bea1cef5] - test: merge ongc and gcutil into gc.js (tannal) #54355f145982436] - test: move a couple of tests over to using node:test (James M Snell) #54582229e102d20] - test: fix embedding test for Windows (Vladimir Morozov) #53659fcf82adef0] - test: use relative paths in test-cli-permission tests (sendoru) #541884c219b0235] - test: fix timeout not being cleared (Isaac-yz-Liu) #54242e446517a41] - test: refactortest-runner-module-mocking(Antoine du Hamel) #54233782a6a05ef] - test: use assert.{s,deepS}trictEqual() (Luigi Pinca) #54208d478db7adc] - test: set test-structuredclone-jstransferable non-flaky (Stefan Stojanovic) #54115c8587ec90d] - test: update wpt test for streams (devstone) #54129dbc26c2971] - test: fix typo in test (Sonny) #5413717b7ec4df3] - test: add initial pull delay and prototype pollution prevention tests (Sonny) #54061931ff4367a] - test: update wpt test (Mert Can Altin) #538141c1bd7ce52] - test: updateurlweb-platform tests (Yagiz Nizipli) #53472b048eaea5c] - test_runner: reimplementassert.okto allow stack parsing (Aviv Keller) #54776c981e61155] - test_runner: improve code coverage cleanup (Colin Ihrig) #548564f421b37da] - test_runner: use validateStringArray fortimers.enable()(Deokjin Kim) #4953427da75ae22] - test_runner: do not expose internal loader (Antoine du Hamel) #5410656cbc80d28] - test_runner: make mock_loader not confuse CJS and ESM resolution (Sung Ye In) #538468fd951f7c7] - test_runner: remove outdated comment (Colin Ihrig) #5414665b6fec3ba] - test_runner: run after hooks even if test is aborted (Colin Ihrig) #54151c0b4c8284c] - test_runner: added colors to dot reporter (Giovanni) #534503000e5df91] - test_runner: support module detection in module mocks (Geoffrey Booth) #53642f789f4c92d] - (SEMVER-MINOR) test_runner: support module mocking (Colin Ihrig) #5284882d1c36f51] - test_runner: display failed test stack trace with dot reporter (Mihir Bhansali) #526555358601e31] - timers: avoid generating holey internal arrays (Gürgün Dayıoğlu) #54771b6ed97c66d] - timers: document ref option for scheduler.wait (Paolo Insogna) #54605f524b8a28b] - timers: fix validation (Paolo Insogna) #54404bc020f7cb3] - (SEMVER-MINOR) tls: addallowPartialTrustChainflag (Anna Henningsen) #54790d0e6f9168e] - tls: remove prototype primordials (Antoine du Hamel) #53699f5c65d0be6] - tools: add readability/fn_size to filter (Rafael Gonzaga) #54744a47bb9b2c2] - tools: add util scripts to land and rebase PRs (Antoine du Hamel) #54656fe3155cefa] - tools: remove readability/fn_size rule (Rafael Gonzaga) #54663d6b9cc3acd] - tools: remove unused python files (Aviv Keller) #53928b5fbe9609c] - tools: remove header from c-ares license (Aviv Keller) #54335a7fdc608c6] - tools: add find pyenv path on windows (Marco Ippolito) #54314f90688cd5b] - tools: make undici updater build wasm from src (Michael Dawson) #54128a033dff2f2] - tty: initialize winSize array with values (Michaël Zasso) #54281e635e0956c] - typings: fix TypedArray to a global type (1ilsang) #54063b5bf08f31e] - typings: correct param type ofSafePromisePrototypeFinally(Wuli) #54727628ae4bde5] - typings: add util.styleText type definition (Rafael Gonzaga) #54252cc37401ea5] - typings: add missing binding functionwriteFileUtf8()(Jungku Lee) #54110728c3fd6f1] - url: modify pathToFileURL to handle extended UNC path (Early Riser) #54262b25563dfcb] - url: improve resolveObject with ObjectAssign (Early Riser) #54092eededd1ca8] - url: make URL.parse enumerable (Filip Skokan) #537204eb0749b6c] - (SEMVER-MINOR) url: implement parse method for safer URL parsing (Ali Hassan) #522809e1c2293bf] - vm: harden module type checks (Chengzhong Wu) #521622d90340cb3] - (SEMVER-MINOR) vm: introduce vanilla contexts via vm.constants.DONT_CONTEXTIFY (Joyee Cheung) #543944644d05ab5] - zlib: deprecate instantiating classes without new (Yagiz Nizipli) #54708ecdf6dd444] - zlib: simplify validators (Yagiz Nizipli) #54442v20.17.0: 2024-08-21, Version 20.17.0 'Iron' (LTS), @marco-ippolitoCompare Source
module: support require()ing synchronous ESM graphs
This release adds
require()support for synchronous ESM graphs underthe flag
--experimental-require-module.If
--experimental-require-moduleis enabled, and the ECMAScriptmodule being loaded by
require()meets the following requirements:require()will load the requested module as an ES Module, and returnthe module name space object. In this case it is similar to dynamic
import()but is run synchronously and returns the name space objectdirectly.
Contributed by Joyee Cheung in #51977
path: add
matchesGlobmethodGlob patterns can now be tested against individual paths via the
path.matchesGlob(path, pattern)method.Contributed by Aviv Keller in #52881
stream: expose DuplexPair API
The function
duplexPairreturns an array with two items,each being a
Duplexstream connected to the other side:Whatever is written to one stream is made readable on the other. It provides
behavior analogous to a network connection, where the data written by the client
becomes readable by the server, and vice-versa.
Contributed by Austin Wright in #34111
Other Notable Changes
8e64c02b19] - (SEMVER-MINOR) http: add diagnostics channelhttp.client.request.error(Kohei Ueno) #54054ae30674991] - meta: add jake to collaborators (jakecastelli) #540044a3ecbfc9b] - (SEMVER-MINOR) stream: implementminoption forReadableStreamBYOBReader.read(Mattias Buelens) #50888Commits
b3a2726cbc] - assert: use isError instead of instanceof in innerOk (Pietro Marchini) #53980c7e4c3daf4] - benchmark: add cpSync benchmark (Yagiz Nizipli) #53612a52de8c5ff] - bootstrap: print--helpmessage usingconsole.log(Jacob Hummer) #5146361b90e7c5e] - build: update gcovr to 7.2 and codecov config (Benjamin E. Coe) #54019a9c04eaa27] - build: ensure v8_pointer_compression_sandbox is enabled on 64bit (Shelley Vohr) #53884342a663d7a] - build: trigger coverage ci when updating codecov (Yagiz Nizipli) #539295727b4d129] - build: update codecov coverage build count (Yagiz Nizipli) #53929977af25870] - build: disable test-asan workflow (Michaël Zasso) #5384404798fb104] - build: fix build warning of c-ares under GN build (Cheng) #537505ec5e78574] - build: fix mac build error of c-ares under GN (Cheng) #536873d8721f0a4] - build: add version-specific library path for AIX (Richard Lau) #53585ffb0bd344d] - build, tools: drop leading/fromr2dir(Richard Lau) #53951a2d74f4c31] - build,tools: simplify upload of shasum signatures (Michaël Zasso) #53892993bb3b6e7] - child_process: fix incomplete prototype pollution hardening (Liran Tal) #53781137a2e5766] - cli: document--inspectport0behavior (Aviv Keller) #53782820e6e1737] - cli: updatenode.1to reflect Atom's sunset (Aviv Keller) #53734fa0e8d7b3b] - crypto: avoid std::function (Tobias Nießen) #53683460240c368] - crypto: make deriveBits length parameter optional and nullable (Filip Skokan) #53601ceb1d5e00a] - crypto: avoid taking ownership of OpenSSL objects (Tobias Nießen) #5346044268c27eb] - deps: update corepack to 0.29.3 (Node.js GitHub Bot) #54072496975ece0] - deps: update c-ares to v1.32.3 (Node.js GitHub Bot) #540205eea419349] - deps: update c-ares to v1.32.2 (Node.js GitHub Bot) #538658c8e3688c5] - deps: update googletest to4b21f1a(Node.js GitHub Bot) #5384278f6b34c77] - deps: update minimatch to 10.0.1 (Node.js GitHub Bot) #53841398f7acca3] - deps: update corepack to 0.29.2 (Node.js GitHub Bot) #53838fa8f99d90b] - deps: update simdutf to 5.3.0 (Node.js GitHub Bot) #53837a19b28336b] - deps: update ada to 2.9.0 (Node.js GitHub Bot) #537482f66c7e707] - deps: upgrade npm to 10.8.2 (npm team) #537992a2620e7c0] - deps: update googletest to34ad51b(Node.js GitHub Bot) #53157c01ce60ce7] - deps: update googletest to305e5a2(Node.js GitHub Bot) #53157832328ea01] - deps: update c-ares to v1.32.1 (Node.js GitHub Bot) #53753878e9a4ae7] - deps: update minimatch to 9.0.5 (Node.js GitHub Bot) #536464647e6b5c5] - deps: update c-ares to v1.32.0 (Node.js GitHub Bot) #5372230310bf887] - doc: move numCPUs require to top of file in cluster CJS example (Alfredo González) #5393236170eddca] - doc: update security-release process to automated one (Rafael Gonzaga) #5387755f5e76ba7] - doc: fix typo in technical-priorities.md (YoonSoo_Shin) #540941c0ccc0ca8] - doc: fix typo in diagnostic tooling support tiers document (Taejin Kim) #540586a5120ff0f] - doc: move GeoffreyBooth to TSC regular member (Geoffrey Booth) #54047ead05aad2a] - doc: fix typo in recognizing-contributors (Marco Ippolito) #5399025e59aebac] - doc: update boxstarter README (Aviv Keller) #53785a3183fb927] - doc: add info about prefix-only modules tomodule.builtinModules(Grigory) #5395489599e025f] - doc: removescroll-behavior: smooth;(Cloyd Lau) #53942139c62e40c] - doc: move --test-coverage-{ex,in}clude to proper location (Colin Ihrig) #53926233aba90ea] - doc: updateapi_assetsREADME for new files (Aviv Keller) #5367644a1cbe98a] - doc: add MattiasBuelens to collaborators (Mattias Buelens) #53895f5280ddbc5] - doc: fix casing of GitHub handle for two collaborators (Antoine du Hamel) #538579224e3eef1] - doc: update release-post nodejs.org script (Rafael Gonzaga) #53762f87eed8de4] - doc: move MylesBorins to emeritus (Myles Borins) #5376032ac80ae8d] - doc: add Rafael to the last security release (Rafael Gonzaga) #53769e71aa7e98b] - doc: use mock.callCount() in examples (Sébastien Règne) #53754f64db24312] - doc: clarify authenticity of plaintexts in update (Tobias Nießen) #5378451e736ac83] - doc: add option to have support me link (Michael Dawson) #533129804731d0f] - doc: updatescroll-padding-topto 4rem (Cloyd Lau) #53662229f7f8b8a] - doc: mention v8.setFlagsFromString to pm (Rafael Gonzaga) #5373198d59aa929] - doc: remove the last <pre> tag (Claudio W) #5374160ee41df08] - doc: exclude voting and regular TSC from spotlight (Michael Dawson) #53694c3536cfa99] - doc: fix releases guide for recent Git versions (Michaël Zasso) #537093b632e1871] - doc: requirenode:processin assert doc examples (Alfredo González) #53702754090c110] - doc: add additional explanation to the wildcard section in permissions (jakecastelli) #536644346de7267] - doc: mark NODE_MODULE_VERSION for Node.js 22.0.0 (Michaël Zasso) #53650758178bd72] - doc: include node.module_timer on available categories (Vinicius Lourenço) #53638e0d213df2b] - doc: fix module customization hook examples (Elliot Goodrich) #5363743ac5a2441] - doc: fix doc for correct usage with plan & TestContext (Emil Tayeb) #536155076f0d292] - doc: remove some news issues that are no longer (Michael Dawson) #53608c997dbef34] - doc: add issue for news from ambassadors (Michael Dawson) #5360716d55f1d25] - doc: add esm example for os (Leonardo Peixoto) #53604156fc536f2] - doc: clarify usage of coverage reporters (Eliphaz Bouye) #53523f8f247bc99] - doc: document addition testing options (Aviv Keller) #5356973860aca56] - doc: clarify that fs.exists() may return false for existing symlink (Tobias Nießen) #5356659c5c5c73e] - doc: note http.closeAllConnections excludes upgraded sockets (Rob Hogan) #535601cd3c8eb27] - doc: fix typo (EhsanKhaki) #533973c5e593e2a] - doc, meta: add PTAL to glossary (Aviv Keller) #53770f336e61257] - doc, test: tracing channel hasSubscribers getter (Thomas Hunter II) #529084187b81439] - doc, typings: events.once accepts symbol event type (René) #535423cdf94d403] - doc,tty: add documentation for ReadStream and WriteStream (jakecastelli) #535675d03f6fab7] - esm: move hooks test with others (Geoffrey Booth) #53558490f15a99b] - fs: ensure consistency for mkdtemp in both fs and fs/promises (YieldRay) #537768e64c02b19] - (SEMVER-MINOR) http: add diagnostics channelhttp.client.request.error(Kohei Ueno) #540540d70c79ebf] - lib: optimize copyError with ObjectAssign in primordials (HEESEUNG) #53999a4ff2ac0f0] - lib: improve cluster/primary code (Ehsan Khakifirooz) #53756c667fbd988] - lib: improve error message when index not found on cjs (Vinicius Lourenço) #5385951ba566171] - lib: decorate async stack trace in source maps (Chengzhong Wu) #53860d012dd3d29] - lib: remove path.resolve from permissions.js (Rafael Gonzaga) #537291e9ff50446] - lib: add toJSON to PerformanceMeasure (theanarkh) #536033a2d8bffa5] - lib: convert WeakMaps in cjs loader with private symbol properties (Chengzhong Wu) #52095e326342bd7] - meta: addsqliteto js subsystems (Alex Yang) #53911bfabfb4d17] - meta: move tsc member to emeritus (Michael Dawson) #54029ae30674991] - meta: add jake to collaborators (jakecastelli) #540046ca0cfc602] - meta: remove license for hljs (Aviv Keller) #53970e6ba121e83] - meta: make more bug-report information required (Aviv Keller) #537181864cddd0c] - meta: store actions secrets in environment (Aviv Keller) #53930c0b24e5071] - meta: move anonrig to tsc voting members (Yagiz Nizipli) #53888e60b089f7f] - meta: remove redudant logging from dep updaters (Aviv Keller) #53783bff6995ec3] - meta: change email address of anonrig (Yagiz Nizipli) #53829c2bb46020a] - meta: addnode_sqlite.cto PR label config (Aviv Keller) #53797b8d2bbc6d6] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #537580ad4b7c1f7] - meta: use HTML entities in commit-queue comment (Aviv Keller) #53744aa0c5c25d1] - meta: move regular TSC member to emeritus (Michael Dawson) #53693a5f5b4550b] - meta: bump codecov/codecov-action from 4.4.1 to 4.5.0 (dependabot[bot]) #53675f84e215c90] - meta: bump mozilla-actions/sccache-action from 0.0.4 to 0.0.5 (dependabot[bot]) #53674d5a9c249d3] - meta: bump github/codeql-action from 3.25.7 to 3.25.11 (dependabot[bot]) #5367339d6c780c8] - meta: bump actions/checkout from 4.1.6 to 4.1.7 (dependabot[bot]) #53672bb6fe38a34] - meta: bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (dependabot[bot]) #536715dcdfb5e6b] - meta: bump step-security/harden-runner from 2.8.0 to 2.8.1 (dependabot[bot]) #5367044d901a1c9] - meta: move member from TSC regular to emeriti (Michael Dawson) #535990c91186afa] - meta: warnings bypass deprecation cycle (Benjamin Gruenbaum) #53513bcd08bef60] - meta: prevent constant references to issues in versioning (Aviv Keller) #535647625dc4927] - module: fix submodules loaded by require() and import() (Joyee Cheung) #524876c4f4772e3] - module: tidy code and comments (Jacob Smith) #5243751b88faeac] - module: disallow CJS <-> ESM edges in a cycle from require(esm) (Joyee Cheung) #522644dae68ced4] - module: centralize SourceTextModule compilation for builtin loader (Joyee Cheung) #52291cad46afc07] - (SEMVER-MINOR) module: support require()ing synchronous ESM graphs (Joyee Cheung) #51977ac58c829a1] - node-api: add property keys benchmark (Chengzhong Wu) #54012e6a4104bd1] - node-api: rename nogc to basic (Gabriel Schulhof) #5383057b8b8e18e] - (SEMVER-MINOR) path: addmatchesGlobmethod (Aviv Keller) #52881bf6aa53299] - process: unify experimental warning messages (Aviv Keller) #537042a3ae16e62] - src: expose LookupAndCompile with parameters (Shelley Vohr) #538860109f9c961] - src: simplify AESCipherTraits::AdditionalConfig (Tobias Nießen) #538906bafe8a457] - src: fix -Wshadow warning (Shelley Vohr) #538854c36d6c47a] - src: fix slice of slice of file-backed Blob (Josh Lee) #53972848c2d59fb] - src: cache invariant code motion (Rafael Gonzaga) #53879acaf5dd1cd] - src: avoid strcmp in ImportJWKAsymmetricKey (Tobias Nießen) #53813b71250aaf9] - src: replace ToLocalChecked uses with ToLocal in node-file (James M Snell) #53869aff9a5339a] - src: fix env-file flag to ignore spaces before quotes (Mohit Malhotra) #53786e352a4ef27] - src: update outdated references to spec sections (Tobias Nießen) #538321a4da22a60] - src: use Maybe<void> in ManagedEVPPKey (Tobias Nießen) #538110c24b91bd2] - src: fix error handling in ExportJWKAsymmetricKey (Tobias Nießen) #5376781cd84c716] - src: use Maybe<void> in node::crypto::error (Tobias Nießen) #537668135f3616d] - src: fix typo in node.h (Daeyeon Jeong) #53759e6d735a997] - src: document the Node.js context embedder data (Joyee Cheung) #53611584beaa2ed] - src: zero-initialize data that are copied into the snapshot (Joyee Cheung) #53563ef5dabd8c6] - src: fix Worker termination when '--inspect-brk' is passed (Daeyeon Jeong) #5372462f4f6f48e] - src: remove ArrayBufferAllocator::Reallocate override (Shu-yu Guo) #52910a6dd8643fa] - src: reduce unnecessary serialization of CLI options in C++ (Joyee Cheung) #5245131fdb881cf] - src,lib: expose getCategoryEnabledBuffer to use on node.http (Vinicius Lourenço) #536022eea8502e1] - src,test: further cleanup references to osx (Daniel Bayley) #538207c21bb99a5] - (SEMVER-MINOR) stream: expose DuplexPair API (Austin Wright) #3411156299f7309] - stream: improve inspector ergonomics (Benjamin Gruenbaum) #538009b82b15230] - stream: update ongoing promise in async iterator return() method (Mattias Buelens) #526574a3ecbfc9b] - (SEMVER-MINOR) stream: implementminoption forReadableStreamBYOBReader.read(Mattias Buelens) #50888bd996bf694] - test: do not swallow uncaughtException errors in exit code tests (Meghan Denny) #5403977761af077] - test: move shared module totest/common(Rich Trott) #54042bec88ce138] - test: skip sea tests with more accurate available disk space estimation (Chengzhong Wu) #539969a98ad47cd] - test: remove unnecessary console log (KAYYY) #53812364d09cf0a] - test: add comments and rename test for timer robustness (Rich Trott) #540085c5093dc0a] - test: add test for one arg timers to increase coverage (Carlos Espa) #5400743ede1ae0b] - test: mark 'test/parallel/test-sqlite.js' as flaky (Colin Ihrig) #540310ad783cb42] - test: mark test-pipe-file-to-http as flaky (jakecastelli) #53751f2b4fd3544] - test: compare paths on Windows without considering case (Early Riser) #539932e69e5f4d2] - test: skip sea tests in large debug builds (Chengzhong Wu) #5391856c26fe6e5] - test: skip --title check on IBM i (Abdirahim Musse) #539526d0b8ded00] - test: reduce flakiness oftest-assert-esm-cjs-message-verify(Antoine du Hamel) #53967edb75aebd7] - test: usePYTHONexecutable from env inassertSnapshot(Antoine du Hamel) #53938be94e470a6] - test: deflake test-blob-file-backed (Luigi Pinca) #53920c2b0dcd165] - test: un-set inspector-async-hook-setup-at-inspect-brk as flaky (Abdirahim Musse) #536926dc18981ac] - test: use python3 instead of python in pummel test (Mathis Wiehl) #53057662bf524e1] - test: do not assume cwd in snapshot tests (Antoine du Hamel) #53146a07526702a] - test: fix OpenSSL version checks (Richard Lau) #535032b70018d11] - test: refactor, add assertion to http-request-end (jakecastelli) #53411c0262c1561] - test_runner: switched to internal readline interface (Emil Tayeb) #54000fb7342246c] - test_runner: do not throw on mocked clearTimeout() (Aksinya Bykova) #54005367f9e77f3] - test_runner: cleanup global event listeners after run (Eddie Abbondanzio) #53878206c668ee7] - test_runner: remove plan option from run() (Colin Ihrig) #538348660d481e5] - tls: add setKeyCert() to tls.Socket (Brian White) #536369c5beabd83] - tools: fixSLACK_TITLEin invalid commit workflow (Antoine du Hamel) #539124dedf2aead] - tools: update lint-md-dependencies (Node.js GitHub Bot) #53840642d5c5d30] - tools: use v8_features.json to populate config.gypi (Cheng) #53749031206544d] - tools: update lint-md-dependencies to unified@11.0.5 (Node.js GitHub Bot) #535558404421ea6] - tools: replace reference to NodeMainInstance with SnapshotBuilder (codediverdev) #535442d8490fed5] - typings: addfs_dirtypes (Yagiz Nizipli) #53631325eae0b3f] - url: fix typo (KAYYY) #538277fc45f5e3f] - url: reduce unnecessary string copies (Yagiz Nizipli) #536281d961facf1] - url: add missing documentation forURL.parse()(Yagiz Nizipli) #53733ce877c6d0f] - util: fix crashing when emitting new Buffer() deprecation warning #53075 (Aras Abbasi) #53089d6d04279ca] - worker: allow copied NODE_OPTIONS in the env setting (Joyee Cheung) #53596v20.16.0: 2024-07-24, Version 20.16.0 'Iron' (LTS), @marco-ippolitoCompare Source
process: add process.getBuiltinModule(id)
process.getBuiltinModule(id)provides a way to load built-in modulesin a globally available function. ES Modules that need to support
other environments can use it to conditionally load a Node.js built-in
when it is run in Node.js, without having to deal with the resolution
error that can be thrown by
importin a non-Node.js environment orhaving to use dynamic
import()which either turns the module intoan asynchronous module, or turns a synchronous API into an asynchronous one.
If
idspecifies a built-in module available in the current Node.js process,process.getBuiltinModule(id)method returns the corresponding built-inmodule. If
iddoes not correspond to any built-in module,undefinedis returned.
process.getBuiltinModule(id)accepts built-in module IDs that are recognizedby
module.isBuiltin(id).The references returned by
process.getBuiltinModule(id)always point tothe built-in module corresponding to
ideven if users modifyrequire.cacheso thatrequire(id)returns something else.Contributed by Joyee Cheung in #52762
doc: doc-only deprecate OpenSSL engine-based APIs
OpenSSL 3 deprecated support for custom engines with a recommendation to switch to its new provider model.
The
clientCertEngineoption forhttps.request(),tls.createSecureContext(), andtls.createServer(); theprivateKeyEngineandprivateKeyIdentifierfortls.createSecureContext();andcrypto.setEngine()all depend on this functionality from OpenSSL.Contributed by Richard Lau in #53329
inspector: fix disable async hooks on Debugger.setAsyncCallStackDepth
Debugger.setAsyncCallStackDepthwas previously calling the enable function by mistake. As a result, when profiling using Chrome DevTools, the async hooks won't be turned off properly after receivingDebugger.setAsyncCallStackDepthwith depth 0.Contributed by Joyee Cheung in #53473
Other Notable Changes
09e2191432] - (SEMVER-MINOR) buffer: add .bytes() method to Blob (Matthew Aitken) #53221394e00f41c] - (SEMVER-MINOR) doc: add context.assert docs (Colin Ihrig) #53169a8601efa5e] - (SEMVER-MINOR) doc: improve explanation about built-in modules (Joyee Cheung) #527625e76c258f7] - doc: add StefanStojanovic to collaborators (StefanStojanovic) #531185e694026f1] - doc: add Marco Ippolito to TSC (Rafael Gonzaga) #53008f3ba1eb72f] - (SEMVER-MINOR) net: add new net.server.listen tracing channel (Paolo Insogna) #531362bcce3255b] - (SEMVER-MINOR) src,permission: --allow-wasi & prevent WASI exec (Rafael Gonzaga) #53124a03a4c7bdd] - (SEMVER-MINOR) test_runner: add context.fullName (Colin Ihrig) #5316969b828f5a5] - (SEMVER-MINOR) util: support--no-for argument with boolean type for parseArgs (Zhenwei Jin) #53107Commits
76fd0ea92e] - assert,util: correct comparison when both contain same reference (Daniel Lemire) #5343165308b6692] - benchmark: fix api restriction for the permission category (Ryan Tsien) #515281e2bc2c2d0] - benchmark: fix napi/ref addon (Michaël Zasso) #5323309e2191432] - (SEMVER-MINOR) buffer: add .bytes() method to Blob (Matthew Aitken) #53221e1951a4804] - build: fix spacing before NINJA_ARGS (jakecastelli) #5318176f3bb3460] - build: generate binlog in out directories (Chengzhong Wu) #53325eded0c187b] - build: support python 3.13 (Chengzhong Wu) #531901e57c67fdb] - build: update ruff to v0.4.5 (Yagiz Nizipli) #5318028e71ede63] - build: add--skip-teststotest-ci-jstarget (Antoine du Hamel) #53105bb06778a65] - build: fix building embedtest in GN build (Cheng) #53145117ff5f139] - build: use broader detection for 'help' (Aviv Keller) #530459aa896e7f5] - build: fix -j propagation to ninja (Tobias Nießen) #53088acdbc78955] - build: exit on unsupported host OS for Android (Mohammed Keyvanzadeh) #52882bf3d94478e] - build: fix--enable-d8builds (Richard Lau) #5310699da7d7237] - build: set "clang" in config.gypi in GN build (Cheng) #530049446278f03] - crypto: improve GetECGroupBits signature (Tobias Nießen) #53364dc2a4af68d] - crypto: fix propagation of "memory limit exceeded" (Tobias Nießen) #53300c5174f5e60] - deps: update c-ares to v1.31.0 (Node.js GitHub Bot) #5355428e932dc7a] - deps: update undici to 6.19.2 (Node.js GitHub Bot) #53468e4f9c663c4] - deps: update undici to 6.19.1 (Node.js GitHub Bot) #53468171dc50fdc] - deps: update undici to 6.19.1 (Node.js GitHub Bot) #534686bb6a9100d] - deps: update undici to 6.19.0 (Node.js GitHub Bot) #53468815d71b4cd] - deps: update acorn-walk to 8.3.3 (Node.js GitHub Bot) #534668b5f1d765a] - deps: update zlib to 1.3.0.1-motley-209717d (Node.js GitHub Bot) #53156fc73da6f50] - deps: update c-ares to v1.30.0 (Node.js GitHub Bot) #53416a6b803abd6] - deps: update undici to 6.18.2 (Node.js GitHub Bot) #532550f235535bb] - deps: update ada to 2.8.0 (Node.js GitHub Bot) #5325463407269a8] - deps: update corepack to 0.28.2 (Node.js GitHub Bot) #532537a126e8773] - deps: update c-ares to 1.29.0 (Node.js GitHub Bot) #531550c8fcceefa] - deps: upgrade npm to 10.8.1 (npm team) #5320723866979f2] - deps: update undici to 6.18.1 (Node.js GitHub Bot) #530734987a00142] - deps: update undici to 6.18.0 (Node.js GitHub Bot) #53073af226d0d9c] - deps: update undici to 6.17.0 (Node.js GitHub Bot) #53034c9c6bf8bfb] - deps: update undici to 6.16.1 (Node.js GitHub Bot) #52948b32b62d590] - deps: update undici to 6.15.0 (Matthew Aitken) #527636e6641bea2] - deps: update googletest to33af80a(Node.js GitHub Bot) #53053aa96fbe03e] - deps: update zlib to 1.3.0.1-motley-4f653ff (Node.js GitHub Bot) #53052ba3310ded5] - deps: upgrade npm to 10.8.0 (npm team) #530148537a2aecf] - doc: recommend not using libuv node-api function (Michael Dawson) #53521c13600f0db] - doc: add additional guidance for PRs to deps (Michael Dawson) #534997c3edd952e] - doc: only apply content-visibility on all.html (Filip Skokan) #53510ac5be14ed8] - doc: update the description of the return type for options.filter (Zhenwei Jin) #52742cac300e351] - doc: remove first timer badge (Aviv Keller) #53338feb61459fd] - doc: add Buffer.from(string) to functions that use buffer pool (Christian Bates-White) #528019e0a6e938b] - doc: add initial text for ambassadors program (Michael Dawson) #5285755ac53cb0b] - doc: define more cases for stream event emissions (Aviv Keller) #533177128e0f9c9] - doc: remove mentions of policy model from security info (Aviv Keller) #532493e290433df] - doc: fix mistakes in the moduleloadhook api (István Donkó) #533493445c08144] - doc: doc-only deprecate OpenSSL engine-based APIs (Richard Lau) #53329a3e8cda019] - doc: mark --heap-prof and related flags stable (Joyee Cheung) #533430b9daaae4d] - doc: mark --cpu-prof and related flags stable (Joyee Cheung) #53343daf91834f6] - doc: remove IRC from man page (Tobias Nießen) #533444246c8fa31] - doc: fix broken link instatic-analysis.md(Richard Lau) #53345955b98a0e4] - doc: remove cases for keys not containing "*" in PATTERN_KEY_COMPARE (Maarten Zuidhoorn) #532157832b1815f] - doc: add err param to fs.cp callback (Feng Yu) #5323401533df87f] - doc: adderrparam to fs.copyFile callback (Feng Yu) #53234b081bc7d5e] - doc: reserve 128 for Electron 32 (Keeley Hammond) #532036b8460b560] - doc: add note to ninjia build for macOS using -jn flag (jakecastelli) #53187394e00f41c] - (SEMVER-MINOR) doc: add context.assert docs (Colin Ihrig) #53169c143d61d0e] - doc: include ESM import for HTTP (Aviv Keller) #53165a8601efa5e] - (SEMVER-MINOR) doc: improve explanation about built-in modules (Joyee Cheung) #52762560392de3d] - doc: fix minor grammar and style issues in SECURITY.md (Rich Trott) #531689f8e34323d] - doc: mention pm is not enforced when using fd (Rafael Gonzaga) #531253ac775b015] - doc: fix format inesm.md(Pop Moore) #5317041b08bdcf7] - doc: fix wrong variable name in example oftimers.tick()(Deokjin Kim) #53147698ea7aa5a] - doc: fix wrong function name in example ofcontext.plan()(Deokjin Kim) #53140a99359d79d] - doc: add note for windows users and symlinks (Aviv Keller) #5311761ec2af292] - doc: move all TLS-PSK documentation to its section (Alba Mendez) #357175e76c258f7] - doc: add StefanStojanovic to collaborators (StefanStojanovic) #531181dc406ba62] - doc: improve ninja build for --built-in-modules-path (jakecastelli) #530072854585662] - doc: avoid hiding by navigation bar in anchor jumping (Cloyd Lau) #451313f432f829f] - doc: remove unavailable youtube link in pull requests (Deokjin Kim) #529825e694026f1] - doc: add Marco Ippolito to TSC (Rafael Gonzaga) #53008231e44043e] - doc: add missing supported timer values intimers.enable()(Deokjin Kim) #52969b8944f6938] - doc, http: addrejectNonStandardBodyWritesoption, clear its behaviour (jakecastelli) #533960354584738] - doc, meta: organize contributing to Node-API guide (Aviv Keller) #532439ae3719c4e] - doc, meta: use markdown rather than HTML in CONTRIBUTING.md (Aviv Keller) #53235621e073c96] - fs: do not crash if the watched file is removed while setting up watch (Matteo Collina) #53452f00ee1c377] - fs: fix cp dir/non-dir mismatch error messages (Mathis Wiehl) #53150655b960418] - http2: reject failed http2.connect when used with promisify (ehsankhfr) #53475eb0b68bb29] - inspector: fix disable async hooks on Debugger.setAsyncCallStackDepth (Joyee Cheung) #534731c0b89be4c] - lib: fix typo in comment (codediverdev) #5354355922d9cb0] - lib: remove the unused code (theanarkh) #5346306374ef96b] - lib: fix naming convention ofSymbol(Deokjin Kim) #53387d1a780039a] - lib: fix timer leak (theanarkh) #533378689ce4b41] - lib: fix misleading argument of validateUint32 (Tobias Nießen) #5330757d7bbf624] - lib: fix the name of the fetch global function (Gabriel Bota) #5322723f086c363] - lib: do not call callback if socket is closed (theanarkh) #52829f325c54c80] - meta: use correct source for workflow in PR (Aviv Keller) #534908172412dbe] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #5348001b61d65d3] - meta: fix typo in dependency updates (Aviv Keller) #5347112f5737cd3] - meta: bump step-security/harden-runner from 2.7.1 to 2.8.0 (dependabot[bot]) #53245102e4eee3c] - meta: bump ossf/scorecard-action from 2.3.1 to 2.3.3 (dependabot[bot]) #532485ba185580d] - meta: bump actions/checkout from 4.1.4 to 4.1.6 (dependabot[bot]) #532479d186cce2b] - meta: bump github/codeql-action from 3.25.3 to 3.25.7 (dependabot[bot]) #5324629ab74009e] - meta: bump codecov/codecov-action from 4.3.1 to 4.4.1 (dependabot[bot]) #53244bd4b593f30] - meta: removeinitializeCommandfrom devcontainer (Aviv Keller) #5313761b1f573cf] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #53065f3ba1eb72f] - (SEMVER-MINOR) net: add new net.server.listen tracing channel (Paolo Insogna) #5313667333a5796] - (SEMVER-MINOR) process: add process.getBuiltinModule(id) (Joyee Cheung) #52762092aa09eb3] - repl: fix await object patterns without values (Luke Haas) #53331554d25f526] - src: resetprocess.versionsduring pre-execution (Richard Lau) #53444a0879ad628] - src: fix dynamically linked OpenSSL version (Richard Lau) #5345691c05f34de] - src: removeSetEncodingfrom StringEncoder (Yagiz Nizipli) #534414f49384be5] - src: fix typo in env.cc (EhsanKhaki) #534189730d1e186] - src: avoid strcmp in favor of operator== (Tobias Nießen) #53439436ad8ceb9] - src: print v8::OOMDetails::detail when it's available (Joyee Cheung) #53360f773b289eb] - src: fix IsIPAddress for IPv6 (Hüseyin Açacak) #534007705efd860] - src: fix permission inspector crash (theanarkh) #53389260d8d9ae1] - src: use __FUNCSIG__ on Windows in backtrace (Joyee Cheung) #531353b79e9c24e] - src: fix external module env and kDisableNodeOptionsEnv (Rafael Gonzaga) #5290532839c63cb] - src: reduce unnecessaryGetCwdcalls (Yagiz Nizipli) #53064840dd092ce] - src: improve node::Dotenv declarations (Tobias Nießen) #529732bcce3255b] - (SEMVER-MINOR) src,permission: --allow-wasi & prevent WASI exec (Rafael Gonzaga) #53124e092c62a22] - stream: update outdated highwatermark doc (Jay Kim) #5349471af3e8172] - stream: support dispose in writable (Benjamin Gruenbaum) #4854733a15be32f] - stream: callback should be called when pendingcb is 0 (jakecastelli) #534381b46ebbf69] - stream: make sure _destroy is called (jakecastelli) #532139f95d41947] - stream: prevent stream unexpected pause when highWaterMark set to 0 (jakecastelli) #53261d02651c9d6] - stream: micro-optimize writable condition (Orgad Shaneh) #53189324070c410] - stream: fix memory usage regression in writable (Orgad Shaneh) #5318848138afd35] - stream: fixes for webstreams (Mattias Buelens) #5116824f078a22b] - test: marktest-benchmark-cryptoas flaky (Antoine du Hamel) #529550d69ce3474] - test: extend env fortest-node-output-errors(Richard Lau) #535351aaaad8518] - test: update encoding web-platform tests (Yagiz Nizipli) #5347754e0ba8771] - test: check against run-time OpenSSL version (Richard Lau) #53456059e47c320] - test: update tests for OpenSSL 3.0.14 (Richard Lau) #5337349e6f33021] - test: fix test-http-server-keepalive-req-gc (Etienne Pierre-doray) #53292292d13a289] - test: update TLS tests for OpenSSL 3.2 (Richard Lau) #5338482017c90bb] - test: fix test when compiled without engine support (Richard Lau) #53232a54090b385] - test: update TLS trace tests for OpenSSL >= 3.2 (Richard Lau) #532293a1693421d] - test: fix Windows native test suites (Stefan Stojanovic) #531732b07d01272] - test: skiptest-setproctitlewhenpsis not available (Antoine du Hamel) #531040051d1c83d] - test: increase allocation so it fails for the test (Adam Majer) #53099048cbe3304] - test: remove timers from test-tls-socket-close (Luigi Pinca) #530198653d9223e] - test: replace.substrwith.slice(Antoine du Hamel) #53070d74bda4241] - test: add AbortController to knownGlobals (Luigi Pinca) #53020f29e1e9838] - test: skip unstable shadow realm gc tests (Chengzhong Wu) #52855dfa498697e] - test,doc: enable running embedtest for Windows (Vladimir Morozov) #526460381817f1d] - test_runner: calculate executed lines using source map (Moshe Atlow) #533159d3699b5b0] - test_runner: handle file rename and deletion under watch mode (jakecastelli) #531149a36258ca0] - test_runner: refactor to use min/max ofvalidateInteger(Deokjin Kim) #53148a03a4c7bdd] - (SEMVER-MINOR) test_runner: add context.fullName (Colin Ihrig) #53169a72157077a] - test_runner: fix t.assert methods (Colin Ihrig) #53049ba764db9ab] - test_runner: avoid error when coverage line not found (Moshe Atlow) #530003a4a0ebd06] - test_runner,doc: align documentation with actual stdout/stderr behavior (Moshe Atlow) #531316e6646bdd5] - tls: check result of SSL_CTX_set_*_proto_version (Tobias Nießen) #534592aceed4297] - tls: avoid taking ownership of OpenSSL objects (Tobias Nießen) #53436faa5cac18c] - tls: use SSL_get_peer_tmp_key (Tobias Nießen) #5336668fcbb635e] - tls: fix negative sessionTimeout handling (Tobias Nießen) #5300261a1c43ef1] - tools: fix skip detection of test runner output (Richard Lau) #5354553a7b6e1c0] - tools: fix c-ares update script (Marco Ippolito) #534143bd5f46a15] - tools: update lint-md-dependencies (Node.js GitHub Bot) #53158daab9e170f] - tools: do not run Corepack code before it's reviewed (Antoine du Hamel) #53405d18a67f937] - tools: use Ubuntu 24.04 and Clang on GitHub actions (Michaël Zasso) #53212e9b7a52848] - tools: add stream label on PR when related files being changed in lib (jakecastelli) #5326904d78dd56d] - tools: remove no-goma arg from make-v8 script (Michaël Zasso) #5333637e725a500] - tools: use sccache Github action (Moshe Atlow) #533162a1fde7e32] - tools: update error message for Type Error (Aviv Keller) #530478f5fb4192d] - Revert "tools: add --certify-safe to nci-ci" (Antoine du Hamel) #5309869b828f5a5] - (SEMVER-MINOR) util: support--no-for argument with boolean type for parseArgs (Zhenwei Jin) #531071a2f3ab4f5] - watch: fix variable naming (jakecastelli) #53101Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.
31ca3bdc9fto3bd7e0ea12chore(deps): update node.js to v20.18.3to chore(deps): update node.js to v20.19.03bd7e0ea12toe57bd1b2e1e57bd1b2e1tob4b7167b78chore(deps): update node.js to v20.19.0to chore(deps): update node.js to v20.19.1b4b7167b78to86ab94684dchore(deps): update node.js to v20.19.1to chore(deps): update node.js to v20.19.2View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.