chore(deps): update node.js to v22
This PR contains the following updates:
| Package | Type | Update | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|---|---|
| node | final | major | 20.3 -> 22.14.0 |
||||
| @types/node (source) | devDependencies | major | ^20.16.11 -> ^22.14.1 |
Release Notes
nodejs/node (node)
v22.14.0: 2025-02-11, Version 22.14.0 'Jod' (LTS), @βaduh95
Notable Changes
- [
82a9000e9e] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #β56566 - [
b7fe54fc88] - (SEMVER-MINOR) fs: allowexcludeoption in globs to accept glob patterns (Daeyeon Jeong) #β56489 - [
3ac92ef607] - (SEMVER-MINOR) lib: add typescript support to STDIN eval (Marco Ippolito) #β56359 - [
1614e8e7bc] - (SEMVER-MINOR) module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX (Marco Ippolito) #β56610 - [
6d6cffa9cc] - (SEMVER-MINOR) module: addfindPackageJSONutil (Jacob Smith) #β55412 - [
d35333ae18] - (SEMVER-MINOR) process: add process.ref() and process.unref() methods (James M Snell) #β56400 - [
07ff3ddcb5] - (SEMVER-MINOR) sqlite: support TypedArray and DataView inStatementSync(Alex Yang) #β56385 - [
94d3fe1b62] - (SEMVER-MINOR) src: add --disable-sigusr1 to prevent signal i/o thread (Rafael Gonzaga) #β56441 - [
5afffb4415] - (SEMVER-MINOR) src,worker: add isInternalWorker (Carlos Espa) #β56469 - [
697a851fb3] - (SEMVER-MINOR) test_runner: add TestContext.prototype.waitFor() (Colin Ihrig) #β56595 - [
047537b48c] - (SEMVER-MINOR) test_runner: add t.assert.fileSnapshot() (Colin Ihrig) #β56459 - [
926cf84e95] - (SEMVER-MINOR) test_runner: add assert.register() API (Colin Ihrig) #β56434 - [
c658a8afdf] - (SEMVER-MINOR) worker: add eval ts input (Marco Ippolito) #β56394
Commits
- [
bad1ad8650] - assert: make myers_diff function more performant (Giovanni Bucci) #β56303 - [
e222e36f3b] - assert: make partialDeepStrictEqual work with urls and File prototypes (Giovanni Bucci) #β56231 - [
e232789fe2] - assert: show diff when doing partial comparisons (Giovanni Bucci) #β56211 - [
c99de1fdcf] - assert: make partialDeepStrictEqual throw when comparing [0] with [-0] (Giovanni) #β56237 - [
2386fd5840] - benchmark: add validateStream to styleText bench (Rafael Gonzaga) #β56556 - [
b197dfa7ec] - build: fix GN build for ngtcp2 (Cheng) #β56300 - [
2a3cdd34ff] - build: test macos-13 on GitHub actions (MichaΓ«l Zasso) #β56307 - [
12f716be0a] - build: build v8 with -fvisibility=hidden on macOS (Joyee Cheung) #β56275 - [
c5ca15bd34] - child_process: fix parsing messages with splitted length field (Maksim Gorkov) #β56106 - [
8346b8fc2c] - crypto: add missing return value check (Michael Dawson) #β56615 - [
82a9000e9e] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #β56566 - [
890eef20a1] - crypto: fix checkPrime crash with large buffers (Santiago Gimeno) #β56559 - [
5edb7b5e87] - crypto: fix warning of ignoring return value (Cheng) #β56527 - [
b89f123a0b] - crypto: make generatePrime/checkPrime interruptible (James M Snell) #β56460 - [
63c1859e01] - deps: update corepack to 0.31.0 (Node.js GitHub Bot) #β56795 - [
a48430d4d3] - deps: move inspector_protocol to deps (Chengzhong Wu) #β56649 - [
74cccc824f] - deps: macro ENODATA is deprecated in libc++ (Cheng) #β56698 - [
fa869ea0f2] - deps: fixup some minor coverity warnings (James M Snell) #β56612 - [
1a4fa2b015] - deps: update amaro to 0.3.0 (Node.js GitHub Bot) #β56568 - [
b47076fd82] - deps: update amaro to 0.2.2 (Node.js GitHub Bot) #β56568 - [
46bd4b8731] - deps: update simdutf to 6.0.3 (Node.js GitHub Bot) #β56567 - [
8ead9c693b] - deps: update simdutf to 5.7.2 (Node.js GitHub Bot) #β56388 - [
18d4b502af] - deps: update amaro to 0.2.1 (Node.js GitHub Bot) #β56390 - [
d938d7cc86] - deps: update googletest to7d76a23(Node.js GitHub Bot) #β56387 - [
9761e7dccb] - deps: update googletest toe54519b(Node.js GitHub Bot) #β56370 - [
8319dc6bc5] - deps: update ngtcp2 to 1.10.0 (Node.js GitHub Bot) #β56334 - [
6eacd19d6a] - deps: update simdutf to 5.7.0 (Node.js GitHub Bot) #β56332 - [
28bec2dda3] - diagnostics_channel: capture console messages (Stephen Belanger) #β56292 - [
d519d33502] - doc: update macOS and Xcode versions for releases (MichaΓ«l Zasso) #β56337 - [
fcfe650507] - doc: add note for features usingInternalWorkerwith permission model (Antoine du Hamel) #β56706 - [
efbba182b5] - doc: add entry to changelog about SQLite Session Extension (Bart Louwers) #β56318 - [
31bf9c7dd9] - doc: move anatoli to emeritus (Michael Dawson) #β56592 - [
6096e38c7c] - doc: fix styles of the expandable TOC (Antoine du Hamel) #β56755 - [
d423638281] - doc: add "Skip to content" button (Antoine du Hamel) #β56750 - [
edeb157d75] - doc: improve accessibility of expandable lists (Antoine du Hamel) #β56749 - [
1a79e87687] - doc: add note regarding commit message trailers (Dario Piotrowicz) #β56736 - [
927c7e47e4] - doc: fix typo in example code for util.styleText (Robin Mehner) #β56720 - [
fade522538] - doc: fix inconsistencies inWeakSetandWeakMapcomparison details (Shreyans Pathak) #β56683 - [
55533bf147] - doc: add RafaelGSS as latest sec release stewards (Rafael Gonzaga) #β56682 - [
8e978bdee1] - doc: clarify cjs/esm diff inqueueMicrotask()vsprocess.nextTick()(Dario Piotrowicz) #β56659 - [
ae360c30dc] - doc:WeakSetandWeakMapcomparison details (Shreyans Pathak) #β56648 - [
acd2a2fda5] - doc: mention prepare --security (Rafael Gonzaga) #β56617 - [
d3c0a2831d] - doc: tweak info on reposts in ambassador program (Michael Dawson) #β56589 - [
3299505b49] - doc: add type stripping to ambassadors program (Marco Ippolito) #β56598 - [
b1a6ffa4e4] - doc: improve internal documentation on built-in snapshot (Joyee Cheung) #β56505 - [
1641a28930] - doc: document CLI way to open the nodejs/bluesky PR (Antoine du Hamel) #β56506 - [
2042628fda] - doc: add section about using npx with permission model (Rafael Gonzaga) #β56539 - [
ace19a0263] - doc: update gcc-version for ubuntu-lts (Kunal Kumar) #β56553 - [
4aa57b50f8] - doc: fix parentheses in options (Tobias NieΓen) #β56563 - [
b40b01b4d3] - doc: include CVE to EOL lines as sec release process (Rafael Gonzaga) #β56520 - [
6701360113] - doc: add esm examples to node:trace_events (Alfredo GonzΓ‘lez) #β56514 - [
d3207cca3e] - doc: add message for Ambassadors to promote (Michael Dawson) #β56235 - [
97ece4ae06] - doc: allow request for TSC reviews via the GitHub UI (Antoine du Hamel) #β56493 - [
03f25055ab] - doc: add example for piping ReadableStream (Gabriel Schulhof) #β56415 - [
516d07482c] - doc: expand description ofparseArg'sdefault(Kevin Gibbons) #β54431 - [
a6491effcb] - doc: use<ul>instead of<ol>inSECURITY.md(Antoine du Hamel) #β56346 - [
e4ec134b21] - doc: clarify that WASM is trusted (Matteo Collina) #β56345 - [
0f7aed8a59] - doc: fix thecrc32documentation (Kevin Toshihiro Uehara) #β55898 - [
721104a296] - doc: fix links inmodule.md(Antoine du Hamel) #β56283 - [
928540d792] - doc: fix typos (Nathan Baulch) #β55066 - [
e69d35f03b] - doc: add history info for Permission Model (Antoine du Hamel) #β56707 - [
c6fd867ab5] - esm: fix jsdoc type refs toModuleJobBasein esm/loader (Jacob Smith) #β56499 - [
9cf9046bd7] - Revert "events: add hasEventListener util for validate" (origranot) #β56282 - [
b7fe54fc88] - (SEMVER-MINOR) fs: allowexcludeoption in globs to accept glob patterns (Daeyeon Jeong) #β56489 - [
6ca27c2a59] - http2: omit server name when HTTP2 host is IP address (islandryu) #β56530 - [
9f1fa199bf] - inspector: roll inspector_protocol (Chengzhong Wu) #β56649 - [
0dae4bb3ab] - inspector: add undici http tracking support (Chengzhong Wu) #β56488 - [
2c6124cec4] - inspector: report loadingFinished until the response data is consumed (Chengzhong Wu) #β56372 - [
96ec862ce2] - lib: refactor execution.js (Marco Ippolito) #β56358 - [
3ac92ef607] - (SEMVER-MINOR) lib: add typescript support to STDIN eval (Marco Ippolito) #β56359 - [
d5bf3db0cf] - lib: allow skipping source maps in node_modules (Chengzhong Wu) #β56639 - [
d33eaf2bcb] - lib: ensure FORCE_COLOR forces color output in non-TTY environments (Pietro Marchini) #β55404 - [
dc003218a8] - lib: optimizeprepareStackTraceon builtin frames (Chengzhong Wu) #β56299 - [
df06524863] - lib: suppress source map lookup exceptions (Chengzhong Wu) #β56299 - [
35335a5a66] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #β56580 - [
1faabdb150] - meta: add codeowners of security release document (Rafael Gonzaga) #β56521 - [
b4ece22ef5] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #β56342 - [
9ec67e7ce0] - meta: move MoLow to TSC regular member (Moshe Atlow) #β56276 - [
bae4b2e20a] - module: use more defensive code when handling SWC errors (Antoine du Hamel) #β56646 - [
1614e8e7bc] - (SEMVER-MINOR) module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX (Marco Ippolito) #β56610 - [
174d88eab1] - module: support eval with ts syntax detection (Marco Ippolito) #β56285 - [
299d6fa829] - module: fix jsdoc forformatparameter in cjs/loader (pacexy) #β56501 - [
0307e4dd59] - module: unify TypeScript and .mjs handling in CommonJS (Joyee Cheung) #β55590 - [
1f4f9be93d] - module: fix async resolution error within the syncfindPackageJSON(Jacob Smith) #β56382 - [
bbedffa0f0] - module: simplifyfindPackageJSONimplementation (Antoine du Hamel) #β55543 - [
6d6cffa9cc] - (SEMVER-MINOR) module: addfindPackageJSONutil (Jacob Smith) #β55412 - [
cd7ce18233] - module: fix badrequire.resolvewith option paths for.and..(Dario Piotrowicz) #β56735 - [
152df4da21] - module: rethrow amaro error message (Marco Ippolito) #β56568 - [
acba5dc87e] - module: use buffer.toString base64 (Chengzhong Wu) #β56315 - [
01e69be8ff] - node-api: define version 10 (Gabriel Schulhof) #β55676 - [
724524528e] - node-api: remove deprecated attribute from napi_module_register (Vladimir Morozov) #β56162 - [
c78e11064f] - process: remove support for undocumented symbol (Antoine du Hamel) #β56552 - [
3f69b18a23] - process: fix symbol key and mark experimental newnode:processmethods (Antoine du Hamel) #β56517 - [
d35333ae18] - (SEMVER-MINOR) process: add process.ref() and process.unref() methods (James M Snell) #β56400 - [
fa49f0f7d5] - punycode: limit deprecation warning (Colin Ihrig) #β56632 - [
d77c7073b7] - sqlite: disable memstatus APIs at build time (Colin Ihrig) #β56541 - [
07ff3ddcb5] - (SEMVER-MINOR) sqlite: support TypedArray and DataView inStatementSync(Alex Yang) #β56385 - [
b6c2e91365] - sqlite: enable SQL math functions (Colin Ihrig) #β56447 - [
3462263e8b] - sqlite: pass conflict type to conflict resolution handler (Bart Louwers) #β56352 - [
89ba3af743] - src: add nullptr handling from X509_STORE_new() (Burkov Egor) #β56700 - [
89a7c82e0c] - src: add default value for RSACipherConfig mode field (Burkov Egor) #β56701 - [
7bae51e62e] - src: fix build with GCC 15 (tjuhaszrh) #β56740 - [
432a4b8bd6] - src: fix to generate path from wchar_t via wstring (yamachu) #β56696 - [
8c9eaf82f0] - src: initialize FSReqWrapSync in path that uses it (MichaΓ«l Zasso) #β56613 - [
bcdb42d40b] - src: handle duplicate paths granted (Rafael Gonzaga) #β56591 - [
d6a7acc207] - src: update ECKeyPointer in ncrypto (James M Snell) #β56526 - [
01922f8b1f] - src: update ECPointPointer in ncrypto (James M Snell) #β56526 - [
2a3a36eceb] - src: update ECGroupPointer in ncrypto (James M Snell) #β56526 - [
67c10cdacb] - src: update ECDASSigPointer implementation in ncrypto (James M Snell) #β56526 - [
17f931c68b] - src: cleaning up more crypto internals for ncrypto (James M Snell) #β56526 - [
94d3fe1b62] - (SEMVER-MINOR) src: add --disable-sigusr1 to prevent signal i/o thread (Rafael Gonzaga) #β56441 - [
6594ee8dff] - src: fix undefined script name in error source (Chengzhong Wu) #β56502 - [
b46bad3e91] - src: refactor --trace-env to reuse option selection and handling (Joyee Cheung) #β56293 - [
76921b822b] - src: minor cleanups on OneByteString usage (James M Snell) #β56482 - [
3f0d1dd4fe] - src: move more crypto impl detail to ncrypto dep (James M Snell) #β56421 - [
04f623b283] - src: fixup more ToLocalChecked uses in node_file (James M Snell) #β56484 - [
5aa436f5a1] - src: make some minor ToLocalChecked cleanups (James M Snell) #β56483 - [
6eec5e7ec2] - src: lock the thread properly in snapshot builder (Joyee Cheung) #β56327 - [
5614993968] - src: drain platform tasks before creating startup snapshot (Chengzhong Wu) #β56403 - [
48493e9fd5] - src: use LocalVector in more places (James M Snell) #β56457 - [
7e5ea0681e] - src: use v8::LocalVector consistently with other minor cleanups (James M Snell) #β56417 - [
ad3d857f2b] - src: use starts_with in fs_permission.cc (ishabi) #β55811 - [
5afffb4415] - (SEMVER-MINOR) src,worker: add isInternalWorker (Carlos Espa) #β56469 - [
7d1676e72e] - stream: fix typo in ReadableStreamBYOBReader.readIntoRequests (Mattias Buelens) #β56560 - [
e658ea6b26] - stream: validate undefined sizeAlgorithm in WritableStream (Jason Zhang) #β56067 - [
e4f133c20c] - test: add ts eval snapshots (Marco Ippolito) #β56358 - [
f041742400] - test: remove empty lines from snapshots (Marco Ippolito) #β56358 - [
801cde91f6] - test: reduce number of written chunks (Luigi Pinca) #β56757 - [
6fdf1879ab] - test: fix invalid common.mustSucceed() usage (Luigi Pinca) #β56756 - [
d2bfbfa364] - test: use strict mode in global setters test (Rich Trott) #β56742 - [
5c030da42f] - test: cleanup and simplify test-crypto-aes-wrap (James M Snell) #β56748 - [
f1442d6eaf] - test: do not use common.isMainThread (Luigi Pinca) #β56768 - [
49405bd9e7] - test: make some requires lazy in common/index (James M Snell) #β56715 - [
52ef376788] - test: add test that uses multibyte for path and resolves modules (yamachu) #β56696 - [
b811dea85a] - test: replace more uses ofglobalwithglobalThis(James M Snell) #β56712 - [
eb97076199] - test: make common/index slightly less node.js specific (James M Snell) #β56712 - [
1795202d19] - test: rely less on duplicative common test harness utilities (James M Snell) #β56712 - [
5be29a274e] - test: simplify common/index.js (James M Snell) #β56712 - [
92e99780f0] - test: move hasMultiLocalhost to common/net (James M Snell) #β56716 - [
1c3204a4cc] - test: move crypto related common utilities in common/crypto (James M Snell) #β56714 - [
fe79d63be0] - test: add missing test for env file (Jonas) #β56642 - [
e08af61537] - test: enforce strict mode in test-zlib-const (Rich Trott) #β56689 - [
c96792d7f8] - test: fix localization data for ICU 74.2 (Antoine du Hamel) #β56661 - [
48b72f1195] - test: use --permission instead of --experimental-permission (Rafael Gonzaga) #β56685 - [
de81d90fce] - test: test-stream-compose.js doesn't need internals (Meghan Denny) #β56619 - [
f5b8499ad0] - test: add maxCount and gcOptions to gcUntil() (Joyee Cheung) #β56522 - [
d9e5a81041] - test: add line break at end of file (Rafael Gonzaga) #β56588 - [
59be346fbf] - test: mark test-worker-prof as flaky on smartos (Joyee Cheung) #β56583 - [
12a2cae9e5] - test: update test-child-process-bad-stdio to use node:test (Colin Ihrig) #β56562 - [
2dc4a30e19] - test: disable openssl 3.4.0 incompatible tests (Jelle van der Waa) #β56160 - [
1950fbf51d] - test: make test-crypto-hash compatible with OpenSSL > 3.4.0 (Jelle van der Waa) #β56160 - [
a533420a91] - test: clarify fork inherit permission flags (Rafael Gonzaga) #β56523 - [
697e799dc1] - test: add error only reporter for node:test (Carlos Espa) #β56438 - [
4844fa212d] - test: mark test-http-server-request-timeouts-mixed as flaky (Joyee Cheung) #β56503 - [
843c2389b9] - test: update error code in tls-psk-circuit for for OpenSSL 3.4 (sebastianas) #β56420 - [
ccb2ddbd83] - test: update compiled sqlite tests to match other tests (Colin Ihrig) #β56446 - [
b40f50324d] - test: add initial test426 coverage (Chengzhong Wu) #β56436 - [
059f81e4fd] - test: update test-set-http-max-http-headers to use node:test (Colin Ihrig) #β56439 - [
ec2940b418] - test: update test-child-process-windows-hide to use node:test (Colin Ihrig) #β56437 - [
0362924880] - test: use unusual chars in the path to ensure our tests are robust (Antoine du Hamel) #β48409 - [
b6c3869910] - test: improve abort signal dropping test (Edy Silva) #β56339 - [
cc648ef923] - test: enable ts test on win arm64 (Marco Ippolito) #β56349 - [
68819b4997] - test: deflake test-watch-file-shared-dependency (Luigi Pinca) #β56344 - [
ca6ed2190c] - test: skiptest-sqlite-extensionswhen SQLite is not built by us (Antoine du Hamel) #β56341 - [
8ffeb8b58c] - test: increase spin for eventloop test on s390 (Michael Dawson) #β56228 - [
6ae9950f08] - test: migrate message eval tests from Python to JS (Yiyun Lei) #β50482 - [
4352bf69e9] - test: check typescript loader (Marco Ippolito) #β54657 - [
406e7db9c3] - test: remove async-hooks/test-writewrap flaky designation (Luigi Pinca) #β56048 - [
fa56ab2bba] - test: deflake test-esm-loader-hooks-inspect-brk (Luigi Pinca) #β56050 - [
8e149aac99] - test: add test case for listeners (origranot) #β56282 - [
a3f5ef22cd] - test: maketest-permission-sqlite-load-extensionmore robust (Antoine du Hamel) #β56295 - [
8cbb7cc838] - test_runner: print failing assertion only once with spec reporter (Pietro Marchini) #β56662 - [
1f426bad9a] - test_runner: remove unused errors (Pietro Marchini) #β56607 - [
697a851fb3] - (SEMVER-MINOR) test_runner: add TestContext.prototype.waitFor() (Colin Ihrig) #β56595 - [
047537b48c] - (SEMVER-MINOR) test_runner: add t.assert.fileSnapshot() (Colin Ihrig) #β56459 - [
19b4aa4b14] - test_runner: run single test file benchmark (Pietro Marchini) #β56479 - [
926cf84e95] - (SEMVER-MINOR) test_runner: add assert.register() API (Colin Ihrig) #β56434 - [
fb4661a4cf] - test_runner: finish marking snapshot testing as stable (Colin Ihrig) #β56425 - [
900c6c3940] - tls: fix error stack conversion in cryptoErrorListToException() (Joyee Cheung) #β56554 - [
e9f185b658] - tools: update doc to new version (Node.js GitHub Bot) #β56259 - [
7644c7e619] - tools: update inspector_protocol roller (Chengzhong Wu) #β56649 - [
362272b0a4] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #β56704 - [
df8b835953] - tools: fix tools-deps-update (Daniel Lemire) #β56684 - [
feba5d3274] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #β56695 - [
9827f7d395] - tools: fix permissions inlint-release-proposalworkflow (Antoine du Hamel) #β56614 - [
14c562c0dc] - tools: remove github reporter (Carlos Espa) #β56468 - [
ed1785d0ae] - tools: editcreate-release-proposalworkflow (Antoine du Hamel) #β56540 - [
294e4c42f5] - tools: validate commit list as part oflint-release-commit(Antoine du Hamel) #β56291 - [
98d3474267] - tools: fix loong64 build failed (Xiao-Tao) #β56466 - [
3e729ceec8] - tools: disable unneeded rule ignoring in Python linting (Rich Trott) #β56429 - [
d5c05328e2] - tools: use a configurable value for number of open dependabot PRs (Antoine du Hamel) #β56427 - [
1705cbe002] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #β56426 - [
53b29b0469] - tools: fixrequire-common-firstlint rule from subfolder (Antoine du Hamel) #β56325 - [
105c4ed4fb] - tools: add release line label when opening release proposal (Antoine du Hamel) #β56317 - [
30f61f4aa5] - url: use resolved path to convert UNC paths to URL (Antoine du Hamel) #β56302 - [
a0aef4dfb6] - util: inspect: do not crash on an Error stack that contains a Symbol (Jordan Harband) #β56573 - [
a8a060341f] - util: inspect: do not crash on an Error with a regexname(Jordan Harband) #β56574 - [
ea66bf3553] - util: rename CallSite.column to columnNumber (Chengzhong Wu) #β56584 - [
9cdc3b373c] - util: do not crash on inspecting function withSymbolname (Jordan Harband) #β56572 - [
0bfbb68569] - util: expose CallSite.scriptId (Chengzhong Wu) #β56551 - [
5dd7116e09] - watch: reload env file for --env-file-if-exists (Jonas) #β56643 - [
c658a8afdf] - (SEMVER-MINOR) worker: add eval ts input (Marco Ippolito) #β56394 - [
2e5d038f48] - worker: refactor stdio to improve performance (Matteo Collina) #β56630 - [
f959805d01] - worker: flush stdout and stderr on exit (Matteo Collina) #β56428
v22.13.1: 2025-01-21, Version 22.13.1 'Jod' (LTS), @βRafaelGSS
This is a security release.
Notable Changes
- CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
- CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
- CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)
Dependency update:
- CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits
- [
520da342e0] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#662 - [
99f217369f] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias NieΓen) nodejs-private/node-private#555 - [
984f735e35] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#650 - [
2446870618] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#651
v22.13.0: 2025-01-07, Version 22.13.0 'Jod' (LTS), @βruyadorno
Notable Changes
Stabilize Permission Model
Upgrades the Permission Model status from Active Development to Stable.
Contributed by Rafael Gonzaga #β56201
Graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable
Following the merge of Curve25519 into the Web Cryptography API Editor's Draft the Ed25519 and X25519 algorithm identifiers are now stable and will no longer emit an ExperimentalWarning upon use.
Contributed by (Filip Skokan) #β56142
Other Notable Changes
- [
05d6227a88] - (SEMVER-MINOR) assert: add partialDeepStrictEqual (Giovanni Bucci) #β54630 - [
a933103499] - (SEMVER-MINOR) cli: implement --trace-env and --trace-env-[js|native]-stack (Joyee Cheung) #β55604 - [
ba9d5397de] - (SEMVER-MINOR) dgram: support blocklist in udp (theanarkh) #β56087 - [
f6d0c01303] - doc: stabilize util.styleText (Rafael Gonzaga) #β56265 - [
34c68827af] - doc: move typescript support to active development (Marco Ippolito) #β55536 - [
dd14b80350] - doc: add LJHarb to collaborators (Jordan Harband) #β56132 - [
5263086169] - (SEMVER-MINOR) doc: add report version and history section (Chengzhong Wu) #β56130 - [
8cb3c2018d] - (SEMVER-MINOR) doc: sort --report-exclude alphabetically (Rafael Gonzaga) #β55788 - [
55239a48b6] - (SEMVER-MINOR) doc,lib,src,test: unflag sqlite module (Colin Ihrig) #β55890 - [
7cbe3de1d8] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #β56194 - [
6575b76042] - (SEMVER-MINOR) module: add module.stripTypeScriptTypes (Marco Ippolito) #β55282 - [
bacfe6d5c9] - (SEMVER-MINOR) net: support blocklist in net.connect (theanarkh) #β56075 - [
b47888d390] - (SEMVER-MINOR) net: support blocklist for net.Server (theanarkh) #β56079 - [
566f0a1d25] - (SEMVER-MINOR) net: add SocketAddress.parse (James M Snell) #β56076 - [
ed7eab1421] - (SEMVER-MINOR) net: add net.BlockList.isBlockList(value) (James M Snell) #β56078 - [
ea4891856d] - (SEMVER-MINOR) process: deprecatefeatures.{ipv6,uv}andfeatures.tls_*(RenΓ©) #β55545 - [
01eb308f26] - (SEMVER-MINOR) report: fix typos in report keys and bump the version (Yuan-Ming Hsu) #β56068 - [
97c38352d0] - (SEMVER-MINOR) sqlite: aggregate constants in a single property (Edigleysson Silva (Edy)) #β56213 - [
b4041e554a] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.iteratemethod (tpoisseau) #β54213 - [
2e3ca1bbdd] - (SEMVER-MINOR) src: add cli option to preserve env vars on diagnostic reports (Rafael Gonzaga) #β55697 - [
bcfe9c80fc] - (SEMVER-MINOR) util: add sourcemap support to getCallSites (Marco Ippolito) #β55589
Commits
- [
e9024779c0] - assert: make Maps be partially compared in partialDeepStrictEqual (Giovanni Bucci) #β56195 - [
4c13d8e587] - assert: make partialDeepStrictEqual work with ArrayBuffers (Giovanni Bucci) #β56098 - [
a4fa31a86e] - assert: optimize partial comparison of twoSets (Antoine du Hamel) #β55970 - [
05d6227a88] - (SEMVER-MINOR) assert: add partialDeepStrictEqual (Giovanni Bucci) #β54630 - [
5e1321abd7] - buffer: document concat zero-fill (Duncan) #β55562 - [
be5ba7c648] - build: set DESTCPU correctly for 'make binary' on loongarch64 (ε΄ε°η½) #β56271 - [[
38cf37ee2d](https://redirect.github.com/nodejs/node/commit/38cf37e
Configuration
π Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
π¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
β» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
π Ignore: Close this PR and you won't be reminded about these updates again.
- [ ] If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.