supergraph-demo
supergraph-demo copied to clipboard
chore(deps): update node.js to v20
This PR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
node | final | major | 16-alpine -> 20-alpine |
Release Notes
nodejs/node (node)
v20.11.1
: 2024-02-14, Version 20.11.1 'Iron' (LTS), @βRafaelGSS prepared by @βmarco-ippolito
Notable changes
This is a security release.
Notable changes
- CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
- CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
- CVE-2024-21896 - Path traversal by monkey-patching Buffer internals- (High)
- CVE-2024-22017 - setuid() does not drop all privileges due to io_uring - (High)
- CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
- CVE-2024-21891 - Multiple permission model bypasses due to improper path traversal sequence sanitization - (Medium)
- CVE-2024-21890 - Improper handling of wildcards in --allow-fs-read and --allow-fs-write (Medium)
- CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
- undici version 5.28.3
- libuv version 1.48.0
- OpenSSL version 3.0.13+quic1
Commits
- [
7079c062bb
] - crypto: disable PKCS#1 padding for privateDecrypt (Michael Dawson) nodejs-private/node-private#525 - [
186a6e1ffb
] - deps: fix GHSA-f74f-cvh7-c6q6/CVE-2024-24806 (Santiago Gimeno) #β51737 - [
686da19abb
] - deps: disable io_uring support in libuv by default (Tobias NieΓen) nodejs-private/node-private#529 - [
f7b44bfbce
] - deps: update archs files for openssl-3.0.13+quic1 (Node.js GitHub Bot) #β51614 - [
7a30fecea2
] - deps: upgrade openssl sources to quictls/openssl-3.0.13+quic1 (Node.js GitHub Bot) #β51614 - [
480fc169a8
] - fs: protect against modified Buffer internals in possiblyTransformPath (Tobias NieΓen) nodejs-private/node-private#497 - [
77ac7c3153
] - http: add maximum chunk extension size (Paolo Insogna) nodejs-private/node-private#519 - [
ed7d149675
] - lib: use cache fs internals against path traversal (RafaelGSS) nodejs-private/node-private#516 - [
89bd5fc38f
] - lib: update undici to v5.28.3 (Matteo Collina) nodejs-private/node-private#539 - [
d01dd4291d
] - permission: fix wildcard when children > 1 (Rafael Gonzaga) #β51209 - [
40ff37dfcc
] - src: fix HasOnly(capability) in node::credentials (Tobias NieΓen) nodejs-private/node-private#505 - [
3f6addd590
] - src,deps: disable setuid() etc if io_uring enabled (Tobias NieΓen) nodejs-private/node-private#529 - [
d6da413aa4
] - test,doc: clarify wildcard usage (RafaelGSS) nodejs-private/node-private#517 - [
c213910aea
] - zlib: pause stream if outgoing buffer is full (Matteo Collina) nodejs-private/node-private#541
v20.11.0
: 2024-01-09, Version 20.11.0 'Iron' (LTS), @βUlisesGascon
Notable Changes
- [
833190fe7c
] - crypto: update root certificates to NSS 3.95 (Node.js GitHub Bot) #β50805 - [
a541b78bdb
] - doc: add MrJithil to collaborators (Jithil P Ponnan) #β50666 - [
d4be8fad83
] - doc: add Ethan-Arrowood as a collaborator (Ethan Arrowood) #β50393 - [
c1a196c897
] - (SEMVER-MINOR) esm: add import.meta.dirname and import.meta.filename (James Sumners) #β48740 - [
aa3209b880
] - fs: add c++ fast path for writeFileSync utf8 (CanadaHonk) #β49884 - [
8e886a2fff
] - (SEMVER-MINOR) module: remove useCustomLoadersIfPresent flag (Chengzhong Wu) #β48655 - [
21ab3c0f0b
] - (SEMVER-MINOR) module: bootstrap module loaders in shadow realm (Chengzhong Wu) #β48655 - [
29d91b13e3
] - (SEMVER-MINOR) src: add--disable-warning
option (Ethan Arrowood) #β50661 - [
11b3e470db
] - (SEMVER-MINOR) src: create per isolate proxy env template (Chengzhong Wu) #β48655 - [
621c4d66c2
] - (SEMVER-MINOR) src: make process binding data weak (Chengzhong Wu) #β48655 - [
139d6c8d3b
] - stream: use Array for Readable buffer (Robert Nagy) #β50341 - [
6206957e8d
] - stream: optimize creation (Robert Nagy) #β50337 - [
e64378643d
] - (SEMVER-MINOR) test_runner: adds built in lcov reporter (Phil Nash) #β50018 - [
4a830c2d9d
] - (SEMVER-MINOR) test_runner: add Date to the supported mock APIs (Lucas Santos) #β48638 - [
842dc01def
] - (SEMVER-MINOR) test_runner, cli: add --test-timeout flag (Shubham Pandey) #β50443
Commits
- [
e40a559ab1
] - benchmark: update iterations in benchmark/util/splice-one.js (Liu Jia) #β50698 - [
00f7a5d26f
] - benchmark: increase the iteration number to an appropriate value (Lei Shi) #β50766 - [
be6ad3f375
] - benchmark: rewrite import.meta benchmark (Joyee Cheung) #β50683 - [
9857364129
] - benchmark: add misc/startup-cli-version benchmark (Joyee Cheung) #β50684 - [
22d729e7f5
] - benchmark: remove punycode from require-builtins fixture (Joyee Cheung) #β50689 - [
4cf10a149a
] - benchmark: change iterations in benchmark/es/string-concatenations.js (Liu Jia) #β50585 - [
15c2ed93a8
] - benchmark: add benchmarks for encodings (Aras Abbasi) #β50348 - [
8a896428ca
] - benchmark: add more cases to Readable.from (Raz Luvaton) #β50351 - [
dbe6c5f354
] - benchmark: skip test-benchmark-os on IBMi (Michael Dawson) #β50286 - [
179b4b6e62
] - benchmark: move permission-fs-read to permission-processhas-fs-read (Aki Hasegawa-Johnson) #β49770 - [
32d65c001d
] - buffer: improve Buffer.equals performance (kylo5aby) #β50621 - [
80ea83757e
] - build: add GN configurations for simdjson (Cheng Zhao) #β50831 - [
904e645bcd
] - build: add configuration flag to enable Maglev (Keyhan Vakil) #β50692 - [
019efa8a5a
] - build: fix GN configuration for deps/base64 (Cheng Zhao) #β50696 - [
a645d5ac54
] - build: disable flag v8_scriptormodule_legacy_lifetime (Chengzhong Wu) #β50616 - [
8705058b09
] - build: add GN build files (Cheng Zhao) #β47637 - [
0a5e9c12cf
] - build: fix build with Python 3.12 (Luigi Pinca) #β50582 - [
ff5713dd43
] - build: support Python 3.12 (Shi Pujin) #β50209 - [
cfd50f229a
] - build: fix building when there is only python3 (Cheng Zhao) #β48462 - [
833190fe7c
] - crypto: update root certificates to NSS 3.95 (Node.js GitHub Bot) #β50805 - [
54c46dae9e
] - deps: update zlib to 1.2.13.1-motley-5daffc7 (Node.js GitHub Bot) #β50803 - [
0be84e5a28
] - deps: update undici to 5.27.2 (Node.js GitHub Bot) #β50813 - [
ec67890824
] - deps: V8: cherry-pick0f9ebbc
(Chengzhong Wu) #β50867 - [
bc2ebb972b
] - deps: V8: cherry-pick13192d6
(Levi Zim) #β50552 - [
656135d70a
] - deps: update zlib to 1.2.13.1-motley-dfc48fc (Node.js GitHub Bot) #β50456 - [
41ee4bcc5d
] - deps: update ada to 2.7.4 (Node.js GitHub Bot) #β50815 - [
a40948b5c5
] - deps: update minimatch to 9.0.3 (Node.js GitHub Bot) #β50806 - [
7be1222c4a
] - deps: update simdutf to 4.0.4 (Node.js GitHub Bot) #β50772 - [
68e7d49db6
] - deps: upgrade npm to 10.2.4 (npm team) #β50751 - [
3d82d38336
] - deps: escape Python strings correctly (MichaΓ«l Zasso) #β50695 - [
d3870ac957
] - deps: update base64 to 0.5.1 (Node.js GitHub Bot) #β50629 - [
4b219b6ece
] - deps: update corepack to 0.23.0 (Node.js GitHub Bot) #β50563 - [
6c41b50922
] - deps: update nghttp2 to 1.58.0 (Node.js GitHub Bot) #β50441 - [
3beee0ae8f
] - deps: update acorn to 8.11.2 (Node.js GitHub Bot) #β50460 - [
220916fa93
] - deps: update undici to 5.27.0 (Node.js GitHub Bot) #β50463 - [
f9960b3545
] - deps: update googletest to116b7e5
(Node.js GitHub Bot) #β50324 - [
d5c16f897a
] - dns: call handle.setServers() with a valid array (Luigi Pinca) #β50811 - [
1bd6537c97
] - doc: recommend supported Python versions (Luigi Pinca) #β50407 - [
402e257520
] - doc: update notable changes in v21.1.0 (Joyee Cheung) #β50388 - [
032535e270
] - doc: make theme consistent across api and other docs (Dima Demakov) #β50877 - [
d53842683f
] - doc: add a section regardinginstanceof
inprimordials.md
(Antoine du Hamel) #β50874 - [
fe315055a7
] - doc: update email to reflect affiliation (Yagiz Nizipli) #β50856 - [
e14f661950
] - doc: shard not supported with watch mode (Pulkit Gupta) #β50640 - [
b3d015de71
] - doc: get rid of unnecessaryeslint-skip
comments (Antoine du Hamel) #β50829 - [
168cbf9cb9
] - doc: create deprecation code for isWebAssemblyCompiledModule (Marco Ippolito) #β50486 - [
30baacba41
] - doc: add CanadaHonk to triagers (CanadaHonk) #β50848 - [
e6e7cbceac
] - doc: fix typos in --allow-fs-* (Tobias NieΓen) #β50845 - [
e22ce9586f
] - doc: update Crypto API doc for x509.keyUsage (Daniel Meechan) #β50603 - [
549d4422b7
] - doc: fix fs.writeFileSync return value documentation (Ryan Zimmerman) #β50760 - [
3c79e3cdba
] - doc: update print results(detail) inPerformanceEntry
(Jungku Lee) #β50723 - [
aeaf96d06e
] - doc: fixBuffer.allocUnsafe
documentation (Mert Can AltΔ±n) #β50686 - [
347e1dd06a
] - doc: run license-builder (github-actions[bot]) #β50691 - [
a541b78bdb
] - doc: add MrJithil to collaborators (Jithil P Ponnan) #β50666 - [
90f415dd61
] - doc: fix typo in fs.md (fwio) #β50570 - [
e2388151ba
] - doc: add missing description of argument insubtle.encrypt
(Deokjin Kim) #β50578 - [
39cc013465
] - doc: update pm documentation to include resource (Ranieri Innocenti Spada) #β50601 - [
ba6d427c23
] - doc: correct attribution in v20.6.0 changelog (Jacob Smith) #β50564 - [
1b2dab8254
] - doc: update to alignconsole.table
row to the left (Jungku Lee) #β50553 - [
5d48ef7778
] - doc: underline links (Rich Trott) #β50481 - [
5e6057c9d2
] - doc: remove duplicate word (Gerhard StΓΆbich) #β50475 - [
64bf2fd4ee
] - doc: fix typo inwebstreams.md
(AndrΓ© Santos) #β50426 - [
cca55b8414
] - doc: add information about Node-API versions >=9 (Michael Dawson) #β50168 - [
d4be8fad83
] - doc: add Ethan-Arrowood as a collaborator (Ethan Arrowood) #β50393 - [
0b311838f6
] - doc: fix TOC inreleases.md
(Bryce Seefieldt) #β50372 - [
843d5f84ca
] - esm: fallback togetSource
whenload
returns nullishsource
(Antoine du Hamel) #β50825 - [
8d5469c84b
] - esm: do not callgetSource
when format iscommonjs
(Francesco Trotta) #β50465 - [
b48cf314d3
] - esm: bypass CJS loader in default load under--default-type=module
(Antoine du Hamel) #β50004 - [
c1a196c897
] - (SEMVER-MINOR) esm: add import.meta.dirname and import.meta.filename (James Sumners) #β48740 - [
435f9c9276
] - fs: use default w flag for writeFileSync with utf8 encoding (Murilo Kakazu) #β50990 - [
aa3209b880
] - fs: add c++ fast path for writeFileSync utf8 (CanadaHonk) #β49884 - [
05e25e0230
] - fs: improve error perf of synclstat
+fstat
(CanadaHonk) #β49868 - [
f94a24cb4b
] - fs: improve error performance forrmdirSync
(CanadaHonk) #β49846 - [
cada22e2a4
] - fs: fix to not return for void function (Jungku Lee) #β50769 - [
ba40b2e33e
] - fs: replace deprecatedpath._makeLong
in copyFile (CanadaHonk) #β50844 - [
d1b6bd660a
] - fs: update param in jsdoc forreaddir
(Jungku Lee) #β50448 - [
11412e863a
] - fs: do not throw error on cpSync internals (Yagiz Nizipli) #β50185 - [
868a464c15
] - fs,url: moveFromNamespacedPath
tonode_url
(Yagiz Nizipli) #β50090 - [
de7fe08c7b
] - fs,url: refactorFileURLToPath
method (Yagiz Nizipli) #β50090 - [
186e6e0395
] - fs,url: moveFileURLToPath
to node_url (Yagiz Nizipli) #β50090 - [
aea7fe54af
] - inspector: use private fields instead of symbols (Yagiz Nizipli) #β50776 - [
48dbde71d8
] - lib: use primordials for navigator.userAgent (Aras Abbasi) #β50467 - [
fa220cac87
] - lib: remove deprecated string methods (Jithil P Ponnan) #β50592 - [
f1cf1c385f
] - lib: fix assert shows diff messages in ESM and CJS (Jithil P Ponnan) #β50634 - [
3844af288f
] - lib: make event static properties non writable and configurable (Muthukumar) #β50425 - [
0a0b416d6c
] - lib: avoid memory allocation on nodeprecation flag (Vinicius LourenΓ§o) #β50231 - [
e7551d5770
] - lib: align console.table row to the left (Jithil P Ponnan) #β50135 - [
0c85cebdf2
] - meta: clarify nomination process according to Node.js charter (Matteo Collina) #β50834 - [
f4070dd8d4
] - meta: clarify recommendation for bug reproductions (Antoine du Hamel) #β50882 - [
2ddeead436
] - meta: move cjihrig to TSC regular member (Colin Ihrig) #β50816 - [
34a789d9be
] - meta: add web-standards as WPTs owner (Filip Skokan) #β50636 - [
40bbffa266
] - meta: bump github/codeql-action from 2.21.9 to 2.22.5 (dependabot[bot]) #β50513 - [
c49553631d
] - meta: bump step-security/harden-runner from 2.5.1 to 2.6.0 (dependabot[bot]) #β50512 - [
99df0138b0
] - meta: bump ossf/scorecard-action from 2.2.0 to 2.3.1 (dependabot[bot]) #β50509 - [
9db6227ac6
] - meta: fix spacing in collaborator list (Antoine du Hamel) #β50641 - [
2589a5a566
] - meta: bump actions/setup-python from 4.7.0 to 4.7.1 (dependabot[bot]) #β50510 - [
5a86661a95
] - meta: add crypto as crypto and webcrypto docs owner (Filip Skokan) #β50579 - [
ac8d2b9cc2
] - meta: bump actions/setup-node from 3.8.1 to 4.0.0 (dependabot[bot]) #β50514 - [
bee2c0cf11
] - meta: bump actions/checkout from 4.1.0 to 4.1.1 (dependabot[bot]) #β50511 - [
91a0944e5f
] - meta: add [email protected] to mailmap (Ethan Arrowood) #β50491 - [
8d3cf8c4ee
] - meta: add web-standards as web api visibility owner (Chengzhong Wu) #β50418 - [
807c12de36
] - meta: mention other notable changes section (Rafael Gonzaga) #β50309 - [
21ab3c0f0b
] - (SEMVER-MINOR) module: bootstrap module loaders in shadow realm (Chengzhong Wu) #β48655 - [
8e886a2fff
] - (SEMVER-MINOR) module: remove useCustomLoadersIfPresent flag (Chengzhong Wu) #β48655 - [
77e8361213
] - module: execute--import
sequentially (Antoine du Hamel) #β50474 - [
fffc4951ac
] - module: add application/json in accept header when fetching json module (Marco Ippolito) #β50119 - [
f808e7a650
] - net: check pipe mode and path (theanarkh) #β50770 - [
cf3a4c5b84
] - node-api: factor out common code into macros (Gabriel Schulhof) #β50664 - [
a7d8f6b529
] - perf_hooks: implement performance.now() with fast API calls (Joyee Cheung) #β50492 - [
076dc7540b
] - permission: do not create symlinks if target is relative (Tobias NieΓen) #β49156 - [
43160dcd2d
] - permission: mark const functions as such (Tobias NieΓen) #β50705 - [
7a661d7ad9
] - permission: address coverity warning (Michael Dawson) #β50215 - [
b2b4132c3e
] - src: iterate on import attributes array correctly (MichaΓ«l Zasso) #β50703 - [
11b3e470db
] - (SEMVER-MINOR) src: create per isolate proxy env template (Chengzhong Wu) #β48655 - [
d00412a083
] - (SEMVER-MINOR) src: create fs_dir per isolate properties (Chengzhong Wu) #β48655 - [
14cc3b9b90
] - (SEMVER-MINOR) src: create worker per isolate properties (Chengzhong Wu) #β48655 - [
621c4d66c2
] - (SEMVER-MINOR) src: make process binding data weak (Chengzhong Wu) #β48655 - [
07a4e94e84
] - src: assert return value of BN_bn2binpad (Tobias NieΓen) #β50860 - [
158db2d61e
] - src: fix coverity warning (Michael Dawson) #β50846 - [
94363bb3fd
] - src: fix compatility with upcoming V8 12.1 APIs (Cheng Zhao) #β50709 - [
29d91b13e3
] - (SEMVER-MINOR) src: add--disable-warning
option (Ethan Arrowood) #β50661 - [
f054c337f8
] - src: add IsolateScopes before using isolates (Keyhan Vakil) #β50680 - [
d08eb382cd
] - src: avoid copying strings in FSPermission::Apply (Tobias NieΓen) #β50662 - [
6620df1c05
] - src: remove erroneous default argument in RadixTree (Tobias NieΓen) #β50736 - [
436c3aef15
] - src: fix JSONParser leaking internal V8 scopes (Keyhan Vakil) #β50688 - [
6f46d31018
] - src: return error --env-file if file is not found (Ardi Nugraha) #β50588 - [
3d43fd359c
] - src: avoid silent coercion to signed/unsigned int (Tobias NieΓen) #β50663 - [
c253e39b56
] - src: handle errors from uv_pipe_connect2() (Deokjin Kim) #β50657 - [
3a9713bb5a
] - src: use v8::Isolate::TryGetCurrent() in DumpJavaScriptBacktrace() (Joyee Cheung) #β50518 - [
94f8a925a8
] - src: print more information in C++ assertions (Joyee Cheung) #β50242 - [
23f830616b
] - src: hide node::credentials::HasOnly outside unit (Tobias NieΓen) #β50450 - [
b7ecb0a390
] - src: readiterable entries may be empty (Matthew Aitken) #β50398 - [
4ef1d68715
] - src: implement structuredClone in native (Joyee Cheung) #β50330 - [
9346f15138
] - src: use find instead of char-by-char in FromFilePath() (Daniel Lemire) #β50288 - [
8414fb4d2a
] - src: add commit hash shorthand in zlib version (Jithil P Ponnan) #β50158 - [
a878e3abb0
] - stream: fix enumerability of ReadableStream.from (Mattias Buelens) #β50779 - [
95ed4ffc1e
] - stream: fix enumerability of ReadableStream.prototype.values (Mattias Buelens) #β50779 - [
4cf155ca0c
] - stream: add Symbol.toStringTag to Compression Streams (Filip Skokan) #β50712 - [
6012e3e781
] - stream: fix Writable.destroy performance regression (Robert Nagy) #β50478 - [
dd5206820c
] - stream: pre-allocate _events (Robert Nagy) #β50428 - [
829b82ed0f
] - stream: remove no longer relevant comment (Robert Nagy) #β50446 - [
98ae1b4132
] - stream: use bit fields for construct/destroy (Robert Nagy) #β50408 - [
08a0c6c56c
] - stream: improve from perf (Raz Luvaton) #β50359 - [
59f7316b8f
] - stream: avoid calls to listenerCount (Robert Nagy) #β50357 - [
9d52430eb9
] - stream: readable use bitmap accessors (Robert Nagy) #β50350 - [
139d6c8d3b
] - stream: use Array for Readable buffer (Robert Nagy) #β50341 - [
6206957e8d
] - stream: optimize creation (Robert Nagy) #β50337 - [
f87921de3b
] - stream: refactor writable _write (Robert Nagy) #β50198 - [
b338f3d3c2
] - stream: avoid getter for defaultEncoding (Robert Nagy) #β50203 - [
1862235a26
] - test: fix message v8 not normalising alphanumeric paths (Jithil P Ponnan) #β50730 - [
7c28a4ca8f
] - test: fix dns test case failures after c-ares update to 1.21.0+ (Brad House) #β50743 - [
4544593d31
] - test: replace forEach with for of (Conor Watson) #β50594 - [
96143a3293
] - test: replace forEach to for at test-webcrypto-sign-verify-ecdsa.js (Alessandro Di Nisio) #β50795 - [
107b5e63c5
] - test: replace foreach with for in test-https-simple.js (Shikha Mehta) #β49793 - [
9b2e5e9db4
] - test: add note about unresolved spec issue (Mattias Buelens) #β50779 - [
edce637c1a
] - test: add note about readable streams with type owning (Mattias Buelens) #β50779 - [
641044670b
] - test: replace forEach with for-of in test-url-relative (vitosorriso) #β50788 - [
75ee78438c
] - test: replace forEach() with for ... of in test-tls-getprotocol.js (Steve Goode) #β50600 - [
24f9d3fbeb
] - test: enable idlharness tests for encoding (Mattias Buelens) #β50778 - [
a9d290956e
] - test: replace forEach in whatwg-encoding-custom-interop (Honza Machala) #β50607 - [
6584dd80f7
] - test: replace forEach() with for-loop (Jan) #β50596 - [
be54a22869
] - test: improve test-bootstrap-modules.js (Joyee Cheung) #β50708 - [
660e70e73b
] - test: skip parallel/test-macos-app-sandbox if disk space < 120MB (Joyee Cheung) #β50764 - [
5712c41122
] - test: replace foreach with for (Markus Muschol) #β50599 - [
49e5f47b1c
] - test: test streambase has already has a consumer (Jithil P Ponnan) #β48059 - [
bb7d764c8e
] - test: change forEach to for...of in path extname (Kyriakos Markakis) #β50667 - [
4d28ced079
] - test: replace forEach with for...of (Ryan Williams) #β50611 - [
92a153ecde
] - test: migrate message v8 tests from Python to JS (Joshua LeMay) #β50421 - [
a376284d8a
] - test: use destructuring for accessing setting values (Honza JedliΔka) #β50609 - [
7b9b1fba27
] - test: replace forEach() with for .. of (Evgenia Blajer) #β50605 - [
9397b2da7e
] - test: replace forEach() with for ... of in test-readline-keys.js (William Liang) #β50604 - [
9043ba4cfb
] - test: replace forEach() with for ... of in test-http2-single-headers.js (spiritualized) #β50606 - [
9f911d31f6
] - test: replace forEach with for of (john-mcinall) #β50602 - [
8a5f36fe74
] - test: remove unused file (James Sumners) #β50528 - [
9950203340
] - test: replace forEach with for of (Kevin KΓΌhnemund) #β50597 - [
03ba28f102
] - test: replace forEach with for of (CorrWu) #β49785 - [
ea61261b54
] - test: replace forEach with for [...] of (Gabriel Bota) #β50615 - [
4349790913
] - test: add WPT report test duration (Filip Skokan) #β50574 - [
7cacddfcc1
] - test: replace forEach() with for ... of loop in test-global.js (Kajol) #β49772 - [
889f58d07f
] - test: skip test-diagnostics-channel-memory-leak.js (Joyee Cheung) #β50327 - [
41644ee071
] - test: improveUV_THREADPOOL_SIZE
tests on.env
(Yagiz Nizipli) #β49213 - [
1db44b9a53
] - test: recognize wpt completion error (Chengzhong Wu) #β50429 - [
ecfc951ddc
] - test: report error wpt test results (Chengzhong Wu) #β50429 - [
deb0351d95
] - test: replace forEach() with for...of (Ram) #β49794 - [
f885dfe5e3
] - test: replace forEach() with for...of in test-trace-events-http (Chand) #β49795 - [
9dc63c56db
] - test: replace forEach with for...of in test-fs-realpath-buffer-encoding (Niya Shiyas) #β49804 - [
600d1260da
] - test: fix timeout of test-cpu-prof-dir-worker.js in LoongArch devices (Shi Pujin) #β50363 - [
099f5cfa0a
] - test: fix vm assertion actual and expected order (Chengzhong Wu) #β50371 - [
a31f9bfe01
] - test: v8: Add test-linux-perf-logger test suite (Luke Albao) #β50352 - [
6c59114947
] - test: ensure never settling promises are detected (Antoine du Hamel) #β50318 - [
9830ae4bf7
] - test_runner: add tests for various mock timer issues (Mika Fischer) #β50384 - [
2c72ed85fb
] - test_runner: pass abortSignal to test files (Moshe Atlow) #β50630 - [
c33a84af11
] - test_runner: replace forEach with for of (Tom Haddad) #β50595 - [
29c68a22bb
] - test_runner: output errors of suites (Moshe Atlow) #β50361 - [
e64378643d
] - (SEMVER-MINOR) test_runner: adds built in lcov reporter (Phil Nash) #β50018 - [
4aaaff413b
] - test_runner: test return value of mocked promisified timers (Mika Fischer) #β50331 - [
4a830c2d9d
] - (SEMVER-MINOR) test_runner: add Date to the supported mock APIs (Lucas Santos) #β48638 - [
842dc01def
] - (SEMVER-MINOR) test_runner, cli: add --test-timeout flag (Shubham Pandey) #β50443 - [
613a9072b7
] - tls: fix order of setting cipher before setting cert and key (Kumar Rishav) #β50186 - [
d905c61e16
] - tls: usevalidateFunction
foroptions.SNICallback
(Deokjin Kim) #β50530 - [
c8d6dd58e7
] - tools: add macOS notarization verification step (Ulises GascΓ³n) #β50833 - [
c9bd0b0c0f
] - tools: use macOS keychain to notarize the releases (Ulises GascΓ³n) #β50715 - [
932a5d7b2c
] - tools: update eslint to 8.54.0 (Node.js GitHub Bot) #β50809 - [
d7114d97be
] - tools: update lint-md-dependencies to [email protected] (Node.js GitHub Bot) #β50807 - [
93085cf844
] - tools: add workflow to update release links (MichaΓ«l Zasso) #β50710 - [
66764c5d04
] - tools: recognize GN files in dep_updaters (Cheng Zhao) #β50693 - [
2a451e176a
] - tools: remove unused file (Ulises Gascon) #β50622 - [
8ce6403230
] - tools: change minimatch install strategy (Marco Ippolito) #β50476 - [
97778e2e77
] - tools: update lint-md-dependencies to [email protected] (Node.js GitHub Bot) #β50675 - [
797f6a9ba8
] - tools: add macOS notarization stapler (Ulises GascΓ³n) #β50625 - [
8fa1319352
] - tools: update eslint to 8.53.0 (Node.js GitHub Bot) #β50559 - [
592f57970f
] - tools: update lint-md-dependencies to [email protected] (Node.js GitHub Bot) #β50556 - [
2fd78fc39e
] - tools: compare ICU checksums before file changes (MichaΓ«l Zasso) #β50522 - [
631d710fc4
] - tools: improve update acorn-walk script (Marco Ippolito) #β50473 - [
33fd2af2ab
] - tools: update lint-md-dependencies to [email protected] (Node.js GitHub Bot) #β50496 - [
22b7a74838
] - tools: update gyp-next to v0.16.1 (MichaΓ«l Zasso) #β50380 - [
f5ccab5005
] - tools: skip ruff on tools/gyp (MichaΓ«l Zasso) #β50380 - [
408fd90508
] - tools: update lint-md-dependencies to [email protected] [email protected] (Node.js GitHub Bot) #β50461 - [
685f936ccd
] - tools: avoid npm install in deps installation (Marco Ippolito) #β50413 - [
7d43c5a094
] - Revert "tools: update doc dependencies" (Richard Lau) #β50414 - [
8fd67c2e3e
] - tools: update doc dependencies (Node.js GitHub Bot) #β49988 - [
586becb507
] - tools: run coverage CI only on relevant files (Antoine du Hamel) #β50349 - [
2d06eea6c5
] - tools: update eslint to 8.52.0 (Node.js GitHub Bot) #β50326 - [
6a897baf16
] - tools: update lint-md-dependencies (Node.js GitHub Bot) #β50190 - [
e6e7f39b9e
] - util: improve performance of normalizeEncoding (kylo5aby) #β50721 - [
3b6b1afa47
] - v8,tools: expose necessary V8 defines (Cheng Zhao) #β50820 - [
2664012617
] - vm: allow dynamic import with a referrer realm (Chengzhong Wu) #β50360 - [
c6c0a74b54
] - wasi: document security sandboxing status (Guy Bedford) #β50396 - [
989814093e
] - win,tools: upgrade Windows signing to smctl (Stefan Stojanovic) #β50956
v20.10.0
: 2023-11-22, Version 20.10.0 'Iron' (LTS), @βtargos
Notable Changes
--experimental-default-type
flag to flip module defaults
The new flag --experimental-default-type
can be used to flip the default
module system used by Node.js. Input that is already explicitly defined as ES
modules or CommonJS, such as by a package.json
"type"
field or .mjs
/.cjs
file extension or the --input-type
flag, is unaffected. What is currently
implicitly CommonJS would instead be interpreted as ES modules under
--experimental-default-type=module
:
-
String input provided via
--eval
or STDIN, if--input-type
is unspecified. -
Files ending in
.js
or with no extension, if there is nopackage.json
file present in the same folder or any parent folder. -
Files ending in
.js
or with no extension, if the nearest parentpackage.json
field lacks atype
field; unless the folder is inside anode_modules
folder.
In addition, extensionless files are interpreted as Wasm if
--experimental-wasm-modules
is passed and the file contains the "magic bytes"
Wasm header.
Contributed by Geoffrey Booth in #β49869.
Detect ESM syntax in ambiguous JavaScript
The new flag --experimental-detect-module
can be used to automatically run ES
modules when their syntax can be detected. For βambiguousβ files, which are
.js
or extensionless files with no package.json
with a type
field, Node.js
will parse the file to detect ES module syntax; if found, it will run the file
as an ES module, otherwise it will run the file as a CommonJS module. The same
applies to string input via --eval
or STDIN
.
We hope to make detection enabled by default in a future version of Node.js.
Detection increases startup time, so we encourage everyoneβespecially package
authorsβto add a type
field to package.json
, even for the default
"type": "commonjs"
. The presence of a type
field, or explicit extensions
such as .mjs
or .cjs
, will opt out of detection.
Contributed by Geoffrey Booth in #β50096.
New flush
option in file system functions
When writing to files, it is possible that data is not immediately flushed to
permanent storage. This allows subsequent read operations to see stale data.
This PR adds a 'flush'
option to the fs.writeFile
family of functions which
forces the data to be flushed at the end of a successful write operation.
Contributed by Colin Ihrig in #β50009 and #β50095.
Experimental WebSocket client
Adds a --experimental-websocket
flag that adds a WebSocket
global, as standardized by WHATWG.
Contributed by Matthew Aitken in #β49830.
vm: fix V8 compilation cache support for vm.Script
Previously repeated compilation of the same source code using vm.Script
stopped hitting the V8 compilation cache after v16.x when support for
importModuleDynamically
was added to vm.Script
, resulting in a performance
regression that blocked users (in particular Jest users) from upgrading from
v16.x.
The recent fixes allow the compilation cache to be hit again
for vm.Script
when --experimental-vm-modules
is not used even in the
presence of the importModuleDynamically
option, so that users affected by the
performance regression can now upgrade. Ongoing work is also being done to
enable compilation cache support for vm.CompileFunction
.
Contributed by Joyee Cheung in #β49950 and #β50137.
Other notable changes
- [
21453ae555
] - (SEMVER-MINOR) deps: update uvwasi to 0.0.19 (Node.js GitHub Bot) #β49908
Configuration
π Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).
π¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
β» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
π Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.