examples
examples copied to clipboard
chore(deps): update all non-major dependencies
This PR contains the following updates:
Package | Change | Age | Adoption | Passing | Confidence | Type | Update |
---|---|---|---|---|---|---|---|
@iconify-json/simple-icons | ^1.1.96 -> ^1.1.101 |
dependencies | patch | ||||
@playwright/test (source) | ^1.40.1 -> ^1.44.0 |
devDependencies | minor | ||||
@types/node (source) | ^20.11.30 -> ^20.12.12 |
devDependencies | minor | ||||
node (source) | >=16.x -> >=16.20.2 |
engines | minor | ||||
pkg-types | ^1.0.3 -> ^1.1.1 |
devDependencies | patch | ||||
turbo (source) | ^1.12.5 -> ^1.13.3 |
devDependencies | minor |
Release Notes
microsoft/playwright (@playwright/test)
v1.44.0
New APIs
Accessibility assertions
-
expect(locator).toHaveAccessibleName() checks if the element has the specified accessible name:
const locator = page.getByRole('button'); await expect(locator).toHaveAccessibleName('Submit');
-
expect(locator).toHaveAccessibleDescription() checks if the element has the specified accessible description:
const locator = page.getByRole('button'); await expect(locator).toHaveAccessibleDescription('Upload a photo');
-
expect(locator).toHaveRole() checks if the element has the specified ARIA role:
const locator = page.getByTestId('save-button'); await expect(locator).toHaveRole('button');
Locator handler
- After executing the handler added with page.addLocatorHandler(), Playwright will now wait until the overlay that triggered the handler is not visible anymore. You can opt-out of this behavior with the new
noWaitAfter
option. - You can use new
times
option in page.addLocatorHandler() to specify maximum number of times the handler should be run. - The handler in page.addLocatorHandler() now accepts the locator as argument.
- New page.removeLocatorHandler() method for removing previously added locator handlers.
const locator = page.getByText('This interstitial covers the button');
await page.addLocatorHandler(locator, async overlay => {
await overlay.locator('#close').click();
}, { times: 3, noWaitAfter: true });
// Run your tests that can be interrupted by the overlay.
// ...
await page.removeLocatorHandler(locator);
Miscellaneous options
-
multipart
option inapiRequestContext.fetch()
now acceptsFormData
and supports repeating fields with the same name.const formData = new FormData(); formData.append('file', new File(['let x = 2024;'], 'f1.js', { type: 'text/javascript' })); formData.append('file', new File(['hello'], 'f2.txt', { type: 'text/plain' })); context.request.post('https://example.com/uploadFiles', { multipart: formData });
-
expect(callback).toPass({ intervals })
can now be configured byexpect.toPass.inervals
option globally in testConfig.expect or per project in testProject.expect. -
expect(page).toHaveURL(url)
now supportsignoreCase
option. -
testProject.ignoreSnapshots allows to configure per project whether to skip screenshot expectations.
Reporter API
- New method suite.entries() returns child test suites and test cases in their declaration order. suite.type and testCase.type can be used to tell apart test cases and suites in the list.
-
Blob reporter now allows overriding report file path with a single option
outputFile
. The same option can also be specified asPLAYWRIGHT_BLOB_OUTPUT_FILE
environment variable that might be more convenient on CI/CD. -
JUnit reporter now supports
includeProjectInTestName
option.
Command line
-
--last-failed
CLI option for running only tests that failed in the previous run.First run all tests:
$ npx playwright test Running 103 tests using 5 workers ... 2 failed [chromium] › my-test.spec.ts:8:5 › two ───────────────────────────────────────────────────────── [chromium] › my-test.spec.ts:13:5 › three ────────────────────────────────────────────────────── 101 passed (30.0s)
Now fix the failing tests and run Playwright again with
--last-failed
option:$ npx playwright test --last-failed Running 2 tests using 2 workers 2 passed (1.2s)
Browser Versions
- Chromium 125.0.6422.14
- Mozilla Firefox 125.0.1
- WebKit 17.4
This version was also tested against the following stable channels:
- Google Chrome 124
- Microsoft Edge 124
v1.43.1
Highlights
https://github.com/microsoft/playwright/issues/30300 - [REGRESSION]: UI mode restarts if keep storage statehttps://github.com/microsoft/playwright/issues/303399 - [REGRESSION]: Brand new install of playwright, unable to run chromium with show browser using vscode
Browser Versions
- Chromium 124.0.6367.29
- Mozilla Firefox 124.0
- WebKit 17.4
This version was also tested against the following stable channels:
- Google Chrome 123
- Microsoft Edge 123
v1.43.0
New APIs
-
Method browserContext.clearCookies() now supports filters to remove only some cookies.
// Clear all cookies. await context.clearCookies(); // New: clear cookies with a particular name. await context.clearCookies({ name: 'session-id' }); // New: clear cookies for a particular domain. await context.clearCookies({ domain: 'my-origin.com' });
-
New mode
retain-on-first-failure
for testOptions.trace. In this mode, trace is recorded for the first run of each test, but not for retires. When test run fails, the trace file is retained, otherwise it is removed.import { defineConfig } from '@​playwright/test'; export default defineConfig({ use: { trace: 'retain-on-first-failure', }, });
-
New property testInfo.tags exposes test tags during test execution.
test('example', async ({ page }) => { console.log(test.info().tags); });
-
New method locator.contentFrame() converts a
Locator
object to aFrameLocator
. This can be useful when you have aLocator
object obtained somewhere, and later on would like to interact with the content inside the frame.const locator = page.locator('iframe[name="embedded"]'); // ... const frameLocator = locator.contentFrame(); await frameLocator.getByRole('button').click();
-
New method frameLocator.owner() converts a
FrameLocator
object to aLocator
. This can be useful when you have aFrameLocator
object obtained somewhere, and later on would like to interact with theiframe
element.const frameLocator = page.frameLocator('iframe[name="embedded"]'); // ... const locator = frameLocator.owner(); await expect(locator).toBeVisible();
UI Mode Updates
- See tags in the test list.
- Filter by tags by typing
@fast
or clicking on the tag itself. - New shortcuts:
- F5 to run tests.
- Shift F5 to stop running tests.
- Ctrl ` to toggle test output.
Browser Versions
- Chromium 124.0.6367.29
- Mozilla Firefox 124.0
- WebKit 17.4
This version was also tested against the following stable channels:
- Google Chrome 123
- Microsoft Edge 123
v1.42.1
Highlights
https://github.com/microsoft/playwright/issues/29732 - [Regression]: HEAD requests to webServer.url since v1.42.0https://github.com/microsoft/playwright/issues/297466 - [Regression]: Playwright CT CLI scripts fail due to broken initializePlugin imporhttps://github.com/microsoft/playwright/issues/2973939 - [Bug]: Component tests fails when imported a module with a dot in a nahttps://github.com/microsoft/playwright/issues/29731731 - [Regression]: 1.42.0 breaks some import statemehttps://github.com/microsoft/playwright/issues/297609760 - [Bug]: Possible regression with chained locators in v1.42
Browser Versions
- Chromium 123.0.6312.4
- Mozilla Firefox 123.0
- WebKit 17.4
This version was also tested against the following stable channels:
- Google Chrome 122
- Microsoft Edge 123
v1.42.0
New APIs
-
Test tags
New tag syntax for adding tags to the tests (@-tokens in the test title are still supported).
test('test customer login', { tag: ['@​fast', '@​login'] }, async ({ page }) => { // ... });
Use
--grep
command line option to run only tests with certain tags.npx playwright test --grep @​fast
-
Annotating skipped tests
New annotation syntax for test annotations allows annotating the tests that do not run.
test('test full report', { annotation: [ { type: 'issue', description: 'https://github.com/microsoft/playwright/issues/23180' }, { type: 'docs', description: 'https://playwright.dev/docs/test-annotations#tag-tests' }, ], }, async ({ page }) => { // ... });
-
page.addLocatorHandler()
New method page.addLocatorHandler() registers a callback that will be invoked when specified element becomes visible and may block Playwright actions. The callback can get rid of the overlay. Here is an example that closes a cookie dialog when it appears.
// Setup the handler. await page.addLocatorHandler( page.getByRole('heading', { name: 'Hej! You are in control of your cookies.' }), async () => { await page.getByRole('button', { name: 'Accept all' }).click(); }); // Write the test as usual. await page.goto('https://www.ikea.com/'); await page.getByRole('link', { name: 'Collection of blue and white' }).click(); await expect(page.getByRole('heading', { name: 'Light and easy' })).toBeVisible();
-
Project wildcard filter Playwright command line flag now supports '*' wildcard when filtering by project.
npx playwright test --project='*mobile*'
-
Other APIs
-
expect(callback).toPass({ timeout }) The timeout can now be configured by
expect.toPass.timeout
option globally or in project config -
electronApplication.on('console') electronApplication.on('console') event is emitted when Electron main process calls console API methods.
electronApp.on('console', async msg => { const values = []; for (const arg of msg.args()) values.push(await arg.jsonValue()); console.log(...values); }); await electronApp.evaluate(() => console.log('hello', 5, { foo: 'bar' }));
-
page.pdf() accepts two new options
tagged
andoutline
.
-
Breaking changes
Mixing the test instances in the same suite is no longer supported. Allowing it was an oversight as it makes reasoning about the semantics unnecessarily hard.
const test = baseTest.extend({ item: async ({}, use) => {} });
baseTest.describe('Admin user', () => {
test('1', async ({ page, item }) => {});
test('2', async ({ page, item }) => {});
});
Announcements
- ⚠️ Ubuntu 18 is not supported anymore.
Browser Versions
- Chromium 123.0.6312.4
- Mozilla Firefox 123.0
- WebKit 17.4
This version was also tested against the following stable channels:
- Google Chrome 122
- Microsoft Edge 123
v1.41.2
Highlights
https://github.com/microsoft/playwright/issues/29123 - [REGRESSION] route.continue: Protocol error (Fetch.continueRequest): Invalid InterceptionId.
Browser Versions
- Chromium 121.0.6167.57
- Mozilla Firefox 121.0
- WebKit 17.4
This version was also tested against the following stable channels:
- Google Chrome 120
- Microsoft Edge 120
v1.41.1
Highlights
https://github.com/microsoft/playwright/issues/29067 - [REGRESSION] Codegen/Recorder: not all clicks are being actioned nor recordedhttps://github.com/microsoft/playwright/issues/290288 - [REGRESSION] React component tests throw type error when passing null/undefined to componenhttps://github.com/microsoft/playwright/issues/2902727 - [REGRESSION] React component tests not passing Date prop valuhttps://github.com/microsoft/playwright/issues/29023023 - [REGRESSION] React component tests not rendering children phttps://github.com/microsoft/playwright/issues/290199019 - [REGRESSION] trace.playwright.dev does not currently support the loading from URL
Browser Versions
- Chromium 121.0.6167.57
- Mozilla Firefox 121.0
- WebKit 17.4
This version was also tested against the following stable channels:
- Google Chrome 120
- Microsoft Edge 120
v1.41.0
New APIs
- New method page.unrouteAll([options]) removes all routes registered by page.route(url, handler, handler[, options]) and page.routeFromHAR(har[, options]). Optionally allows to wait for ongoing routes to finish, or ignore any errors from them.
- New method browserContext.unrouteAll([options]) removes all routes registered by browserContext.route(url, handler, handler[, options]) and browserContext.routeFromHAR(har[, options]). Optionally allows to wait for ongoing routes to finish, or ignore any errors from them.
- New option
style
in page.screenshot([options]) and locator.screenshot([options]) to add custom CSS to the page before taking a screenshot. - New option
stylePath
for methods expect(page).toHaveScreenshot(name[, options]) and expect(locator).toHaveScreenshot(name[, options]) to apply a custom stylesheet while making the screenshot. - New
fileName
option for Blob reporter, to specify the name of the report to be created.
Browser Versions
- Chromium 121.0.6167.57
- Mozilla Firefox 121.0
- WebKit 17.4
This version was also tested against the following stable channels:
- Google Chrome 120
- Microsoft Edge 120
nodejs/node (node)
v16.20.2
: 2023-08-09, Version 16.20.2 'Gallium' (LTS), @RafaelGSS
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
- CVE-2023-32002: Policies can be bypassed via Module._load (High)
- CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
- CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
- OpenSSL Security Releases
More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.
Commits
- [
40c3958a5a
] - deps: update archs files for OpenSSL-1.1.1v (RafaelGSS) #49043 - [
a9ac9da89a
] - deps: fix openssl crypto clean (RafaelGSS) #49043 - [
362d4c7494
] - deps: upgrade openssl sources to OpenSSL_1_1_1v (RafaelGSS) #49043 - [
d8ccfe9ad4
] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#445 - [
242aaa0caa
] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#459
v16.20.1
: 2023-06-20, Version 16.20.1 'Gallium' (LTS), @RafaelGSS
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
-
CVE-2023-30581:
mainModule.__proto__
Bypass Experimental Policy Mechanism (High) - CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
- CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
- CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
- OpenSSL Security Releases
- c-ares vulnerabilities:
More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.
Commits
- [
5a92ea7a3b
] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen) - [
5df04e893a
] - deps: setCARES_RANDOM_FILE
for c-ares (Richard Lau) #48156 - [
c171cbd124
] - deps: update c-ares to 1.19.1 (RafaelGSS) #48115 - [
155d3aac02
] - deps: update archs files for OpenSSL-1.1.1u+quic (RafaelGSS) #48369 - [
8d4c8f8ebe
] - deps: upgrade openssl sources to OpenSSL_1_1_1u (RafaelGSS) #48369 - [
1a5c9284eb
] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#426 - [
e42ff4b018
] - http: disable request smuggling via empty headers (Paolo Insogna) nodejs-private/node-private#429 - [
10042683c8
] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#408 - [
a6f4e87bc9
] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#416 - [
b77000f4d7
] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #47851
v16.20.0
: 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggs
Notable Changes
- deps:
- (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #44376
Commits
- [
de6dd67790
] - crypto: avoid hang when no algorithm available (Richard Lau) #46237 - [
4617512788
] - crypto: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) #46185 - [
24972164fc
] - deps: update undici to 5.20.0 (Node.js GitHub Bot) #46711 - [
85f88c6a8d
] - deps: V8: cherry-pick90be99f
(Michaël Zasso) #46646 - [
b4ebe6d47b
] - deps: update c-ares to 1.19.0 (Michaël Zasso) #46415 - [
56cbc7fdda
] - deps: V8: cherry-pickc2792e5
(Jiawen Geng) #44961 - [
7af9bdb31e
] - deps: upgrade npm to 8.19.4 (npm team) #46677 - [
962a7471b5
] - deps: update corepack to 0.17.0 (Node.js GitHub Bot) #46842 - [
748bc96e35
] - deps: update corepack to 0.16.0 (Node.js GitHub Bot) #46710 - [
a467782499
] - deps: update corepack to 0.15.3 (Node.js GitHub Bot) #46037 - [
1913b6763d
] - deps: update corepack to 0.15.2 (Node.js GitHub Bot) #45635 - [
809371a15f
] - module: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) #45147 - [
086bb2f8d4
] - Revert "src: let http2 streams end after session close" (Rich Trott) #46721 - [
6a01d39120
] - (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #44376 - [
d081032a60
] - test: fix test-net-connect-reset-until-connected (Vita Batrla) #46781 - [
efe1be47ec
] - test: skip test depending onoverlapped-checker
when not available (Antoine du Hamel) #45015 - [
fc47d58abe
] - test: remove cjs loader from stack traces (Geoffrey Booth) #44197 - [
cf76d0790d
] - test: fix WPT title when no META title is present (Filip Skokan) #46804 - [
0d1485b924
] - test: fix default WPT titles (Filip Skokan) #46778 - [
088e9cde3d
] - test: add WPTRunner support for variants and generating WPT reports (Filip Skokan) #46498 - [
908c4dff44
] - test: mark test-crypto-key-objects flaky on Linux (Richard Lau) #46684 - [
768e56227e
] - tools: makeutils.SearchFiles
deterministic (Bruno Pitrus) #44496
v16.19.1
: 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlau
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
- CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
- CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
- CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
Fixed by an update to undici:
-
CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
- See https://github.com/nodejs/undici/security/advisories/GHSA-5r9g-qh6m-jxff for more information.
-
CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
- See https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w for more information.
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.
This security release includes OpenSSL security updates as outlined in the recent OpenSSL security advisory.
Commits
- [
7fef050447
] - build: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) nodejs-private/node-private#374 - [
b558e9f476
] - crypto: clear OpenSSL error on invalid ca cert (RafaelGSS) nodejs-private/node-private#375 - [
160adb7ffc
] - crypto: clear OpenSSL error queue after calling X509_check_private_key() (Filip Skokan) #45495 - [
d0ece30948
] - crypto: clear OpenSSL error queue after calling X509_verify() (Takuro Sato) #45377 - [
2d9ae4f184
] - deps: update undici to v5.19.1 (Matteo Collina) nodejs-private/node-private#388 - [
d80e8312fd
] - deps: cherry-pick Windows ARM64 fix for openssl (Richard Lau) #46568 - [
de5c8d2c2f
] - deps: update archs files for quictls/openssl-1.1.1t+quic (RafaelGSS) #46568 - [
1a8ccfe908
] - deps: upgrade openssl sources to OpenSSL_1_1_1t+quic (RafaelGSS) #46568 - [
693789780b
] - doc: clarify release notes for Node.js 16.19.0 (Richard Lau) #45846 - [
f95ef064f4
] - lib: makeRequireFunction patch when experimental policy (RafaelGSS) nodejs-private/node-private#358 - [
b02d895137
] - policy: makeRequireFunction on mainModule.require (RafaelGSS) nodejs-private/node-private#358 - [
d7f83c420c
] - test: avoid left behind child processes (Richard Lau) #46276
v16.19.0
: 2022-12-13, Version 16.19.0 'Gallium' (LTS), @richardlau
Notable Changes
OpenSSL 1.1.1s
This update is a bugfix release and does not address any security vulnerabilities.
Root certificates updated to NSS 3.85
Certificates added:
- Autoridad de Certificacion Firmaprofesional CIF
A626340
- Certainly Root E1
- Certainly Root R1
- D-TRUST BR Root CA 1 2020
- D-TRUST EV Root CA 1 2020
- DigiCert TLS ECC P384 Root G5
- DigiCert TLS RSA4096 Root G5
- E-Tugra Global Root CA ECC v3
- E-Tugra Global Root CA RSA v3
- HiPKI Root CA - G1
- ISRG Root X2
- Security Communication ECC RootCA1
- Security Communication RootCA3
- Telia Root CA v2
- vTrus ECC Root CA
- vTrus Root CA
Certificates removed:
- Cybertrust Global Root
- DST Root CA X3
- GlobalSign Root CA - R2
- Hellenic Academic and Research Institutions RootCA 2011
Time zone update to 2022f
Time zone data has been updated to 2022f. This includes changes to Daylight Savings Time (DST) for Fiji and Mexico. For more information, see https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.
Other Notable Changes
- [
33707dcd03
] - dgram: add dgram send queue info (theanarkh) #44149
Dependency updates:
- [
3b2b70d792
] - deps: upgrade npm to 8.19.3 (npm team) #45322
Experimental features:
- [
1e0dcd1ee0
] - cli: add--watch
(Moshe Atlow) #44366 - [
8c73279ebb
] - util: add default value option to parsearg (Manuel Spigolon) #44631
Commits
- [
bbef3c42f6
] - build: add version info to timezone update PR (Darshan Sen) #45021 - [
cc2c7648e0
] - build: support Python 3.11 (Luigi Pinca) #45191 - [
ac24c80663
] - build: remove redundant condition from common.gypi (Richard Lau) #45076 - [
03dcbe3030
] - build: fix bad upstream merge (Stephen Gallagher) #44642 - [
1e0dcd1ee0
] - cli: add--watch
(Moshe Atlow) #44366 - [
96d131665e
] - cluster: use inspector utils (Moshe Atlow) #44592 - [
704836033a
] - crypto: update root certificates (Luigi Pinca) #45490 - [
5a776d4a69
] - deps: update timezone to 2022f (Richard Lau) #45613 - [
3b2b70d792
] - deps: upgrade npm to 8.19.3 (npm team) #45322 - [
9fbc8b21db
] - deps: update corepack to 0.15.1 (Node.js GitHub Bot) #45331 - [
87e3d002ca
] - deps: update corepack to 0.15.0 (Node.js GitHub Bot) #45235 - [
e972ff7b13
] - deps: V8: backportbbd800c
(Chengzhong Wu) #44947 - [
af9d8217c0
] - deps: V8: cherry-pickb953542
(Chengzhong Wu) #44947 - [
38202d321b
] - deps: update undici to 5.12.0 (Node.js GitHub Bot) #45236 - [
7c0da6adf9
] - deps: update archs files for OpenSSL-1.1.1s (RafaelGSS) #45274 - [
1149ead6f7
] - deps: upgrade openssl sources to OpenSSL_1_1_1s (RafaelGSS) #45274 - [
cd54bce4f5
] - deps: update timezone (Node.js GitHub Bot) #44950 - [
2901abe4f0
] - deps: update undici to 5.11.0 (Node.js GitHub Bot) #44929 - [
c80cf97033
] - deps: update corepack to 0.14.2 (Node.js GitHub Bot) #44775 - [
33707dcd03
] - dgram: add dgram send queue info (theanarkh) #44149 - [
c708d9bb94
] - doc: fix typo in parseArgs default value (Tobias Nießen) #45083 - [
5a0efa05d2
] - node-api: handle no support for external buffers (Michael Dawson) #45181 - [
db31de634e
] - readline: refactor to avoid unsafe regex primordials (Antoine du Hamel) #43475 - [
fbc52e5729
] - src: disambiguate terms used to refer to builtins and addons (Joyee Cheung) #44135 - [
953072d3db
] - src: let http2 streams end after session close (Santiago Gimeno) #45153 - [
54608d8dc3
] - src: split property helpers from node::Environment (Chengzhong Wu) #44056 - [
6733556783
] - test: add test to validate changelogs for releases (Richard Lau) #45325 - [
821d832cef
] - test: mark test-watch-mode* as flaky on all platforms (Pierrick Bouvier) #45049 - [
02a18eac69
] - test: fix test-runner-inspect (Moshe Atlow) #44620 - [
197df63f74
] - test: add a test to ensure the correctness of timezone upgrades (Darshan Sen) #45299 - [
42e9d8016a
] - test: fix textdecoder test for small-icu builds (Richard Lau) #45225 - [
6d736a56d8
] - test: fix watch mode test flake (Moshe Atlow) #44739 - [
543d3d2bf3
] - test: deflake watch mode tests (Moshe Atlow) #44621 - [
97f6caf4eb
] - test: split watch mode inspector tests to sequential (Moshe Atlow) #44551 - [
499750ff7a
] - test: update list of known globals (Antoine du Hamel) #45255 - [
64d343af74
] - test_runner: support using--inspect
with--test
(Moshe Atlow) #44520 - [
99ee5e484d
] - test_runner: fixduration_ms
to be milliseconds (Moshe Atlow) #44450 - [
37e909251c
] - test_runner: support programmatically running--test
(Moshe Atlow) #44241 - [
0ae5694f88
] - tools: update certdata.txt (Luigi Pinca) #45490 - [
891368cefd
] - tools: remove faulty early termination logic from update-timezone.mjs (Darshan Sen) #44870 - [
543493c242
] - tools: fix timezone update tool (Darshan Sen) #44870 - [
c77f660b75
] - tools: fixcreate-or-update-pull-request-action
hash on GHA (Antoine du Hamel) #45166 - [
58c30dd049
] - tools: update gr2m/create-or-update-pull-request-action (Luigi Pinca) #45022 - [
749a4b3e5e
] - tools: use Python 3.11 in GitHub Actions workflows (Luigi Pinca) #45191 - [
6f541d99a5
] - tools: have test-asan use ubuntu-20.04 (Filip Skokan) #45581 - [
e7ed56f501
] - tools: make license-builder.sh comply with shellcheck 0.8.0 (Rich Trott) #41258 - [
cc819b4bf8
] - tools: fix typo inavoid-prototype-pollution
lint rule (Antoine du Hamel) #44446 - [
254358c81e
] - tools: refactoravoid-prototype-pollution
lint rule (Antoine du Hamel) #43476 - [
8c73279ebb
] - util: add default value option to parsearg (Manuel Spigolon) #44631
v16.18.1
: 2022-11-04, Version 16.18.1 'Gallium' (LTS), @BethGriggs
This is a security release.
Notable changes
The following CVEs are fixed in this release:
- CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
- [
9ffddd7098
] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354
v16.18.0
: 2022-10-12, Version 16.18.0 'Gallium' (LTS), @juanarbol
Notable changes
- [
1cc050eaa8
] - (SEMVER-MINOR) assert: addgetCalls
andreset
to callTracker (Moshe Atlow) #44191 - [
e5c9975f11
] - (SEMVER-MINOR) crypto: allow zero-length secret KeyObject (Filip Skokan) #44201 - [
317cd051ce
] - (SEMVER-MINOR) crypto: allow zero-length IKM in HKDF and in webcrypto PBKDF2 (Filip Skokan) #44201 - [
f80bdc5ef3
] - (SEMVER-MINOR) doc: deprecate modp1, modp2, and modp5 groups (Tobias Nießen) #44588 - [
8398e98b1b
] - (SEMVER-MINOR) http: make idle http parser count configurable (theanarkh) #43974 - [
2cd2f56962
] - (SEMVER-MINOR) http: throw error on content-length mismatch (sidwebworks) #44378 - [
6be761e8a9
] - (SEMVER-MINOR) lib: add diagnostics channel for process and worker (theanarkh) #44045 - [
1400796cef
] - (SEMVER-MINOR) net,tls: pass a valid socket ontlsClientError
(Daeyeon Jeong) #44021 - [
092239a7f1
] - (SEMVER-MINOR) net: add local family (theanarkh) #43975 - [
381e11e18e
] - (SEMVER-MINOR) report: expose report public native apis (Chengzhong Wu) #44255 - [
2ba547aa5b
] - (SEMVER-MINOR) src: expose environment RequestInterrupt api (Chengzhong Wu) #44362 - [
6ed3367155
] - (SEMVER-MINOR) stream: addReadableByteStream.tee()
(Daeyeon Jeong) #44505 - [
0fbedac6ce
] - (SEMVER-MINOR) test_runner: add before/after/each hooks (Moshe Atlow) #43730 - [
70563b53c5
] - (SEMVER-MINOR) util: addmaxArrayLength
option to Set and Map (Kohei Ueno) #43576
Commits
- [
1cc050eaa8
] - (SEMVER-MINOR) assert: addgetCalls
andreset
to callTracker (Moshe Atlow) #44191 - [
2e87cdd1e6
] - benchmark: fix startup benchmark (Evan Lucas) #44727 - [
29c0f9ef30
] - benchmark: add stream destroy benchmark (SindreXie) #44533 - [
f01bb58c1e
] - bootstrap: update comments in bootstrap/node.js (Joyee Cheung) #44726 - [
db151e182f
] - bootstrap: stop delaying instantiation of maps in per-context scripts (Darshan Sen) #42934 - [
f700074c57
] - buffer: fixatob
input validation (Austin Kelleher) #42662 - [
e10095a759
] - build: update timezone-update.yml (Alex) #44717 - [
bec2ede687
] - build: remove redundant entry in crypto (Jiawen Geng) #44604 - [
7b3a2c3353
] - build: rewritten the Android build system (BuShe Pie) #44207 - [
e96bb14942
] - build: add --libdir flag to configure (Stephen Gallagher) #44361 - [
2a4491b34d
] - build: added NINJA env to customize ninja binary (Jeff Dickey) #44293 - [[
aaad7a64b4
](https://togithub.com/nodejs/node/commi
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
- [ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.