Repository navigation
⬆️ Updates Node.js to v26 - #561
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
🏷️ [bumpr] |
1 similar comment
|
🏷️ [bumpr] |
|
Thanks for the PR! This section of the codebase is owner by https://github.com/AlexRogalskiy/ - if they write a comment saying "LGTM" then it will be merged. |
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
from
May 7, 2026 15:31
37ebb41 to
9d93b19
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
2 times, most recently
from
May 21, 2026 06:02
cbf9b49 to
105bdfd
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
2 times, most recently
from
June 2, 2026 00:36
61715bb to
a779df0
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
3 times, most recently
from
June 25, 2026 00:38
b26d938 to
15d9b19
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
from
June 25, 2026 15:02
15d9b19 to
b46e339
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
from
July 8, 2026 13:29
b46e339 to
658ab2d
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
4 times, most recently
from
August 4, 2026 06:47
9d1eccf to
f47adb6
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
2 times, most recently
from
August 6, 2026 04:33
69142ad to
f558614
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
from
August 26, 2026 22:29
f558614 to
14c8c71
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
4 times, most recently
from
October 8, 2026 06:29
7410d1d to
7ab14f6
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
from
October 13, 2026 14:58
7ab14f6 to
889c2a7
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
4 times, most recently
from
October 21, 2026 11:10
035545e to
0081afd
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
2 times, most recently
from
October 22, 2026 18:46
6898fa7 to
85cf5c4
Compare
renovate
Bot
force-pushed
the
renovate/node-26.x
branch
from
October 23, 2026 12:59
85cf5c4 to
1c94fcc
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
>= v8.17.0→>= 26.12.112.x→26.12.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
nodejs/node (node)
v26.12.1: 2026-10-21, Version 26.12.1 (Current), @aduh95 prepared by @RafaelGSSCompare Source
This is a security release.
Notable Changes
BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH(Antoine du Hamel) – High0ed4268(Evgenii Kliuchnikov) – High93cd21e(Joyee Cheung)Commits
818e4ca061] - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) #66877fd3c87ed43] - crypto: harden X.509 conversion and formatting (Filip Skokan) nodejs-private/node-private#966acffa610db] - crypto: reset random caches across snapshots (Filip Skokan) nodejs-private/node-private#9877895a5cd2d] - deps: update undici to 8.12.2 (Node.js GitHub Bot) #6672112daa54d2e] - deps: V8: backport93cd21e(Joyee Cheung) nodejs-private/node-private#9996a8b3db7e2] - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) #66868a6040b50d9] - deps: brotli: cherry-pick0ed4268(Evgenii Kliuchnikov) nodejs-private/node-private#10026b78ea171d] - dns: validate resolve inputs for null bytes (James M Snell) nodejs-private/node-private#9840683ee5f7d] - http: ensure agent data guard works without I/O (James M Snell) nodejs-private/node-private#983e5cae10148] - Revert "module: synchronously load most ES modules" (Antoine du Hamel) #66786cc244131aa] - permission: check permission model in realpathSync (RafaelGSS) nodejs-private/node-private#9730392385841] - src: exposeBROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH(Antoine du Hamel) nodejs-private/node-private#1002c273a408c9] - src: fix the fs permission tree node on wildcard nodes (James M Snell) nodejs-private/node-private#986a2caddd20e] - tls: reject chains containing blocked public keys (Ulises Gascon) #66871ad788ccd07] - tls: reject non-canonical IP addresses (Matteo Collina) nodejs-private/node-private#982cd4b05469c] - tls: fix ip normalization regression (James M Snell) nodejs-private/node-private#9855fa440e0d7] - tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett) #66855745ad77156] - zlib: avoid caching invalid ZIP local headers (Matteo Collina) nodejs-private/node-private#981v24.22.1: 2026-10-21, Version 24.22.1 'Krypton' (LTS), @aduh95Compare Source
This is a security release.
Notable Changes
BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH(Antoine du Hamel)0ed4268(Evgenii Kliuchnikov)Commits
2a73ee5a89] - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) #668774d6990b33c] - crypto: reset random caches across snapshots (Filip Skokan) nodejs-private/node-private#9874b3c9bbf9f] - crypto: harden X.509 conversion and formatting (Filip Skokan) nodejs-private/node-private#10079243b105b6] - crypto: update root certificates to NSS 3.129 (Node.js GitHub Bot) #664961e39cd53c7] - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) #6686849dff6f57a] - deps: brotli: cherry-pick0ed4268(Evgenii Kliuchnikov) nodejs-private/node-private#1002fca511adc5] - deps: V8: backport93cd21e(Joyee Cheung) nodejs-private/node-private#100818711c7567] - deps: update timezone to 2026e (Node.js GitHub Bot) #66419fa77cfb1ad] - deps: update timezone to 2026d (Node.js GitHub Bot) #66333b84f9f186b] - deps: update archs files for openssl-3.5.9 (Node.js GitHub Bot) #66396ff0664c3ba] - deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) #663961d4c89ef87] - deps: update undici to 7.30.1 (Node.js GitHub Bot) #66764843a1627dc] - dns: validate resolve inputs for null bytes (James M Snell) nodejs-private/node-private#98496c3ccb1fc] - http: ensure agent data guard works without I/O (James M Snell) nodejs-private/node-private#9838dc18a6218] - permission: check permission model in realpathSync (RafaelGSS) nodejs-private/node-private#973b5f41529df] - src: exposeBROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH(Antoine du Hamel) nodejs-private/node-private#100201acf0ee74] - tls: reject chains containing blocked public keys (Ulises Gascón) #66871935918e342] - tls: reject non-canonical IP addresses (Matteo Collina) nodejs-private/node-private#982de49c913f2] - tls: fix ip normalization regression (James M Snell) nodejs-private/node-private#9859dc4bb57f0] - tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett) #66855v24.22.0: 2026-10-14, Version 24.22.0 'Krypton' (LTS), @richardlau prepared by @aduh95Compare Source
Notable Changes
ddbf974b47] - (SEMVER-MINOR) crypto: addcrypto.parsePKCS12()(Brian Muenzenmeyer) #65627c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #6548451aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #66090acc1578179] - doc: deprecateServer.prototype._listen2innode:net(Antoine du Hamel) #65593a7f8de6362] - (SEMVER-MINOR) net: support sendingnet.BoundSocketto threads and child processes (Guy Bedford) #6472560c3eb61bd] - (SEMVER-MINOR) perf_hooks: implementSlidingWindowHistogram(James M Snell) #658256b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #6580675456a3512] - (SEMVER-MINOR) perf_hooks: implement HistogrammeanCIAPI (James M Snell) #6560672d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #6543441161dda87] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.close()(Guilherme Araújo) #64232adbc757d70] - (SEMVER-MINOR) sqlite: addStatementSync.prototype[Symbol.dispose]()(Guilherme Araújo) #64232241339f072] - (SEMVER-MINOR) src,lib: addutil.markPromiseAsHandled(James M Snell) #6580563b0974d9e] - (SEMVER-MINOR) util: implementutil.throttle(James M Snell) #65899a3bbb5a26f] - (SEMVER-MINOR) util: implementdebounce(James M Snell) #65899Commits
e6832b2cb1] - assert: fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) #64449a079177d9f] - benchmark: add --csv option to compare.js with --analyze (James M Snell) #6592210b1a0f70f] - benchmark: fix max-regressions detection in compare.js (James M Snell) #65587e0c7ba8ad5] - benchmark: add --analyze option to benchmark/scatter.js (James M Snell) #6559421fed10bb0] - benchmark: add crypto class benchmarks (Filip Skokan) #65518fa912242b7] - buffer: fix unaligned UTF-16LE decoding (Matteo Collina) #65905a6bd0c1413] - build: suppress OpenSSL asm warnings with clang (Richard Lau) #6602394e12139ee] - build: derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) #657447a2f322943] - build: fix quiet default for make builds (Shelley Vohr) #65826c280d650b0] - build: allow linking shared dependencies in the GN build (Shelley Vohr) #657974b23a4472c] - build: enable the V8 sandbox in shared-cage builds (Shelley Vohr) #62237676e15c003] - build: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #65464f784058482] - build: remove obsolete configure flags (Chengzhong Wu) #65456f63f37d243] - build: activate correct default flags for riscv64 (Stewart X Addison) #65708da46ac075d] - build: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) #65491249e9a16dd] - build,src: gate jspi flag on V8_ENABLE_WEBASSEMBLY (Piotr Kubaj) #66082146f00f64b] - child_process: clear timeout timer on spawn-time error too (kishore280) #6550613987f4418] - crypto: remove redundentstd::movecall (Antoine du Hamel) #66111ef957ac85f] - crypto: skip private RSA parameters in key details (Filip Skokan) #661088feccc5e22] - crypto: use provider EC group names (Filip Skokan) #66108764e0d1120] - crypto: fetch ciphers for private-key encoding (Filip Skokan) #6610850ffed1979] - crypto: decode PKCS#1 keys through providers (Filip Skokan) #6610856c16b2fd6] - crypto: derive keys through EVP_KDF (Filip Skokan) #66108a4effe6809] - crypto: use names for asymmetric key algorithms (Filip Skokan) #65966ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #656278e631aa48f] - crypto: add Hybrid KEMs to Web Cryptography (Filip Skokan) #657595c51129e16] - crypto: optimize private EC JWK import (Filip Skokan) #65908c2ec40c2d7] - crypto: disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) #65172e198aa0f79] - crypto: read RSA-PSS restrictions from provider (Filip Skokan) #66108253784f0e9] - crypto: optimize and benchmark key preparation (Filip Skokan) #6589280a6ad509b] - crypto: avoid EC reconstruction for signature sizing (Filip Skokan) #659085b592b772c] - crypto: avoid EC raw export reconstruction (Filip Skokan) #65908ee956ae3bf] - crypto: export EC JWK coordinates directly (Filip Skokan) #65908684008be58] - crypto: read EC curve metadata directly (Filip Skokan) #65908f4665f1c41] - crypto: validate the limit of PBKDF2 iterations (Filip Skokan) #65704624abbecd7] - crypto: use primordials in HKDF info validation (Filip Skokan) #65704e4d916f175] - crypto: add mgf1Hash for RSA-OAEP (Adam Mcgrath) #65073db8a9162a8] - crypto: fix multi-prime RSA JWKs (Filip Skokan) #65649022ac83504] - crypto: cache valid ECDH key pairs (Filip Skokan) #65615c61953ebcc] - crypto: add strict mode to --force-fips (Filip Skokan) #65645db6ea132a5] - crypto: add FIPS indicator diagnostics channel (Filip Skokan) #65645c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #655532b62aafd20] - crypto: validate JWK usages before key_ops (Filip Skokan) #65550ec7819db69] - crypto: fix RSA-PSS oversized salt handling (Filip Skokan) #65550a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #6548451aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #634115a46a9acbb] - crypto: improve SubtleCrypto.supports() accuracy (Filip Skokan) #65222191ebfb26c] - crypto: fix public PKCS8 export error (한국) #65609b6d7ed372b] - crypto: fix private SPKI export error (Filip Skokan) #6555079509c25a4] - crypto: correct CCM decryption FIPS error message (kyungrae) #654509adc87bc16] - crypto: harden X509Certificate state (Filip Skokan) #65518c63aa331b4] - crypto: optimize key slot caching (Filip Skokan) #6551887daea43a7] - crypto: add null checks for OPENSSL_INIT_new() (Nora Dossche) #6345798ca5e9358] - crypto: prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) #651120c090a28cd] - crypto: avoid throwing CryptoKey brand checks (Filip Skokan) #65503a13cc3f723] - crypto: avoid throwing KeyObject brand checks (Filip Skokan) #65503b8db0045ef] - deps: V8: cherry-pickea9c016(Gundepalli Sravani) #66570ba09b53487] - deps: V8: backportc355350(Jakob Linke) #660899ce8ef405b] - deps: V8: backport8901c79(Toon Verwaest) #66089fb0d0ca289] - deps: V8: backport0b94a9f(Ruan Gustavo) #657532faca508c0] - deps: update googletest to8eff9e3(Node.js GitHub Bot) #660094396c9bffe] - deps: update googletest to283c175(Node.js GitHub Bot) #658338a5b12570c] - deps: update simdjson to 4.6.11 (Node.js GitHub Bot) #65834c47feb09e8] - deps: update zlib to 1.3.2.1-motley-285e94b (Node.js GitHub Bot) #658359f0d905286] - deps: upgrade npm to 11.19.1 (npm team) #65573373cd332d8] - deps: update googletest to36ba75f(Node.js GitHub Bot) #65654aeed6132a7] - deps: update simdjson to 4.6.9 (Node.js GitHub Bot) #656552583571342] - deps: update zlib to 1.3.2.1-motley-5eb4d7e (Node.js GitHub Bot) #65494d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #660900a4a8d602a] - doc: fix duplicate 'the' typo innode_platform.cc(Muhammad Al-Muzahid) #66058b6538138ef] - doc: clarify sub-1000ms behavior in socket.setKeepAlive (Haram Jeong) #65869d319fa7de4] - doc: remove obsolete mentioning of cl.exe on windows (Chengzhong Wu) #6603867cb305b59] - doc: note that default signal handling resets the signal mask (Shelley Vohr) #65877160d44e025] - doc: clarify QUIC async write backpressure (John Finnerty) #65947ffd47a7ee5] - doc: clarify permission model scope for output paths (Rafael Gonzaga) #660042e1772a8ab] - doc: fill in missing zstd docs (James M Snell) #658679f88c6f8dc] - doc: add inoway46 as triager (Yuya Inoue) #65565c2620d01f3] - doc: document windowsHide for child_process.fork (Christopher Buss) #658876076111e1a] - doc: qualify directory read ordering for native fs (Trivikram Kamat) #658687bf048a336] - doc: add DOMException section to errors API reference (Avocado) #65206414b6bfa62] - doc: expand revert commit collaborator instructions (Mike McCready) #65848c8ac91692c] - doc: note that FreeEnvironment() runs a shared event loop (Shelley Vohr) #65691cc47cc0983] - doc: clarify security triage dispositions and permission boundaries (Rafael Gonzaga) #654368b79a71e78] - doc: fix default limit of maxHeadersCount (Aryn H) #6547256b1252a54] - doc: fix return types for sync methods (Chiang Fong Lee) #58575da0d32a333] - doc: document REPL DEP0185 throws and uncaught-exception behavior (Adrián Estrada) #64993f8ab3619b6] - doc: document close() error when in a sqlite callback (Trivikram Kamat) #65090131f1db302] - doc: clarify return type offs.mkdtemp*(Antoine du Hamel) #657437755e98183] - doc: updatechangelog-makerinstructions for releasing (Juan José) #65707f982a53433] - doc: add stability status tocrypto.setEngine(Antoine du Hamel) #6574617be003f7c] - doc: remove outdated TLS authorized warning (Tim Perry) #65597424002232d] - doc: fix stale TOC in maintaining-dependencies (greenhead) #65523dddb9b57a5] - doc: refactor the AI guidelines (Joyee Cheung) #65269397b58e113] - doc: fix triggerAsyncId() comment in async_hooks example (soreavis) #64583338ec94d83] - doc: fix fsPromises.watch overflow value (Matt Radbourne) #64605f18be21b14] - doc: clarify stream direction in options.stdio note (Avocado) #65236f07c6acd8b] - doc: clarify signal listener behavior (Som Samantray) #652438bc17b0c7a] - doc: add test reporter event lifecycle diagram (sangwook) #63780452e7477d4] - doc: discourage AbortSignal cleanup for long-lived resources (Efe Karasakal) #64342acc1578179] - doc: deprecateServer.prototype._listen2innode:net(Antoine du Hamel) #65593e7ed4361d6] - doc,test: account for OpenSSL 4.1 behaviours (Filip Skokan) #65956c65fafeab4] - errors: validate constructor name (Christian Aurich) #65607f6b47938b7] - events: fix weak listener retention overwrite (Aryan) #64024a27db42c3e] - fs: coerce FileHandle.read length like fs.read (Xia Chao) #65521f3019b522a] - fs: throw on existing dir in cpSync with errorOnExist (Daijiro Wachi) #64124cd1011458f] - fs: support removing read-only files in rmSync on Windows (Sparsh :)) #64453d659dd8cd8] - fs: give directories created by cpSync the source directory's mode (Shelley Vohr) #654881dfb047293] - fs: handle recursive watch setup races (Filip Skokan) #65699bc431c8413] - fs: apply nocase to literal glob exclude patterns (Yusuke Hayashi) #64817dd5662e641] - fs: do not descend into symlinks for ** unless following symlinks (RafaelGSS) #65435ac4cf54292] - fs: watch directories, not files, in recursive fs.watch fallback (Shelley Vohr) #654867804bfbd71] - fs: preserve directory timestamps in cp (Abhinandan Kumar) #65540ba5ca5a1a5] - fs: fix recursive watch error handling (Filip Skokan) #65635b71c4c0551] - fs: fix rmSync error messages for non-ASCII paths (Yeaseen) #6123353b4700892] - http: don't destroy socket after request completes (Barath Raj) #6595296d4c23f17] - http: fast-forward teardown of unread messages (Matteo Collina) #65732742b4bf5a6] - http: coalesce chunked writes during auto-corking (GetThatCookie) #649878921108175] - http2: settle pending write callbacks on destroy (Matteo Collina) #660169a2f77a3fc] - http2: fix onread assert when destroying session from stream handler (Sankalp Thakur) #6511699e41eb43a] - http2: error for incomplete reads on RST, auto-drain, deprecate aborted (Tim Perry) #63249d520b9601c] - http2: fix write deadlock exposed by larger window sizes (Tim Perry) #6544086b2497aae] - http2: fix async context loss when trailers carry END_STREAM (Orgad Shaneh) #63814536ccc7daf] - https: limit proxy CONNECT response headers (Matteo Collina) #64545fe6147832b] - inspector: fix abort when two Environments own the inspector (Shelley Vohr) #65877843a27782a] - inspector: fix crash when the IsolateData has no platform (Shelley Vohr) #658183f0b6d3308] - lib: avoid repeat internal receiver checks (Filip Skokan) #659100039479b4a] - lib: fix shared buffer growability validation (Filip Skokan) #65845e7907130ae] - lib: use Web IDL interface brand checks (Filip Skokan) #658467ae085552b] - lib: fix AbortSignal.any() abort propagation (Yuya Inoue) #6601401032f4fdc] - lib: fix for FileHandle.readableWebStream (Patrick Dähne) #5884260a9a28206] - lib: avoid unsafe array iteration in cli table (Donghoon Kang) #65838230a7fcef0] - lib: optimize internal Web IDL dictionaries (Filip Skokan) #658577cc02b14ec] - lib: validate sequence iterator objects (Filip Skokan) #65844c2bb3aeccc] - lib: defer source map payload decoding until first use (Shelley Vohr) #65490c4b390cf17] - lib: optimize async context frame activation (Tim Perry) #655193e4fc50a4f] - lib: use validateArray for array arguments (JunHwan Choi) #65344b351ac9cd4] - meta: bump step-security/harden-runner from 2.21.0 to 2.21.1 (dependabot[bot]) #66044693e890fec] - meta: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 (dependabot[bot]) #660469c2abc13c2] - meta: bump github/codeql-action/init from 4.37.9 to 4.38.0 (dependabot[bot]) #66048b3c5c2b91d] - meta: bump github/codeql-action/analyze from 4.37.9 to 4.38.0 (dependabot[bot]) #660492428b13b02] - meta: bump github/codeql-action/autobuild from 4.37.9 to 4.38.0 (dependabot[bot]) #66050eff5d15041] - meta: add joyeecheung as v8 currency strategic initiative champion (Joyee Cheung) #65965aa549fed0d] - meta: expand on collaborator restoration process (Chengzhong Wu) #65962593b40eb2b] - meta: add web-standards as webidl owners (Filip Skokan) #65856e711d3fef3] - meta: bump actions/checkout from 7.0.0 to 7.0.1 (dependabot[bot]) #657180fc8a38f5b] - meta: cleanup targos emeritus changes (Antoine du Hamel) #657382ca2fd566d] - meta: bump github/codeql-action/init from 4.37.3 to 4.37.9 (dependabot[bot]) #65714325709818e] - meta: bump github/codeql-action/autobuild from 4.37.3 to 4.37.9 (dependabot[bot]) #657178481d22f72] - meta: bump actions/setup-node from 6.4.0 to 7.0.0 (dependabot[bot]) #65720cd2bd5d9fd] - meta: bump step-security/harden-runner from 2.20.0 to 2.21.0 (dependabot[bot]) #65721fdec747105] - meta: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.9 (dependabot[bot]) #6572234c2fca088] - meta: bump github/codeql-action/analyze from 4.37.3 to 4.37.9 (dependabot[bot]) #6572346d4549938] - meta: document collaborator automation (Filip Skokan) #65671a7f8de6362] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #64725466f1f8e62] - net: fix BlockList.fromJSON for IPv4-mapped IPv6 rules (Daijiro Wachi) #64125cd04cb10d6] - net: recognize bare IPv6 loopback addresses in isLoopback (Daijiro Wachi) #63619d983942636] - node-api: make object property arrays const (Yilong Li) #65621cc124394cc] - path: removeStringPrototypeCharCodeAtfrom some methods ofposix(Wiyeong Seo) #5466860c3eb61bd] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #658256b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #658068aa870940c] - perf_hooks: reuse buffer for uv metrics (Donghoon Kang) #659859cfbfae660] - perf_hooks: validate import normalization offset (Matteo Collina) #6595075456a3512] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #65606127cb31864] - perf_hooks: add missing resource timing attributes (greenhead) #6501772d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #65434847fe4d049] - permission: block FileHandle fsync and fdatasync (Rafael Gonzaga) #65431fa9188bd63] - quic: fix two small bugs in HTTP/3 stream internals (Tim Perry) #65970ee80beaa9f] - quic: fix crash in onStreamClose (Marten Richter) #6586198486dd764] - quic: reject zero addressLRUSize (Christian Aurich) #6582797516fc256] - quic: stop guarding ngtcp2_recv_stop_sending callback field (René) #65688024bef25eb] - quic: remove unused fin flag from blob reader wakeup (trivenay) #653155468337456] - quic: release stream arenas before cleanup (Trivikram Kamat) #65410a794e36970] - sqlite: throw on invalid URL path instead of abort (Guilherme Araújo) #66026f58a55b8d0] - sqlite: add diagnostic channel (Guilherme Araújo) #62241be849bc6af] - sqlite: reject connection access from authorizer callbacks (Trevor Burnham) #6515641161dda87] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #64232adbc757d70] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232b7b18fdbc9] - sqlite: run backup completion in callback scope (Filip Skokan) #6566659827acd7f] - sqlite: isolate applyChangeset filter errors (Trivikram Kamat) #648235a01df2d15](httConfiguration
📅 Schedule: (in timezone Europe/Moscow)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.