doc/changelogs/CHANGELOG_V25.md
<a href="#25.8.2">25.8.2</a>
<a href="#25.8.1">25.8.1</a>
<a href="#25.8.0">25.8.0</a>
<a href="#25.7.0">25.7.0</a>
<a href="#25.6.1">25.6.1</a>
<a href="#25.6.0">25.6.0</a>
<a href="#25.5.0">25.5.0</a>
<a href="#25.4.0">25.4.0</a>
<a href="#25.3.0">25.3.0</a>
<a href="#25.2.1">25.2.1</a>
<a href="#25.2.0">25.2.0</a>
<a href="#25.1.0">25.1.0</a>
<a href="#25.0.0">25.0.0</a>
</td> </tr> </table><a id="25.9.0"></a>
MockModuleOptions.defaultExport and MockModuleOptions.namedExports have been
consolidated into a single option MockModuleOptions.exports to align with user
expectations and other test runners.
A default property on MockModuleOptions.exports represents the default
export, and own enumerable properties are treated as named exports.
An automated migration is available to update user code: https://github.com/nodejs/userland-migrations/tree/main/recipes/mock-module-exports
npx codemod @nodejs/mock-module-exports
Contributed by sangwook in #61727.
312476cb84] - (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger) #6167462d2cd473b] - (SEMVER-MINOR) cli: add --max-heap-size option (tannal) #58708d0ebf0e44b] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #62183f85b9d9fa8] - (SEMVER-MINOR) repl: add customizable error handling (Anna Henningsen) #6218867b854d407] - (SEMVER-MINOR) repl: remove dependency on node:domain (Matteo Collina) #61227966b700623] - (SEMVER-MINOR) sea: support code cache for ESM entrypoint in SEA (Joyee Cheung) #62158e1f0d2a014] - (SEMVER-MINOR) stream: add stream/iter Implementation (James M Snell) #62066312476cb84] - (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger) #61674bfff8cb2ab] - (SEMVER-MINOR) benchmark: add benchmarks for experimental stream/iter (James M Snell) #62066c721d68502] - benchmark: fix destructuring in dgram/single-buffer (Ali Hassan) #62084e2f03c8e92] - buffer: improve performance of multiple Buffer operations (Ali Hassan) #618712fcd07f1ba] - build: support empty libname flags in configure.py (Antoine du Hamel) #62477b800c57fce] - build: fix timezone-update path references (Chengzhong Wu) #622807dc5a1e9b4] - build: skip dockit on IBMi (SRAVANI GUNDEPALLI) #62189f0eea0f905] - build: fix --node-builtin-modules-path (Filip Skokan) #6211562d2cd473b] - (SEMVER-MINOR) cli: add --max-heap-size option (tannal) #58708ac4b485698] - crypto: update root certificates to NSS 3.121 (Node.js GitHub Bot) #62485d0ebf0e44b] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #621833009980d9d] - crypto: add crypto::GetSSLCtx API for addon access to OpenSSL contexts (Tim Perry) #62254f5725ca81d] - crypto: reject ML-KEM/ML-DSA PKCS#8 import without seed in SubtleCrypto (Filip Skokan) #62218f69ed4bc3f] - crypto: rename CShakeParams and KmacParams length to outputLength (Filip Skokan) #618754d96e53570] - crypto: refactor WebCrypto AEAD algorithms auth tag handling (Filip Skokan) #6216993d77719e8] - crypto: read algorithm name property only once in normalizeAlgorithm (Filip Skokan) #621703d2e23a981] - deps: update ada to 3.4.4 (Node.js GitHub Bot) #62414176d6d2205] - deps: update timezone to 2026a (Node.js GitHub Bot) #6216495c7fc67ba] - deps: update googletest to 2461743991f9aa53e9a3625eafcbacd81a3c74cd (Node.js GitHub Bot) #62484e5e9f2044a] - deps: update simdjson to 4.5.0 (Node.js GitHub Bot) #62382905b94266a] - deps: update ngtcp2 to 1.21.0 (Node.js GitHub Bot) #62051180c150122] - deps: V8: cherry-pick cf1bce40a5ef (Richard Lau) #62449bc265aa003] - deps: upgrade npm to 11.12.1 (npm team) #62448f1b28612c4] - deps: V8: cherry-pick b25cd62c7ba2 (Yagiz Nizipli) #62354757719d2af] - deps: disable rust icu compiled_data features (Chengzhong Wu) #622843bdc955b63] - deps: update sqlite to 3.51.3 (Node.js GitHub Bot) #62256a9703d194a] - deps: update googletest to 73a63ea05dc8ca29ec1d2c1d66481dd0de1950f1 (Node.js GitHub Bot) #6192785138935cb] - deps: update merve to 1.2.2 (Node.js GitHub Bot) #62213231521e75e] - diagnostics_channel: add diagnostics channels for web locks (Ilyas Shabi) #621230093863664] - doc: deprecate module.register() (DEP0205) (Geoffrey Booth) #623950b96ece6be] - doc: clarify that features cannot be both experimental and deprecated (Antoine du Hamel) #624568d3ea975f5] - doc: fix 'transfered' typo in quic.md (lilianakatrina684-a11y) #6249208ff16e0ba] - doc: move sqlite type conversion section to correct level (René) #6248261cc747dd8] - doc: add Rafael to last security release steward (Rafael Gonzaga) #6242364cfa5a6fa] - doc: use npm-published version of doc-kit (Aviv Keller) #621391020321fb0] - doc: fix overstated Date header requirement in response.sendDate (Kit Dallege) #622069caa7855b2] - doc: fix guaranteed typo (lilianakatrina684-a11y) #62374e254f65306] - doc: enhance clarification about the main field (Mowafak Almahaini) #623029e724b53f8] - doc: remove spawn with shell example from bat/cmd section (Kit Dallege) #622437f37c17516] - doc: minor typo fix (Jeff Matson) #62358eb0ca98f01] - doc: add path to vulnerabilities.json mention (Rafael Gonzaga) #62355198b6e0932] - doc: deprecate CryptoKey use in node:crypto (Filip Skokan) #6232117e5aee6c5] - doc: fix small environment_variables typo (chris) #62279193d629895] - doc: test and test-only targets do not run linter (Xavier Stouder) #621204a1f20ec4a] - doc: clarify fs.ReadStream and fs.WriteStream are not constructable (Kit Dallege) #62208f976c9214d] - doc: clarify that any truthy value of shell is part of DEP0190 (Antoine du Hamel) #622494d83972681] - doc: remove outdated Chrome 66 and ndb references from debugger (Kit Dallege) #6220271f2eada5b] - doc: add throwIfNoEntry version history to fs.stat (kovan) #62204670c80893b] - doc: add note (and caveat) for mock.module about customization hooks (Jacob Smith) #620752ff5cb13f5] - doc,test: clarify --eval syntax for leading '-' scripts (kovan) #622446c6c9004c4] - esm: fix typo in worker loader hook comment (jakecastelli) #624751cdd23c9f3] - esm: fix source phase identity bug in loadCache eviction (Guy Bedford) #624154f4ff15794] - esm: fix path normalization in finalizeResolution (Antoine du Hamel) #62080088167d102] - events: avoid cloning listeners array on every emit (Gürgün Dayıoğlu) #622610250b436ee] - fs: fix cpSync to handle non-ASCII characters (Stefan Stojanovic) #61950b67a8fb171] - inspector: add Target.getTargets and extract TargetManager (Kohei) #62487ffcc5a5722] - lib: make SubtleCrypto.supports enumerable (Filip Skokan) #6230792ef2ad8fa] - lib: prefer primordials in SubtleCrypto (Filip Skokan) #6222640a43ac4d0] - module: fix coverage of mocked CJS modules imported from ESM (Marco) #621333ef0a5b90e] - quic: remove CryptoKey support from session keys option (Filip Skokan) #623353c8dd8eb8e] - repl: use vm DONT_CONTEXTIFY context (Chengzhong Wu) #62371f85b9d9fa8] - (SEMVER-MINOR) repl: add customizable error handling (Anna Henningsen) #62188e4c164e045] - repl: handle exceptions from async context after close (Anna Henningsen) #6216567b854d407] - (SEMVER-MINOR) repl: remove dependency on domain module (Matteo Collina) #61227966b700623] - (SEMVER-MINOR) sea: support code cache for ESM entrypoint in SEA (Joyee Cheung) #62158fe82baf970] - src: improve EC JWK import performance (Filip Skokan) #62396d490b171e0] - src: handle null backing store in ArrayBufferViewContents::Read (Mert Can Altin) #623430e4af848bc] - src: convert context_frame field in AsyncWrap to internal field (Anna Henningsen) #6210302980b8c8f] - src: enable compilation/linking with OpenSSL 4.0 (Filip Skokan) #62410064f7c2fa6] - src: use stack allocation in indexOf latin1 path (Mert Can Altin) #62268ede52bc2dc] - src,sqlite: fix filterFunc dangling reference (Edy Silva) #62281e1f0d2a014] - (SEMVER-MINOR) stream: add stream/iter Implementation (James M Snell) #6206603839fb087] - stream: preserve error over AbortError in pipeline (Marco) #621130000d2f011] - stream: replace bind with arrow function for onwrite callback (Ali Hassan) #620873796a73719] - test: update WPT for WebCryptoAPI to 2cb332d710 (Node.js GitHub Bot) #62483ad8309415b] - test: update WPT for url to fc3e651593 (Node.js GitHub Bot) #62379bed89b037e] - test: wait for reattach before initial break on restart (Yuya Inoue) #62471c9ffffcc55] - test: disable flaky WPT Blob test on AIX (James M Snell) #62470fd41ef31f6] - (SEMVER-MINOR) test: add tests for experimental stream/iter implementation (James M Snell) #620661b9d8d3eec] - test: avoid flaky run wait in debugger restart test (Yuya Inoue) #62112cb08a29d51] - test: skip test-cluster-dgram-reuse on AIX 7.3 (Stewart X Addison) #62238abea0af8a9] - test: add WebCrypto Promise.prototype.then pollution regression tests (Filip Skokan) #6222647a2132269] - test: update WPT for WebCryptoAPI to 6a1c545d77 (Node.js GitHub Bot) #621872c63d3006c] - test_runner: add exports option for module mocks (sangwook) #6172744ac0e1302] - test_runner: make it compatible with fake timers (Matteo Collina) #592721865691275] - test_runner: set non-zero exit code when suite errors occur (Edy Silva) #622820252b2bab8] - tools: bump picomatch from 4.0.3 to 4.0.4 in /tools/eslint (dependabot[bot]) #624393368155267] - tools: bump yaml from 2.8.2 to 2.8.3 in /tools/doc (dependabot[bot]) #624375e47c359f5] - tools: adopt the --check-for-duplicates NCU flag (Antoine du Hamel) #624784a604e82d0] - tools: bump picomatch in /tools/doc (dependabot[bot]) #62438d1a98b4ddb] - tools: bump flatted from 3.4.1 to 3.4.2 in /tools/eslint (dependabot[bot]) #62375c32daa1ab4] - tools: bump eslint deps (Huáng Jùnliàng) #623567a2fcc6d41] - tools: do not swallow error in lint-nix workflow (Antoine du Hamel) #62292c41a2871b5] - tools: add eslint-plugin-regexp (Huáng Jùnliàng) #6209356dfeb06df] - tools: fix timeout errors in lint-nix job (Antoine du Hamel) #6226522fc8078e8] - tools: bump flatted from 3.3.3 to 3.4.1 in /tools/eslint (dependabot[bot]) #62255409b0663bd] - tools: bump undici from 6.23.0 to 6.24.1 in /tools/doc (dependabot[bot]) #6225067c69750f4] - tools: validate all commits that are pushed to main (Antoine du Hamel) #622467d9db8cd21] - tools: keep GN files when updating Merve (Antoine du Hamel) #621676c8fa42ba2] - typings: rationalise TypedArray types (René) #62174531c64d04e] - url: enable simdutf for ada (Yagiz Nizipli) #614772000caccde] - util: allow color aliases in styleText (sangwook) #621800aed332ab4] - wasm: support js string constant esm import (Guy Bedford) #62198d3fd4a978b] - worker: heap profile optimizations (Ilyas Shabi) #62201e992a34a18] - zlib: fix use-after-free when reset() is called during write (Matteo Collina) #62325<a id="25.8.2"></a>
This is a security release.
SNICallback invocation in try/catch (Matteo Collina) - HighheadersDistinct/trailersDistinct (Matteo Collina) - Highpipe_wrap.cc (RafaelGSS) - MediumNGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Mediumrealpath.native (RafaelGSS) - Lowlib/fs/promises (RafaelGSS) - Low2086b7477b] - (CVE-2026-21717) build,test: test array index hash collision (Joyee Cheung) nodejs-private/node-private#8340f9332a40a] - (CVE-2026-21713) crypto: use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan) nodejs-private/node-private#8222b6937ddb2] - deps: update undici to 7.24.4 (Node.js GitHub Bot) #62271bfb8ad5787] - deps: update undici to 7.24.3 (Node.js GitHub Bot) #62233be6384727f] - deps: upgrade npm to 11.11.1 (npm team) #622162feea5bb97] - deps: V8: override depot_tools version (Richard Lau) #6234486c04784dd] - (CVE-2026-21710) http: use null prototype for headersDistinct/trailersDistinct (Matteo Collina) nodejs-private/node-private#8215197a56a34] - (CVE-2026-21711) permission: include permission check to pipe_wrap.cc (RafaelGSS) nodejs-private/node-private#82004a886c735] - (CVE-2026-21716) permission: include permission check on lib/fs/promises (RafaelGSS) nodejs-private/node-private#7959a7f80f2b0] - (CVE-2026-21715) permission: add permission check to realpath.native (RafaelGSS) nodejs-private/node-private#794d9c9b628cf] - (CVE-2026-21714) src: handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) nodejs-private/node-private#83245b55dc786] - (CVE-2026-21712) src: handle url crash on different url formats (RafaelGSS) nodejs-private/node-private#8164bfda307c0] - (CVE-2026-21637) tls: wrap SNICallback invocation in try/catch (Matteo Collina) nodejs-private/node-private#819<a id="25.8.1"></a>
ea87eea71a] - module: fix extensionless CJS files in "type": "module" packages (Matteo Collina) #62083bab750d1b3] - build: do not depend on V8 deps on --without-bundled-v8 builds (Antoine du Hamel) #62033b26d1c7fcb] - crypto: make --use-system-ca per-env rather than per-process (Aditi) #60678e362635abf] - crypto: add missing AES dictionaries (Filip Skokan) #620996f975db8af] - crypto: fix importKey required argument count check (Filip Skokan) #620993beaf9c5fc] - deps: update amaro to 1.1.8 (Node.js GitHub Bot) #6215153afb0edd8] - deps: update sqlite to 3.52.0 (Node.js GitHub Bot) #62150a13ed052a1] - deps: update merve to 1.2.0 (Node.js GitHub Bot) #621492c850577b7] - deps: patch resb crate (Richard Lau) #6213837862a6728] - deps: V8: cherry-pick aa0b288f87cc (Richard Lau) #6213609191ad8b4] - deps: update ada to 3.4.3 (Node.js GitHub Bot) #620498d63a178fd] - doc: copyedit addons.md (Antoine du Hamel) #6207183719ffb64] - doc: correct util.convertProcessSignalToExitCode validation behavior (René) #62134eeee7c7fb1] - doc: add efekrskl as triager (Efe) #61876db150b2e69] - doc: fix markdown for expectFailure values (Jacob Smith) #62100d55a441e60] - doc: add title to index (Aviv Keller) #62046cc46204b48] - doc: include url.resolve() in DEP0169 application deprecation (Mike McCready) #620021d91a7261e] - doc,module: add missing doc for syncHooks.deregister() (Joyee Cheung) #619595198573bee] - http: fix use-after-free when freeParser is called during llhttp_execute (Gerhard Stöbich) #62095f8793f80df] - lib: fix source map url parse in dynamic imports (Chengzhong Wu) #619905439d0e0cf] - meta: bump actions/download-artifact from 7.0.0 to 8.0.0 (dependabot[bot]) #6206327fd21943a] - meta: bump actions/upload-artifact from 6.0.0 to 7.0.0 (dependabot[bot]) #620625b266f3295] - meta: bump step-security/harden-runner from 2.14.2 to 2.15.0 (dependabot[bot]) #62064ea87eea71a] - module: fix extensionless CJS files in "type": "module" packages (Matteo Collina) #62083851228cd60] - sqlite: handle stmt invalidation (Guilherme Araújo) #6187719efe60548] - src: expose async context frame debugging helper to JS (Anna Henningsen) #621030257e8072f] - src: make AsyncWrap subclass internal field counts explicit (Anna Henningsen) #62103975dafbe3b] - src: release context frame in AsyncWrap::EmitDestroy (Gerhard Stöbich) #61995f2c08c7888] - src: use validate_ascii_with_errors instead of validate_ascii (Сковорода Никита Андреевич) #611220278461d83] - stream: optimize webstreams pipeTo (Mattias Buelens) #620794d62e95bfa] - stream: fix brotli error handling in web compression streams (Filip Skokan) #621074bdcaf2865] - stream: improve Web Compression spec compliance (Filip Skokan) #62107a5b1be2045] - stream: fix UTF-8 character corruption in fast-utf8-stream (Matteo Collina) #617455632446c4e] - stream: fix TransformStream race on cancel with pending write (Marco) #62040f90fa9cd1a] - stream: accept ArrayBuffer in CompressionStream and DecompressionStream (조수민) #6191300319eaa3a] - test: update WPT for url to c928b19ab0 (Node.js GitHub Bot) #62148456abc7d20] - test: update WPT for WebCryptoAPI to c9e955840a (Node.js GitHub Bot) #6214782770cb7d3] - test: improve WPT report runner (Filip Skokan) #62107cfc847d233] - test: update WPT compression to ae05f5cb53 (Filip Skokan) #6210780f78f2737] - test: update WPT for WebCryptoAPI to 42e47329fd (Node.js GitHub Bot) #620488048e0508c] - test: fix skipping behavior for test-runner-run-files-undefined (Antoine du Hamel) #62026699a6214c6] - tools: revert timezone update GHA workflow to ubuntu-latest (Richard Lau) #621401a453b550c] - tools: improve error handling in test426 update script (Rich Trott) #62121710dde5ee2] - tools: fix --node-builtin-modules-path value in shell.nix (Antoine du Hamel) #62102dcb1cbb21f] - tools: bump the eslint group across 1 directory with 2 updates (dependabot[bot]) #620927d0b758583] - tools: fix daily wpt workflow nighly release version lookup (Filip Skokan) #620763e8c816f2e] - tools: fix example in release proposal linter (Richard Lau) #62074772d3d270d] - tools: bump minimatch from 3.1.3 to 3.1.5 in /tools/clang-format (dependabot[bot]) #6201392f3b42672] - tools: bump eslint to v10, babel to v8.0.0-rc.2 (Huáng Jùnliàng) #61905deead95ec5] - url: suppress warnings from url.format/url.resolve inside node_modules (René) #62005<a id="25.8.0"></a>
e55eddea2a] - build, doc: use new api doc tooling (flakey5) #573434c181e2277] - (SEMVER-MINOR) sqlite: add limits property to DatabaseSync (Mert Can Altin) #6129846ee1eddd7] - (SEMVER-MINOR) src: add C++ support for diagnostics channels (RafaelGSS) #618699ddd1a9c27] - (SEMVER-MINOR) src,permission: add --permission-audit (RafaelGSS) #618690d97ec4044] - (SEMVER-MINOR) test_runner: expose worker ID for concurrent test execution (Ali Hassan) #61394940b58c8c1] - buffer: optimize buffer.concat performance (Mert Can Altin) #617210589b0e5a1] - build: fix GN for new merve dep (Shelley Vohr) #61984f3d3968dcd] - Revert "build: add temporal test on GHA windows" (Antoine du Hamel) #61810e55eddea2a] - build, doc: use new api doc tooling (flakey5) #57343b7715292f8] - child_process: add tracing channel for spawn (Marco) #61836a32a598748] - crypto: fix missing nullptr check on RSA_new() (ndossche) #61888dc384f95b3] - crypto: fix handling of null BUF_MEM* in ToV8Value() (Nora Dossche) #618853337b095db] - crypto: fix potential null pointer dereference when BIO_meth_new() fails (Nora Dossche) #6178851ded81139] - deps: update undici to 7.22.0 (Node.js GitHub Bot) #620358aa2fde931] - deps: update minimatch to 10.2.4 (Node.js GitHub Bot) #6201657dc092eaf] - deps: upgrade npm to 11.11.0 (npm team) #61994705bbd60a9] - deps: update simdjson to 4.3.1 (Node.js GitHub Bot) #619304d411d72e5] - deps: update acorn-walk to 8.3.5 (Node.js GitHub Bot) #61928f53a32ab84] - deps: update acorn to 8.16.0 (Node.js GitHub Bot) #619259b483fbb27] - deps: update minimatch to 10.2.2 (Node.js GitHub Bot) #61830bdc18940ad] - doc: expand SECURITY.md with non-vulnerability examples (Rafael Gonzaga) #619724e54c103cb] - doc: separate in-types and out-types in SQLite conversion docs (René) #62034ca78ebbeaa] - doc: fix small logic error in DETECT_MODULE_SYNTAX (René) #62025e6b131f3fe] - doc: fix module.stripTypeScriptTypes indentation (René) #619927508540e19] - doc: update DEP0040 (punycode) to application type deprecation (Mike McCready) #6191633a364cb62] - doc: explicitly mention Slack handle (Rafael Gonzaga) #6198646a61922bd] - doc: support toolchain Visual Studio 2022 & 2026 + Windows 11 SDK (Mike McCready) #61864dc12a257aa] - doc: rename invalid function parameter (René) #619426259abcf55] - http: validate ClientRequest path on set (Matteo Collina) #62030dafdc0a5b8] - http: validate headers in writeEarlyHints (Richard Clarke) #618973c94b56fa6] - inspector: unwrap internal/debugger/inspect imports (René) #619748a24c17648] - lib: improve argument handling in Blob constructor (Ms2ger) #6198021d4baf256] - meta: bump github/codeql-action from 4.32.0 to 4.32.4 (dependabot[bot]) #6191159a726a8e3] - meta: bump step-security/harden-runner from 2.14.1 to 2.14.2 (dependabot[bot]) #619090072b7f991] - meta: bump actions/stale from 10.1.1 to 10.2.0 (dependabot[bot]) #619083d160cd049] - module: run require.resolve through module.registerHooks() (Joyee Cheung) #62028999bf22f47] - repl: keep reference count for process.on('newListener') (Anna Henningsen) #618954c181e2277] - (SEMVER-MINOR) sqlite: add limits property to DatabaseSync (Mert Can Altin) #61298aee2a18257] - src: fix flags argument offset in JSUdpWrap (Weixie Cui) #6194846ee1eddd7] - (SEMVER-MINOR) src: add C++ support for diagnostics channels (RafaelGSS) #618699ddd1a9c27] - (SEMVER-MINOR) src,permission: add --permission-audit (RafaelGSS) #61869ea2df2a16f] - stream: fix pipeTo to defer writes per WHATWG spec (Matteo Collina) #61800aa0c7b09e0] - test: remove unnecessary process.exit calls from test files (Antoine du Hamel) #62020ad96a6578f] - test: skip test-url on --shared-ada builds (Antoine du Hamel) #620197c72a31e4b] - test: skip strace test with shared openssl (Richard Lau) #61987604456c163] - test: avoid flaky debugger restart waits (Yuya Inoue) #617734890d6bd43] - test_runner: run afterEach on runtime skip (Igor Shevelenkov) #61525fce2930110] - test_runner: expose expectFailure message (sangwook) #615630d97ec4044] - (SEMVER-MINOR) test_runner: expose worker ID for concurrent test execution (Ali Hassan) #61394243e6b2009] - test_runner: replace native methods with primordials (Ayoub Mabrouk) #61219bf1ed7e647] - tls: forward keepAlive, keepAliveInitialDelay, noDelay to socket (Sergey Zelenov) #62004746d0cebbf] - tools: fix parsing of commit trailers in lint-release-proposal GHA (Antoine du Hamel) #620770f15079d94] - tools: remove custom logic for skipping test-strace-openat-openssl (Antoine du Hamel) #6203854a055a59d] - tools: bump minimatch from 3.1.2 to 3.1.3 in /tools/clang-format (dependabot[bot]) #61977a28744cb62] - tools: fix permissions for merve update script (Richard Lau) #6202331e7936354] - tools: revert tools GHA workflow to ubuntu-latest (Richard Lau) #620240a96a16e1f] - tools: bump minimatch from 3.1.2 to 3.1.3 in /tools/eslint (dependabot[bot]) #61976f279233412] - tools: roll back to x86 runner on scorecard.yml (Antoine du Hamel) #61944192c0382f4] - util: add fast path to stripVTControlCharacters (Hiroki Osame) #61833<a id="25.7.0"></a>
b0a79b10f0] - (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav) #617132d874dfb8e] - (SEMVER-MINOR) sea: support ESM entry point in SEA (Joyee Cheung) #61813ee59127664] - sqlite: mark as release candidate (Matteo Collina) #61262608736e19e] - (SEMVER-MINOR) stream: rename Duplex.toWeb() type option to readableType (René) #61632a43375999f] - (SEMVER-MINOR) test_runner: show interrupted test on SIGINT (Matteo Collina) #61676ab4375e141] - benchmark: add startup benchmark for ESM entrypoint (Joyee Cheung) #617698d83d8026b] - build: add temporal test on GHA windows (Chengzhong Wu) #61810aab153eec3] - build: skip sscache action on non-main branches (Joyee Cheung) #617909e40fb93bc] - build: use path-ignore in GHA coverage-windows.yml (Chengzhong Wu) #618114896653361] - build: generate_config_gypi.py generates valid JSON (Shelley Vohr) #61791bb82b44de0] - build: build with v8 gdbjit support on supported platform (Joyee Cheung) #61010e7173a093a] - build: show cc outputs when version detection failed (Chengzhong Wu) #61700848050d38f] - build,win: add WinGet Visual Studio 2022 Build Tools Edition config (Mike McCready) #61652938841e1cd] - crypto: always return certificate serial numbers as uppercase (Anna Henningsen) #61752dba9001d6f] - deps: upgrade npm to 11.10.1 (npm team) #6189275c8e18d2f] - deps: update nbytes to 0.1.3 (Node.js GitHub Bot) #618794ca1597f25] - deps: remove stale OpenSSL arch configs (René) #61834c4f298c729] - deps: update llhttp to 9.3.1 (Node.js GitHub Bot) #618277d63a2df93] - deps: V8: cherry-pick 64b36b441179 (Rafael Magrin) #61712241a6b7088] - deps: update googletest to 5a9c3f9e8d9b90bbbe8feb32902146cb8f7c1757 (Node.js GitHub Bot) #61731eec896c0e0] - deps: V8: backport 6a0a25abaed3 (Vivian Wang) #616665a9874af09] - doc: clarify status of feature request issues (Antoine du Hamel) #615050648ac64aa] - doc: add esm and cjs examples to node:vm (Alfredo González) #614988b38718294] - doc: clarify build environment is trusted in threat model (Matteo Collina) #6186510e86818ee] - doc: remove incorrect mention of module in typescript.md (Rob Palmer) #61839b50376f527] - doc: simplify addAbortListener example (Chemi Atlow) #61842dea0e7a856] - doc: fix typo in --disable-wasm-trap-handler description (Dmytro Semchuk) #6182057ac1f5aa0] - doc: clean up globals.md (René) #618224c30d2bb4d] - doc: remove obsolete Boxstarter automated install (Mike McCready) #61785db610b9e32] - doc: clarify async caveats for events.once() (René) #61572b4a826b11c] - doc: update Juan's security steward info (Juan José) #617547d9cc5dc54] - doc: fix methods being documented as properties in process.md (Antoine du Hamel) #61765aa0362c26a] - doc: add riscv64 info into platform list (Lu Yahan) #422519b0101b65b] - doc: fix dropdown menu being obscured at <600px due to stacking context (Jeff) #61735df2c65b3e4] - doc: fix spacing in process message event (Aviv Keller) #6175601018559f5] - doc: move describe/it aliases section before expectFailure (Luca Raveri) #6156749443583af] - doc: fix broken links of net.md (YuSheng Chen) #61673af7c927a2a] - doc: clean up Windows code snippet in child_process.md (reillylm) #61422221648a687] - esm: update outdated FIXME comment in translators.js (Karan Mangtani) #617154484e14a31] - events: don't call resume after close (Сковорода Никита Андреевич) #605484cecbe1f53] - fs: add throwIfNoEntry option for fs.stat and fs.promises.stat (Juan José) #611782c94967684] - http: remove redundant keepAliveTimeoutBuffer assignment (Efe) #61743435f3dd8e4] - http: attach error handler to socket synchronously in onSocket (RajeshKumar11) #61770ce0ebd853d] - http: fix keep-alive socket reuse race in requestOnFinish (Martin Slota) #617108103a78b6a] - http2: add strictSingleValueFields option to relax header validation (Tim Perry) #59917b0a79b10f0] - (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav) #61713c589b6b23c] - http2: fix FileHandle leak in respondWithFile (sangwook) #61707df477202ae] - lib: reduce cycles in esm loader and load it in snapshot (Joyee Cheung) #61769deda50a819] - lib: remove top-level getOptionValue() calls in lib/internal/modules (Joyee Cheung) #61769b1c1ddff79] - lib: optimize styleText when validateStream is false (Rafael Gonzaga) #61792df334f7fa0] - meta: use SCCACHE_GHA_ENABLED for shared build workflows (René) #61640e1b2cd605f] - meta: bump cachix/install-nix-action from 31.9.0 to 31.9.1 (dependabot[bot]) #6191024b858547a] - module: fix extensionless entry with explicit type=commonjs (Yuya Inoue) #616004f2f8006bd] - repl: fix FileHandle leak in history initialization (sangwook) #617062d874dfb8e] - (SEMVER-MINOR) sea: support ESM entry point in SEA (Joyee Cheung) #61813ee59127664] - sqlite: mark as release candidate (Matteo Collina) #61262f14ff14473] - src: remove unnecessary c_str() conversions in diagnostic messages (Anna Henningsen) #6178626a09e541d] - src: use bool literals in TraceEnvVarOptions (Tobias Nießen) #6142562b0758c47] - src: fix --build-sea default executable path (Alex Schwartz) #61708b5724921b1] - src: track allocations made by zstd streams (Anna Henningsen) #617173d1d1523a5] - src: do not store compression methods on Brotli classes (Anna Henningsen) #61717b2915cda77] - src: extract zlib allocation tracking into its own class (Anna Henningsen) #617173032a7e3c6] - src: release memory for zstd contexts in Close() (Anna Henningsen) #61717bc2287db74] - src: add more checks and clarify docs for external references (Joyee Cheung) #617195daf282e33] - src: fix cjs_lexer external reference registration (Joyee Cheung) #61718fb2db5f947] - src: support import() and import.meta in embedder-run modules (Joyee Cheung) #61654e146591002] - stream: fix decoded fromList chunk boundary check (Thomas Watson) #61884065200a5f0] - stream: add fast paths for webstreams read and pipeTo (Matteo Collina) #61807608736e19e] - (SEMVER-MINOR) stream: rename Duplex.toWeb() type option to readableType (René) #6163251587d684d] - test: fix typos in test files (Daijiro Wachi) #6140817b2361360] - test: allow filtering async internal frames in assertSnapshot (Joyee Cheung) #617693f6a5f5f7f] - test: unify assertSnapshot stacktrace transform (Chengzhong Wu) #61665c8dac320de] - test: check stability block position in API markdown (René) #585906809ef8d04] - test: adapt buffer test for v8 sandbox (Shelley Vohr) #6177260f5771a74] - test: update FileAPI tests from WPT (Ms2ger) #61750d2fef4a31a] - test: update WPT for WebCryptoAPI to 7cbe7e8ed9 (Node.js GitHub Bot) #61729d7a87f14da] - test: update WPT for url to efb889eb4c (Node.js GitHub Bot) #61728b6ae1fc4b8] - test: split test-embedding.js and run tests in parallel (Joyee Cheung) #61571a43375999f] - (SEMVER-MINOR) test_runner: show interrupted test on SIGINT (Matteo Collina) #616761c02aa09b0] - test_runner: fix suite rerun (Moshe Atlow) #6177547821ec609] - tools: switch to ARM runners on GHA jobs (Antoine du Hamel) #619031630a56370] - tools: avoid building twice in coverage jobs (Antoine du Hamel) #6189989318b0a02] - tools: fix auto-start-ci (Antoine du Hamel) #61900ee107f5e84] - tools: do not checkout repo in auto-start-ci.yml (Antoine du Hamel) #61874c2de1fa619] - tools: cache V8 build on test-shared workflow (Antoine du Hamel) #61860111c77ec94] - tools: automate updates for test/fixtures/test426 (Rich Trott) #60978ea8886f7d5] - tools: use ubuntu-slim runner in GHA (Antoine du Hamel) #617599db82ba786] - tools: bump unist-util-visit in /tools/doc in the doc group (dependabot[bot]) #61646c8e58c56b9] - tools: bump the eslint group in /tools/eslint with 6 updates (dependabot[bot]) #616282518ec77e8] - tools: use ubuntu-slim runner in GHA (Antoine du Hamel) #61734c5ad2beba3] - tools: fix small inconsistencies in JSON doc output (Antoine du Hamel) #61757a9f90bee0a] - tools: use ubuntu-latest runner in notify-on-push workflow (Antoine du Hamel) #6174230e38182d9] - watch: get flags from execArgv (Efe) #61779da1a08a3a5] - worker: eliminate race condition in process.cwd() (giulioAZ) #61664dfac82a235] - zlib: add support for brotli compression dictionary (Andy Weiss) #61763<a id="25.6.1"></a>
47df4328d7] - build,deps: replace cjs-module-lexer with merve (Yagiz Nizipli) #6145647df4328d7] - build,deps: replace cjs-module-lexer with merve (Yagiz Nizipli) #61456a727054503] - deps: upgrade npm to 11.9.0 (npm team) #61685c78c49ed6b] - deps: update amaro to 1.1.7 (Node.js GitHub Bot) #617304790816d9b] - deps: update minimatch to 10.1.2 (Node.js GitHub Bot) #617328c71740e8a] - deps: update undici to 7.21.0 (Node.js GitHub Bot) #61683e559ef6ab1] - deps: update googletest to 56efe3983185e3f37e43415d1afa97e3860f187f (Node.js GitHub Bot) #61605300de2bb5a] - deps: update amaro to 1.1.6 (Node.js GitHub Bot) #61603e71e9505ef] - dns: fix Windows SRV ECONNREFUSED by adjusting c-ares fallback detection (notvivek12) #61453439b816bc7] - doc: clarify EventEmitter error handling in threat model (Matteo Collina) #61701c1c6641f23] - doc: mention default option for test runner env (Steven) #6165941ec451f98] - doc: fix --inspect security warning section (Tim Perry) #61675bb90ef2356] - doc: document url.format(urlString) as deprecated under DEP0169 (René) #61644513df82e6f] - doc: update to Visual Studio 2026 manual install (Mike McCready) #616559409d30736] - doc: deprecation add more codemod (Augustin Mauroy) #6164275a7a67151] - doc: fix grammatical error in README.md (ayj8201) #61653821e59e884] - doc: correct tools README Boxstarter link (Mike McCready) #616384998f539a0] - doc: update server.dropMaxConnection link (YuSheng Chen) #615849383ac4ab7] - http: implement slab allocation for HTTP header parsing (Mert Can Altin) #61375e90eb1d561] - meta: persist sccache daemon until end of build workflows (René) #61639ade36ac367] - meta: bump github/codeql-action from 4.31.9 to 4.32.0 (dependabot[bot]) #6162226638bd67f] - meta: bump step-security/harden-runner from 2.14.0 to 2.14.1 (dependabot[bot]) #61621eaa9a96cb6] - meta: bump actions/setup-python from 6.1.0 to 6.2.0 (dependabot[bot]) #61627fd98187828] - meta: bump cachix/cachix-action (dependabot[bot]) #61626820c1d021c] - meta: bump actions/setup-node from 6.1.0 to 6.2.0 (dependabot[bot]) #6162572a4136bd5] - meta: bump actions/cache from 5.0.1 to 5.0.3 (dependabot[bot]) #61624e3ef6cb3bc] - meta: bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (dependabot[bot]) #61623020a836202] - meta: bump actions/stale from 10.1.0 to 10.1.1 (dependabot[bot]) #616200df72f07c8] - meta: bump actions/checkout from 6.0.1 to 6.0.2 (dependabot[bot]) #61619d147c08b83] - module: do not invoke resolve hooks twice for imported cjs (Joyee Cheung) #61529a2843f8556] - net: defer synchronous destroy calls in internalConnect (RajeshKumar11) #616587fb7030781] - repl: fix flaky test-repl-programmatic-history (Matteo Collina) #61614d4c9b5cf5b] - sqlite: avoid extra copy for large text binds (Ali Hassan) #61580aa1b3661d9] - sqlite: use DictionaryTemplate for run() result (Mert Can Altin) #614329c8ad7e881] - src: elide heap allocation in structured clone implementation (Anna Henningsen) #61703c4ecfef93d] - src: use simdutf for one-byte string UTF-8 write in stringBytes (Mert Can Altin) #6169628905b9734] - src: consolidate C++ ReadFileSync/WriteFileSync utilities (Joyee Cheung) #61662e90cec2f69] - test: restraint version replacement pattern in snapshots (Chengzhong Wu) #61748adce20c0a1] - test: print stack immediately avoiding GC interleaving (Chengzhong Wu) #616997643bc8999] - test: fix case-insensitive path matching on Windows (Matteo Collina) #6168223d1ecf66f] - test: fix flaky test-performance-eventloopdelay (Matteo Collina) #6162999012a88ed] - test: remove duplicate wpt tests (Filip Skokan) #61617a8b32b8ce1] - test: fix race condition in watch mode tests (Matteo Collina) #61615086a5a5a25] - test: update WPT for url to e3c46fdf55 (Node.js GitHub Bot) #61602f0574fd419] - test: use the skipIfNoWatch() utility function (Luigi Pinca) #61531b064ddc221] - test: unify assertSnapshot common patterns (Chengzhong Wu) #6159017122e521b] - test_runner: fix test enqueue when test file has syntax error (Edy Silva) #61573bad3f02dd9] - tools: enforce removal of lts-watch-* labels on release proposals (Antoine du Hamel) #61672a8f33fd6bd] - tools: use ubuntu-slim runner in meta GitHub Actions (Tierney Cyren) #61663c843e447ca] - tools: test --shared-merve in test-shared workflow (Antoine du Hamel) #616492fedc03f96] - tools: update OpenSSL to 3.5.5 in test-shared (Antoine du Hamel) #615511c1db94670] - tools,win: upgrade install additional tools to Visual Studio 2026 (Mike McCready) #61562<a id="25.6.0"></a>
796ff46ae6] - (SEMVER-MINOR) async_hooks: add trackPromises option to createHook() (Joyee Cheung) #614154cf94fae17] - (SEMVER-MINOR) net: add setTOS and getTOS to Socket (Amol Yadav) #61503dce657071e] - (SEMVER-MINOR) src: add initial support for ESM in embedder API (Joyee Cheung) #61548e62608bbcf] - src: improve TextEncoder encode performance with simdutf (Mert Can Altin) #6149693938a4738] - (SEMVER-MINOR) stream: add bytes() method to node:stream/consumers (wantaek) #604265fe2582329] - (SEMVER-MINOR) test_runner: add env option to run function (Ethan Arrowood) #61367a181d0c43d] - url: update Ada to v3.4.2 and support Unicode 17 (Yagiz Nizipli) #615939c8d1b0278] - assert: fix loose deepEqual arrays with undefined and null failing (Ruben Bridgewater) #61587796ff46ae6] - (SEMVER-MINOR) async_hooks: add trackPromises option to createHook() (Joyee Cheung) #61415d23ee89693] - benchmark: add streaming TextDecoder benchmark (Сковорода Никита Андреевич) #615498759db9d21] - buffer: disallow ArrayBuffer transfer on pooled buffer (Chengzhong Wu) #61372b2fb82946b] - build: add --shared-lief configure flag (Antoine du Hamel) #615360ef99de9da] - build: aix: deoptimize implementation-visitor.cc with --shared (Stewart X Addison) #615508f2083e73a] - build: enable -DV8_ENABLE_CHECKS flag (Ryuhei Shima) #61327150910da70] - build,test: add tests for binary linked with shared libnode (Joyee Cheung) #61463fb7868ba98] - build,win: fix vs2022 compilation (Stefan Stojanovic) #615302c39a9234c] - deps: update undici to 7.19.2 (Node.js GitHub Bot) #615662a74379367] - deps: update archs files for openssl-3.5.5 (Node.js GitHub Bot) #615479e26a15c29] - deps: upgrade openssl sources to openssl-3.5.5 (Node.js GitHub Bot) #61547f16b532e97] - deps: update corepack to 0.34.6 (Node.js GitHub Bot) #61510780e65c5c5] - deps: V8: cherry-pick c5ff7c4d6cde (Chengzhong Wu) #613722eb8e9d760] - deps: update nghttp3 to 1.15.0 (Node.js GitHub Bot) #61512a999edd8fd] - deps: update ngtcp2 to 1.20.0 (Node.js GitHub Bot) #61511eedd3bb6b6] - deps: update undici to 7.19.1 (Node.js GitHub Bot) #615147d2bd59984] - deps: update undici to 7.19.0 (Node.js GitHub Bot) #614703ad4d9b11b] - doc: align Buffer.concat documentation with behavior (Gürgün Dayıoğlu) #604057e3eab5963] - doc: fix node-config-schema (Сковорода Никита Андреевич) #61596cbcfaf9a35] - doc: update IBM/Red Hat volunteers with dedicated project time (Beth Griggs) #615883d68811d1a] - doc: regenerate node.1 using doc-kit (Aviv Keller) #6153571702c581a] - doc: restore @ChALkeR to collaborators (Сковорода Никита Андреевич) #615530ceb8cad59] - doc: added requestOCSP option to tls.connect (ikeyan) #61064da93e2178c] - doc: move Security-Team from TSC to SECURITY (Rafael Gonzaga) #614954bea821b4c] - lib: use utf8 fast path for streaming TextDecoder (Сковорода Никита Андреевич) #61549f05bad91d8] - lib: recycle queues (Robert Nagy) #6146144b1927938] - lib: use StringPrototypeStartsWith from primordials in locks (Taejin Kim) #61492a78259828a] - lib: unify ICU and no-ICU TextDecoder (Сковорода Никита Андреевич) #61409a28ddd4594] - module: do not wrap module._load when tracing is not enabled (Joyee Cheung) #614794cf94fae17] - (SEMVER-MINOR) net: add setTOS and getTOS to Socket (Amol Yadav) #61503b861451d57] - process: do not truncate long strings in --print (Mohamed Akram) #614974a2e184753] - sea: print error information when fs operations fail (Joyee Cheung) #6158145d25c47da] - sqlite: change approach to fix segfault SQLTagStore (Bart Louwers) #604626993386320] - sqlite: reserve vectors space (Guilherme Araújo) #61540dce657071e] - (SEMVER-MINOR) src: add initial support for ESM in embedder API (Joyee Cheung) #61548e62608bbcf] - src: improve textEncoder encode performance with simdutf (Mert Can Altin) #614960fce52d22c] - src: expose help texts into node-config-schema.json (Pietro Marchini) #58680be644e2569] - src: throw RangeError on failed ArrayBuffer BackingStore allocation (Chengzhong Wu) #6148093938a4738] - (SEMVER-MINOR) stream: add bytes() method to stream/consumers (wantaek) #6042683b2bf8ea2] - test: split test-fs-watch-ignore-* (Luigi Pinca) #614944726627443] - test: aix: unflake test_threadsafe_function/test flaky on AIX (Stewart X Addison) #615606fbb0b7572] - test: delay writing the files only on macOS (Luigi Pinca) #615320a952b88bb] - test: ensure removeListener event fires for once() listeners (sangwook) #60137945b141c5d] - test: fix flaky debugger test (Ryuhei Shima) #58324256fc6770b] - test: update WPT for url to 81a2aed262 (Node.js GitHub Bot) #615097725c8d596] - test: skip --build-sea tests on platforms where SEA is flaky (Joyee Cheung) #61504915d105ffd] - test_runner: update node-config-schema (Pietro Marchini) #58680fd8be14b33] - test_runner: fix passing expectFailure (Moshe Atlow) #61568c0dd9826bd] - test_runner: differentiate todo and failure styles (Moshe Atlow) #615645fe2582329] - (SEMVER-MINOR) test_runner: add env option to run function (Ethan Arrowood) #6136739bea2236e] - tools: update gyp-next to 0.21.1 (Node.js GitHub Bot) #61528d5beb4fe1c] - tools: move Quic dependencies behind ad-hoc flag (Antoine du Hamel) #614465c26087c29] - tools: add LIEF to license builder (Chengzhong Wu) #61523a181d0c43d] - url: update ada to v3.4.2 and support unicode 17 (Yagiz Nizipli) #61593<a id="25.5.0"></a>
99a4e51f93] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419fbe4da5725] - (SEMVER-MINOR) deps: add LIEF as a dependency (Joyee Cheung) #611670feab0f083] - (SEMVER-MINOR) deps: add tools and scripts to pull LIEF as a dependency (Joyee Cheung) #61167e91b296001] - (SEMVER-MINOR) fs: add ignore option to fs.watch (Matteo Collina) #61433b351910af1] - (SEMVER-MINOR) sea: add --build-sea to generate SEA directly with Node.js binary (Joyee Cheung) #61167957292e233] - (SEMVER-MINOR) sea: split sea binary manipulation code (Joyee Cheung) #61167f289817ff8] - (SEMVER-MINOR) sqlite: enable defensive mode by default (Bart Louwers) #61266069f3603e2] - (SEMVER-MINOR) sqlite: add sqlite prepare options args (Guilherme Araújo) #613115a984b9a09] - src: use node- prefix on thread names (Stewart X Addison) #6130775c06bc2a8] - (SEMVER-MINOR) test: migrate to --build-sea in existing SEA tests (Joyee Cheung) #61167cabd58f1cb] - (SEMVER-MINOR) test: use fixture directories for sea tests (Joyee Cheung) #61167ff1fcabfc9] - (SEMVER-MINOR) test_runner: support expecting a test-case to fail (Jacob Smith) #60669778a56f3c9] - assert,util: fix deep comparison for sets and maps with mixed types (Ruben Bridgewater) #6138832cd18e37f] - async_hooks: enabledHooksExist shall return if hooks are enabled (Gerhard Stöbich) #61054482b2568bc] - benchmark: add SQLite benchmarks (Guilherme Araújo) #61401e9a34263bb] - buffer: make methods work on Uint8Array instances (Neal Beeken) #565788255cdefcf] - build: add --shared-nbytes configure flag (Antoine du Hamel) #613418dd379d110] - build: update android-patches/trap-handler.h.patch (Mo Luo) #603691b4b5eb0e4] - build: update devcontainer.json to use paired nix env (Joyee Cheung) #6141486e2a763ad] - build: infer cargo mode with gyp var build_type directly (Chengzhong Wu) #613547e211e6942] - build: add embedtest into native suite (Joyee Cheung) #61357637470e79f] - build: fix misplaced comma in ldflags (hqzing) #61294a1a0f77a45] - build: fix crate vendor file checksums on windows (Chengzhong Wu) #61329d597b8e342] - build,tools: fix addon build deadlock on errors (Vladimir Morozov) #61321b5cdc27ba4] - build,win: improve logs when ClangCL is missing (Mike McCready) #61438ef01f0c033] - build,win: update WinGet configurations to Python 3.14 (Mike McCready) #61431d8a1cdeefe] - child_process: treat ipc length header as unsigned uint32 (Ryuhei Shima) #61344588b00fafa] - cluster: fix port reuse between cluster (Ryuhei Shima) #6014199a4e51f93] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419048f7a5c9c] - deps: upgrade npm to 11.8.0 (npm team) #61466fbe4da5725] - (SEMVER-MINOR) deps: add LIEF as a dependency (Joyee Cheung) #611670feab0f083] - (SEMVER-MINOR) deps: add tools and scripts to pull LIEF as a dependency (Joyee Cheung) #611674bb00d7e3c] - deps: update googletest to 85087857ad10bd407cd6ed2f52f7ea9752db621f (Node.js GitHub Bot) #614176a3c614f27] - deps: update sqlite to 3.51.2 (Node.js GitHub Bot) #6133913c0397d6d] - deps: update icu to 78.2 (Node.js GitHub Bot) #60523098ec6f196] - deps: update ada to v3.4.0 (Yagiz Nizipli) #61315320b576125] - deps: update zlib to 1.3.1-e00f703 (Node.js GitHub Bot) #6113598f5e7cf51] - deps: V8: cherry-pick highway@dcc0ca1cd42 (Richard Lau) #61008e326df79c9] - deps: V8: backport 209d2db9e24a (Zhijin Zeng) #61322ccfd9d9b30] - doc: remove v prefix for version references (Mike McCready) #61488b6cc5d77a1] - doc: mention constructor comparison in assert.deepStrictEqual (Hamza Kargin) #60253236d7ee635] - doc: add CVE delay mention (Rafael Gonzaga) #614650729fb6ee7] - doc: update previous version links in BUILDING (Mike McCready) #614570fb464252f] - doc: include OpenJSF handle for security stewards (Rafael Gonzaga) #614543331bdca7c] - doc: clarify process.argv[1] behavior for -e/--eval (Jeevankumar S) #6136694b34c38e2] - doc: remove Windows Dev Home instructions from BUILDING (Mike McCready) #61434a17016ee81] - doc: clarify TypedArray properties on Buffer (Roman Reiss) #61355214fac9d7e] - doc: update Python 3.14 manual install instructions (Windows) (Mike McCready) #614286a32a685a6] - doc: note resume build should not be done on node-test-commit (Stewart X Addison) #613732a8e8dfaf3] - doc: refine WebAssembly error documentation (sangwook) #61382f3caf27f8b] - doc: add deprecation history for url.parse (Eng Zer Jun) #613895ab8057856] - doc: add marco and rafael in last sec release (Marco Ippolito) #61383f83cb1e785] - doc: packages: example of private import switch to internal (coderaiser) #613433d23bcd0e2] - doc: add esm and cjs examples to node:v8 (Alfredo González) #613281d159550e0] - doc: added 'secure' event to tls.TLSSocket (ikeyan) #6106690080d2892] - doc: restore @watilde to collaborators (Daijiro Wachi) #61350a87f7a50f8] - doc: run license-builder (github-actions[bot]) #61348adf5c84701] - doc: clean up writing-and-running-benchmarks.md (Hardanish Singh) #613452be98add0c] - doc: document ALPNCallback option for TLSSocket constructor (ikeyan) #613312db4893c8d] - esm: ensure watch mode restarts after syntax errors (Xavier Stouder) #61232828feb2e6b] - events: remove redundant todo (Gürgün Dayıoğlu) #60595e91b296001] - (SEMVER-MINOR) fs: add ignore option to fs.watch (Matteo Collina) #61433606184fae5] - fs: remove duplicate getValidatedPath calls (Mert Can Altin) #61359434fcd7f8f] - fs: fix errorOnExist behavior for directory copy in fs.cp (Nicholas Paun) #60946bacba16f5e] - fs: fix ENOTDIR in globSync when file is treated as dir (sangwook) #612597697ce0310] - fs: remove duplicate fd validation in sync functions (Mert Can Altin) #613618abd54f597] - gyp: aix: change gcc version detection so CXX="ccache g++" works (Stewart X Addison) #6146424033ee7ea] - http: fix rawHeaders exceeding maxHeadersCount limit (Max Harari) #61285cf56327939] - http2: validate initialWindowSize per HTTP/2 spec (Matteo Collina) #61402696935eeeb] - inspector: initial support storage inspection (Ryuhei Shima) #611393d5e718e38] - lib: fix typo in util.js comment (Taejin Kim) #61365f55a5fea00] - lib: fix TypeScript support check in jitless mode (sangwook) #61382b3fbc3c375] - meta: do not fast-track npm updates (Antoine du Hamel) #614752423ecdaef] - meta: fix typos in issue template config (Daijiro Wachi) #61399e2df85a33a] - meta: label v8 module PRs (René) #61325bc9e5f7d4d] - node-api: fix node_api_create_object_with_properties name (Vladimir Morozov) #613194f30c21c59] - node-api: use Node-API in comments (Vladimir Morozov) #6132062d71eb28d] - quic: copy options.certs buffer instead of detaching (Chengzhong Wu) #614034bbbe75ba1] - quic: move quic behind compile time flag (Matteo Collina) #61444b351910af1] - (SEMVER-MINOR) sea: add --build-sea to generate SEA directly with Node.js binary (Joyee Cheung) #61167957292e233] - (SEMVER-MINOR) sea: split sea binary manipulation code (Joyee Cheung) #61167f289817ff8] - (SEMVER-MINOR) sqlite: enable defensive mode by default (Bart Louwers) #612666442229880] - sqlite: add some tests (Guilherme Araújo) #61410069f3603e2] - (SEMVER-MINOR) sqlite: add sqlite prepare options args (Guilherme Araújo) #61311df02d00d61] - src: improve StringBytes::Encode perf on UTF8 (Сковорода Никита Андреевич) #61131e35814ba80] - src: add missing override specifier to Clean() (Tobias Nießen) #61429803ff7d3de] - src: cache context lookup in vectored io loops (Mert Can Altin) #6138758abe99cbf] - src: cache missing package.json files in the C++ package config cache (Michael Smith) #604252a542094e4] - src: use starts_with instead of rfind/find (Tobias Nießen) #6142677cacf6d9d] - src: use C++ nullptr in sqlite (Tobias Nießen) #61416344cc629d4] - src: use C++ nullptr in webstorage (Tobias Nießen) #614079f25cad26c] - src: fix pointer alignment (jhofstee) #613365a984b9a09] - src: use node- prefix on thread names (Stewart X Addison) #61307d4cf423a65] - stream: export namespace object from internal end-of-stream module (René) #614557d8232e34c] - test: add some validation for JSON doc output (Antoine du Hamel) #6141375c06bc2a8] - (SEMVER-MINOR) test: migrate to --build-sea in existing SEA tests (Joyee Cheung) #61167cabd58f1cb] - (SEMVER-MINOR) test: use fixture directories for sea tests (Joyee Cheung) #61167bcffca8911] - test: aix: mark test_threadsafe_function/test flaky on AIX (Stewart X Addison) #6145229399501c1] - test: add implicit test for fs dispose handling with using (Ilyas Shabi) #611403bb481571a] - test: reveal wpt evaluation errors in status files (Chengzhong Wu) #61358a132be7f71] - test: check new WebCryptoAPI enum values (Filip Skokan) #6140672f1463735] - test: split test-esm-loader-hooks (Joyee Cheung) #6137439105e4c5f] - test: aix: mark test-emit-on-destroyed as flaky (Stewart X Addison) #613813f17acfb1c] - test: add webidl web-platform tests (Yagiz Nizipli) #6131689983cf747] - test: update url web-platform tests (Yagiz Nizipli) #6131573c0a242d7] - test: forbid use of named imports for fixtures (Antoine du Hamel) #61228a49d54308e] - test: enforce better never-settling-promise detection (Antoine du Hamel) #60976335cb0b5cc] - test: ensure assertions are reached on all tests (Antoine du Hamel) #608455ee02c789a] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60763141fb82ffb] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60760edf90ce457] - test: use RegExp.escape to improve test reliability (Antoine du Hamel) #60803f5f9b2dcf6] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60728ec1cbbe0b6] - test_runner: fix memory leaks in runner (Abhishek Kv. Savani) #60860399ac68427] - test_runner: fix coverage report when a directory is named file (Heath Dutton🕴️) #611696e1beda333] - test_runner: print info when test restarts (Xavier Stouder) #61160f5803ccb86] - test_runner: fix rerun ambiguous test failures (Moshe Atlow) #61392a5a4c3eb44] - test_runner: nix dead reporter code (Vas Sudanagunta) #59700ff1fcabfc9] - (SEMVER-MINOR) test_runner: support expecting a test-case to fail (Jacob Smith) #60669ade4fc2338] - tools: copyedit Nix files (Antoine du Hamel) #614477c2242beb9] - tools: validate release commit diff as part of lint-release-proposal (Antoine du Hamel) #61440ca4ebed258] - tools: use ad-hoc flag to lint Nix files (Antoine du Hamel) #6140505ce2c87f3] - tools: fix vcbuild lint-js-build (Vladimir Morozov) #6131841adb54a37] - tools: enforce trailing commas in test/es-module (Antoine du Hamel) #60891eebd732a52] - tools: enforce trailing commas in test/sequential (Antoine du Hamel) #608928b73739e03] - typings: add typing for string_decoder (Taejin Kim) #61368e88dd012ad] - v8: changing total_allocated_bytes to avoid ABI changes (Caio Lima) #60800c75ad3d87d] - v8: add GCProfiler support for erm (Ilyas Shabi) #61191611c179663] - zlib: validate write_result array length (Ryuhei Shima) #61342<a id="25.4.0"></a>
8f6fada8f1] - cli: add --require-module/--no-require-module (Joyee Cheung) #60959bf8e738df4] - cli: mark --heapsnapshot-near-heap-limit as stable (Joyee Cheung) #609567930d7a19b] - crypto: update root certificates to NSS 3.117 (Node.js GitHub Bot) #6074144f61dfb92] - doc: add @avivkeller to collaborators (Aviv Keller) #6111545903ee884] - doc: add gurgunday to collaborators (Gürgün Dayıoğlu) #6109477faa14d99] - doc: mark --build-snapshot and --build-snapshot-config as stable (Joyee Cheung) #60954aefbe4ba47] - (SEMVER-MINOR) events: repurpose events.listenerCount() to accept EventTargets (René) #602148470e2993b] - (SEMVER-MINOR) http: add http.setGlobalProxyFromEnv() (Joyee Cheung) #6095324384d7438] - meta: add Renegade334 to collaborators (Renegade334) #60714c1acef6d0f] - module: mark require(esm) as stable (Joyee Cheung) #609592e39f3ed6b] - module: mark module compile cache as stable (Joyee Cheung) #60971e6a05cfb4f] - (SEMVER-MINOR) module: allow subpath imports that start with #/ (Jan Martin) #60864fa927c31da] - (SEMVER-MINOR) process: preserve AsyncLocalStorage in queueMicrotask only when needed (Gürgün Dayıoğlu) #60913bd0942f4f5] - (SEMVER-MINOR) stream: do not pass readable.compose() output via Readable.from() (René) #609075051d90100] - (SEMVER-MINOR) util: add convertProcessSignalToExitCode utility (Erick Wendel) #60963408f024906] - v8: mark v8.queryObjects() as stable (Joyee Cheung) #60957e61cfdbf50] - assert: use a set instead of an array for faster lookup (Ruben Bridgewater) #6107611861084fd] - assert,util: improve comparison performance (Ruben Bridgewater) #611764ef4f759cb] - assert,util: fix deep comparing invalid dates skipping properties (Ruben Bridgewater) #61076c8fccd585f] - assert,util: improve deep comparison performance (Ruben Bridgewater) #6107613661a0123] - benchmark: use boolean options in benchmark tests (SeokhunEom) #6012936dead3433] - benchmark: allow boolean option values (SeokhunEom) #60129376056eaef] - benchmark: add microbench on isInsideNodeModules (Chengzhong Wu) #6099122d3e85b7a] - benchmark: fix incorrect base64 input in byteLength benchmark (semimikoh) #608415016f75522] - benchmark: use typescript for import cjs benchmark (Joyee Cheung) #60663012a08f6eb] - buffer: let Buffer.of use heap (Сковорода Никита Андреевич) #6050365696e42ba] - build: add --shared-hdr-histogram configure flag (Antoine du Hamel) #612806155b8836e] - build: add --shared-gtest configure flag (Antoine du Hamel) #61279e80127f49c] - build: expose libplatform symbols in shared libnode (Joyee Cheung) #61144d99805049e] - build: fix inconsistent quoting in Makefile (Antoine du Hamel) #605113213de08e8] - build: support building crates (temporal) on windows (沈鸿飞) #611631ad8788391] - build: remove temporal updater (Chengzhong Wu) #61151e6e25d65be] - build: add --debug-symbols to build with -g without enabling DCHECKs (Joyee Cheung) #611007040ec94c8] - build: update test-wpt-report to use NODE instead of OUT_NODE (Filip Skokan) #61024990da3518d] - build: skip build-ci on actions with a separate test step (Chengzhong Wu) #610733259e395c9] - build: run embedtest with node_g when BUILDTYPE=Debug (Chengzhong Wu) #60850af42ca569f] - build: ignore built-in temporal when building with shared lib (Chengzhong Wu) #60703bec7fce07a] - build: add temporal_capi gyp (Chengzhong Wu) #60703d2f50047f7] - build: fix OpenSSL version parsing for OpenSSL < 3 (Richard Lau) #6077591b20c52df] - build: add flag to compile V8 with Temporal support (Antoine du Hamel) #607010aaed248f0] - build: add support for Visual Studio 2026 (Michaël Zasso) #607278f6fada8f1] - cli: add --require-module/--no-require-module (Joyee Cheung) #60959bf8e738df4] - cli: mark --heapsnapshot-near-heap-limit as stable (Joyee Cheung) #609567930d7a19b] - crypto: update root certificates to NSS 3.117 (Node.js GitHub Bot) #607411b15453602] - deps: update cjs-module-lexer to 2.2.0 (Node.js GitHub Bot) #61271118fa97c95] - deps: update nbytes to 0.1.2 (Node.js GitHub Bot) #612709b136db814] - deps: update ngtcp2 to 1.19.0 (Node.js GitHub Bot) #611565635f23a50] - deps: update nghttp3 to 1.14.0 (Node.js GitHub Bot) #611879ec35c0977] - deps: update nghttp3 to 1.13.1 (Node.js GitHub Bot) #600464d7d37f701] - deps: update timezone to 2025c (Node.js GitHub Bot) #611382c1e3ab19d] - deps: nghttp2: revert 7784fa979d0b (Antoine du Hamel) #6113656a6513648] - deps: update nghttp2 to 1.68.0 (nodejs-github-bot) #61136f2692c5534] - deps: remove independent temporal (Chengzhong Wu) #610723acbf3f129] - deps: apply cargo vendor (Chengzhong Wu) #61072d2759f4805] - deps: add vendor depenency crate (Chengzhong Wu) #610726330385174] - deps: update simdjson to 4.2.4 (Node.js GitHub Bot) #610569835860115] - deps: update googletest to 065127f1e4b46c5f14fc73cf8d323c221f9dc68e (Node.js GitHub Bot) #61055d2e6dff2f9] - deps: brotli: cherry-pick e230f474b87 (liujiahui) #6100327da9ca1c7] - deps: upgrade npm to 11.7.0 (npm team) #61011398ba68793] - deps: V8: cherry-pick 72b0e27bd936 (pthier) #60706a8ae3b9557] - deps: update sqlite to 3.51.1 (Node.js GitHub Bot) #608994e1edae655] - deps: update zlib to 1.3.1-63d7e16 (Node.js GitHub Bot) #6089849b5954e74] - deps: update corepack to 0.34.5 (Node.js GitHub Bot) #608426ae415361f] - deps: upgrade npm to 11.6.4 (npm team) #608533cc857001a] - deps: add temporal_rs 0.1.0 (Chengzhong Wu) #60703660788cd4b] - deps: update sqlite to 3.51.0 (Node.js GitHub Bot) #60614c6d7a7b7cd] - deps: upgrade npm to 11.6.3 (npm team) #60785062e15bddf] - deps: update brotli to 1.2.0 (Node.js GitHub Bot) #60540db053988db] - deps: update simdjson to 4.2.2 (Node.js GitHub Bot) #60740ea5deab531] - deps: update googletest to 1b96fa13f549387b7549cc89e1a785cf143a1a50 (Node.js GitHub Bot) #60739c23f40cca4] - deps: update minimatch to 10.1.1 (Node.js GitHub Bot) #60543479c9290b9] - deps: update corepack to 0.34.4 (Node.js GitHub Bot) #60643e42911eddd] - deps: update inspector_protocol to 1b1bcbbe060e8c8cd8704f00f78978c50991 (Node.js GitHub Bot) #60705d908c83330] - deps: update cjs-module-lexer to 2.1.1 (Node.js GitHub Bot) #6064696530a4ca6] - deps: update simdjson to 4.2.1 (Node.js GitHub Bot) #606446b0926ef20] - deps,src: prepare for cpplint update (Michaël Zasso) #609015ed71efa3e] - doc: fix v25 changelog after security release (Marco Ippolito) #61371c2791069a2] - doc: correct description of error.stack accessor behavior (René) #61090134780c035] - doc: add documentation for process.traceProcessWarnings (Alireza Ebrahimkhani) #536413b08efcebb] - doc: add sqlite session disposal method (René) #61273ec1847a097] - doc: fix filename typo (Hardanish Singh) #612972c651ce460] - doc: fix typos and grammar in BUILDING.md & onboarding.md (Hardanish Singh) #6126728fe6ea4a8] - doc: mention --newVersion release script (Rafael Gonzaga) #612552fb35d897d] - doc: correct typo in BUILDING doc (Mike McCready) #612618dc2501a25] - doc: correct typo in api contributing doc (Mike McCready) #6126069e357a9d4] - doc: add PR-URL requirement for security backports (Rafael Gonzaga) #6125673326ae103] - doc: add reusePort error behavior to net module (mag123c) #6125067fbf4d371] - doc: note corepack package removal in distribution doc (Mike McCready) #612070792859e49] - doc: fix tls.connect() timeout documentation (Azad Gupta) #6107972f42b9985] - doc: missing passed, error and passed properties on TestContext (Xavier Stouder) #61185f418fcc635] - doc: clarify threat model for application-level API exposure (Rafael Gonzaga) #61184bd4710769a] - doc: correct options for net.Socket class and socket.connect (Xavier Stouder) #61179387b65ca08] - doc: document error event on readline InterfaceConstructor (Xavier Stouder) #611706d886e10e4] - doc: add a smooth scrolling effect to the sidebar (btea) #5900723fb3a64ec] - doc: fix test settime docs (Efe) #61117808eb437ee] - doc: correct invalid collaborator profile (JJ) #610915e8eb5fe6c] - doc: add a tip about developer mode on Windows (Joyee Cheung) #61112a4248776da] - doc: exclude compile-time flag features from security policy (Matteo Collina) #6110944f61dfb92] - doc: add @avivkeller to collaborators (Aviv Keller) #6111508b5347b41] - doc: warn about short GCM tags visibly (Tobias Nießen) #6108245903ee884] - doc: add gurgunday to collaborators (Gürgün Dayıoğlu) #61094ce5d6e22ef] - doc: update MDN links (Livia Medeiros) #61062657cbd4af3] - doc: mark sync module hooks as release candidate (Joyee Cheung) #60960a46368a82b] - doc: reorganize docs of module customization hooks (Joyee Cheung) #609609851278e99] - doc: mark crypto.hash as stable (Joyee Cheung) #6099477faa14d99] - doc: mark --build-snapshot and --build-snapshot-config as stable (Joyee Cheung) #609546d5f9ffc6d] - doc: add File modes cross-references in fs methods (Mohit Raj Saxena) #60286521b25a27d] - doc: add missing zstd to mjs example of zlib (Deokjin Kim) #609159a9bed9b3a] - doc: clarify fileURLToPath security considerations (Rafael Gonzaga) #60887bebb4731b1] - doc: show the use of string expressions in the SQLTagStore example (schliepa) #60873f247c24cb0] - doc: replace column with columnNumber in example of util.getCallSites (Deokjin Kim) #60881487c1080aa] - doc: correct spelling in BUILDING.md (Rich Trott) #608755751e3f736] - doc: update debuglog examples to use 'foo-bar' instead of 'foo' (xiaoyao) #60867ec8336b7a0] - doc: correct 'event handle' to 'event handler' in Utf8Stream drop event (Riddhi) #6069295ef052751] - doc: fix typos in changelogs (Rich Trott) #60855a10b3130c6] - doc: mark module.register as active development (Chengzhong Wu) #60849bfe8c62a2d] - doc: add fullName property to SuiteContext (PaulyBearCoding) #607622799f594e3] - doc: add additional codemods for deprecation (Augustin Mauroy) #608112b51d5d113] - doc: keep sidebar module visible when navigating docs (Botato) #604102fa9917b07] - doc: fix webstorage config file property (Marco Ippolito) #60798a0691d6eb6] - doc: correct concurrency wording in test() documentation (Azad Gupta) #60773d26842c523] - doc: clarify that CQ only picks up PRs targeting main (René) #607313e84428ffe] - doc: clarify license section and add contributor note (KaleruMadhu) #60590745ea1d61f] - doc: correct and expand documentation for SQLTagStore (René) #60200a442c27c0a] - doc: correct tls ALPNProtocols types (René) #60143d90001a579] - doc: remove mention of SMS 2FA (Antoine du Hamel) #607077525a3fa4b] - doc: add info about renamed flag in cli.md (Antoine du Hamel) #60690db0a86897b] - doc: fix incorrect slh-dsa oids in crypto.md (Artsiom Malakhau) #60681e5ede89a94] - doc: domain.add() does not accept timer objects (René) #6067536ba9d99ba] - Revert "doc, assert: correct order of changes entries" (Michaël Zasso) #60774e6e5ed7665] - doc,test: add documentation and test on how to use addons in SEA (Joyee Cheung) #59582f12eb28489] - esm: avoid throw when module specifier is not url (Craig Macomber (Microsoft)) #61000a7b92e0677] - esm: improve error messages for ambiguous module syntax (mag123c) #603766da85b576b] - events: remove eventtarget custom inspect branding (Efe) #61128aefbe4ba47] - (SEMVER-MINOR) events: repurpose events.listenerCount() to accept EventTargets (René) #60214dc19409f36] - fs: validate statfs path (Efe) #61230206e353a4a] - fs: fix rmSync to handle non-ASCII characters (Yeaseen) #61108feee377b83] - fs: remove broken symlinks in rmSync (sangwook) #610406b577c80bb] - fs: detect dot files when using globstar (Robin van Wijngaarden) #610128470e2993b] - (SEMVER-MINOR) http: add http.setGlobalProxyFromEnv() (Joyee Cheung) #60953a731463a60] - http,https: fix double ERR_PROXY_TUNNEL emission (Shima Ryuhei) #60699b2736646b6] - http2,zlib: prefer call() over apply() if argument list is not array (Livia Medeiros) #6083486bce15e96] - lib: implement all 1-byte encodings in js (Сковорода Никита Андреевич) #610938156738b97] - lib: gbk decoder is gb18030 decoder per spec (Сковорода Никита Андреевич) #61099d8f1dea0d3] - lib: enforce use of URLParse (Antoine du Hamel) #610169023b3f9ce] - lib: add lint rules for reflective function calls (Antoine du Hamel) #608252979113136] - lib: prefer call() over apply() if argument list is not array (Livia Medeiros) #607962b36433f4a] - lib: add support for readable byte streams to .toWeb() (Hans Klunder) #586641a0c3dddb9] - lib: use FastBuffer for empty buffer allocation (Gürgün Dayıoğlu) #605589209cf67a4] - lib: refactor JWK import PQC support check (Filip Skokan) #6058642666c241a] - lib,src: isInsideNodeModules should test on the first non-internal frame (Chengzhong Wu) #609914a22647609] - lib,src,test: fix tests without SQLite (Antoine du Hamel) #6090624795530bb] - lib,test: enforce use of assert.fail via a lint rule (Antoine du Hamel) #610041977348ae0] - lib,test: fix jsdoc comments (Michaël Zasso) #608703549cf14ce] - meta: remove t.js (RafaelGSS) #613695cf54abad7] - meta: bump step-security/harden-runner from 2.13.2 to 2.14.0 (dependabot[bot]) #61245b57bab72e1] - meta: bump actions/setup-node from 6.0.0 to 6.1.0 (dependabot[bot]) #6124442117b5069] - meta: bump actions/cache from 4.3.0 to 5.0.1 (dependabot[bot]) #61243fee3edd38e] - meta: bump actions/download-artifact from 6.0.0 to 7.0.0 (dependabot[bot]) #61242a96c3160ff] - meta: bump github/codeql-action from 4.31.6 to 4.31.9 (dependabot[bot]) #61241b4233e18a9] - meta: bump codecov/codecov-action from 5.5.1 to 5.5.2 (dependabot[bot]) #61240c5d7dd3731] - meta: bump actions/checkout from 6.0.0 to 6.0.1 (dependabot[bot]) #61239d83cec1534] - meta: bump actions/upload-artifact from 5.0.0 to 6.0.0 (dependabot[bot]) #61238d4bfd26f06] - meta: bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 (dependabot[bot]) #612379246c6ab12] - meta: bump cachix/install-nix-action from 31.8.4 to 31.9.0 (dependabot[bot]) #612361b378cfd5e] - meta: move lukekarrys to emeritus (Node.js GitHub Bot) #60985f3bfa68d78] - meta: bump actions/setup-python from 6.0.0 to 6.1.0 (dependabot[bot]) #60927f1935d19e9] - meta: bump github/codeql-action from 4.31.3 to 4.31.6 (dependabot[bot]) #609260a4a4c090d] - meta: bump actions/checkout from 5.0.1 to 6.0.0 (dependabot[bot]) #60925d76f95117b] - meta: bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 (dependabot[bot]) #609244dd153f8c3] - meta: bump github/codeql-action from 4.31.2 to 4.31.3 (dependabot[bot]) #60770a90bf3ece1] - meta: bump step-security/harden-runner from 2.13.1 to 2.13.2 (dependabot[bot]) #60769ecc945d7ec] - meta: bump cachix/install-nix-action from 31.8.2 to 31.8.4 (dependabot[bot]) #607685578327a4f] - meta: bump actions/checkout from 5.0.0 to 5.0.1 (dependabot[bot]) #6076724384d7438] - meta: add Renegade334 to collaborators (Renegade334) #607142d560e42fa] - module: fix sync resolve hooks for require with node: prefixes (Joyee Cheung) #6108815c3655b9a] - module: preserve URL in the parent created by createRequire() (Joyee Cheung) #60974c1acef6d0f] - module: mark require(esm) as stable (Joyee Cheung) #609592e39f3ed6b] - module: mark module compile cache as stable (Joyee Cheung) #60971e6a05cfb4f] - (SEMVER-MINOR) module: allow subpath imports that start with #/ (Jan Martin) #608641983cd6692] - node-api: add napi_set_prototype (siaeyy) #60711350b0ea895] - node-api: fix data race and use-after-free in napi_threadsafe_function (Mika Fischer) #55877cb3f79273a] - node-api: add support for Float16Array (Ilyas Shabi) #58879bdf359b3d1] - node-api: support SharedArrayBuffer in napi_create_dataview (Kevin Eady) #604733c5dc03f06] - os: freeze signals constant (Xavier Stouder) #61038ca5c4c9752] - process: improve process.cwd() error message (TseIan) #61164fa927c31da] - (SEMVER-MINOR) process: preserve AsyncLocalStorage in queueMicrotask only when needed (Gürgün Dayıoğlu) #60913571cec49e0] - repl: fix getters triggering side effects during completion (Dario Piotrowicz) #61043377aed336c] - repl: tab completion targets <class> instead of new <class> (Đỗ Trọng Hải) #60319cb8bc3466d] - sqlite: improve error messages for tag store (Pramit Sharma) #61096324ea4fa2d] - sqlite: make SQLTagStore.prototype.size a getter (René) #60246874c50296d] - src: dump snapshot source with node:generate_default_snapshot_source (Joyee Cheung) #611010692b4f014] - src: improve StringBytes::Encode perf on ASCII (Сковорода Никита Андреевич) #61119754271a1f0] - src: add HandleScope to edge loop in heap_utils (Mert Can Altin) #608858f46bd9352] - src: remove redundant CHECK (Tobias Nießen) #611305e6ffd9aa0] - src: remove unused private field in SQLTagStore (Michaël Zasso) #61027550e8a7a69] - src: implement Windows-1252 encoding support and update related tests (Mert Can Altin) #608933f9c0e07b4] - src: fix off-thread cert loading in bundled cert mode (Joyee Cheung) #607647eaf815341] - src: handle DER decoding errors from system certificates (Joyee Cheung) #607876e76cec44a] - src: use static_cast instead of C-style cast (Michaël Zasso) #60868103e55487e] - src: handle indexed properties in process.env (Michaël Zasso) #6082683d1f41752] - src: simply uint32 to string as it must not fail (Chengzhong Wu) #608462dfdc6f01e] - src: mark unused private field as such (Michaël Zasso) #60802920f02539e] - src: implicitly enable namespace in config (Marco Ippolito) #6079847c5bd9b7c] - src: add permission flag to config file (Marco Ippolito) #60798d9df3f710d] - src: add test flag to config file (Marco Ippolito) #60798831256cb92] - src: rename config file testRunner to test (Marco Ippolito) #607986c2b75ba87] - src: split inspector protocol domains files (Chengzhong Wu) #6075451cf032a5e] - src: add permission support to config file (Marco Ippolito) #60746413db7c635] - src: build v8 tick processor as built-in source text modules (Joyee Cheung) #60518428d24acf5] - src,permission: fix permission.has on empty param (Rafael Gonzaga) #60674a60aa72a87] - src,permission: add debug log on is_tree_granted (Rafael Gonzaga) #60668bd0942f4f5] - (SEMVER-MINOR) stream: do not pass readable.compose() output via Readable.from() (René) #6090790c12a252a] - stream: fix isErrored/isWritable for WritableStreams (René) #609059ac774c15b] - test: asserts that import.meta.resolve invokes sync loader hooks (Chengzhong Wu) #61158c08afc5712] - test: check util.parseArgs argv parsing with actual process execution (René) #61089182f2e4b5a] - test: update WPT for urlpattern to a2e15ad405 (Node.js GitHub Bot) #611349f7cc779f5] - test: make buffer sizes 32bit-aware in test-internal-util-construct-sab (René) #61026c6a8234963] - test: remove unneccessary repl magic_mode tests (Dario Piotrowicz) #61053fa2fe0930f] - test: skip sea tests on riscv64 (Stewart X Addison) #61111b209f6ba19] - test: simplify test-cli-node-options-docs (Antoine du Hamel) #61006c9153c7d4f] - test: mark stringbytes-external-max flaky on AIX (Stewart X Addison) #609952cbddfefb7] - test: update test426 fixtures (Rich Trott) #60982c7190e6876] - test: update WPT for urlpattern to aed1f3d244 (Node.js GitHub Bot) #6064292649e2873] - test: deflake test-repl-paste-big-data (Livia Medeiros) #60975e4bc345442] - test: skip tests not passing without NODE_OPTIONS support (Antoine du Hamel) #6091263299a47ec] - test: improve config-file permission test coverage (Rafael Gonzaga) #609299a0c420a33] - test: skip SEA inspect test if inspector is not available (Livia Medeiros) #60872e97daea17c] - test: update WPT for WebCryptoAPI to 1e4933113d (Node.js GitHub Bot) #60896ac367b3550] - test: lint more assert(regexp.test(...)) cases (René) #60878ca5720e7b5] - test: use assert.match for non-literal regexp tests (René) #608795d30d3fc2d] - test: fix embedtest in debug windows (Vladimir Morozov) #608068caeb03a52] - test: skip failing tests when compiled without amaro (Yuki Okita) #60815242e20bf9a] - test: fix debug test crashes caused by sea tests (Vladimir Morozov) #60807b890362e1a] - test: add lint rule to forbid use of assert.ok(/regex/.test(…)) (Antoine du Hamel) #60832b08cb5657e] - test: replace deprecated regex test assertions in http trailers test (Aditya Chopra) #6083147ed95965e] - test: ensure assertions are reached on more tests (Antoine du Hamel) #6076179d48f9441] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60759585e200b40] - test: prefer major GC in cppgc-object teardown (sangwook) #606729426ff6b08] - test: add basic temporal presence check (Chengzhong Wu) #60703ffebf8e55c] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60726adc6776c6a] - test: ensure assertions are reached on HTTP2 tests (Antoine du Hamel) #607303dae49c6ce] - test: ensure assertions are reached on HTTP tests (Antoine du Hamel) #607295203b09fea] - test: skip test that cause timeout on IBM i (SRAVANI GUNDEPALLI) #607006d2fe36747] - test: add missing r.close() calls in REPL multiline tests (sangwook) #60226bbee2ef5e0] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60634a2764d450d] - test: update WPT for WebCryptoAPI to c58b6f4e0e (Node.js GitHub Bot) #607021176fe43a7] - test: fix test-buffer-zero-fill-cli to be effective (Сковорода Никита Андреевич) #606231a66dc1292] - test: limit the concurrency of WPTRunner for RISC-V (Levi Zim) #6059136076846d4] - test: fix test-strace-openat-openssl for RISC-V (Levi Zim) #605885a976cb507] - test: split test-runner-run-watch.mjs (Joyee Cheung) #606538f611b9bce] - test: ensure assertions are reached on more tests (Antoine du Hamel) #606413e550d30d6] - test_runner: fix lazy test.assert accessor (René) #61097ec142be1ed] - test_runner: propagate V8 options to child process (Pietro Marchini) #609993127a2b1e7] - test_runner: fix line feed escaping in JUnit (Aliaksandr) #6027408fb6c9ba4] - test_runner: simplify code and make it more consistent (Antoine du Hamel) #60777102b217cf3] - tools: bump the eslint group in /tools/eslint with 2 updates (dependabot[bot]) #6124697b6b61165] - tools: unpin ngtcp2 version updates (Michaël Zasso) #611557e95edc3de] - tools: only report commit validation failure on Slack (Antoine du Hamel) #611243a7ed257a3] - tools: use sparse-checkout in linter jobs (Antoine du Hamel) #61123b655edf1bf] - tools: simplify notify-on-push (Antoine du Hamel) #61050230155749d] - tools: fix update-nghttp2 signature verification (Richard Lau) #61035e8646a7d10] - tools: improve log output of create-release-proposal (Antoine du Hamel) #61028a4b2614912] - tools: fix vcbuild test when path contain spaces (stduhpf) #564819769c359f8] - tools: do not run test-linux workflow for changes on vcbuild.bat (Antoine du Hamel) #609792ceaf6eb3c] - tools: add some options and comments to shell.nix (Antoine du Hamel) #60911611135abdc] - tools: bump mdast-util-to-hast from 13.2.0 to 13.2.1 in /tools/doc (dependabot[bot]) #60930b4bad20a6c] - tools: ignore more paths in GHA CI (Antoine du Hamel) #6092047b7cb4e9e] - tools: run tests --without-amaro on test-shared macOS (Antoine du Hamel) #60902b0ec8c9c2a] - tools: replace deprecated eslint-plugin-markdown (Michaël Zasso) #6090846dacf686e] - tools: remove deprecated ESLint plugins (Michaël Zasso) #609081a4ec6e830] - tools: update ESLint dependencies (Michaël Zasso) #609084e442b286d] - tools: refloat 10 Node.js patches to cpplint.py (Michaël Zasso) #60901fa90d09de6] - tools: update cpplint to 2.0.2 (Michaël Zasso) #609014d944c5198] - tools: disable some new cpplint rules before update (Michaël Zasso) #60901eaebae1eed] - tools: don't fetch V8 deps in the source tree (Richard Lau) #60883256770944a] - tools: add temporal updater (Chengzhong Wu) #608281c38f808bd] - tools: dump config.gypi as json (Chengzhong Wu) #60794ed89b35291] - tools: bump js-yaml from 4.1.0 to 4.1.1 in /tools/lint-md (dependabot[bot]) #60781c98c0881c5] - tools: fix linter warning in test-shared.yml (Antoine du Hamel) #60772aa44406ed7] - tools: bump js-yaml from 4.1.0 to 4.1.1 in /tools/doc in the doc group (dependabot[bot]) #60766b756154ed9] - tools: fix paths-ignore in gha files (Antoine du Hamel) #6075318ed53fb7a] - tools: update install_tools.bat old echo from 2019 to 2022 (David Hidalgo) #60736cf79940d5c] - tools: remove unsupported cooldown from Dependabot config (Antoine du Hamel) #607478ea73ffd64] - tools: update sccache to v0.12.0 (Michaël Zasso) #60723578f8bdfa0] - tools: update x64 macOS runner (Antoine du Hamel) #606763b6cf316c0] - tools: update gyp-next to 0.21.0 (Node.js GitHub Bot) #606457d55b8c00f] - tools,doc: fix format-md files list (Stefan Stojanovic) #61147a617942a4a] - url: add fast path to getPathFromURL decoder (Gürgün Dayıoğlu) #60749a6ac8bd2a5] - url: remove array.reduce usage (Gürgün Dayıoğlu) #6074809b5396523] - util: optimize toASCIILower function using V8s native toLowerCase (Mert Can Altin) #611071dd15c9502] - util: limit inspect to only show own properties (Ruben Bridgewater) #610325051d90100] - (SEMVER-MINOR) util: add convertProcessSignalToExitCode utility (Erick Wendel) #6096398b6dc1181] - util: fix parseArgs skipping positional arg with --eval and --print (azadgupta1) #60814862eaf8a09] - util: assert getCallSites does not invoke Error.prepareStackTrace (Chengzhong Wu) #60922c2e79aa5fb] - util: improve textencoder encodeInto performance (Yagiz Nizipli) #60843b6903aaf8d] - util: safely inspect getter errors whose message throws (Yves M.) #60684408f024906] - v8: mark v8.queryObjects() as stable (Joyee Cheung) #60957b00ee5222c] - worker: update code examples for node:worker_threads module (fisker Cheung) #582642409839f19] - worker: remove not implemented declarations (Artur Gawlik) #60655c09417a2b1] - zlib: add CHECK to validate fast path input (Matteo Collina) #61175<a id="25.3.0"></a>
This is a security release.
a6a74b89a7] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #609975100614e26] - deps: update undici to 7.18.2 (Node.js GitHub Bot) #61283f0a8916887] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#750b4b887c5f7] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#74826be208039] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760bdf5873d44] - (CVE-2026-21636) permission: add network check on pipe_wrap connect (RafaelGSS) nodejs-private/node-private#7840578e3e921] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#7734d6b55a6d1] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759c357a39e14] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#790<a id="25.2.1"></a>
ff89b7b6c7] - crypto: ensure documented RSA-PSS saltLength default is used (Filip Skokan) #606625316b580eb] - deps: V8: backport 2e4c5cf9b112 (Michaël Zasso) #60654ca878bc90e] - doc,src,lib: clarify experimental status of Web Storage support (Antoine du Hamel) #60708a4dee613fd] - Revert "lib: throw from localStorage getter on missing storage path" (Antoine du Hamel) #60750<a id="25.2.0"></a>
a37c01e6a1] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga) #599824fbb1ab101] - lib: throw from localStorage getter on missing storage path (René) #60351727560a96d] - (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito) #60600506b79e888] - (SEMVER-MINOR) net: increase network family autoselection timeout to 500ms (Rod Vagg) #60334166c72ec02] - (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho) #59953399b340022] - (SEMVER-MINOR) v8: adding total_allocated_bytes to HeapStatistics (Caio Lima) #60573d5158a0a2d] - benchmark: focus on import.meta intialization in import-meta benchmark (Joyee Cheung) #6060326a5305fa9] - benchmark: add per-suite setup option (Joyee Cheung) #605744810e4b82d] - buffer: speed up concat via TypedArray#set (Gürgün Dayıoğlu) #6039994a94a6b3a] - console: optimize single-string logging (Gürgün Dayıoğlu) #60422ad376c31db] - crypto: fix argument validation in crypto.timingSafeEqual fast path (Joyee Cheung) #60538dc38a45a55] - debugger: fix event listener leak in the run command (Joyee Cheung) #60464a61e5d8e05] - deps: call OPENSSL_free after ANS1_STRING_to_UTF8 (Rafael Gonzaga) #6060951e5030afa] - deps: nghttp2: revert 7784fa979d0b (Antoine du Hamel) #59790eef838f499] - deps: update nghttp2 to 1.67.1 (nodejs-github-bot) #5979013120a43d4] - deps: update simdjson to 4.1.0 (Node.js GitHub Bot) #605426e1b23dab8] - deps: update corepack to 0.34.2 (Node.js GitHub Bot) #60550a02e05c486] - deps: update amaro to 1.1.5 (Node.js GitHub Bot) #60541b9ba3a7947] - deps: V8: backport fe81545e6d14 (Caio Lima) #6042907bcd28494] - deps: V8: cherry-pick 7ef6a001762 (Xiao-Tao) #602593e11658243] - doc: update Collaborators list to reflect hybrist handle change (Antoine du Hamel) #60650b8e40e4d38] - doc: fix link in --env-file=file section (N. Bighetti) #605639558c1c0df] - doc: fix linter issues (Antoine du Hamel) #60636cdf70de563] - doc: add missing history entry for sqlite.md (Antoine du Hamel) #60607e3c5dcf1ea] - doc: correct values/references for buffer.kMaxLength (René) #60305a25d76c924] - doc: recommend events.once to manage 'close' event (Dan Fabulich) #60017795f32bf91] - doc: highlight module loading difference between import and require (Ajay A) #59815212775410b] - doc: add CJS code snippets in sqlite.md (Allon Murienik) #60395263c06096d] - doc: fix typo in process.unref documentation (우혁) #59698356bdae408] - doc: add some entries to glossary.md (Mohataseem Khan) #592779632c398de] - doc: improve agent.createConnection docs for http and https agents (JaeHo Jang) #58205f72880dbe3] - doc: fix pseudo code in modules.md (chirsz) #57677a9c70cefe8] - doc: add missing variable in code snippet (Koushil Mankali) #554782892d151d4] - doc: add missing word in single-executable-applications.md (Konstantin Tsabolov) #538649c99ab6571] - doc: fix typo in http.md (Michael Solomon) #593543446cf375f] - doc: update devcontainer.json and add documentation (Joyee Cheung) #60472519c537875] - doc: add haramj as triager (Haram Jeong) #6034862889d7e99] - doc: clarify require(esm) description (dynst) #605200b9ef68705] - doc: instantiate resolver object (Donghoon Nam) #60476cd5c1ad29f] - doc: correct module loading descriptions (Joyee Cheung) #6034674719dad7a] - doc: clarify Linux runtime requirements for >=25 (Joyee Cheung) #60484ca39540785] - doc: clarify --use-system-ca support status (Joyee Cheung) #60340dbf204c714] - doc,crypto: link keygen to supported types (Filip Skokan) #605853bcf86d56d] - esm: use sync loading/resolving on non-loader-hook thread (Joyee Cheung) #6038069b3d2c845] - http: replace startsWith with strict equality (btea) #59394a38e2f5975] - http2: add diagnostics channels for client stream request body (Darshan Sen) #60480c047e73a00] - inspector: inspect HTTP response body (Chengzhong Wu) #60572d2087bae92] - inspector: support inspecting HTTP/2 request and response bodies (Darshan Sen) #60483003121c475] - inspector: fix crash when receiving non json message (Shima Ryuhei) #60388a37c01e6a1] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga) #59982219d2e978d] - lib: replace global SharedArrayBuffer constructor with bound method (Renegade334) #604974fbb1ab101] - lib: throw from localStorage getter on missing storage path (René) #60351ca8934f44d] - meta: bump cachix/install-nix-action from 31.6.1 to 31.8.2 (dependabot[bot]) #60534166490230a] - meta: bump github/codeql-action from 3.30.5 to 4.31.2 (dependabot[bot]) #60533b722236a12] - meta: bump actions/download-artifact from 5.0.0 to 6.0.0 (dependabot[bot]) #605323314b0bc60] - meta: bump actions/upload-artifact from 4.6.2 to 5.0.0 (dependabot[bot]) #60531d1d9891feb] - meta: bump actions/github-script from 7.0.1 to 8.0.0 (dependabot[bot]) #60530995596a34f] - meta: bump actions/setup-node from 5.0.0 to 6.0.0 (dependabot[bot]) #60529b60157a0fe] - meta: bump actions/stale from 10.0.0 to 10.1.0 (dependabot[bot]) #6052807fa6c9081] - meta: call create-release-post.yml post release (Aviv Keller) #60366727560a96d] - (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito) #60600506b79e888] - (SEMVER-MINOR) net: increase network family autoselection timeout to 500ms (Rod Vagg) #60334166c72ec02] - (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho) #599536ab83cf979] - node-api: use local files for instanceof test (Vladimir Morozov) #601903671851879] - perf_hooks: move non-standard performance properties to perf_hooks (Chengzhong Wu) #603706ddee4a7ed] - repl: fix pasting after moving the cursor to the left (Ruben Bridgewater) #60470edc3033905] - sqlite,doc: fix StatementSync section (Edy Silva) #60474e9b68e60d4] - src: move import.meta initializer to native land (Joyee Cheung) #606030ebf839a4f] - src: use CP_UTF8 for wide file names on win32 (Fedor Indutny) #60575a31ad37714] - src: show original file name in FileHandle GC close errors (Anna Henningsen) #60593a6c221324b] - src: avoid C strings in more C++ exception throws (Anna Henningsen) #60592fdff838ce3] - src: add internal binding for constructing SharedArrayBuffers (Renegade334) #604974385b0b65f] - src: move napi_addon_register_func to node_api_types.h (Anna Henningsen) #60512de78da7887] - src: move Node-API version detection to where it is used (Anna Henningsen) #60512b606d46c3f] - src: remove unconditional NAPI_EXPERIMENTAL in node.h (Chengzhong Wu) #603455941341889] - src: clean up generic counter implementation (Anna Henningsen) #604477015f30e62] - src: add enum handle for ToStringHelper + formatting (Burkov Egor) #5682939dfcbad6e] - stream: don't try to read more if reading (Robert Nagy) #60454ee333c9177] - test: deflake test-perf-hooks-timerify-histogram-sync (Joyee Cheung) #60639f0d81c91e7] - test: apply a delay to watch-mode-kill-signal tests (Joyee Cheung) #6061068791e2ccc] - test: async iife in repl (Tony Gorez) #44878c4eb9c3383] - test: parallelize sea tests when there's enough disk space (Joyee Cheung) #60604be8c4172d9] - test: only show overridden env in child process failures (Joyee Cheung) #605568cae858f88] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60498759d69331e] - test: ensure assertions are reachable in test/es-module (Antoine du Hamel) #605016aaf18c333] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60485bc41acf087] - test: ensure assertions are reached on more tests (Antoine du Hamel) #6050022fd621daf] - test: split test-perf-hooks-timerify (Joyee Cheung) #605685efe4f722e] - test: add more logs to test-esm-loader-hooks-inspect-wait (Joyee Cheung) #604662a57268f34] - test: mark stringbytes-external-exceed-max tests as flaky on AIX (Joyee Cheung) #605652c199f7f61] - test: split test-esm-wasm.js (Joyee Cheung) #60491bc8f7db5bb] - test: correct conditional secure heap flags test (Shelley Vohr) #603853bf42a5dd3] - test: spin longer on flaky platforms for test-worker-prof (Joyee Cheung) #60492eca6227e7e] - test: ensure assertions are reachable in test/internet (Antoine du Hamel) #60513313983453b] - test: fix flaky test-watch-mode-kill-signal-* (Joyee Cheung) #60443ccc26377b5] - test: capture stack trace in debugger timeout errors (Joyee Cheung) #6045712e9213a24] - test: ensure assertions are reachable in test/sequential (Antoine du Hamel) #60412781a2661de] - test: ensure assertions are reachable in more folders (Antoine du Hamel) #604111e979e6eb7] - test: split test-runner-watch-mode (Joyee Cheung) #603918c31cbb99b] - test: move test-runner-watch-mode helper into common (Joyee Cheung) #60391c94c6555cc] - test,crypto: handle a few more BoringSSL tests (Shelley Vohr) #59030fd63c27444] - test,crypto: update x448 and ed448 expectation when on boringssl (Shelley Vohr) #60387bf0de92446] - tls: fix leak on invalid protocol method (Shelley Vohr) #604277e8373b378] - tools: replace invalid expression in dependabot config (Riddhi) #60649ac08760547] - tools: extract Nix dependency lists to separate files (Antoine du Hamel) #60495ae91a6cc3a] - tools: only add test reporter args when node:test is used (Joyee Cheung) #6055197ed560222] - tools: skip unaffected GHA jobs for changes in test/internet (Antoine du Hamel) #6051744ca97b404] - tools: fix update-icu script (Michaël Zasso) #6052107b0b5a5ba] - tools: fix linter for semver-major release proposals (Antoine du Hamel) #6048197d74224c3] - tools: fix failing release-proposal linter for LTS transitions (Antoine du Hamel) #60465019af5bc27] - tools: skip running test-shared on deps changes (Antoine du Hamel) #604333ec9764151] - tools: pin OpenSSL to 3.5.4 on test-shared workflow (Antoine du Hamel) #60428fe2d6d44d4] - tools: remove undici from daily wpt.fyi job (Filip Skokan) #60444d09ba98398] - tools: document that nixpkgs updates should not be backported (Antoine du Hamel) #604317fc99319e7] - tools: do not use short hashes for deps versioning to avoid collision (Antoine du Hamel) #60407815edb0c3a] - tools,doc: update JavaScript primitive types to match MDN Web Docs (JustApple) #605816877139a2d] - util: fix stylize of special properties in inspect (Ge Gao) #60479399b340022] - (SEMVER-MINOR) v8: adding total_allocated_bytes to HeapStatistics (Caio Lima) #60573d64795b318] - watch: fix interaction with multiple env files (Marco Ippolito) #60605<a id="25.1.0"></a>
4395fe14b9] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #597782e55c6ad04] - (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers) #60217f437204491] - (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito) #60178bb27766bd5] - benchmark: improve cpu.sh for safety and usability (Nam Yooseong) #60162e600711c20] - benchmark: add benchmark for leaf source text modules (Joyee Cheung) #602051bbcdf9039] - benchmark: add vm.SourceTextModule benchmark (Joyee Cheung) #5939622fa6bd28b] - build: ibmi follow aix visibility (SRAVANI GUNDEPALLI) #60360931028400e] - build: use call command when calling python configure (Jacob Nichols) #6009817fde3f3d1] - build: build v8 with -fvisibility=hidden -fvisibility-inlines-hidden (Joyee Cheung) #5629004cc7aae5e] - build: remove V8_COMPRESS_POINTERS_IN_ISOLATE_CAGE defs (Joyee Cheung) #602968a2053060d] - crypto: update root certificates to NSS 3.116 (Node.js GitHub Bot) #59956fe91c0f755] - deps: update simdjson to 4.0.7 (Node.js GitHub Bot) #59883aacfc0d212] - deps: update corepack to 0.34.1 (Node.js GitHub Bot) #603148596891a71] - deps: update inspector_protocol to af7f5a8173fdbc29f0835ec94395932e328b (Node.js GitHub Bot) #6031221bcd0eb2f] - deps: V8: cherry-pick 3d0f462a17ff (Joyee Cheung) #59396673558501c] - deps: update googletest to 279f847 (Node.js GitHub Bot) #60219425a1879b1] - doc: mention more codemods in deprecations.md (Augustin Mauroy) #60243563e1317f3] - doc: remove unnecessary statement of web storage (Deokjin Kim) #60363064c8c5cfd] - doc: add missing CAA type to dns.resolveAny() & dnsPromises.resolveAny() (Jimmy Leung) #5889999e357af35] - doc: use any for worker_threads.Worker 'error' event argument err (Jonas Geiler) #603008ccff0d934] - doc: update decorator documentation to reflect actual policy (Muhammad Salman Aziz) #60288bac70c6ef3] - doc: document wildcard supported by tools/test.py (Joyee Cheung) #602658492bc6a88] - doc: add --heap-snapshot-on-oom to useful v8 flag (jakecastelli) #602600f0d3c0e47] - doc: fix blob.bytes() heading level (XTY) #602528c8525cf93] - doc: fix not working code example in vm docs (Artur Gawlik) #602248a6de3866c] - doc, assert: correct order of changes entries (Gerhard Stöbich) #603046bacb6555a] - doc, module: change async customization hooks to experimental (Gerhard Stöbich) #603026f3b16df16] - esm: use index-based resolution callbacks (Joyee Cheung) #5939695644a432c] - http: lazy allocate cookies array (Robert Nagy) #597344395fe14b9] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #59778f1aa1eaaf5] - inspector: add network payload buffer size limits (Chengzhong Wu) #6023664fc625bf9] - inspector: support handshake response for websocket inspection (Shima Ryuhei) #602250ecbb806a8] - lib: fix typo in createBlobReaderStream (SeokHun) #60132ffec5927fd] - meta: fix typo in test-shared workflow name (Ronit Sabhaya) #60321a02897e157] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #6032559223a7831] - meta: loop userland-migrations in deprecations (Chengzhong Wu) #602992d48d17696] - module: refactor and clarify async loader hook customizations (Joyee Cheung) #60278be1b84fd93] - module: handle null source from async loader hooks in sync hooks (Joyee Cheung) #59929063fbd87d3] - msi: fix WiX warnings (Stefan Stojanovic) #602512e55c6ad04] - (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers) #60217dc93d6988a] - src: fix timing of snapshot serialize callback (Joyee Cheung) #60434267e1b3817] - src: add COUNT_GENERIC_USAGE utility for tests (Joyee Cheung) #604344a5d7a4c2a] - src: conditionally disable source phase imports by default (Shelley Vohr) #60364f437204491] - (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito) #6017836837fa0f9] - src: use cached primordials_string (Sohyeon Kim) #60255df8396ad37] - src: replace Environment::GetCurrent with args.GetIsolate (Sohyeon Kim) #602565dd670b2b9] - src: initial enablement of IsolateGroups (James M Snell) #60254afdb362933] - src: use Utf8Value and TwoByteValue instead of V8 helpers (Anna Henningsen) #60244a40e533e72] - src: add a default branch for module phase (Chengzhong Wu) #6026142729f07ee] - src: stop using deprecated v8::Context::GetIsolate (Michaël Zasso) #602237a6542c205] - test: skip failing test on macOS 15.7+ (Antoine du Hamel) #6041929a5855a4f] - test: ensure assertions are reachable in test/addons (Antoine du Hamel) #6014212773d19c4] - test: increase debugger waitFor timeout on macOS (Chengzhong Wu) #603670b38de3e9e] - test: put helper in test-runner-output into common (Joyee Cheung) #603306de2407c44] - test: fix small compile warning in test_network_requests_buffer.cc (xiaocainiao633) #602814b23ac8613] - test: fix status when compiled without inspector (Antoine du Hamel) #60289a07f32e326] - test: split test-runner-watch-mode-kill-signal (Joyee Cheung) #6029830451d32d7] - test: fix incorrect calculation in test-perf-hooks.js (Joyee Cheung) #60271e3c3b48f1c] - test: ignore EPIPE errors in https proxy invalid URL test (Joyee Cheung) #60269405a9c4c5f] - test: parallelize test-without-async-context-frame correctly (Joyee Cheung) #60273ffeebebc71] - test: make test-worker-prof more tolerant (Joyee Cheung) #6027226b01bf170] - test: skip sea tests on x64 macOS (Joyee Cheung) #602508caae1a05b] - test: move sea tests into test/sea (Joyee Cheung) #602503d183e3e9f] - test,crypto: fix conditional SHA3-* skip on BoringSSL (Filip Skokan) #60379e83dbcba94] - test,crypto: sha3 algorithms aren't supported with BoringSSL (Shelley Vohr) #603743d89331496] - test_runner: use module.registerHooks in module mocks (Joyee Cheung) #60326377e8ce85a] - tls: avoid external memory leak on invalid protocol versions (Shelley Vohr) #60390ae4858c1f6] - tools: add an option to generate lighter archives (Antoine du Hamel) #60294cb615b1a2e] - tools: skip test-shared workflow for draft PRs (Michaël Zasso) #6036503b034731e] - tools: disable inspector on macOS-shared to reduce flakiness (Antoine du Hamel) #60320f402b4e1d1] - tools: show diff alongside the error in Nix linter (Antoine du Hamel) #603015d5c8483fb] - tools: run CI with shared libs on GHA (Antoine du Hamel) #60121e8fdd8d2e8] - tools: update gyp-next to 0.20.5 (Node.js GitHub Bot) #603136e8b029a21] - tools: limit inspector protocol PR title length (Chengzhong Wu) #60324a5073086c6] - tools: fix inspector_protocol updater (Chengzhong Wu) #6027747fa765bff] - tools: optimize wildcard execution in tools/test.py (Joyee Cheung) #6026611ebb0447d] - tools: add C++ lint rule to avoid using String::Utf8Value (Anna Henningsen) #6024414f3189670] - tools: add inspector_protocol updater (Chengzhong Wu) #60245ef4c596fc6] - typings: add missing properties and method in Worker (Woohyun Sung) #6025709ae6fc065] - typings: add missing properties in HTTPParser (Woohyun Sung) #602579ecaf41f8e] - typings: delete undefined property in ConfigBinding (Woohyun Sung) #602574a86016e86] - util: use more defensive code when inspecting error objects (Antoine du Hamel) #601399e6d6cec59] - util: mark special properties when inspecting them (Ruben Bridgewater) #6013179b2387fd9] - vm: make vm.Module.evaluate() conditionally synchronous (Joyee Cheung) #60205e5559f3be3] - win: upgrade Visual Studio workload from 2019 to 2022 (Jiawen Geng) #60318<a id="25.0.0"></a>
Node.js 25 is here! We have upgraded V8 to 14.1, bringing major JSON.stringify
performance improvements, built-in Uint8Array base64/hex conversion, and ongoing
WebAssembly and JIT pipeline optimizations.
This release doubles down on secure-by-default apps and web-standard APIs: the permission
model gains --allow-net, Web Storage is enabled by default, and ErrorEvent is now a global.
We’ve also removed or finalized long-deprecated APIs such as SlowBuffer, and added quality-of-life improvements like a portable compile cache and JSPI for WebAssembly.
8bc7dfd16f] - build: test on Python 3.14 release candidate 3 (Christian Clauss) #59983663554abdf] - (SEMVER-MAJOR) lib: expose global ErrorEvent (Richie Bendall) #589203312e4e946] - (SEMVER-MAJOR) src: unflag --experimental-webstorage by default (Daniel M Brasil) #57666462c74181d] - (SEMVER-MAJOR) src,permission: add --allow-net permission (Rafael Gonzaga) #58517d33f4b539a] - (SEMVER-MAJOR) assert: move assert.fail with multiple arguments to eol (James M Snell) #58532b21574d63b] - (SEMVER-MAJOR) assert: move CallTracker to EOL (James M Snell) #58006308b6bc6de] - (SEMVER-MAJOR) async_hooks: move asyncResource property on bound function to EOL (James M Snell) #58618daced4ab98] - (SEMVER-MAJOR) buffer: move SlowBuffer to EOL (Filip Skokan) #58220df16f0fd8d] - (SEMVER-MAJOR) child_process: move _channel to end-of-life (James M Snell) #58527a472745958] - (SEMVER-MAJOR) crypto: runtime-deprecate default shake128/256 output lengths (Filip Skokan) #59008c3b986853c] - (SEMVER-MAJOR) crypto: move deprecated hash and mgf1Hash options to EOL (James M Snell) #5870666632648ba] - (SEMVER-MAJOR) crypto: runtime deprecate ECDH.setPublicKey() (James M Snell) #58620a5f9ca1f77] - (SEMVER-MAJOR) dns: move falsy hostname in lookup to end-of-life (James M Snell) #586192bb7667475] - (SEMVER-MAJOR) fs: move FileHandle close on GC to EOL (James M Snell) #58536eec0302088] - (SEMVER-MAJOR) fs: move rmdir recursive option to end-of-life (James M Snell) #5861625dd206c29] - (SEMVER-MAJOR) fs: remove fs.F_OK, fs.R_OK, fs.W_OK, fs.X_OK (Livia Medeiros) #5586291dadf2897] - (SEMVER-MAJOR) http: deprecate writeHeader (Sebastian Beltran) #590604e06a648ff] - (SEMVER-MAJOR) perf_hooks: move deprecated accessors to EOF (James M Snell) #58531a3dfca90d1] - (SEMVER-MAJOR) process: move multipleResolves event to EOL (James M Snell) #58707790acc8689] - (SEMVER-MAJOR) tls: move IP-address servername deprecation to eol (James M Snell) #585333aaa2ebe19] - (SEMVER-MAJOR) url: move bad port deprecation in legacy url to end-of-life (James M Snell) #586177c9fbc15bc] - (SEMVER-MAJOR) assert,util: fail promise comparison in deep equal checks (Ruben Bridgewater) #5944811222f1a27] - (SEMVER-MAJOR) assert,util: handle invalid dates as equal in deep comparison (Ruben Bridgewater) #57627acce2e8f87] - (SEMVER-MAJOR) build: reset embedder string to "-node.0" (Michaël Zasso) #598058a87ba031b] - (SEMVER-MAJOR) build: bump minimum Clang version to 19 (Michaël Zasso) #5904821b131e93a] - (SEMVER-MAJOR) build: reset embedder string to "-node.0" (Michaël Zasso) #58064f31c88021b] - (SEMVER-MAJOR) build: stop distributing Corepack (Antoine du Hamel) #57617b3238442d8] - (SEMVER-MAJOR) deps: patch V8 for illumos (Dan McDonald) #598052a1da3260d] - (SEMVER-MAJOR) deps: patch V8 to avoid duplicated zlib symbol (Michaël Zasso) #540777772a2df9d] - (SEMVER-MAJOR) deps: update V8 to 14.1.146.11 (Michaël Zasso) #598056d61175db0] - (SEMVER-MAJOR) deps: V8: backport 1d3362c55396 (Shu-yu Guo) #58064974773572e] - (SEMVER-MAJOR) deps: V8: cherry-pick 4f38995c8295 (Shu-yu Guo) #5806470bfc398e9] - (SEMVER-MAJOR) deps: V8: cherry-pick 044b9b6f589d (Rezvan Mahdavi Hezaveh) #580646bfc525cf0] - (SEMVER-MAJOR) deps: V8: cherry-pick d2ad518a0b57 (Joyee Cheung) #58064754d28e34f] - (SEMVER-MAJOR) deps: V8: revert 6d6c1e680c7b (Michaël Zasso) #580648c508b9399] - (SEMVER-MAJOR) deps: V8: revert e3cddbedb205 (Michaël Zasso) #5806488ca8287b6] - (SEMVER-MAJOR) deps: use std::map in MSVC STL for EphemeronRememberedSet (Joyee Cheung) #58064838e2332a5] - (SEMVER-MAJOR) deps: patch V8 for illumos (Dan McDonald) #580643522731d9a] - (SEMVER-MAJOR) deps: remove problematic comment from v8-internal (Michaël Zasso) #58064d234475a33] - (SEMVER-MAJOR) deps: define V8_PRESERVE_MOST as no-op on Windows (Stefan Stojanovic) #58064a738eb4a7f] - (SEMVER-MAJOR) deps: fix FP16 bitcasts.h (Stefan Stojanovic) #580641744c7d991] - (SEMVER-MAJOR) deps: patch V8 to avoid duplicated zlib symbol (Michaël Zasso) #58064fff0d1554d] - (SEMVER-MAJOR) deps: update V8 to 13.7.152.9 (Michaël Zasso) #58064968e2f47c8] - (SEMVER-MAJOR) dgram: move deprecated APIs to EOL (James M Snell) #584745623194a6b] - (SEMVER-MAJOR) doc,src,test: replace use of deprecated GetIsolate (Michaël Zasso) #59805823ca6991f] - (SEMVER-MAJOR) fs: make processReadResult() and readSyncRecursive() private (Livia Medeiros) #58672a273674dee] - (SEMVER-MAJOR) fs: move fs stream open method to eol (James M Snell) #5852939d73036e7] - (SEMVER-MAJOR) lib: use validators for argument validation (Nam Yooseong) #59416cd68e35704] - (SEMVER-MAJOR) lib: deprecate _stream_* modules (Dario Piotrowicz) #58337a822a1cbe7] - (SEMVER-MAJOR) lib: deprecate _tls_common and _tls_wrap (Dario Piotrowicz) #57643705bcc2a00] - (SEMVER-MAJOR) module: move Module._debug to end-of-life (James M Snell) #584735fe7800683] - (SEMVER-MAJOR) node-api: add warning for NAPI_EXPERIMENTAL (Miguel Marcondes Filho) #58280e1d4d6ab49] - (SEMVER-MAJOR) repl: eol deprecate instantiating without new (Aviv Keller) #59495ed94bc48f3] - (SEMVER-MAJOR) src: update crypto.getCipherInfo() to use DictionaryTemplate (James M Snell) #6003637a3df3556] - (SEMVER-MAJOR) src: fix calls to v8::Object::wrap (Andreas Haas) #59805801ae26fa3] - (SEMVER-MAJOR) src: update NODE_MODULE_VERSION to 141 (Michaël Zasso) #5980510df38a38b] - (SEMVER-MAJOR) src: improve performance of dotenv ToObject (James M Snell) #60038075936b413] - (SEMVER-MAJOR) src: use std::string_view from node_report (iknoom) #60006234c26cca3] - (SEMVER-MAJOR) src: store Local for CallbackScope on stack (Anna Henningsen) #59705708fd1945b] - (SEMVER-MAJOR) src: remove node.h APIs to make callback without an async context (Chengzhong Wu) #5847156989d33f5] - (SEMVER-MAJOR) src: remove deprecated node::EmitBeforeExit and node::EmitExit (Chengzhong Wu) #58469d429aa2d17] - (SEMVER-MAJOR) src: remove deprecated node::CreatePlatform and node::FreePlatform (Chengzhong Wu) #58470e0ae14ce73] - (SEMVER-MAJOR) src: remove deprecated node::InitializeNodeWithArgs (Chengzhong Wu) #58470db1700e4b5] - (SEMVER-MAJOR) src: update NODE_MODULE_VERSION to 138 (Michaël Zasso) #580640a87084150] - (SEMVER-MAJOR) test: update cppgc-object addon config (StefanStojanovic) #598057dd49d7da4] - (SEMVER-MAJOR) test: spin longer for sequential/test-worker-prof (Michaël Zasso) #59805faba50df96] - (SEMVER-MAJOR) test: remove --always-turbofan flag (Michaël Zasso) #59805496f12dec6] - (SEMVER-MAJOR) test: update snapshot for V8 14.1 (Michaël Zasso) #5980505aa3a1c70] - (SEMVER-MAJOR) test,win: split addon tests (StefanStojanovic) #59805308de27255] - (SEMVER-MAJOR) tools: update V8 gypfiles for 14.0 (Michaël Zasso) #59805b736370c07] - (SEMVER-MAJOR) tools: update V8 gypfiles for 13.9 (Michaël Zasso) #59805085a94ac9b] - (SEMVER-MAJOR) tools: update V8 gypfiles for 13.8 (Michaël Zasso) #59805a71ae18ac8] - (SEMVER-MAJOR) tools: enable leaptiering for aix/ibmi (Abdirahim Musse) #59805a8217a9eb8] - (SEMVER-MAJOR) tools: update V8 gypfiles for 13.7 (Michaël Zasso) #58064fdef0725de] - (SEMVER-MAJOR) util,console: colorize regexp groups, character classes, etc (Ruben Bridgewater) #59710411cc42d22] - (SEMVER-MAJOR) worker: move terminate callback to end-of-life (James M Snell) #5852894422e8a40] - (SEMVER-MINOR) src: add an option to make compile cache portable (Aditi) #5879729738c7b42] - (SEMVER-MINOR) src,permission: add --allow-inspector ability (Rafael Gonzaga) #59711f9fcc746f3] - (SEMVER-MINOR) v8: add cpu profile (theanarkh) #598074396cf2d45] - (SEMVER-MINOR) wasm: enable JSPI (Guy Bedford) #5994191f035e597] - assert: resolve TODO and rename function (Antoine du Hamel) #594512e675c4fa3] - benchmark: use non-deprecated WriteUtf8V2 method (Michaël Zasso) #601730fb040603b] - build: upgrade Python linter ruff, add rules ASYNC,PERF (Christian Clauss) #59984f468b6c72b] - build: update minimum Xcode version to 16.4 (Michaël Zasso) #600790eda17ba20] - build: fix flags for ngtcp2 on IBM i (SRAVANI GUNDEPALLI) #6007322a864a275] - build: remove corepack from release tarballs (Jordan Harband) #598357079041e0a] - build: only mention Apple when on Apple (Michaël Zasso) #59385954d3f44ef] - build: check Apple clang version in configure script (Michaël Zasso) #593582b4a09ef8b] - build: fix OpenSSL version detection (Richard Lau) #59353af77e4bf2f] - build: update macOS runner and Xcode (Michaël Zasso) #5923886bfdb5528] - build: remove nocorepack vcbuild flag (Antoine du Hamel) #57772b13f24c2da] - build, src: fix include paths for vtune files (Rahul) #599992216a3b1d5] - deps: V8: cherry-pick 1e190bbb0396 (Richard Lau) #602061b22f6049a] - deps: upgrade npm to 11.6.2 (npm team) #60168a1b73fe430] - deps: V8: cherry-pick 2abc61361dd4 (Richard Lau) #601774eb6e6fd79] - deps: V8: cherry-pick 87356585659b (Joyee Cheung) #60069c0b8c80164] - deps: define V8_PRESERVE_MOST as no-op on Windows (Stefan Stojanovic) #5623865a32bac18] - deps: add ngtcp2 test binaries (James M Snell) #59946ebfc28a037] - deps: update nghttp3 to 1.11.0 (James M Snell) #59249dceb1fca40] - deps: update ngtcp2 to 1.14.0 (James M Snell) #59249ee36b86ba3] - deps: patch V8 to 13.7.152.19 (Node.js GitHub Bot) #587130b3fc0d7a8] - deps: patch V8 to 13.7.152.14 (Node.js GitHub Bot) #5863191b3bd3fe6] - deps: patch V8 to 13.7.152.13 (Node.js GitHub Bot) #58539f77a96cd76] - deps: patch V8 to 13.7.152.10 (Node.js GitHub Bot) #584461cd16e5355] - doc: improve code snippet alternative of url.parse() using WHATWG URL (Steven) #60209d54e6aec9e] - doc: createSQLTagStore -> createTagStore (Aviv Keller) #60182aef3fc37eb] - doc: use markdown when branch-diff major release (Rafael Gonzaga) #60179a2f088d516] - doc: update teams in collaborator-guide.md and add links (Bart Louwers) #6006575a6fff6be] - doc: disambiguate top-level worker_threads module exports (René) #5989051df7b92bc] - doc: update macOS version used to build releases (Michaël Zasso) #60080910c8796f9] - doc: update BUILDING to reflect Clang 19 changes (Michaël Zasso) #5978234f9b7eab9] - doc: reserve NMV 140 for Electron 39 (David Sanders) #596273f6f6db43f] - doc: update minimum Xcode and VS versions (Michaël Zasso) #59358d9fe28bd6b] - doc: fix CHANGELOG.md version listing (Antoine du Hamel) #592990ab50c2768] - doc: reserve NMV 139 for Electron 38 (Calvin) #58779516b4ebd3c] - doc: mark Node.js 23 as End-of-Life (Antoine du Hamel) #5856359b70e5fe3] - http: fix http client leaky with double response (theanarkh) #600625cf3c3e24c] - http2: rename variable to additionalPseudoHeaders (Tobias Nießen) #60208535efea962] - http2: do not crash on mismatched ping buffer length (René) #601354bfa387f6d] - lib: fix constructor in _errnoException stack tree (SeokHun) #601564daeec11b9] - lib: fix typo in QuicSessionStats (SeokHun) #6015515278252bb] - lib: remove redundant destroyHook checks (Gürgün Dayıoğlu) #6012083052ff9ad] - lib: add node: prefix in sys module deprecation warning (Dario Piotrowicz) #58442d5abfbf582] - lib: add module to use in module deprecation warnings (Dario Piotrowicz) #58442db0121bedd] - module: fix directory option in the enableCompileCache() API (Joyee Cheung) #59931822a8c3244] - perf_hooks: fix stack overflow error (Antoine du Hamel) #60084d52cd04591] - quic: continue working on quic api bits (James M Snell) #60123b4af647920] - quic: reduce boilerplate and other minor cleanups (James M Snell) #59342cd9fd09a27] - quic: multiple fixups and updates (James M Snell) #59342a6c5d27739] - quic: update more of the quic to the new compile guard (James M Snell) #59342ee7b8ab29c] - quic: few additional small comment edits in cid.h (James M Snell) #59342c8b64bd023] - quic: fixup NO_ERROR macro conflict on windows (James M Snell) #59381e2fefd78e2] - quic: fixup windows coverage compile error (James M Snell) #5938199c80e3a45] - quic: update the guard to check openssl version (James M Snell) #592490e754fa5d1] - quic: start re-enabling quic with openssl 3.5 (James M Snell) #59249200fe9e7f4] - repl: move completion logic to internal module (Dario Piotrowicz) #598893ac88a7a66] - src: use string_view in WriteReport() (Anna Henningsen) #60201a1244f04de] - src: make additional cleanups in node locks impl (James M Snell) #60061fdb6e66227] - src: update locks to use DictionaryTemplate (James M Snell) #60061367bcce6a6] - src: fix usage of deprecated V8 API (Michaël Zasso) #6017423fa18444f] - src: fix small compile warning in quic/streams.cc (James M Snell) #601180ec1d186f4] - src: always use strong reference to napi_async_context resource (Anna Henningsen) #59828ce748f6cae] - src: use Global for storing resource in Node-API callback scope (Anna Henningsen) #5982836256230b4] - src: cleanup quic TransportParams class (James M Snell) #59884985e2fb383] - Revert "test: ensure message event fires in worker message port test" (Luigi Pinca) #60126da9cd745c8] - test: ensure assertions are reachable in test/client-proxy (Antoine du Hamel) #60175e105e821e9] - test: skip quic tests that IBM i does not support (SRAVANI GUNDEPALLI) #60160bfc81ca228] - test: ensure assertions are reachable in test/async-hooks (Antoine du Hamel) #60150712cee951c] - test: skip tests that cause timeouts on IBM i (SRAVANI GUNDEPALLI) #60148f8a43f6f34] - test: deflake test-fs-promises-watch-iterator (Luigi Pinca) #600601f95d39997] - test: prepare junit file attribute normalization (sangwook) #59432eb159a8cfd] - test: remove duplicated allocUnsafeSlow test (Michaël Zasso) #58524d93cff5af3] - Revert "test: fix watch tests not including completion messages" (Joyee Cheung) #581906102159fa1] - test: fix watch tests not including completion messages (Dario Piotrowicz) #58183ad2c1bf62e] - test,doc: skip --max-old-space-size-percentage on 32-bit platforms (Asaf Federman) #601446dbf7086bb] - test_runner: fix suite timeout (Moshe Atlow) #59853f0aa073907] - test_runner: add junit file attribute support (sangwook) #59432cff138c6b1] - tests: start adding quic test server utilities (James M Snell) #5994620dc4b514a] - tools: use cooldown property correctly (Rafael Gonzaga) #60134ec26b1c01a] - tools: add lint rule to ensure assertions are reached (Antoine du Hamel) #60125bab752d4db] - typings: add buffer internalBinding typing (방진혁) #601631986ee4b65] - vm: hint module identifier in instantiate errors (Chengzhong Wu) #6019923b834058c] - wasm: revert enable JSPI as already enabled (Guy Bedford) #600144bfcad1ac5] - Revert "watch: fix watch args not being properly filtered" (Joyee Cheung) #581904acb854039] - watch: fix watch args not being properly filtered (Dario Piotrowicz) #57936