This PR contains the following updates:
Release Notes
nodejs/node (node)
Compare Source
v24.10.0: 2025-10-08, Version 24.10.0 (Current), @RafaelGSS
Compare Source
Notable Changes
- [
31bb476895] -(SEMVER-MINOR)console: allow per-streaminspectOptions option (Anna Henningsen)#60082 - [
3b92be2fb8] -(SEMVER-MINOR)lib: remove util.getCallSite (Rafael Gonzaga)#59980 - [
18c79d9e1c] -(SEMVER-MINOR)sqlite: create authorization api (Guilherme Araújo)#59928
Commits
v24.9.0: 2025-09-25, Version 24.9.0 (Current), @targos
Compare Source
Notable Changes
- [
9b043a9096] -(SEMVER-MINOR)http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry)#59824 - [
a6456ab90a] -(SEMVER-MINOR)sqlite: cleanup ERM support and export Session class (James M Snell)#58378 - [
5563361d22] -(SEMVER-MINOR)sqlite: add tagged template (0hm☘️)#58748 - [
04013ee933] -(SEMVER-MINOR)worker: add heap profile API (theanarkh)#59846
Commits
- [
cbec4fd6de] -benchmark: calibrate config dgram multi-buffer (Bruno Rodrigues)#59696 - [
9a4bbdc3c5] -benchmark: calibrate config cluster/echo.js (Nam Yooseong)#59836 - [
0b284d86e8] -build: add the missing macro definitions for OpenHarmony (hqzing)#59804 - [
43e6e54d66] -build: do not include custom ESLint rules testing in tarball (Antoine du Hamel)#59809 - [
039ac19154] -crypto: expose signatureAlgorithm on X509Certificate (Patrick Costa)#59235 - [
647c332704] -crypto: usereturn await when returning Promises from async functions (Renegade334)#59841 - [
8ed4587cf0] -crypto: use async functions for non-stub Promise-returning functions (Renegade334)#59841 - [
bb051c56ef] -crypto: avoid calls topromise.catch() (Renegade334)#59841 - [
05e560dd25] -deps: update googletest to50b8600 (Node.js GitHub Bot)#59955 - [
fa40d3a785] -deps: update archs files for openssl-3.5.3 (Node.js GitHub Bot)#59901 - [
8c85570d18] -deps: upgrade openssl sources to openssl-3.5.3 (Node.js GitHub Bot)#59901 - [
b71125664e] -deps: update undici to 7.16.0 (Node.js GitHub Bot)#59830 - [
dea5dd7077] -dgram: restore buffer optimization in fixBufferList (Yoo)#59934 - [
b0c1e67532] -diagnostics_channel: fix race condition with diagnostics_channel and GC (Ugaitz Urien)#59910 - [
0b37b594c3] -doc: use "WebAssembly" instead of "Web Assembly" (Tobias Nießen)#59954 - [
1e723f9c6b] -doc: fix typo in section on microtask order (Tobias Nießen)#59932 - [
a28962a85c] -doc: update V8 fast API guidance (René)#58999 - [
bd767c5d1b] -doc: add security escalation policy (Ulises Gascón)#59806 - [
9df91e59e1] -doc: type improvement of filehttp.md (yusheng chen)#58189 - [
e4f571680b] -doc: deprecate closingfs.Dir on garbage collection (Livia Medeiros)#59839 - [
e9cb986fa5] -doc: rephrase dynamic import() description (Nam Yooseong)#59224 - [
026d4e33f7] -doc,crypto: update subtle.generateKey and subtle.importKey (Filip Skokan)#59851 - [
2b2591db52] -esm: make hasAsyncGraph non-enumerable (Joyee Cheung)#59905 - [
993f05d323] -fs,win: do not add a second trailing slash in readdir (Gerhard Stöbich)#59847 - [
7aec53b607] -(SEMVER-MINOR)http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry)#59824 - [
83ae6102e7] -http: optimize checkIsHttpToken for short strings (방진혁)#59832 - [
6695067636] -http,https: handle IPv6 with proxies (Joyee Cheung)#59894 - [
c5d910a0a9] -http2: fix allowHttp1+Upgrade, broken by shouldUpgradeCallback (Tim Perry)#59924 - [
acada1fb82] -inspector: ensure adequate memory allocation forBinary::toBase64 (René)#59870 - [
396cc8ec65] -lib: update inspect output format for subclasses (Miguel Marcondes Filho)#59687 - [
fed1dac8de] -lib: update isDeepStrictEqual to support options (Miguel Marcondes Filho)#59762 - [
d785929fd7] -lib: add source map support for assert messages (Chengzhong Wu)#59751 - [
ff13d1d61e] -lib,src: cache ModuleWrap.hasAsyncGraph (Chengzhong Wu)#59703 - [
b200cd8470] -lib,src: refactor assert to load error source from memory (Chengzhong Wu)#59751 - [
e94c57301b] -meta: add .npmrc with ignore-scripts=true (Joyee Cheung)#59914 - [
728472a57b] -module: only put directly require-d ESM into require.cache (Joyee Cheung)#59874 - [
be48760b93] -node-api: added SharedArrayBuffer api (Mert Can Altin)#59071 - [
f006a14522] -node-api: make napi_delete_reference use node_api_basic_env (Jeetu Suthar)#59684 - [
0f46c1c3b0] -repl: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater)#59857 - [
3eeb7b47ea] -sqlite: fix crash session extension callbacks with workers (Bart Louwers)#59848 - [
0fe53375ec] -(SEMVER-MINOR)sqlite: cleanup ERM support and export Session class (James M Snell)#58378 - [
9a3e58a007] -(SEMVER-MINOR)sqlite: add tagged template (0hm☘️)#58748 - [
f14ed5ab7b] -src: simplify watchdog instantiations viastd::optional (Anna Henningsen)#59960 - [
e330f03f84] -src: update crypto objects to use DictionaryTemplate (James M Snell)#59942 - [
69b5607cf4] -src: simplify is_callable by making it a concept (Tobias Nießen)#58169 - [
86150f3401] -src: rename private fields to follow naming convention (Moonki Choi)#59923 - [
d17f299539] -src: use DictionaryTemplate more in URLPattern (James M Snell)#59892 - [
ac784912ac] -src: reduce the nearest parent package JSON cache size (Michael Smith)#59888 - [
abecdcb536] -src: replace FIXED_ONE_BYTE_STRING with Environment-cached strings (Moonki Choi)#59891 - [
2bb152500b] -src: create strings inFIXED_ONE_BYTE_STRING as internalized (Anna Henningsen)#59826 - [
03116a7cd8] -src: removestd::array overload ofFIXED_ONE_BYTE_STRING (Anna Henningsen)#59826 - [
8a5325d6e3] -src: ensurev8::Eternal is empty before setting it (Anna Henningsen)#59825 - [
f0c20ccd81] -src: remove unnecessaryEnvironment::GetCurrent() calls (Moonki Choi)#59814 - [
213188e491] -stream: use new AsyncResource instead of bind (Matteo Collina)#59867 - [
ce8435b003] -test: testcase demonstrating issue 59541 (Eric Rannaud)#59801 - [
8f32746142] -test: guard write to proxy client if proxy connection is ended (Joyee Cheung)#59742 - [
6790093fcb] -tls: load bundled and extra certificates off-thread (Joyee Cheung)#59856 - [
f5d3f919d8] -tls: only do off-thread certificate loading on loading tls (Joyee Cheung)#59856 - [
87bbaa23a0] -tools: fixtools/make-v8.sh for clang (Richard Lau)#59893 - [
0d23fd525b] -tools: skip test-internet workflow for draft PRs (Michaël Zasso)#59817 - [
e17c73731a] -tools: copyeditbuild-tarball.yml (Antoine du Hamel)#59808 - [
97c4e1bac9] -typings: remove unused imports (Nam Yooseong)#59880 - [
8b29bbca76] -url: replaced slice with at (Mikhail)#59181 - [
6458867a6b] -url: add type checking to urlToHttpOptions() (simon-id)#59753 - [
3c62b3886f] -util: inspect objects with throwing Symbol.toStringTag (Ruben Bridgewater)#59860 - [
6133a82875] -util: fix debuglog.enabled not being present with callback logger (Ruben Bridgewater)#59858 - [
9347ddddf4] -vm: explain how to share promises between contexts w/ afterEvaluate (Eric Rannaud)#59801 - [
44ce971619] -vm: "afterEvaluate", evaluate() return a promise from the outer context (Eric Rannaud)#59801 - [
6e586a1409] -vm: expose hasTopLevelAwait on SourceTextModule (Chengzhong Wu)#59865 - [
49747a58a3] -(SEMVER-MINOR)worker: add heap profile API (theanarkh)#59846 - [
b970c0bbc2] -zlib: reduce code duplication (jhofstee)#57810 - [
9782ca2b1b] -zlib: implement fast path for crc32 (Gürgün Dayıoğlu)#59813
v24.8.0: 2025-09-10, Version 24.8.0 (Current), @targos
Compare Source
Notable Changes
HTTP/2 Network Inspection Support in Node.js
Node.js now supports inspection of HTTP/2 network calls in Chrome DevTools for Node.js.
Usage
Write atest.js script that makes HTTP/2 requests.
consthttp2=require('node:http2');constclient=http2.connect('https://nghttp2.org');constreq=client.request([':path','/',':method','GET',]);Run it with these options:
node --inspect-wait --experimental-network-inspection test.js
Openabout:inspect on Google Chrome and click onOpen dedicated DevTools for Node.
TheNetwork tab will let you track your HTTP/2 calls.
Contributed by Darshan Sen in#59611.
Other Notable Changes
- [
7a8e2c251d] -(SEMVER-MINOR)crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan)#59570 - [
4b631be0b0] -(SEMVER-MINOR)crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan)#59570 - [
3e4b1e732c] -(SEMVER-MINOR)crypto: add KMAC Web Cryptography algorithms (Filip Skokan)#59647 - [
b1d28785b2] -(SEMVER-MINOR)crypto: add Argon2 Web Cryptography algorithms (Filip Skokan)#59544 - [
430691d1af] -(SEMVER-MINOR)crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan)#59537 - [
d6d05ba397] -(SEMVER-MINOR)worker: add cpu profile APIs for worker (theanarkh)#59428
Commits
Configuration
📅Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated byMend Renovate. View therepository job log.
This PR contains the following updates:
>=8.9.0->>=24.11.0Release Notes
nodejs/node (node)
v24.11.0Compare Source
v24.10.0: 2025-10-08, Version 24.10.0 (Current), @RafaelGSSCompare Source
Notable Changes
31bb476895] -(SEMVER-MINOR)console: allow per-streaminspectOptionsoption (Anna Henningsen)#600823b92be2fb8] -(SEMVER-MINOR)lib: remove util.getCallSite (Rafael Gonzaga)#5998018c79d9e1c] -(SEMVER-MINOR)sqlite: create authorization api (Guilherme Araújo)#59928Commits
e8cff3d51e] -benchmark: remove unused variable from util/priority-queue (Bruno Rodrigues)#5987203294252ab] -benchmark: update count to n in permission startup (Bruno Rodrigues)#598723c8a609d9b] -benchmark: update num to n in dgram offset-length (Bruno Rodrigues)#598727b2032b13e] -benchmark: adjust dgram offset-length len values (Bruno Rodrigues)#59708552d887aee] -benchmark: update num to n in dgram offset-length (Bruno Rodrigues)#5970831bb476895] -(SEMVER-MINOR)console: allow per-streaminspectOptionsoption (Anna Henningsen)#600820bf022d4c0] -console,util: improve array inspection performance (Ruben Bridgewater)#6003704d568e591] -deps: V8: cherry-pickf93055f(Olivier Flückiger)#60105621058b3bf] -deps: update archs files for openssl-3.5.4 (Node.js GitHub Bot)#6010181b3009fe6] -deps: upgrade openssl sources to openssl-3.5.4 (Node.js GitHub Bot)#60101dc44c9f349] -deps: upgrade npm to 11.6.1 (npm team)#60012ec0f137198] -deps: update ada to 3.3.0 (Node.js GitHub Bot)#60045f490f91874] -deps: update amaro to 1.1.4 (pmarchini)#60044de7a7cd0d7] -deps: update ada to 3.2.9 (Node.js GitHub Bot)#59987a533e5b5db] -doc: add automated migration info to deprecations (Augustin Mauroy)#600227fb8fe4875] -doc: fix typo on child_process.md (Angelo Gazzola)#6011424c1ef9846] -doc: remove optional title prefixes (Aviv Keller)#6008708b9eb8e19] -doc: mark.envfiles support as stable (Santeri Hiltunen)#5992566d90b8063] -doc: mention reverse proxy and include simple example (Steven)#5973614aa1119cb] -doc: provide alternative tourl.parse()using WHATWG URL (Steven)#59736f9412324f6] -doc: fix typo of built-in module specifier in worker_threads (Deokjin Kim)#5999264e738a342] -doc,crypto: reorder ML-KEM in the asymmetric key types table (Filip Skokan)#600671b25008b41] -http: improve writeEarlyHints by avoiding for-of loop (Haram Jeong)#5995835f9b6b28f] -inspector: improve batch diagnostic channel subscriptions (Chengzhong Wu)#600093b92be2fb8] -(SEMVER-MINOR)lib: remove util.getCallSite (Rafael Gonzaga)#59980c495e1fe57] -lib: optimize priority queue (Gürgün Dayıoğlu)#600396be31fb9f3] -lib: implement passive listener behavior per spec (BCD1me)#59995c5e4aa763b] -meta: bump actions/setup-python from 5.6.0 to 6.0.0 (dependabot[bot])#6009050fa1f4a76] -meta: bump ossf/scorecard-action from 2.4.2 to 2.4.3 (dependabot[bot])#60096def4ce976c] -meta: bump actions/cache from 4.2.4 to 4.3.0 (dependabot[bot])#6009524b5abc0e9] -meta: bump step-security/harden-runner from 2.12.2 to 2.13.1 (dependabot[bot])#600948ccf2b0b34] -meta: bump actions/setup-node from 4.4.0 to 5.0.0 (dependabot[bot])#6009378580147ef] -meta: bump actions/stale from 9.1.0 to 10.0.0 (dependabot[bot])#60092705686b5c4] -meta: bump codecov/codecov-action from 5.5.0 to 5.5.1 (dependabot[bot])#60091423a6bc744] -meta: bump github/codeql-action from 3.30.0 to 3.30.5 (dependabot[bot])#600899d9bd0fb4f] -meta: move Michael to emeritus (Michael Dawson)#60070dbeee55824] -module: use sync cjs when importing cts (Marco Ippolito)#60072a722f677ac] -perf_hooks: fix histogram fast call signatures (Renegade334)#59600b3295b8353] -process: fix wrong asyncContext under unhandled-rejections=strict (Shima Ryuhei)#60103cff4a7608a] -process: fix defaultenvforprocess.execve(Richard Lau)#60029cd034e927f] -process: fix hrtime fast call signatures (Renegade334)#5960018c79d9e1c] -(SEMVER-MINOR)sqlite: create authorization api (Guilherme Araújo)#59928d949222043] -sqlite: replaceToLocalCheckedand improve filter error handling (Edy Silva)#600286417dc879e] -src: bring permissions macros in line with general C/C++ standards (Anna Henningsen)#60053e273c2020c] -src: update contextify to use DictionaryTemplate (James M Snell)#600595f9ff60664] -src: removeAnalyzeTemporaryDtorsoption from .clang-tidy (iknoom)#600089db54adccc] -src: update cares_wrap to use DictionaryTemplates (James M Snell)#60033fc0ceb7b82] -src: correct the error handling in StatementExecutionHelper (James M Snell)#600403e8fdc1d8d] -src: remove unused variables from report (Moonki Choi)#60047d744324d8e] -src: avoid unnecessary string allocations in SPrintF impl (Anna Henningsen)#60052de65a5c719] -src: make ToLower/ToUpper input args more flexible (Anna Henningsen)#60052354026df5a] -src: allowstd::string_viewarguments toSPrintF()and friends (Anna Henningsen)#6005842f7d7cb20] -src: remove unnecessarystd::stringerror messages (Anna Henningsen)#6005730c2c0fedd] -src: remove unnecessary shadowed functions on Utf8Value & BufferValue (Anna Henningsen)#60056eb99eec09b] -src: avoid unnecessary string ->char*-> string round trips (Anna Henningsen)#60055c1f1dbdce2] -src: remove useless dereferencing inTHROW_...(Anna Henningsen)#60054ea0f5e575d] -src: filloptions_args,options_envafter vectors are finalized (iknoom)#59945415fff217a] -src: use RAII for uv_process_options_t (iknoom)#59945982b03ecbd] -test: marktest-runner-run-watchflaky on macOS (Richard Lau)#60115831a0d3d28] -test: ensure that the message event is fired (Luigi Pinca)#599525538cfc1e8] -test: replace diagnostics_channel stackframe in output snapshots (Chengzhong Wu)#6002477ec400d90] -test: mark test-web-locks skip on IBM i (SRAVANI GUNDEPALLI)#599961aaadb9e31] -test: ensure message event fires in worker message port test (Jarred Sumner)#598851d5cc5e57a] -test: mark sea tests flaky on macOS x64 (Richard Lau)#60068c412b1855d] -test: expand tls-check-server-identity coverage (Diango Gavidia)#60002ad87975029] -test: fix typo of test-benchmark-readline.js (Deokjin Kim)#59993bad4b9b878] -test: add newstartNewREPLSevertesting utility (Dario Piotrowicz)#59964ef90b0f456] -test: verify tracing channel doesn't swallow unhandledRejection (Gerhard Stöbich)#59974d7285459fe] -timers: fix binding fast call signatures (Renegade334)#596006529ae9b0c] -tools: add message on auto-fixing js lint issues in gh workflow (Dario Piotrowicz)#591281ca116a6ea] -tools: verify signatures when updating nghttp* (Antoine du Hamel)#6011320d10a2398] -tools: use dependabot cooldown and move tools/doc (Rafael Gonzaga)#59978275c07064c] -typings: update 'types' binding (René)#596928c21c4b286] -wasi: fix WasiFunction fast call signature (Renegade334)#59600b865074641] -win,tools: add description to signature (Martin Costello)#59877v24.9.0: 2025-09-25, Version 24.9.0 (Current), @targosCompare Source
Notable Changes
9b043a9096] -(SEMVER-MINOR)http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry)#59824a6456ab90a] -(SEMVER-MINOR)sqlite: cleanup ERM support and export Session class (James M Snell)#583785563361d22] -(SEMVER-MINOR)sqlite: add tagged template (0hm☘️)#5874804013ee933] -(SEMVER-MINOR)worker: add heap profile API (theanarkh)#59846Commits
cbec4fd6de] -benchmark: calibrate config dgram multi-buffer (Bruno Rodrigues)#596969a4bbdc3c5] -benchmark: calibrate config cluster/echo.js (Nam Yooseong)#598360b284d86e8] -build: add the missing macro definitions for OpenHarmony (hqzing)#5980443e6e54d66] -build: do not include custom ESLint rules testing in tarball (Antoine du Hamel)#59809039ac19154] -crypto: expose signatureAlgorithm on X509Certificate (Patrick Costa)#59235647c332704] -crypto: usereturn awaitwhen returning Promises from async functions (Renegade334)#598418ed4587cf0] -crypto: use async functions for non-stub Promise-returning functions (Renegade334)#59841bb051c56ef] -crypto: avoid calls topromise.catch()(Renegade334)#5984105e560dd25] -deps: update googletest to50b8600(Node.js GitHub Bot)#59955fa40d3a785] -deps: update archs files for openssl-3.5.3 (Node.js GitHub Bot)#599018c85570d18] -deps: upgrade openssl sources to openssl-3.5.3 (Node.js GitHub Bot)#59901b71125664e] -deps: update undici to 7.16.0 (Node.js GitHub Bot)#59830dea5dd7077] -dgram: restore buffer optimization in fixBufferList (Yoo)#59934b0c1e67532] -diagnostics_channel: fix race condition with diagnostics_channel and GC (Ugaitz Urien)#599100b37b594c3] -doc: use "WebAssembly" instead of "Web Assembly" (Tobias Nießen)#599541e723f9c6b] -doc: fix typo in section on microtask order (Tobias Nießen)#59932a28962a85c] -doc: update V8 fast API guidance (René)#58999bd767c5d1b] -doc: add security escalation policy (Ulises Gascón)#598069df91e59e1] -doc: type improvement of filehttp.md(yusheng chen)#58189e4f571680b] -doc: deprecate closingfs.Diron garbage collection (Livia Medeiros)#59839e9cb986fa5] -doc: rephrase dynamic import() description (Nam Yooseong)#59224026d4e33f7] -doc,crypto: update subtle.generateKey and subtle.importKey (Filip Skokan)#598512b2591db52] -esm: make hasAsyncGraph non-enumerable (Joyee Cheung)#59905993f05d323] -fs,win: do not add a second trailing slash in readdir (Gerhard Stöbich)#598477aec53b607] -(SEMVER-MINOR)http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry)#5982483ae6102e7] -http: optimize checkIsHttpToken for short strings (방진혁)#598326695067636] -http,https: handle IPv6 with proxies (Joyee Cheung)#59894c5d910a0a9] -http2: fix allowHttp1+Upgrade, broken by shouldUpgradeCallback (Tim Perry)#59924acada1fb82] -inspector: ensure adequate memory allocation forBinary::toBase64(René)#59870396cc8ec65] -lib: update inspect output format for subclasses (Miguel Marcondes Filho)#59687fed1dac8de] -lib: update isDeepStrictEqual to support options (Miguel Marcondes Filho)#59762d785929fd7] -lib: add source map support for assert messages (Chengzhong Wu)#59751ff13d1d61e] -lib,src: cache ModuleWrap.hasAsyncGraph (Chengzhong Wu)#59703b200cd8470] -lib,src: refactor assert to load error source from memory (Chengzhong Wu)#59751e94c57301b] -meta: add .npmrc with ignore-scripts=true (Joyee Cheung)#59914728472a57b] -module: only put directly require-d ESM into require.cache (Joyee Cheung)#59874be48760b93] -node-api: added SharedArrayBuffer api (Mert Can Altin)#59071f006a14522] -node-api: make napi_delete_reference use node_api_basic_env (Jeetu Suthar)#596840f46c1c3b0] -repl: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater)#598573eeb7b47ea] -sqlite: fix crash session extension callbacks with workers (Bart Louwers)#598480fe53375ec] -(SEMVER-MINOR)sqlite: cleanup ERM support and export Session class (James M Snell)#583789a3e58a007] -(SEMVER-MINOR)sqlite: add tagged template (0hm☘️)#58748f14ed5ab7b] -src: simplify watchdog instantiations viastd::optional(Anna Henningsen)#59960e330f03f84] -src: update crypto objects to use DictionaryTemplate (James M Snell)#5994269b5607cf4] -src: simplify is_callable by making it a concept (Tobias Nießen)#5816986150f3401] -src: rename private fields to follow naming convention (Moonki Choi)#59923d17f299539] -src: use DictionaryTemplate more in URLPattern (James M Snell)#59892ac784912ac] -src: reduce the nearest parent package JSON cache size (Michael Smith)#59888abecdcb536] -src: replace FIXED_ONE_BYTE_STRING with Environment-cached strings (Moonki Choi)#598912bb152500b] -src: create strings inFIXED_ONE_BYTE_STRINGas internalized (Anna Henningsen)#5982603116a7cd8] -src: removestd::arrayoverload ofFIXED_ONE_BYTE_STRING(Anna Henningsen)#598268a5325d6e3] -src: ensurev8::Eternalis empty before setting it (Anna Henningsen)#59825f0c20ccd81] -src: remove unnecessaryEnvironment::GetCurrent()calls (Moonki Choi)#59814213188e491] -stream: use new AsyncResource instead of bind (Matteo Collina)#59867ce8435b003] -test: testcase demonstrating issue 59541 (Eric Rannaud)#598018f32746142] -test: guard write to proxy client if proxy connection is ended (Joyee Cheung)#597426790093fcb] -tls: load bundled and extra certificates off-thread (Joyee Cheung)#59856f5d3f919d8] -tls: only do off-thread certificate loading on loading tls (Joyee Cheung)#5985687bbaa23a0] -tools: fixtools/make-v8.shfor clang (Richard Lau)#598930d23fd525b] -tools: skip test-internet workflow for draft PRs (Michaël Zasso)#59817e17c73731a] -tools: copyeditbuild-tarball.yml(Antoine du Hamel)#5980897c4e1bac9] -typings: remove unused imports (Nam Yooseong)#598808b29bbca76] -url: replaced slice with at (Mikhail)#591816458867a6b] -url: add type checking to urlToHttpOptions() (simon-id)#597533c62b3886f] -util: inspect objects with throwing Symbol.toStringTag (Ruben Bridgewater)#598606133a82875] -util: fix debuglog.enabled not being present with callback logger (Ruben Bridgewater)#598589347ddddf4] -vm: explain how to share promises between contexts w/ afterEvaluate (Eric Rannaud)#5980144ce971619] -vm: "afterEvaluate", evaluate() return a promise from the outer context (Eric Rannaud)#598016e586a1409] -vm: expose hasTopLevelAwait on SourceTextModule (Chengzhong Wu)#5986549747a58a3] -(SEMVER-MINOR)worker: add heap profile API (theanarkh)#59846b970c0bbc2] -zlib: reduce code duplication (jhofstee)#578109782ca2b1b] -zlib: implement fast path for crc32 (Gürgün Dayıoğlu)#59813v24.8.0: 2025-09-10, Version 24.8.0 (Current), @targosCompare Source
Notable Changes
HTTP/2 Network Inspection Support in Node.js
Node.js now supports inspection of HTTP/2 network calls in Chrome DevTools for Node.js.
Usage
Write a
test.jsscript that makes HTTP/2 requests.Run it with these options:
Open
about:inspecton Google Chrome and click onOpen dedicated DevTools for Node.The
Networktab will let you track your HTTP/2 calls.Contributed by Darshan Sen in#59611.
Other Notable Changes
7a8e2c251d] -(SEMVER-MINOR)crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan)#595704b631be0b0] -(SEMVER-MINOR)crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan)#595703e4b1e732c] -(SEMVER-MINOR)crypto: add KMAC Web Cryptography algorithms (Filip Skokan)#59647b1d28785b2] -(SEMVER-MINOR)crypto: add Argon2 Web Cryptography algorithms (Filip Skokan)#59544430691d1af] -(SEMVER-MINOR)crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan)#59537d6d05ba397] -(SEMVER-MINOR)worker: add cpu profile APIs for worker (theanarkh)#59428Commits
d913872369] -assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong)#595787bbbcf6666] -benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues)#5970944d7b92271] -benchmark: calibrate config array-vs-concat (Rafael Gonzaga)#595877f347fc551] -build: fix getting OpenSSL version on Windows (Michaël Zasso)#596094a317150d5] -build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing)#59547bda32af587] -build: usewindows-2025runner (Michaël Zasso)#59673a4a8ed8f6e] -build: compile bundled uvwasi conditionally (Carlo Cabrera)#59622d944a87761] -crypto: refactor subtle methods to use synchronous import (Filip Skokan)#597717a8e2c251d] -(SEMVER-MINOR)crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan)#595704b631be0b0] -(SEMVER-MINOR)crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan)#595703e4b1e732c] -(SEMVER-MINOR)crypto: add KMAC Web Cryptography algorithms (Filip Skokan)#59647b1d28785b2] -(SEMVER-MINOR)crypto: add Argon2 Web Cryptography algorithms (Filip Skokan)#59544430691d1af] -(SEMVER-MINOR)crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan)#595370d1e53d935] -deps: update uvwasi to 0.0.23 (Node.js GitHub Bot)#5979168732cf426] -deps: update histogram to 0.11.9 (Node.js GitHub Bot)#59689f12c1ad961] -deps: update googletest toeb2d85e(Node.js GitHub Bot)#5933545af6966ae] -deps: upgrade npm to 11.6.0 (npm team)#5975057617244a4] -deps: V8: cherry-pick6b1b9bc(Xiao-Tao)#592832e6225a747] -deps: update amaro to 1.1.2 (Node.js GitHub Bot)#596161f7f6dfae6] -diagnostics_channel: revoke DEP0163 (René)#597588671a6cdb3] -doc: stabilize --disable-sigusr1 (Rafael Gonzaga)#59707583b1b255d] -doc: update OpenSSL default security level to 2 (Jeetu Suthar)#597239b5eb6eb50] -doc: fix missing links in theerrorspage (Nam Yooseong)#59427e7bf712c57] -doc: update "Type stripping in dependencies" section (Josh Kelley)#5965296db47f91e] -doc: add Miles Guicent as triager (Miles Guicent)#5956287f829bd0c] -doc: markpath.matchesGlobas stable (Aviv Keller)#59572062b2f705e] -doc: improve documentation for raw headers in HTTP/2 APIs (Tim Perry)#596336ab9306370] -doc: update install_tools.bat free disk space (Stefan Stojanovic)#59579c8d6b60da6] -doc: fix quic session instance typo (jakecastelli)#5964261d0a2d1ba] -doc: fix filehandle.read typo (Ruy Adorno)#596353276bfa0d0] -doc: update migration recomendations forutil.is**()deprecations (Augustin Mauroy)#5926911de6c7ebb] -doc: fix missing link to the Error documentation in thehttppage (Alexander Makarenko)#59080f5b6829bba] -doc,crypto: add description to the KEM and supports() methods (Filip Skokan)#596445bfdc7ee74] -doc,crypto: cleanup unlinked and self method references webcrypto.md (Filip Skokan)#59608010458d061] -esm: populate separate cache for require(esm) in imported CJS (Joyee Cheung)#59679dbe6e63baf] -esm: fix missed renaming in ModuleJob.runSync (Joyee Cheung)#597248eb0d9d834] -fs: fix wrong order of file names in cpSync error message (Nicholas Paun)#59775e69be5611f] -fs: fix dereference: false on cpSync (Nicholas Paun)#596812865d2ac20] -http: unbreak keepAliveTimeoutBuffer (Robert Nagy)#59784ade1175475] -http: use cached '1.1' http version string (Robert Nagy)#5971774a09482de] -inspector: undici as shared-library should pass tests (Aras Abbasi)#59837772f8f415a] -inspector: add http2 tracking support (Darshan Sen)#596113d225572d7] -Revert "lib: optimize writable stream buffer clearing" (Yoo)#597434fd213ce73] -lib: fix isReadable and isWritable return type value (Gabriel Quaresma)#5908939befddb87] -lib: prefer TypedArrayPrototype primordials (Filip Skokan)#597660748160d2e] -lib: fix DOMException subclass support (Chengzhong Wu)#596801a93df808c] -lib: revert to using default derived class constructors (René)#59650bb0755df37] -meta: bumpcodecov/codecov-action(dependabot[bot])#5972645d148d9be] -meta: bump actions/download-artifact from 4.3.0 to 5.0.0 (dependabot[bot])#5972901b66b122e] -meta: bump github/codeql-action from 3.29.2 to 3.30.0 (dependabot[bot])#5972834f7ab5502] -meta: bump actions/cache from 4.2.3 to 4.2.4 (dependabot[bot])#597275806ea02af] -meta: bump actions/checkout from 4.2.2 to 5.0.0 (dependabot[bot])#59725f667215583] -path: refactor path joining logic for clarity and performance (Lee Jiho)#597810340fe92a6] -repl: do not cause side effects in tab completion (Anna Henningsen)#59774a414c1eb51] -repl: fix REPL completion under unary expressions (Kingsword)#59744c206f8dd87] -repl: add isValidParentheses check before wrap input (Xuguang Mei)#596070bf9775ee2] -sea: implement sea.getAssetKeys() (Joyee Cheung)#59661bf26b478d8] -sea: allow using inspector command line flags with SEA (Joyee Cheung)#5956892128a8fe2] -src: use DictionaryTemplate for node_url_pattern (James M Snell)#59802bcb29fb84f] -src: correctly report memory changes to V8 (Yaksh Bariya)#5962344c24657d3] -src: fixup node_messaging error handling (James M Snell)#597922cd6a3b7ec] -src: track async resources via pointers to stack-allocated handles (Anna Henningsen)#5970434d752586f] -src: fix build on NetBSD (Thomas Klausner)#5971815fa779ac5] -src: fix race on process exit and off thread CA loading (Chengzhong Wu)#5963215cbd3966a] -src: separate module.hasAsyncGraph and module.hasTopLevelAwait (Joyee Cheung)#5967588d1ca8990] -src: use non-deprecated Get/SetPrototype methods (Michaël Zasso)#5967156ac9a2d46] -src: migrate WriteOneByte to WriteOneByteV2 (Chengzhong Wu)#596343d88aa9f2f] -src: remove duplicate code (theanarkh)#596490718a70b2a] -src: add name for more threads (theanarkh)#596010379a8b254] -src: remove JSONParser (Joyee Cheung)#5961990d0a1b2e9] -src,sqlite: refactor value conversion (Edy Silva)#596595e025c7ca7] -stream: replace manual function validation with validateFunction (방진혁)#59529155a999bed] -test: skip tests failing when run under root (Livia Medeiros)#597796313706c69] -test: update WPT for urlpattern tocff1ac1(Node.js GitHub Bot)#5960241245ad4c7] -test: skip more sea tests on Linux ppc64le (Richard Lau)#59755df63d37ec4] -test: fix internet/test-dns (Michaël Zasso)#596601f6c335e82] -test: mark test-inspector-network-fetch as flaky again (Joyee Cheung)#596401798683df1] -test: skip test-fs-cp* tests that are constantly failing on Windows (Joyee Cheung)#596374c48ec09e5] -test: deflake test-http-keep-alive-empty-line (Luigi Pinca)#59595dcdb259e85] -test_runner: fix todo inheritance (Moshe Atlow)#5972124177973a2] -test_runner: set mock timer's interval undefined (hotpineapple)#5947983d11f8a7a] -tools: print appropriate output when test aborted (hotpineapple)#597941eca2cc548] -tools: use sparse checkout inbuild-tarball.yml(Antoine du Hamel)#5978889fa1a929d] -tools: remove unused actions frombuild-tarball.yml(Antoine du Hamel)#59787794ca3511d] -tools: do not attempt to compress tgz archive (Antoine du Hamel)#59785377bdb9b7e] -tools: add v8windbg target (Chengzhong Wu)#597676696d1d6c9] -tools: improve error handling in node_mksnapshot (James M Snell)#594378dbd0f13e8] -tools: add sccache totest-internetworkflow (Antoine du Hamel)#597206523c2d7d9] -tools: update gyp-next to 0.20.4 (Node.js GitHub Bot)#5969019d633f40c] -tools: add script to make reviewing backport PRs easier (Antoine du Hamel)#5916115e547b3a4](https:/Configuration
📅Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated byMend Renovate. View therepository job log.