2026-01-13, Version 20.20.0 'Iron' (LTS), @marco-ippolito
This is a security release.
lib:
- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) https://github.com/nodejs-private/node-private/pull/802
- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) https://github.com/nodejs-private/node-private/pull/797 lib,permission:
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) https://github.com/nodejs-private/node-private/pull/760 src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) https://github.com/nodejs-private/node-private/pull/773 src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) https://github.com/nodejs-private/node-private/pull/759 tls:
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) https://github.com/nodejs-private/node-private/pull/796
- [
8f9ba3f623] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997 - [
97fc9b0eb7] - deps: update undici to 6.23.0 (Matteo Collina) nodejs-private/node-private#792 - [
14fbbb510c] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#802 - [
1febc48d5b] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797 - [
494f62dc23] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760 - [
d7a5c587c0] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773 - [
51f4de4b4a] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759 - [
85f73e7057] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796
2026-01-13, Version 22.22.0 'Jod' (LTS), @marco-ippolito
This is a security release.
lib:
- (CVE-2025-59465) add TLSSocket default error handler
- (CVE-2025-55132) disable futimes when permission model is enabled lib,permission:
- (CVE-2025-55130) require full read and write to symlink APIs src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle tls:
- (CVE-2026-21637) route callback exceptions through error handlers
- [
6badf4e6f4] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997 - [
37509c3ff0] - deps: update undici to 6.23.0 (Matteo Collina) nodejs-private/node-private#791 - [
eb8e41f8db] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797 - [
ebbf942a83] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748 - [
6b4849583a] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760 - [
ddadc31f09] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773 - [
d4d9f3915f] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759 - [
25d6799df6] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796
2026-01-13, Version 24.13.0 'Krypton' (LTS), @marco-ippolito
This is a security release.
lib:
- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) https://github.com/nodejs-private/node-private/pull/797
- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) https://github.com/nodejs-private/node-private/pull/748 lib,permission:
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) https://github.com/nodejs-private/node-private/pull/760 src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) https://github.com/nodejs-private/node-private/pull/773 src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) https://github.com/nodejs-private/node-private/pull/759 tls:
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) https://github.com/nodejs-private/node-private/pull/796
- [
2092785d01] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997 - [
3e58b7f2af] - deps: update undici to 7.18.2 (Node.js GitHub Bot) #61283 - [
4ba536a5a6] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797 - [
89adaa21fd] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748 - [
7302b4dae1] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760 - [
ac030753c4] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773 - [
20075692fe] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759 - [
20591b0618] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796
2026-01-13, Version 25.3.0 (Current), @RafaelGSS
This is a security release.
lib:
- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) https://github.com/nodejs-private/node-private/pull/750 permission:
- (CVE-2026-21636) add network check on pipe_wrap connect (RafaelGSS) https://github.com/nodejs-private/node-private/pull/784
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) https://github.com/nodejs-private/node-private/pull/760
- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) https://github.com/nodejs-private/node-private/pull/748 src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) https://github.com/nodejs-private/node-private/pull/773 src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) https://github.com/nodejs-private/node-private/pull/759 tls:
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) https://github.com/nodejs-private/node-private/pull/790
- [
a6a74b89a7] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997 - [
5100614e26] - deps: update undici to 7.18.2 (Node.js GitHub Bot) #61283 - [
f0a8916887] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#750 - [
b4b887c5f7] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748 - [
26be208039] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760 - [
bdf5873d44] - (CVE-2026-21636) permission: add network check on pipe_wrap connect (RafaelGSS) nodejs-private/node-private#784 - [
0578e3e921] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773 - [
4d6b55a6d1] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759 - [
c357a39e14] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#790
2025-12-10, Version 24.12.0 'Krypton' (LTS), @targos
- [
1a00b5f68a] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #59778 - [
ff5754077d] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga) #59982 - [
8987159234] - (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito) #60600 - [
92c484ebf4] - (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho) #59953 - [
b11bc5984e] - (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers) #60217 - [
e7da5b4b7d] - (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito) #60178 - [
a7f7d10c06] - (SEMVER-MINOR) src: add an option to make compile cache portable (Aditi) #58797 - [
92ea669240] - (SEMVER-MINOR) src,permission: add --allow-inspector ability (Rafael Gonzaga) #59711 - [
05d7509bd2] - (SEMVER-MINOR) v8: add cpu profile (theanarkh) #59807
- [
e4a23a35ac] - benchmark: focus on import.meta intialization in import-meta benchmark (Joyee Cheung) #60603 - [
b6114ae5c9] - benchmark: add per-suite setup option (Joyee Cheung) #60574 - [
ac8e90af7c] - buffer: speed up concat via TypedArray#set (Gürgün Dayıoğlu) #60399 - [
acbc8ca13e] - build: upgrade Python linter ruff, add rules ASYNC,PERF (Christian Clauss) #59984 - [
f97a609a07] - console: optimize single-string logging (Gürgün Dayıoğlu) #60422 - [
6cd9bdc580] - crypto: ensure documented RSA-PSS saltLength default is used (Filip Skokan) #60662 - [
0fafe24d9b] - crypto: fix argument validation in crypto.timingSafeEqual fast path (Joyee Cheung) #60538 - [
54421e0419] - debugger: fix event listener leak in the run command (Joyee Cheung) #60464 - [
c361a628b4] - deps: V8: cherry-pick 72b0e27bd936 (pthier) #60732 - [
c70f4588dd] - deps: V8: cherry-pick 6bb32bd2c194 (Erik Corry) #60732 - [
881fe784c5] - deps: V8: cherry-pick 0dd2318b5237 (Erik Corry) #60732 - [
457c33efcc] - deps: V8: cherry-pick df20105ccf36 (Erik Corry) #60732 - [
0bf45a829c] - deps: V8: backport e5dbbbadcbff (Darshan Sen) #60524 - [
4993bdc476] - deps: V8: cherry-pick 5ba9200cd046 (Juan José Arboleda) #60620 - [
1e9abe0078] - deps: update corepack to 0.34.5 (Node.js GitHub Bot) #60842 - [
3f704ed08f] - deps: update corepack to 0.34.4 (Node.js GitHub Bot) #60643 - [
04e360fdb1] - deps: V8: cherry-pick 06bf293610ef, 146962dda8d2 and e0fb10b5148c (Michaël Zasso) #60713 - [
fcbd8dbbde] - deps: patch V8 to 13.6.233.17 (Michaël Zasso) #60712 - [
28e9433f39] - deps: V8: cherry-pick 87356585659b (Joyee Cheung) #60069 - [
3cac85b243] - deps: V8: backport 2e4c5cf9b112 (Michaël Zasso) #60654 - [
1daece1970] - deps: call OPENSSL_free after ANS1_STRING_to_UTF8 (Rafael Gonzaga) #60609 - [
5f55a9c9ea] - deps: nghttp2: revert 7784fa979d0b (Antoine du Hamel) #59790 - [
1d9e7c1f4d] - deps: update nghttp2 to 1.67.1 (nodejs-github-bot) #59790 - [
3140415068] - deps: update simdjson to 4.1.0 (Node.js GitHub Bot) #60542 - [
d911f9f1b8] - deps: update amaro to 1.1.5 (Node.js GitHub Bot) #60541 - [
daaaf04a32] - deps: V8: cherry-pick 2abc61361dd4 (Richard Lau) #60177 - [
b4f63ee5f8] - doc: update Collaborators list to reflect hybrist handle change (Antoine du Hamel) #60650 - [
effcf7a8ab] - doc: fix link in--env-file=filesection (N. Bighetti) #60563 - [
7011736703] - doc: fix linter issues (Antoine du Hamel) #60636 - [
5cc79d8945] - doc: add missing history entry forsqlite.md(Antoine du Hamel) #60607 - [
bbc649057c] - doc: correct values/references for buffer.kMaxLength (René) #60305 - [
ea7ecb517b] - doc: recommend events.once to manage 'close' event (Dan Fabulich) #60017 - [
58bff04cc2] - doc: highlight module loading difference between import and require (Ajay A) #59815 - [
bbcbff9b4d] - doc: add CJS code snippets insqlite.md(Allon Murienik) #60395 - [
f8af33d5a7] - doc: fix typo inprocess.unrefdocumentation (우혁) #59698 - [
df105dc351] - doc: add some entries toglossary.md(Mohataseem Khan) #59277 - [
4955cb2b5b] - doc: improve agent.createConnection docs for http and https agents (JaeHo Jang) #58205 - [
6283bb5cc9] - doc: fix pseudo code in modules.md (chirsz) #57677 - [
d5059ea537] - doc: add missing variable in code snippet (Koushil Mankali) #55478 - [
900de373ae] - doc: add missing word insingle-executable-applications.md(Konstantin Tsabolov) #53864 - [
5735044c8b] - doc: fix typo in http.md (Michael Solomon) #59354 - [
2dee6df831] - doc: update devcontainer.json and add documentation (Joyee Cheung) #60472 - [
8f2d98d7d2] - doc: add haramj as triager (Haram Jeong) #60348 - [
bbd7fdfff4] - doc: clarify require(esm) description (dynst) #60520 - [
33ad11a764] - doc: instantiate resolver object (Donghoon Nam) #60476 - [
81a61274f3] - doc: correct module loading descriptions (Joyee Cheung) #60346 - [
77911185fe] - doc: clarify --use-system-ca support status (Joyee Cheung) #60340 - [
185f6e95d9] - doc,crypto: link keygen to supported types (Filip Skokan) #60585 - [
772d6c6608] - doc,src,lib: clarify experimental status of Web Storage support (Antoine du Hamel) #60708 - [
ad98e11ac2] - esm: use sync loading/resolving on non-loader-hook thread (Joyee Cheung) #60380 - [
1a00b5f68a] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #59778 - [
5703ce68bc] - http: replace startsWith with strict equality (btea) #59394 - [
2b696ffad8] - http2: add diagnostics channels for client stream request body (Darshan Sen) #60480 - [
dbdf4cb5a5] - inspector: inspect HTTP response body (Chengzhong Wu) #60572 - [
9dc9a7d33d] - inspector: support inspecting HTTP/2 request and response bodies (Darshan Sen) #60483 - [
89fa2befe4] - inspector: fix crash when receiving non json message (Shima Ryuhei) #60388 - [
ff5754077d] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga) #59982 - [
33baaf42c8] - lib: replace global SharedArrayBuffer constructor with bound method (Renegade334) #60497 - [
b047586a08] - meta: bump actions/download-artifact from 5.0.0 to 6.0.0 (dependabot[bot]) #60532 - [
64192176d7] - meta: bump actions/upload-artifact from 4.6.2 to 5.0.0 (dependabot[bot]) #60531 - [
af6d4a6b9b] - meta: bump github/codeql-action from 3.30.5 to 4.31.2 (dependabot[bot]) #60533 - [
c17276fd24] - meta: bump actions/setup-node from 5.0.0 to 6.0.0 (dependabot[bot]) #60529 - [
6e8b52a7dc] - meta: bump actions/stale from 10.0.0 to 10.1.0 (dependabot[bot]) #60528 - [
a12658595b] - meta: callcreate-release-post.ymlpost release (Aviv Keller) #60366 - [
8987159234] - (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito) #60600 - [
36da413663] - module: fix directory option in the enableCompileCache() API (Joyee Cheung) #59931 - [
92c484ebf4] - (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho) #59953 - [
545162b0d4] - node-api: use local files for instanceof test (Vladimir Morozov) #60190 - [
526c011d89] - perf_hooks: fix stack overflow error (Antoine du Hamel) #60084 - [
1de0476939] - perf_hooks: move non-standard performance properties to perf_hooks (Chengzhong Wu) #60370 - [
07ec1239ef] - repl: fix pasting after moving the cursor to the left (Ruben Bridgewater) #60470 - [
b11bc5984e] - (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers) #60217 - [
273c9661fd] - sqlite,doc: fix StatementSync section (Edy Silva) #60474 - [
d92ec21a4c] - src: use CP_UTF8 for wide file names on win32 (Fedor Indutny) #60575 - [
baef0468ed] - src: move Node-API version detection to where it is used (Anna Henningsen) #60512 - [
e7da5b4b7d] - (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito) #60178 - [
a7f7d10c06] - (SEMVER-MINOR) src: add an option to make compile cache portable (Aditi) #58797 - [
566add0b19] - src: avoid C strings in more C++ exception throws (Anna Henningsen) #60592 - [
9b796347c1] - src: add internal binding for constructing SharedArrayBuffers (Renegade334) #60497 - [
3b01cbb411] - src: movenapi_addon_register_functonode_api_types.h(Anna Henningsen) #60512 - [
02fb7f4ecb] - src: remove unconditional NAPI_EXPERIMENTAL in node.h (Chengzhong Wu) #60345 - [
bd09ae24e4] - src: clean up generic counter implementation (Anna Henningsen) #60447 - [
cd6bf51dbd] - src: add enum handle for ToStringHelper + formatting (Burkov Egor) #56829 - [
92ea669240] - (SEMVER-MINOR) src,permission: add --allow-inspector ability (Rafael Gonzaga) #59711 - [
ac3dbe48f7] - stream: don't try to read more if reading (Robert Nagy) #60454 - [
790288a93b] - test: ensure assertions are reachable intest/internet(Antoine du Hamel) #60513 - [
0a85132989] - test: fix status when compiled without inspector (Antoine du Hamel) #60289 - [
2f57673172] - test: deflake test-perf-hooks-timerify-histogram-sync (Joyee Cheung) #60639 - [
09726269de] - test: apply a delay towatch-mode-kill-signaltests (Joyee Cheung) #60610 - [
45537b9562] - test: async iife in repl (Tony Gorez) #44878 - [
4ca81f101d] - test: parallelize sea tests when there's enough disk space (Joyee Cheung) #60604 - [
ea71e96191] - test: only show overridden env in child process failures (Joyee Cheung) #60556 - [
06b2e348c7] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60498 - [
de9c8cb670] - test: ensure assertions are reachable intest/es-module(Antoine du Hamel) #60501 - [
75bc40fced] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60485 - [
1a6084cfd3] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60500 - [
2c651c90cf] - test: split test-perf-hooks-timerify (Joyee Cheung) #60568 - [
6e8b5f7345] - test: add more logs to test-esm-loader-hooks-inspect-wait (Joyee Cheung) #60466 - [
9dea7ffa30] - test: mark stringbytes-external-exceed-max tests as flaky on AIX (Joyee Cheung) #60565 - [
0b3c3b710a] - test: split test-esm-wasm.js (Joyee Cheung) #60491 - [
a15b795b34] - test: correct conditional secure heap flags test (Shelley Vohr) #60385 - [
38b77b3a44] - test: fix flaky test-watch-mode-kill-signal-* (Joyee Cheung) #60443 - [
e8d7598057] - test: capture stack trace in debugger timeout errors (Joyee Cheung) #60457 - [
674befeb81] - test: ensure assertions are reachable intest/sequential(Antoine du Hamel) #60412 - [
952c08a735] - test: ensure assertions are reachable in more folders (Antoine du Hamel) #60411 - [
bbca57584b] - test: split test-runner-watch-mode (Joyee Cheung) #60391 - [
e78e0cf6e7] - test: move test-runner-watch-mode helper into common (Joyee Cheung) #60391 - [
84576ef021] - test: ensure assertions are reachable intest/addons(Antoine du Hamel) #60142 - [
1659078c11] - test: ignore EPIPE errors in https proxy invalid URL test (Joyee Cheung) #60269 - [
79ffee80ec] - test: ensure assertions are reachable intest/client-proxy(Antoine du Hamel) #60175 - [
e5a812243a] - test: ensure assertions are reachable intest/async-hooks(Antoine du Hamel) #60150 - [
e924fd72e3] - test,crypto: handle a few more BoringSSL tests (Shelley Vohr) #59030 - [
a55ac11611] - test,crypto: update x448 and ed448 expectation when on boringssl (Shelley Vohr) #60387 - [
55d5e9ec73] - tls: fix leak on invalid protocol method (Shelley Vohr) #60427 - [
5763c96e7c] - tools: replace invalid expression in dependabot config (Riddhi) #60649 - [
b6e21b47d7] - tools: skip unaffected GHA jobs for changes intest/internet(Antoine du Hamel) #60517 - [
999664c76d] - tools: do not use short hashes for deps versioning to avoid collision (Antoine du Hamel) #60407 - [
ada856d0fb] - tools: only add test reporter args when node:test is used (Joyee Cheung) #60551 - [
1812c56bb3] - tools: fix update-icu script (Michaël Zasso) #60521 - [
747040438a] - tools: fix linter for semver-major release proposals (Antoine du Hamel) #60481 - [
f170551e40] - tools: fix failing release-proposal linter for LTS transitions (Antoine du Hamel) #60465 - [
2db4ea0ce4] - tools: remove undici from daily wpt.fyi job (Filip Skokan) #60444 - [
2a85aa4e7b] - tools: add lint rule to ensure assertions are reached (Antoine du Hamel) #60125 - [
48299ef5fb] - tools,doc: update JavaScript primitive types to match MDN Web Docs (JustApple) #60581 - [
7ec04cf936] - util: fix stylize of special properties in inspect (Ge Gao) #60479 - [
05d7509bd2] - (SEMVER-MINOR) v8: add cpu profile (theanarkh) #59807 - [
884fe884a1] - vm: hint module identifier in instantiate errors (Chengzhong Wu) #60199 - [
a2caf19f70] - watch: fix interaction with multiple env files (Marco Ippolito) #60605
2025-11-25, Version 20.19.6 'Iron' (LTS), @marco-ippolito
- [
6277910a15] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #59571 - [
082e50d4a2] - doc: update the instruction on how to verify releases (Antoine du Hamel) #59113 - [
db68cec4cb] - doc: deprecate HTTP/2 priority signaling (Matteo Collina) #58313
- [
0f644df42e] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #59547 - [
fba0025b9c] - build: usewindows-2025runner (Michaël Zasso) #59673 - [
3456ec946d] - crypto: update root certificates to NSS 3.116 (Node.js GitHub Bot) #59956 - [
6277910a15] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #59571 - [
1788fb5f3d] - deps: update undici to 6.22.0 (Matteo Collina) #60112 - [
5d61b55f24] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #59791 - [
9f1e5e4637] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #59689 - [
d0edb01d25] - deps: update googletest to eb2d85e (Node.js GitHub Bot) #59335 - [
576242ff39] - deps: V8: cherry-pick a0d0d4fc4f19 (Ho Cheung) #60716 - [
a07a277020] - deps: update corepack to 0.34.1 (Node.js GitHub Bot) #60314 - [
fa5c5af8ce] - deps: update archs files for openssl-3.0.17 (Node.js GitHub Bot) #59134 - [
556113e2fc] - deps: upgrade openssl sources to openssl-3.0.17 (Node.js GitHub Bot) #59134 - [
cd1536ca90] - deps: update corepack to 0.34.0 (Node.js GitHub Bot) #59133 - [
acec79989e] - deps: V8: cherry-pick 6b1b9bca2a8 (zhoumingtao) #59283 - [
e65b930aa7] - deps: V8: backport 2e4c5cf9b112 (Michaël Zasso) #60654 - [
1b75a601f7] - doc: fix typo on child_process.md (Angelo Gazzola) #60114 - [
a2bcb217c6] - doc: fix typo in section on microtask order (Tobias Nießen) #59932 - [
2426d3f3ff] - doc: add security escalation policy (Ulises Gascón) #59806 - [
e7f6f04758] - doc: add Miles Guicent as triager (Miles Guicent) #59562 - [
e51ef3f48b] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #59579 - [
8a504d900a] - doc: fix missing link to the Error documentation in thehttppage (Alexander Makarenko) #59080 - [
8c5c8aa71d] - doc: clarify experimental platform vulnerability policy (Matteo Collina) #59591 - [
109c4bff77] - doc: add security incident reponse plan (Rafael Gonzaga) #59470 - [
4f004efdf3] - doc: add RafaelGSS as performance strategic lead (Rafael Gonzaga) #59445 - [
caa2db4bac] - doc: fix links in test.md (Vas Sudanagunta) #58876 - [
082e50d4a2] - doc: update the instruction on how to verify releases (Antoine du Hamel) #59113 - [
19a66365d9] - doc: clarify DEP0194 scope (Antoine du Hamel) #58504 - [
db68cec4cb] - doc: deprecate HTTP/2 priority signaling (Matteo Collina) #58313 - [
3b2368774f] - doc: make Stability labels not sticky in Stability index (Livia Medeiros) #58291 - [
960d05ad7d] - doc: add history entries to--input-typesection (Antoine du Hamel) #58175 - [
20616f1750] - http2: do not crash on mismatched ping buffer length (René) #60135 - [
9eb94232c8] - lib: handle superscript variants on windows device (Rafael Gonzaga) #59261 - [
dc58b4e35f] - meta: move Michael to emeritus (Michael Dawson) #60070 - [
d943cfb260] - meta: bump actions/setup-node from 4.4.0 to 5.0.0 (dependabot[bot]) #60093 - [
de9a3aaf0f] - meta: bump step-security/harden-runner from 2.12.2 to 2.13.1 (dependabot[bot]) #60094 - [
b4b5d4a4d7] - meta: bump ossf/scorecard-action from 2.4.2 to 2.4.3 (dependabot[bot]) #60096 - [
e5b4eee901] - meta: bump actions/setup-python from 5.6.0 to 6.0.0 (dependabot[bot]) #60090 - [
7cb032c2c1] - meta: update devcontainer to the latest schema (Aviv Keller) #54347 - [
bb108191aa] - meta: callcreate-release-post.ymlpost release (Aviv Keller) #60366 - [
2a11d50526] - module: correctly detect top-level await in ambiguous contexts (Shima Ryuhei) #58646 - [
144233b71a] - process: fix wrong asyncContext under unhandled-rejections=strict (Shima Ryuhei) #60103 - [
409cb773a4] - repl: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater) #59857 - [
d1c9d80cac] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #59607 - [
b8d145db2c] - src: fix order of CHECK_NOT_NULL/dereference (Tobias Nießen) #59487 - [
2c8a73f95f] - src: remove duplicate assignment ofO_EXCLin node_constants.cc (Daniel Osvaldo R) #59049 - [
b1da374503] - test: fix typo of test-benchmark-readline.js (Deokjin Kim) #59993 - [
4b4e38f497] - test: mark sea tests flaky on macOS x64 (Richard Lau) #60068 - [
cbf4fc34c3] - test: skip more sea tests on Linux ppc64le (Richard Lau) #59755 - [
9543facad7] - test: mark test-inspector-network-fetch as flaky again (Joyee Cheung) #59640 - [
4f858d22ac] - test: skip test-fs-cp* tests that are constantly failing on Windows (Joyee Cheung) #59637 - [
3ec534dbe8] - test: skip sea tests on Linux ppc64le (Richard Lau) #59563 - [
a7a109f926] - test: fix typos (Lee Jiho) #59330 - [
fd9d43da46] - test: skip failing test on macOS 15.7+ (Antoine du Hamel) #60419 - [
bc3ffbd713] - test_runner: fix isSkipped check in junit (Sungwon) #59414 - [
0cace96472] - test_runner: correct "already mocked" error punctuation placement (Jacob Smith) #58840 - [
76001f9480] - tools: remove unused actions frombuild-tarball.yml(Antoine du Hamel) #59787 - [
69904844bb] - tools: do not attempt to compress tgz archive (Antoine du Hamel) #59785 - [
a6e7adb173] - tools: fix return value of try_check_compiler (theanarkh) #59434 - [
6443ad2da5] - tools: drop deprecatedmacos-13runner (Richard Lau) #60679 - [
45ec702ef7] - tools: fixtools/make-v8.shfor clang (Richard Lau) #59893 - [
393ff7226e] - util: fix numericSeparator with negative fractional numbers (sangwook) #59379 - [
9e8beff0f4] - util: fix error's namespaced node_modules highlighting using inspect (Ruben Bridgewater) #59446
2025-11-17, Version 25.2.1 (Current), @aduh95
This release reverts the spec-compliant behavior of sometimes throwing on localStorage access. We received feedback that this change on an experimental API was too breaking for a semver-minor release, so we decided to push it back for Node.js 26.0.0.
- [
ff89b7b6c7] - crypto: ensure documented RSA-PSS saltLength default is used (Filip Skokan) #60662 - [
5316b580eb] - deps: V8: backport 2e4c5cf9b112 (Michaël Zasso) #60654 - [
ca878bc90e] - doc,src,lib: clarify experimental status of Web Storage support (Antoine du Hamel) #60708 - [
a4dee613fd] - Revert "lib: throw from localStorage getter on missing storage path" (Antoine du Hamel) #60750
2025-11-11, Version 25.2.0 (Current), @aduh95
- [
a37c01e6a1] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga) #59982 - [
4fbb1ab101] - lib: throw from localStorage getter on missing storage path (René) #60351 - [
727560a96d] - (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito) #60600 - [
506b79e888] - (SEMVER-MINOR) net: increase network family autoselection timeout to 500ms (Rod Vagg) #60334 - [
166c72ec02] - (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho) #59953 - [
399b340022] - (SEMVER-MINOR) v8: adding total_allocated_bytes to HeapStatistics (Caio Lima) #60573
- [
d5158a0a2d] - benchmark: focus on import.meta intialization in import-meta benchmark (Joyee Cheung) #60603 - [
26a5305fa9] - benchmark: add per-suite setup option (Joyee Cheung) #60574 - [
4810e4b82d] - buffer: speed up concat via TypedArray#set (Gürgün Dayıoğlu) #60399 - [
94a94a6b3a] - console: optimize single-string logging (Gürgün Dayıoğlu) #60422 - [
ad376c31db] - crypto: fix argument validation in crypto.timingSafeEqual fast path (Joyee Cheung) #60538 - [
dc38a45a55] - debugger: fix event listener leak in the run command (Joyee Cheung) #60464 - [
a61e5d8e05] - deps: call OPENSSL_free after ANS1_STRING_to_UTF8 (Rafael Gonzaga) #60609 - [
51e5030afa] - deps: nghttp2: revert 7784fa979d0b (Antoine du Hamel) #59790 - [
eef838f499] - deps: update nghttp2 to 1.67.1 (nodejs-github-bot) #59790 - [
13120a43d4] - deps: update simdjson to 4.1.0 (Node.js GitHub Bot) #60542 - [
6e1b23dab8] - deps: update corepack to 0.34.2 (Node.js GitHub Bot) #60550 - [
a02e05c486] - deps: update amaro to 1.1.5 (Node.js GitHub Bot) #60541 - [
b9ba3a7947] - deps: V8: backport fe81545e6d14 (Caio Lima) #60429 - [
07bcd28494] - deps: V8: cherry-pick 7ef6a001762 (Xiao-Tao) #60259 - [
3e11658243] - doc: update Collaborators list to reflect hybrist handle change (Antoine du Hamel) #60650 - [
b8e40e4d38] - doc: fix link in--env-file=filesection (N. Bighetti) #60563 - [
9558c1c0df] - doc: fix linter issues (Antoine du Hamel) #60636 - [
cdf70de563] - doc: add missing history entry forsqlite.md(Antoine du Hamel) #60607 - [
e3c5dcf1ea] - doc: correct values/references for buffer.kMaxLength (René) #60305 - [
a25d76c924] - doc: recommend events.once to manage 'close' event (Dan Fabulich) #60017 - [
795f32bf91] - doc: highlight module loading difference between import and require (Ajay A) #59815 - [
212775410b] - doc: add CJS code snippets insqlite.md(Allon Murienik) #60395 - [
263c06096d] - doc: fix typo inprocess.unrefdocumentation (우혁) #59698 - [
356bdae408] - doc: add some entries toglossary.md(Mohataseem Khan) #59277 - [
9632c398de] - doc: improve agent.createConnection docs for http and https agents (JaeHo Jang) #58205 - [
f72880dbe3] - doc: fix pseudo code in modules.md (chirsz) #57677 - [
a9c70cefe8] - doc: add missing variable in code snippet (Koushil Mankali) #55478 - [
2892d151d4] - doc: add missing word insingle-executable-applications.md(Konstantin Tsabolov) #53864 - [
9c99ab6571] - doc: fix typo in http.md (Michael Solomon) #59354 - [
3446cf375f] - doc: update devcontainer.json and add documentation (Joyee Cheung) #60472 - [
519c537875] - doc: add haramj as triager (Haram Jeong) #60348 - [
62889d7e99] - doc: clarify require(esm) description (dynst) #60520 - [
0b9ef68705] - doc: instantiate resolver object (Donghoon Nam) #60476 - [
cd5c1ad29f] - doc: correct module loading descriptions (Joyee Cheung) #60346 - [
74719dad7a] - doc: clarify Linux runtime requirements for >=25 (Joyee Cheung) #60484 - [
ca39540785] - doc: clarify --use-system-ca support status (Joyee Cheung) #60340 - [
dbf204c714] - doc,crypto: link keygen to supported types (Filip Skokan) #60585 - [
3bcf86d56d] - esm: use sync loading/resolving on non-loader-hook thread (Joyee Cheung) #60380 - [
69b3d2c845] - http: replace startsWith with strict equality (btea) #59394 - [
a38e2f5975] - http2: add diagnostics channels for client stream request body (Darshan Sen) #60480 - [
c047e73a00] - inspector: inspect HTTP response body (Chengzhong Wu) #60572 - [
d2087bae92] - inspector: support inspecting HTTP/2 request and response bodies (Darshan Sen) #60483 - [
003121c475] - inspector: fix crash when receiving non json message (Shima Ryuhei) #60388 - [
a37c01e6a1] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga) #59982 - [
219d2e978d] - lib: replace global SharedArrayBuffer constructor with bound method (Renegade334) #60497 - [
4fbb1ab101] - lib: throw from localStorage getter on missing storage path (René) #60351 - [
ca8934f44d] - meta: bump cachix/install-nix-action from 31.6.1 to 31.8.2 (dependabot[bot]) #60534 - [
166490230a] - meta: bump github/codeql-action from 3.30.5 to 4.31.2 (dependabot[bot]) #60533 - [
b722236a12] - meta: bump actions/download-artifact from 5.0.0 to 6.0.0 (dependabot[bot]) #60532 - [
3314b0bc60] - meta: bump actions/upload-artifact from 4.6.2 to 5.0.0 (dependabot[bot]) #60531 - [
d1d9891feb] - meta: bump actions/github-script from 7.0.1 to 8.0.0 (dependabot[bot]) #60530 - [
995596a34f] - meta: bump actions/setup-node from 5.0.0 to 6.0.0 (dependabot[bot]) #60529 - [
b60157a0fe] - meta: bump actions/stale from 10.0.0 to 10.1.0 (dependabot[bot]) #60528 - [
07fa6c9081] - meta: callcreate-release-post.ymlpost release (Aviv Keller) #60366 - [
727560a96d] - (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito) #60600 - [
506b79e888] - (SEMVER-MINOR) net: increase network family autoselection timeout to 500ms (Rod Vagg) #60334 - [
166c72ec02] - (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho) #59953 - [
6ab83cf979] - node-api: use local files for instanceof test (Vladimir Morozov) #60190 - [
3671851879] - perf_hooks: move non-standard performance properties to perf_hooks (Chengzhong Wu) #60370 - [
6ddee4a7ed] - repl: fix pasting after moving the cursor to the left (Ruben Bridgewater) #60470 - [
edc3033905] - sqlite,doc: fix StatementSync section (Edy Silva) #60474 - [
e9b68e60d4] - src: move import.meta initializer to native land (Joyee Cheung) #60603 - [
0ebf839a4f] - src: use CP_UTF8 for wide file names on win32 (Fedor Indutny) #60575 - [
a31ad37714] - src: show original file name in FileHandle GC close errors (Anna Henningsen) #60593 - [
a6c221324b] - src: avoid C strings in more C++ exception throws (Anna Henningsen) #60592 - [
fdff838ce3] - src: add internal binding for constructing SharedArrayBuffers (Renegade334) #60497 - [
4385b0b65f] - src: movenapi_addon_register_functonode_api_types.h(Anna Henningsen) #60512 - [
de78da7887] - src: move Node-API version detection to where it is used (Anna Henningsen) #60512 - [
b606d46c3f] - src: remove unconditional NAPI_EXPERIMENTAL in node.h (Chengzhong Wu) #60345 - [
5941341889] - src: clean up generic counter implementation (Anna Henningsen) #60447 - [
7015f30e62] - src: add enum handle for ToStringHelper + formatting (Burkov Egor) #56829 - [
39dfcbad6e] - stream: don't try to read more if reading (Robert Nagy) #60454 - [
ee333c9177] - test: deflake test-perf-hooks-timerify-histogram-sync (Joyee Cheung) #60639 - [
f0d81c91e7] - test: apply a delay towatch-mode-kill-signaltests (Joyee Cheung) #60610 - [
68791e2ccc] - test: async iife in repl (Tony Gorez) #44878 - [
c4eb9c3383] - test: parallelize sea tests when there's enough disk space (Joyee Cheung) #60604 - [
be8c4172d9] - test: only show overridden env in child process failures (Joyee Cheung) #60556 - [
8cae858f88] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60498 - [
759d69331e] - test: ensure assertions are reachable intest/es-module(Antoine du Hamel) #60501 - [
6aaf18c333] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60485 - [
bc41acf087] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60500 - [
22fd621daf] - test: split test-perf-hooks-timerify (Joyee Cheung) #60568 - [
5efe4f722e] - test: add more logs to test-esm-loader-hooks-inspect-wait (Joyee Cheung) #60466 - [
2a57268f34] - test: mark stringbytes-external-exceed-max tests as flaky on AIX (Joyee Cheung) #60565 - [
2c199f7f61] - test: split test-esm-wasm.js (Joyee Cheung) #60491 - [
bc8f7db5bb] - test: correct conditional secure heap flags test (Shelley Vohr) #60385 - [
3bf42a5dd3] - test: spin longer on flaky platforms for test-worker-prof (Joyee Cheung) #60492 - [
eca6227e7e] - test: ensure assertions are reachable intest/internet(Antoine du Hamel) #60513 - [
313983453b] - test: fix flaky test-watch-mode-kill-signal-* (Joyee Cheung) #60443 - [
ccc26377b5] - test: capture stack trace in debugger timeout errors (Joyee Cheung) #60457 - [
12e9213a24] - test: ensure assertions are reachable intest/sequential(Antoine du Hamel) #60412 - [
781a2661de] - test: ensure assertions are reachable in more folders (Antoine du Hamel) #60411 - [
1e979e6eb7] - test: split test-runner-watch-mode (Joyee Cheung) #60391 - [
8c31cbb99b] - test: move test-runner-watch-mode helper into common (Joyee Cheung) #60391 - [
c94c6555cc] - test,crypto: handle a few more BoringSSL tests (Shelley Vohr) #59030 - [
fd63c27444] - test,crypto: update x448 and ed448 expectation when on boringssl (Shelley Vohr) #60387 - [
bf0de92446] - tls: fix leak on invalid protocol method (Shelley Vohr) #60427 - [
7e8373b378] - tools: replace invalid expression in dependabot config (Riddhi) #60649 - [
ac08760547] - tools: extract Nix dependency lists to separate files (Antoine du Hamel) #60495 - [
ae91a6cc3a] - tools: only add test reporter args when node:test is used (Joyee Cheung) #60551 - [
97ed560222] - tools: skip unaffected GHA jobs for changes intest/internet(Antoine du Hamel) #60517 - [
44ca97b404] - tools: fix update-icu script (Michaël Zasso) #60521 - [
07b0b5a5ba] - tools: fix linter for semver-major release proposals (Antoine du Hamel) #60481 - [
97d74224c3] - tools: fix failing release-proposal linter for LTS transitions (Antoine du Hamel) #60465 - [
019af5bc27] - tools: skip running test-shared on deps changes (Antoine du Hamel) #60433 - [
3ec9764151] - tools: pin OpenSSL to 3.5.4 on test-shared workflow (Antoine du Hamel) #60428 - [
fe2d6d44d4] - tools: remove undici from daily wpt.fyi job (Filip Skokan) #60444 - [
d09ba98398] - tools: document that nixpkgs updates should not be backported (Antoine du Hamel) #60431 - [
7fc99319e7] - tools: do not use short hashes for deps versioning to avoid collision (Antoine du Hamel) #60407 - [
815edb0c3a] - tools,doc: update JavaScript primitive types to match MDN Web Docs (JustApple) #60581 - [
6877139a2d] - util: fix stylize of special properties in inspect (Ge Gao) #60479 - [
399b340022] - (SEMVER-MINOR) v8: adding total_allocated_bytes to HeapStatistics (Caio Lima) #60573 - [
d64795b318] - watch: fix interaction with multiple env files (Marco Ippolito) #60605
2025-11-11, Version 24.11.1 'Krypton' (LTS), @aduh95
The known issue relating to Buffer.allocUnsafe incorrectly zero-filling buffers has now been addressed and now returns uninitialized memory as documented in the Buffer.allocUnsafe documentation.
- [
0a15ccf3f4] - benchmark: improve cpu.sh for safety and usability (Nam Yooseong) #60162 - [
a1c7d1dac9] - benchmark: add benchmark for leaf source text modules (Joyee Cheung) #60205 - [
99e2acf46b] - benchmark: add vm.SourceTextModule benchmark (Joyee Cheung) #59396 - [
c01c72b407] - benchmark: use non-deprecated WriteUtf8V2 method (Michaël Zasso) #60173 - [
a42dbd138e] - build: ibmi follow aix visibility (SRAVANI GUNDEPALLI) #60360 - [
5673a54a5d] - build: use call command when calling python configure (Jacob Nichols) #60098 - [
c67cb727cb] - build: build v8 with -fvisibility=hidden -fvisibility-inlines-hidden (Joyee Cheung) #56290 - [
b03f7b93b1] - build: remove V8_COMPRESS_POINTERS_IN_ISOLATE_CAGE defs (Joyee Cheung) #60296 - [
2505568531] - build, src: fix include paths for vtune files (Rahul) #59999 - [
95330b036f] - crypto: update root certificates to NSS 3.116 (Node.js GitHub Bot) #59956 - [
c221d892ef] - deps: update corepack to 0.34.2 (Node.js GitHub Bot) #60550 - [
bc00aa4c77] - deps: update simdjson to 4.0.7 (Node.js GitHub Bot) #59883 - [
d03b89ec53] - deps: update corepack to 0.34.1 (Node.js GitHub Bot) #60314 - [
b7882090de] - deps: update inspector_protocol to af7f5a8173fdbc29f0835ec94395932e328b (Node.js GitHub Bot) #60312 - [
7007f9dd65] - deps: update googletest to 279f847 (Node.js GitHub Bot) #60219 - [
a56aa9ffa8] - deps: upgrade npm to 11.6.2 (npm team) #60168 - [
0bf8952721] - doc: mention more codemods indeprecations.md(Augustin Mauroy) #60243 - [
2473ca77f6] - doc: add missing CAA type to dns.resolveAny() & dnsPromises.resolveAny() (Jimmy Leung) #58899 - [
39ddd8522e] - doc: useanyforworker_threads.Worker'error' event argumenterr(Jonas Geiler) #60300 - [
eaa825fd97] - doc: update decorator documentation to reflect actual policy (Muhammad Salman Aziz) #60288 - [
a744e42282] - doc: document wildcard supported by tools/test.py (Joyee Cheung) #60265 - [
ec0d5beb09] - doc: add --heap-snapshot-on-oom to useful v8 flag (jakecastelli) #60260 - [
13da0df12a] - doc: fixblob.bytes()heading level (XTY) #60252 - [
8e771632b7] - doc: fix not working code example in vm docs (Artur Gawlik) #60224 - [
70c2080bff] - doc: improve code snippet alternative of url.parse() using WHATWG URL (Steven) #60209 - [
beadcf176e] - doc:createSQLTagStore->createTagStore(Aviv Keller) #60182 - [
b0da3b9c6a] - doc: use markdown when branch-diff major release (Rafael Gonzaga) #60179 - [
688115aa6b] - doc: update teams in collaborator-guide.md and add links (Bart Louwers) #60065 - [
923082a064] - doc: disambiguate top-levelworker_threadsmodule exports (René) #59890 - [
7be4330870] - doc: add known issue to v24.11.0 release notes (Richard Lau) #60467 - [
4d8f62aeaf] - doc, module: change async customization hooks to experimental (Gerhard Stöbich) #60302 - [
d86a118bbd] - http: lazy allocate cookies array (Robert Nagy) #59734 - [
8c256d4139] - http: fix http client leaky with double response (theanarkh) #60062 - [
265e9d59fa] - http2: rename variable to additionalPseudoHeaders (Tobias Nießen) #60208 - [
65bec037e2] - http2: do not crash on mismatched ping buffer length (René) #60135 - [
9b83ef53b7] - inspector: add network payload buffer size limits (Chengzhong Wu) #60236 - [
03ac05c458] - inspector: support handshake response for websocket inspection (Shima Ryuhei) #60225 - [
aa04f06190] - lib: fix typo in createBlobReaderStream (SeokHun) #60132 - [
5aea1a429e] - lib: fix constructor in _errnoException stack tree (SeokHun) #60156 - [
4f7745acc7] - lib: fix typo in QuicSessionStats (SeokHun) #60155 - [
f8725861ea] - lib: remove redundant destroyHook checks (Gürgün Dayıoğlu) #60120 - [
696c20bf3f] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #60325 - [
90434ff99a] - meta: loop userland-migrations in deprecations (Chengzhong Wu) #60299 - [
ffbc0ae60a] - module: refactor and clarify async loader hook customizations (Joyee Cheung) #60278 - [
6ed6062f7d] - module: handle null source from async loader hooks in sync hooks (Joyee Cheung) #59929 - [
a2871baed2] - msi: fix WiX warnings (Stefan Stojanovic) #60251 - [
6199541d67] - src: fix timing of snapshot serialize callback (Joyee Cheung) #60434 - [
13b687959a] - src: add COUNT_GENERIC_USAGE utility for tests (Joyee Cheung) #60434 - [
a587623b4f] - src: conditionally disable source phase imports by default (Shelley Vohr) #60364 - [
e483267995] - src: use cached primordials_string (Sohyeon Kim) #60255 - [
4c9a64fbaf] - src: replace Environment::GetCurrent with args.GetIsolate (Sohyeon Kim) #60256 - [
eb8a0493d1] - src: initial enablement of IsolateGroups (James M Snell) #60254 - [
463c6450cf] - src: useUtf8ValueandTwoByteValueinstead of V8 helpers (Anna Henningsen) #60244 - [
b370e02789] - src: add a default branch for module phase (Chengzhong Wu) #60261 - [
4e1c5c5601] - src: make additional cleanups in node locks impl (James M Snell) #60061 - [
f00d4c10fc] - src: update locks to use DictionaryTemplate (James M Snell) #60061 - [
1c8716e97c] - test: increase debugger waitFor timeout on macOS (Chengzhong Wu) #60367 - [
17b4f38e9c] - test: put helper in test-runner-output into common (Joyee Cheung) #60330 - [
43b9ea8389] - test: fix small compile warning in test_network_requests_buffer.cc (xiaocainiao633) #60281 - [
38a62980ad] - test: split test-runner-watch-mode-kill-signal (Joyee Cheung) #60298 - [
34e4c8c84f] - test: fix incorrect calculation in test-perf-hooks.js (Joyee Cheung) #60271 - [
4481feb17b] - test: parallelize test-without-async-context-frame correctly (Joyee Cheung) #60273 - [
91ea9b06e0] - test: skip sea tests on x64 macOS (Joyee Cheung) #60250 - [
cedba09e60] - test: move sea tests into test/sea (Joyee Cheung) #60250 - [
635af55e12] - Revert "test: ensure message event fires in worker message port test" (Luigi Pinca) #60126 - [
68f678028e] - test: skip tests that cause timeouts on IBM i (SRAVANI GUNDEPALLI) #60148 - [
cc3a70598c] - test: deflake test-fs-promises-watch-iterator (Luigi Pinca) #60060 - [
3d784dd766] - test: prepare junit file attribute normalization (sangwook) #59432 - [
84974d97ad] - test: skip failing test on macOS 15.7+ (Antoine du Hamel) #60419 - [
fabf8e4975] - test,crypto: fix conditional SHA3-* skip on BoringSSL (Filip Skokan) #60379 - [
8faa494bf2] - test,crypto: sha3 algorithms aren't supported with BoringSSL (Shelley Vohr) #60374 - [
538a00c0f6] - test,doc: skip --max-old-space-size-percentage on 32-bit platforms (Asaf Federman) #60144 - [
9ac5dbb694] - test_runner: use module.registerHooks in module mocks (Joyee Cheung) #60326 - [
f6ff6e7166] - test_runner: fix suite timeout (Moshe Atlow) #59853 - [
455bfeb52d] - test_runner: add junit file attribute support (sangwook) #59432 - [
223c5e105d] - tools: update gyp-next to 0.20.5 (Node.js GitHub Bot) #60313 - [
2949408fc1] - tools: limit inspector protocol PR title length (Chengzhong Wu) #60324 - [
b36a898650] - tools: fix inspector_protocol updater (Chengzhong Wu) #60277 - [
d60f002b62] - tools: optimize wildcard execution in tools/test.py (Joyee Cheung) #60266 - [
9d4e422419] - tools: add inspector_protocol updater (Chengzhong Wu) #60245 - [
2f93a9894f] - tools: use cooldown property correctly (Rafael Gonzaga) #60134 - [
9468ade95d] - typings: add missing properties and method in Worker (Woohyun Sung) #60257 - [
f611ec0a9e] - typings: add missing properties in HTTPParser (Woohyun Sung) #60257 - [
301c1347a1] - typings: delete undefined property in ConfigBinding (Woohyun Sung) #60257 - [
80fdb3d39b] - typings: add buffer internalBinding typing (방진혁) #60163 - [
8cb3b77039] - util: use more defensive code when inspecting error objects (Antoine du Hamel) #60139 - [
748d4f6430] - util: mark special properties when inspecting them (Ruben Bridgewater) #60131 - [
6183a759d7] - vm: make vm.Module.evaluate() conditionally synchronous (Joyee Cheung) #60205 - [
4b8506628f] - win: upgrade Visual Studio workload from 2019 to 2022 (Jiawen Geng) #60318
2025-10-28, Version 25.1.0 (Current), @aduh95
- [
4395fe14b9] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #59778 - [
2e55c6ad04] - (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers) #60217 - [
f437204491] - (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito) #60178
- [
bb27766bd5] - benchmark: improve cpu.sh for safety and usability (Nam Yooseong) #60162 - [
e600711c20] - benchmark: add benchmark for leaf source text modules (Joyee Cheung) #60205 - [
1bbcdf9039] - benchmark: add vm.SourceTextModule benchmark (Joyee Cheung) #59396 - [
22fa6bd28b] - build: ibmi follow aix visibility (SRAVANI GUNDEPALLI) #60360 - [
931028400e] - build: use call command when calling python configure (Jacob Nichols) #60098 - [
17fde3f3d1] - build: build v8 with -fvisibility=hidden -fvisibility-inlines-hidden (Joyee Cheung) #56290 - [
04cc7aae5e] - build: remove V8_COMPRESS_POINTERS_IN_ISOLATE_CAGE defs (Joyee Cheung) #60296 - [
8a2053060d] - crypto: update root certificates to NSS 3.116 (Node.js GitHub Bot) #59956 - [
fe91c0f755] - deps: update simdjson to 4.0.7 (Node.js GitHub Bot) #59883 - [
aacfc0d212] - deps: update corepack to 0.34.1 (Node.js GitHub Bot) #60314 - [
8596891a71] - deps: update inspector_protocol to af7f5a8173fdbc29f0835ec94395932e328b (Node.js GitHub Bot) #60312 - [
21bcd0eb2f] - deps: V8: cherry-pick 3d0f462a17ff (Joyee Cheung) #59396 - [
673558501c] - deps: update googletest to 279f847 (Node.js GitHub Bot) #60219 - [
425a1879b1] - doc: mention more codemods indeprecations.md(Augustin Mauroy) #60243 - [
563e1317f3] - doc: remove unnecessary statement of web storage (Deokjin Kim) #60363 - [
064c8c5cfd] - doc: add missing CAA type to dns.resolveAny() & dnsPromises.resolveAny() (Jimmy Leung) #58899 - [
99e357af35] - doc: useanyforworker_threads.Worker'error' event argumenterr(Jonas Geiler) #60300 - [
8ccff0d934] - doc: update decorator documentation to reflect actual policy (Muhammad Salman Aziz) #60288 - [
bac70c6ef3] - doc: document wildcard supported by tools/test.py (Joyee Cheung) #60265 - [
8492bc6a88] - doc: add --heap-snapshot-on-oom to useful v8 flag (jakecastelli) #60260 - [
0f0d3c0e47] - doc: fixblob.bytes()heading level (XTY) #60252 - [
8c8525cf93] - doc: fix not working code example in vm docs (Artur Gawlik) #60224 - [
8a6de3866c] - doc, assert: correct order of changes entries (Gerhard Stöbich) #60304 - [
6bacb6555a] - doc, module: change async customization hooks to experimental (Gerhard Stöbich) #60302 - [
6f3b16df16] - esm: use index-based resolution callbacks (Joyee Cheung) #59396 - [
95644a432c] - http: lazy allocate cookies array (Robert Nagy) #59734 - [
4395fe14b9] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #59778 - [
f1aa1eaaf5] - inspector: add network payload buffer size limits (Chengzhong Wu) #60236 - [
64fc625bf9] - inspector: support handshake response for websocket inspection (Shima Ryuhei) #60225 - [
0ecbb806a8] - lib: fix typo in createBlobReaderStream (SeokHun) #60132 - [
ffec5927fd] - meta: fix typo in test-shared workflow name (Ronit Sabhaya) #60321 - [
a02897e157] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #60325 - [
59223a7831] - meta: loop userland-migrations in deprecations (Chengzhong Wu) #60299 - [
2d48d17696] - module: refactor and clarify async loader hook customizations (Joyee Cheung) #60278 - [
be1b84fd93] - module: handle null source from async loader hooks in sync hooks (Joyee Cheung) #59929 - [
063fbd87d3] - msi: fix WiX warnings (Stefan Stojanovic) #60251 - [
2e55c6ad04] - (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers) #60217 - [
dc93d6988a] - src: fix timing of snapshot serialize callback (Joyee Cheung) #60434 - [
267e1b3817] - src: add COUNT_GENERIC_USAGE utility for tests (Joyee Cheung) #60434 - [
4a5d7a4c2a] - src: conditionally disable source phase imports by default (Shelley Vohr) #60364 - [
f437204491] - (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito) #60178 - [
36837fa0f9] - src: use cached primordials_string (Sohyeon Kim) #60255 - [
df8396ad37] - src: replace Environment::GetCurrent with args.GetIsolate (Sohyeon Kim) #60256 - [
5dd670b2b9] - src: initial enablement of IsolateGroups (James M Snell) #60254 - [
afdb362933] - src: useUtf8ValueandTwoByteValueinstead of V8 helpers (Anna Henningsen) #60244 - [
a40e533e72] - src: add a default branch for module phase (Chengzhong Wu) #60261 - [
42729f07ee] - src: stop using deprecated v8::Context::GetIsolate (Michaël Zasso) #60223 - [
7a6542c205] - test: skip failing test on macOS 15.7+ (Antoine du Hamel) #60419 - [
29a5855a4f] - test: ensure assertions are reachable intest/addons(Antoine du Hamel) #60142 - [
12773d19c4] - test: increase debugger waitFor timeout on macOS (Chengzhong Wu) #60367 - [
0b38de3e9e] - test: put helper in test-runner-output into common (Joyee Cheung) #60330 - [
6de2407c44] - test: fix small compile warning in test_network_requests_buffer.cc (xiaocainiao633) #60281 - [
4b23ac8613] - test: fix status when compiled without inspector (Antoine du Hamel) #60289 - [
a07f32e326] - test: split test-runner-watch-mode-kill-signal (Joyee Cheung) #60298 - [
30451d32d7] - test: fix incorrect calculation in test-perf-hooks.js (Joyee Cheung) #60271 - [
e3c3b48f1c] - test: ignore EPIPE errors in https proxy invalid URL test (Joyee Cheung) #60269 - [
405a9c4c5f] - test: parallelize test-without-async-context-frame correctly (Joyee Cheung) #60273 - [
ffeebebc71] - test: make test-worker-prof more tolerant (Joyee Cheung) #60272 - [
26b01bf170] - test: skip sea tests on x64 macOS (Joyee Cheung) #60250 - [
8caae1a05b] - test: move sea tests into test/sea (Joyee Cheung) #60250 - [
3d183e3e9f] - test,crypto: fix conditional SHA3-* skip on BoringSSL (Filip Skokan) #60379 - [
e83dbcba94] - test,crypto: sha3 algorithms aren't supported with BoringSSL (Shelley Vohr) #60374 - [
3d89331496] - test_runner: use module.registerHooks in module mocks (Joyee Cheung) #60326 - [
377e8ce85a] - tls: avoid external memory leak on invalid protocol versions (Shelley Vohr) #60390 - [
ae4858c1f6] - tools: add an option to generate lighter archives (Antoine du Hamel) #60294 - [
cb615b1a2e] - tools: skip test-shared workflow for draft PRs (Michaël Zasso) #60365 - [
03b034731e] - tools: disable inspector on macOS-shared to reduce flakiness (Antoine du Hamel) #60320 - [
f402b4e1d1] - tools: show diff alongside the error in Nix linter (Antoine du Hamel) #60301 - [
5d5c8483fb] - tools: run CI with shared libs on GHA (Antoine du Hamel) #60121 - [
e8fdd8d2e8] - tools: update gyp-next to 0.20.5 (Node.js GitHub Bot) #60313 - [
6e8b029a21] - tools: limit inspector protocol PR title length (Chengzhong Wu) #60324 - [
a5073086c6] - tools: fix inspector_protocol updater (Chengzhong Wu) #60277 - [
47fa765bff] - tools: optimize wildcard execution in tools/test.py (Joyee Cheung) #60266 - [
11ebb0447d] - tools: add C++ lint rule to avoid usingString::Utf8Value(Anna Henningsen) #60244 - [
14f3189670] - tools: add inspector_protocol updater (Chengzhong Wu) #60245 - [
ef4c596fc6] - typings: add missing properties and method in Worker (Woohyun Sung) #60257 - [
09ae6fc065] - typings: add missing properties in HTTPParser (Woohyun Sung) #60257 - [
9ecaf41f8e] - typings: delete undefined property in ConfigBinding (Woohyun Sung) #60257 - [
4a86016e86] - util: use more defensive code when inspecting error objects (Antoine du Hamel) #60139 - [
9e6d6cec59] - util: mark special properties when inspecting them (Ruben Bridgewater) #60131 - [
79b2387fd9] - vm: make vm.Module.evaluate() conditionally synchronous (Joyee Cheung) #60205 - [
e5559f3be3] - win: upgrade Visual Studio workload from 2019 to 2022 (Jiawen Geng) #60318