chore(deps): update node.js to v24 #590
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
e427439 to
97762c7
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
2 times, most recently
from
73477b7 to
bf083f4
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
bf083f4 to
bf548dc
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
bf548dc to
ef1f157
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
ef1f157 to
e93b4d1
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
e93b4d1 to
790a8fe
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
790a8fe to
64a65ac
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
64a65ac to
5da9c8e
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
5da9c8e to
c29f1b4
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
c29f1b4 to
f340608
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
f340608 to
ccd297a
Compare
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
ccd297a to
62b1a05
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot].This notice will be removed on 2025-10-07.
This PR contains the following updates:
23.11.1-alpine->24.9.0-alpineWarning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
nodejs/node (node)
v24.9.0: 2025-09-25, Version 24.9.0 (Current), @targosCompare Source
Notable Changes
9b043a9096] - (SEMVER-MINOR) http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) #59824a6456ab90a] - (SEMVER-MINOR) sqlite: cleanup ERM support and export Session class (James M Snell) #583785563361d22] - (SEMVER-MINOR) sqlite: add tagged template (0hm☘️) #5874804013ee933] - (SEMVER-MINOR) worker: add heap profile API (theanarkh) #59846Commits
cbec4fd6de] - benchmark: calibrate config dgram multi-buffer (Bruno Rodrigues) #596969a4bbdc3c5] - benchmark: calibrate config cluster/echo.js (Nam Yooseong) #598360b284d86e8] - build: add the missing macro definitions for OpenHarmony (hqzing) #5980443e6e54d66] - build: do not include custom ESLint rules testing in tarball (Antoine du Hamel) #59809039ac19154] - crypto: expose signatureAlgorithm on X509Certificate (Patrick Costa) #59235647c332704] - crypto: usereturn awaitwhen returning Promises from async functions (Renegade334) #598418ed4587cf0] - crypto: use async functions for non-stub Promise-returning functions (Renegade334) #59841bb051c56ef] - crypto: avoid calls topromise.catch()(Renegade334) #5984105e560dd25] - deps: update googletest to50b8600(Node.js GitHub Bot) #59955fa40d3a785] - deps: update archs files for openssl-3.5.3 (Node.js GitHub Bot) #599018c85570d18] - deps: upgrade openssl sources to openssl-3.5.3 (Node.js GitHub Bot) #59901b71125664e] - deps: update undici to 7.16.0 (Node.js GitHub Bot) #59830dea5dd7077] - dgram: restore buffer optimization in fixBufferList (Yoo) #59934b0c1e67532] - diagnostics_channel: fix race condition with diagnostics_channel and GC (Ugaitz Urien) #599100b37b594c3] - doc: use "WebAssembly" instead of "Web Assembly" (Tobias Nießen) #599541e723f9c6b] - doc: fix typo in section on microtask order (Tobias Nießen) #59932a28962a85c] - doc: update V8 fast API guidance (René) #58999bd767c5d1b] - doc: add security escalation policy (Ulises Gascón) #598069df91e59e1] - doc: type improvement of filehttp.md(yusheng chen) #58189e4f571680b] - doc: deprecate closingfs.Diron garbage collection (Livia Medeiros) #59839e9cb986fa5] - doc: rephrase dynamic import() description (Nam Yooseong) #59224026d4e33f7] - doc,crypto: update subtle.generateKey and subtle.importKey (Filip Skokan) #598512b2591db52] - esm: make hasAsyncGraph non-enumerable (Joyee Cheung) #59905993f05d323] - fs,win: do not add a second trailing slash in readdir (Gerhard Stöbich) #598477aec53b607] - (SEMVER-MINOR) http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) #5982483ae6102e7] - http: optimize checkIsHttpToken for short strings (방진혁) #598326695067636] - http,https: handle IPv6 with proxies (Joyee Cheung) #59894c5d910a0a9] - http2: fix allowHttp1+Upgrade, broken by shouldUpgradeCallback (Tim Perry) #59924acada1fb82] - inspector: ensure adequate memory allocation forBinary::toBase64(René) #59870396cc8ec65] - lib: update inspect output format for subclasses (Miguel Marcondes Filho) #59687fed1dac8de] - lib: update isDeepStrictEqual to support options (Miguel Marcondes Filho) #59762d785929fd7] - lib: add source map support for assert messages (Chengzhong Wu) #59751ff13d1d61e] - lib,src: cache ModuleWrap.hasAsyncGraph (Chengzhong Wu) #59703b200cd8470] - lib,src: refactor assert to load error source from memory (Chengzhong Wu) #59751e94c57301b] - meta: add .npmrc with ignore-scripts=true (Joyee Cheung) #59914728472a57b] - module: only put directly require-d ESM into require.cache (Joyee Cheung) #59874be48760b93] - node-api: added SharedArrayBuffer api (Mert Can Altin) #59071f006a14522] - node-api: make napi_delete_reference use node_api_basic_env (Jeetu Suthar) #596840f46c1c3b0] - repl: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater) #598573eeb7b47ea] - sqlite: fix crash session extension callbacks with workers (Bart Louwers) #598480fe53375ec] - (SEMVER-MINOR) sqlite: cleanup ERM support and export Session class (James M Snell) #583789a3e58a007] - (SEMVER-MINOR) sqlite: add tagged template (0hm☘️) #58748f14ed5ab7b] - src: simplify watchdog instantiations viastd::optional(Anna Henningsen) #59960e330f03f84] - src: update crypto objects to use DictionaryTemplate (James M Snell) #5994269b5607cf4] - src: simplify is_callable by making it a concept (Tobias Nießen) #5816986150f3401] - src: rename private fields to follow naming convention (Moonki Choi) #59923d17f299539] - src: use DictionaryTemplate more in URLPattern (James M Snell) #59892ac784912ac] - src: reduce the nearest parent package JSON cache size (Michael Smith) #59888abecdcb536] - src: replace FIXED_ONE_BYTE_STRING with Environment-cached strings (Moonki Choi) #598912bb152500b] - src: create strings inFIXED_ONE_BYTE_STRINGas internalized (Anna Henningsen) #5982603116a7cd8] - src: removestd::arrayoverload ofFIXED_ONE_BYTE_STRING(Anna Henningsen) #598268a5325d6e3] - src: ensurev8::Eternalis empty before setting it (Anna Henningsen) #59825f0c20ccd81] - src: remove unnecessaryEnvironment::GetCurrent()calls (Moonki Choi) #59814213188e491] - stream: use new AsyncResource instead of bind (Matteo Collina) #59867ce8435b003] - test: testcase demonstrating issue 59541 (Eric Rannaud) #598018f32746142] - test: guard write to proxy client if proxy connection is ended (Joyee Cheung) #597426790093fcb] - tls: load bundled and extra certificates off-thread (Joyee Cheung) #59856f5d3f919d8] - tls: only do off-thread certificate loading on loading tls (Joyee Cheung) #5985687bbaa23a0] - tools: fixtools/make-v8.shfor clang (Richard Lau) #598930d23fd525b] - tools: skip test-internet workflow for draft PRs (Michaël Zasso) #59817e17c73731a] - tools: copyeditbuild-tarball.yml(Antoine du Hamel) #5980897c4e1bac9] - typings: remove unused imports (Nam Yooseong) #598808b29bbca76] - url: replaced slice with at (Mikhail) #591816458867a6b] - url: add type checking to urlToHttpOptions() (simon-id) #597533c62b3886f] - util: inspect objects with throwing Symbol.toStringTag (Ruben Bridgewater) #598606133a82875] - util: fix debuglog.enabled not being present with callback logger (Ruben Bridgewater) #598589347ddddf4] - vm: explain how to share promises between contexts w/ afterEvaluate (Eric Rannaud) #5980144ce971619] - vm: "afterEvaluate", evaluate() return a promise from the outer context (Eric Rannaud) #598016e586a1409] - vm: expose hasTopLevelAwait on SourceTextModule (Chengzhong Wu) #5986549747a58a3] - (SEMVER-MINOR) worker: add heap profile API (theanarkh) #59846b970c0bbc2] - zlib: reduce code duplication (jhofstee) #578109782ca2b1b] - zlib: implement fast path for crc32 (Gürgün Dayıoğlu) #59813v24.8.0: 2025-09-10, Version 24.8.0 (Current), @targosCompare Source
Notable Changes
HTTP/2 Network Inspection Support in Node.js
Node.js now supports inspection of HTTP/2 network calls in Chrome DevTools for Node.js.
Usage
Write a
test.jsscript that makes HTTP/2 requests.Run it with these options:
Open
about:inspecton Google Chrome and click onOpen dedicated DevTools for Node.The
Networktab will let you track your HTTP/2 calls.Contributed by Darshan Sen in #59611.
Other Notable Changes
7a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #59537d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428Commits
d913872369] - assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong) #595787bbbcf6666] - benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues) #5970944d7b92271] - benchmark: calibrate config array-vs-concat (Rafael Gonzaga) #595877f347fc551] - build: fix getting OpenSSL version on Windows (Michaël Zasso) #596094a317150d5] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #59547bda32af587] - build: usewindows-2025runner (Michaël Zasso) #59673a4a8ed8f6e] - build: compile bundled uvwasi conditionally (Carlo Cabrera) #59622d944a87761] - crypto: refactor subtle methods to use synchronous import (Filip Skokan) #597717a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #595370d1e53d935] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #5979168732cf426] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #59689f12c1ad961] - deps: update googletest toeb2d85e(Node.js GitHub Bot) #5933545af6966ae] - deps: upgrade npm to 11.6.0 (npm team) #5975057617244a4] - deps: V8: cherry-pick6b1b9bc(Xiao-Tao) #592832e6225a747] - deps: update amaro to 1.1.2 (Node.js GitHub Bot) #596161f7f6dfae6] - diagnostics_channel: revoke DEP0163 (René) #597588671a6cdb3] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707583b1b255d] - doc: update OpenSSL default security level to 2 (Jeetu Suthar) #597239b5eb6eb50] - doc: fix missing links in theerrorspage (Nam Yooseong) #59427e7bf712c57] - doc: update "Type stripping in dependencies" section (Josh Kelley) #5965296db47f91e] - doc: add Miles Guicent as triager (Miles Guicent) #5956287f829bd0c] - doc: markpath.matchesGlobas stable (Aviv Keller) #59572062b2f705e] - doc: improve documentation for raw headers in HTTP/2 APIs (Tim Perry) #596336ab9306370] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #59579c8d6b60da6] - doc: fix quic session instance typo (jakecastelli) #5964261d0a2d1ba] - doc: fix filehandle.read typo (Ruy Adorno) #596353276bfa0d0] - doc: update migration recomendations forutil.is**()deprecations (Augustin Mauroy) #5926911de6c7ebb] - doc: fix missing link to the Error documentation in thehttppage (Alexander Makarenko) #59080f5b6829bba] - doc,crypto: add description to the KEM and supports() methods (Filip Skokan) #596445bfdc7ee74] - doc,crypto: cleanup unlinked and self method references webcrypto.md (Filip Skokan) #59608010458d061] - esm: populate separate cache for require(esm) in imported CJS (Joyee Cheung) #59679dbe6e63baf] - esm: fix missed renaming in ModuleJob.runSync (Joyee Cheung) #597248eb0d9d834] - fs: fix wrong order of file names in cpSync error message (Nicholas Paun) #59775e69be5611f] - fs: fix dereference: false on cpSync (Nicholas Paun) #596812865d2ac20] - http: unbreak keepAliveTimeoutBuffer (Robert Nagy) #59784ade1175475] - http: use cached '1.1' http version string (Robert Nagy) #5971774a09482de] - inspector: undici as shared-library should pass tests (Aras Abbasi) #59837772f8f415a] - inspector: add http2 tracking support (Darshan Sen) #596113d225572d7] - Revert "lib: optimize writable stream buffer clearing" (Yoo) #597434fd213ce73] - lib: fix isReadable and isWritable return type value (Gabriel Quaresma) #5908939befddb87] - lib: prefer TypedArrayPrototype primordials (Filip Skokan) #597660748160d2e] - lib: fix DOMException subclass support (Chengzhong Wu) #596801a93df808c] - lib: revert to using default derived class constructors (René) #59650bb0755df37] - meta: bumpcodecov/codecov-action(dependabot[bot]) #5972645d148d9be] - meta: bump actions/download-artifact from 4.3.0 to 5.0.0 (dependabot[bot]) #5972901b66b122e] - meta: bump github/codeql-action from 3.29.2 to 3.30.0 (dependabot[bot]) #5972834f7ab5502] - meta: bump actions/cache from 4.2.3 to 4.2.4 (dependabot[bot]) #597275806ea02af] - meta: bump actions/checkout from 4.2.2 to 5.0.0 (dependabot[bot]) #59725f667215583] - path: refactor path joining logic for clarity and performance (Lee Jiho) #597810340fe92a6] - repl: do not cause side effects in tab completion (Anna Henningsen) #59774a414c1eb51] - repl: fix REPL completion under unary expressions (Kingsword) #59744c206f8dd87] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #596070bf9775ee2] - sea: implement sea.getAssetKeys() (Joyee Cheung) #59661bf26b478d8] - sea: allow using inspector command line flags with SEA (Joyee Cheung) #5956892128a8fe2] - src: use DictionaryTemplate for node_url_pattern (James M Snell) #59802bcb29fb84f] - src: correctly report memory changes to V8 (Yaksh Bariya) #5962344c24657d3] - src: fixup node_messaging error handling (James M Snell) #597922cd6a3b7ec] - src: track async resources via pointers to stack-allocated handles (Anna Henningsen) #5970434d752586f] - src: fix build on NetBSD (Thomas Klausner) #5971815fa779ac5] - src: fix race on process exit and off thread CA loading (Chengzhong Wu) #5963215cbd3966a] - src: separate module.hasAsyncGraph and module.hasTopLevelAwait (Joyee Cheung) #5967588d1ca8990] - src: use non-deprecated Get/SetPrototype methods (Michaël Zasso) #5967156ac9a2d46] - src: migrate WriteOneByte to WriteOneByteV2 (Chengzhong Wu) #596343d88aa9f2f] - src: remove duplicate code (theanarkh) #596490718a70b2a] - src: add name for more threads (theanarkh) #596010379a8b254] - src: remove JSONParser (Joyee Cheung) #5961990d0a1b2e9] - src,sqlite: refactor value conversion (Edy Silva) #596595e025c7ca7] - stream: replace manual function validation with validateFunction (방진혁) #59529155a999bed] - test: skip tests failing when run under root (Livia Medeiros) #597796313706c69] - test: update WPT for urlpattern tocff1ac1(Node.js GitHub Bot) #5960241245ad4c7] - test: skip more sea tests on Linux ppc64le (Richard Lau) #59755df63d37ec4] - test: fix internet/test-dns (Michaël Zasso) #596601f6c335e82] - test: mark test-inspector-network-fetch as flaky again (Joyee Cheung) #596401798683df1] - test: skip test-fs-cp* tests that are constantly failing on Windows (Joyee Cheung) #596374c48ec09e5] - test: deflake test-http-keep-alive-empty-line (Luigi Pinca) #59595dcdb259e85] - test_runner: fix todo inheritance (Moshe Atlow) #5972124177973a2] - test_runner: set mock timer's interval undefined (hotpineapple) #5947983d11f8a7a] - tools: print appropriate output when test aborted (hotpineapple) #597941eca2cc548] - tools: use sparse checkout inbuild-tarball.yml(Antoine du Hamel) #5978889fa1a929d] - tools: remove unused actions frombuild-tarball.yml(Antoine du Hamel) #59787794ca3511d] - tools: do not attempt to compress tgz archive (Antoine du Hamel) #59785377bdb9b7e] - tools: add v8windbg target (Chengzhong Wu) #597676696d1d6c9] - tools: improve error handling in node_mksnapshot (James M Snell) #594378dbd0f13e8] - tools: add sccache totest-internetworkflow (Antoine du Hamel) #597206523c2d7d9] - tools: update gyp-next to 0.20.4 (Node.js GitHub Bot) #5969019d633f40c] - tools: add script to make reviewing backport PRs easier (Antoine du Hamel) #5916115e547b3a4] - typings: add typing for 'uv' (방진혁) #59606ad5cfcc901] - typings: add missing properties in ConfigBinding (Lee Jiho) #5958570d2d6d479] - url: add err.input to ERR_INVALID_FILE_URL_PATH (Joyee Cheung) #59730e476e43c17] - util: fix numericSeparator with negative fractional numbers (sangwook) #59379b2e8f40d15] - util: remove unnecessary template strings (btea) #592016f79450ea2] - util: remove outdated TODO comment (haramjeong) #5976032731432ef] - util: use getOptionValue('--no-deprecation') in deprecated() (haramjeong) #5976065e4e68c90] - util: hide duplicated stack frames when using util.inspect (Ruben Bridgewater) #594472086f3365f] - vm: sync-ify SourceTextModule linkage (Chengzhong Wu) #59000c16163511d] - wasi: fixcleantarget intest/wasi/Makefile(Antoine du Hamel) #595762e54411cb6] - worker: optimize cpu profile implement (theanarkh) #59683d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428v24.7.0: 2025-08-27, Version 24.7.0 (Current), @targosCompare Source
Notable Changes
Post-Quantum Cryptography in
node:cryptoOpenSSL 3.5 on 24.x kicked off post-quantum cryptography efforts in Node.js by
allowing use of NIST's post-quantum cryptography standards for future-proofing
applications against quantum computing threats. The following post-quantum
algorithms are now available in
node:crypto:crypto.encapsulate()andcrypto.decapsulate()methods.crypto.sign()andcrypto.verify()methods.Contributed by Filip Skokan in #59259 and #59491.
Modern Algorithms in Web Cryptography API
The second substantial extension to the Web Cryptography API
(
globalThis.crypto.subtle) was recently accepted for incubation by WICG.The following algorithms and methods from this extension are now available in
the Node.js Web Cryptography API implementation:
subtle.getPublicKey()SubtleCrypto.supports()Contributed by Filip Skokan in #59365, #59569, #59461, and #59539.
Node.js execution argument support in single executable applications
The single executable application configuration now supports additional fields
to specify Node.js execution arguments and control how they can be extended when
the application is run.
execArgvtakes an array of strings for the execution arguments to be used.execArgvExtensiontakes one of the following values:"none": No additional execution arguments are allowed."cli": Additional execution arguments can be provided via a special command-line flag--node-options="--flag1 --flag2=value"at run time."env"(default): Additional execution arguments can be provided via theNODE_OPTIONSenvironment variable at run time.For example, with the following configuration:
{ "main": "/path/to/bundled/script.js", "output": "/path/to/write/the/generated/blob.blob", "execArgv": ["--no-warnings"], "execArgvExtension": "cli", }If the generated single executable application is named
sea, then running:sea --node-options="--max-old-space-size=4096" user-arg1 user-arg2Would be equivalent to running:
node --no-warnings --max-old-space-size=4096 /path/to/bundled/script.js user-arg1 user-arg2Contributed by Joyee Cheung in #59314 and #59560.
Root certificates updated to NSS 3.114
Certificates added:
Certificates removed:
Other Notable Changes
d3afc63c44] - (SEMVER-MINOR) crypto: add argon2() and argon2Sync() methods (Ranieri Althoff) #503536ae202fcdf] - (SEMVER-MINOR) http: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) #59315dafee05358] - (SEMVER-MINOR) http2: add support for raw header arrays in h2Stream.respond() (Tim Perry) #594558dc6f5b696] - (SEMVER-MINOR) stream: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) #59464Commits
0fa22cbf7c] - benchmark: calibrate config v8/serialize.js (Rafael Gonzaga) #59586f5ece45b45] - benchmark: reduce readfile-permission-enabled config (Rafael Gonzaga) #595898ebd4f4434] - benchmark: calibrate length of util.diff (Rafael Gonzaga) #595887dee3ffd14] - benchmark: reflect current OpenSSL in crypto key benchmarks (Filip Skokan) #59459027b861ca1] - benchmark, test: replace CRLF variable with string literal (Lee Jiho) #5946689dd770889] - build: do not set-mminimal-tocwithclang(Richard Lau) #59484e13de4542f] - child_process: remove unsafe array iteration (hotpineapple) #5934789fe63551e] - crypto: load system CA certificates off thread (Joyee Cheung) #59550152c5ef518] - (SEMVER-MINOR) crypto: add AES-OCB Web Cryptography algorithm (Filip Skokan) #59539c6c418343d] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #5957118a2ee5b6c] - (SEMVER-MINOR) crypto: support ML-KEM in Web Cryptography (Filip Skokan) #5956972937e5144] - crypto: require HMAC key length with SHA-3 hashes in Web Cryptography (Filip Skokan) #59567b7383186c7] - crypto: fix subtle.getPublicKey error for secret type key inputs (Filip Skokan) #595582d05c046db] - crypto: return cached copies from CryptoKey algorithm and usages getters (Filip Skokan) #59538207ffbeb07] - crypto: use CryptoKey internal slots in Web Cryptography (Filip Skokan) #595384276516781] - crypto: normalize RsaHashedKeyParams publicExponent (Filip Skokan) #5953814741539a7] - (SEMVER-MINOR) crypto: support ML-KEM, DHKEM, and RSASVE key encapsulation mechanisms (Filip Skokan) #59491d3afc63c44] - (SEMVER-MINOR) crypto: add argon2() and argon2Sync() methods (Ranieri Althoff) #503534fe383e45a] - (SEMVER-MINOR) crypto: support ML-DSA spki/pkcs8 key formats in Web Cryptography (Filip Skokan) #59365a95386fbf9] - (SEMVER-MINOR) crypto: subject some algorithms in Web Cryptography on BoringSSL absence (Filip Skokan) #593653f47a2fb63] - (SEMVER-MINOR) crypto: add ChaCha20-Poly1305 Web Cryptography algorithm (Filip Skokan) #593656fcce9058a] - (SEMVER-MINOR) crypto: add subtle.getPublicKey() utility function in Web Cryptography (Filip Skokan) #5936576cde76429] - (SEMVER-MINOR) crypto: add SHA-3 Web Cryptography digest algorithms (Filip Skokan) #59365247d017501] - (SEMVER-MINOR) crypto: add SHAKE Web Cryptography digest algorithms (Filip Skokan) #59365f4fbcca5ce] - (SEMVER-MINOR) crypto: add SubtleCrypto.supports feature detection in Web Cryptography (Filip Skokan) #59365a55382214f] - (SEMVER-MINOR) crypto: support ML-DSA in Web Cryptography (Filip Skokan) #59365c38988c860] - crypto: fix EVPKeyCtxPointer::publicCheck() (Tobias Nießen) #5947161c3bcdc56] - (SEMVER-MINOR) crypto: support ML-KEM KeyObject (Filip Skokan) #594610821b446fb] - deps: update undici to 7.14.0 (Node.js GitHub Bot) #59507b3af17c065] - deps: V8: cherry-pick7b91e3e(Milad Fa) #594859b69baf146] - deps: V8: cherry-pick59d52e3(Milad Fa) #59485b4f202c2f1] - doc: improvesqlite.backup()progress/fulfillment documentation (René) #5959840b217a2f9] - doc: clarify experimental platform vulnerability policy (Matteo Collina) #59591cf84fffea5] - doc: link toTypedArray.from()in signature (Aviv Keller) #592264bf6ed0bf5] - doc: fix typos inenvironment_variables.md(PhistucK) #595361784c35a49] - doc: add security incident reponse plan (Rafael Gonzaga) #59470b962560240] - doc: clarify maxRSS unit inprocess.resourceUsage()(Alex Yang) #59511e6a6cdb9df] - doc: add missing Zstd strategy constants (RANDRIAMANANTENA Narindra Tiana Annaick) #59312a6a31cb467] - (SEMVER-MINOR) doc: compress Web Cryptography Algorithm matrix (Filip Skokan) #593658f8960cfcb] - doc: fix the version tls.DEFAULT_CIPHERS was added (Allon Murienik) #592479e76089f1a] - doc: clarify glob's exclude option behavior (hotpineapple) #59245dd5f835af7] - doc: add RafaelGSS as performance strategic lead (Rafael Gonzaga) #594452b7a7a525e] - doc,crypto: add supported asymmetric key types section (Filip Skokan) #594922fafe4c3bb] - esm: link modules synchronously when no async loader hooks are used (Joyee Cheung) #59519Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.