chore(deps): update node.js to v22.18.0 #536
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![tradeshift-renovate[bot]](https://avatars.githubusercontent.com/in/278004?s=60&v=4){kind=small}
tradeshift-renovate
bot
added
the
dependencies
tssecurity
approved these changes
Aug 1, 2025
tradeshift-renovate
bot
force-pushed
the
renovate/node.js
branch
from
00230f3 to
ff78be8
Compare
tradeshift-renovate
bot
force-pushed
the
renovate/node.js
branch
from
ff78be8 to
23ca3c6
Compare
|
0 New Issues
0 Fixed Issues
0 Accepted Issues
No data about coverage (0.00% Estimated after merge)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
22.17.0->22.18.0Release Notes
nodejs/node (node)
v22.18.0: 2025-07-31, Version 22.18.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
Type stripping is enabled by default
Node.js will be able to execute TypeScript files without additional configuration:
There are some limitations in the supported syntax documented at
https://nodejs.org/api/typescript.html#type-stripping.
This feature is experimental and is subject to change. Disable it by passing
--no-experimental-strip-typesCLI flag.Contributed by Marco Ippolito in #56350.
Other notable changes
26f3711228] - (SEMVER-MINOR) deps: update amaro to 1.1.0 (Node.js GitHub Bot) #56350d80ef2a71f] - (SEMVER-MINOR) doc: add all watch-mode related flags to node.1 (Dario Piotrowicz) #587198ab24d21c9] - doc: add islandryu to collaborators (Shima Ryuhei) #58714430e66b9b8] - (SEMVER-MINOR) esm: implementimport.meta.main(Joe) #5780462f7926b6a] - (SEMVER-MINOR) fs: allow correct handling of burst in fs-events with AsyncIterator (Philipp Dunkel) #5849065f19a00c3] - (SEMVER-MINOR) permission: propagate permission model flags on spawn (Rafael Gonzaga) #58853ccca1517f9] - (SEMVER-MINOR) sqlite: add support forreadBigIntsoption in db connection level (Miguel Marcondes Filho) #5869748003e87e8] - (SEMVER-MINOR) src,permission: add support topermission.has(addon)(Rafael Gonzaga) #58951fe4290a0e6] - (SEMVER-MINOR) url: addfileURLToPathBufferAPI (James M Snell) #587004dc6b4c67a] - (SEMVER-MINOR) watch: add--watch-kill-signalflag (Dario Piotrowicz) #587198dbc6b210f] - (SEMVER-MINOR) worker: makeWorkerasync disposable (James M Snell) #58385Commits
b19ffebea7] - assert: remove dead code (Yoshiya Hinosawa) #587605bc828beae] - benchmark: add source map and source map cache (Miguel Marcondes Filho) #58125f7c16985a7] - build: disable v8_enable_pointer_compression_shared_cage on non-64bit (Shelley Vohr) #58867ba42c72f7f] - build: option to use custom inspector_protocol path (Shelley Vohr) #588394fd8911653] - build: fix typo 'Stoage' to 'Storage' in help text (ganglike) #58777114cd95919] - crypto: fix inclusion of OPENSSL_IS_BORINGSSL define (Shelley Vohr) #588456699c75eac] - crypto: fix SHAKE128/256 breaking change introduced with OpenSSL 3.4 (Filip Skokan) #58942f99aa748c0] - deps: upgrade npm to 10.9.3 (npm team) #5884702e971190b] - deps: update sqlite to 3.50.2 (Node.js GitHub Bot) #58882de2b85b5ae] - deps: update googletest to35b75a2(Node.js GitHub Bot) #58710e7591d7a19] - deps: update minimatch to 10.0.3 (Node.js GitHub Bot) #587128c61b96c43] - deps: update acorn to 8.15.0 (Node.js GitHub Bot) #58711113f4e2d3c] - deps: update sqlite to 3.50.1 (Node.js GitHub Bot) #586307ccd848995] - deps: update simdjson to 3.13.0 (Node.js GitHub Bot) #58629e9c51deb5c] - deps: update zlib to 1.3.1-470d3a2 (Node.js GitHub Bot) #5862826f3711228] - (SEMVER-MINOR) deps: update amaro to 1.1.0 (Node.js GitHub Bot) #56350752dde182f] - (SEMVER-MINOR) deps: update amaro to 1.0.0 (Node.js GitHub Bot) #56350258534d0dc] - (SEMVER-MINOR) deps: update amaro to 0.5.3 (Node.js GitHub Bot) #563507fcf675503] - (SEMVER-MINOR) deps: update amaro to 0.5.2 (Node.js GitHub Bot) #5635081a10a67d5] - (SEMVER-MINOR) deps: update amaro to 0.5.1 (Marco Ippolito) #5635025f8682a62] - (SEMVER-MINOR) deps: update amaro to 0.5.0 (nodejs-github-bot) #563504baf2167e7] - dns: fix parse memory leaky (theanarkh) #58973e8f4a7df22] - dns: set timeout to 1000ms when timeout < 0 (theanarkh) #584411e373a0a25] - doc: update release key for aduh95 (Antoine du Hamel) #58877d5c104246f] - doc: remove broken link to permission model source code (Juan José) #58972b8885a25ff] - doc: clarify details of TSC public and private meetings (James M Snell) #58925aa05823b37] - doc: mark stability markers consistent inglobals.md(Antoine du Hamel) #589323856aee9b2] - doc: move "Core Promise APIs" to "Completed initiatives" (Antoine du Hamel) #58934c2f9735422] - doc: fixfetchsubsections inglobals.md(Antoine du Hamel) #589335f4c7a9d2d] - doc: add missingClass:mentions (Antoine du Hamel) #5893188ee38b37c] - doc: remove myself from security steward rotation (Michael Dawson) #5892702031a9b0d] - doc: add ovflowd back to core collaborators (Claudio W.) #589119551fa3c8f] - doc: update email address for Richard Lau (Richard Lau) #58910cd6bc982c0] - doc: update vm doc links (Chengzhong Wu) #58885ce49303cd0] - doc: add missing comma inchild_process.md(ronijames008) #58862d80ef2a71f] - (SEMVER-MINOR) doc: add all watch-mode related flags to node.1 (Dario Piotrowicz) #58719f8fcb1c83a] - doc: fix jsdoc definition of assert.ifError() fn in lib/assert.js (jesh) #5857328fddc04ca] - doc: add array type in http request headers (Michael Henrique) #580498bd698b688] - doc: add missing colon to headers inglobals.md(Aviv Keller) #58825fa5818e3c1] - doc: fixstream.mdsection order (Antoine du Hamel) #588112384bfdcbd] - doc: fix stability 1.x links excluding the decimal digit (Dario Piotrowicz) #587834e9fe670c9] - doc: fix wrong RFC number in http2 (Deokjin Kim) #58753bbe4ad7351] - doc: add history entry for TS support in hooks (Antoine du Hamel) #58732ec60473ab1] - doc: run license-builder (github-actions[bot]) #587228ab24d21c9] - doc: add islandryu to collaborators (Shima Ryuhei) #587148c641105cd] - doc: punctuation fix for Node-API versioning clarification (Jiacai Liu) #58599133b10a0bb] - doc: add path rules and validation for export targets in package.json (0hm:shamrock:) #58604354a68c460] - doc: add history entries to--input-typesection (Antoine du Hamel) #56350430e66b9b8] - (SEMVER-MINOR) esm: implement import.meta.main (Joe) #5780442c4ca6024] - esm: syncify default path ofModuleLoader.load(Jacob Smith) #574193ac8c686a3] - esm: unwrap WebAssembly.Global on Wasm Namespaces (Guy Bedford) #57525c7ebf2e245] - fs: close dir before throwing ifoptions.bufferSizeis invalid (Livia Medeiros) #5885638ffed8744] - fs: special input-1onchown,lchownandfchown(Alex Yang) #588360e82f72a46] - fs: throwERR_INVALID_THISon illegal invocations (Livia Medeiros) #58848141b2b1954] - fs: makeDirdisposers idempotent (René) #58692dedd9d1961] - fs: avoid computing time coefficient constants in runtime (Livia Medeiros) #58728a029a06b49] - fs: add UV_ENOSPC to list of things to pass to err directly (Jacky Zhao) #5691862f7926b6a] - (SEMVER-MINOR) fs: allow correct handling of burst in fs-events with AsyncIterator (Philipp Dunkel) #58490927d2e77f3] - http: fix keep-alive not timing out after post-request empty line (Shima Ryuhei) #581785cd8145612] - http2: add diagnostics channel 'http2.server.stream.close' (Darshan Sen) #586020f2b31cba4] - inspector: add protocol methods retrieving sent/received data (Chengzhong Wu) #5864579428d8946] - lib: fixgetTypeScriptParsingModejsdoc (沈鸿飞) #586812c205d857c] - lib: renamevalidateInternalFieldintovalidateThisInternalField(LiviaMedeiros) #58765f67e927a5f] - lib: makevalidateInternalField()throwERR_INVALID_THIS(LiviaMedeiros) #58765914701d4f8] - lib,src: support DOMException ser-des (Chengzhong Wu) #5864912a75dca8b] - meta: bump step-security/harden-runner from 2.12.0 to 2.12.2 (dependabot[bot]) #589230d56fec6f0] - meta: bump github/codeql-action from 3.28.18 to 3.29.2 (dependabot[bot]) #589227f4f6e0409] - meta: add IlyasShabi to collaborators (Ilyas Shabi) #5891650b62c9663] - meta: add @nodejs/inspector as codeowner (Chengzhong Wu) #587902fc89892ab] - module: fix typescript import.meta.main (Marco Ippolito) #58661bfc68c8ae8] - module: convert schema-only core module onconvertCJSFilenameToURL(Alex Yang) #5861254634f5e53] - module: update tests for combined ambiguous module syntax error (Mert Can Altin) #5587410eb3db4af] - module: allow cycles in require() in the CJS handling in ESM loader (Joyee Cheung) #58598fe7994eb0c] - module: improve typescript error message format (Marco Ippolito) #56350c898491017] - (SEMVER-MINOR) module: remove experimental warning from type stripping (Marco Ippolito) #56350c07745a436] - module: refactor commonjs typescript loader (Marco Ippolito) #563508d1f5df313] - (SEMVER-MINOR) module: unflag --experimental-strip-types (Marco Ippolito) #56350a8a1c9a960] - os: fix GetInterfaceAddresses memory lieaky (theanarkh) #5894065f19a00c3] - (SEMVER-MINOR) permission: propagate permission model flags on spawn (Rafael Gonzaga) #58853f0a165d89f] - repl: fix eval errors thrown after close throwingERR_USE_AFTER_CLOSE(Dario Piotrowicz) #587919ef1cd1607] - repl: avoid deprecatedrequire.extensionsin tab completion (baki gul) #5865322a4c60e08] - repl: fix tab completion not working with computer string properties (Dario Piotrowicz) #58709ccca1517f9] - (SEMVER-MINOR) sqlite: add support for readBigInts option in db connection level (Miguel Marcondes Filho) #58697690525881e] - src: simplify adding fast APIs to ExternalReferenceRegistry (René) #58896a381b4d990] - src: remove fast API for InternalModuleStat (Joyee Cheung) #58489390654e996] - src: fix internalModuleStat v8 fast path (Yagiz Nizipli) #58054b722647572] - src: fix -Wunreachable-code in src/node_api.cc (Shelley Vohr) #589016d1fe67f56] - src: -Wunreachable-code error in crypto_context.cc (Shelley Vohr) #589012d8e65c6db] - src: fix -Wunreachable-code-return in src/node_contextify.cc (Shelley Vohr) #58901e07adb3b18] - src: cleanup uv_fs_req before uv_fs_stat on existSync (RafaelGSS) #589156b30c0a511] - src: -Wmismatched-new-delete in debug_utils.cc (Shelley Vohr) #5884474ef07f2e7] - src: add FromV8Value<T>() for integral and enum types (Aditi) #5793128bf6ed87d] - src: pass resource on permission checks for spawn (Rafael Gonzaga) #58758daf65d479b] - src: replace std::array with static arrays in contextify (Mert Can Altin) #585809cb671fdb1] - src: add new CopyUtimes function to reduce code duplication (Dario Piotrowicz) #58625e515eb861c] - src: replace V8 Fast API todo comment with note comment (Dario Piotrowicz) #5861448003e87e8] - (SEMVER-MINOR) src,permission: add support to permission.has(addon) (Rafael Gonzaga) #5895172f75bb976] - src,permission: enhance permission model debug (Rafael Gonzaga) #5889866fccc252b] - (SEMVER-MINOR) test: add test for async disposable worker thread (James M Snell) #5838543d2ad8599] - test: deflake test-runner-watch-mode-kill-signal (Dario Piotrowicz) #589527c54085698] - test: add known issue tests for recursive readdir calls with Buffer path (Dario Piotrowicz) #58893cd2a5d9a51] - test: add known issue tests for fs.cp (James M Snell) #5888326072a7953] - test: add tests to ensure that node.1 is kept in sync with cli.md (Dario Piotrowicz) #588783fd187f559] - test: replace.filter()[0]with.find()(Livia Medeiros) #588720d538abb15] - test: remove reliance on in-treedeps/undici(Richard Lau) #58866e24dede403] - test: close dirs infs-opendirtest (Livia Medeiros) #58855ac6b8222e6] - test: correct SIMD support comment (Richard Lau) #587679d3e451181] - test: add tests for REPL custom evals (Dario Piotrowicz) #5785017a3246718] - test: reduce the use of private symbols in test-events-once.js (Yoshiya Hinosawa) #58685bbf33efcd0] - test: usecommon.skipIfInspectorDisabled()to skip tests (Dario Piotrowicz) #58675d6660baff7] - test: update WPT for dom/abort todc92816(Node.js GitHub Bot) #586446d9d5deb44] - test: split indirect eval import tests (Chengzhong Wu) #58637abd5b5fd20] - test: deflake async-hooks/test-improper-order on AIX (Baki Gul) #585673fc630e7cf] - test: close FileHandle objects in tests explicitly (James M Snell) #586157f0560dc4b] - test: skip broken sea on rhel8 (Marco Ippolito) #58914898e68a915] - test: save the config file in a temporary directory (Luigi Pinca) #587999f2132a4f6] - test: deflake test-config-file (Luigi Pinca) #58799f1b74cff9a] - test: skip tests failing when run under root (Livia Medeiros) #586104b0ee14a97] - tools: bump the eslint group in /tools/eslint with 6 updates (dependabot[bot]) #58921a84935fb0e] - tools: update inspector_protocol to69d69dd(Shelley Vohr) #58900af805186cd] - tools: update gyp-next to 0.20.2 (Node.js GitHub Bot) #58788a2d2d36bb1] - tools: make nodedownload module compatible with Python 3.14 (Lumír 'Frenzy' Balhar) #58752cc8b9aa43d] - tools: include toolchain.gypi in abseil.gyp (Chengzhong Wu) #58678fbbf49a7d3] - tools: bumpbrace-expansionin/tools/clang-format(dependabot[bot]) #586998db92a41c5] - tools: bump brace-expansion from 1.1.11 to 1.1.12 in /tools/eslint (dependabot[bot]) #586983a099cf88f] - tools: switch to@stylistic/eslint-plugin(Michaël Zasso) #586239798511e7c] - tools: remove config.status undermake distclean(René) #58603011290a4eb] - tools: edit commit-queue workflow file (Antoine du Hamel) #58667a7406f56da] - tools: improve release proposal linter (Antoine du Hamel) #58647c855310f83] - tools,doc: move more MDN links to types (Antoine du Hamel) #58930805239c824] - typings: add Atomics primordials (Renegade334) #58577d28b2aa0a2] - typings: add ZSTD_COMPRESS, ZSTD_DECOMPRESS to internalBinding (Meghan Denny) #58655fe4290a0e6] - (SEMVER-MINOR) url: add fileURLToPathBuffer API (James M Snell) #58700db648b92c1] - util: inspect: do not crash on an Error stack pointing to itself (Sam Verschueren) #58196791ecfac14] - v8: fix missing callback in heap utils destroy (Ruben Bridgewater) #588464dc6b4c67a] - (SEMVER-MINOR) watch: add--watch-kill-signalflag (Dario Piotrowicz) #587198dbc6b210f] - (SEMVER-MINOR) worker: make Worker async disposable (James M Snell) #58385v22.17.1: 2025-07-15, Version 22.17.1 'Jod' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Commits
8cf5d66ab7] - (CVE-2025-27210) lib: handle all windows reserved driver name (RafaelGSS) nodejs-private/node-private#7219c0cb487ec] - win,build: fix MSVS v17.14 compilation issue (StefanStojanovic) #58902Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "every weekday in 2125" in timezone Europe/Copenhagen.
🚦 Automerge: Enabled.
♻️ Rebasing: Never, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.