Node.js v5 ChangeLog

Stable
5.12.0 5.11.1 5.11.0 5.10.1 5.10.0 5.9.1 5.9.0 5.8.0 5.7.1 5.7.0 5.6.0 5.5.0 5.4.1 5.4.0 5.3.0 5.2.0 5.1.1 5.1.0 5.0.0

Other Versions
- 7.x
- 6.x
- 4.x
- 0.12.x
- 0.10.x
- io.js
- Archive

Note: Official support for the v5 release line is scheduled to expire around June 2016. Users of v5 should upgrade to Node.js v6.

2016-06-23, Version 5.12.0 (Stable), @evanlucas

Notable changes

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/june-2016-security-releases for details on patched vulnerabilities.

buffer
- backport allocUnsafeSlow (Сковорода Никита Андреевич) #7169
- ignore negative allocation lengths (Anna Henningsen) #7221
deps: backport 3a9bfec from v8 upstream (Ben Noordhuis) nodejs/node-private#40
- Fixes a Buffer overflow vulnerability discovered in v8. More details can be found in the CVE (CVE-2016-1699).

Commits

[0ca0827b71] - (SEMVER-MINOR) buffer: backport allocUnsafeSlow (Сковорода Никита Андреевич) #7169
[27785aeb37] - buffer: ignore negative allocation lengths (Anna Henningsen) #7221
[34b96c1322] - deps: backport 3a9bfec from v8 upstream (Ben Noordhuis) nodejs/node-private#40
[2ebeb82852] - test: fix test-net-* error code check for getaddrinfo(3) (Natanael Copa) #5099
[03d36aea4f] - (SEMVER-MINOR) test: add buffer testcase for resetting kZeroFill (Сковорода Никита Андреевич) #7169

2016-05-05, Version 5.11.1 (Stable), @evanlucas

Notable changes

buffer: safeguard against accidental kNoZeroFill (Сковорода Никита Андреевич) nodejs/node-private#35
deps: upgrade openssl sources to 1.0.2h (Shigeki Ohtsu) #6552

Commits

[35f06df782] - buffer: safeguard against accidental kNoZeroFill (Сковорода Никита Андреевич) nodejs/node-private#35
[99920480ae] - buffer: fix a typo in Buffer example code (Mr C0B) #6361
[d9f7b025d4] - deps: update openssl asm and asm_obsolete files (Shigeki Ohtsu) #6552
[f316fd20a0] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/io.js#1836
[263cc34657] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389
[889d1151de] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389
[ba49b636b8] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #6552
[cdad83a789] - deps: upgrade openssl sources to 1.0.2h (Shigeki Ohtsu) #6552
[c1ddefdd79] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389
[bec5d50f1e] - test: fix alpn tests for openssl1.0.2h (Shigeki Ohtsu) #6552

2016-04-20, Version 5.11.0 (Stable), @thealphanerd

Notable Changes

Buffer:
- Buffer.prototype.compare can now compare sub-ranges of two Buffers. (James M Snell) #5880
deps:
- update to http-parser 2.7.0 (Fedor Indutny) #6279
- update ESLint to 2.7.0 (silverwind) #6132
net:
- adds support for passing DNS lookup hints to createConnection() (Colin Ihrig) #6000
node:
- Make the builtin libraries available for the --eval and --print CLI options (Anna Henningsen) #6207
npm:
- upgrade npm to 3.8.6 (Kat Marchán) #6153
repl:
- Pressing enter in the repl will repeat the last command by default if no input has been received. This behaviour was in node previously and was not removed intentionally. (Rich Trott) #6090
src:
- add SIGINFO to supported signals (James Reggio) #6093
streams:
- Fix a regression that caused by net streams requesting multiple chunks synchronously when combined with cork/uncork (Matteo Collina) #6164
zlib:
- The flushing flag is now configurable allowing for decompression of partial data (Anna Henningsen) #6069

Commits

[14fcb1dded] - assert: respect assert.doesNotThrow message. (Ilya Shaisultanov) #2407
[332f7382bb] - benchmark: add module loader benchmark parameter (Brian White) #5172
[473f086a94] - (SEMVER-MINOR) buffer: add Buffer.prototype.compare by offset (James M Snell) #5880
[d44540f5af] - buffer: standardize array index check (Trevor Norris) #6084
[bd12d72e0c] - build: fix make tar-headers for Linux (Gibson Fahnestock) #5978
[3c8d404a82] - build: allow test-ci to run tests in parallel (Johan Bergström) #6208
[a5f8d0c6ef] - build: remove -f{data,function}-sections flags (Ben Noordhuis) #6077
[adfb1a4bb0] - child_process: add nullptr checks after allocs (Anna Henningsen) #6256
[1fb40524ee] - (SEMVER-MINOR) debugger: run last command on presssing enter (Rich Trott) #6090
[5305831184] - deps: update to http-parser 2.7.0 (Fedor Indutny) #6279
[8ae200c768] - deps: floating fix for npm's test-node script (Kat Marchán) #6153
[e3e544eb96] - deps: upgrade npm to 3.8.6 (Kat Marchán) #6153
[a7104e4516] - deps: cherry-pick 1383d00 from v8 upstream (Fedor Indutny) #6179
[632e6b9617] - deps: backport 125ac66 from v8 upstream (Myles Borins) #6086
[4b8376986a] - doc: git mv to .md (Robert Jefe Lindstaedt) #4747
[e6f4a175d4] - doc: add full example for zlib.flush() (Anna Henningsen) #6172
[50f3f10ce6] - doc: note that zlib.flush acts after pending writes (Anna Henningsen) #6172
[985685d170] - doc: fix broken references (Alexander Gromnitsky) #6100
[d66d883a85] - doc: path.format provide more examples (John Eversole) #5838
[dc1552e321] - doc: replace functions with arrow functions (abouthiroppy) #6203
[fa04dfc307] - doc: DCO anchor that doesn't change (William Kapke) #6257
[b49a5b33b5] - doc: fix http response event, Agent#getName (Matthew Douglass) #5993
[3b00d7a5b1] - doc: document intention and dangers of fs module Buffer API (Nikolai Vavilov) #6020
[3bc31526bb] - doc: explain differences in console.assert between node and browsers (James M Snell) #6169
[3f73502662] - doc: native module reloading is not supported (Bryan English) #6168
[5f9c8297f1] - doc: clarify fs.watch() and inodes on linux, os x (Joran Dirk Greef) #6099
[f3c0b78ae4] - doc: add domain postmortem (Trevor Norris) #6159
[a91834e743] - doc: add stefanmb to collaborators (Stefan Budeanu) #6227
[117348d082] - doc: add iWuzHere to collaborators (Imran Iqbal) #6226
[a1c46b63e8] - doc: add santigimeno to collaborators (Santiago Gimeno) #6225
[976e4bb3da] - doc: add addaleax to collaborators (Anna Henningsen) #6224
[4fa949ef75] - doc: fix incorrect references in buffer docs (Amery) #6194
[b26fea1595] - doc: add copy about how to curl SHA256.txt (Myles Borins) #6120
[daaad47099] - doc: clarification for maxBuffer and Unicode output (James M Snell) #6030
[5e6915f374] - doc: describe child.kill() pitfalls on linux (Robert Jefe Lindstaedt) #2098
[a40d0e8f9d] - doc: fix scrolling on iOS devices (Luigi Pinca) #5878
[a81fca4f99] - doc: add topic - event loop, timers, nextTick() (Jeff Harris) #4936
[440d1172fd] - doc: add example using algorithms not directly exposed (Brad Hill) #6108
[96ad5c5303] - doc: update openssl LICENSE using license-builder.sh (Steven R. Loomis) #6065
[07829b0bc9] - doc: simple doc typo fix (Brendon Pierson) #6041
[bc0ee06226] - doc: note about Android support (Rich Trott) #6040
[60a73a2ed2] - doc: fix a typo in 5.10.1's changelog (Vladimir Varankin) #6076
[b57be92c1b] - gitignore: adding .vs/ directory to .gitignore (Mike Kaufman) #6070
[6e891c7ad4] - gitignore: ignore VS 2015 *.VC.opendb files (Mike Kaufman) #6070
[abd101be1a] - http: disallow sending obviously invalid status codes (Brian White) #6291
[16b23b2c28] - http: skip body and next message of CONNECT res (Fedor Indutny) #6279
[a259ee4018] - http: unref socket timer on parser execute (Fedor Indutny) #6286
[d4abca5b27] - lib: remove bootstrap global context indirection (Jeremiah Senkpiel) #5881
[c8783aff21] - lib,test,tools: alignment on variable assignments (Rich Trott) #6242
[d5d4f194f1] - net: replace __defineGetter__ with defineProperty (Fedor Indutny) #6284
[6d9c0c9aa7] - (SEMVER-MINOR) net: support DNS hints in createConnection() (Colin Ihrig) #6000
[457f24f19c] - (SEMVER-MINOR) node: make builtin libs available for --eval (Anna Henningsen) #6207
[fc89d17656] - path: fixing a test that breaks on some machines. (Mike Kaufman) #6067
[1d408099b7] - process: fix incorrect usage of assert.fail() (Rich Trott) #6211
[07c9f981d6] - (SEMVER-MINOR) repl: keep the built-in modules non-enumerable (Anna Henningsen) #6207
[5382deaa18] - repl: don’t complete non-simple expressions (Anna Henningsen) #6192
[2254f1a175] - repl: refactor repl.js (Rich Trott) #6071
[7d54d85269] - (SEMVER-MINOR) src: add SIGINFO to supported signals (James Reggio) #6093
[fbc99ba4f1] - src: add missing 'inline' keywords (Ben Noordhuis) #6056
[20bb92f5c8] - src: use size_t for http parser array size fields (Ben Noordhuis) #5969
[2fd8be2dbe] - src: replace ARRAY_SIZE with typesafe arraysize (Ben Noordhuis) #5969
[4392b4aee0] - stream: Fix readableState.awaitDrain mechanism (Anna Henningsen) #6023
[20dcdd365b] - stream_base: expose bytesRead getter (Fedor Indutny) #6284
[f69416c06e] - streams: support unlimited synchronous cork/uncork cycles (Matteo Collina) #6164
[4bfed26d1a] - test: add zlib close-after-error regression test (Anna Henningsen) #6270
[99d0a61441] - test: move more tests from sequential to parallel (Santiago Gimeno) #6187
[96be986a77] - test: assert - fixed error messages to match the tests (surya panikkal) #6241
[4e4efb756e] - test: add test for responses to HTTP CONNECT req (Josh Leder) #6279
[5b42ef5dfe] - test: move debugger tests to sequential (Rich Trott) #6205
[9856b804e9] - test: move some test from sequential to parallel (Santiago Gimeno) #6087
[1d130d0203] - test: move the debugger tests back to parallel (Santiago Gimeno) #6246
[c0e9c94868] - test: fix issues for ESLint 2.7.0 (silverwind) #6132
[056a258173] - test: fix flaky test-http-set-timeout-server (Santiago Gimeno) #6248
[be993fcf6c] - test: fix test-net-settimeout flakiness (Santiago Gimeno) #6166
[a38b614ae9] - test: fix flaky test-child-process-fork-net (Rich Trott) #6138
[476535cc0e] - test: fix flaky test-http-client-abort (Rich Trott) #6124
[6bb7999bd6] - test: refactor test-file-write-stream3 (Rich Trott) #6050
[a27e95231e] - test: enforce strict mode for test-domain-crypto (Rich Trott) #6047
[8da4bad1c9] - test: fix pummel test failures (Rich Trott) #6012
[edd8a15508] - test,repl: use deepStrictEqual for false-y values (Jeremiah Senkpiel) #6196
[48ecc0b6b5] - test,tools: enable linting for undefined vars (Rich Trott) #6255
[d809c84bf8] - test,vm: enable strict mode for vm tests (Rich Trott) #6209
[4a1dfdcc0f] - tools: lint rule for assert.fail() (Rich Trott) #6261
[fff6a84da5] - tools: enable linting for v8_prof_processor.js (Rich Trott) #6262
[a2ca347803] - tools: move message listener to worker objects (Brian White) #6212
[f201b01bf7] - tools: improve js linter (Brian White) #5638
[be070d775f] - tools: lint for alignment of variable assignments (Rich Trott) #6242
[d9b8758f47] - tools: update ESLint to 2.7.0 (silverwind) #6132
[a6056c453e] - tools: fix license-builder.sh again for ICU (Steven R. Loomis) #6068
[fabc33a075] - tools: remove simplejson dependency (Sakthipriyan Vairamani) #6101
[d516412cd5] - tools,doc: parse types in braces everywhere (Alexander Makarenko) #5329
[69eb4a6834] - tools,doc: fix json for grouped optional params (firedfox) #5977
[a2dd848764] - tools,doc: fix incomplete json produced by doctool (firedfox) #5966
[bad006f2e1] - zlib: fix use after null when calling .close (James Lal) #5982
[83bc0a2ac9] - (SEMVER-MINOR) zlib: Make the finish flush flag configurable (Anna Henningsen) #6069
[2c23e14d5d] - (SEMVER-MINOR) zlib: detect gzip files when using unzip* (Anna Henningsen) #5884
[61167c3e23] - zlib: fix gzip member head/buffer boundary issue (Anna Henningsen) #5973

2016-04-05, Version 5.10.1 (Stable), @thealphanerd

Notable changes

http:

Enclose IPv6 Host header in square brackets. This will enable proper separation of the host adress from any port reference (Mihai Potra) #5314

path:

Make win32.isAbsolute more consistent (Brian White) #6028

Commits

[0f5a51ae4b] - assert: Check typed array view type in deepEqual (Anna Henningsen) #5910
[e966d1f5db] - buffer: don't set kNoZeroFill flag in allocUnsafe (Vladimir Kurchatkin) #6007
[3f75751c2e] - build: introduce ci targets for lint/benchmark (Johan Bergström) #5921
[781290b61d] - doc: refine child_process detach behaviour (Robert Jefe Lindstaedt) #5330
[aa9fb03202] - doc: use HTTPS for links where possible (Rich Trott) #6019
[dd25984838] - doc: note assert.throws() pitfall (Rich Trott) #6029
[f879f5e68a] - doc: document unspecified behavior for buf.write* methods (James M Snell) #5925
[f12c3861e0] - doc: clarify stdout/stderr arguments to callback (James M Snell) #6015
[ce173716be] - doc: add 'Command Line Options' to 'View on single page' (firedfox) #6011
[7337ef6422] - doc: minor argument formatting in stream.markdown (James M Snell) #6016
[0ae5d027c6] - doc: clarify that __dirname is module local (James M Snell) #6018
[8bec8aa41f] - doc: consolidate timers docs in timers.markdown (Bryan English) #5837
[0a13099c42] - etw: add event messages (João Reis) #5936
[c6ac6f2ea1] - http: Corrects IPv6 address in Host header (Mihai Potra) #5314
[8317778925] - meta: add "joining a wg" section to WORKING_GROUPS.md (Matteo Collina) #5488
[f3f19ee5e2] - net: refactor self=this to arrow functions (Benjamin Gruenbaum) #5857
[1c4007927d] - path: fix win32.isAbsolute() inconsistency (Brian White) #6028
[059b607a4f] - test: make use of globals explicit (Rich Trott) #6014
[cc8fcc5a07] - test: be explicit about polluting of global (Rich Trott) #6017
[7db7a820b9] - test: make arch available in status files (Santiago Gimeno) #5997
[02f2ebd9b4] - test: explicitly set global in test-repl (Rich Trott) #6026
[2ab1237137] - test: fix flaky test-net-socket-timeout-unref (Rich Trott) #6003
[0127c2bd39] - test: fix test-dns.js flakiness (Rich Trott) #5996
[6052ced37f] - test: fix error message checks in test-module-loading (James M Snell) #5986
[a40b0cb673] - test: refactor http-end-throw-socket-handling (Santiago Gimeno) #5676
[96bb315262] - test: ensure _handle property existence (Rich Trott) #5916
[4f1fa2adeb] - test: fix offending max-len linter error (Sakthipriyan Vairamani) #5980
[f14d71ccea] - test: stdin is not always a net.Socket (Jeremiah Senkpiel) #5935
[50a062e691] - tools: remove obsolete lint config file (Rich Trott) #5959
[7491fdcfe9] - tools: remove disabling of already-disabled rule (Rich Trott) #6013

2016-03-31, Version 5.10.0 (Stable), @evanlucas

Notable changes

buffer:
- make byteLength work with ArrayBuffer & DataView (Jackson Tian) #5255
- backport --zero-fill-buffers command line option (James M Snell) #5744
- backport new buffer constructor APIs (James M Snell) #5763
- add swap16() and swap32() methods (James M Snell) #5724
fs: add the fs.mkdtemp() function. (Florian MARGAINE) #5333
net: emit host in lookup event (HUANG Wei) #5598
node: --no-browser-globals configure flag (Fedor Indutny) #5853
npm: Upgrade to v3.8.3. Fixes a security flaw in the use of authentication tokens in HTTP requests that would allow an attacker to set up a server that could collect tokens from users of the command-line interface. Authentication tokens have previously been sent with every request made by the CLI for logged-in users, regardless of the destination of the request. This update fixes this by only including those tokens for requests made against the registry or registries used for the current install. (Forrest L Norvell) npm/node#6
repl: support standalone blocks (Prince J Wesley) #5581
src: override v8 thread defaults using cli options (Tom Gallacher) #4344

Commits

[2cbbaafca9] - async_wrap: don't abort on callback exception (Trevor Norris) #5756
[6f16882733] - async_wrap: notify post if intercepted exception (Trevor Norris) #5756
[a4856122d3] - async_wrap: setupHooks now accepts object (Trevor Norris) #5756
[ee83c956c5] - (SEMVER-MINOR) buffer: make byteLength work with ArrayBuffer & DataView (Jackson Tian) #5255
[1f8e4b54ce] - (SEMVER-MINOR) buffer: add swap16() and swap32() methods (James M Snell) #5724
[bdf933bece] - buffer: changing let in for loops back to var (Gareth Ellis) #5819
[c1534e7eaf] - (SEMVER-MINOR) buffer: backport new buffer constructor APIs (James M Snell) #5763
[3c02727055] - (SEMVER-MINOR) buffer: backport --zero-fill-buffers command line option (James M Snell) #5744
[58b5c1e19f] - build: add suport for x86 architecture (Robert Chiras) #5544
[389f5a85e6] - build: add script to create Android .mk files (Robert Chiras) #5544
[5ee5fa292f] - build: add missing openssl_fips% to common.gypi (Fedor Indutny) #5919
[5681ffecf7] - build: enable compilation for linuxOne (Michael Dawson) #5941
[660ec9f889] - child_process: refactor self=this in socket_list (Benjamin Gruenbaum) #5860
[0928584444] - deps: upgrade npm to 3.8.3 (Forrest L Norvell)
[ec1813199d] - deps: backport 8d00c2c from v8 upstream (Ben Noordhuis) #5577
[2a5c6d7006] - dns: Refactor forEach to map (Benjamin Gruenbaum) #5803
[6a6112a2f3] - dns: Use object without protoype for map (Benjamin Gruenbaum) #5843
[8fa0b5c1da] - doc: Add @mhdawson back to the CTC (James M Snell) #5633
[858a524325] - doc: typo: interal->internal. (Corey Kosak) #5849
[5676a35bd9] - doc: explain path.format expected properties (John Eversole) #5801
[29778393a0] - doc: use consistent event name parameter (Benjamin Gruenbaum) #5850
[949b17ff6d] - doc: fix order of end tags of list after heading (firedfox) #5874
[8e790b7a0c] - doc: add instructions to only sign a release (Jeremiah Senkpiel) #5876
[f1f9aff855] - doc: fix doc for Buffer.readInt32LE() (ghaiklor) #5890
[731f7b8055] - etw: fix descriptors of events 9 and 23 (João Reis) #5742
[ccd81889fa] - etw,build: always generate .rc and .h files (João Reis) #5657
[80155d398c] - (SEMVER-MINOR) fs: add the fs.mkdtemp() function. (Florian MARGAINE) #5333
[bb28770aa1] - governance: remove target size for CTC (Rich Trott) #5879
[63c601bc15] - http: speed up checkIsHttpToken (Jackson Tian) #4790
[ec6af31eba] - lib: rename /node.js to /bootstrap_node.js (Jeremiah Senkpiel) #5103
[91466b855f] - lib: refactor code with startsWith/endsWith (Jackson Tian) #5753
[4bf2acaa1e] - lib,src: move src/node.js to lib/internal/node.js (Jeremiah Senkpiel) #5103
[015cef25eb] - lib,src: refactor src/node.js into internal files (Jeremiah Senkpiel) #5103
[b07bc5d996] - (SEMVER-MINOR) net: emit host in lookup event (HUANG Wei) #5598
[8363ede855] - (SEMVER-MINOR) node: --no-browser-globals configure flag (Fedor Indutny) #5853
[a2ad21645f] - querystring: don't stringify bad surrogate pair (Brian White) #5858
[427173204e] - (SEMVER-MINOR) repl: support standalone blocks (Prince J Wesley) #5581
[bfd723f3ba] - src: Add missing using v8::MaybeLocal (Anna Henningsen) #5974
[0d0c57ff5e] - (SEMVER-MINOR) src: override v8 thread defaults using cli options (Tom Gallacher) #4344
[f9d0166291] - src: reword command and add ternary (Trevor Norris) #5756
[f1488bb24c] - src,http_parser: remove KickNextTick call (Trevor Norris) #5756
[c5c7ae8e14] - test: add known_issues test for GH-2148 (Rich Trott) #5920
[6113f6af45] - test: mitigate flaky test-https-agent (Rich Trott) #5939
[0acca7654f] - test: fix flaky test-repl (Brian White) #5914
[aebe6245b7] - test: add test for piping large input from stdin (Anna Henningsen) #5949
[a19de97d2f] - test: remove the use of curl in the test suite (Santiago Gimeno) #5750
[6928a17aa3] - test: exclude new fs watch test for AIX (Michael Dawson) #5937
[3238bff3b3] - test: confirm globals not used internally (Rich Trott) #5882
[a41fd93f68] - test: fix flaky test-net-socket-timeout (Brian White) #5902
[82a50d3def] - test: move dns test to test/internet (Ben Noordhuis) #5905
[fb0c5bcac2] - test: fix flaky test-http-set-timeout (Rich Trott) #5856
[8344a522a8] - test: fix test-debugger-client.js (Rich Trott) #5851
[7ec5397954] - timers: fixing API refs to use safe internal refs (Kyle Simpson) #5882
[cb676cf3e7] - tools: fix json doc generation (firedfox) #5943
[77bed269ad] - win,build: build and test add-ons on test-ci (Bogdan Lobor) #5886
[afcd276ecc] - zlib: Fix handling of gzip magic bytes mid-file (Anna Henningsen) #5863

2016-03-23, Version 5.9.1 (Stable), @Fishrock123

Notable changes

buffer: Now properly throws RangeErrors on out-of-bounds writes (Matt Loring) #5605.
- This effects write{Float|Double} when the noAssert option is not used.
timers:
- Returned timeout objects now have a Timeout constructor name (Jeremiah Senkpiel) #5793.
- Performance of Immediate processing is now ~20-40% faster (Brian White) #4169.
vm: Fixed a contextify regression introduced in v5.9.0 (Ali Ijaz Sheikh) #5800.

Commits

[341b3d01c8] - benchmark: fix linting errors (Rich Trott) #5840
[72fb796bed] - buffer: throw range error before truncating write (Matt Loring) #5605
[c5d83695e1] - contextify: tie lifetimes of context & sandbox (Ali Ijaz Sheikh) #5800
[ae24d05451] - deps: remove unused openssl files (Ben Noordhuis) #5619
[54abbe7e6f] - dns: use template literals (Benjamin Gruenbaum) #5809
[3fef69bf15] - dns: use isIp consistently (Benjamin Gruenbaum) #5804
[d2d0fe9d34] - doc: update crypto docs to use good defaults (Bill Automata) #5505
[1631f06477] - doc: add CTC meeting minutes 2016-02-10 (Rod Vagg) #5273
[7ab597d646] - doc: add CTC meeting minutes 2016-02-03 (Rod Vagg) #5272
[e20d0b8802] - doc: explain error message on missing main file (Wolfgang Steiner) #5812
[e99082e32d] - doc: add a cli options doc page (Jeremiah Senkpiel) #5787
[0ffd794b27] - doc: Add windows example for Path.format (Mithun Patel) #5700
[f53cc37578] - doc: grammar, clarity and links in timers doc (Bryan English) #5792
[3ada8cc09a] - doc: align doc/api/tls.markdown with style guide (Stefano Vozza) #5706
[5d28ce3942] - doc: topic blocking vs non-blocking (Jarrett Widman) #5326
[d9b4e15f75] - doc: fix typo in synchronous randomBytes example (Andrea Giammarchi) #5781
[d8318c2226] - doc: fix crypto update() signatures (Brian White) #5500
[15c5662959] - doc: fix multiline return comments in querystring (Claudio Rodriguez) #5705
[75f723c0aa] - doc: fix invalid path doc comments (Rich Trott) #5670
[724b87d75c] - doc: explain path.format() algorithm (Rich Trott) #5688
[89df17ed0b] - doc: fix return value of write methods (Felix Böhm) #5736
[5ab51ee151] - doc: reformat & improve node.1 manual page (Jeremiah Senkpiel) #5497
[f34a00cee2] - docs: fix man pages link if tok type is code (Mithun Patel) #5721
[3bff3111f4] - https: fix ssl socket leak when keepalive is used (Alexander Penev) #5713
[7b21c09b73] - lib: simplify code with String.prototype.repeat() (Jackson Tian) #5359
[c75f97f43b] - lib: reduce usage of self = this (Jackson Tian) #5231
[1ccf9b4a56] - net: remove unused var self = this from old code (Benjamin Gruenbaum) #5224
[6e5835b8cd] - path: refactor path.format() repeated code (Rich Trott) #5673
[15c7b3a127] - src,tools: use template literals (Rich Trott) #5778
[ca971b0d77] - test: smaller chunk size for smaller person.jpg (Jérémy Lal) #5813
[f95fc175eb] - test: strip non-free icc profile from person.jpg (Jérémy Lal) #5813
[7c2c7b0577] - test: remove timer from test-http-1.0 (Santiago Gimeno) #5129
[70512e51a4] - test: repl tab completion test (Santiago Gimeno) #5534
[89f091d621] - test: make test-net-connect-options-ipv6.js better (Michael Dawson) #5791
[d2fa64490f] - test: fix test-cluster-worker-kill (Santiago Gimeno) #5814
[f0d885a0a9] - test: fix flaky test-cluster-shared-leak (Claudio Rodriguez) #5802
[b352cc7db4] - test: minimize test-http-get-pipeline-problem (Rich Trott) #5728
[21770c3806] - test: reduce brittleness of tab complete test (Matt Loring) #5772
[46f0e02620] - timers: fix lint from 4fe02e2 (Jeremiah Senkpiel) #5825
[20a68e9eef] - timers: give Timeouts a constructor name (Jeremiah Senkpiel) #5793
[d3654d80f3] - timers: improve setImmediate() performance (Brian White) #4169
[b1a4870200] - tools: remove unused imports (Sakthipriyan Vairamani) #5765

2016-03-16, Version 5.9.0 (Stable), @evanlucas

Notable changes

contextify: Fixed a memory consumption issue related to heavy use of vm.createContext and vm.runInNewContext. (Ali Ijaz Sheikh) nodejs#5392
governance: The following members have been added as collaborators:

Andreas Madsen (@AndreasMadsen)
Benjamin Gruenbaum (@benjamingr)
Claudio Rodriguez (@claudiorodriguez)
Glen Keane (@thekemkid)
Jeremy Whitlock (@whitlockjc)
Matt Loring (@matthewloring)
Phillip Johnsen (@phillipj)

lib: copy arguments object instead of leaking it (Nathan Woltman) nodejs#4361
src: allow both -i and -e flags to be used at the same time (Rich Trott) nodejs#5655
timers: Internal Node.js timeouts now use the same logic path as those created with setTimeout() (Jeremiah Senkpiel) #4007
- This may cause a slightly different performance profile in some situations. So far, it has shown to be positive in most cases.
v8: backport fb4ccae from v8 upstream (Vladimir Krivosheev) #4231
- breakout events from v8 to offer better support for external debuggers
zlib: add support for concatenated members (Kári Tristan Helgason) nodejs#5120
- Previously, if multiple members were in the same archive, only the first would be read. The others are no longer thrown away.

Commits

[03b99bf8b9] - build: don't install github templates (Johan Bergström) #5612
[a7819da15a] - Revert "build: run lint before tests" (Rich Trott) #5602
[5e9cac4333] - console: check that stderr is writable (Rich Trott) #5635
[0662fcf209] - contextify: cache sandbox and context in locals (Ali Ijaz Sheikh) #5392
[4f2c839d46] - contextify: replace deprecated SetWeak usage (Ali Ijaz Sheikh) #5392
[bfff07b4dd] - contextify: cleanup weak ref for sandbox (Ali Ijaz Sheikh) #5392
[93f60cdc54] - contextify: cleanup weak ref for global proxy (Ali Ijaz Sheikh) #5392
[b6c355de0d] - (SEMVER-MINOR) deps: backport fb4ccae from v8 upstream (develar) #4231
[29510aa4fd] - deps: update openssl config (Shigeki Ohtsu) #5630
[532d1bf9ce] - deps: sync deps/http_parser with nodejs/http_parser (James M Snell) #5600
[d5d64c327b] - doc: clarify commit message rules (Wyatt Preul) #5661
[8c4c84fe5b] - doc: add Testing WG (Rich Trott) #5461
[434af03825] - doc: Add note about use of JSON.stringify() (Mithun Patel) #5723
[62926d85bd] - doc: clarify type of first argument in zlib (Kirill Fomichev) #5685
[eb73574349] - doc: clarify when writable.write callback is called (Kevin Locke) #4810
[c579507034] - doc: fix typo in api/addons (Daijiro Wachi) #5678
[8e45c9d9ea] - doc: fix typo in api/dgram (Daijiro Wachi) #5678
[44a9b100c5] - doc: fix typo in api/fs (Daijiro Wachi) #5678
[b667573bcb] - doc: update fansworld-claudio username on README (Claudio Rodriguez) #5680
[9794abb5d1] - doc: add onboarding resources (Jeremiah Senkpiel) #3726
[31e39fbd7a] - doc: remove non-standard use of hyphens (Stefano Vozza)
[f3e9daa825] - doc: add clarification on birthtime in fs stat (Kári Tristan Helgason) #5479
[c379ec6522] - doc: move build instructions to a new document (Johan Bergström) #5634
[2a442b3dfc] - doc: update removeListener behaviour (Vaibhav) #5201
[f6ee0996e0] - doc: fix typo in child_process docs (Benjamin Gruenbaum) #5681
[dd12661173] - doc: include typo in 'unhandledRejection' example (Robert C Jensen) #5654
[f7aecd6e94] - doc: add thekemkid to collaborators (Glen Keane) #5667
[b81711acfb] - doc: add phillipj to collaborators (Phillip Johnsen) #5663
[a33f2486f0] - doc: add fansworld-claudio to collaborators (Claudio Rodriguez) #5668
[285d5e7ba6] - doc: add AndreasMadsen to collaborators (Andreas Madsen) #5666
[8e1f6706e3] - doc: add benjamingr to collaborator list (Benjamin Gruenbaum) #5664
[f7842cbb24] - doc: add whitlockjc to collaborators (Jeremy Whitlock) #5665
[dd6f4ec2e4] - doc: add mattloring to collaborators (Matt Loring) #5662
[9ebd559a55] - doc: fix markdown links (Steve Mao) #5641
[62d267e1ff] - doc: fix dns.resolveCname description typo (axvm) #5622
[9f8e2e2979] - doc: update release tweet template (Jeremiah Senkpiel) #5628
[4d6fe300fe] - doc: fix v5.8.0 changelog heading (Jeremiah Senkpiel) #5559
[4c1fdaeb2a] - docs: update link to iojs+release ci job (Myles Borins) #5632
[205bed0bec] - lib: copy arguments object instead of leaking it (Nathan Woltman) #4361
[b16f67a0b9] - net: make isIPv4 and isIPv6 more efficient (Vladimir Kurchatkin) #5478
[4ecd996baa] - (SEMVER-MINOR) src: allow combination of -i and -e cli flags (Rich Trott) #5655
[f225459496] - test: improve test-npm-install (Santiago Gimeno) #5613
[cceae5ae78] - test: eval a strict function (Kári Tristan Helgason) #5250
[9a44c8c337] - test: add batch of known issue tests (cjihrig) #5653
[1b7b1ed2c9] - timers: greatly improve code comments (Jeremiah Senkpiel) #4007
[769254b0ba] - timers: refactor timers (Jeremiah Senkpiel) #4007
[0b545fb3f8] - win,build: support Visual C++ Build Tools 2015 (João Reis) #5627
[ef774ff9a8] - (SEMVER-MINOR) zlib: add support for concatenated members (Kári Tristan Helgason) #5120

2016-03-08, Version 5.8.0 (Stable), @Fishrock123

Notable changes

child_process: send() now accepts an options parameter (cjihrig) #5283.
- Currently the only option is keepOpen, which keeps the underlying socket open after the message is sent.
constants: ENGINE_METHOD_RSA is now correctly exposed (Sam Roberts) #5463.
Fixed two regressions which originated in v5.7.0:
- http: Errors inside of http client callbacks now propagate correctly (Trevor Norris) #5591.
- path: Fixed normalization of absolute paths (Evan Lucas) #5589.
repl: start() no longer requires an options parameter (cjihrig) #5388.
util: Improved format() performance 50-300% (Evan Lucas) #5360.

Commits

[12ca84fc7f] - benchmark: add util.format benchmark (Evan Lucas) #5360
[b955d02266] - benchmark: fix lint errors (Rich Trott) #5517
[2abf866b6e] - build: update Node.js logo on Win installer (Robert Jefe Lindstaedt) #5531
[86900f8f2b] - build: correctly detect clang version (Stefan Budeanu) #5553
[a3017992e4] - (SEMVER-MINOR) child_process: add keepOpen option to send() (cjihrig) #5283
[6d4887ccc2] - (SEMVER-MINOR) child_process: support options in send() (cjihrig) #5283
[9db827c7aa] - (SEMVER-MINOR) constants: define ENGINE_METHOD_RSA (Sam Roberts) #5463
[85013456cd] - deps: upgrade to npm 3.7.3 (Kat Marchán) #5369
[67e9f65958] - dgram: default send address to 127.0.0.1 or ::1 (Matteo Collina) #5493
[3c92352c8c] - doc: document directories in test directory (Michael Barrett) #5557
[7be726f86a] - doc: add info to docs on how to submit docs patch (Sequoia McDowell) #4591
[eb5a95e04a] - doc: fix typo in fs.symlink (Michaël Zasso) #5560
[9ad901ef44] - doc: improve unhandledException doc copy (James M Snell) #5287
[3bd96fdb0f] - doc: update link green to match homepage (silverwind) #5548
[cb7e4fbac9] - doc: update V8 URL (Craig Akimoto) #5530
[b54a26fa61] - (SEMVER-MINOR) doc: correct name of engine methods (Sam Roberts) #5463
[f3971f5817] - path: fix normalize for absolutes (Evan Lucas) #5589
[e572e421b4] - (SEMVER-MINOR) repl: accept no arguments to start() (cjihrig) #5388
[5e6d706758] - src,http: fix uncaughtException miss in http (Trevor Norris) #5591
[9dc94d7b09] - test: add test-npm-install to parallel tests suite (Myles Borins) #5166
[4f20f31b3e] - test: remove broken debugger scenarios (Rich Trott) #5532
[29e26b38c5] - test: bug repro for vm function redefinition (cjihrig) #5528
[e6210d5f50] - test: prevent flakey test on pi2 (Trevor Norris) #5537
[40b36baa2f] - test: check memoryUsage properties (Wyatt Preul) #5546
[048c0f4738] - tools: reduce verbosity of cpplint (Sakthipriyan Vairamani) #5578
[7965c897e0] - tools: enable no-self-assign ESLint rule (Rich Trott) #5552
[5aa17dc136] - tools: support testing known issues (cjihrig) #5528
[9a3e87e9a8] - tools: enable linting for benchmarks (Rich Trott) #5517
[c4fa2a6715] - tools: enable no-extra-parens in ESLint (Rich Trott) #5512
[971edde0cb] - util: improve format() performance further (Brian White) #5360
[c32d460747] - util: improve util.format performance (Evan Lucas) #5360

2016-03-02, Version 5.7.1 (Stable), @Fishrock123

Notable changes

governance: The Core Technical Committee (CTC) added four new members to help guide Node.js core development: Evan Lucas, Rich Trott, Ali Ijaz Sheikh and Сковорода Никита Андреевич (Nikita Skovoroda).
openssl: Upgrade from 1.0.2f to 1.0.2g (Ben Noordhuis) #5507.
- Fix a double-free defect in parsing malformed DSA keys that may potentially be used for DoS or memory corruption attacks. It is likely to be very difficult to use this defect for a practical attack and is therefore considered low severity for Node.js users. More info is available at CVE-2016-0705.
- Fix a defect that can cause memory corruption in certain very rare cases relating to the internal BN_hex2bn() and BN_dec2bn() functions. It is believed that Node.js is not invoking the code paths that use these functions so practical attacks via Node.js using this defect are unlikely to be possible. More info is available at CVE-2016-0797.
- Fix a defect that makes the CacheBleed Attack possible. This defect enables attackers to execute side-channel attacks leading to the potential recovery of entire RSA private keys. It only affects the Intel Sandy Bridge (and possibly older) microarchitecture when using hyper-threading. Newer microarchitectures, including Haswell, are unaffected. More info is available at CVE-2016-0702.
Fixed several regressions that appeared in v5.7.0:
- path.relative():
  - Output is no longer unnecessarily verbose (Brian White) #5389.
  - Resolving UNC paths on Windows now works correctly (Owen Smith) #5456.
  - Resolving paths with prefixes now works correctly from the root directory (Owen Smith) #5490.
- url: Fixed an off-by-one error with parse() (Brian White) #5394.
- dgram: Now correctly handles a default address case when offset and length are specified (Matteo Collina) #5407.

Commits

[7cae774d9b] - benchmark: refactor to eliminate redeclared vars (Rich Trott) #5468
[6aebe16669] - benchmark: add benchmark for buf.compare() (Rich Trott) #5441
[00660f55c8] - benchmark: move string-decoder to its own category (Andreas Madsen) #5177
[4650cb3818] - benchmark: fix configuation parameters (Andreas Madsen) #5177
[3ccb275139] - benchmark: merge url.js with url-resolve.js (Andreas Madsen) #5177
[c1e7dbffaa] - benchmark: move misc to categorized directories (Andreas Madsen) #5177
[2f9fee6e8e] - benchmark: use strict mode (Rich Trott) #5336
[4c09e7f359] - build: remove --quiet from eslint invocation (firedfox) #5519
[2c619f2012] - build: run lint before tests (Rich Trott) #5470
[f349a9a2cf] - build: update Node.js logo on OSX installer (Rod Vagg) #5401
[88f393588a] - crypto: PBKDF2 works with int not ssize_t (Fedor Indutny) #5397
[1e86804503] - deps: upgrade openssl to 1.0.2g (Ben Noordhuis) #5507
[d3f9b84be8] - dgram: handle default address case when offset and length are specified (Matteo Collina)
[f1f3832934] - doc: update NAN urls in ROADMAP.md and doc/releases.md (ronkorving) #5472
[51bc062dab] - doc: add CTC meeting minutes 2016-02-17 (Rod Vagg) #5410
[795c85ba1c] - doc: fix typo in child_process documentation (Evan Lucas) #5474
[0a56e9690b] - doc: add note for binary safe string reading (Anton Andesen) #5155
[ea8331e15f] - doc: improvements to crypto.markdown copy (Alexander Makarenko) #5230
[378a772034] - doc: require behavior on case-insensitive systems (Hugo Wood)
[06b7eb6636] - doc: document base64url encoding support (Tristan Slominski) #5243
[8ec3d904cb] - doc: improve httpVersionMajor / httpVersionMajor (Jackson Tian) #5296
[534e88f56c] - doc: fix relative links in net docs (Evan Lucas) #5358
[7b98a30976] - doc: fix crypto function indentation level (Brian White) #5460
[c0fd802cc2] - doc: link to man pages (dcposch@dcpos.ch) #5073
[f8c6701e22] - doc: add missing property in cluster example (Rafael Cepeda) #5305
[3bfe0483f0] - doc: corrected name of argument in socket.send (Chris Dew) #5449
[c8725f5e95] - doc: fix links in tls, cluster docs (Alexander Makarenko) #5364
[7f2cf9af5c] - doc: explicit about VS 2015 support in readme (Phillip Johnsen) #5406
[12d3cdbfea] - doc: remove out-of-date matter from internal docs (Rich Trott) #5421
[43853679f7] - doc: copyedit util doc (Rich Trott) #5399
[903e8d09e1] - doc: fix typo in pbkdf2Sync code sample (Marc Cuva) #5306
[79b1c22c9f] - doc: fix buf.readInt16LE output (Chinedu Francis Nwafili) #5282
[e46915f2f3] - doc: note util.isError() @@toStringTag limitations (cjihrig) #5414
[935fd21fff] - doc: clarify error handling in net.createServer (Dirceu Pereira Tiegs) #5353
[93dce6d4fe] - doc: document fs.datasync(Sync) (Ron Korving) #5402
[96daf51358] - doc: add Evan Lucas to the CTC (Rod Vagg) #5275
[31b405d0cf] - doc: add Rich Trott to the CTC (Rod Vagg) #5276
[bcd154e402] - doc: add Ali Ijaz Sheikh to the CTC (Rod Vagg) #5277
[9d0330c804] - doc: add Сковорода Никита Андреевич to the CTC (Rod Vagg) #5278
[365cc63783] - doc: add "building node with ninja" guide (Jeremiah Senkpiel) #4767
[2b00c315e1] - doc: mention prototype check in deepStrictEqual() (cjihrig) #5367
[ff988b3ee6] - doc,tools,test: lint doc-based addon tests (Rich Trott) #5427
[d77c3bf204] - http_parser: use MakeCallback (Trevor Norris) #5419
[e3421ac296] - lib: freelist: use .pop() for allocation (Anton Khlynovskiy) #2174
[91d218d096] - path: fix path.relative() for prefixes at root (Owen Smith) #5490
[ef7a088906] - path: fix win32 parse() (Zheng Chaoping) #5484
[871396ce8f] - path: fix win32 relative() for UNC paths (Owen Smith) #5456
[91782f1888] - path: fix win32 relative() when "to" is a prefix (Owen Smith) #5456
[30cec18eeb] - path: fix verbose relative() output (Brian White) #5389
[2b88523836] - repl: fix stack trace column number in strict mode (Prince J Wesley) #5416
[51db48f741] - src,tools: remove null sentinel from source array (Ben Noordhuis) #5418
[03a5daba55] - src,tools: drop nul byte from built-in source code (Ben Noordhuis) #5418
[17d14f3346] - src,tools: allow utf-8 in built-in js source code (Ben Noordhuis) #5418
[12ae6abc69] - test: increase timeout for test-tls-fast-writing (Rich Trott) #5466
[81348e8855] - test: apply Linux workaround to Linux only (Rich Trott) #5471
[c4d9cdb7d0] - test: allow options for v8 testing (Michael Dawson) #5502
[d1a82c6824] - test: retry on known SmartOS bug (Rich Trott) #5454
[c7f8a13043] - test: remove unneeded bind() and related comments (Aayush Naik) #5023
[cc4cbb10df] - test: fix flaky child-process-fork-regr-gh-2847 (Santiago Gimeno) #5422
[0ebbf6cd53] - test: remove flaky designation from fixed tests (Rich Trott) #5459
[c83725c604] - test: add test-cases for posix path.relative() (Owen Smith) #5456
[22bb7c9d27] - test: fix test runner arg regression (Stefan Budeanu) #5446
[8c67b94b11] - test: refactor test-dgram-send-callback-recursive (Santiago Gimeno) #5079
[2c21d34a2f] - test: refactor test-dgram-udp4 (Santiago Gimeno) #5339
[479a43c876] - test: allow passing args to executable (Stefan Budeanu) #5376
[ff75023812] - test: fix test-timers.reliability on OS X (Rich Trott) #5379
[991f82b4bd] - test: mitigate flaky test-http-agent (Rich Trott) #5346
[0f54553a99] - test: increase timeouts on some unref timers tests (Jeremiah Senkpiel) #5352
[25c01cd779] - tls: fix assert in context._external accessor (Ben Noordhuis) #5521
[5ffd7430d1] - tools: apply custom buffer lint rule to /lib only (Rich Trott) #5371
[fa5d28f246] - tools: enable additional lint rules (Rich Trott) #5357
[b44b701e5b] - tools,benchmark: increase lint compliance (Rich Trott) #5429
[9424fa5732] - url: group slashed protocols by protocol name (nettofarah) #5380
[dfe45f13e7] - url: fix off-by-one error with parse() (Brian White) #5394

2016-02-23, Version 5.7.0 (Stable), @rvagg

Notable changes

buffer:
- You can now supply an encoding argument when filling a Buffer Buffer#fill(string[, start[, end]][, encoding]), supplying an existing Buffer will also work with Buffer#fill(buffer[, start[, end]]). See the API documentation for details on how this works. (Trevor Norris) #4935
- Buffer#indexOf() no longer requires a byteOffset argument if you also wish to specify an encoding: Buffer#indexOf(val[, byteOffset][, encoding]). (Trevor Norris) #4803
child_process: spawn() and spawnSync() now support a 'shell' option to allow for optional execution of the given command inside a shell. If set to true, cmd.exe will be used on Windows and /bin/sh elsewhere. A path to a custom shell can also be passed to override these defaults. On Windows, this option allows .bat. and .cmd files to be executed with spawn() and spawnSync(). (Colin Ihrig) #4598
http_parser: Update to http-parser 2.6.2 to fix an unintentionally strict limitation of allowable header characters (James M Snell) #5237
dgram: socket.send() now supports accepts an array of Buffers or Strings as the first argument. See the API docs for details on how this works. (Matteo Collina) #4374
http: Fix a bug where handling headers will mistakenly trigger an 'upgrade' event where the server is just advertising its protocols. This bug can prevent HTTP clients from communicating with HTTP/2 enabled servers. (Fedor Indutny) #4337
net: Added a listening Boolean property to net and http servers to indicate whether the server is listening for connections. (José Moreira) #4743
node: The C++ node::MakeCallback() API is now reentrant and calling it from inside another MakeCallback() call no longer causes the nextTick queue or Promises microtask queue to be processed out of order. (Trevor Norris) #4507
tls: Add a new tlsSocket.getProtocol() method to get the negotiated TLS protocol version of the current connection. (Brian White) #4995
vm: Introduce new 'produceCachedData' and 'cachedData' options to new vm.Script() to interact with V8's code cache. When a new vm.Script object is created with the 'produceCachedData' set to true a Buffer with V8's code cache data will be produced and stored in cachedData property of the returned object. This data in turn may be supplied back to another vm.Script() object with a 'cachedData' option if the supplied source is the same. Successfully executing a script from cached data can speed up instantiation time. See the API docs for details. (Fedor Indutny) #4777
performance: Improvements in:
- process.nextTick() (Ruben Bridgewater) #5092
- path module (Brian White) #5123
- querystring module (Brian White) #5012
- streams module when processing small chunks (Matteo Collina) #4354

Commits

[3a96fa0030] - async_wrap: add parent uid to init hook (Andreas Madsen) #4600
[4ef04c7c4c] - async_wrap: make uid the first argument in init (Andreas Madsen) #4600
[4afe801f90] - async_wrap: add uid to all asyncWrap hooks (Andreas Madsen) #4600
[edf8f8a7da] - benchmark: split path benchmarks (Brian White) #5123
[8d713d8d51] - benchmark: allow empty parameters (Brian White) #5123
[eb6d07327a] - (SEMVER-MINOR) buffer: add encoding parameter to fill() (Trevor Norris) #4935
[60d2048b6c] - (SEMVER-MINOR) buffer: properly retrieve binary length of needle (Trevor Norris) #4803
[4c67d74607] - (SEMVER-MINOR) buffer: allow encoding param to collapse (Trevor Norris) #4803
[5fa4117bfc] - build: add a help message and removed a TODO. (Ojas Shirekar) #5080
[09bfb865af] - build: remove redundant TODO in configure (Ojas Shirekar) #5080
[3dfc11c516] - build: remove Makefile.build (Ojas Shirekar) #5080
[fc78d3d6a7] - build: skip msi build if WiX is not found (Tsarevich Dmitry) #5220
[356acb39d7] - build: treat aarch64 as arm64 (Johan Bergström) #5191
[3b83d42b4a] - build: fix build when python path contains spaces (Felix Becker) #4841
[9e6ad2d8ff] - child_process: fix data loss with readable event (Brian White) #5036
[ecc797600f] - (SEMVER-MINOR) child_process: add shell option to spawn() (cjihrig) #4598
[efd6f68dce] - cluster: dont rely on this in fork (Igor Klopov) #5216
[df93d60caf] - console: apply null as this for util.format (Jackson Tian) #5222
[c397ba8fa3] - contextify: use offset/length from Uint8Array (Fedor Indutny) #4947
[3048ac0b57] - crypto: have fixed NodeBIOs return EOF (Adam Langley) #5105
[af074846f5] - debugger: remove unneeded callback check (Rich Trott) #5319
[7bac743f36] - debugger: assert test before accessing this.binding (Prince J Wesley) #5145
[18c94e5a8d] - deps: remove unnecessary files (Brian White) #5212
[967cf97bf0] - deps: cherry-pick 2e4da65 from v8's 4.8 upstream (Michael Dawson) #5293
[bbdf2684d5] - deps: update to http-parser 2.6.2 (James M Snell) #5237
[127dd6275a] - Revert "deps: sync with upstream c-ares/c-ares@4ef6817" (Ben Noordhuis) #5199
[35c3832994] - deps: sync with upstream c-ares/c-ares@4ef6817 (Fedor Indutny) #5199
[b4db31822f] - dgram: scope redeclared variables (Rich Trott) #4940
[368c1d1098] - (SEMVER-MINOR) dgram: support dgram.send with multiple buffers (Matteo Collina) #4374
[a8862f59eb] - doc: update repo docs to use 'CTC' (Alexis Campailla) #5304
[6cf8ec5bd1] - doc: s/http/https in Myles Borins' GitHub link (Rod Vagg) #5356
[0389e3803c] - doc: clarify child_process.execFile{,Sync} file arg (Kevin Locke) #5310
[c48290d9b7] - doc: fix buf.length slice example (Chinedu Francis Nwafili) #5259
[a6e437c619] - doc: fix buffer[index] example (Chinedu Francis Nwafili) #5253
[73ef1bd423] - doc: fix template string (Rafael Cepeda) #5240
[fa04daa384] - doc: clarify exceptions during uncaughtException (Noah Rose) #5180
[22f132e61d] - doc: improvements to console.markdown copy (Alexander Makarenko) #5225
[48fa6f6063] - doc: update process.send() signature (cjihrig) #5284
[35d89d4662] - doc: fix net.createConnection() example (Brian White) #5219
[149007c9f0] - doc: replace node-forward link in CONTRIBUTING.md (Ben Noordhuis) #5227
[a6aaf2caab] - doc: improve scrolling, various CSS tweaks (Roman Reiss) #5198
[18b00deeac] - doc: update DCO to v1.1 (Mikeal Rogers) #5170
[3955bc4cd0] - doc: fix minor inconsistencies in repl doc (Rich Trott) #5193
[287bce7b48] - doc: merging behavior of writeHead vs setHeader (Alejandro Oviedo) #5081
[529e749d88] - doc: fix type references for link gen, link css (Claudio Rodriguez) #4741
[275f6dbcbb] - (SEMVER-MINOR) doc: correct tlsSocket.getCipher() description (Brian White) #4995
[b706b0c2c5] - http: remove old, confusing comment (Brian White) #5233
[ed36235248] - http: remove unnecessary check (Brian White) #5233
[7e82a566b3] - (SEMVER-MINOR) http: allow async createConnection() (Brian White) #4638
[411d813323] - http: do not emit upgrade on advertisement (Fedor Indutny) #4337
[bbc786b50f] - http,util: fix typos in comments (Alexander Makarenko) #5279
[a2d198c702] - net: use _server for internal book-keeping (Fedor Indutny) #5262
[18d24e60c5] - (SEMVER-MINOR) net: add net.listening boolean property over a getter (José Moreira) #4743
[9cee86e3e9] - node: set process._eventsCount to 0 on startup (Evan Lucas) #5208
[f2e4f621c5] - node: improve process.nextTick performance (Ruben Bridgewater) #5092
[1c6f927bd1] - path: fix input type checking regression (Brian White) #5244
[4dae8caf7a] - path: performance improvements on all platforms (Brian White) #5123
[46be1f4d0c] - querystring: improve escape() performance (Brian White) #5012
[27e323e8c1] - querystring: improve unescapeBuffer() performance (Brian White) #5012
[301023b2b4] - querystring: improve parse() performance (Brian White) #5012
[98907c716b] - (SEMVER-MINOR) repl: allow multiline function call (Zirak) #3823
[c551da8cb4] - repl: handle quotes within regexp literal (Prince J Wesley) #5117
[15091ccca2] - src: remove unnecessary check (Brian White) #5233
[830bb04d90] - src: remove TryCatch in MakeCallback (Trevor Norris) #4507
[7f22c8c8a6] - src: remove unused TickInfo::in_tick() (Trevor Norris) #4507
[406eb1f516] - src: remove unused of TickInfo::last_threw() (Trevor Norris) #4507
[bcec2fecbd] - src: add AsyncCallbackScope (Trevor Norris) #4507
[2cb1594279] - src: fix MakeCallback error handling (Trevor Norris) #4507
[8d6e679a90] - src,test,tools: modify for more stringent linting (Rich Trott) #5214
[7684b0fcdf] - stream: fix no data on partial decode (Brian White) #5226
[f706cb0189] - streams: 5% throughput gain when sending small chunks (Matteo Collina) #4354
[25513a473a] - string_decoder: fix performance regression (Brian White) #5134
[0e85530d8c] - test: use String.prototype.repeat() for clarity (Rich Trott) #5311
[5683efb90a] - test: remove flaky mark for test-debug-no-context (Rich Trott) #5317
[c55bb79ace] - test: add test for https server close event (Braydon Fuller) #5106
[138ee983b0] - test: refactor test-http-destroyed-socket-write2 (Santiago Gimeno) #4970
[df7d91f36b] - test: mitigate flaky test-debug-no-context (Rich Trott) #5269
[d9177e7c26] - test: test-process-getactivehandles is flaky (Alexis Campailla) #5303
[f5cc04732f] - test: mark test-http-regr-gh-2928 flaky (Rich Trott) #5280
[78b349d5d1] - test: disable fs watch tests for AIX (Michael Dawson) #5187
[82ee5e94df] - test: mark test-http-agent flaky (Rich Trott) #5209
[1494d6f213] - test: minimal repl eval option test (Rich Trott) #5192
[e7bf951136] - test: add addons test for MakeCallback (Trevor Norris) #4507
[98596a94fa] - (SEMVER-MINOR) test: run v8 tests from node tree (Bryon Leung) #4704
[69c544f245] - test: fix flaky test-http-regr-gh-2928 (Rich Trott) #5154
[7c88410507] - test: fix child-process-fork-regr-gh-2847 again (Santiago Gimeno) #5179
[2c2cb6700d] - test: remove unneeded common.indirectInstanceOf() (Rich Trott) #5149
[6340974f21] - test: don't run test-tick-processor.js on Aix (Michael Dawson) #5093
[a8f4db236c] - test: improve path tests (Brian White) #5123
[8301773c1e] - test: fix child-process-fork-regr-gh-2847 (Santiago Gimeno) #5121
[f2bd86775b] - test: update arrow function style (cjihrig) #4813
[aed04b85c2] - tls: nullify .ssl on handle close (Fedor Indutny) #5168
[c3f8aab652] - (SEMVER-MINOR) tls: add getProtocol() to TLS sockets (Brian White) #4995
[7fc2e3161f] - tools: add Node.js-specific ESLint rules (Rich Trott) #5320
[983325cb0c] - tools: replace obsolete ESLint rules (Rich Trott) #5214
[f601d040b5] - tools: update ESLint to version 2.1.0 (Rich Trott) #5214
[13af565759] - tools: remove obsolete lint rules (Rich Trott) #5214
[c566f44f1b] - tools: add recommended ES6 lint rules (Rich Trott) #5210
[b611caa0ba] - tools: add recommended linting rules (Rich Trott) #5188
[b1a16d1202] - tools: remove excessive comments from .eslintrc (Rich Trott) #5151
[c4ed5ece4d] - tools: enable no-proto rule for linter (Jackson Tian) #5140
[86f8477b56] - tools: disallow mixed spaces and tabs for indents (Rich Trott) #5135
[21fd1496a9] - tools: alphabetize eslint stylistic issues section (Rich Trott)
[22c8d50a1f] - tools: parse types into links in doc html gen (Claudio Rodriguez) #4741
[5c54d4987d] - tools: enable no-redeclare rule for linter (Rich Trott) #5047
[a3a0cf603a] - tools: add arrow function rules to eslint (cjihrig) #4813
[bcc26f747f] - tools,doc: fix linting errors (Rich Trott) #5161
[47274704aa] - url: fix lint and deopt issues (Brian White) #5300
[729ad75860] - url: improve url.parse() performance (Brian White) #4892
[6c8378b15b] - vm: fix produceCachedData (Jiho Choi) #5343
[d1cacb814f] - (SEMVER-MINOR) vm: introduce cachedData/produceCachedData (Fedor Indutny) #4777

2016-02-09, Version 5.6.0 (Stable), @jasnell

This is an important security release. All Node.js users should consult the security release summary at nodejs.org for details on patched vulnerabilities.

Notable changes

http: fix defects in HTTP header parsing for requests and responses that can allow request smuggling (CVE-2016-2086) or response splitting (CVE-2016-2216). HTTP header parsing now aligns more closely with the HTTP spec including restricting the acceptable characters.
http-parser: upgrade from 2.6.0 to 2.6.1
npm: upgrade npm from 3.3.12 to 3.6.0 (Rebecca Turner) #4958
openssl: upgrade from 1.0.2e to 1.0.2f. To mitigate against the Logjam attack, TLS clients now reject Diffie-Hellman handshakes with parameters shorter than 1024-bits, up from the previous limit of 768-bits.

Commits

[3b6283c163] - benchmark: add a constant declaration for net (Minwoo Jung) #3950
[3175f7450e] - buffer: remove duplicated code in fromObject (HUANG Wei) #4948
[58d67e26a2] - buffer: validate list elements in Buffer.concat (Michaël Zasso) #4951
[bafc86f00e] - buffer: refactor redeclared variables (Rich Trott) #4886
[0fa4d90b94] - build: Add VARIATION variable to binary target (Stefan Budeanu) #4631
[ec62789152] - crypto: fix memory leak in LoadPKCS12 (Fedor Indutny) #5109
[d9e934c71f] - crypto: add pfx certs as CA certs too (Fedor Indutny) #5109
[0d4b538175] - crypto: use SSL_CTX_clear_extra_chain_certs. (Adam Langley) #4919
[abb0f6cd53] - crypto: fix build when OCSP-stapling not provided (Adam Langley) #4914
[755619c554] - crypto: use a const SSL_CIPHER (Adam Langley) #4913
[4f4c8ab3b4] - (SEMVER-MINOR) deps: update http-parser to version 2.6.1 (James M Snell)
[f0bd176d6d] - deps: reapply c-ares floating patch (Ben Noordhuis) #5090
[f1a0827417] - deps: sync with upstream bagder/c-ares@2bae2d5 (Fedor Indutny) #5090
[cbf36de8f1] - deps: upgrade npm to 3.6.0 (Rebecca Turner) #4958
[dd97d07a0d] - deps: backport 8d00c2c from v8 upstream (Gibson Fahnestock) #5024
[b75263094b] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) #1836
[b312b7914f] - deps: upgrade openssl sources to 1.0.2f (Myles Borins) #4961
[fa0457ed04] - dns: throw a TypeError in lookupService with invalid port (Evan Lucas) #4839
[c4c8b3bf2e] - doc: fix dgram doc indentation (Rich Trott) #5118
[027cd2719f] - doc: clarify code of conduct reporting (Julie Pagano) #5107
[9f7aa6f868] - doc: clarify dgram socket.send() multi-buffer support (Matteo Collina) #5130
[a96ae2cb37] - doc: console is asynchronous unless it's a file (Ben Noordhuis) #5133
[4c54c8f309] - doc: fix typo in dgram doc (Rich Trott) #5114
[9c93ea3d51] - doc: fix links order in Buffer doc (Alexander Makarenko) #5076
[a0ba378880] - doc: minor improvement in OS docs (Alexander Makarenko) #5006
[1e2108a6b7] - doc: fix links in Addons docs (Alexander Makarenko) #5072
[e5134b1701] - doc: fix inconsistent styling (Brian White) #4996
[dde160378e] - doc: fix link in cluster documentation (Timothy Gu) #5068
[e5254c12f4] - doc: fix reference to API hash.final (Minwoo Jung) #5050
[87fd9968a8] - doc: clarify optional arguments of Buffer methods (Michaël Zasso) #5008
[9908eced24] - doc: uppercase 'RSA-SHA256' in crypto.markdown (Rainer Oviir) #5044
[bf0383bbea] - doc: apply consistent styling for functions (Rich Trott) #4974
[8c7f4bab2d] - doc: multiple improvements in Stream docs (Alexander Makarenko) #5009
[ee013715b9] - doc: improve styling consistency in VM docs (Alexander Makarenko) #5005
[9824b0d132] - doc: fix anchor links from stream to http and events (piepmatz) #5007
[2c85f79569] - doc: minor improvement to HTTPS doc (Alexander Makarenko) #5002
[9cf1370017] - doc: improve styling consistency in Buffer docs (Alexander Makarenko) #5001
[2750cb0613] - doc: consistent styling for functions in TLS docs (Alexander Makarenko) #5000
[4758bf13a5] - doc: update npm LICENSE using license-builder.sh (Rebecca Turner) #4958
[3b08b5d22c] - doc: fix minor typo in process doc (Prayag Verma) #5018
[129977c9c7] - doc: fix typo in Readme.md (Prayag Verma) #5017
[5de3dc557f] - doc: fix notDeepEqual API (Minwoo Jung) #4971
[d47dadcc1f] - doc: make buffer methods styles consistent (Timothy Gu) #4873
[17888b122c] - doc: fix JSON generation for aliased methods (Timothy Gu) #4871
[396e4b9199] - doc: add more details to process.env (Evan Lucas) #4924
[bc11bf4659] - doc: don't use "interface" as a variable name (ChALkeR) #4900
[bcf55d2f44] - doc: spell writable consistently (Peter Lyons) #4954
[4a6d0ac436] - doc: update eol handling in readline (Kári Tristan Helgason) #4927
[e65d3638c0] - doc: replace function expressions with arrows (Benjamin Gruenbaum) #4832
[423a58d66f] - doc: show links consistently in deprecations (Sakthipriyan Vairamani) #4907
[fd87659139] - doc: add docs working group (Bryan English) #4244
[19ed619cff] - doc: remove unnecessary bind(this) (Dmitriy Lazarev) #4797
[5129930786] - doc: keep the names in sorted order (Sakthipriyan Vairamani) #4876
[3c46c10d54] - doc: fix nonsensical grammar in Buffer::write (Jimb Esser) #4863
[a1af6fc1a7] - doc: add servername parameter docs (Alexander Makarenko) #4729
[f4eeba8467] - doc: fix code type of markdowns (Jackson Tian) #4858
[fa1d453359] - doc: check for errors in 'listen' event (Benjamin Gruenbaum) #4834
[f462320f74] - doc: undo move http.IncomingMessage.statusMessage (Jeff Harris) #4822
[711245e5ac] - doc: style fixes for the TOC (Roman Reiss) #4748
[611c2f6fdf] - doc: proper markdown escaping -> __, *, _ (Robert Jefe Lindstaedt) #4805
[5a860d9cb7] - doc: Examples work when data exceeds buffer size (Glen Arrowsmith) #4811
[71ba14de86] - doc: update list of personal traits in CoC (Kat Marchán) #4801
[97eedfc57a] - doc: harmonize $ node command line notation (Robert Jefe Lindstaedt) #4806
[2dde0f08c9] - doc: add buf.indexOf encoding param with example (Karl Skomski) #3373
[66c74548de] - doc: fenced all code blocks, typo fixes (Robert Jefe Lindstaedt) #4733
[54e8845b5e] - fs: refactor redeclared variables (Rich Trott) #4959
[fa940cf9bc] - fs: remove unused branches (Benjamin Gruenbaum) #4795
[7bef1b7907] - (SEMVER-MINOR) http: strictly forbid invalid characters from headers (James M Snell)
[9b03af254a] - http: remove reference to onParserExecute (Tom Atkinson) #4773
[101de9de3f] - https: evict cached sessions on error (Fedor Indutny) #4982
[b2c8b7f6d3] - internal/child_process: call postSend on error (Fedor Indutny) #4752
[55030922e5] - lib: scope loop variables (Rich Trott) #4965
[725ad5b1ce] - lib: remove string_decoder.js var redeclarations (Rich Trott) #4978
[c09eb44a59] - module: refactor redeclared variable (Rich Trott) #4962
[612ce66c78] - net: refactor redeclared variables (Rich Trott) #4963
[c9b05dafe0] - net: move isLegalPort to internal/net (Evan Lucas) #4882
[7003a4e3d8] - node_contextify: do not incept debug context (Myles Borins) #4815
[5a77c095a6] - process: support symbol events (cjihrig) #4798
[85743c0e92] - querystring: check that maxKeys is finite (Myles Borins) #5066
[5a10fe932c] - querystring: use String.prototype.split's limit (Manuel Valls) #2288
[2844cc03dc] - repl: remove variable redeclaration (Rich Trott) #4977
[b5b5bb1e3c] - src: avoid compiler warning in node_revert.cc (James M Snell)
[d387591bbb] - (SEMVER-MINOR) src: add --security-revert command line flag (James M Snell)
[95615196de] - src: clean up usage of __proto__ (Jackson Tian) #5069
[e93b024214] - src: remove no longer relevant comments (Chris911) #4843
[a2c257a3ef] - src: fix negative values in process.hrtime() (Ben Noordhuis) #4757
[b46f3b84d4] - src,deps: replace LoadLibrary by LoadLibraryW (Cheng Zhao) iojs/io.js#226
[ee8d4bb075] - stream: prevent object map change in TransformState (Evan Lucas) #5032
[c8b6de244e] - stream: refactor redeclared variables (Rich Trott) #4816
[9dcc45e9c5] - test: enable to work pkcs12 test in FIPS mode (Shigeki Ohtsu) #5150
[e4390664ae] - test: disable gh-5100 test when in FIPS mode (Fedor Indutny) #5144
[cf3aa911ec] - test: fix flaky test-dgram-pingpong (Rich Trott) #5125
[63884f57dd] - test: mark flaky tests on Raspberry Pi (Rich Trott) #5082
[09917c99d8] - test: fix net-socket-timeout-unref flakiness (Santiago Gimeno) #4772
[83da19aa48] - test: fix redeclared test-event-emitter-* vars (Rich Trott) #4985
[87b27c913d] - test: fix redeclared test-intl var (Rich Trott) #4988
[e98772d68e] - test: remove redeclared var in test-domain (Rich Trott) #4984
[443d0463ca] - test: add common.platformTimeout() to dgram test (Rich Trott) #4938
[90219c3398] - test: fix flaky cluster test on Windows 10 (Rich Trott) #4934
[3488fa81b5] - test: fix variable redeclarations (Rich Trott) #4992
[7dc0905d4d] - test: fix redeclared test-util-* vars (Rich Trott) #4994
[53e7d605c9] - test: fix redeclared vars in sequential tests (Rich Trott) #4999
[a62ace9f7e] - test: fix tls-no-rsa-key flakiness (Santiago Gimeno) #4043
[9b8f025816] - test: fix redeclared vars in test-url (Rich Trott) #4993
[51fb8845d5] - test: fix redeclared test-path vars (Rich Trott) #4991
[b16b360ae8] - test: fix var redeclarations in test-os (Rich Trott) #4990
[d6199773e8] - test: fix test-net-* variable redeclarations (Rich Trott) #4989
[9dd5b3e01b] - test: fix redeclared test-http-* vars (Rich Trott) #4987
[835bf13c1d] - test: fix var redeclarations in test-fs-* (Rich Trott) #4986
[71d7a4457d] - test: fix redeclared vars in test-vm-* (Rich Trott) #4997
[38459402a5] - test: fix inconsistent styling in test-url (Brian White) #5014
[4934798c0d] - test: pummel test fixes (Rich Trott) #4998
[3970504298] - test: remove var redeclarations in test-crypto-* (Rich Trott) #4981
[a2881e2187] - test: remove test-cluster-* var redeclarations (Rich Trott) #4980
[c3d93299c2] - test: fix test-http-extra-response flakiness (Santiago Gimeno) #4979
[0384a43885] - test: Add assertion for TLS peer certificate fingerprint (Alan Cohen) #4923
[48a353fe41] - test: scope redeclared vars in test-child-process* (Rich Trott) #4944
[89d1149467] - test: fix test-tls-zero-clear-in flakiness (Santiago Gimeno) #4888
[f7ed47341a] - test: remove Object.observe from tests (Vladimir Kurchatkin) #4769
[d95e53dc3b] - test: refactor switch (Rich Trott) #4870
[7f1e3e929a] - test: remove race condition in http flood test (Rich Trott) #4793
[6539c64e67] - test: scope redeclared variable (Rich Trott) #4854
[62fb941557] - test: fix irregular whitespace issue (Roman Reiss) #4864
[3b225209f0] - test: fs.link() test runs on same device (Drew Folta) #4861
[1860eae110] - test: refactor test-net-settimeout (Rich Trott) #4799
[ae9a8cd053] - test: mark test-tick-processor flaky (Rich Trott) #4809
[57cea9e421] - test: remove test-http-exit-delay (Rich Trott) #4786
[2119c76d5a] - test: refactor test-fs-watch (Rich Trott) #4776
[e487b72459] - test: move cluster tests to parallel (Rich Trott) #4774
[8c694a658c] - test: improve test-cluster-disconnect-suicide-race (Rich Trott) #4739
[14f5bb7a99] - test,buffer: refactor redeclarations (Rich Trott) #4893
[62479e3406] - tls: scope loop vars with let (Rich Trott) #4853
[d6fbd81a7a] - tls_wrap: reach error reporting for UV_EPROTO (Fedor Indutny) #4885
[f75d06bf10] - tools: lint for empty character classes in regex (Rich Trott) #5115
[53cbd0564f] - tools: lint for spacing around unary operators (Rich Trott) #5063
[7fa5959c59] - tools: fix redeclared vars in doc/json.js (Rich Trott) #5047
[e95fd6ae70] - tools: apply linting to doc tools (Rich Trott) #4973
[777ed82162] - tools: fix detecting constructor for JSON doc (Timothy Gu) #4966
[5d55f59c85] - tools: add property types in JSON documentation (Timothy Gu) #4884
[fd5c56698e] - tools: add support for subkeys in release tools (Myles Borins) #4807
[34df6a5c0c] - tools: enable assorted ESLint error rules (Roman Reiss) #4864
[386ad7e0b5] - tools: fix setting path containing an ampersand (Brian White) #4804
[e415eb27e5] - url: change scoping of variables with let (Kári Tristan Helgason) #4867

2016-01-20, Version 5.5.0 (Stable), @evanlucas

Notable Changes

events: make sure console functions exist (Dave) #4479
fs: add autoClose option to fs.createWriteStream (Saquib) #3679
http: improves expect header handling (Daniel Sellers) #4501
node: allow preload modules with -i (Evan Lucas) #4696
v8,src: expose statistics about heap spaces (v8.getHeapSpaceStatistics()) (Ben Ripkens) #4463

Minor performance improvements:
- lib: Use arrow functions instead of bind where possible (Minwoo Jung) #3622.
  - (Mistakenly missing from v5.4.0)
- module: cache stat() results more aggressively (Ben Noordhuis) #4575
- querystring: improve parse() performance (Brian White) #4675

Known issues

Surrogate pair in REPL can freeze terminal. #690
Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

[8d0ca10752] - buffer: make byteLength work with Buffer correctly (Jackson Tian) #4738
[83d2b7707e] - buffer: remove unnecessary TODO comments (Peter Geiss) #4719
[8182ec094d] - build: add option to select VS version (julien.waechter) #4645
[4383acd9f4] - build: fix and refactor VTune config in vcbuild.bat (Rod Vagg) #4192
[be0b0b8cb9] - build: minor corrections in VTune configure text (Rod Vagg) #4192
[9571be12f6] - cluster: fix race condition setting suicide prop (Santiago Gimeno) #4349
[ebd9addcd1] - crypto: clear error stack in ECDH::Initialize (Fedor Indutny) #4689
[66b9c0d8bd] - debugger: remove variable redeclarations (Rich Trott) #4633
[88b2889679] - dgram: prevent disabled optimization of bind() (Brian White) #4613
[8a11b8c0ef] - doc: restore ICU third-party software licenses (Richard Lau) #4762
[212a44df03] - doc: clarify protocol default in http.request() (cjihrig) #4714
[3297036345] - doc: update branch-diff arguments in release doc (Rod Vagg) #4691
[666c089e68] - doc: fix named anchors in addons.markdown and http.markdown (Michael Theriot) #4708
[310530b7ec] - doc: add path property to Write/ReadStream in fs.markdown (Claudio Rodriguez) #4368
[3470574cb6] - doc: clarify explanation of first stream section (Vitor Cortez) #4234
[d91646b9c7] - doc: rebuild LICENSE using tools/license-builder.sh (Rod Vagg) #4194
[265e2f557b] - doc: fix typo in doc/node.1 (Jérémy Lal) #4680
[4c132fe61e] - doc: make references clickable (Roman Klauke) #4654
[d139704ff7] - doc: improve child_process.execFile() code example (Ryan Sobol) #4504
[eeb6fdcd0f] - doc: add docs for more stream options (zoubin) #4639
[b6ab6d2de5] - doc: add branch-diff example to releases.md (Myles Borins) #4636
[287325c5e8] - docs: update gpg key for Myles Borins (Myles Borins) #4657
[65825b79aa] - docs: fix npm command in releases.md (Myles Borins) #4656
[f9a59c1d3b] - (SEMVER-MINOR) events: make sure console functions exist (Dave) #4479
[6039a7c1b5] - (SEMVER-MINOR) fs: add autoClose option to fs.createWriteStream (Saquib) #3679
[ed55169834] - gitignore: never ignore debug module (Michaël Zasso) #2286
[d755432fa9] - (SEMVER-MINOR) http: improves expect header handling (Daniel Sellers) #4501
[7ce0e04f44] - lib: fix style issues after eslint update (Michaël Zasso) nodejs/io.js#2286
[ae5bcf9528] - lib: use arrow functions instead of bind (Minwoo Jung) #3622
[0ec093cd41] - lib,test: remove extra semicolons (Michaël Zasso) #2205
[d8f5bd4fe1] - module: avoid ArgumentsAdaptorTrampoline frame (Ben Noordhuis) #4575
[83f8d98806] - module: cache stat() results more aggressively (Ben Noordhuis) #4575
[ff64a4c395] - (SEMVER-MINOR) node: allow preload modules with -i (Evan Lucas) #4696
[4bc1a47761] - querystring: improve parse() performance (Brian White) #4675
[ad63d350d4] - readline: Remove XXX and output debuglog (Kohei TAKATA) #4690
[da550aa063] - repl: make sure historyPath is trimmed (Evan Lucas) #4539
[a2c257a3ef] - src: fix negative values in process.hrtime() (Ben Noordhuis) #4757
[8bad51977a] - src: return UV_EAI_NODATA on empty lookup (cjihrig) #4715
[761cf2bf6a] - src: don't check failure with ERR_peek_error() (Ben Noordhuis) #4731
[426ff820f5] - stream: prevent object map change in ReadableState (Evan Lucas) #4761
[e65f1f7954] - test: fix tls-multi-key race condition (Santiago Gimeno) #3966
[3727ae0d7d] - test: use addon.md block headings as test dir names (Rod Vagg) #4412
[a347cd793f] - test: make test-cluster-disconnect-leak reliable (Rich Trott) #4736
[a39b28bb5a] - test: fix issues for space-in-parens ESLint rule (Roman Reiss) #4753
[d1aabd6264] - test: fix style issues after eslint update (Michaël Zasso) nodejs/io.js#2286
[e98bcfa2cb] - test: remove 1 second delay from test (Rich Trott) #4616
[6cfd0b5a32] - test: fix flaky test-net-socket-local-address (cjihrig) #4650
[e22cc6c2eb] - test: fix race in test-net-server-pause-on-connect (Rich Trott) #4637
[9164c00bdb] - test: move resource intensive tests to sequential (Rich Trott) #4615
[d8ba2c0de4] - test: fix http-upgrade-client flakiness (Santiago Gimeno) #4602
[6018fa1f57] - test: fix http-upgrade-agent flakiness (Santiago Gimeno) #4520
[8f4f5b3ca5] - tools: enable space-in-parens ESLint rule (Roman Reiss) #4753
[162e16afdb] - tools: enable no-extra-semi rule in eslint (Michaël Zasso) #2205
[031b87d42d] - tools: add license-builder.sh to construct LICENSE (Rod Vagg) #4194
[ec8e0ae697] - tools: fix style issue after eslint update (Michaël Zasso) nodejs/io.js#2286
[4d5ee7a512] - tools: update eslint config (Michaël Zasso) nodejs/io.js#2286
[2d441493a4] - tools: update eslint to v1.10.3 (Michaël Zasso) nodejs/io.js#2286
[fe23f4241f] - tools: fix license-builder.sh for ICU (Richard Lau) #4762
[5f57005ec9] - (SEMVER-MINOR) v8,src: expose statistics about heap spaces (Ben Ripkens) #4463

2016-01-12, Version 5.4.1 (Stable), @TheAlphaNerd

Notable Changes

Minor performance improvements:
- module: move unnecessary work for early return (Andres Suarez) #3579
Various bug fixes
Various doc fixes
Various test improvements

Known issues

Surrogate pair in REPL can freeze terminal. #690
Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

commits

[ff539c5bb5] - cluster: ignore queryServer msgs on disconnection (Santiago Gimeno) #4465
[00148b3de1] - deps: backport 066747e from upstream V8 (Ali Ijaz Sheikh) #4625
[3912b5cbda] - doc: adds usage of readline line-by-line parsing (Robert Jefe Lindstaedt) #4609
[102fb7d3a1] - doc: remove "above" and "below" references (Richard Sun) #4499
[df87176ae0] - doc: update stylesheet to match frontpage (Roman Reiss) #4621
[ede98d1f98] - doc: stronger suggestion for userland assert (Wyatt Preul) #4535
[fdfc72c977] - doc: label http.IncomingMessage as a Class (Sequoia McDowell) #4589
[b181e26975] - doc: document http's server.listen return value (Sequoia McDowell) #4590
[97aaeb8519] - doc: fix description about the latest-codename (Minwoo Jung) #4583
[0126615d1e] - doc: add Evan Lucas to Release Team (Evan Lucas) #4579
[ec73c69412] - doc: add Myles Borins to Release Team (Myles Borins) #4578
[e703c9a4e2] - doc: bring releases.md up to date (cjihrig) #4540
[ac1108d5e7] - doc: add missing backtick for readline (Brian White) #4549
[09bc0c6a05] - doc: improvements to crypto.markdown copy (James M Snell) #4435
[787c5d96bd] - http: remove variable redeclaration (Rich Trott) #4612
[145b66820f] - module: move unnecessary work for early return (Andres Suarez) #3579
[ffb7deb443] - net: remove hot path comment from connect (Evan Lucas) #4648
[799aa74d90] - net: fix dns lookup for android (Josh Dague) #4580
[9accebe087] - net, doc: fix line wrapping lint in net.js (James M Snell) #4588
[37a546b490] - src: remove redeclarations of variables (Rich Trott) #4605
[b515ccc2a1] - stream: remove useless if test in transform (zoubin) #4617
[ea6e26d904] - test: remove duplicate fork module import (Rich Trott) #4634
[b14b2aec5e] - test: require common module only once (Rich Trott) #4611
[f28a640505] - test: only include http module once (Rich Trott) #4606
[6f9a96f497] - test: fix flaky unrefed timers test (Rich Trott) #4599
[b70eec8f7b] - tls_legacy: do not read on OpenSSL's stack (Fedor Indutny) #4624

2016-01-06, Version 5.4.0 (Stable), @Fishrock123

Notable changes

http:
- A new status code was added: 451 - "Unavailable For Legal Reasons" (Max Barinov) #4377.
- Idle sockets that have been kept alive now handle errors (José F. Romaniello) #4482.
This release also includes several minor performance improvements:
- assert: deepEqual is now speedier when comparing TypedArrays (Claudio Rodriguez) #4330.
- lib: Use arrow functions instead of bind where possible (Minwoo Jung) node#3622.
- node: Improved accessor perf of process.env (Trevor Norris) #3780.
- node: Improved performance of process.hrtime() (Trevor Norris) #3780, (Evan Lucas) #4484.
- node: Improved GetActiveHandles performance (Trevor Norris) #3780.
- util: Use faster iteration in util.format() (Jackson Tian) #3964.

Known issues

Surrogate pair in REPL can freeze terminal. #690
Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

[d265fc821a] - assert: typed array deepequal performance fix (Claudio Rodriguez) #4330
[6d8053ab56] - buffer: faster case for create Buffer from new Buffer(0) (Jackson Tian) #4326
[8781c59878] - buffer: refactor create buffer (Jackson Tian) #4340
[252628294b] - child_process: guard against race condition (Rich Trott) #4418
[fcf632bc6a] - crypto: load PFX chain the same way as regular one (Fedor Indutny) #4165
[a5094a35a0] - debugger: guard against call from non-node context (Ben Noordhuis) #4328
[b4c51c5b76] - deps: backport 200315c from V8 upstream (Vladimir Kurchatkin) #4128
[334e73942e] - doc: fix heading level error in Buffer doc (Shigeki Ohtsu) #4537
[5be0259181] - doc: close backtick in process.title description (Dave) #4534
[35aec4c14d] - doc: fix numbering in stream.markdown (Richard Sun) #4538
[982f3227a5] - doc: improvements to dgram.markdown copy (James M Snell) #4437
[6cdfa38d23] - doc: improvements to errors.markdown copy (James M Snell) #4454
[6c7bcd5007] - doc: fix website wg mislink (jona) #4357
[eee50821dc] - doc: mention that http.Server inherits from net.Server (Ryan Sobol) #4455
[c745b4d5f8] - doc: explain ClientRequest#setTimeout time unit (Ben Ripkens) #4458
[40076bf7f8] - doc: fix spelling error in lib/url.js comment (Nik Nyby) #4390
[5a223d64e3] - doc: add anchors for _transform _flush _writev in stream.markdown (iamchenxin) #4448
[e8bbeecc4c] - doc: improvements to debugger.markdown copy (James M Snell) #4436
[ccd75fe3fb] - doc: improvements to events.markdown copy (James M Snell) #4468
[ed15962777] - doc: improvements to dns.markdown copy (James M Snell) #4449
[e177cc9fdf] - doc: improvements to console.markdown copy (James M Snell) #4428
[c1bc9a1023] - doc: improve child_process.markdown copy (James M Snell) #4383
[150f62847c] - doc: copyedit setTimeout() documentation (Rich Trott) #4434
[9e667354be] - doc: fix formatting in process.markdown (Rich Trott) #4433
[bc1c0dc3fb] - doc: catch the WORKING_GROUPS.md bootstrap docs up to date (James M Snell) #4367
[c835ba3601] - doc: improve assert.markdown copy (James M Snell) #4360
[e79eda74c0] - doc: copyedit releases.md (Rich Trott) #4384
[6450d8667f] - doc: improve grammar in tls docs (Adri Van Houdt) #4315
[474a0f081a] - doc: improvements to buffer.markdown copy (James M Snell) #4370
[57684d650e] - doc: improve addons.markdown copy (James M Snell) #4320
[04dd861221] - doc: fix, modernize examples in docs (James M Snell) #4282
[5ce6e99474] - doc: Typo in buffer.markdown referencing buf.write() (chrisjohn404) #4324
[699bf2c464] - doc: fix link in addons.markdown (Nicholas Young) #4331
[e742422757] - fs: use pushValueToArray for readdir(Sync) (Trevor Norris) #3780
[1dd2d015d2] - (SEMVER-MINOR) http: handle errors on idle sockets (José F. Romaniello) #4482
[083ae166bb] - http: use self.keepAlive instead of self.options.keepAlive (Damian Schenkelman) #4407
[ffb4a6e0e4] - http: fix non-string header value concatenation (Brian White) #4460
[c77fd6829a] - (SEMVER-MINOR) http: 451 status code "Unavailable For Legal Reasons" (Max Barinov) #4377
[8f7af9a489] - http: remove excess calls to removeSocket (Dave) #4172
[b841967103] - http: Remove an unnecessary assignment (Bo Borgerson) #4323
[b8366e76dd] - http_parser: use pushValueToArray for headers (Trevor Norris) #3780
[ca97e7276e] - https: use servername in agent key (Fedor Indutny) #4389
[b5aaccc6af] - lib: remove unused modules (Rich Trott) #4396
[921fb540c1] - node: improve performance of process.hrtime() (Evan Lucas) #4484
[ecef817a28] - node: improve accessor perf of process.env (Trevor Norris) #3780
[89f056bdf3] - node: improve performance of hrtime() (Trevor Norris) #3780
[c8fc217dc7] - node: improve GetActiveHandles performance (Trevor Norris) #3780
[8464667071] - node: fix erroneously named function call (Trevor Norris) #3780
[e57fd51a5e] - os: fix crash in GetInterfaceAddresses (Martin Bark) #4272
[65c40d753f] - repl: remove unused function (Rich Trott)
[3d41a44dba] - repl: Fixed node repl history edge case. (Mudit Ameta) #4108
[d11930d604] - repl: use String#repeat instead of Array#join (Evan Lucas) #3900
[4220d25626] - test: fix linting for the v5.x branch (Jeremiah Senkpiel) #4547
[4b14f1c983] - test: remove unused vars (Rich Trott) #4536
[2a69ab32ec] - test: add test-domain-exit-dispose-again back (Julien Gilli) #4256
[ae0246641c] - test: remove unused vars from parallel tests (Rich Trott) #4511
[984db93e7c] - test: fix flaky test-cluster-shared-leak (Rich Trott) #4510
[30b0d7583a] - test: fix flaky streams test (Rich Trott) #4516
[46fefbc1b5] - test: fix flaky test-http-agent-keepalive (Rich Trott) #4524
[e04a8401d9] - test: remove flaky designations for tests (Rich Trott) #4519
[a703b1bf73] - test: remove time check (Rich Trott) #4494
[02b3a5be52] - test: refactor test-fs-empty-readStream (Rich Trott) #4490
[ab3e5c1417] - test: write to tmp dir rather than fixture dir (Rich Trott) #4489
[06043fdfa3] - test: remove unused modules (Rich Trott) #4475
[f1a66bc249] - test: clarify role of domains in test (Rich Trott) #4474
[08a3490dd6] - test: inherit JOBS from environment (Johan Bergström) #4495
[3bfc18763a] - test: improve assert message (Rich Trott) #4461
[d46d850461] - test: shorten path for bogus socket (Rich Trott) #4478
[f68f86cd0a] - test: fix race condition in test-http-client-onerror (Devin Nakamura) #4346
[ec0b6362cf] - test: remove unused assert module imports (Rich Trott) #4438
[ba2445046c] - test: don't use cwd for relative path (Johan Bergström) #4477
[5110e4deed] - test: don't assume a certain folder structure (Johan Bergström) #3325
[55c6946400] - test: make temp path customizable (Johan Bergström) #3325
[b19d19efaa] - test: extend timeout in Debug mode (Rich Trott) #4431
[c6a99ddd37] - test: remove unused variables from net tests (Rich Trott) #4430
[54004f0e26] - test: remove unused vars in ChildProcess tests (Rich Trott) #4425
[e72112f90e] - test: fix flaky cluster-disconnect-race (Brian White) #4457
[715afc9bbd] - test: fix flaky cluster-net-send (Brian White) #4444
[03c4bc704f] - test: fix flaky child-process-fork-regr-gh-2847 (Brian White) #4442
[684eb32072] - test: remove unused variables from HTTPS tests (Rich Trott) #4426
[585c01f674] - test: remove unused variables from TLS tests (Rich Trott) #4424
[c36ca37e2a] - test: remove unused variables form http tests (Rich Trott) #4422
[c639d0f1fe] - test: mark test-debug-no-context is flaky (Rich Trott) #4421
[cd79ec268d] - test: remove unnecessary assignments (Rich Trott) #4408
[0799a9abaf] - test: remove unused var from test-assert.js (Rich Trott) #4405
[3710028a85] - test: remove unused util imports (Rich Trott) #4397
[8c9d0c1f6f] - test: refactor test-net-connect-options-ipv6 (Rich Trott) #4395
[874209022f] - test: fix http-response-multiheaders (Santiago Gimeno) #3958
[71b79bcf54] - test: test each block in addon.md contains js & cc (Rod Vagg) #4411
[00b37de243] - test: fix domain-top-level-error-handler-throw (Santiago Gimeno) #4364
[6d14b6520f] - test: use platformTimeout() in more places (Brian White) #4387
[82f74caa56] - test: fix flaky test-net-error-twice (Brian White) #4342
[96501e55be] - test: try other ipv6 localhost alternatives (Brian White) #4325
[69343d6d2e] - tls_wrap: clear errors on return (Fedor Indutny) #4515
[ca9812cf4d] - tools: fix warning in doc parsing (Shigeki Ohtsu) #4537
[386030b524] - tools: implement no-unused-vars for eslint (Rich Trott) #4536
[14a947fc70] - tools: run tick processor without forking (Matt Loring) #4224
[8039ca06eb] - util: faster arrayToHash (Jackson Tian) #3964

2015-12-16, Version 5.3.0 (Stable), @cjihrig

Notable changes

buffer:
- Buffer.prototype.includes() has been added to keep parity with TypedArrays. (Alexander Martin) #3567.
domains:
- Fix handling of uncaught exceptions. (Julien Gilli) #3654.
https:
- Added support for disabling session caching. (Fedor Indutny) #4252.
repl:
- Allow third party modules to be imported using require(). This corrects a regression from 5.2.0. (Ben Noordhuis) #4215.
deps:
- Upgrade libuv to 1.8.0. (Saúl Ibarra Corretgé) #4276.

Known issues

Surrogate pair in REPL can freeze terminal. #690
Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

[6ca5ea3860] - 2015-12-09, Version 5.2.0 (Stable) (Rod Vagg) #4181
[da5cdc2207] - assert: accommodate ES6 classes that extend Error (Rich Trott) #4166
[67e181986a] - (SEMVER-MINOR) buffer: add includes() for parity with TypedArray (Alexander Martin) #3567
[84dea1bd0c] - configure: fix arm vfpv2 (Jörg Krause) #4203
[a7f5dfd14c] - configure: use __ARM_ARCH to determine arm version (João Reis) #4123
[0e3912be0b] - configure: respect CC_host in host arch detection (João Reis) #4117
[69b94ec55c] - deps: upgrade libuv to 1.8.0 (Saúl Ibarra Corretgé) #4276
[a8854e5b59] - doc: document the cache parameter for fs.realpathSync (Jackson Tian) #4285
[9e1b7aa874] - doc: document backlog for server.listen() variants (Jan Schär) #4025
[435d571f22] - doc: update AUTHORS list (Rod Vagg) #4183
[3b3061365a] - doc: update irc channels: #node.js and #node-dev (Nelson Pecora) #2743
[9538fd02e5] - doc: clarify error events in HTTP module documentation (Lenny Markus) #4275
[c6efd535e4] - doc: fix improper http.get sample code (Hideki Yamamura) #4263
[498c9adb08] - doc: add CTC meeting minutes 2015-10-28 (Rod Vagg) #3661
[671347cf13] - doc: fixup socket.remoteAddress (Arthur Gautier) #4198
[f050cab3d8] - doc: copyedit console doc (Rich Trott) #4225
[1a21a5368b] - doc: move description of 'equals' method to right place (janriemer) #4227
[9a9c5259bf] - doc: Fixing broken links to the v8 wiki (Tom Gallacher) #4241
[37ed05b8c1] - doc: copyedit child_process doc (Rich Trott) #4188
[e47ae5808b] - doc: copyedit buffer doc (Rich Trott) #4187
[70fb06a90b] - doc: clarify assert.fail doc (Rich Trott) #4186
[e3187cc81e] - doc: copyedit addons doc (Rich Trott) #4185
[931ab967ff] - doc: add calvinmetcalf to collaborators (Calvin Metcalf) #4218
[01ce23148b] - doc: add mcollina to collaborators (Matteo Collina) #4220
[bd8753aabf] - doc: add rmg to collaborators (Ryan Graham) #4219
[73a9a6fc92] - doc: harmonize description of ca argument (Ben Noordhuis) #4213
[dfc8bedbc5] - doc: change references from node to Node.js (Roman Klauke) #4177
[7a518788e9] - doc, test: symbols as event names (Bryan English) #4151
[425a3545d2] - (SEMVER-MINOR) domains: fix handling of uncaught exceptions (Julien Gilli) #3654
[acef181fde] - (SEMVER-MINOR) https: support disabling session caching (Fedor Indutny) #4252
[2a60e2ad71] - module,src: do not wrap modules with -1 lineOffset (cjihrig) #4298
[d3c498b1b7] - node: remove unused variables in AppendExceptionLine (Yazhong Liu) #4264
[aad6b9f0eb] - repl: display error message when loading directory (Prince J Wesley) #4170
[213ede6cee] - repl: fix require('3rdparty') regression (Ben Noordhuis) #4215
[f176b31e74] - src: remove __builtin_bswap16 call (Ben Noordhuis) #4290
[ce2471673f] - src: remove unused BITS_PER_LONG macro (Ben Noordhuis) #4290
[b799a74709] - src: fix line numbers on core errors (cjihrig) #4254
[c311b61430] - src: fix deprecation message for ErrnoException (Martin von Gagern) #4269
[2859f9ef92] - test: fix debug-port-cluster flakiness (Ben Noordhuis) #4310
[cb0b4a6bc0] - test: add test for debugging one line files (cjihrig) #4298
[0b9c3a30d6] - test: add test for tls.parseCertString (Evan Lucas) #4283
[7598ed6cc0] - test: parallelize test-repl-persistent-history (Jeremiah Senkpiel) #4247
[668449ad14] - test: use regular timeout times for ARMv8 (Jeremiah Senkpiel) #4248
[23e7703c85] - test: fix http-many-ended-pipelines flakiness (Santiago Gimeno) #4041
[3b94991bda] - test: fix tls-inception flakiness (Santiago Gimeno) #4195
[86a3bd09b0] - test: fix tls-inception (Santiago Gimeno) #4195
[1e89830a11] - test: don't assume openssl s_client supports -ssl3 (Ben Noordhuis) #4204
[c5b4f6bc99] - (SEMVER-MINOR) tls: introduce secureContext for tls.connect (Fedor Indutny) #4246
[e0bb118a1d] - tls_wrap: inherit from the AsyncWrap first (Fedor Indutny) #4268
[d63cceeb10] - tools: add .editorconfig (ronkorving) #2993
[4b267df93e] - udp: remove a needless instanceof Buffer check (ronkorving) #4301

2015-12-09, Version 5.2.0 (Stable), @rvagg

Notable changes

build:
- Add support for Intel's VTune JIT profiling when compiled with --enable-vtune-profiling. For more information about VTune, see https://software.intel.com/en-us/node/544211. (Chunyang Dai) #3785.
- Properly enable V8 snapshots by default. Due to a configuration error, snapshots have been kept off by default when the intention is for the feature to be enabled. (Fedor Indutny) #3962.
crypto:
- Simplify use of ECDH (Elliptic Curve Diffie-Hellman) objects (created via crypto.createECDH(curve_name)) with private keys that are not dynamically generated via generateKeys(). The public key is now computed when explicitly setting a private key. Added validity checks to reduce the possibility of computing weak or invalid shared secrets. Also, deprecated the setPublicKey() method for ECDH objects as its usage is unnecessary and can lead to inconsistent state. (Michael Ruddy) #3511.
- Update root certificates from the current list stored maintained by Mozilla NSS. (Ben Noordhuis) #3951.
- Multiple CA certificates can now be passed with the ca option to TLS methods as an array of strings or in a single new-line separated string. (Ben Noordhuis) #4099
tools: Include a tick processor in core, exposed via the --prof-process command-line argument which can be used to process V8 profiling output files generated when using the --prof command-line argument. (Matt Loring) #4021.

Known issues

Surrogate pair in REPL can freeze terminal. #690
Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

[08a3f29fd4] - buffer: fix range checking for slowToString (Matt Loring) #4019
[e3a8e8bba4] - buffer: Prevent Buffer constructor deopt (Bryce Baril) #4158
[0e18e68324] - buffer: fix writeInt{B,L}E for some neg values (Peter A. Bigot) #3994
[ab5b529dd2] - buffer: default to UTF8 in byteLength() (Tom Gallacher) #4010
[fcf0e8ebdf] - buffer: move checkFloat from lib into src (Matt Loring) #3763
[12649f4496] - build: add "--partly-static" build options (Super Zheng) #4152
[a76d788119] - build: update signtool description, add url (Rod Vagg) #4011
[ed255abdc1] - (SEMVER-MINOR) build,src: add Intel Vtune profiling support (Chunyang Dai) #3785
[7793c364fc] - child_process: flush consuming streams (Dave) #4071
[f29c5d6e70] - configure: v8_use_snapshot should be true (Fedor Indutny) #3962
[da5ac55c83] - (SEMVER-MINOR) crypto: simplify using pre-existing keys with ECDH (Michael Ruddy) #3511
[cfc97641ee] - crypto: fix native module compilation with FIPS (Stefan Budeanu) #4023
[b81b45dabd] - crypto: update root certificates (Ben Noordhuis) #3951
[def681a07e] - crypto: disable crypto.createCipher in FIPS mode (Stefan Budeanu) #3754
[ce423f3624] - debugger: introduce exec method for debugger (Jackson Tian)
[99fd1ec28d] - deps: backport 819b40a from V8 upstream (Michaël Zasso) #3937
[82252b2a17] - doc: add brief Node.js overview to README (wurde) #4174
[634c5f1f81] - doc: url.format - true slash postfix behaviour (fansworld-claudio) #4119
[6f957a70d8] - doc: s/node.js/Node.js in readme (Rod Vagg) #3998
[0cd4a52392] - doc: improve child_process.markdown wording (yorkie) #4138
[fd5ed6888d] - doc: add JungMinu to collaborators (Minwoo Jung) #4143
[fa0cdf75d9] - doc: add iarna to collaborators (Rebecca Turner) #4144
[424eb962b1] - doc: add zkat to collaborators (Kat Marchán) #4142
[85b601224b] - doc: add HTTP working group (James M Snell) #3919
[f4164bd8df] - doc: update links to use https where possible (jpersson) #4054
[3169eed1e3] - doc: add links and backticks around names (jpersson) #4054
[f3417e2574] - doc: standardize references to node.js in docs (Scott Buchanan) #4136
[95dd60c657] - doc: reword https.Agent example text (Jan Krems) #4075
[c61237d3ea] - doc: fix internal link to child.send() (Luigi Pinca) #4089
[aaeced915e] - doc: fix the exception description (yorkie) #3658
[a2b7596ac0] - doc: fix color of linked code blocks (jpersson) #4068
[f3c50f5fb5] - doc: fix rare case of misaligned columns (Roman Reiss) #3948
[f0a2e2cdec] - doc: message.header duplication correction (Bryan English) #3997
[b1dfa8bebb] - doc: fix typo in README (Rich Trott) #4000
[4602e01221] - doc: replace sane with reasonable (Lewis Cowper) #3980
[4849a54386] - doc: Adding best practises for crypto.pbkdf2 (Tom Gallacher) #3290
[77251d99de] - doc: numeric flags to fs.open (Carl Lei) #3641
[f4ca007b42] - doc: clarify that fs streams expect blocking fd (Carl Lei) #3641
[26eeae8016] - doc: fix broken references (Alexander Gromnitsky) #3944
[f90227b0e8] - doc: move fs.existsSync() deprecation message (Martin Forsberg) #3942
[bbcb2a2e65] - doc: clarify module loading behavior (cjihrig) #3920
[0997178037] - doc: add reference for buffer.inspect() (cjihrig) #3921
[6c16c40283] - doc: clarify v5.1.1 notable items (Rod Vagg) #4156
[4c8800c2de] - fs,doc: use target instead of destination (yorkie) #3912
[1f0e8dca8e] - installer: install the tick processor (Matt Loring) #3032
[e8e4e0718b] - meta: remove use of profanity in source (Myles Borins) #4122
[13834caa28] - module: fix column offsets in errors (Tristian Flanagan) #2867
[8988e1e117] - module,repl: remove repl require() hack (Ben Noordhuis) #4026
[baac81d95f] - net: add local address/port for better errors (Jan Schär) #3946
[12754c5dc3] - net: small code cleanup (Jan Schär) #3943
[8a5e4345fd] - node: s/doNTCallbackX/nextTickCallbackWithXArgs/ (Rod Vagg) #4167
[0869ef3c55] - (SEMVER-MINOR) repl: allow leading period in multiline input (Zirak) #3835
[aaab108dfe] - repl: attach location info to syntax errors (cjihrig) #4013
[b08126dc9d] - src: refactor vcbuild configure args creation (Rod Vagg) #3399
[da3137d0c5] - src: don't print garbage errors (cjihrig) #4112
[9e9346fa32] - src: use GetCurrentProcessId() for process.pid (Ben Noordhuis) #4163
[d969c0965c] - src: define Is* util functions with macros (cjihrig) #4118
[458facdf66] - src: define getpid() based on OS (cjihrig) #4146
[7e18f2ec62] - (SEMVER-MINOR) src: add BE support to StringBytes::Encode() (Bryon Leung) #3410
[756ab9caad] - stream: be less eager with readable flag (Brian White) #4141
[8f845ba28a] - stream_wrap: error if stream has StringDecoder (Fedor Indutny) #4031
[1c1af81ea0] - streams: update .readable/.writable to false (Brian White) #4083
[1d50819c85] - test: check range fix for slowToString (Sakthipriyan Vairamani) #4019
[0c2a0dc859] - test: skip long path tests on non-Windows (Rafał Pocztarski) #4116
[8a60aa1303] - test: don't check the # of chunks in test-http-1.0 (Santiago Gimeno) #3961
[e84aeec883] - test: mark test-cluster-shared-leak flaky (Rich Trott) #4162
[b3f3b2e157] - test: fix cluster-worker-isdead (Santiago Gimeno) #3954
[da6be4d31a] - test: fix time resolution constraint (Gireesh Punathil) #3981
[9d16729b20] - test: skip instead of fail when mem constrained (Michael Cornacchia) #3697
[be41eb751b] - test: refactor test-http-exit-delay (Rich Trott) #4055
[4b43bf0385] - test: fix flaky test-net-socket-local-address (Rich Trott) #4109
[cb55c67a00] - test: improve cluster-disconnect-handles test (Brian White) #4084
[2b5b127e14] - test: fix cluster-disconnect-handles flakiness (Santiago Gimeno) #4009
[430264817b] - test: add test for repl.defineCommand() (Bryan English) #3908
[22b0971222] - test: eliminate multicast test FreeBSD flakiness (Rich Trott) #4042
[c50003746b] - test: mark test flaky on FreeBSD (Rich Trott) #4016
[69c95bbdb7] - test: move ArrayStream to common (cjihrig) #4027
[d94a70ec51] - test: fix test-domain-exit-dispose-again (Julien Gilli) #3990
[00b839a2b8] - test: use platform-based timeout for reliability (Rich Trott) #4015
[054a216b6f] - test: mark cluster-net-send test flaky on windows (Rich Trott) #4006
[d0621c5649] - test: mark fork regression test flaky on windows (Rich Trott) #4005
[19ed33df80] - test: skip test if in FreeBSD jail (Rich Trott) #3995
[a863e8d667] - test: remove flaky status for cluster test (Rich Trott) #3975
[dd0d15fc47] - test: add TAP diagnostic message for retried tests (Rich Trott) #3960
[1fe4d30efc] - test: retry on smartos if ECONNREFUSED (Rich Trott) #3941
[665a35d45e] - test: address flaky test-http-client-timeout-event (Rich Trott) #3968
[f9fe0aee53] - test: numeric flags to fs.open (Carl Lei) #3641
[54aafa17af] - test: http complete list of non-concat headers (Bryan English) #3930
[788541b40c] - test: fix race condition in unrefd interval test (Michael Cornacchia) #3550
[e129d83996] - test: skip/replace weak crypto tests in FIPS mode (Stefan Budeanu) #3757
[bc27379453] - test: avoid test timeouts on rpi (Stefan Budeanu) #3902
[272732e76b] - test: fix flaky test-child-process-spawnsync-input (Rich Trott) #3889
[781f8c0d1e] - test: add OS X to module loading error test (Evan Lucas) #3901
[f99c6363de] - test: module loading error fix solaris #3798 (fansworld-claudio) #3855
[1279adc756] - timers: optimize callback call: bind -> arrow (Andrei Sedoi) #4038
[80f7f65464] - (SEMVER-MINOR) tls: support reading multiple cas from one input (Ben Noordhuis) #4099
[939f305d56] - tls_wrap: slice buffer properly in ClearOut (Fedor Indutny) #4184
[6d4a03d3d2] - (SEMVER-MINOR) tools: list missing whitespace/if-one-line cpplint (Ben Noordhuis) #4099
[1c1c1a0f2b] - (SEMVER-MINOR) tools: add --prof-process flag to node binary (Matt Loring) #4021
[d7a7d3e6f7] - tools: update certdata.txt (Ben Noordhuis) #3951
[1b434e0654] - util: determine object types in C++ (cjihrig) #4100
[c93e2678f0] - util: fix constructor/instanceof checks (Brian White) #3385
[098a3113e1] - util: move .decorateErrorStack to internal/util (Ben Noordhuis) #4026
[e68ea16c32] - util: add decorateErrorStack() (cjihrig) #4013
[c584c3e08f] - util,src: allow lookup of hidden values (cjihrig) #3988

2015-12-04, Version 5.1.1 (Stable), @rvagg

Notable changes

http: Fix CVE-2015-8027, a bug whereby an HTTP socket may no longer have a parser associated with it but a pipelined request attempts to trigger a pause or resume on the non-existent parser, a potential denial-of-service vulnerability. (Fedor Indutny)
openssl: Upgrade to 1.0.2e, containing fixes for:
- CVE-2015-3193 "BN_mod_exp may produce incorrect results on x86_64", an attack may be possible against a Node.js TLS server using DHE key exchange. Details are available at http://openssl.org/news/secadv/20151203.txt.
- CVE-2015-3194 "Certificate verify crash with missing PSS parameter", a potential denial-of-service vector for Node.js TLS servers using client certificate authentication; TLS clients are also impacted. Details are available at http://openssl.org/news/secadv/20151203.txt. (Shigeki Ohtsu) #4134
v8: Backport fix for CVE-2015-6764, a bug in JSON.stringify() that can result in out-of-bounds reads for arrays. (Ben Noordhuis)

Known issues

Surrogate pair in REPL can freeze terminal. #690
Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

[678398f250] - deps: backport a7e50a5 from upstream v8 (Ben Noordhuis)
[76a552c938] - deps: backport 6df9a1d from upstream v8 (Ben Noordhuis)
[533881f889] - deps: upgrade openssl sources to 1.0.2e (Shigeki Ohtsu) #4134
[12e70fafd3] - http: fix pipeline regression (Fedor Indutny)

2015-11-17, Version 5.1.0 (Stable), @Fishrock123

Notable changes

buffer: The noAssert option for many buffer functions will now silently drop invalid write values rather than crashing (Minqi Pan) #3767.
- This makes the behavior match what the docs suggest.
child_process: child.send() now properly returns a boolean like the docs suggest (Rich Trott) #3577.
doc: All of the API docs have been re-ordered so as to read in alphabetical order (Tristian Flanagan) #3662.
http_parser: update http-parser to 2.6.0 from 2.5.0 (James M Snell) #3569.
- Now supports the following HTTP methods: LINK, UNLINK, BIND, REBIND, UNBIND.
- Also added ACL and IPv6 Zone ID support.
npm: upgrade npm to 3.3.12 from v3.3.6 (Rebecca Turner) #3685.
- See the release notes for v3.3.7, v3.3.8, v3.3.9, v3.3.10, v3.3.11, and v3.3.12 for more details.
repl: The REPL no longer crashes if the persistent history file cannot be opened (Evan Lucas) #3630.
tls: The default sessionIdContext now uses SHA1 in FIPS mode rather than MD5 (Stefan Budeanu) #3755.
v8: Added some more useful post-mortem data (Fedor Indutny) #3779.

Known issues

Surrogate pair in REPL can freeze terminal. #690
Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

[b663d2bbb5] - async_wrap: call callback in destructor (Trevor Norris) #3461
[eccbec99ea] - async_wrap: new instances get uid (Trevor Norris) #3461
[5d34c81a5c] - async_wrap: allow some hooks to be optional (Trevor Norris) #3461
[7bff0138e2] - buffer: let WriteFloatGeneric silently drop values (Minqi Pan) #3767
[56673693cd] - buffer: neuter external nullptr buffers (Fedor Indutny) #3624
[2d0ca0293a] - build: fix configuring with prebuilt libraries (Markus Tzoe) #3135
[2a69b6820f] - build: fix --with-intl=system-icu for x-compile (Steven R. Loomis) #3808
[8f5a2550a7] - build: omit -gline-tables-only for --enable-asan (Ben Noordhuis) #3680
[84bb74547d] - child_process: add safety checks on stdio access (cjihrig) #3799
[e888471a11] - child_process: don't fork bomb ourselves from -e (Ben Noordhuis) #3575
[47f3735e88] - cluster: send suicide message on disconnect (cjihrig) #3720
[d64a56cba5] - cluster: remove handles when disconnecting worker (Ben Noordhuis) #3677
[5ed30da5a0] - console: use 'label' argument for time and timeEnd (Roman Reiss) #3590
[7a290abea6] - crypto: DSA parameter validation in FIPS mode (Stefan Budeanu) #3756
[2c9fb147be] - crypto: Improve error checking and reporting (Stefan Budeanu) #3753
[66dccaf0cd] - debugger: also exit when the repl emits 'exit' (Felix Böhm) #2369
[fd0253be4d] - deps: backport bc2e393 from v8 upstream (evan.lucas) #3792
[59077acc3d] - deps: cherry-pick 68e89fb from v8's upstream (Fedor Indutny) #3779
[9ef81ff5d3] - deps: update V8 to 4.6.85.31 (Michaël Zasso) #3698
[b48dbf9fce] - deps: upgrade npm to 3.3.12 (Rebecca Turner) #3685
[7caeb14e11] - (SEMVER-MINOR) deps: update http-parser to 2.6.0 (James M Snell) #3569
[08e0de59fa] - deps: upgrade npm to 3.3.10 (Rebecca Turner) #3599
[ac9e4ffe8e] - dns: prevent undefined values in results (Junliang Yan) #3696
[ea67d870f4] - doc: document release types in readme (Rod Vagg) #3482
[60d3daa65c] - doc: replace head of readme with updated text (Rod Vagg) #3482
[df1fdba2ae] - doc: sort repl alphabetically (Tristian Flanagan) #3859
[7ecd5422c8] - doc: address use of profanity in code of conduct (James M Snell) #3827
[c2393d1f2a] - doc: consistent reference-style links (Bryan English) #3845
[96f53c6b02] - doc: add link to [customizing util.inspect colors]. (Jesse McCarthy) #3749
[132297d3f6] - doc: Updated streams simplified constructor API (Tom Gallacher) #3602
[d137f0fd28] - doc: add warning about Windows process groups (Roman Klauke) #3681
[45ff31cf94] - doc: added what buf.copy returns (Manuel B) #3555
[5d1faa28cb] - doc: reword message.headers to indicate they are not read-only (Tristian Flanagan) #3814
[25c3807051] - doc: clarify duplicate header handling (Bryan English) #3810
[ae2d1ee302] - doc: repl: add defineComand and displayPrompt (Bryan English) #3765
[09e524d013] - doc: sort tls alphabetically (Tristian Flanagan) #3662
[7e60b81c81] - doc: sort stream alphabetically (Tristian Flanagan) #3662
[cd931a8a13] - doc: sort net alphabetically (Tristian Flanagan) #3662
[cfa8198af8] - doc: sort process alphabetically (Tristian Flanagan) #3662
[e1a512607a] - doc: sort zlib alphabetically (Tristian Flanagan) #3662
[0996b97240] - doc: sort util alphabetically (Tristian Flanagan) #3662
[df07072b66] - doc: sort https alphabetically (Tristian Flanagan) #3662
[6e9d01c7d8] - doc: sort http alphabetically (Tristian Flanagan) #3662
[18da02fa0f] - doc: sort modules alphabetically (Tristian Flanagan) #3662
[29054ffc0c] - doc: sort readline alphabetically (Tristian Flanagan) #3662
[389ead37ef] - doc: sort repl alphabetically (Tristian Flanagan) #3662
[d383d624de] - doc: sort string_decoder alphabetically (Tristian Flanagan) #3662
[0d2262887c] - doc: sort timers alphabetically (Tristian Flanagan) #3662
[14b5a95d03] - doc: sort tty alphabetically (Tristian Flanagan) #3662
[d4dda77e4a] - doc: sort url alphabetically (Tristian Flanagan) #3662
[39b8259bd5] - doc: sort vm alphabetically (Tristian Flanagan) #3662
[d357b3090e] - doc: sort querystring alphabetically (Tristian Flanagan) #3662
[1f56abaa98] - doc: sort punycode alphabetically (Tristian Flanagan) #3662
[bc63667456] - doc: sort path alphabetically (Tristian Flanagan) #3662
[22961e011c] - doc: sort os alphabetically (Tristian Flanagan) #3662
[4ba18489d3] - doc: sort globals alphabetically (Tristian Flanagan) #3662
[c3f5ea704f] - doc: sort fs alphabetically (Tristian Flanagan) #3662
[ce3ac8dd1e] - doc: sort events alphabetically (Tristian Flanagan) #3662
[63a78749b8] - doc: sort errors alphabetically (Tristian Flanagan) #3662
[488326da8d] - doc: sort dgram alphabetically (Tristian Flanagan) #3662
[e1c357e881] - doc: sort crypto alphabetically (Tristian Flanagan) #3662
[4118fd5794] - doc: sort dns alphabetically (Tristian Flanagan) #3662
[3e046acc50] - doc: sort console alphabetically (Tristian Flanagan) #3662
[05f1af7124] - doc: sort cluster alphabetically (Tristian Flanagan) #3662
[5c30e5dada] - doc: sort child_process alphabetically (Tristian Flanagan) #3662
[fb6a09cd0e] - doc: sort buffer alphabetically (Tristian Flanagan) #3662
[c7c05d8f02] - doc: sort assert alphabetically (Tristian Flanagan) #3662
[f2c2e53321] - doc: add note to util.isBuffer (Evan Lucas) #3790
[35fb9f91eb] - doc: Describe FIPSDIR environment variable (Stefan Budeanu) #3752
[da911f158b] - doc: update lts description in the collaborator guide (James M Snell) #3668
[597f8751d1] - doc: add note on tls connection meta data methods (Tyler Henkel) #3746
[a32d9e31dc] - doc: add romankl to collaborators (Roman Klauke) #3725
[e5b9109d12] - doc: add thealphanerd to collaborators (Myles Borins) #3723
[a05a0b47e3] - doc: add saghul as a collaborator (Saúl Ibarra Corretgé) #3724
[b14d9c5f16] - doc: add method links in events.markdown (Alejandro Oviedo) #3187
[44f779b112] - doc: add caveats of algs and key size in crypto (Shigeki Ohtsu) #3479
[a0db5fb355] - doc: stdout/stderr can block when directed to file (Ben Noordhuis) #3170
[409f29972e] - doc: rename iojs-* groups to nodejs-* (Steven R. Loomis) #3634
[801866280e] - doc: fix wrong date and known issue in changelog.md (James M Snell) #3650
[325c4c7af5] - doc: fix function param order in assert doc (David Woods) #3533
[045e04e531] - doc: typo fix in readme.md (Sam P Gallagher-Bishop) #3649
[7fd8f1371e] - doc: add note about timeout delay > TIMEOUT_MAX (Guilherme Souza) #3512
[7d0b589644] - doc: fix crypto spkac function descriptions (Jason Gerfen) #3614
[efa19bdcb5] - doc: add final full stop in CONTRIBUTING.md (Emily Aviva Kapor-Mater) #3576
[90723afe32] - doc: made code spans more visible in the API docs (phijohns) #3573
[530bb9144f] - docs: improve discoverability of Code of Conduct (Ashley Williams) #3774
[73e40f0327] - docs: fs - change links to buffer encoding to Buffer class anchor (fansworld-claudio) #2796
[7a84fa6c60] - docs: fs - remove encoding list and link to buffer (fansworld-claudio) #2796
[2aa6a6d998] - fs: return null error on readFile() success (Zheng Chaoping) #3740
[c96400c572] - gitignore: don't ignore 'debug' in deps/npm (Rebecca Turner) #3599
[a7f28a098e] - http: remove unneeded cb check from setTimeout() (Ashok Suthar) #3631
[d2b5dcb2de] - lib: return boolean from child.send() (Rich Trott) #3577
[5c54fa0095] - module: cache regular expressions (Evan Lucas) #3869
[89285db128] - module: remove unnecessary JSON.stringify (Andres Suarez) #3578
[fd3f0d8e6e] - querystring: Parse multiple separator characters (Yosuke Furukawa) #3807
[75dbafc3f8] - repl: To exit, press ^C again or type .exit. (Hemanth.HM) #3368
[5073da0481] - repl: don't crash if cannot open history file (Evan Lucas) #3630
[59cd28114d] - src: Add missing va_end before return (Ömer Fadıl Usta) #3565
[02e012e984] - src: force line buffering for stderr (Rich Trott) #3701
[2498e29344] - src: Revert "nix stdin _readableState.reading" (Roman Reiss) #3490
[65cd03cda6] - src: wrap source before doing syntax check (Evan Lucas) #3587
[d72bb1e96a] - Revert "src: fix stuck debugger process" (Ben Noordhuis) #3585
[047abbd6eb] - test: move test-specific function out of common (Rich Trott) #3871
[19a36ff355] - test: fix flaky SmartOS test (Rich Trott) #3830
[4bb27baf8d] - test: skip test if FreeBSD jail will break it (Rich Trott) #3839
[1c1e70864b] - test: fix path to module for repl test on Windows (Michael Cornacchia) #3608
[413ca53107] - test: increase crypto strength for FIPS standard (Stefan Budeanu) #3758
[2ec5e17d16] - test: add test-zlib-flush-drain (Myles Borins) #3534
[de707f0876] - test: add hasFipsCrypto to test/common.js (Stefan Budeanu) #3756
[828b786e48] - test: add test for invalid DSA key size (Stefan Budeanu) #3756
[252e810059] - test: Fix test-cluster-worker-exit.js for AIX (Imran Iqbal) #3666
[91248b1094] - test: run pipeline flood test in parallel (Rich Trott) #3811
[583f58e5d6] - test: stronger crypto in test fixtures (Stefan Budeanu) #3759
[2e67db3104] - test: refactor test-http-pipeline-flood (Rich Trott) #3636
[1ab59ab9b3] - test: fix flaky test test-http-pipeline-flood (Devin Nakamura) #3636
[1c8a7c6351] - test: enhance fs-watch-recursive test (Sakthipriyan Vairamani) #2599
[81997840f2] - test: fix test-module-loading-error for musl (Hugues Malphettes) #3657
[9cdceac782] - test: use really invalid hostname (Sakthipriyan Vairamani) #3711
[f3594e77b2] - test: fix test-net-persistent-keepalive for AIX (Imran Iqbal) #3646
[81522480f1] - test: more regression tests for minDHSize option (Ben Noordhuis) #3629
[935b97769e] - test: add regression test for 512 bits DH key (Ben Noordhuis) #3629
[e302c33bb0] - test: mark http-pipeline-flood flaky (Rich Trott) #3616
[5977963bce] - test: remove flaky designation from ls-no-sslv3 (Rich Trott) #3620
[1e98d90db8] - test: add regression test for --debug-brk -e 0 (Ben Noordhuis) #3585
[2f16be2b70] - tls: Use SHA1 for sessionIdContext in FIPS mode (Stefan Budeanu) #3755
[05f0549b50] - tls: copy client CAs and cert store on CertCb (Fedor Indutny) #3537
[bea35424a2] - tools: add tap output to cpplint (Johan Bergström) #3448
[d036b35349] - tools: enforce throw new Error() with lint rule (Rich Trott) #3714
[38bb0d864e] - tools: Use throw new Error() consistently (Rich Trott) #3714
[e40d28283a] - tools: update npm test tooling for 3.3.10+ (Rebecca Turner) #3599
[cbd358ce33] - tools: fix gyp to work on MacOSX without XCode (Shigeki Ohtsu) iojs/io.js#1325
[3137e46cb8] - tools: update gyp to b3cef02 (Imran Iqbal) #3487
[d61cb90ee3] - util: use Object.create(null) for dictionary object (Minwoo Jung) #3831
[9a45c21e6c] - util: use regexp instead of str.replace().join() (qinjia) #3689
[33ffc62670] - zlib: only apply drain listener if given callback (Craig Cavalier) #3534
[d70deabf90] - zlib: pass kind to recursive calls to flush (Myles Borins) #3534

2015-10-29, Version 5.0.0 (Stable), @rvagg

Notable Changes

buffer: (Breaking) Removed both 'raw' and 'raws' encoding types from Buffer, these have been deprecated for a long time (Sakthipriyan Vairamani) #2859.
console: (Breaking) Values reported by console.time() now have 3 decimals of accuracy added (Michaël Zasso) #3166.
fs:
- fs.readFile*(), fs.writeFile*(), and fs.appendFile*() now also accept a file descriptor as their first argument (Johannes Wüller) #3163.
- (Breaking) In fs.readFile(), if an encoding is specified and the internal toString() fails the error is no longer thrown but is passed to the callback (Evan Lucas) #3485.
- (Breaking) In fs.read() (using the fs.read(fd, length, position, encoding, callback) form), if the internal toString() fails the error is no longer thrown but is passed to the callback (Evan Lucas) #3503.
http:
- Fixed a bug where pipelined http requests would stall (Fedor Indutny) #3342.
- (Breaking) When parsing HTTP, don't add duplicates of the following headers: Retry-After, ETag, Last-Modified, Server, Age, Expires. This is in addition to the following headers which already block duplicates: Content-Type, Content-Length, User-Agent, Referer, Host, Authorization, Proxy-Authorization, If-Modified-Since, If-Unmodified-Since, From, Location, Max-Forwards (James M Snell) #3090.
- (Breaking) The callback argument to OutgoingMessage#setTimeout() must be a function or a TypeError is thrown (James M Snell) #3090.
- (Breaking) HTTP methods and header names must now conform to the RFC 2616 "token" rule, a list of allowed characters that excludes control characters and a number of separator characters. Specifically, methods and header names must now match /^[a-zA-Z0-9_!#$%&'*+.^`|~-]+$/ or a TypeError will be thrown (James M Snell) #2526.
node:
- (Breaking) Deprecated the _linklist module (Rich Trott) #3078.
- (Breaking) Removed require.paths and require.registerExtension(), both had been previously set to throw Error when accessed (Sakthipriyan Vairamani) #2922.
npm: Upgraded to version 3.3.6 from 2.14.7, see https://github.com/npm/npm/releases/tag/v3.3.6 for more details. This is a major version bump for npm and it has seen a significant amount of change. Please see the original npm v3.0.0 release notes for a list of major changes (Rebecca Turner) #3310.
src: (Breaking) Bumped NODE_MODULE_VERSION to 47 from 46, this is necessary due to the V8 upgrade. Native add-ons will need to be recompiled (Rod Vagg) #3400.
timers: Attempt to reuse the timer handle for setTimeout().unref(). This fixes a long-standing known issue where unrefed timers would perviously hold beforeExit open (Fedor Indutny) #3407.
tls:
- Added ALPN Support (Shigeki Ohtsu) #2564.
- TLS options can now be passed in an object to createSecurePair() (Коренберг Марк) #2441.
- (Breaking) The default minimum DH key size for tls.connect() is now 1024 bits and a warning is shown when DH key size is less than 2048 bits. This a security consideration to prevent "logjam" attacks. A new minDHSize TLS option can be used to override the default. (Shigeki Ohtsu) #1831.
util:
- (Breaking) util.p() was deprecated for years, and has now been removed (Wyatt Preul) #3432.
- (Breaking) util.inherits() can now work with ES6 classes. This is considered a breaking change because of potential subtle side-effects caused by a change from directly reassigning the prototype of the constructor using ctor.prototype = Object.create(superCtor.prototype, { constructor: { ... } }) to using Object.setPrototypeOf(ctor.prototype, superCtor.prototype) (Michaël Zasso) #3455.
v8: (Breaking) Upgraded to 4.6.85.25 from 4.5.103.35 (Ali Ijaz Sheikh) #3351.
- Implements the spread operator, see https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Operators/Spread_operator for further information.
- Implements new.target, see https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Operators/new.target for further information.
zlib: Decompression now throws on truncated input (e.g. unexpected end of file) (Yuval Brik) #2595.

Known issues

Surrogate pair in REPL can freeze terminal. #690
Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

[6a04cc0a43] - buffer: fix value check for writeUInt{B,L}E (Trevor Norris) #3500
[1a41feb559] - buffer: don't CHECK on zero-sized realloc (Ben Noordhuis) #3499
[5f6579d366] - (SEMVER-MAJOR) buffer: remove raw & raws encoding (Sakthipriyan Vairamani) #2859
[70fca2a81e] - build: Updates for AIX npm support - part 1 (Michael Dawson) #3114
[b36b4f385a] - build: rectify --link-module help text (Minqi Pan) #3379
[a89eeca590] - console: rename argument of time and timeEnd (Michaël Zasso) #3166
[870108aaa8] - (SEMVER-MAJOR) console: sub-millisecond accuracy for console.time (Michaël Zasso) #3166
[0a43697ce8] - deps: backport 010897c from V8 upstream (Ali Ijaz Sheikh) #3520
[8c0318ce8d] - deps: backport 8d6a228 from the v8's upstream (Fedor Indutny) #3549
[2974debc6e] - deps: update V8 to 4.6.85.28 (Michaël Zasso) #3484
[f76af49b13] - deps: fix upgrade to npm 3.3.6 (Rebecca Turner) #3494
[32b51c97ec] - deps: upgrade npm to 3.3.6 (Rebecca Turner) #3310
[770cd229f9] - deps: upgrade V8 to 4.6.85.25 (Ali Ijaz Sheikh) #3351
[972a0c8515] - deps: backport 0d01728 from v8's upstream (Fedor Indutny) #3351
[1fdec65203] - deps: improve ArrayBuffer performance in v8 (Fedor Indutny) #3351
[5cd1fd836a] - deps: backport 56a0a79 from V8 upstream (Julien Gilli) #3351
[7fb128d8df] - deps: cherry-pick backports to V8 (Michaël Zasso) #3351
[d8011d1683] - (SEMVER-MAJOR) deps: upgrade V8 to 4.6.85.23 (Michaël Zasso) #3351
[a334ddc467] - Revert "deps: backport 03ef3cd from V8 upstream" (Ali Ijaz Sheikh) #3237
[6fff47ffac] - deps: backport 03ef3cd from V8 upstream (Ali Ijaz Sheikh) #3165
[680dda8023] - dns: remove nonexistant exports.ADNAME (Roman Reiss) #3051
[239ad899a3] - doc: add LTS info to COLLABORATOR_GUIDE.md (Myles Borins) #3442
[5e76587fdf] - doc: createServer's key option can be an array (Sakthipriyan Vairamani) #3123
[0317c880da] - doc: add TSC meeting minutes 2015-10-21 (Rod Vagg) #3480
[cd245b12e0] - doc: clarify API buffer.concat (Martii) #3255
[ff9ef893fd] - doc: add TSC meeting minutes 2015-10-14 (Rod Vagg) #3463
[605c5a7754] - doc: clarify the use of option.detached (Kyle Smith) #3250
[cf75a175e5] - doc: more use-cases for promise events (Domenic Denicola) #3438
[1b75d4bda3] - doc: update WORKING_GROUPS.md - add missing groups (Michael Dawson) #3450
[c658de2f99] - doc: add TSC meeting minutes 2015-09-30 (Rod Vagg) #3235
[d0b8c5d3a4] - doc: add TSC meeting minutes 2015-10-07 (Rod Vagg) #3364
[b483afcb20] - doc: binary encoding is not deprecated (Trevor Norris) #3441
[b607366a1c] - doc: add information about Assert behavior and maintenance (Rich Trott) #3330
[086103b32e] - doc: show keylen in pbkdf2 as a byte length (calebboyd) #3334
[f6ebc8277b] - doc: reword description of console.time (Michaël Zasso) #3166
[503f279527] - doc: fix indent in tls resumption example (Roman Reiss) #3372
[dae9fae0fe] - doc: label v4.2.1 as LTS in changelog heading (Phillip Johnsen) #3360
[4fc638804c] - doc: update V8 options in man page (Michaël Zasso) #3351
[a441aa6e1d] - doc: update WORKING_GROUPS.md to include Intl (Steven R. Loomis) #3251
[81503e597b] - doc: fix typo in changelog (Timothy Gu) #3353
[3ef2e4acf3] - doc: fix typos in changelog (reggi) #3291
[b9279aa193] - doc: remove old note, 'cluster' is marked stable (Balázs Galambosi) #3314
[cdfa271164] - doc: update AUTHORS list (Rod Vagg)
[47b06f6bb1] - docs: add missing shell option to execSync (fansworld-claudio) #3440
[4c9abbd1bb] - fs: reduced duplicate code in fs.write() (ronkorving) #2947
[2bb147535e] - (SEMVER-MAJOR) fs: don't throw in read if buffer too big (Evan Lucas) #3503
[7added3b39] - (SEMVER-MAJOR) fs: pass err to callback if buffer is too big (Evan Lucas) #3485
[5e0759f6fd] - (SEMVER-MINOR) fs: add file descriptor support to *File() funcs (Johannes Wüller) #3163
[d1a2e5357e] - gitignore: don't ignore debug source directory in V8 (Michaël Zasso) #3351
[ab03635fb1] - http: fix stalled pipeline bug (Fedor Indutny) #3342
[e655a437b3] - (SEMVER-MAJOR) http: do not allow multiple instances of certain response headers (James M Snell) #3090
[0094a8dad7] - (SEMVER-MAJOR) http: add callback is function check (James M Snell) #3090
[6192c9892f] - (SEMVER-MAJOR) http: add checkIsHttpToken check for header fields (James M Snell) #2526
[c9786bb680] - (SEMVER-MAJOR) http{s}: don't connect to localhost on invalid URL (Sakthipriyan Vairamani) #2967
[1929d5be73] - lib: fix cluster handle leak (Rich Trott) #3510
[97d081709e] - lib: avoid REPL exit on completion error (Rich Trott) #3358
[f236b3a904] - (SEMVER-MINOR) lib,doc: return boolean from child.send() (Rich Trott) #3516
[6e887cc630] - lib,test: update let to const where applicable (Sakthipriyan Vairamani) #3152
[47befffc53] - (SEMVER-MAJOR) lib,test: deprecate _linklist (Rich Trott) #3078
[d5ce53458e] - lttng: update flags for gc tracing (Glen Keane) #3388
[6ad458b752] - (SEMVER-MAJOR) module: remove unnecessary property and method (Sakthipriyan Vairamani) #2922
[ae196175f4] - node: improve GetActiveRequests performance (Trevor Norris) #3375
[bd4311bc9c] - repl: handle comments properly (Sakthipriyan Vairamani) #3515
[ce391ed849] - (SEMVER-MAJOR) repl: event ordering: delay 'close' until 'flushHistory' (Jeremiah Senkpiel) #3435
[4c80c02ac7] - repl: limit persistent history correctly on load (Jeremiah Senkpiel) #2356
[134a60c785] - src: fix race condition in debug signal on exit (Ben Noordhuis) #3528
[bf7c3dabb4] - (SEMVER-MAJOR) src: bump NODE_MODULE_VERSION To 47 (Rod Vagg) #3400
[2d3560767e] - src: fix exception message encoding on Windows (Brian White) #3288
[ff877e93e1] - src: fix stuck debugger process (Liang-Chi Hsieh) #2778
[8854183fe5] - stream: avoid unnecessary concat of a single buffer. (Calvin Metcalf) #3300
[85b74de9de] - stream: fix signature of _write() in a comment (Fábio Santos) #3248
[b8cea49c88] - test: fix heap-profiler link error LNK1194 on win (Junliang Yan) #3572
[4a5dbeab43] - test: fix missing unistd.h on windows (Junliang Yan) #3532
[74e2328b3a] - test: split independent tests into separate files (Rich Trott) #3548
[8c6c0f915a] - test: use port number from env in tls socket test (Stefan Budeanu) #3557
[1a968e67a5] - test: improve tests for util.inherits (Michaël Zasso) #3507
[9d8d752456] - test: print helpful err msg on test-dns-ipv6.js (Junliang Yan) #3501
[60de9f8d7b] - test: wrap assert.fail when passed to callback (Myles Borins) #3453
[cd83f7ed7f] - test: add node::MakeCallback() test coverage (Ben Noordhuis) #3478
[08da5c2a06] - test: disable test-tick-processor - aix and be ppc (Michael Dawson) #3491
[7c35fbcb14] - test: harden test-child-process-fork-regr-gh-2847 (Michael Dawson) #3459
[ad2b272417] - test: fix test-net-keepalive for AIX (Imran Iqbal) #3458
[04fb14cc35] - test: fix flaky test-child-process-emfile (Rich Trott) #3430
[eef0f0cd63] - test: remove flaky status from eval_messages test (Rich Trott) #3420
[bbbd81eab2] - test: skip test-dns-ipv6.js if ipv6 is unavailable (Junliang Yan) #3444
[f78c8e7426] - test: fix flaky test for symlinks (Rich Trott) #3418
[28e9a4f41b] - test: repl-persistent-history is no longer flaky (Jeremiah Senkpiel) #3437
[9e981556e5] - test: cleanup, improve repl-persistent-history (Jeremiah Senkpiel) #2356
[ee2e641e0a] - test: add Symbol test for assert.deepEqual() (Rich Trott) #3327
[e2b8393ee8] - test: port domains regression test from v0.10 (Jonas Dohse) #3356
[676e61872f] - test: apply correct assert.fail() arguments (Rich Trott) #3378
[bbdbef9274] - test: fix tests after V8 upgrade (Michaël Zasso) #3351
[6c032a8333] - test: replace util with backtick strings (Myles Borins) #3359
[f45c315763] - test: fix domain with abort-on-uncaught on PPC (Julien Gilli) #3354
[e3d9d25083] - test: add test-child-process-emfile fail message (Rich Trott) #3335
[6f14b3a7db] - test: remove util from common (Rich Trott) #3324
[7d94611ac9] - test: split up buffer tests for reliability (Rich Trott) #3323
[3202456baa] - test: remove util properties from common (Rich Trott) #3304
[31c971d641] - test: parallelize long-running test (Rich Trott) #3287
[5bbc6df7de] - test: change call to deprecated util.isError() (Rich Trott) #3084
[522e3d3cd3] - timers: reuse timer in setTimeout().unref() (Fedor Indutny) #3407
[b64ce5960f] - tls: remove util and calls to util.format (Myles Borins) #3456
[c64af7d99e] - tls: TLSSocket options default isServer false (Yuval Brik) #2614
[2296a4fc0f] - (SEMVER-MINOR) tls: add options argument to createSecurePair (Коренберг Марк) #2441
[0140e1b5e3] - tls: output warning of setDHParam to console.trace (Shigeki Ohtsu) #1831
[f72e178a78] - (SEMVER-MAJOR) tls: add minDHSize option to tls.connect() (Shigeki Ohtsu) #1831
[6d92ebac11] - tls: add TLSSocket.getEphemeralKeyInfo() (Shigeki Ohtsu) #1831
[62ad1d0113] - (SEMVER-MINOR) tls, crypto: add ALPN Support (Shigeki Ohtsu) #2564
[5029f41b2f] - (SEMVER-MINOR) tls,crypto: move NPN protcol data to hidden value (Shigeki Ohtsu) #2564
[701e38c25f] - tools: enable prefer-const eslint rule (Sakthipriyan Vairamani) #3152
[6e78382605] - tools: ensure npm always uses the local node (Jeremiah Senkpiel) #3489
[3c3435d017] - tools: update test-npm to work with npm 3 (Rebecca Turner) #3489
[b4f4c24539] - tools: use absolute paths in test-npm (Rebecca Turner) #3309
[80573153b8] - (SEMVER-MAJOR) util: make inherits work with classes (Michaël Zasso) #3455
[412252ca04] - (SEMVER-MAJOR) util: Remove p, has been deprecated for years (Wyatt Preul) #3432
[718c304a4f] - v8: pull fix for builtin code size on PPC (Michael Dawson) #3474
[6936468de2] - vm: remove Watchdog dependency on Environment (Ido Ben-Yair) #3274
[80169b1f0a] - (SEMVER-MAJOR) zlib: decompression throw on truncated input (Yuval Brik) #2595

Files

CHANGELOG_V5.md

Latest commit

History

CHANGELOG_V5.md

File metadata and controls

Node.js v5 ChangeLog

2016-06-23, Version 5.12.0 (Stable), @evanlucas

Notable changes

Commits

2016-05-05, Version 5.11.1 (Stable), @evanlucas

Notable changes

Commits

2016-04-20, Version 5.11.0 (Stable), @thealphanerd

Notable Changes

Commits

2016-04-05, Version 5.10.1 (Stable), @thealphanerd

Notable changes

Commits

2016-03-31, Version 5.10.0 (Stable), @evanlucas

Notable changes

Commits

2016-03-23, Version 5.9.1 (Stable), @Fishrock123

Notable changes

Commits

2016-03-16, Version 5.9.0 (Stable), @evanlucas

Notable changes

Commits

2016-03-08, Version 5.8.0 (Stable), @Fishrock123

Notable changes

Commits

2016-03-02, Version 5.7.1 (Stable), @Fishrock123

Notable changes

Commits

2016-02-23, Version 5.7.0 (Stable), @rvagg

Notable changes

Commits

2016-02-09, Version 5.6.0 (Stable), @jasnell

Notable changes

Commits

2016-01-20, Version 5.5.0 (Stable), @evanlucas

Notable Changes

Known issues

Commits

2016-01-12, Version 5.4.1 (Stable), @TheAlphaNerd

Notable Changes

Known issues

commits

2016-01-06, Version 5.4.0 (Stable), @Fishrock123

Notable changes

Known issues

Commits

2015-12-16, Version 5.3.0 (Stable), @cjihrig

Notable changes

Known issues

Commits

2015-12-09, Version 5.2.0 (Stable), @rvagg

Notable changes

Known issues

Commits

2015-12-04, Version 5.1.1 (Stable), @rvagg

Notable changes

Known issues

Commits

2015-11-17, Version 5.1.0 (Stable), @Fishrock123

Notable changes

Known issues

Commits

2015-10-29, Version 5.0.0 (Stable), @rvagg

Notable Changes

Known issues

Commits