This repository has been archived by the owner on Jun 7, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 6
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
force-pushed
the
renovate/node-16.x
branch
4 times, most recently
from
May 20, 2021 00:11
167b265
to
2ff1ae5
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
3 times, most recently
from
May 28, 2021 05:34
40798c2
to
8265eb1
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
4 times, most recently
from
June 4, 2021 03:56
59984d9
to
7bc72d3
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
3 times, most recently
from
June 16, 2021 11:22
e7fb704
to
b06a0d2
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
3 times, most recently
from
June 27, 2021 06:42
8e31ea1
to
8b41aed
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
10 times, most recently
from
July 7, 2021 23:54
5ce3f16
to
d9e253e
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
from
July 14, 2021 19:40
d9e253e
to
a28d25f
Compare
renovate
bot
changed the title
Update Node.js to v16 - autoclosed
Update Node.js to v16
Oct 26, 2021
renovate
bot
force-pushed
the
renovate/node-16.x
branch
3 times, most recently
from
November 1, 2021 14:51
2c7d9d5
to
3444897
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
from
November 8, 2021 22:05
3444897
to
119060b
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
3 times, most recently
from
November 23, 2021 20:52
7109176
to
64c763d
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
3 times, most recently
from
December 1, 2021 19:06
5d5c823
to
ca79753
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
from
December 7, 2021 08:37
ca79753
to
04cc876
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
3 times, most recently
from
December 21, 2021 00:16
9836468
to
cef432f
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
2 times, most recently
from
December 23, 2021 11:05
de234a2
to
c210799
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
2 times, most recently
from
January 4, 2022 21:23
5ba6f90
to
c5f8d47
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
2 times, most recently
from
January 17, 2022 09:23
ba0a2a2
to
4a62738
Compare
renovate
bot
force-pushed
the
renovate/node-16.x
branch
from
January 18, 2022 19:27
4a62738
to
91dbce2
Compare
Renovate Ignore NotificationAs this PR has been closed unmerged, Renovate will ignore this upgrade and you will not receive PRs for any future 16.x releases. However, if you upgrade to 16.x manually then Renovate will reenable minor and patch updates automatically. If this PR was closed by mistake or you changed your mind, you can simply rename this PR and you will soon get a fresh replacement PR opened. |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
Release Notes
nodejs/node
v16.13.2
Compare Source
This is a security release.
Notable changes
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.
Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the
--security-revert
command-line option.More details will be available at CVE-2021-44531 after publication.
Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
Node.js converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name constraints were used within a certificate chain, allowing the bypass of these name constraints.
Versions of Node.js with the fix for this escape SANs containing the problematic characters in order to prevent the injection. This behavior can be reverted through the
--security-revert
command-line option.More details will be available at CVE-2021-44532 after publication.
Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
Node.js did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name, for example, in order to inject a Common Name that would allow bypassing the certificate subject verification.
Affected versions of Node.js do not accept multi-value Relative Distinguished Names and are thus not vulnerable to such attacks themselves. However, third-party code that uses node's ambiguous presentation of certificate subjects may be vulnerable.
More details will be available at CVE-2021-44533 after publication.
Prototype pollution via
console.table
properties (Low)(CVE-2022-21824)Due to the formatting logic of the
console.table()
function it was not safe to allow user controlled input to be passed to theproperties
parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be__proto__
. The prototype pollution has very limited control, in that it only allows an empty string to be assigned numerical keys of the object prototype.Versions of Node.js with the fix for this use a null protoype for the object these properties are being assigned to.
More details will be available at CVE-2022-21824 after publication.
Thanks to Patrik Oldsberg (rugvip) for reporting this vulnerability.
Commits
8dd4ca4537
] - console: fix prototype pollution via console.table (Tobias Nießen) nodejs-private/node-private#307e52882da4c
] - crypto,tls: implement safe x509 GeneralName format (Tobias Nießen) nodejs-private/node-private#3009a0a189b0b
] - src: add cve reverts and associated tests (Michael Dawson) nodejs-private/node-private#3004a262d42bc
] - src: remove unused x509 functions (Tobias Nießen) nodejs-private/node-private#300965536fe3d
] - tls: fix handling of x509 subject and issuer (Tobias Nießen) nodejs-private/node-private#300a2cbfa95ff
] - tls: drop support for URI alternative names (Tobias Nießen) nodejs-private/node-private#300v16.13.1
Compare Source
Notable Changes
c14eb2325d
] - deps: upgrade npm to 8.1.2 (npm team) #40643a901b6c53c
] - deps: update c-ares to 1.18.1 (Richard Lau) #40660755c08573f
] - doc: add VoltrexMaster to collaborators (voltrexmaster) #40566881dd7ba2a
] - lib: fix regular expression to detect `/` and `\` (Francesco Trotta) #40325Commits
996bc6e840
] - benchmark: increase crypto DSA keygen params (Brian White) #4041627009092c8
] - build: skip long-running Actions for README-only modifications (Rich Trott) #405714581997ed0
] - build: disable v8 pointer compression on 32bit archs (Cheng Zhao) #4041817433060d4
] - build: fix actions pull request's branch (Mestery) #40494bfdd32fa62
] - build: avoid run find inactive authors on forked repo (Jiawen Geng) #40465134e8afc59
] - build: update codeowners-validator to 0.6 (FrankQiu) #40307de125a556c
] - crypto: avoid double free (Michael Dawson) #40380c14eb2325d
] - deps: upgrade npm to 8.1.2 (npm team) #40643a901b6c53c
] - deps: update c-ares to 1.18.1 (Richard Lau) #4066076e2c3769e
] - deps: upgrade npm to 8.1.1 (npm team) #4055491c3cf5d0a
] - deps: V8: cherry-pick422dc37
(Ray Wang) #40450769336ab8c
] - deps: add riscv64 config into openssl gypi (Lu Yahan) #4047376d1b5d868
] - deps: patch V8 to 9.4.146.24 (Michaël Zasso) #4061623d11a1dd9
] - dgram: fix send with out of bounds offset + length (Nitzan Uziely) #4056845bdc77dc0
] - doc: update cjs-module-lexer repo link (Guy Bedford) #40707de5c5c8509
] - doc: remove--experimental-modules
documentation (FrankQiu) #38974befac5ddd9
] - doc: update tracking issues of startup performance (Joyee Cheung) #406293cb74d72f8
] - doc: fix markdown syntax and HTML tag misses (ryan) #40608eea061f8f1
] - doc: use 'GitHub Actions workflow' instead (Mestery) #405867a6e833677
] - doc: add node: url scheme (Daniel Nalborczyk) #40573d72fb7df4a
] - doc: call cwd function (Daniel Nalborczyk) #40573d732ff4614
] - doc: remove unused imports (Daniel Nalborczyk) #40573e2114e21f4
] - doc: add info on project's usage of coverity (Michael Dawson) #40506d38077babe
] - doc: fix typo in changelogs (Luigi Pinca) #405857c7f8791c6
] - doc: update onboarding task (Rich Trott) #405700a7c4ff248
] - doc: simplify ccache instructions (Rich Trott) #405505593dd1b25
] - doc: fix macOS environment variables for ccache (Rich Trott) #405502d4a042675
] - doc: improve async_context introduction (Michaël Zasso) #405609fcfef09ac
] - doc: use GFM footnotes in webcrypto.md (Rich Trott) #40477579f01c0a3
] - doc: describe buffer limit of v8.serialize (Ray Wang) #402433b6cf090a0
] - doc: use GFM footnotes in maintaining-V8.md (#40476) (Rich Trott) #40476dea701004e
] - doc: fixfs.symlink
code example (Juan José Arboleda) #40414595117ff0b
] - doc: explain backport labels (Stephen Belanger) #40520042f01e3ed
] - doc: fix entry for Slack channel in onboarding.md (Rich Trott) #40563755c08573f
] - doc: add VoltrexMaster to collaborators (voltrexmaster) #40566c029d0b61f
] - doc: document considerations for inclusion in core (Rich Trott) #40338836fc274e4
] - Revert "doc: fix typo in stream docs" (Luigi Pinca) #40819b3a12767a4
] - doc: update link in onboarding doc (Rich Trott) #40539aa47c9f38f
] - doc: clarify behavior of napi_extended_error_info (Michael Dawson) #40458bf88328bdc
] - doc: add updating expected assets to release guide (Richard Lau) #40470621266afc7
] - doc: format doc/api/*.md with markdown formatter (Rich Trott) #404037b746381ce
] - doc: specify that maxFreeSockets is per host (Luigi Pinca) #40483934dcc85c3
] - doc: update Collaborator guide to reflect GitHub web UI update (Antoine du Hamel) #404564724e07476
] - doc: indicate n-api out params that may be NULL (Isaac Brodsky) #403713b1499c971
] - doc: update CHANGELOG.md for Node.js 16.13.0 (Richard Lau) #40617881dd7ba2a
] - lib: fix regular expression to detect `/` and `\` (Francesco Trotta) #403250a8c33123e
] - lib,url: correct URL's argument to pass idlharness (Khaidi Chu) #39848480f0e1d20
] - meta: use form schema for flaky test template (Michaël Zasso) #4073755ff97342d
] - meta: update AUTHORS (Node.js GitHub Bot) #40668ef46cb428d
] - meta: consolidate AUTHORS entries for brettkiefer (Rich Trott) #405997230b6d33d
] - meta: consolidate AUTHORS entries for alexzherdev (Rich Trott) #406209e12ed4f68
] - meta: consolidate AUTHORS entries for Azard (Rich Trott) #4061997aa8e42b8
] - meta: move Fishrock123 to emeritus (Jeremiah Senkpiel) #405967b1c89f357
] - meta: consolidate AUTHORS entries for clakech (Rich Trott) #405890003cb6b3b
] - meta: consolidate AUTHORS entries for darai0512 (Rich Trott) #405697590bacec1
] - meta: update AUTHORS (Node.js GitHub Bot) #40580a5475df083
] - meta: consolidate AUTHORS entries for dfabulich (Rich Trott) #40527c021a7f169
] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #40464d64cf1706c
] - meta: add Richard Lau to TSC list in README.md (Rich Trott) #40523d09b8239bf
] - meta: consolidate AUTHORS entries for dguo (Rich Trott) #4051766192060e7
] - meta: consolidate AUTHORS entries for cxreg (Rich Trott) #40490b4f51276cb
] - meta: update AUTHORS (Node.js GitHub Bot) #404852a2b549a28
] - meta: consolidate AUTHORS entries for emanuelbuholzer (Rich Trott) #40469618bbbf2f4
] - meta: consolidate AUTHORS entries for ebickle (Rich Trott) #4044706706e8dd2
] - meta: addtypings
to label-pr-config (Mestery) #40401e2c9e1ccdd
] - meta: consolidate AUTHORS entries for evantorrie (Rich Trott) #40430dab574e937
] - policy: fix message for invalid manifest specifier (Rich Trott) #4057458de6cebb6
] - process: refactor execution (Voltrex) #40664bc0eb0a3ea
] - src: make LoadEnvironment with string work with builtin modules path (Michaël Zasso) #406072c8a6ec28e
] - src: remove usage ofAllocatedBuffer
fromnode_http2
(Darshan Sen) #4058459c26a2b2c
] - src: fix #endif description in crypto_keygen.h (Tobias Nießen) #40639789fef1309
] - src: throw error instead of assertion (Ray Wang) #402437a8a6deee7
] - src: register external references in os bindings (Joyee Cheung) #402397bb3d43432
] - src: register external references in crypto bindings (Joyee Cheung) #40239143c881ccb
] - src: add missing inialization in agent.h (Michael Dawson) #40379c15afda79f
] - src: get embedder options on-demand (Joyee Cheung) #40357ff3b7d228e
] - src: ensure V8 initialized before marking milestone (Shelley Vohr) #40405774bc46327
] - src,crypto: removeAllocatedBuffer
fromcrypto_cipher.cc
(Darshan Sen) #404004030eff3d6
] - src,fs: removeToLocalChecked()
call fromfs::AfterMkdirp()
(Darshan Sen) #403863ac99a2417
] - src,stream: remove*Check*()
calls from non-Initialize()
functions (Darshan Sen) #4042536d3b123a0
] - stream: support array of streams in promises pipeline (Mestery) #4019301ffe0316c
] - test: deflake child-process-pipe-dataflow (Luigi Pinca) #4083863b44fc429
] - test: skip macos sandbox test with builtin modules path (Michaël Zasso) #406073d50997ccb
] - test: add semicolon after chunk size (Luigi Pinca) #40487f114e35115
] - test: deflake http2-cancel-while-client-reading (Luigi Pinca) #40659f778fa230b
] - test: testcrypto.setEngine()
using an actual engine (Darshan Sen) #40481b9533c592a
] - test: use conventional argument order in assertion (Tobias Nießen) #40591e72c95c580
] - test: fix test description (Luigi Pinca) #40486af4e682758
] - test: pass URL's toascii.window.js WPT (Khaidi Chu) #399106de88bc5ed
] - test: adjust CLI flags test to ignore blank lines in doc (Rich Trott) #404038226690097
] - test: mark test-policy-integrity flaky on Windows (Rich Trott) #4068450c6666b37
] - test: fix test-datetime-change-notify after daylight change (Piotr Rybak) #406849227f2af79
] - test: split test-crypto-dh.js (Joyee Cheung) #40451c593cff0af
] - test,doc: correct documentation for runBenchmark() (Rich Trott) #40683aef809f5c8
] - test,tools: increase pummel/benchmark test timeout from 4x to 6x (Rich Trott) #40684908f6447cd
] - test,tools: increase timeout for benchmark tests (Rich Trott) #4068464c6575f44
] - tools: simplify and fix commit queue (Michaël Zasso) #40742cba8eaf264
] - tools: ensure the PR was not pushed before merging (Antoine du Hamel) #407471c8590e1fe
] - tools: update ESLint to 8.2.0 (Luigi Pinca) #4073418800dee0a
] - tools: use GitHub Squash and Merge feature when using CQ (Antoine du Hamel) #4066648a785edb7
] - tools: fix bug inprefer-primordials
ESLint rule (Antoine du Hamel) #40628adde2a7a8c
] - tools: add script to update c-ares (Richard Lau) #40660c12ce898e8
] - tools: abort CQ session when landing several commits (Antoine du Hamel) #40577dd08e532a2
] - tools: fix commit-lint workflow (Antoine du Hamel) #40673b4a80dba79
] - tools: avoid fetch extra commits when validating commit messages (Antoine du Hamel) #391282a53995442
] - tools: update ESLint to 8.1.0 (Luigi Pinca) #405828648e50183
] - tools: fix formatting of warning message in update-authors.js (Rich Trott) #4060059de0f703f
] - tools: udpate doc tools to accommodate GFM footnotes (Rich Trott) #40477abf3b84d77
] - tools: add support for import assertions in linter (Antoine du Hamel) #3992404c2cbecb9
] - tools: update tools/lint-md dependencies to support GFM footnotes (Rich Trott) #40445a9990876f7
] - tools: update lint-md dependencies (Rich Trott) #40404f45814bad1
] - tools,meta: remove exclusions from AUTHORS (Rich Trott) #406487d550ad966
] - tty: support more CI services ingetColorDepth
(Richie Bendall) #40385cdea5b671b
] - typings: add more bindings typings (Mestery) #4041567c7d11f1a
] - typings: add JSDoc typings for inspector (Voltrex) #38390fbe0323ebf
] - typings: improve internal bindings typings (Mestery) #4041163ab0031c3
] - typings: separateinternalBinding
typings (Mestery) #40409v16.13.0
Compare Source
Notable Changes
This release marks the transition of Node.js 16.x into Long Term Support (LTS)
with the codename 'Gallium'. The 16.x release line now moves into "Active LTS"
and will remain so until October 2022. After that time, it will move into
"Maintenance" until end of life in April 2024.
v16.12.0
Compare Source
Notable Changes
Experimental ESM Loader Hooks API
Node.js ESM Loader hooks have been consolidated to represent the steps involved needed to facilitate future loader chaining:
resolve
:resolve
[+getFormat
]load
:getFormat
+getSource
+transformSource
For consistency,
getGlobalPreloadCode
has been renamed toglobalPreload
.A loader exporting obsolete hook(s) will trigger a single deprecation warning (per loader) listing the errant hooks.
Contributed by Jacob Smith, Geoffrey Booth, and Bradley Farias - https://github.com/nodejs/node/pull/37468
Other Notable Changes
8fdabcb918
] - deps: upgrade npm to 8.1.0 (npm team) #40463d1d9f2de30
] - doc: deprecate (doc-only) http abort related (dr-js) #366704116b6c907
] - (SEMVER-MINOR) vm: add support for import assertions in dynamic imports (Antoine du Hamel) #40249Commits
8bb3951e41
] - build: remove duplicate check for authors.yml (Rich Trott) #403932de57edced
] - build: make scripts in gyp run with right python (Cheng Zhao) #39730a8926d199d
] - crypto: remove incorrect constructor invocation (gc) #403008fdabcb918
] - deps: upgrade npm to 8.1.0 (npm team) #40463dca5ac1539
] - deps: suppress zlib compiler warnings (Daniel Bevenius) #4034391c3bf6a7f
] - deps: upgrade Corepack to 0.10 (Maël Nison) #403747e02124a06
] - dgram: addnread
assertion toUDPWrap::OnRecv
(Darshan Sen) #402952d409ed29e
] - dns: refactor and use validators (Voltrex) #40022dc7291dab8
] - doc: remove ESLint comments which were breaking the CJS/ESM toggles (Mark Skelton) #4040885b7385115
] - doc: add pronouns for tniessen to README (Tobias Nießen) #404121d5857c9f4
] - doc: format changelogs (Rich Trott) #403885eb9402b50
] - doc: fix missing variable in deepStrictEqual example (OliverOdo) #403966f77d1a1d5
] - doc: fix asyncLocalStorage.run() description (Constantine Kim) #4038193a48e02dc
] - doc: fix typos in n-api docs (Ignacio Carbajo) #40402fb7afb91c2
] - doc: format doc/guides using format-md task (Rich Trott) #403586c091c7878
] - doc: improve phrasing in fs.md (Arslan Ali) #4025538d81380ac
] - doc: add link to core promises tracking issue (Michael Dawson) #4035571a94aa82a
] - doc: correct ESM load hook table header (Jacob Smith) #402345b074affb4
] - doc: fix typo in esm.md (Mason Malone) #402733b3aaa0a37
] - doc: fix typo in ESM example (Tobias Nießen) #40275f848553fb8
] - doc: assign missing deprecation number (Michaël Zasso) #40324d1d9f2de30
] - doc: deprecate (doc-only) http abort related (dr-js) #366701ef2cf8413
] - doc: anchor link parity between markdown and html-generated docs (foxxyz) #393043743406b0a
] - (SEMVER-MINOR) esm: consolidate ESM loader hooks (Jacob Smith) #37468168020e1c8
] - lib: refactor to use let (gdccwxx) #40364bcd59d70bb
] - meta: consolidate AUTHORS entries for gabrielschulhof (Rich Trott) #4042080b4245db8
] - meta: consolidate AUTHORS information for geirha (Rich Trott) #4040693cecb4700
] - meta: consolidate duplicate AUTHORS entries for hassaanp (Rich Trott) #40391fff3135909
] - meta: update AUTHORS (Node.js GitHub Bot) #40392122481713d
] - meta: consolidate AUTHORS entry for thw0rted (Rich Trott) #403877f50313fcc
] - meta: update label-pr-config (Mestery) #401995668182665
] - meta: use .mailmap to consolidate AUTHORS entries for ide (Rich Trott) #40367bc86084a3e
] - net: check if option is undefined (Daijiro Wachi) #403444564a93e5e
] - net: remove unused ObjectKeys (Daijiro Wachi) #40344dbb2e6f429
] - net: check objectMode first and then readble || writable (Daijiro Wachi) #40344a672be57c8
] - net: throw error to object mode in Socket (Daijiro Wachi) #40344faf9e28c36
] - src: remove usage ofAllocatedBuffer
fromstream_*
(Darshan Sen) #40293857af2ba99
] - src: add missing initialization (Michael Dawson) #403702bfa87edbc
] - stream: fix fromAsyncGen (Robert Nagy) #404991e15137e71
] - test: replace common port with specific number (Daijiro Wachi) #403446f6b99c302
] - test: fix typos in whatwg-webstreams explanations (Tobias Nießen) #40389641b1bb052
] - test: add test for readStream.path when fd is specified (Qingyu Deng) #4035907dae7ff50
] - test: replace .then chains with await (gdccwxx) #40348d8a36ee1de
] - test: fix "test/common/debugger" identify async function (gdccwxx) #4034813d6a56c7d
] - test: improve test coverage offs.ReadStream
withFileHandle
(Antoine du Hamel) #4001850f91ab059
] - tools: udpate @babel/eslint-parser (Rich Trott) #403943611073145
] - tools: remove @babel/plugin-syntax-import-assertions (Rich Trott) #40394b72d693a3a
] - tools: remove @bable/plugin-syntax-class-properties (Rich Trott) #40394d6a99b77da
] - tools: remove @babel/plugin-syntax-top-level-await (Rich Trott) #40394d9157aa5fe
] - tools: update ESLint to 8.0.0 (Rich Trott) #4039443b97c7984
] - tools: prepare ESLint rules for 8.0.0 requirements (Rich Trott) #40394282b6eb4b0
] - tools: fix ESLint update scripts (Rich Trott) #40394c3a744f7bf
] - tools: warn about duplicates when generating AUTHORS file (Rich Trott) #403047733b5e55d
] - typings: define types for os binding (Michaël Zasso) #40222ca9a854877
] - typings: add missing types to options and util bindings (Michaël Zasso) #40222c3a7a0bd59
] - typings: define types for timers binding (Michaël Zasso) #4022265b51d05fa
] - typings: fix declaration of primordials (Michaël Zasso) #402225f3f3a5128
] - v8: remove --harmony-top-level-await (Geoffrey Booth) #402264116b6c907
] - (SEMVER-MINOR) vm: add support for import assertions in dynamic imports (Antoine du Hamel) #40249v16.11.1
Compare Source
This is a security release.
Notable changes
Commits
af488f8dc8
] - deps: update llhttp to 6.0.4 (Matteo Collina) nodejs-private/node-private#2842d1eefad98
] - http: add regression test for smuggling content length (Matteo Collina) nodejs-private/node-private#28445d419ab1c
] - http: add regression test for chunked smuggling (Matteo Collina) nodejs-private/node-private#284v16.11.0
Compare Source
Notable Changes
nghttp2
to v1.45.1 (thunder-coding) #40206Commits
34f3021ca3
] - benchmark: addutil.toUSVString()
's benchmark (Khaidi Chu) #40203f83b9bcb6f
] - build: support Python 3.10.0 (FrankQiu) #402963148f9b64e
] - build: check for duplicates in new AUTHORS entries (Rich Trott) #4026448c162d457
] - build: set DESTCPU correctly for 'make binary' on Apple Silicon (Chris Heisterkamp) #401477fbfb66d41
] - build: limit update authors CI scope (Jiawen Geng) #40219a1bee94502
] - build: pass a tuple of alternatives to str.endswith() (Christian Clauss) #40017eaf9d08332
] - build: add --no-user for pip commands in Makefile (Rich Trott) #40169e22ca06ac4
] - build: fix "test-internet.yml" workflows (SURYAPRATAP SINGH SURYAVANSHI) #401774da73d09bf
] - (SEMVER-MINOR) build: reset embedder string to "-node.0" (Michaël Zasso) #402854b117fbc81
] - console: use validators for consistency (Voltrex) #398126489423187
] - console: avoid unnecessary variables (Pancake) #401839af2592e69
] - crypto: update root certificates (Richard Lau) #402802fa5e5011f
] - crypto: handle initEDRaw pkey failure (Shelley Vohr) #401887968c79301
] - crypto: don't call callback twice in case crypto.randomBytes fails (Guilherme Bernal) #40157b89c7ae297
] - deps: upgrade npm to 8.0.0 (npm team) #40369947f3dc9af
] - deps: V8: patch jinja2 for Python 3.10 compat (Michaël Zasso) #40296685c7d43a5
] - (SEMVER-MINOR) deps: updatenghttp2
to v1.45.1 (thunder-coding) #40206e7046e0ff1
] - deps: restore minimum ICU version to 68 (Michaël Zasso) #39470a3db2033d4
] - (SEMVER-MINOR) deps: make V8 9.4 abi-compatible with 9.0 (Michaël Zasso) #402855cc24e6d76
] - deps: V8: cherry-pick9a60704
(Jiawen Geng) #400468de5eb88d3
] - deps: V8: cherry-pick5681a65
(Michaël Zasso) #39945150d816edb
] - deps: V8: cherry-pickbdcda72
(Michaël Zasso) #39945807b68b430
] - deps: V8: cherry-pick00bb1a7
(Darshan Sen) #39829be016948df
] - deps: silence irrelevant V8 warning (Michaël Zasso) #3899022dcd3e4dc
] - deps: silence irrelevant V8 warnings (Michaël Zasso) #375871aea6a771b
] - deps: fix V8 build issue with inline methods (Jiawen Geng) #40060e9812157f0
] - deps: make v8.h compatible with VS2015 (Joao Reis) #3211688ae710057
] - deps: V8: forward declaration ofRtl*FunctionTable
(Refael Ackermann) #32116e810f0766f
] - deps: V8: patch register-arm64.h (Refael Ackermann) #32116b8aabd5622
] - deps: V8: un-cherry-pickbd019bd
(Refael Ackermann) #32116309c4f05df
] - (SEMVER-MINOR) deps: update V8 to 9.4.146.19 (Michaël Zasso) #4028569eaaf6321
] - doc: format general markdown files (Rich Trott) #40322dc9c31985c
] - doc: fix the inline code-block at the NodeDhKeyGenParams class (Justin) #403418d0546db39
] - doc: correct the codeblock forhmacImportParams.hash
(Justin) #403401db2ffd008
] - doc: fix typo in stream docs (Juan José Arboleda) #40337abfcbcd14c
] - doc: update fast-track approval comment request (voltrexmaster) #40316e2cd2f44f2
] - doc: fix CVE-2021-22940 references (Michaël Zasso) #4030888bdbf1e29
] - doc: format markdown files in test directory (Rich Trott) #40290f71ac57a86
] - doc: add triagers to the table of contents (FrankQiu) #39969a5218b5313
] - doc: update Forrest Norvell's pronouns (Forrest L Norvell) #40292d2e54e5d0c
] - doc: reorder stream 'readable' paragraphs (Vincent Weevers) #402121d0a3e1a0c
] - doc: fix typo in fs (Brian White) #4025766edb7bfe1
] - doc: fix typo in fs.md (Arslan Ali) #40254614a7c21f8
] - doc: fix typo in packages.md (Arslan Ali) #402309fa6dfbe76
] - doc: fix example of crypto.generateKeySync (Gary Ho) #402259a2b94a142
] - doc: update fs.watchFile doc (Clément Nardi) #40134a68f91c884
] - doc: add version when diagnostics_channel APIs were added (Gerhard Stöbich) #402086bf67909ad
] - doc: fix typo in 'maxHeaderSize' (Rebhi Alfa) #4016473a127ba7b
] - doc: fix buffer api example code's token error (m3m0ry) #4012559db8293f4
] - doc: fix typo inasync_hooks.md
(xuchaobei) #40187779dfd199b
] - doc: make version picker usable on mobile (Evan Lucas) #399587bd62f4809
] - doc: fix typos in http.md (Luigi Pinca) #4016194b415b980
] - doc: add blank line between comments (Rich Trott) #40160847b451d88
] - doc: update markdown files in src for upcoming linting/formatting (Rich Trott) #40159cea7395858
] - doc: update benchmarks README.md for upcoming linting/formatting (Rich Trott) #40158c231745837
] - doc: prepare markdown file for upcoming formatting/linting (Rich Trott) #401567e58cda6e0
] - doc: update tools .md files for upcoming lint/formatting (Rich Trott) #4015502a87b096c
] - doc: update markdown formatting for *.md files (Rich Trott) #401549b0e61a67f
] - doc,src: update crypto/README.md (Tobias Nießen) #4033288e7bd073a
] - events: allow dispatch many times without listener (MrBBot) [#39772](htConfiguration
📅 Schedule: "on the 1st through 7th day of the month" in timezone America/Los_Angeles.
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by WhiteSource Renovate. View repository job log here.