feat(deps)!: Update dependency nodejs/node (v24.12.0 → v25.8.2)#1285
Open
erhardt-consulting-bot wants to merge 1 commit intomainfrom
Open
feat(deps)!: Update dependency nodejs/node (v24.12.0 → v25.8.2)#1285erhardt-consulting-bot wants to merge 1 commit intomainfrom
erhardt-consulting-bot wants to merge 1 commit intomainfrom
Conversation
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
35ed41f to
61eca6a
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
61eca6a to
9c8f50d
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
9c8f50d to
977eaf4
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
977eaf4 to
edba0bc
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
edba0bc to
97b155a
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
97b155a to
a9b6d0d
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
2 times, most recently
from
4f7699d to
6eb39cb
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
6eb39cb to
0bede42
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
0bede42 to
5d07277
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
5d07277 to
d6149f2
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
d6149f2 to
62f7d52
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
62f7d52 to
58088dd
Compare
erhardt-consulting-bot
changed the title
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
58088dd to
f8b026c
Compare
erhardt-consulting-bot
changed the title
| datasource | package | from | to | | ----------- | ----------- | -------- | ------- | | github-tags | nodejs/node | v24.12.0 | v25.8.2 |
erhardt-consulting-bot
force-pushed
the
renovate/nodejs-node-25.x
branch
from
f8b026c to
a327879
Compare
erhardt-consulting-bot
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v24.12.0→v25.8.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
nodejs/node (nodejs/node)
v25.8.2: 2026-03-24, Version 25.8.2 (Current), @RafaelGSSCompare Source
This is a security release.
Notable Changes
SNICallbackinvocation intry/catch(Matteo Collina) - HighheadersDistinct/trailersDistinct(Matteo Collina) - Highpipe_wrap.cc(RafaelGSS) - MediumNGHTTP2_ERR_FLOW_CONTROLerror code (RafaelGSS) - Mediumrealpath.native(RafaelGSS) - Lowlib/fs/promises(RafaelGSS) - LowCommits
2086b7477b] - (CVE-2026-21717) build,test: test array index hash collision (Joyee Cheung) nodejs-private/node-private#8340f9332a40a] - (CVE-2026-21713) crypto: use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan) nodejs-private/node-private#8222b6937ddb2] - deps: update undici to 7.24.4 (Node.js GitHub Bot) #62271bfb8ad5787] - deps: update undici to 7.24.3 (Node.js GitHub Bot) #62233be6384727f] - deps: upgrade npm to 11.11.1 (npm team) #622162feea5bb97] - deps: V8: overridedepot_toolsversion (Richard Lau) #6234486c04784dd] - (CVE-2026-21710) http: use null prototype for headersDistinct/trailersDistinct (Matteo Collina) nodejs-private/node-private#8215197a56a34] - (CVE-2026-21711) permission: include permission check to pipe_wrap.cc (RafaelGSS) nodejs-private/node-private#82004a886c735] - (CVE-2026-21716) permission: include permission check on lib/fs/promises (RafaelGSS) nodejs-private/node-private#7959a7f80f2b0] - (CVE-2026-21715) permission: add permission check to realpath.native (RafaelGSS) nodejs-private/node-private#794d9c9b628cf] - (CVE-2026-21714) src: handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) nodejs-private/node-private#83245b55dc786] - (CVE-2026-21712) src: handle url crash on different url formats (RafaelGSS) nodejs-private/node-private#8164bfda307c0] - (CVE-2026-21637) tls: wrap SNICallback invocation in try/catch (Matteo Collina) nodejs-private/node-private#819v25.8.1: 2026-03-11, Version 25.8.1 (Current), @aduh95Compare Source
Notable Changes
ea87eea71a] - module: fix extensionless CJS files in"type": "module"packages (Matteo Collina) #62083Commits
bab750d1b3] - build: do not depend on V8 deps on--without-bundled-v8builds (Antoine du Hamel) #62033b26d1c7fcb] - crypto: make --use-system-ca per-env rather than per-process (Aditi) #60678e362635abf] - crypto: add missing AES dictionaries (Filip Skokan) #620996f975db8af] - crypto: fix importKey required argument count check (Filip Skokan) #620993beaf9c5fc] - deps: update amaro to 1.1.8 (Node.js GitHub Bot) #6215153afb0edd8] - deps: update sqlite to 3.52.0 (Node.js GitHub Bot) #62150a13ed052a1] - deps: update merve to 1.2.0 (Node.js GitHub Bot) #621492c850577b7] - deps: patch resb crate (Richard Lau) #6213837862a6728] - deps: V8: cherry-pickaa0b288(Richard Lau) #6213609191ad8b4] - deps: update ada to 3.4.3 (Node.js GitHub Bot) #620498d63a178fd] - doc: copyeditaddons.md(Antoine du Hamel) #6207183719ffb64] - doc: correctutil.convertProcessSignalToExitCodevalidation behavior (René) #62134eeee7c7fb1] - doc: add efekrskl as triager (Efe) #61876db150b2e69] - doc: fix markdown forexpectFailurevalues (Jacob Smith) #62100d55a441e60] - doc: add title to index (Aviv Keller) #62046cc46204b48] - doc: include url.resolve() in DEP0169 application deprecation (Mike McCready) #620021d91a7261e] - doc,module: add missing doc for syncHooks.deregister() (Joyee Cheung) #619595198573bee] - http: fix use-after-free when freeParser is called during llhttp_execute (Gerhard Stöbich) #62095f8793f80df] - lib: fix source map url parse in dynamic imports (Chengzhong Wu) #619905439d0e0cf] - meta: bump actions/download-artifact from 7.0.0 to 8.0.0 (dependabot[bot]) #6206327fd21943a] - meta: bump actions/upload-artifact from 6.0.0 to 7.0.0 (dependabot[bot]) #620625b266f3295] - meta: bump step-security/harden-runner from 2.14.2 to 2.15.0 (dependabot[bot]) #62064ea87eea71a] - module: fix extensionless CJS files in"type": "module"packages (Matteo Collina) #62083851228cd60] - sqlite: handle stmt invalidation (Guilherme Araújo) #6187719efe60548] - src: expose async context frame debugging helper to JS (Anna Henningsen) #621030257e8072f] - src: make AsyncWrap subclass internal field counts explicit (Anna Henningsen) #62103975dafbe3b] - src: release context frame in AsyncWrap::EmitDestroy (Gerhard Stöbich) #61995f2c08c7888] - src: use validate_ascii_with_errors instead of validate_ascii (Сковорода Никита Андреевич) #611220278461d83] - stream: optimize webstreams pipeTo (Mattias Buelens) #620794d62e95bfa] - stream: fix brotli error handling in web compression streams (Filip Skokan) #621074bdcaf2865] - stream: improve Web Compression spec compliance (Filip Skokan) #62107a5b1be2045] - stream: fix UTF-8 character corruption in fast-utf8-stream (Matteo Collina) #617455632446c4e] - stream: fix TransformStream race on cancel with pending write (Marco) #62040f90fa9cd1a] - stream: accept ArrayBuffer in CompressionStream and DecompressionStream (조수민) #6191300319eaa3a] - test: update WPT for url toc928b19(Node.js GitHub Bot) #62148456abc7d20] - test: update WPT for WebCryptoAPI toc9e9558(Node.js GitHub Bot) #6214782770cb7d3] - test: improve WPT report runner (Filip Skokan) #62107cfc847d233] - test: update WPT compression toae05f5c(Filip Skokan) #6210780f78f2737] - test: update WPT for WebCryptoAPI to42e4732(Node.js GitHub Bot) #620488048e0508c] - test: fix skipping behavior fortest-runner-run-files-undefined(Antoine du Hamel) #62026699a6214c6] - tools: revert timezone update GHA workflow to ubuntu-latest (Richard Lau) #621401a453b550c] - tools: improve error handling in test426 update script (Rich Trott) #62121710dde5ee2] - tools: fix--node-builtin-modules-pathvalue inshell.nix(Antoine du Hamel) #62102dcb1cbb21f] - tools: bump the eslint group across 1 directory with 2 updates (dependabot[bot]) #620927d0b758583] - tools: fix daily wpt workflow nighly release version lookup (Filip Skokan) #620763e8c816f2e] - tools: fix example in release proposal linter (Richard Lau) #62074772d3d270d] - tools: bump minimatch from 3.1.3 to 3.1.5 in /tools/clang-format (dependabot[bot]) #6201392f3b42672] - tools: bump eslint to v10, babel to v8.0.0-rc.2 (Huáng Jùnliàng) #61905deead95ec5] - url: suppress warnings from url.format/url.resolve inside node_modules (René) #62005v25.8.0: 2026-03-03, Version 25.8.0 (Current), @richardlauCompare Source
Notable Changes
e55eddea2a] - build, doc: use new api doc tooling (flakey5) #573434c181e2277] - (SEMVER-MINOR) sqlite: add limits property to DatabaseSync (Mert Can Altin) #6129846ee1eddd7] - (SEMVER-MINOR) src: add C++ support for diagnostics channels (RafaelGSS) #618699ddd1a9c27] - (SEMVER-MINOR) src,permission: add --permission-audit (RafaelGSS) #618690d97ec4044] - (SEMVER-MINOR) test_runner: expose worker ID for concurrent test execution (Ali Hassan) #61394Commits
940b58c8c1] - buffer: optimize buffer.concat performance (Mert Can Altin) #617210589b0e5a1] - build: fix GN for new merve dep (Shelley Vohr) #61984f3d3968dcd] - Revert "build: add temporal test on GHA windows" (Antoine du Hamel) #61810e55eddea2a] - build, doc: use new api doc tooling (flakey5) #57343b7715292f8] - child_process: add tracing channel for spawn (Marco) #61836a32a598748] - crypto: fix missing nullptr check on RSA_new() (ndossche) #61888dc384f95b3] - crypto: fix handling of null BUF_MEM* in ToV8Value() (Nora Dossche) #618853337b095db] - crypto: fix potential null pointer dereference when BIO_meth_new() fails (Nora Dossche) #6178851ded81139] - deps: update undici to 7.22.0 (Node.js GitHub Bot) #620358aa2fde931] - deps: update minimatch to 10.2.4 (Node.js GitHub Bot) #6201657dc092eaf] - deps: upgrade npm to 11.11.0 (npm team) #61994705bbd60a9] - deps: update simdjson to 4.3.1 (Node.js GitHub Bot) #619304d411d72e5] - deps: update acorn-walk to 8.3.5 (Node.js GitHub Bot) #61928f53a32ab84] - deps: update acorn to 8.16.0 (Node.js GitHub Bot) #619259b483fbb27] - deps: update minimatch to 10.2.2 (Node.js GitHub Bot) #618304e54c103cb] - doc: separate in-types and out-types in SQLite conversion docs (René) #62034ca78ebbeaa] - doc: fix small logic error in DETECT_MODULE_SYNTAX (René) #62025e6b131f3fe] - doc: fix module.stripTypeScriptTypes indentation (René) #619927508540e19] - doc: update DEP0040 (punycode) to application type deprecation (Mike McCready) #6191633a364cb62] - doc: explicitly mention Slack handle (Rafael Gonzaga) #6198646a61922bd] - doc: support toolchain Visual Studio 2022 & 2026 + Windows 11 SDK (Mike McCready) #61864dc12a257aa] - doc: rename invalidfunctionparameter (René) #61942dafdc0a5b8] - http: validate headers in writeEarlyHints (Richard Clarke) #618973c94b56fa6] - inspector: unwrap internal/debugger/inspect imports (René) #619748a24c17648] - lib: improve argument handling in Blob constructor (Ms2ger) #6198021d4baf256] - meta: bump github/codeql-action from 4.32.0 to 4.32.4 (dependabot[bot]) #6191159a726a8e3] - meta: bump step-security/harden-runner from 2.14.1 to 2.14.2 (dependabot[bot]) #619090072b7f991] - meta: bump actions/stale from 10.1.1 to 10.2.0 (dependabot[bot]) #61908999bf22f47] - repl: keep reference count forprocess.on('newListener')(Anna Henningsen) #618954c181e2277] - (SEMVER-MINOR) sqlite: add limits property to DatabaseSync (Mert Can Altin) #61298aee2a18257] - src: fix flags argument offset in JSUdpWrap (Weixie Cui) #6194846ee1eddd7] - (SEMVER-MINOR) src: add C++ support for diagnostics channels (RafaelGSS) #618699ddd1a9c27] - (SEMVER-MINOR) src,permission: add --permission-audit (RafaelGSS) #61869ea2df2a16f] - stream: fix pipeTo to defer writes per WHATWG spec (Matteo Collina) #61800aa0c7b09e0] - test: remove unnecessaryprocess.exitcalls from test files (Antoine du Hamel) #62020ad96a6578f] - test: skiptest-urlon--shared-adabuilds (Antoine du Hamel) #620197c72a31e4b] - test: skip strace test with shared openssl (Richard Lau) #61987604456c163] - test: avoid flaky debugger restart waits (Yuya Inoue) #617734890d6bd43] - test_runner: run afterEach on runtime skip (Igor Shevelenkov) #61525fce2930110] - test_runner: expose expectFailure message (sangwook) #615630d97ec4044] - (SEMVER-MINOR) test_runner: expose worker ID for concurrent test execution (Ali Hassan) #61394243e6b2009] - test_runner: replace native methods with primordials (Ayoub Mabrouk) #61219bf1ed7e647] - tls: forward keepAlive, keepAliveInitialDelay, noDelay to socket (Sergey Zelenov) #620040f15079d94] - tools: remove custom logic for skippingtest-strace-openat-openssl(Antoine du Hamel) #6203854a055a59d] - tools: bump minimatch from 3.1.2 to 3.1.3 in/tools/clang-format(dependabot[bot]) #61977a28744cb62] - tools: fix permissions for merve update script (Richard Lau) #6202331e7936354] - tools: revert tools GHA workflow to ubuntu-latest (Richard Lau) #620240a96a16e1f] - tools: bump minimatch from 3.1.2 to 3.1.3 in /tools/eslint (dependabot[bot]) #61976f279233412] - tools: roll back to x86 runner onscorecard.yml(Antoine du Hamel) #61944192c0382f4] - util: add fast path to stripVTControlCharacters (Hiroki Osame) #61833v25.7.0: 2026-02-24, Version 25.7.0 (Current), @ruyadorno prepared by @aduh95Compare Source
Notable Changes
b0a79b10f0] - (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav) #617132d874dfb8e] - (SEMVER-MINOR) sea: support ESM entry point in SEA (Joyee Cheung) #61813ee59127664] - sqlite: mark as release candidate (Matteo Collina) #61262608736e19e] - (SEMVER-MINOR) stream: renameDuplex.toWeb()type option toreadableType(René) #61632a43375999f] - (SEMVER-MINOR) test_runner: show interrupted test on SIGINT (Matteo Collina) #61676Commits
ab4375e141] - benchmark: add startup benchmark for ESM entrypoint (Joyee Cheung) #617698d83d8026b] - build: add temporal test on GHA windows (Chengzhong Wu) #61810aab153eec3] - build: skip sscache action on non-main branches (Joyee Cheung) #617909e40fb93bc] - build: use path-ignore in GHA coverage-windows.yml (Chengzhong Wu) #618114896653361] - build: generate_config_gypi.py generates valid JSON (Shelley Vohr) #61791bb82b44de0] - build: build with v8 gdbjit support on supported platform (Joyee Cheung) #61010e7173a093a] - build: show cc outputs when version detection failed (Chengzhong Wu) #61700848050d38f] - build,win: add WinGet Visual Studio 2022 Build Tools Edition config (Mike McCready) #61652938841e1cd] - crypto: always return certificate serial numbers as uppercase (Anna Henningsen) #61752dba9001d6f] - deps: upgrade npm to 11.10.1 (npm team) #6189275c8e18d2f] - deps: update nbytes to 0.1.3 (Node.js GitHub Bot) #618794ca1597f25] - deps: remove stale OpenSSL arch configs (René) #61834c4f298c729] - deps: update llhttp to 9.3.1 (Node.js GitHub Bot) #618277d63a2df93] - deps: V8: cherry-pick64b36b4(Rafael Magrin) #61712241a6b7088] - deps: update googletest to5a9c3f9(Node.js GitHub Bot) #61731eec896c0e0] - deps: V8: backport6a0a25a(Vivian Wang) #616665a9874af09] - doc: clarify status of feature request issues (Antoine du Hamel) #615050648ac64aa] - doc: add esm and cjs examples to node:vm (Alfredo González) #614988b38718294] - doc: clarify build environment is trusted in threat model (Matteo Collina) #6186510e86818ee] - doc: remove incorrect mention ofmoduleintypescript.md(Rob Palmer) #61839b50376f527] - doc: simplify addAbortListener example (Chemi Atlow) #61842dea0e7a856] - doc: fix typo in --disable-wasm-trap-handler description (Dmytro Semchuk) #6182057ac1f5aa0] - doc: clean up globals.md (René) #618224c30d2bb4d] - doc: remove obsolete Boxstarter automated install (Mike McCready) #61785db610b9e32] - doc: clarify async caveats forevents.once()(René) #61572b4a826b11c] - doc: update Juan's security steward info (Juan José) #617547d9cc5dc54] - doc: fix methods being documented as properties inprocess.md(Antoine du Hamel) #61765aa0362c26a] - doc: add riscv64 info into platform list (Lu Yahan) #422519b0101b65b] - doc: fix dropdown menu being obscured at <600px due to stacking context (Jeff) #61735df2c65b3e4] - doc: fix spacing in process message event (Aviv Keller) #6175601018559f5] - doc: move describe/it aliases section before expectFailure (Luca Raveri) #6156749443583af] - doc: fix broken links of net.md (YuSheng Chen) #61673af7c927a2a] - doc: clean up Windows code snippet inchild_process.md(reillylm) #61422221648a687] - esm: update outdated FIXME comment in translators.js (Karan Mangtani) #617154484e14a31] - events: don't call resume after close (Сковорода Никита Андреевич) #605484cecbe1f53] - fs: addthrowIfNoEntryoption for fs.stat and fs.promises.stat (Juan José) #611782c94967684] - http: remove redundant keepAliveTimeoutBuffer assignment (Efe) #61743435f3dd8e4] - http: attach error handler to socket synchronously in onSocket (RajeshKumar11) #61770ce0ebd853d] - http: fix keep-alive socket reuse race in requestOnFinish (Martin Slota) #617108103a78b6a] - http2: add strictSingleValueFields option to relax header validation (Tim Perry) #59917b0a79b10f0] - (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav) #61713c589b6b23c] - http2: fix FileHandle leak in respondWithFile (sangwook) #61707df477202ae] - lib: reduce cycles in esm loader and load it in snapshot (Joyee Cheung) #61769deda50a819] - lib: remove top-level getOptionValue() calls in lib/internal/modules (Joyee Cheung) #61769b1c1ddff79] - lib: optimize styleText when validateStream is false (Rafael Gonzaga) #61792df334f7fa0] - meta: use SCCACHE_GHA_ENABLED for shared build workflows (René) #61640e1b2cd605f] - meta: bump cachix/install-nix-action from 31.9.0 to 31.9.1 (dependabot[bot]) #6191024b858547a] - module: fix extensionless entry with explicit type=commonjs (Yuya Inoue) #616004f2f8006bd] - repl: fix FileHandle leak in history initialization (sangwook) #617062d874dfb8e] - (SEMVER-MINOR) sea: support ESM entry point in SEA (Joyee Cheung) #61813ee59127664] - sqlite: mark as release candidate (Matteo Collina) #61262f14ff14473] - src: remove unnecessaryc_str()conversions in diagnostic messages (Anna Henningsen) #6178626a09e541d] - src: use bool literals in TraceEnvVarOptions (Tobias Nießen) #6142562b0758c47] - src: fix--build-seadefault executable path (Alex Schwartz) #61708b5724921b1] - src: track allocations made by zstd streams (Anna Henningsen) #617173d1d1523a5] - src: do not store compression methods on Brotli classes (Anna Henningsen) #61717b2915cda77] - src: extract zlib allocation tracking into its own class (Anna Henningsen) #617173032a7e3c6] - src: release memory for zstd contexts inClose()(Anna Henningsen) #61717bc2287db74] - src: add more checks and clarify docs for external references (Joyee Cheung) #617195daf282e33] - src: fix cjs_lexer external reference registration (Joyee Cheung) #61718fb2db5f947] - src: support import() and import.meta in embedder-run modules (Joyee Cheung) #61654e146591002] - stream: fix decoded fromList chunk boundary check (Thomas Watson) #61884065200a5f0] - stream: add fast paths for webstreams read and pipeTo (Matteo Collina) #61807608736e19e] - (SEMVER-MINOR) stream: renameDuplex.toWeb()type option toreadableType(René) #6163251587d684d] - test: fix typos in test files (Daijiro Wachi) #6140817b2361360] - test: allow filtering async internal frames in assertSnapshot (Joyee Cheung) #617693f6a5f5f7f] - test: unify assertSnapshot stacktrace transform (Chengzhong Wu) #61665c8dac320de] - test: check stability block position in API markdown (René) #585906809ef8d04] - test: adapt buffer test for v8 sandbox (Shelley Vohr) #6177260f5771a74] - test: update FileAPI tests from WPT (Ms2ger) #61750d2fef4a31a] - test: update WPT for WebCryptoAPI to7cbe7e8(Node.js GitHub Bot) #61729d7a87f14da] - test: update WPT for url toefb889e(Node.js GitHub Bot) #61728b6ae1fc4b8] - test: split test-embedding.js and run tests in parallel (Joyee Cheung) #61571a43375999f] - (SEMVER-MINOR) test_runner: show interrupted test on SIGINT (Matteo Collina) #616761c02aa09b0] - test_runner: fix suite rerun (Moshe Atlow) #6177547821ec609] - tools: switch to ARM runners on GHA jobs (Antoine du Hamel) #619031630a56370] - tools: avoid building twice in coverage jobs (Antoine du Hamel) #6189989318b0a02] - tools: fix auto-start-ci (Antoine du Hamel) #61900ee107f5e84] - tools: do not checkout repo inauto-start-ci.yml(Antoine du Hamel) #61874c2de1fa619] - tools: cache V8 build on test-shared workflow (Antoine du Hamel) #61860111c77ec94] - tools: automate updates for test/fixtures/test426 (Rich Trott) #60978ea8886f7d5] - tools: use ubuntu-slim runner in GHA (Antoine du Hamel) #617599db82ba786] - tools: bump unist-util-visit in /tools/doc in the doc group (dependabot[bot]) #61646c8e58c56b9] - tools: bump the eslint group in /tools/eslint with 6 updates (dependabot[bot]) #616282518ec77e8] - tools: use ubuntu-slim runner in GHA (Antoine du Hamel) #61734c5ad2beba3] - tools: fix small inconsistencies in JSON doc output (Antoine du Hamel) #61757a9f90bee0a] - tools: use ubuntu-latest runner innotify-on-pushworkflow (Antoine du Hamel) #6174230e38182d9] - watch: get flags from execArgv (Efe) #61779da1a08a3a5] - worker: eliminate race condition in process.cwd() (giulioAZ) #61664dfac82a235] - zlib: add support for brotli compression dictionary (Andy Weiss) #61763v25.6.1: 2026-02-10, Version 25.6.1 (Current), @aduh95Compare Source
Notable Changes
47df4328d7] - build,deps: replacecjs-module-lexerwithmerve(Yagiz Nizipli) #61456Commits
47df4328d7] - build,deps: replace cjs-module-lexer with merve (Yagiz Nizipli) #61456a727054503] - deps: upgrade npm to 11.9.0 (npm team) #61685c78c49ed6b] - deps: update amaro to 1.1.7 (Node.js GitHub Bot) #617304790816d9b] - deps: update minimatch to 10.1.2 (Node.js GitHub Bot) #617328c71740e8a] - deps: update undici to 7.21.0 (Node.js GitHub Bot) #61683e559ef6ab1] - deps: update googletest to56efe39(Node.js GitHub Bot) #61605300de2bb5a] - deps: update amaro to 1.1.6 (Node.js GitHub Bot) #61603e71e9505ef] - dns: fix Windows SRV ECONNREFUSED by adjusting c-ares fallback detection (notvivek12) #61453439b816bc7] - doc: clarify EventEmitter error handling in threat model (Matteo Collina) #61701c1c6641f23] - doc: mention default option for test runner env (Steven) #6165941ec451f98] - doc: fix --inspect security warning section (Tim Perry) #61675bb90ef2356] - doc: documenturl.format(urlString)as deprecated under DEP0169 (René) #61644513df82e6f] - doc: update to Visual Studio 2026 manual install (Mike McCready) #616559409d30736] - doc: deprecation add more codemod (Augustin Mauroy) #6164275a7a67151] - doc: fix grammatical error in README.md (ayj8201) #61653821e59e884] - doc: correct tools README Boxstarter link (Mike McCready) #616384998f539a0] - doc: updateserver.dropMaxConnectionlink (YuSheng Chen) #615849383ac4ab7] - http: implement slab allocation for HTTP header parsing (Mert Can Altin) #61375e90eb1d561] - meta: persist sccache daemon until end of build workflows (René) #61639ade36ac367] - meta: bump github/codeql-action from 4.31.9 to 4.32.0 (dependabot[bot]) #6162226638bd67f] - meta: bump step-security/harden-runner from 2.14.0 to 2.14.1 (dependabot[bot]) #61621eaa9a96cb6] - meta: bump actions/setup-python from 6.1.0 to 6.2.0 (dependabot[bot]) #61627fd98187828] - meta: bump cachix/cachix-action (dependabot[bot]) #61626820c1d021c] - meta: bump actions/setup-node from 6.1.0 to 6.2.0 (dependabot[bot]) #6162572a4136bd5] - meta: bump actions/cache from 5.0.1 to 5.0.3 (dependabot[bot]) #61624e3ef6cb3bc] - meta: bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (dependabot[bot]) #61623020a836202] - meta: bump actions/stale from 10.1.0 to 10.1.1 (dependabot[bot]) #616200df72f07c8] - meta: bump actions/checkout from 6.0.1 to 6.0.2 (dependabot[bot]) #61619d147c08b83] - module: do not invoke resolve hooks twice for imported cjs (Joyee Cheung) #61529a2843f8556] - net: defer synchronous destroy calls in internalConnect (RajeshKumar11) #616587fb7030781] - repl: fix flaky test-repl-programmaConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.