chore(deps): update node.js to v22.14.0 - autoclosed #941
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
added
💙
How to use the Graphite Merge QueueAdd either label to this PR to merge it via the merge queue:
You must have a Graphite account in order to use the merge queue. Sign up using this link. An organization admin has enabled the Graphite Merge Queue in this repository. Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue. |
renovate
bot
force-pushed
the
renovate/node.js
branch
from
568aeca to
c2013bc
Compare
renovate
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
22.13.0->22.14.0Release Notes
nodejs/node (node)
v22.14.0: 2025-02-11, Version 22.14.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
82a9000e9e] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #56566b7fe54fc88] - (SEMVER-MINOR) fs: allowexcludeoption in globs to accept glob patterns (Daeyeon Jeong) #564893ac92ef607] - (SEMVER-MINOR) lib: add typescript support to STDIN eval (Marco Ippolito) #563591614e8e7bc] - (SEMVER-MINOR) module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX (Marco Ippolito) #566106d6cffa9cc] - (SEMVER-MINOR) module: addfindPackageJSONutil (Jacob Smith) #55412d35333ae18] - (SEMVER-MINOR) process: add process.ref() and process.unref() methods (James M Snell) #5640007ff3ddcb5] - (SEMVER-MINOR) sqlite: support TypedArray and DataView inStatementSync(Alex Yang) #5638594d3fe1b62] - (SEMVER-MINOR) src: add --disable-sigusr1 to prevent signal i/o thread (Rafael Gonzaga) #564415afffb4415] - (SEMVER-MINOR) src,worker: add isInternalWorker (Carlos Espa) #56469697a851fb3] - (SEMVER-MINOR) test_runner: add TestContext.prototype.waitFor() (Colin Ihrig) #56595047537b48c] - (SEMVER-MINOR) test_runner: add t.assert.fileSnapshot() (Colin Ihrig) #56459926cf84e95] - (SEMVER-MINOR) test_runner: add assert.register() API (Colin Ihrig) #56434c658a8afdf] - (SEMVER-MINOR) worker: add eval ts input (Marco Ippolito) #56394Commits
bad1ad8650] - assert: make myers_diff function more performant (Giovanni Bucci) #56303e222e36f3b] - assert: make partialDeepStrictEqual work with urls and File prototypes (Giovanni Bucci) #56231e232789fe2] - assert: show diff when doing partial comparisons (Giovanni Bucci) #56211c99de1fdcf] - assert: make partialDeepStrictEqual throw when comparing [0] with [-0] (Giovanni) #562372386fd5840] - benchmark: add validateStream to styleText bench (Rafael Gonzaga) #56556b197dfa7ec] - build: fix GN build for ngtcp2 (Cheng) #563002a3cdd34ff] - build: test macos-13 on GitHub actions (Michaël Zasso) #5630712f716be0a] - build: build v8 with -fvisibility=hidden on macOS (Joyee Cheung) #56275c5ca15bd34] - child_process: fix parsing messages with splitted length field (Maksim Gorkov) #561068346b8fc2c] - crypto: add missing return value check (Michael Dawson) #5661582a9000e9e] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #56566890eef20a1] - crypto: fix checkPrime crash with large buffers (Santiago Gimeno) #565595edb7b5e87] - crypto: fix warning of ignoring return value (Cheng) #56527b89f123a0b] - crypto: make generatePrime/checkPrime interruptible (James M Snell) #5646063c1859e01] - deps: update corepack to 0.31.0 (Node.js GitHub Bot) #56795a48430d4d3] - deps: move inspector_protocol to deps (Chengzhong Wu) #5664974cccc824f] - deps: macro ENODATA is deprecated in libc++ (Cheng) #56698fa869ea0f2] - deps: fixup some minor coverity warnings (James M Snell) #566121a4fa2b015] - deps: update amaro to 0.3.0 (Node.js GitHub Bot) #56568b47076fd82] - deps: update amaro to 0.2.2 (Node.js GitHub Bot) #5656846bd4b8731] - deps: update simdutf to 6.0.3 (Node.js GitHub Bot) #565678ead9c693b] - deps: update simdutf to 5.7.2 (Node.js GitHub Bot) #5638818d4b502af] - deps: update amaro to 0.2.1 (Node.js GitHub Bot) #56390d938d7cc86] - deps: update googletest to7d76a23(Node.js GitHub Bot) #563879761e7dccb] - deps: update googletest toe54519b(Node.js GitHub Bot) #563708319dc6bc5] - deps: update ngtcp2 to 1.10.0 (Node.js GitHub Bot) #563346eacd19d6a] - deps: update simdutf to 5.7.0 (Node.js GitHub Bot) #5633228bec2dda3] - diagnostics_channel: capture console messages (Stephen Belanger) #56292d519d33502] - doc: update macOS and Xcode versions for releases (Michaël Zasso) #56337fcfe650507] - doc: add note for features usingInternalWorkerwith permission model (Antoine du Hamel) #56706efbba182b5] - doc: add entry to changelog about SQLite Session Extension (Bart Louwers) #5631831bf9c7dd9] - doc: move anatoli to emeritus (Michael Dawson) #565926096e38c7c] - doc: fix styles of the expandable TOC (Antoine du Hamel) #56755d423638281] - doc: add "Skip to content" button (Antoine du Hamel) #56750edeb157d75] - doc: improve accessibility of expandable lists (Antoine du Hamel) #567491a79e87687] - doc: add note regarding commit message trailers (Dario Piotrowicz) #56736927c7e47e4] - doc: fix typo in example code for util.styleText (Robin Mehner) #56720fade522538] - doc: fix inconsistencies inWeakSetandWeakMapcomparison details (Shreyans Pathak) #5668355533bf147] - doc: add RafaelGSS as latest sec release stewards (Rafael Gonzaga) #566828e978bdee1] - doc: clarify cjs/esm diff inqueueMicrotask()vsprocess.nextTick()(Dario Piotrowicz) #56659ae360c30dc] - doc:WeakSetandWeakMapcomparison details (Shreyans Pathak) #56648acd2a2fda5] - doc: mention prepare --security (Rafael Gonzaga) #56617d3c0a2831d] - doc: tweak info on reposts in ambassador program (Michael Dawson) #565893299505b49] - doc: add type stripping to ambassadors program (Marco Ippolito) #56598b1a6ffa4e4] - doc: improve internal documentation on built-in snapshot (Joyee Cheung) #565051641a28930] - doc: document CLI way to open the nodejs/bluesky PR (Antoine du Hamel) #565062042628fda] - doc: add section about using npx with permission model (Rafael Gonzaga) #56539ace19a0263] - doc: update gcc-version for ubuntu-lts (Kunal Kumar) #565534aa57b50f8] - doc: fix parentheses in options (Tobias Nießen) #56563b40b01b4d3] - doc: include CVE to EOL lines as sec release process (Rafael Gonzaga) #565206701360113] - doc: add esm examples to node:trace_events (Alfredo González) #56514d3207cca3e] - doc: add message for Ambassadors to promote (Michael Dawson) #5623597ece4ae06] - doc: allow request for TSC reviews via the GitHub UI (Antoine du Hamel) #5649303f25055ab] - doc: add example for piping ReadableStream (Gabriel Schulhof) #56415516d07482c] - doc: expand description ofparseArg'sdefault(Kevin Gibbons) #54431a6491effcb] - doc: use<ul>instead of<ol>inSECURITY.md(Antoine du Hamel) #56346e4ec134b21] - doc: clarify that WASM is trusted (Matteo Collina) #563450f7aed8a59] - doc: fix thecrc32documentation (Kevin Toshihiro Uehara) #55898721104a296] - doc: fix links inmodule.md(Antoine du Hamel) #56283928540d792] - doc: fix typos (Nathan Baulch) #55066e69d35f03b] - doc: add history info for Permission Model (Antoine du Hamel) #56707c6fd867ab5] - esm: fix jsdoc type refs toModuleJobBasein esm/loader (Jacob Smith) #564999cf9046bd7] - Revert "events: add hasEventListener util for validate" (origranot) #56282b7fe54fc88] - (SEMVER-MINOR) fs: allowexcludeoption in globs to accept glob patterns (Daeyeon Jeong) #564896ca27c2a59] - http2: omit server name when HTTP2 host is IP address (islandryu) #565309f1fa199bf] - inspector: roll inspector_protocol (Chengzhong Wu) #566490dae4bb3ab] - inspector: add undici http tracking support (Chengzhong Wu) #564882c6124cec4] - inspector: report loadingFinished until the response data is consumed (Chengzhong Wu) #5637296ec862ce2] - lib: refactor execution.js (Marco Ippolito) #563583ac92ef607] - (SEMVER-MINOR) lib: add typescript support to STDIN eval (Marco Ippolito) #56359d5bf3db0cf] - lib: allow skipping source maps in node_modules (Chengzhong Wu) #56639d33eaf2bcb] - lib: ensure FORCE_COLOR forces color output in non-TTY environments (Pietro Marchini) #55404dc003218a8] - lib: optimizeprepareStackTraceon builtin frames (Chengzhong Wu) #56299df06524863] - lib: suppress source map lookup exceptions (Chengzhong Wu) #5629935335a5a66] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #565801faabdb150] - meta: add codeowners of security release document (Rafael Gonzaga) #56521b4ece22ef5] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #563429ec67e7ce0] - meta: move MoLow to TSC regular member (Moshe Atlow) #56276bae4b2e20a] - module: use more defensive code when handling SWC errors (Antoine du Hamel) #566461614e8e7bc] - (SEMVER-MINOR) module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX (Marco Ippolito) #56610174d88eab1] - module: support eval with ts syntax detection (Marco Ippolito) #56285299d6fa829] - module: fix jsdoc forformatparameter in cjs/loader (pacexy) #565010307e4dd59] - module: unify TypeScript and .mjs handling in CommonJS (Joyee Cheung) #555901f4f9be93d] - module: fix async resolution error within the syncfindPackageJSON(Jacob Smith) #56382bbedffa0f0] - module: simplifyfindPackageJSONimplementation (Antoine du Hamel) #555436d6cffa9cc] - (SEMVER-MINOR) module: addfindPackageJSONutil (Jacob Smith) #55412cd7ce18233] - module: fix badrequire.resolvewith option paths for.and..(Dario Piotrowicz) #56735152df4da21] - module: rethrow amaro error message (Marco Ippolito) #56568acba5dc87e] - module: use buffer.toString base64 (Chengzhong Wu) #5631501e69be8ff] - node-api: define version 10 (Gabriel Schulhof) #55676724524528e] - node-api: remove deprecated attribute from napi_module_register (Vladimir Morozov) #56162c78e11064f] - process: remove support for undocumented symbol (Antoine du Hamel) #565523f69b18a23] - process: fix symbol key and mark experimental newnode:processmethods (Antoine du Hamel) #56517d35333ae18] - (SEMVER-MINOR) process: add process.ref() and process.unref() methods (James M Snell) #56400fa49f0f7d5] - punycode: limit deprecation warning (Colin Ihrig) #56632d77c7073b7] - sqlite: disable memstatus APIs at build time (Colin Ihrig) #5654107ff3ddcb5] - (SEMVER-MINOR) sqlite: support TypedArray and DataView inStatementSync(Alex Yang) #56385b6c2e91365] - sqlite: enable SQL math functions (Colin Ihrig) #564473462263e8b] - sqlite: pass conflict type to conflict resolution handler (Bart Louwers) #5635289ba3af743] - src: add nullptr handling from X509_STORE_new() (Burkov Egor) #5670089a7c82e0c] - src: add default value for RSACipherConfig mode field (Burkov Egor) #567017bae51e62e] - src: fix build with GCC 15 (tjuhaszrh) #56740432a4b8bd6] - src: fix to generate path from wchar_t via wstring (yamachu) #566968c9eaf82f0] - src: initialize FSReqWrapSync in path that uses it (Michaël Zasso) #56613bcdb42d40b] - src: handle duplicate paths granted (Rafael Gonzaga) #56591d6a7acc207] - src: update ECKeyPointer in ncrypto (James M Snell) #5652601922f8b1f] - src: update ECPointPointer in ncrypto (James M Snell) #565262a3a36eceb] - src: update ECGroupPointer in ncrypto (James M Snell) #5652667c10cdacb] - src: update ECDASSigPointer implementation in ncrypto (James M Snell) #5652617f931c68b] - src: cleaning up more crypto internals for ncrypto (James M Snell) #5652694d3fe1b62] - (SEMVER-MINOR) src: add --disable-sigusr1 to prevent signal i/o thread (Rafael Gonzaga) #564416594ee8dff] - src: fix undefined script name in error source (Chengzhong Wu) #56502b46bad3e91] - src: refactor --trace-env to reuse option selection and handling (Joyee Cheung) #5629376921b822b] - src: minor cleanups on OneByteString usage (James M Snell) #564823f0d1dd4fe] - src: move more crypto impl detail to ncrypto dep (James M Snell) #5642104f623b283] - src: fixup more ToLocalChecked uses in node_file (James M Snell) #564845aa436f5a1] - src: make some minor ToLocalChecked cleanups (James M Snell) #564836eec5e7ec2] - src: lock the thread properly in snapshot builder (Joyee Cheung) #563275614993968] - src: drain platform tasks before creating startup snapshot (Chengzhong Wu) #5640348493e9fd5] - src: use LocalVector in more places (James M Snell) #564577e5ea0681e] - src: use v8::LocalVector consistently with other minor cleanups (James M Snell) #56417ad3d857f2b] - src: use starts_with in fs_permission.cc (ishabi) #558115afffb4415] - (SEMVER-MINOR) src,worker: add isInternalWorker (Carlos Espa) #564697d1676e72e] - stream: fix typo in ReadableStreamBYOBReader.readIntoRequests (Mattias Buelens) #56560e658ea6b26] - stream: validate undefined sizeAlgorithm in WritableStream (Jason Zhang) #56067e4f133c20c] - test: add ts eval snapshots (Marco Ippolito) #56358f041742400] - test: remove empty lines from snapshots (Marco Ippolito) #56358801cde91f6] - test: reduce number of written chunks (Luigi Pinca) #567576fdf1879ab] - test: fix invalid common.mustSucceed() usage (Luigi Pinca) #56756d2bfbfa364] - test: use strict mode in global setters test (Rich Trott) #567425c030da42f] - test: cleanup and simplify test-crypto-aes-wrap (James M Snell) #56748f1442d6eaf] - test: do not use common.isMainThread (Luigi Pinca) #5676849405bd9e7] - test: make some requires lazy in common/index (James M Snell) #5671552ef376788] - test: add test that uses multibyte for path and resolves modules (yamachu) #56696b811dea85a] - test: replace more uses ofglobalwithglobalThis(James M Snell) #56712eb97076199] - test: make common/index slightly less node.js specific (James M Snell) #567121795202d19] - test: rely less on duplicative common test harness utilities (James M Snell) #567125be29a274e] - test: simplify common/index.js (James M Snell) #5671292e99780f0] - test: move hasMultiLocalhost to common/net (James M Snell) #567161c3204a4cc] - test: move crypto related common utilities in common/crypto (James M Snell) #56714fe79d63be0] - test: add missing test for env file (Jonas) #56642e08af61537] - test: enforce strict mode in test-zlib-const (Rich Trott) #56689c96792d7f8] - test: fix localization data for ICU 74.2 (Antoine du Hamel) #5666148b72f1195] - test: use --permission instead of --experimental-permission (Rafael Gonzaga) #56685de81d90fce] - test: test-stream-compose.js doesn't need internals (Meghan Denny) #56619f5b8499ad0] - test: add maxCount and gcOptions to gcUntil() (Joyee Cheung) #56522d9e5a81041] - test: add line break at end of file (Rafael Gonzaga) #5658859be346fbf] - test: mark test-worker-prof as flaky on smartos (Joyee Cheung) #5658312a2cae9e5] - test: update test-child-process-bad-stdio to use node:test (Colin Ihrig) #565622dc4a30e19] - test: disable openssl 3.4.0 incompatible tests (Jelle van der Waa) #561601950fbf51d] - test: make test-crypto-hash compatible with OpenSSL > 3.4.0 (Jelle van der Waa) #56160a533420a91] - test: clarify fork inherit permission flags (Rafael Gonzaga) #56523697e799dc1] - test: add error only reporter for node:test (Carlos Espa) #564384844fa212d] - test: mark test-http-server-request-timeouts-mixed as flaky (Joyee Cheung) #56503843c2389b9] - test: update error code in tls-psk-circuit for for OpenSSL 3.4 (sebastianas) #56420ccb2ddbd83] - test: update compiled sqlite tests to match other tests (Colin Ihrig) #56446b40f50324d] - test: add initial test426 coverage (Chengzhong Wu) #56436059f81e4fd] - test: update test-set-http-max-http-headers to use node:test (Colin Ihrig) #56439ec2940b418] - test: update test-child-process-windows-hide to use node:test (Colin Ihrig) #564370362924880] - test: use unusual chars in the path to ensure our tests are robust (Antoine du Hamel) #48409b6c3869910] - test: improve abort signal dropping test (Edy Silva) #56339cc648ef923] - test: enable ts test on win arm64 (Marco Ippolito) #5634968819b4997] - test: deflake test-watch-file-shared-dependency (Luigi Pinca) #56344ca6ed2190c] - test: skiptest-sqlite-extensionswhen SQLite is not built by us (Antoine du Hamel) #563418ffeb8b58c] - test: increase spin for eventloop test on s390 (Michael Dawson) #562286ae9950f08] - test: migrate message eval tests from Python to JS (Yiyun Lei) #504824352bf69e9] - test: check typescript loader (Marco Ippolito) #54657406e7db9c3] - test: remove async-hooks/test-writewrap flaky designation (Luigi Pinca) #56048fa56ab2bba] - test: deflake test-esm-loader-hooks-inspect-brk (Luigi Pinca) #560508e149aac99] - test: add test case for listeners (origranot) #56282a3f5ef22cd] - test: maketest-permission-sqlite-load-extensionmore robust (Antoine du Hamel) #562958cbb7cc838] - test_runner: print failing assertion only once with spec reporter (Pietro Marchini) #566621f426bad9a] - test_runner: remove unused errors (Pietro Marchini) #56607697a851fb3] - (SEMVER-MINOR) test_runner: add TestContext.prototype.waitFor() (Colin Ihrig) #56595047537b48c] - (SEMVER-MINOR) test_runner: add t.assert.fileSnapshot() (Colin Ihrig) #5645919b4aa4b14] - test_runner: run single test file benchmark (Pietro Marchini) #56479926cf84e95] - (SEMVER-MINOR) test_runner: add assert.register() API (Colin Ihrig) #56434fb4661a4cf] - test_runner: finish marking snapshot testing as stable (Colin Ihrig) #56425900c6c3940] - tls: fix error stack conversion in cryptoErrorListToException() (Joyee Cheung) #56554e9f185b658] - tools: update doc to new version (Node.js GitHub Bot) #562597644c7e619] - tools: update inspector_protocol roller (Chengzhong Wu) #56649362272b0a4] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #56704df8b835953] - tools: fix tools-deps-update (Daniel Lemire) #56684feba5d3274] - tools: do not throw on missingcreate-release-proposal.sh(Antoine du Hamel) #566959827f7d395] - tools: fix permissions inlint-release-proposalworkflow (Antoine du Hamel) #5661414c562c0dc] - tools: remove github reporter (Carlos Espa) #56468ed1785d0ae] - tools: editcreate-release-proposalworkflow (Antoine du Hamel) #56540294e4c42f5] - tools: validate commit list as part oflint-release-commit(Antoine du Hamel) #5629198d3474267] - tools: fix loong64 build failed (Xiao-Tao) #564663e729ceec8] - tools: disable unneeded rule ignoring in Python linting (Rich Trott) #56429d5c05328e2] - tools: use a configurable value for number of open dependabot PRs (Antoine du Hamel) #564271705cbe002] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #5642653b29b0469] - tools: fixrequire-common-firstlint rule from subfolder (Antoine du Hamel) #56325105c4ed4fb] - tools: add release line label when opening release proposal (Antoine du Hamel) #5631730f61f4aa5] - url: use resolved path to convert UNC paths to URL (Antoine du Hamel) #56302a0aef4dfb6] - util: inspect: do not crash on an Error stack that contains a Symbol (Jordan Harband) #56573a8a060341f] - util: inspect: do not crash on an Error with a regexname(Jordan Harband) #56574ea66bf3553] - util: rename CallSite.column to columnNumber (Chengzhong Wu) #565849cdc3b373c] - util: do not crash on inspecting function withSymbolname (Jordan Harband) #565720bfbb68569] - util: expose CallSite.scriptId (Chengzhong Wu) #565515dd7116e09] - watch: reload env file for --env-file-if-exists (Jonas) #56643c658a8afdf] - (SEMVER-MINOR) worker: add eval ts input (Marco Ippolito) #563942e5d038f48] - worker: refactor stdio to improve performance (Matteo Collina) #56630f959805d01] - worker: flush stdout and stderr on exit (Matteo Collina) #56428v22.13.1: 2025-01-21, Version 22.13.1 'Jod' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
Dependency update:
Commits
520da342e0] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#66299f217369f] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555984f735e35] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#6502446870618] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#651Configuration
📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.