⬆️ deps: Update dependencies (non-major)#45
Merged
renovate[bot] merged 2 commits intomainfrom Sep 20, 2025
Merged
Conversation
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.
This PR contains the following updates:
22.18.3->22.18.624.7.0->24.8.010.16.1->10.17.01.0.0-beta.37->1.0.0-beta.38Release Notes
nodejs/node (node)
v24.8.0: 2025-09-10, Version 24.8.0 (Current), @targosCompare Source
Notable Changes
HTTP/2 Network Inspection Support in Node.js
Node.js now supports inspection of HTTP/2 network calls in Chrome DevTools for Node.js.
Usage
Write a
test.jsscript that makes HTTP/2 requests.Run it with these options:
Open
about:inspecton Google Chrome and click onOpen dedicated DevTools for Node.The
Networktab will let you track your HTTP/2 calls.Contributed by Darshan Sen in #59611.
Other Notable Changes
7a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #59537d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428Commits
d913872369] - assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong) #595787bbbcf6666] - benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues) #5970944d7b92271] - benchmark: calibrate config array-vs-concat (Rafael Gonzaga) #595877f347fc551] - build: fix getting OpenSSL version on Windows (Michaël Zasso) #596094a317150d5] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #59547bda32af587] - build: usewindows-2025runner (Michaël Zasso) #59673a4a8ed8f6e] - build: compile bundled uvwasi conditionally (Carlo Cabrera) #59622d944a87761] - crypto: refactor subtle methods to use synchronous import (Filip Skokan) #597717a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #595370d1e53d935] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #5979168732cf426] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #59689f12c1ad961] - deps: update googletest toeb2d85e(Node.js GitHub Bot) #5933545af6966ae] - deps: upgrade npm to 11.6.0 (npm team) #5975057617244a4] - deps: V8: cherry-pick6b1b9bc(Xiao-Tao) #592832e6225a747] - deps: update amaro to 1.1.2 (Node.js GitHub Bot) #596161f7f6dfae6] - diagnostics_channel: revoke DEP0163 (René) #597588671a6cdb3] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707583b1b255d] - doc: update OpenSSL default security level to 2 (Jeetu Suthar) #597239b5eb6eb50] - doc: fix missing links in theerrorspage (Nam Yooseong) #59427e7bf712c57] - doc: update "Type stripping in dependencies" section (Josh Kelley) #5965296db47f91e] - doc: add Miles Guicent as triager (Miles Guicent) #5956287f829bd0c] - doc: markpath.matchesGlobas stable (Aviv Keller) #59572062b2f705e] - doc: improve documentation for raw headers in HTTP/2 APIs (Tim Perry) #596336ab9306370] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #59579c8d6b60da6] - doc: fix quic session instance typo (jakecastelli) #5964261d0a2d1ba] - doc: fix filehandle.read typo (Ruy Adorno) #596353276bfa0d0] - doc: update migration recomendations forutil.is**()deprecations (Augustin Mauroy) #5926911de6c7ebb] - doc: fix missing link to the Error documentation in thehttppage (Alexander Makarenko) #59080f5b6829bba] - doc,crypto: add description to the KEM and supports() methods (Filip Skokan) #596445bfdc7ee74] - doc,crypto: cleanup unlinked and self method references webcrypto.md (Filip Skokan) #59608010458d061] - esm: populate separate cache for require(esm) in imported CJS (Joyee Cheung) #59679dbe6e63baf] - esm: fix missed renaming in ModuleJob.runSync (Joyee Cheung) #597248eb0d9d834] - fs: fix wrong order of file names in cpSync error message (Nicholas Paun) #59775e69be5611f] - fs: fix dereference: false on cpSync (Nicholas Paun) #596812865d2ac20] - http: unbreak keepAliveTimeoutBuffer (Robert Nagy) #59784ade1175475] - http: use cached '1.1' http version string (Robert Nagy) #5971774a09482de] - inspector: undici as shared-library should pass tests (Aras Abbasi) #59837772f8f415a] - inspector: add http2 tracking support (Darshan Sen) #596113d225572d7] - Revert "lib: optimize writable stream buffer clearing" (Yoo) #597434fd213ce73] - lib: fix isReadable and isWritable return type value (Gabriel Quaresma) #5908939befddb87] - lib: prefer TypedArrayPrototype primordials (Filip Skokan) #597660748160d2e] - lib: fix DOMException subclass support (Chengzhong Wu) #596801a93df808c] - lib: revert to using default derived class constructors (René) #59650bb0755df37] - meta: bumpcodecov/codecov-action(dependabot[bot]) #5972645d148d9be] - meta: bump actions/download-artifact from 4.3.0 to 5.0.0 (dependabot[bot]) #5972901b66b122e] - meta: bump github/codeql-action from 3.29.2 to 3.30.0 (dependabot[bot]) #5972834f7ab5502] - meta: bump actions/cache from 4.2.3 to 4.2.4 (dependabot[bot]) #597275806ea02af] - meta: bump actions/checkout from 4.2.2 to 5.0.0 (dependabot[bot]) #59725f667215583] - path: refactor path joining logic for clarity and performance (Lee Jiho) #597810340fe92a6] - repl: do not cause side effects in tab completion (Anna Henningsen) #59774a414c1eb51] - repl: fix REPL completion under unary expressions (Kingsword) #59744c206f8dd87] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #596070bf9775ee2] - sea: implement sea.getAssetKeys() (Joyee Cheung) #59661bf26b478d8] - sea: allow using inspector command line flags with SEA (Joyee Cheung) #5956892128a8fe2] - src: use DictionaryTemplate for node_url_pattern (James M Snell) #59802bcb29fb84f] - src: correctly report memory changes to V8 (Yaksh Bariya) #5962344c24657d3] - src: fixup node_messaging error handling (James M Snell) #597922cd6a3b7ec] - src: track async resources via pointers to stack-allocated handles (Anna Henningsen) #5970434d752586f] - src: fix build on NetBSD (Thomas Klausner) #5971815fa779ac5] - src: fix race on process exit and off thread CA loading (Chengzhong Wu) #5963215cbd3966a] - src: separate module.hasAsyncGraph and module.hasTopLevelAwait (Joyee Cheung) #5967588d1ca8990] - src: use non-deprecated Get/SetPrototype methods (Michaël Zasso) #5967156ac9a2d46] - src: migrate WriteOneByte to WriteOneByteV2 (Chengzhong Wu) #596343d88aa9f2f] - src: remove duplicate code (theanarkh) #596490718a70b2a] - src: add name for more threads (theanarkh) #596010379a8b254] - src: remove JSONParser (Joyee Cheung) #5961990d0a1b2e9] - src,sqlite: refactor value conversion (Edy Silva) #596595e025c7ca7] - stream: replace manual function validation with validateFunction (방진혁) #59529155a999bed] - test: skip tests failing when run under root (Livia Medeiros) #597796313706c69] - test: update WPT for urlpattern tocff1ac1(Node.js GitHub Bot) #5960241245ad4c7] - test: skip more sea tests on Linux ppc64le (Richard Lau) #59755df63d37ec4] - test: fix internet/test-dns (Michaël Zasso) #596601f6c335e82] - test: mark test-inspector-network-fetch as flaky again (Joyee Cheung) #596401798683df1] - test: skip test-fs-cp* tests that are constantly failing on Windows (Joyee Cheung) #596374c48ec09e5] - test: deflake test-http-keep-alive-empty-line (Luigi Pinca) #59595dcdb259e85] - test_runner: fix todo inheritance (Moshe Atlow) #5972124177973a2] - test_runner: set mock timer's interval undefined (hotpineapple) #5947983d11f8a7a] - tools: print appropriate output when test aborted (hotpineapple) #597941eca2cc548] - tools: use sparse checkout inbuild-tarball.yml(Antoine du Hamel) #5978889fa1a929d] - tools: remove unused actions frombuild-tarball.yml(Antoine du Hamel) #59787794ca3511d] - tools: do not attempt to compress tgz archive (Antoine du Hamel) #59785377bdb9b7e] - tools: add v8windbg target (Chengzhong Wu) #597676696d1d6c9] - tools: improve error handling in node_mksnapshot (James M Snell) #594378dbd0f13e8] - tools: add sccache totest-internetworkflow (Antoine du Hamel) #597206523c2d7d9] - tools: update gyp-next to 0.20.4 (Node.js GitHub Bot) #5969019d633f40c] - tools: add script to make reviewing backport PRs easier (Antoine du Hamel) #5916115e547b3a4] - typings: add typing for 'uv' (방진혁) #59606ad5cfcc901] - typings: add missing properties in ConfigBinding (Lee Jiho) #5958570d2d6d479] - url: add err.input to ERR_INVALID_FILE_URL_PATH (Joyee Cheung) #59730e476e43c17] - util: fix numericSeparator with negative fractional numbers (sangwook) #59379b2e8f40d15] - util: remove unnecessary template strings (btea) #592016f79450ea2] - util: remove outdated TODO comment (haramjeong) #5976032731432ef] - util: use getOptionValue('--no-deprecation') in deprecated() (haramjeong) #5976065e4e68c90] - util: hide duplicated stack frames when using util.inspect (Ruben Bridgewater) #594472086f3365f] - vm: sync-ify SourceTextModule linkage (Chengzhong Wu) #59000c16163511d] - wasi: fixcleantarget intest/wasi/Makefile(Antoine du Hamel) #595762e54411cb6] - worker: optimize cpu profile implement (theanarkh) #59683d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428pnpm/pnpm (pnpm)
v10.17.0Compare Source
Minor Changes
The
minimumReleaseAgeExcludesetting now supports patterns. For instance:Related PR: #9984.
Patch Changes
minimumReleaseAgecheck, when the package is requested by exact version and the packument is loaded from cache #9978.minimumReleaseAgeis set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #9979.rolldown/rolldown (rolldown)
v1.0.0-beta.38Compare Source
💥 BREAKING CHANGES
🚀 Features
scan_modeinbundler.scan(#6204) by @IWANABETHATGUYfalseinresolve.aliasto ignore resolution (#6203) by @shulaodagetJsonSchema(#6186) by @shulaodato_string_literal(#6178) by @sapphi-redByteLocator#byte_offset(#6169) by @shulaodaskip_writeoption (#6151) by @sapphi-red🐛 Bug Fixes
jsx.pragmaFraginstead ofjsx.pragmaFlag(#6200) by @sapphi-redmemberExpression(#6192) by @IWANABETHATGUYbyte_sliceinstead ofslicefor correct span handling (#6185) by @shulaodaminifyInternalExports(#6166) by @sapphi-redevalorargumentsin strict mode (#6140) by @IWANABETHATGUYprocessis not defined in repl (#6147) by @IWANABETHATGUY💼 Other
rolldownwith.wasmbinding (#6153) by @hyf0build.tsto prepare to support buildrolldownpackage with wasi binding (#6152) by @hyf0🚜 Refactor
FlatOptionsin whole build session (#6211) by @IWANABETHATGUYcommentsin ScopeHoistingFinalizerContext (#6205) by @IWANABETHATGUYcross_module_inline_consttocross_module_optimization(#6193) by @IWANABETHATGUYclassandfunctionvisitor toclass_decl,function_decl(#6176) by @IWANABETHATGUYBuildDiagnostic(#6165) by @shulaodaRolldownBuild(#6136) by @shulaodaEventKind::IoError(#6134) by @shulaoda📚 Documentation
⚡ Performance
side_effects_free_function_symbol_ref(#6206) by @IWANABETHATGUYinstantiate_chunk(#6159) by @sapphi-red🧪 Testing
⚙️ Miscellaneous Tasks
if: always()to wasi-test (#6190) by @sapphi-red@rolldown/browserbuild if no node related changes detected (#6189) by @sapphi-red@rolldown/browserbuild without errors (#6155) by @hyf0type_aliases.rs(#6133) by @shulaodaConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.