2025-06-23, Version 20.19.3 'Iron' (LTS), @marco-ippolito

Notable Changes

• [c535a3c483] - crypto: graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable (Filip Skokan) #56142
• [af1dc63815] - crypto: update root certificates to NSS 3.108 (Node.js GitHub Bot) #57381
• [01d63a4ddf] - deps: update timezone to 2025b (Node.js GitHub Bot) #57857
• [b6daa344eb] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102

Commits

• [fc1fa7a357] - build: use FILE_OFFSET_BITS=64 esp. on 32-bit arch (RafaelGSS) #58090
• [79e0812181] - build: use glob for dependencies of out/Makefile (Richard Lau) #55789
• [f56e62851a] - crypto: allow length=0 for HKDF and PBKDF2 in SubtleCrypto.deriveBits (Filip Skokan) #55866
• [c535a3c483] - crypto: graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable (Filip Skokan) #56142
• [39925de8b1] - crypto: allow non-multiple of 8 in SubtleCrypto.deriveBits (Filip Skokan) #55296
• [af1dc63815] - crypto: update root certificates to NSS 3.108 (Node.js GitHub Bot) #57381
• [d09008add3] - deps: V8: cherry-pick 1a3ecc2483b2 (Michaël Zasso) #58342
• [fd56652425] - deps: V8: cherry-pick 182d9c05e78b (Andrey Kosyakov) #58342
• [447481e829] - deps: V8: cherry-pick third_party/zlib@646b7f569718 (Hans Wennborg) #58342
• [eb447168df] - deps: update simdutf to 6.4.2 (Node.js GitHub Bot) #57855
• [01d63a4ddf] - deps: update timezone to 2025b (Node.js GitHub Bot) #57857
• [10fb49f2a9] - deps: update icu to 77.1 (Node.js GitHub Bot) #57455
• [f1dc7d0205] - deps: update corepack to 0.32.0 (Node.js GitHub Bot) #57265
• [7a2e64bb8a] - deps: update simdutf to 6.4.0 (Node.js GitHub Bot) #56764
• [e80669be0d] - doc: mention reports should align with Node.js CoC (Rafael Gonzaga) #57607
• [7b2c0bc92e] - doc: add gurgunday as triager (Gürgün Dayıoğlu) #57594
• [791e4879de] - doc: document REPL custom eval arguments (Dario Piotrowicz) #57690
• [2917f09876] - doc: improved fetch docs (Alessandro Miliucci) #57296
• [d940b15843] - doc: clarify unhandledRejection events behaviors in process doc (Dario Piotrowicz) #57654
• [71c664fab7] - doc: update position type to integer | null in fs (Yukihiro Hasegawa) #57745
• [0c0fbfa9c6] - doc: add missing v0.x changelog entries (Antoine du Hamel) #57779
• [e99462c9fc] - doc: correct deprecation type of assert.CallTracker (René) #57997
• [c7e92696ef] - doc: add returns for https.get (Eng Zer Jun) #58025
• [ccc42b69ce] - doc: fix env variable name in util.styleText (Antoine du Hamel) #58072
• [b6daa344eb] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102
• [e5d6a3df16] - doc: fix AsyncLocalStorage example response changes after node v18 (Naor Tedgi (Abu Emma)) #57969
• [f006411998] - doc: fix typo of file zlib.md (yusheng chen) #58093
• [5193735df4] - doc: add missing options.signal to readlinePromises.createInterface() (Jimmy Leung) #55456
• [fd44af730f] - doc: fix misaligned options in vm.compileFunction() (Jimmy Leung) #58145
• [0fdcc0ddcd] - doc: add ambassaor message (Brian Muenzenmeyer) #57600
• [5ca9616bd3] - doc: increase z-index of header element (Dario Piotrowicz) #57851
• [81342d10f0] - doc: fix deprecation type for DEP0148 (Livia Medeiros) #57785
• [776becfe01] - doc: remove mention of --require not supporting ES modules (Huáng Jùnliàng) #57620
• [3140a8f133] - doc: add missing deprecated badges in fs.md (Yukihiro Hasegawa) #57384
• [441ce24ae3] - doc: deprecate passing invalid types in fs.existsSync (Carlos Espa) #55892
• [0556f54544] - http: correctly translate HTTP method (Paolo Insogna) #52701
• [c2c6d2b035] - http: be more generational GC friendly (ywave620) #56767
• [cdf3fa241c] - http2: skip writeHead if stream is closed (Shima Ryuhei) #57686
• [bbd5aec785] - http2: fix graceful session close (Kushagra Pandey) #57808
• [b427ae4f34] - meta: remove build-windows.yml (Aviv Keller) #54662
• [49e624f554] - os: fix netmask format check condition in getCIDR function (Wiyeong Seo) #57324
• [d582954434] - src: remove unused variable in crypto_x509.cc (Michaël Zasso) #57754
• [234a505e96] - src: allow embedder customization of OOMErrorHandler (Shelley Vohr) #57325
• [c0252cd380] - src: fix -Wunreachable-code-return in node_sea (Shelley Vohr) #57664
• [fcd1622fc1] - src: fix kill signal 0 on Windows (Stefan Stojanovic) #57695
• [850192b06b] - test: skip broken sea on rhel8 (Marco Ippolito) #58761
• [3cf7cfb695] - test: update WPT for WebCryptoAPI to edd42c005c (Node.js GitHub Bot) #57365
• [f57765bdcf] - test: mark test-without-async-context-frame flaky on windows (James M Snell) #56753
• [275ea8e7ef] - test: force GC in test-file-write-stream4 (Luigi Pinca) #57930
• [da6a13c338] - test: deflake test-http2-options-max-headers-block-length (Luigi Pinca) #57959
• [56fce6691e] - test: prevent extraneous HOSTNAME substitution in test-runner-output (René) #58076
• [c9c0be5596] - test: update expected error message for macOS (Antoine du Hamel) #57742
• [3cbf5f93d2] - test: fix missing edge case in test-blob-slice-with-large-size (Joyee Cheung) #58414
• [bffd4ec379] - test: skip in test-buffer-tostring-rangeerror on allocation failure (Joyee Cheung) #58415
• [8237346fb7] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #54593
• [b90c4ab937] - tools: remove unused osx-pkg-postinstall.sh (Antoine du Hamel) #57667
• [414013dcfb] - tools: edit create-release-proposal workflow to handle pr body length (Elves Vieira) #57841
• [7c449ed6b3] - tools: fix tarball testing directory (Marco Ippolito) #57994
• [d164dc2d38] - tools: update sccache version to v0.10.0 (Marco Ippolito) #57994
• [debd3c2cc0] - tools: disable failing test envs in test-linux CI (Antoine du Hamel) #58351
• [152112505a] - typings: fix ImportModuleDynamicallyCallback return type (Chengzhong Wu) #57160
• [363bf744ab] - worker: flush stdout and stderr on exit (Matteo Collina) #56428