Skip to content

Update Node.js to v22.23.2 - #235

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-22.x
Open

Update Node.js to v22.23.2#235
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-22.x

Conversation

@renovate

@renovate renovate Bot commented Oct 21, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
node (source) minor 22.20.022.23.2

Release Notes

nodejs/node (node)

v22.23.2: 2026-07-29, Version 22.23.2 'Jod' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
  • (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
  • (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
  • (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
  • (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
  • (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
  • (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
  • (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
  • (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
  • (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
  • deps: update llhttp to 9.4.3 (Paolo Insogna)
  • deps: update undici to 6.28.0 (Node.js GitHub Bot)
Commits

v22.23.1: 2026-06-23, Version 22.23.1 'Jod' (LTS), @​RafaelGSS

Compare Source

This release includes a fix for an unexpected behavior introduced
by the recent security release (22.23.0).

Commits

v22.23.0: 2026-06-18, Version 22.23.0 'Jod' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v22.22.3: 2026-05-13, Version 22.22.3 'Jod' (LTS), @​marco-ippolito

Compare Source

Commits

v22.22.2

Compare Source

v22.22.1: 2026-03-05, Version 22.22.1 'Jod' (LTS)

Compare Source

Notable Changes
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 21, 2025 02:41
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Oct 21, 2025
@renovate renovate Bot changed the title Update Node.js to v22.21.0 Update Node.js to v22.21.1 Oct 29, 2025
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from ca6d682 to b6425b0 Compare October 29, 2025 01:07
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 3 times, most recently from 32fb6c5 to 11cf599 Compare November 21, 2025 19:02
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 11cf599 to f2d79bc Compare December 4, 2025 15:44
@renovate renovate Bot changed the title Update Node.js to v22.21.1 Update Node.js to v22.22.0 Jan 13, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from 2a3a84a to a55535b Compare January 16, 2026 01:12
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from a55535b to 2eb1d29 Compare February 3, 2026 17:55
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from 9a07af8 to 1986a80 Compare March 5, 2026 17:29
@renovate renovate Bot changed the title Update Node.js to v22.22.0 Update Node.js to v22.22.1 Mar 5, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 1986a80 to c75ef12 Compare March 9, 2026 14:33
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from c75ef12 to b8aab21 Compare March 24, 2026 22:32
@renovate renovate Bot changed the title Update Node.js to v22.22.1 Update Node.js to v22.22.2 Mar 24, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from b8aab21 to dfd5d1b Compare April 16, 2026 14:45
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from dfd5d1b to 7bbfcb8 Compare April 27, 2026 18:26
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 7bbfcb8 to b889c6d Compare May 13, 2026 18:55
@renovate renovate Bot changed the title Update Node.js to v22.22.2 Update Node.js to v22.22.3 May 13, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from 100d78c to 4a1b25e Compare May 25, 2026 15:27
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 4a1b25e to 1892656 Compare June 10, 2026 18:55
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 1892656 to 5b2faa3 Compare June 18, 2026 17:54
@renovate renovate Bot changed the title Update Node.js to v22.22.3 Update Node.js to v22.23.0 Jun 18, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 5b2faa3 to fda542b Compare June 23, 2026 16:50
@renovate renovate Bot changed the title Update Node.js to v22.23.0 Update Node.js to v22.23.1 Jun 23, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from fda542b to e97ec6f Compare June 25, 2026 13:20
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from e97ec6f to f8d57b1 Compare June 30, 2026 13:54
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 3 times, most recently from ba336ec to 456a594 Compare July 20, 2026 20:24
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 456a594 to 4277e4c Compare July 29, 2026 16:30
@renovate renovate Bot changed the title Update Node.js to v22.23.1 Update Node.js to v22.23.2 Jul 29, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 4277e4c to efc9a59 Compare July 30, 2026 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants