Releases · nodejs/node

27 Apr 01:19

v16.15.0

e243282

2022-04-26, Version 16.15.0 'Gallium' (LTS), @danielleadams

Notable changes

Add fetch API

Adds experimental support to the fetch API. This adds the --experimental-fetch
flag that installs the fetch, Request, Response, Headers, and FormData
globals.

(SEMVER-MINOR) add fetch (Michaël Zasso) #41749
(SEMVER-MINOR) add FormData global when fetch is enabled (Michaël Zasso) #41956

Other notable changes

build:
- remove broken x32 arch support (Ben Noordhuis) #41905
crypto:
- (SEMVER-MINOR) add KeyObject.prototype.equals method (Filip Skokan) #42093
doc:
- add @ShogunPanda to collaborators (Paolo Insogna) #42362
- add JakobJingleheimer to collaborators list (Jacob Smith) #42185
- add joesepi to collaborators (Joe Sepi) #41914
- add marsonya to collaborators (Akhil Marsonya) #41991
- deprecate string coercion in fs.write, fs.writeFileSync (Livia Medeiros) #42149
- deprecate notice for process methods (Yash Ladha) #41587
esm:
- (SEMVER-MINOR) support https remotely and http locally under flag (Bradley Farias) #36328
module:
- (SEMVER-MINOR) unflag esm json modules (Geoffrey Booth) #41736
node-api:
- (SEMVER-MINOR) add node_api_symbol_for() (Darshan Sen) #41329
process:
- deprecate multipleResolves (Benjamin Gruenbaum) #41872
stream:
- (SEMVER-MINOR) support some and every (Benjamin Gruenbaum) #41573
- (SEMVER-MINOR) add toArray (Benjamin Gruenbaum) #41553
- (SEMVER-MINOR) add forEach method (Benjamin Gruenbaum) #41445

Commits

[3d4df9cd70] - (SEMVER-MINOR) benchmark: add subarray to buffer-slice (Benjamin Gruenbaum) #41596
[d40f5a177a] - buffer: improve blob read performance (Xuguang Mei) #42117
[84752a495f] - (SEMVER-MINOR) buffer: alias subarray and slice (Benjamin Gruenbaum) #41596
[c5da1dda4a] - build: use ccache in make-v8.sh on ppc64le and s390x (Richard Lau) #42204
[ba56e41953] - build: drop shortened URL from lint-commit-message (Richard Lau) #42168
[b2c88ec69c] - build: fix usage of input in feature action (Michael Dawson) #42150
[bcabd70d93] - build: increase max ops for stale feature action (Michael Dawson) #42130
[042fb6f4d5] - build: add corepack to the auto-updated dependencies (Maël Nison) #42090
[611cbf13a6] - build: last test of the stale feature action (Michael Dawson) #42085
[0d8f76ff2f] - build: update feature close action for testing (Michael Dawson) #42082
[bc3d8a752f] - build: cancel running CI jobs when a PR is updated (Michaël Zasso) #42017
[e049173bce] - build: increase operations and test tag (Michael Dawson) #42038
[4c47d59e9b] - build: allow manual run of feature request action (Michael Dawson) #42037
[692ee2ae06] - build: add action to close stale feature requests (Michael Dawson) #41981
[290a2bfd81] - build: prevent concurrent CI and CQ workflow runs (Michaël Zasso) #42016
[d2c1624279] - build: use zoslib_include_dir provided by node-gyp (alexcfyung) #41713
[db4a3dc1a6] - build: move tool updates workflow runtime a day later (Rich Trott) #41982
[24d0c32af4] - build: extend yamllint configuration (Mestery) #41756
[428b967ea4] - build: remove broken x32 arch support (Ben Noordhuis) #41905
[51847e0d24] - build: revert fast-track changes (Filip Skokan) #41892
[1452f8d6f1] - build: improve consistency between workflows (Mestery) #41791
[9677da4b46] - (SEMVER-MINOR) build: add --v8-enable-hugepage flag (Daoming Qiu) #41487
[5468de5317] - build,tools: change the quotes in YAML (Mestery) #41756
[f32c39762c] - child_process: kHideConsoleWindows for spawnSync (Raymond Zhao) #41412
[914f9071ba] - cluster: respect listen backlog set by workers (Elad Nava) #41623
[f990308972] - crypto: fix auth tag length error when mode != GCM (Tobias Nießen) #42383
[7f43f94304] - crypto: fix fingerprint string size calculation (Tobias Nießen) #42175
[602f34eeb8] - crypto: add CHECKs to remaining BIO_s_mem allocs (Tobias Nießen) #42155
[4eecb25125] - crypto: validate this value for webcrypto.getRandomValues (Antoine du Hamel) #41760
[b7599d8b14] - (SEMVER-MINOR) crypto: add KeyObject.prototype.equals method (Filip Skokan) #42093
[70ae0ae8a0] - crypto: check result of BIO_new in X509ToObject (Tobias Nießen) #41979
[36b9028f4f] - crypto: rename X509_NAME_FLAGS (Tobias Nießen) #42001
[a592442218] - (SEMVER-MINOR) crypto: expose Web Crypto API on the global scope (Antoine du Hamel) #41938
[46dda316df] - crypto: do not advertise unsupported algorithms (Brian White) #41864
[adb88fcb46] - (SEMVER-MINOR) crypto: support RFC 2818 compatible checkHost (Tobias Nießen) #41569
[e9d7af1cc6] - debugger: correct typo in inspect_repl.js (Kohei Ueno) #42267
[e6019a4cc0] - debugger: add debugger alias for exec(expr) (Xuguang Mei) #41907
[83691ada5b] - debugger: remove duplicate setPauseOnException call (Balakrishna Avulapati) #41838
[7e73e5e46b] - deps: upgrade npm to 8.5.5 (npm team) #42382
[8d734cbde6] - deps: cares: cherry-pick b5a3d96 (bradh352) [...

Contributors

ShogunPanda

Assets 2

19 Apr 16:14

BethGriggs

v18.0.0

49a77a5

2022-04-19, Version 18.0.0 (Current), @BethGriggs

Node.js 18 is here! Highlights include the update of the V8 JavaScript engine to 10.1, global fetch enabled by default, and a core test runner module.

Initially, Node.js 18 will replace Node.js 17 as our ‘Current’ release line. As per the release schedule, Node.js 18 will be the ‘Current’ release for the next 6 months and then promoted to Long-term Support (LTS) in October 2022. Once promoted to long-term support the release will be designated the codename ‘Hydrogen’. Node.js 18 will be supported until April 2025.

Notable Changes

Deprecations and Removals

(SEMVER-MAJOR) fs: runtime deprecate string coercion in fs.write, fs.writeFileSync (Livia Medeiros) #42607
(SEMVER-MAJOR) dns: remove dns.lookup and dnsPromises.lookup options type coercion (Antoine du Hamel) #41431
(SEMVER-MAJOR) process: runtime deprecate multipleResolves (Benjamin Gruenbaum) #41896
(SEMVER-MAJOR) stream: remove thenable support (Robert Nagy) #40773
(SEMVER-MAJOR) tls: move tls.parseCertString to end-of-life (Tobias Nießen) #41479

fetch (experimental)

An experimental fetch API is available on the global scope by default. The implementation is based upon undici, an HTTP/1.1 client written for Node.js by contributors to the project.

const res = await fetch('https://nodejs.org/api/documentation.json');
if (res.ok) {
  const data = await res.json();
  console.log(data);
}

Through this addition, the following globals are made available: fetch, FormData, Headers, Request, Response.

Disable this API with the --no-experimental-fetch command-line flag.

Contributed by Michaël Zasso in #41811.

HTTP Timeouts

server.headersTimeout which limits the amount of time the parser will wait to receive the complete HTTP headers is now set to 60000 (60 seconds) by default.

server.requestTimeout which sets the timeout value in milliseconds for receiving the entire request from the client is now set to 300000 (5 minutes) by default.

If these timeouts expire, the server responds with status 408 without forwarding the request to the request listener and then closes the connection.

Both timeouts must be set to a non-zero value to protect against potential Denial-of-Service attacks in case the server is deployed without a reverse proxy in front.

Contributed by Paolo Insogna in #41263.

Test Runner module (experimental)

The node:test module facilitates the creation of JavaScript tests that report results in TAP format. To access it:

import test from 'node:test';

This module is only available under the node: scheme.

The following is an example implementation of a parent test with two subtests:

test('top level test', async (t) => {
  await t.test('subtest 1', (t) => {
    assert.strictEqual(1, 1);
  });

  await t.test('subtest 2', (t) => {
    assert.strictEqual(2, 2);
  });
});

Contributed by Colin Ihrig in #42325.

Toolchain and Compiler Upgrades

Prebuilt binaries for Linux are now built on Red Hat Enterprise Linux (RHEL) 8 and are compatible with Linux distributions based on glibc 2.28 or later, for example, Debian 10, RHEL 8, Ubuntu 20.04.
Prebuilt binaries for macOS now require macOS 10.15 or later.
For AIX the minimum supported architecture has been raised from Power 7 to Power 8.

Prebuilt binaries for 32-bit Windows will initially not be available due to issues building the V8 dependency in Node.js. We hope to restore 32-bit Windows binaries for Node.js 18 with a future V8 update.

Node.js does not support running on operating systems that are no longer supported by their vendor. For operating systems where their vendor has planned to end support earlier than April 2025, such as Windows 8.1 (January 2023) and Windows Server 2012 R2 (October 2023), support for Node.js 18 will end at the earlier date.

Full details about the supported toolchains and compilers are documented in the Node.js BUILDING.md file.

Contributed by Richard Lau in #42292, #42604 and #42659,and Michaël Zasso in #42105 and #42666.

V8 10.1

The V8 engine is updated to version 10.1, which is part of Chromium 101. Compared to the version included in Node.js 17.9.0, the following new features are included:

The findLast and findLastIndex array methods.
Improvements to the Intl.Locale API.
The Intl.supportedValuesOf function.
Improved performance of class fields and private class methods (the initialization of them is now as fast as ordinary property stores).

The data format returned by the serialization API (v8.serialize(value)) has changed, and cannot be deserialized by earlier versions of Node.js. On the other hand, it is still possible to deserialize the previous format, as the API is backwards-compatible.

Contributed by Michaël Zasso in #42657.

Web Streams API (experimental)

Node.js now exposes the experimental implementation of the Web Streams API on the global scope. This means the following APIs are now globally available:

ReadableStream, ReadableStreamDefaultReader, ReadableStreamBYOBReader, ReadableStreamBYOBRequest, ReadableByteStreamController, ReadableStreamDefaultController, TransformStream, TransformStreamDefaultController, WritableStream, WritableStreamDefaultWriter, WritableStreamDefaultController, ByteLengthQueuingStrategy, CountQueuingStrategy, TextEncoderStream, TextDecoderStream, CompressionStream, DecompressionStream.

Contributed James Snell in #39062, and Antoine du Hamel in #42225.

Other Notable Changes

(SEMVER-MAJOR) buffer: expose Blob as a global (James M Snell) #41270
(SEMVER-MAJOR) child_process: improve argument validation (Rich Trott) #41305
doc: add RafaelGSS to collaborators (RafaelGSS) #42718
(SEMVER-MAJOR) http: make TCP noDelay enabled by default (Paolo Insogna) #42163
(SEMVER-MAJOR) net: make server.address() return an integer for family (Antoine du Hamel) #41431
(SEMVER-MAJOR) worker: expose BroadcastChannel as a global (James M Snell) #41271
(SEMVER-MAJOR) worker: graduate BroadcastChannel to supported (James M Snell) #41271

Semver-Major Commits

[dab8ab2837] - (SEMVER-MAJOR) assert,util: compare RegExp.lastIndex while using deep equal checks (Ruben Bridgewater) #41020
[cff14bcaef] - (SEMVER-MAJOR) buffer: refactor byteLength to remove outdated optimizations (Rongjian Zhang) #38545
[cea76dbf33] - (SEMVER-MAJOR) buffer: expose Blob as a global (James M Snell) #41270
[99c18f4786] - (SEMVER-MAJOR) buffer: graduate Blob from experimental (James M Snell) #41270
[35d72bf4ec] - (SEMVER-MAJOR) build: make x86 Windows support temporarily experimental (Michaël Zasso) #42666
[1134d8faf8] - (SEMVER-MAJOR) build: bump macOS deployment target to 10.15 (Richard Lau) #42292
[27eb91d378] - (SEMVER-MAJOR) build: downgrade Windows 8.1 and server 2012 R2 to experimental (Michaël Zasso) #42105
[26c973d4b3] - (SEMVER-MAJOR) child_process: improve argument validation (Rich Trott) #41305
[38007df999] - (SEMVER-MAJOR) cluster: make kill to be just process.kill (Bar Admoni) #34312
[aed18dfe59] - (SEMVER-MAJOR) crypto: cleanup validation (Mohammed Keyvanzadeh) [#39841](#3984...

Assets 2

07 Apr 23:12

BethGriggs

v17.9.0

70dcef5

2022-04-07, Version 17.9.0 (Current), @BethGriggs prepared by @juanarbol

Notable Changes

[7124f91cbf] - (SEMVER-MINOR) crypto: make authTagLength optional for CC20P1305 (Tobias Nießen) #42427
[30dc6dd3fb] - deps: update undici to 4.16.0 (Node.js GitHub Bot) #42414
[f0fc2744a5] - doc: add @meixg to collaborators (Xuguang Mei) #42576

Commits

[bb71433334] - async_hooks: remove destroyed symbol on Promises (Gerhard Stöbich) #42402
[b48a6cb3f9] - bootstrap: reset process._exit and process.exitCode in pre-execution (Joyee Cheung) #42466
[b89f038537] - bootstrap: run inspector and event loop in snapshot builder (Joyee Cheung) #42466
[177558600e] - bootstrap: make I/O streams work with user-land snapshot (Joyee Cheung) #42466
[e3683cb34d] - bootstrap: refresh options in pre-execution (Joyee Cheung) #42466
[d302d2f0d2] - bootstrap: use SnapshotData to pass snapshot data around (Joyee Cheung) #42360
[eb3dfc00f0] - buffer: improve Blob constructor error message when passing a string (Xuguang Mei) #42338
[f45d5537c1] - buffer: fix atob input validation (Antoine du Hamel) #42539
[fb6a5ba8d7] - build: remove precompiled header and debug information for host builds (Niyas Sait) #42538
[1f7d2e800c] - build: windows/arm64 native compilation support (Niyas Sait) #42408
[d9a1d7866c] - build: consolidate JS and md linting GitHub Actions (Rich Trott) #42572
[ecb5be845d] - build: set stale action back to running nightly (Michael Dawson) #42549
[f9fb7f6d96] - build: add --node-snapshot-main configure option (Joyee Cheung) #42466
[c6808f088b] - build: bump actions/checkout (Eliaz Bobadilla) #42460
[9a54acb7c6] - child_process: add env contents types in JSDoc (Rich Trott) #42494
[a2f07380ea] - crypto: do not add undefined hash in webcrypto normalizeAlgorithm (Filip Skokan) #42559
[9b4bd7d031] - crypto: cleanup webcrypto jwk code (Filip Skokan) #42562
[541a1328b0] - crypto: fix webcrypto derive key lengths (Filip Skokan) #42542
[7124f91cbf] - (SEMVER-MINOR) crypto: make authTagLength optional for CC20P1305 (Tobias Nießen) #42427
[30dc6dd3fb] - deps: update undici to 4.16.0 (Node.js GitHub Bot) #42414
[6e56924274] - doc: simplify Http2Stream encoding text (Rich Trott) #42597
[261672b1da] - doc: remove obsolete stream API selection text (Rich Trott) #42586
[beffed1880] - doc: remove faulty justification for 128-bit AES (Tobias Nießen) #42578
[71f4a39086] - doc: fix documentation of FileHandle.prototype.appendFile (Antoine du Hamel) #42588
[c83ea22f7c] - doc: change "OCSP Request" to "OCSP request" (Tobias Nießen) #42582
[71ab0dea35] - doc: aes webcrypto unwrap is not a node-specific extensions (Filip Skokan) #42561
[1c614184da] - doc: simplify recommendations in process.md (Rich Trott) #42556
[c036800ddc] - doc: clarify recommendations in stream.md (Rich Trott) #42555
[dcf0abf8c7] - doc: simplify recommendation in webcrypto.md (Rich Trott) #42554
[8333fa063b] - doc: update DEP0102 text (Rich Trott) #42553
[8b08bff682] - doc: remove util.promisify() content in readline.md (Rich Trott) #42552
[94492424ba] - doc: add introduction sentence for CJS (Antoine du Hamel) #42491
[f0fc2744a5] - doc: add @meixg to collaborators (Xuguang Mei) #42576
[d935fef594] - doc: consolidate CI sections (Rich Trott) #42534
[fd45df314b] - doc: document breaking change in http.IncomingMessage 'close' event (Paolo Insogna) #42521
[53584fa750] - doc: remove extraneous comma (Rich Trott) #42548
[b819af6509] - doc: guide towards x509.fingerprint256 (Tobias Nießen) #42516
[f2355e41ed] - doc: fix internal link in collaborator-guide.md (Daeyeon Jeong) #42551
[ffc6776996] - doc: add suggestion for OpenSSL only sec releases (Michael Dawson) #42456
[1454c0297d] - doc: fix comment text in async_hooks example (Rich Trott) #42499
[b9ab9867f4] - doc: add stability class to legacy status description (Daniel Roe) #42525
[6c13988d53] - doc: suggest checkHost in checkServerIdentity docs (Tobias Nießen) #42495
[28665a9dd6] - doc: update security release onboarding (Joe Sepi) #42333
[d335addf0c] - doc: fix question promise API example (Xuguang Mei) #42465
[7cf9febcb4] - doc: remove comma splice in events.md (Rich Trott) #42484
[3c3684d9f1] - doc: clarify napi_finalize behavior (Alba Mendez) #42461
[334cc1936b] - doc: expand history for conditional exports changes in v12 (Greg Poole) #42339
[fb146f9eaf] - doc: change comma-splice to two sentences (Rich Trott) #42455
[ce4b823946] - doc: add link to section (Rich Trott) #42428
[[5869275479](https://github...

Contributors

meixg

Assets 2

05 Apr 12:28

richardlau

v12.22.12

a3d2837

2022-04-05, Version 12.22.12 'Erbium' (LTS), @richardlau

Notable Changes

This is planned to be the final Node.js 12 release. Node.js 12 will
reach End-of-Life status on 30 April 2022, after which it will no
receive updates. You are strongly advised to migrate your applications
to Node.js 16 or 14 (both of which are Long Term Support (LTS) releases)
to continue to receive future security updates beyond 30 April 2022.

This release fixes a shutdown crash in Node-API (formerly N-API) and a
potential stack overflow when using vm.runInNewContext().

The list of GPG keys used to sign releases and instructions on how to
fetch the keys for verifying binaries has been synchronized with the
main branch.

Commits

[1193290f3f] - deps: V8: cherry-pick cc9a8a37445e (devsnek) #42065
[333eda8d03] - doc: add a note about possible missing lines to readline.asyncIterator (Igor Mikhalev) #34675
[518a49c0c6] - doc: use openpgp.org for keyserver examples (Nick Schonning) #39227
[11aef2ad03] - doc: update release key for Danielle Adams (Danielle Adams) #36793
[a9c38f1003] - doc: add release key for Danielle Adams (Danielle Adams) #35545
[a35f553889] - doc: add release key for Bryan English (Bryan English) #42102
[5f104e3218] - node-api: cctest on v8impl::Reference (legendecas) #38970
[e23c04f0dc] - node-api: avoid SecondPassCallback crash (Michael Dawson) #38899
[a7224c9559] - node-api: fix shutdown crashes (Michael Dawson) #38492
[81b4dc88f1] - node-api: make reference weak parameter an indirect link to references (Chengzhong Wu) #38000
[2aa9ca1ea9] - node-api: fix crash in finalization (Michael Dawson) #37876
[a2f4206415] - node-api: stop ref gc during environment teardown (Gabriel Schulhof) #37616
[171bb66ccc] - node-api: force env shutdown deferring behavior (Gabriel Schulhof) #37303
[e707514c80] - src: fix finalization crash (James M Snell) #38250

Assets 2

22 Mar 14:56

bengl

v17.8.0

123661e

2022-03-22, Version 17.8.0 (Current), @bengl

Notable Changes

[3bd0078457] - doc: add @ShogunPanda to collaborators (Shogun) #42362
[23354673be] - doc: deprecate string coercion in fs.write, fs.writeFileSync (Livia Medeiros) #42149
[da42ffb85e] - (SEMVER-MINOR) http: trace http client by perf_hooks (theanarkh) #42345
[84fd6e54b0] - deps: upgrade npm to 8.5.5 (npm team) #42382
[b60262ee9f] - deps: update undici to 4.15.1 (Michaël Zasso) #42246

Commits

[1796f035c7] - build: rename tools workflow and add undici to it (Michaël Zasso) #42246
[f27bcec2ea] - build: use ccache in make-v8.sh on ppc64le and s390x (Richard Lau) #42204
[f48c3baf5a] - crypto: fix auth tag length error when mode != GCM (Tobias Nießen) #42383
[1d0468f749] - crypto: fix fingerprint string size calculation (Tobias Nießen) #42175
[a4632a3dc2] - crypto: add CHECKs to remaining BIO_s_mem allocs (Tobias Nießen) #42155
[3b55946452] - debugger: correct typo in inspect_repl.js (Kohei Ueno) #42267
[84fd6e54b0] - deps: upgrade npm to 8.5.5 (npm team) #42382
[f2178fcc1a] - deps: cares: cherry-pick b5a3d96 (bradh352) #42216
[063ff08cb1] - deps: V8: cherry-pick c6f6626deb14 (Lu Yahan) #42240
[b60262ee9f] - deps: update undici to 4.15.1 (Michaël Zasso) #42246
[70c0758308] - deps: upgrade npm to 8.5.3 (npm team) #42205
[fd51e78963] - doc: fix version history for net.Socket and net.Server (Antoine du Hamel) #42268
[db83c4d6dc] - doc: improve README.md usability (Rich Trott) #42378
[88d3401329] - doc: add that chacha20-poly1305 is IETF version (Tobias Nießen) #42370
[04a7c0061b] - doc: update instructions for openssl updates (Michael Dawson) #42353
[78b858dd4b] - doc: document goal to have examples (Michael Dawson) #42274
[a5e42f0113] - doc: fix Embedder's Guide link to V8 official docs (Aroyan) #42373
[6c265e7243] - doc: remove unneeded lint disable comment (Rich Trott) #42374
[46d3d23e64] - doc: revise async_hooks docs (Rich Trott) #42337
[3bd0078457] - doc: add @ShogunPanda to collaborators (Shogun) #42362
[e7e8eb9f03] - doc: update base branch name for nodejs/nodejs.org (Danielle Adams) #42355
[fd7e4ab654] - doc: fix async iterable pipeline signal examples (Randall Leeds) #42258
[96dc591b55] - doc: clarify path search in child_process.spawn (Damjan Cvetko) #41418
[72dd50016a] - doc: clarify the meaning of legacy status (Darshan Sen) #42269
[8b99099063] - doc: improve pipe description (Mikael Finstad) #42295
[701dc14fdf] - doc: remove outdated timeout.unref content (Xuguang Mei) #42241
[23354673be] - doc: deprecate string coercion in fs.write, fs.writeFileSync (Livia Medeiros) #42149
[f3c6c00963] - doc: remove refs to old OpenSSL list-* commands (Tobias Nießen) #42235
[19851f8d2d] - doc: readline 'line' event emits final line (Matt Probert) #42214
[e55283b978] - esm: make extension-less errors in type:module actionable (Bradley Farias) #42301
[e17db8f0fa] - esm: improve typings and code coverage (Bradley Farias) #42305
[4829a1047f] - esm: add runtime warning for specifier resolution flag (Geoffrey Booth) #42252
[da42ffb85e] - (SEMVER-MINOR) http: trace http client by perf_hooks (theanarkh) #42345
[88dee3c6b5] - http2: fix potential integer overflow (Michael Dawson) #42248
[1fe0b69c31] - lib: refactor to use primordials in lib/assert.js (Akhil Marsonya) #41702
[69a3792540] - lib: fix AsyncResource.bind not using 'this' from the caller by default (Roch Devost) #42177
[1c87ce6a32] - meta: update AUTHORS (Node.js GitHub Bot) #42404
[e7b8d83acd] - meta: update AUTHORS (Node.js GitHub Bot) #42317
[7fc4b9f08d] - meta: add dependencies label to label-pr-config (Mestery) #42129
[e96042442b] - src: convert hex2bin() into a regular function (Darshan Sen) #42321
[21198c1407] - src: fix coverity warnings in node_file.cc (Michael Dawson) #42272
[846b074075] - src: check EC_POINT_get_affine_coordinates result (Tobias Nießen) #42304
[8b84e68cbd] - src: simplify bound check in ParseArrayIndex (Tobias Nießen) #42306
[9500e5862e] - src: avoid returning invalid value from hex2bin (Tobias Nießen) #42307
[08e2d8ab86] - src: check return value of HMAC_Final (Tobias Nießen) #42303
[9fc4b9b04e] - src: include internal/options in the snapshot (Joyee Cheung) #42203
[e43aa30982] - src: remove redundant buffer size check (Tobias Nießen) #42257
[d06e92dba0] - src: perform minor cleanups on zlib code (Anna Henningsen) [#42247](https://github.com/nodejs/node...

Contributors

ShogunPanda

Assets 2

18 Mar 01:13

richardlau

v17.7.2

db3d882

2022-03-17, Version 17.7.2 (Current), @richardlau

This is a security release.

Notable Changes

Update to OpenSSL 3.0.2, which addresses the following vulnerability:

Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778)
More details are available at https://www.openssl.org/news/secadv/20220315.txt

Commits

[55e293e05f] - deps: update archs files for quictls/openssl-3.0.2+quic (Hassaan Pasha) #42356
[b8d090603d] - deps: upgrade openssl sources to quictls/openssl-3.0.2+quic (Hassaan Pasha) #42356
[c8b6d92af0] - test: fix tests affected by OpenSSL update (Michael Dawson) #42356
[457e31ea09] - test: renew certificates for specific test (Luigi Pinca) #42342

Assets 2

18 Mar 01:12

richardlau

v16.14.2

442e84a

2022-03-17, Version 16.14.2 'Gallium' (LTS), @richardlau

This is a security release.

Notable Changes

Update to OpenSSL 1.1.1n, which addresses the following vulnerability:

Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778)
More details are available at https://www.openssl.org/news/secadv/20220315.txt

Commits

[3924618c74] - deps: update archs files for OpenSSL-1.1.1 (Hassaan Pasha) #42352
[7a6a870d58] - deps: upgrade openssl sources to OpenSSL_1_1_1n (Hassaan Pasha) #42352
[c533b430f4] - test: fix tests affected by OpenSSL update (Michael Dawson) #42352

Assets 2

18 Mar 00:42

richardlau

v14.19.1

9e0bba5

2022-03-17, Version 14.19.1 'Fermium' (LTS), @richardlau

This is a security release.

Notable Changes

Update to OpenSSL 1.1.1n, which addresses the following vulnerability:

Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778)
More details are available at https://www.openssl.org/news/secadv/20220315.txt

Commits

[b5c52e337e] - build: pin Windows GitHub runner to windows-2019 (Richard Lau) #42350
[3b1a0b24f0] - deps: update archs files for OpenSSL-1.1.1n (Richard Lau) #42347
[c83dd99e0b] - deps: upgrade openssl sources to 1.1.1n (Richard Lau) #42347

Assets 2

18 Mar 00:41

richardlau

v12.22.11

cdb72ea

2022-03-17, Version 12.22.11 'Erbium' (LTS), @richardlau

This is a security release.

Notable changes

Update to OpenSSL 1.1.1n, which addresses the following vulnerability:

Infinite loop in BN_mod_sqrt() reachable when parsing certificates (High)(CVE-2022-0778)
More details are available at https://www.openssl.org/news/secadv/20220315.txt

Fix for building Node.js 12.x with Visual Studio 2019 to allow us to continue to
run CI tests.

Commits

[e3e5bf11ba] - build: pin Windows GitHub runner to windows-2019 (Richard Lau) #42349
[f41e7771bf] - build: fix detection of Visual Studio 2019 (Richard Lau) #42349
[c372ec207d] - deps: update archs files for OpenSSL-1.1.n (Richard Lau) #42348
[d574a1dccb] - deps: upgrade openssl sources to 1.1.1n (Richard Lau) #42348

Assets 2

16 Mar 02:54

danielleadams

v16.14.1

82c537f

2022-03-15, Version 16.14.1 'Gallium' (LTS), @danielleadams

Notable changes

doc:
- add release key for Bryan English (Bryan English) #42102

Commits

[2a24e763d5] - async_hooks: fix imports in context example (Yash Ladha) #39229
[c4a296f59b] - benchmark: enable no-empty ESLint rule (Rich Trott) #41831
[abe2eb9fc0] - benchmark: avoid input param manipulation (Jithil P Ponnan) #41741
[2c566a9830] - benchmark: use Object.hasOwn() instead of hasOwnProperty() (Rich Trott) #41769
[b77e72ab12] - benchmark: replace hasOwnProperty() with Object.hasOwn() (Rich Trott) #41724
[ec72cb4019] - benchmark: remove unreachable code from crypto/hash-stream-creation (Rich Trott) #41535
[14bb6f97f0] - buffer: fix atob/btoa no-arg case (Benjamin Gruenbaum) #41478
[79e2ab2a67] - build: remove windows-2022 from v16.x actions (Danielle Adams) #42299
[2893b4c85a] - build: check if python is a executable program (himself65) #36696
[5e4fc04821] - build: enable zoslib installation on z/OS (alexcfyung) #41493
[1e3c9ebaae] - build: fix libuv builds for android aarch64 (Darshan Sen) #41555
[46f714f92a] - crypto: check return code from EVP_DigestUpdate (Michael Dawson) #41800
[33abbf9f21] - crypto: fix webcrypto.subtle signature (Antoine du Hamel) #41761
[faceae486b] - crypto: revise variables for const use instead of let (Rich Trott) #41614
[fe0f9dc611] - crypto: remove wildcard options for checkEmail (Tobias Nießen) #41599
[188c3ab918] - crypto: adjust types for getRandomValues (LiviaMedeiros) #41481
[1ef28f1a3d] - crypto: remove checkIP options argument (Tobias Nießen) #41571
[74c0464572] - deps: upgrade npm to 8.5.0 (npm-robot) #41925
[b5783288d1] - deps: upgrade npm to 8.4.1 (npm-robot) #41836
[2b7c4b4afe] - deps: upgrade npm to 8.3.2 (npm team) #41621
[906247933c] - dgram: remove unreachable connectState assign (Rongjian Zhang) #38590
[330c1bc518] - doc: add comments to empty blocks in worker_threads text (Rich Trott) #41831
[125ed0c6b0] - doc: remove empty block from console.timeEnd() example (Rich Trott) #41831
[34d6f8e793] - doc: use the same case as the section heading (Mestery) #41876
[fd28d252fa] - doc: use Oxford comma in crypto docs (Tobias Nießen) #41875
[bf99ef8b57] - doc: use sentence case in readme introduction (Mestery) #41874
[b15d9c2cc6] - doc: add missing space before hyphen (Mestery) #41873
[77685d5ab0] - doc: add stream pipelining note on Http usage (Rafael Silva) #41796
[c7bae97755] - doc: improve SSL_OP_PRIORITIZE_CHACHA description (Tobias Nießen) #41866
[5cd38a4ff5] - doc: add missing commas in cluster docs (Tobias Nießen) #41865
[cf6b5e0e33] - doc: add history information for Corepack (Antoine du Hamel) #41813
[c742a1cc4d] - doc: feature management proposal (Michael Dawson) #41420
[3f000a2627] - doc: add overhead hints for heap snapshot generation (Gerhard Stöbich) #41822
[42c0a8353e] - doc: fix X509 CA acronym capitalization (Tobias Nießen) #41841
[f5b0a3be12] - doc: use sentence case for X509 error codes header (Tobias Nießen) #41829
[20d8fd1a83] - doc: add initial version of maintaining-http.md (Michael Dawson) #41798
[077fcee008] - doc: add registry numbers for Electron 19 and 20 (Keeley Hammond) #41814
[44b6927179] - doc: add note about resource type in async_hooks (Tony Gorez) #41797
[1be701c9ca] - doc: use example.com for examples (Ateş Göral) #41827
[4660c1fa7b] - doc: align tls port types with net port types (Tobias Nießen) #41799
[5cd8bdc4d7] - doc: use UDPv4/UDPv6 consistently with TCPv4/TCPv6 (Tobias Nießen) #41824
[3ef05a0216] - doc: improve wording surrounding TLS 1.3 ciphers (Tobias Nießen) #41778
[51d955368e] - doc: add format-md step to release guide (Danielle Adams) #41809
[8f00e5dcf7] - doc: add v16 changelog link to iojs changelog (Danielle Adams) #41808
[4f194f3094] - doc: add security-steward rotation information (Michael Dawson) #41707
[14ea8fcba8] - doc: use Object.hasOwn() in util doc (Rich Trott) #41780
[9f77692491] - doc: remove section on "recent" ECDH changes (Tobias Nießen) #41773
[211a3c4c4c] - doc: clarify that import also uses main (Ben McCann) #41720
[20d9c4a2c5] - doc: update modules.md wording (Tobias Hernstig) #41728
[e209f53ba2] - doc: update Mesteery email (Mestery) #41683
[db1ce43173] - doc: avoid incomplete sentence in cluster docs (Tobias Nießen) #41701
[ee79e53821] - doc: fix typo in contributing guides (Yoshiki Kurihara) #41723
[9616fd5913...

Assets 2

Uh oh!

Releases: nodejs/node

2022-04-26, Version 16.15.0 'Gallium' (LTS), @danielleadams

Notable changes

Add fetch API

Other notable changes

Commits

Contributors

Uh oh!

2022-04-19, Version 18.0.0 (Current), @BethGriggs

Notable Changes

Deprecations and Removals

fetch (experimental)

HTTP Timeouts

Test Runner module (experimental)

Toolchain and Compiler Upgrades

V8 10.1

Web Streams API (experimental)

Other Notable Changes

Semver-Major Commits

Uh oh!

2022-04-07, Version 17.9.0 (Current), @BethGriggs prepared by @juanarbol

Notable Changes

Commits

Contributors

Uh oh!

2022-04-05, Version 12.22.12 'Erbium' (LTS), @richardlau

Notable Changes

Commits

Uh oh!

2022-03-22, Version 17.8.0 (Current), @bengl

Notable Changes

Commits

Contributors

Uh oh!

2022-03-17, Version 17.7.2 (Current), @richardlau

Notable Changes

Commits

Uh oh!

2022-03-17, Version 16.14.2 'Gallium' (LTS), @richardlau

Notable Changes

Commits

Uh oh!

2022-03-17, Version 14.19.1 'Fermium' (LTS), @richardlau

Notable Changes

Commits

Uh oh!

2022-03-17, Version 12.22.11 'Erbium' (LTS), @richardlau

Notable changes

Commits

Uh oh!

2022-03-15, Version 16.14.1 'Gallium' (LTS), @danielleadams

Notable changes

Commits

Uh oh!