Skip to content

Releases: nodejs/node

2018-12-26, Version 11.6.0 (Current), @MylesBorins

26 Dec 16:35
v11.6.0
968e901

Choose a tag to compare

Notable Changes

  • cli:
    • add --max-http-header-size flag (cjihrig) #24811
  • crypto:
    • always accept certificates as public keys (Tobias Nießen) #24234
    • add key object API (Tobias Nießen) #24234
    • update root certificates (Sam Roberts) #25113
  • deps:
    • upgrade to libuv 1.24.1 (cjihrig) #25078
    • upgrade npm to 6.5.0 (Audrey Eschright) #24734
  • http:
    • add maxHeaderSize property (cjihrig) #24860

Commits

  • [a9ab28df2c] - assert: inspect getters (Ruben Bridgewater) #25004
  • [c6bfa66b2e] - buffer: simplify code (Ruben Bridgewater) #25151
  • [9b38bbff7f] - build: correct fi indentation in Makefile (Daniel Bevenius) #25107
  • [4513516f5e] - build: add a space to clarify skipping crypto msg (Daniel Bevenius) #25011
  • [7b2eefc103] - child_process: spawn ignores options in case args is undefined (Eduard Bondarenko) #24913
  • [edd8bd0ee0] - (SEMVER-MINOR) cli: add --max-http-header-size flag (cjihrig) #24811
  • [e6c1e8de95] - (SEMVER-MINOR) crypto: always accept certificates as public keys (Tobias Nießen) #24234
  • [3b53df0748] - (SEMVER-MINOR) crypto: add key object API (Tobias Nießen) #24234
  • [6f6f339ef0] - crypto: update root certificates (Sam Roberts) #25113
  • [e855018968] - (SEMVER-MINOR) deps: upgrade npm to 6.5.0 (Audrey Eschright) #24734
  • [155d1d54bf] - deps: upgrade to libuv 1.24.1 (cjihrig) #25078
  • [0057af293a] - (SEMVER-MINOR) deps: cherry-pick http_parser_set_max_header_size (cjihrig) #24811
  • [b78d48749a] - doc: fix links in test/common/README.md (Vse Mozhet Byt) #25172
  • [6a690ee51b] - doc: revise "Breaking Changes and Deprecations" (Rich Trott) #25116
  • [4ca09517c2] - doc: describe root cert update process (Sam Roberts) #25113
  • [4561e2c984] - doc: revise "Breaking Changes" section of Collaborator Guide (Rich Trott) #25071
  • [2516e9cfd0] - doc,lib,test: capitalize comment sentences (Ruben Bridgewater) #24996
  • [d1a98a8d0a] - events: simplify stack compare function (Ruben Bridgewater) #24744
  • [ae50f480d2] - (SEMVER-MINOR) http: add maxHeaderSize property (cjihrig) #24860
  • [b3f45daf7b] - lib: make internal API warning more direct (Rich Trott) #25125
  • [2fc43fbe43] - lib: switch to object spread where possible (Ruben Bridgewater) #25104
  • [96bdd47734] - lib: refactor argument validation using validateString (ZYSzys) #24960
  • [0cde1a4fdc] - lib: remove unused NativeModule/NativeModule wraps (Joyee Cheung) #24904
  • [add566eee5] - os: use uv_os_gethostname() in hostname() (cjihrig) #25111
  • [85a136974e] - perf_hooks: make GC tracking state per-Environment (Anna Henningsen) #25053
  • [3f82144c98] - process: move environment variable proxy code into node_env_var.cc (Joyee Cheung) #25067
  • [c9f809e36f] - src: add DCHECK macros (kiyomizumia) #24359
  • [b801b0372a] - src: use std::vector for setting up process.execPath (Anna Henningsen) #25069
  • [54e42f04a7] - src: port GetLoadedLibraries for freebsd (Gireesh Punathil) #25106
  • [fd0361bff0] - src: mark options parsers as const (Anna Henningsen) #25065
  • [c6388edf34] - src: handle empty Maybe in uv binding initialize (Anna Henningsen) #25079
  • [6f3b421dd5] - src: schedule destroy hooks in BeforeExit early during bootstrap (Joyee Cheung) #25020
  • [a4505c698f] - src: extract common Bind method (Jon Moss) #22315
  • [09a99c6834] - src: mark some global state as const (Anna Henningsen) #25052
  • [7f34c768da] - src: remove internalBinding('config').warningFile (Joyee Cheung) #24959
  • [c80ac7fae3] - (SEMVER-MINOR) src: add kUInteger parsing (Matteo Collina) #24811
  • [45d48510bd] - test: fix test-tls-session-timeout (Rich Trott) #25188
  • [6557ea180c] - test: mark test-trace-events-api-worker-disabled flaky (Rich Trott) #25197
  • [db54531c8d] - test: remove Files: comment processing from Python test runner (Rich Trott) #25183
  • [a28cae0e55] - test: add hasCrypto check to common flags check (Daniel Bevenius) #25147
  • [175f7b60c2] - test: remove unnecessary eslint-disable comments (Rich Trott) #25119
  • [d09e3335a6] - test: remove obsolete eslint comments (cjihrig) #25088
  • [8279826ce6] - test: verify input flags (Ruben Bridgewater) #24876
  • [1f45b2370d] - test: add signal check to test-esm-cjs-main (Rich Trott) #25073
  • [3e1fe19194] - test: add missing tmpdir.refresh() in recently-added test (Rich Trott) #25098
  • [5eb5d1d7b1] - test: test internal/util/types in vm (ZYSzys) #25056
  • [9ad6bc2e6e] - test: remove magic numbers in test-gc-http-client-onerror (Rich Trott) #24943
  • [30b61554f6] - test: merge test with unnecessary child process (Sam Roberts) #25025
  • [e340b8f1ff] - tls: re-define max supported version as 1.2 (Sam Rober...
Read more

2018-12-26, Version 10.15.0 'Dubnium' (LTS), @MylesBorins

26 Dec 16:35
v10.15.0
1ae0511

Choose a tag to compare

The 10.14.0 security release introduced some unexpected breakages on the 10.x release line.
This is a special release to fix a regression in the HTTP binary upgrade response body and add
a missing CLI flag to adjust the max header size of the http parser.

Notable Changes

  • cli:
    • add --max-http-header-size flag (cjihrig) #24811
  • http:
    • add maxHeaderSize property (cjihrig) #24860

Commits

  • [9b2ffc81c0] - (SEMVER-MINOR) cli: add --max-http-header-size flag (cjihrig) #24811
  • [6183c7107d] - (SEMVER-MINOR) deps: cherry-pick http_parser_set_max_header_size (cjihrig) #24811
  • [e669733595] - doc: describe current HTTP header size limit (Sam Roberts) #24700
  • [b6d3afb257] - (SEMVER-MINOR) http: add maxHeaderSize property (cjihrig) #24860
  • [1aea1e3634] - http: fix regression of binary upgrade response body (Matteo Collina) #25039
  • [a57aed144a] - (SEMVER-MINOR) src: add kUInteger parsing (Matteo Collina) #24811
  • [527407c49f] - src: cache the result of GetOptions() in JS land (Joyee Cheung) #24091
  • [728bc631e5] - test: fix expectation in test-bootstrap-modules (Ali Ijaz Sheikh) #25112
  • [3e14212f0e] - test: remove magic numbers in test-gc-http-client-onerror (Rich Trott) #24943

2018-12-26, Version 8.15.0 'Carbon' (LTS), @MylesBorins

26 Dec 16:34
v8.15.0
6d1c367

Choose a tag to compare

The 8.14.0 security release introduced some unexpected breakages on the 8.x release line.
This is a special release to fix a regression in the HTTP binary upgrade response body and add
a missing CLI flag to adjust the max header size of the http parser.

Notable Changes

  • cli:
    • add --max-http-header-size flag (cjihrig) #24811
  • http:
    • add maxHeaderSize property (cjihrig) #24860

Commits

  • [693e362175] - (SEMVER-MINOR) cli: add --max-http-header-size flag (cjihrig) #24811
  • [4fb5a1be2f] - (SEMVER-MINOR) deps: cherry-pick http_parser_set_max_header_size (cjihrig) #24811
  • [446f8b54e5] - (SEMVER-MINOR) http: add maxHeaderSize property (cjihrig) #24860
  • [215ecfe4de] - http: fix regression of binary upgrade response body (Matteo Collina) #25037
  • [e1fbc26c6a] - test: move test-benchmark-path to sequential (Rich Trott) #21393
  • [aef71c05a2] - test: mark test-http2-settings-flood as flaky on Windows (Rich Trott) #25048

2018-12-26, Version 6.16.0 'Boron' (LTS), @MylesBorins

26 Dec 16:34
v6.16.0
a3aa4b4

Choose a tag to compare

The 6.15.0 security release introduced some unexpected breakages on the 6.x release line.
This is a special release to fix a regression in the HTTP binary upgrade response body and add
a missing CLI flag to adjust the max header size of the http parser.

Notable Changes

  • cli:
    • add --max-http-header-size flag (cjihrig) #24811
  • http:
    • add maxHeaderSize property (cjihrig) #24860

Commits

  • [f233b160c9] - (SEMVER-MINOR) cli: add --max-http-header-size flag (cjihrig) #24811
  • [59f83d6896] - (SEMVER-MINOR) deps: cherry-pick http_parser_set_max_header_size (cjihrig) #24811
  • [c0c4de71f0] - (SEMVER-MINOR) http: add maxHeaderSize property (cjihrig) #24860
  • [8a3e0c0697] - http: fix regression of binary upgrade response body (Matteo Collina) #25036

2018-12-18, Version 11.5.0 (Current), @BethGriggs

18 Dec 19:26

Choose a tag to compare

Notable Changes

  • tls:
    • support "BEGIN TRUSTED CERTIFICATE" for ca: (Sam Roberts) #24733
  • util:
    • add inspection getter option (Ruben Bridgewater) #24852

Commits

  • [bf4faf3ffc] - assert,util: harden comparison (Ruben Bridgewater) #24831
  • [302081bafc] - build: make lint-addon-docs run only if needed (Daniel Bevenius) #24993
  • [cc8a805e31] - build: fix compiler version detection (Richard Lau) #24879
  • [bde5df20d6] - doc: fix node.1 --http-parser sort order (cjihrig) #25045
  • [a9f239fb60] - doc: add EventTarget link to worker_threads (Azard) #25058
  • [00ce972305] - doc: make README formatting more consistent (wenjun ye) #25003
  • [dbdea36190] - doc: add codebytere's info to release team (Shelley Vohr) #25022
  • [877f8a0094] - doc: revise internal vs. public API in Collaborator Guide (Rich Trott) #24975
  • [f0bcacdcc6] - doc: update a link of npm repository (Daijiro Wachi) #24969
  • [1e096291d6] - doc: fix author-ready conflict (Ruben Bridgewater) #25015
  • [b2e6cbddd8] - doc: update Useful CI Jobs section of Collaborator Guide (Rich Trott) #24916
  • [9bfbb6822b] - doc: add class worker documentation (yoshimoto koki) #24849
  • [0220cd3260] - doc: remove bad link to irc info (Richard Lau) #24967
  • [a6a3829962] - doc: simplify author ready (Ruben Bridgewater) #24893
  • [cda1da9200] - doc: update "Testing and CI" in Collaborator Guide (Rich Trott) #24884
  • [81dce68a9d] - doc: update http doc for new Agent()/support options in socket.connect() (Beni von Cheni) #24846
  • [643ca14d2c] - doc: fix order of events when request is aborted (Luigi Pinca) #24779
  • [c300aaa208] - doc: update LICENSE file (Anna Henningsen) #24898
  • [c4f3cf9759] - doc: revise Waiting for Approvals documentation (Rich Trott) #24845
  • [56b2a7274c] - inspector: split the HostPort being used and the one parsed from CLI (Joyee Cheung) #24772
  • [2456a545a6] - lib: ensure readable stream flows to end (Mikko Rantanen) #24918
  • [79c52a9f88] - lib: improve error creation performance (Ruben Bridgewater) #24747
  • [25dae6cffd] - module: use validateString in modules/esm (ZYSzys) #24868
  • [2a11e6aaf3] - module: use validateString in modules/cjs (ZYSzys) #24863
  • [f4d5c358d9] - net: use strict comparisons for fd (cjihrig) #25014
  • [5f60ed7647] - path: replace assertPath() with validator (cjihrig) #24840
  • [f43f45a26c] - process: properly close file descriptor on exit (Ruben Bridgewater) #24972
  • [8b109f05d9] - process: simplify check in previousValueIsValid() (cjihrig) #24836
  • [2e94f3b798] - querystring: remove eslint-disable (cjihrig) #24995
  • [5f8950b652] - src: emit 'params' instead of 'data' for NodeTracing.dataCollected (Kelvin Jin) #24949
  • [d0270f3a5c] - src: add GetLoadedLibraries routine (Gireesh Punathil) #24825
  • [f8547019c7] - src: include node_internals.h in node_metadata.cc (Daniel Bevenius) #24933
  • [5a1289d128] - src: create env->inspector_console_api_object earlier (Joyee Cheung) #24906
  • [d7605725df] - src: remove use of CallOnForegroundThread() (cjihrig) #24925
  • [08c6b2126c] - src: use Local version of ToBoolean() (cjihrig) #24924
  • [5206f3add5] - src: do not alias new and old signal masks (Sam Roberts) #24810
  • [94d02cabb9] - src: fix warning for potential snprintf truncation (Sam Roberts) #24810
  • [9b000e5088] - src: remove finalized_ member from Hash class (Daniel Bevenius) #24822
  • [90d481ea45] - src: remove unused env variables in node_util (Daniel Bevenius) #24820
  • [d449c36500] - stream: re-use existing once() implementation (Anna Henningsen) #24991
  • [39af61faa2] - stream: fix end-of-stream for HTTP/2 (Anna Henningsen) #24926
  • [4f0d17b019] - test: remove unnecessary linter comment (cjihrig) #25013
  • [ab1801b8ad] - test: use global.gc() instead of gc() (cjihrig) #25012
  • [ddff644172] - test: run eslint on test file and fix errors (Ruben Bridgewater) #25009
  • [110fd39dfe] - test: remove dead code (Ruben Bridgewater) #25009
  • [e04e85460f] - test: use blocks instead of async IIFE (Anna Henningsen) #24989
  • [eb9e6e6576] - test: adding history regression test case (Anto Aravinth) #24843
  • [ac919efbaf] - test: mark test-child-process-execfile flaky (Rich Trott) #25051
  • [1e3fb0ae03] - test: mark test-child-process-exit-code flaky (Rich Trott) #25050
  • [7e0dbc6e01] - test: improve WPT runner name matching (Joyee Cheung) #24826
  • [da984be0a3] - test: remove reference to whatwg in file names under test/wpt (Joyee Cheung) #24826
  • [282589456c] - test: mark ...
Read more

2018-12-18, Version 8.14.1 'Carbon' (LTS), @MylesBorins prepared by @BethGriggs

18 Dec 16:48
187694e

Choose a tag to compare

Notable changes

  • assert:
    • revert breaking change (Ruben Bridgewater) #24786
  • http2:
    • fix sequence of error/close events (Gerhard Stoebich) #24789

Commits

Read more

2018-12-11, Version 10.14.2 'Dubnium' (LTS), @MylesBorins prepared by @codebytere

18 Dec 16:48

Choose a tag to compare

This LTS release comes with 374 commits. This includes 165 which are test or benchmark related,
77 which are doc related, 29 which are build / tool related and 15 commits which update dependencies.

Notable Changes

  • deps:
    • upgrade to c-ares v1.15.0 (Ben Noordhuis) #23854
  • Windows:
    • A crashing process will now show the names of stack frames if the node.pdb file is available. (Refael Ackermann) #23822
  • Added new collaborators:

Commits

Read more

2018-12-07, Version 11.4.0 (Current), @BridgeAR

07 Dec 18:26
v11.4.0
4f1297f

Choose a tag to compare

Notable Changes

  • console,util:
    • console functions now handle symbols as defined in the spec. #23708
    • The inspection depth default is now back at 2. #24326
  • dgram,net:
    • Added ipv6Only option for net and dgram. #23798
  • http:
    • Chosing between the http parser is now possible per runtime flag. #24739
  • readline:
    • The readline module now supports async iterators. #23916
  • repl:
    • The multiline history feature is removed. #24804
  • tls:
    • Added min/max protocol version options. #24405
    • The X.509 public key info now includes the RSA bit size and the elliptic curve. #24358
  • url:
    • pathToFileURL() now supports LF, CR and TAB. #23720
  • Windows:
    • Tools are not installed using Boxstarter anymore. #24677
    • The install-tools scripts or now included in the dist. #24233
  • Added new collaborator:

Commits

  • [7fb8d319fa] - assert: fix loose deepEqual map comparison (Ruben Bridgewater) #24749
  • [8905518650] - assert,util: fix sparse array comparison (Ruben Bridgewater) #24749
  • [ef63bb287d] - benchmark: support URL inputs in create-clientrequest (Joyee Cheung) #24302
  • [f5d4db1e9c] - benchmark: pre-generate data set for URL benchmarks (Joyee Cheung) #24302
  • [73786c854a] - buffer: remove checkNumberType() (cjihrig) #24815
  • [a22ac0bb66] - build: add '.git' to 'make lint-py' exclude list (cclauss) #24802
  • [bfec6a4eb3] - build: fix check-xz for platforms defaulting to sh (Rod Vagg) #24841
  • [3a24c91c7d] - build: make tar.xz creation opt-out, fail if no xz (Rod Vagg) #24551
  • [6b71099303] - build: add line break as soon tests are done (Ruben Bridgewater) #24748
  • [e0e15da6ca] - build: fix line length off by one error (Ruben Bridgewater) #24748
  • [3fe4498fe1] - build: fix c++ code coverage on macOS (Refael Ackermann) #24520
  • [955819e0a3] - build: only check REPLACEME & DEP...X for releases (Rod Vagg) #24575
  • [3fa4def6ea] - build: replace -not with ! in find (Rich Trott) #24635
  • [e37c6182e5] - build: fix Python detection when depot_tools are in PATH in Windows (Guy Bedford) #22539
  • [39614add79] - build: remove sudo:false from .travis.yml (Rich Trott) #24511
  • [21e59a68cf] - build: use print() function in configure.py (cclauss) #24484
  • [4dc1e785a3] - build: check minimum ICU in configure for system-icu (Steven R. Loomis) #24255
  • [c5e32fdebf] - build: remove unnecessary prerequisite in Makefile (Rich Trott) #24342
  • [383d8092b1] - build, tools, win: add .S files support to GYP (Bartosz Sosnowski) #24553
  • [bd4df5b326] - build,src: sync src files with node.gyp (Refael Ackermann) #24505
  • [331b26eda9] - build,tools: update make-v8.sh for ppc64le (Refael Ackermann) #24293
  • [706bc414b9] - (SEMVER-MINOR) build,win: pack the install-tools scripts for dist (Refael Ackermann) #24233
  • [b214ae44c8] - cli: add missing env vars to --help (cjihrig) #24383
  • [50005e7ddf] - console: improve code readability (gengjiawen) #24412
  • [12feb9e492] - crypto: harden bignum-to-binary conversions (Ben Noordhuis) #24719
  • [c15efcec92] - crypto: convert to arrow function (yosuke ota) #24597
  • [16d70603a1] - crypto: allow monkey patching of pseudoRandomBytes (Gerhard Stoebich) #24108
  • [7c29e9b83b] - crypto: remove unnecessary fully qualified names (Gagandeep Singh) #24452
  • [0afcb9ad3a] - deps: cherry-pick 88f8fe1 from upstream V8 (Yang Guo) #24514
  • [61179e6cfe] - deps: cherry-pick 073073b from upstream V8 (Yang Guo) #24515
  • [230eb0dde9] - deps: update llhttp to 1.0.1 (Fedor Indutny) #24508
  • [06c28b9d75] - deps: upgrade to libuv 1.24.0 (cjihrig) #24332
  • [2dfaa480de] - dns: simplify dns.promises warning logic (cjihrig) #24788
  • [5a1fb1e663] - doc: mention util depth default change (Ruben Bridgewater) #24805
  • [d800998161] - doc: list all versions WHATWG URL api was added (Thomas Watson) #24847
  • [71e520cfa6] - doc: add authority and scheme psuedo headers (Kenigbolo Meya Stephen) #24777
  • [5b78d2c504] - doc: remove duplicate whitespaces in doc/api (Yusuke Kawasaki)
  • [162b3a12b6] - doc: add triaging section to releases.md (Beth Griggs) #20165
  • [b8611a384a] - doc: use author's titles for linked resources (Rich Trott) #24837
  • [566046ca4e] - doc: revise code review guidelines (Rich Trott) #24790
  • [3d1853b178] - doc: add a note on usage scope of AliasedBuffer (Gireesh Punathil) #24724
  • [997c0e05a4] - doc: hide undocumented object artifacts in async_hooks (Gireesh Punathil) #24741
  • [58e5c00c9b] - doc: fix added version of randomFill+randomFillSync (Thomas Watson) #24812
  • [751d961d29] - doc: streamline Accepting Modifications in Collaborator Guide (Rich Trott) #24807
  • [c09ea83869] - doc: make release README link be consistent with text (ZYSzys) #24783
  • [06011f501d] - doc: fix REPLACEME for tls min/max protocol option (Sam Roberts) [#24...
Read more

2018-12-03, Version 6.15.1 'Boron' (LTS), @rvagg

06 Dec 04:55
v6.15.1

Choose a tag to compare

Notable Changes

This is a patch release to address a bad backport of the fix for "Slowloris HTTP Denial of Service" (CVE-2018-12122). Node.js 6.15.0 misapplies the headers timeout to an entire keep-alive HTTP session, resulting in prematurely disconnected sockets.

Commits

  • [5d9005c359] - http: fix backport of Slowloris headers (Matteo Collina) #24796

2018-11-29, Version 10.14.1 'Dubnium' (LTS), @MylesBorins

06 Dec 04:54

Choose a tag to compare

Notable Changes

  • win/msi: Revert changes to installer causing issues on Windows systems.

Commits

  • [5d17bf1e13] - win: add prompt to tools installation script (João Reis) #23987
  • [589f0d2192] - win: clarify Boxstarter behavior on install tools (Rob Reynolds) #23987
  • [9e293c1328] - Revert "win,msi: install tools for native modules" (Refael Ackermann) #24344