[PR #13] [MERGED] chore(deps): update npm #22

Closed
opened 2026-06-08 08:27:23 +00:00 by ryangr0 · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/webgrip/application-template/pull/13
Author: @webgrip-renovate[bot]
Created: 2/10/2026
Status: Merged
Merged: 2/12/2026
Merged by: @Ryangr0

Base: mainHead: renovate/npm


📝 Commits (1)

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 package.json (+2 -2)

📄 Description

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
node (source) volta minor 20.10.020.20.0 age confidence
npm (source) volta minor 10.2.510.9.4 age confidence

Release Notes

nodejs/node (node)

v20.20.0: 2026-01-13, Version 20.20.0 'Iron' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

Commits

v20.19.6: 2025-11-25, Version 20.19.6 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

v20.19.5: 2025-09-03, Version 20.19.5 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

v20.19.4: 2025-07-15, Version 20.19.4 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
Commits

v20.19.3: 2025-06-23, Version 20.19.3 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/webgrip/application-template/pull/13 **Author:** [@webgrip-renovate[bot]](https://github.com/apps/webgrip-renovate) **Created:** 2/10/2026 **Status:** ✅ Merged **Merged:** 2/12/2026 **Merged by:** [@Ryangr0](https://github.com/Ryangr0) **Base:** `main` ← **Head:** `renovate/npm` --- ### 📝 Commits (1) - [`f529b55`](https://github.com/webgrip/application-template/commit/f529b5543a6d84a9e6be1a7bcc5b09e41d6a962f) chore(deps): update npm ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+2 -2) </details> ### 📄 Description > ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Type | Update | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [node](https://nodejs.org) ([source](https://redirect.github.com/nodejs/node)) | volta | minor | [`20.10.0` → `20.20.0`](https://renovatebot.com/diffs/npm/node/v20.10.0/v20.20.0) | ![age](https://developer.mend.io/api/mc/badges/age/node-version/node/v20.20.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/node-version/node/v20.10.0/v20.20.0?slim=true) | | [npm](https://docs.npmjs.com/) ([source](https://redirect.github.com/npm/cli)) | volta | minor | [`10.2.5` → `10.9.4`](https://renovatebot.com/diffs/npm/npm/10.2.5/10.9.4) | ![age](https://developer.mend.io/api/mc/badges/age/npm/npm/10.9.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/npm/10.2.5/10.9.4?slim=true) | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v20.20.0`](https://redirect.github.com/nodejs/node/releases/tag/v20.20.0): 2026-01-13, Version 20.20.0 &#x27;Iron&#x27; (LTS), @&#8203;marco-ippolito [Compare Source](https://redirect.github.com/nodejs/node/compare/v20.19.6...v20.20.0) This is a security release. ##### Notable Changes lib: - (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) [nodejs-private/node-private#802](https://redirect.github.com/nodejs-private/node-private/pull/802) - (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) [nodejs-private/node-private#797](https://redirect.github.com/nodejs-private/node-private/pull/797) lib,permission: - (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) [nodejs-private/node-private#760](https://redirect.github.com/nodejs-private/node-private/pull/760) src: - (CVE-2025-59466) rethrow stack overflow exceptions in async\_hooks (Matteo Collina) [nodejs-private/node-private#773](https://redirect.github.com/nodejs-private/node-private/pull/773) src,lib: - (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) [nodejs-private/node-private#759](https://redirect.github.com/nodejs-private/node-private/pull/759) tls: - (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) [nodejs-private/node-private#796](https://redirect.github.com/nodejs-private/node-private/pull/796) ##### Commits - \[[`8f9ba3f623`](https://redirect.github.com/nodejs/node/commit/8f9ba3f623)] - **deps**: update c-ares to v1.34.6 (Node.js GitHub Bot) [#&#8203;60997](https://redirect.github.com/nodejs/node/pull/60997) - \[[`97fc9b0eb7`](https://redirect.github.com/nodejs/node/commit/97fc9b0eb7)] - **deps**: update undici to 6.23.0 (Matteo Collina) [nodejs-private/node-private#792](https://redirect.github.com/nodejs-private/node-private/pull/792) - \[[`14fbbb510c`](https://redirect.github.com/nodejs/node/commit/14fbbb510c)] - **(CVE-2025-55132)** **lib**: disable futimes when permission model is enabled (RafaelGSS) [nodejs-private/node-private#802](https://redirect.github.com/nodejs-private/node-private/pull/802) - \[[`1febc48d5b`](https://redirect.github.com/nodejs/node/commit/1febc48d5b)] - **(CVE-2025-59465)** **lib**: add TLSSocket default error handler (RafaelGSS) [nodejs-private/node-private#797](https://redirect.github.com/nodejs-private/node-private/pull/797) - \[[`494f62dc23`](https://redirect.github.com/nodejs/node/commit/494f62dc23)] - **(CVE-2025-55130)** **lib,permission**: require full read and write to symlink APIs (RafaelGSS) [nodejs-private/node-private#760](https://redirect.github.com/nodejs-private/node-private/pull/760) - \[[`d7a5c587c0`](https://redirect.github.com/nodejs/node/commit/d7a5c587c0)] - **(CVE-2025-59466)** **src**: rethrow stack overflow exceptions in async\_hooks (Matteo Collina) [nodejs-private/node-private#773](https://redirect.github.com/nodejs-private/node-private/pull/773) - \[[`51f4de4b4a`](https://redirect.github.com/nodejs/node/commit/51f4de4b4a)] - **(CVE-2025-55131)** **src,lib**: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) [nodejs-private/node-private#759](https://redirect.github.com/nodejs-private/node-private/pull/759) - \[[`85f73e7057`](https://redirect.github.com/nodejs/node/commit/85f73e7057)] - **(CVE-2026-21637)** **tls**: route callback exceptions through error handlers (Matteo Collina) [nodejs-private/node-private#796](https://redirect.github.com/nodejs-private/node-private/pull/796) ### [`v20.19.6`](https://redirect.github.com/nodejs/node/releases/tag/v20.19.6): 2025-11-25, Version 20.19.6 &#x27;Iron&#x27; (LTS), @&#8203;marco-ippolito [Compare Source](https://redirect.github.com/nodejs/node/compare/v20.19.5...v20.19.6) ##### Notable Changes - \[[`6277910a15`](https://redirect.github.com/nodejs/node/commit/6277910a15)] - **crypto**: update root certificates to NSS 3.114 (Node.js GitHub Bot) [#&#8203;59571](https://redirect.github.com/nodejs/node/pull/59571) - \[[`082e50d4a2`](https://redirect.github.com/nodejs/node/commit/082e50d4a2)] - **doc**: update the instruction on how to verify releases (Antoine du Hamel) [#&#8203;59113](https://redirect.github.com/nodejs/node/pull/59113) - \[[`db68cec4cb`](https://redirect.github.com/nodejs/node/commit/db68cec4cb)] - **doc**: deprecate HTTP/2 priority signaling (Matteo Collina) [#&#8203;58313](https://redirect.github.com/nodejs/node/pull/58313) ##### Commits - \[[`0f644df42e`](https://redirect.github.com/nodejs/node/commit/0f644df42e)] - **build**: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) [#&#8203;59547](https://redirect.github.com/nodejs/node/pull/59547) - \[[`fba0025b9c`](https://redirect.github.com/nodejs/node/commit/fba0025b9c)] - **build**: use `windows-2025` runner (Michaël Zasso) [#&#8203;59673](https://redirect.github.com/nodejs/node/pull/59673) - \[[`3456ec946d`](https://redirect.github.com/nodejs/node/commit/3456ec946d)] - **crypto**: update root certificates to NSS 3.116 (Node.js GitHub Bot) [#&#8203;59956](https://redirect.github.com/nodejs/node/pull/59956) - \[[`6277910a15`](https://redirect.github.com/nodejs/node/commit/6277910a15)] - **crypto**: update root certificates to NSS 3.114 (Node.js GitHub Bot) [#&#8203;59571](https://redirect.github.com/nodejs/node/pull/59571) - \[[`1788fb5f3d`](https://redirect.github.com/nodejs/node/commit/1788fb5f3d)] - **deps**: update undici to 6.22.0 (Matteo Collina) [#&#8203;60112](https://redirect.github.com/nodejs/node/pull/60112) - \[[`5d61b55f24`](https://redirect.github.com/nodejs/node/commit/5d61b55f24)] - **deps**: update uvwasi to 0.0.23 (Node.js GitHub Bot) [#&#8203;59791](https://redirect.github.com/nodejs/node/pull/59791) - \[[`9f1e5e4637`](https://redirect.github.com/nodejs/node/commit/9f1e5e4637)] - **deps**: update histogram to 0.11.9 (Node.js GitHub Bot) [#&#8203;59689](https://redirect.github.com/nodejs/node/pull/59689) - \[[`d0edb01d25`](https://redirect.github.com/nodejs/node/commit/d0edb01d25)] - **deps**: update googletest to [`eb2d85e`](https://redirect.github.com/nodejs/node/commit/eb2d85e) (Node.js GitHub Bot) [#&#8203;59335](https://redirect.github.com/nodejs/node/pull/59335) - \[[`576242ff39`](https://redirect.github.com/nodejs/node/commit/576242ff39)] - **deps**: V8: cherry-pick [`a0d0d4f`](https://redirect.github.com/nodejs/node/commit/a0d0d4fc4f19) (Ho Cheung) [#&#8203;60716](https://redirect.github.com/nodejs/node/pull/60716) - \[[`a07a277020`](https://redirect.github.com/nodejs/node/commit/a07a277020)] - **deps**: update corepack to 0.34.1 (Node.js GitHub Bot) [#&#8203;60314](https://redirect.github.com/nodejs/node/pull/60314) - \[[`fa5c5af8ce`](https://redirect.github.com/nodejs/node/commit/fa5c5af8ce)] - **deps**: update archs files for openssl-3.0.17 (Node.js GitHub Bot) [#&#8203;59134](https://redirect.github.com/nodejs/node/pull/59134) - \[[`556113e2fc`](https://redirect.github.com/nodejs/node/commit/556113e2fc)] - **deps**: upgrade openssl sources to openssl-3.0.17 (Node.js GitHub Bot) [#&#8203;59134](https://redirect.github.com/nodejs/node/pull/59134) - \[[`cd1536ca90`](https://redirect.github.com/nodejs/node/commit/cd1536ca90)] - **deps**: update corepack to 0.34.0 (Node.js GitHub Bot) [#&#8203;59133](https://redirect.github.com/nodejs/node/pull/59133) - \[[`acec79989e`](https://redirect.github.com/nodejs/node/commit/acec79989e)] - **deps**: V8: cherry-pick [`6b1b9bc`](https://redirect.github.com/nodejs/node/commit/6b1b9bca2a8) (zhoumingtao) [#&#8203;59283](https://redirect.github.com/nodejs/node/pull/59283) - \[[`e65b930aa7`](https://redirect.github.com/nodejs/node/commit/e65b930aa7)] - **deps**: V8: backport [`2e4c5cf`](https://redirect.github.com/nodejs/node/commit/2e4c5cf9b112) (Michaël Zasso) [#&#8203;60654](https://redirect.github.com/nodejs/node/pull/60654) - \[[`1b75a601f7`](https://redirect.github.com/nodejs/node/commit/1b75a601f7)] - **doc**: fix typo on child\_process.md (Angelo Gazzola) [#&#8203;60114](https://redirect.github.com/nodejs/node/pull/60114) - \[[`a2bcb217c6`](https://redirect.github.com/nodejs/node/commit/a2bcb217c6)] - **doc**: fix typo in section on microtask order (Tobias Nießen) [#&#8203;59932](https://redirect.github.com/nodejs/node/pull/59932) - \[[`2426d3f3ff`](https://redirect.github.com/nodejs/node/commit/2426d3f3ff)] - **doc**: add security escalation policy (Ulises Gascón) [#&#8203;59806](https://redirect.github.com/nodejs/node/pull/59806) - \[[`e7f6f04758`](https://redirect.github.com/nodejs/node/commit/e7f6f04758)] - **doc**: add Miles Guicent as triager (Miles Guicent) [#&#8203;59562](https://redirect.github.com/nodejs/node/pull/59562) - \[[`e51ef3f48b`](https://redirect.github.com/nodejs/node/commit/e51ef3f48b)] - **doc**: update install\_tools.bat free disk space (Stefan Stojanovic) [#&#8203;59579](https://redirect.github.com/nodejs/node/pull/59579) - \[[`8a504d900a`](https://redirect.github.com/nodejs/node/commit/8a504d900a)] - **doc**: fix missing link to the Error documentation in the `http` page (Alexander Makarenko) [#&#8203;59080](https://redirect.github.com/nodejs/node/pull/59080) - \[[`8c5c8aa71d`](https://redirect.github.com/nodejs/node/commit/8c5c8aa71d)] - **doc**: clarify experimental platform vulnerability policy (Matteo Collina) [#&#8203;59591](https://redirect.github.com/nodejs/node/pull/59591) - \[[`109c4bff77`](https://redirect.github.com/nodejs/node/commit/109c4bff77)] - **doc**: add security incident reponse plan (Rafael Gonzaga) [#&#8203;59470](https://redirect.github.com/nodejs/node/pull/59470) - \[[`4f004efdf3`](https://redirect.github.com/nodejs/node/commit/4f004efdf3)] - **doc**: add RafaelGSS as performance strategic lead (Rafael Gonzaga) [#&#8203;59445](https://redirect.github.com/nodejs/node/pull/59445) - \[[`caa2db4bac`](https://redirect.github.com/nodejs/node/commit/caa2db4bac)] - **doc**: fix links in test.md (Vas Sudanagunta) [#&#8203;58876](https://redirect.github.com/nodejs/node/pull/58876) - \[[`082e50d4a2`](https://redirect.github.com/nodejs/node/commit/082e50d4a2)] - **doc**: update the instruction on how to verify releases (Antoine du Hamel) [#&#8203;59113](https://redirect.github.com/nodejs/node/pull/59113) - \[[`19a66365d9`](https://redirect.github.com/nodejs/node/commit/19a66365d9)] - **doc**: clarify DEP0194 scope (Antoine du Hamel) [#&#8203;58504](https://redirect.github.com/nodejs/node/pull/58504) - \[[`db68cec4cb`](https://redirect.github.com/nodejs/node/commit/db68cec4cb)] - **doc**: deprecate HTTP/2 priority signaling (Matteo Collina) [#&#8203;58313](https://redirect.github.com/nodejs/node/pull/58313) - \[[`3b2368774f`](https://redirect.github.com/nodejs/node/commit/3b2368774f)] - **doc**: make Stability labels not sticky in Stability index (Livia Medeiros) [#&#8203;58291](https://redirect.github.com/nodejs/node/pull/58291) - \[[`960d05ad7d`](https://redirect.github.com/nodejs/node/commit/960d05ad7d)] - **doc**: add history entries to `--input-type` section (Antoine du Hamel) [#&#8203;58175](https://redirect.github.com/nodejs/node/pull/58175) - \[[`20616f1750`](https://redirect.github.com/nodejs/node/commit/20616f1750)] - **http2**: do not crash on mismatched ping buffer length (René) [#&#8203;60135](https://redirect.github.com/nodejs/node/pull/60135) - \[[`9eb94232c8`](https://redirect.github.com/nodejs/node/commit/9eb94232c8)] - **lib**: handle superscript variants on windows device (Rafael Gonzaga) [#&#8203;59261](https://redirect.github.com/nodejs/node/pull/59261) - \[[`dc58b4e35f`](https://redirect.github.com/nodejs/node/commit/dc58b4e35f)] - **meta**: move Michael to emeritus (Michael Dawson) [#&#8203;60070](https://redirect.github.com/nodejs/node/pull/60070) - \[[`d943cfb260`](https://redirect.github.com/nodejs/node/commit/d943cfb260)] - **meta**: bump actions/setup-node from 4.4.0 to 5.0.0 (dependabot\[bot]) [#&#8203;60093](https://redirect.github.com/nodejs/node/pull/60093) - \[[`de9a3aaf0f`](https://redirect.github.com/nodejs/node/commit/de9a3aaf0f)] - **meta**: bump step-security/harden-runner from 2.12.2 to 2.13.1 (dependabot\[bot]) [#&#8203;60094](https://redirect.github.com/nodejs/node/pull/60094) - \[[`b4b5d4a4d7`](https://redirect.github.com/nodejs/node/commit/b4b5d4a4d7)] - **meta**: bump ossf/scorecard-action from 2.4.2 to 2.4.3 (dependabot\[bot]) [#&#8203;60096](https://redirect.github.com/nodejs/node/pull/60096) - \[[`e5b4eee901`](https://redirect.github.com/nodejs/node/commit/e5b4eee901)] - **meta**: bump actions/setup-python from 5.6.0 to 6.0.0 (dependabot\[bot]) [#&#8203;60090](https://redirect.github.com/nodejs/node/pull/60090) - \[[`7cb032c2c1`](https://redirect.github.com/nodejs/node/commit/7cb032c2c1)] - **meta**: update devcontainer to the latest schema (Aviv Keller) [#&#8203;54347](https://redirect.github.com/nodejs/node/pull/54347) - \[[`bb108191aa`](https://redirect.github.com/nodejs/node/commit/bb108191aa)] - **meta**: call `create-release-post.yml` post release (Aviv Keller) [#&#8203;60366](https://redirect.github.com/nodejs/node/pull/60366) - \[[`2a11d50526`](https://redirect.github.com/nodejs/node/commit/2a11d50526)] - **module**: correctly detect top-level await in ambiguous contexts (Shima Ryuhei) [#&#8203;58646](https://redirect.github.com/nodejs/node/pull/58646) - \[[`144233b71a`](https://redirect.github.com/nodejs/node/commit/144233b71a)] - **process**: fix wrong asyncContext under unhandled-rejections=strict (Shima Ryuhei) [#&#8203;60103](https://redirect.github.com/nodejs/node/pull/60103) - \[[`409cb773a4`](https://redirect.github.com/nodejs/node/commit/409cb773a4)] - **repl**: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater) [#&#8203;59857](https://redirect.github.com/nodejs/node/pull/59857) - \[[`d1c9d80cac`](https://redirect.github.com/nodejs/node/commit/d1c9d80cac)] - **repl**: add isValidParentheses check before wrap input (Xuguang Mei) [#&#8203;59607](https://redirect.github.com/nodejs/node/pull/59607) - \[[`b8d145db2c`](https://redirect.github.com/nodejs/node/commit/b8d145db2c)] - **src**: fix order of CHECK\_NOT\_NULL/dereference (Tobias Nießen) [#&#8203;59487](https://redirect.github.com/nodejs/node/pull/59487) - \[[`2c8a73f95f`](https://redirect.github.com/nodejs/node/commit/2c8a73f95f)] - **src**: remove duplicate assignment of `O_EXCL` in node\_constants.cc (Daniel Osvaldo R) [#&#8203;59049](https://redirect.github.com/nodejs/node/pull/59049) - \[[`b1da374503`](https://redirect.github.com/nodejs/node/commit/b1da374503)] - **test**: fix typo of test-benchmark-readline.js (Deokjin Kim) [#&#8203;59993](https://redirect.github.com/nodejs/node/pull/59993) - \[[`4b4e38f497`](https://redirect.github.com/nodejs/node/commit/4b4e38f497)] - **test**: mark sea tests flaky on macOS x64 (Richard Lau) [#&#8203;60068](https://redirect.github.com/nodejs/node/pull/60068) - \[[`cbf4fc34c3`](https://redirect.github.com/nodejs/node/commit/cbf4fc34c3)] - **test**: skip more sea tests on Linux ppc64le (Richard Lau) [#&#8203;59755](https://redirect.github.com/nodejs/node/pull/59755) - \[[`9543facad7`](https://redirect.github.com/nodejs/node/commit/9543facad7)] - **test**: mark test-inspector-network-fetch as flaky again (Joyee Cheung) [#&#8203;59640](https://redirect.github.com/nodejs/node/pull/59640) - \[[`4f858d22ac`](https://redirect.github.com/nodejs/node/commit/4f858d22ac)] - **test**: skip test-fs-cp\* tests that are constantly failing on Windows (Joyee Cheung) [#&#8203;59637](https://redirect.github.com/nodejs/node/pull/59637) - \[[`3ec534dbe8`](https://redirect.github.com/nodejs/node/commit/3ec534dbe8)] - **test**: skip sea tests on Linux ppc64le (Richard Lau) [#&#8203;59563](https://redirect.github.com/nodejs/node/pull/59563) - \[[`a7a109f926`](https://redirect.github.com/nodejs/node/commit/a7a109f926)] - **test**: fix typos (Lee Jiho) [#&#8203;59330](https://redirect.github.com/nodejs/node/pull/59330) - \[[`fd9d43da46`](https://redirect.github.com/nodejs/node/commit/fd9d43da46)] - **test**: skip failing test on macOS 15.7+ (Antoine du Hamel) [#&#8203;60419](https://redirect.github.com/nodejs/node/pull/60419) - \[[`bc3ffbd713`](https://redirect.github.com/nodejs/node/commit/bc3ffbd713)] - **test\_runner**: fix isSkipped check in junit (Sungwon) [#&#8203;59414](https://redirect.github.com/nodejs/node/pull/59414) - \[[`0cace96472`](https://redirect.github.com/nodejs/node/commit/0cace96472)] - **test\_runner**: correct "already mocked" error punctuation placement (Jacob Smith) [#&#8203;58840](https://redirect.github.com/nodejs/node/pull/58840) - \[[`76001f9480`](https://redirect.github.com/nodejs/node/commit/76001f9480)] - **tools**: remove unused actions from `build-tarball.yml` (Antoine du Hamel) [#&#8203;59787](https://redirect.github.com/nodejs/node/pull/59787) - \[[`69904844bb`](https://redirect.github.com/nodejs/node/commit/69904844bb)] - **tools**: do not attempt to compress tgz archive (Antoine du Hamel) [#&#8203;59785](https://redirect.github.com/nodejs/node/pull/59785) - \[[`a6e7adb173`](https://redirect.github.com/nodejs/node/commit/a6e7adb173)] - **tools**: fix return value of try\_check\_compiler (theanarkh) [#&#8203;59434](https://redirect.github.com/nodejs/node/pull/59434) - \[[`6443ad2da5`](https://redirect.github.com/nodejs/node/commit/6443ad2da5)] - **tools**: drop deprecated `macos-13` runner (Richard Lau) [#&#8203;60679](https://redirect.github.com/nodejs/node/pull/60679) - \[[`45ec702ef7`](https://redirect.github.com/nodejs/node/commit/45ec702ef7)] - **tools**: fix `tools/make-v8.sh` for clang (Richard Lau) [#&#8203;59893](https://redirect.github.com/nodejs/node/pull/59893) - \[[`393ff7226e`](https://redirect.github.com/nodejs/node/commit/393ff7226e)] - **util**: fix numericSeparator with negative fractional numbers (sangwook) [#&#8203;59379](https://redirect.github.com/nodejs/node/pull/59379) - \[[`9e8beff0f4`](https://redirect.github.com/nodejs/node/commit/9e8beff0f4)] - **util**: fix error's namespaced node\_modules highlighting using inspect (Ruben Bridgewater) [#&#8203;59446](https://redirect.github.com/nodejs/node/pull/59446) ### [`v20.19.5`](https://redirect.github.com/nodejs/node/releases/tag/v20.19.5): 2025-09-03, Version 20.19.5 &#x27;Iron&#x27; (LTS), @&#8203;marco-ippolito [Compare Source](https://redirect.github.com/nodejs/node/compare/v20.19.4...v20.19.5) ##### Notable Changes - \[[`f5b293ad48`](https://redirect.github.com/nodejs/node/commit/f5b293ad48)] - **doc**: add JonasBa to collaborators (Jonas Badalic) [#&#8203;58355](https://redirect.github.com/nodejs/node/pull/58355) - \[[`4e6ae787c6`](https://redirect.github.com/nodejs/node/commit/4e6ae787c6)] - **doc**: add puskin to collaborators (Giovanni Bucci) [#&#8203;58308](https://redirect.github.com/nodejs/node/pull/58308) - \[[`d06db658fc`](https://redirect.github.com/nodejs/node/commit/d06db658fc)] - **doc**: add Filip Skokan to TSC (Rafael Gonzaga) [#&#8203;58499](https://redirect.github.com/nodejs/node/pull/58499) - \[[`3c6206cac9`](https://redirect.github.com/nodejs/node/commit/3c6206cac9)] - **doc**: add [@&#8203;geeksilva97](https://redirect.github.com/geeksilva97) to collaborators (Edy Silva) [#&#8203;57241](https://redirect.github.com/nodejs/node/pull/57241) ##### Commits - \[[`ea20403467`](https://redirect.github.com/nodejs/node/commit/ea20403467)] - **build**: fix uvwasi pkgname (Antoine du Hamel) [#&#8203;58270](https://redirect.github.com/nodejs/node/pull/58270) - \[[`c647aa4b30`](https://redirect.github.com/nodejs/node/commit/c647aa4b30)] - **build**: fix pointer compression builds (Joyee Cheung) [#&#8203;58171](https://redirect.github.com/nodejs/node/pull/58171) - \[[`d2c5e609ae`](https://redirect.github.com/nodejs/node/commit/d2c5e609ae)] - **build**: disable v8\_enable\_pointer\_compression\_shared\_cage on non-64bit (Shelley Vohr) [#&#8203;58867](https://redirect.github.com/nodejs/node/pull/58867) - \[[`84d5c4d244`](https://redirect.github.com/nodejs/node/commit/84d5c4d244)] - **build**: search for libnode.so in multiple places (Jan Staněk) [#&#8203;58213](https://redirect.github.com/nodejs/node/pull/58213) - \[[`068c439552`](https://redirect.github.com/nodejs/node/commit/068c439552)] - **crypto**: fix SHAKE128/256 breaking change introduced with OpenSSL 3.4 (Filip Skokan) [#&#8203;58942](https://redirect.github.com/nodejs/node/pull/58942) - \[[`edff105c34`](https://redirect.github.com/nodejs/node/commit/edff105c34)] - **debugger**: fix behavior of plain object exec in debugger repl (Dario Piotrowicz) [#&#8203;57498](https://redirect.github.com/nodejs/node/pull/57498) - \[[`0473e35b7f`](https://redirect.github.com/nodejs/node/commit/0473e35b7f)] - **deps**: update zlib to 1.3.1-470d3a2 (Node.js GitHub Bot) [#&#8203;58628](https://redirect.github.com/nodejs/node/pull/58628) - \[[`1218dbbea5`](https://redirect.github.com/nodejs/node/commit/1218dbbea5)] - **deps**: update zlib to 1.3.0.1-motley-780819f (Node.js GitHub Bot) [#&#8203;57768](https://redirect.github.com/nodejs/node/pull/57768) - \[[`0e3cd9ec00`](https://redirect.github.com/nodejs/node/commit/0e3cd9ec00)] - **deps**: update zlib to 1.3.0.1-motley-788cb3c (Node.js GitHub Bot) [#&#8203;56655](https://redirect.github.com/nodejs/node/pull/56655) - \[[`a194dd9bd4`](https://redirect.github.com/nodejs/node/commit/a194dd9bd4)] - **deps**: update archs files for openssl-3.0.16 (Node.js GitHub Bot) [#&#8203;57335](https://redirect.github.com/nodejs/node/pull/57335) - \[[`cc9b79ca70`](https://redirect.github.com/nodejs/node/commit/cc9b79ca70)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.16 (Node.js GitHub Bot) [#&#8203;57335](https://redirect.github.com/nodejs/node/pull/57335) - \[[`82c46d5358`](https://redirect.github.com/nodejs/node/commit/82c46d5358)] - **deps**: update cjs-module-lexer to 2.1.0 (Node.js GitHub Bot) [#&#8203;57180](https://redirect.github.com/nodejs/node/pull/57180) - \[[`43e3f9b26b`](https://redirect.github.com/nodejs/node/commit/43e3f9b26b)] - **deps**: update cjs-module-lexer to 2.0.0 (Michael Dawson) [#&#8203;56855](https://redirect.github.com/nodejs/node/pull/56855) - \[[`91282ff16b`](https://redirect.github.com/nodejs/node/commit/91282ff16b)] - **deps**: update corepack to 0.33.0 (Node.js GitHub Bot) [#&#8203;58566](https://redirect.github.com/nodejs/node/pull/58566) - \[[`b76bca6f38`](https://redirect.github.com/nodejs/node/commit/b76bca6f38)] - **deps**: update acorn to 8.15.0 (Node.js GitHub Bot) [#&#8203;58711](https://redirect.github.com/nodejs/node/pull/58711) - \[[`ae11481011`](https://redirect.github.com/nodejs/node/commit/ae11481011)] - **deps**: update acorn to 8.14.1 (Node.js GitHub Bot) [#&#8203;57382](https://redirect.github.com/nodejs/node/pull/57382) - \[[`142d701201`](https://redirect.github.com/nodejs/node/commit/142d701201)] - **deps**: update minimatch to 10.0.3 (Node.js GitHub Bot) [#&#8203;58712](https://redirect.github.com/nodejs/node/pull/58712) - \[[`fee082d684`](https://redirect.github.com/nodejs/node/commit/fee082d684)] - **deps**: update llhttp to 9.3.0 (Fedor Indutny) [#&#8203;58144](https://redirect.github.com/nodejs/node/pull/58144) - \[[`c06f6f3f05`](https://redirect.github.com/nodejs/node/commit/c06f6f3f05)] - **dns**: remove redundant code using common variable (Deokjin Kim) [#&#8203;57386](https://redirect.github.com/nodejs/node/pull/57386) - \[[`cded8e7e77`](https://redirect.github.com/nodejs/node/commit/cded8e7e77)] - **dns**: fix parse memory leaky (theanarkh) [#&#8203;58973](https://redirect.github.com/nodejs/node/pull/58973) - \[[`182ae67233`](https://redirect.github.com/nodejs/node/commit/182ae67233)] - **dns**: fix dns query cache implementation (Ethan Arrowood) [#&#8203;58404](https://redirect.github.com/nodejs/node/pull/58404) - \[[`621b66a297`](https://redirect.github.com/nodejs/node/commit/621b66a297)] - **doc**: add review guidelines for collaborator nominations (Antoine du Hamel) [#&#8203;57449](https://redirect.github.com/nodejs/node/pull/57449) - \[[`b1009b5b72`](https://redirect.github.com/nodejs/node/commit/b1009b5b72)] - **doc**: explicit mention arbitrary code execution as a vuln (Rafael Gonzaga) [#&#8203;57426](https://redirect.github.com/nodejs/node/pull/57426) - \[[`f5b293ad48`](https://redirect.github.com/nodejs/node/commit/f5b293ad48)] - **doc**: add JonasBa to collaborators (Jonas Badalic) [#&#8203;58355](https://redirect.github.com/nodejs/node/pull/58355) - \[[`4e6ae787c6`](https://redirect.github.com/nodejs/node/commit/4e6ae787c6)] - **doc**: add puskin to collaborators (Giovanni Bucci) [#&#8203;58308](https://redirect.github.com/nodejs/node/pull/58308) - \[[`530473f479`](https://redirect.github.com/nodejs/node/commit/530473f479)] - **doc**: add ovflowd back to core collaborators (Claudio W.) [#&#8203;58911](https://redirect.github.com/nodejs/node/pull/58911) - \[[`38e8bbc131`](https://redirect.github.com/nodejs/node/commit/38e8bbc131)] - **doc**: add info on how project manages social media (Michael Dawson) [#&#8203;57318](https://redirect.github.com/nodejs/node/pull/57318) - \[[`d06bb4dcc2`](https://redirect.github.com/nodejs/node/commit/d06bb4dcc2)] - **doc**: ping nodejs/tsc for each security pull request (Rafael Gonzaga) [#&#8203;57309](https://redirect.github.com/nodejs/node/pull/57309) - \[[`d06db658fc`](https://redirect.github.com/nodejs/node/commit/d06db658fc)] - **doc**: add Filip Skokan to TSC (Rafael Gonzaga) [#&#8203;58499](https://redirect.github.com/nodejs/node/pull/58499) - \[[`8c3bc156ed`](https://redirect.github.com/nodejs/node/commit/8c3bc156ed)] - **doc**: clarify `path.isAbsolute` is not path traversal mitigation (Eric Fortis) [#&#8203;57073](https://redirect.github.com/nodejs/node/pull/57073) - \[[`e688410bda`](https://redirect.github.com/nodejs/node/commit/e688410bda)] - **doc**: fix rendering of DEP0174 description (David Sanders) [#&#8203;56835](https://redirect.github.com/nodejs/node/pull/56835) - \[[`e6a0c6a0fa`](https://redirect.github.com/nodejs/node/commit/e6a0c6a0fa)] - **doc**: add missing assert return types (Colin Ihrig) [#&#8203;57219](https://redirect.github.com/nodejs/node/pull/57219) - \[[`026b3cab6a`](https://redirect.github.com/nodejs/node/commit/026b3cab6a)] - **doc**: add 1ilsang to triage team (1ilsang) [#&#8203;57183](https://redirect.github.com/nodejs/node/pull/57183) - \[[`3c6206cac9`](https://redirect.github.com/nodejs/node/commit/3c6206cac9)] - **doc**: add [@&#8203;geeksilva97](https://redirect.github.com/geeksilva97) to collaborators (Edy Silva) [#&#8203;57241](https://redirect.github.com/nodejs/node/pull/57241) - \[[`ef3a4675c7`](https://redirect.github.com/nodejs/node/commit/ef3a4675c7)] - **doc**: fix web.libera.chat link in pull-requests.md (Samuel Bronson) [#&#8203;57076](https://redirect.github.com/nodejs/node/pull/57076) - \[[`1db42b76f7`](https://redirect.github.com/nodejs/node/commit/1db42b76f7)] - **doc**: remove buffered flag from performance hooks examples (Pavel Romanov) [#&#8203;52607](https://redirect.github.com/nodejs/node/pull/52607) - \[[`b73a1356ce`](https://redirect.github.com/nodejs/node/commit/b73a1356ce)] - **doc**: add `module namespace object` links (Dario Piotrowicz) [#&#8203;57093](https://redirect.github.com/nodejs/node/pull/57093) - \[[`09368db20f`](https://redirect.github.com/nodejs/node/commit/09368db20f)] - **doc**: disambiguate pseudo-code statement (Dario Piotrowicz) [#&#8203;57092](https://redirect.github.com/nodejs/node/pull/57092) - \[[`2c3dc569a1`](https://redirect.github.com/nodejs/node/commit/2c3dc569a1)] - **doc**: fix wrong articles used to address modules (Dario Piotrowicz) [#&#8203;57090](https://redirect.github.com/nodejs/node/pull/57090) - \[[`cd8259cb4e`](https://redirect.github.com/nodejs/node/commit/cd8259cb4e)] - **doc**: `modules.md`: fix `distance` definition (Alexander “weej” Jones) [#&#8203;57046](https://redirect.github.com/nodejs/node/pull/57046) - \[[`7b0ea9ab2d`](https://redirect.github.com/nodejs/node/commit/7b0ea9ab2d)] - **doc**: fix wrong verb form (Dario Piotrowicz) [#&#8203;57091](https://redirect.github.com/nodejs/node/pull/57091) - \[[`14fcfc242b`](https://redirect.github.com/nodejs/node/commit/14fcfc242b)] - **doc**: add a note about `require('../common')` in testing documentation (Aditi) [#&#8203;56953](https://redirect.github.com/nodejs/node/pull/56953) - \[[`bc7d18b6ea`](https://redirect.github.com/nodejs/node/commit/bc7d18b6ea)] - **doc**: recommend writing tests in new files and including comments (Joyee Cheung) [#&#8203;57028](https://redirect.github.com/nodejs/node/pull/57028) - \[[`acd4d7f269`](https://redirect.github.com/nodejs/node/commit/acd4d7f269)] - **doc**: improve documentation on argument validation (Aditi) [#&#8203;56954](https://redirect.github.com/nodejs/node/pull/56954) - \[[`4cd6b3ca73`](https://redirect.github.com/nodejs/node/commit/4cd6b3ca73)] - **doc**: buffer: fix typo on `Buffer.copyBytesFrom(` `offset` option (tpoisseau) [#&#8203;57015](https://redirect.github.com/nodejs/node/pull/57015) - \[[`01220607f2`](https://redirect.github.com/nodejs/node/commit/01220607f2)] - **doc**: update cleanup to trust on vuln db automation (Rafael Gonzaga) [#&#8203;57004](https://redirect.github.com/nodejs/node/pull/57004) - \[[`77a0505a32`](https://redirect.github.com/nodejs/node/commit/77a0505a32)] - **doc**: update post sec release process (Rafael Gonzaga) [#&#8203;56907](https://redirect.github.com/nodejs/node/pull/56907) - \[[`77dbcfce5f`](https://redirect.github.com/nodejs/node/commit/77dbcfce5f)] - **doc**: add section about using npx with permission model (Rafael Gonzaga) [#&#8203;56539](https://redirect.github.com/nodejs/node/pull/56539) - \[[`73e51407b7`](https://redirect.github.com/nodejs/node/commit/73e51407b7)] - **doc**: remove RedYetiDev from triagers team (Aviv Keller) [#&#8203;55947](https://redirect.github.com/nodejs/node/pull/55947) - \[[`9a36cbb792`](https://redirect.github.com/nodejs/node/commit/9a36cbb792)] - **doc**: fix relative path mention in --allow-fs (Rafael Gonzaga) [#&#8203;55791](https://redirect.github.com/nodejs/node/pull/55791) - \[[`04d9c5baeb`](https://redirect.github.com/nodejs/node/commit/04d9c5baeb)] - **doc**: add scroll margin to links (Roman Reiss) [#&#8203;58982](https://redirect.github.com/nodejs/node/pull/58982) - \[[`959a67f6ff`](https://redirect.github.com/nodejs/node/commit/959a67f6ff)] - **doc**: make Stability labels not sticky in Stability index (Livia Medeiros) [#&#8203;58291](https://redirect.github.com/nodejs/node/pull/58291) - \[[`8757a5532f`](https://redirect.github.com/nodejs/node/commit/8757a5532f)] - **doc**: update release key for aduh95 (Antoine du Hamel) [#&#8203;58877](https://redirect.github.com/nodejs/node/pull/58877) - \[[`6fa0626327`](https://redirect.github.com/nodejs/node/commit/6fa0626327)] - **doc,src,test**: fix typos (Noritaka Kobayashi) [#&#8203;58477](https://redirect.github.com/nodejs/node/pull/58477) - \[[`9991788e4a`](https://redirect.github.com/nodejs/node/commit/9991788e4a)] - **http**: coerce content-length to number (Marco Ippolito) [#&#8203;57458](https://redirect.github.com/nodejs/node/pull/57458) - \[[`ff5cf8a428`](https://redirect.github.com/nodejs/node/commit/ff5cf8a428)] - **http2**: fix check for `frame->hd.type` (hanguanqiang) [#&#8203;57644](https://redirect.github.com/nodejs/node/pull/57644) - \[[`2f333b6c51`](https://redirect.github.com/nodejs/node/commit/2f333b6c51)] - **lib**: optimize `prepareStackTrace` on builtin frames (Chengzhong Wu) [#&#8203;56299](https://redirect.github.com/nodejs/node/pull/56299) - \[[`cdf985071f`](https://redirect.github.com/nodejs/node/commit/cdf985071f)] - **lib**: suppress source map lookup exceptions (Chengzhong Wu) [#&#8203;56299](https://redirect.github.com/nodejs/node/pull/56299) - \[[`faa08b14ed`](https://redirect.github.com/nodejs/node/commit/faa08b14ed)] - **lib**: fixup incorrect argument order in assertEncoding (James M Snell) [#&#8203;57177](https://redirect.github.com/nodejs/node/pull/57177) - \[[`a683cd1232`](https://redirect.github.com/nodejs/node/commit/a683cd1232)] - **meta**: add IlyasShabi to collaborators (Ilyas Shabi) [#&#8203;58916](https://redirect.github.com/nodejs/node/pull/58916) - \[[`b145bb28aa`](https://redirect.github.com/nodejs/node/commit/b145bb28aa)] - **meta**: bump codecov/codecov-action from 5.4.2 to 5.4.3 (dependabot\[bot]) [#&#8203;58551](https://redirect.github.com/nodejs/node/pull/58551) - \[[`2c59789001`](https://redirect.github.com/nodejs/node/commit/2c59789001)] - **meta**: bump ossf/scorecard-action from 2.4.1 to 2.4.2 (dependabot\[bot]) [#&#8203;58550](https://redirect.github.com/nodejs/node/pull/58550) - \[[`4095337e96`](https://redirect.github.com/nodejs/node/commit/4095337e96)] - **meta**: bump rtCamp/action-slack-notify from 2.3.2 to 2.3.3 (dependabot\[bot]) [#&#8203;58108](https://redirect.github.com/nodejs/node/pull/58108) - \[[`631fed8e39`](https://redirect.github.com/nodejs/node/commit/631fed8e39)] - **meta**: move one or more collaborators to emeritus (Node.js GitHub Bot) [#&#8203;58456](https://redirect.github.com/nodejs/node/pull/58456) - \[[`7d2f7180b6`](https://redirect.github.com/nodejs/node/commit/7d2f7180b6)] - **meta**: bump codecov/codecov-action from 5.4.0 to 5.4.2 (dependabot\[bot]) [#&#8203;58110](https://redirect.github.com/nodejs/node/pull/58110) - \[[`1558551ea5`](https://redirect.github.com/nodejs/node/commit/1558551ea5)] - **meta**: bump actions/download-artifact from 4.2.1 to 4.3.0 (dependabot\[bot]) [#&#8203;58106](https://redirect.github.com/nodejs/node/pull/58106) - \[[`e1f12fe737`](https://redirect.github.com/nodejs/node/commit/e1f12fe737)] - **meta**: ignore mailmap changes in linux ci (Jonas Badalic) [#&#8203;58356](https://redirect.github.com/nodejs/node/pull/58356) - \[[`1b78eb1313`](https://redirect.github.com/nodejs/node/commit/1b78eb1313)] - **meta**: bump actions/setup-node from 4.3.0 to 4.4.0 (dependabot\[bot]) [#&#8203;58111](https://redirect.github.com/nodejs/node/pull/58111) - \[[`2b8449c39a`](https://redirect.github.com/nodejs/node/commit/2b8449c39a)] - **meta**: bump actions/setup-python from 5.5.0 to 5.6.0 (dependabot\[bot]) [#&#8203;58107](https://redirect.github.com/nodejs/node/pull/58107) - \[[`833b70bbc5`](https://redirect.github.com/nodejs/node/commit/833b70bbc5)] - **meta**: allow penetration testing on live system with prior authorization (Matteo Collina) [#&#8203;57966](https://redirect.github.com/nodejs/node/pull/57966) - \[[`c6a88561f5`](https://redirect.github.com/nodejs/node/commit/c6a88561f5)] - **meta**: bump actions/setup-python from 5.4.0 to 5.5.0 (dependabot\[bot]) [#&#8203;57718](https://redirect.github.com/nodejs/node/pull/57718) - \[[`9046ef4fb3`](https://redirect.github.com/nodejs/node/commit/9046ef4fb3)] - **meta**: bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (dependabot\[bot]) [#&#8203;57717](https://redirect.github.com/nodejs/node/pull/57717) - \[[`46388a4e2a`](https://redirect.github.com/nodejs/node/commit/46388a4e2a)] - **meta**: bump actions/cache from 4.2.2 to 4.2.3 (dependabot\[bot]) [#&#8203;57715](https://redirect.github.com/nodejs/node/pull/57715) - \[[`d3970685bd`](https://redirect.github.com/nodejs/node/commit/d3970685bd)] - **meta**: bump actions/setup-node from 4.2.0 to 4.3.0 (dependabot\[bot]) [#&#8203;57714](https://redirect.github.com/nodejs/node/pull/57714) - \[[`47004ef37f`](https://redirect.github.com/nodejs/node/commit/47004ef37f)] - **meta**: bump actions/upload-artifact from 4.6.1 to 4.6.2 (dependabot\[bot]) [#&#8203;57713](https://redirect.github.com/nodejs/node/pull/57713) - \[[`4abe83ec03`](https://redirect.github.com/nodejs/node/commit/4abe83ec03)] - **meta**: add some clarification to the nomination process (James M Snell) [#&#8203;57503](https://redirect.github.com/nodejs/node/pull/57503) - \[[`45e9b88363`](https://redirect.github.com/nodejs/node/commit/45e9b88363)] - **meta**: remove collaborator self-nomination (Rich Trott) [#&#8203;57537](https://redirect.github.com/nodejs/node/pull/57537) - \[[`d10949b7d8`](https://redirect.github.com/nodejs/node/commit/d10949b7d8)] - **meta**: edit collaborator nomination process (Antoine du Hamel) [#&#8203;57483](https://redirect.github.com/nodejs/node/pull/57483) - \[[`704562fb7a`](https://redirect.github.com/nodejs/node/commit/704562fb7a)] - **meta**: move ovflowd to emeritus (Claudio W.) [#&#8203;57443](https://redirect.github.com/nodejs/node/pull/57443) - \[[`3f981b8537`](https://redirect.github.com/nodejs/node/commit/3f981b8537)] - **meta**: bump codecov/codecov-action from 5.3.1 to 5.4.0 (dependabot\[bot]) [#&#8203;57257](https://redirect.github.com/nodejs/node/pull/57257) - \[[`7e1ff7b332`](https://redirect.github.com/nodejs/node/commit/7e1ff7b332)] - **meta**: bump ossf/scorecard-action from 2.4.0 to 2.4.1 (dependabot\[bot]) [#&#8203;57253](https://redirect.github.com/nodejs/node/pull/57253) - \[[`8d4ec412b9`](https://redirect.github.com/nodejs/node/commit/8d4ec412b9)] - **meta**: move RaisinTen back to collaborators, triagers and SEA champion (Darshan Sen) [#&#8203;57292](https://redirect.github.com/nodejs/node/pull/57292) - \[[`cc2abb5d17`](https://redirect.github.com/nodejs/node/commit/cc2abb5d17)] - **meta**: bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (dependabot\[bot]) [#&#8203;57259](https://redirect.github.com/nodejs/node/pull/57259) - \[[`4fad2b8758`](https://redirect.github.com/nodejs/node/commit/4fad2b8758)] - **meta**: bump actions/cache from 4.2.0 to 4.2.2 (dependabot\[bot]) [#&#8203;57256](https://redirect.github.com/nodejs/node/pull/57256) - \[[`5f5bb8b986`](https://redirect.github.com/nodejs/node/commit/5f5bb8b986)] - **meta**: bump actions/upload-artifact from 4.6.0 to 4.6.1 (dependabot\[bot]) [#&#8203;57255](https://redirect.github.com/nodejs/node/pull/57255) - \[[`e949359a56`](https://redirect.github.com/nodejs/node/commit/e949359a56)] - **meta**: bump `actions/setup-python` from 5.3.0 to 5.4.0 (dependabot\[bot]) [#&#8203;56867](https://redirect.github.com/nodejs/node/pull/56867) - \[[`d3c5ad7510`](https://redirect.github.com/nodejs/node/commit/d3c5ad7510)] - **meta**: bump `peter-evans/create-pull-request` from 7.0.5 to 7.0.6 (dependabot\[bot]) [#&#8203;56866](https://redirect.github.com/nodejs/node/pull/56866) - \[[`56decfe2d1`](https://redirect.github.com/nodejs/node/commit/56decfe2d1)] - **meta**: bump `codecov/codecov-action` from 5.0.7 to 5.3.1 (dependabot\[bot]) [#&#8203;56864](https://redirect.github.com/nodejs/node/pull/56864) - \[[`52e518444d`](https://redirect.github.com/nodejs/node/commit/52e518444d)] - **meta**: bump `actions/cache` from 4.1.2 to 4.2.0 (dependabot\[bot]) [#&#8203;56862](https://redirect.github.com/nodejs/node/pull/56862) - \[[`9cac93d9c3`](https://redirect.github.com/nodejs/node/commit/9cac93d9c3)] - **meta**: bump `actions/stale` from 9.0.0 to 9.1.0 (dependabot\[bot]) [#&#8203;56860](https://redirect.github.com/nodejs/node/pull/56860) - \[[`ecf4252f7c`](https://redirect.github.com/nodejs/node/commit/ecf4252f7c)] - **meta**: update last name for jkrems (Jan Martin) [#&#8203;57006](https://redirect.github.com/nodejs/node/pull/57006) - \[[`e8beaaaedf`](https://redirect.github.com/nodejs/node/commit/e8beaaaedf)] - **meta**: bump `actions/upload-artifact` from 4.4.3 to 4.6.0 (dependabot\[bot]) [#&#8203;56861](https://redirect.github.com/nodejs/node/pull/56861) - \[[`5462c257f8`](https://redirect.github.com/nodejs/node/commit/5462c257f8)] - **meta**: bump `actions/setup-node` from 4.1.0 to 4.2.0 (dependabot\[bot]) [#&#8203;56868](https://redirect.github.com/nodejs/node/pull/56868) - \[[`89c37891a0`](https://redirect.github.com/nodejs/node/commit/89c37891a0)] - **meta**: move one or more collaborators to emeritus (Node.js GitHub Bot) [#&#8203;56889](https://redirect.github.com/nodejs/node/pull/56889) - \[[`2a0175c291`](https://redirect.github.com/nodejs/node/commit/2a0175c291)] - **meta**: add [@&#8203;nodejs/url](https://redirect.github.com/nodejs/url) as codeowner (Chengzhong Wu) [#&#8203;56783](https://redirect.github.com/nodejs/node/pull/56783) - \[[`c12aae1e78`](https://redirect.github.com/nodejs/node/commit/c12aae1e78)] - **meta**: bump github/codeql-action from 3.28.18 to 3.29.2 (dependabot\[bot]) [#&#8203;58922](https://redirect.github.com/nodejs/node/pull/58922) - \[[`4ef09990f1`](https://redirect.github.com/nodejs/node/commit/4ef09990f1)] - **meta**: bump github/codeql-action from 3.28.16 to 3.28.18 (dependabot\[bot]) [#&#8203;58552](https://redirect.github.com/nodejs/node/pull/58552) - \[[`889654eb2c`](https://redirect.github.com/nodejs/node/commit/889654eb2c)] - **meta**: bump github/codeql-action from 3.28.11 to 3.28.16 (dependabot\[bot]) [#&#8203;58112](https://redirect.github.com/nodejs/node/pull/58112) - \[[`091e5c1bb9`](https://redirect.github.com/nodejs/node/commit/091e5c1bb9)] - **meta**: bump github/codeql-action from 3.28.10 to 3.28.13 (dependabot\[bot]) [#&#8203;57716](https://redirect.github.com/nodejs/node/pull/57716) - \[[`01415153de`](https://redirect.github.com/nodejs/node/commit/01415153de)] - **meta**: bump github/codeql-action from 3.28.8 to 3.28.10 (dependabot\[bot]) [#&#8203;57254](https://redirect.github.com/nodejs/node/pull/57254) - \[[`72ea8aac34`](https://redirect.github.com/nodejs/node/commit/72ea8aac34)] - **meta**: bump `github/codeql-action` from 3.27.5 to 3.28.8 (dependabot\[bot]) [#&#8203;56859](https://redirect.github.com/nodejs/node/pull/56859) - \[[`99a271e588`](https://redirect.github.com/nodejs/node/commit/99a271e588)] - **meta**: bump step-security/harden-runner from 2.12.0 to 2.12.2 (dependabot\[bot]) [#&#8203;58923](https://redirect.github.com/nodejs/node/pull/58923) - \[[`b4c4c02490`](https://redirect.github.com/nodejs/node/commit/b4c4c02490)] - **meta**: bump step-security/harden-runner from 2.11.0 to 2.12.0 (dependabot\[bot]) [#&#8203;58109](https://redirect.github.com/nodejs/node/pull/58109) - \[[`5361bb9157`](https://redirect.github.com/nodejs/node/commit/5361bb9157)] - **meta**: bump step-security/harden-runner from 2.10.4 to 2.11.0 (dependabot\[bot]) [#&#8203;57258](https://redirect.github.com/nodejs/node/pull/57258) - \[[`28e33acf30`](https://redirect.github.com/nodejs/node/commit/28e33acf30)] - **meta**: bump `step-security/harden-runner` from 2.10.2 to 2.10.4 (dependabot\[bot]) [#&#8203;56863](https://redirect.github.com/nodejs/node/pull/56863) - \[[`fad773cede`](https://redirect.github.com/nodejs/node/commit/fad773cede)] - **module**: throw error when re-runing errored module jobs (Joyee Cheung) [#&#8203;58957](https://redirect.github.com/nodejs/node/pull/58957) - \[[`2531185423`](https://redirect.github.com/nodejs/node/commit/2531185423)] - **module**: allow cycles in require() in the CJS handling in ESM loader (Joyee Cheung) [#&#8203;58598](https://redirect.github.com/nodejs/node/pull/58598) - \[[`ed43b69689`](https://redirect.github.com/nodejs/node/commit/ed43b69689)] - **module**: clarify cjs global-like error on ModuleJobSync (Carlos Espa) [#&#8203;56491](https://redirect.github.com/nodejs/node/pull/56491) - \[[`6e02db1b12`](https://redirect.github.com/nodejs/node/commit/6e02db1b12)] - **module**: handle instantiated async module jobs in require(esm) (Joyee Cheung) [#&#8203;58067](https://redirect.github.com/nodejs/node/pull/58067) - \[[`badba50d30`](https://redirect.github.com/nodejs/node/commit/badba50d30)] - **module**: fix incorrect formatting in require(esm) cycle error message (haykam821) [#&#8203;57453](https://redirect.github.com/nodejs/node/pull/57453) - \[[`939ecf8906`](https://redirect.github.com/nodejs/node/commit/939ecf8906)] - **module**: handle cached linked async jobs in require(esm) (Joyee Cheung) [#&#8203;57187](https://redirect.github.com/nodejs/node/pull/57187) - \[[`ba7f8a0353`](https://redirect.github.com/nodejs/node/commit/ba7f8a0353)] - **module**: improve error message from asynchronicity in require(esm) (Joyee Cheung) [#&#8203;57126](https://redirect.github.com/nodejs/node/pull/57126) - \[[`c1e7fa2586`](https://redirect.github.com/nodejs/node/commit/c1e7fa2586)] - **module**: handle .mjs in .js handler in CommonJS (Joyee Cheung) [#&#8203;55590](https://redirect.github.com/nodejs/node/pull/55590) - \[[`41f3dfd21b`](https://redirect.github.com/nodejs/node/commit/41f3dfd21b)] - **module**: fix require.resolve() crash on non-string paths (Aditi) [#&#8203;56942](https://redirect.github.com/nodejs/node/pull/56942) - \[[`043dcdd628`](https://redirect.github.com/nodejs/node/commit/043dcdd628)] - **os**: fix GetInterfaceAddresses memory lieaky (theanarkh) [#&#8203;58940](https://redirect.github.com/nodejs/node/pull/58940) - \[[`9b74e9bfd9`](https://redirect.github.com/nodejs/node/commit/9b74e9bfd9)] - **permission**: ignore internalModuleStat on module loading (Rafael Gonzaga) [#&#8203;55797](https://redirect.github.com/nodejs/node/pull/55797) - \[[`611a147b45`](https://redirect.github.com/nodejs/node/commit/611a147b45)] - **readline**: fix unresolved promise on abortion (Daniel Venable) [#&#8203;54030](https://redirect.github.com/nodejs/node/pull/54030) - \[[`f891ae3421`](https://redirect.github.com/nodejs/node/commit/f891ae3421)] - **repl**: avoid deprecated `require.extensions` in tab completion (baki gul) [#&#8203;58653](https://redirect.github.com/nodejs/node/pull/58653) - \[[`7ba44290bf`](https://redirect.github.com/nodejs/node/commit/7ba44290bf)] - **repl**: fix tab completion not working with computer string properties (Dario Piotrowicz) [#&#8203;58709](https://redirect.github.com/nodejs/node/pull/58709) - \[[`eb842048b2`](https://redirect.github.com/nodejs/node/commit/eb842048b2)] - **src**: do not format single string argument for THROW\_ERR\_\* (Joyee Cheung) [#&#8203;57126](https://redirect.github.com/nodejs/node/pull/57126) - \[[`4f004937ec`](https://redirect.github.com/nodejs/node/commit/4f004937ec)] - **src**: fixup errorhandling more in various places (James M Snell) [#&#8203;57852](https://redirect.github.com/nodejs/node/pull/57852) - \[[`5daa7fe2e2`](https://redirect.github.com/nodejs/node/commit/5daa7fe2e2)] - **src**: fix module buffer allocation (X-BW) [#&#8203;57738](https://redirect.github.com/nodejs/node/pull/57738) - \[[`586b1be11b`](https://redirect.github.com/nodejs/node/commit/586b1be11b)] - **src**: fix build when using shared simdutf (Antoine du Hamel) [#&#8203;58407](https://redirect.github.com/nodejs/node/pull/58407) - \[[`563e61f012`](https://redirect.github.com/nodejs/node/commit/563e61f012)] - **src**: fix possible dereference of null pointer (Eusgor) [#&#8203;58459](https://redirect.github.com/nodejs/node/pull/58459) - \[[`cbec07ea0b`](https://redirect.github.com/nodejs/node/commit/cbec07ea0b)] - **src**: fix FIPS init error handling (Tobias Nießen) [#&#8203;58379](https://redirect.github.com/nodejs/node/pull/58379) - \[[`80fb80e71b`](https://redirect.github.com/nodejs/node/commit/80fb80e71b)] - **src**: fix -Wunreachable-code in src/node\_api.cc (Shelley Vohr) [#&#8203;58901](https://redirect.github.com/nodejs/node/pull/58901) - \[[`5e97719860`](https://redirect.github.com/nodejs/node/commit/5e97719860)] - **test**: skip test-http-imports on macos (Marco Ippolito) [#&#8203;59745](https://redirect.github.com/nodejs/node/pull/59745) - \[[`69c43bdfcc`](https://redirect.github.com/nodejs/node/commit/69c43bdfcc)] - **test**: fix internet/test-dns (Michaël Zasso) [#&#8203;59660](https://redirect.github.com/nodejs/node/pull/59660) - \[[`6fd58e0338`](https://redirect.github.com/nodejs/node/commit/6fd58e0338)] - **tools**: update coverage GitHub Actions to fixed version (Rich Trott) [#&#8203;59512](https://redirect.github.com/nodejs/node/pull/59512) - \[[`eb7bbce73e`](https://redirect.github.com/nodejs/node/commit/eb7bbce73e)] - **tools**: disable failing coverage jobs (Antoine du Hamel) [#&#8203;58770](https://redirect.github.com/nodejs/node/pull/58770) - \[[`65b1669936`](https://redirect.github.com/nodejs/node/commit/65b1669936)] - **util**: fix formatting of objects with built-in Symbol.toPrimitive (Shima Ryuhei) [#&#8203;57832](https://redirect.github.com/nodejs/node/pull/57832) - \[[`8a29f13bec`](https://redirect.github.com/nodejs/node/commit/8a29f13bec)] - **util**: fix parseEnv incorrectly splitting multiple ‘=‘ in value (HEESEUNG) [#&#8203;57421](https://redirect.github.com/nodejs/node/pull/57421) - \[[`077d5020c4`](https://redirect.github.com/nodejs/node/commit/077d5020c4)] - **v8**: fix missing callback in heap utils destroy (Ruben Bridgewater) [#&#8203;58846](https://redirect.github.com/nodejs/node/pull/58846) - \[[`34ae9f8b18`](https://redirect.github.com/nodejs/node/commit/34ae9f8b18)] - **vm**: import call should return a promise in the current context (Chengzhong Wu) [#&#8203;58309](https://redirect.github.com/nodejs/node/pull/58309) - \[[`0dd3a8d6d1`](https://redirect.github.com/nodejs/node/commit/0dd3a8d6d1)] - **win,build**: fix MSVS v17.14 compilation issue (StefanStojanovic) [#&#8203;58902](https://redirect.github.com/nodejs/node/pull/58902) - \[[`1b83a2bd2d`](https://redirect.github.com/nodejs/node/commit/1b83a2bd2d)] - **zlib**: remove mentions of unexposed Z\_TREES constant (Jimmy Leung) [#&#8203;58371](https://redirect.github.com/nodejs/node/pull/58371) - \[[`9dc9604502`](https://redirect.github.com/nodejs/node/commit/9dc9604502)] - **zlib**: fix pointer alignment (jhofstee) [#&#8203;57727](https://redirect.github.com/nodejs/node/pull/57727) ### [`v20.19.4`](https://redirect.github.com/nodejs/node/releases/tag/v20.19.4): 2025-07-15, Version 20.19.4 &#x27;Iron&#x27; (LTS), @&#8203;RafaelGSS [Compare Source](https://redirect.github.com/nodejs/node/compare/v20.19.3...v20.19.4) This is a security release. ##### Notable Changes - (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize() ##### Commits - \[[`db7b93fcef`](https://redirect.github.com/nodejs/node/commit/db7b93fcef)] - **(CVE-2025-27210)** **lib**: handle all windows reserved driver name (RafaelGSS) [nodejs-private/node-private#721](https://redirect.github.com/nodejs-private/node-private/pull/721) ### [`v20.19.3`](https://redirect.github.com/nodejs/node/releases/tag/v20.19.3): 2025-06-23, Version 20.19.3 &#x27;Iron&#x27; (LTS), @&#8203;marco-ippolito [Compare Source](https://redirect.github.com/nodejs/node/compare/v20.19.2...v20.19.3) ##### Notable Changes - \[[`c535a3c483`](https://redirect.github.com/nodejs/node/commit/c535a3c483)] - **crypto**: graduate WebCryptoAPI [`Ed25519`](https://redirect.github.com/nodejs/node/commit/Ed25519) and X25519 algorithms as stable (Filip Skokan) [#&#8203;56142](https://redirect.github.com/nodejs/node/pull/56142) - \[[`af1dc63815`](https://redirect.github.com/nodejs/node/commit/af1dc63815)] - **crypto**: update root certificates to NSS 3.108 (Node.js GitHub Bot) [#&#8203;57381](https://redirect.github.com/nodejs/node/pull/57381) - \[[`01d63a4ddf`](https://redirect.github.com/nodejs/node/commit/01d63a4ddf)] - **deps**: update timezone to 2025b (Node.js GitHub Bot) [#&#8203;57857](https://redirect.github.com/nodejs/node/pull/57857) - \[[`b6daa344eb`](https://redirect.github.com/nodejs/node/commit/b6daa344eb)] - **doc**: add dario-piotrowicz to collaborators (Dario Piotrowicz) [#&#8203;58102](https://redirect.github.com/nodejs/node/pull/58102) ##### Commits - \[[`fc1fa7a357`](https://redirect.github.com/nodejs/node/commit/fc1fa7a357)] - **build**: use FILE\_OFFSET\_BITS=64 esp. on 32-bit arch (RafaelGSS) [#&#8203;58090](https://redirect.github.com/nodejs/node/pull/58090) - \[[`79e0812181`](https://redirect.github.com/nodejs/node/commit/79e0812181)] - **build**: use glob for dependencies of out/Makefile (Richard Lau) [#&#8203;55789](https://redirect.github.com/nodejs/node/pull/55789) - \[[`f56e62851a`](https://redirect.github.com/nodejs/node/commit/f56e62851a)] - **crypto**: allow length=0 for HKDF and PBKDF2 in SubtleCrypto.deriveBits (Filip Skokan) [#&#8203;55866](https://redirect.github.com/nodejs/node/pull/55866) - \[[`c535a3c483`](https://redirect.github.com/nodejs/node/commit/c535a3c483)] - **crypto**: graduate WebCryptoAPI [`Ed25519`](https://redirect.github.com/nodejs/node/commit/Ed25519) and X25519 algorithms as stable (Filip Skokan) [#&#8203;56142](https://redirect.github.com/nodejs/node/pull/56142) - \[[`39925de8b1`](https://redirect.github.com/nodejs/node/commit/39925de8b1)] - **crypto**: allow non-multiple of 8 in SubtleCrypto.deriveBits (Filip Skokan) [#&#8203;55296](https://redirect.github.com/nodejs/node/pull/55296) - \[[`af1dc63815`](https://redirect.github.com/nodejs/node/commit/af1dc63815)] - **crypto**: update root certificates to NSS 3.108 (Node.js GitHub Bot) [#&#8203;57381](https://redirect.github.com/nodejs/node/pull/57381) - \[[`d09008add3`](https://redirect.github.com/nodejs/node/commit/d09008add3)] - **deps**: V8: cherry-pick [`1a3ecc2`](https://redirect.github.com/nodejs/node/commit/1a3ecc2483b2) (Michaël Zasso) [#&#8203;58342](https://redirect.github.com/nodejs/node/pull/58342) - \[[`fd56652425`](https://redirect.github.com/nodejs/node/commit/fd56652425)] - **deps**: V8: cherry-pick [`182d9c0`](https://redirect.github.com/nodejs/node/commit/182d9c05e78b) (Andrey Kosyakov) [#&#8203;58342](https://redirect.github.com/nodejs/node/pull/58342) - \[[`447481e829`](https://redirect.github.com/nodejs/node/commit/447481e829)] - **deps**: V8: cherry-pick third\_party/zlib@[`646b7f5`](https://redirect.github.com/nodejs/node/commit/646b7f569718) (Hans Wennborg) [#&#8203;58342](https://redirect.github.com/nodejs/node/pull/58342) - \[[`eb447168df`](https://redirect.github.com/nodejs/node/commit/eb447168df)] - **deps**: update simdutf to 6.4.2 (Node.js GitHub Bot) [#&#8203;57855](https://redirect.github.com/nodejs/node/pull/57855) - \[[`01d63a4ddf`](https://redirect.github.com/nodejs/node/commit/01d63a4ddf)] - **deps**: update timezone to 2025b (Node.js GitHub Bot) [#&#8203;57857](https://redirect.github.com/nodejs/node/pull/57857) - \[[`10fb49f2a9`](https://redirect.github.com/nodejs/node/commit/10fb49f2a9)] - **deps**: update icu to 77.1 (Node.js GitHub Bot) [#&#8203;57455](https://redirect.github.com/nodejs/node/pull/57455) - \[[`f1dc7d0205`](https://redirect.github.com/nodejs/node/commit/f1dc7d0205)] - **deps**: update corepack to 0.32.0 (Node.js GitHub Bot) [#&#8203;57265](https://redirect.github.com/nodejs/node/pull/57265) - \[[`7a2e64bb8a`](https://redirect.github.com/nodejs/node/commit/7a2e64bb8a)] - **deps**: update simdutf to 6.4.0 (Node.js GitHub Bot) [#&#8203;56764](https://redirect.github.com/nodejs/node/pull/56764) - \[[`e80669be0d`](https://redirect.github.com/nodejs/node/commit/e80669be0d)] - **doc**: mention reports should align with Node.js CoC (Rafael Gonzaga) [#&#8203;57607](https://redirect.github.com/nodejs/node/pull/57607) - \[[`7b2c0bc92e`](https://redirect.github.com/nodejs/node/commit/7b2c0bc92e)] - **doc**: add gurgunday as triager (Gürgün Dayıoğlu) [#&#8203;57594](https://redirect.github.com/nodejs/node/pull/57594) - \[[`791e4879de`](https://redirect.github.com/nodejs/node/commit/791e4879de)] - **doc**: document REPL custom eval arguments (Dario Piotrowicz) [#&#8203;57690](https://redirect.github.com/nodejs/node/pull/57690) - \[[`2917f09876`](https://redirect.github.com/nodejs/node/commit/2917f09876)] - **doc**: improved fetch docs (Alessandro Miliucci) [#&#8203;57296](https://redirect.github.com/nodejs/node/pull/57296) - \[[`d940b15843`](https://redirect.github.com/nodejs/node/commit/d940b15843)] - **doc**: clarify `unhandledRejection` events behaviors in process doc (Dario Piotrowicz) [#&#8203;57654](https://redirect.github.com/nodejs/node/pull/57654) - \[[`71c664fab7`](https://redirect.github.com/nodejs/node/commit/71c664fab7)] - **doc**: update position type to integer | null in fs (Yukihiro Hasegawa) [#&#8203;57745](https://redirect.github.com/nodejs/node/pull/57745) - \[[`0c0fbfa9c6`](https://redirect.github.com/nodejs/node/commit/0c0fbfa9c6)] - **doc**: add missing v0.x changelog entries (Antoine du Hamel) [#&#8203;57779](https://redirect.github.com/nodejs/node/pull/57779) - \[[`e99462c9fc`](https://redirect.github.com/nodejs/node/commit/e99462c9fc)] - </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40LjIiLCJ1cGRhdGVkSW5WZXIiOiI0My40LjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
ryangr0 2026-06-08 08:27:23 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/application-template#22
No description provided.