Node.js - v18.13.0

Security

Notable changes

Add support for externally shared js builtins

By default Node.js is built so that all dependencies are bundled into the Node.js binary itself. Some Node.js distributions prefer to manage dependencies externally. There are existing build options that allow dependencies with native code to be externalized. This commit adds additional options so that dependencies with JavaScript code (including WASM) can also be externalized. This addition does not affect binaries shipped by the Node.js project but will allow other distributions to externalize additional dependencies when needed.

Contributed by Michael Dawson in #44376

Introduce File

The File class is part of the FileAPI. It can be used anywhere a Blob can, for example in URL.createObjectURL and FormData. It contains two properties that Blobs do not have: lastModified, the last time the file was modified in ms, and name, the name of the file.

Contributed by Khafra in #45139

Support function mocking on Node.js test runner

The node:test module supports mocking during testing via a top-level mock
object.

test('spies on an object method', (t) => {
  const number = {
    value: 5,
    add(a) {
      return this.value + a;
    },
  };
  t.mock.method(number, 'add');

  assert.strictEqual(number.add(3), 8);
  assert.strictEqual(number.add.mock.calls.length, 1);
});

Contributed by Colin Ihrig in #45326

Other notable changes

  • build:
  • disable v8 snapshot compression by default (Joyee Cheung) #45716
  • crypto:
  • update root certificates (Luigi Pinca) #45490
  • deps:
  • update ICU to 72.1 (Michaël Zasso) #45068
  • doc:
  • add doc-only deprecation for headers/trailers setters (Rich Trott) #45697
  • add Rafael to the tsc (Michael Dawson) #45691
  • deprecate use of invalid ports in url.parse (Antoine du Hamel) #45576
  • add lukekarrys to collaborators (Luke Karrys) #45180
  • add anonrig to collaborators (Yagiz Nizipli) #45002
  • deprecate url.parse() (Rich Trott) #44919
  • lib:
  • drop fetch experimental warning (Matteo Collina) #45287
  • net:
  • (SEMVER-MINOR) add autoSelectFamily and autoSelectFamilyAttemptTimeout options (Paolo Insogna) #44731
  • src:
  • (SEMVER-MINOR) add uvwasi version (Jithil P Ponnan) #45639
  • (SEMVER-MINOR) add initial shadow realm support (Chengzhong Wu) #42869
  • test_runner:
  • (SEMVER-MINOR) add t.after() hook (Colin Ihrig) #45792
  • (SEMVER-MINOR) don't use a symbol for runHook() (Colin Ihrig) #45792
  • tls:
  • (SEMVER-MINOR) add "ca" property to certificate object (Ben Noordhuis) #44935
  • remove trustcor root ca certificates (Ben Noordhuis) #45776
  • tools:
  • update certdata.txt (Luigi Pinca) #45490
  • util:
  • add fast path for utf8 encoding (Yagiz Nizipli) #45412
  • improve textdecoder decode performance (Yagiz Nizipli) #45294
  • (SEMVER-MINOR) add MIME utilities (#21128) (Bradley Farias) #21128

Commits

  • [40123a6bb0] - (SEMVER-MINOR) async_hooks: add hook to stop propagation (Gerhard Stöbich) #45386
  • [9925d20ed8] - benchmark: add variety of inputs to text-encoder (Yagiz Nizipli) #45787
  • [5e167bd658] - benchmark: make benchmarks runnable in older versions of Node.js (Joyee Cheung) #45746
  • [a1421623ac] - benchmark: add v8 serialize benchmark (Yagiz Nizipli) #45476
  • [fcf61884cc] - benchmark: add text-encoder benchmark (Yagiz Nizipli) #45450
  • [762d285c98] - benchmark: add parameters to text-decoder benchmark (Yagiz Nizipli) #45363
  • [ab891ecbff] - benchmark: fix text-decoder benchmark (Yagiz Nizipli) #45363
  • [1ed312a737] - benchmark: add blob benchmark (Yagiz Nizipli) #44990
  • [2ee3d81277] - bootstrap: merge main thread and worker thread initializations (Joyee Cheung) #44869
  • [e638ea4f48] - bootstrap: check more metadata when loading the snapshot (Joyee Cheung) #44132
  • [bfcf4f0046] - buffer: make decodeUTF8 params loose (Yagiz Nizipli) #45610
  • [3a7f3d5993] - (SEMVER-MINOR) buffer: introduce File (Khafra) #45139
  • [345b847aa6] - buffer: fix validation of options in Blob constructor (Antoine du Hamel) #45156
  • [1ddc438444] - build: disable v8 snapshot compression by default (Joyee Cheung) #45716
  • [bd1a2fbd91] - build: add python 3.11 support for android (Mohammed Keyvanzadeh) #45765
  • [2b0ace302d] - build: rework gyp files for zlib (Richard Lau) #45589
  • [5ab7a30a06] - build: avoid redefined macro (Michaël Zasso) #45544
  • [f58b32c22e] - build: fix env.h for cpp20 (Jiawen Geng) #45516
  • [1de1f679ec] - Revert "build: remove precompiled header and debug information for host builds" (Stefan Stojanovic) #45432
  • [89d1eb58b0] - build: add --v8-disable-object-print flag (MURAKAMI Masahiko) #45458
  • [f2a4def232] - build: make scripts in gyp run with right python (Jiawen Geng) #45435
  • [473a879c91] - build: workaround for node-core-utils (Jiawen Geng) #45199
  • [abcc034c61] - build: fix icu-small build with ICU 72.1 (Steven R. Loomis) #45195
  • [8a99221a21] - build: remove unused language files (Ben Noordhuis) #45138
  • [3fb44f9413] - build: add GitHub token to auto-start-ci workflow (Richard Lau) #45185
  • [2aac993bb2] - build: add version info to timezone update PR (Darshan Sen) #45021
  • [0db19b3c60] - build: support Python 3.11 (Luigi Pinca) #45191
  • [fb008a2e9b] - build,deps,src: fix Intel VTune profiling support (Shi Lei) #45248
  • [61bc27a5b4] - build,win: pass --debug-nghttp2 to configure (Santiago Gimeno) #45209
  • [7b68c06988] - child_process: validate arguments for null bytes (Darshan Sen) #44782
  • [bac6b7d900] - crypto: simplify lazy loading of internal modules (Antoine du Hamel) #45809
  • [2fbf95662c] - crypto: fix CipherBase Update int32 overflow (Marco Ippolito) #45769
  • [0100fd445b] - crypto: refactor ArrayBuffer to bigint conversion utils (Antoine du Hamel) #45567
  • [fa0a2d8e5d] - crypto: refactor verify acceptable key usage functions (Filip Skokan) #45569
  • [ef64b86d0d] - crypto: fix ECDH webcrypto public CryptoKey usages (Filip Skokan) #45569
  • [b92b80424a] - crypto: validate CFRG webcrypto JWK import "d" and "x" are a pair (Filip Skokan) #45569
  • [621e3c9cd4] - crypto: use DataError for CFRG webcrypto raw and jwk import key checks (Filip Skokan) #45569
  • [8fcfbeffe1] - crypto: use DataError for webcrypto keyData import failures (Filip Skokan) #45569
  • [a976a63138] - crypto: fix X25519 and X448 webcrypto public CryptoKey usages (Filip Skokan) #45569
  • [27adcc9c4b] - crypto: ensure "x" is present when importing private CFRG webcrypto keys (Filip Skokan) #45569
  • [f27ebab56c] - crypto: clear OpenSSL error queue after calling X509_check_private_key() (Filip Skokan) #45495
  • [319ae095fb] - crypto: update root certificates (Luigi Pinca) #45490
  • [dae92e78d6] - crypto: clear OpenSSL error queue after calling X509_verify() (Takuro Sato) #45377
  • [1ba1809dfd] - crypto: handle more webcrypto errors with OperationError (Filip Skokan) #45320
  • [b54f8761ae] - crypto: handle unsupported AES ciphers in webcrypto (Filip Skokan) #45321
  • [57f507f1dd] - crypto: fix webcrypto HMAC "get key length" in deriveKey and generateKey (Filip Skokan) #44917
  • [7565a75ee5] - crypto: remove webcrypto HKDF and PBKDF2 default-applied lengths (Filip Skokan) #44945
  • [631421e8d0] - crypto: simplify webcrypto ECDH deriveBits (Filip Skokan) #44946
  • [c4f665f528] - deps: V8: cherry-pick d1d4c648e7ff (Danielle Adams) #46098
  • [c04e1df396] - Revert "deps: fix zlib compilation for CPUs without SIMD features" (Luigi Pinca) #45589
  • [34e708cded] - deps: update undici to 5.13.0 (Node.js GitHub Bot) #45634
  • [33b0664bbe] - deps: update corepack to 0.15.2 (Node.js GitHub Bot) #45635
  • [7b6d2a8ec0] - deps: update nghttp2 to 1.51.0 (Yagiz Nizipli) #45537
  • [02eabaf409] - deps: update base64 to 0.5.0 (Facundo Tuesca) #45509
  • [7d26bf3c08] - deps: V8: cherry-pick 9df5ef70ff18 (Yagiz Nizipli) #45474
  • [43419ad6bc] - deps: fix zlib compilation for CPUs without SIMD features (Anna Henningsen) #45387
  • [978cfad005] - deps: update zlib to upstream 8bbd6c31 (Luigi Pinca) #45387
  • [72362f348c] - deps: update acorn to 8.8.1 (Node.js GitHub Bot) #45441
  • [17a89d1f4e] - deps: V8: cherry-pick 031b98b25cba (Michaël Zasso) #45375
  • [bbe67c484a] - deps: upgrade npm to 8.19.3 (npm team) #45322
  • [a274d6bc0d] - deps: update corepack to 0.15.1 (Node.js GitHub Bot) #45331
  • [c9c958e188] - deps: upgrade to libuv 1.44.2 (Luigi Pinca) #42340
  • [07b47ad58c] - deps: update corepack to 0.15.0 (Node.js GitHub Bot) #45235
  • [bb6e8b1972] - deps: update undici to 5.12.0 (Node.js GitHub Bot) #45236
  • [596e3a8f2f] - deps: V8: cherry-pick c2792e58035f (Jiawen Geng) #44961
  • [2088cb4744] - deps: patch V8 to 10.2.154.23 (Michaël Zasso) #45997
  • [6ea555e8ac] - deps: V8: cherry-pick 2ada52cffbff (Michaël Zasso) #45573
  • [6d8c0f0efd] - deps: update timezone to 2022f (Node.js GitHub Bot) #45289
  • [3b73aa416f] - deps: update ICU to 72.1 (Michaël Zasso) #45068
  • [555d1723b1] - deps: update timezone (Node.js GitHub Bot) #44950
  • [5c0fcc13f7] - deps: patch V8 to 10.2.154.19 (Michaël Zasso) #45229
  • [1a47a7bbed] - diagnostics_channel: fix diagnostics channel memory leak (theanarkh) #45633
  • [40a29aabbc] - diagnostics_channel: built-in channels should remain experimental (Stephen Belanger) #45423
  • [2752f543bc] - diagnostics_channel: mark as stable (Stephen Belanger) #45290
  • [9ceed7a1cc] - dns: fix port validation (Antoine du Hamel) #45135
  • [108220cb05] - doc: buffer.fill empty value (Marco Ippolito) #45794
  • [b5ad92fea2] - doc: add args of filter option of fs.cp (MURAKAMI Masahiko) #45739
  • [899ba3d3c2] - doc: disambiguate native module to addon (Daeyeon Jeong) #45673
  • [6e35803789] - doc: using console.error for error cases in crypto and events (emirgoren) #45640
  • [fcd0f71979] - doc: fix actual result of example is different in events (Deokjin Kim) #45656
  • [8203c021dc] - doc: add doc-only deprecation for headers/trailers setters (Rich Trott) #45697
  • [c1f90a5b7b] - doc: add detail on how api docs are published (Michael Dawson) #45626
  • [90e9951d30] - doc: use console.error for error case in child_process and dgram (Deokjin Kim) #45690
  • [d9593ce98b] - doc: move streaming instruc to doc/contributing (Michael Dawson) #45582
  • [a3eb2dd9b4] - doc: add Rafael to the tsc (Michael Dawson) #45691
  • [fa8caa328f] - doc: add missing line in debugger (Deokjin Kim) #45632
  • [3fb5c6d3c5] - doc: fix actual result of example is different in stream (Deokjin Kim) #45619
  • [8a1e556899] - doc: add options parameter to eventTarget.removeEventListener (Deokjin Kim) #45667
  • [6881188f0f] - doc: define "react-native" community condition (Alex Hunt) #45367
  • [53e01f650f] - doc: move os.machine() docs to sorted position (Colin Ihrig) #45647
  • [0669712cbd] - doc: use console.error for error case in fs, https, net and process (Deokjin Kim) #45606
  • [ebc89f15fe] - doc: add link to doc with social processes (Michael Dawson) #45584
  • [b771fdb6f8] - doc: deprecate use of invalid ports in url.parse (Antoine du Hamel) #45576
  • [6a36159764] - doc: clarify changes in readableFlowing (Kohei Ueno) #45554
  • [30a8604143] - doc: use console.error for error case in http2 (Deokjin Kim) #45577
  • [8e94339891] - doc: add version description about fsPromise.constants (chlorine) #45556
  • [203ca494a1] - doc: add missing documentation for paramEncoding (Tobias Nießen) #45523
  • [31233b2064] - doc: fix typo in threat model (Tobias Nießen) #45558
  • [e851c43c54] - doc: add Node.js Threat Model (Rafael Gonzaga) #45223
  • [34c2876541] - doc: run license-builder (github-actions[bot]) #45553
  • [dde8740af3] - doc: add async_hooks migration note (Geoffrey Booth) #45335
  • [e304628fb5] - doc: fix RESOLVE_ESM_MATCH in modules.md (翠 / green) #45280
  • [8b44c6121e] - doc: add arm64 to os.machine() (Carter Snook) #45374
  • [009adc7e21] - doc: add lint rule to enforce trailing commas (Antoine du Hamel) #45471
  • [c6b89abc5f] - doc: adjust wording to eliminate awkward typography (Konv) #45398
  • [785817e341] - doc: fix typo in maintaining-dependencies.md (Tobias Nießen) #45428
  • [00e02bda3a] - doc: allow for holidays in triage response (Michael Dawson) #45267
  • [bef5206b84] - doc: include last security release date (Juan José Arboleda) #45368
  • [846b1aefac] - doc: fix email for Ashley (Michael Dawson) #45364
  • [913b669a2b] - doc: fix test runner's only tests section header (Colin Ihrig) #45343
  • [691da886f1] - doc: run license-builder (github-actions[bot]) #45349
  • [90a28920de] - doc: add more info for timer.setInterval (theanarkh) #45232
  • [d2fc2aa666] - doc: use module names in stability overview table (Filip Skokan) #45312
  • [3f69d21b5c] - doc: add node: prefix for examples (Daeyeon Jeong) #45328
  • [a5c9b3c112] - doc: update name of Node.js core Slack channel (Rich Trott) #45293
  • [2bfd60b06f] - doc: fix "task_processor.js" typo (andreysoktoev) #45257
  • [248de57278] - doc: add history section to fetch-related globals (Antoine du Hamel) #45198
  • [1f5975ef50] - doc: clarify moderation in onboarding.md (Benjamin Gruenbaum) #41930
  • [4e87c36570] - doc: change make lint to make lint-md (RafaelGSS) #45197
  • [3381a17d2c] - doc: add more lts update steps to release guide (Ruy Adorno) #45177
  • [64b0495310] - doc: add bmuenzenmeyer to triagers (Brian Muenzenmeyer) #45155
  • [6ebdb76727] - doc: update process.release (Filip Skokan) #45170
  • [05d89c4722] - doc: add link to triage guide (Brian Muenzenmeyer) #45154
  • [f1aa82fd3c] - doc: mark Node.js 12 as End-of-Life (Rafael Gonzaga) #45186
  • [da6f308612] - doc: add lukekarrys to collaborators (Luke Karrys) #45180
  • [17380a1e6a] - doc: update mark release line lts on release guide (Ruy Adorno) #45101
  • [3ddb6ccb2a] - doc: be more definite and present tense-y (Ben Noordhuis) #45120
  • [b09c386208] - doc: add major version note to release guide (Ruy Adorno) #45054
  • [896b48b549] - doc: fix v14.x link maintaining openssl guide (RafaelGSS) #45071
  • [33b3d8646b] - doc: add note about latest GitHub release (Michaël Zasso) #45111
  • [5e76bf5cd5] - doc: mention v18.x openssl maintaining guide (Rafael Gonzaga) #45070
  • [b4e3f3f095] - doc: fix display of "problematic" ASCII characters (John Gardner) #44373
  • [8bb23a4da3] - doc: mark Node.js v17.x as EOL (KaKa) #45110
  • [3f89dcabdb] - doc: update Node.js 16 End-of-Life date (Richard Lau) #45103
  • [7b23ec47b0] - doc: fix typo in parseArgs default value (Tobias Nießen) #45083
  • [7da66ef9e7] - doc: updated security stewards (Michael Dawson) #45005
  • [e5f9a520e2] - doc: fix http and http2 writeEarlyHints() parameter (Fabian Meyer) #45000
  • [e41a39c2b9] - doc: run license-builder (github-actions[bot]) #45034
  • [875de23ee9] - doc: improve the workflow to test release binaries (Rafael Gonzaga) #45004
  • [d7fc12f647] - doc: fix undici version in changelog (Michael Dawson) #44982
  • [4494cb2e82] - doc: add info on fixup to security release process (Michael Dawson) #44807
  • [88351b9758] - doc: add anonrig to collaborators (Yagiz Nizipli) #45002
  • [aebf7453d7] - doc: add notable changes to latest v18.x release changelog (Danielle Adams) #44996
  • [b4cc30e18c] - doc: deprecate url.parse() (Rich Trott) #44919
  • [4fcbc92788] - doc: fix backticks in fs API docs (Livia Medeiros) #44962
  • [cc1f41a57e] - doc, async_hooks: improve and add migration hints (Gerhard Stöbich) #45369
  • [6fb74a995d] - doc, http: add Uint8Array as allowed type (Gerhard Stöbich) #45167
  • [066993a10a] - esm: add JSDoc property descriptions for loader (Rich Trott) #45370
  • [fa210f91df] - esm: add JSDoc property descriptions for fetch (Rich Trott) #45370
  • [2f27d058c2] - esm: protect ESM loader from prototype pollution (Antoine du Hamel) #45175
  • [46ded6b96e] - esm: protect ESM loader from prototype pollution (Antoine du Hamel) #45044
  • [3bb764a58a] - events: add unique events benchmark (Yagiz Nizipli) #44657
  • [b305ad46fd] - fs: fix fs.rm support for loop symlinks (Nathanael Ruf) #45439
  • [c2f0377b8f] - fs: update todo message (Yagiz Nizipli) #45265
  • [1db20c84e1] - fs: fix opts.filter issue in cpSync (Tho) #45143
  • [da302ce15b] - fs: trace more fs api (theanarkh) #45095
  • [9ab00f5fbd] - gyp: fix v8 canary build on aix (Vasili Skurydzin) #45496
  • [cbd710bbf4] - http: make OutgoingMessage more streamlike (Robert Nagy) #45672
  • [209e7e3cff] - http: add debug log for ERR_UNESCAPED_CHARACTERS (Aidan Temple) #45420
  • [3937118f5e] - http: add JSDoc property descriptions (Rich Trott) #45370
  • [f222c95209] - http: add priority to common http headers (James M Snell) #45045
  • [2882e6042e] - Revert "http: do not leak error listeners" (Luigi Pinca) #44921
  • [b45878b2f1] - http2: improve session close/destroy procedures (Santiago Gimeno) #45115
  • [a534175aa5] - http2: fix crash on Http2Stream::diagnostic_name() (Santiago Gimeno) #45123
  • [0b9f11bcbe] - http2: fix debugStream method (Santiago Gimeno) #45129
  • [bbaca8442a] - lib: allow Writeable.toWeb() to work on http.Outgoing message (Debadree Chatterjee) #45642
  • [1284789371] - lib: check number of arguments in EventTarget's function (Deokjin Kim) #45668
  • [6297e77b1f] - lib: disambiguate native module to binding (Daeyeon Jeong) #45673
  • [f7c101555a] - lib: disambiguate native module to builtin module (Daeyeon Jeong) #45673
  • [55f800b806] - lib: added SuiteContext class (Debadree Chatterjee) #45687
  • [1ff8f689fa] - lib: add missing type of removeEventListener in question (Deokjin Kim) #45676
  • [2c595da5dc] - lib: do not throw if global property is no longer configurable (Antoine du Hamel) #45344
  • [b9d4ac2c7e] - lib: fix eslint early return (RafaelGSS) #45409
  • [4ef86b59b5] - lib: fix JSDoc issues (Rich Trott) #45243
  • [9ccf8b2ccc] - lib: use process.nextTick() instead of setImmediate() (Luigi Pinca) #42340
  • [8616e9b58b] - lib: drop fetch experimental warning (Matteo Collina) #45287
  • [57897f80cd] - lib: fix TypeError when converting a detached buffer source (Kohei Ueno) #44020
  • [ba0e7ae3dd] - lib: fix AbortSignal.timeout parameter validation (dnalborczyk) #42856
  • [385d795816] - lib: fix typo in pre_execution.js (Antoine du Hamel) #45039
  • [4ab1530b9b] - lib: promise version of streams.finished call clean up (Naor Tedgi (Abu Emma)) #44862
  • [2a3bd11edd] - lib: make properties on Blob and URL enumerable (Khafra) #44918
  • [f412834151] - lib: support more attributes for early hint link (Yagiz Nizipli) #44874
  • [1019209306] - meta: update AUTHORS (Node.js GitHub Bot) #45814
  • [dc862fe786] - meta: update AUTHORS (Node.js GitHub Bot) #45732
  • [dc5340018f] - meta: add .mailmap entry for Stefan Stojanovic (Rich Trott) #45703
  • [775f659380] - meta: update AUTHORS info for nstepien (Nicolas Stepien) #45692
  • [e2da381609] - meta: update AUTHORS (Node.js GitHub Bot) #45637
  • [29e51e72f9] - meta: update AUTHORS (Node.js GitHub Bot) #45531
  • [6f8759bc51] - meta: update VoltrexMaster's username (Mohammed Keyvanzadeh) #45503
  • [404172bb7c] - meta: update AUTHORS (Node.js GitHub Bot) #45443
  • [221f298078] - meta: be more proactive about removing from teams (Rich Trott) #45352
  • [28b937ae38] - meta: update AUTHORS (Node.js GitHub Bot) #45333
  • [255e89dc8c] - meta: update collaborator email address in README (Rich Trott) #45251
  • [1a726e9dff] - meta: fix email address typo in README (Rich Trott) #45250
  • [ffd059328b] - meta: remove dont-land-on-v12 auto labeling (Moshe Atlow) #45233
  • [d7fe2eac07] - meta: update AUTHORS (Node.js GitHub Bot) #45238
  • [5aa4ea931a] - meta: move a collaborator to emeritus (Rich Trott) #45160
  • [4fe060e957] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #45036
  • [9ec6117b65] - meta: update AUTHORS (Node.js GitHub Bot) #45020
  • [3197b913aa] - module: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) #45147
  • [bf8d48a881] - module: ensure relative requires work from deleted directories (Bradley Farias) #42384
  • [2c0f7d47e4] - module: fix segment deprecation for imports field (Guy Bedford) #44883
  • [a1831dacbf] - net: check autoSelectFamilyAttemptTimeout is positive (Deokjin Kim) #45740
  • [048795dab0] - (SEMVER-MINOR) net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options (Paolo Insogna) #44731
  • [e4f7bcff8b] - net: remove _readableState from debug statement (Rich Trott) #45063
  • [cd4b0626c2] - node-api: address coverity warning (Michael Dawson) #45563
  • [581b38af13] - node-api: declare type napi_cleanup_hook (Chengzhong Wu) #45391
  • [44766c6522] - node-api: fix immediate napi_remove_wrap test (Chengzhong Wu) #45406
  • [746175a272] - node-api: handle no support for external buffers (Michael Dawson) #45181
  • [b5811c44cb] - node-api,test: fix test_reference_double_free crash (Vladimir Morozov) #44927
  • [bc5140383c] - os: convert uid and gid to 32-bit signed integers (Luigi Pinca) #42340
  • [ff03ed1c22] - readline: improve robustness against prototype mutation (Antoine du Hamel) #45614
  • [b999983c30] - repl: do not define wasi on global with no flag (Kohei Ueno) #45595
  • [a186a4d7ef] - report: add more memory info (theanarkh) #45254
  • [a880568afd] - report: add rss and use/kernel cpu usage fields (theanarkh) #45043
  • [49da5cd0ee] - report,doc: define report version semantics (Gireesh Punathil) #45050
  • [ae61740325] - src: add internal isArrayBufferDetached (Yagiz Nizipli) #45568
  • [a58bf148b3] - (SEMVER-MINOR) src: add uvwasi version (Jithil P Ponnan) #45639
  • [8e1138d354] - src: simplify NodeBIO::GetMethod initialization (Anna Henningsen) #45799
  • [b88ee545f2] - src: make structuredClone work for process.env (Ben Noordhuis) #45698
  • [94e6f08606] - src: mark generated snapshot_data as const (Anna Henningsen) #45786
  • [29f2dabca2] - src: cleanup on disambiguating native modules (Michael Dawson) #45665
  • [ed0a867a4e] - src: use enum class instead of enum in node_i18n (Deokjin Kim) #45646
  • [1e48a5a5b0] - src: address coverity warning in node_file.cc (Michael Dawson) #45565
  • [3f6f8f920f] - src: use qualified std::move call in node_http2 (Michaël Zasso) #45555
  • [5e63bf3726] - src: avoid unused variables and functions (Michaël Zasso) #45542
  • [3f5a23281c] - src: add missing include for std::all_of (Michaël Zasso) #45541
  • [0328208f6c] - src: set an appropriate thread pool size if given --v8-pool-size=0 (Daeyeon Jeong) #45513
  • [fbfd26da7d] - src: move FsStatsOffset and kFsStatsBufferLength to node_file.h (Joyee Cheung) #45498
  • [2c6a4fd6fa] - src: don't run tasks on isolate termination (Santiago Gimeno) #45444
  • [9c39b5ec48] - src: remove the unused PackageConfig class (Joyee Cheung) #45478
  • [70ca26a858] - src: add --max-semi-space-size to the options allowed in NODE_OPTIONS (Emanuel Hoogeveen) #44436
  • [5544ce4bdf] - src: condense experimental warning message (Rich Trott) #45424
  • [9ac7df1c6a] - src: track contexts in the Environment instead of AsyncHooks (Joyee Cheung) #45282
  • [89b3336120] - src: resolve TODO related to inspector CVEs (Tobias Nießen) #45341
  • [e05ebe8f9b] - src: print nghttp2 logs when using --debug-nghttp2 (Santiago Gimeno) #45209
  • [4634aa987d] - src: trace threadpool event (theanarkh) #44458
  • [bf028a66ef] - src: lock-free init_process_flags (Jérémy Lal) #45221
  • [8c4ac6dcf5] - src: call uv_library_shutdown before DisposePlatform (theanarkh) #45226
  • [614d646767] - src: fix crypto.privateEncrypt fails first time (liuxingbaoyu) #42793
  • [dee882e94f] - src: let http2 streams end after session close (Santiago Gimeno) #45153
  • [325254cc2c] - src: remap invalid file descriptors using dup2 (Obiwac) #44461
  • [f748f5df56] - src: remove unused contextify_global_private_symbol (Daeyeon Jeong) #45128
  • [169b33a24c] - src: forbid running watch mode in REPL (Moshe Atlow) #45058
  • [57b7023257] - src: fix test runner coverage (Moshe Atlow) #45055
  • [bf17f8dcb8] - src: optimize ALPN callback (Ben Noordhuis) #44875
  • [d433d34765] - src: simplify ALPN code, remove indirection (Ben Noordhuis) #44875
  • [33c78e2340] - src: iwyu in cleanup_queue.cc (Shelley Vohr) #44983
  • [23aa41394f] - (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #44376
  • [2d2e71c189] - src: refactor BaseObject methods (Joyee Cheung) #44796
  • [7b992cc229] - src: create BaseObject with node::Realm (Chengzhong Wu) #44348
  • [a7f3bc0dbc] - src: introduce node::Realm (Chengzhong Wu) #44179
  • [b11616be6b] - src: support WeakReference in snapshot (Joyee Cheung) #44193
  • [1ca575501a] - src: iterate over base objects to prepare for snapshot (Joyee Cheung) #44192
  • [f071028a45] - src: fix cppgc incompatibility in v8 (Shelley Vohr) #43521
  • [b8290ff7e9] - (SEMVER-MINOR) src: add initial shadow realm support (Chengzhong Wu) #42869
  • [90e8418e58] - src,lib: group properties used as constants from util binding (Daeyeon Jeong) #45539
  • [12779b3e02] - src,lib: retrieve parsed source map url from v8 (Chengzhong Wu) #44798
  • [c5630e2699] - src,node-api: update napi_is_detached_arraybuffer (Daeyeon Jeong) #45538
  • [122c51b595] - stream: use structuredClone instead of v8 (Yagiz Nizipli) #45611
  • [2bde576822] - stream: use ArrayBufferPrototypeGetByteLength (Yagiz Nizipli) #45528
  • [7984e066ca] - stream: add primordials to adapters (Yagiz Nizipli) #45511
  • [ac9a4aba5d] - stream: avoid premature close when will not emit close (Robert Nagy) #45301
  • [6f080e2968] - stream: fix typo in adapters.js (#45515) (Kohei Ueno) #45515
  • [d2998b6166] - stream: add fast path for utf8 (Yagiz Nizipli) #45483
  • [5f7d2b5c64] - stream: add compose operator (Raz Luvaton) #44937
  • [70244d0b57] - stream: fix duplexify premature destroy (Robert Nagy) #45133
  • [1fb6e82f84] - stream: fix web streams have no Symbol.toStringTag (Jithil P Ponnan) #45117
  • [c514751ff3] - stream: don't push null from closed promise #42694 (David Halls) #45026
  • [8c2d0f9294] - stream: fix size function returned from QueuingStrategies (Daeyeon Jeong) #44867
  • [7e386f8cb9] - test: remove flaky parallel/test-process-wrap test (Ben Noordhuis) #45806
  • [38fb2c1cc8] - test: fix invalid output TAP if there newline in test name (Pulkit Gupta) #45742
  • [c1162535ae] - test: fix -Wunused-variable on report-fatalerror (Santiago Gimeno) #45747
  • [13d2df3c20] - test: fix test-watch-mode (Stefan Stojanovic) #45585
  • [3a5a2ae2ea] - test: fix test-watch-mode-inspect (Stefan Stojanovic) #45586
  • [7dbc742bca] - test: fix typos in test/parallel (Deokjin Kim) #45583
  • [3e87834ac7] - test: add trailing commas in event tests (Rich Trott) #45466
  • [8f7109aea3] - test: add trailing commas in async-hooks tests (#45549) (Antoine du Hamel) #45549
  • [d5b0844fce] - test: add trailing commas in addons test (#45548) (Antoine du Hamel) #45548
  • [b1e17b4590] - test: add trailing commas in test/common (#45550) (Antoine du Hamel) #45550
  • [305d4de72f] - test: revise pull request guide text about code (Rich Trott) #45519
  • [9f1e5b6a89] - test: enable the WPT for structuredClone (Daeyeon Jeong) #45482
  • [fac1f1bcd6] - test: add lint rule to enforce trailing commas (Antoine du Hamel) #45468
  • [cac449f0a0] - test: update uses of _jabber._tcp.google.com (Colin Ihrig) #45451
  • [19eabd7870] - test: add test to validate changelogs for releases (Richard Lau) #45325
  • [85c634d899] - test: remove flaky designation for test-worker-http2-stream-terminate (Rich Trott) #45438
  • [4283af48b0] - test: fix flaky test-repl-sigint-nested-eval (Rich Trott) #45354
  • [7e0332a46b] - test: skip test-fs-largefile if not enough disk space (Rich Trott) #45339
  • [ad3b41c858] - test: fix catching failed assertion (Pavel Horal) #45222
  • [12764fc725] - test: defer invocation checks (Luigi Pinca) #42340
  • [facb606084] - test: fix test-socket-write-after-fin-error (Luigi Pinca) #42340
  • [ab9c2df11b] - test: make test-eventemitter-asyncresource.js shorter (Juan José) #45146
  • [03a3f30cb1] - test: convert test-debugger-pid to async/await (Luke Karrys) #45179
  • [d718c675d8] - test: improve test coverage in test-event-capture-rejections.js (Juan José) #45148
  • [fe91ac15be] - test: fix timeout of test-heap-prof.js in riscv devices (Yu Gu) #42674
  • [a110cac4f3] - test: deflake test-http2-empty-frame-without-eof (Santiago Gimeno) #45212
  • [c890136934] - test: use common/tmpdir in watch-mode ipc test (Richard Lau) #45211
  • [7b8380dd73] - test: use uv_sleep() where possible (Santiago Gimeno) #45124
  • [7a7dab4160] - test: fix typo in test/parallel/test-fs-rm.js (Tim Shilov) #44882
  • [c87770b39b] - test: remove a snapshot blob from test-inspect-address-in-use.js (Daeyeon Jeong) #45132
  • [a0f8d8b806] - test: add test for Module._stat (Darshan Sen) #44713
  • [a8030b9517] - test: watch mode inspect restart repeatedly (Moshe Atlow) #45060
  • [52808d7d71] - test: remove experimental-wasm-threads flag (Michaël Zasso) #45074
  • [b3c4265a95] - test: remove unnecessary noop function args to mustCall() (Antoine du Hamel) #45047
  • [868b4a3d67] - test: mark test-watch-mode* as flaky on all platforms (Pierrick Bouvier) #45049
  • [0d9ccc850e] - test: wrap missing common.mustCall (Moshe Atlow) #45064
  • [8fffd05b85] - test: remove mentions of --experimental-async-stack-tagging-api flag (Simon) #45051
  • [fc58b61e82] - test: improve assertions in test-repl-unsupported-option.js (Juan José) #44953
  • [e5928abef7] - test: remove unnecessary noop function args to mustCall() (Rich Trott) #45027
  • [d86fcbfd6e] - test: update WPT resources (Khaidi Chu) #44948
  • [d103d779d3] - test: skip test depending on overlapped-checker when not available (Antoine du Hamel) #45015
  • [5544c55600] - test: improve test coverage for os package (Juan José) #44959
  • [6e3227b0fd] - test: add test to improve coverage in http2-compat-serverresponse (Cesar Mario Diaz) #44970
  • [dfc2419ab4] - test: improve test coverage in test-child-process-spawn-argv0.js (Juan José) #44955
  • [89a1c57436] - test: use CHECK instead of EXPECT where necessary (Tobias Nießen) #44795
  • [657756fc06] - test: refactor promises to async/await (Madhuri) #44980
  • [55cf4b5042] - test: fix textdecoder test for small-icu builds (Richard Lau) #45225
  • [e2df332ea7] - test: add a test to ensure the correctness of timezone upgrades (Darshan Sen) #45299
  • [a2e5126227] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #45569
  • [69c1f2a021] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #45165
  • [24e2a4fbd7] - test_runner: refactor tap_lexer to use more primordials (Antoine du Hamel) #45744
  • [3cee3ca5ae] - test_runner: refactor tap_parser to use more primordials (Antoine du Hamel) #45745
  • [449326639d] - (SEMVER-MINOR) test_runner: add t.after() hook (Colin Ihrig) #45792
  • [370ad455d6] - (SEMVER-MINOR) test_runner: don't use a symbol for runHook() (Colin Ihrig) #45792
  • [500024384a] - test_runner: add resetCalls to MockFunctionContext (MURAKAMI Masahiko) #45710
  • [ed9246f6fc] - test_runner: don't parse TAP from stderr (Colin Ihrig) #45618
  • [a56560f6fc] - test_runner: add getter and setter to MockTracker (MURAKAMI Masahiko) #45506
  • [20f6fa3edd] - test_runner: remove stdout and stderr from error (Colin Ihrig) #45592
  • [16bedbabce] - test_runner: add initial TAP parser (Wassim Chegham) #43525
  • [55b64e0b14] - test_runner: support watch mode (Moshe Atlow) #45214
  • [92909f6855] - test_runner: support function mocking (Colin Ihrig) #45326
  • [0f69b6c26d] - test_runner: fix afterEach not running on test failures (Jithil P Ponnan) #45204
  • [a67da59313] - test_runner: report tap subtest in order (Moshe Atlow) #45220
  • [a59c907e14] - test_runner: call {before,after}Each() on suites (Colin Ihrig) #45161
  • [64860dd01f] - test_runner: add extra fields in AssertionError YAML (Bryan English) #44952
  • [979d8376bd] - tls: remove trustcor root ca certificates (Ben Noordhuis) #45776
  • [10cc827ebf] - (SEMVER-MINOR) tls: add "ca" property to certificate object (Ben Noordhuis) #44935
  • [8336e32713] - tools: update lint-md-dependencies (Node.js GitHub Bot) #45730
  • [aa57f6c362] - tools: add GitHub token permissions to label flaky-test issues (Gabriela Gutierrez) #45308
  • [79b3ee14a5] - tools: remove dependency vulnerability checker (Facundo Tuesca) #45675
  • [496a528149] - tools: update lint-md-dependencies to rollup\@3.4.0 (Node.js GitHub Bot) #45638
  • [346132926d] - tools: update doc to highlight.js\@11.7.0 (Node.js GitHub Bot) #45636
  • [610341f241] - tools: update eslint to 8.28.0 (Node.js GitHub Bot) #45532
  • [682a730131] - tools: add automation for updating libuv dependency (Facundo Tuesca) #45362
  • [360c7be315] - tools: add missing step in update-base64.sh script (Facundo Tuesca) #45509
  • [e52f0472bb] - tools: update certdata.txt (Luigi Pinca) #45490
  • [ad8c6c91b5] - tools: include current release in the list of released versions (Antoine du Hamel) #45463
  • [7641044eff] - tools: update lint-md-dependencies to rollup\@3.3.0 (Node.js GitHub Bot) #45442
  • [f5a4c52278] - tools: do not run CQ on non-fast-tracked PRs open for less than 2 days (Moshe Atlow) #45407
  • [0f45c90533] - tools: simplify .eslintrc.js (Rich Trott) #45397
  • [172cbfefa8] - tools: simplify regex in ESLint config (Rich Trott) #45399
  • [456f048e0e] - tools: enable jsdoc/require-property-description rule (Rich Trott) #45370
  • [6fafec351a] - tools: dynamically determine parallelism on GitHub Actions macOS (Rich Trott) #45350
  • [2ca30cacee] - tools: add automation for updating acorn dependency (Facundo Tuesca) #45357
  • [04f213b44c] - tools: add documentation regarding our api tooling (Claudio Wunder) #45270
  • [c63d825681] - tools: allow scripts to run from anywhere (Luigi Pinca) #45361
  • [1b0b68037a] - tools: update eslint to 8.27.0 (Node.js GitHub Bot) #45358
  • [398ca2496b] - tools: update eslint to 8.26.0 (Node.js GitHub Bot) #45243
  • [3053c65fb1] - tools: update lint-md-dependencies to rollup\@3.2.5 (Node.js GitHub Bot) #45332
  • [510506027b] - tools: fix stability index generation (Antoine du Hamel) #45346
  • [e0a8effbc1] - tools: increase macOS cores to 3 on GitHub CI (Rich Trott) #45340
  • [75a146f436] - tools: add automation for updating base64 dependency (Facundo Tuesca) #45300
  • [13390e94af] - tools: fix request-ci-failed comment (Antoine du Hamel) #45291
  • [a93c4f7e41] - tools: update lint-md-dependencies (Node.js GitHub Bot) #45237
  • [078be3ba21] - tools: fix request-ci-failed comment (Antoine du Hamel) #45218
  • [62c233c221] - tools: keep Emeriti lists case-insensitive alphabetic (Rich Trott) #45159
  • [d07a5e25b0] - tools: update actions/setup-python to v4 (Yagiz Nizipli) #45178
  • [48cf8905f7] - tools: update V8 gypfiles for RISC-V (Andreas Schwab) #45149
  • [0cbd2c6f8d] - tools: fix create-or-update-pull-request-action hash on GHA (Antoine du Hamel) #45166
  • [cd911d72ab] - tools: update gr2m/create-or-update-pull-request-action (Luigi Pinca) #45022
  • [ee78e2e0ec] - tools: do not use the set-output command in workflows (Luigi Pinca) #45024
  • [f98a6967e6] - tools: update lint-md-dependencies (Node.js GitHub Bot) #45019
  • [71433f3127] - tools: refactor dynamic strings creation in shell scripts (Antoine du Hamel) #45240
  • [f08c129144] - tools: use Python 3.11 in GitHub Actions workflows (Luigi Pinca) #45191
  • [76897430ed] - tools: have test-asan use ubuntu-20.04 (Filip Skokan) #45581
  • [210cbcbf89] - trace_events: add new categories (theanarkh) #45266
  • [20a39a34e0] - trace_events: fix getCategories (theanarkh) #45092
  • [597c7fcbab] - url: remove unnecessary object call to kFormat (Yagiz Nizipli) #45492
  • [5d964cd4d4] - url: remove \t \n \r in url.parse() similar to WHATWG (Rich Trott) #45116
  • [eb81b6f0fb] - url: improve url.parse() compliance with WHATWG URL (Rich Trott) #45011
  • [3f18a833ff] - util: use private symbols in JS land directly (Joyee Cheung) #45379
  • [32a3859a90] - util: add fast path for utf8 encoding (Yagiz Nizipli) #45412
  • [cd740d0b0d] - util: improve text decoder performance (Yagiz Nizipli) #45388
  • [1dc91abddf] - util: improve text-decoder performance (Yagiz Nizipli) #45363
  • [4730850972] - util: improve textdecoder decode performance (Yagiz Nizipli) #45294
  • [717b604da7] - (SEMVER-MINOR) util: add MIME utilities (#21128) (Bradley Farias) #21128
  • [39cf8b4f16] - vm: make ContextifyContext a BaseObject (Joyee Cheung) #44796
  • [09ea75823c] - watch: add CLI flag to preserve output (Debadree Chatterjee) #45717
  • [24bfe543c5] - watch: watch for missing dependencies (Moshe Atlow) #45348

Security

Security wording was detected, but no CVEs were found.

Details

date
Jan. 6, 2023, 1:13 a.m.
name
2023-01-05, Version 18.13.0 'Hydrogen' (LTS), @danielleadams
type
Minor
👇
Register or login to:
  • 🔍View and search all Node.js releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or