Node.js - v18.2.0

Notable Changes

OpenSSL 3.0.3

This update can be treated as a security release as the issues addressed in OpenSSL 3.0.3 slightly affect Node.js 18.
See https://nodejs.org/en/blog/vulnerability/openssl-fixes-in-regular-releases-may2022/ for more information on how the May 2022 OpenSSL releases affect other Node.js release lines.

• [8e54c19a6e] - deps: update archs files for quictls/openssl-3.0.3+quic (RafaelGSS) #43022
• [6365bf808e] - deps: upgrade openssl sources to quictls/openssl-3.0.3 (RafaelGSS) #43022

Other Notable Changes

• [13c333e533] - Revert "deps: add template for generated headers" (Daniel Bevenius) #42978
• [d128356a7f] - deps: update undici to 5.2.0 (Node.js GitHub Bot) #43059
• [2df1624f80] - deps: upgrade npm to 8.9.0 (npm team) #42968
• [6365bf808e] - deps: upgrade openssl sources to quictls/openssl-3.0.3 (RafaelGSS) #43022
• [4a3f678e70] - doc: add LiviaMedeiros to collaborators (LiviaMedeiros) #43039
• [686c4c1f6f] - doc: add release key for Juan Arboleda (Juan José) #42961
• [784d84cf34] - (SEMVER-MINOR) fs: add read(buffer[, options]) versions (LiviaMedeiros) #42768
• [2f192c4be0] - (SEMVER-MINOR) http: added connection closing methods (Paolo Insogna) #42812
• [c92e291beb] - (SEMVER-MINOR) perf_hooks: add PerformanceResourceTiming (RafaelGSS) #42725

Commits

• [7cac7bb806] - assert: fix CallTracker wraps the function causes the length to be lost (OneNail) #42909
• [e74a8da287] - assert: make assert.fail less affected by prototype tampering (Antoine du Hamel) #42918
• [1146806673] - bootstrap: stop delaying instantiation of maps in per-context scripts (Darshan Sen) #42934
• [a20310d171] - bootstrap: use a context snapshotted with primordials in workers (Joyee Cheung) #42867
• [9ee7d9eb15] - bootstrap: fix wasm_web_api external reference registration (Joyee Cheung) #42903
• [cec678a00e] - build: set ASAN workaround (Richard Lau) #43085
• [7c4df42caa] - build: disable windows-2022 temporarily (Jiawen Geng) #43093
• [0eb32ed976] - build: fix various shared library build issues (William Marlow) #41850
• [48f4a714b2] - build: fix indeterminacy of icu_locales value (Sergey Nazaryev) #42865
• [19c060fd84] - crypto: adjust minimum length in generateKey('hmac', ...) (LiviaMedeiros) #42944
• [183bcc0699] - crypto: clean up parameter validation in HKDF (Tobias Nießen) #42924
• [946f57c7bc] - debugger: fix inconsistent inspector output of exec new Map() (Kohei Ueno) #42423
• [d128356a7f] - deps: update undici to 5.2.0 (Node.js GitHub Bot) #43059
• [a9703a55ef] - deps: remove opensslconf template headers (Daniel Bevenius) #43035
• [a4a4f7134b] - deps: fix llhttp version number (Michael Dawson) #43029
• [8e54c19a6e] - deps: update archs files for quictls/openssl-3.0.3+quic (RafaelGSS) #43022
• [6365bf808e] - deps: upgrade openssl sources to quictls/openssl-3.0.3 (RafaelGSS) #43022
• [e8121ae7fe] - deps: regenerate OpenSSL archs files (Daniel Bevenius) #42978
• [13c333e533] - Revert "deps: add template for generated headers" (Daniel Bevenius) #42978
• [2df1624f80] - deps: upgrade npm to 8.9.0 (npm team) #42968
• [f53ed9d1bb] - doc: use serial comma in fs docs (Tobias Nießen) #43104
• [839824aca8] - doc: use serial comma in events docs (Tobias Nießen) #43113
• [9629c74080] - doc: use serial comma in modules docs (Tobias Nießen) #43103
• [76096c2d4a] - doc: use serial comma in util docs (Tobias Nießen) #43063
• [1e9de0dd5a] - doc: remove git:// protocol, adjust nits in onboarding.md (LiviaMedeiros) #43045
• [eb630d7ef9] - doc: add maintaining info for shared libary option (Michael Dawson) #42517
• [3816a97bae] - doc: add detail for how to update llhttp (Michael Dawson) #43028
• [330e267a57] - doc: use serial comma in buffer docs (Tobias Nießen) #43048
• [0957212390] - doc: use consistent method symbol (Paolo Insogna) #42974
• [22cb7104cb] - doc: add Rafael to the security steward for NearForm (Matteo Collina) #42966
• [ef177da3f1] - doc: mark some node-api functions as experimental (NickNaso) #42987
• [4a3f678e70] - doc: add LiviaMedeiros to collaborators (LiviaMedeiros) #43039
• [c988a0ed26] - doc: use serial comma in http docs (Tobias Nießen) #43026
• [4de918b4c1] - doc: add the preferred name for @himself65 (Himself65) #43024
• [686c4c1f6f] - doc: add release key for Juan Arboleda (Juan José) #42961
• [64e0aa116d] - doc: rename N-API to Node-API in test/README.md (Daeyeon Jeong) #42946
• [65d64553c0] - doc: use serial comma in tls docs (Tobias Nießen) #43001
• [840e61e745] - doc: improve commit message example for releases (Juan José) #42954
• [ba3ad7c665] - doc: use serial comma in cluster docs (Tobias Nießen) #42989
• [3ab3086008] - doc: fix errors in Web Streams doc (OneNail) #42862
• [1fbfee2497] - doc: fix examples in cluster.md (OneNail) #42889
• [1237c742f4] - doc: add additional step to security release process (Michael Dawson) #42916
• [88692d8fd6] - doc: add section regarding property definition in primordials.md (Antoine du Hamel) #42921
• [924670f3af] - doc: clarify some default values in fs.md (LiviaMedeiros) #42892
• [becca06f9b] - fs: remove unnecessary ?? operator (Morgan Roderick) #43073
• [784d84cf34] - (SEMVER-MINOR) fs: add read(buffer[, options]) versions (LiviaMedeiros) #42768
• [2f192c4be0] - (SEMVER-MINOR) http: added connection closing methods (Paolo Insogna) #42812
• [bfbf965eb0] - http2: compat support for array headers (OneNail) #42901
• [46a44b3011] - lib: move WebAssembly Web API into separate file (Tobias Nießen) #42993
• [c64b8d3282] - lib,test: enable wasm/webapi/empty-body WPT (Tobias Nießen) #42960
• [ddd271ec2b] - meta: add mailmap entry for ShogunPanda (Paolo Insogna) #43094
• [174ff972f0] - meta: update .mailmap for recent README name change (Rich Trott) #43027
• [16df8ad7c3] - meta: update AUTHORS (Node.js GitHub Bot) #43004
• [0ec32d0715] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #42937
• [037ff3da6d] - node-api: explicitly set __cdecl for API functions (Vladimir Morozov) #42780
• [e2462a2f98] - node-api: fix napi_get_all_property_names (Vladimir Morozov) #42463
• [c92e291beb] - (SEMVER-MINOR) perf_hooks: add PerformanceResourceTiming (RafaelGSS) #42725
• [c535db1195] - src: delete AllocatedBuffer (Darshan Sen) #43008
• [5dc79298e1] - src: remove unnecessary comment (Kohei Ueno) #42952
• [38e4c15534] - src: always signal V8 for intercepted properties (Michaël Zasso) #42963
• [cacff07e75] - src: fix memory leak for v8.serialize (liuxingbaoyu) #42695
• [8cfc18e4db] - src,crypto: remove uses of AllocatedBuffer from crypto_rsa.cc (Darshan Sen) #42852
• [0670843b24] - test: fix dangerous .map in test/parallel/test-http-set-trailers.js (LiviaMedeiros) #43087
• [9eb8bf1d26] - test: reduce flakiness of test-fs-read-position-validation.mjs (LiviaMedeiros) #42999
• [41d2f6e8c5] - test: rename handlewrap.hasref tests (Daeyeon Jeong) #42754
• [e058f47277] - test: improve observable ICU behaviour coverage (LiviaMedeiros) #42683
• [d23debb4cb] - test: validate webstream encoder/decoder inspector (Yoshiki Kurihara) #42747
• [b1c18edaa9] - test: usemustSucceed instead of mustCall with assert.ifError (MURAKAMI Masahiko) #42806
• [2dc795687a] - test: improve lib/internal/webstreams/readablestream.js coverage (MURAKAMI Masahiko) #42823
• [d746207dc2] - test: fix test-crypto-fips.js under shared OpenSSL (Vita Batrla) #42947
• [56c47b5101] - test: use consistent timeouts (Paolo Insogna) #42893
• [68ed3c88d9] - test: add test for position validation in fs.read() and fs.readSync() (LiviaMedeiros) #42837
• [72b90fd5f5] - test: reduce impact of flaky HTTP server tests (Tobias Nießen) #42926
• [531a0a9980] - tools: update lint-md-dependencies to rollup\@2.73.0 (Node.js GitHub Bot) #43107
• [64daaca46d] - tools: update eslint to 8.15.0 (Node.js GitHub Bot) #43005
• [79872382ef] - tools: refactor lint-sh.js to esm module (Feng Yu) #42942
• [265ecdfe07] - tools: update lint-md-dependencies (Node.js GitHub Bot) #43003
• [e9e1f1e194] - typings: fix os.cpus invalid return type (Himself65) #43006
• [55ef6e81cb] - wasm: add missing init reported by coverity (Michael Dawson) #42897
• [5470578008] - worker: fix stream racing with terminate (Keyhan Vakil) #42874