Node.js - v18.7.0

Security

Notable changes

  • doc:
  • add F3n67u to collaborators (Feng Yu) #43953
  • deprecate coercion to integer in process.exit (Daeyeon Jeong) #43738
  • (SEMVER-MINOR) deprecate diagnostics_channel object subscribe method (Stephen Belanger) #42714
  • events:
  • (SEMVER-MINOR) expose CustomEvent on global with CLI flag (Daeyeon Jeong) #43885
  • (SEMVER-MINOR) add CustomEvent (Daeyeon Jeong) #43514
  • http:
  • (SEMVER-MINOR) add drop request event for http server (theanarkh) #43806
  • lib:
  • (SEMVER-MINOR) improved diagnostics_channel subscribe/unsubscribe (Stephen Belanger) #42714
  • util:
  • (SEMVER-MINOR) add tokens to parseArgs (John Gee) #43459

Commits

  • [0aa255ab72] - bootstrap: handle snapshot errors gracefully (Joyee Cheung) #43531
  • [0783ddf57e] - buffer: do not leak memory if buffer is too big (Keyhan Vakil) #43938
  • [12657accdd] - build: add .gitattributes for npm and other shims (Hrishikesh Kadam) #43879
  • [c2db4f4581] - build: make GitPod less noisy (Rich Trott) #43829
  • [364deeadcd] - build: add GitHub token permissions for workflows (Varun Sharma) #43743
  • [8b83b4d5be] - child_process: do not need to count length when maxBuffer is Infinity (theanarkh) #43822
  • [c1893b7a7c] - child_process: avoid repeated calls to normalizeSpawnArguments (木杉) #43345
  • [7b276b89b9] - cluster: send connection to other server when worker drop it (theanarkh) #43747
  • [e8c66f92a5] - crypto: remove unneeded guard (Rich Trott) #43856
  • [c95132e9ea] - deps: cherry-pick libuv/libuv\@3a7b955 (Ben Noordhuis) #43950
  • [cc8d5426d2] - deps: cherry-pick libuv/libuv\@abb109f (Ben Noordhuis) #43950
  • [7762e463d6] - deps: update corepack to 0.12.1 (Node.js GitHub Bot) #43965
  • [1256c4dad5] - deps: update hast-util-raw (Moshe Atlow) #43927
  • [aac97c2d2a] - deps: update undici to 5.8.0 (Node.js GitHub Bot) #43886
  • [cdff61917d] - deps: clean archs files for OpenSSL (RafaelGSS) #43735
  • [fc936a84e4] - deps: remove not used architectures (RafaelGSS) #43735
  • [361a643d8b] - deps: V8: backport f3cad8cec656 (Joyee Cheung) #43531
  • [2e1732ebd0] - deps: V8: backport 22698d267667 (Chengzhong Wu) #43751
  • [979f469d3a] - deps: upgrade npm to 8.15.0 (npm team) #43917
  • [4096d81988] - deps: upgrade npm to 8.14.0 (npm team) #43826
  • [2ec8092e2c] - deps,src: use SIMD for normal base64 encoding (Brian White) #39775
  • [67b4edde37] - dns: fix getServers return undefined (jiahao.si) #43922
  • [7c75539a88] - dns: fix cares memory leak (theanarkh) #43912
  • [1f80b88da5] - doc: update email and mailmap for BethGriggs (Beth Griggs) #43985
  • [8a2a6e16eb] - doc: add 15.x - 18.x to Other Versions section (shhh7612) #43940
  • [51cb0d42ca] - doc: inspector.close undefined in worker threads (Keyhan Vakil) #43867
  • [c789c0f5f7] - doc: improve documentation for safe Promise statics alternatives (Antoine du Hamel) #43759
  • [cb9b0e0011] - doc: recommend git-node-v8 (Keyhan Vakil) #43934
  • [d7e9bd1830] - doc: clarify subprocess.stdout/in/err property (Kohei Ueno) #43910
  • [808793ebb5] - doc: fix typo in src/crypto/README.md (Jianru Lin) #43968
  • [bbc455c4f9] - doc: remind backporter about v8_embedder_string (Keyhan Vakil) #43924
  • [a86b66c8b4] - doc: fix typo in http.md (Airing) #43933
  • [a96af37233] - doc: add F3n67u to collaborators (Feng Yu) #43953
  • [aa7d4e59f7] - doc: improve test runner timeout docs (Tobias Nießen) #43836
  • [80c2fa8212] - doc: mention Win 32-bit openssl build issue (RafaelGSS) #43853
  • [8b8c55df7e] - doc: add security release specifics to releases.md (Beth Griggs) #43835
  • [42693aaf9f] - doc: add history info for global.performance (Antoine du Hamel) #43841
  • [140d6af572] - doc: add platform-windows-arm to who to CC (Michael Dawson) #43808
  • [976093efe3] - doc: document ES2022's Error "cause" property (James Ide) #43830
  • [ec7e45e4a2] - doc: include make clean to openssl arch (RafaelGSS) #43735
  • [d64dfd53c9] - doc: add link to diagnostic tools (Rafael Gonzaga) #43736
  • [2910136920] - doc: update links to MDN page about dynamic imports (Jannis R) #43847
  • [d88a9fae79] - doc: deprecate coercion to integer in process.exit (Daeyeon Jeong) #43738
  • [fc843e103d] - doc: add MoLow to triagers (Moshe Atlow) #43799
  • [8c8c97da61] - (SEMVER-MINOR) doc: deprecate diagnostics_channel object subscribe method (Stephen Belanger) #42714
  • [9b53a694b5] - doc: revert anachronistic 'node:' module require()s in API history notes (DeeDeeG) #43768
  • [2815bd3002] - doc: clarify release process for new releasers (Rafael Gonzaga) #43739
  • [50b3750e67] - doc: fix typo in ngtcp2 readme (Dan Castillo) #43767
  • [6bcd40dd85] - domain: fix vm promise tracking while keeping isolation (Stephen Belanger) #43556
  • [e89e0b470b] - esm: remove superfluous argument (Rich Trott) #43884
  • [0d2921f396] - esm: fix erroneous re-initialization of ESMLoader (Jacob Smith) #43763
  • [9b5b8d78c3] - esm: throw on any non-2xx response (LiviaMedeiros) #43742
  • [dfc4832ef1] - (SEMVER-MINOR) events: expose CustomEvent on global with CLI flag (Daeyeon Jeong) #43885
  • [e4473952ae] - (SEMVER-MINOR) events: add CustomEvent (Daeyeon Jeong) #43514
  • [100f6deb09] - fs: use signed types for stat data (LiviaMedeiros) #43714
  • [25ec71db63] - http: fix http server connection list when close (theanarkh) #43949
  • [ca658c8afe] - (SEMVER-MINOR) http: add drop request event for http server (theanarkh) #43806
  • [9c699bd8a8] - http: wait for pending responses in closeIdleConnections (Paolo Insogna) #43890
  • [781d5e54e3] - inspector: set sampling interval before start (Shelley Vohr) #43779
  • [0b5dbb2a56] - lib: refactor PriorityQueue to use private field (Finn Yu) #43889
  • [324473ca32] - (SEMVER-MINOR) lib: improved diagnostics_channel subscribe/unsubscribe (Stephen Belanger) #42714
  • [5aa3b213ac] - meta: update AUTHORS (Node.js GitHub Bot) #43966
  • [e707552357] - meta: update node-api in label-pr-config (Daeyeon Jeong) #43794
  • [8a8de94034] - meta: update AUTHORS (Node.js GitHub Bot) #43872
  • [7d49fc766c] - meta: use platform dropdown on flaky template (Rafael Gonzaga) #43855
  • [e4aa50fc3f] - meta: enable blank issues (Matteo Collina) #43775
  • [ceb7c150ec] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #43770
  • [29bcd47738] - net: fix socket._getpeername (Daeyeon Jeong) #43010
  • [380659daf1] - process: use defineProperty instead of assignment (Mark S. Miller) #43907
  • [aba9c8ebea] - repl: fix overzealous top-level await (Tobias Nießen) #43827
  • [1deb6b73b7] - repl: use SafePromiseAll and SafePromiseRace (Antoine du Hamel) #43758
  • [bf8f2e23ff] - src: refactor DH groups to delete crypto_groups.h (Tobias Nießen) #43896
  • [9435fbf8cd] - src: remove dead code in base64_encode (Tobias Nießen) #43979
  • [2c47e58ea0] - src: fix regression that a source marker is lost (cola119) #43086
  • [d084150320] - src: per-isolate eternal template properties (Chengzhong Wu) #43802
  • [9f9d00ccbb] - src: merge NativeModuleEnv into NativeModuleLoader (Joyee Cheung) #43824
  • [bb512904e9] - src: use named struct instead of typedef (Tobias Nießen) #43881
  • [bb5511e8cc] - src: use named enum instead of typedef (Tobias Nießen) #43880
  • [5db0c8f667] - src: pass only Isolate* and env_vars to EnabledDebugList::Parse() (Darshan Sen) #43668
  • [249365524e] - src: fix node watchdog race condition (theanarkh) #43780
  • [17cb27237d] - src: deduplicate SetALPN implementations (Tobias Nießen) #43756
  • [b4c75a96be] - src: fix napi_check_object_type_tag() (Daeyeon Jeong) #43788
  • [8432d6596f] - src: slim down env-inl.h (Ben Noordhuis) #43745
  • [2266a4b6d6] - stream: improve respondWithNewView() (Daeyeon Jeong) #43866
  • [bf3991b406] - stream: fix 0 transform hwm backpressure (Robert Nagy) #43685
  • [a057510037] - stream: initial approach to include strategy options on Readable.toWeb() (txxnano) #43515
  • [198cf59d2c] - test: update WPT encoding tests (Kohei Ueno) #43958
  • [f0ed1aed8d] - test: remove test-whatwg-events-add-event-listener-options-once.js (Feng Yu) #43877
  • [88505556fe] - test: work scheduled in process.nextTick can keep the event loop alive (Andreu Botella) #43787
  • [81a21946eb] - test: simplify test-tls-set-secure-context (Tobias Nießen) #43878
  • [61cd11a8a7] - test: use common.mustNotMutateObjectDeep() in fs tests (LiviaMedeiros) #43819
  • [b1081dbe12] - test: fix test http upload timeout (theanarkh) #43935
  • [efd5e0e925] - test: simplify ReplStream.wait() (Tobias Nießen) #43857
  • [ef21ad2996] - test: merge test-crypto-dh-hash with modp18 test (Tobias Nießen) #43891
  • [e502c50a90] - test: refactor test/es-module/test-esm-resolve-type (Antoine du Hamel) #43178
  • [c782c3dc69] - test: ensure NODE_EXTRA_CA_CERTS not set before tests (KrayzeeKev) #43858
  • [bb6787cb57] - test: add check to test-fs-readfile-tostring-fail (Richard Lau) #43850
  • [7571704186] - test: complete TODO in test/wpt/test-url.js (Kohei Ueno) #43797
  • [6f1d2dfb9d] - test: add test on worker process.exit in async modules (Chengzhong Wu) #43751
  • [776cc3abbd] - test: use common.mustNotMutateObjectDeep() in immutability tests (LiviaMedeiros) #43196
  • [42f2deb3a0] - test: add common.mustNotMutateObjectDeep() (LiviaMedeiros) #43196
  • [f3fc51c508] - test: fix coverity warning in test (Michael Dawson) #43631
  • [a9ecba2fa8] - test: mark test-http-client-response-timeout flaky (Tobias Nießen) #43792
  • [cd0d9ddb7c] - test_runner: add support for boolean values for concurrency option (Lenvin Gonsalves) #43887
  • [f98020138a] - test_runner: validate timeout option (Antoine du Hamel) #43843
  • [58d15b3687] - test_runner: pass signal on timeout (Moshe Atlow) #43911
  • [8b0248506f] - test_runner: do not report an error when tests are passing (Antoine du Hamel) #43919
  • [aa8053e1fa] - test_runner: recieve and pass AbortSignal (Moshe Atlow) #43554
  • [f13e4c1be9] - test_runner: fix it concurrency (Moshe Atlow) #43757
  • [e404a3ef6d] - test_runner: support timeout for tests (Moshe Atlow) #43505
  • [f28198cc05] - test_runner: catch errors thrown within describe (Moshe Atlow) #43729
  • [bfe0ac6cd0] - tools: add more options to track flaky tests (Antoine du Hamel) #43954
  • [17a4e5e775] - tools: add verbose flag to inactive TSC finder (Rich Trott) #43913
  • [373304b0c7] - tools: add support for using API key to vuln checking script (Facundo Tuesca) #43909
  • [ed45088c14] - tools: support versioned node shared libs on z/OS (alexcfyung) #42256
  • [c9ecd6d21f] - tools: update doc to highlight.js\@11.6.0 (Node.js GitHub Bot) #43870
  • [c92135aa0f] - tools: update lint-md-dependencies to rollup\@2.77.0 (Node.js GitHub Bot) #43871
  • [e12bf40fd1] - tools: update eslint to 8.20.0 (Node.js GitHub Bot) #43873
  • [09fe9b30a9] - tools: add script for vulnerability checking (Facundo Tuesca) #43362
  • [19e8876877] - trace_events: trace net connect event (theanarkh) #43903
  • [1af7f24143] - util: remove unicode support todo for perf implications (Rhys) #43762
  • [acfc33ca8c] - (SEMVER-MINOR) util: add tokens to parseArgs (John Gee) #43459
  • [f32aec8a6d] - util: refactor to use validateObject (Kohei Ueno) #43769
  • [d7cfd0c5ba] - v8: serialize BigInt64Array and BigUint64Array (Ben Noordhuis) #43571

Security

Security wording was detected, but no CVEs were found.

Details

date
July 26, 2022, 10:28 p.m.
name
2022-07-26, Version 18.7.0 (Current), @danielleadams
type
Minor
👇
Register or login to:
  • 🔍View and search all Node.js releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or