Node.js - v20.7.0

Security

Notable Changes

  • [022f1b70c1] - src: support multiple --env-file declarations (Yagiz Nizipli) #49542
  • [4a1d1cad61] - crypto: update root certificates to NSS 3.93 (Node.js GitHub Bot) #49341
  • [a1a65f593c] - deps: upgrade npm to 10.1.0 (npm team) #49570
  • [6c2480cad9] - (SEMVER-MINOR) deps: upgrade npm to 10.0.0 (npm team) #49423
  • [bef900e56b] - doc: move and rename loaders section (Geoffrey Booth) #49261
  • [db4ce8a593] - doc: add release key for Ulises Gascon (Ulises Gascón) #49196
  • [11c85ffa98] - (SEMVER-MINOR) lib: add api to detect whether source-maps are enabled (翠 / green) #46391
  • [ec51e25ed7] - src,permission: add multiple allow-fs-* flags (Carlos Espa) #49047
  • [efdc95fbc0] - (SEMVER-MINOR) test_runner: expose location of tests (Colin Ihrig) #48975

Commits

  • [e84515594e] - benchmark: use tmpdir.resolve() (Livia Medeiros) #49137
  • [f37444e896] - bootstrap: build code cache from deserialized isolate (Joyee Cheung) #49099
  • [af6dc1754d] - bootstrap: do not generate code cache in an unfinalized isolate (Joyee Cheung) #49108
  • [cade5716df] - build: add symlink to compile_commands.json file if needed (Juan José) #49260
  • [34a2590b05] - build: expand when we run internet tests (Michael Dawson) #49218
  • [f637fd46ab] - build: fix typo libray -> library (configure.py) (michalbiesek) #49106
  • [ef3d8dd493] - crypto: remove webcrypto EdDSA key checks and properties (Filip Skokan) #49408
  • [4a1d1cad61] - crypto: update root certificates to NSS 3.93 (Node.js GitHub Bot) #49341
  • [7eb10a38ea] - crypto: remove getDefaultEncoding() (Tobias Nießen) #49170
  • [772496c030] - crypto: remove default encoding from DiffieHellman (Tobias Nießen) #49169
  • [c795083232] - crypto: remove default encoding from Hash/Hmac (Tobias Nießen) #49167
  • [08197aa010] - crypto: remove default encoding from sign/verify (Tobias Nießen) #49145
  • [a1a65f593c] - deps: upgrade npm to 10.1.0 (npm team) #49570
  • [6c2480cad9] - (SEMVER-MINOR) deps: upgrade npm to 10.0.0 (npm team) #49423
  • [84195d9584] - deps: add missing thread-common.c in uv.gyp (Santiago Gimeno) #49410
  • [5b70b68b3d] - deps: V8: cherry-pick eadaef581c29 (Adam Majer) #49401
  • [fe34d632e8] - deps: update zlib to 1.2.13.1-motley-f5fd0ad (Node.js GitHub Bot) #49252
  • [db4ce8a593] - doc: add release key for Ulises Gascon (Ulises Gascón) #49196
  • [e5f3a694cf] - doc: fix node-api call example (Chengzhong Wu) #49395
  • [021345a724] - doc: add news issue for Diagnostics WG (Michael Dawson) #49306
  • [f82347266b] - doc: clarify policy expectations (Rafael Gonzaga) #48947
  • [73cfd9c895] - doc: add print results for examples in StringDecoder (Jungku Lee) #49326
  • [63ab591416] - doc: update outdated reference to NIST SP 800-131A (Tobias Nießen) #49316
  • [935dfe2afd] - doc: use cjs as block code's type in MockTimers (Deokjin Kim) #49309
  • [7c0cd2fb87] - doc: update options.filter description for fs.cp (Shubham Pandey) #49289
  • [f72e79ea67] - doc: add riscv64 to list of architectures (Stewart X Addison) #49284
  • [d19c710064] - doc: avoid "not currently recommended" (Tobias Nießen) #49300
  • [ae656101c0] - doc: update module hooks docs (Geoffrey Booth) #49265
  • [fefbdb92f2] - doc: modify param description for end(),write() in StringDecoder (Jungku Lee) #49285
  • [59e66a1ebe] - doc: use NODE_API_SUPPORTED_VERSION_MAX in release doc (Cheng Zhao) #49268
  • [ac3b88449b] - doc: fix typo in stream.finished documentation (Antoine du Hamel) #49271
  • [7428ebf6c3] - doc: update description for percent_encode sets in WHATWG API (Jungku Lee) #49258
  • [bef900e56b] - doc: move and rename loaders section (Geoffrey Booth) #49261
  • [a22e0d9696] - doc: clarify use of Uint8Array for n-api (Fedor Indutny) #48742
  • [1704f24cb9] - doc: add signature for module.register (Geoffrey Booth) #49251
  • [5a363bb01b] - doc: caveat unavailability of import.meta.resolve in custom loaders (Jacob Smith) #49242
  • [8101f2b259] - doc: use same name in the doc as in the code (Hyunjin Kim) #49216
  • [edf278d60d] - doc: add notable-change label mention to PR template (Rafael Gonzaga) #49188
  • [3df2251a6a] - doc: add h1 summary to security release process (Rafael Gonzaga) #49112
  • [9fcd99a744] - doc: update to semver-minor releases by default (Rafael Gonzaga) #49175
  • [777931f499] - doc: fix wording in napi_async_init (Tobias Nießen) #49180
  • [f45c8e10c0] - doc,test: add known path resolution issue in permission model (Tobias Nießen) #49155
  • [a6cfea3f74] - esm: align sync and async load implementations (Antoine du Hamel) #49152
  • [9fac310b33] - fs: add the options param description in openAsBlob() (Yeseul Lee) #49308
  • [92772a8175] - fs: remove redundant code in readableWebStream() (Deokjin Kim) #49298
  • [88ba79b083] - fs: make sure to write entire buffer (Robert Nagy) #49211
  • [11c85ffa98] - (SEMVER-MINOR) lib: add api to detect whether source-maps are enabled (翠 / green) #46391
  • [c12711ebfe] - lib: implement WeakReference on top of JS WeakRef (Joyee Cheung) #49053
  • [9a0891f88d] - meta: bump step-security/harden-runner from 2.5.0 to 2.5.1 (dependabot[bot]) #49435
  • [ae67f41ef1] - meta: bump actions/checkout from 3.5.3 to 3.6.0 (dependabot[bot]) #49436
  • [71b4411fb2] - meta: bump actions/setup-node from 3.7.0 to 3.8.1 (dependabot[bot]) #49434
  • [83b7d3a395] - meta: remove modules team from CODEOWNERS (Benjamin Gruenbaum) #49412
  • [81ff68c45c] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #49264
  • [ab975233cc] - meta: mention nodejs/tsc when changing GH templates (Rafael Gonzaga) #49189
  • [ceaa5494de] - meta: add test/reporters to codeowners (Chemi Atlow) #49186
  • [de0a51b7cf] - net: improve performance of isIPv4 and isIPv6 (Uzlopak) #49568
  • [8d0913bf95] - net: use asserts in JS Socket Stream to catch races in future (Tim Perry) #49400
  • [2486836a7d] - net: fix crash due to simultaneous close/shutdown on JS Stream Sockets (Tim Perry) #49400
  • [7a808340cd] - node-api: fix compiler warning in node_api.h (Michael Graeb) #49103
  • [30f26a99f4] - permission: ensure to resolve path when calling mkdtemp (RafaelGSS) nodejs-private/node-private#440
  • [5051c75a5b] - policy: fix path to URL conversion (Antoine du Hamel) #49133
  • [173aed4757] - report: fix recent coverity warning (Michael Dawson) #48954
  • [d7ff78b442] - sea: generate code cache with deserialized isolate (Joyee Cheung) #49226
  • [022f1b70c1] - src: support multiple --env-file declarations (Yagiz Nizipli) #49542
  • [154b1c2115] - src: don't overwrite environment from .env file (Phil Nash) #49424
  • [dc4de1c69b] - src: modify code for empty string (pluris) #49336
  • [701c46f967] - src: remove unused PromiseWrap-related code (Joyee Cheung) #49335
  • [4a094dc7af] - src: rename IsAnyByteSource to IsAnyBufferSource (Tobias Nießen) #49346
  • [55d6649175] - src: support snapshot deserialization in RAIIIsolate (Joyee Cheung) #49226
  • [dc092864ef] - src: remove unused function GetName() in node_perf (Jungku Lee) #49244
  • [f2552a410e] - src: use ARES_SUCCESS instead of 0 (Jungku Lee) #49048
  • [4a9ae31519] - src: add a condition if the argument of DomainToUnicode is empty (Jungku Lee) #49097
  • [f460362cdf] - src: remove C++ WeakReference implementation (Joyee Cheung) #49053
  • [2a35383b3e] - src: use per-realm GetBindingData() wherever applicable (Joyee Cheung) #49007
  • [184bbddcf5] - src: add per-realm GetBindingData() method (Joyee Cheung) #49007
  • [e9946885f9] - src: serialize both BaseObject slots (Joyee Cheung) #48996
  • [ec51e25ed7] - src,permission: add multiple allow-fs-* flags (Carlos Espa) #49047
  • [8aac95de4b] - stream: improve tee perf by reduce ReflectConstruct usages (Raz Luvaton) #49546
  • [0eea7fd8fb] - stream: use Buffer.from when constructor is a Buffer (Matthew Aitken) #49250
  • [b961d9bd52] - stream: add highWaterMark for the map operator (Raz Luvaton) #49249
  • [ca1384166d] - test: fix warning for comment in embedtest (Jungku Lee) #49416
  • [2a35782809] - test: simplify test-crypto-dh-group-setters (Tobias Nießen) #49404
  • [6740f3c209] - test: verify dynamic import call with absolute path strings (Chengzhong Wu) #49275
  • [6ed47bd8fb] - test: reduce length in crypto keygen tests (Joyee Cheung) #49221
  • [4faa30c553] - test: split JWK async elliptic curve keygen tests (Joyee Cheung) #49221
  • [e04a2603d8] - test: split test-crypto-keygen.js (Joyee Cheung) #49221
  • [0d23c1d4ce] - test: rename test-crypto-modp1-error (Tobias Nießen) #49348
  • [48e41569e2] - test: migrate message source map tests from Python to JS (Yiyun Lei) #49238
  • [a11e64e09c] - test: fix compiler warning in NodeCryptoEnv (Tobias Nießen) #49206
  • [345543938f] - test: handle EUNATCH (Abdirahim Musse) #48050
  • [e391f4b197] - test: use tmpdir.resolve() (Livia Medeiros) #49136
  • [910378f93f] - test: reduce flakiness of test-esm-loader-hooks (Antoine du Hamel) #49248
  • [4a85f70462] - test: add spawnSyncAndExit() and spawnSyncAndExitWithoutError() (Joyee Cheung) #49200
  • [9610008b79] - test: make test-perf-hooks more robust and work with workers (Joyee Cheung) #49197
  • [dc8fff9a75] - test: use gcUntil() in test-v8-serialize-leak (Joyee Cheung) #49168
  • [ca9f801332] - test: make WeakReference tests robust (Joyee Cheung) #49053
  • [de103a4686] - test: add test for effect of UV_THREADPOOL_SIZE (Tobias Nießen) #49165
  • [47d24f144b] - test: use expectSyncExit{WithErrors} in snapshot tests (Joyee Cheung) #49020
  • [c441f5a097] - test: add expectSyncExitWithoutError() and expectSyncExit() utils (Joyee Cheung) #49020
  • [4d184b5251] - test: remove --no-warnings flag in test_runner fixtures (Raz Luvaton) #48989
  • [25e967a90b] - test: reorder test files fixtures for better understanding (Raz Luvaton) #48787
  • [fac56dbcc0] - test,benchmark: use tmpdir.fileURL() (Livia Medeiros) #49138
  • [36763fa532] - test_runner: preserve original property descriptor (Erick Wendel) #49433
  • [40e9fcdbea] - test_runner: add support for setImmediate (Erick Wendel) #49397
  • [23216f1935] - test_runner: report covered lines, functions and branches to reporters (Phil Nash) #49320
  • [283f2806b1] - test_runner: expose spec reporter as newable function (Chemi Atlow) #49184
  • [546ad5f770] - test_runner: reland run global after() hook earlier (Colin Ihrig) #49116
  • [efdc95fbc0] - (SEMVER-MINOR) test_runner: expose location of tests (Colin Ihrig) #48975
  • [4bc0a8fe99] - test_runner: fix global after not failing the tests (Raz Luvaton) #48913
  • [08738b2664] - test_runner: fix timeout in *Each hook failing further tests (Raz Luvaton) #48925
  • [c2f1830f66] - test_runner: cleanup test timeout abort listener (Raz Luvaton) #48915
  • [75333f38b2] - test_runner: fix global before not called when no global test exists (Raz Luvaton) #48877
  • [b28b85adf8] - tls: remove redundant code in onConnectSecure() (Deokjin Kim) #49457
  • [83fc4dccbc] - tls: refactor to use validateFunction (Deokjin Kim) #49422
  • [8949cc79dd] - tls: ensure TLS Sockets are closed if the underlying wrap closes (Tim Perry) #49327
  • [1df56e6f01] - tools: update eslint to 8.48.0 (Node.js GitHub Bot) #49343
  • [ef50ec5b57] - tools: update lint-md-dependencies (Node.js GitHub Bot) #49342
  • [9a8fb4fc34] - tools: remove v8_dump_build_config action (Cheng Zhao) #49301
  • [91b2d4314b] - tools: update lint-md-dependencies (Node.js GitHub Bot) #49253
  • [b51946ebdd] - tools: fix github reporter appended multiple times (Moshe Atlow) #49199
  • [ae40cb1612] - url: validate pathToFileURL(path) argument as string (LiviaMedeiros) #49161
  • [e787673dcf] - url: handle unicode hostname if empty (Yagiz Nizipli) #49396
  • [6ee74be87f] - vm: store MicrotaskQueue in ContextifyContext directly (Joyee Cheung) #48982
  • [0179c6dc8f] - worker: protect against user mutating well-known prototypes (Antoine du Hamel) #49270

Security

Security wording was detected, but no CVEs were found.

Details

date
Sept. 18, 2023, 7:01 p.m.
name
2023-09-18, Version 20.7.0 (Current), @UlisesGascon
type
Minor
👇
Register or login to:
  • 🔍View and search all Node.js releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or