2025-06-09, Version 24.2.0 (Current)

.github/workflows/build-tarball.yml

@@ -86,7 +86,7 @@ jobs:
       - name: Environment Information
         run: npx envinfo
       - name: Download tarball
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e  # v4.2.1
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
         with:
           name: tarballs
           path: tarballs

.github/workflows/codeql.yml

@@ -27,15 +27,15 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5  # v3.28.11
+        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f  # v3.28.18
         with:
           languages: ${{ matrix.language }}
           config-file: ./.github/codeql-config.yml
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5  # v3.28.11
+        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f  # v3.28.18
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5  # v3.28.11
+        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f  # v3.28.18
         with:
           category: /language:${{matrix.language}}

.github/workflows/coverage-linux-without-intl.yml

@@ -79,6 +79,6 @@ jobs:
       - name: Clean tmp
         run: rm -rf coverage/tmp && rm -rf out
       - name: Upload
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574  # v5.4.0
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24  # v5.4.3
         with:
           directory: ./coverage

.github/workflows/coverage-linux.yml

@@ -79,6 +79,6 @@ jobs:
       - name: Clean tmp
         run: rm -rf coverage/tmp && rm -rf out
       - name: Upload
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574  # v5.4.0
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24  # v5.4.3
         with:
           directory: ./coverage

.github/workflows/coverage-windows.yml

@@ -71,6 +71,6 @@ jobs:
       - name: Clean tmp
         run: npx rimraf ./coverage/tmp
       - name: Upload
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574  # v5.4.0
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24  # v5.4.3
         with:
           directory: ./coverage

.github/workflows/notify-on-push.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Slack Notification
-        uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990  # 2.3.2
+        uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661  # 2.3.3
         env:
           SLACK_COLOR: '#DE512A'
           SLACK_ICON: https://github.com/nodejs.png?size=48
@@ -57,7 +57,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
       - name: Slack Notification
         if: ${{ env.INVALID_COMMIT_MESSAGE }}
-        uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990  # 2.3.2
+        uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661  # 2.3.3
         env:
           SLACK_COLOR: '#DE512A'
           SLACK_ICON: https://github.com/nodejs.png?size=48

.github/workflows/notify-on-review-wanted.yml

@@ -33,7 +33,7 @@ jobs:
           fi
 
       - name: Slack Notification
-        uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990  # 2.3.2
+        uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661  # 2.3.3
         env:
           MSG_MINIMAL: actions url
           SLACK_COLOR: '#3d85c6'

.github/workflows/scorecard.yml

@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481  # v2.11.0
+        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0  # v2.12.0
         with:
           egress-policy: audit  # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -43,7 +43,7 @@ jobs:
           persist-credentials: false
 
       - name: Run analysis
-        uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186  # v2.4.1
+        uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde  # v2.4.2
         with:
           results_file: results.sarif
           results_format: sarif
@@ -73,6 +73,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841  # v3.28.13
+        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f  # v3.28.18
         with:
           sarif_file: results.sarif

BUILDING.md

@@ -122,6 +122,7 @@ platforms. This is true regardless of entries in the table below.
 | SmartOS          | x64              | >= 18                             | Tier 2       |                                      |
 | AIX              | ppc64be >=power8 | >= 7.2 TL04                       | Tier 2       |                                      |
 | FreeBSD          | x64              | >= 13.2                           | Experimental |                                      |
+| OpenHarmony      | arm64            | >= 5.0                            | Experimental |                                      |
 
 <!--lint disable final-definition-->
 

CHANGELOG.md

@@ -40,7 +40,8 @@ release.
 </tr>
 <tr>
   <td valign="top">
-<b><a href="doc/changelogs/CHANGELOG_V24.md#24.1.0">24.1.0</a></b><br/>
+<b><a href="doc/changelogs/CHANGELOG_V24.md#24.2.0">24.2.0</a></b><br/>
+<a href="doc/changelogs/CHANGELOG_V24.md#24.1.0">24.1.0</a><br/>
 <a href="doc/changelogs/CHANGELOG_V24.md#24.0.2">24.0.2</a><br/>
 <a href="doc/changelogs/CHANGELOG_V24.md#24.0.1">24.0.1</a><br/>
 <a href="doc/changelogs/CHANGELOG_V24.md#24.0.0">24.0.0</a><br/>

README.md

@@ -180,6 +180,8 @@ For information about the governance of the Node.js project, see
   **Matteo Collina** <<[email protected]>> (he/him)
 * [mhdawson](https://github.com/mhdawson) -
   **Michael Dawson** <<[email protected]>> (he/him)
+* [panva](https://github.com/panva) -
+  **Filip Skokan** <<[email protected]>> (he/him)
 * [RafaelGSS](https://github.com/RafaelGSS) -
   **Rafael Gonzaga** <<[email protected]>> (he/him)
 * [RaisinTen](https://github.com/RaisinTen) -
@@ -401,14 +403,12 @@ For information about the governance of the Node.js project, see
   **Xuguang Mei** <<[email protected]>> (he/him)
 * [mhdawson](https://github.com/mhdawson) -
   **Michael Dawson** <<[email protected]>> (he/him)
-* [mildsunrise](https://github.com/mildsunrise) -
-  **Alba Mendez** <<[email protected]>> (she/her)
 * [MoLow](https://github.com/MoLow) -
   **Moshe Atlow** <<[email protected]>> (he/him)
 * [MrJithil](https://github.com/MrJithil) -
   **Jithil P Ponnan** <<[email protected]>> (he/him)
 * [panva](https://github.com/panva) -
-  **Filip Skokan** <<[email protected]>> (he/him)
+  **Filip Skokan** <<[email protected]>> (he/him) - [Support me](https://github.com/sponsors/panva)
 * [pimterry](https://github.com/pimterry) -
   **Tim Perry** <<[email protected]>> (he/him)
 * [pmarchini](https://github.com/pmarchini) -
@@ -611,6 +611,8 @@ For information about the governance of the Node.js project, see
   **Mikeal Rogers** <<[email protected]>>
 * [miladfarca](https://github.com/miladfarca) -
   **Milad Fa** <<[email protected]>> (he/him)
+* [mildsunrise](https://github.com/mildsunrise) -
+  **Alba Mendez** <<[email protected]>> (she/her)
 * [misterdjules](https://github.com/misterdjules) -
   **Julien Gilli** <<[email protected]>>
 * [mmarchini](https://github.com/mmarchini) -

benchmark/fs/bench-cpSync.js

@@ -4,20 +4,53 @@ const common = require('../common');
 const fs = require('fs');
 const path = require('path');
 const tmpdir = require('../../test/common/tmpdir');
-tmpdir.refresh();
 
 const bench = common.createBenchmark(main, {
   n: [1, 100, 10_000],
+  dereference: ['true', 'false'],
+  force: ['true', 'false'],
 });
 
-function main({ n }) {
+function prepareTestDirectory() {
+  const testDir = tmpdir.resolve(`test-cp-${process.pid}`);
+  fs.mkdirSync(testDir, { recursive: true });
+
+  fs.writeFileSync(path.join(testDir, 'source.txt'), 'test content');
+
+  fs.symlinkSync(
+    path.join(testDir, 'source.txt'),
+    path.join(testDir, 'link.txt'),
+  );
+
+  return testDir;
+}
+
+function main({ n, dereference, force }) {
   tmpdir.refresh();
-  const options = { recursive: true };
-  const src = path.join(__dirname, '../../test/fixtures/copy');
+
+  const src = prepareTestDirectory();
   const dest = tmpdir.resolve(`${process.pid}/subdir/cp-bench-${process.pid}`);
+
+  const options = {
+    recursive: true,
+    dereference: dereference === 'true',
+    force: force === 'true',
+  };
+
+  if (options.force) {
+    fs.cpSync(src, dest, { recursive: true });
+  }
+
   bench.start();
   for (let i = 0; i < n; i++) {
-    fs.cpSync(src, dest, options);
+    if (options.force) {
+      fs.cpSync(src, dest, options);
+    } else {
+      const uniqueDest = tmpdir.resolve(
+        `${process.pid}/subdir/cp-bench-${process.pid}-${i}`,
+      );
+      fs.cpSync(src, uniqueDest, options);
+    }
   }
   bench.end(n);
 }

benchmark/fs/bench-glob.js

@@ -1,7 +1,11 @@
 'use strict';
 
 const common = require('../common');
-const fs = require('fs');
+const {
+  glob,
+  globSync,
+  promises: { glob: globAsync },
+} = require('fs');
 const path = require('path');
 const assert = require('node:assert');
 
@@ -11,7 +15,7 @@ const configs = {
   n: [1e3],
   dir: ['lib'],
   pattern: ['**/*', '*.js', '**/**.js'],
-  mode: ['async', 'sync'],
+  mode: ['sync', 'promise', 'callback'],
   recursive: ['true', 'false'],
 };
 
@@ -20,15 +24,33 @@ const bench = common.createBenchmark(main, configs);
 async function main(config) {
   const fullPath = path.resolve(benchmarkDirectory, config.dir);
   const { pattern, recursive, mode } = config;
+  const options = { cwd: fullPath, recursive };
+  const callback = (resolve, reject) => {
+    glob(pattern, options, (err, matches) => {
+      if (err) {
+        reject(err);
+      } else {
+        resolve(matches);
+      }
+    });
+  };
 
   let noDead;
   bench.start();
 
   for (let i = 0; i < config.n; i++) {
-    if (mode === 'async') {
-      noDead = await fs.promises.glob(pattern, { cwd: fullPath, recursive });
-    } else {
-      noDead = fs.globSync(pattern, { cwd: fullPath, recursive });
+    switch (mode) {
+      case 'sync':
+        noDead = globSync(pattern, options);
+        break;
+      case 'promise':
+        noDead = await globAsync(pattern, options);
+        break;
+      case 'callback':
+        noDead = await new Promise(callback);
+        break;
+      default:
+        throw new Error(`Unknown mode: ${mode}`);
     }
   }
 

benchmark/path/join-posix.js

@@ -16,8 +16,8 @@ function main({ n, paths }) {
 
   bench.start();
   for (let i = 0; i < n; i++) {
-    if (i % 3 === 0) {
-      copy[1] = `${orig}${i}`;
+    if (i % 5 === 0) {
+      copy[1] = `${orig}/${i}`;
       posix.join(...copy);
     } else {
       posix.join(...args);

benchmark/path/join-win32.js

@@ -16,8 +16,8 @@ function main({ n, paths }) {
 
   bench.start();
   for (let i = 0; i < n; i++) {
-    if (i % 3 === 0) {
-      copy[1] = `${orig}${i}`;
+    if (i % 5 === 0) {
+      copy[1] = `${orig}\\${i}`;
       win32.join(...copy);
     } else {
       win32.join(...args);

benchmark/path/normalize-posix.js

@@ -17,7 +17,7 @@ const bench = common.createBenchmark(main, {
 function main({ n, path }) {
   bench.start();
   for (let i = 0; i < n; i++) {
-    posix.normalize(i % 3 === 0 ? `${path}${i}` : path);
+    posix.normalize(i % 5 === 0 ? `${path}/${i}` : path);
   }
   bench.end(n);
 }

benchmark/path/normalize-win32.js

@@ -17,7 +17,7 @@ const bench = common.createBenchmark(main, {
 function main({ n, path }) {
   bench.start();
   for (let i = 0; i < n; i++) {
-    win32.normalize(i % 3 === 0 ? `${path}${i}` : path);
+    win32.normalize(i % 5 === 0 ? `${path}\\${i}` : path);
   }
   bench.end(n);
 }

benchmark/path/resolve-posix.js

@@ -4,23 +4,26 @@ const { posix } = require('path');
 
 const bench = common.createBenchmark(main, {
   paths: [
+    'empty',
     '',
+    '.',
     ['', ''].join('|'),
     ['foo/bar', '/tmp/file/', '..', 'a/../subfile'].join('|'),
     ['a/b/c/', '../../..'].join('|'),
+    ['/a/b/c/', 'abc'].join('|'),
   ],
   n: [1e5],
 });
 
 function main({ n, paths }) {
-  const args = paths.split('|');
+  const args = paths === 'empty' ? [] : paths.split('|');
   const copy = [...args];
-  const orig = copy[0];
+  const orig = copy[0] ?? '';
 
   bench.start();
   for (let i = 0; i < n; i++) {
-    if (i % 3 === 0) {
-      copy[0] = `${orig}${i}`;
+    if (i % 5 === 0) {
+      copy[0] = `${orig}/${i}`;
       posix.resolve(...copy);
     } else {
       posix.resolve(...args);

benchmark/path/resolve-win32.js

@@ -4,7 +4,9 @@ const { win32 } = require('path');
 
 const bench = common.createBenchmark(main, {
   paths: [
+    'empty',
     '',
+    '.',
     ['', ''].join('|'),
     ['c:/ignore', 'd:\\a/b\\c/d', '\\e.exe'].join('|'),
     ['c:/blah\\blah', 'd:/games', 'c:../a'].join('|'),
@@ -13,14 +15,14 @@ const bench = common.createBenchmark(main, {
 });
 
 function main({ n, paths }) {
-  const args = paths.split('|');
+  const args = paths === 'empty' ? [] : paths.split('|');
   const copy = [...args];
-  const orig = copy[0];
+  const orig = copy[0] ?? '';
 
   bench.start();
   for (let i = 0; i < n; i++) {
-    if (i % 3 === 0) {
-      copy[0] = `${orig}${i}`;
+    if (i % 5 === 0) {
+      copy[0] = `${orig}\\${i}`;
       win32.resolve(...copy);
     } else {
       win32.resolve(...args);