Skip to content

2025-08-12, Version 24.6.0 (Current) #59449

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 80 commits into from
Aug 14, 2025
Merged

2025-08-12, Version 24.6.0 (Current) #59449

merged 80 commits into from
Aug 14, 2025

Conversation

github-actions[bot]
Copy link
Contributor

@github-actions github-actions bot commented Aug 11, 2025

2025-08-12, Version 24.6.0 (Current), @RafaelGSS

Notable Changes

  • [471fe712b3] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
  • [38aedfbf73] - (SEMVER-MINOR) crypto: support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259
  • [201304537e] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240
  • [e79c93a5d0] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
  • [c144d69efc] - lib: docs deprecate _http_* (Sebastian Beltran) #59293
  • [aeb4de55a7] - (SEMVER-MINOR) fs: port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897

Commits

  • [f7484575ff] - assert: change utils to use index instead of for...of (방진혁) #59278
  • [269cd16185] - benchmark: remove deprecated _extend from benchmark (Rafael Gonzaga) #59228
  • [848e49c20b] - benchmark: add fs warmup to writefile-promises (Bruno Rodrigues) #59215
  • [8c609be1b1] - benchmark: add calibrate-n script (Rafael Gonzaga) #59186
  • [6a3bf772d8] - build: fix node_use_sqlite for GN builds (Shelley Vohr) #59017
  • [471fe712b3] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
  • [38aedfbf73] - (SEMVER-MINOR) crypto: support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259
  • [a312e706cf] - crypto: prepare webcrypto key import/export for modern algorithms (Filip Skokan) #59284
  • [3a7c2c3a47] - deps: update ada to 3.2.7 (Node.js GitHub Bot) #59336
  • [8d9ceeaf6a] - deps: update archs files for openssl-3.5.2 (Node.js GitHub Bot) #59371
  • [33b06df354] - deps: upgrade openssl sources to openssl-3.5.2 (Node.js GitHub Bot) #59371
  • [fa70f1af77] - deps: support madvise(3C) across ALL illumos revisions (Dan McDonald) #58237
  • [f834a6be59] - deps: update undici to 7.13.0 (Node.js GitHub Bot) #59338
  • [db2417487e] - deps: update sqlite to 3.50.4 (Node.js GitHub Bot) #59337
  • [41978adb08] - deps: V8: backport 493cb53691be (Chengzhong Wu) #59238
  • [05667991ca] - deps: V8: backport 1c3e018e7d48 (Renegade334) #58818
  • [fd61588bb4] - doc: rename x509.extKeyUsage to x509.keyUsage (Filip Skokan) #59332
  • [a271ae4360] - doc: fix Pbkdf2Params hash attribute heading (Filip Skokan) #59395
  • [72cfff165b] - doc: fix missing reference links for server.keepAliveTimeoutBuffer (Lee Jiho) #59356
  • [8341916772] - doc: fix grammar in global dispatcher usage (Eng Zer Jun) #59344
  • [e3e489706b] - doc: run license-builder (github-actions[bot]) #59343
  • [46527e8cea] - doc: correct orthography eg.e.g. (Jacob Smith) #59329
  • [d140c3713e] - doc: clarify the need of compiler compatible with c++20 (Rafael Gonzaga) #59297
  • [95e9cabf9d] - doc: clarify release candidate stability index (Filip Skokan) #59295
  • [a056dd36d2] - doc: add WDYT to glossary (btea) #59280
  • [1e2c52f5c4] - doc: add manpage entry for --use-system-ca (Joyee Cheung) #59273
  • [31a46fdeb4] - doc: add path.join and path.normalize clarification (Rafael Gonzaga) #59262
  • [cff3725ff9] - doc: fix typo in test/common/README.md (Yoo) #59180
  • [31a9283591] - doc: add note on process memoryUsage (fengmk2) #59026
  • [5a98bff6b8] - doc: format safely for doc-kit (Aviv Keller) #59229
  • [95b8b7ea5c] - domain: remove deprecated API call (Alex Yang) #59339
  • [2990f178bd] - fs: fix glob TypeError on restricted dirs (Sylphy-0xd3ac) #58674
  • [e2fb4caf9c] - fs: correct error message when FileHandle is transferred (Alex Yang) #59156
  • [aeb4de55a7] - (SEMVER-MINOR) fs: port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897
  • [e79c93a5d0] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
  • [0fb005a53f] - http2: set Http2Stream#sentHeaders for raw headers (Darshan Sen) #59244
  • [e055539604] - lib: add trace-sigint APIs (theanarkh) #59040
  • [d2183d860a] - lib: optimize writable stream buffer clearing (Yoo) #59406
  • [47543a7e17] - lib: handle windows reserved device names on UNC (Rafael Gonzaga) #59286
  • [c6911f0717] - lib: do not modify prototype deprecated asyncResource (RafaelGSS) #59195
  • [3c88b769bb] - lib: restructure assert to become a class (Miguel Marcondes Filho) #58253
  • [e91b54df59] - lib: handle superscript variants on windows device (Rafael Gonzaga) #59261
  • [4ee467905d] - lib: use validateString (hotpineapple) #59296
  • [c144d69efc] - lib: docs deprecate _http_* (Sebastian Beltran) #59293
  • [c89b67e681] - lib: add type names in source mapped stack traces (Chengzhong Wu) #58976
  • [5b2363be8d] - lib: prefer AsyncIteratorPrototype primordial (René) #59097
  • [41b4f4d694] - meta: clarify pr objection process further (James M Snell) #59096
  • [0eb5962f1e] - meta: add mailmap entry for aditi-1400 (Aditi) #59316
  • [a2b72c2304] - meta: add tsc and build team as codeowners building.md (Rafael Gonzaga) #59298
  • [d69f3ee1e0] - meta: add nodejs/path to path files (Rafael Gonzaga) #59289
  • [1e37eab865] - node-api: reword "implementation in an alternative VM" as implementable (Chengzhong Wu) #59036
  • [64add6302a] - src: use simdjson to parse SEA configuration (Joyee Cheung) #59323
  • [e9c6636585] - src: mark realm leaf classes final (Anna Henningsen) #59355
  • [42ef8147d1] - src: warn about FastOneByteString invalidation (James M Snell) #59275
  • [8686b8037a] - src: remove unused DSAKeyExportJob (Filip Skokan) #59291
  • [1e5f632666] - src: use C++20 contains() method (iknoom) #59304
  • [22d4683cfe] - src: added CHECK_NOT_NULL check for multiple eq_wrap_async (F3lixTheCat) #59267
  • [6a47ff4943] - src: clear all linked module caches once instantiated (Chengzhong Wu) #59117
  • [33728cb4ca] - src: add nullptr checks in StreamPipe::New (Burkov Egor) #57613
  • [4a907bdad1] - src: add percentage support to --max-old-space-size (Asaf Federman) #59082
  • [7c189d4f55] - test: deflake sequential/test-tls-session-timeout (Joyee Cheung) #59423
  • [fb0a6fb57f] - test: exclude mock from coverage (Shima Ryuhei) #59348
  • [7e10f95f13] - test: split test-fs-cp.js (Joyee Cheung) #59408
  • [41bcf5f659] - test: update WPT resources,WebCryptoAPI,webstorage (Filip Skokan) #59311
  • [f9f3dc94cb] - test: add known issue test for fs.cpSync dereference bug (James M Snell) #58941
  • [244d0c38a8] - test: deflake stream-readable-to-web test (Ethan Arrowood) #58948
  • [564e604a1a] - test: make test-inspector-network-resource sequential (Shima Ryuhei) #59104
  • [7ab13b7477] - test: don't use expose internals in test-http-outgoing-buffer.js (Meghan Denny) #59219
  • [319df3859a] - test,crypto: skip unsupported ciphers (Shelley Vohr) #59388
  • [713c70c32a] - test_runner: remove unused callee convertion (Alex Yang) #59221
  • [e4ca30e115] - tools: disable nullability-completeness warnings (Michaël Zasso) #59392
  • [dab7f6b542] - tools: check for std::vector<v8::Local> in lint (Aditi) #58497
  • [7b94982eb0] - tools: allow selecting test subsystems with numbers in their names (Darshan Sen) #59242
  • [16bbcd8881] - typings: improve internal binding types (Nam Yooseong) #59351
  • [76bc4d659b] - typings: improve internal binding types (Michaël Zasso) #59176
  • [eecd3272a6] - worker: add name for worker (theanarkh) #59213
  • [84c3513ce2] - worker: implements nits in Web Locks code (Antoine du Hamel) #59270
  • [bd68fbd753] - worker: add cpuUsage for worker (theanarkh) #59177
  • [201304537e] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240

Renegade334 and others added 15 commits August 8, 2025 11:56
Original commit message:

    Expose dispose and asyncDispose symbols to C++

    Since `Symbol.dispose` has been exposed to JS we need to be able to
    access the native v8::Symbol too.

    Change-Id: I9111d2806630efdd8bb5f931effa9adad3c85ae5
    Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6410112
    Commit-Queue: Erik Corry <[email protected]>
    Reviewed-by: Erik Corry <[email protected]>
    Reviewed-by: Leszek Swirski <[email protected]>
    Cr-Commit-Position: refs/heads/main@{#99590}

PR-URL: #58818
Refs: v8/v8@1c3e018
Reviewed-By: Michaël Zasso <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
PR-URL: #59219
Reviewed-By: Zeyu "Alex" Yang <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
Reviewed-By: Juan José Arboleda <[email protected]>
This commit adds support for specifying --max-old-space-size as a
percentage of system memory, in addition to the existing MB format.
A new HandleMaxOldSpaceSizePercentage method parses percentage values,
validates that they are within the 0-100% range, and provides clear
error messages for invalid input. The heap size is now calculated
based on available system memory when a percentage is used.

Test coverage has been added for both valid and invalid cases.
Documentation and the JSON schema for CLI options have been updated
with examples for both formats.

Refs: #57447
PR-URL: #59082
Reviewed-By: Chengzhong Wu <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Moshe Atlow <[email protected]>
Reviewed-By: theanarkh <[email protected]>
Reviewed-By: Daeyeon Jeong <[email protected]>
PR-URL: #59177
Reviewed-By: Anna Henningsen <[email protected]>
Reviewed-By: Ilyas Shabi <[email protected]>
PR-URL: #59104
Refs: #59090
Reviewed-By: Stefan Stojanovic <[email protected]>
Reviewed-By: Kohei Ueno <[email protected]>
PR-URL: #59229
Reviewed-By: Antoine du Hamel <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Co-authored-by: Joyee Cheung <[email protected]>
PR-URL: #59026
Reviewed-By: Joyee Cheung <[email protected]>
Reviewed-By: Zeyu "Alex" Yang <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Corrects the misspelling of "unmask" to "umask"

PR-URL: #59180
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Fixes: #57612
PR-URL: #57613
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: theanarkh <[email protected]>
As a first step to porting portions of the pino structured
logger into the runtime, this commit ports the SonicBoom
module to the fs module as Utf8Stream.

This is a faithful port of the SonicBoom module with some
modern updates, such as converting to a Class and using
Symbol.dispose. The bulk of the implementation is unchanged
from the original.

PR-URL: #58897
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Vinícius Lourenço Claro Cardoso <[email protected]>
PR-URL: #59221
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Pietro Marchini <[email protected]>
Reviewed-By: Chemi Atlow <[email protected]>
There are two phases in module linking: link, and instantiate. These
two operations are required to be separated to allow cyclic
dependencies.

`v8::Module::InstantiateModule` is only required to be invoked on the
root module. The global references created by `ModuleWrap::Link` are
only cleared at `ModuleWrap::Instantiate`. So the global references
created for depended modules are usually not cleared because
`ModuleWrap::Instantiate` is not invoked for each of depended modules,
and caused memory leak.

The change references the linked modules in an object internal slot.

This is not an issue for Node.js ESM support as these modules can not be
off-loaded. However, this could be outstanding for `vm.Module`.

PR-URL: #59117
Fixes: #50113
Reviewed-By: Joyee Cheung <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Previously, selecting subsystems with numbers in their names, like
http2, weren't matched due to a restrictive regex:

```
$ tools/test.py http2
No tests to run.
```

The regex now allows digits, so these tests run as expected:

```
$ tools/test.py http2
[00:17|% 100|+ 286|-   0]: Done

All tests passed.
```

Signed-off-by: Darshan Sen <[email protected]>
PR-URL: #59242
Reviewed-By: Michaël Zasso <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
When #57917 added support for sending
raw header arrays, Http2Stream#sentHeaders was set only for header
objects. This change also sets it for raw headers by lazily
instantiating the property to avoid any performance impact on the fast
path.

Signed-off-by: Darshan Sen <[email protected]>
PR-URL: #59244
Reviewed-By: Tim Perry <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Original commit message:

    [include] suppress clang cast-function-type-mismatch warning on SetWeak

    Suppress clang warning cast-function-type-mismatch in embedder calls
    to `SetWeak`.

    Change-Id: I6c4eda1b932199a2ea4947fe851ffdf2ae04ad73
    Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6689209
    Reviewed-by: Camillo Bruni <[email protected]>
    Commit-Queue: Chengzhong Wu <[email protected]>
    Cr-Commit-Position: refs/heads/main@{#101186}

Ignore `cast-function-type` instead of `cast-function-type-mismatch` for
compatibility with older versions of Clang.

Refs: v8/v8@493cb53
PR-URL: #59238
Refs: #58069
Reviewed-By: Antoine du Hamel <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Jake Yuesong Li <[email protected]>
nodejs-github-bot added a commit that referenced this pull request Aug 11, 2025
Notable changes:

cli:
  * (SEMVER-MINOR) add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
crypto:
  * (SEMVER-MINOR) support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259
fs:
  * (SEMVER-MINOR) port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897
http:
  * (SEMVER-MINOR) add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
lib:
  * docs deprecate _http_* (Sebastian Beltran) #59293
zlib:
  * (SEMVER-MINOR) add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240

PR-URL: #59449
@github-actions github-actions bot added the release Issues and PRs related to Node.js releases. label Aug 11, 2025
@github-actions github-actions bot added the v24.x Issues that can be reproduced on v24.x or PRs targeting the v24.x-staging branch. label Aug 11, 2025
@nodejs-github-bot
Copy link
Collaborator

Review requested:

  • @nodejs/actions
  • @nodejs/build
  • @nodejs/crypto
  • @nodejs/gyp
  • @nodejs/performance
  • @nodejs/security-wg
  • @nodejs/tsc
  • @nodejs/url

@RafaelGSS RafaelGSS marked this pull request as ready for review August 11, 2025 23:40
Copy link

codecov bot commented Aug 12, 2025

Codecov Report

❌ Patch coverage is 89.50617% with 17 lines in your changes missing coverage. Please review.
✅ Project coverage is 89.97%. Comparing base (931ec10) to head (086aa8f).
⚠️ Report is 1 commits behind head on v24.x.

Files with missing lines Patch % Lines
lib/assert.js 89.60% 11 Missing and 2 partials ⚠️
lib/_http_server.js 78.94% 3 Missing and 1 partial ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##            v24.x   #59449      +/-   ##
==========================================
+ Coverage   89.55%   89.97%   +0.41%     
==========================================
  Files         645      648       +3     
  Lines      191537   193079    +1542     
  Branches    37237    37877     +640     
==========================================
+ Hits       171540   173724    +2184     
+ Misses      12572    11926     -646     
- Partials     7425     7429       +4     
Files with missing lines Coverage Δ
lib/_http_client.js 97.33% <100.00%> (ø)
lib/async_hooks.js 99.66% <100.00%> (ø)
lib/domain.js 98.38% <100.00%> (ø)
lib/events.js 99.58% <100.00%> (+1.39%) ⬆️
lib/fs.js 98.22% <100.00%> (+4.76%) ⬆️
lib/_http_server.js 96.94% <78.94%> (+0.19%) ⬆️
lib/assert.js 98.19% <89.60%> (-1.34%) ⬇️

... and 134 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@targos
Copy link
Member

targos commented Aug 12, 2025

For macOS failure, see #59392 (comment)

I think the solution is to remove 31e5f5a but I still don't understand why it doesn't fail with the same error on main.

@bricss
Copy link
Contributor

bricss commented Aug 12, 2025

Would be great to have #59312 pulled in 🙃

RafaelGSS and others added 6 commits August 12, 2025 09:19
This script should help identify the best N
when creating/updating benchmarks

Signed-off-by: RafaelGSS <[email protected]>
PR-URL: #59186
Reviewed-By: Vinícius Lourenço Claro Cardoso <[email protected]>
Reviewed-By: James M Snell <[email protected]>
PR-URL: #59156
Fixes: #59155
Reviewed-By: Juan José Arboleda <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: LiviaMedeiros <[email protected]>
PR-URL: #59215
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Benjamin Gruenbaum <[email protected]>
PR-URL: #59097
Reviewed-By: Jordan Harband <[email protected]>
Reviewed-By: Zeyu "Alex" Yang <[email protected]>
Reviewed-By: Antoine du Hamel <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Moshe Atlow <[email protected]>
This commit adds explicit clarification to the Node.js threat model
that path manipulation functions such as path.join() and
path.normalize()
trust their input. Issues related to these functions that rely on
unsanitized input are not considered vulnerabilities requiring CVEs.

PR-URL: #59262
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
PR-URL: #59267
Fixes: #59266
Reviewed-By: Zeyu "Alex" Yang <[email protected]>
Reviewed-By: theanarkh <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
This patch:

- Splits the validation tests into a separate file and keep the
  test focus on functional test of the sessionTimeout option.
- Increase the testing timeout to 5 seconds in case it takes too
  long for the first connection to complete and the session is
  already expired when the second connection is started.
- Use a specific `sessionIdContext` to ensure stable session ID.
- Fix the s_client arguments by specifying CA file and server name.
- Do not use the serialized session ticket for the first connection.
  That was genearted years ago and may not work in different OpenSSL
  versions. Let the first fresh connection generate the ticket.
- Use random port instead of the common port.
- Add a timeout before the second connection to ensure session ticket
  is properly written.
- Log information to faciliate debugging.

PR-URL: #59423
Fixes: #26839
Reviewed-By: Juan José Arboleda <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Jacob Smith <[email protected]>
Reviewed-By: Stefan Stojanovic <[email protected]>
RafaelGSS pushed a commit that referenced this pull request Aug 12, 2025
Notable changes:

cli:
  * (SEMVER-MINOR) add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
  * (SEMVER-MINOR) add --use-env-proxy (Joyee Cheung) #59151
  * (SEMVER-MINOR) support `${pid}` placeholder in --cpu-prof-name (Haram Jeong) #59072
crypto:
  * (SEMVER-MINOR) support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259
  * (SEMVER-MINOR) add tls.setDefaultCACertificates() (Joyee Cheung) #58822
deps:
  * update archs files for openssl-3.5.1 (Node.js GitHub Bot) #59234
  * upgrade openssl sources to openssl-3.5.1 (Node.js GitHub Bot) #59234
dns:
  * (SEMVER-MINOR) support max timeout (theanarkh) #58440
doc:
  * update the instruction on how to verify releases (Antoine du Hamel) #59113
esm:
  * (SEMVER-MINOR) unflag --experimental-wasm-modules (Guy Bedford) #57038
fs:
  * (SEMVER-MINOR) port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897
http:
  * (SEMVER-MINOR) add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
http,https:
  * (SEMVER-MINOR) add built-in proxy support in http/https.request and Agent (Joyee Cheung) #58980
lib:
  * docs deprecate _http_* (Sebastian Beltran) #59293
net:
  * (SEMVER-MINOR) update net.blocklist to allow file save and file management (alphaleadership) #58087
test:
  * (SEMVER-MINOR) move http proxy tests to test/client-proxy (Joyee Cheung) #58980
worker:
  * (SEMVER-MINOR) add web locks api (ishabi) #58666
zlib:
  * (SEMVER-MINOR) add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240

PR-URL: #59449
Signed-off-by: RafaelGSS <[email protected]>
RafaelGSS pushed a commit that referenced this pull request Aug 12, 2025
Notable changes:

cli:
  * (SEMVER-MINOR) add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
  * (SEMVER-MINOR) add --use-env-proxy (Joyee Cheung) #59151
  * (SEMVER-MINOR) support `${pid}` placeholder in --cpu-prof-name (Haram Jeong) #59072
crypto:
  * (SEMVER-MINOR) support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259
  * (SEMVER-MINOR) add tls.setDefaultCACertificates() (Joyee Cheung) #58822
deps:
  * update archs files for openssl-3.5.1 (Node.js GitHub Bot) #59234
  * upgrade openssl sources to openssl-3.5.1 (Node.js GitHub Bot) #59234
dns:
  * (SEMVER-MINOR) support max timeout (theanarkh) #58440
doc:
  * update the instruction on how to verify releases (Antoine du Hamel) #59113
esm:
  * (SEMVER-MINOR) unflag --experimental-wasm-modules (Guy Bedford) #57038
fs:
  * (SEMVER-MINOR) port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897
http:
  * (SEMVER-MINOR) add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
http,https:
  * (SEMVER-MINOR) add built-in proxy support in http/https.request and Agent (Joyee Cheung) #58980
lib:
  * docs deprecate _http_* (Sebastian Beltran) #59293
net:
  * (SEMVER-MINOR) update net.blocklist to allow file save and file management (alphaleadership) #58087
test:
  * (SEMVER-MINOR) move http proxy tests to test/client-proxy (Joyee Cheung) #58980
worker:
  * (SEMVER-MINOR) add web locks api (ishabi) #58666
zlib:
  * (SEMVER-MINOR) add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240

PR-URL: #59449
Signed-off-by: RafaelGSS <[email protected]>
@RafaelGSS RafaelGSS changed the title 2025-08-11, Version 24.6.0 (Current) 2025-08-12, Version 24.6.0 (Current) Aug 12, 2025
@nodejs-github-bot
Copy link
Collaborator

@panva

This comment was marked as resolved.

@RafaelGSS

This comment was marked as resolved.

RafaelGSS pushed a commit that referenced this pull request Aug 12, 2025
Notable changes:

cli:
  * (SEMVER-MINOR) add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
crypto:
  * (SEMVER-MINOR) support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259
fs:
  * (SEMVER-MINOR) port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897
http:
  * (SEMVER-MINOR) add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
lib:
  * docs deprecate _http_* (Sebastian Beltran) #59293
zlib:
  * (SEMVER-MINOR) add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240

PR-URL: #59449
Signed-off-by: RafaelGSS <[email protected]>
@nodejs-github-bot
Copy link
Collaborator

@nodejs-github-bot
Copy link
Collaborator

@nodejs-github-bot
Copy link
Collaborator

nodejs-github-bot commented Aug 13, 2025

Notable changes:

cli:
  * (SEMVER-MINOR) add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
crypto:
  * (SEMVER-MINOR) support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259
fs:
  * (SEMVER-MINOR) port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897
http:
  * (SEMVER-MINOR) add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
lib:
  * docs deprecate _http_* (Sebastian Beltran) #59293
zlib:
  * (SEMVER-MINOR) add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240

PR-URL: #59449
Signed-off-by: RafaelGSS <[email protected]>
@nodejs-github-bot
Copy link
Collaborator

@nodejs-github-bot
Copy link
Collaborator

@nodejs-github-bot
Copy link
Collaborator

@RafaelGSS
Copy link
Member

RafaelGSS commented Aug 14, 2025

It seems undici is failing on some http2 tests. Could you please check? @nodejs/undici https://ci.nodejs.org/job/citgm-smoker/3623/nodes=alpine-latest-x64/testReport/junit/(root)/citgm/undici_v7_13_0/

Also, the only http2 commit was from @RaisinTen - in case you have thoughts on the error.

UPDATE:

All the errors are related to:

   Error: error:0A00018F:SSL routines::ee key too small

Which seems unrelated to the code changes.

@richardlau
Copy link
Member

It seems undici is failing on some http2 tests. Could you please check? @nodejs/undici https://ci.nodejs.org/job/citgm-smoker/3623/nodes=alpine-latest-x64/testReport/junit/(root)/citgm/undici_v7_13_0/

Also, the only http2 commit was from @RaisinTen - in case you have thoughts on the error.

UPDATE:

All the errors are related to:

   Error: error:0A00018F:SSL routines::ee key too small

Which seems unrelated to the code changes.

@RafaelGSS That sounds a lot like what nodejs/undici#4400 fixed (probably citgm is getting tests from the released version rather than HEAD?). It's something we need to bear in mind when backporting the OpenSSL 3.5 update to Node.js 22 as smaller key sizes may no longer be allowed by default.

@metcoder95
Copy link
Member

That should be already fixed in: nodejs/undici@8dd120e

@RafaelGSS RafaelGSS merged commit 09dc7a5 into v24.x Aug 14, 2025
22 checks passed
@RafaelGSS RafaelGSS deleted the v24.6.0-proposal branch August 14, 2025 21:04
RafaelGSS added a commit that referenced this pull request Aug 14, 2025
RafaelGSS pushed a commit that referenced this pull request Aug 14, 2025
Notable changes:

cli:
  * (SEMVER-MINOR) add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
crypto:
  * (SEMVER-MINOR) support ML-DSA KeyObject, sign, and verify (Filip Skokan) #59259
fs:
  * (SEMVER-MINOR) port SonicBoom module to fs module as Utf8Stream (James M Snell) #58897
http:
  * (SEMVER-MINOR) add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
lib:
  * docs deprecate _http_* (Sebastian Beltran) #59293
zlib:
  * (SEMVER-MINOR) add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240

PR-URL: #59449
Signed-off-by: RafaelGSS <[email protected]>
RafaelGSS added a commit to nodejs/nodejs.org that referenced this pull request Aug 14, 2025
RafaelGSS added a commit to nodejs/nodejs.org that referenced this pull request Aug 14, 2025
meteorqz6 pushed a commit to meteorqz6/node that referenced this pull request Aug 15, 2025
Notable changes:

cli:
  * (SEMVER-MINOR) add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) nodejs#59276
crypto:
  * (SEMVER-MINOR) support ML-DSA KeyObject, sign, and verify (Filip Skokan) nodejs#59259
fs:
  * (SEMVER-MINOR) port SonicBoom module to fs module as Utf8Stream (James M Snell) nodejs#58897
http:
  * (SEMVER-MINOR) add server.keepAliveTimeoutBuffer option (Haram Jeong) nodejs#59243
lib:
  * docs deprecate _http_* (Sebastian Beltran) nodejs#59293
zlib:
  * (SEMVER-MINOR) add dictionary support to zstdCompress and zstdDecompress (lluisemper) nodejs#59240

PR-URL: nodejs#59449
Signed-off-by: RafaelGSS <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release Issues and PRs related to Node.js releases. v24.x Issues that can be reproduced on v24.x or PRs targeting the v24.x-staging branch.
Projects
None yet
Development

Successfully merging this pull request may close these issues.