2026-05-21, Version 24.16.0 'Krypton' (LTS)#63263

Open

github-actions[bot] wants to merge 229 commits into

v24.xfrom

v24.16.0-proposal

Commits on Apr 28, 2026

deps: use npm undici@seven tag in `update-undici.sh`
mcollina
authored

Commits on May 6, 2026

deps: update undici to 7.25.0
nodejs-github-bot
authored

Commits on May 7, 2026

process: optimize asyncHandledRejections by using FixedQueue

gurgunday
authored and
aduh95
committed
sqlite: enable Percentile extension

TheOneTheOnlyJJ
authored and
aduh95
committed
deps: update libuv to 1.52.1

nodejs-github-bot
authored and
aduh95
committed
deps: update icu to 78.3

nodejs-github-bot
authored and
aduh95
committed
crypto: add support for Ed25519 context parameter

panva
authored and
aduh95
committed
src: workaround AIX libc++ std::filesystem bug

authored and
aduh95
committed
fs: expose frsize field in statfs

verycosy
authored and
aduh95
committed
test_runner: add passed, attempt, and diagnostic to SuiteContext

MoLow
authored and
aduh95
committed
doc: mention test runner retry attemp is zero based

MoLow
authored and
aduh95
committed
meta: expand memory leak DoS criteria to all DoS

joyeecheung
authored and
aduh95
committed
tools: do not run `commit-lint` on release proposals
aduh95
committed
lib: defer AbortSignal.any() following

Han5991
authored and
aduh95
committed
tools: allow triagers to queue a PR for CI until it's reviewed
aduh95
committed
module,win: fix long subpath import

StefanStojanovic
authored and
aduh95
committed
meta: require DCO signoff in commit message guidelines

jasnell
authored and
aduh95
committed
meta: bump actions/cache from 5.0.3 to 5.0.4

dependabot[bot]
authored and
aduh95
committed
meta: bump codecov/codecov-action from 5.5.2 to 6.0.0

dependabot[bot]
authored and
aduh95
committed
meta: bump github/codeql-action from 4.32.4 to 4.35.1

dependabot[bot]
authored and
aduh95
committed
meta: bump actions/setup-node from 6.2.0 to 6.3.0

dependabot[bot]
authored and
aduh95
committed
meta: bump step-security/harden-runner from 2.15.0 to 2.16.1

dependabot[bot]
authored and
aduh95
committed
tools: bump the eslint group in /tools/eslint with 2 updates

dependabot[bot]
authored and
aduh95
committed
http: add req.signal to IncomingMessage

akshatsrivastava11
authored and
aduh95
committed
http: cleanup pipeline queue

ronag
authored and
aduh95
committed
doc: document TransformStream transformer.cancel option

TomStrepsil
authored and
aduh95
committed
crypto: implement randomUUIDv7()

nabeel378
authored and
aduh95
committed
deps: libuv: cherry-pick aabb7651de

santigimeno
authored and
aduh95
committed
src: add contextify interceptor debug logs

legendecas
authored and
aduh95
committed
doc: update bug bounty program

RafaelGSS
authored and
aduh95
committed
test: update WPT for url to 7a3645b79a

nodejs-github-bot
authored and
aduh95
committed
test: use on-disk fixture for test-npm-install

joyeecheung
authored and
aduh95
committed
deps: update simdjson to 4.6.1

nodejs-github-bot
authored and
aduh95
committed
deps: update googletest to d72f9c8aea6817cdf1ca0ac10887f328de7f3da2

nodejs-github-bot
authored and
aduh95
committed
deps: update minimatch to 10.2.5

nodejs-github-bot
authored and
aduh95
committed
stream: propagate destruction in duplexPair

aelhor
authored and
aduh95
committed
test: allow skipping individual WPT subtests

panva
authored and
aduh95
committed
meta: populate apt list for slim runner in update-openssl workflow

Renegade334
authored and
aduh95
committed
tools: revert OpenSSL update workflow to ubuntu-latest

richardlau
authored and
aduh95
committed
test: capture negative utimes mtime at call time

inoway46
authored and
aduh95
committed
tools: improve output for unexpected passes in WTP tests
aduh95
committed
meta: move Michael to emeritus

mhdawson
authored and
aduh95
committed
doc: note non-monotonic clock in crypto.randomUUIDv7

nabeel378
authored and
aduh95
committed
fs: add signal option to fs.stat()

mertcanaltin
authored and
aduh95
committed
crypto: add memory tracking for secureContext openssl objects

mertcanaltin
authored and
aduh95
committed
src: use stack allocation for small string encoding

thisalihassan
authored and
aduh95
committed
stream: refactor duplexify to be less suceptible to prototype pollution
aduh95
committed
assert,util: fix stale nested cycle memo entries

BridgeAR
authored and
aduh95
committed
stream: noop pause/resume on destroyed streams

ronag
authored and
aduh95
committed
test: skip url WPT subtests instead of modifying test script

panva
authored and
aduh95
committed
meta: add QUIC to CODEOWNERS

pimterry
authored and
aduh95
committed
test: improve WPT runner summary

panva
authored and
aduh95
committed
test: ensure WPT report is in out/wpt

panva
authored and
aduh95
committed
deps: upgrade openssl sources to openssl-3.5.6

nodejs-github-bot
authored and
aduh95
committed
deps: update archs files for openssl-3.5.6

nodejs-github-bot
authored and
aduh95
committed
test: update tls junk data error expectations

panva
authored and
aduh95
committed
doc: fix spelling in release announcement guidance

Rohan5commit
authored and
aduh95
committed
tools: improve backport review script
aduh95
committed
stream: fix writev unhandled rejection in fromWeb

Han5991
authored and
aduh95
committed
sqlite: add serialize() and deserialize()

thisalihassan
authored and
aduh95
committed
watch: fix --env-file-if-exists crashing on linux if the file is missing

efekrskl
authored and
aduh95
committed
sqlite: use OneByte for ASCII text and internalize col names

thisalihassan
authored and
aduh95
committed
stream: simplify `createPromiseCallback`
aduh95
committed
doc: update WPT test runner README.md

panva
authored and
aduh95
committed
doc: clarify Backport-PR-URL metadata added automatically

MikeMcC399
authored and
aduh95
committed
doc: fix typo in devcontainer guide

Rohan5commit
authored and
aduh95
committed
build: remove redundant -fuse-linker-plugin from GCC LTO flags

robertsLando
authored and
aduh95
committed
stream: allow shared array buffer sources in writable webstream adapter

Renegade334
authored and
aduh95
committed
src: coerce `spawnSync` args to string once
aduh95
committed
tools: update gyp-next to 0.22.0

nodejs-github-bot
authored and
aduh95
committed
deps: update nbytes to 0.1.4

nodejs-github-bot
authored and
aduh95
committed
deps: update sqlite to 3.53.0

nodejs-github-bot
authored and
aduh95
committed
fs: validate position argument before length === 0 early return

geeksilva97
authored and
aduh95
committed
doc: clarify process._debugProcess() in Permission Model

cybe4sent1nel
authored and
aduh95
committed
lib: reject SharedArrayBuffer in web APIs per spec

thisalihassan
authored and
aduh95
committed
stream: fix nested compose error propagation

mcollina
authored and
aduh95
committed
meta: pass release version to release worker

flakey5
authored and
aduh95
committed
lib: improve Web Cryptography key validation ordering

panva
authored and
aduh95
committed
url: align default argument handling for URLPattern with webidl

panva
authored and
aduh95
committed
node-api: execute tsfn finalizer after queue drains when aborted

KevinEady
authored and
aduh95
committed
node-api: add napi_create_external_sharedarraybuffer

bnoordhuis
authored and
aduh95
committed
test: check contextify contextual store behavior in strict mode

Renegade334
authored and
aduh95
committed
doc: add experimental modules lifetime policy

ShogunPanda
authored and
aduh95
committed
lib: fix sequence argument handling in Blob constructor

Ms2ger
authored and
aduh95
committed
stream: simplify `readableStreamFromIterable`
aduh95
committed
meta: broaden stale bot

avivkeller
authored and
aduh95
committed
lib: fix lint in internal/webstreams/util.js

panva
authored and
aduh95
committed
src: use context-free V8 message column getters

Renegade334
authored and
aduh95
committed
lib: use js-only implementation of `isDataView()`

Renegade334
authored and
aduh95
committed
tools: re-enable undici WPTs in daily wpt.fyi job

panva
authored and
aduh95
committed
esm: add `ERR_REQUIRE_ESM_RACE_CONDITION`
aduh95
committed
test: mark test-snapshot-reproducible flaky

panva
authored and
aduh95
committed
debugger: add edit-free runtime expression probes to `node inspect`

joyeecheung
authored and
aduh95
committed
tools: exclude @node-core/doc-kit from dependabot cooldown

kxxt
authored and
aduh95
committed
doc: clarify dns.lookup() callback signature when all is true

authored and
aduh95
committed
node-api: update libuv ABI stability note

legendecas
authored and
aduh95
committed
test: update test/addons/openssl-binding for OpenSSL 4.0

panva
authored and
aduh95
committed
test: accept renamed OpenSSL 4.0 error code and reason

panva
authored and
aduh95
committed
test: skip test-tls-error-stack when engines are unsupported

panva
authored and
aduh95
committed
test: use valid DER OCSP responses

panva
authored and
aduh95
committed
test: use an always invalid cipher and cover OpenSSL 4.0 behaviours

panva
authored and
aduh95
committed
test: skip tls-deprecated secp256k1 on OpenSSL 4.0

panva
authored and
aduh95
committed
test: account for RFC 7919 FFDHE negotiation in OpenSSL 4.0

panva
authored and
aduh95
committed
doc: remove Ayase-252 and meixg from triagger team
aduh95
committed
src: fix MaybeStackBuffer char_traits deprecation warning

omghante
authored and
aduh95
committed
doc,src,test: fix dead inspector help URL

semimikoh
authored and
aduh95
committed
src: use DCHECK in AsyncWrap::MakeCallback instead emiting a warning

Flarna
authored and
aduh95
committed
doc: clarify diffieHellman.generateKeys recomputes same key

authored and
aduh95
committed
stream: ensuring cross-destruction in _duplexify to prevent leaks

watilde
authored and
aduh95
committed
stream: reject duplicate nested transferables

daeyeon
authored and
aduh95
committed
tools: bump brace-expansion in /tools/clang-format

dependabot[bot]
authored and
aduh95
committed
tools: bump brace-expansion from 5.0.4 to 5.0.5 in /tools/eslint

dependabot[bot]
authored and
aduh95
committed
module: remove duplicated checks from `_resolveFilename`
aduh95
committed
lib: short-circuit WebIDL BufferSource SAB check

panva
authored and
aduh95
committed
meta: bump actions/setup-node from 6.3.0 to 6.4.0

dependabot[bot]
authored and
aduh95
committed
meta: bump step-security/harden-runner from 2.16.1 to 2.19.0

dependabot[bot]
authored and
aduh95
committed
meta: bump peter-evans/create-pull-request from 8.1.0 to 8.1.1

dependabot[bot]
authored and
aduh95
committed
tools: set bot as author of tools-deps-update PRs
aduh95
committed
meta: move VoltrexKeyva to emeritus

mcollina
authored and
aduh95
committed
test_runner: add mock-timers support for AbortSignal.timeout

DeveloperViraj
authored and
aduh95
committed
fs: restore fs patchability in ESM loader

joyeecheung
authored and
aduh95
committed
test_runner: fix suite rerun edge case

MoLow
authored and
aduh95
committed
http: fix no_proxy leading-dot suffix matching

watilde
authored and
aduh95
committed
doc: fix Argon2 parameter bounds

tniessen
authored and
aduh95
committed
crypto: reject inherited key type names

JonathanLopes404
authored and
aduh95
committed
lib: harden kKeyOps lookup with null prototype

panva
authored and
aduh95
committed
test: normalize known inspector crash as completion

joyeecheung
authored and
aduh95
committed
test_runner: align mock timeout api

Han5991
authored and
aduh95
committed
http: fix leaked error listener on sync HTTP req create + destroy

pimterry
authored and
aduh95
committed
doc: fix typo in dns.lookup options description

watilde
authored and
aduh95
committed
deps: cherry-pick libuv/libuv@439a54b

skooch
authored and
aduh95
committed
stream: validate ReadableStream.from iterator objects

daeyeon
authored and
aduh95
committed
process: handle rejections only when needed

gurgunday
authored and
aduh95
committed
url: optimize URLSearchParams set/delete duplicate handling

gurgunday
authored and
aduh95
committed
tools: consolidate and simplify .editorconfig deps section

watilde
authored and
aduh95
committed
doc: fix duplicate word "for for" in compile cache

watilde
authored and
aduh95
committed
doc: fix duplicate word "of of" in postMessageToThread

watilde
authored and
aduh95
committed
src: simplify `TCPWrap::Connect` signature

addaleax
authored and
aduh95
committed
meta: add automation policy

legendecas
authored and
aduh95
committed
doc: correct typo in PR contribution instructions

MikeMcC399
authored and
aduh95
committed
deps: upgrade npm to 11.13.0

npm-cli-bot
authored and
aduh95
committed
lib: avoid quadratic shift() in startup snapshot callback

watilde
authored and
aduh95
committed
tools: fix commit linter for semver-major release proposals
aduh95
committed
crypto: fix unsigned conversion of 4-byte RSA publicExponent

authored and
aduh95
committed
doc: fix typo in test.md

Trott
authored and
aduh95
committed
tools: update gyp-next to 0.22.1

nodejs-github-bot
authored and
aduh95
committed
deps: update timezone to 2026b

nodejs-github-bot
authored and
aduh95
committed
watch: track worker entry files in watch mode

SudhansuBandha
authored and
aduh95
committed
src: fix crash in GetErrorSource() for invalid using syntax

semimikoh
authored and
aduh95
committed
test: export isRiscv64 from common module

JamieMagee
authored and
aduh95
committed
deps: update corepack to 0.34.7

nodejs-github-bot
authored and
aduh95
committed
tools: bump the eslint group in /tools/eslint with 4 updates

dependabot[bot]
authored and
aduh95
committed
doc: use mjs/cjs blocks for callbackify null reason example

watilde
authored and
aduh95
committed
doc: correct diagnostics_channel built-in channel names

bengl
authored and
aduh95
committed
src: add missing <cstdlib> for abort() declaration

ckerr
authored and
aduh95
committed
http2: expose writable stream state on compat response

cookesan
authored and
aduh95
committed
url: process crash via malformed UNC hostname in pathToFileURL()

NickNaso
authored and
aduh95
committed
debugger: move ProbeInspectorSession and helpers to separate files

joyeecheung
authored and
aduh95
committed
tools: do not run `test-linux` on unrelated tools changes
aduh95
committed
stream: simplify `setPromiseHandled` utility
aduh95
committed
tools: simplify `update-undici.sh`
aduh95
committed
deps: update llhttp to 9.4.1

nodejs-github-bot
authored and
aduh95
committed
inspector: fix absolute URLs in network http

GrinZero
authored and
aduh95
committed
meta: bump Mozilla-Actions/sccache-action from 0.0.9 to 0.0.10

dependabot[bot]
authored and
aduh95
committed
meta: bump github/codeql-action from 4.35.1 to 4.35.3

dependabot[bot]
authored and
aduh95
committed
src: swap dotenv and config file parsing order

marco-ippolito
authored and
aduh95
committed
tools: update gr2m/create-or-update-pull-request-action to v1.10.1

MikeMcC399
authored and
aduh95
committed
http: harden ClientRequest options merge

mcollina
authored and
aduh95
committed
stream: remove duplicated utility
aduh95
committed
http: emit 'drain' on OutgoingMessage only after buffers drain

ronag
authored and
aduh95
committed
stream: copyedit `webstreams/adapter.js`
aduh95
committed
build: track PDL files as inputs in inspector GN build

deepak1556
authored and
aduh95
committed
tools: use LTS Node.js in notify-on-push workflow

nsinfoPRO
authored and
aduh95
committed
deps: update amaro to 1.1.9

nodejs-github-bot
authored and
aduh95
committed
test_runner: fix failing suite hooks when marked with `todo`

MoLow
authored and
aduh95
committed
doc: fix the TypeScript Execute (tsx) project link

davidthornton
authored and
aduh95
committed
quic: start re-enabling quic with openssl 3.5

jasnell
authored and
aduh95
committed
deps: update ngtcp2 to 1.14.0

jasnell
authored and
aduh95
committed
deps: update nghttp3 to 1.11.0

jasnell
authored and
aduh95
committed
quic: update the guard to check openssl version

jasnell
authored and
aduh95
committed
quic: fixup windows coverage compile error

jasnell
authored and
aduh95
committed
quic: fixup NO_ERROR macro conflict on windows

jasnell
authored and
aduh95
committed
quic: few additional small comment edits in cid.h

jasnell
authored and
aduh95
committed
quic: update more of the quic to the new compile guard

jasnell
authored and
aduh95
committed
quic: multiple fixups and updates

jasnell
authored and
aduh95
committed
quic: reduce boilerplate and other minor cleanups

jasnell
authored and
aduh95
committed
src: cleanup quic TransportParams class

jasnell
authored and
aduh95
committed
src: fix small compile warning in quic/streams.cc

jasnell
authored and
aduh95
committed
deps: update nghttp3 to 1.13.1

nodejs-github-bot
authored and
aduh95
committed
deps: update nghttp3 to 1.14.0

nodejs-github-bot
authored and
aduh95
committed
quic: copy options.certs buffer instead of detaching

legendecas
authored and
aduh95
committed
quic: fix a handful of bugs and missing functionality

jasnell
authored and
aduh95
committed
quic: update http3 impl details

jasnell
authored and
aduh95
committed
quic: fixup linting/formatting issues

jasnell
authored and
aduh95
committed
quic: use arena allocation for packets

jasnell
authored and
aduh95
committed
quic: move quic behind compile time flag

mcollina
authored and
aduh95
committed
quic: implement rapidhash for hashing improvements

jasnell
authored and
aduh95
committed
src: add permission support to config file
marco-ippolito
authored
test: improve config-file permission test coverage

RafaelGSS
authored and
aduh95
committed
src: expose help texts into node-config-schema.json

pmarchini
authored and
aduh95
committed
test_runner: update node-config-schema

pmarchini
authored and
aduh95
committed
doc: fix node-config-schema

ChALkeR
authored and
aduh95
committed
meta: bump actions/download-artifact from 8.0.0 to 8.0.1

dependabot[bot]
authored and
aduh95
committed
quic: apply multiple TLS context improvements and SNI support

jasnell
authored and
aduh95
committed
quic: support multiple ALPN negotiation

jasnell
authored and
aduh95
committed
quic: fixup token verification to handle zero expiration

jasnell
authored and
aduh95
committed
util: colorize text with hex colors

araujogui
authored and
aduh95
committed
quic: add QuicEndpoint.listening & QuicStream.destroy() and tests

pimterry
authored and
aduh95
committed
tools: add a check for clean git tree after tests
aduh95
committed
src: clean up experimental flag variables
aduh95
committed
fs: add followSymlinks option to glob

mcollina
authored and
aduh95
committed
doc: fix duplicate word "to to" in util.styleText

watilde
authored and
aduh95
committed
test: update WPT for streams to f8f26a372f

nodejs-github-bot
authored and
aduh95
committed
test: update WPT for url to 258f285de0

nodejs-github-bot
authored and
aduh95
committed

Commits on May 9, 2026

repl: keep reference count for `process.on('newListener')`
addaleax
authored
crypto: remove Argon2 KDF derivation from its job setup

panva
authored and
aduh95
committed
crypto: reject unintended raw key format string input

panva
authored and
aduh95
committed
doc: fix typos and inconsistencies in crypto.md and webcrypto.md

panva
authored and
aduh95
committed
crypto: deduplicate and canonicalize CryptoKey usages

panva
authored and
aduh95
committed
inspector: initial support storage inspection

islandryu
authored and
aduh95
committed
inspector: auto collect webstorage data

islandryu
authored and
aduh95
committed
inspector: return errors when CDP protocol event emission fails

islandryu
authored and
aduh95
committed
inspector: coerce key and value to string in webstorage events

thisalihassan
authored and
aduh95
committed
test: generate `localstorage.db` in a temp dir

legendecas
and
aduh95
committed
deps: V8: cherry-pick 657d8de27427
guybedford
authored
test_runner: support test order randomization

pmarchini
authored and
aduh95
committed
test_runner: publish to TracingChannel for OTel instrumentation

MoLow
authored and
aduh95
committed
test_runner: add `testId` to test events

MoLow
authored and
aduh95
committed

Commits on May 12, 2026

2026-05-21, Version 24.16.0 'Krypton' (LTS)
nodejs-github-bot
authored