nodejs · github-actions · Apr 28, 2026 · May 6, 2026 · Jan 2, 2026 · Jan 18, 2026
diff --git a/.editorconfig b/.editorconfig
@@ -16,12 +16,13 @@ end_of_line = crlf
 indent_size = 8
 indent_style = tab
 
-[{deps}/**]
+[deps/**]
 charset = unset
 end_of_line = unset
 indent_size = unset
 indent_style = unset
+insert_final_newline = unset
 trim_trailing_whitespace = unset
 
-[{test/fixtures,deps,tools/eslint/node_modules,tools/gyp,tools/icu,tools/msvs}/**]
+[{test/fixtures,tools/eslint/node_modules,tools/gyp,tools/icu,tools/msvs}/**]
 insert_final_newline = false
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -86,6 +86,15 @@
 /src/node_http2* @nodejs/http2 @nodejs/net
 /src/node_mem* @nodejs/http2
 
+# quic
+
+/deps/ngtcp2/* @nodejs/quic
+/doc/api/quic.md @nodejs/quic
+/lib/quic.js @nodejs/quic
+/lib/internal/quic/* @nodejs/quic
+/src/quic/* @nodejs/quic
+/test/parallel/test-quic-* @nodejs/quic
+
 # modules, including loaders
 
 /doc/api/esm.md @nodejs/loaders

diff --git a/.github/actions/undici-wpt-current/action.yml b/.github/actions/undici-wpt-current/action.yml
@@ -0,0 +1,56 @@
+name: Run undici WPT (current)
+description: Runs undici WPT tests for undici >= 7 and merges results into the Node.js WPT report
+
+inputs:
+  undici-version:
+    required: true
+    description: undici version tag to checkout
+  wpt-report:
+    required: true
+    description: Path to the Node.js WPT report to merge into
+
+runs:
+  using: composite
+  steps:
+    - name: Checkout undici
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+      with:
+        repository: nodejs/undici
+        persist-credentials: false
+        path: undici
+        clean: false
+        ref: ${{ inputs.undici-version }}
+    - name: Prepare WPT checkout
+      shell: bash
+      run: |
+        rm -rf undici/test/web-platform-tests/wpt
+        mv test/fixtures/wpt undici/test/web-platform-tests/wpt
+    - name: Configure hosts
+      shell: bash
+      working-directory: undici/test/web-platform-tests/wpt
+      run: python3 wpt make-hosts-file | sudo tee -a /etc/hosts
+    - name: Install dependencies
+      shell: bash
+      working-directory: undici
+      run: npm install
+    - name: Run WPT
+      shell: bash
+      working-directory: undici
+      env:
+        CI: 'true'
+        WPT_REPORT: ${{ github.workspace }}/undici/wptreport.json
+      run: npm run test:wpt || true
+    - name: Merge report
+      shell: bash
+      env:
+        NODE_WPT_REPORT: ${{ inputs.wpt-report }}
+        UNDICI_WPT_REPORT: ${{ github.workspace }}/undici/wptreport.json
+      run: |
+        if [ -f "$UNDICI_WPT_REPORT" ]; then
+          jq -sc '
+            .[0].results += .[1].results |
+            .[0].time_end = .[1].time_end |
+            .[0]
+          ' "$NODE_WPT_REPORT" "$UNDICI_WPT_REPORT" > "${NODE_WPT_REPORT}.tmp"
+          mv "${NODE_WPT_REPORT}.tmp" "$NODE_WPT_REPORT"
+        fi
diff --git a/.github/actions/undici-wpt-legacy/action.yml b/.github/actions/undici-wpt-legacy/action.yml
@@ -0,0 +1,37 @@
+name: Run undici WPT (legacy)
+description: Runs undici WPT tests for undici < 7 and appends results to the Node.js WPT report
+
+inputs:
+  undici-version:
+    required: true
+    description: undici version tag to checkout
+  wpt-report:
+    required: true
+    description: Path to the Node.js WPT report
+
+runs:
+  using: composite
+  steps:
+    - name: Checkout undici
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+      with:
+        repository: nodejs/undici
+        persist-credentials: false
+        path: undici
+        clean: false
+        ref: ${{ inputs.undici-version }}
+    - name: Prepare WPT checkout
+      shell: bash
+      run: |
+        rm -rf undici/test/wpt/tests
+        mv test/fixtures/wpt undici/test/wpt/tests
+    - name: Install dependencies
+      shell: bash
+      working-directory: undici
+      run: npm install
+    - name: Run WPT
+      shell: bash
+      working-directory: undici
+      env:
+        WPT_REPORT: ${{ inputs.wpt-report }}
+      run: npm run test:wpt || true
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -52,6 +52,8 @@ updates:
       semver-major-days: 5
       semver-minor-days: 5
       semver-patch-days: 5
+      exclude:
+        - '@node-core/doc-kit'
     commit-message:
       prefix: tools
     open-pull-requests-limit: 10

diff --git a/.github/workflows/auto-start-ci.yml b/.github/workflows/auto-start-ci.yml
@@ -28,13 +28,13 @@ jobs:
       - name: Get Pull Requests
         id: get_prs_for_ci
         run: >
-          numbers=$(gh pr list \
-                  --repo ${{ github.repository }} \
+          echo "numbers=$(gh pr list \
+                  --repo "$GITHUB_REPOSITORY" \
                   --label 'request-ci' \
                   --json 'number' \
+                  --search 'review:approved' \
                   -t '{{ range . }}{{ .number }} {{ end }}' \
-                  --limit 5)
-          echo "numbers=$numbers" >> $GITHUB_OUTPUT
+                  --limit 5)" >> "$GITHUB_OUTPUT"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   start-ci:
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-slim
     steps:
       - name: Install Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238  # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # v6.4.0
         with:
           node-version: ${{ env.NODE_VERSION }}
 

diff --git a/.github/workflows/build-tarball.yml b/.github/workflows/build-tarball.yml
@@ -82,13 +82,13 @@ jobs:
           python-version: ${{ env.PYTHON_VERSION }}
       - name: Set up sccache
         if: github.base_ref == 'main' || github.ref_name == 'main'
-        uses: Mozilla-Actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad  # v0.0.9
+        uses: Mozilla-Actions/sccache-action@9e7fa8a12102821edf02ca5dbea1acd0f89a2696  # v0.0.10
         with:
           version: v0.12.0
       - name: Environment Information
         run: npx envinfo
       - name: Download tarball
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3  # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: tarballs
           path: tarballs

diff --git a/.github/workflows/close-stale-feature-requests.yml b/.github/workflows/close-stale-feature-requests.yml
diff --git a/.github/workflows/close-stale-pull-requests.yml b/.github/workflows/close-stale-pull-requests.yml
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -27,15 +27,15 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e  # v4.32.4
+        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7  # v4.35.3
         with:
           languages: ${{ matrix.language }}
           config-file: ./.github/codeql-config.yml
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e  # v4.32.4
+        uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7  # v4.35.3
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e  # v4.32.4
+        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7  # v4.35.3
         with:
           category: /language:${{matrix.language}}
diff --git a/.github/workflows/commit-lint.yml b/.github/workflows/commit-lint.yml
@@ -1,6 +1,10 @@
 name: First commit message adheres to guidelines
 
-on: [pull_request]
+on:
+  pull_request:
+    branches:
+      - main
+      - v[0-9]+.x-staging
 
 env:
   NODE_VERSION: lts/*
@@ -23,7 +27,7 @@ jobs:
           persist-credentials: false
       - run: git reset HEAD^2
       - name: Install Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238  # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # v6.4.0
         with:
           node-version: ${{ env.NODE_VERSION }}
       - name: Validate commit message

diff --git a/.github/workflows/commit-queue.yml b/.github/workflows/commit-queue.yml
@@ -69,7 +69,7 @@ jobs:
 
       # Install dependencies
       - name: Install Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238  # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # v6.4.0
         with:
           node-version: ${{ env.NODE_VERSION }}
       - name: Install @node-core/utils

diff --git a/.github/workflows/coverage-linux-without-intl.yml b/.github/workflows/coverage-linux-without-intl.yml
@@ -58,7 +58,7 @@ jobs:
           python-version: ${{ env.PYTHON_VERSION }}
       - name: Set up sccache
         if: github.base_ref == 'main' || github.ref_name == 'main'
-        uses: Mozilla-Actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad  # v0.0.9
+        uses: Mozilla-Actions/sccache-action@9e7fa8a12102821edf02ca5dbea1acd0f89a2696  # v0.0.10
         with:
           version: v0.12.0
       - name: Environment Information
@@ -81,6 +81,6 @@ jobs:
       - name: Clean tmp
         run: rm -rf coverage/tmp && rm -rf out
       - name: Upload
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de  # v5.5.2
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2  # v6.0.0
         with:
           directory: ./coverage
diff --git a/.github/workflows/coverage-linux.yml b/.github/workflows/coverage-linux.yml
@@ -58,7 +58,7 @@ jobs:
           python-version: ${{ env.PYTHON_VERSION }}
       - name: Set up sccache
         if: github.base_ref == 'main' || github.ref_name == 'main'
-        uses: Mozilla-Actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad  # v0.0.9
+        uses: Mozilla-Actions/sccache-action@9e7fa8a12102821edf02ca5dbea1acd0f89a2696  # v0.0.10
         with:
           version: v0.12.0
       - name: Environment Information
@@ -81,6 +81,6 @@ jobs:
       - name: Clean tmp
         run: rm -rf coverage/tmp && rm -rf out
       - name: Upload
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de  # v5.5.2
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2  # v6.0.0
         with:
           directory: ./coverage
diff --git a/.github/workflows/coverage-windows.yml b/.github/workflows/coverage-windows.yml
@@ -95,6 +95,6 @@ jobs:
       - name: Clean tmp
         run: npx rimraf ./coverage/tmp
       - name: Upload
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de  # v5.5.2
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2  # v6.0.0
         with:
           directory: ./coverage
@@ -40,7 +40,7 @@ jobs:
 
       # Install dependencies
       - name: Install Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238  # v6.2.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # v6.4.0
         with:
           node-version: ${{ env.NODE_VERSION }}