chore(deps): update dependency node to v24 by renovate[bot] · Pull Request #31 · sourcegraph/codeprobe

(CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
(CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
(CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
(CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
(CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
(CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
(CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
(CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov)
crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
deps: update timezone to 2026e (Node.js GitHub Bot)
deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
deps: update undici to 7.30.1 (Node.js GitHub Bot)

Commits

[2a73ee5a89] - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) #66877
[4d6990b33c] - crypto: reset random caches across snapshots (Filip Skokan) nodejs-private/node-private#987
[4b3c9bbf9f] - crypto: harden X.509 conversion and formatting (Filip Skokan) nodejs-private/node-private#1007
[9243b105b6] - crypto: update root certificates to NSS 3.129 (Node.js GitHub Bot) #66496
[1e39cd53c7] - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) #66868
[49dff6f57a] - deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov) nodejs-private/node-private#1002
[fca511adc5] - deps: V8: backport 93cd21e (Joyee Cheung) nodejs-private/node-private#1008
[18711c7567] - deps: update timezone to 2026e (Node.js GitHub Bot) #66419
[fa77cfb1ad] - deps: update timezone to 2026d (Node.js GitHub Bot) #66333
[b84f9f186b] - deps: update archs files for openssl-3.5.9 (Node.js GitHub Bot) #66396
[ff0664c3ba] - deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) #66396
[1d4c89ef87] - deps: update undici to 7.30.1 (Node.js GitHub Bot) #66764
[843a1627dc] - dns: validate resolve inputs for null bytes (James M Snell) nodejs-private/node-private#984
[96c3ccb1fc] - http: ensure agent data guard works without I/O (James M Snell) nodejs-private/node-private#983
[8dc18a6218] - permission: check permission model in realpathSync (RafaelGSS) nodejs-private/node-private#973
[b5f41529df] - src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) nodejs-private/node-private#1002
[01acf0ee74] - tls: reject chains containing blocked public keys (Ulises Gascón) #66871
[935918e342] - tls: reject non-canonical IP addresses (Matteo Collina) nodejs-private/node-private#982
[de49c913f2] - tls: fix ip normalization regression (James M Snell) nodejs-private/node-private#985
[9dc4bb57f0] - tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett) #66855

`v24.22.0`: 2026-10-14, Version 24.22.0 'Krypton' (LTS), @richardlau prepared by @aduh95

Compare Source

Notable Changes

[ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627
[c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553
[a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484
[c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #65484
[51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411
[d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #66090
[acc1578179] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #65593
[a7f8de6362] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #64725
[60c3eb61bd] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #65825
[6b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #65806
[75456a3512] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #65606
[72d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #65434
[41161dda87] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #64232
[adbc757d70] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232
[241339f072] - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell) #65805
[63b0974d9e] - (SEMVER-MINOR) util: implement util.throttle (James M Snell) #65899
[a3bbb5a26f] - (SEMVER-MINOR) util: implement debounce (James M Snell) #65899

Commits

[e6832b2cb1] - assert: fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) #64449
[a079177d9f] - benchmark: add --csv option to compare.js with --analyze (James M Snell) #65922
[10b1a0f70f] - benchmark: fix max-regressions detection in compare.js (James M Snell) #65587
[e0c7ba8ad5] - benchmark: add --analyze option to benchmark/scatter.js (James M Snell) #65594
[21fed10bb0] - benchmark: add crypto class benchmarks (Filip Skokan) #65518
[fa912242b7] - buffer: fix unaligned UTF-16LE decoding (Matteo Collina) #65905
[a6bd0c1413] - build: suppress OpenSSL asm warnings with clang (Richard Lau) #66023
[94e12139ee] - build: derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) #65744
[7a2f322943] - build: fix quiet default for make builds (Shelley Vohr) #65826
[c280d650b0] - build: allow linking shared dependencies in the GN build (Shelley Vohr) #65797
[4b23a4472c] - build: enable the V8 sandbox in shared-cage builds (Shelley Vohr) #62237
[676e15c003] - build: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #65464
[f784058482] - build: remove obsolete configure flags (Chengzhong Wu) #65456
[f63f37d243] - build: activate correct default flags for riscv64 (Stewart X Addison) #65708
[da46ac075d] - build: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) #65491
[249e9a16dd] - build,src: gate jspi flag on V8_ENABLE_WEBASSEMBLY (Piotr Kubaj) #66082
[146f00f64b] - child_process: clear timeout timer on spawn-time error too (kishore280) #65506
[13987f4418] - crypto: remove redundent std::move call (Antoine du Hamel) #66111
[ef957ac85f] - crypto: skip private RSA parameters in key details (Filip Skokan) #66108
[8feccc5e22] - crypto: use provider EC group names (Filip Skokan) #66108
[764e0d1120] - crypto: fetch ciphers for private-key encoding (Filip Skokan) #66108
[50ffed1979] - crypto: decode PKCS#1 keys through providers (Filip Skokan) #66108
[56c16b2fd6] - crypto: derive keys through EVP_KDF (Filip Skokan) #66108
[a4effe6809] - crypto: use names for asymmetric key algorithms (Filip Skokan) #65966
[ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627
[8e631aa48f] - crypto: add Hybrid KEMs to Web Cryptography (Filip Skokan) #65759
[5c51129e16] - crypto: optimize private EC JWK import (Filip Skokan) #65908
[c2ec40c2d7] - crypto: disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) #65172
[e198aa0f79] - crypto: read RSA-PSS restrictions from provider (Filip Skokan) #66108
[253784f0e9] - crypto: optimize and benchmark key preparation (Filip Skokan) #65892
[80a6ad509b] - crypto: avoid EC reconstruction for signature sizing (Filip Skokan) #65908
[5b592b772c] - crypto: avoid EC raw export reconstruction (Filip Skokan) #65908
[ee956ae3bf] - crypto: export EC JWK coordinates directly (Filip Skokan) #65908
[684008be58] - crypto: read EC curve metadata directly (Filip Skokan) #65908
[f4665f1c41] - crypto: validate the limit of PBKDF2 iterations (Filip Skokan) #65704
[624abbecd7] - crypto: use primordials in HKDF info validation (Filip Skokan) #65704
[e4d916f175] - crypto: add mgf1Hash for RSA-OAEP (Adam Mcgrath) #65073
[db8a9162a8] - crypto: fix multi-prime RSA JWKs (Filip Skokan) #65649
[022ac83504] - crypto: cache valid ECDH key pairs (Filip Skokan) #65615
[c61953ebcc] - crypto: add strict mode to --force-fips (Filip Skokan) #65645
[db6ea132a5] - crypto: add FIPS indicator diagnostics channel (Filip Skokan) #65645
[c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553
[2b62aafd20] - crypto: validate JWK usages before key_ops (Filip Skokan) #65550
[ec7819db69] - crypto: fix RSA-PSS oversized salt handling (Filip Skokan) #65550
[a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484
[c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #65484
[51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411
[5a46a9acbb] - crypto: improve SubtleCrypto.supports() accuracy (Filip Skokan) #65222
[191ebfb26c] - crypto: fix public PKCS8 export error (한국) #65609
[b6d7ed372b] - crypto: fix private SPKI export error (Filip Skokan) #65550
[79509c25a4] - crypto: correct CCM decryption FIPS error message (kyungrae) #65450
[9adc87bc16] - crypto: harden X509Certificate state (Filip Skokan) #65518
[c63aa331b4] - crypto: optimize key slot caching (Filip Skokan) #65518
[87daea43a7] - crypto: add null checks for OPENSSL_INIT_new() (Nora Dossche) #63457
[98ca5e9358] - crypto: prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) #65112
[0c090a28cd] - crypto: avoid throwing CryptoKey brand checks (Filip Skokan) #65503
[a13cc3f723] - crypto: avoid throwing KeyObject brand checks (Filip Skokan) #65503
[b8db0045ef] - deps: V8: cherry-pick ea9c016 (Gundepalli Sravani) #66570
[ba09b53487] - deps: V8: backport c355350 (Jakob Linke) #66089
[9ce8ef405b] - deps: V8: backport 8901c79 (Toon Verwaest) #66089
[fb0d0ca289] - deps: V8: backport 0b94a9f (Ruan Gustavo) #65753
[2faca508c0] - deps: update googletest to 8eff9e3 (Node.js GitHub Bot) #66009
[4396c9bffe] - deps: update googletest to 283c175 (Node.js GitHub Bot) #65833
[8a5b12570c] - deps: update simdjson to 4.6.11 (Node.js GitHub Bot) #65834
[c47feb09e8] - deps: update zlib to 1.3.2.1-motley-285e94b (Node.js GitHub Bot) #65835
[9f0d905286] - deps: upgrade npm to 11.19.1 (npm team) #65573
[373cd332d8] - deps: update googletest to 36ba75f (Node.js GitHub Bot) #65654
[aeed6132a7] - deps: update simdjson to 4.6.9 (Node.js GitHub Bot) #65655
[2583571342] - deps: update zlib to 1.3.2.1-motley-5eb4d7e (Node.js GitHub Bot) #65494
[d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #66090
[0a4a8d602a] - doc: fix duplicate 'the' typo in node_platform.cc (Muhammad Al-Muzahid) #66058
[b6538138ef] - doc: clarify sub-1000ms behavior in socket.setKeepAlive (Haram Jeong) #65869
[d319fa7de4] - doc: remove obsolete mentioning of cl.exe on windows (Chengzhong Wu) #66038
[67cb305b59] - doc: note that default signal handling resets the signal mask (Shelley Vohr) #65877
[160d44e025] - doc: clarify QUIC async write backpressure (John Finnerty) #65947
[ffd47a7ee5] - doc: clarify permission model scope for output paths (Rafael Gonzaga) #66004
[2e1772a8ab] - doc: fill in missing zstd docs (James M Snell) #65867
[9f88c6f8dc] - doc: add inoway46 as triager (Yuya Inoue) #65565
[c2620d01f3] - doc: document windowsHide for child_process.fork (Christopher Buss) #65887
[6076111e1a] - doc: qualify directory read ordering for native fs (Trivikram Kamat) #65868
[7bf048a336] - doc: add DOMException section to errors API reference (Avocado) #65206
[414b6bfa62] - doc: expand revert commit collaborator instructions (Mike McCready) #65848
[c8ac91692c] - doc: note that FreeEnvironment() runs a shared event loop (Shelley Vohr) #65691
[cc47cc0983] - doc: clarify security triage dispositions and permission boundaries (Rafael Gonzaga) #65436
[8b79a71e78] - doc: fix default limit of maxHeadersCount (Aryn H) #65472
[[56b1252a54](h

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the bot label Sep 20, 2026

renovate Bot force-pushed the renovate/node-24.x branch from c156546 to 22188f7 Compare October 7, 2026 03:55

renovate Bot force-pushed the renovate/node-24.x branch from 22188f7 to 66f970a Compare October 16, 2026 21:22

chore(deps): update dependency node to v24

92aeac4

renovate Bot force-pushed the renovate/node-24.x branch from 66f970a to 92aeac4 Compare October 24, 2026 07:47

Navigation Menu

Repository navigation

chore(deps): update dependency node to v24 - #31

chore(deps): update dependency node to v24#31
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-24.x

renovate Bot commented Sep 20, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v24.22.1: 24.22.1

v24.22.0: 24.22.0

v24.21.0: 24.21.0

v24.20.0: 24.20.0

v24.19.0: 24.19.0

v24.18.1: 24.18.1

v24.18.0: 24.18.0

v24.17.0: 24.17.0

v24.16.0: 24.16.0

v24.15.0: 24.15.0

v24.14.1: 24.14.1

v24.14.0: 24.14.0

v24.13.1: 24.13.1

v24.13.0: 24.13.0

v24.12.0: 24.12.0

v24.11.1: 24.11.1

v24.11.0: 24.11.0

v24.10.0: 24.10.0

v24.9.0: 24.9.0

v24.8.0: 24.8.0

v24.7.0: 24.7.0

v24.6.0: 24.6.0

v24.5.0: 24.5.0

v24.4.1: 24.4.1

v24.4.0: 24.4.0

v24.3.0: 24.3.0

v24.2.0: 24.2.0

v24.1.0: 24.1.0

v24.0.2: 24.0.2

v24.0.1: 24.0.1

v24.0.0: 24.0.0

v22.23.4: 22.23.4

v22.23.3: 22.23.3

v22.23.2: 22.23.2

v22.23.1: 22.23.1

v22.23.0: 22.23.0

v22.22.3: 22.22.3

v22.22.2: 22.22.2

v22.22.1: 22.22.1

v22.22.0: 22.22.0

v22.21.1: 22.21.1

v22.21.0: 22.21.0

v22.20.0: 22.20.0

v22.19.0: 22.19.0

v22.18.0: 22.18.0

v22.17.1: 22.17.1

v22.17.0: 22.17.0

v22.16.0: 22.16.0

v22.15.1: 22.15.1

v22.15.0: 22.15.0

v22.14.0: 22.14.0

v22.13.1: 22.13.1

v22.13.0: 22.13.0

v22.12.0: 22.12.0

v22.11.0: 22.11.0

v22.10.0: 22.10.0

v22.9.0: 22.9.0

v22.8.0: 22.8.0

v22.7.0: 22.7.0

v22.6.0: 22.6.0

v22.5.1: 22.5.1

v22.5.0: 22.5.0

v22.4.1: 22.4.1

v22.4.0: 22.4.0

v22.3.0: 22.3.0

v22.2.0: 22.2.0

v22.1.0: 22.1.0

v22.0.0: 22.0.0

v20.20.2: 20.20.2

v20.20.1: 20.20.1

v20.20.0: 20.20.0

v20.19.6: 20.19.6

v20.19.5: 20.19.5

v20.19.4: 20.19.4

v20.19.3: 20.19.3

v20.19.2: 20.19.2

renovate Bot commented Sep 20, 2026 •

edited

Loading

`v24.22.1`: 24.22.1

`v24.22.0`: 24.22.0

`v24.21.0`: 24.21.0

`v24.20.0`: 24.20.0

`v24.19.0`: 24.19.0

`v24.18.1`: 24.18.1

`v24.18.0`: 24.18.0

`v24.17.0`: 24.17.0

`v24.16.0`: 24.16.0

`v24.15.0`: 24.15.0

`v24.14.1`: 24.14.1

`v24.14.0`: 24.14.0

`v24.13.1`: 24.13.1

`v24.13.0`: 24.13.0

`v24.12.0`: 24.12.0

`v24.11.1`: 24.11.1

`v24.11.0`: 24.11.0

`v24.10.0`: 24.10.0

`v24.9.0`: 24.9.0

`v24.8.0`: 24.8.0

`v24.7.0`: 24.7.0

`v24.6.0`: 24.6.0

`v24.5.0`: 24.5.0

`v24.4.1`: 24.4.1

`v24.4.0`: 24.4.0

`v24.3.0`: 24.3.0

`v24.2.0`: 24.2.0

`v24.1.0`: 24.1.0

`v24.0.2`: 24.0.2

`v24.0.1`: 24.0.1

`v24.0.0`: 24.0.0

`v22.23.4`: 22.23.4

`v22.23.3`: 22.23.3

`v22.23.2`: 22.23.2

`v22.23.1`: 22.23.1

`v22.23.0`: 22.23.0

`v22.22.3`: 22.22.3

`v22.22.2`: 22.22.2

`v22.22.1`: 22.22.1

`v22.22.0`: 22.22.0

`v22.21.1`: 22.21.1

`v22.21.0`: 22.21.0

`v22.20.0`: 22.20.0

`v22.19.0`: 22.19.0

`v22.18.0`: 22.18.0

`v22.17.1`: 22.17.1

`v22.17.0`: 22.17.0

`v22.16.0`: 22.16.0

`v22.15.1`: 22.15.1

`v22.15.0`: 22.15.0

`v22.14.0`: 22.14.0

`v22.13.1`: 22.13.1

`v22.13.0`: 22.13.0

`v22.12.0`: 22.12.0

`v22.11.0`: 22.11.0

`v22.10.0`: 22.10.0

`v22.9.0`: 22.9.0

`v22.8.0`: 22.8.0

`v22.7.0`: 22.7.0

`v22.6.0`: 22.6.0

`v22.5.1`: 22.5.1

`v22.5.0`: 22.5.0

`v22.4.1`: 22.4.1

`v22.4.0`: 22.4.0

`v22.3.0`: 22.3.0

`v22.2.0`: 22.2.0

`v22.1.0`: 22.1.0

`v22.0.0`: 22.0.0

`v20.20.2`: 20.20.2

`v20.20.1`: 20.20.1

`v20.20.0`: 20.20.0

`v20.19.6`: 20.19.6

`v20.19.5`: 20.19.5

`v20.19.4`: 20.19.4

`v20.19.3`: 20.19.3

`v20.19.2`: 20.19.2

`v20.19.1`: 20.19.1

`v20.19.0`: 20.19.0

`v20.18.3`: 20.18.3