nodejs/node v22.19.0

2025-08-28, Version 22.19.0 'Jod' (LTS), @aduh95

on GitHub

Notable Changes

• [8e2076a24f] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
• [e592d739c2] - (SEMVER-MINOR) cli: support ${pid} placeholder in --cpu-prof-name (Haram Jeong) #59072
• [cda1dab6e2] - (SEMVER-MINOR) crypto: add tls.setDefaultCACertificates() (Joyee Cheung) #58822
• [1f184513e9] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #58440
• [bace73a173] - doc: update the instruction on how to verify releases (Antoine du Hamel) #59113
• [fa9a9e9c69] - (SEMVER-MINOR) esm: unflag --experimental-wasm-modules (Guy Bedford) #57038
• [390a9dc20b] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
• [c12c5343ad] - lib: docs deprecate _http_* (Sebastian Beltran) #59293
• [f57ee3d71f] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #58087
• [035da74c31] - (SEMVER-MINOR) process: add threadCpuUsage (Paolo Insogna) #56467
• [8e697d1884] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240

Commits

• [73aa0ae37f] - assert: change utils to use index instead of for...of (방진혁) #59278
• [dfe3a11eed] - benchmark: remove deprecated _extend from benchmark (Rafael Gonzaga) #59228
• [9b9d30042a] - benchmark: add fs warmup to writefile-promises (Bruno Rodrigues) #59215
• [a663f7f954] - benchmark: add calibrate-n script (Rafael Gonzaga) #59186
• [1b9b5bddd6] - benchmark: adjust configuration for string-decoder bench (Rafael Gonzaga) #59187
• [d0ac3319f9] - benchmark: add --track to benchmark (Rafael Gonzaga) #59174
• [2044968b86] - benchmark: small lint fix on _cli.js (Rafael Gonzaga) #59172
• [4e519934cb] - benchmark: drop misc/punycode benchmark (Rafael Gonzaga) #59171
• [07e173d969] - benchmark: fix sqlite-is-transaction (Rafael Gonzaga) #59170
• [8440b6177f] - benchmark: reduce N for diagnostics_channel subscribe benchmark (Arthur Angelo) #59116
• [8615ea6db0] - buffer: cache Environment::GetCurrent to avoid repeated calls (Mert Can Altin) #59043
• [3deb5361d2] - build: fix node_use_sqlite for GN builds (Shelley Vohr) #59017
• [0f0ce63116] - build: remove suppressions.supp (Rafael Gonzaga) #59079
• [b30a2117dc] - build,deps,tools: prepare to update to OpenSSL 3.5 (Richard Lau) #58100
• [8e2076a24f] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #59276
• [e592d739c2] - (SEMVER-MINOR) cli: support ${pid} placeholder in --cpu-prof-name (Haram Jeong) #59072
• [b5571047ed] - crypto: prepare webcrypto key import/export for modern algorithms (Filip Skokan) #59284
• [cda1dab6e2] - (SEMVER-MINOR) crypto: add tls.setDefaultCACertificates() (Joyee Cheung) #58822
• [76dab34fb7] - deps: support madvise(3C) across ALL illumos revisions (Dan McDonald) #58237
• [19d3ed64b6] - deps: update sqlite to 3.50.4 (Node.js GitHub Bot) #59337
• [38bafc59e0] - deps: V8: backport 493cb53691be (Chengzhong Wu) #59238
• [e8da171cc3] - deps: update sqlite to 3.50.3 (Node.js GitHub Bot) #59132
• [fd4ba38ab6] - deps: update googletest to 7e17b15 (Node.js GitHub Bot) #59131
• [f71f427b95] - deps: update archs files for openssl-3.0.17 (Node.js GitHub Bot) #59134
• [79c5a8f4d2] - deps: upgrade openssl sources to openssl-3.0.17 (Node.js GitHub Bot) #59134
• [0dcc84cf53] - deps: update corepack to 0.34.0 (Node.js GitHub Bot) #59133
• [1f184513e9] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #58440
• [f64f5df80e] - doc: fix --use-system-ca history (Joyee Cheung) #59411
• [e22aeaa38f] - doc: add missing section for setReturnArrays in sqlite.md (Edy Silva) #59074
• [e44ef07235] - doc: rename x509.extKeyUsage to x509.keyUsage (Filip Skokan) #59332
• [2c5d0aac5e] - doc: fix Pbkdf2Params hash attribute heading (Filip Skokan) #59395
• [fde94346e5] - doc: fix missing reference links for server.keepAliveTimeoutBuffer (Lee Jiho) #59356
• [9af8bcea58] - doc: fix grammar in global dispatcher usage (Eng Zer Jun) #59344
• [0edf17198f] - doc: run license-builder (github-actions[bot]) #59343
• [7f767a2e38] - doc: correct orthography eg. → e.g. (Jacob Smith) #59329
• [a46ed50350] - doc: clarify the need of compiler compatible with c++20 (Rafael Gonzaga) #59297
• [212263a305] - doc: clarify release candidate stability index (Filip Skokan) #59295
• [ce93b8b556] - doc: add WDYT to glossary (btea) #59280
• [ebaaf2c67f] - doc: add manpage entry for --use-system-ca (Joyee Cheung) #59273
• [43b5a21916] - doc: add path.join and path.normalize clarification (Rafael Gonzaga) #59262
• [409c66d328] - doc: fix typo in test/common/README.md (Yoo) #59180
• [cbb0a8eb13] - doc: add note on process memoryUsage (fengmk2) #59026
• [9892b15d81] - doc: format safely for doc-kit (Aviv Keller) #59229
• [bace73a173] - doc: update the instruction on how to verify releases (Antoine du Hamel) #59113
• [b549deac02] - doc: copyedit SECURITY.md (Rich Trott) #59190
• [ef1bc3f344] - doc: fix broken sentence in URL.parse (Superchupu) #59164
• [3c6639e8ec] - doc: improve onboarding instructions (Joyee Cheung) #59159
• [6ffaac66bc] - doc: add constraints for mem leak to threat model (Rafael Gonzaga) #58917
• [e419d20144] - doc: add Aditi-1400 to collaborators (Aditi Singh) #59157
• [ba380f7bf3] - doc: avoid suggesting testing fast api with intense loop (Chengzhong Wu) #59111
• [fa1a532f2b] - doc: fix typo in writing-test.md (SeokHun) #59123
• [0b93ca3d19] - doc: add RafaelGSS as steward July 25 (Rafael Gonzaga) #59078
• [7d747aeac8] - doc: clarify ERR_FS_FILE_TOO_LARGE to reflect fs.readFile() I/O limit (Haram Jeong) #59050
• [0b5613f9fe] - doc: run license-builder (github-actions[bot]) #59056
• [1b6b5e72d3] - doc: fix typed list formatting (Aviv Keller) #59019
• [756c7dd639] - doc: refine util.parseArgs default definition (Slayer95) #58958
• [0b840523a2] - doc: remove unused import in zlib.md (coderaiser) #59041
• [3e9ed4b080] - doc: add stability index to the --watch-kill-signal flag (Dario Piotrowicz) #58997
• [cb08a5d43f] - doc: add missing <code> blocks (Antoine du Hamel) #58995
• [4a42360fe5] - doc: add scroll margin to links (Roman Reiss) #58982
• [9d073f32da] - doc: add sponsorship link to RafaelGSS (Rafael Gonzaga) #58983
• [3cc11fc9ac] - domain: remove deprecated API call (Alex Yang) #59339
• [fa9a9e9c69] - (SEMVER-MINOR) esm: unflag --experimental-wasm-modules (Guy Bedford) #57038
• [177ed3b3dd] - esm: js-string Wasm builtins in ESM Integration (Guy Bedford) #59020
• [4619fe0e04] - fs: fix glob TypeError on restricted dirs (Sylphy-0xd3ac) #58674
• [ad2089e32d] - fs: correct error message when FileHandle is transferred (Alex Yang) #59156
• [390a9dc20b] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #59243
• [659002359d] - http2: set Http2Stream#sentHeaders for raw headers (Darshan Sen) #59244
• [d02831ef73] - inspector: initial support for Network.loadNetworkResource (Shima Ryuhei) #58077
• [264a838779] - lib: add trace-sigint APIs (theanarkh) #59040
• [d22d2fa6d4] - lib: optimize writable stream buffer clearing (Yoo) #59406
• [a5e9759409] - lib: do not modify prototype deprecated asyncResource (RafaelGSS) #59195
• [9254257fc0] - lib: restructure assert to become a class (Miguel Marcondes Filho) #58253
• [946eab8d77] - lib: handle superscript variants on windows device (Rafael Gonzaga) #59261
• [cd857a97b5] - lib: use validateString (hotpineapple) #59296
• [c12c5343ad] - lib: docs deprecate _http_* (Sebastian Beltran) #59293
• [a28e5f0938] - lib: add type names in source mapped stack traces (Chengzhong Wu) #58976
• [6aec5aee7c] - lib: prefer AsyncIteratorPrototype primordial (René) #59097
• [e704349858] - lib: fix incorrect ArrayBufferPrototypeGetDetached primordial type (Dario Piotrowicz) #58978
• [2fc25fd400] - lib: flag to conditionally modify proto on deprecate (Rafael Gonzaga) #58928
• [446ee98e00] - meta: clarify pr objection process further (James M Snell) #59096
• [46c339e4f3] - meta: add mailmap entry for aditi-1400 (Aditi) #59316
• [70a586261f] - meta: add tsc and build team as codeowners building.md (Rafael Gonzaga) #59298
• [e666e06781] - meta: add nodejs/path to path files (Rafael Gonzaga) #59289
• [251b65dd6c] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #59140
• [c8a7964da8] - meta: add marco-ippolito to security release stewards (Marco Ippolito) #58944
• [0eec5cc492] - module: fix conditions override in synchronous resolve hooks (Joyee Cheung) #59011
• [4acf7cd6d3] - module: throw error when re-runing errored module jobs (Joyee Cheung) #58957
• [f57ee3d71f] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #58087
• [4aefcfc318] - node-api: reword "implementation in an alternative VM" as implementable (Chengzhong Wu) #59036
• [ff6be2ed5d] - node-api,doc: update links to ecma262 with section names (Chengzhong Wu) #59087
• [8d60602677] - perf_hooks: do not expose SafeMap via Histogram wrapper (René) #59094
• [035da74c31] - (SEMVER-MINOR) process: add threadCpuUsage (Paolo Insogna) #56467
• [74e1aa4d06] - process: make execve's args argument optional (Allon Murienik) #58412
• [3366e60bd9] - src: use simdjson to parse SEA configuration (Joyee Cheung) #59323
• [63cc06977a] - src: mark realm leaf classes final (Anna Henningsen) #59355
• [133d410cd9] - src: use C++20 contains() method (iknoom) #59304
• [57fe96fe49] - src: added CHECK_NOT_NULL check for multiple eq_wrap_async (F3lixTheCat) #59267
• [a8f381a6c5] - src: add nullptr checks in StreamPipe::New (Burkov Egor) #57613
• [0769e5a0dc] - src: call unmask after install signal handler (theanarkh) #59059
• [1e7639e9e1] - src: use FastStringKey for TrackV8FastApiCall (Anna Henningsen) #59148
• [9075a1a4bf] - src: use C++20 consteval for FastStringKey (Anna Henningsen) #59148
• [5a0fd5689b] - src: remove declarations of removed BaseObject static fns (Anna Henningsen) #59093
• [c637a2c41d] - src: add cache to nearest parent package json (Ilyas Shabi) #59086
• [3375a6cfee] - test: deflake sequential/test-tls-session-timeout (Joyee Cheung) #59423
• [438cb11a15] - test: update WPT resources,WebCryptoAPI,webstorage (Filip Skokan) #59311
• [68bec19f76] - test: add known issue test for fs.cpSync dereference bug (James M Snell) #58941
• [a100cce379] - test: deflake stream-readable-to-web test (Ethan Arrowood) #58948
• [b7577d853b] - test: make test-inspector-network-resource sequential (Shima Ryuhei) #59104
• [667ee82443] - test: don't use expose internals in test-http-outgoing-buffer.js (Meghan Denny) #59219
• [feec26d3bb] - test: use mustSucceed in test-fs-read (Sungwon) #59204
• [d7e23769ab] - test: prepare test-crypto-rsa-dsa for newer OpenSSL (Richard Lau) #58100
• [3a9aca91c6] - test: fix flaky test-worker-message-port-transfer-filehandle test (Alex Yang) #59158
• [3aee7625b9] - test: expand linting rules around assert w literal messages (Anna Henningsen) #59147
• [667c2ced38] - test: update WPT for WebCryptoAPI to ab08796857 (Node.js GitHub Bot) #59129
• [89ac344393] - test: update WPT for WebCryptoAPI to 19d82c57ab (Node.js GitHub Bot) #59129
• [d332957ac6] - test: skip tests that cause timeouts on IBM i (Abdirahim Musse) #59014
• [a23562ff72] - test: update startCLI to set --port=0 by default (Dario Piotrowicz) #59042
• [4a12f5d83b] - test: mark test-inspector-network-fetch as flaky on Windows (Joyee Cheung) #59091
• [ac4f7aa69c] - test: add missing port=0 arg in test-debugger-extract-function-name (Dario Piotrowicz) #58977
• [8dd09267e3] - test,crypto: skip unsupported ciphers (Shelley Vohr) #59388
• [45200b43ea] - tools: update coverage GitHub Actions to fixed version (Rich Trott) #59512
• [8f2b8b3dc4] - tools: allow selecting test subsystems with numbers in their names (Darshan Sen) #59242
• [f9bc2573dd] - tools: clarify README linter error message (Joyee Cheung) #59160
• [cba0de128d] - tools: add support for URLs to PR commits in merge.sh (Antoine du Hamel) #59162
• [039949ef5b] - tools: bump @eslint/plugin-kit from 0.3.1 to 0.3.3 in /tools/eslint (dependabot[bot]) #59119
• [6a8a73aa35] - tools: ignore CVE mention when linting release proposals (Antoine du Hamel) #59037
• [d0f40f3a3a] - tools,test: enforce best practices to detect never settling promises (Antoine du Hamel) #58992
• [9d801a3f00] - typings: improve internal binding types (Nam Yooseong) #59351
• [6dbda6cb25] - typings: improve internal binding types (Michaël Zasso) #59176
• [e22dddf859] - util: respect nested formats in styleText (Alex Yang) #59098
• [491f390515] - worker: add cpuUsage for worker (theanarkh) #59177
• [8e697d1884] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #59240