nodejs/node v22.23.3

2026-09-23, Version 22.23.3 'Jod' (LTS), @aduh95 prepared by @juanarbol

on GitHub

Notable Changes

• [fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
• [871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
• [b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #64884
• [e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324
• [a9cb31129f] - deps: update OpenSSL 3.5.8 (Node.js GitHub Bot) #65542
• [2a3548e51c] - deps: update Undici to 6.28.1 (mcollina) #65790
• [3909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710
• [66de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623

Commits

• [44cf27b8fa] - build: update binary-upload to use correct tarball name (Stewart X Addison) #65282
• [fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
• [71feba6b69] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527
• [871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
• [2a3548e51c] - deps: update undici to 6.28.1 (mcollina) #65790
• [59d853a4df] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542
• [a9cb31129f] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542
• [3376e27de2] - deps: V8: cherry-pick a6eaf7574109 (Camillo Bruni) #65402
• [b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #64884
• [4e4bd1b104] - deps: update timezone to 2026c (Node.js GitHub Bot) #64588
• [7d82841b4e] - deps: update c-ares to 1.34.8 (Node.js GitHub Bot) #64330
• [01855a19d3] - deps: c-ares: cherry-pick 8ba37af8e3fb (René) #64110
• [23fb398c3d] - deps: update corepack to 0.35.0 (Node.js GitHub Bot) #63375
• [5286330365] - deps: update corepack to 0.34.7 (Node.js GitHub Bot) #62810
• [6d6c3c98b1] - deps: update timezone to 2026b (Node.js GitHub Bot) #62962
• [e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324
• [d9cb8468a3] - doc: clarify filter option of sqlite.database.applyChangeset (Antoine du Hamel) #63515
• [c9c5662d91] - doc: add sxa GPG key (ed25519) (Stewart X Addison) #64193
• [37f21068c4] - fs: restore fs patchability in ESM loader (Joyee Cheung) #62835
• [7c2df5dd96] - http2: avoid uaf while receiving and sending rst_stream (esgor) #64166
• [3909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710
• [66de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623
• [ce9139107f] - src: escape Windows environment variables in task runner (Antoine du Hamel) #65217
• [839480a471] - test: fix link-local dgram scope assertion (Filip Skokan) #65629
• [40eac4a32f] - test: account for varied OpenSSL CCM final behaviours (Filip Skokan) #65542
• [75098a9e8c] - tools: update gr2m/create-or-update-pull-request-action to v1.10.1 (Mike McCready) #63065
• [08b6ac0416] - tools: revert OpenSSL update workflow to ubuntu-latest (Richard Lau) #62627
• [02cafc479f] - tools: fix commit linter for semver-major release proposals (Antoine du Hamel) #62993
• [6f6cd3768d] - tools: sync mk-ca-bundle.pl with curl (Archkon) #64753
• [bc5753d438] - tools: remove envinfo from our workflows (Antoine du Hamel) #64259
• [d68ee9f8a5] - tools: validate version number in release proposal commit message lint (Antoine du Hamel) #64070
• [38ee2e895f] - tools: avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #63938
• [fdc65e489f] - tools: use different branch for tool updates on staging branches (Antoine du Hamel) #63110
• [e5a6fde002] - tools: update gyp-next to 0.22.1 (Node.js GitHub Bot) #62961
• [5fbbad6e82] - url: handle unparsable serialized URLs in setters (Matteo Collina) #64651
• [ed019e4854] - util: preserve function names without source map names (Hiroki Osame) #65108