nodejs/node v24.20.0

2026-08-26, Version 24.20.0 'Krypton' (LTS), @aduh95

on GitHub

Notable Changes

• [b12bcc9ae1] - (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger) #61674
• [e2eb88b36b] - (SEMVER-MINOR) buffer: add end parameter (Robert Nagy) #62390
• [1fefdda18e] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
• [4a158cf1ab] - doc: add MikeMcC399 as collaborator (Mike McCready) #64656
• [d4cafce076] - (SEMVER-MINOR) lib,permission: add permission.drop (Rafael Gonzaga) #62672
• [b3cfb55267] - (SEMVER-MINOR) loader: implement package maps (Maël Nison) #62239
• [cd1eb3e60b] - (SEMVER-MINOR) src,permission: add --permission-audit (RafaelGSS) #61869
• [28dc85d8d2] - (SEMVER-MINOR) stream: add node:stream/iter implementation (James M Snell) #62066
• [d31c168740] - (SEMVER-MINOR) test_runner: add context.log() and test:log event (Moshe Atlow) #64389
• [add1edbc42] - (SEMVER-MINOR) test_runner: report entryFile in TestStream events (Moshe Atlow) #64309
• [d937c8c6cd] - (SEMVER-MINOR) wasm: enable JSPI (Guy Bedford) #59941

Commits

• [1822c0f335] - assert,util: fix TypeError on Maps with null keys (Paul Bouchon) #64441
• [b12bcc9ae1] - (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger) #61674
• [984260bf44] - async_hooks: use validateBoolean for trackPromises (Soul Lee) #64731
• [ba2612cca2] - benchmark: fix calibrate-n option handling (Luan Muniz) #64146
• [236dc4d2d7] - benchmark: add bytes variant to webstreams async-iterator (Matteo Collina) #64291
• [b022a1419c] - benchmark: respect stream/iter broadcast backpressure (Trivikram Kamat) #63314
• [a290f51f15] - (SEMVER-MINOR) benchmark: add benchmarks for experimental stream/iter (James M Snell) #62066
• [465f2bfb74] - buffer: use Clamp conversion in Blob slice (Donghoon Kang) #64739
• [74a22cd0c5] - buffer: validate copyArrayBuffer offsets against buffer length (Ilia Alshanetsky) #63904
• [21e24208dc] - buffer: normalize lone "\r" in Blob native line endings (Daijiro Wachi) #64115
• [ddacb3ff10] - buffer: fix Blob.stream() leaking source buffer (semimikoh) #63577
• [49198d2313] - buffer: fix end parameter bugs in indexOf/lastIndexOf (Robert Nagy) #62711
• [e2eb88b36b] - (SEMVER-MINOR) buffer: add end parameter (Robert Nagy) #62390
• [e2e5c4fe88] - build: update binary-upload to use correct tarball name (Stewart X Addison) #65282
• [b78a212553] - build: pin envinfo versions in github actions (Joyee Cheung) #64117
• [094fb840aa] - build: add QUIC CI job for PRs matching QUIC related paths (Tim Perry) #63875
• [91f5003cad] - build: fix flags for ngtcp2 on IBM i (SRAVANI GUNDEPALLI) #60073
• [e83648effd] - build,test: add tests for binary linked with shared libnode (Joyee Cheung) #61463
• [4a425b41d9] - build,tools: fix shared library cross-compile (Kirill Saied) #63963
• [fe8fa45ff2] - cli: style node --help output with util.styleText (Adrián Estrada) #64484
• [3cd1576cb2] - crypto: preserve OpenSSL errors from KDF failures (Filip Skokan) #64776
• [74b3023565] - crypto: handle XOF output allocation failure (Filip Skokan) #64851
• [fea0666a1b] - crypto: clarify missing cipher error (Filip Skokan) #64852
• [33fec91b54] - crypto: reuse X509 issuer result (Filip Skokan) #64852
• [44c1473348] - crypto: validate key generation options (Filip Skokan) #64852
• [c2c53a18e5] - crypto: fix Argon2 validation errors (Filip Skokan) #64852
• [edc1f2126d] - crypto: initialize KeyObjectData mutex eagerly (Filip Skokan) #64851
• [be8237240c] - crypto: handle DH operation failures (Filip Skokan) #64851
• [b65a8f3875] - crypto: preserve RSA-PSS legacy pubkey DER (Filip Skokan) #64547
• [49f2ae204b] - crypto: cleanse provider private key copies (Filip Skokan) #64547
• [a5d4ac8208] - crypto: handle incomplete RSA private keys (Filip Skokan) #64547
• [b72c0b9616] - crypto: retain legacy DH validation (Filip Skokan) #64547
• [24a1be5886] - crypto: limit KangarooTwelveParams customization to 512 bytes (Filip Skokan) #64557
• [0290e0a61e] - crypto: split OpenSSL 3, BoringSSL, and legacy backends (Filip Skokan) #64211
• [ba27e72ff8] - crypto: fix Argon2 bypassing FIPS mode (Filip Skokan) #64776
• [1fefdda18e] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
• [c0dd022081] - crypto: use user-facing error for output encoding changes (Archkon) #64692
• [ff485a9410] - crypto: make --use-system-ca per-env rather than per-process (Aditi) #60678
• [1329d9b9f1] - debugger: preserve overlapping CDP request state (Trivikram Kamat) #64467
• [82a02336aa] - deps: V8: backport d259a9e2ead7 (Leszek Swirski) #63865
• [f0fc82d404] - deps: update ngtcp2 to 1.25.0 (Node.js GitHub Bot) #64944
• [c4e02f0fbc] - deps: upgrade npm to 11.19.0 (npm team) #64883
• [d5a57ed4dd] - deps: update nghttp3 to 1.18.0 (Node.js GitHub Bot) #64943
• [51d413150a] - deps: update minimatch to 10.2.6 (Node.js GitHub Bot) #64945
• [21f79ce140] - deps: update simdjson to 4.6.6 (Node.js GitHub Bot) #64942
• [7a4960d6a9] - deps: update acorn to 8.18.0 (Node.js GitHub Bot) #64941
• [5c423aa113] - deps: update googletest to 1b6f64d659944658a4c685b7bd9f04c1c3b8a39b (Node.js GitHub Bot) #64940
• [40561e61b0] - deps: update nghttp2 to 1.70.0 (Node.js GitHub Bot) #64939
• [51090925b0] - deps: update zlib to 1.3.2.1-motley-42c2f19 (Node.js GitHub Bot) #64744
• [7c534bf8e5] - deps: V8: backport 5177b10891e6 (avivkeller) #64631
• [7b1898a341] - deps: update ada to 4.0.0 (Node.js GitHub Bot) #64790
• [9209cc4095] - deps: update sqlite to 3.53.4 (Node.js GitHub Bot) #64745
• [3833fceff6] - deps: update googletest to fa005b296f90faec4f352d7ab382287bf6548c8d (Node.js GitHub Bot) #64587
• [bc7ce488d1] - deps: histogram: cherry-pick 62ea52b07ee9b195 (StefanStojanovic) #64296
• [e3fa05841d] - deps: update histogram to 0.11.10 (Node.js GitHub Bot) #64296
• [e75bdb9bbe] - deps: update amaro to 1.1.11 (Node.js GitHub Bot) #64586
• [1e034e6e40] - deps: update timezone to 2026c (Node.js GitHub Bot) #64588
• [2b8f1f27bd] - deps: update googletest to 8240fa7d62f73e01c7af27d61ed965d6d66698fa (Node.js GitHub Bot) #64439
• [241ece0417] - deps: enable OpenSSL asm support for riscv64 (Jamie Magee) #62606
• [215105eb90] - deps: update c-ares to 1.34.8 (Node.js GitHub Bot) #64330
• [7ac97fc84e] - deps: upgrade npm to 11.18.0 (npm team) #64199
• [8d4cb9ae46] - deps: update zlib to 1.3.2.1-motley-8b3aa8a (Node.js GitHub Bot) #64295
• [564c0f4592] - deps: update ngtcp2 to 1.24.0 (Node.js GitHub Bot) #64297
• [e3304cd31a] - deps: update nghttp3 to 1.17.0 (Node.js GitHub Bot) #64182
• [345d6ad4eb] - deps: update ngtcp2 to 1.23.0 (Node.js GitHub Bot) #63777
• [a53db015e6] - deps: update nghttp3 to 1.16.0 (Node.js GitHub Bot) #63776
• [1f4a5c1c76] - deps: update ngtcp2 to 1.22.1 (Node.js GitHub Bot) #62812
• [080c4d7cda] - deps: update ngtcp2 to 1.22.0 (Node.js GitHub Bot) #62595
• [4309e7c82f] - deps: update ngtcp2 to 1.21.0 (Node.js GitHub Bot) #62051
• [90cf11cfb5] - deps: update nghttp3 to 1.15.0 (Node.js GitHub Bot) #61512
• [e1f315a554] - deps: update ngtcp2 to 1.20.0 (Node.js GitHub Bot) #61511
• [9a3f690c9d] - deps: update ngtcp2 to 1.19.0 (Node.js GitHub Bot) #61156
• [fe88f31764] - deps: add ngtcp2 test binaries (James M Snell) #59946
• [6d60fce138] - diagnostics_channel: grow native channel storage (Stephen Belanger) #64497
• [30ae8ab091] - doc: document --permission-audit audit mode behavior (Adrián Estrada) #64791
• [8cefc6efa8] - doc: fix guaranteed typo (lilianakatrina684-a11y) #62374
• [2e78e4b120] - doc: add throwIfNoEntry version history to fs.stat (kovan) #62204
• [c7a04401cb] - doc: fix grammar and punctuation in dgram documentation (Kamal Rawal) #64957
• [331e5e8f62] - doc: fix grammar and editorial issues in addons documentation (Kamal Rawal) #64952
• [232287fcc6] - doc: formalize fn/name as part of TestOptions API (Christopher Hiller) #64946
• [7f9efeb445] - doc: remove references to ca/crl as per-context QuicSession options (René) #64769
• [b54aa83cc6] - doc: fix typo in maintaining-dependencies.md (greenhead) #64896
• [f4e427803c] - doc: add RafaelGSS as last security release stewards (Rafael Gonzaga) #64843
• [f2cd6df3f3] - doc: fix typos in documentation (greenhead) #64900
• [d5627162bd] - doc: improve TestContext hook descriptions (Kamal Rawal) #64899
• [72ee03bd2e] - doc: document stream.isDestroyed() (YspritanHyzygy) #64789
• [995141eb81] - doc: add contributing detail for git Signed-off-by trailer (Mike McCready) #64862
• [dc30379310] - doc: fix duplicated word in test snapshot docs (Kamal Rawal) #64837
• [205d4d0472] - doc: remove obsolete cctest node.gyp instructions (Soul Lee) #64814
• [108b883d0b] - doc: report proper return type on url.format (Brian Muenzenmeyer) #64806
• [b03bd3a8ed] - doc: clarify tlsSocket.authorized on resumption (soreavis) #64584
• [093098ad7f] - doc: stabilize --disable-warning (Jean Michelet) #64742
• [2de1d76d80] - doc: add MDN links for explicit resource management in fs (lluisemper) #59557
• [2e0f36a891] - doc: mention constructor check in deepStrictEqual (Sumit Kumar Das) #62010
• [1c9d354d09] - doc: update technical priorities (Jacob Smith) #64505
• [30c99bf08f] - doc: deprecation add more codemod (Augustin Mauroy) #63175
• [8a971a09eb] - doc: run license-builder (Node.js GitHub Bot) #63918
• [707f6eacfc] - doc: clarify rules for adding new built-in modules (Antoine du Hamel) #64648
• [928208cffc] - doc: mention DEPENDENCY custom field for H1 reports (Rafael Gonzaga) #64634
• [ee593cadf5] - doc: fix dnsPromises.lookup verbatim default (Shivam S) #64658
• [9c228b32d1] - doc: fix typo in releases guide (Jihwan) #64621
• [4a158cf1ab] - doc: add MikeMcC399 as collaborator (Mike McCready) #64656
• [8125809853] - doc: use promote wording in release guide (Md Muhtasim Munif Fahim) #64371
• [2a2effadf6] - doc: fix import.meta example for vm.SourceTextModule (Muhammad Zeeshan) #64112
• [c879f912bf] - doc: mention crypto.hash() for better perf (Steven) #63420
• [634afda904] - doc: update sea example by fixing wrong code example (Maxence Robinet) #64025
• [bced1433a3] - doc: fix socket.readyState state descriptions (YuSheng Chen) #64468
• [4b2c18938f] - doc: replace large tables in crypto.md and webcrypto.md with lists (Filip Skokan) #64582
• [5207231996] - doc: note --env-file is not applied to --run (Paul Bouchon) #64442
• [329a2884fd] - doc: fix typo in embedding.md (greenhead) #64425
• [fab3f56aa1] - doc: fix typos in contributing docs (Donghoon Kang) #64520
• [cbc2bed4e8] - doc: document TLS alpnProtocol and servername fields (Tim Perry) #64362
• [dada3ae60e] - doc: fix spelling in devcontainer guide (한만욱) #64459
• [71343b28aa] - doc: clarify PEM format for signing keys (Harjoth Khara) #64404
• [0544ec1c78] - doc: fix typo in tls.md (Daijiro Wachi) #64458
• [8fe58078e7] - doc: document net Socket server property (Efe Karasakal) #64364
• [d54fd03fa4] - doc: update a Dispatcher undici doc link (Filip Skokan) #64358
• [1bdebecd41] - doc: fix typos in documentation (Jungwon Sohn) #64466
• [86bca58641] - doc: clarify fixes and refs trailer guidance (Trivikram Kamat) #64421
• [b5b84c9394] - doc: add scope overview tables for TestsStream events (Moshe Atlow) #64386
• [004238d77c] - doc: clarify proxy threat model (Matteo Collina) #64366
• [6851b8d55f] - doc: add note about restricted CI to pull-requests.md (Stewart X Addison) #64321
• [662e33714a] - doc: various updates to releases.md (Stewart X Addison) #64198
• [949bc3cfd3] - doc: remove obsolete --napi-modules doc entry (Chengzhong Wu) #64220
• [830d16067f] - doc: clarify QUIC stream state wording (EduardF1) #63660
• [79b6704630] - doc: fix typo in node-config-schema.json (Hamid Reza Ghavami) #64188
• [9f5bf554db] - doc: fix broken link (Antoine du Hamel) #65078
• [42b27ed428] - doc: remove unsupported syntax from stream_iter.md (Antoine du Hamel) #64649
• [f1a9df7f22] - doc: clarify fromReadable() duck-typed contract (Trivikram Kamat) #63682
• [c7a3d450ac] - doc: improve quic documentation (James M Snell) #63157
• [cc425bc659] - doc: fix promise nomenclature in stream_iter.md (Antoine du Hamel) #63406
• [859a02da96] - doc: minor structural stream/iter edits (René) #63089
• [630b15eb20] - doc: fix doubled word typo in stream_iter.md (Daijiro Wachi) #62916
• [50791fa8fa] - doc,test: widen fsPromises.appendFile()'s data type, add missing tests (Jimmy Leung) #64279
• [9e39360a09] - esm: improve ERR_REQUIRE_ASYNC_MODULE (Joyee Cheung) #64260
• [d2b02e443a] - esm: print required top-level await locations without evaluating (Joyee Cheung) #64154
• [e8c153f3f4] - events: avoid retaining removed event names (Matteo Collina) #64475
• [73e1701bad] - events: optimize once() and removeListener() (Matteo Collina) #64373
• [12f7fc0558] - fs: key glob matcher cache by platform (Archkon) #64571
• [e5af022302] - fs: add pattern cache for matchGlobPattern() (bq) #63915
• [63321eeb11] - fs: fix cp symlink and EEXIST handling on Windows (Kirill Saied) #64353
• [0ad55e5618] - http: fix writableFinished and 'finish' after write errors (Tim Perry) #64847
• [ee54d9d4d2] - http: avoid aborting IncomingMessage signal on normal close (Archkon) #64392
• [14cb8b0a06] - http: guard invalid timeout values in checkConnections (Efe Karasakal) #64506
• [f24177ccc6] - http: propagate highWaterMark to ClientRequest OutgoingMessage (trivenay) #64653
• [55e2c2da8c] - http: fix perf_hooks detail.req.url port and proxied path (Stefano Baghino) #64311
• [b57350fe27] - http: remove unused n arg from IncomingMessage._read (Efe Karasakal) #64370
• [af3a17e0b3] - http2: avoid copying the options in respond() (Matteo Collina) #64265
• [f11ac0da37] - http2: avoid per-write closures in kWriteGeneric (Matteo Collina) #64265
• [157bd07b6e] - http2: reduce per-request allocations (Matteo Collina) #64265
• [b075b33429] - http2: don't throw when destroying socket proxy (Matteo Collina) #64427
• [445bcce079] - inspector: add --cond to node inspect probe mode (Joyee Cheung) #64328
• [06b54fe7d3] - lib: fix AbortSignal.any() observed-composite leak (Paul Bouchon) #64481
• [d8fac094d1] - lib: fix typo in comment in _http_client.js (agape1225) #64729
• [9ce72fd6fb] - lib: use assignFunctionName util where it makes sense (Antoine du Hamel) #64515
• [c40d1473e6] - lib,permission: fix addon permission drop (Martin Wagner) #64007
• [d4cafce076] - (SEMVER-MINOR) lib,permission: add permission.drop (Rafael Gonzaga) #62672
• [6b09d30a76] - lib,tools: add node-core/func-name-matching lint rule (Livia Medeiros) #57901
• [d7d4f0e2ac] - loader: enforce path normalization before lookup (Maël Nison) #63917
• [b3cfb55267] - (SEMVER-MINOR) loader: implement package maps (Maël Nison) #62239
• [cf425ad935] - meta: bump actions/stale from 10.3.0 to 11.0.0 (dependabot[bot]) #64935
• [26fa9cc32b] - meta: bump github/codeql-action/analyze from 4.36.2 to 4.37.3 (dependabot[bot]) #64934
• [c90fa82cd7] - meta: bump github/codeql-action/autobuild from 4.36.2 to 4.37.3 (dependabot[bot]) #64933
• [314893253a] - meta: bump actions/setup-python from 6.3.0 to 7.0.0 (dependabot[bot]) #64932
• [6ab711278f] - meta: bump github/codeql-action/init from 4.36.2 to 4.37.3 (dependabot[bot]) #64931
• [9138f5892a] - meta: bump Mozilla-Actions/sccache-action from 0.0.10 to 0.0.11 (dependabot[bot]) #64930
• [3ef3f934d4] - meta: bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.3 (dependabot[bot]) #64927
• [a0a33127ae] - meta: bump step-security/harden-runner from 2.19.4 to 2.20.0 (dependabot[bot]) #64926
• [4ad2afbf33] - meta: bump ossf/scorecard-action from 2.4.3 to 2.4.4 (dependabot[bot]) #64925
• [d9b2ee4083] - meta: add @nodejs/url as codeowner for node_url_pattern.* (Efe Karasakal) #64737
• [2b43b78e82] - meta: lower stale to 3 months (Aviv Keller) #64569
• [0ffe8352ae] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #64315
• [afd922cd8a] - meta: bump actions/checkout from 6.0.2 to 7.0.0 (dependabot[bot]) #64245
• [b6149a2976] - meta: bump actions/setup-python from 6.2.0 to 6.3.0 (dependabot[bot]) #64241
• [8f4a5c622f] - meta: update sccache version in test-linux-quic (René) #64043
• [9040b08696] - net: support TCP handle transfer on Windows (Matteo Collina) #64460
• [1216481a09] - net: support AF_UNIX paths in net.BoundSocket (Guy Bedford) #64399
• [f6bf3f8a5d] - net: support sync connect for BoundSocket (Guy Bedford) #64375
• [fb8a7e15ca] - net: make TCP Server and Socket transferable across worker threads (Matteo Collina) #64225
• [224d2c7886] - path: add benchmarks for path.matchesGlob() (bq) #63915
• [980c651de5] - permission: add unique warning codes (David Evans) #64414
• [9f9a96030d] - permission: support v8.setHeapSnapshotNearHeapLimit (Ilyas Shabi) #64808
• [8a00872183] - quic: fix stop sending behaviour & callback (Tim Perry) #64710
• [7aab0c3183] - quic: fix coverage comment typo (Jungwon Sohn) #64486
• [b4ecb3040b] - quic: fix segfault after fragmented client hello (Tim Perry) #64720
• [6386540dad] - quic: serialize stream reset code as string (한만욱) #64577
• [82717741c9] - quic: defer server session emit until TLS ClientHello is processed (Tim Perry) #64132
• [7cb3099907] - quic: preserve session stats after close (한만욱) #64489
• [50e639b578] - quic: add support for TLS certificate compression (Sebastian Beltran) #64434
• [e2e28292cc] - quic: extract transport logic from Application to Session (Tim Perry) #64127
• [2ef4b7ebf2] - quic: correct http3 callback and fix revealed errs (Marten Richter) #64289
• [a682b53456] - quic: fix no onstream handler crash quic (Efe) #64158
• [9445e2719a] - quic: fix stall datagrams, if no pending streams (Marten Richter) #64303
• [2ea9d193bd] - quic: fix potential crash from unobserved closed (Tim Perry) #64134
• [3b7f4fc1fb] - quic: drop version negotiation packets with oversized CIDs (Mohamed Sayed) #64228
• [bd477a3202] - quic: fixes undefined handle in QuicStream kInspect (Marten Richter) #64170
• [3dd04b3ec6] - quic: fix get_reader bug that dropped data on FIN (Tim Perry) #63946
• [4be8abe8f9] - quic: expose QUIC certificates as JS X509Certificate, not raw handles (Tim Perry) #63191
• [e264c5c0cb] - quic: fix reader backpressure deadlock on idle connections (Tim Perry) #63950
• [2f749dde18] - quic: impl. cb for http/3 settings/app. options (Marten Richter) #63558
• [5ca7ef3202] - quic: fix broken listEndpoints export, test callbacks & nghttp3 include (Tim Perry) #63874
• [147150cfdd] - quic: add listEndpoints API (James M Snell) #63536
• [3b59d12f5d] - quic: add proper error codes & messages for QUIC failures (Tim Perry) #63198
• [b68f8eadb9] - quic: support hostname verification (James M Snell) #63483
• [7652bd9c6d] - quic: add stream idle timeout (James M Snell) #63483
• [e493f04214] - quic: add block list support for endpoints (James M Snell) #63483
• [6d6cd45f8b] - quic: improve peer cert verification (James M Snell) #63483
• [dbe0b371ee] - quic: handle h3 max header size option (James M Snell) #63483
• [39dca4150c] - quic: add rate limiting docs (James M Snell) #63483
• [c726a893d6] - quic: cache timestamp for address lru cache (James M Snell) #63483
• [11778a7925] - quic: add session creation rate limiting (James M Snell) #63483
• [8107f1b3ed] - quic: refine rate limiting (James M Snell) #63483
• [3f0d7371e0] - quic: flip preferred address policy default to 'ignore' (James M Snell) #63483
• [97c8a96774] - quic: add doc note about certificate size limitations (James M Snell) #63483
• [42aa3f6612] - quic: add applicationOptions to session (James M Snell) #63267
• [4c00ab9d29] - quic: add getters for local and remote transport parameters (James M Snell) #63267
• [858b636576] - quic: improve recv coalescing test sizes (James M Snell) #63267
• [84d3100256] - quic: add initial RTT option to session options (James M Snell) #63267
• [a2b6a81c66] - quic: enable recvmmsg batching in Endpoint (James M Snell) #63267
• [46a0868994] - quic: improve stream header collection performance (James M Snell) #63267
• [bc7f4efdb7] - quic: coalesce received data into fewer buffers (James M Snell) #63267
• [f727efb8b2] - quic: apply multiple additional minor improvements (James M Snell) #63267
• [ee0a0f1540] - quic: fix tests that are missing serverEndpoint close (James M Snell) #63267
• [f8a1fdad07] - quic: fixup some v8:: qualifiers (James M Snell) #63267
• [c66605609c] - quic: fix premature unref of endpoint when listening (James M Snell) #63267
• [9a72949b0b] - quic: fixup UAFs in bindingdata, streams, and app (James M Snell) #63267
• [a4db12198e] - quic: fix UAF in Application::OnTimeout() (James M Snell) #63267
• [0a11b2ccde] - quic: improve the quic js structure (James M Snell) #63267
• [1bc25d2a03] - quic: improve internal structure of QuicStream (James M Snell) #63267
• [69e48aed02] - quic: add aliased struct arenas (James M Snell) #63267
• [6b7185351b] - quic: add handshake timeout and default connection limits (James M Snell) #63267
• [91e3c39097] - quic: fix crash in early handshake failure (James M Snell) #63267
• [098e3d715d] - quic: eliminate per-received datagram allocation (James M Snell) #63267
• [53b05e2ab2] - quic: cache the timestamp on send and receive (James M Snell) #63267
• [1592a11219] - quic: add support for future ECN marking (James M Snell) #63267
• [80e6bf9539] - quic: improve batching of packet sending (James M Snell) #63267
• [ff0cd5b95f] - quic: improve backend quic packet processing (James M Snell) #63267
• [c4eb6a95da] - quic: send correct OpenSSL alert for ALPN mismatches (Tim Perry) #63193
• [575dc7d100] - quic: fixup quic stream variable chunk len (James M Snell) #63230
• [2551f9e6dd] - quic: remove unused env_ variable in session_manager.h/cc (James M Snell) #63177
• [bea62a14b3] - quic: ignore coverage for quic files (James M Snell) #63149
• [9788bbff97] - quic: complete the internal implementation of QUIC (James M Snell) #62876
• [54c094d245] - quic: continue working on quic api bits (James M Snell) #60123
• [ea82bc418d] - readline: reduce createInterface overhead (Matteo Collina) #64585
• [90a8b23db0] - sqlite: invalidate sessions when closing database (Trivikram Kamat) #64783
• [6abd00ed65] - sqlite: check database state before calling SQLite (Trivikram Kamat) #64812
• [c2a52514d6] - sqlite: fix crash when a session outlives its database (Mohamed Sayed) #63797
• [f9126923ef] - sqlite: fix use-after-free in Exec() and ApplyChangeset() (Matteo Collina) #64535
• [c010131bc3] - sqlite: read column count after step in StatementSync.all() (Guilherme Araújo) #64219
• [782ad5d5b0] - src: implement MemoryRetainer protocol for ByteSource (Filip Skokan) #64660
• [4afc15bf1d] - src: avoid redundant KEM encapsulation copies (Filip Skokan) #64553
• [37085f850d] - src: fix crash when writing odd-length hex string via Writev (RajeshKumar11) #63658
• [f58ac8224c] - src: avoid using ToLocalChecked in crypto_hash (James M Snell) #64668
• [05ec9c4771] - src: fix libuv assertion on windows (liuxingbaoyu) #61999
• [308a589ee9] - src: avoid redundant DataPointer reallocations (Filip Skokan) #64552
• [3650fabcb4] - src: fix comment typos (Jungwon Sohn) #64509
• [06b3441ea2] - src: zero-initialize cap_data in node_credentials.cc (Samuel Kapust) #64347
• [bb24a88b99] - src: fix some typo errors and rename some variables (Archkon) #64301
• [ba36ab71fd] - src: make node.config.json throw at unknown fields (Marco Ippolito) #62992
• [fbb3960189] - src: show original file name in FileHandle GC close errors (Anna Henningsen) #60593
• [d53d582be7] - src,permission: do not throw on denied access in audit mode (Adrián Estrada) #64426
• [cd1eb3e60b] - (SEMVER-MINOR) src,permission: add --permission-audit (RafaelGSS) #61869
• [b1596c2b65] - stream: cut per-chunk allocations in pipeTo (Matteo Collina) #64890
• [2cfa96f5cb] - stream: preserve push signal abort reason (Trivikram Kamat) #64798
• [fc80ff5f7a] - stream: skip zero-byte broadcast writes (Trivikram Kamat) #64772
• [486cff4c08] - stream: honor AbortSignal in Writer.end() (Trivikram Kamat) #64727
• [59ef1789f7] - stream: use validateString for consumer encoding (Jungwon Sohn) #64754
• [8aba47536a] - stream: use the ring buffer for pending BYOB pull-into descriptors (Matteo Collina) #64818
• [b20217cb56] - stream: fix uncatchable error closing half-open Duplex.toWeb() writable (Mohamed Sayed) #64161
• [8accb0c4c0] - stream: abort pending single-source merge reads (Trivikram Kamat) #64445
• [ed5b04027c] - stream: use RangeError for broadcast overflow (Trivikram Kamat) #64420
• [136d4e7628] - stream: skip null output from stateful transforms (Trivikram Kamat) #64462
• [193091f1ba] - stream: update iterable streams to use budget backpressure (James M Snell) #64464
• [e2b32fce77] - stream: remove custom CloneableDOMException implementation (Antoine du Hamel) #64469
• [d77788eafe] - stream: fix drop-newest behavior in share() (Trivikram Kamat) #64417
• [de4ca2c962] - stream: fold desired-size check into WHATWG backpressure update (Matteo Collina) #64451
• [2a3babb8d7] - stream: validate writer options signal (Trivikram Kamat) #64385
• [0ab8f269b0] - stream: reject push iterator.throw() with error (Trivikram Kamat) #64380
• [262e6545d1] - stream: simplify nested PromisePrototypeThens (Antoine du Hamel) #64470
• [0ddfc6af91] - stream: use the ring buffer for WHATWG stream request queues (Matteo Collina) #64431
• [a5e7d89f9e] - stream: validate writevSync chunks before queuing (Trivikram Kamat) #64300
• [8044f895bf] - stream: speed up reads and iteration over default WHATWG streams (Matteo Collina) #64320
• [d4dfb66bdf] - stream: copy SAB-backed chunks in iter consumers (Trivikram Kamat) #64382
• [9c9ade337f] - stream: reject nested async streamables in from() (Trivikram Kamat) #64352
• [271c7454f4] - stream: avoid draining merged iter sources (Trivikram Kamat) #64293
• [cbb2568a04] - stream: use ring buffer for WHATWG stream queues (Yagiz Nizipli) #64312
• [67688cc651] - stream: hoist repeated loads in readable paths (Yagiz Nizipli) #64312
• [3f8b446a67] - stream: prefer sync iterator in fromSync (Trivikram Kamat) #64294
• [3043b2a68a] - stream: speed up async iteration over WHATWG byte streams (Antoine du Hamel) #64291
• [870273ccde] - stream: reject iter consumers on abort (Trivikram Kamat) #64066
• [8a4a997f3e] - stream: fix merge abort for pending sources (Trivikram Kamat) #64013
• [ac5e5d5dec] - stream: refactor unnecessary optional chaining away (Antoine du Hamel) #64253
• [cb298cfb15] - stream: normalize Broadcast.from() byte inputs (Trivikram Kamat) #64082
• [bbbb4aadef] - stream: observe abort while awaiting pipeTo source (Trivikram Kamat) #64015
• [4387ad412f] - stream: respect iter consumer abort signals (Trivikram Kamat) #63997
• [4ba1fa0062] - stream: handle falsy push writer fail reasons (Trivikram Kamat) #63569
• [3b8c30c096] - stream: handle setEncoding after buffered data (Matteo Collina) #63973
• [97ef13c84e] - stream: keep overlapping broadcast reads pending (Trivikram Kamat) #63500
• [a46ddad9fa] - stream: refine the stream/iter backpressure (James M Snell) #63697
• [557bf99245] - stream: remove transform-writer handling in pipeTo (Trivikram Kamat) #63684
• [24b7831a1a] - stream: fix pipeToSync byte accounting (Trivikram Kamat) #63564
• [3b5f1b56bc] - stream: reject pull() reads on abort (Trivikram Kamat) #63498
• [e48e287633] - stream: fast-path stateless transform flush results (Trivikram Kamat) #63605
• [f0ee316f45] - stream: handle sync writev completion in pipeTo (Trivikram Kamat) #63561
• [fbed90b2fb] - stream: settle pending broadcast reads on return (Trivikram Kamat) #63603
• [568dcc250f] - stream: serialize concurrent share consumer reads (Trivikram Kamat) #63478
• [5e2b4c4ade] - stream: fix lint error (Antoine du Hamel) #63598
• [74bd0cd35a] - stream: reject pending reads on iterator throw (Trivikram Kamat) #63555
• [45780df841] - stream: wait for push writer end fallback to drain (Trivikram Kamat) #63503
• [217b495e0a] - stream: flush each fused stateless transform (Trivikram Kamat) #63468
• [2e8685592e] - stream: avoid duplicate writes in toWritable (Trivikram Kamat) #63360
• [88a3392a78] - stream: propagate abort reason in share and broadcast (Trivikram Kamat) #63358
• [fce3df74e9] - stream: disallow writing string chunk with 'buffer' encoding (René) #63062
• [5658c631fa] - stream: align Readable.toWeb termination with eos (ikeyan) #62394
• [02a51a746b] - stream: add sync iterable fast path to pipeTo (Trivikram Kamat) #63318
• [4c9f3edb64] - stream: fix merge handling for object-like sources (Trivikram Kamat) #63356
• [c50d8e49cc] - stream: limit iter from sync iterable batches (Trivikram Kamat) #63324
• [1d7c86d577] - stream: cache minimum cursor count in broadcast (Trivikram Kamat) #63322
• [ec2666edbe] - stream: avoid retrying accepted pipeTo writes (Trivikram Kamat) #63297
• [f63143fd83] - stream: validate broadcast writer writev chunks (Trivikram Kamat) #63300
• [944470b08a] - stream: uncork fromWritable writev on chunk error (Trivikram Kamat) #63295
• [ae79f2b67a] - stream: validate fromWritable() options before cache (Trivikram Kamat) #63278
• [c98cc67f33] - stream: optimize single-slot push queue drain (Trivikram Kamat) #63274
• [9a45ff5d8f] - stream: preserve toReadableSync batch after backpressure (Trivikram Kamat) #63276
• [eb72fe94fc] - stream: cache minimum cursor count in share (Trivikram Kamat) #63262
• [b57b51eeed] - stream: minor stream/iter implementation edits (René) #63132
• [274b3a2ea1] - stream: remove redundant method check from iter.pipeToSync (René) #63099
• [baf98faa06] - stream: add stream/iter to classic stream adapters (James M Snell) #62469
• [28dc85d8d2] - (SEMVER-MINOR) stream: add stream/iter Implementation (James M Snell) #62066
• [125c19da43] - stream, quic: update iterable streams backpressure (James M Snell) #64464
• [11d1bd3ba7] - test: split test-embedding.js and run tests in parallel (Joyee Cheung) #61571
• [e59346b704] - test: ensure assertions are reached on all tests (Antoine du Hamel) #64716
• [42a967d7ed] - test: unflake debugger and REPL tests (Matteo Collina) #64718
• [d80a45fdc4] - test: update WPT for url to 4832db4761 (Node.js GitHub Bot) #64829
• [7264efb21b] - test: update WPT for url to b63305b743 (Node.js GitHub Bot) #64790
• [539f5dc8f9] - test: cover worker throwing primitive values (varshitha) #64365
• [087d9e8dd0] - test: mark test-repl-user-error-handler as flaky (Aviv Keller) #64612
• [dd1e7139a5] - test: update quic tests for stream/iter update (James M Snell) #64464
• [eee0e84537] - test: fix flaky http2 socket proxy test (Tim Perry) #64673
• [a5ce44dd75] - test: apply correction to comment (Rich Trott) #64524
• [da8508c5a0] - test: keep finalization before-exit ref alive (Tim Perry) #64521
• [14b710c415] - test: copyedit test-tls-psk-alpn-callback-exception-handling (Antoine du Hamel) #63485
• [99b7382c6a] - test: fix stale async-context-frame status entries (Kirill Saied) #64141
• [6da6ca730d] - test: update WPT for urlpattern to 5847ee5cfa (Node.js GitHub Bot) #64436
• [73bf0f07f1] - test: update WPT for WebCryptoAPI to ec2fee39a4 (Node.js GitHub Bot) #64435
• [9a7ec52e6f] - test: fix flaky http2 maxOriginSetSize test (Tim Perry) #64407
• [59af7e0ed9] - test: fix 2nd flaky blob test case (Tim Perry) #64391
• [7fd5f66376] - test: fix flaky watch + cwd + argv test-runner test (Tim Perry) #64372
• [d5b47d2fae] - test: normalize Windows crash in debugger test normalization (Joyee Cheung) #64332
• [a8ae44096d] - test: unmark flaky http2-large-file for Win (Kirill Saied) #64255
• [8461d18597] - test: increase timeout in consumed-timeout test (Trivikram Kamat) #64204
• [af52410d70] - test: handle null stdio streams in spawnSyncAndAssert helper (Joyee Cheung) #64273
• [0ea079be7b] - test: remove impact of tier-up changes in worker stack size test (Joyee Cheung) #64271
• [1bde0ef053] - test: update WPT for WebCryptoAPI to 0c413fb56b (Node.js GitHub Bot) #63647
• [f32b412867] - test: get rid of unnecessary AbortController instanciations (Antoine du Hamel) #63489
• [8cbd90161b] - test: update WPT for wasm/jsapi to 288c467d35 (Node.js GitHub Bot) #63136
• [f200aaccf0] - test: fixup quic tests (James M Snell) #63267
• [14c547351b] - (SEMVER-MINOR) test: add tests for experimental stream/iter implementation (James M Snell) #62066
• [2cc54e1793] - test: skip quic tests that IBM i does not support (SRAVANI GUNDEPALLI) #60160
• [8ec80b311b] - test_runner: wait for filtered suite build (semimikoh) #64208
• [9ed7146851] - test_runner: convert to uint during deserialization (Aviv Keller) #64706
• [d31c168740] - (SEMVER-MINOR) test_runner: add context.log() and test:log event (Moshe Atlow) #64389
• [add1edbc42] - (SEMVER-MINOR) test_runner: report entryFile in TestStream events (Moshe Atlow) #64309
• [8d97dee696] - tests: start adding quic test server utilities (James M Snell) #59946
• [e5278b7f7d] - timers: do not retain a reference to the async store after firing (Matteo Collina) #53443
• [e277bc4608] - tls: fix SNICallback certificate selection (Matteo Collina) #64700
• [b9104decc3] - tls: match IPv6 hosts against IP-Address SANs (Pascal Garber) #64145
• [b50139e89f] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #64928
• [5460c464a0] - tools: bump brace-expansion from 5.0.7 to 5.0.9 in /tools/eslint (dependabot[bot]) #64904
• [f8a13811cd] - tools: use 'readonly' for EventSource global (Honey Tyagi) #64787
• [6e10012c0d] - tools: bump brace-expansion from 5.0.6 to 5.0.7 in /tools/eslint (dependabot[bot]) #64636
• [d66b7588ac] - tools: reference 'git node land' in PR-URL: error message in merge.sh (Stewart X Addison) #64495
• [5d90e48175] - tools: disable zipping tarballs on GHA (Antoine du Hamel) #64423
• [8a909f4540] - tools: fix redundant conditions in v8.gyp for riscv64 and loong64 (Jamie Magee) #62608
• [9e171710fa] - tools: remove envinfo from our workflows (Antoine du Hamel) #64259
• [3fb722054f] - tools: avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #63938
• [5755712920] - tools: add lint rule for aborted AbortController (Trivikram Kamat) #63541
• [e88d5b78bc] - typings: add heap_utils internalBinding types (Donghoon Kang) #64816
• [ae93bc8ad1] - typings: remove isDataView from types binding (Archkon) #64738
• [c00bd1427d] - url: create URLPattern result properties in WebIDL order (Archkon) #64733
• [8a07969e28] - util: make MIMEParams accessors case-insensitive (Daijiro Wachi) #64123
• [bf86741167] - v8: report minor mark-sweep in GCProfiler (Archkon) #64688
• [d937c8c6cd] - (SEMVER-MINOR) wasm: enable JSPI (Guy Bedford) #59941
• [9016ddabb9] - wasm: register missing SetURL function (Archkon) #64679
• [e599b9428b] - zlib: validate pledgedSrcSize as a safe integer (Archkon) #64604
• [1f1adc89da] - zlib: accept ArrayBuffer dictionary in Zstd (Ryuhei Shima) #64599
• [0ee91ead8b] - zlib: reject truncated zstd input (Archkon) #64593