nodejs/node v24.8.0

2025-09-10, Version 24.8.0 (Current), @targos

on GitHub

Notable Changes

HTTP/2 Network Inspection Support in Node.js

Node.js now supports inspection of HTTP/2 network calls in Chrome DevTools for Node.js.

Usage

Write a test.js script that makes HTTP/2 requests.

const http2 = require('node:http2');

const client = http2.connect('https://nghttp2.org');

const req = client.request([
  ':path', '/',
  ':method', 'GET',
]);

Run it with these options:

node --inspect-wait --experimental-network-inspection test.js

Open about:inspect on Google Chrome and click on Open dedicated DevTools for Node.
The Network tab will let you track your HTTP/2 calls.

Contributed by Darshan Sen in #59611.

Other Notable Changes

• [7a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #59570
• [4b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #59570
• [3e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647
• [b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544
• [430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #59537
• [d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428

Commits

• [d913872369] - assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong) #59578
• [7bbbcf6666] - benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues) #59709
• [44d7b92271] - benchmark: calibrate config array-vs-concat (Rafael Gonzaga) #59587
• [7f347fc551] - build: fix getting OpenSSL version on Windows (Michaël Zasso) #59609
• [4a317150d5] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #59547
• [bda32af587] - build: use windows-2025 runner (Michaël Zasso) #59673
• [a4a8ed8f6e] - build: compile bundled uvwasi conditionally (Carlo Cabrera) #59622
• [d944a87761] - crypto: refactor subtle methods to use synchronous import (Filip Skokan) #59771
• [7a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #59570
• [4b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #59570
• [3e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647
• [b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544
• [430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #59537
• [0d1e53d935] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #59791
• [68732cf426] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #59689
• [f12c1ad961] - deps: update googletest to eb2d85e (Node.js GitHub Bot) #59335
• [45af6966ae] - deps: upgrade npm to 11.6.0 (npm team) #59750
• [57617244a4] - deps: V8: cherry-pick 6b1b9bca2a8 (Xiao-Tao) #59283
• [2e6225a747] - deps: update amaro to 1.1.2 (Node.js GitHub Bot) #59616
• [1f7f6dfae6] - diagnostics_channel: revoke DEP0163 (René) #59758
• [8671a6cdb3] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707
• [583b1b255d] - doc: update OpenSSL default security level to 2 (Jeetu Suthar) #59723
• [9b5eb6eb50] - doc: fix missing links in the errors page (Nam Yooseong) #59427
• [e7bf712c57] - doc: update "Type stripping in dependencies" section (Josh Kelley) #59652
• [96db47f91e] - doc: add Miles Guicent as triager (Miles Guicent) #59562
• [87f829bd0c] - doc: mark path.matchesGlob as stable (Aviv Keller) #59572
• [062b2f705e] - doc: improve documentation for raw headers in HTTP/2 APIs (Tim Perry) #59633
• [6ab9306370] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #59579
• [c8d6b60da6] - doc: fix quic session instance typo (jakecastelli) #59642
• [61d0a2d1ba] - doc: fix filehandle.read typo (Ruy Adorno) #59635
• [3276bfa0d0] - doc: update migration recomendations for util.is**() deprecations (Augustin Mauroy) #59269
• [11de6c7ebb] - doc: fix missing link to the Error documentation in the http page (Alexander Makarenko) #59080
• [f5b6829bba] - doc,crypto: add description to the KEM and supports() methods (Filip Skokan) #59644
• [5bfdc7ee74] - doc,crypto: cleanup unlinked and self method references webcrypto.md (Filip Skokan) #59608
• [010458d061] - esm: populate separate cache for require(esm) in imported CJS (Joyee Cheung) #59679
• [dbe6e63baf] - esm: fix missed renaming in ModuleJob.runSync (Joyee Cheung) #59724
• [8eb0d9d834] - fs: fix wrong order of file names in cpSync error message (Nicholas Paun) #59775
• [e69be5611f] - fs: fix dereference: false on cpSync (Nicholas Paun) #59681
• [2865d2ac20] - http: unbreak keepAliveTimeoutBuffer (Robert Nagy) #59784
• [ade1175475] - http: use cached '1.1' http version string (Robert Nagy) #59717
• [74a09482de] - inspector: undici as shared-library should pass tests (Aras Abbasi) #59837
• [772f8f415a] - inspector: add http2 tracking support (Darshan Sen) #59611
• [3d225572d7] - Revert "lib: optimize writable stream buffer clearing" (Yoo) #59743
• [4fd213ce73] - lib: fix isReadable and isWritable return type value (Gabriel Quaresma) #59089
• [39befddb87] - lib: prefer TypedArrayPrototype primordials (Filip Skokan) #59766
• [0748160d2e] - lib: fix DOMException subclass support (Chengzhong Wu) #59680
• [1a93df808c] - lib: revert to using default derived class constructors (René) #59650
• [bb0755df37] - meta: bump codecov/codecov-action (dependabot[bot]) #59726
• [45d148d9be] - meta: bump actions/download-artifact from 4.3.0 to 5.0.0 (dependabot[bot]) #59729
• [01b66b122e] - meta: bump github/codeql-action from 3.29.2 to 3.30.0 (dependabot[bot]) #59728
• [34f7ab5502] - meta: bump actions/cache from 4.2.3 to 4.2.4 (dependabot[bot]) #59727
• [5806ea02af] - meta: bump actions/checkout from 4.2.2 to 5.0.0 (dependabot[bot]) #59725
• [f667215583] - path: refactor path joining logic for clarity and performance (Lee Jiho) #59781
• [0340fe92a6] - repl: do not cause side effects in tab completion (Anna Henningsen) #59774
• [a414c1eb51] - repl: fix REPL completion under unary expressions (Kingsword) #59744
• [c206f8dd87] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #59607
• [0bf9775ee2] - sea: implement sea.getAssetKeys() (Joyee Cheung) #59661
• [bf26b478d8] - sea: allow using inspector command line flags with SEA (Joyee Cheung) #59568
• [92128a8fe2] - src: use DictionaryTemplate for node_url_pattern (James M Snell) #59802
• [bcb29fb84f] - src: correctly report memory changes to V8 (Yaksh Bariya) #59623
• [44c24657d3] - src: fixup node_messaging error handling (James M Snell) #59792
• [2cd6a3b7ec] - src: track async resources via pointers to stack-allocated handles (Anna Henningsen) #59704
• [34d752586f] - src: fix build on NetBSD (Thomas Klausner) #59718
• [15fa779ac5] - src: fix race on process exit and off thread CA loading (Chengzhong Wu) #59632
• [15cbd3966a] - src: separate module.hasAsyncGraph and module.hasTopLevelAwait (Joyee Cheung) #59675
• [88d1ca8990] - src: use non-deprecated Get/SetPrototype methods (Michaël Zasso) #59671
• [56ac9a2d46] - src: migrate WriteOneByte to WriteOneByteV2 (Chengzhong Wu) #59634
• [3d88aa9f2f] - src: remove duplicate code (theanarkh) #59649
• [0718a70b2a] - src: add name for more threads (theanarkh) #59601
• [0379a8b254] - src: remove JSONParser (Joyee Cheung) #59619
• [90d0a1b2e9] - src,sqlite: refactor value conversion (Edy Silva) #59659
• [5e025c7ca7] - stream: replace manual function validation with validateFunction (방진혁) #59529
• [155a999bed] - test: skip tests failing when run under root (Livia Medeiros) #59779
• [6313706c69] - test: update WPT for urlpattern to cff1ac1123 (Node.js GitHub Bot) #59602
• [41245ad4c7] - test: skip more sea tests on Linux ppc64le (Richard Lau) #59755
• [df63d37ec4] - test: fix internet/test-dns (Michaël Zasso) #59660
• [1f6c335e82] - test: mark test-inspector-network-fetch as flaky again (Joyee Cheung) #59640
• [1798683df1] - test: skip test-fs-cp* tests that are constantly failing on Windows (Joyee Cheung) #59637
• [4c48ec09e5] - test: deflake test-http-keep-alive-empty-line (Luigi Pinca) #59595
• [dcdb259e85] - test_runner: fix todo inheritance (Moshe Atlow) #59721
• [24177973a2] - test_runner: set mock timer's interval undefined (hotpineapple) #59479
• [83d11f8a7a] - tools: print appropriate output when test aborted (hotpineapple) #59794
• [1eca2cc548] - tools: use sparse checkout in build-tarball.yml (Antoine du Hamel) #59788
• [89fa1a929d] - tools: remove unused actions from build-tarball.yml (Antoine du Hamel) #59787
• [794ca3511d] - tools: do not attempt to compress tgz archive (Antoine du Hamel) #59785
• [377bdb9b7e] - tools: add v8windbg target (Chengzhong Wu) #59767
• [6696d1d6c9] - tools: improve error handling in node_mksnapshot (James M Snell) #59437
• [8dbd0f13e8] - tools: add sccache to test-internet workflow (Antoine du Hamel) #59720
• [6523c2d7d9] - tools: update gyp-next to 0.20.4 (Node.js GitHub Bot) #59690
• [19d633f40c] - tools: add script to make reviewing backport PRs easier (Antoine du Hamel) #59161
• [15e547b3a4] - typings: add typing for 'uv' (방진혁) #59606
• [ad5cfcc901] - typings: add missing properties in ConfigBinding (Lee Jiho) #59585
• [70d2d6d479] - url: add err.input to ERR_INVALID_FILE_URL_PATH (Joyee Cheung) #59730
• [e476e43c17] - util: fix numericSeparator with negative fractional numbers (sangwook) #59379
• [b2e8f40d15] - util: remove unnecessary template strings (btea) #59201
• [6f79450ea2] - util: remove outdated TODO comment (haramjeong) #59760
• [32731432ef] - util: use getOptionValue('--no-deprecation') in deprecated() (haramjeong) #59760
• [65e4e68c90] - util: hide duplicated stack frames when using util.inspect (Ruben Bridgewater) #59447
• [2086f3365f] - vm: sync-ify SourceTextModule linkage (Chengzhong Wu) #59000
• [c16163511d] - wasi: fix clean target in test/wasi/Makefile (Antoine du Hamel) #59576
• [2e54411cb6] - worker: optimize cpu profile implement (theanarkh) #59683
• [d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428