chore(deps): update all non-major dependencies #170
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/all-minor-patch"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
2.70.2→2.70.326.2.0→26.3.04.1.10→4.1.1110.8.1→10.9.13.22.0→3.23.017.9.0→17.11.024.19.0→24.20.08.9.1→8.9.213.0.1→13.0.25.56.8→5.56.104.7.5→4.7.68.67.0→8.68.08.2.1→8.2.24.1.10→4.1.11Release Notes
sveltejs/kit (@sveltejs/kit)
v2.70.3Compare Source
Patch Changes
$app/statedependencies during module initialization (b61018d)vitest-dev/vitest (@vitest/browser-playwright)
v4.1.11Compare Source
🐞 Bug Fixes
View changes on GitHub
eslint/eslint (eslint)
v10.9.1Compare Source
Bug Fixes
1e641c9fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)Documentation
ad74a8ddocs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)Chores
3c3ae53chore: update ecosystem plugins (#21249) (ESLint Bot)v10.9.0Compare Source
Features
08de88efeat: handle underflow in no-loss-of-precision (#21218) (Rithish S)55db479feat: add checkConditionalExpressions tono-unmodified-loop-condition(#21175) (sethamus)Bug Fixes
2ba3025fix: prevent unsafeno-varautofix with hoisted functions (#21213) (sethamus)8e69622fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)684b579fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)Documentation
9ef407adocs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))87f66f4docs: Update README (GitHub Actions Bot)585ef37docs: update architecture documentation (#21112) (Francesco Trotta)f3993b0docs: Update README (GitHub Actions Bot)ffc87d6docs: fix broken links in Further Reading sections (#21203) (Minsu)1a761e1docs: update moved JSX specification links (#21198) (Imran Mustafa)4d00ca4docs: update ESLint peer dependency to^10.0.0in shareable configs (#21202) (lumir)510d1a2docs: Update README (GitHub Actions Bot)Chores
899dbf1chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])9aa3873chore: update ecosystem plugins (#21235) (ESLint Bot)dc1e7a8chore: update ecosystem plugins (#21208) (ESLint Bot)f878d21ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])4891e50ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])sveltejs/eslint-plugin-svelte (eslint-plugin-svelte)
v3.23.0Compare Source
Minor Changes
1ec3cf5Thanks @ColumbusLabs! - feat: add prefer-attribute-interpolation rulesindresorhus/globals (globals)
v17.11.0Compare Source
react-nativeglobals (#337)61eafbfv17.10.0Compare Source
GM_cookieto Greasemonkey globals (#349)f468407nodejs/node (node)
v24.20.0: 2026-08-26, Version 24.20.0 'Krypton' (LTS), @aduh95Compare Source
Notable Changes
b12bcc9ae1] - (SEMVER-MINOR) async_hooks: addusingscopes toAsyncLocalStorage(Stephen Belanger) #61674e2eb88b36b] - (SEMVER-MINOR) buffer: addendparameter (Robert Nagy) #623901fefdda18e] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #647464a158cf1ab] - doc: add MikeMcC399 as collaborator (Mike McCready) #64656d4cafce076] - (SEMVER-MINOR) lib,permission: addpermission.drop(Rafael Gonzaga) #62672b3cfb55267] - (SEMVER-MINOR) loader: implement package maps (Maël Nison) #62239cd1eb3e60b] - (SEMVER-MINOR) src,permission: add--permission-audit(RafaelGSS) #6186928dc85d8d2] - (SEMVER-MINOR) stream: addnode:stream/iterimplementation (James M Snell) #62066d31c168740] - (SEMVER-MINOR) test_runner: addcontext.log()and test:log event (Moshe Atlow) #64389add1edbc42] - (SEMVER-MINOR) test_runner: reportentryFileinTestStreamevents (Moshe Atlow) #64309d937c8c6cd] - (SEMVER-MINOR) wasm: enable JSPI (Guy Bedford) #59941Commits
1822c0f335] - assert,util: fix TypeError on Maps with null keys (Paul Bouchon) #64441b12bcc9ae1] - (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger) #61674984260bf44] - async_hooks: use validateBoolean for trackPromises (Soul Lee) #64731ba2612cca2] - benchmark: fix calibrate-n option handling (Luan Muniz) #64146236dc4d2d7] - benchmark: add bytes variant to webstreams async-iterator (Matteo Collina) #64291b022a1419c] - benchmark: respect stream/iter broadcast backpressure (Trivikram Kamat) #63314a290f51f15] - (SEMVER-MINOR) benchmark: add benchmarks for experimental stream/iter (James M Snell) #62066465f2bfb74] - buffer: use Clamp conversion in Blob slice (Donghoon Kang) #6473974a22cd0c5] - buffer: validate copyArrayBuffer offsets against buffer length (Ilia Alshanetsky) #6390421e24208dc] - buffer: normalize lone "\r" in Blob native line endings (Daijiro Wachi) #64115ddacb3ff10] - buffer: fix Blob.stream() leaking source buffer (semimikoh) #6357749198d2313] - buffer: fix end parameter bugs in indexOf/lastIndexOf (Robert Nagy) #62711e2eb88b36b] - (SEMVER-MINOR) buffer: add end parameter (Robert Nagy) #62390e2e5c4fe88] - build: update binary-upload to use correct tarball name (Stewart X Addison) #65282b78a212553] - build: pin envinfo versions in github actions (Joyee Cheung) #64117094fb840aa] - build: add QUIC CI job for PRs matching QUIC related paths (Tim Perry) #6387591f5003cad] - build: fix flags for ngtcp2 on IBM i (SRAVANI GUNDEPALLI) #60073e83648effd] - build,test: add tests for binary linked with shared libnode (Joyee Cheung) #614634a425b41d9] - build,tools: fix shared library cross-compile (Kirill Saied) #63963fe8fa45ff2] - cli: style node --help output with util.styleText (Adrián Estrada) #644843cd1576cb2] - crypto: preserve OpenSSL errors from KDF failures (Filip Skokan) #6477674b3023565] - crypto: handle XOF output allocation failure (Filip Skokan) #64851fea0666a1b] - crypto: clarify missing cipher error (Filip Skokan) #6485233fec91b54] - crypto: reuse X509 issuer result (Filip Skokan) #6485244c1473348] - crypto: validate key generation options (Filip Skokan) #64852c2c53a18e5] - crypto: fix Argon2 validation errors (Filip Skokan) #64852edc1f2126d] - crypto: initialize KeyObjectData mutex eagerly (Filip Skokan) #64851be8237240c] - crypto: handle DH operation failures (Filip Skokan) #64851b65a8f3875] - crypto: preserve RSA-PSS legacy pubkey DER (Filip Skokan) #6454749f2ae204b] - crypto: cleanse provider private key copies (Filip Skokan) #64547a5d4ac8208] - crypto: handle incomplete RSA private keys (Filip Skokan) #64547b72c0b9616] - crypto: retain legacy DH validation (Filip Skokan) #6454724a1be5886] - crypto: limit KangarooTwelveParams customization to 512 bytes (Filip Skokan) #645570290e0a61e] - crypto: split OpenSSL 3, BoringSSL, and legacy backends (Filip Skokan) #64211ba27e72ff8] - crypto: fix Argon2 bypassing FIPS mode (Filip Skokan) #647761fefdda18e] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746c0dd022081] - crypto: use user-facing error for output encoding changes (Archkon) #64692ff485a9410] - crypto: make --use-system-ca per-env rather than per-process (Aditi) #606781329d9b9f1] - debugger: preserve overlapping CDP request state (Trivikram Kamat) #6446782a02336aa] - deps: V8: backportd259a9e(Leszek Swirski) #63865f0fc82d404] - deps: update ngtcp2 to 1.25.0 (Node.js GitHub Bot) #64944c4e02f0fbc] - deps: upgrade npm to 11.19.0 (npm team) #64883d5a57ed4dd] - deps: update nghttp3 to 1.18.0 (Node.js GitHub Bot) #6494351d413150a] - deps: update minimatch to 10.2.6 (Node.js GitHub Bot) #6494521f79ce140] - deps: update simdjson to 4.6.6 (Node.js GitHub Bot) #649427a4960d6a9] - deps: update acorn to 8.18.0 (Node.js GitHub Bot) #649415c423aa113] - deps: update googletest to1b6f64d(Node.js GitHub Bot) #6494040561e61b0] - deps: update nghttp2 to 1.70.0 (Node.js GitHub Bot) #6493951090925b0] - deps: update zlib to 1.3.2.1-motley-42c2f19 (Node.js GitHub Bot) #647447c534bf8e5] - deps: V8: backport5177b10(avivkeller) #646317b1898a341] - deps: update ada to 4.0.0 (Node.js GitHub Bot) #647909209cc4095] - deps: update sqlite to 3.53.4 (Node.js GitHub Bot) #647453833fceff6] - deps: update googletest tofa005b2(Node.js GitHub Bot) #64587bc7ce488d1] - deps: histogram: cherry-pick62ea52b(StefanStojanovic) #64296e3fa05841d] - deps: update histogram to 0.11.10 (Node.js GitHub Bot) #64296e75bdb9bbe] - deps: update amaro to 1.1.11 (Node.js GitHub Bot) #645861e034e6e40] - deps: update timezone to 2026c (Node.js GitHub Bot) #645882b8f1f27bd] - deps: update googletest to8240fa7(Node.js GitHub Bot) #64439241ece0417] - deps: enable OpenSSL asm support for riscv64 (Jamie Magee) #62606215105eb90] - deps: update c-ares to 1.34.8 (Node.js GitHub Bot) #643307ac97fc84e] - deps: upgrade npm to 11.18.0 (npm team) #641998d4cb9ae46] - deps: update zlib to 1.3.2.1-motley-8b3aa8a (Node.js GitHub Bot) #64295564c0f4592] - deps: update ngtcp2 to 1.24.0 (Node.js GitHub Bot) #64297e3304cd31a] - deps: update nghttp3 to 1.17.0 (Node.js GitHub Bot) #64182345d6ad4eb] - deps: update ngtcp2 to 1.23.0 (Node.js GitHub Bot) #63777a53db015e6] - deps: update nghttp3 to 1.16.0 (Node.js GitHub Bot) #637761f4a5c1c76] - deps: update ngtcp2 to 1.22.1 (Node.js GitHub Bot) #62812080c4d7cda] - deps: update ngtcp2 to 1.22.0 (Node.js GitHub Bot) #625954309e7c82f] - deps: update ngtcp2 to 1.21.0 (Node.js GitHub Bot) #6205190cf11cfb5] - deps: update nghttp3 to 1.15.0 (Node.js GitHub Bot) #61512e1f315a554] - deps: update ngtcp2 to 1.20.0 (Node.js GitHub Bot) #615119a3f690c9d] - deps: update ngtcp2 to 1.19.0 (Node.js GitHub Bot) #61156fe88f31764] - deps: add ngtcp2 test binaries (James M Snell) #599466d60fce138] - diagnostics_channel: grow native channel storage (Stephen Belanger) #6449730ae8ab091] - doc: document --permission-audit audit mode behavior (Adrián Estrada) #647918cefc6efa8] - doc: fix guaranteed typo (lilianakatrina684-a11y) #623742e78e4b120] - doc: add throwIfNoEntry version history to fs.stat (kovan) #62204c7a04401cb] - doc: fix grammar and punctuation in dgram documentation (Kamal Rawal) #64957331e5e8f62] - doc: fix grammar and editorial issues in addons documentation (Kamal Rawal) #64952232287fcc6] - doc: formalize fn/name as part of TestOptions API (Christopher Hiller) #649467f9efeb445] - doc: remove references toca/crlas per-context QuicSession options (René) #64769b54aa83cc6] - doc: fix typo in maintaining-dependencies.md (greenhead) #64896f4e427803c] - doc: add RafaelGSS as last security release stewards (Rafael Gonzaga) #64843f2cd6df3f3] - doc: fix typos in documentation (greenhead) #64900d5627162bd] - doc: improve TestContext hook descriptions (Kamal Rawal) #6489972ee03bd2e] - doc: document stream.isDestroyed() (YspritanHyzygy) #64789995141eb81] - doc: add contributing detail for git Signed-off-by trailer (Mike McCready) #64862dc30379310] - doc: fix duplicated word in test snapshot docs (Kamal Rawal) #64837205d4d0472] - doc: remove obsolete cctest node.gyp instructions (Soul Lee) #64814108b883d0b] - doc: report proper return type on url.format (Brian Muenzenmeyer) #64806b03bd3a8ed] - doc: clarify tlsSocket.authorized on resumption (soreavis) #64584093098ad7f] - doc: stabilize --disable-warning (Jean Michelet) #647422de1d76d80] - doc: add MDN links for explicit resource management in fs (lluisemper) #595572e0f36a891] - doc: mention constructor check in deepStrictEqual (Sumit Kumar Das) #620101c9d354d09] - doc: update technical priorities (Jacob Smith) #6450530c99bf08f] - doc: deprecation add more codemod (Augustin Mauroy) #631758a971a09eb] - doc: run license-builder (Node.js GitHub Bot) #63918707f6eacfc] - doc: clarify rules for adding new built-in modules (Antoine du Hamel) #64648928208cffc] - doc: mention DEPENDENCY custom field for H1 reports (Rafael Gonzaga) #64634ee593cadf5] - doc: fix dnsPromises.lookup verbatim default (Shivam S) #646589c228b32d1] - doc: fix typo in releases guide (Jihwan) #646214a158cf1ab] - doc: add MikeMcC399 as collaborator (Mike McCready) #646568125809853] - doc: use promote wording in release guide (Md Muhtasim Munif Fahim) #643712a2effadf6] - doc: fix import.meta example for vm.SourceTextModule (Muhammad Zeeshan) #64112c879f912bf] - doc: mention crypto.hash() for better perf (Steven) #63420634afda904] - doc: update sea example by fixing wrong code example (Maxence Robinet) #64025bced1433a3] - doc: fix socket.readyState state descriptions (YuSheng Chen) #644684b2c18938f] - doc: replace large tables in crypto.md and webcrypto.md with lists (Filip Skokan) #645825207231996] - doc: note --env-file is not applied to --run (Paul Bouchon) #64442329a2884fd] - doc: fix typo in embedding.md (greenhead) #64425fab3f56aa1] - doc: fix typos in contributing docs (Donghoon Kang) #64520cbc2bed4e8] - doc: document TLS alpnProtocol and servername fields (Tim Perry) #64362dada3ae60e] - doc: fix spelling in devcontainer guide (한만욱) #6445971343b28aa] - doc: clarify PEM format for signing keys (Harjoth Khara) #644040544ec1c78] - doc: fix typo in tls.md (Daijiro Wachi) #644588fe58078e7] - doc: document net Socket server property (Efe Karasakal) #64364d54fd03fa4] - doc: update a Dispatcher undici doc link (Filip Skokan) #643581bdebecd41] - doc: fix typos in documentation (Jungwon Sohn) #6446686bca58641] - doc: clarify fixes and refs trailer guidance (Trivikram Kamat) #64421b5b84c9394] - doc: add scope overview tables for TestsStream events (Moshe Atlow) #64386004238d77c] - doc: clarify proxy threat model (Matteo Collina) #643666851b8d55f] - doc: add note about restricted CI to pull-requests.md (Stewart X Addison) #64321662e33714a] - doc: various updates to releases.md (Stewart X Addison) #64198949bc3cfd3] - doc: remove obsolete --napi-modules doc entry (Chengzhong Wu) #64220830d16067f] - doc: clarify QUIC stream state wording (EduardF1) #6366079b6704630] - doc: fix typo in node-config-schema.json (Hamid Reza Ghavami) #641889f5bf554db] - doc: fix broken link (Antoine du Hamel) #6507842b27ed428] - doc: remove unsupported syntax fromstream_iter.md(Antoine du Hamel) #64649f1a9df7f22] - doc: clarify fromReadable() duck-typed contract (Trivikram Kamat) #63682c7a3d450ac] - doc: improve quic documentation (James M Snell) #63157cc425bc659] - doc: fix promise nomenclature instream_iter.md(Antoine du Hamel) #63406859a02da96] - doc: minor structural stream/iter edits (René) #63089630b15eb20] - doc: fix doubled word typo in stream_iter.md (Daijiro Wachi) #6291650791fa8fa] - doc,test: widen fsPromises.appendFile()'s data type, add missing tests (Jimmy Leung) #642799e39360a09] - esm: improve ERR_REQUIRE_ASYNC_MODULE (Joyee Cheung) #64260d2b02e443a] - esm: print required top-level await locations without evaluating (Joyee Cheung) #64154e8c153f3f4] - events: avoid retaining removed event names (Matteo Collina) #6447573e1701bad] - events: optimize once() and removeListener() (Matteo Collina) #6437312f7fc0558] - fs: key glob matcher cache by platform (Archkon) #64571e5af022302] - fs: add pattern cache for matchGlobPattern() (bq) #6391563321eeb11] - fs: fix cp symlink and EEXIST handling on Windows (Kirill Saied) #643530ad55e5618] - http: fix writableFinished and 'finish' after write errors (Tim Perry) #64847ee54d9d4d2] - http: avoid aborting IncomingMessage signal on normal close (Archkon) #6439214cb8b0a06] - http: guard invalid timeout values in checkConnections (Efe Karasakal) #64506f24177ccc6] - http: propagate highWaterMark to ClientRequest OutgoingMessage (trivenay) #6465355e2c2da8c] - http: fix perf_hooks detail.req.url port and proxied path (Stefano Baghino) #64311b57350fe27] - http: remove unused n arg from IncomingMessage._read (Efe Karasakal) #64370af3a17e0b3] - http2: avoid copying the options in respond() (Matteo Collina) #64265f11ac0da37] - http2: avoid per-write closures in kWriteGeneric (Matteo Collina) #64265157bd07b6e] - http2: reduce per-request allocations (Matteo Collina) #64265b075b33429] - http2: don't throw when destroying socket proxy (Matteo Collina) #64427445bcce079] - inspector: add --cond to node inspect probe mode (Joyee Cheung) #6432806b54fe7d3] - lib: fix AbortSignal.any() observed-composite leak (Paul Bouchon) #64481d8fac094d1] - lib: fix typo in comment in _http_client.js (agape1225) #647299ce72fd6fb] - lib: useassignFunctionNameutil where it makes sense (Antoine du Hamel) #64515c40d1473e6] - lib,permission: fix addon permission drop (Martin Wagner) #64007d4cafce076] - (SEMVER-MINOR) lib,permission: add permission.drop (Rafael Gonzaga) #626726b09d30a76] - lib,tools: addnode-core/func-name-matchinglint rule (Livia Medeiros) #57901d7d4f0e2ac] - loader: enforce path normalization before lookup (Maël Nison) #63917b3cfb55267] - (SEMVER-MINOR) loader: implement package maps (Maël Nison) #62239cf425ad935] - meta: bump actions/stale from 10.3.0 to 11.0.0 (dependabot[bot]) #6493526fa9cc32b] - meta: bump github/codeql-action/analyze from 4.36.2 to 4.37.3 (dependabot[bot]) #64934c90fa82cd7] - meta: bump github/codeql-action/autobuild from 4.36.2 to 4.37.3 (dependabot[bot]) #64933314893253a] - meta: bump actions/setup-python from 6.3.0 to 7.0.0 (dependabot[bot]) #649326ab711278f] - meta: bump github/codeql-action/init from 4.36.2 to 4.37.3 (dependabot[bot]) #649319138f5892a] - meta: bump Mozilla-Actions/sccache-action from 0.0.10 to 0.0.11 (dependabot[bot]) #649303ef3f934d4] - meta: bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.3 (dependabot[bot]) #64927a0a33127ae] - meta: bump step-security/harden-runner from 2.19.4 to 2.20.0 (dependabot[bot]) #649264ad2afbf33] - meta: bump ossf/scorecard-action from 2.4.3 to 2.4.4 (dependabot[bot]) #64925d9b2ee4083] - meta: add @nodejs/url as codeowner for node_url_pattern.* (Efe Karasakal) #647372b43b78e82] - meta: lower stale to 3 months (Aviv Keller) #645690ffe8352ae] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #64315afd922cd8a] - meta: bump actions/checkout from 6.0.2 to 7.0.0 (dependabot[bot]) #64245b6149a2976] - meta: bump actions/setup-python from 6.2.0 to 6.3.0 (dependabot[bot]) #642418f4a5c622f] - meta: update sccache version in test-linux-quic (René) #640439040b08696] - net: support TCP handle transfer on Windows (Matteo Collina) #644601216481a09] - net: support AF_UNIX paths in net.BoundSocket (Guy Bedford) #64399f6bf3f8a5d] - net: support sync connect for BoundSocket (Guy Bedford) #64375fb8a7e15ca] - net: make TCP Server and Socket transferable across worker threads (Matteo Collina) #64225224d2c7886] - path: add benchmarks for path.matchesGlob() (bq) #63915980c651de5] - permission: add unique warning codes (David Evans) #644149f9a96030d] - permission: support v8.setHeapSnapshotNearHeapLimit (Ilyas Shabi) #648088a00872183] - quic: fix stop sending behaviour & callback (Tim Perry) #647107aab0c3183] - quic: fix coverage comment typo (Jungwon Sohn) #64486b4ecb3040b] - quic: fix segfault after fragmented client hello (Tim Perry) #647206386540dad] - quic: serialize stream reset code as string (한만욱) #6457782717741c9] - quic: defer server session emit until TLS ClientHello is processed (Tim Perry) #641327cb3099907] - quic: preserve session stats after close (한만욱) #6448950e639b578] - quic: add support for TLS certificate compression (Sebastian Beltran) #64434e2e28292cc] - quic: extract transport logic from Application to Session (Tim Perry) #641272ef4b7ebf2] - quic: correct http3 callback and fix revealed errs (Marten Richter) #64289a682b53456] - quic: fix no onstream handler crash quic (Efe) #641589445e2719a] - quic: fix stall datagrams, if no pending streams (Marten Richter) #643032ea9d193bd] - quic: fix potential crash from unobserved closed (Tim Perry) #641343b7f4fc1fb] - quic: drop version negotiation packets with oversized CIDs (Mohamed Sayed) #64228bd477a3202] - quic: fixes undefined handle in QuicStream kInspect (Marten Richter) #641703dd04b3ec6] - quic: fix get_reader bug that dropped data on FIN (Tim Perry) #639464be8abe8f9] - quic: expose QUIC certificates as JS X509Certificate, not raw handles (Tim Perry) #63191e264c5c0cb] - quic: fix reader backpressure deadlock on idle connections (Tim Perry) #639502f749dde18] - quic: impl. cb for http/3 settings/app. options (Marten Richter) #635585ca7ef3202] - quic: fix broken listEndpoints export, test callbacks & nghttp3 include (Tim Perry) #63874147150cfdd] - quic: add listEndpoints API (James M Snell) #635363b59d12f5d] - quic: add proper error codes & messages for QUIC failures (Tim Perry) #63198b68f8eadb9] - quic: support hostname verification (James M Snell) #634837652bd9c6d] - quic: add stream idle timeout (James M Snell) #63483e493f04214] - quic: add block list support for endpoints (James M Snell) #634836d6cd45f8b] - quic: improve peer cert verification (James M Snell) #63483dbe0b371ee] - quic: handle h3 max header size option (James M Snell) #6348339dca4150c] - quic: add rate limiting docs (James M Snell) #63483c726a893d6] - quic: cache timestamp for address lru cache (James M Snell) #6348311778a7925] - quic: add session creation rate limiting (James M Snell) #634838107f1b3ed] - quic: refine rate limiting (James M Snell) #634833f0d7371e0] - quic: flip preferred address policy default to 'ignore' (James M Snell) #6348397c8a96774] - quic: add doc note about certificate size limitations (James M Snell) #6348342aa3f6612] - quic: add applicationOptions to session (James M Snell) #632674c00ab9d29] - quic: add getters for local and remote transport parameters (James M Snell) #63267858b636576] - quic: improve recv coalescing test sizes (James M Snell) #6326784d3100256] - quic: add initial RTT option to session options (James M Snell) #63267a2b6a81c66] - quic: enable recvmmsg batching in Endpoint (James M Snell) #6326746a0868994] - quic: improve stream header collection performance (James M Snell) #63267bc7f4efdb7] - quic: coalesce received data into fewer buffers (James M Snell) #63267f727efb8b2] - quic: apply multiple additional minor improvements (James M Snell) #63267ee0a0f1540] - quic: fix tests that are missing serverEndpoint close (James M Snell) #63267f8a1fdad07] - quic: fixup some v8:: qualifiers (James M Snell) #63267c66605609c] - quic: fix premature unref of endpoint when listening (James M Snell) #632679a72949b0b] - quic: fixup UAFs in bindingdata, streams, and app (James M Snell) #63267a4db12198e] - quic: fix UAF in Application::OnTimeout() (James M Snell) #632670a11b2ccde] - quic: improve the quic js structure (James M Snell) #632671bc25d2a03] - quic: improve internal structure of QuicStream (James M Snell) #6326769e48aed02] - quic: add aliased struct arenas (James M Snell) #632676b7185351b] - quic: add handshake timeout and default connection limits (James M Snell) #6326791e3c39097] - quic: fix crash in early handshake failure (James M Snell) #63267098e3d715d] - quic: eliminate per-received datagram allocation (James M Snell) #6326753b05e2ab2] - quic: cache the timestamp on send and receive (James M Snell) #632671592a11219] - quic: add support for future ECN marking (James M Snell) #6326780e6bf9539] - quic: improve batching of packet sending (James M Snell) #63267ff0cd5b95f] - quic: improve backend quic packet processing (James M Snell) #63267c4eb6a95da] - quic: send correct OpenSSL alert for ALPN mismatches (Tim Perry) #63193575dc7d100] - quic: fixup quic stream variable chunk len (James M Snell) #632302551f9e6dd] - quic: remove unused env_ variable in session_manager.h/cc (James M Snell) #63177bea62a14b3] - quic: ignore coverage for quic files (James M Snell) #631499788bbff97] - quic: complete the internal implementation of QUIC (James M Snell) #6287654c094d245] - quic: continue working on quic api bits (James M Snell) #60123ea82bc418d] - readline: reduce createInterface overhead (Matteo Collina) #6458590a8b23db0] - sqlite: invalidate sessions when closing database (Trivikram Kamat) #647836abd00ed65] - sqlite: check database state before calling SQLite (Trivikram Kamat) #64812c2a52514d6] - sqlite: fix crash when a session outlives its database (Mohamed Sayed) #63797f9126923ef] - sqlite: fix use-after-free in Exec() and ApplyChangeset() (Matteo Collina) #64535c010131bc3] - sqlite: read column count after step in StatementSync.all() (Guilherme Araújo) #64219782ad5d5b0] - src: implement MemoryRetainer protocol for ByteSource (Filip Skokan) #646604afc15bf1d] - src: avoid redundant KEM encapsulation copies (Filip Skokan) #6455337085f850d] - src: fix crash when writing odd-length hex string via Writev (RajeshKumar11) #63658f58ac8224c] - src: avoid using ToLocalChecked in crypto_hash (James M Snell) #6466805ec9c4771] - src: fix libuv assertion on windows (liuxingbaoyu) #61999308a589ee9] - src: avoid redundant DataPointer reallocations (Filip Skokan) #645523650fabcb4] - src: fix comment typos (Jungwon Sohn) #6450906b3441ea2] - src: zero-initialize cap_data in node_credentials.cc (Samuel Kapust) #64347bb24a88b99] - src: fix some typo errors and rename some variables (Archkon) #64301ba36ab71fd] - src: make node.config.json throw at unknown fields (Marco Ippolito) #62992fbb3960189] - src: show original file name in FileHandle GC close errors (Anna Henningsen) #60593d53d582be7] - src,permission: do not throw on denied access in audit mode (Adrián Estrada) #64426cd1eb3e60b] - (SEMVER-MINOR) src,permission: add --permission-audit (RafaelGSS) #61869b1596c2b65] - stream: cut per-chunk allocations in pipeTo (Matteo Collina) #648902cfa96f5cb] - stream: preserve push signal abort reason (Trivikram Kamat) #64798fc80ff5f7a] - stream: skip zero-byte broadcast writes (Trivikram Kamat) #64772486cff4c08] - stream: honor AbortSignal in Writer.end() (Trivikram Kamat) #6472759ef1789f7] - stream: use validateString for consumer encoding (Jungwon Sohn) #647548aba47536a] - stream: use the ring buffer for pending BYOB pull-into descriptors (Matteo Collina) #64818b20217cb56] - stream: fix uncatchable error closing half-open Duplex.toWeb() writable (Mohamed Sayed) #641618accb0c4c0] - stream: abort pending single-source merge reads (Trivikram Kamat) #64445ed5b04027c] - stream: use RangeError for broadcast overflow (Trivikram Kamat) #64420136d4e7628] - stream: skip null output from stateful transforms (Trivikram Kamat) #64462193091f1ba] - stream: update iterable streams to use budget backpressure (James M Snell) #64464e2b32fce77] - stream: remove customCloneableDOMExceptionimplementation (Antoine du Hamel) #64469d77788eafe] - stream: fix drop-newest behavior in share() (Trivikram Kamat) #64417de4ca2c962] - stream: fold desired-size check into WHATWG backpressure update (Matteo Collina) #644512a3babb8d7] - stream: validate writer options signal (Trivikram Kamat) #643850ab8f269b0] - stream: reject push iterator.throw() with error (Trivikram Kamat) #64380262e6545d1] - stream: simplify nestedPromisePrototypeThens (Antoine du Hamel) #644700ddfc6af91] - stream: use the ring buffer for WHATWG stream request queues (Matteo Collina) #64431a5e7d89f9e] - stream: validate writevSync chunks before queuing (Trivikram Kamat) #643008044f895bf] - stream: speed up reads and iteration over default WHATWG streams (Matteo Collina) #64320d4dfb66bdf] - stream: copy SAB-backed chunks in iter consumers (Trivikram Kamat) #643829c9ade337f] - stream: reject nested async streamables in from() (Trivikram Kamat) #64352271c7454f4] - stream: avoid draining merged iter sources (Trivikram Kamat) #64293cbb2568a04] - stream: use ring buffer for WHATWG stream queues (Yagiz Nizipli) #6431267688cc651] - stream: hoist repeated loads in readable paths (Yagiz Nizipli) #643123f8b446a67] - stream: prefer sync iterator in fromSync (Trivikram Kamat) #642943043b2a68a] - stream: speed up async iteration over WHATWG byte streams (Antoine du Hamel) #64291870273ccde] - stream: reject iter consumers on abort (Trivikram Kamat) #640668a4a997f3e] - stream: fix merge abort for pending sources (Trivikram Kamat) #64013ac5e5d5dec] - stream: refactor unnecessary optional chaining away (Antoine du Hamel) #64253cb298cfb15] - stream: normalize Broadcast.from() byte inputs (Trivikram Kamat) #64082bbbb4aadef] - stream: observe abort while awaiting pipeTo source (Trivikram Kamat) #640154387ad412f] - stream: respect iter consumer abort signals (Trivikram Kamat) #639974ba1fa0062] - stream: handle falsy push writer fail reasons (Trivikram Kamat) #635693b8c30c096] - stream: handle setEncoding after buffered data (Matteo Collina) #6397397ef13c84e] - stream: keep overlapping broadcast reads pending (Trivikram Kamat) #63500a46ddad9fa] - stream: refine the stream/iter backpressure (James M Snell) #63697557bf99245] - stream: remove transform-writer handling in pipeTo (Trivikram Kamat) #6368424b7831a1a] - stream: fix pipeToSync byte accounting (Trivikram Kamat) #635643b5f1b56bc] - stream: reject pull() reads on abort (Trivikram Kamat) #63498e48e287633] - stream: fast-path stateless transform flush results (Trivikram Kamat) #63605f0ee316f45] - stream: handle sync writev completion in pipeTo (Trivikram Kamat) #63561fbed90b2fb] - stream: settle pending broadcast reads on return (Trivikram Kamat) #63603568dcc250f] - stream: serialize concurrent share consumer reads (Trivikram Kamat) #634785e2b4c4ade] - stream: fix lint error (Antoine du Hamel) #6359874bd0cd35a] - stream: reject pending reads on iterator throw (Trivikram Kamat) #6355545780df841] - stream: wait for push writer end fallback to drain (Trivikram Kamat) #63503217b495e0a] - stream: flush each fused stateless transform (Trivikram Kamat) #634682e8685592e] - stream: avoid duplicate writes in toWritable (Trivikram Kamat) #6336088a3392a78] - stream: propagate abort reason in share and broadcast (Trivikram Kamat) #63358fce3df74e9] - stream: disallow writing string chunk with 'buffer' encoding (René) #630625658c631fa] - stream: alignReadable.toWebtermination with eos (ikeyan) #6239402a51a746b] - stream: add sync iterable fast path to pipeTo (Trivikram Kamat) #633184c9f3edb64] - stream: fix merge handling for object-like sources (Trivikram Kamat) #63356c50d8e49cc] - stream: limit iter from sync iterable batches (Trivikram Kamat) #633241d7c86d577] - stream: cache minimum cursor count in broadcast (Trivikram Kamat) #63322ec2666edbe] - stream: avoid retrying accepted pipeTo writes (Trivikram Kamat) #63297f63143fd83] - stream: validate broadcast writer writev chunks (Trivikram Kamat) #63300944470b08a] - stream: uncork fromWritable writev on chunk error (Trivikram Kamat) #63295ae79f2b67a] - stream: validate fromWritable() options before cache (Trivikram Kamat) #63278c98cc67f33] - stream: optimize single-slot push queue drain (Trivikram Kamat) #632749a45ff5d8f] - stream: preserve toReadableSync batch after backpressure (Trivikram Kamat) #63276eb72fe94fc] - stream: cache minimum cursor count in share (Trivikram Kamat) #63262b57b51eeed] - stream: minor stream/iter implementation edits (René) #63132274b3a2ea1] - stream: remove redundant method check from iter.pipeToSync (René) #63099baf98faa06] - stream: add stream/iter to classic stream adapters (James M Snell) #6246928dc85d8d2] - (SEMVER-MINOR) stream: add stream/iter Implementation (James M Snell) #62066125c19da43] - stream, quic: update iterable streams backpressure (James M Snell) #6446411d1bd3ba7] - test: split test-embedding.js and run tests in parallel (Joyee Cheung) #61571e59346b704] - test: ensure assertions are reached on all tests (Antoine du Hamel) #6471642a967d7ed] - test: unflake debugger and REPL tests (Matteo Collina) #64718d80a45fdc4] - test: update WPT for url to4832db4(Node.js GitHub Bot) #648297264efb21b] - test: update WPT for url tob63305b(Node.js GitHub Bot) #64790539f5dc8f9] - test: cover worker throwing primitive values (varshitha) #64365087d9e8dd0] - test: mark test-repl-user-error-handler as flaky (Aviv Keller) #64612dd1e7139a5] - test: update quic tests for stream/iter update (James M Snell) #64464eee0e84537] - test: fix flaky http2 socket proxy test (Tim Perry) #64673a5ce44dd75] - test: apply correction to comment (Rich Trott) #64524da8508c5a0] - test: keep finalization before-exit ref alive (Tim Perry) #6452114b710c415] - test: copyedittest-tls-psk-alpn-callback-exception-handling(Antoine du Hamel) #6348599b7382c6a] - test: fix stale async-context-frame status entries (Kirill Saied) #641416da6ca730d] - test: update WPT for urlpattern to5847ee5(Node.js GitHub Bot) #6443673bf0f07f1] - test: update WPT for WebCryptoAPI toec2fee3(Node.js GitHub Bot) #644359a7ec52e6f] - test: fix flaky http2 maxOriginSetSize test (Tim Perry) #6440759af7e0ed9] - test: fix 2nd flaky blob test case (Tim Perry) #643917fd5f66376] - test: fix flaky watch + cwd + argv test-runner test (Tim Perry) #64372d5b47d2fae] - test: normalize Windows crash in debugger test normalization (Joyee Cheung) #64332a8ae44096d] - test: unmark flaky http2-large-file for Win (Kirill Saied) #642558461d18597] - test: increase timeout in consumed-timeout test (Trivikram Kamat) #64204af52410d70] - test: handle null stdio streams in spawnSyncAndAssert helper (Joyee Cheung) #642730ea079be7b] - test: remove impact of tier-up changes in worker stack size test (Joyee Cheung) #642711bde0ef053] - test: update WPT for WebCryptoAPI to0c413fb(Node.js GitHub Bot) #63647f32b412867] - test: get rid of unnecessaryAbortControllerinstanciations (Antoine du Hamel) #634898cbd90161b] - test: update WPT for wasm/jsapi to288c467(Node.js GitHub Bot) #63136f200aaccf0] - test: fixup quic tests (James M Snell) #6326714c547351b] - (SEMVER-MINOR) test: add tests for experimental stream/iter implementation (James M Snell) #620662cc54e1793] - test: skip quic tests that IBM i does not support (SRAVANI GUNDEPALLI) #601608ec80b311b] - test_runner: wait for filtered suite build (semimikoh) #642089ed7146851] - test_runner: convert to uint during deserialization (Aviv Keller) #64706d31c168740] - (SEMVER-MINOR) test_runner: add context.log() and test:log event (Moshe Atlow) #64389add1edbc42] - (SEMVER-MINOR) test_runner: reportentryFileinTestStreamevents (Moshe Atlow) #643098d97dee696] - tests: start adding quic test server utilities (James M Snell) #59946e5278b7f7d] - timers: do not retain a reference to the async store after firing (Matteo Collina) #53443e277bc4608] - tls: fix SNICallback certificate selection (Matteo Collina) #64700b9104decc3] - tls: match IPv6 hosts against IP-Address SANs (Pascal Garber) #64145b50139e89f] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #649285460c464a0] - tools: bump brace-expansion from 5.0.7 to 5.0.9 in /tools/eslint (dependabot[bot]) #64904f8a13811cd] - tools: use 'readonly' for EventSource global (Honey Tyagi) #647876e10012c0d] - tools: bump brace-expansion from 5.0.6 to 5.0.7 in /tools/eslint (dependabot[bot]) #64636d66b7588ac] - tools: reference 'git node land' in PR-URL: error message in merge.sh (Stewart X Addison) #644955d90e48175] - tools: disable zipping tarballs on GHA (Antoine du Hamel) #644238a909f4540] - tools: fix redundant conditions in v8.gyp for riscv64 and loong64 (Jamie Magee) #626089e171710fa] - tools: removeenvinfofrom our workflows (Antoine du Hamel) #642593fb722054f] - tools: avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #639385755712920] - tools: add lint rule for aborted AbortController (Trivikram Kamat) #63541e88d5b78bc] - typings: add heap_utils internalBinding types (Donghoon Kang) #64816ae93bc8ad1] - typings: remove isDataView from types binding (Archkon) #64738c00bd1427d] - url: create URLPattern result properties in WebIDL order (Archkon) #647338a07969e28] - util: make MIMEParams accessors case-insensitive (Daijiro Wachi) #64123bf86741167] - v8: report minor mark-sweep in GCProfiler (Archkon) #64688d937c8c6cd] - (SEMVER-MINOR) wasm: enable JSPI (Guy Bedford) #599419016ddabb9] - wasm: register missing SetURL function (Archkon) #64679e599b9428b] - zlib: validate pledgedSrcSize as a safe integer (Archkon) #646041f1adc89da] - zlib: accept ArrayBuffer dictionary in Zstd (Ryuhei Shima) #645990ee91ead8b] - zlib: reject truncated zstd input (Archkon) #64593nodejs/node-addon-api (node-addon-api)
v8.9.2Compare Source
Bug Fixes
nodejs/node-gyp (node-gyp)
v13.0.2Compare Source
Bug Fixes
Core
Tests
sveltejs/svelte (svelte)
v5.56.10Compare Source
Patch Changes
fix: preserve CSS escape sequences when printing selectors (#18667)
fix: parse
:nth-child(2n of.foo)whereofis not followed by whitespace (#18611)fix: transform expressions inside labeled statements during server compilation (#18617)
docs: clarify that context lookup includes the current component and all ancestors (#18581)
fix: apply CSS custom properties with falsy values on components (#18634)
fix: correctly print
{#await ... catch x}et al (#18645)fix: ignore comments of Program node during migration script (#18656)
fix: reliably resolve append_style to its correct root (#18614)
fix: clean up removed capture event handlers from spread attributes (#18618)
fix: don't corrupt renderer type during SSR's legacy
bind:retry loop (#18616)fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)
fix: give effect teardowns the value from before the first write in a flush (#18620)
fix: avoid double-calling a derived reference when destructuring
$derivedof another$derivedduring server-side rendering (#18668)fix: preserve namespaces in CSS type selectors (#18678)
fix: increment private state fields through a non-
thisreceiver (#18622)chore: deduplicate client and server context helpers (#18580)
fix: release
last_propagated_eventafter event propagation settles so it no longer retains the last event's target subtree (#18569)fix: allow custom elements to receive async values as props (#18661)
fix: strip comments from inline
stylevalues in linear time (#18553)fix: prevent declaration comments from breaking server derived references (#18641)
perf: make async blocker analysis scale linearly with the number of top-level references (#18549)
fix: preserve short-circuiting for logical assignments to private state fields (#18594)
v5.56.9Compare Source
Patch Changes
fix: skip controlled each fast path while another batch is pending (#18625)
fix: better whitespace handling inside printer (#18638)
fix: don't duplicate comments in attributes (#18636)
fix: preserve CSS comments in the AST printer (#18637)
sveltejs/language-tools (svelte-check)
v4.7.6Compare Source
Patch Changes
fix: don't log an error for vite configs without a Svelte plugin (#3091)
fix: handle SvelteKit 3 having its config merged at the top level (#3104)
typescript-eslint/typescript-eslint (typescript-eslint)
v8.68.0Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
vitejs/vite (vite)
v8.2.2Compare Source
Features
@vitejs/devtoolspeer range to v0.5.0 (#23302) (495d9ff)Bug Fixes
resolve.preserveSymlinkswhen resolving root (fix #23197) (#23198) (8413052)Documentation
Miscellaneous Chores
Code Refactoring
Tests
Build System
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
⚠️ Artifact update problem
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below:
File name: package-lock.json