Skip to content

chore(deps): update node.js to v24 - #133

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/node-24.x
Open

chore(deps): update node.js to v24#133
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/node-24.x

Conversation

@renovate

@renovate renovate Bot commented Oct 28, 2025

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
node (source) final major 9.11.2-alpine24.18.1-alpine
node (source) final major 8.11.3-alpine24.18.1-alpine
node (source) final major 6.14.3-alpine24.18.1-alpine
node (source) final major 4.9.1-alpine24.18.1-alpine
node (source) final major 10.4.1-alpine24.18.1-alpine

Release Notes

nodejs/node (node)

v24.18.1: 2026-07-29, Version 24.18.1 'Krypton' (LTS), @​juanarbol

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
  • (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
  • (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
  • (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
  • (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
  • (CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) – Medium
  • (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
  • (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
  • (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
  • (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
  • (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
  • deps: update llhttp to 9.4.3 (Paolo Insogna)
  • deps: update undici to 7.29.0 (Node.js GitHub Bot)
Commits

v24.18.0: 2026-06-23, Version 24.18.0 'Krypton' (LTS), @​richardlau prepared by @​sxa

Compare Source

Notable Changes
  • [e07e7a31e1] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #​63527
  • [44c8ebcbd6] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #​64004
  • [d3ef4122ee] - (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina) #​63597
  • [bb2857b85a] - (SEMVER-MINOR) crypto: align key argument names in docs and error messages (Filip Skokan) #​62527
  • [b9d5e87880] - (SEMVER-MINOR) crypto: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) #​62527
  • [ccd756d61e] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #​62183
  • [4c9251fc09] - (SEMVER-MINOR) http: add writeInformation to send arbitrary 1xx status codes (Tim Perry) #​63155
  • [8c989ec4a3] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #​63079
  • [3f54c8ba32] - Revert "stream: noop pause/resume on destroyed streams" (Stewart X Addison) #​63834
Commits

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 9e6ff8a to 37a6229 Compare October 29, 2025 05:11
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 883ef3d to defd7f3 Compare November 13, 2025 21:08
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 3 times, most recently from 5ee9f90 to af26150 Compare December 11, 2025 20:47
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 5 times, most recently from 59298d3 to aad43c8 Compare December 18, 2025 04:57
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 9786059 to 1588f47 Compare January 15, 2026 02:10
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from 1588f47 to eda75a8 Compare January 28, 2026 09:32
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from eda75a8 to 806c3e1 Compare February 12, 2026 19:46
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 3 times, most recently from d92ec08 to 03e0dcb Compare February 25, 2026 12:46
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 7f8830a to 07fb5ef Compare March 26, 2026 14:15
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 882c2fd to efb02a0 Compare April 16, 2026 20:03
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from efb02a0 to aab92c9 Compare April 30, 2026 15:13
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from aab92c9 to 8ee7864 Compare May 21, 2026 22:24
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from d0206b9 to 9751ce9 Compare June 16, 2026 04:04
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 3 times, most recently from d37a9dc to d6f9bae Compare June 25, 2026 02:58
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from d6f9bae to b5011e9 Compare July 31, 2026 01:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants