2026-08-26, Version 24.20.0 'Krypton' (LTS) #65461
aduh95
merged
388 commits into
v24.x
from
v24.20.0-proposal
benchmark: add bytes variant to webstreams async-iterator
236dc4d2
test: remove impact of tier-up changes in worker stack size test
0ea079be
test: handle null stdio streams in spawnSyncAndAssert helper
af52410d
sqlite: read column count after step in StatementSync.all()
c010131b
quic: fix no onstream handler crash quic
a682b534
doc: remove obsolete --napi-modules doc entry
949bc3cf
test_runner: report `entryFile` in `TestStream` events
add1edbc
test: increase timeout in consumed-timeout test
8461d185
stream: prefer sync iterator in fromSync
3f8b446a
tls: match IPv6 hosts against IP-Address SANs
b9104dec
meta: move one or more collaborators to emeritus
0ffe8352
doc: various updates to releases.md
662e3371
doc: add note about restricted CI to pull-requests.md
6851b8d5
stream: hoist repeated loads in readable paths
67688cc6
stream: use ring buffer for WHATWG stream queues
cbb2568a
quic: correct http3 callback and fix revealed errs
2ef4b7eb
deps: upgrade npm to 11.18.0
7ac97fc8
quic: extract transport logic from Application to Session
e2e28292
deps: update c-ares to 1.34.8
215105eb
stream: avoid draining merged iter sources
271c7454
buffer: fix Blob.stream() leaking source buffer
ddacb3ff
test: unmark flaky http2-large-file for Win
a8ae4409
test: normalize Windows crash in debugger test normalization
d5b47d2f
stream: reject nested async streamables in from()
9c9ade33
deps: enable OpenSSL asm support for riscv64
241ece04
doc: clarify proxy threat model
004238d7
test: fix flaky watch + cwd + argv test-runner test
7fd5f663
stream: copy SAB-backed chunks in iter consumers
d4dfb66b
doc: add scope overview tables for TestsStream events
b5b84c93
stream: speed up reads and iteration over default WHATWG streams
8044f895
http: remove unused n arg from IncomingMessage._read
b57350fe
stream: validate writevSync chunks before queuing
a5e7d89f
src: fix some typo errors and rename some variables
bb24a88b
test_runner: add context.log() and test:log event
d31c1687
http: fix perf_hooks detail.req.url port and proxied path
55e2c2da
net: make TCP Server and Socket transferable across worker threads
fb8a7e15
test: fix 2nd flaky blob test case
59af7e0e
buffer: normalize lone "\r" in Blob native line endings
21e24208
util: make MIMEParams accessors case-insensitive
8a07969e
test: fix flaky http2 maxOriginSetSize test
9a7ec52e
doc: clarify fixes and refs trailer guidance
86bca586
events: optimize once() and removeListener()
73e1701b
doc: fix typos in documentation
1bdebecd
tools: disable zipping tarballs on GHA
5d90e481
inspector: add --cond to node inspect probe mode
445bcce0
doc: update a Dispatcher undici doc link
d54fd03f
src: zero-initialize cap_data in node_credentials.cc
06b3441e
doc: document net Socket server property
8fe58078
stream: use the ring buffer for WHATWG stream request queues
0ddfc6af
events: avoid retaining removed event names
e8c153f3
test: update WPT for WebCryptoAPI to ec2fee39a4
73bf0f07
test: update WPT for urlpattern to 5847ee5cfa
6da6ca73
deps: update googletest to 8240fa7d62f73e01c7af27d61ed965d6d66698fa
2b8f1f27
test: fix stale async-context-frame status entries
99b7382c
lib,tools: add `node-core/func-name-matching` lint rule
6b09d30a
doc,test: widen fsPromises.appendFile()'s data type, add missing tests
50791fa8
doc: fix typo in tls.md
0544ec1c
doc: clarify PEM format for signing keys
71343b28
stream: simplify nested `PromisePrototypeThen`s
262e6545
test: copyedit `test-tls-psk-alpn-callback-exception-handling`
14b710c4
doc: fix spelling in devcontainer guide
dada3ae6
net: support sync connect for BoundSocket
f6bf3f8a
stream: reject push iterator.throw() with error
0ab8f269
stream: validate writer options signal
2a3babb8
fs: fix cp symlink and EEXIST handling on Windows
63321eeb
stream: fold desired-size check into WHATWG backpressure update
de4ca2c9
quic: add support for TLS certificate compression
50e639b5
tools: reference 'git node land' in PR-URL: error message in merge.sh
d66b7588
doc: document TLS alpnProtocol and servername fields
cbc2bed4
src: fix comment typos
3650fabc
quic: preserve session stats after close
7cb30999
lib: use `assignFunctionName` util where it makes sense
9ce72fd6
doc: fix typos in contributing docs
fab3f56a
test: keep finalization before-exit ref alive
da8508c5
path: add benchmarks for path.matchesGlob()
224d2c78
fs: add pattern cache for matchGlobPattern()
e5af0223
doc: fix typo in embedding.md
329a2884
http2: don't throw when destroying socket proxy
b075b334
assert,util: fix TypeError on Maps with null keys
1822c0f3
test: apply correction to comment
a5ce44dd
timers: do not retain a reference to the async store after firing
e5278b7f
cli: style node --help output with util.styleText
fe8fa45f
doc: note --env-file is not applied to --run
52072319
meta: lower stale to 3 months
2b43b78e
doc: replace large tables in crypto.md and webcrypto.md with lists
4b2c1893
doc: fix socket.readyState state descriptions
bced1433
stream: fix drop-newest behavior in share()
d77788ea
deps: update timezone to 2026c
1e034e6e
zlib: reject truncated zstd input
0ee91ead
doc: update sea example by fixing wrong code example
634afda9
doc: mention crypto.hash() for better perf
c879f912
doc: fix import.meta example for vm.SourceTextModule
2a2effad
doc: use promote wording in release guide
81258098
src: avoid redundant DataPointer reallocations
308a589e
doc: add MikeMcC399 as collaborator
4a158cf1
stream: remove custom `CloneableDOMException` implementation
e2b32fce
doc: fix typo in releases guide
9c228b32
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&s=60)
tools: bump brace-expansion from 5.0.6 to 5.0.7 in /tools/eslint
6e10012c
doc: fix dnsPromises.lookup verbatim default
ee593cad
test: fix flaky http2 socket proxy test
eee0e845
stream: skip null output from stateful transforms
136d4e76
stream: use RangeError for broadcast overflow
ed5b0402
stream: abort pending single-source merge reads
8accb0c4
deps: update amaro to 1.1.11
e75bdb9b
deps: update histogram to 0.11.10
e3fa0584
deps: histogram: cherry-pick 62ea52b07ee9b195
bc7ce488
deps: update googletest to fa005b296f90faec4f352d7ab382287bf6548c8d
3833fcef
http2: reduce per-request allocations
157bd07b
http2: avoid per-write closures in kWriteGeneric
f11ac0da
http2: avoid copying the options in respond()
af3a17e0
zlib: accept ArrayBuffer dictionary in Zstd
1f1adc89
diagnostics_channel: grow native channel storage
6d60fce1
sqlite: fix use-after-free in Exec() and ApplyChangeset()
f9126923
http: propagate highWaterMark to ClientRequest OutgoingMessage
f24177cc
zlib: validate pledgedSrcSize as a safe integer
e599b942
doc: run license-builder
8a971a09
src: fix libuv assertion on windows
05ec9c47
src: avoid using ToLocalChecked in crypto_hash
f58ac822
readline: reduce createInterface overhead
ea82bc41
net: support AF_UNIX paths in net.BoundSocket
1216481a
net: support TCP handle transfer on Windows
9040b086
debugger: preserve overlapping CDP request state
1329d9b9
doc: deprecation add more codemod
30c99bf0
doc: update technical priorities
1c9d354d
v8: report minor mark-sweep in GCProfiler
bf867411
src: fix crash when writing odd-length hex string via Writev
37085f85
crypto: use user-facing error for output encoding changes
c0dd0220
buffer: validate copyArrayBuffer offsets against buffer length
74a22cd0
loader: enforce path normalization before lookup
d7d4f0e2
sqlite: fix crash when a session outlives its database
c2a52514
stream: fix uncatchable error closing half-open Duplex.toWeb() writable
b20217cb
test: mark test-repl-user-error-handler as flaky
087d9e8d
test_runner: convert to uint during deserialization
9ed71468
doc: mention constructor check in deepStrictEqual
2e0f36a8
quic: serialize stream reset code as string
6386540d
meta: add @nodejs/url as codeowner for node_url_pattern.*
d9b2ee40
typings: remove isDataView from types binding
ae93bc8a
url: create URLPattern result properties in WebIDL order
c00bd142
deps: update sqlite to 3.53.4
9209cc40
doc: add MDN links for explicit resource management in fs
2de1d76d
doc: stabilize --disable-warning
093098ad
buffer: use Clamp conversion in Blob slice
465f2bfb
benchmark: fix calibrate-n option handling
ba2612cc
test_runner: wait for filtered suite build
8ec80b31
lib: fix typo in comment in _http_client.js
d8fac094
test: cover worker throwing primitive values
539f5dc8
lib: fix AbortSignal.any() observed-composite leak
06b54fe7
async_hooks: use validateBoolean for trackPromises
984260bf
tools: use 'readonly' for EventSource global
f8a13811
deps: update ada to 4.0.0
7b1898a3
test: update WPT for url to b63305b743
7264efb2
doc: clarify tlsSocket.authorized on resumption
b03bd3a8
http: guard invalid timeout values in checkConnections
14cb8b0a
doc: report proper return type on url.format
108b883d
permission: support v8.setHeapSnapshotNearHeapLimit
9f9a9603
fs: key glob matcher cache by platform
12f7fc05
wasm: register missing SetURL function
9016ddab
sqlite: check database state before calling SQLite
6abd00ed
doc: remove obsolete cctest node.gyp instructions
205d4d04
quic: fix segfault after fragmented client hello
b4ecb304
test: update WPT for url to 4832db4761
d80a45fd
stream: use the ring buffer for pending BYOB pull-into descriptors
8aba4753
deps: V8: backport 5177b10891e6
7c534bf8
stream: use validateString for consumer encoding
59ef1789
typings: add heap_utils internalBinding types
e88d5b78
quic: fix coverage comment typo
7aab0c31
doc: fix duplicated word in test snapshot docs
dc303793
stream: honor AbortSignal in Writer.end()
486cff4c
doc: add contributing detail for git Signed-off-by trailer
995141eb
crypto: update root certificates to NSS 3.125
1fefdda1
doc: document stream.isDestroyed()
72ee03bd
deps: update zlib to 1.3.2.1-motley-42c2f19
51090925
stream: skip zero-byte broadcast writes
fc80ff5f
doc: improve TestContext hook descriptions
d5627162
build,tools: fix shared library cross-compile
4a425b41
tools: bump brace-expansion from 5.0.7 to 5.0.9 in /tools/eslint
5460c464
crypto: fix Argon2 bypassing FIPS mode
ba27e72f
doc: fix typos in documentation
f2cd6df3
tls: fix SNICallback certificate selection
e277bc46
doc: add RafaelGSS as last security release stewards
f4e42780
doc: fix typo in maintaining-dependencies.md
b54aa83c
http: avoid aborting IncomingMessage signal on normal close
ee54d9d4
test: unflake debugger and REPL tests
42a967d7
meta: bump ossf/scorecard-action from 2.4.3 to 2.4.4
4ad2afbf
meta: bump step-security/harden-runner from 2.19.4 to 2.20.0
a0a33127
meta: bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.3
3ef3f934
tools: bump the eslint group in /tools/eslint with 4 updates
b50139e8
meta: bump Mozilla-Actions/sccache-action from 0.0.10 to 0.0.11
9138f589
meta: bump github/codeql-action/init from 4.36.2 to 4.37.3
6ab71127
meta: bump actions/setup-python from 6.3.0 to 7.0.0
31489325
meta: bump github/codeql-action/autobuild from 4.36.2 to 4.37.3
c90fa82c
meta: bump github/codeql-action/analyze from 4.36.2 to 4.37.3
26fa9cc3
meta: bump actions/stale from 10.3.0 to 11.0.0
cf425ad9
sqlite: invalidate sessions when closing database
90a8b23d
doc: remove references to `ca`/`crl` as per-context QuicSession options
7f9efeb4
deps: update nghttp2 to 1.70.0
40561e61
deps: update googletest to 1b6f64d659944658a4c685b7bd9f04c1c3b8a39b
5c423aa1
deps: update acorn to 8.18.0
7a4960d6
deps: update simdjson to 4.6.6
21f79ce1
deps: update minimatch to 10.2.6
51d41315
deps: update googletest to 1b6f64d659944658a4c685b7bd9f04c1c3b8a39b
5c423aa1
deps: update acorn to 8.18.0
7a4960d6
doc: fix grammar and editorial issues in addons documentation
331e5e8f
deps: update nghttp3 to 1.18.0
d5a57ed4
deps: upgrade npm to 11.19.0
c4e02f0f
doc: fix grammar and punctuation in dgram documentation
c7a04401
crypto: split OpenSSL 3, BoringSSL, and legacy backends
0290e0a6
crypto: limit KangarooTwelveParams customization to 512 bytes
24a1be58
crypto: retain legacy DH validation
b72c0b96
crypto: handle incomplete RSA private keys
a5d4ac82
crypto: cleanse provider private key copies
49f2ae20
crypto: preserve RSA-PSS legacy pubkey DER
b65a8f38
crypto: handle DH operation failures
be823724
crypto: initialize KeyObjectData mutex eagerly
edc1f212
crypto: fix Argon2 validation errors
c2c53a18
crypto: validate key generation options
44c14733
crypto: reuse X509 issuer result
33fec91b
crypto: clarify missing cipher error
fea0666a
src: avoid redundant KEM encapsulation copies
4afc15bf
src: implement MemoryRetainer protocol for ByteSource
782ad5d5
crypto: handle XOF output allocation failure
74b30235
crypto: preserve OpenSSL errors from KDF failures
3cd1576c
doc: add throwIfNoEntry version history to fs.stat
2e78e4b1
doc: fix guaranteed typo
8cefc6ef
test: ensure assertions are reached on all tests
e59346b7
quic: fix stop sending behaviour & callback
8a008721
deps: update ngtcp2 to 1.25.0
f0fc82d4
stream: cut per-chunk allocations in pipeTo
b1596c2b
wasm: enable JSPI
d937c8c6
esm: print required top-level await locations without evaluating
d2b02e44
esm: improve ERR_REQUIRE_ASYNC_MODULE
9e39360a
build: update binary-upload to use correct tarball name
e2e5c4fe
deps: V8: backport d259a9e2ead7
82a02336
src,permission: add --permission-audit
cd1eb3e6
lib,permission: add permission.drop
d4cafce0
lib,permission: fix addon permission drop
c40d1473
src,permission: do not throw on denied access in audit mode
d53d582b
doc: document --permission-audit audit mode behavior
30ae8ab0
permission: add unique warning codes
980c651d
async_hooks: add using scopes to AsyncLocalStorage
b12bcc9a
build,test: add tests for binary linked with shared libnode
e83648ef
test: split test-embedding.js and run tests in parallel
11d1bd3b
2026-08-26, Version 24.20.0 'Krypton' (LTS)
71b8b174
aduh95
approved these changes
on 2026-08-26
Login to write a write a comment.
Login via GitHub