2026-10-14, Version 24.22.0 'Krypton' (LTS) #66667
richardlau
merged
340 commits into
v24.x
from
v24.22.0-proposal
crypto: optimize key slot caching
c63aa331
crypto: harden X509Certificate state
9adc87bc
fs: fix rmSync error messages for non-ASCII paths
b71c4c05
quic: release stream arenas before cleanup
54683374
crypto: correct CCM decryption FIPS error message
79509c25
permission: block FileHandle fsync and fdatasync
847fe4d0
crypto: fix private SPKI export error
b6d7ed37
util: canonicalize namespaced tags in inspect()
212f6c6c
src: report libuv error when openAsBlob cannot stat
e3f52b80
events: fix weak listener retention overwrite
f6b47938
http: coalesce chunked writes during auto-corking
742b4bf5
typings: add encodeIntoResults to EncodingBinding
f67ed991
benchmark: add --analyze option to benchmark/scatter.js
e0c7ba8a
build: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage
676e15c0
benchmark: fix max-regressions detection in compare.js
10b1a0f7
crypto: fix public PKCS8 export error
191ebfb2
quic: remove unused fin flag from blob reader wakeup
024bef25
src: reuse cached strings in CompileSerializeMain
49232db7
stream: fix early drain after Utf8Stream reopen
47b3f6a1
src: add re-entrancy guard to TriggerUncaughtException
33b8d6e1
fs: fix recursive watch error handling
ba5ca5a1
test: update streams WPT
f3b9f132
fs: preserve directory timestamps in cp
7804bfbd
fs: watch directories, not files, in recursive fs.watch fallback
ac4cf542
fs: do not descend into symlinks for ** unless following symlinks
dd5662e6
src: apply IsolateSettings when using a snapshot
61ca3ba9
test: fix recursive fs.watch error fixture
ba65bb14
tls: read the peer certificate chain without consuming it
ffd3de28
test: update WPT for url to c23755a144
a28aad99
url: align URLPatternInit dictionary conversion with WebIDL
6345c6d2
net: recognize bare IPv6 loopback addresses in isLoopback
cd04cb10
src: fix live lock between environments with blocked requests
b282765d
node-api: make object property arrays const
d9839426
stream: fixup cancelation handling in pull()
748adc62
stream: ensure iterator cleanup on done, reject, etc
21307380
stream: fixup writer to terminate on consumer return/throw
f499d6fa
stream: ensure full-close semantics when closed
1e215c4b
stream: fix merge settlement tagging and falsy error tracking
24d87990
stream: cancel active stream/iter pulls
9c22c412
stream: replace object sentinel with symbol
6952928f
stream: address stream/iter review feedback
80568f68
perf_hooks: add missing resource timing attributes
127cb318
lib: defer source map payload decoding until first use
c2bb3aec
src: fix startup snapshot reproducibility of InternalFieldInfo
2203ac93
sqlite: run backup completion in callback scope
b7b18fdb
fs: apply nocase to literal glob exclude patterns
bc431c84
fs: handle recursive watch setup races
1dfb0472
net: fix BlockList.fromJSON for IPv4-mapped IPv6 rules
466f1f8e
https: limit proxy CONNECT response headers
536ccc7d
perf_hooks: implement Histogram meanCI API
75456a35
typings: add types for performance binding
b23928a1
errors: validate constructor name
c65fafea
stream: avoid per-chunk promises in webstream adapters
d535859c
http: fast-forward teardown of unread messages
96d4c23f
stream: skip unobserved 'readable' emission at EOF
38829295
test: zero-fill buffers before the string length limit check
f2af511a
stream: ensure factory signals remain active through closing
a082916c
stream: ensure async dispoal after endSync awaits for drain
6d8e643e
stream: pre-aborted pipeTo now applies dest failure handling
d7d0440f
stream: make pipeTo source normalization independent of Writer
49ee85b4
stream: apply source normalization once at call time
fd68d5ca
stream: ensure from() observes returned rejecting promise correctly
2e54186d
stream: fix nested async flushing with infinite sources
4b290519
stream: ensure that stateful transforms preserve this
02c776a7
quic: stop guarding ngtcp2_recv_stop_sending callback field
97516fc2
build: enable the V8 sandbox in shared-cage builds
4b23a447
fs: give directories created by cpSync the source directory's mode
d659dd8c
build: allow linking shared dependencies in the GN build
c280d650
http2: fix write deadlock exposed by larger window sizes
d520b960
deps: update zlib to 1.3.2.1-motley-285e94b
c47feb09
deps: update simdjson to 4.6.11
8a5b1257
deps: update googletest to 283c17563fe7a1111cd7f581aa5d541e8baeff2f
4396c9bf
crypto: improve SubtleCrypto.supports() accuracy
5a46a9ac
crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs
51aad5a8
crypto: discover hashes from OpenSSL providers
c2f1e829
crypto: discover ciphers from OpenSSL providers
a4ab3d84
crypto: fix RSA-PSS oversized salt handling
ec7819db
crypto: validate JWK usages before key_ops
2b62aafd
crypto: add a generic MAC API
c162c68f
sqlite: add StatementSync.prototype[Symbol.dispose]()
adbc757d
sqlite: add StatementSync.prototype.close()
41161dda
sqlite: reject connection access from authorizer callbacks
be849bc6
sqlite: add diagnostic channel
f58a55b8
crypto: add FIPS indicator diagnostics channel
db6ea132
crypto: add strict mode to --force-fips
c61953eb
crypto: cache valid ECDH key pairs
022ac835
crypto: fix multi-prime RSA JWKs
db8a9162
crypto: add mgf1Hash for RSA-OAEP
e4d916f1
http2: error for incomplete reads on RST, auto-drain, deprecate aborted
99e41eb4
test: update WPT WebCrypto, WebIDL and interfaces
22f47ff7
src: keep global list of addon-provided cleanup hooks
abe1b673
src: fix use-after-free in CleanupHookThunkRun
5570a840
test: fix flaky cleanup in http2 test
aed73444
src: stop leaking a CppHeap in CommonEnvironmentSetup
7331f5cf
stream: allocate stream read buffers from a slab
0f0566de
stream: create write request objects lazily
6262e0b8
build: fix quiet default for make builds
7a2f3229
inspector: fix crash when the IsolateData has no platform
843a2778
src: fix null pointer call when running without a startup snapshot
a3ababce
quic: reject zero addressLRUSize
98486dd7
doc: note that FreeEnvironment() runs a shared event loop
c8ac9169
typings: add timeoutInfo to TimersBinding
ac37bbe1
fs: support removing read-only files in rmSync on Windows
cd101145
crypto: validate the limit of PBKDF2 iterations
f4665f1c
net: support sending net.BoundSocket to threads and child processes
a7f8de63
typings: add task_queue internal binding types
55db777a
lib: optimize internal Web IDL dictionaries
230a7fce
meta: add web-standards as webidl owners
593b40eb
tools: apply feedback to and simplify contributor guidance workflow
c97d09cb
stream: amortize writable buffer compaction
faa16f67
doc: add DOMException section to errors API reference
7bf048a3
quic: fix crash in onStreamClose
ee80beaa
zlib: improve zstd decoding across chunk boundaries
d7e7308c
doc: qualify directory read ordering for native fs
6076111e
tools: unlabel author ready on base branch conflicts
ab3c2a81
path: remove `StringPrototypeCharCodeAt` from some methods of `posix`
cc124394
tools: lint PR commit messages without approval
ff25d0a2
doc: document windowsHide for child_process.fork
c2620d01
lib: avoid unsafe array iteration in cli table
60a9a282
buffer: fix unaligned UTF-16LE decoding
fa912242
doc: add inoway46 as triager
9f88c6f8
test: try fixing windows build replacing WMIC
e04210b3
tools: fix commit queue error summary matching
a1649b36
crypto: read EC curve metadata directly
684008be
crypto: export EC JWK coordinates directly
ee956ae3
crypto: avoid EC raw export reconstruction
5b592b77
crypto: avoid EC reconstruction for signature sizing
80a6ad50
test: skip C++ symbols in tick-processor-arguments
0b6d945e
src: fix Stop() terminating the next Environment on the isolate
3c814e8c
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&s=60)
tools: bump js-yaml from 4.3.1 to 4.3.2 in /tools/lint-md
9a1d47bc
tools: bump js-yaml from 4.3.1 to 4.3.2 in /tools/eslint
1cb899f7
zlib: fix zstd reset
de1074d5
doc: fill in missing zstd docs
2e1772a8
zlib: reject invalid zstd dictionaries
b44c0722
src: keep the first snapshot blob alive for later isolates
64649abf
tls: defer re-entrant calls to SSL state machine from JS
21aec3f2
test: deflake node-api test-free-called
4c702e40
fs: throw on existing dir in cpSync with errorOnExist
f3019b52
url: add Symbol.toStringTag to URLPattern
54d77431
src: don't kill own process group on failed spawn
70117640
stream: fix ERR_INVALID_STATE when cancelling Readable.toWeb()
f8737b8e
stream: reject closed only after sink abort settles
70c14156
lib: fix for FileHandle.readableWebStream
01032f4f
perf_hooks: validate import normalization offset
9cfbfae6
stream: keep webstream stream states in fast-mode objects
3216bc39
stream: avoid promise allocation for parked transform writes
bbb00558
meta: expand on collaborator restoration process
aa549fed
meta: add joyeecheung as v8 currency strategic initiative champion
eff5d150
assert: fix TypeError on deepStrictEqual with null Map key or Set member
e6832b2c
test_runner: fix quote escaping in JUnit
b3766225
test: close WebAssembly test HTTP servers
2bde6839
tools: reduce test runner timing overhead
f5edf1cd
test: avoid idle HTTP/HTTPS connections
62529057
test: synchronize ordered runner events
c7323843
test: skip retries in DNS timeout coverage
384d4fe3
test: collect timeout signals explicitly
b29154d4
test: unref cancelled broadcast source timer
bfdf2072
test: overlap SLH-DSA signature checks
a578933d
benchmark: add --csv option to compare.js with --analyze
a079177d
test: improve sequential test performance
13a29820
test_runner: avoid reusing v8 serializers
b4b85931
http2: fix onread assert when destroying session from stream handler
9a2f77a3
doc: clarify permission model scope for output paths
ffd47a7e
perf_hooks: reuse buffer for uv metrics
8aa87094
tools: pass author to commit message validator
0a9e8448
test: fix stderr Buffer assertion in exec encoding test
b8c5283c
tools: make checkout credential use explicit
d55d3031
tools: correct Slack action version comments
bfa329db
doc: clarify QUIC async write backpressure
160d44e0
deps: update googletest to 8eff9e336692fc95961e096564f1044c600b881d
2faca508
test: prevent parser reuse across close scenarios
33775d2b
lib: fix AbortSignal.any() abort propagation
7ae08555
inspector: fix abort when two Environments own the inspector
fe614783
doc: note that default signal handling resets the signal mask
67cb305b
http: don't destroy socket after request completes
53b47008
src,lib: add util.markPromiseAsHandled
241339f0
test: implement low-risk test optimizations
047d7c53
perf_hooks: implement qrde analysis support in Histogram
6b3e6f9d
perf_hooks: implement SlidingWindowHistogram
60c3eb61
test: expand histogram test coverage
b4a6719f
util: implement debounce
a3bbb5a2
util: implement util.throttle
63b0974d
test: deflake util.throttle tests
1019f624
http2: settle pending write callbacks on destroy
89211081
crypto: optimize and benchmark key preparation
253784f0
src: print exception thrown during primordial initialization
0f62f2b2
tls: propagate singleUse to the secure context
ec37f934
stream: update broadcast to retain buffered data with zero consumers
d1c60d89
stream: make share budget failures detach before throwing
5f06defd
doc: remove obsolete mentioning of cl.exe on windows
d319fa7d
build: derive V8_LOGGING_LEVEL from dcheck_always_on
94e12139
test: unskip `test-watch-create-isolation-none`
0f27bd24
tools: update pgo build doc for linux
d004d957
meta: bump github/codeql-action/autobuild from 4.37.9 to 4.38.0
2428b13b
meta: bump github/codeql-action/analyze from 4.37.9 to 4.38.0
b3c5c2b9
meta: bump github/codeql-action/init from 4.37.9 to 4.38.0
9c2abc13
tools: bump the eslint group in /tools/eslint with 6 updates
499fe73d
sqlite: throw on invalid URL path instead of abort
a794e369
stream: destroy Duplex.from async function on early return
1260642a
fs: coerce FileHandle.read length like fs.read
a27db42c
meta: bump github/codeql-action/analyze from 4.37.9 to 4.38.0
b3c5c2b9
sqlite: throw on invalid URL path instead of abort
a794e369
doc: clarify sub-1000ms behavior in socket.setKeepAlive
b6538138
build: suppress OpenSSL asm warnings with clang
a6bd0c14
quic: fix two small bugs in HTTP/3 stream internals
fa9188bd
tools: summarize auto-start-ci failures
b2252b40
tools: group CodeQL GHA updates
7a481ebd
doc: fix duplicate 'the' typo in `node_platform.cc`
0a4a8d60
meta: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0
693e890f
meta: bump step-security/harden-runner from 2.21.0 to 2.21.1
b351ac9c
doc: add araujogui to collaborators
d11c65d2
test: deflake test-run-watch-cwd-isolation-none-*
dc6b9ba5
trace_events: fix abort when Node.js does not own the V8 platform
ebc028d7
tools: bump eslint-plugin-jsdoc in /tools/eslint in the eslint group
aafff27e
crypto: read RSA-PSS restrictions from provider
e198aa0f
tools: update `tools/v8` for Python 3.13
c555ba0a
test: update tests to run with OpenSSL >= 3.0 FIPS mode
810a6b00
crypto: disable non-FIPS WebCrypto paths in FIPS mode
c2ec40c2
lib: use Web IDL interface brand checks
e7907130
lib: fix shared buffer growability validation
0039479b
lib: avoid repeat internal receiver checks
3f0b6d33
crypto: optimize private EC JWK import
5c51129e
test: use named parameters in DH stress test
a0fd0a8b
test: reuse fixed primes in DH tests
d9f4a3ee
test: fix RSA/DSA wrong-passphrase flake
61a73d31
crypto: add Hybrid KEMs to Web Cryptography
8e631aa4
test,benchmark: use OpenSSL feature helpers
cb93d405
doc,test: account for OpenSSL 4.1 behaviours
e7ed4361
crypto: add crypto.parsePKCS12()
ddbf974b
crypto: use names for asymmetric key algorithms
a4effe68
test: deflake user timing WPT assertions
612db6d5
crypto: derive keys through EVP_KDF
56c16b2f
crypto: decode PKCS#1 keys through providers
50ffed19
crypto: fetch ciphers for private-key encoding
764e0d11
crypto: use provider EC group names
8feccc5e
crypto: skip private RSA parameters in key details
ef957ac8
test: consolidate crypto provider cache coverage
95d9a25b
crypto: remove redundent `std::move` call
13987f44
deps: V8: backport 0b94a9fd23ba
fb0d0ca2
test: skip RSA-PSS keygen deprecation tests with BoringSSL
6dab5412
build,src: gate jspi flag on V8_ENABLE_WEBASSEMBLY
249e9a16
src: list scripts when `--run` has no command
13ed7e35
src: detach cppgc wrappers from their Realm before it is freed
83b3431c
deps: V8: backport 8901c793e439
9ce8ef40
deps: V8: backport c3553509f460
ba09b534
deps: V8: cherry-pick ea9c016f26ad
b8db0045
aduh95
approved these changes
on 2026-10-13
richardlau
approved these changes
on 2026-10-13
2026-10-14, Version 24.22.0 'Krypton' (LTS)
f14cd3aa
richardlau
approved these changes
on 2026-10-13
Login to write a write a comment.
Login via GitHub