Update Node.js to v26.7.0 - #48
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
26.6.0β26.7.0Release Notes
nodejs/node (node)
v26.7.0: 2026-08-05, Version 26.7.0 (Current), @βaduh95Compare Source
Notable Changes
58717685a1] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #β6394944b940ee8c] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #β64746c1e4f7365e] - (SEMVER-MINOR) lib: add perfetto support (Chengzhong Wu) #β6456511c2f9c642] - (SEMVER-MINOR) module: implementSymbol.disposeinModuleHooks(Remco Haszing) #β63928a646319f61] - (SEMVER-MINOR) test_runner: add support for--test-coverage-include-all(avivkeller) #β64830Commits
a2d3f891d3] - async_hooks: use validateBoolean for trackPromises (Soul Lee) #β64731d7266cdd99] - benchmark: fix calibrate-n option handling (Luan Muniz) #β641462e64293e3f] - buffer: use Clamp conversion in Blob slice (Donghoon Kang) #β647395fda0958bd] - buffer: validate copyArrayBuffer offsets against buffer length (Ilia Alshanetsky) #β639045298db40f9] - build: run perfetto build and test on GHA (Chengzhong Wu) #β64721e3eac7cef9] - build: fix v8_use_perfetto source scraping (Chengzhong Wu) #β64721ab5f076d7f] - build: bump rustc requirement to >=1.86 (Renegade334) #β64543df608e061f] - (SEMVER-MINOR) build: perfetto-sdk (Chengzhong Wu) #β6456574928adc46] - build,tools: fix shared library cross-compile (Kirill Saied) #β6396358717685a1] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #β6394958d13b6f3d] - crypto: preserve OpenSSL errors from KDF failures (Filip Skokan) #β64776478a719cb5] - crypto: fix Argon2 bypassing FIPS mode (Filip Skokan) #β6477644b940ee8c] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #β64746fde85237c7] - crypto: clarify missing cipher error (Filip Skokan) #β64852c604d8846d] - crypto: reuse X509 issuer result (Filip Skokan) #β64852c68c7d0112] - crypto: validate key generation options (Filip Skokan) #β64852c36bb1d017] - crypto: fix Argon2 validation errors (Filip Skokan) #β64852f61408bb27] - crypto: handle XOF output allocation failure (Filip Skokan) #β648512b4053d046] - crypto: initialize KeyObjectData mutex eagerly (Filip Skokan) #β648514b7b2adf44] - crypto: handle DH operation failures (Filip Skokan) #β6485112170c3753] - crypto: use user-facing error for output encoding changes (Archkon) #β64692474f06d550] - debugger: preserve overlapping CDP request state (Trivikram Kamat) #β64467718cbe9497] - deps: upgrade npm to 11.19.0 (npm team) #β64883657c6154b3] - deps: update ngtcp2 to 1.25.0 (Node.js GitHub Bot) #β6494475a1fbeff9] - deps: update nghttp3 to 1.18.0 (Node.js GitHub Bot) #β6494307d7cb7cd8] - deps: update minimatch to 10.2.6 (Node.js GitHub Bot) #β64945f7d56359f1] - deps: update simdjson to 4.6.6 (Node.js GitHub Bot) #β649428b06457cfb] - deps: update acorn to 8.18.0 (Node.js GitHub Bot) #β649415919d01525] - deps: update googletest to1b6f64d(Node.js GitHub Bot) #β649404a87ad6cff] - deps: update nghttp2 to 1.70.0 (Node.js GitHub Bot) #β64939c96d76a7c8] - deps: update zlib to 1.3.2.1-motley-42c2f19 (Node.js GitHub Bot) #β647442b59984c0f] - deps: V8: backport5177b10(avivkeller) #β64631b839af91da] - deps: update ada to 4.0.0 (Node.js GitHub Bot) #β6479070dedef942] - deps: update sqlite to 3.53.4 (Node.js GitHub Bot) #β647457bc4c171f5] - deps: update Rust crates for V8 14.6.202.34-node.26 (Renegade334) #β64543308c6b2ac3] - deps: V8: backport7d9b7e0(Manish Goregaokar) #β645438eeae28e88] - deps: V8: backportc4d06ba(liujiahui) #β63731bbd6fc58c4] - diagnostics_channel: grow native channel storage (Stephen Belanger) #β64497ce8b292955] - doc: fix grammar and punctuation in dgram documentation (Kamal Rawal) #β649571a413a60cf] - doc: fix grammar and editorial issues in addons documentation (Kamal Rawal) #β6495263fbd59e64] - doc: formalize fn/name as part of TestOptions API (Christopher Hiller) #β64946b263b0bca1] - doc: remove references toca/crlas per-context QuicSession options (RenΓ©) #β64769f37de14b27] - doc: fix typo in maintaining-dependencies.md (greenhead) #β6489616cb77cdc8] - doc: add RafaelGSS as last security release stewards (Rafael Gonzaga) #β64843335c28cd17] - doc: fix typos in documentation (greenhead) #β64900d4bed8ca39] - doc: fix missing references in doc type map (Tim Perry) #β64872e71d09d5f1] - doc: improve TestContext hook descriptions (Kamal Rawal) #β648997089bd9ae4] - doc: add missing float32/float64 FFI type names (Soul Lee) #β648748d3ae0830e] - doc: document stream.isDestroyed() (YspritanHyzygy) #β64789a757e62af7] - doc: add contributing detail for git Signed-off-by trailer (Mike McCready) #β648623e840f43ed] - doc: mark config-file as release candidate (Marco Ippolito) #β6451670cd5df810] - doc: fix duplicated word in test snapshot docs (Kamal Rawal) #β64837d5f36c7adc] - doc: remove obsolete cctest node.gyp instructions (Soul Lee) #β64814a0bf29ea09] - doc: report proper return type on url.format (Brian Muenzenmeyer) #β64806e655e42085] - doc: use ffi.suffix for library paths in examples (Junsoo Ha) #β64805e0f0830dbc] - doc: document --permission-audit audit mode behavior (AdriΓ‘n Estrada) #β64791efbede6de0] - doc: clarify tlsSocket.authorized on resumption (soreavis) #β64584db95655c4a] - doc: stabilize --disable-warning (Jean Michelet) #β64742a8367200be] - doc: add MDN links for explicit resource management in fs (lluisemper) #β595571c09165c2e] - doc: mention constructor check in deepStrictEqual (Sumit Kumar Das) #β6201029709324e0] - doc: update technical priorities (Jacob Smith) #β64505522a28e648] - doc: deprecation add more codemod (Augustin Mauroy) #β63175c40aaa6539] - doc: run license-builder (Node.js GitHub Bot) #β63918428e9bc50f] - ffi: fix crash in refCallback and unrefCallback (Trivikram Kamat) #β6488133912103e7] - ffi: reject fast calls after library close (Trivikram Kamat) #β64860b348ed7f92] - ffi: validate fast 32-bit integer argument ranges (Trivikram Kamat) #β6469148f4cfb480] - ffi: fix optimized buffer conversions (Trivikram Kamat) #β64639109ffcd4f3] - ffi: preserve link register in ppc64 trampoline (Trivikram Kamat) #β64792aa3f168b31] - ffi: preserve strings during reentrant calls (Trivikram Kamat) #β64551ca60942f38] - ffi: preserve uint8 semantics for bool fast calls (Trivikram Kamat) #β645270fb1d2bd65] - ffi: validate fast integer argument ranges (Trivikram Kamat) #β64614b250b40b30] - fs: key glob matcher cache by platform (Archkon) #β64571e26891ec6a] - http: fix writableFinished and 'finish' after write errors (Tim Perry) #β64847dfc192fdfb] - http: avoid aborting IncomingMessage signal on normal close (Archkon) #β643926794441c85] - http: guard invalid timeout values in checkConnections (Efe Karasakal) #β645066879aa4aa8] - http: propagate highWaterMark to ClientRequest OutgoingMessage (trivenay) #β6465372448a82f4] - http2: avoid copying the options in respond() (Matteo Collina) #β64265f6692da576] - http2: avoid per-write closures in kWriteGeneric (Matteo Collina) #β642653ed37153f8] - http2: reduce per-request allocations (Matteo Collina) #β64265bce92debba] - Revert "http2: avoid per-write closures in kWriteGeneric" (Antoine du Hamel) #β64663b5d5dd74a1] - Revert "http2: avoid copying the options in respond()" (Antoine du Hamel) #β6466319b9c14d60] - lib: fix AbortSignal.any() observed-composite leak (Paul Bouchon) #β64481d3cada57c2] - lib: fix typo in comment in _http_client.js (agape1225) #β64729c1e4f7365e] - (SEMVER-MINOR) lib: add perfetto support (Chengzhong Wu) #β645656c2157522d] - loader: enforce path normalization before lookup (MaΓ«l Nison) #β6391731522c41a7] - meta: bump actions/stale from 10.3.0 to 11.0.0 (dependabot[bot]) #β6493588c8b8ef54] - meta: bump github/codeql-action/analyze from 4.36.2 to 4.37.3 (dependabot[bot]) #β649349dcd759a84] - meta: bump github/codeql-action/autobuild from 4.36.2 to 4.37.3 (dependabot[bot]) #β6493382ca02db3c] - meta: bump actions/setup-python from 6.3.0 to 7.0.0 (dependabot[bot]) #β64932848e2287f2] - meta: bump github/codeql-action/init from 4.36.2 to 4.37.3 (dependabot[bot]) #β64931ae8ad3b17b] - meta: bump Mozilla-Actions/sccache-action from 0.0.10 to 0.0.11 (dependabot[bot]) #β649300b359cfa4c] - meta: bump cachix/install-nix-action from 31.10.6 to 31.11.0 (dependabot[bot]) #β649293b4f980f4c] - meta: bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.3 (dependabot[bot]) #β64927d7ee9e9ea7] - meta: bump step-security/harden-runner from 2.19.4 to 2.20.0 (dependabot[bot]) #β649267e80bbaaa9] - meta: bump ossf/scorecard-action from 2.4.3 to 2.4.4 (dependabot[bot]) #β64925915cabbfcf] - meta: remove node_crates .gitignore (RenΓ©) #β647798e03c54347] - meta: add @βnodejs/url as codeowner for node_url_pattern.* (Efe Karasakal) #β6473711c2f9c642] - (SEMVER-MINOR) module: implement Symbol.dispose in ModuleHooks (Remco Haszing) #β63928fffd8a76d0] - net: support TCP handle transfer on Windows (Matteo Collina) #β64460fe9e0dbdc2] - net: support AF_UNIX paths in net.BoundSocket (Guy Bedford) #β64399eb61b7ee1e] - permission: add unique warning codes (David Evans) #β64414999a928822] - permission: support v8.setHeapSnapshotNearHeapLimit (Ilyas Shabi) #β648087de3d095b6] - quic: fix stop sending behaviour & callback (Tim Perry) #β647106289398bb2] - quic: fix coverage comment typo (Jungwon Sohn) #β6448601510dc759] - quic: fix segfault after fragmented client hello (Tim Perry) #β64720dcc348af97] - quic: serialize stream reset code as string (νλ§μ±) #β64577c25b8e3331] - readline: reduce createInterface overhead (Matteo Collina) #β6458514e802d1cd] - sqlite: invalidate sessions when closing database (Trivikram Kamat) #β64783279547b7da] - sqlite: check database state before calling SQLite (Trivikram Kamat) #β64812bb86521a42] - sqlite: fix crash when a session outlives its database (Mohamed Sayed) #β63797870f4997e7] - sqlite: fix use-after-free in Exec() and ApplyChangeset() (Matteo Collina) #β64535a8ec5a9df7] - src: fix perfetto build on GetTraceFilePath (Chengzhong Wu) #β647216cd643acaa] - src: implement MemoryRetainer protocol for ByteSource (Filip Skokan) #β646608725e56928] - src: fix crash when writing odd-length hex string via Writev (RajeshKumar11) #β63658e018f9a4a1] - (SEMVER-MINOR) src: add perfetto trace agent (Chengzhong Wu) #β645650611d443ab] - (SEMVER-MINOR) src: rename legacy trace event headers (Chengzhong Wu) #β645652897cc1d93] - (SEMVER-MINOR) src: fix trace macro compatibility (Chengzhong Wu) #β64565d4d7172e10] - src: avoid using ToLocalChecked in crypto_hash (James M Snell) #β6466853b7d48b47] - src: fix libuv assertion on windows (liuxingbaoyu) #β6199969d10ed021] - src,test: disable trace events tests when perfetto is enabled (Chengzhong Wu) #β647211b0597b4ef] - stream: cut per-chunk allocations in pipeTo (Matteo Collina) #β648902632d606bb] - stream: preserve push signal abort reason (Trivikram Kamat) #β64798d5358a75bc] - stream: skip zero-byte broadcast writes (Trivikram Kamat) #β64772796c896fb4] - stream: honor AbortSignal in Writer.end() (Trivikram Kamat) #β64727ff12b8e22e] - stream: use validateString for consumer encoding (Jungwon Sohn) #β64754cfad2efb06] - stream: use the ring buffer for pending BYOB pull-into descriptors (Matteo Collina) #β64818fe06bf56dc] - stream: fix uncatchable error closing half-open Duplex.toWeb() writable (Mohamed Sayed) #β64161f2919dbb83] - test: unflake debugger and REPL tests (Matteo Collina) #β64718a1c29174e8] - test: ensure assertions are reached on all tests (Antoine du Hamel) #β64716b9e596f8e5] - test: reuse ffi.suffix instead of reimplementing it (Seongeun Lee) #β64840c816918e14] - test: remove test-repl-user-error-handler from flaky (avivkeller) #β646319d2f10ec54] - test: update WPT for url to4832db4(Node.js GitHub Bot) #β6482975b80d0b7b] - test: update WPT for url tob63305b(Node.js GitHub Bot) #β647909a139b3c86] - test: cover worker throwing primitive values (varshitha) #β64365796acc8920] - test: mark test-repl-user-error-handler as flaky (Aviv Keller) #β64612a646319f61] - (SEMVER-MINOR) test_runner: add support for --test-coverage-include-all (avivkeller) #β648304368303e01] - test_runner: wait for filtered suite build (semimikoh) #β6420870d11241a3] - test_runner: convert to uint during deserialization (Aviv Keller) #β64706cafe7bffcc] - tls: fix SNICallback certificate selection (Matteo Collina) #β647009ee05ec40f] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #β649285f4b859932] - tools: bump brace-expansion from 5.0.7 to 5.0.9 in /tools/eslint (dependabot[bot]) #β64904b5ced907b3] - tools: use 'readonly' for EventSource global (Honey Tyagi) #β64787fd4460e34e] - typings: add heap_utils internalBinding types (Donghoon Kang) #β648163bc0ee0492] - typings: remove isDataView from types binding (Archkon) #β64738236d7ca965] - url: create URLPattern result properties in WebIDL order (Archkon) #β647333def577ab4] - v8: report minor mark-sweep in GCProfiler (Archkon) #β646885293abff73] - vfs: speed up recursive readdir test setup (Trivikram Kamat) #β648134345185496] - vfs: make lchown update symlink metadata (Trivikram Kamat) #β64573b6ab546de5] - wasm: register missing SetURL function (Archkon) #β64679f322870bd1] - zlib: validate pledgedSrcSize as a safe integer (Archkon) #β6460444042c20d4] - zlib: accept ArrayBuffer dictionary in Zstd (Ryuhei Shima) #β64599Configuration
π Schedule: (UTC)
π¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
β» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
π Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.