[pull] main from nodejs:main#848

Merged

pull[bot] merged 9 commits intoadamlaska:mainfrom

Mar 25, 2026

Commits on Mar 24, 2026

permission: add permission check to realpath.native
RafaelGSS
committed
permission: include permission check on lib/fs/promises
RafaelGSS
committed
src: handle url crash on different url formats
RafaelGSS
committed
tls: wrap SNICallback invocation in try/catch

mcollina
authored and
RafaelGSS
committed
permission: include permission check to pipe_wrap.cc
RafaelGSS
committed
http: use null prototype for headersDistinct/trailersDistinct

mcollina
authored and
RafaelGSS
committed
crypto: use timing-safe comparison in Web Cryptography HMAC and KMAC

panva
authored and
RafaelGSS
committed
src: handle NGHTTP2_ERR_FLOW_CONTROL error code
RafaelGSS
committed
build,test: test array index hash collision

joyeecheung
authored and
RafaelGSS
committed