Skip to content
Permalink
main
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

node/doc/changelogs/CHANGELOG_V6.md

Go to file
@RafaelGSS
RafaelGSS 2022-10-18, Version 19.0.0 (Current)
Latest commit 9878c26 Sep 13, 2022 History 
Notable Changes:

doc:
  * graduate webcrypto to stable (Filip Skokan) #44897
esm:
  * remove specifier resolution flag (Geoffrey Booth) #44859
http:
  * (SEMVER-MAJOR) use Keep-Alive by default in global agents (Paolo Insogna) #43522
build:
  * (SEMVER-MAJOR) remove dtrace & etw support (Ben Noordhuis) #43652
  * (SEMVER-MAJOR) remove systemtap support (Ben Noordhuis) #43651
deps:
  * (SEMVER-MAJOR) deps: update V8 to 10.7.193.13 (Michaël Zasso) #44741

Deprecation and Removals:

* deprecate url.parse() (Rich Trott) #44919
* (SEMVER-MAJOR) runtime deprecate exports double slash maps (Guy Bedford) #44495
* (SEMVER-MAJOR) runtime deprecate coercion to integer in `process.exit()` (Daeyeon Jeong) #44711

Semver-Major Commits:

* [53f73d1] - (SEMVER-MAJOR) build: enable V8's trap handler on Windows (Michaël Zasso) #44741
* [06aaf8a] - (SEMVER-MAJOR) build: reset embedder string to "-node.0" (Michaël Zasso) #44741
* [aa3a572] - (SEMVER-MAJOR) build: remove dtrace & etw support (Ben Noordhuis) #43652
* [38f1e27] - (SEMVER-MAJOR) build: remove systemtap support (Ben Noordhuis) #43651
* [2849283] - (SEMVER-MAJOR) crypto: remove non-standard `webcrypto.Crypto.prototype.CryptoKey` (Antoine du Hamel) #42083
* [a1653ac] - (SEMVER-MAJOR) crypto: do not allow to call setFips from the worker thread (Sergey Petushkov) #43624
* [fd36a8d] - (SEMVER-MAJOR) deps: update llhttp to 8.1.0 (Paolo Insogna) #44967
* [89ecddd] - (SEMVER-MAJOR) deps: bump minimum ICU version to 71 (Michaël Zasso) #44741
* [66fe446] - (SEMVER-MAJOR) deps: V8: cherry-pick 0cccb6f27d78 (Michaël Zasso) #44741
* [88ed027] - (SEMVER-MAJOR) deps: V8: cherry-pick 7ddb8399f9f1 (Michaël Zasso) #44741
* [26c651c] - (SEMVER-MAJOR) deps: V8: cherry-pick 1b3a4f0c34a1 (Michaël Zasso) #44741
* [c8ff2df] - (SEMVER-MAJOR) deps: V8: cherry-pick b161a0823165 (Michaël Zasso) #44741
* [7a8fa2d] - (SEMVER-MAJOR) deps: fix V8 build on Windows with MSVC (Michaël Zasso) #44741
* [83b0aaa] - (SEMVER-MAJOR) deps: fix V8 build on SmartOS (Michaël Zasso) #44741
* [7a952e8] - (SEMVER-MAJOR) deps: silence irrelevant V8 warning (Michaël Zasso) #44741
* [6bd756d] - (SEMVER-MAJOR) deps: update V8 to 10.7.193.13 (Michaël Zasso) #44741
* [03fb789] - (SEMVER-MAJOR) events: add null check for the signal of EventTarget (Masashi Hirano) #43153
* [a4fa526] - (SEMVER-MAJOR) fs: add directory autodetection to fsPromises.symlink() (Livia Medeiros) #42894
* [bb4891d] - (SEMVER-MAJOR) fs: add validateBuffer to improve error (Hirotaka Tagawa / wafuwafu13) #44769
* [950a441] - (SEMVER-MAJOR) fs: remove coercion to string in writing methods (Livia Medeiros) #42796
* [41a6d82] - (SEMVER-MAJOR) fs: harden fs.readSync(buffer, options) typecheck (LiviaMedeiros) #42772
* [2275faa] - (SEMVER-MAJOR) fs: harden fs.read(params, callback) typecheck (LiviaMedeiros) #42772
* [29953a0] - (SEMVER-MAJOR) fs: harden filehandle.read(params) typecheck (LiviaMedeiros) #42772
* [4267b92] - (SEMVER-MAJOR) http: use Keep-Alive by default in global agents (Paolo Insogna) #43522
* [0324529] - (SEMVER-MAJOR) inspector: introduce inspector/promises API (Erick Wendel) #44250
* [8027099] - (SEMVER-MAJOR) lib: enable global CustomEvent by default (Daeyeon Jeong) #44860
* [f529f73] - (SEMVER-MAJOR) lib: brand check event handler property receivers (Chengzhong Wu) #44483
* [6de2673] - (SEMVER-MAJOR) lib: enable global WebCrypto by default (Antoine du Hamel) #42083
* [73ba883] - (SEMVER-MAJOR) lib: use private field in AbortController (Joyee Cheung) #43820
* [7dd2f41] - (SEMVER-MAJOR) module: runtime deprecate exports double slash maps (Guy Bedford) #44495
* [22c39b1] - (SEMVER-MAJOR) path: the dot will be added(path.format) if it is not specified in `ext` (theanarkh) #44349
* [587367d] - (SEMVER-MAJOR) perf_hooks: expose webperf global scope interfaces (Chengzhong Wu) #44483
* [364c0e1] - (SEMVER-MAJOR) perf_hooks: fix webperf idlharness (Chengzhong Wu) #44483
* [ada2d05] - (SEMVER-MAJOR) process: runtime deprecate coercion to integer in `process.exit()` (Daeyeon Jeong) #44711
* [e0ab8dd] - (SEMVER-MAJOR) process: make process.config read only (Sergey Petushkov) #43627
* [481a959] - (SEMVER-MAJOR) readline: remove `question` method from `InterfaceConstructor` (Antoine du Hamel) #44606
* [c9602ce] - (SEMVER-MAJOR) src: use new v8::OOMErrorCallback API (Michaël Zasso) #44741
* [19a70c1] - (SEMVER-MAJOR) src: override CreateJob instead of PostJob (Clemens Backes) #44741
* [fd52c62] - (SEMVER-MAJOR) src: use V8_ENABLE_SANDBOX macro (Michaël Zasso) #44741
* [c10988d] - (SEMVER-MAJOR) src: use non-deprecated V8 inspector API (Michaël Zasso) #44741
* [3efe901] - (SEMVER-MAJOR) src: update NODE_MODULE_VERSION to 111 (Michaël Zasso) #44741
* [77e5856] - (SEMVER-MAJOR) src: turn embedder api overload into default argument (Alena Khineika) #43629
* [dabda03] - (SEMVER-MAJOR) src: per-environment time origin value (Chengzhong Wu) #43781
* [2e49b99] - (SEMVER-MAJOR) src,test: disable freezing V8 flags on initialization (Clemens Backes) #44741
* [2b32985] - (SEMVER-MAJOR) stream: use null for the error argument (Luigi Pinca) #44312
* [36805e8] - (SEMVER-MAJOR) test: adapt test-repl for V8 update (Michaël Zasso) #44741
* [96ef257] - (SEMVER-MAJOR) test: adapt test-repl-pretty-*stack to V8 changes (Michaël Zasso) #44741
* [71c193e] - (SEMVER-MAJOR) test: adapt to new JSON SyntaxError messages (Michaël Zasso) #44741
* [b5f1564] - (SEMVER-MAJOR) test: rename always-opt flag to always-turbofan (Michaël Zasso) #44741
* [1acf033] - (SEMVER-MAJOR) test: fix test-hash-seed for new V8 versions (Michaël Zasso) #44741
* [57ff476] - (SEMVER-MAJOR) test: remove duplicate test (Luigi Pinca) #44051
* [77def91] - (SEMVER-MAJOR) tls,http2: send fatal alert on ALPN mismatch (Tobias Nießen) #44031
* [4860ad9] - (SEMVER-MAJOR) tools: update V8 gypfiles for 10.7 (Michaël Zasso) #44741

PR-URL: #44626
Co-authored-by: Ruy Adorno <ruyadorno@google.com>
22 contributors

Users who have contributed to this file

@MylesBorins @BethGriggs @evanlucas @rvagg @nschonni @jasnell @Trott @Fishrock123 @lpinca @addaleax @XhmikosR @vsemozhetbyt
Node.js 6 ChangeLog 2019-04-03, Version 6.17.1 'Boron' (LTS), @BethGriggs Notable Changes Commits 2019-02-28, Version 6.17.0 'Boron' (LTS), @rvagg Notable Changes Commits 2018-12-26, Version 6.16.0 'Boron' (LTS), @MylesBorins Notable Changes Commits 2018-12-03, Version 6.15.1 'Boron' (LTS), @rvagg Notable Changes Commits 2018-11-27, Version 6.15.0 'Boron' (LTS), @rvagg Notable Changes Commits 2018-08-15, Version 6.14.4 'Boron' (LTS), @rvagg Notable Changes Commits 2018-06-12, Version 6.14.3 'Boron' (LTS), @evanlucas Notable Changes Commits 2018-04-30, Version 6.14.2 'Boron' (LTS), @MylesBorins Notable Changes Commits 2018-03-29, Version 6.14.1 'Boron' (LTS), @MylesBorins Notable Changes 2018-03-28, Version 6.14.0 'Boron' (LTS), @MylesBorins Notable Changes Commits 2018-03-06, Version 6.13.1 'Boron' (LTS), @MylesBorins Notable Changes Commits 2018-02-13, Version 6.13.0 'Boron' (LTS), @MylesBorins Notable Changes Commits 2018-01-02, Version 6.12.3 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-12-08, Version 6.12.2 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-12-05, Version 6.12.1 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-11-07, Version 6.12.0 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-10-24, Version 6.11.5 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-10-03, Version 6.11.4 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-09-05, Version 6.11.3 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-08-01, Version 6.11.2 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-07-11, Version 6.11.1 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-06-06, Version 6.11.0 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-05-02, Version 6.10.3 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-04-04, Version 6.10.2 'Boron' (LTS), @MylesBorins Notable changes Commits 2017-03-21, Version 6.10.1 'Boron' (LTS), @MylesBorins Notable changes Commits 2017-02-21, Version 6.10.0 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-01-31, Version 6.9.5 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-01-05, Version 6.9.4 'Boron' (LTS), @MylesBorins Notable Changes Commits 2017-01-03, Version 6.9.3 'Boron' (LTS), @MylesBorins Notable Changes Commits 2016-12-06, Version 6.9.2 'Boron' (LTS), @thealphanerd Notable Changes Commits 2016-10-19, Version 6.9.1 'Boron' (LTS), @thealphanerd Notable changes Commits 2016-10-18, Version 6.9.0 'Boron' (LTS), @rvagg Notable changes Commits 2016-10-14, Version 6.8.1 (Current), @evanlucas Notable changes Commits 2016-10-12, Version 6.8.0 (Current), @Fishrock123 Notable changes Commits 2016-09-27, Version 6.7.0 (Current), @evanlucas Notable changes Commits 2016-09-14, Version 6.6.0 (Current), @Fishrock123 Notable changes Commits 2016-08-26, Version 6.5.0 (Current), @evanlucas Notable changes Commits 2016-08-15, Version 6.4.0 (Current), @cjihrig Notable changes Commits 2016-07-21, Version 6.3.1 (Current), @evanlucas Notable changes Commits 2016-07-06, Version 6.3.0 (Current), @Fishrock123 Notable changes Commits 2016-06-17, Version 6.2.2 (Current), @evanlucas Notable changes Commits 2016-06-02, Version 6.2.1 (Current), @rvagg Notable changes Commits 2016-05-17, Version 6.2.0 (Current), @evanlucas Notable changes Commits 2016-05-05, Version 6.1.0 (Current), @Fishrock123 Notable Changes Commits 2016-04-26, Version 6.0.0 (Current), @jasnell Notable changes Commits
5222 lines (4890 sloc) 799 KB
Raw Blame
Open in GitHub Desktop

Node.js 6 ChangeLog

LTS 'Boron' Current
6.17.1
6.17.0
6.16.0
6.15.1
6.15.0
6.14.4
6.14.3
6.14.2
6.14.1
6.14.0
6.13.1
6.13.0
6.12.3
6.12.2
6.12.1
6.12.0
6.11.5
6.11.4
6.11.3
6.11.2
6.11.1
6.11.0
6.10.3
6.10.2
6.10.1
6.10.0
6.9.5
6.9.4
6.9.3
6.9.2
6.9.1
6.9.0
 6.8.1
6.8.0
6.7.0
6.6.0
6.5.0
6.4.0
6.3.1
6.3.0
6.2.2
6.2.1
6.2.0
6.1.0
6.0.0

Note: Node.js v6 is covered by the Node.js Long Term Support Plan and will be supported actively until April 2018 and maintained until April 2019.

2019-04-03, Version 6.17.1 'Boron' (LTS), @BethGriggs

Node 6 is due to go End-of-Life on 2019-04-30.

Notable Changes

  • http:
    • fix error check in Execute() (Brian White) #25939

Commits

2019-02-28, Version 6.17.0 'Boron' (LTS), @rvagg

This is a security release. All Node.js users should consult the security release summary at:

https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/

for details on patched vulnerabilities.

Fixes for the following CVEs are included in this release:

  • Node.js: Denial of Service with keep-alive HTTP connections (CVE-2019-5739)
  • Node.js: Slowloris HTTP Denial of Service with keep-alive (CVE-2019-5737)
  • OpenSSL: 0-byte record padding oracle (CVE-2019-1559)

Notable Changes

  • deps: OpenSSL has been upgraded to 1.0.2r which contains a fix for CVE-2019-1559. Under certain circumstances, a TLS server can be forced to respond differently to a client if a zero-byte record is received with an invalid padding compared to a zero-byte record with an invalid MAC. This can be used as the basis of a padding oracle attack to decrypt data.
  • http:
    • Backport server.keepAliveTimeout to prevent keep-alive HTTP and HTTPS connections remaining open and inactive for an extended period of time, leading to a potential Denial of Service (DoS). (CVE-2019-5739 / Timur Shemsedinov, Matteo Collina)
    • Further prevention of "Slowloris" attacks on HTTP and HTTPS connections by consistently applying the receive timeout set by server.headersTimeout to connections in keep-alive mode. Reported by Marco Pracucci (Voxnest). (CVE-2019-5737 / Matteo Collina)

Commits

2018-12-26, Version 6.16.0 'Boron' (LTS), @MylesBorins

The 6.15.0 security release introduced some unexpected breakages on the 6.x release line. This is a special release to fix a regression in the HTTP binary upgrade response body and add a missing CLI flag to adjust the max header size of the http parser.

Notable Changes

  • cli:
    • add --max-http-header-size flag (cjihrig) #24811
  • http:
    • add maxHeaderSize property (cjihrig) #24860

Commits

  • [f233b160c9] - (SEMVER-MINOR) cli: add --max-http-header-size flag (cjihrig) #24811
  • [59f83d6896] - (SEMVER-MINOR) deps: cherry-pick http_parser_set_max_header_size (cjihrig) #24811
  • [c0c4de71f0] - (SEMVER-MINOR) http: add maxHeaderSize property (cjihrig) #24860
  • [8a3e0c0697] - http: fix regression of binary upgrade response body (Matteo Collina) #25036

2018-12-03, Version 6.15.1 'Boron' (LTS), @rvagg

Notable Changes

This is a patch release to address a bad backport of the fix for "Slowloris HTTP Denial of Service" (CVE-2018-12122). Node.js 6.15.0 misapplies the headers timeout to an entire keep-alive HTTP session, resulting in prematurely disconnected sockets.

Commits

  • [5d9005c359] - http: fix backport of Slowloris headers (Matteo Collina) #24796

2018-11-27, Version 6.15.0 'Boron' (LTS), @rvagg

This is a security release. All Node.js users should consult the security release summary at:

https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/

for details on patched vulnerabilities.

Fixes for the following CVEs are included in this release:

  • Node.js: Debugger port 5858 listens on any interface by default (CVE-2018-12120)
  • Node.js: Denial of Service with large HTTP headers (CVE-2018-12121)
  • Node.js: Slowloris HTTP Denial of Service (CVE-2018-12122 / Node.js)
  • Node.js: Hostname spoofing in URL parser for javascript protocol (CVE-2018-12123)
  • Node.js: HTTP request splitting (CVE-2018-12116)
  • OpenSSL: Timing vulnerability in DSA signature generation (CVE-2018-0734)
  • OpenSSL: Microarchitecture timing vulnerability in ECC scalar multiplication (CVE-2018-5407)

Notable Changes

  • debugger: Backport of nodejs/node#8106 to prevent the debugger from listening on 0.0.0.0. It now defaults to 127.0.0.1. Reported by Ben Noordhuis. (CVE-2018-12120 / Ben Noordhuis).
  • deps: Upgrade to OpenSSL 1.0.2q, fixing CVE-2018-0734 and CVE-2018-5407
  • http:
    • Headers received by HTTP servers must not exceed 8192 bytes in total to prevent possible Denial of Service attacks. Reported by Trevor Norris. (CVE-2018-12121 / Matteo Collina)
    • A timeout of 40 seconds now applies to servers receiving HTTP headers. This value can be adjusted with server.headersTimeout. Where headers are not completely received within this period, the socket is destroyed on the next received chunk. In conjunction with server.setTimeout(), this aids in protecting against excessive resource retention and possible Denial of Service. Reported by Jan Maybach (liebdich.com). (CVE-2018-12122 / Matteo Collina)
    • Two-byte characters are now strictly disallowed for the path option in HTTP client requests. Paths containing characters outside of the range \u0021 - \u00ff will now be rejected with a TypeError. This behavior can be reverted if necessary by supplying the --security-revert=CVE-2018-12116 command line argument (this is not recommended). Reported as security concern for Node.js 6 and 8 by Arkadiy Tetelman (Lob), fixed by backporting a change by Benno Fünfstück applied to Node.js 10 and later. (CVE-2018-12116 / Matteo Collina)
  • url: Fix a bug that would allow a hostname being spoofed when parsing URLs with url.parse() with the 'javascript:' protocol. Reported by Martin Bajanik (Kentico). (CVE-2018-12123 / Matteo Collina)

Commits

2018-08-15, Version 6.14.4 'Boron' (LTS), @rvagg

This is a security release. All Node.js users should consult the security release summary at:

https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/

for details on patched vulnerabilities.

Fixes for the following CVEs are included in this release:

  • CVE-2018-0732 (OpenSSL)
  • CVE-2018-12115 (Node.js)

Notable Changes

  • buffer: Fix out-of-bounds (OOB) write in Buffer.write() for UCS-2 encoding (CVE-2018-12115)
  • deps: Upgrade to OpenSSL 1.0.2p, fixing:
    • Client DoS due to large DH parameter (CVE-2018-0732)
    • ECDSA key extraction via local side-channel (CVE not assigned)

Commits

2018-06-12, Version 6.14.3 'Boron' (LTS), @evanlucas

Notable Changes

  • buffer (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang

Commits

2018-04-30, Version 6.14.2 'Boron' (LTS), @MylesBorins

Notable Changes

  • n-api:
    • n-api has been backported to v6.x. It is being landed as an experimental interface, and as such is landing in a Semver-Patch release. (Gabriel Schulhof) #19447

Commits

2018-03-29, Version 6.14.1 'Boron' (LTS), @MylesBorins

Notable Changes

No additional commits.

Due to incorrect staging of the upgrade to the GCC 4.9.X compiler, the latest releases for PPC little endian were built using GCC 4.9.X instead of GCC 4.8.X. This caused an ABI breakage on PPCLE based environments. This has been fixed in our infrastructure and we are doing this release to ensure that the hosted binaries are adhering to our platform support contract.

2018-03-28, Version 6.14.0 'Boron' (LTS), @MylesBorins

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/ for details on patched vulnerabilities.

Fixes for the following CVEs are included in this release:

  • CVE-2018-7158
  • CVE-2018-7159
  • CVE-2018-7160

Notable Changes

  • Upgrade to OpenSSL 1.0.2o: Does not contain any security fixes that are known to impact Node.js.
  • Fix for inspector DNS rebinding vulnerability (CVE-2018-7160): A malicious website could use a DNS rebinding attack to trick a web browser to bypass same-origin-policy checks and allow HTTP connections to localhost or to hosts on the local network, potentially to an open inspector port as a debugger, therefore gaining full code execution access. The inspector now only allows connections that have a browser Host value of localhost or localhost6.
  • Fix for 'path' module regular expression denial of service (CVE-2018-7158): A regular expression used for parsing POSIX paths could be used to cause a denial of service if an attacker were able to have a specially crafted path string passed through one of the impacted 'path' module functions.
  • Reject spaces in HTTP Content-Length header values (CVE-2018-7159): The Node.js HTTP parser allowed for spaces inside Content-Length header values. Such values now lead to rejected connections in the same way as non-numeric values.
  • Update root certificates: 5 additional root certificates have been added to the Node.js binary and 30 have been removed.

Commits

2018-03-06, Version 6.13.1 'Boron' (LTS), @MylesBorins

Notable Changes

  • http, tls:
    • better support for IPv6 addresses (Mattias Holmlund) #14772

Commits

2018-02-13, Version 6.13.0 'Boron' (LTS), @MylesBorins

This LTS release comes with 112 commits, 17 of which are considered Semver-Minor. This includes 32 which are doc related, 31 which are test related, 8 which are build / tool related and 1 commit which updates a dependency.

Notable Changes

  • console:
    • added console.count() and console.clear() (James M Snell) #12678
  • crypto:
    • expose ECDH class (Bryan English) #8188
    • added cypto.randomFill() and crypto.randomFillSync() (Evan Lucas) #10209
    • warn on invalid authentication tag length (Tobias Nießen) #17566
  • deps:
    • upgrade libuv to 1.16.1 (cjihrig) #16835
  • dgram:
    • added socket.setMulticastInterface() (Will Young) #7855
  • http:
    • add agent.keepSocketAlive and agent.reuseSocket as to allow overridable keep-alive behavior of Agent (Fedor Indutny) #13005
  • lib:
    • return this from net.Socket.end() (Sam Roberts) #13481
  • module:
    • add builtinModules api that provides list of all builtin modules in Node (Jon Moss) #16386
  • net:
    • return this from getConnections() (Sam Roberts) #13553
  • promises:
    • more robust stringification for unhandled rejections (Timothy Gu) #13784
  • repl:
    • improve require() autocompletion (Alexey Orlenko) #14409
  • src:
    • add openssl-system-ca-path configure option (Daniel Bevenius) #16790
    • add --use-bundled-ca --use-openssl-ca check (Daniel Bevenius) #12087
    • add process.ppid (cjihrig) #16839
  • tls:
    • accept lookup option for tls.connect() (Fedor Indutny) #12839
  • tools, build:
    • a new macOS installer! (JP Wesselink) #15179
  • url:
    • WHATWG URL api support (James M Snell) #7448
  • util:
    • add %i and %f formatting specifiers (Roman Reiss) #10308

Commits

  • [6f33953d90] - benchmark: fix timeout in write-stream-throughput (Anatoli Papirovski) #17958
  • [ce136392fb] - (SEMVER-MINOR) console: add console.count() and console.clear() (James M Snell) #12678
  • [691cd5a3d1] - crypto: warn on invalid authentication tag length (Tobias Nießen) #17566
  • [4b4e4db1c1] - crypto: add ocsp_request ClientHelloParser::Reset (Daniel Bevenius) #17753
  • [c377d2299a] - crypto: remove unused header in clienthello.h (Daniel Bevenius) #17752
  • [ddd9d85681] - crypto: remove BIO_set_shutdown (Daniel Bevenius) #17542
  • [f3b3437e48] - (SEMVER-MINOR) crypto: expose ECDH class (Bryan English) #8188
  • [6f62f83468] - (SEMVER-MINOR) crypto: add randomFill and randomFillSync (Evan Lucas) #10209
  • [a1d7469aef] - (SEMVER-MINOR) deps: upgrade libuv to 1.16.1 (cjihrig) #16835
  • [8f2e52abd7] - (SEMVER-MINOR) dgram: added setMulticastInterface() (Will Young) #7855
  • [1b689863ee] - doc: remove x86 from os.arch() options (Gibson Fahnestock) #17899
  • [8f80548b7f] - doc: move matthewloring to emeriti (Rich Trott) #17998
  • [15d0ed5f33] - doc: move joshgav to TSC emeriti list (Rich Trott) #17953
  • [12db4d97b2] - doc: improve security section of README.md (Rich Trott) #17929
  • [b79189b9b6] - doc: copy-edit COLLABORATOR_GUIDE.md (Rich Trott) #17922
  • [7628640db6] - doc: improve alt text (Rich Trott) #17922
  • [bb022dbb96] - doc: fix spelling of contributors (Rich Trott) #17922
  • [21c5d820bb] - doc: add references to PR communication articles (Salame William) #17902
  • [3c3a631643] - doc: fix typo (Tobias Nießen) #17900
  • [5b00ee31ee] - doc: use my legal name in README (Timothy Gu) #17894
  • [0ce48f9094] - doc: use dashes instead of asterisks (Ruben Bridgewater) #17722
  • [f6b4aa62bc] - doc: update AUTHORS list (Ruben Bridgewater) #17805
  • [653c026578] - doc: add starkwang to collaborators (Weijia Wang) #17847
  • [68164145de] - doc: improve fs api descriptions (Evan Lucas) #17679
  • [722640f562] - doc: instructions on how to make membership public (Michael Dawson) #17688
  • [1553c7326c] - doc: removed extra explanation in api/buffer.md (Waleed Ashraf) #17796
  • [22607951b8] - doc: use american spelling as per style guide (sreepurnajasti) #17818
  • [d85840dd8f] - doc: require CI status indicator in PRs (Nikolai Vavilov) #17151
  • [5cc6dd6295] - doc: remove duplicate the from onboarding.md (sreepurnajasti) #17733
  • [a6f7ba4f09] - doc: fix typo in README.md (Weijia Wang) #17729
  • [df48a5ded8] - doc: fix typo in child_process.md (Rich Trott) #17727
  • [4cba4324ff] - doc: improve release guide (Evan Lucas) #17677
  • [423ef3ddbf] - doc: not all example code can be run without 1:1 (Jeremiah Senkpiel) #17702
  • [c683efbf6d] - doc: adjust TTY wording & add inter-doc links (Jeremiah Senkpiel) #17702
  • [14ffddd989] - doc: add isTTY property documentation (SonaySevik) #16828
  • [9c8d0366b3] - doc: fix fs.existsSync description (Jeremiah Senkpiel) #17702
  • [6abd4599af] - doc: improve documentation.md (Jeremiah Senkpiel) #17702
  • [d0b89a12ec] - doc: add countdown module to writing tests guide (Bamieh) #17201
  • [1eac4055f0] - doc: include Daniel Bevenius as a TSC member (Rich Trott) #17652
  • [83fe79c558] - doc: correct pbkdf2 salt length recommendation (Will Clark) #17524
  • [43a2bc040f] - doc: improve randomfill and fix broken link (Sakthipriyan Vairamani (thefourtheye)) #12541
  • [ef0213c0b8] - doc: move Code of Conduct to admin repo (Myles Borins) #17301
  • [e16d01fc94] - gitignore: ignore *.VC.db files (Tobias Nießen) #17898
  • [1390c280bc] - (SEMVER-MINOR) http: overridable keep-alive behavior of Agent (Fedor Indutny) #13005
  • [063c4fa345] - (SEMVER-MINOR) lib: return this from net.Socket.end() (Sam Roberts) #13481
  • [cdf4a9c394] - (SEMVER-MINOR) module: add builtinModules (Jon Moss) #16386
  • [ffc1444117] - net: remove ADDRCONFIG DNS hint on Windows (Bartosz Sosnowski) #17662
  • [6a27774882] - (SEMVER-MINOR) net: return this from getConnections() (Sam Roberts) #13553
  • [a09e2fd43b] - net: fix timeout with null handle (Anatoli Papirovski) #16489
  • [a301c1a0e0] - net: fix timeouts during long writes (Anatoli Papirovski) #15791
  • [c64a73ba6c] - promises: more robust stringification (Timothy Gu) #13784
  • [3b9fea0782] - (SEMVER-MINOR) repl: improve require() autocompletion (Alexey Orlenko) #14409
  • [9181fbb699] - src: dumb down code by removing std::move (Anna Henningsen) #18324
  • [57865a9213] - src: use correct OOB check for IPv6 parsing (Anna Henningsen) #17470
  • [f306d3eb7a] - src: make url host a proper C++ class (Anna Henningsen) #17470
  • [1976c7c7a5] - src: move url internals into anonymous namespace (Anna Henningsen) #17470
  • [d66f469931] - src: minor cleanups to node_url.cc (Anna Henningsen) #17470
  • [979af518c1] - src: remove nonexistent method from header file (Anna Henningsen) #17748
  • [2268d00e38] - (SEMVER-MINOR) src: add openssl-system-ca-path configure option (Daniel Bevenius) #16790
  • [a6d2384c9a] - src: clean up MaybeStackBuffer (Timothy Gu) #11464
  • [9f3b4ad5bd] - src: fix incorrect macro comment (Daniel Bevenius) #12688
  • [2b29cea1b4] - src: guard bundled_ca/openssl_ca with HAVE_OPENSSL (Daniel Bevenius) #12302
  • [758dc81e8d] - (SEMVER-MAJOR) src: add --use-bundled-ca --use-openssl-ca check (Daniel Bevenius) #12087
  • [2d4fca2c41] - (SEMVER-MINOR) src: add process.ppid (cjihrig) #16839
  • [b6ce918e0a] - stream: fix disparity between buffer and the count (jlvivero) #15661
  • [f82065fbe1] - test: make test-cli-syntax engine agnostic (Rich Trott) #16272
  • [a4e2ced73b] - test: decrease duration of test-cli-syntax (Evan Lucas) #14187
  • [734ce678f4] - test: use valid authentication tag length (Tobias Nießen) #17566
  • [694828df0e] - test: mark test-inspector-stop-profile-after-done flaky (Myles Borins) #18491
  • [5668403ddb] - test: improve flaky test-listen-fd-ebadf.js (Rich Trott) #17797
  • [fce10f722d] - test: fix test-tls-server-verify.js on Windows CI (Rich Trott) #18382
  • [4473c6c807] - test: fix flaky test-http-pipeline-flood (Anatoli Papirovski) #17955
  • [001b67296e] - test: rename regression tests (Tobias Nießen) #17948
  • [0c3f23ef59] - test: fix flaky test-pipe-unref (Anatoli Papirovski) #17950
  • [9e760285de] - test: fix crypto test case to use correct encoding (Tobias Nießen) #17956
  • [1c4aa61388] - test: simplify test-buffer-slice.js (Weijia Wang) #17962
  • [2c554a9d2b] - test: improve to use template string (sreepurnajasti) #17895
  • [8c1f41fc11] - test: make test-tls-invoke-queued use public API (Anna Henningsen) #17864
  • [b3e625d67a] - test: refactor test-tls-securepair-fiftharg (Anna Henningsen) #17836
  • [038e52627f] - test: remove undefined function (Rich Trott) #17845
  • [5314754685] - test: use common module API in test-child-process-exec-stdout-stderr-data-string (sreepurnajasti) #17751
  • [f291bc1d98] - test: refactor test-repl-definecommand (Rich Trott) #17795
  • [cb7854354f] - test: change callback function to arrow function (rt33) #17734
  • [bdb535c731] - test: Use countdown in test file (sreepurnajasti) #17646
  • [31c5db6c03] - test: update test-http-content-length to use countdown (Bamieh) #17201
  • [cc03470b82] - test: change callback function to arrow function (routerman) #17697
  • [81e6569990] - test: change callback function to arrow function (you12724) #17698
  • [2d77241f33] - test: change callback function to arrow function (Shinya Kanamaru) #17699
  • [af3e074249] - (SEMVER-MINOR) test: add makeDuplexPair() helper (Anna Henningsen) #16269
  • [fb0bd8a584] - test: fix flaky test-child-process-pass-fd (Rich Trott) #17598
  • [b3b245665e] - test: add test description to fs.readFile tests (Jamie Davis) #17610
  • [5f7944842a] - test: fix truncation of argv (Daniel Bevenius) #12110
  • [699c6638c3] - test: add common.hasIntl (James M Snell) #9246
  • [365dba2195] - test: fix flaky test-crypto-classes.js (Bryan English) #15662
  • [d29a6202e7] - (SEMVER-MINOR) test: crypto createClass instanceof Class (Bryan English) #8188
  • [7b801b5f83] - test: don't skip when common.mustCall() is pending (cjihrig) #15421
  • [4f6dd9649f] - test,doc: do not indicate that non-functions "return" values (Rich Trott) #17267
  • [a08925dcbd] - tls: comment about old-style errors (xortiz) #17759
  • [56e1586608] - tls: unconsume stream on destroy (Anna Henningsen) #17478
  • [00b279087e] - (SEMVER-MINOR) tls: accept lookup option for tls.connect() (Fedor Indutny) #12839
  • [521dc2511f] - tls: properly track writeQueueSize during writes (Anatoli Papirovski) #15791
  • [51bfd32922] - tools: do not override V8's gitignore (Yang Guo) #18010
  • [32f528a92e] - tools: fix AttributeError: __exit__ on Python 2.6 (Dmitriy Kasyanov) #17663
  • [6187aec242] - tools: autofixer for lowercase-name-for-primitive (Shobhit Chittora) #17715
  • [928b7c87cd] - tools: simplify lowercase-name-for-primitive rule (cjihrig) #17653
  • [7821a4c899] - tools: add lowercase-name-for-primitive eslint rule (Weijia Wang) #17568
  • [1d706026a7] - tools: make doc tool a bit more readable (Tobias Nießen) #17125
  • [b8a5d6dbbc] - tools: remove useless function declaration (Tobias Nießen) #17125
  • [18803bc409] - (SEMVER-MINOR) tools, build: refactor macOS installer (JP Wesselink) #15179
  • [24def19417] - (SEMVER-MINOR) url: adding WHATWG URL support (James M Snell) #7448
  • [60b10f0896] - url: update IDNA handling (Timothy Gu) #13362
  • [7af1ad0ec1] - (SEMVER-MINOR) util: add %i and %f formatting specifiers (Roman Reiss) #10308

2018-01-02, Version 6.12.3 'Boron' (LTS), @MylesBorins

This LTS release comes with 115 commits. This includes 52 which are test related, 40 which are doc related, 12 which are build / tool related and 2 commits which updating a dependency.

Notable Changes

  • build:
    • configure can now be run from any directory (Gibson Fahnestock) #17321

Commits

  • [b1b975370f] - benchmark,path: remove unused variables (薛定谔的猫) #15789
  • [ac6f345f70] - build: allow running configure from any directory (Gibson Fahnestock) #17321
  • [017492eca2] - build: add serial commas to messages in configure script (Rich Trott) #17464
  • [ad9a8578ee] - build: fix test-v8 target (Michaël Zasso) #17269
  • [9ba35e859f] - build: remove empty VCLibrarianTool entry (Daniel Bevenius) #17191
  • [3d22e81d70] - build: minor corrections to configure descriptions (Daniel Bevenius) #17094
  • [92f41e553a] - build: allow enabling the --trace-maps flag in V8 (Evan Lucas) #14018
  • [b563908ff9] - crypto: use SetNull instead of Set (Daniel Bevenius) #17521
  • [b287b9e64b] - deps: V8: cherry-pick e8e9c07 from upstream (Ali Ijaz Sheikh)
  • [9804e7f3bb] - deps: V8: cherry-pick 9622696 from upstream (Ali Ijaz Sheikh)
  • [dcee5edef7] - doc: simplify and clarify FIPS text in BUILDING.md (Rich Trott) #17538
  • [f53b4df00e] - doc: 'constructor' implies use of new keyword (Cameron Moorehead) #17364
  • [67c526fbb8] - doc: improve text for Console constructor (Rich Trott) #17519
  • [013ef22ef8] - doc: improve readability of COLLABORATOR_GUIDE.md (Rich Trott) #17519
  • [ee52ce954a] - doc: mention node-test-pull-request-lite job (Jon Moss) #17513
  • [a44f0855b4] - doc: fix typo in repl.md (Rich Trott) #17502
  • [a15da3bf45] - doc: fix common typo involving one-time listeners (Rich Trott) #17502
  • [92d2c9aecb] - doc: update AUTHORS list (Michaël Zasso) #17452
  • [c24fafa881] - doc: edit module introduction (Rich Trott) #17463
  • [8ca12e2b6e] - doc: standardize preposition usage in fs.md (Rich Trott) #17463
  • [e8368a12d2] - doc: improve punctuation in fs.open() text (Rich Trott) #17463
  • [4d4337d3d3] - doc: use colon consistently in assert.md (Rich Trott) #17463
  • [0fa2f39457] - doc: improve checkServerIdentity docs (Hannes Magnusson) #17203
  • [35316dcd10] - doc: add guide to maintaining npm (Myles Borins) #16541
  • [90ee2ee943] - doc: clarify fast-track of reversions (Refael Ackermann) #17332
  • [3eab248a1f] - doc: Add link for ECMAScript 2015 (smatsu-hl) #17317
  • [c519287d3d] - doc: replace string with template string (Leko) #17316
  • [b2236a3804] - doc: replace function with arrow function in vm.md (narirou) #17307
  • [46dc2416b9] - doc: fix typo in api doc of url.format(urlObject) (pkovacs) #17295
  • [b13dab8b4d] - doc: add maclover7 to collaborators (Jon Moss) #17289
  • [ab91fe1686] - doc: update http URLs to https in README.md (Ronald Eddy Jr) #17264
  • [23f21a63d8] - doc: update http URLs to https in GOVERNANCE.md (Ronald Eddy Jr) #17262
  • [d692f4546c] - doc: update http URLs to https in CONTRIBUTING.md (Ronald Eddy Jr) #17261
  • [a0bd1c0b81] - doc: add SharedArrayBuffer to Buffer documentation (Thomas den Hollander) #15489
  • [5f522a18d9] - doc: use better terminology for build machines (Anna Henningsen) #17142
  • [3f39e47f6c] - doc: update mgol in AUTHORS.txt, add to .mailmap (Michał Gołębiowski-Owczarek) #17239
  • [80c6384985] - doc: update release table in V8 guide (Ali Ijaz Sheikh) #17136
  • [d4e9a2555d] - doc: add guybedford to collaborators (Guy Bedford) #17197
  • [e232e210f6] - doc: update AUTHORS list (Michaël Zasso) #16571
  • [ca76c336d1] - doc: normalize ToC indentation with heading levels in README (Rich Trott) #17106
  • [1815ca5066] - doc: add Contributing to Node.js to the README ToC (Rich Trott) #17106
  • [d8f66676e5] - doc: merge Working Groups with Contributing to Node.js in README (Rich Trott) #17106
  • [b064c731ff] - doc: remove IRC node-dev link from README (Rich Trott) #17106
  • [8cae573af1] - doc: add note about using cluster without networking (pimlie) #17031
  • [b16e6d29f1] - doc: explicitly document highWaterMark option (Sebastian Silbermann) #17049
  • [ccdf4b245a] - doc: reorganize collaborator guide (Joyee Cheung) #17056
  • [d44adf12a9] - doc: delete unused definition in README.md (Vse Mozhet Byt) #17108
  • [e03645dd6f] - doc: add Support section in README (Rich Trott) #16533
  • [0f94bb9aeb] - doc: add hashseed to collaborators (Yang Guo)
  • [5cd89c7817] - doc,win: clarify WSL support (João Reis) #17008
  • [93ca2f78c6] - meta: allow vague objections to be dismissed (James M Snell) #15233
  • [a12e16818f] - path: remove obsolete comment (Rich Trott) #17023
  • [2d74af0184] - src: remove unused include node_crypto_clienthello (Daniel Bevenius) #17546
  • [6792998f6a] - src: make base64.h self-contained (Daniel Bevenius) #17177
  • [84a8861b62] - src: remove unprofessional slang in assertions (Alexey Orlenko) #17166
  • [f11acca80c] - src: fix size of CounterSet (Witthawat Piwawatthanapanit) #16984
  • [a528d573ce] - test: remove hidden use of common.PORT in parallel tests (Rich Trott) #17466
  • [dbf5ddbc97] - test: refactor test-child-process-pass-fd (Rich Trott) #17596
  • [a50366fbf7] - test: improve assert messages in repl-reset-event (Adri Van Houdt) #16836
  • [bd4b97fe3d] - test: update test-http-should-keep-alive to use countdown (TomerOmri) #17505
  • [23edd08b00] - test: use Countdown in http test (idandagan1) #17506
  • [e9cacee677] - test: use Countdown in http-response-statuscode (Mandeep Singh) #17327
  • [68dabce07a] - test: use Countdown in test-http-set-cookies (Shilo Mangam) #17504
  • [d4d3f50f9d] - test: Use common.mustCall in http test (sreepurnajasti) #17487
  • [6e7ace2dcf] - test: replace fs.accessSync with fs.existsSync (Leko) #17446
  • [3cf8f98c3e] - test: add common.crashOnUnhandledRejection() (IHsuan) #17247
  • [d1d547d2ab] - test: update test-http-request-dont-override-options to use common.mustCall (Mithun Sasidharan) #17438
  • [f9adf51744] - test: use common.mustCall in test-http-malformed-request (Mithun Sasidharan) #17439
  • [8fc196905d] - test: use Countdown in http test (Mithun Sasidharan) #17436
  • [47e5fd940e] - test: update test-http-response-multiheaders to use countdown (hmammedzadeh) #17419
  • [660e6dea89] - test: update test-http-upgrade-client to use countdown (Mithun Sasidharan) #17339
  • [8f997c0117] - test: update test-http-status-reason-invalid-chars to use countdown (Mithun Sasidharan) #17342
  • [42454a5c34] - test: refactored test-http-allow-req-after-204-res to countdown (Mithun Sasidharan) #17211
  • [3ee4c1e149] - test: update test/parallel/test-http-pipe-fs.js to use countdown (ChungNgoops) #17346
  • [8908cd6cc1] - test: refactored test-http-response-splitting to use countdown (Mithun Sasidharan) #17348
  • [4f3a165827] - test: replace function with ES6 arrow function (Junichi Kajiwara) #17306
  • [3a0cb8fcae] - test: refactored http test to use countdown (Mithun Sasidharan) #17241
  • [f3c1158f57] - test: Update test-http-parser-free to use countdown timer (Mandeep Singh) #17322
  • [956198f30d] - test: Update test-http-client-agent to use countdown timer (Mandeep Singh) #17325
  • [35cc1b3fcc] - test: fix isNAN->Number.isNAN (yuza yuko) #17309
  • [32ebcf7fd0] - test: make use of Number.isNaN to test-readfloat.js (Hiromu Yoshiwara) #17310
  • [1cd4076a4e] - test: replace function with arrow function (spring_raining) #17312
  • [0ef4f78ae0] - test: replace function with arrow function (Hiroaki KARASAWA) #17308
  • [c0c366634d] - test: use arrow function (koooge) #17318
  • [8098a6ed0e] - test: use Number.isNaN() (MURAKAMI Masahiko) #17319
  • [bdbcdebb65] - test: add test of stream Transform (Yoshiya Hinosawa) #17303
  • [75ad37c854] - test: use common.crashOnUnhandledRejection (Kcin1993) #17235
  • [b63f51aa7f] - test: use common.crashOnUnhandledRejection (zhengyuanjie) #17215
  • [797e33b602] - test: use common.crashOnUnhandledRejection (Jason Chung) #17233
  • [699659e5df] - test: use common.crashOnUnhandledRejection() (sorarize@gmail.com) #17232
  • [89f1b6c041] - test: add common.crashOnHandleRejection (jackyen) #17225
  • [7cbdeefc7e] - test: remove unlink function which is needless (buji) #17119
  • [7c57ab76ec] - test: dont need to remove nonexistent directory (buji) #17119
  • [71671df00e] - test: fix linting error (James M Snell) #17251
  • [6620e761d7] - test: use crashOnUnhandledRejection (Roth Peng) #17226
  • [d4a5499360] - test: use common.crashOnUnhandledRejection (esbb48) #17218
  • [353e66f823] - test: use arrow function instead of bind (Lance Ball) #17202
  • [289ebb19b5] - test: use crashOnUnhandledRejection (Chiahao Lin) #17219
  • [e7ca894114] - test: use common.crashOnUnhandledRejection (Whien) #17214
  • [0963c75c8e] - test: clean up inappropriate language (Gus Caplan) #17170
  • [5d488ee13f] - test: wrap callback in common.mustCall (suman-mitra) #17173
  • [fd36b27949] - test: remove unused parameter in test-next-tick-error-spin.js (Francois KY) #17185
  • [43e4669467] - test: remove unused parameter (Fran Herrero) #17193
  • [4eb1b58481] - test: remove unused variable (Guillaume Flandre) #17187
  • [39cd0a8abc] - test: utilize common.mustCall() on child exit (sreepurnajasti) #16996
  • [fe2188620d] - test: use arrow functions instead of bind (Tobias Nießen) #17070
  • [92daa2d2d3] - test: make REPL test pass in coverage mode (Anna Henningsen) #17082
  • [c18a450e9d] - test: add coverage to tty module (cjihrig) #16959
  • [ad0d878772] - tools: simplify buffer-constructor rule (cjihrig) #17572
  • [5383422672] - tools: simplify prefer-assert-methods rule (cjihrig) #17572
  • [3e70ee84fb] - tools: simplify prefer-common-mustnotcall rule (cjihrig) #17572
  • [afd4d9e348] - tools: add Boxstarter script (Bartosz Sosnowski) #17046
  • [466e94a6c1] - tools: avoid using process.cwd in tools/lint-js (Tobias Nießen) #17121
  • [dcf7646725] - tools: fail tests if malformed status file (Rich Trott) #16703
  • [d176073511] - tty: refactor exports (cjihrig) #16959

2017-12-08, Version 6.12.2 'Boron' (LTS), @MylesBorins

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/ for details on patched vulnerabilities.

Fixes for the following CVEs are included in this release:

  • CVE-2017-15896
  • CVE-2017-3738 (from the openssl project)

Notable Changes

  • deps:
    • openssl updated to 1.0.2n (Shigeki Ohtsu) #17526

Commits

2017-12-05, Version 6.12.1 'Boron' (LTS), @MylesBorins

This LTS release comes with 263 commits. This includes 173 which are test related, 41 which are doc related, 18 which are build / tool related and 1 commit which is an update to a dependency.

Notable Changes

  • build:
    • fix npm install with --shared (Ben Noordhuis) #16438
  • build:
    • building with python 3 is now supported (Emily Marigold Klassen) #16058
  • src:
    • v8 options can be specified with either '_' or '-' in NODE_OPTIONS (Sam Roberts) #14093

Commits

  • [575a920a16] - assert: fix actual and expected order (Steve Jenkins) #15866
  • [a0c1d10e91] - build: remove cctest extension (Yihong Wang) #16680
  • [c287f1235c] - build: include src\tracing when linting on win (Daniel Bevenius) #16720
  • [706812bc2f] - build: skip bin override on windows (Hitesh Kanwathirtha) #16460
  • [f4627603aa] - build: fix npm install with --shared (Ben Noordhuis) #16438
  • [6d63612e93] - build: correct minor typo in lttng help message (Daniel Bevenius) #16101
  • [de82db7f85] - build: ignore empty folders in test-addons (Gregor) #16031
  • [ac1beb0fb0] - build: use bin override if no python in PATH (Bradley T. Hughes) #16241
  • [d4b3b633d8] - build: allow build with system python 3 (Emily Marigold Klassen) #16058
  • [fc2ab06014] - build, windows: use /bigobj for debug builds (Nikolai Vavilov) #16289
  • [ccca11d026] - build,win: set /MP separately in Debug and Release (Nikolai Vavilov) #16415
  • [a14f564686] - build,win: use /MP for debug builds (Nikolai Vavilov) #16333
  • [8813867577] - child_process: set shell to false in fork() (Alex Gresnel) #15352
  • [f2cafff9b0] - crypto: fix error of createCipher in wrap mode (Shigeki Ohtsu) #15037
  • [7115079c4f] - crypto: warn if counter mode used in createCipher (Shigeki Ohtsu) #13821
  • [50c3dabc0f] - deps: backport 4af8029 from upstream V8 (Michaël Zasso) #17290
  • [101eb981fe] - doc: mention constant-time in crypto doc (Mithun Sasidharan) #16604
  • [1bc5c3836c] - doc: recommend node-core-utils for metadata (Rich Trott) #16978
  • [4583f1be0c] - doc: reorganize COLLABORATOR_GUIDE.md (Rich Trott) #15710
  • [fce790285f] - doc: improve documentation for the vm module (Franziska Hinkelmann) #16867
  • [727a0fe641] - doc: update subprocess.killed (cjihrig) #16748
  • [44c0385b04] - doc: more accurate zlib windowBits information (Anna Henningsen) #16511
  • [732af9b8a4] - doc: add Gibson Fahnestock to Release team (Gibson Fahnestock) #16620
  • [935b15285f] - doc: slightly relax 50 character rule (James M Snell) #16523
  • [39c63da6d2] - doc: add note to releases.md (Jon Moss) #16507
  • [60ae428f30] - doc: add dot in documentations (erwinwahyura) #16542
  • [7ae23b744b] - doc: fix missing newline character (Daijiro Wachi) #16447
  • [af869f03c1] - doc: add recommendations for first timers (Refael Ackermann) #16350
  • [b7d609c2f8] - doc: replace undocumented encoding aliases (Vse Mozhet Byt) #16368
  • [2cbf75da7e] - doc: replace methods used in the example code (Damian) #16416
  • [0b5a0ada2a] - doc: fix comment in assert.md (umatoma) #16335
  • [4fbc490704] - doc: add space after period (Diego Rodríguez Baquero) #16334
  • [c3cc0fd258] - doc: minor correction to note on process section (Daniel Bevenius) #16311
  • [47bf494979] - doc: add apapirovski to collaborators (Anatoli Papirovski) #16302
  • [9c96d7f4fd] - doc: clarify os.cpus() returns logical CPU cores (Luke Childs) #16282
  • [ba62b0e48a] - doc: support multidimensional arrays in type link (Vse Mozhet Byt) #16207
  • [aefaed40f0] - doc: move Shigeki to TSC Emeritus (Rich Trott) #16195
  • [1fdcf75f9c] - doc: Update a typo in module.js' comments (Orta) #16205
  • [799c6fdc1c] - doc: add missing comma (Jon Moss) #16204
  • [8c070f9ed5] - doc: added note to fs.watchFile on previousStat (NiveditN) #16099
  • [2515cad90e] - doc: ensure collaborators validate commits (Bradley Farias) #16162
  • [7647d41da1] - doc: move 8 collaborators to emeriti (Rich Trott) #16173
  • [de8155ebf2] - doc: include V8 commit URL in V8 backport guide (Gibson Fahnestock) #16054
  • [6f1ba792d7] - doc: add pronoun for fhinkel (F. Hinkelmann) #16069
  • [8da3b51472] - doc: document windows shell support (Tim Ermilov) #16104
  • [281023b20d] - doc: exempt test/doc only changes from 48-hr rule (Anna Henningsen) #16135
  • [04d5835722] - doc: rename good first contrib label (Jeremiah Senkpiel) #16150
  • [1064258f9d] - doc: remove bold typography from STYLE_GUIDE.md (Rich Trott) #16085
  • [23e9bba9c8] - doc: ctc -> tsc in onboarding extras (Bryan English) #15621
  • [ff66d63642] - doc: fix emitKeypressEvents stream type (Oblosys) #15399
  • [1bd6962842] - doc: make stream.Readable consistent (Sakthipriyan Vairamani (thefourtheye)) #16786
  • [6b9bd51021] - doc: correct effects to affects (gowpen) #16794
  • [6af9311939] - doc: correct EventEmitter reference (gowpen) #16791
  • [1a633e3cd8] - doc: add docs for Zlib#close() (Luigi Pinca) #16592
  • [290df5ac41] - doc: add details about rss on process.memoryUsage (Anthony Nandaa) #16566
  • [3e6da45ce0] - doc: howto decode buffers extending from Writable (dicearr) #16403
  • [c64ed977fc] - doc, win: remove note about resize (Bartosz Sosnowski) #16320
  • [644989cf6a] - fs: use Number::New since all fields are uint64_t (Huáng Jùnliàng) #16705
  • [925e58fecb] - fs: fix stat dev unsigned cast overflow (Huáng Jùnliàng) #16705
  • [92b13e455f] - https: Use secureProtocol in Agent#getName (Andreas Lind) #9452
  • [b0ac76d145] - meta: add note about email sync to CONTRIBUTING.md (Vse Mozhet Byt) #16340
  • [bf7f63d51b] - net: change assert to conform to other files (James Hodgskiss) #15861
  • [ae3ad5502b] - src: remove unused includes from node_wrap.h (Daniel Bevenius) #16179
  • [a368e5fa63] - src: make StreamBase prototype accessors robust (Joyee Cheung) #16860
  • [c79dd9e3ce] - src: CHECK() for argument overflow in Spawn() (cjihrig) #16761
  • [7c69ca58e0] - src: move handle properties to prototype (Ben Noordhuis) #16482
  • [c87a620ed8] - src: remove superfluous HandleScope (Ben Noordhuis) #16482
  • [2f5edc6fd5] - src: remove unused include in tty_wrap.h (Daniel Bevenius) #16379
  • [42cb64ee91] - src: fix etw provider include on Windows (Joyee Cheung) #16639
  • [b00ced5b52] - src: do not include x.h if x-inl.h is included (Joyee Cheung) #16548
  • [a4688b0c43] - src: make header file self-contained (Joyee Cheung) #16518
  • [cf80089477] - src: node_dtrace line continuations clean up (Daniel Bevenius) #15777
  • [4639cfff0a] - src: rename perfctr_macros.py->noperfctr_macros.py (Daniel Bevenius) #16100
  • [70f574e6ff] - src: add help for NODE_PENDING_DEPRECATION env (Thomas Corbière) #15609
  • [75b1e30e6b] - src: add --pending-deprecation to NODE_OPTIONS (Thomas Corbière) #15494
  • [f659e49862] - src: whitelist v8 options with '_' or '-' (Sam Roberts) #14093
  • [79171e0c2f] - src: turn key length exception into CHECK (Ben Noordhuis) #15183
  • [e18df46092] - src: notify V8 for low memory when alloc fails (Anna Henningsen) #8482
  • [6a0eb9f6cf] - src: provide allocation + nullptr check shortcuts (Anna Henningsen) #8482
  • [4aec8cfcd2] - src: pass desired return type to allocators (Anna Henningsen) #8482
  • [19f3ac9749] - src: add Malloc() size param + overflow detection (Anna Henningsen) #8482
  • [6269ba334d] - test: allow tests to pass without internet (Daniel Bevenius) #16255
  • [f0eeddb4b8] - test: reuse existing PassThrough implementation (Tobias Nießen) #16936
  • [4752fc4336] - test: refactor comments in test-child-process-spawnsync-maxbuf (ChrBergert) #16829
  • [f226ca6b12] - test: used fixturesDir from fixtures modules (Klemen Kogovsek) #16813
  • [5e2231e407] - test: add a test description (Grant Gasparyan) #16833
  • [a8cff7ad4a] - test: use common/fixtures module in hash-seed test (Javier Blanco) #16823
  • [090cc9713e] - test: improve template value for test message (Stephan Smith) #16826
  • [1d3793eb77] - test: change concatenated string to template (Deepthi Sebastian) #16929
  • [79dfc3f475] - test: change concatenated string to template (Anawesha Khuntia) #16912
  • [2232231d4f] - test: change string concatenation to template (Suryanarayana Murthy N) #16919
  • [674cbf8402] - test: replace string concatenation with template (Kabir Islam) #16916
  • [969defaae9] - test: enable mustCall() during child exit (Vipin Menon) #16915
  • [9d4abaa243] - test: replace string concatenation with template (Tanvi Kini) #16913
  • [2a1ebae567] - test: cover vm.runInNewContext() (cjihrig) #16906
  • [2043ce39d5] - test: improve assertion messages (Neil Vass) #16885
  • [668644008e] - test: improve assert messages in stream test (Katie Stockton Roberts) #16884
  • [714eb0bc7c] - test: improve assertion in test-require-dot (Adam Wegrzynek) #16805
  • [8e5b4f543c] - test: add values to error message (Adam Jeffery) #16831
  • [b3b7858a97] - test: replace common.fixtiresDir with fixtures.readKey() (woj) #16817
  • [3acf156b68] - test: remove message argument in cluster setup test (mbornath) #16838
  • [cedf8a1cb2] - test: move test-http-keepalive-maxsockets to sequential (Rich Trott) #16777
  • [ffbb4e68e8] - test: use default assertion message (jonask) #16819
  • [dd558a56af] - test: include file mode in assert message (Sascha Tandel) #16815
  • [3d8b3f7b4a] - test: refactor tls test to use fixtres.readSync (Brian O'Connell) #16816
  • [54d4557199] - test: use fixtures module in test-repl (Maring, Damian Lion) #16809
  • [9f9e824fc5] - test: update test to use fixtures.readKey (Dara Hayes) #16811
  • [a99755f3fd] - test: fix typos in read-buffer tests (Jimi van der Woning) #16834
  • [e7a456a5ee] - test: replace common.fixturesDir with fixtures module (Dumitru Glavan) #16803
  • [04af0fdab7] - test: replace common.fixturesDir with fixtures.readSync() (Adri Van Houdt) #16802
  • [755f5e3fd1] - test: update test to use fixtures (Adam Wegrzynek) #16799
  • [143d8a1b3d] - test: fix typo (Oscar Funes) #15938
  • [84741fdc81] - test: update test-timers-block-eventloop.js (zhangzifa) #16314
  • [8e62fcb2cf] - test: replace fixturesDir in test-tls-connect (Casie Lynch) #15849
  • [d6dc579f3c] - test: use fixtures module (Iryna Yaremtso) #15901
  • [10c24a157c] - test: add details in assertions in test-vm-context (Vladimir Ilic) #16116
  • [cb1d16d26b] - test: increase fs.exists coverage (Nigel Kibodeaux) #15963
  • [d3981ae552] - test: use fixtures module in test-fs-realpath.js (Raphael Rheault) #15904
  • [532c9606b3] - test: use fixtures module (Scott J Beck) #15843
  • [58fe9b4ec3] - test: imporove assert messages (Hadis-Fard) #16021
  • [91f9779794] - test: show values instead of assertion message (Cheyenne Arrowsmith) #15979
  • [0ace5a158d] - test: include values in assertion messages (nhoel) #15996
  • [8663b05711] - test: use process.features.debug in common module (Rich Trott) #16537
  • [1fffa165a1] - test: use common.buildType in repl-domain-abort (Rich Trott) #16538
  • [7d93da54bb] - test: skip test-process-config if no config.gypi (Gibson Fahnestock) #16436
  • [5c20164354] - test: use fixtures module in tls-handshake-error (Mark Walker) #15939
  • [4f04d15aa3] - test: add failing vm tests to known_issues (Michaël Zasso) #16410
  • [2b1042bb29] - test: allow for different nsswitch.conf settings (Daniel Bevenius) #16378
  • [5095b991c0] - test: handle blank shells in test-os.js (Gibson Fahnestock) #16287
  • [62dd6a2c40] - test: increase enoughTestMem to 1.75 Gb (Rich Trott) #16374
  • [9c229b4bd3] - test: use fixtures.readKey in https-timeout-server (Nicolas 'Pixel' Noble) #15871
  • [773652903d] - test: use fixtures.readKey instead of fixturesDir (Paul Marion Camantigue) #15976
  • [34dfce7710] - test: replace fixturesDir with fixtures module (tpurcell) #16262
  • [0a88e1bd60] - test: replace fixturesDir with fixtures module (André Føyn Berge) #15947
  • [9e74e542a2] - test: skip test due to file size limit (jBarz) #16273
  • [e070e592dd] - test: remove error msg in test-vm-symbols.js (Daniel Abrão) #15873
  • [257ece287c] - test: remove error messages in test-buffer-alloc (Braden Whitten) #15867
  • [32fa91519a] - test: update assert error messages (Omar Gonzalez) #16035
  • [da85e6c552] - test: expand error message (Stefania Sharp) #15991
  • [cbbe125f71] - test: use fixtures module (Kanika Shah) #15959
  • [6f15b011c0] - test: remove literal messages (Oscar Funes) #15938
  • [aa269ad59b] - test: fix stderr reference (Oscar Funes) #15938
  • [3f35fc063e] - test: use fixtures module in test-https-truncate (Gene Wu) #15875
  • [c58eaaf1a8] - test: use fixtures module (Alvaro Cruz) #15874
  • [48e1320c44] - test: use fixtures module (Lance Barlaan) #15872
  • [339bdca558] - test: use default message for assert.strictEqual (hwaisiu) #15970
  • [ab580c3ae2] - test: improve assert message in internet test (Nikki St Onge) #15998
  • [6285e7221e] - test: replace common.fixturesDir (Shawn McGinty) #15834
  • [fa8315cb68] - test: refactor test-process-kill-null (Luigi Pinca) #16236
  • [c26abc8e94] - test: add missing spaces in concatenations (Vse Mozhet Byt) #16244
  • [a94a75f69a] - test: update output to include exit code & signal (Jenna Zeigen) #15945
  • [8eb84d6780] - test: change common.fixturesDir to fixtures.path (tejbirsingh) #15860
  • [806f03e54c] - test: split up and refactor test-domain (Anna Henningsen) #13614
  • [e5fbc03563] - test: replace fixturesDir with common.fixtures (Kasim Doctor) #15810
  • [2ab826c497] - test: replaced fs.readSync with fixtures.readSync (Lam Chan) #15882
  • [1fe3e866cf] - test: improve coverage for process.umask (Evan Lucas) #16188
  • [0689ea66ed] - test: remove message from notStrictEqual (twk-b) #16048
  • [fafbbb6347] - test: use fixtures module (Ben Hallion) #15808
  • [f2108fa51d] - test: use ES6 classes instead of util.inherits (Tobias Nießen) #16938
  • [eb11a70424] - test: refactor test-cluster-setup-master (Jean-Baptiste Brossard) #16065
  • [e00a4c820f] - test: replace fixtureDir with fixtures methods (Vladimir Ilic) #16114
  • [f46e1187b3] - test: remove error messages in crypto-binary test (Kim Gentes) #15981
  • [086d8519a1] - test: use fixtures module over fixturesDir (JamesNimlos) #15847
  • [38179fd1ed] - test: use common.fixtures module (Shaun Sweet) #15992
  • [229a1fa299] - test: replace fixturesDir with fixtures.path (Bear Trickey) #15994
  • [c10594f70f] - test: update fixturesDir import (Tyler Seabrook) #15887
  • [53449f303f] - test: replace fixturesDir with fixtures methods (Komivi Agbakpem) #15967
  • [a28d666f0e] - test: replace fixturesDir with the fixtures module (WeiPlanet) #16027
  • [d59175090d] - test: change crypto decipheriv assertion messages (Daniel Kostro) #16007
  • [541866ea86] - test: replaces fixturesDir with fixtures (Mike Fleming) #15835
  • [57ae105c72] - test: remove test messages for assert.strictEqual (Ali Groening) #15995
  • [87b9b7c8c4] - test: move to common.fixtures (Justin Beckwith) #15987
  • [72f69f3c2c] - test: added fixtures module (Michael Pal) #15980
  • [65c5ff8e92] - test: use fixtures in test-tls-multi-key.js (Cheyenne Arrowsmith) #15844
  • [9eac5aab8c] - test: switch to use common.fixtures.fixturesDir (Roger Jiang) #15814
  • [449538851c] - test: use common.fixtures module (Chi-chi Wang) #16012
  • [04f3f6dd6a] - test: escape script filename on Windows (Bartosz Sosnowski) #16124
  • [501acdf38c] - test: improve assert message in test-dh-regr (Mabry Cervin) #15912
  • [4c98e07702] - test: fixtures in test-net-pipe-connect-errors (Eric Freiberg) #15922
  • [244bfb398d] - test: fixtures in test-process-redirect-warnings-env (Kat Rosario) #15930
  • [18479d3cff] - test: fix ordering of strictEqual actual/expected (Chad Zezula) #16008
  • [66fd6a1409] - test: use fixtures.readSync (szhang351)
  • [6d33564b1a] - test: replaced fixturesDir with common.fixtures (Dolapo Toki) #15836
  • [a6f04bec9e] - test: use fixtures.fixturesDir (Gene Wu) #15822
  • [2103453977] - test: replaces fixturesDir with fixtures methods (Christian Murphy) #15817
  • [e705ad2076] - test: fixtures in test-process-redirect-warnings (Nicolas Chaulet) #15917
  • [9ddbcc877b] - test: update test-crypto-from-binary (Raj Parekh) #16011
  • [6b8830c1df] - test: use fixtures in test-https-set-timeout-server (Bob Clewell) #15886
  • [57590cd097] - test: make use of common/fixtures.fixturesDir (Jem Bezooyen) #15815
  • [c9d07faa04] - test: use common/fixtures in test-https-close (Alberto Lopez de Lara) #15870
  • [68a2d394dd] - test: use fixtures in test-process-warnings (Suresh Srinivas) #15869
  • [28756b318a] - test: use fixtures in tls-friendly-error-message (tobyfarley) #15905
  • [a05fe5f716] - test: use common/fixtures in tls-connect-no-host (Donovan Buck) #15986
  • [cf31eb7532] - test: use common/fixtures in test-https-agent (jpaulptr) #15941
  • [c9c37d076c] - test: use common fixtures module (Kat Rosario) #15856
  • [76ab029bea] - test: fs.readFileSync -> fixtures.readKey (Ethan Brown) #16030
  • [dabdb2d186] - test: reduce run time for misc benchmark tests (Rich Trott) #16120
  • [3f56ac4450] - test: improve assertion message in dgram test (Shakeel Mohamed) #16121
  • [44a60c3807] - test: use of fixtures in test-pipe-head (Nicolas Chaulet) #15868
  • [c4db4e44b8] - test: use fixtures in test-https-localaddress.js (Charles T Wall III) #15811
  • [c252d874d7] - test: use common/fixtures in fs-symlink test (AlexeyM) #15830
  • [07c14f3054] - test: replace common.fixtures with fixtures module (Jonathan Eskew) #15877
  • [0f23836e7b] - test: improve assert message (Tri Nguyen) #15909
  • [bbdbf8b9b0] - test: replace fixturesDir with fixtures method (suraiyah) #15894
  • [c35420d21d] - test: normalize fixtures use (Ruxandra Fediuc) #15855
  • [3c176fd6f6] - test: replace common.fixturesDir w/common.fixtures (Jason Walton) #15853
  • [77f9ef32bd] - test: switch to use common.fixtures module for fixturesDir (r1cebank) #15821
  • [71e68799ef] - test: fixturesDir replaced to fixtures module (Pawel Golda) #15809
  • [d70f9f6a35] - test: replace common.fixturesDir with fixtures (Stefania Sharp) #16015
  • [4cf84ea76e] - test: replaces common.fixturesDir usage (Ruy Adorno) #15818
  • [788d7db4e9] - test: use common.fixtures.path() (Tobias Kieslich) #16112
  • [b7865ea70d] - test: replace common.fixturesDir with fixtures (Shakeel Mohamed) #15857
  • [9b39ca6cbb] - test: use fixtures module in test (Nigel Kibodeaux) #16117
  • [5e65069289] - test: use template literals in test-string-decoder (Edward Andrew Robinson) #15884
  • [d2b74fe1e3] - test: switch to fixtures module (Christopher Sidebottom) #15880
  • [1144be09b7] - test: rewrite assert message (Martin Michaelis) #15879
  • [095df35a5e] - test: change fixturesDir to fixtures.path (Guilherme Akio Sakae) #15863
  • [4fd5bf5ff7] - test: replace fixturesDir with common.fixtures (Oliver Luebeck) #15907
  • [e3e234ea1c] - test: update http test client function signatures (Jakub Mrowiec - Alkagar) #15807
  • [08ca73f52a] - test: replace common.fixturesDir w/ fixtures.path (Druotic) #15819
  • [39ae3f1802] - test: replace fixtureDir with fixtures.path (matthewreed26) #15943
  • [1365a6f597] - test: use common.fixtures module for file path (Adil L) #16017
  • [bd8d4401ee] - test: use fixtures module (Maurice Hayward) #16034
  • [bba5263d00] - test: replace fixturesDir with fixtures module (tabulatedreams) #16036
  • [a8e7fa4e75] - test: replace fixturesDir with fixtures module (Ivan Etchart) #15893
  • [1fc3851642] - test: change fixturesDir to fixtures.path (Savio Lucena) #15902
  • [683e48cb55] - test: changed fixtures require (creisle) #15899
  • [f82f691d5e] - test: replaced fixturesDir with fixtures module (Alex McKenzie) #15908
  • [e68ef291e7] - test: use common.fixtures in tls test (Ben Michel) #15965
  • [71daa68c3d] - test: use fixtures module instead of common (Joe Grace) #15925
  • [e81fc8aca7] - test: replaced fixturesDir with fixtures module (Alex McKenzie) #15927
  • [33ea6deeab] - test: replace fixturesDir with fixtures module (Greg Matthews) #15932
  • [be2b70bb56] - test: replace fixturesDir with fixtures (Mujtaba Al-Tameemi) #15949
  • [25a5bf02c7] - test: remove common.fixturesDir (Luis Del Águila) #15950
  • [51d87e338e] - test: replace fixturesDir with fixtures module (BinarySo1o) #15961
  • [05286b6c80] - test: replaced fixturesDir with common.fixtures (jopann) #15971
  • [683c5fa58f] - test: use common.fixtures module in test-preload (Laura Cabrera) #15975
  • [000965d427] - test: replaced common.fixturesDir with readKey (Sean Cox) #15933
  • [0f8b315a9e] - test: replace fixturesDir in tls-env-bad-extra-ca (Annie Weng) #15813
  • [48a55d1364] - test: use common.fixtures in checkServerIdentity (Emily Marigold Klassen) #15951
  • [909e587a93] - test: replaced common.fixturesDir with readKey (rhalldearn) #15952
  • [544cbd7884] - test: replace fixturesDir with fixtures.readKey (Thomas Schorn) #15948
  • [4005ed619f] - test: replace common.fixturesDir with fixtures. (Sam Skjonsberg) #15802
  • [8c5b51d9c3] - test: replace fixturesDir with common.fixtures (rachelnicole) #16051
  • [107acb1c56] - test: update fixturesDir to fixtures.readKey (bitandbang) #16016
  • [643a2c6b19] - test: replace fixturesDir with common.fixtures (Pooya Paridel) #15837
  • [14aee78554] - test: update 'fixturesDir' refs in a test file (James M. Greene) #15824
  • [e1c45efdbb] - test: use fixtures.readKey in https-agent test (Greg Byram) #15913
  • [2c6aa17fa9] - test: add test for fork() + shell (cjihrig) #15352
  • [148a030345] - test: remove node-tap lookalike (cjihrig) #13707
  • [fa5c706bec] - test: refactor exitedAfterDisconnect test (Rich Trott) #16729
  • [9416dab7ac] - test: use fixtures module in test-https-pfx (Ken Takagi) #15895
  • [7e9779aade] - test: refactor test-readline-keys (Rich Trott) #11281
  • [8264328087] - test,net: remove scatological terminology (Rich Trott) #16599
  • [bb81390db2] - timers: fix eventloop block (zhangzifa) #15072
  • [f3749d7b2c] - tools: remove unneeded parentheses in doc/html.js (Vse Mozhet Byt) #16845
  • [1c192f50f6] - tools: replace string concatenation with template literals (Kevin Yu) #16804
  • [ce007be05b] - tools: replace string concatenation with template literals (Giovanni Lela) #16806
  • [d165d3fd1c] - tools: replace string concetation with templates (Patrick Heneise) #16801
  • [a8d7f5f52e] - tools: fix cpplint.py when path contains non-ascii (sharkfisher) #16047
  • [b48471ac10] - tools: rename unused variale in more pythonic way (Nikhil Komawar) #16171
  • [5b5b5c0f15] - tools: use template literal in error message (Tim Chon) #15846
  • [ae5930bbe4] - tty,doc: add type-check to isatty (Bryan English) #15567

2017-11-07, Version 6.12.0 'Boron' (LTS), @MylesBorins

This LTS release comes with 127 commits. This includes 45 which are test related, 33 which are doc related, 13 which are updates to dependencies and 7 commits which are related to build / tools.

This release includes a security update to openssl that has been deemed low severity for the Node.js project.

Notable Changes

  • assert:
    • assert.fail() can now take one or two arguments (Rich Trott) #12293
  • crypto:
    • add sign/verify support for RSASSA-PSS (Tobias Nießen) #11705
  • deps:
    • upgrade openssl sources to 1.0.2m (Shigeki Ohtsu) #16691
    • upgrade libuv to 1.15.0 (cjihrig) #15745
    • upgrade libuv to 1.14.1 (cjihrig) #14866
    • upgrade libuv to 1.13.1 (cjihrig) #14117
    • upgrade libuv to 1.12.0 (cjihrig) #13306
  • fs:
    • Add support for fs.write/fs.writeSync(fd, buffer, cb) and fs.write/fs.writeSync(fd, buffer, offset, cb) as documented (Andreas Lind) #7856
  • inspector:
    • enable --inspect-brk (Refael Ackermann) #12615
  • process:
    • add --redirect-warnings command line argument (James M Snell) #10116
  • src:
    • allow CLI args in env with NODE_OPTIONS (Sam Roberts) #12028
    • --abort-on-uncaught-exception in NODE_OPTIONS (Sam Roberts) #13932
    • allow --tls-cipher-list in NODE_OPTIONS (Sam Roberts) #13172
    • use SafeGetenv() for NODE_REDIRECT_WARNINGS (Sam Roberts) #12677
  • test:
    • remove common.fail() (Rich Trott) #12293

Commits

2017-10-24, Version 6.11.5 'Boron' (LTS), @MylesBorins

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/oct-2017-dos/ for details on patched vulnerabilities.

Notable Changes

  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

2017-10-03, Version 6.11.4 'Boron' (LTS), @MylesBorins

This LTS release comes with 91 commits. This includes 29 which are test related, 28 which are doc related, 11 which are build / tool related and 3 commits which are updates to dependencies.

Notable Changes

  • net:
    • support passing undefined to listen() to match behavior in v4.x and v8.x (Sam Roberts) #14234

Commits

2017-09-05, Version 6.11.3 'Boron' (LTS), @MylesBorins

This LTS release comes with 152 commits. This includes 75 which are test related, 25 which are doc related, 21 which are build / tool related and 3 commits which are updates to dependencies.

Notable Changes

  • build:
    • Codesigning is fixed on macOS (Evan Lucas) #14179
  • deps:
    • Snapshots are turned back on!!! (Yang Guo) #14385
  • path:
    • win32 volume-relative paths are working again! (Timothy Gu) #14440
  • tools:
    • v6.x can now build with ICU 59 (Steven R. Loomis) #12078

Commits

2017-08-01, Version 6.11.2 'Boron' (LTS), @MylesBorins

This LTS release comes with 221 commits. This includes 80 which are test related, 52 which are doc related, 32 which are build / tool related and 10 commits which are updates to dependencies.

Notable Changes

  • configure:
    • add mips64el to valid_arch (Aditya Anand) #13620
  • crypto:
  • deps:
    • upgrade OpenSSL to version 1.0.2.l (Shigeki Ohtsu) #12913
  • http:
    • parse errors are now reported when NODE_DEBUG=http (Sam Roberts) #13206
    • Agent construction can now be envoked without new (cjihrig) #12927
  • zlib:
    • node will now throw an Error when zlib rejects the value of windowBits, instead of crashing (Alexey Orlenko) #13098

Commits

  • [8d043876c1] - doc/tools: fix more type inconsistencies (Roman Reiss) #11697
  • [8860117600] - addons: remove semicolons from after module definition (Gabriel Schulhof) #12919
  • [bb3f54771b] - benchmark: update an obsolete path (Vse Mozhet Byt) #12904
  • [7cc68e2c62] - benchmark: add final clean-up to module-loader.js (Vse Mozhet Byt) #12102
  • [0cc7addcb2] - benchmark,windows: TCP.readStart() meaningful only after completion (Refael Ackermann) #12258
  • [8dec80211e] - build: run test-hash-seed at the end of test-v8 (Michaël Zasso) #14219
  • [bb1b06a4e5] - build: check for linter in bin rather than lib (Rich Trott) #13645
  • [f571868b1b] - build: fail linter if linting not available (Gibson Fahnestock) #13658
  • [b0c6bf829b] - build: use existing variable to reduce complexity (Bryce Baril) #2883
  • [ebbde61927] - build: xz tarball extreme compression (Peter Dave Hello) #10626
  • [a354134f6a] - build: ignore more VC++ artifacts (Refael Ackermann) #13208
  • [85829a65e8] - build: avoid /docs/api and /docs/doc/api upload (Rod Vagg) #12957
  • [7bda9620c9] - build: simplify if in setting of arg_paths (Refael Ackermann) #12653
  • [2724fe34ef] - build: add static option to vcbuild.bat (Tony Rice) #12764
  • [7458d4ef98] - build: disable -O3 for C++ coverage (Anna Henningsen) #12406
  • [8b8bf39822] - build: avoid passing kill empty input in Makefile (Gibson Fahnestock) #12158
  • [914f368efd] - build: clear stalled jobs on POSIX CI hosts (Rich Trott) #11246
  • [890e210a5f] - build: fix openssl link error on windows (Daniel Bevenius) #13078
  • [3bb117e310] - build: enable cctest to use generated objects (Daniel Bevenius) #11956
  • [e5ca046c0a] - build, doc, tools: add eslint-plugin-markdown (Vse Mozhet Byt) #14067
  • [b46cf35526] - child_process: fix deoptimizing use of arguments (Vse Mozhet Byt) #11535
  • [edbe442938] - cluster, dns, repl, tls, util: fix RegExp nits (Vse Mozhet Byt) #13536
  • [a5f3b6fa7c] - configure: add mips64el to valid_arch (Aditya Anand) #13620
  • [3b44e5e32c] - crypto: return CHECK_OK in VerifyCallback (Daniel Bevenius) #13241
  • [1bfd177f09] - crypto: update root certificates (Ben Noordhuis) #13279
  • [b6f3581ea4] - crypto: update root certificates (Ben Noordhuis) #12402
  • [1d509801e9] - crypto: throw proper errors if out enc is UTF-16 (Anna Henningsen) #12752
  • [8f8dd97072] - crypto: clear err stack after ECDH::BufferToPoint (Ryan Kelly) #13275
  • [3891759afc] - deps: update openssl asm and asm_obsolete files (Shigeki Ohtsu) #12913
  • [92583c4c81] - deps: cherry-pick 4ae5993 from upstream OpenSSL (Shigeki Ohtsu) #12913
  • [ee40a73d44] - deps: update openssl asm and asm_obsolete files (Daniel Bevenius) #13233
  • [a6a85c49c3] - deps: update openssl config files (Daniel Bevenius) #13233
  • [a579a776a3] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) nodejs/io.js#1836
  • [b937c41405] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389
  • [69570d370a] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389
  • [5703d22849] - deps: copy all openssl header files to include dir (Daniel Bevenius) #13233
  • [77a9198aca] - deps: upgrade openssl sources to 1.0.2l (Daniel Bevenius) #13233
  • [5b4c431365] - deps: add example of comparing OpenSSL changes (Daniel Bevenius) #13234
  • [18cbee236d] - dns: fix crash using dns.setServers after resolve4 (XadillaX) #13050
  • [8c0849d5db] - doc: conform to rules for eslint-plugin-markdown (Vse Mozhet Byt) #12563
  • [7deb259ccb] - doc: prepare js code for eslint-plugin-markdown (Vse Mozhet Byt) #12563
  • [59eb761797] - doc: document and test that methods return this (Sam Roberts) #13553
  • [fcb27fa7a1] - doc: remove leftover WHATWG url.format section (Roman Reiss) #14351
  • [e400ef9a76] - doc: don't suggest setEncoding for binary streams (Rick Bullotta) #11363
  • [092bba5cbf] - doc: update backporting guide (Refael Ackermann) #13749
  • [e2abda87f5] - doc: mention rebasing of v?.x-staging post release (Anna Henningsen) #13742
  • [24feb333c8] - doc: path.relative uses cwd (DuanPengfei) #13714
  • [71581e9308] - doc: small makeover for onboarding.md (Anna Henningsen) #13413
  • [8f430e774b] - doc: note that EoL platforms are not supported (Gibson Fahnestock) #12672
  • [9fa70069b3] - doc: use HTTPS URL for suggested upstream remote (Nikolai Vavilov) #13602
  • [fa209323af] - doc: update new CTC members (Refael Ackermann) #13534
  • [054f8cdc4d] - doc: corrects reference to tlsClientError (Tarun) #13533
  • [17da29ce84] - doc: emphasize Collaborators in GOVERNANCE.md (Rich Trott) #13423
  • [aea953abc2] - doc: minimal documentation for Emeritus status (Rich Trott) #13421
  • [42a42c0892] - doc: remove note highlighting in GOVERNANCE doc (Rich Trott) #13420
  • [cc492c361f] - doc: resume a stream after pipe() and unpipe() (Matteo Collina) #13329
  • [ae00f25a69] - doc: suggest xcode-select --install (Gibson Fahnestock) #13264
  • [8daab3be31] - doc: remove 'you' from writing-tests.md (Michael Dawson) #13319
  • [f2ede07f17] - doc: add tniessen to collaborators (Tobias Nießen) #13371
  • [a33c6759b6] - doc: create list of CTC emeriti (Rich Trott) #13232
  • [3745fbaa5d] - doc: remove Gitter badge from README (Rich Trott) #13231
  • [a7b51af049] - doc: make spelling of behavior consistent (Michael Dawson) #13245
  • [277de4257d] - doc: add jasongin & kunalspathak to collaborators (Jason Ginchereau) #13200
  • [fb07fbcc81] - doc: don't use useless constructors in stream.md (Vse Mozhet Byt) #13145
  • [cb03bd1f48] - doc: update code example for Windows in stream.md (Vse Mozhet Byt) #13138
  • [079b04e58d] - doc: improve formatting of STYLE_GUIDE.md (Alexey Orlenko) #13135
  • [5f87252969] - doc: fix incorrect keyboard shortcut (Alexey Orlenko) #13134
  • [d4edc82aa5] - doc: edit Error.captureStackTrace html comment (Artur Vieira) #12962
  • [1f9713362d] - doc: add additional useful ci job to list (Michael Dawson) #13086
  • [2d5e2e9cab] - doc: document method for reverting commits (Gibson Fahnestock) #13015
  • [b31e6dfef5] - doc: update COLLABORATOR_GUIDE.md (morrme) #12555
  • [b854d27330] - doc: Change options at STEP 5 in CONTRIBUTING.md (kysnm) #12830
  • [c01a2d545e] - doc: add docs for server.address() for pipe case (Flarna) #12907
  • [83f272d4ee] - doc: fix typo in streams.md (Glenn Schlereth) #12924
  • [28add410c2] - doc: improve path.posix.normalize docs (Steven Lehn) #12700
  • [023ec46d2c] - doc: remove test-npm from general build doc (Rich Trott) #12840
  • [74a6929938] - doc: upgrade Clang requirement to 3.4.2 (Michaël Zasso) #12388
  • [5b379e0aad] - doc: clarify the callback arguments of dns.resolve (Roman Reiss) #9532
  • [f6e58c35b2] - doc: add missing make command to UPGRADING.md (Daniel Bevenius) #13233
  • [a7869541e4] - doc: increase Buffer.concat() documentation (cjihrig) #11845
  • [3b1d9112e0] - doc: update readFileSync in fs.md (Aditya Anand) #12800
  • [bc66495061] - doc: document vm timeout option perf impact (Anna Henningsen) #12751
  • [a3ae360ea6] - doc: modernize and fix code examples in repl.md (Vse Mozhet Byt) #12634
  • [2435af9db6] - doc: update os.uptime() and process.uptime() info (Vse Mozhet Byt) #12294
  • [b2e58b6c7a] - doc: minor improvements in BUILDING.md (Sakthipriyan Vairamani (thefourtheye)) #11963
  • [7ba172f56f] - doc: argument types for https methods (Amelia Clarke) #11681
  • [eb9e281b6b] - doc: update output examples in debugger.md (Vse Mozhet Byt) #10944
  • [b62cec8b02] - doc: linkify type[] syntax, support lowercase for primitives (Roman Reiss) #11167
  • [dd1fb98bda] - doc: consistent case for primitive types (Roman Reiss) #11167
  • [c43866954e] - doc,build: update configure help messages (Gibson Fahnestock) #12978
  • [0d35bcdf84] - doc,stream: clarify 'data', pipe() and 'readable' (Matteo Collina) #13432
  • [351be2d5a8] - dtrace: resolve conversion warnings from SLURP_INT (Christopher J. Brody) #10143
  • [046bd79cf7] - events: remove unreachable code (cjihrig) #12501
  • [8bf64d135f] - events: do not keep arrays with a single listener (Luigi Pinca) #12043
  • [f66f09f5d1] - http: describe parse err in debug output (Sam Roberts) #13206
  • [cab1285ccf] - http: fix first body chunk fast case for UTF-16 (Anna Henningsen) #12747
  • [01302989a7] - https: support rejectUnauthorized for unix sockets (cjihrig) #13505
  • [d51cd61713] - https: support agent construction without new (cjihrig) #12927
  • [5eb11ba73e] - lib: correct typo in createSecureContext (Daniel Bevenius) #13653
  • [102671823c] - lib: "iff" changed to "if and only if" (Jacob Jones) #13496
  • [1609c7f0c5] - lib: remove useless default caught (Jackson Tian) #12884
  • [ef133b36c5] - lib,test: use regular expression literals (Rich Trott) #12807
  • [0cb5bd7268] - meta: fix nits in README.md collaborators list (Vse Mozhet Byt) #12866
  • [4c51d969ee] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389
  • [47e702059d] - os,vm: fix segfaults and CHECK failure (Tobias Nießen) #12371
  • [c97b167f47] - profiler: declare missing printErr (Fedor Indutny) #13590
  • [bd323a71a8] - repl: fix /dev/null history file regression (Brian White) #12762
  • [b2acb81016] - repl: support hidden history file on Windows (Bartosz Sosnowski) #12207
  • [79592fe44a] - src: correct indentation for X509ToObject (Daniel Bevenius) #13543
  • [69143ffcf9] - src: make IsConstructCall checks consistent (Daniel Bevenius) #13473
  • [48f00b5170] - src: add comment for TicketKeyCallback (Anna Henningsen) #13193
  • [37e1929257] - src: check IsConstructCall in TLSWrap constructor (Daniel Bevenius) #13097
  • [2e23da1a12] - src: remove unused node_buffer.h include (Daniel Bevenius) #13095
  • [41661287f2] - src: split CryptoPemCallback into two functions (Daniel Bevenius) #12827
  • [f92e065d12] - src: assert that uv_async_init() succeeds (cjihrig) #13116
  • [f43c969061] - src: turn buffer type-CHECK into exception (Anna Henningsen) #12753
  • [19259f46d0] - src: rename CryptoPemCallback -> PasswordCallback (Daniel Bevenius) #12787
  • [7aa5a993b2] - src: make cross-context MakeCallback() calls work (Ben Noordhuis) #9221
  • [b1dc2d455f] - src: remove superfluous env_string string (Ben Noordhuis) #9213
  • [48a923af37] - stream: remove unnecessary parameter (Leo) #12767
  • [9cfec4ba0f] - test: fix RegExp nits (Vse Mozhet Byt) #13770
  • [a3e2560f7a] - test: mark test-npm-install flaky on arm (Refael Ackermann) #14035
  • [8a7f13bd00] - test: mark test-fs-readdir-ucs2 flaky (João Reis) #13989
  • [34fc7a03d2] - test: change deprecated method to recommended (Rich Trott) #13649
  • [ef3698cad8] - test: refactor test-cluster-worker-isconnected.js (cjihrig) #13685
  • [fa75be7901] - test: fix nits in test-fs-mkdir-rmdir.js (Vse Mozhet Byt) #13680
  • [9e9a9c342c] - test: increase bufsize in child process write test (Rich Trott) #13626
  • [53b345c506] - test: fix flaky test-tls-socket-close (Rich Trott) #13529
  • [a37165a2cc] - test: exercise once() with varying arguments (cjihrig) #13524
  • [779402ec5f] - test: validate full error messages (aniketshukla) #13453
  • [7190d06d1f] - test: add known_test request with Unicode in the URL (David D Lowe) #13297
  • [cbcc9c1bbf] - test: add coverage for socket write after close (cjihrig) #13171
  • [47d59e7f97] - test: fix sequential test-net-connect-local-error (Sebastian Plesciuc) #13064
  • [1d3596561b] - test: bind to 0 in dgram-send-callback-buffer-length (Artur Vieira) #12943
  • [7909c6d46f] - test: use dynamic port in test-dgram-send-callback-buffer (Artur Vieira) #12942
  • [92cc96fa6b] - test: allow for absent nobody user in setuid test (Rich Trott) #13112
  • [253c5aa794] - test: move net reconnect error test to sequential (Artur G Vieira) #13033
  • [e279eb5aa3] - test: ignore spurious 'EMFILE' (Refael Ackermann) #12698
  • [3e5e38e868] - test: use dynamic port in test-cluster-dgram-reuse (Artur Vieira) #12901
  • [5fe68402bd] - test: refactor test-vm-new-script-new-context (Akshay Iyer) #13035
  • [2aa68282fc] - test: track callback invocations (Rich Trott) #13010
  • [0c83573b61] - test: add a simple abort check in windows (Sreepurna Jasti) #12914
  • [07137ab4db] - test: fix too optimistic guess in setproctitle (Vse Mozhet Byt) #12792
  • [7419338b33] - test: make the rest of tests path-independent (Vse Mozhet Byt) #12972
  • [ac400a7b09] - test: check curve algorithm is supported (Karl Cheng)
  • [5b74e635e5] - test: reduce string concatenations (Vse Mozhet Byt) #12735
  • [c902265b90] - test: fix parallel/test-setproctitle.js on alpine (David Cai) #12413
  • [50bb452510] - test: fixed flaky test-net-connect-local-error (Sebastian Plesciuc) #12964
  • [0cf3e10ce2] - test: remove unneeded string splitting (Vse Mozhet Byt) #12992
  • [6e7b77fdbb] - test: use mustCall in tls-connect-given-socket (vperezma) #12592
  • [c10525c562] - test: add not-called check to heap-profiler test (Rich Trott) #12985
  • [2451665157] - test: move test-dgram-bind-shared-ports to sequential (Rafael Fragoso) #12452
  • [d35648ffc2] - test: use dynamic port in test-https-connect-address-family (Artur G Vieira) #12915
  • [1cd41e7a56] - test: dynamic port in cluster disconnect (Sebastian Plesciuc) #12545
  • [d71de281fa] - test: detect all types of aborts in windows (Gireesh Punathil) #12856
  • [d743783875] - test: use assert regexp in tls no cert test (Artur Vieira) #12891
  • [29d35d0ef1] - test: use dynamic port instead of common.PORT (Aditya Anand) #12473
  • [186c0758b3] - test: added net.connect lookup type check (Luca Maraschi) #11873
  • [c35f4909f4] - test: remove unused testpy code (Rich Trott) #12844
  • [52b7d5ecb1] - test: refactor test-querystring (Łukasz Szewczak) #12661
  • [8414659d02] - test: refactoring test with common.mustCall (weewey) #12702
  • [608c30913e] - test: refactored test-repl-persistent-history (cool88) #12703
  • [aaf8044a81] - test: remove common.PORT in test tls ticket cluster (Oscar Martinez) #12715
  • [802a945d81] - test: add mustCall in timers-unrefed-in-callback (Zahidul Islam) #12594
  • [739c579134] - test: fix flakyness with yes.exe (Refael Ackermann) #12821
  • [14e835831f] - test: dynamic port in dgram tests (Sebastian Plesciuc) #12623
  • [361bc845dc] - test: verify listener leak is only emitted once (cjihrig) #12502
  • [f236dcbdd9] - test: move WPT to its own testing module (Rich Trott) #12736
  • [4eb28c80e8] - test: introduce common.crashOnUnhandledRejection (Anna Henningsen) #12489
  • [2411318f60] - test: add second argument to assert.throws (Michaël Zasso) #12270
  • [eca9e72a87] - test: add regex in test_cyclic_link_protection (Clarence Dimitri CHARLES) #11622
  • [6020e720b5] - test: improve test-fs-open-flags (Vinícius do Carmo) #10908
  • [e6d6a4111c] - test: extended test to makeCallback cb type check (Luca Maraschi) #12140
  • [d74019d98d] - test: improve test-crypto-rsa-dsa (Adrian Estrada) #10681
  • [bab8a36f94] - test: improve the code in test-crypto-dh (Adrian Estrada) #10734
  • [752bc24943] - test: validate errors in test-buffer-indexof (Adrian Estrada) #10752
  • [9e7f02187a] - test: improve test-buffer-includes.js (toboid) #11203
  • [c309bb0695] - test: validate error message from buffer.equals (Sebastian Roeder) #11215
  • [62c56806fc] - test: add msg validation to test-buffer-compare (Josh Hollandsworth) #10807
  • [fc9e7a98ed] - test: make tests cwd-independent (Vse Mozhet Byt) #12812
  • [fff0e39933] - test: add regex check in test-vm-is-context (jeyanthinath) #12785
  • [74dc86d239] - test: add callback to fs.close() in test-fs-stat (Vse Mozhet Byt) #12804
  • [a47a9b7cf4] - test: add callback to fs.close() in test-fs-chmod (Vse Mozhet Byt) #12795
  • [eefa840118] - test: increase readline coverage (Anna Henningsen) #12761
  • [54decfa2ce] - test: replace indexOf with includes (gwer) #12604
  • [03adb94ee6] - test: dynamic port in parallel regress tests (Sebastian Plesciuc) #12639
  • [8a59f6b038] - test: dynamic port in cluster worker wait close (Sebastian Plesciuc) #12466
  • [0383048b76] - test: fix coverity UNINIT_CTOR cctest warning (Ben Noordhuis) #12387
  • [f2467edc62] - test: remove common.PORT from multiple tests (Tarun Batra) #12451
  • [a23aca4f12] - test: replace [].join() with ''.repeat() (Jackson Tian) #12305
  • [e512906aab] - test: run the addon tests last (Sebastian Van Sande) #12062
  • [abc2c82bf3] - test: remove disabled test-dgram-send-error (Rich Trott) #12330
  • [d9866ce9c7] - test: remove disabled tls_server.js (Rich Trott) #12275
  • [19d95519c7] - test: add basic cctest for base64.h (Alexey Orlenko) #12238
  • [01073bc26a] - test: add internal/socket_list tests (DavidCai) #12109
  • [a5fe098b85] - test: move common.PORT debug tests to sequential (Gibson Fahnestock) #13592
  • [0b8adedb88] - test: move test-debug-brk to sequential (Gibson Fahnestock) #13580
  • [97b6911ade] - test: enable setuid/setgid test (Rich Trott) #12403
  • [4dff12849f] - test,doc: document crashOnUnhandledRejection() (Anna Henningsen) #12699
  • [7e6a956a29] - test,lib,doc: use function declarations (Rich Trott) #12711
  • [910fa50e0e] - tools: fix error in custom ESLint rule (Rich Trott) #13758
  • [bb74da309c] - tools: apply stricter indentation rules to tools (Rich Trott) #13758
  • [04934b04c3] - tools: fix indentation in required-modules.js (Rich Trott) #13758
  • [550577749f] - tools: remove no-useless-regex-char-class-escape (Rich Trott) #10561
  • [4ffe804c81] - tools: update ESLint to v4.0.0 (Rich Trott) #13645
  • [fb214bbcff] - tools: be explicit about including key-id (Myles Borins) #13309
  • [f831015928] - tools: update certdata.txt (Ben Noordhuis) #13279
  • [bc2e73a05f] - tools: update certdata.txt (Ben Noordhuis) #12402
  • [99da83b54d] - tools: relax lint rule for regexps (Rich Trott) #12807
  • [3d564a4ed1] - tools: require function declarations (Rich Trott) #12711
  • [6afa5fe348] - tools: add table parsing capability to the doctool (Roman Reiss) #9532
  • [9c67032b9a] - tools: enforce two arguments in assert.throws (Michaël Zasso) #12270
  • [95d13d59e4] - tools: remove unused code from test.py (Rich Trott) #12806
  • [70e9058a8e] - tools: ignore node_trace.*.log (Daijiro Wachi) #12754
  • [61427471af] - tools: replace custom assert.fail lint rule (Rich Trott) #12287
  • [b2a08fb130] - tools: replace custom new-with-error rule (Rich Trott) #12249
  • [beb8485998] - tools: fix lint issue in doctool (Roman Reiss) #11658
  • [d9a8f80c0d] - v8: fix build errors with g++ 7 (Zuzana Svetlikova) #12392
  • [8b3aacc96a] - vm: fix race condition with timeout param (Marcel Laverdet) #13074
  • [6e60c838c9] - vm: fix displayErrors in runIn.. functions (Marcel Laverdet) #13074
  • [55cbe24c60] - zlib: fix node crashing on invalid options (Alexey Orlenko) #13098

2017-07-11, Version 6.11.1 'Boron' (LTS), @MylesBorins

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/ for details on patched vulnerabilities.

Notable Changes

  • build:
    • Disable V8 snapshots - The hashseed embedded in the snapshot is currently the same for all runs of the binary. This opens node up to collision attacks which could result in a Denial of Service. We have temporarily disabled snapshots until a more robust solution is found (Ali Ijaz Sheikh)
  • deps:
    • CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(), which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. This patch checks that there is enough data for the required elements of an NAPTR record (2 int16, 3 bytes for string lengths) before processing a record. (David Drysdale)

Commits

2017-06-06, Version 6.11.0 'Boron' (LTS), @MylesBorins

This LTS release comes with 126 commits. This includes 40 which are test related, 32 which are doc related, 12 which are build / tool related and 4 commits which are updates to dependencies.

Notable Changes

  • build:
    • support for building mips64el (nanxiongchao) #10991
  • cluster:
    • disconnect() now returns a reference to the disconnected worker. (Sean Villars) #10019
  • crypto:
    • ability to select cert store at runtime (Adam Majer) #8334
    • Use system CAs instead of using bundled ones (Adam Majer) #8334
    • The Decipher methods setAuthTag() and setAAD now return this. (Kirill Fomichev) #9398
    • adding support for OPENSSL_CONF again (Sam Roberts) #11006
    • make LazyTransform compabile with Streams1 (Matteo Collina) #12380
  • deps:
    • upgrade libuv to 1.11.0 (cjihrig) #11094
    • upgrade libuv to 1.10.2 (cjihrig) #10717
    • upgrade libuv to 1.10.1 (cjihrig) #9647
    • upgrade libuv to 1.10.0 (cjihrig) #9267
  • dns:
    • Implemented {ttl: true} for resolve4() and resolve6(). (Ben Noordhuis) #9296
  • process:
    • add NODE_NO_WARNINGS environment variable (cjihrig) #10842
  • readline:
    • add option to stop duplicates in history (Danny Nemer) #2982
  • src:
    • support "--" after "-e" as end-of-options (John Barboza) #10651
  • tls:
    • new tls.TLSSocket() supports sec ctx options (Sam Roberts) #11005
    • Allow obvious key/passphrase combinations. (Sam Roberts) #10294

Commits

  • [d38364b062] - deps/v8: add missing #include "unicode/normlzr.h" (Bruno Pagani) #13040
  • [62a8f4774e] - async_wrap: close the destroy_ids_idle_handle_ (René Schünemann) #10385
  • [995423e790] - benchmark: terminate child process on Windows (Rich Trott) #12658
  • [32fa37f3d6] - benchmark: cleanup child_process IPC benchmark (Yuya Tanaka) #10557
  • [dd0b170b58] - build: fix case in lib names (Refael Ackermann) #12522
  • [bc64cf2b5e] - build: make linter targets silent (Sakthipriyan Vairamani (thefourtheye)) #12423
  • [a0973c3c1c] - build: don't create directory for NDK toolchain (TheBeastOfCaerbannog) #11916
  • [0c318a6157] - (SEMVER-MINOR) build: support for mips64el (nanxiongchao) #10991
  • [7c335f6b7c] - build: run cpplint even if jslint failed (Ruslan Bekenev) #12276
  • [32d7981741] - build: use do_not_edit variable where possible (Ruslan Bekenev) #12610
  • [c13429ad8f] - child_process: optimize IPC for large data (Yuya Tanaka) #10557
  • [ae587f3578] - (SEMVER-MINOR) cluster: return worker reference from disconnect() (Sean Villars) #10019
  • [e72749b319] - (SEMVER-MINOR) crypto: ability to select cert store at runtime (Adam Majer) #8334
  • [fd9bb56f9a] - (SEMVER-MINOR) crypto: Use system CAs instead of using bundled ones (Adam Majer) #8334
  • [bbfd2e309b] - (SEMVER-MINOR) crypto: do not use pointers to std::vector (Adam Majer) #8334
  • [875674bb1c] - (SEMVER-MINOR) crypto: return this in setAuthTag/setAAD (Kirill Fomichev) #9398
  • [f8da60fb21] - (SEMVER-MINOR) crypto: support OPENSSL_CONF again (Sam Roberts) #11006
  • [0a79b2da1b] - crypto: make LazyTransform compabile with Streams1 (Matteo Collina) #12380
  • [7678da4c65] - crypto: handle exceptions in hmac/hash.digest (Tobias Nießen) #12164
  • [e714243408] - deps: upgrade libuv to 1.11.0 (cjihrig) #11094
  • [738d830f09] - (SEMVER-MINOR) deps: upgrade libuv to 1.10.2 (cjihrig) #10717
  • [c59370a8fd] - (SEMVER-MINOR) deps: upgrade libuv to 1.10.1 (cjihrig) #9647
  • [3585ffa247] - (SEMVER-MINOR) deps: upgrade libuv to 1.10.0 (cjihrig) #9267
  • [da70161308] - (SEMVER-MINOR) dns: implement {ttl: true} for dns.resolve6() (Ben Noordhuis) #9296
  • [0bc14b6d33] - (SEMVER-MINOR) dns: implement {ttl: true} for dns.resolve4() (Ben Noordhuis) #9296
  • [699e274693] - doc: add link on logo to README (Roman Reiss) #12307
  • [5ce108955d] - doc: fix an unclear wording in readline.md (Vse Mozhet Byt) #12605
  • [18c56df81e] - doc: fix typo in doc/api/process.md (morrme) #12612
  • [2b6e58852f] - doc: make commit guidelines easier to reference (Benjamin Fleischer) #11732
  • [928382d957] - doc: add suggestion to use --3way (Michael Dawson) #12510
  • [278e8cc65f] - doc: update link to Code of Conduct (Alex Autem) #12552
  • [3d526727f9] - doc: add lucamaraschi to collaborators (Luca Maraschi) #12538
  • [e1098a4e9f] - doc: unify spaces in a querystring.md code example (Vse Mozhet Byt) #12465
  • [9881da1585] - doc: run tests before landing changes (Rich Trott) #12416
  • [3556c177a3] - doc: avoid colloquialism (Rich Trott) #12417
  • [5fa417086a] - doc: fix encoding string in buffer example (MapleUncle) #12482
  • [bc401697f0] - doc: correct git fix whitespace command (Mateusz Konieczny) #12445
  • [26fcc7a4df] - doc: s/origin/upstream/ collaborator guide (Anna Henningsen) #12436
  • [e3352bbceb] - doc: update Mac OS X references in releases.md (JR McEntee) #12106
  • [32a6d87a21] - doc: correct markdown file line lengths (JR McEntee) #12106
  • [db4aef4ac6] - doc: change Mac OS X to macOS (JR McEntee) #12106
  • [40f292cacd] - doc: add missing ) in CONTRIBUTING.md (Mateusz Konieczny) #12444
  • [656c30e11d] - doc: add guide for backporting prs (Evan Lucas) #11099
  • [1c1269dfc3] - doc: update link for landing PRs (Rich Trott) #12415
  • [81b53503a7] - doc: add DavidCai1993 to collaborators (David Cai) #12435
  • [c6f3ebd774] - doc: fix typo in streams.md (John Paul Bamberg) #12428
  • [4a18e51c6a] - doc: add jkrems to collaborators (Jan Krems) #12427
  • [a6e06738ef] - doc: path functions ignore trailing slashes (Tobias Nießen) #12181
  • [929ca307d2] - doc: add info about serializable types (Shubheksha Jalan) #12313
  • [945dcde45b] - doc: fix formatting in onboarding-extras (Rich Trott) #12350
  • [3c1bd05a24] - doc: response.write ignores body in some cases (Ruslan Bekenev) #12314
  • [d2afd7c5f7] - doc: add AnnaMag to collaborators (AnnaMag) #12414
  • [dac66d5645] - doc: limit lines to 80 cols in internal README (Evan Lucas) #12358
  • [3ae8d00dd1] - doc: add single arg scenario for util.format (Tarun Batra) #12374
  • [43d3c009a5] - doc: fix formatting of TOC (Refael Ackermann) #12731
  • [9fc695c574] - doc: fixup the collaborators list (Alexey Orlenko) #12750
  • [ad29e295b7] - doc: gcc version is at least 4.8.5 in BUILDING.md (detailyang) #11840
  • [f2230cc0b5] - eslint: remove dead and unused symlink (Sam Roberts)
  • [ae1f6fd03a] - fs: re-enable watch facility in AIX (Gireesh Punathil) #10085
  • [6e6e63a341] - lib: fix typo in comments in module.js (WORMSS) #12528
  • [f20ebf29f6] - meta: update authors list (Aashil Patel) #11533
  • [b7ca74866b] - meta: move the Code of Conduct to TSC repository (James M Snell) #12147
  • [1bd07acbd1] - net: refactor onSlaveClose in Server.close (Claudio Rodriguez) #12334
  • [637d9e3544] - (SEMVER-MINOR) process: add NODE_NO_WARNINGS environment variable (cjihrig) #10842
  • [202f00717b] - process: maintain constructor descriptor (Bryan English) #9306
  • [e9f33e392d] - readline: rename deDupeHistory option (Danny Nemer) #11950
  • [8bd6ab7870] - (SEMVER-MINOR) readline: add option to stop duplicates in history (Danny Nemer) #2982
  • [827411c1c0] - Revert "repl: disable Ctrl+C support on win32 for now" (Anna Henningsen) #8645
  • [ce795ecf2b] - src: remove invalid comment (cjihrig) #12645
  • [b296bd5ccc] - src: remove TODO about uv errno removal (Daniel Bevenius) #12536
  • [aec7ae2e67] - (SEMVER-MINOR) src: add SafeGetenv() to internal API (Sam Roberts) #11006
  • [f2e97f89f0] - src: make copies of startup environment variables (Ben Noordhuis) #11051
  • [c408a3bd63] - (SEMVER-MINOR) src: support "--" after "-e" as end-of-options (John Barboza) #10651
  • [f1ea36733d] - src: use std::list for at_exit_functions (Daniel Bevenius) #12255
  • [331681a3f5] - src: return early if nextTickQueue is empty (Trevor Norris) #10274
  • [b09f73813e] - test: cleanup test-fs-watch.js (RobotMermaid) #12595
  • [a1de1abcdd] - test: remove flaky designation for test on AIX (Rich Trott) #12564
  • [3cce18104d] - test: add mustCall in test-timers-clearImmediate (Zahidul Islam) #12598
  • [33821e42b5] - test: use block scoped variable names (Neehar Venugopal) #12544
  • [12287f1299] - test: dynamic port in cluster eaddrinuse (Sebastian Plesciuc) #12547
  • [53d5aacfe4] - test: dynamic port in cluster ipc throw (Sebastian Plesciuc) #12571
  • [0bd0d52af6] - test: replace assertion error check with regex (thelady) #12603
  • [8044b8307c] - test: refactored context type err message to regex (Muhsin Abdul-Musawwir) #12596
  • [32f905a85d] - test: improve test-process-chdir (vperezma) #12589
  • [51794dd7b0] - test: dynamic port in parallel cluster tests (Sebastian Plesciuc) #12584
  • [daf6535475] - test: dynamic port in cluster worker dgram (Sebastian Plesciuc) #12487
  • [b53d172576] - test: move test-debugger-repeat-last to sequential (kumarrishav) #12470
  • [32425be109] - test: use duplex streams in duplex stream test (cjihrig) #12514
  • [830949c8b0] - test: use JSON.stringify to trigger stack overflow (Yang Guo) #12481
  • [50bfb28960] - test: console.log removed from test-net-localport (Faiz Halde) #12483
  • [768431cac8] - test: dynamic port in cluster worker disconnect (Sebastian Plesciuc) #12457
  • [b1d26d8b55] - test: remove uses of common.PORT in test-tls-client tests (Ahmed Taj elsir) #12461
  • [ce3b544360] - test: dynamic port in cluster worker send (Sebastian Plesciuc) #12472
  • [a755ef0634] - test: increase coverage for buffer.js (Rich Trott) #12476
  • [a4b092c8f3] - test: complete coverage of lib/child_process.js (cjihrig) #12367
  • [4786ad7024] - test: buffer should always be stringified (Luca Maraschi) #12355
  • [04ec97e39a] - test: use dynamic port in test-cluster-bind-twice (Rich Trott) #12418
  • [3244ae36da] - test: remove common.PORT from test-cluster*.js (Tarun Batra) #12441
  • [384fa17ffa] - test: use dynamic port in 3 test-cluster-worker tests (Sebastian Plesciuc) #12443
  • [d54d0c4cdc] - test: add --use-bundled-ca to tls-cnnic-whitelist (Daniel Bevenius) #12394
  • [0caca45434] - test: add crypto check to crypto-lazy-transform (Daniel Bevenius) #12424
  • [861fa65bdf] - (SEMVER-MINOR) test: make tls-socket-default-options tests run (Sam Roberts) #11005
  • [7d47b02794] - test: remove common.PORT from test-cluster-basic (Rich Trott) #12377
  • [9e89edff87] - test: add hasCrypto check to test-debug-usage (Daniel Bevenius) #12357
  • [afac3161a8] - test: improve punycode coverage to check surrogate pair (Nao YONASHIRO) #12354
  • [a714449db3] - test: cleanup test-fs-watch.js (RobotMermaid) #12595
  • [89e76e8e4d] - test: improved type checking with regex (coreybeaumont) #12591
  • [c304414007] - test: improve test-tcp-wrap-listen (alohaglenn) #12599
  • [bea0a6e557] - test: add common.mustNotCall() (cjihrig) #11152
  • [cb63808832] - test: improve test-process-kill-pid (alohaglenn) #12588
  • [ac825fc8bc] - test: use common.js to check platform (Ruslan Bekenev) #12629
  • [64f9adc787] - test: cleanup test-util-inherits.js (RobotMermaid) #12602
  • [c1e4b2f043] - test: move test to sequential for reliability (Rich Trott) #12704
  • [cd1a7ea5e5] - test: add regex to text-crypto-random (Nate) #10020
  • [15226f597a] - test: add hasCrypto check to tls-socket-close (Daniel Bevenius) #11911
  • [7cad5613c7] - (SEMVER-MINOR) tls: new tls.TLSSocket() supports sec ctx options (Sam Roberts) #11005
  • [df9d8ee6cb] - (SEMVER-MINOR) tls: allow obvious key/passphrase combinations (Sam Roberts) #10294
  • [a679e06c29] - tools: use no-useless-concat ESLint rule (Vse Mozhet Byt) #12613
  • [b920c5d44b] - tools: enable no-useless-return eslint rule (cjihrig) #12577
  • [fd126b5866] - tools: add root: true in main .eslintrc.yaml (Vse Mozhet Byt) #12570
  • [d63befac2a] - tools: Add no useless regex char class rule (Prince J Wesley) #9591
  • [87534d6c25] - tools: replace custom ESLint timers rule (Rich Trott) #12504
  • [736a736ed5] - tools: update ESLint to 3.19.0 (Rich Trott) #12162
  • [00b6646f93] - url: improve descriptiveness of identifier (Rich Trott) #12579
  • [a0f9d5964e] - v8: fix stack overflow in recursive method (Ben Noordhuis) #12460
  • [2b3381aec6] - Revert "v8: drop v8::FunctionCallbackInfo<T>::NewTarget()" (Ben Noordhuis)

2017-05-02, Version 6.10.3 'Boron' (LTS), @MylesBorins

Notable Changes

  • module:
  • src:
    • fix base64 decoding in rare edgecase (Nikolai Vavilov) #11995
  • tls:
    • fix rare segmentation faults when using TLS

Commits

2017-04-04, Version 6.10.2 'Boron' (LTS), @MylesBorins

This is a special LTS to fix a number of regressions that were found on the 6.10.x release line.

This includes:

  • a fix for memory leak in the crypto module that was introduced in 6.10.1
  • a fix for a regression introduced to the windows repl in 6.10.0
  • a backported fix for V8 to stop a segfault that could occur when using spread syntax

It also includes an upgrade to zlib 1.2.11 to fix a number of low severity CVEs that were present in zlib 1.2.8.

Notable changes

  • crypto:
    • fix memory leak if certificate is revoked (Tom Atkinson) #12089
  • deps:
    • upgrade zlib to 1.2.11 (Sam Roberts) #10980
    • backport V8 fixes for spread syntax regression causing segfaults (Michaël Zasso) #12037
  • repl:
    • Revert commit that broke REPL display on Windows (Myles Borins) #12123

Commits

  • [5f644d2f6f] - crypto: fix memory leak if certificate is revoked (Tom Atkinson) #12089
  • [912f78a566] - deps: fix CLEAR_HASH macro to be usable as a single statement (Sam Roberts) #11616
  • [abe9132011] - deps: upgrade zlib to 1.2.11 (Sam Roberts) #10980
  • [1ff512c185] - deps: backport e427300 from upstream V8 (Michaël Zasso) #12037
  • [8dfc710a06] - deps: cherry-pick b9f682b from upstream V8 (Michaël Zasso) #12037
  • [52bdb8f246] - deps: backport 2cabc86 from upstream V8 (Michaël Zasso) #12037
  • [64fc5a4541] - repl Revert: "Revert "repl: disable Ctrl+C support..." (Myles Borins) #12123

2017-03-21, Version 6.10.1 'Boron' (LTS), @MylesBorins

This LTS release comes with 297 commits. This includes 124 which are test related, 79 which are doc related, 16 which are build / tool related and 4 commits which are updates to dependencies.

Notable changes

  • performance: The performance of several APIs has been improved.
    • Buffer.compare() is up to 35% faster on average. (Brian White) #10927
    • buffer.toJSON() is up to 2859% faster on average. (Brian White) #10895
    • fs.*statSync() functions are now up to 9.3% faster on average. (Brian White) #11522
    • os.loadavg is up to 151% faster. (Brian White) #11516
    • process.memoryUsage() is up to 34% faster. (Brian White) #11497
    • querystring.unescape() for Buffers is 15% faster on average. (Brian White) #10837
    • querystring.stringify() is up to 7.8% faster on average. (Brian White) #10852
    • querystring.parse() is up to 21% faster on average. (Brian White) #10874
  • IPC: Batched writes have been enabled for process IPC on platforms that support Unix Domain Sockets. (Alexey Orlenko) #10677
    • Performance gains may be up to 40% for some workloads.
  • child_process: spawnSync now returns a null status when child is terminated by a signal. (cjihrig) #11288
    • This fixes the behavior to act like spawn() does.
  • http:
    • Control characters are now always rejected when using http.request(). (Ben Noordhuis) #8923
    • Debug messages have been added for cases when headers contain invalid values. (Evan Lucas) #9195
  • node: Heap statistics now support values larger than 4GB. (Ben Noordhuis) #10186
  • timers: Timer callbacks now always maintain order when interacting with domain error handling. (John Barboza) #10522

Commits