Skip to content
Find file
8720 lines (7240 sloc) 801 KB

Node.js ChangeLog

2016-01-21, Version 4.2.6 'Argon' (LTS), @TheAlphaNerd

Notable changes

  • Fix regression in debugger and profiler functionality

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [1408f7abb1] - module,src: do not wrap modules with -1 lineOffset (cjihrig) #4298
  • [1f8e1472cc] - test: add test for debugging one line files (cjihrig) #4298

2016-01-20, Version 5.5.0 (Stable), @evanlucas

Notable Changes

  • events: make sure console functions exist (Dave) #4479
  • fs: add autoClose option to fs.createWriteStream (Saquib) #3679
  • http: improves expect header handling (Daniel Sellers) #4501
  • node: allow preload modules with -i (Evan Lucas) #4696
  • v8,src: expose statistics about heap spaces (v8.getHeapSpaceStatistics()) (Ben Ripkens) #4463
  • Minor performance improvements:
    • lib: Use arrow functions instead of bind where possible (Minwoo Jung) #3622.
      • (Mistakenly missing from v5.4.0)
    • module: cache stat() results more aggressively (Ben Noordhuis) #4575
    • querystring: improve parse() performance (Brian White) #4675

Known issues

  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

  • [8d0ca10752] - buffer: make byteLength work with Buffer correctly (Jackson Tian) #4738
  • [83d2b7707e] - buffer: remove unnecessary TODO comments (Peter Geiss) #4719
  • [8182ec094d] - build: add option to select VS version (julien.waechter) #4645
  • [4383acd9f4] - build: fix and refactor VTune config in vcbuild.bat (Rod Vagg) #4192
  • [be0b0b8cb9] - build: minor corrections in VTune configure text (Rod Vagg) #4192
  • [9571be12f6] - cluster: fix race condition setting suicide prop (Santiago Gimeno) #4349
  • [ebd9addcd1] - crypto: clear error stack in ECDH::Initialize (Fedor Indutny) #4689
  • [66b9c0d8bd] - debugger: remove variable redeclarations (Rich Trott) #4633
  • [88b2889679] - dgram: prevent disabled optimization of bind() (Brian White) #4613
  • [d56e3f8b67] - doc: restore ICU third-party software licenses (Richard Lau) #4762
  • [212a44df03] - doc: clarify protocol default in http.request() (cjihrig) #4714
  • [3297036345] - doc: update branch-diff arguments in release doc (Rod Vagg) #4691
  • [666c089e68] - doc: fix named anchors in addons.markdown and http.markdown (Michael Theriot) #4708
  • [310530b7ec] - doc: add path property to Write/ReadStream in fs.markdown (Claudio Rodriguez) #4368
  • [3470574cb6] - doc: clarify explanation of first stream section (Vitor Cortez) #4234
  • [d91646b9c7] - doc: rebuild LICENSE using tools/license-builder.sh (Rod Vagg) #4194
  • [265e2f557b] - doc: fix typo in doc/node.1 (Jérémy Lal) #4680
  • [4c132fe61e] - doc: make references clickable (Roman Klauke) #4654
  • [d139704ff7] - doc: improve child_process.execFile() code example (Ryan Sobol) #4504
  • [eeb6fdcd0f] - doc: add docs for more stream options (zoubin) #4639
  • [b6ab6d2de5] - doc: add branch-diff example to releases.md (Myles Borins) #4636
  • [287325c5e8] - docs: update gpg key for Myles Borins (Myles Borins) #4657
  • [65825b79aa] - docs: fix npm command in releases.md (Myles Borins) #4656
  • [f9a59c1d3b] - (SEMVER-MINOR) events: make sure console functions exist (Dave) #4479
  • [6039a7c1b5] - (SEMVER-MINOR) fs: add autoClose option to fs.createWriteStream (Saquib) #3679
  • [ed55169834] - gitignore: never ignore debug module (Michaël Zasso) #2286
  • [d755432fa9] - (SEMVER-MINOR) http: improves expect header handling (Daniel Sellers) #4501
  • [7ce0e04f44] - lib: fix style issues after eslint update (Michaël Zasso) nodejs/io.js#2286
  • [ae5bcf9528] - lib: use arrow functions instead of bind (Minwoo Jung) #3622
  • [0ec093cd41] - lib,test: remove extra semicolons (Michaël Zasso) #2205
  • [d8f5bd4fe1] - module: avoid ArgumentsAdaptorTrampoline frame (Ben Noordhuis) #4575
  • [83f8d98806] - module: cache stat() results more aggressively (Ben Noordhuis) #4575
  • [ff64a4c395] - (SEMVER-MINOR) node: allow preload modules with -i (Evan Lucas) #4696
  • [4bc1a47761] - querystring: improve parse() performance (Brian White) #4675
  • [ad63d350d4] - readline: Remove XXX and output debuglog (Kohei TAKATA) #4690
  • [da550aa063] - repl: make sure historyPath is trimmed (Evan Lucas) #4539
  • [1a6e7d1b52] - src: fix negative values in process.hrtime() (Ben Noordhuis) #4757
  • [8bad51977a] - src: return UV_EAI_NODATA on empty lookup (cjihrig) #4715
  • [761cf2bf6a] - src: don't check failure with ERR_peek_error() (Ben Noordhuis) #4731
  • [953f4a3999] - stream: prevent object map change in ReadableState (Evan Lucas) #4761
  • [e65f1f7954] - test: fix tls-multi-key race condition (Santiago Gimeno) #3966
  • [3727ae0d7d] - test: use addon.md block headings as test dir names (Rod Vagg) #4412
  • [47960a07c0] - test: make test-cluster-disconnect-leak reliable (Rich Trott) #4736
  • [9926b5a25f] - test: fix issues for space-in-parens ESLint rule (Roman Reiss) #4753
  • [d1aabd6264] - test: fix style issues after eslint update (Michaël Zasso) nodejs/io.js#2286
  • [e98bcfa2cb] - test: remove 1 second delay from test (Rich Trott) #4616
  • [6cfd0b5a32] - test: fix flaky test-net-socket-local-address (cjihrig) #4650
  • [e22cc6c2eb] - test: fix race in test-net-server-pause-on-connect (Rich Trott) #4637
  • [9164c00bdb] - test: move resource intensive tests to sequential (Rich Trott) #4615
  • [d8ba2c0de4] - test: fix http-upgrade-client flakiness (Santiago Gimeno) #4602
  • [6018fa1f57] - test: fix http-upgrade-agent flakiness (Santiago Gimeno) #4520
  • [c33f6a87d0] - tools: enable space-in-parens ESLint rule (Roman Reiss) #4753
  • [162e16afdb] - tools: enable no-extra-semi rule in eslint (Michaël Zasso) #2205
  • [031b87d42d] - tools: add license-builder.sh to construct LICENSE (Rod Vagg) #4194
  • [ec8e0ae697] - tools: fix style issue after eslint update (Michaël Zasso) nodejs/io.js#2286
  • [4d5ee7a512] - tools: update eslint config (Michaël Zasso) nodejs/io.js#2286
  • [2d441493a4] - tools: update eslint to v1.10.3 (Michaël Zasso) nodejs/io.js#2286
  • [aba3cc834e] - tools: fix license-builder.sh for ICU (Richard Lau) #4762
  • [5f57005ec9] - (SEMVER-MINOR) v8,src: expose statistics about heap spaces (Ben Ripkens) #4463

2016-01-20, Version 4.2.5 'Argon' (LTS), @TheAlphaNerd

Maintenance update.

Notable changes

  • assert
    • accommodate ES6 classes that extend Error (Rich Trott) #4166
  • build
    • add "--partly-static" build options (Super Zheng) #4152
  • deps
    • backport 066747e from upstream V8 (Ali Ijaz Sheikh) #4655
    • backport 200315c from V8 upstream (Vladimir Kurchatkin) #4128
    • upgrade libuv to 1.8.0 (Saúl Ibarra Corretgé)
  • docs
    • various updates landed in 70 different commits!
  • repl
    • attach location info to syntax errors (cjihrig) #4013
    • display error message when loading directory (Prince J Wesley) #4170
  • tests
    • various updates landed in over 50 commits
  • tools
    • add tap output to cpplint (Johan Bergström) #3448
  • util
    • allow lookup of hidden values (cjihrig) #3988

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [87181cd74c] - assert: accommodate ES6 classes that extend Error (Rich Trott) #4166
  • [901172a783] - assert: typed array deepequal performance fix (Claudio Rodriguez) #4330
  • [55336810ee] - async_wrap: call callback in destructor (Trevor Norris) #3461
  • [a8b45e9e96] - async_wrap: new instances get uid (Trevor Norris) #3461
  • [49f16d77c4] - async_wrap: allow some hooks to be optional (Trevor Norris) #3461
  • [44ee33f945] - buffer: refactor create buffer (Jackson Tian) #4340
  • [138d004ac0] - buffer: faster case for create Buffer from new Buffer(0) (Jackson Tian) #4326
  • [c6dc2a1609] - buffer: Prevent Buffer constructor deopt (Bryce Baril) #4158
  • [a320045e68] - buffer: default to UTF8 in byteLength() (Tom Gallacher) #4010
  • [c5f71ac771] - build: add "--partly-static" build options (Super Zheng) #4152
  • [e6c25335ea] - build: omit -gline-tables-only for --enable-asan (Ben Noordhuis) #3680
  • [80b4ba286c] - build: Updates for AIX npm support - part 1 (Michael Dawson) #3114
  • [35e32985ca] - child_process: guard against race condition (Rich Trott) #4418
  • [48564204f0] - child_process: flush consuming streams (Dave) #4071
  • [481d59a74c] - configure: fix arm vfpv2 (Jörg Krause) #4203
  • [d19da6638d] - crypto: load PFX chain the same way as regular one (Fedor Indutny) #4165
  • [b8e75de1f3] - crypto: fix native module compilation with FIPS (Stefan Budeanu) #4023
  • [b7c3fb7f75] - crypto: disable crypto.createCipher in FIPS mode (Stefan Budeanu) #3754
  • [31b4091a1e] - debugger: also exit when the repl emits 'exit' (Felix Böhm) #2369
  • [9baa5618f5] - deps: backport 066747e from upstream V8 (Ali Ijaz Sheikh) #4655
  • [c3a9d8a62e] - deps: backport 200315c from V8 upstream (Vladimir Kurchatkin) #4128
  • [1ebb0c0fdf] - deps: upgrade libuv to 1.8.0 (Saúl Ibarra Corretgé) #4276
  • [253fe3e7c8] - dns: remove nonexistant exports.ADNAME (Roman Reiss) #3051
  • [8c2b65ad82] - doc: clarify protocol default in http.request() (cjihrig) #4714
  • [33e72e135f] - doc: update links to use https where possible (jpersson) #4054
  • [5f4aa79410] - doc: clarify explanation of first stream section (Vitor Cortez) #4234
  • [295ca5bfb2] - doc: add branch-diff example to releases.md (Myles Borins) #4636
  • [18f5cd8710] - doc: update stylesheet to match frontpage (Roman Reiss) #4621
  • [2f40715f08] - doc: adds usage of readline line-by-line parsing (Robert Jefe Lindstaedt) #4609
  • [5b45a464ee] - doc: document http's server.listen return value (Sequoia McDowell) #4590
  • [bd31740339] - doc: label http.IncomingMessage as a Class (Sequoia McDowell) #4589
  • [bcd2cbbb93] - doc: fix description about the latest-codename (Minwoo Jung) #4583
  • [0b12bcb35d] - doc: add Evan Lucas to Release Team (Evan Lucas) #4579
  • [e20b1f6f10] - doc: add Myles Borins to Release Team (Myles Borins) #4578
  • [54977e63eb] - doc: add missing backtick for readline (Brian White) #4549
  • [5d6bed895c] - doc: bring releases.md up to date (cjihrig) #4540
  • [0cd2252e85] - doc: fix numbering in stream.markdown (Richard Sun) #4538
  • [8574d91f27] - doc: stronger suggestion for userland assert (Wyatt Preul) #4535
  • [a7bcf8b84d] - doc: close backtick in process.title description (Dave) #4534
  • [0ceb3148b0] - doc: improvements to events.markdown copy (James M Snell) #4468
  • [bf56d509b9] - doc: explain ClientRequest#setTimeout time unit (Ben Ripkens) #4458
  • [d927c51be3] - doc: improvements to errors.markdown copy (James M Snell) #4454
  • [ceea6df581] - doc: improvements to dns.markdown copy (James M Snell) #4449
  • [506f2f8ed1] - doc: add anchors for _transform _flush _writev in stream.markdown (iamchenxin) #4448
  • [74bcad0b78] - doc: improvements to dgram.markdown copy (James M Snell) #4437
  • [e244d560c9] - doc: improvements to debugger.markdown copy (James M Snell) #4436
  • [df7e1281a5] - doc: improvements to console.markdown copy (James M Snell) #4428
  • [abb17cc6c1] - doc: fix spelling error in lib/url.js comment (Nik Nyby) #4390
  • [823269db2d] - doc: improve assert.markdown copy (James M Snell) #4360
  • [2b1804f6cb] - doc: copyedit releases.md (Rich Trott) #4384
  • [2b142fd876] - doc: catch the WORKING_GROUPS.md bootstrap docs up to date (James M Snell) #4367
  • [ed87873de3] - doc: fix link in addons.markdown (Nicholas Young) #4331
  • [fe693b7a4f] - doc: Typo in buffer.markdown referencing buf.write() (chrisjohn404) #4324
  • [764df2166e] - doc: document the cache parameter for fs.realpathSync (Jackson Tian) #4285
  • [61f91b2f29] - doc: fix, modernize examples in docs (James M Snell) #4282
  • [d87ad302ce] - doc: clarify error events in HTTP module documentation (Lenny Markus) #4275
  • [7983577e41] - doc: fix improper http.get sample code (Hideki Yamamura) #4263
  • [6c30d087e5] - doc: Fixing broken links to the v8 wiki (Tom Gallacher) #4241
  • [cf214e56e4] - doc: move description of 'equals' method to right place (janriemer) #4227
  • [fb8e8dbb92] - doc: copyedit console doc (Rich Trott) #4225
  • [4ccf04c229] - doc: add mcollina to collaborators (Matteo Collina) #4220
  • [59654c21d4] - doc: add rmg to collaborators (Ryan Graham) #4219
  • [bfe1a6bd2b] - doc: add calvinmetcalf to collaborators (Calvin Metcalf) #4218
  • [5140c404ae] - doc: harmonize description of ca argument (Ben Noordhuis) #4213
  • [2e642051cf] - doc: copyedit child_process doc (Rich Trott) #4188
  • [7920f8dbde] - doc: copyedit buffer doc (Rich Trott) #4187
  • [c35a409cbe] - doc: clarify assert.fail doc (Rich Trott) #4186
  • [6235fdf72e] - doc: copyedit addons doc (Rich Trott) #4185
  • [990e7ff93e] - doc: update AUTHORS list (Rod Vagg) #4183
  • [8d676ef55e] - doc: change references from node to Node.js (Roman Klauke) #4177
  • [1c34b139a2] - doc: add brief Node.js overview to README (wurde) #4174
  • [27b9b72ab0] - doc: add iarna to collaborators (Rebecca Turner) #4144
  • [683d8dd564] - doc: add JungMinu to collaborators (Minwoo Jung) #4143
  • [17b06dfa94] - doc: add zkat to collaborators (Kat Marchán) #4142
  • [39364c4c72] - doc: improve child_process.markdown wording (yorkie) #4138
  • [abe452835f] - doc: url.format - true slash postfix behaviour (fansworld-claudio) #4119
  • [6dd375cfe2] - doc: document backlog for server.listen() variants (Jan Schär) #4025
  • [b71a3b363a] - doc: fixup socket.remoteAddress (Arthur Gautier) #4198
  • [e2fe214857] - doc: add links and backticks around names (jpersson) #4054
  • [bb158f8aed] - doc: s/node.js/Node.js in readme (Rod Vagg) #3998
  • [f55491ad47] - doc: move fs.existsSync() deprecation message (Martin Forsberg) #3942
  • [8c5b847f5b] - doc: Describe FIPSDIR environment variable (Stefan Budeanu) #3752
  • [70c95ea0e5] - doc: add warning about Windows process groups (Roman Klauke) #3681
  • [46c59b7256] - doc: add CTC meeting minutes 2015-10-28 (Rod Vagg) #3661
  • [7ffd299a1d] - doc: add final full stop in CONTRIBUTING.md (Emily Aviva Kapor-Mater) #3576
  • [1f78bff7ce] - doc: add TSC meeting minutes 2015-10-21 (Rod Vagg) #3480
  • [2e623ff024] - doc: add TSC meeting minutes 2015-10-14 (Rod Vagg) #3463
  • [b9c69964bb] - doc: add TSC meeting minutes 2015-10-07 (Rod Vagg) #3364
  • [f31d23c724] - doc: add TSC meeting minutes 2015-09-30 (Rod Vagg) #3235
  • [ae8e3af178] - doc: update irc channels: #node.js and #node-dev (Nelson Pecora) #2743
  • [830caeb1bd] - doc, test: symbols as event names (Bryan English) #4151
  • [82cbfcdcbe] - docs: update gpg key for Myles Borins (Myles Borins) #4657
  • [50b72aa5a3] - docs: fix npm command in releases.md (Myles Borins) #4656
  • [5bf56882e1] - fs,doc: use target instead of destination (yorkie) #3912
  • [41fcda840c] - http: use self.keepAlive instead of self.options.keepAlive (Damian Schenkelman) #4407
  • [3ff237333d] - http: Remove an unnecessary assignment (Bo Borgerson) #4323
  • [39dc054572] - http: remove excess calls to removeSocket (Dave) #4172
  • [751fbd84dd] - https: use servername in agent key (Fedor Indutny) #4389
  • [7a1a0a0055] - lib: remove unused modules (Rich Trott) #4683
  • [3d81ea99bb] - lib,test: update let to const where applicable (Sakthipriyan Vairamani) #3152
  • [8a9869eeab] - module: fix column offsets in errors (Tristian Flanagan) #2867
  • [0ae90ecd3d] - module,repl: remove repl require() hack (Ben Noordhuis) #4026
  • [a7367fdc1e] - net: small code cleanup (Jan Schär) #3943
  • [03e9495cc2] - node: remove unused variables in AppendExceptionLine (Yazhong Liu) #4264
  • [06113b8711] - node: s/doNTCallbackX/nextTickCallbackWithXArgs/ (Rod Vagg) #4167
  • [8ce6843fe4] - os: fix crash in GetInterfaceAddresses (Martin Bark) #4272
  • [53dcbb6aa4] - repl: remove unused function (Rich Trott)
  • [db0e906fc1] - repl: Fixed node repl history edge case. (Mudit Ameta) #4108
  • [9855fab05f] - repl: use String#repeat instead of Array#join (Evan Lucas) #3900
  • [41882e4077] - repl: fix require('3rdparty') regression (Ben Noordhuis) #4215
  • [93afc39d4a] - repl: attach location info to syntax errors (cjihrig) #4013
  • [d4806675a6] - repl: display error message when loading directory (Prince J Wesley) #4170
  • [3080bdc7d7] - src: define Is* util functions with macros (cjihrig) #4118
  • [2b8a32a13b] - src: refactor vcbuild configure args creation (Rod Vagg) #3399
  • [d47f6ba768] - src: fix deprecation message for ErrnoException (Martin von Gagern) #4269
  • [5ba08fbf76] - src: fix line numbers on core errors (cjihrig) #4254
  • [70974e9362] - src: use GetCurrentProcessId() for process.pid (Ben Noordhuis) #4163
  • [c96eca164f] - src: don't print garbage errors (cjihrig) #4112
  • [f61412c753] - test: mark test-debug-no-context is flaky (Rich Trott) #4421
  • [46d8c93ed2] - test: don't use cwd for relative path (Johan Bergström) #4477
  • [b6124ea39c] - test: write to tmp dir rather than fixture dir (Rich Trott) #4489
  • [350fa664bb] - test: don't assume a certain folder structure (Johan Bergström) #3325
  • [6b2ef0efac] - test: make temp path customizable (Johan Bergström) #3325
  • [f1837703a9] - test: remove unused vars from parallel tests (Rich Trott) #4511
  • [b4964b099a] - test: remove unused variables form http tests (Rich Trott) #4422
  • [0d5a508dfb] - test: extend timeout in Debug mode (Rich Trott) #4431
  • [6e4598d5da] - test: remove unused variables from TLS tests (Rich Trott) #4424
  • [7b1aa045a0] - test: remove unused variables from HTTPS tests (Rich Trott) #4426
  • [da9e5c1b01] - test: remove unused variables from net tests (Rich Trott) #4430
  • [13241bd24b] - test: remove unused vars in ChildProcess tests (Rich Trott) #4425
  • [2f4538ddda] - test: remove unused vars (Rich Trott) #4536
  • [dffe83ccd6] - test: remove unused modules (Rich Trott) #4684
  • [c4eeb88ba1] - test: fix flaky cluster-disconnect-race (Brian White) #4457
  • [7caf87bf6c] - test: fix flaky test-http-agent-keepalive (Rich Trott) #4524
  • [25c41d084d] - test: remove flaky designations for tests (Rich Trott) #4519
  • [b8f097ece2] - test: fix flaky streams test (Rich Trott) #4516
  • [c24fa1437c] - test: inherit JOBS from environment (Johan Bergström) #4495
  • [7dc90e9e7f] - test: remove time check (Rich Trott) #4494
  • [7ca3c6c388] - test: refactor test-fs-empty-readStream (Rich Trott) #4490
  • [610727dea7] - test: clarify role of domains in test (Rich Trott) #4474
  • [1ae0e355b9] - test: improve assert message (Rich Trott) #4461
  • [e70c88df56] - test: remove unused assert module imports (Rich Trott) #4438
  • [c77fc71f9b] - test: remove unused var from test-assert.js (Rich Trott) #4405
  • [f613b3033f] - test: add test-domain-exit-dispose-again back (Julien Gilli) #4256
  • [f5bfacd858] - test: remove unused util imports (Rich Trott) #4562
  • [d795301025] - test: remove unnecessary assignments (Rich Trott) #4563
  • [acc3d66934] - test: move ArrayStream to common (cjihrig) #4027
  • [6c0021361c] - test: refactor test-net-connect-options-ipv6 (Rich Trott) #4395
  • [29804e00ad] - test: use platformTimeout() in more places (Brian White) #4387
  • [761af37d0e] - test: fix race condition in test-http-client-onerror (Devin Nakamura) #4346
  • [980852165f] - test: fix flaky test-net-error-twice (Brian White) #4342
  • [1bc44e79d3] - test: try other ipv6 localhost alternatives (Brian White) #4325
  • [44dbe15640] - test: fix debug-port-cluster flakiness (Ben Noordhuis) #4310
  • [73e781172b] - test: add test for tls.parseCertString (Evan Lucas) #4283
  • [15c295a21b] - test: use regular timeout times for ARMv8 (Jeremiah Senkpiel) #4248
  • [fd250b8fab] - test: parallelize test-repl-persistent-history (Jeremiah Senkpiel) #4247
  • [9a0f156e5a] - test: fix domain-top-level-error-handler-throw (Santiago Gimeno) #4364
  • [6bc1b1c259] - test: don't assume openssl s_client supports -ssl3 (Ben Noordhuis) #4204
  • [d00b9fc66f] - test: fix tls-inception flakiness (Santiago Gimeno) #4195
  • [c41b280a2b] - test: fix tls-inception (Santiago Gimeno) #4195
  • [6f4ab1d1ab] - test: mark test-cluster-shared-leak flaky (Rich Trott) #4162
  • [90498e2a68] - test: skip long path tests on non-Windows (Rafał Pocztarski) #4116
  • [c9100d78f3] - test: fix flaky test-net-socket-local-address (Rich Trott) #4109
  • [ac939d51d9] - test: improve cluster-disconnect-handles test (Brian White) #4084
  • [22ba1b4115] - test: eliminate multicast test FreeBSD flakiness (Rich Trott) #4042
  • [2ee7853bb7] - test: fix http-many-ended-pipelines flakiness (Santiago Gimeno) #4041
  • [a77dcfec06] - test: use platform-based timeout for reliability (Rich Trott) #4015
  • [3f0ff879cf] - test: fix time resolution constraint (Gireesh Punathil) #3981
  • [22b88e1c48] - test: add TAP diagnostic message for retried tests (Rich Trott) #3960
  • [22d2887b1c] - test: add OS X to module loading error test (Evan Lucas) #3901
  • [e2141cb75e] - test: skip instead of fail when mem constrained (Michael Cornacchia) #3697
  • [166523d0ed] - test: fix race condition in unrefd interval test (Michael Cornacchia) #3550
  • [86b47e8dc0] - timers: optimize callback call: bind -> arrow (Andrei Sedoi) #4038
  • [4d37472ea7] - tls_wrap: clear errors on return (Fedor Indutny) #4709
  • [5b695d0343] - tls_wrap: inherit from the AsyncWrap first (Fedor Indutny) #4268
  • [0efc35e6d8] - tls_wrap: slice buffer properly in ClearOut (Fedor Indutny) #4184
  • [628cb8657c] - tools: add .editorconfig (ronkorving) #2993
  • [69fef19624] - tools: implement no-unused-vars for eslint (Rich Trott) #4536
  • [3ee16706f2] - tools: enforce throw new Error() with lint rule (Rich Trott) #3714
  • [32801de4ef] - tools: Use throw new Error() consistently (Rich Trott) #3714
  • [f413fae0cd] - tools: add tap output to cpplint (Johan Bergström) #3448
  • [efa30dd2f0] - tools: enable prefer-const eslint rule (Sakthipriyan Vairamani) #3152
  • [dd0c925896] - udp: remove a needless instanceof Buffer check (ronkorving) #4301
  • [f4414102ed] - util: faster arrayToHash (Jackson Tian)
  • [b421119984] - util: determine object types in C++ (cjihrig) #4100
  • [6a7c9d9293] - util: move .decorateErrorStack to internal/util (Ben Noordhuis) #4026
  • [422a865d46] - util: add decorateErrorStack() (cjihrig) #4013
  • [2d5380ea25] - util: fix constructor/instanceof checks (Brian White) #3385
  • [1bf84b9d41] - util,src: allow lookup of hidden values (cjihrig) #3988

2016-01-12, Version 5.4.1 (Stable), @TheAlphaNerd

Notable Changes

  • Minor performance improvements:
    • module: move unnecessary work for early return (Andres Suarez) #3579
  • Various bug fixes
  • Various doc fixes
  • Various test improvements

Known issues

  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

commits

  • [ff539c5bb5] - cluster: ignore queryServer msgs on disconnection (Santiago Gimeno) #4465
  • [00148b3de1] - deps: backport 066747e from upstream V8 (Ali Ijaz Sheikh) #4625
  • [3912b5cbda] - doc: adds usage of readline line-by-line parsing (Robert Jefe Lindstaedt) #4609
  • [102fb7d3a1] - doc: remove "above" and "below" references (Richard Sun) #4499
  • [df87176ae0] - doc: update stylesheet to match frontpage (Roman Reiss) #4621
  • [ede98d1f98] - doc: stronger suggestion for userland assert (Wyatt Preul) #4535
  • [fdfc72c977] - doc: label http.IncomingMessage as a Class (Sequoia McDowell) #4589
  • [b181e26975] - doc: document http's server.listen return value (Sequoia McDowell) #4590
  • [97aaeb8519] - doc: fix description about the latest-codename (Minwoo Jung) #4583
  • [0126615d1e] - doc: add Evan Lucas to Release Team (Evan Lucas) #4579
  • [ec73c69412] - doc: add Myles Borins to Release Team (Myles Borins) #4578
  • [e703c9a4e2] - doc: bring releases.md up to date (cjihrig) #4540
  • [ac1108d5e7] - doc: add missing backtick for readline (Brian White) #4549
  • [09bc0c6a05] - doc: improvements to crypto.markdown copy (James M Snell) #4435
  • [787c5d96bd] - http: remove variable redeclaration (Rich Trott) #4612
  • [145b66820f] - module: move unnecessary work for early return (Andres Suarez) #3579
  • [ffb7deb443] - net: remove hot path comment from connect (Evan Lucas) #4648
  • [799aa74d90] - net: fix dns lookup for android (Josh Dague) #4580
  • [9accebe087] - net, doc: fix line wrapping lint in net.js (James M Snell) #4588
  • [37a546b490] - src: remove redeclarations of variables (Rich Trott) #4605
  • [b515ccc2a1] - stream: remove useless if test in transform (zoubin) #4617
  • [ea6e26d904] - test: remove duplicate fork module import (Rich Trott) #4634
  • [b14b2aec5e] - test: require common module only once (Rich Trott) #4611
  • [f28a640505] - test: only include http module once (Rich Trott) #4606
  • [6f9a96f497] - test: fix flaky unrefed timers test (Rich Trott) #4599
  • [b70eec8f7b] - tls_legacy: do not read on OpenSSL's stack (Fedor Indutny) #4624

2016-01-06, Version 5.4.0 (Stable), @Fishrock123

Notable changes

  • http:
    • A new status code was added: 451 - "Unavailable For Legal Reasons" (Max Barinov) #4377.
    • Idle sockets that have been kept alive now handle errors (José F. Romaniello) #4482.
  • This release also includes several minor performance improvements:
    • assert: deepEqual is now speedier when comparing TypedArrays (Claudio Rodriguez) #4330.
    • lib: Use arrow functions instead of bind where possible (Minwoo Jung) node#3622.
    • node: Improved accessor perf of process.env (Trevor Norris) #3780.
    • node: Improved performance of process.hrtime() (Trevor Norris) #3780, (Evan Lucas) #4484.
    • node: Improved GetActiveHandles performance (Trevor Norris) #3780.
    • util: Use faster iteration in util.format() (Jackson Tian) #3964.

Known issues

  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

  • [d265fc821a] - assert: typed array deepequal performance fix (Claudio Rodriguez) #4330
  • [6d8053ab56] - buffer: faster case for create Buffer from new Buffer(0) (Jackson Tian) #4326
  • [8781c59878] - buffer: refactor create buffer (Jackson Tian) #4340
  • [252628294b] - child_process: guard against race condition (Rich Trott) #4418
  • [fcf632bc6a] - crypto: load PFX chain the same way as regular one (Fedor Indutny) #4165
  • [a5094a35a0] - debugger: guard against call from non-node context (Ben Noordhuis) #4328
  • [b4c51c5b76] - deps: backport 200315c from V8 upstream (Vladimir Kurchatkin) #4128
  • [334e73942e] - doc: fix heading level error in Buffer doc (Shigeki Ohtsu) #4537
  • [5be0259181] - doc: close backtick in process.title description (Dave) #4534
  • [35aec4c14d] - doc: fix numbering in stream.markdown (Richard Sun) #4538
  • [982f3227a5] - doc: improvements to dgram.markdown copy (James M Snell) #4437
  • [6cdfa38d23] - doc: improvements to errors.markdown copy (James M Snell) #4454
  • [6c7bcd5007] - doc: fix website wg mislink (jona) #4357
  • [eee50821dc] - doc: mention that http.Server inherits from net.Server (Ryan Sobol) #4455
  • [c745b4d5f8] - doc: explain ClientRequest#setTimeout time unit (Ben Ripkens) #4458
  • [40076bf7f8] - doc: fix spelling error in lib/url.js comment (Nik Nyby) #4390
  • [5a223d64e3] - doc: add anchors for _transform _flush _writev in stream.markdown (iamchenxin) #4448
  • [e8bbeecc4c] - doc: improvements to debugger.markdown copy (James M Snell) #4436
  • [ccd75fe3fb] - doc: improvements to events.markdown copy (James M Snell) #4468
  • [ed15962777] - doc: improvements to dns.markdown copy (James M Snell) #4449
  • [e177cc9fdf] - doc: improvements to console.markdown copy (James M Snell) #4428
  • [c1bc9a1023] - doc: improve child_process.markdown copy (James M Snell) #4383
  • [150f62847c] - doc: copyedit setTimeout() documentation (Rich Trott) #4434
  • [9e667354be] - doc: fix formatting in process.markdown (Rich Trott) #4433
  • [bc1c0dc3fb] - doc: catch the WORKING_GROUPS.md bootstrap docs up to date (James M Snell) #4367
  • [c835ba3601] - doc: improve assert.markdown copy (James M Snell) #4360
  • [e79eda74c0] - doc: copyedit releases.md (Rich Trott) #4384
  • [6450d8667f] - doc: improve grammar in tls docs (Adri Van Houdt) #4315
  • [474a0f081a] - doc: improvements to buffer.markdown copy (James M Snell) #4370
  • [57684d650e] - doc: improve addons.markdown copy (James M Snell) #4320
  • [04dd861221] - doc: fix, modernize examples in docs (James M Snell) #4282
  • [5ce6e99474] - doc: Typo in buffer.markdown referencing buf.write() (chrisjohn404) #4324
  • [699bf2c464] - doc: fix link in addons.markdown (Nicholas Young) #4331
  • [e742422757] - fs: use pushValueToArray for readdir(Sync) (Trevor Norris) #3780
  • [1dd2d015d2] - (SEMVER-MINOR) http: handle errors on idle sockets (José F. Romaniello) #4482
  • [083ae166bb] - http: use self.keepAlive instead of self.options.keepAlive (Damian Schenkelman) #4407
  • [ffb4a6e0e4] - http: fix non-string header value concatenation (Brian White) #4460
  • [c77fd6829a] - (SEMVER-MINOR) http: 451 status code "Unavailable For Legal Reasons" (Max Barinov) #4377
  • [8f7af9a489] - http: remove excess calls to removeSocket (Dave) #4172
  • [b841967103] - http: Remove an unnecessary assignment (Bo Borgerson) #4323
  • [b8366e76dd] - http_parser: use pushValueToArray for headers (Trevor Norris) #3780
  • [ca97e7276e] - https: use servername in agent key (Fedor Indutny) #4389
  • [b5aaccc6af] - lib: remove unused modules (Rich Trott) #4396
  • [921fb540c1] - node: improve performance of process.hrtime() (Evan Lucas) #4484
  • [ecef817a28] - node: improve accessor perf of process.env (Trevor Norris) #3780
  • [89f056bdf3] - node: improve performance of hrtime() (Trevor Norris) #3780
  • [c8fc217dc7] - node: improve GetActiveHandles performance (Trevor Norris) #3780
  • [8464667071] - node: fix erroneously named function call (Trevor Norris) #3780
  • [e57fd51a5e] - os: fix crash in GetInterfaceAddresses (Martin Bark) #4272
  • [65c40d753f] - repl: remove unused function (Rich Trott)
  • [3d41a44dba] - repl: Fixed node repl history edge case. (Mudit Ameta) #4108
  • [d11930d604] - repl: use String#repeat instead of Array#join (Evan Lucas) #3900
  • [4220d25626] - test: fix linting for the v5.x branch (Jeremiah Senkpiel) #4547
  • [4b14f1c983] - test: remove unused vars (Rich Trott) #4536
  • [2a69ab32ec] - test: add test-domain-exit-dispose-again back (Julien Gilli) #4256
  • [ae0246641c] - test: remove unused vars from parallel tests (Rich Trott) #4511
  • [984db93e7c] - test: fix flaky test-cluster-shared-leak (Rich Trott) #4510
  • [30b0d7583a] - test: fix flaky streams test (Rich Trott) #4516
  • [46fefbc1b5] - test: fix flaky test-http-agent-keepalive (Rich Trott) #4524
  • [e04a8401d9] - test: remove flaky designations for tests (Rich Trott) #4519
  • [a703b1bf73] - test: remove time check (Rich Trott) #4494
  • [02b3a5be52] - test: refactor test-fs-empty-readStream (Rich Trott) #4490
  • [ab3e5c1417] - test: write to tmp dir rather than fixture dir (Rich Trott) #4489
  • [06043fdfa3] - test: remove unused modules (Rich Trott) #4475
  • [f1a66bc249] - test: clarify role of domains in test (Rich Trott) #4474
  • [08a3490dd6] - test: inherit JOBS from environment (Johan Bergström) #4495
  • [3bfc18763a] - test: improve assert message (Rich Trott) #4461
  • [d46d850461] - test: shorten path for bogus socket (Rich Trott) #4478
  • [f68f86cd0a] - test: fix race condition in test-http-client-onerror (Devin Nakamura) #4346
  • [ec0b6362cf] - test: remove unused assert module imports (Rich Trott) #4438
  • [ba2445046c] - test: don't use cwd for relative path (Johan Bergström) #4477
  • [5110e4deed] - test: don't assume a certain folder structure (Johan Bergström) #3325
  • [55c6946400] - test: make temp path customizable (Johan Bergström) #3325
  • [b19d19efaa] - test: extend timeout in Debug mode (Rich Trott) #4431
  • [c6a99ddd37] - test: remove unused variables from net tests (Rich Trott) #4430
  • [54004f0e26] - test: remove unused vars in ChildProcess tests (Rich Trott) #4425
  • [e72112f90e] - test: fix flaky cluster-disconnect-race (Brian White) #4457
  • [715afc9bbd] - test: fix flaky cluster-net-send (Brian White) #4444
  • [03c4bc704f] - test: fix flaky child-process-fork-regr-gh-2847 (Brian White) #4442
  • [684eb32072] - test: remove unused variables from HTTPS tests (Rich Trott) #4426
  • [585c01f674] - test: remove unused variables from TLS tests (Rich Trott) #4424
  • [c36ca37e2a] - test: remove unused variables form http tests (Rich Trott) #4422
  • [c639d0f1fe] - test: mark test-debug-no-context is flaky (Rich Trott) #4421
  • [cd79ec268d] - test: remove unnecessary assignments (Rich Trott) #4408
  • [0799a9abaf] - test: remove unused var from test-assert.js (Rich Trott) #4405
  • [3710028a85] - test: remove unused util imports (Rich Trott) #4397
  • [8c9d0c1f6f] - test: refactor test-net-connect-options-ipv6 (Rich Trott) #4395
  • [874209022f] - test: fix http-response-multiheaders (Santiago Gimeno) #3958
  • [71b79bcf54] - test: test each block in addon.md contains js & cc (Rod Vagg) #4411
  • [00b37de243] - test: fix domain-top-level-error-handler-throw (Santiago Gimeno) #4364
  • [6d14b6520f] - test: use platformTimeout() in more places (Brian White) #4387
  • [82f74caa56] - test: fix flaky test-net-error-twice (Brian White) #4342
  • [96501e55be] - test: try other ipv6 localhost alternatives (Brian White) #4325
  • [69343d6d2e] - tls_wrap: clear errors on return (Fedor Indutny) #4515
  • [ca9812cf4d] - tools: fix warning in doc parsing (Shigeki Ohtsu) #4537
  • [386030b524] - tools: implement no-unused-vars for eslint (Rich Trott) #4536
  • [14a947fc70] - tools: run tick processor without forking (Matt Loring) #4224
  • [8039ca06eb] - util: faster arrayToHash (Jackson Tian) #3964

2015-12-23, Version 4.2.4 'Argon' (LTS), @jasnell

Maintenance update.

Notable changes

  • Roughly 78% of the commits are documentation and test improvements
  • domains: ** Fix handling of uncaught exceptions (Julien Gilli) #3884
  • deps: ** Upgrade to npm 2.14.12 (Kat Marchán) #4110 ** Backport 819b40a from V8 upstream (Michaël Zasso) #3938 ** Updated node LICENSE file with new npm license (Kat Marchán) #4110

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [907a13a07f] - Add missing va_end before return (Ömer Fadıl Usta) #3565
  • [7ffc01756f] - buffer: fix writeInt{B,L}E for some neg values (Peter A. Bigot) #3994
  • [db0186e435] - buffer: let WriteFloatGeneric silently drop values (P.S.V.R)
  • [5c6740865a] - build: update signtool description, add url (Rod Vagg) #4011
  • [60dda70f89] - build: fix --with-intl=system-icu for x-compile (Steven R. Loomis) #3808
  • [22208b067c] - build: fix configuring with prebuilt libraries (Markus Tzoe) #3135
  • [914caf9c69] - child_process: add safety checks on stdio access (cjihrig) #3799
  • [236ad90a84] - child_process: don't fork bomb ourselves from -e (Ben Noordhuis) #3575
  • [f28f69dac4] - cluster: remove handles when disconnecting worker (Ben Noordhuis) #3677
  • [f5c5e8bf91] - cluster: send suicide message on disconnect (cjihrig) #3720
  • [629d5d18d7] - configure: v8_use_snapshot should be true (Fedor Indutny) #3962
  • [3094464871] - configure: use __ARM_ARCH to determine arm version (João Reis) #4123
  • [1e1173fc5c] - configure: respect CC_host in host arch detection (João Reis) #4117
  • [2e9b886fbf] - crypto: DSA parameter validation in FIPS mode (Stefan Budeanu) #3756
  • [00b77d9e84] - crypto: Improve error checking and reporting (Stefan Budeanu) #3753
  • [3dd90ddc73] - deps: upgrade to npm 2.14.12 (Kat Marchán) #4110
  • [51ae8d10b3] - deps: Updated node LICENSE file with new npm license (Kat Marchán) #4110
  • [9e1edead22] - deps: backport 819b40a from V8 upstream (Michaël Zasso) #3938
  • [a2ce3843cc] - deps: upgrade npm to 2.14.9 (Forrest L Norvell) #3686
  • [b140cb29f4] - dns: prevent undefined values in results (Junliang Yan) #3696
  • [8aafa2ecc0] - doc: standardize references to node.js in docs (Scott Buchanan) #4136
  • [72f43a263a] - doc: fix internal link to child.send() (Luigi Pinca) #4089
  • [dcfdbac457] - doc: reword https.Agent example text (Jan Krems) #4075
  • [f93d268dec] - doc: add HTTP working group (James M Snell) #3919
  • [beee0553ca] - doc: update WORKING_GROUPS.md - add missing groups (Michael Dawson) #3450
  • [3327415fc4] - doc: fix the exception description (yorkie) #3658
  • [da8d012c88] - doc: clarify v4.2.3 notable items (Rod Vagg) #4155
  • [44a2d8ca24] - doc: fix color of linked code blocks (jpersson) #4068
  • [bebde48ebc] - doc: fix typo in README (Rich Trott) #4000
  • [b48d5ec301] - doc: message.header duplication correction (Bryan English) #3997
  • [6ef3625456] - doc: replace sane with reasonable (Lewis Cowper) #3980
  • [c5be3c63f0] - doc: fix rare case of misaligned columns (Roman Reiss) #3948
  • [bd82fb06ff] - doc: fix broken references (Alexander Gromnitsky) #3944
  • [8eb28c3d50] - doc: add reference for buffer.inspect() (cjihrig) #3921
  • [4bc71e0078] - doc: clarify module loading behavior (cjihrig) #3920
  • [4c382e7aaa] - doc: numeric flags to fs.open (Carl Lei) #3641
  • [5207099dc9] - doc: clarify that fs streams expect blocking fd (Carl Lei) #3641
  • [753c5071ea] - doc: Adding best practises for crypto.pbkdf2 (Tom Gallacher) #3290
  • [8f0291beba] - doc: update WORKING_GROUPS.md to include Intl (Steven R. Loomis) #3251
  • [c31d472487] - doc: sort repl alphabetically (Tristian Flanagan) #3859
  • [6b172d9fe8] - doc: consistent reference-style links (Bryan English) #3845
  • [ffd3335e29] - doc: address use of profanity in code of conduct (James M Snell) #3827
  • [a36a5b63cf] - doc: reword message.headers to indicate they are not read-only (Tristian Flanagan) #3814
  • [6de77cd320] - doc: clarify duplicate header handling (Bryan English) #3810
  • [b22973af81] - doc: replace head of readme with updated text (Rod Vagg) #3482
  • [eab0d56ea9] - doc: repl: add defineComand and displayPrompt (Bryan English) #3765
  • [15fb02985f] - doc: document release types in readme (Rod Vagg) #3482
  • [29f26b882f] - doc: add link to [customizing util.inspect colors]. (Jesse McCarthy) #3749
  • [90fdb4f7b3] - doc: sort tls alphabetically (Tristian Flanagan) #3662
  • [39fa9fa85c] - doc: sort stream alphabetically (Tristian Flanagan) #3662
  • [e98e8afb2b] - doc: sort net alphabetically (Tristian Flanagan) #3662
  • [6de887483d] - doc: sort process alphabetically (Tristian Flanagan) #3662
  • [37033dcb71] - doc: sort zlib alphabetically (Tristian Flanagan) #3662
  • [9878034567] - doc: sort util alphabetically (Tristian Flanagan) #3662
  • [48fc765eb6] - doc: sort https alphabetically (Tristian Flanagan) #3662
  • [3546eb4f40] - doc: sort http alphabetically (Tristian Flanagan) #3662
  • [dedfb1156a] - doc: sort modules alphabetically (Tristian Flanagan) #3662
  • [71722fe1a1] - doc: sort readline alphabetically (Tristian Flanagan) #3662
  • [660062bf9e] - doc: sort repl alphabetically (Tristian Flanagan) #3662
  • [34b8d28725] - doc: sort string_decoder alphabetically (Tristian Flanagan) #3662
  • [3f3b9ed7d7] - doc: sort timers alphabetically (Tristian Flanagan) #3662
  • [af876ddc64] - doc: sort tty alphabetically (Tristian Flanagan) #3662
  • [3c2068704a] - doc: sort url alphabetically (Tristian Flanagan) #3662
  • [363692fd0c] - doc: sort vm alphabetically (Tristian Flanagan) #3662
  • [ca41b55166] - doc: sort querystring alphabetically (Tristian Flanagan) #3662
  • [f37ff22b9f] - doc: sort punycode alphabetically (Tristian Flanagan) #3662
  • [4d569607af] - doc: sort path alphabetically (Tristian Flanagan) #3662
  • [daa62447d1] - doc: sort os alphabetically (Tristian Flanagan) #3662
  • [0906f9a8bb] - doc: sort globals alphabetically (Tristian Flanagan) #3662
  • [6cd06c1319] - doc: sort fs alphabetically (Tristian Flanagan) #3662
  • [5b310f8d9e] - doc: sort events alphabetically (Tristian Flanagan) #3662
  • [782cb7d15b] - doc: sort errors alphabetically (Tristian Flanagan) #3662
  • [c39eabbec4] - doc: sort dgram alphabetically (Tristian Flanagan) #3662
  • [261e0f3a21] - doc: sort crypto alphabetically (Tristian Flanagan) #3662
  • [0e6121d04d] - doc: sort dns alphabetically (Tristian Flanagan) #3662
  • [435ffb79f7] - doc: sort console alphabetically (Tristian Flanagan) #3662
  • [28935a10d6] - doc: sort cluster alphabetically (Tristian Flanagan) #3662
  • [5e79dc4406] - doc: sort child_process alphabetically (Tristian Flanagan) #3662
  • [af0bf1a72c] - doc: sort buffer alphabetically (Tristian Flanagan) #3662
  • [f43a0330aa] - doc: sort assert alphabetically (Tristian Flanagan) #3662
  • [1bbc3b3ff8] - doc: add note on tls connection meta data methods (Tyler Henkel) #3746
  • [3c415bbb12] - doc: add note to util.isBuffer (Evan Lucas) #3790
  • [7b5e4574fd] - doc: add romankl to collaborators (Roman Klauke) #3725
  • [4f7c638a7a] - doc: add saghul as a collaborator (Saúl Ibarra Corretgé)
  • [523251270a] - doc: add thealphanerd to collaborators (Myles Borins) #3723
  • [488e74f27d] - doc: update lts description in the collaborator guide (James M Snell) #3668
  • [fe3ae3cea4] - doc: add LTS info to COLLABORATOR_GUIDE.md (Myles Borins) #3442
  • [daa10a345e] - doc: typo fix in readme.md (Sam P Gallagher-Bishop) #3649
  • [eca5720761] - doc: fix wrong date and known issue in changelog.md (James M Snell) #3650
  • [83494f8f3e] - doc: rename iojs-* groups to nodejs-* (Steven R. Loomis) #3634
  • [347fb65aee] - doc: fix crypto spkac function descriptions (Jason Gerfen) #3614
  • [11d2050d63] - doc: Updated streams simplified constructor API (Tom Gallacher) #3602
  • [6db4392bfb] - doc: made code spans more visible in the API docs (phijohns) #3573
  • [8a7dd73af1] - doc: added what buf.copy returns (Manuel B) #3555
  • [cf4b65c2d6] - doc: fix function param order in assert doc (David Woods) #3533
  • [a2efe4c72b] - doc: add note about timeout delay > TIMEOUT_MAX (Guilherme Souza) #3512
  • [d1b5833476] - doc: add caveats of algs and key size in crypto (Shigeki Ohtsu) #3479
  • [12cdf6fcf3] - doc: add method links in events.markdown (Alejandro Oviedo) #3187
  • [f50f19e384] - doc: stdout/stderr can block when directed to file (Ben Noordhuis) #3170
  • [b2cc1302e0] - docs: improve discoverability of Code of Conduct (Ashley Williams) #3774
  • [fa1ab497f1] - docs: fs - change links to buffer encoding to Buffer class anchor (fansworld-claudio) #2796
  • [34e64e5390] - domains: fix handling of uncaught exceptions (Julien Gilli) #3884
  • [0311836e7a] - meta: remove use of profanity in source (Myles Borins) #4122
  • [971762ada9] - module: cache regular expressions (Evan Lucas) #3869
  • [d80fa2c77c] - module: remove unnecessary JSON.stringify (Andres Suarez) #3578
  • [aa85d62f09] - net: add local address/port for better errors (Jan Schär) #3946
  • [803a56de52] - querystring: Parse multiple separator characters (Yosuke Furukawa) #3807
  • [ff02b295fc] - repl: don't crash if cannot open history file (Evan Lucas) #3630
  • [329e88e545] - repl: To exit, press ^C again or type .exit. (Hemanth.HM) #3368
  • [9b05905361] - src: Revert "nix stdin _readableState.reading" (Roman Reiss) #3490
  • [957c1f2543] - stream_wrap: error if stream has StringDecoder (Fedor Indutny) #4031
  • [43e3b69dae] - test: refactor test-http-exit-delay (Rich Trott) #4055
  • [541d0d21be] - test: fix cluster-disconnect-handles flakiness (Santiago Gimeno) #4009
  • [5f66d66e84] - test: don't check the # of chunks in test-http-1.0 (Santiago Gimeno) #3961
  • [355edf585b] - test: fix cluster-worker-isdead (Santiago Gimeno) #3954
  • [4e46e04002] - test: add test for repl.defineCommand() (Bryan English) #3908
  • [4ea1a69c53] - test: mark test flaky on FreeBSD (Rich Trott) #4016
  • [05b64c11f5] - test: mark cluster-net-send test flaky on windows (Rich Trott) #4006
  • [695015579b] - test: remove flaky designation from ls-no-sslv3 (Rich Trott) #3620
  • [abbd87b273] - test: mark fork regression test flaky on windows (Rich Trott) #4005
  • [38ba152a7a] - test: skip test if in FreeBSD jail (Rich Trott) #3995
  • [cc24f0ea58] - test: fix test-domain-exit-dispose-again (Julien Gilli) #3990
  • [b2f1014d26] - test: remove flaky status for cluster test (Rich Trott) #3975
  • [e66794fd30] - test: address flaky test-http-client-timeout-event (Rich Trott) #3968
  • [5a2727421a] - test: retry on smartos if ECONNREFUSED (Rich Trott) #3941
  • [dbc85a275c] - test: avoid test timeouts on rpi (Stefan Budeanu) #3902
  • [b9d7378d20] - test: fix flaky test-child-process-spawnsync-input (Rich Trott) #3889
  • [cca216a034] - test: move test-specific function out of common (Rich Trott) #3871
  • [fb8df8d6c2] - test: module loading error fix solaris #3798 (fansworld-claudio) #3855
  • [9ea6bc1e0f] - test: skip test if FreeBSD jail will break it (Rich Trott) #3839
  • [150f126618] - test: fix flaky SmartOS test (Rich Trott) #3830
  • [603a6f5405] - test: run pipeline flood test in parallel (Rich Trott) #3811
  • [4a26f74ee3] - test: skip/replace weak crypto tests in FIPS mode (Stefan Budeanu) #3757
  • [3f9562b6bd] - test: stronger crypto in test fixtures (Stefan Budeanu) #3759
  • [1f83eebec5] - test: increase crypto strength for FIPS standard (Stefan Budeanu) #3758
  • [7c5fbf7850] - test: add hasFipsCrypto to test/common.js (Stefan Budeanu) #3756
  • [f30214f135] - test: add test for invalid DSA key size (Stefan Budeanu) #3756
  • [9a6c9faafb] - test: numeric flags to fs.open (Carl Lei) #3641
  • [93d1d3cfcd] - test: refactor test-http-pipeline-flood (Rich Trott) #3636
  • [6c23f67504] - test: fix flaky test test-http-pipeline-flood (Devin Nakamura) #3636
  • [4e5cae4360] - test: use really invalid hostname (Sakthipriyan Vairamani) #3711
  • [da189f793b] - test: Fix test-cluster-worker-exit.js for AIX (Imran Iqbal) #3666
  • [7b4194a863] - test: fix test-module-loading-error for musl (Hugues Malphettes) #3657
  • [3dc52e99df] - test: fix test-net-persistent-keepalive for AIX (Imran Iqbal) #3646
  • [0e8eb66a78] - test: fix path to module for repl test on Windows (Michael Cornacchia) #3608
  • [3aecbc86d2] - test: add test-zlib-flush-drain (Myles Borins) #3534
  • [542d05cbe1] - test: enhance fs-watch-recursive test (Sakthipriyan Vairamani) #2599
  • [0eb0119d64] - tls: Use SHA1 for sessionIdContext in FIPS mode (Stefan Budeanu) #3755
  • [c10c08604c] - tls: remove util and calls to util.format (Myles Borins) #3456
  • [a558a570c0] - util: use regexp instead of str.replace().join() (qinjia) #3689
  • [47bb94a0c3] - zlib: only apply drain listener if given callback (Craig Cavalier) #3534
  • [4733a60158] - zlib: pass kind to recursive calls to flush (Myles Borins) #3534

2015-12-16, Version 5.3.0 (Stable), @cjihrig

Notable changes

  • buffer:
    • Buffer.prototype.includes() has been added to keep parity with TypedArrays. (Alexander Martin) #3567.
  • domains:
    • Fix handling of uncaught exceptions. (Julien Gilli) #3654.
  • https:
    • Added support for disabling session caching. (Fedor Indutny) #4252.
  • repl:
    • Allow third party modules to be imported using require(). This corrects a regression from 5.2.0. (Ben Noordhuis) #4215.
  • deps:
    • Upgrade libuv to 1.8.0. (Saúl Ibarra Corretgé) #4276.

Known issues

  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

  • [6ca5ea3860] - 2015-12-09, Version 5.2.0 (Stable) (Rod Vagg) #4181
  • [da5cdc2207] - assert: accommodate ES6 classes that extend Error (Rich Trott) #4166
  • [67e181986a] - (SEMVER-MINOR) buffer: add includes() for parity with TypedArray (Alexander Martin) #3567
  • [84dea1bd0c] - configure: fix arm vfpv2 (Jörg Krause) #4203
  • [a7f5dfd14c] - configure: use __ARM_ARCH to determine arm version (João Reis) #4123
  • [0e3912be0b] - configure: respect CC_host in host arch detection (João Reis) #4117
  • [69b94ec55c] - deps: upgrade libuv to 1.8.0 (Saúl Ibarra Corretgé) #4276
  • [a8854e5b59] - doc: document the cache parameter for fs.realpathSync (Jackson Tian) #4285
  • [9e1b7aa874] - doc: document backlog for server.listen() variants (Jan Schär) #4025
  • [435d571f22] - doc: update AUTHORS list (Rod Vagg) #4183
  • [3b3061365a] - doc: update irc channels: #node.js and #node-dev (Nelson Pecora) #2743
  • [9538fd02e5] - doc: clarify error events in HTTP module documentation (Lenny Markus) #4275
  • [c6efd535e4] - doc: fix improper http.get sample code (Hideki Yamamura) #4263
  • [498c9adb08] - doc: add CTC meeting minutes 2015-10-28 (Rod Vagg) #3661
  • [671347cf13] - doc: fixup socket.remoteAddress (Arthur Gautier) #4198
  • [f050cab3d8] - doc: copyedit console doc (Rich Trott) #4225
  • [1a21a5368b] - doc: move description of 'equals' method to right place (janriemer) #4227
  • [9a9c5259bf] - doc: Fixing broken links to the v8 wiki (Tom Gallacher) #4241
  • [37ed05b8c1] - doc: copyedit child_process doc (Rich Trott) #4188
  • [e47ae5808b] - doc: copyedit buffer doc (Rich Trott) #4187
  • [70fb06a90b] - doc: clarify assert.fail doc (Rich Trott) #4186
  • [e3187cc81e] - doc: copyedit addons doc (Rich Trott) #4185
  • [931ab967ff] - doc: add calvinmetcalf to collaborators (Calvin Metcalf) #4218
  • [01ce23148b] - doc: add mcollina to collaborators (Matteo Collina) #4220
  • [bd8753aabf] - doc: add rmg to collaborators (Ryan Graham) #4219
  • [73a9a6fc92] - doc: harmonize description of ca argument (Ben Noordhuis) #4213
  • [dfc8bedbc5] - doc: change references from node to Node.js (Roman Klauke) #4177
  • [7a518788e9] - doc, test: symbols as event names (Bryan English) #4151
  • [425a3545d2] - (SEMVER-MINOR) domains: fix handling of uncaught exceptions (Julien Gilli) #3654
  • [acef181fde] - (SEMVER-MINOR) https: support disabling session caching (Fedor Indutny) #4252
  • [2a60e2ad71] - module,src: do not wrap modules with -1 lineOffset (cjihrig) #4298
  • [d3c498b1b7] - node: remove unused variables in AppendExceptionLine (Yazhong Liu) #4264
  • [aad6b9f0eb] - repl: display error message when loading directory (Prince J Wesley) #4170
  • [213ede6cee] - repl: fix require('3rdparty') regression (Ben Noordhuis) #4215
  • [f176b31e74] - src: remove __builtin_bswap16 call (Ben Noordhuis) #4290
  • [ce2471673f] - src: remove unused BITS_PER_LONG macro (Ben Noordhuis) #4290
  • [b799a74709] - src: fix line numbers on core errors (cjihrig) #4254
  • [c311b61430] - src: fix deprecation message for ErrnoException (Martin von Gagern) #4269
  • [2859f9ef92] - test: fix debug-port-cluster flakiness (Ben Noordhuis) #4310
  • [cb0b4a6bc0] - test: add test for debugging one line files (cjihrig) #4298
  • [0b9c3a30d6] - test: add test for tls.parseCertString (Evan Lucas) #4283
  • [7598ed6cc0] - test: parallelize test-repl-persistent-history (Jeremiah Senkpiel) #4247
  • [668449ad14] - test: use regular timeout times for ARMv8 (Jeremiah Senkpiel) #4248
  • [23e7703c85] - test: fix http-many-ended-pipelines flakiness (Santiago Gimeno) #4041
  • [3b94991bda] - test: fix tls-inception flakiness (Santiago Gimeno) #4195
  • [86a3bd09b0] - test: fix tls-inception (Santiago Gimeno) #4195
  • [1e89830a11] - test: don't assume openssl s_client supports -ssl3 (Ben Noordhuis) #4204
  • [c5b4f6bc99] - (SEMVER-MINOR) tls: introduce secureContext for tls.connect (Fedor Indutny) #4246
  • [e0bb118a1d] - tls_wrap: inherit from the AsyncWrap first (Fedor Indutny) #4268
  • [d63cceeb10] - tools: add .editorconfig (ronkorving) #2993
  • [4b267df93e] - udp: remove a needless instanceof Buffer check (ronkorving) #4301

2015-12-09, Version 5.2.0 (Stable), @rvagg

Notable changes

  • build:
    • Add support for Intel's VTune JIT profiling when compiled with --enable-vtune-profiling. For more information about VTune, see https://software.intel.com/en-us/node/544211. (Chunyang Dai) #3785.
    • Properly enable V8 snapshots by default. Due to a configuration error, snapshots have been kept off by default when the intention is for the feature to be enabled. (Fedor Indutny) #3962.
  • crypto:
    • Simplify use of ECDH (Elliptic Curve Diffie-Hellman) objects (created via crypto.createECDH(curve_name)) with private keys that are not dynamically generated via generateKeys(). The public key is now computed when explicitly setting a private key. Added validity checks to reduce the possibility of computing weak or invalid shared secrets. Also, deprecated the setPublicKey() method for ECDH objects as its usage is unnecessary and can lead to inconsistent state. (Michael Ruddy) #3511.
    • Update root certificates from the current list stored maintained by Mozilla NSS. (Ben Noordhuis) #3951.
    • Multiple CA certificates can now be passed with the ca option to TLS methods as an array of strings or in a single new-line separated string. (Ben Noordhuis) #4099
  • tools: Include a tick processor in core, exposed via the --prof-process command-line argument which can be used to process V8 profiling output files generated when using the --prof command-line argument. (Matt Loring) #4021.

Known issues

  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

  • [08a3f29fd4] - buffer: fix range checking for slowToString (Matt Loring) #4019
  • [e3a8e8bba4] - buffer: Prevent Buffer constructor deopt (Bryce Baril) #4158
  • [0e18e68324] - buffer: fix writeInt{B,L}E for some neg values (Peter A. Bigot) #3994
  • [ab5b529dd2] - buffer: default to UTF8 in byteLength() (Tom Gallacher) #4010
  • [fcf0e8ebdf] - buffer: move checkFloat from lib into src (Matt Loring) #3763
  • [12649f4496] - build: add "--partly-static" build options (Super Zheng) #4152
  • [a76d788119] - build: update signtool description, add url (Rod Vagg) #4011
  • [ed255abdc1] - (SEMVER-MINOR) build,src: add Intel Vtune profiling support (Chunyang Dai) #3785
  • [7793c364fc] - child_process: flush consuming streams (Dave) #4071
  • [f29c5d6e70] - configure: v8_use_snapshot should be true (Fedor Indutny) #3962
  • [da5ac55c83] - (SEMVER-MINOR) crypto: simplify using pre-existing keys with ECDH (Michael Ruddy) #3511
  • [cfc97641ee] - crypto: fix native module compilation with FIPS (Stefan Budeanu) #4023
  • [b81b45dabd] - crypto: update root certificates (Ben Noordhuis) #3951
  • [def681a07e] - crypto: disable crypto.createCipher in FIPS mode (Stefan Budeanu) #3754
  • [ce423f3624] - debugger: introduce exec method for debugger (Jackson Tian)
  • [99fd1ec28d] - deps: backport 819b40a from V8 upstream (Michaël Zasso) #3937
  • [82252b2a17] - doc: add brief Node.js overview to README (wurde) #4174
  • [634c5f1f81] - doc: url.format - true slash postfix behaviour (fansworld-claudio) #4119
  • [6f957a70d8] - doc: s/node.js/Node.js in readme (Rod Vagg) #3998
  • [0cd4a52392] - doc: improve child_process.markdown wording (yorkie) #4138
  • [fd5ed6888d] - doc: add JungMinu to collaborators (Minwoo Jung) #4143
  • [fa0cdf75d9] - doc: add iarna to collaborators (Rebecca Turner) #4144
  • [424eb962b1] - doc: add zkat to collaborators (Kat Marchán) #4142
  • [85b601224b] - doc: add HTTP working group (James M Snell) #3919
  • [f4164bd8df] - doc: update links to use https where possible (jpersson) #4054
  • [3169eed1e3] - doc: add links and backticks around names (jpersson) #4054
  • [f3417e2574] - doc: standardize references to node.js in docs (Scott Buchanan) #4136
  • [95dd60c657] - doc: reword https.Agent example text (Jan Krems) #4075
  • [c61237d3ea] - doc: fix internal link to child.send() (Luigi Pinca) #4089
  • [aaeced915e] - doc: fix the exception description (yorkie) #3658
  • [a2b7596ac0] - doc: fix color of linked code blocks (jpersson) #4068
  • [f3c50f5fb5] - doc: fix rare case of misaligned columns (Roman Reiss) #3948
  • [f0a2e2cdec] - doc: message.header duplication correction (Bryan English) #3997
  • [b1dfa8bebb] - doc: fix typo in README (Rich Trott) #4000
  • [4602e01221] - doc: replace sane with reasonable (Lewis Cowper) #3980
  • [4849a54386] - doc: Adding best practises for crypto.pbkdf2 (Tom Gallacher) #3290
  • [77251d99de] - doc: numeric flags to fs.open (Carl Lei) #3641
  • [f4ca007b42] - doc: clarify that fs streams expect blocking fd (Carl Lei) #3641
  • [26eeae8016] - doc: fix broken references (Alexander Gromnitsky) #3944
  • [f90227b0e8] - doc: move fs.existsSync() deprecation message (Martin Forsberg) #3942
  • [bbcb2a2e65] - doc: clarify module loading behavior (cjihrig) #3920
  • [0997178037] - doc: add reference for buffer.inspect() (cjihrig) #3921
  • [6c16c40283] - doc: clarify v5.1.1 notable items (Rod Vagg) #4156
  • [4c8800c2de] - fs,doc: use target instead of destination (yorkie) #3912
  • [1f0e8dca8e] - installer: install the tick processor (Matt Loring) #3032
  • [e8e4e0718b] - meta: remove use of profanity in source (Myles Borins) #4122
  • [13834caa28] - module: fix column offsets in errors (Tristian Flanagan) #2867
  • [8988e1e117] - module,repl: remove repl require() hack (Ben Noordhuis) #4026
  • [baac81d95f] - net: add local address/port for better errors (Jan Schär) #3946
  • [12754c5dc3] - net: small code cleanup (Jan Schär) #3943
  • [8a5e4345fd] - node: s/doNTCallbackX/nextTickCallbackWithXArgs/ (Rod Vagg) #4167
  • [0869ef3c55] - (SEMVER-MINOR) repl: allow leading period in multiline input (Zirak) #3835
  • [aaab108dfe] - repl: attach location info to syntax errors (cjihrig) #4013
  • [b08126dc9d] - src: refactor vcbuild configure args creation (Rod Vagg) #3399
  • [da3137d0c5] - src: don't print garbage errors (cjihrig) #4112
  • [9e9346fa32] - src: use GetCurrentProcessId() for process.pid (Ben Noordhuis) #4163
  • [d969c0965c] - src: define Is* util functions with macros (cjihrig) #4118
  • [458facdf66] - src: define getpid() based on OS (cjihrig) #4146
  • [7e18f2ec62] - (SEMVER-MINOR) src: add BE support to StringBytes::Encode() (Bryon Leung) #3410
  • [756ab9caad] - stream: be less eager with readable flag (Brian White) #4141
  • [8f845ba28a] - stream_wrap: error if stream has StringDecoder (Fedor Indutny) #4031
  • [1c1af81ea0] - streams: update .readable/.writable to false (Brian White) #4083
  • [1d50819c85] - test: check range fix for slowToString (Sakthipriyan Vairamani) #4019
  • [0c2a0dc859] - test: skip long path tests on non-Windows (Rafał Pocztarski) #4116
  • [8a60aa1303] - test: don't check the # of chunks in test-http-1.0 (Santiago Gimeno) #3961
  • [e84aeec883] - test: mark test-cluster-shared-leak flaky (Rich Trott) #4162
  • [b3f3b2e157] - test: fix cluster-worker-isdead (Santiago Gimeno) #3954
  • [da6be4d31a] - test: fix time resolution constraint (Gireesh Punathil) #3981
  • [9d16729b20] - test: skip instead of fail when mem constrained (Michael Cornacchia) #3697
  • [be41eb751b] - test: refactor test-http-exit-delay (Rich Trott) #4055
  • [4b43bf0385] - test: fix flaky test-net-socket-local-address (Rich Trott) #4109
  • [cb55c67a00] - test: improve cluster-disconnect-handles test (Brian White) #4084
  • [2b5b127e14] - test: fix cluster-disconnect-handles flakiness (Santiago Gimeno) #4009
  • [430264817b] - test: add test for repl.defineCommand() (Bryan English) #3908
  • [22b0971222] - test: eliminate multicast test FreeBSD flakiness (Rich Trott) #4042
  • [c50003746b] - test: mark test flaky on FreeBSD (Rich Trott) #4016
  • [69c95bbdb7] - test: move ArrayStream to common (cjihrig) #4027
  • [d94a70ec51] - test: fix test-domain-exit-dispose-again (Julien Gilli) #3990
  • [00b839a2b8] - test: use platform-based timeout for reliability (Rich Trott) #4015
  • [054a216b6f] - test: mark cluster-net-send test flaky on windows (Rich Trott) #4006
  • [d0621c5649] - test: mark fork regression test flaky on windows (Rich Trott) #4005
  • [19ed33df80] - test: skip test if in FreeBSD jail (Rich Trott) #3995
  • [a863e8d667] - test: remove flaky status for cluster test (Rich Trott) #3975
  • [dd0d15fc47] - test: add TAP diagnostic message for retried tests (Rich Trott) #3960
  • [1fe4d30efc] - test: retry on smartos if ECONNREFUSED (Rich Trott) #3941
  • [665a35d45e] - test: address flaky test-http-client-timeout-event (Rich Trott) #3968
  • [f9fe0aee53] - test: numeric flags to fs.open (Carl Lei) #3641
  • [54aafa17af] - test: http complete list of non-concat headers (Bryan English) #3930
  • [788541b40c] - test: fix race condition in unrefd interval test (Michael Cornacchia) #3550
  • [e129d83996] - test: skip/replace weak crypto tests in FIPS mode (Stefan Budeanu) #3757
  • [bc27379453] - test: avoid test timeouts on rpi (Stefan Budeanu) #3902
  • [272732e76b] - test: fix flaky test-child-process-spawnsync-input (Rich Trott) #3889
  • [781f8c0d1e] - test: add OS X to module loading error test (Evan Lucas) #3901
  • [f99c6363de] - test: module loading error fix solaris #3798 (fansworld-claudio) #3855
  • [1279adc756] - timers: optimize callback call: bind -> arrow (Andrei Sedoi) #4038
  • [80f7f65464] - (SEMVER-MINOR) tls: support reading multiple cas from one input (Ben Noordhuis) #4099
  • [939f305d56] - tls_wrap: slice buffer properly in ClearOut (Fedor Indutny) #4184
  • [6d4a03d3d2] - (SEMVER-MINOR) tools: list missing whitespace/if-one-line cpplint (Ben Noordhuis) #4099
  • [1c1c1a0f2b] - (SEMVER-MINOR) tools: add --prof-process flag to node binary (Matt Loring) #4021
  • [d7a7d3e6f7] - tools: update certdata.txt (Ben Noordhuis) #3951
  • [1b434e0654] - util: determine object types in C++ (cjihrig) #4100
  • [c93e2678f0] - util: fix constructor/instanceof checks (Brian White) #3385
  • [098a3113e1] - util: move .decorateErrorStack to internal/util (Ben Noordhuis) #4026
  • [e68ea16c32] - util: add decorateErrorStack() (cjihrig) #4013
  • [c584c3e08f] - util,src: allow lookup of hidden values (cjihrig) #3988

2015-12-04, Version 5.1.1 (Stable), @rvagg

Notable changes

  • http: Fix CVE-2015-8027, a bug whereby an HTTP socket may no longer have a parser associated with it but a pipelined request attempts to trigger a pause or resume on the non-existent parser, a potential denial-of-service vulnerability. (Fedor Indutny)
  • openssl: Upgrade to 1.0.2e, containing fixes for:
    • CVE-2015-3193 "BN_mod_exp may produce incorrect results on x86_64", an attack may be possible against a Node.js TLS server using DHE key exchange. Details are available at http://openssl.org/news/secadv/20151203.txt.
    • CVE-2015-3194 "Certificate verify crash with missing PSS parameter", a potential denial-of-service vector for Node.js TLS servers using client certificate authentication; TLS clients are also impacted. Details are available at http://openssl.org/news/secadv/20151203.txt. (Shigeki Ohtsu) #4134
  • v8: Backport fix for CVE-2015-6764, a bug in JSON.stringify() that can result in out-of-bounds reads for arrays. (Ben Noordhuis)

Known issues

  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

  • [678398f250] - deps: backport a7e50a5 from upstream v8 (Ben Noordhuis)
  • [76a552c938] - deps: backport 6df9a1d from upstream v8 (Ben Noordhuis)
  • [533881f889] - deps: upgrade openssl sources to 1.0.2e (Shigeki Ohtsu) #4134
  • [12e70fafd3] - http: fix pipeline regression (Fedor Indutny)

2015-12-04, Version 4.2.3 'Argon' (LTS), @rvagg

Security Update

Notable changes

  • http: Fix CVE-2015-8027, a bug whereby an HTTP socket may no longer have a parser associated with it but a pipelined request attempts to trigger a pause or resume on the non-existent parser, a potential denial-of-service vulnerability. (Fedor Indutny)
  • openssl: Upgrade to 1.0.2e, containing fixes for:
    • CVE-2015-3193 "BN_mod_exp may produce incorrect results on x86_64", an attack may be possible against a Node.js TLS server using DHE key exchange. Details are available at http://openssl.org/news/secadv/20151203.txt.
    • CVE-2015-3194 "Certificate verify crash with missing PSS parameter", a potential denial-of-service vector for Node.js TLS servers using client certificate authentication; TLS clients are also impacted. Details are available at http://openssl.org/news/secadv/20151203.txt. (Shigeki Ohtsu) #4134
  • v8: Backport fix for CVE-2015-6764, a bug in JSON.stringify() that can result in out-of-bounds reads for arrays. (Ben Noordhuis)

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [49bbd563be] - deps: upgrade openssl sources to 1.0.2e (Shigeki Ohtsu) #4134
  • [9a063fd492] - deps: backport a7e50a5 from upstream v8 (Ben Noordhuis)
  • [07233206e9] - deps: backport 6df9a1d from upstream v8 (Ben Noordhuis)
  • [1c8e6de78e] - http: fix pipeline regression (Fedor Indutny)

2015-12-04, Version 0.12.9 (LTS), @rvagg

Security Update

Notable changes

  • http: Fix CVE-2015-8027, a bug whereby an HTTP socket may no longer have a parser associated with it but a pipelined request attempts to trigger a pause or resume on the non-existent parser, a potential denial-of-service vulnerability. (Fedor Indutny)
  • openssl: Upgrade to 1.0.1q, fixes CVE-2015-3194 "Certificate verify crash with missing PSS parameter", a potential denial-of-service vector for Node.js TLS servers using client certificate authentication; TLS clients are also impacted. Details are available at http://openssl.org/news/secadv/20151203.txt. (Ben Noordhuis) https://github.com/nodejs/node/pull/4133

Commits

2015-12-04, Version 0.10.41 (Maintenance), @rvagg

Security Update

Notable changes

  • build: Add support for Microsoft Visual Studio 2015
  • npm: Upgrade to v1.4.29 from v1.4.28. A special one-off release as part of the strategy to get a version of npm into Node.js v0.10.x that works with the current registry (https://github.com/nodejs/LTS/issues/37). This version of npm prints out a banner each time it is run. The banner warns that the next standard release of Node.js v0.10.x will ship with a version of npm v2.
  • openssl: Upgrade to 1.0.1q, containing fixes CVE-2015-3194 "Certificate verify crash with missing PSS parameter", a potential denial-of-service vector for Node.js TLS servers using client certificate authentication; TLS clients are also impacted. Details are available at http://openssl.org/news/secadv/20151203.txt. (Ben Noordhuis) https://github.com/nodejs/node/pull/4133

Commits

2015.11.25, Version 0.12.8 (LTS), @rvagg

2015-11-17, Version 5.1.0 (Stable), @Fishrock123

Notable changes

  • buffer: The noAssert option for many buffer functions will now silently drop invalid write values rather than crashing (P.S.V.R) #3767.
    • This makes the behavior match what the docs suggest.
  • child_process: child.send() now properly returns a boolean like the docs suggest (Rich Trott) #3577.
  • doc: All of the API docs have been re-ordered so as to read in alphabetical order (Tristian Flanagan) #3662.
  • http_parser: update http-parser to 2.6.0 from 2.5.0 (James M Snell) #3569.
    • Now supports the following HTTP methods: LINK, UNLINK, BIND, REBIND, UNBIND.
    • Also added ACL and IPv6 Zone ID support.
  • npm: upgrade npm to 3.3.12 from v3.3.6 (Rebecca Turner) #3685.
  • repl: The REPL no longer crashes if the persistent history file cannot be opened (Evan Lucas) #3630.
  • tls: The default sessionIdContext now uses SHA1 in FIPS mode rather than MD5 (Stefan Budeanu) #3755.
  • v8: Added some more useful post-mortem data (Fedor Indutny) #3779.

Known issues

  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

  • [b663d2bbb5] - async_wrap: call callback in destructor (Trevor Norris) #3461
  • [eccbec99ea] - async_wrap: new instances get uid (Trevor Norris) #3461
  • [5d34c81a5c] - async_wrap: allow some hooks to be optional (Trevor Norris) #3461
  • [7bff0138e2] - buffer: let WriteFloatGeneric silently drop values (P.S.V.R) #3767
  • [56673693cd] - buffer: neuter external nullptr buffers (Fedor Indutny) #3624
  • [2d0ca0293a] - build: fix configuring with prebuilt libraries (Markus Tzoe) #3135
  • [2a69b6820f] - build: fix --with-intl=system-icu for x-compile (Steven R. Loomis) #3808
  • [8f5a2550a7] - build: omit -gline-tables-only for --enable-asan (Ben Noordhuis) #3680
  • [84bb74547d] - child_process: add safety checks on stdio access (cjihrig) #3799
  • [e888471a11] - child_process: don't fork bomb ourselves from -e (Ben Noordhuis) #3575
  • [47f3735e88] - cluster: send suicide message on disconnect (cjihrig) #3720
  • [d64a56cba5] - cluster: remove handles when disconnecting worker (Ben Noordhuis) #3677
  • [5ed30da5a0] - console: use 'label' argument for time and timeEnd (Roman Reiss) #3590
  • [7a290abea6] - crypto: DSA parameter validation in FIPS mode (Stefan Budeanu) #3756
  • [2c9fb147be] - crypto: Improve error checking and reporting (Stefan Budeanu) #3753
  • [66dccaf0cd] - debugger: also exit when the repl emits 'exit' (Felix Böhm) #2369
  • [fd0253be4d] - deps: backport bc2e393 from v8 upstream (evan.lucas) #3792
  • [59077acc3d] - deps: cherry-pick 68e89fb from v8's upstream (Fedor Indutny) #3779
  • [9ef81ff5d3] - deps: update V8 to 4.6.85.31 (Michaël Zasso) #3698
  • [b48dbf9fce] - deps: upgrade npm to 3.3.12 (Rebecca Turner) #3685
  • [7caeb14e11] - (SEMVER-MINOR) deps: update http-parser to 2.6.0 (James M Snell) #3569
  • [08e0de59fa] - deps: upgrade npm to 3.3.10 (Rebecca Turner) #3599
  • [ac9e4ffe8e] - dns: prevent undefined values in results (Junliang Yan) #3696
  • [ea67d870f4] - doc: document release types in readme (Rod Vagg) #3482
  • [60d3daa65c] - doc: replace head of readme with updated text (Rod Vagg) #3482
  • [df1fdba2ae] - doc: sort repl alphabetically (Tristian Flanagan) #3859
  • [7ecd5422c8] - doc: address use of profanity in code of conduct (James M Snell) #3827
  • [c2393d1f2a] - doc: consistent reference-style links (Bryan English) #3845
  • [96f53c6b02] - doc: add link to [customizing util.inspect colors]. (Jesse McCarthy) #3749
  • [132297d3f6] - doc: Updated streams simplified constructor API (Tom Gallacher) #3602
  • [d137f0fd28] - doc: add warning about Windows process groups (Roman Klauke) #3681
  • [45ff31cf94] - doc: added what buf.copy returns (Manuel B) #3555
  • [5d1faa28cb] - doc: reword message.headers to indicate they are not read-only (Tristian Flanagan) #3814
  • [25c3807051] - doc: clarify duplicate header handling (Bryan English) #3810
  • [ae2d1ee302] - doc: repl: add defineComand and displayPrompt (Bryan English) #3765
  • [09e524d013] - doc: sort tls alphabetically (Tristian Flanagan) #3662
  • [7e60b81c81] - doc: sort stream alphabetically (Tristian Flanagan) #3662
  • [cd931a8a13] - doc: sort net alphabetically (Tristian Flanagan) #3662
  • [cfa8198af8] - doc: sort process alphabetically (Tristian Flanagan) #3662
  • [e1a512607a] - doc: sort zlib alphabetically (Tristian Flanagan) #3662
  • [0996b97240] - doc: sort util alphabetically (Tristian Flanagan) #3662
  • [df07072b66] - doc: sort https alphabetically (Tristian Flanagan) #3662
  • [6e9d01c7d8] - doc: sort http alphabetically (Tristian Flanagan) #3662
  • [18da02fa0f] - doc: sort modules alphabetically (Tristian Flanagan) #3662
  • [29054ffc0c] - doc: sort readline alphabetically (Tristian Flanagan) #3662
  • [389ead37ef] - doc: sort repl alphabetically (Tristian Flanagan) #3662
  • [d383d624de] - doc: sort string_decoder alphabetically (Tristian Flanagan) #3662
  • [0d2262887c] - doc: sort timers alphabetically (Tristian Flanagan) #3662
  • [14b5a95d03] - doc: sort tty alphabetically (Tristian Flanagan) #3662
  • [d4dda77e4a] - doc: sort url alphabetically (Tristian Flanagan) #3662
  • [39b8259bd5] - doc: sort vm alphabetically (Tristian Flanagan) #3662
  • [d357b3090e] - doc: sort querystring alphabetically (Tristian Flanagan) #3662
  • [1f56abaa98] - doc: sort punycode alphabetically (Tristian Flanagan) #3662
  • [bc63667456] - doc: sort path alphabetically (Tristian Flanagan) #3662
  • [22961e011c] - doc: sort os alphabetically (Tristian Flanagan) #3662
  • [4ba18489d3] - doc: sort globals alphabetically (Tristian Flanagan) #3662
  • [c3f5ea704f] - doc: sort fs alphabetically (Tristian Flanagan) #3662
  • [ce3ac8dd1e] - doc: sort events alphabetically (Tristian Flanagan) #3662
  • [63a78749b8] - doc: sort errors alphabetically (Tristian Flanagan) #3662
  • [488326da8d] - doc: sort dgram alphabetically (Tristian Flanagan) #3662
  • [e1c357e881] - doc: sort crypto alphabetically (Tristian Flanagan) #3662
  • [4118fd5794] - doc: sort dns alphabetically (Tristian Flanagan) #3662
  • [3e046acc50] - doc: sort console alphabetically (Tristian Flanagan) #3662
  • [05f1af7124] - doc: sort cluster alphabetically (Tristian Flanagan) #3662
  • [5c30e5dada] - doc: sort child_process alphabetically (Tristian Flanagan) #3662
  • [fb6a09cd0e] - doc: sort buffer alphabetically (Tristian Flanagan) #3662
  • [c7c05d8f02] - doc: sort assert alphabetically (Tristian Flanagan) #3662
  • [f2c2e53321] - doc: add note to util.isBuffer (Evan Lucas) #3790
  • [35fb9f91eb] - doc: Describe FIPSDIR environment variable (Stefan Budeanu) #3752
  • [da911f158b] - doc: update lts description in the collaborator guide (James M Snell) #3668
  • [597f8751d1] - doc: add note on tls connection meta data methods (Tyler Henkel) #3746
  • [a32d9e31dc] - doc: add romankl to collaborators (Roman Klauke) #3725
  • [e5b9109d12] - doc: add thealphanerd to collaborators (Myles Borins) #3723
  • [a05a0b47e3] - doc: add saghul as a collaborator (Saúl Ibarra Corretgé) #3724
  • [b14d9c5f16] - doc: add method links in events.markdown (Alejandro Oviedo) #3187
  • [44f779b112] - doc: add caveats of algs and key size in crypto (Shigeki Ohtsu) #3479
  • [a0db5fb355] - doc: stdout/stderr can block when directed to file (Ben Noordhuis) #3170
  • [409f29972e] - doc: rename iojs-* groups to nodejs-* (Steven R. Loomis) #3634
  • [801866280e] - doc: fix wrong date and known issue in changelog.md (James M Snell) #3650
  • [325c4c7af5] - doc: fix function param order in assert doc (David Woods) #3533
  • [045e04e531] - doc: typo fix in readme.md (Sam P Gallagher-Bishop) #3649
  • [7fd8f1371e] - doc: add note about timeout delay > TIMEOUT_MAX (Guilherme Souza) #3512
  • [7d0b589644] - doc: fix crypto spkac function descriptions (Jason Gerfen) #3614
  • [efa19bdcb5] - doc: add final full stop in CONTRIBUTING.md (Emily Aviva Kapor-Mater) #3576
  • [90723afe32] - doc: made code spans more visible in the API docs (phijohns) #3573
  • [530bb9144f] - docs: improve discoverability of Code of Conduct (Ashley Williams) #3774
  • [73e40f0327] - docs: fs - change links to buffer encoding to Buffer class anchor (fansworld-claudio) #2796
  • [7a84fa6c60] - docs: fs - remove encoding list and link to buffer (fansworld-claudio) #2796
  • [2aa6a6d998] - fs: return null error on readFile() success (Zheng Chaoping) #3740
  • [c96400c572] - gitignore: don't ignore 'debug' in deps/npm (Rebecca Turner) #3599
  • [a7f28a098e] - http: remove unneeded cb check from setTimeout() (Ashok Suthar) #3631
  • [d2b5dcb2de] - lib: return boolean from child.send() (Rich Trott) #3577
  • [5c54fa0095] - module: cache regular expressions (Evan Lucas) #3869
  • [89285db128] - module: remove unnecessary JSON.stringify (Andres Suarez) #3578
  • [fd3f0d8e6e] - querystring: Parse multiple separator characters (Yosuke Furukawa) #3807
  • [75dbafc3f8] - repl: To exit, press ^C again or type .exit. (Hemanth.HM) #3368
  • [5073da0481] - repl: don't crash if cannot open history file (Evan Lucas) #3630
  • [59cd28114d] - src: Add missing va_end before return (Ömer Fadıl Usta) #3565
  • [02e012e984] - src: force line buffering for stderr (Rich Trott) #3701
  • [2498e29344] - src: Revert "nix stdin _readableState.reading" (Roman Reiss) #3490
  • [65cd03cda6] - src: wrap source before doing syntax check (Evan Lucas) #3587
  • [d72bb1e96a] - Revert "src: fix stuck debugger process" (Ben Noordhuis) #3585
  • [047abbd6eb] - test: move test-specific function out of common (Rich Trott) #3871
  • [19a36ff355] - test: fix flaky SmartOS test (Rich Trott) #3830
  • [4bb27baf8d] - test: skip test if FreeBSD jail will break it (Rich Trott) #3839
  • [1c1e70864b] - test: fix path to module for repl test on Windows (Michael Cornacchia) #3608
  • [413ca53107] - test: increase crypto strength for FIPS standard (Stefan Budeanu) #3758
  • [2ec5e17d16] - test: add test-zlib-flush-drain (Myles Borins) #3534
  • [de707f0876] - test: add hasFipsCrypto to test/common.js (Stefan Budeanu) #3756
  • [828b786e48] - test: add test for invalid DSA key size (Stefan Budeanu) #3756
  • [252e810059] - test: Fix test-cluster-worker-exit.js for AIX (Imran Iqbal) #3666
  • [91248b1094] - test: run pipeline flood test in parallel (Rich Trott) #3811
  • [583f58e5d6] - test: stronger crypto in test fixtures (Stefan Budeanu) #3759
  • [2e67db3104] - test: refactor test-http-pipeline-flood (Rich Trott) #3636
  • [1ab59ab9b3] - test: fix flaky test test-http-pipeline-flood (Devin Nakamura) #3636
  • [1c8a7c6351] - test: enhance fs-watch-recursive test (Sakthipriyan Vairamani) #2599
  • [81997840f2] - test: fix test-module-loading-error for musl (Hugues Malphettes) #3657
  • [9cdceac782] - test: use really invalid hostname (Sakthipriyan Vairamani) #3711
  • [f3594e77b2] - test: fix test-net-persistent-keepalive for AIX (Imran Iqbal) #3646
  • [81522480f1] - test: more regression tests for minDHSize option (Ben Noordhuis) #3629
  • [935b97769e] - test: add regression test for 512 bits DH key (Ben Noordhuis) #3629
  • [e302c33bb0] - test: mark http-pipeline-flood flaky (Rich Trott) #3616
  • [5977963bce] - test: remove flaky designation from ls-no-sslv3 (Rich Trott) #3620
  • [1e98d90db8] - test: add regression test for --debug-brk -e 0 (Ben Noordhuis) #3585
  • [2f16be2b70] - tls: Use SHA1 for sessionIdContext in FIPS mode (Stefan Budeanu) #3755
  • [05f0549b50] - tls: copy client CAs and cert store on CertCb (Fedor Indutny) #3537
  • [bea35424a2] - tools: add tap output to cpplint (Johan Bergström) #3448
  • [d036b35349] - tools: enforce throw new Error() with lint rule (Rich Trott) #3714
  • [38bb0d864e] - tools: Use throw new Error() consistently (Rich Trott) #3714
  • [e40d28283a] - tools: update npm test tooling for 3.3.10+ (Rebecca Turner) #3599
  • [cbd358ce33] - tools: fix gyp to work on MacOSX without XCode (Shigeki Ohtsu) iojs/io.js#1325
  • [3137e46cb8] - tools: update gyp to b3cef02 (Imran Iqbal) #3487
  • [d61cb90ee3] - util: use Object.create(null) for dictionary object (Minwoo Jung) #3831
  • [9a45c21e6c] - util: use regexp instead of str.replace().join() (qinjia) #3689
  • [33ffc62670] - zlib: only apply drain listener if given callback (Craig Cavalier) #3534
  • [d70deabf90] - zlib: pass kind to recursive calls to flush (Myles Borins) #3534

2015-11-03, Version 4.2.2 'Argon' (LTS), @jasnell

Notable changes

This is an LTS maintenance release that addresses a number of issues:

  • [1d0f2cbf87] - buffer: fix value check for writeUInt{B,L}E (Trevor Norris) #3500
  • [2a45b72b4a] - buffer: don't CHECK on zero-sized realloc (Ben Noordhuis) #3499
  • [a6469e901a] - deps: backport 010897c from V8 upstream (Ali Ijaz Sheikh) #3520
  • [cadee67c25] - deps: backport 8d6a228 from the v8's upstream (Fedor Indutny) #3549
  • [46c8c94055] - fs: reduced duplicate code in fs.write() (ronkorving) #2947
  • [0427cdf094] - http: fix stalled pipeline bug (Fedor Indutny) #3342
  • [2109708186] - lib: fix cluster handle leak (Rich Trott) #3510
  • [f49c7c6955] - lib: avoid REPL exit on completion error (Rich Trott) #3358
  • [8a2c4aeeaa] - repl: handle comments properly (Sakthipriyan Vairamani) #3515
  • [a04408acce] - repl: limit persistent history correctly on load (Jeremiah Senkpiel) #2356
  • [3bafe1a59b] - src: fix race condition in debug signal on exit (Ben Noordhuis) #3528
  • [fe01d0df7a] - src: fix exception message encoding on Windows (Brian White) #3288
  • [4bac5d9ddf] - stream: avoid unnecessary concat of a single buffer. (Calvin Metcalf) #3300
  • [8d78d687d5] - timers: reuse timer in setTimeout().unref() (Fedor Indutny) #3407
  • [e69c869399] - tls: TLSSocket options default isServer false (Yuval Brik) #2614

Known issues

  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [1d0f2cbf87] - buffer: fix value check for writeUInt{B,L}E (Trevor Norris) #3500
  • [2a45b72b4a] - buffer: don't CHECK on zero-sized realloc (Ben Noordhuis) #3499
  • [dc655e1dd2] - build: rectify --link-module help text (P.S.V.R) #3379
  • [a6469e901a] - deps: backport 010897c from V8 upstream (Ali Ijaz Sheikh) #3520
  • [cadee67c25] - deps: backport 8d6a228 from the v8's upstream (Fedor Indutny) #3549
  • [1ebd35550b] - doc: fix typos in changelog (reggi) #3291
  • [fbd93d4c1c] - doc: more use-cases for promise events (Domenic Denicola) #3438
  • [6ceb9af407] - doc: remove old note, 'cluster' is marked stable (Balázs Galambosi) #3314
  • [a5f0d64ddc] - doc: createServer's key option can be an array (Sakthipriyan Vairamani) #3123
  • [317e0ec6b3] - doc: binary encoding is not deprecated (Trevor Norris) #3441
  • [b422f6ee1a] - doc: mention the behaviour if URL is invalid (Sakthipriyan Vairamani) #2966
  • [bc29aad22b] - doc: fix indent in tls resumption example (Roman Reiss) #3372
  • [313877bd8f] - doc: fix typo in changelog (Timothy Gu) #3353
  • [4be432862a] - doc: show keylen in pbkdf2 as a byte length (calebboyd) #3334
  • [23a1140ddb] - doc: add information about Assert behavior and maintenance (Rich Trott) #3330
  • [e04cb1e1fc] - doc: clarify API buffer.concat (Martii) #3255
  • [eae714c370] - doc: clarify the use of option.detached (Kyle Smith) #3250
  • [b884899e67] - doc: label v4.2.1 as LTS in changelog heading (Phillip Johnsen) #3360
  • [9120a04981] - docs: add missing shell option to execSync (fansworld-claudio) #3440
  • [46c8c94055] - fs: reduced duplicate code in fs.write() (ronkorving) #2947
  • [0427cdf094] - http: fix stalled pipeline bug (Fedor Indutny) #3342
  • [2109708186] - lib: fix cluster handle leak (Rich Trott) #3510
  • [f49c7c6955] - lib: avoid REPL exit on completion error (Rich Trott) #3358
  • [8a2c4aeeaa] - repl: handle comments properly (Sakthipriyan Vairamani) #3515
  • [a04408acce] - repl: limit persistent history correctly on load (Jeremiah Senkpiel) #2356
  • [5d1f1c5fa8] - src: wrap source before doing syntax check (Evan Lucas) #3587
  • [3bafe1a59b] - src: fix race condition in debug signal on exit (Ben Noordhuis) #3528
  • [fe01d0df7a] - src: fix exception message encoding on Windows (Brian White) #3288
  • [4bac5d9ddf] - stream: avoid unnecessary concat of a single buffer. (Calvin Metcalf) #3300
  • [117fb47a16] - stream: fix signature of _write() in a comment (Fábio Santos) #3248
  • [c563a34427] - test: split independent tests into separate files (Rich Trott) #3548
  • [3f62952d42] - test: add node::MakeCallback() test coverage (Ben Noordhuis) #3478
  • [6b75f10d8a] - test: use port number from env in tls socket test (Stefan Budeanu) #3557
  • [39ff44e94f] - test: fix heap-profiler link error LNK1194 on win (Junliang Yan) #3572
  • [a2786dd408] - test: fix missing unistd.h on windows (Junliang Yan) #3532
  • [5e6f7c9a23] - test: add regression test for --debug-brk -e 0 (Ben Noordhuis) #3585
  • [7cad182cb6] - test: port domains regression test from v0.10 (Jonas Dohse) #3356
  • [78d854c6ce] - test: remove util from common (Rich Trott) #3324
  • [c566c8b8c0] - test: remove util properties from common (Rich Trott) #3304
  • [eb7c3fb2f4] - test: split up buffer tests for reliability (Rich Trott) #3323
  • [b398a85e19] - test: parallelize long-running test (Rich Trott) #3287
  • [b5f3b4956b] - test: change call to deprecated util.isError() (Rich Trott) #3084
  • [32149cacb5] - test: improve tests for util.inherits (Michaël Zasso) #3507
  • [5be686fab8] - test: print helpful err msg on test-dns-ipv6.js (Junliang Yan) #3501
  • [0429131e32] - test: fix domain with abort-on-uncaught on PPC (Julien Gilli) #3354
  • [788106eee9] - test: cleanup, improve repl-persistent-history (Jeremiah Senkpiel) #2356
  • [ea58fa0bac] - test: add Symbol test for assert.deepEqual() (Rich Trott) #3327
  • [d409ac473b] - test: disable test-tick-processor - aix and be ppc (Michael Dawson) #3491
  • [c1623039dd] - test: harden test-child-process-fork-regr-gh-2847 (Michael Dawson) #3459
  • [3bb4437abb] - test: fix test-net-keepalive for AIX (Imran Iqbal) #3458
  • [af55641a69] - test: wrap assert.fail when passed to callback (Myles Borins) #3453
  • [7c7ef01e65] - test: skip test-dns-ipv6.js if ipv6 is unavailable (Junliang Yan) #3444
  • [a4d1510ba4] - test: repl-persistent-history is no longer flaky (Jeremiah Senkpiel) #3437
  • [a5d968b8a2] - test: fix flaky test-child-process-emfile (Rich Trott) #3430
  • [eac2acca76] - test: remove flaky status from eval_messages test (Rich Trott) #3420
  • [155c778584] - test: fix flaky test for symlinks (Rich Trott) #3418
  • [74eb632483] - test: apply correct assert.fail() arguments (Rich Trott) #3378
  • [0a4323dd82] - test: replace util with backtick strings (Myles Borins) #3359
  • [93847694ec] - test: add test-child-process-emfile fail message (Rich Trott) #3335
  • [8d78d687d5] - timers: reuse timer in setTimeout().unref() (Fedor Indutny) #3407
  • [e69c869399] - tls: TLSSocket options default isServer false (Yuval Brik) #2614
  • [0b32bbbf69] - v8: pull fix for builtin code size on PPC (Michael Dawson) #3474

2015-10-29, Version 5.0.0 (Stable), @rvagg

Notable Changes

  • buffer: (Breaking) Removed both 'raw' and 'raws' encoding types from Buffer, these have been deprecated for a long time (Sakthipriyan Vairamani) #2859.
  • console: (Breaking) Values reported by console.time() now have 3 decimals of accuracy added (Michaël Zasso) #3166.
  • fs:
    • fs.readFile*(), fs.writeFile*(), and fs.appendFile*() now also accept a file descriptor as their first argument (Johannes Wüller) #3163.
    • (Breaking) In fs.readFile(), if an encoding is specified and the internal toString() fails the error is no longer thrown but is passed to the callback (Evan Lucas) #3485.
    • (Breaking) In fs.read() (using the fs.read(fd, length, position, encoding, callback) form), if the internal toString() fails the error is no longer thrown but is passed to the callback (Evan Lucas) #3503.
  • http:
    • Fixed a bug where pipelined http requests would stall (Fedor Indutny) #3342.
    • (Breaking) When parsing HTTP, don't add duplicates of the following headers: Retry-After, ETag, Last-Modified, Server, Age, Expires. This is in addition to the following headers which already block duplicates: Content-Type, Content-Length, User-Agent, Referer, Host, Authorization, Proxy-Authorization, If-Modified-Since, If-Unmodified-Since, From, Location, Max-Forwards (James M Snell) #3090.
    • (Breaking) The callback argument to OutgoingMessage#setTimeout() must be a function or a TypeError is thrown (James M Snell) #3090.
    • (Breaking) HTTP methods and header names must now conform to the RFC 2616 "token" rule, a list of allowed characters that excludes control characters and a number of separator characters. Specifically, methods and header names must now match /^[a-zA-Z0-9_!#$%&'*+.^`|~-]+$/ or a TypeError will be thrown (James M Snell) #2526.
  • node:
    • (Breaking) Deprecated the _linklist module (Rich Trott) #3078.
    • (Breaking) Removed require.paths and require.registerExtension(), both had been previously set to throw Error when accessed (Sakthipriyan Vairamani) #2922.
  • npm: Upgraded to version 3.3.6 from 2.14.7, see https://github.com/npm/npm/releases/tag/v3.3.6 for more details. This is a major version bump for npm and it has seen a significant amount of change. Please see the original npm v3.0.0 release notes for a list of major changes (Rebecca Turner) #3310.
  • src: (Breaking) Bumped NODE_MODULE_VERSION to 47 from 46, this is necessary due to the V8 upgrade. Native add-ons will need to be recompiled (Rod Vagg) #3400.
  • timers: Attempt to reuse the timer handle for setTimeout().unref(). This fixes a long-standing known issue where unrefed timers would perviously hold beforeExit open (Fedor Indutny) #3407.
  • tls:
    • Added ALPN Support (Shigeki Ohtsu) #2564.
    • TLS options can now be passed in an object to createSecurePair() (Коренберг Марк) #2441.
    • (Breaking) The default minimum DH key size for tls.connect() is now 1024 bits and a warning is shown when DH key size is less than 2048 bits. This a security consideration to prevent "logjam" attacks. A new minDHSize TLS option can be used to override the default. (Shigeki Ohtsu) #1831.
  • util:
    • (Breaking) util.p() was deprecated for years, and has now been removed (Wyatt Preul) #3432.
    • (Breaking) util.inherits() can now work with ES6 classes. This is considered a breaking change because of potential subtle side-effects caused by a change from directly reassigning the prototype of the constructor using ctor.prototype = Object.create(superCtor.prototype, { constructor: { ... } }) to using Object.setPrototypeOf(ctor.prototype, superCtor.prototype) (Michaël Zasso) #3455.
  • v8: (Breaking) Upgraded to 4.6.85.25 from 4.5.103.35 (Ali Ijaz Sheikh) #3351.
  • zlib: Decompression now throws on truncated input (e.g. unexpected end of file) (Yuval Brik) #2595.

Known issues

  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • Unicode characters in filesystem paths are not handled consistently across platforms or Node.js APIs. See #2088, #3401 and #3519.

Commits

  • [6a04cc0a43] - buffer: fix value check for writeUInt{B,L}E (Trevor Norris) #3500
  • [1a41feb559] - buffer: don't CHECK on zero-sized realloc (Ben Noordhuis) #3499
  • [5f6579d366] - (SEMVER-MAJOR) buffer: remove raw & raws encoding (Sakthipriyan Vairamani) #2859
  • [70fca2a81e] - build: Updates for AIX npm support - part 1 (Michael Dawson) #3114
  • [b36b4f385a] - build: rectify --link-module help text (P.S.V.R) #3379
  • [a89eeca590] - console: rename argument of time and timeEnd (Michaël Zasso) #3166
  • [870108aaa8] - (SEMVER-MAJOR) console: sub-millisecond accuracy for console.time (Michaël Zasso) #3166
  • [0a43697ce8] - deps: backport 010897c from V8 upstream (Ali Ijaz Sheikh) #3520
  • [8c0318ce8d] - deps: backport 8d6a228 from the v8's upstream (Fedor Indutny) #3549
  • [2974debc6e] - deps: update V8 to 4.6.85.28 (Michaël Zasso) #3484
  • [f76af49b13] - deps: fix upgrade to npm 3.3.6 (Rebecca Turner) #3494
  • [32b51c97ec] - deps: upgrade npm to 3.3.6 (Rebecca Turner) #3310
  • [770cd229f9] - deps: upgrade V8 to 4.6.85.25 (Ali Ijaz Sheikh) #3351
  • [972a0c8515] - deps: backport 0d01728 from v8's upstream (Fedor Indutny) #3351
  • [1fdec65203] - deps: improve ArrayBuffer performance in v8 (Fedor Indutny) #3351
  • [5cd1fd836a] - deps: backport 56a0a79 from V8 upstream (Julien Gilli) #3351
  • [7fb128d8df] - deps: cherry-pick backports to V8 (Michaël Zasso) #3351
  • [d8011d1683] - (SEMVER-MAJOR) deps: upgrade V8 to 4.6.85.23 (Michaël Zasso) #3351
  • [a334ddc467] - Revert "deps: backport 03ef3cd from V8 upstream" (Ali Ijaz Sheikh) #3237
  • [6fff47ffac] - deps: backport 03ef3cd from V8 upstream (Ali Ijaz Sheikh) #3165
  • [680dda8023] - dns: remove nonexistant exports.ADNAME (Roman Reiss) #3051
  • [239ad899a3] - doc: add LTS info to COLLABORATOR_GUIDE.md (Myles Borins) #3442
  • [5e76587fdf] - doc: createServer's key option can be an array (Sakthipriyan Vairamani) #3123
  • [0317c880da] - doc: add TSC meeting minutes 2015-10-21 (Rod Vagg) #3480
  • [cd245b12e0] - doc: clarify API buffer.concat (Martii) #3255
  • [ff9ef893fd] - doc: add TSC meeting minutes 2015-10-14 (Rod Vagg) #3463
  • [605c5a7754] - doc: clarify the use of option.detached (Kyle Smith) #3250
  • [cf75a175e5] - doc: more use-cases for promise events (Domenic Denicola) #3438
  • [1b75d4bda3] - doc: update WORKING_GROUPS.md - add missing groups (Michael Dawson) #3450
  • [c658de2f99] - doc: add TSC meeting minutes 2015-09-30 (Rod Vagg) #3235
  • [d0b8c5d3a4] - doc: add TSC meeting minutes 2015-10-07 (Rod Vagg) #3364
  • [b483afcb20] - doc: binary encoding is not deprecated (Trevor Norris) #3441
  • [b607366a1c] - doc: add information about Assert behavior and maintenance (Rich Trott) #3330
  • [086103b32e] - doc: show keylen in pbkdf2 as a byte length (calebboyd) #3334
  • [f6ebc8277b] - doc: reword description of console.time (Michaël Zasso) #3166
  • [503f279527] - doc: fix indent in tls resumption example (Roman Reiss) #3372
  • [dae9fae0fe] - doc: label v4.2.1 as LTS in changelog heading (Phillip Johnsen) #3360
  • [4fc638804c] - doc: update V8 options in man page (Michaël Zasso) #3351
  • [a441aa6e1d] - doc: update WORKING_GROUPS.md to include Intl (Steven R. Loomis) #3251
  • [81503e597b] - doc: fix typo in changelog (Timothy Gu) #3353
  • [3ef2e4acf3] - doc: fix typos in changelog (reggi) #3291
  • [b9279aa193] - doc: remove old note, 'cluster' is marked stable (Balázs Galambosi) #3314
  • [cdfa271164] - doc: update AUTHORS list (Rod Vagg)
  • [47b06f6bb1] - docs: add missing shell option to execSync (fansworld-claudio) #3440
  • [4c9abbd1bb] - fs: reduced duplicate code in fs.write() (ronkorving) #2947
  • [2bb147535e] - (SEMVER-MAJOR) fs: don't throw in read if buffer too big (Evan Lucas) #3503
  • [7added3b39] - (SEMVER-MAJOR) fs: pass err to callback if buffer is too big (Evan Lucas) #3485
  • [5e0759f6fd] - (SEMVER-MINOR) fs: add file descriptor support to *File() funcs (Johannes Wüller) #3163
  • [d1a2e5357e] - gitignore: don't ignore debug source directory in V8 (Michaël Zasso) #3351
  • [ab03635fb1] - http: fix stalled pipeline bug (Fedor Indutny) #3342
  • [e655a437b3] - (SEMVER-MAJOR) http: do not allow multiple instances of certain response headers (James M Snell) #3090
  • [0094a8dad7] - (SEMVER-MAJOR) http: add callback is function check (James M Snell) #3090
  • [6192c9892f] - (SEMVER-MAJOR) http: add checkIsHttpToken check for header fields (James M Snell) #2526
  • [c9786bb680] - (SEMVER-MAJOR) http{s}: don't connect to localhost on invalid URL (Sakthipriyan Vairamani) #2967
  • [1929d5be73] - lib: fix cluster handle leak (Rich Trott) #3510
  • [97d081709e] - lib: avoid REPL exit on completion error (Rich Trott) #3358
  • [f236b3a904] - (SEMVER-MINOR) lib,doc: return boolean from child.send() (Rich Trott) #3516
  • [6e887cc630] - lib,test: update let to const where applicable (Sakthipriyan Vairamani) #3152
  • [47befffc53] - (SEMVER-MAJOR) lib,test: deprecate _linklist (Rich Trott) #3078
  • [d5ce53458e] - lttng: update flags for gc tracing (Glen Keane) #3388
  • [6ad458b752] - (SEMVER-MAJOR) module: remove unnecessary property and method (Sakthipriyan Vairamani) #2922
  • [ae196175f4] - node: improve GetActiveRequests performance (Trevor Norris) #3375
  • [bd4311bc9c] - repl: handle comments properly (Sakthipriyan Vairamani) #3515
  • [ce391ed849] - (SEMVER-MAJOR) repl: event ordering: delay 'close' until 'flushHistory' (Jeremiah Senkpiel) #3435
  • [4c80c02ac7] - repl: limit persistent history correctly on load (Jeremiah Senkpiel) #2356
  • [134a60c785] - src: fix race condition in debug signal on exit (Ben Noordhuis) #3528
  • [bf7c3dabb4] - (SEMVER-MAJOR) src: bump NODE_MODULE_VERSION To 47 (Rod Vagg) #3400
  • [2d3560767e] - src: fix exception message encoding on Windows (Brian White) #3288
  • [ff877e93e1] - src: fix stuck debugger process (Liang-Chi Hsieh) #2778
  • [8854183fe5] - stream: avoid unnecessary concat of a single buffer. (Calvin Metcalf) #3300
  • [85b74de9de] - stream: fix signature of _write() in a comment (Fábio Santos) #3248
  • [b8cea49c88] - test: fix heap-profiler link error LNK1194 on win (Junliang Yan) #3572
  • [4a5dbeab43] - test: fix missing unistd.h on windows (Junliang Yan) #3532
  • [74e2328b3a] - test: split independent tests into separate files (Rich Trott) #3548
  • [8c6c0f915a] - test: use port number from env in tls socket test (Stefan Budeanu) #3557
  • [1a968e67a5] - test: improve tests for util.inherits (Michaël Zasso) #3507
  • [9d8d752456] - test: print helpful err msg on test-dns-ipv6.js (Junliang Yan) #3501
  • [60de9f8d7b] - test: wrap assert.fail when passed to callback (Myles Borins) #3453
  • [cd83f7ed7f] - test: add node::MakeCallback() test coverage (Ben Noordhuis) #3478
  • [08da5c2a06] - test: disable test-tick-processor - aix and be ppc (Michael Dawson) #3491
  • [7c35fbcb14] - test: harden test-child-process-fork-regr-gh-2847 (Michael Dawson) #3459
  • [ad2b272417] - test: fix test-net-keepalive for AIX (Imran Iqbal) #3458
  • [04fb14cc35] - test: fix flaky test-child-process-emfile (Rich Trott) #3430
  • [eef0f0cd63] - test: remove flaky status from eval_messages test (Rich Trott) #3420
  • [bbbd81eab2] - test: skip test-dns-ipv6.js if ipv6 is unavailable (Junliang Yan) #3444
  • [f78c8e7426] - test: fix flaky test for symlinks (Rich Trott) #3418
  • [28e9a4f41b] - test: repl-persistent-history is no longer flaky (Jeremiah Senkpiel) #3437
  • [9e981556e5] - test: cleanup, improve repl-persistent-history (Jeremiah Senkpiel) #2356
  • [ee2e641e0a] - test: add Symbol test for assert.deepEqual() (Rich Trott) #3327
  • [e2b8393ee8] - test: port domains regression test from v0.10 (Jonas Dohse) #3356
  • [676e61872f] - test: apply correct assert.fail() arguments (Rich Trott) #3378
  • [bbdbef9274] - test: fix tests after V8 upgrade (Michaël Zasso) #3351
  • [6c032a8333] - test: replace util with backtick strings (Myles Borins) #3359
  • [f45c315763] - test: fix domain with abort-on-uncaught on PPC (Julien Gilli) #3354
  • [e3d9d25083] - test: add test-child-process-emfile fail message (Rich Trott) #3335
  • [6f14b3a7db] - test: remove util from common (Rich Trott) #3324
  • [7d94611ac9] - test: split up buffer tests for reliability (Rich Trott) #3323
  • [3202456baa] - test: remove util properties from common (Rich Trott) #3304
  • [31c971d641] - test: parallelize long-running test (Rich Trott) #3287
  • [5bbc6df7de] - test: change call to deprecated util.isError() (Rich Trott) #3084
  • [522e3d3cd3] - timers: reuse timer in setTimeout().unref() (Fedor Indutny) #3407
  • [b64ce5960f] - tls: remove util and calls to util.format (Myles Borins) #3456
  • [c64af7d99e] - tls: TLSSocket options default isServer false (Yuval Brik) #2614
  • [2296a4fc0f] - (SEMVER-MINOR) tls: add options argument to createSecurePair (Коренберг Марк) #2441
  • [0140e1b5e3] - tls: output warning of setDHParam to console.trace (Shigeki Ohtsu) #1831
  • [f72e178a78] - (SEMVER-MAJOR) tls: add minDHSize option to tls.connect() (Shigeki Ohtsu) #1831
  • [6d92ebac11] - tls: add TLSSocket.getEphemeralKeyInfo() (Shigeki Ohtsu) #1831
  • [62ad1d0113] - (SEMVER-MINOR) tls, crypto: add ALPN Support (Shigeki Ohtsu) #2564
  • [5029f41b2f] - (SEMVER-MINOR) tls,crypto: move NPN protcol data to hidden value (Shigeki Ohtsu) #2564
  • [701e38c25f] - tools: enable prefer-const eslint rule (Sakthipriyan Vairamani) #3152
  • [6e78382605] - tools: ensure npm always uses the local node (Jeremiah Senkpiel) #3489
  • [3c3435d017] - tools: update test-npm to work with npm 3 (Rebecca Turner) #3489
  • [b4f4c24539] - tools: use absolute paths in test-npm (Rebecca Turner) #3309
  • [80573153b8] - (SEMVER-MAJOR) util: make inherits work with classes (Michaël Zasso) #3455
  • [412252ca04] - (SEMVER-MAJOR) util: Remove p, has been deprecated for years (Wyatt Preul) #3432
  • [718c304a4f] - v8: pull fix for builtin code size on PPC (Michael Dawson) #3474
  • [6936468de2] - vm: remove Watchdog dependency on Environment (Ido Ben-Yair) #3274
  • [80169b1f0a] - (SEMVER-MAJOR) zlib: decompression throw on truncated input (Yuval Brik) #2595

2015-10-13, Version 4.2.1 'Argon' (LTS), @jasnell

Notable changes

  • Includes fixes for two regressions
    • Assertion error in WeakCallback - see #3329
    • Undefined timeout regression - see #3331

Known issues

  • When a server queues a large amount of data to send to a client over a pipelined HTTP connection, the underlying socket may be destroyed. See #3332 and #3342.
  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [b3cbd13340] - buffer: fix assertion error in WeakCallback (Fedor Indutny) #3329
  • [102cb7288c] - doc: label v4.2.0 as LTS in changelog heading (Rod Vagg) #3343
  • [c245a199a7] - lib: fix undefined timeout regression (Ryan Graham) #3331

2015-10-07, Version 4.2.0 'Argon' (LTS), @jasnell

Notable changes

The first Node.js LTS release! See https://github.com/nodejs/LTS/ for details of the LTS process.

  • icu: Updated to version 56 with significant performance improvements (Steven R. Loomis) #3281
  • node:
    • Added new -c (or --check) command line argument for checking script syntax without executing the code (Dave Eddy) #2411
    • Added process.versions.icu to hold the current ICU library version (Evan Lucas) #3102
    • Added process.release.lts to hold the current LTS codename when the binary is from an active LTS release line (Rod Vagg) #3212
  • npm: Upgraded to npm 2.14.7 from 2.14.4, see release notes for full details (Kat Marchán) #3299

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [8383c4fe00] - assert: support arrow functions in .throws() (Ben Noordhuis) #3276
  • [3eaa593a32] - async_wrap: correctly pass parent to init callback (Trevor Norris) #3216
  • [54795620f6] - buffer: don't abort on prototype getters (Trevor Norris) #3302
  • [660f7591c8] - buffer: FreeCallback should be tied to ArrayBuffer (Fedor Indutny) #3198
  • [651a5b51eb] - buffer: only check if instance is Uint8Array (Trevor Norris) #3080
  • [d5a1b1ad7c] - buffer: clean up usage of proto (Trevor Norris) #3080
  • [af24376e18] - build: Intl: deps: bump ICU to 56.1 (GA) (Steven R. Loomis) #3281
  • [9136359d57] - build: make icu download path customizable (Johan Bergström) #3200
  • [b3c5ad10a8] - build: add --with-arm-fpu option (Jérémy Lal) #3228
  • [f00f3268e4] - build: intl: avoid 'duplicate main()' on ICU 56 (Steven R. Loomis) #3066
  • [071c72a6a3] - deps: upgrade to npm 2.14.7 (Kat Marchán) #3299
  • [8b50e95f06] - (SEMVER-MINOR) deps: backport 1ee712a from V8 upstream (Julien Gilli) #3036
  • [747271372f] - doc: update the assert module summary (David Boivin) #2799
  • [0d506556b0] - doc: replace node-gyp link with nodejs/node-gyp (Roman Klauke) #3320
  • [40a159e4f4] - doc: Amend capitalization of word JavaScript (Dave Hodder) #3285
  • [6dd34761fd] - doc: add method links in dns.markdown (Alejandro Oviedo) #3196
  • [333e8336be] - doc: add method links in child_process.markdown (Alejandro Oviedo) #3186
  • [0cfc6d39ca] - doc: recommend Infinity on emitter.setMaxListeners (Jason Karns) #2559
  • [d4fc6d93ef] - doc: add help repo link to CONTRIBUTING.md (Doug Shamoo) #3233
  • [28aac7f19d] - doc: add TLS session resumption example (Roman Reiss) #3147
  • [365cf22cce] - doc: update AUTHORS list (Rod Vagg) #3211
  • [d4399613b7] - doc: standardize references to userland (Martial) #3192
  • [75de258376] - doc: fix spelling in Buffer documentation (Rod Machen) #3226
  • [725c7276dd] - doc: fix README.md link to joyent/node intl wiki (Steven R. Loomis) #3067
  • [4a35ba4966] - (SEMVER-MINOR) fs: include filename in watch errors (charlierudolph) #2748
  • [2ddbbfd164] - http: cork/uncork before flushing pipelined res (Fedor Indutny) #3172
  • [f638402e2f] - http: add comment about outputSize in res/server (Fedor Indutny) #3128
  • [1850879b0e] - js_stream: prevent abort if isalive doesn't exist (Trevor Norris) #3282
  • [63644dd1cd] - lib: remove redundant code, add tests in timers.js (Rich Trott) #3143
  • [74f443583c] - module: use UNC paths when loading native addons (Justin Chase) #2965
  • [01cb3fc36b] - net: don't throw on bytesWritten access (Trevor Norris) #3305
  • [9d65528b01] - (SEMVER-MINOR) node: add -c|--check CLI arg to syntax check script (Dave Eddy) #2411
  • [42b936e78d] - (SEMVER-MINOR) src: add process.release.lts property (Rod Vagg) #3212
  • [589287b2e3] - src: convert BE-utf16-string to LE before search (Karl Skomski) #3295
  • [2314378f06] - src: fix u-a-free if uv returns err in ASYNC_CALL (Karl Skomski) #3049
  • [d99336a391] - (SEMVER-MINOR) src: replace naive search in Buffer::IndexOf (Karl Skomski) #2539
  • [546e8333ba] - (SEMVER-MINOR) src: fix --abort-on-uncaught-exception (Jeremy Whitlock) #3036
  • [7271cb047c] - (SEMVER-MINOR) src: add process.versions.icu (Evan Lucas) #3102
  • [7b9f78acb2] - stream: avoid pause with unpipe in buffered write (Brian White) #2325
  • [f0f8afd879] - test: remove common.inspect() (Rich Trott) #3257
  • [5ca4f6f8bd] - test: test util rather than common (Rich Trott) #3256
  • [7a5ae34345] - test: refresh temp directory when using pipe (Rich Trott) #3231
  • [7c85557ef0] - test: Fix test-fs-read-stream-fd-leak race cond (Junliang Yan) #3218
  • [26a7ec6960] - test: fix losing original env vars issue (Junliang Yan) #3190
  • [e922716192] - test: remove deprecated error logging (Rich Trott) #3079
  • [8f29d95a8c] - test: report timeout in TapReporter (Karl Skomski) #2647
  • [2d0fe4c657] - test: linting for buffer-free-callback test (Rich Trott) #3230
  • [70c9e4337e] - test: make common.js mandatory via linting rule (Rich Trott) #3157
  • [b7179562aa] - test: load common.js in all tests (Rich Trott) #3157
  • [bab555a1c1] - test: speed up stringbytes-external test (Evan Lucas) #3005
  • [ddf258376d] - test: use normalize() for unicode paths (Roman Reiss) #3007
  • [46876d519c] - test: remove arguments.callee usage (Roman Reiss) #3167
  • [af10df6108] - tls: use parent handle's close callback (Fedor Indutny) #2991
  • [9c2748bad1] - tools: remove leftover license boilerplate (Nathan Rajlich) #3225
  • [5d9f83ff2a] - tools: apply linting to custom rules code (Rich Trott) #3195
  • [18a8b2ec73] - tools: remove unused gflags module (Ben Noordhuis) #3220
  • [e0fffca836] - util: fix for inspecting promises (Evan Lucas) #3221
  • [8dfdee3733] - util: correctly inspect Map/Set Iterators (Evan Lucas) #3119
  • [b5c51fdba0] - util: fix check for Array constructor (Evan Lucas) #3119

2015-10-05, Version 4.1.2 (Stable), @rvagg

Notable changes

  • http:
    • Fix out-of-order 'finish' event bug in pipelining that can abort execution, fixes DoS vulnerability CVE-2015-7384 (Fedor Indutny) #3128
    • Account for pending response data instead of just the data on the current request to decide whether pause the socket or not (Fedor Indutny) #3128
  • libuv: Upgraded from v1.7.4 to v1.7.5, see release notes for details (Saúl Ibarra Corretgé) #3010
    • A better rwlock implementation for all Windows versions
    • Improved AIX support
  • v8:
    • Upgraded from v4.5.103.33 to v4.5.103.35 (Ali Ijaz Sheikh) #3117
    • Backported f782159 from v8's upstream to help speed up Promise introspection (Ben Noordhuis) #3130
    • Backported c281c15 from v8's upstream to add JSTypedArray length in post-mortem metadata (Julien Gilli) #3031

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [39b8730e8b] - async_wrap: ensure all objects have internal field (Trevor Norris) #3139
  • [99e66074d7] - async_wrap: update providers and add test (Trevor Norris) #3139
  • [7a58157d4e] - benchmark: update comment in common.js (Minwoo Jung) #2399
  • [9e9bfa4dc0] - build: iojs -> nodejs of release-urlbase (P.S.V.R) #3015
  • [8335ec7191] - build: fix some typos inside the configure script (P.S.V.R) #3016
  • [d6ac547d5d] - build,win: fix node.exe resource version (João Reis) #3053
  • [798dad24f4] - child_process: null channel handle on close (Fedor Indutny) #3041
  • [e5615854ea] - contextify: use CHECK instead of if (Oguz Bastemur) #3125
  • [f055a66a38] - crypto: enable FIPS only when configured with it (Fedor Indutny) #3153
  • [4c8d96bc30] - crypto: add more keylen sanity checks in pbkdf2 (Johann) #3029
  • [4c5940776c] - deps: upgrade libuv to 1.7.5 (Saúl Ibarra Corretgé) #3010
  • [5a9e795577] - deps: upgrade V8 to 4.5.103.35 (Ali Ijaz Sheikh) #3117
  • [925b29f959] - deps: backport f782159 from v8's upstream (Ben Noordhuis) #3130
  • [039f73fa83] - deps: remove and gitignore .bin directory (Ben Noordhuis) #3004
  • [5fbb24812d] - deps: backport c281c15 from V8's upstream (Julien Gilli) #3031
  • [6ee5d0f69f] - dns: add missing exports.BADNAME (Roman Reiss) #3051
  • [f92aee7170] - doc: fix outdated 'try/catch' statement in sync (Minwoo Jung) #3087
  • [c7161f39e8] - doc: add TSC meeting minutes 2015-09-16 (Rod Vagg) #3023
  • [928166c4a8] - doc: copyedit fs.watch() information (Rich Trott) #3097
  • [75d5dcea76] - doc: jenkins-iojs.nodesource.com -> ci.nodejs.org (Michał Gołębiowski) #2886
  • [5c3f50b21d] - doc: rearrange execSync and execFileSync (Laurent Fortin) #2940
  • [4fc33ac11a] - doc: make execFileSync in line with execFile (Laurent Fortin) #2940
  • [a366e84b17] - doc: fix typos in cluster & errors (reggi) #3011
  • [52031e1bf1] - doc: switch LICENSE from closure-linter to eslint (P.S.V.R) #3018
  • [b28f6a53bc] - docs: Clarify assert.doesNotThrow behavior (Fabio Oliveira) #2807
  • [99943e189d] - http: fix out-of-order 'finish' bug in pipelining (Fedor Indutny) #3128
  • [fb7a491d1c] - http_server: pause socket properly (Fedor Indutny) #3128
  • [a0b35bfcf3] - i18n: add caller to removal list for bidi in ICU55 (Michael Dawson) #3115
  • [ac2bce0b0c] - path: improve posixSplitPath performance (Evan Lucas) #3034
  • [37cdeafa2f] - smalloc: remove module (Brendan Ashworth) #3099
  • [5ec5d0aa8b] - src: internalize binding function property names (Ben Noordhuis) #3060
  • [c8175fc2af] - src: internalize per-isolate string properties (Ben Noordhuis) #3060
  • [9a593abc47] - src: include signal.h in util.h (Cheng Zhao) #3058
  • [fde0c6f321] - src: fix function and variable names in comments (Sakthipriyan Vairamani) #3039
  • [1cc7b41ba4] - stream_wrap: support empty TryWrites (Fedor Indutny) #3128
  • [9faf4c6fcf] - test: load common.js to test for global leaks (Rich Trott) #3095
  • [0858c86374] - test: fix invalid variable name (Sakthipriyan Vairamani) #3150
  • [1167171004] - test: change calls to deprecated util.print() (Rich Trott) #3083
  • [5ada45bf28] - test: replace deprecated util.debug() calls (Rich Trott) #3082
  • [d8ab4e185d] - util: optimize promise introspection (Ben Noordhuis) #3130

2015-09-22, Version 4.1.1 (Stable), @rvagg

Notable changes

  • buffer: Fixed a bug introduced in v4.1.0 where allocating a new zero-length buffer can result in the next allocation of a TypedArray in JavaScript not being zero-filled. In certain circumstances this could result in data leakage via reuse of memory space in TypedArrays, breaking the normally safe assumption that TypedArrays should be always zero-filled. (Trevor Norris) #2931.
  • http: Guard against response-splitting of HTTP trailing headers added via response.addTrailers() by removing new-line ([\r\n]) characters from values. Note that standard header values are already stripped of new-line characters. The expected security impact is low because trailing headers are rarely used. (Ben Noordhuis) #2945.
  • npm: Upgrade to npm 2.14.4 from 2.14.3, see release notes for full details (Kat Marchán) #2958
    • Upgrades graceful-fs on multiple dependencies to no longer rely on monkey-patching fs
    • Fix npm link for pre-release / RC builds of Node
  • v8: Update post-mortem metadata to allow post-mortem debugging tools to find and inspect:
    • JavaScript objects that use dictionary properties (Julien Gilli) #2959
    • ScopeInfo and thus closures (Julien Gilli) #2974

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [d63e02e08d] - buffer: don't set zero fill for zero-length buffer (Trevor Norris) #2931
  • [5905b14bff] - build: fix icutrim when building small-icu on BE (Stewart Addison) #2602
  • [f010cb5d96] - configure: detect mipsel host (Jérémy Lal) #2971
  • [b93ad5abbd] - deps: backport 357e6b9 from V8's upstream (Julien Gilli) #2974
  • [8da3da4d41] - deps: backport ff7d70b from V8's upstream (Julien Gilli) #2959
  • [2600fb8ae6] - deps: upgraded to node-gyp@3.0.3 in npm (Kat Marchán) #2958
  • [793aad2d7a] - deps: upgrade to npm 2.14.4 (Kat Marchán) #2958
  • [43e2b7f836] - doc: remove usage of events.EventEmitter (Sakthipriyan Vairamani) #2921
  • [9c59d2f16a] - doc: remove extra using v8::HandleScope statement (Christopher J. Brody) #2983
  • [f7edbab367] - doc: clarify description of assert.ifError() (Rich Trott) #2941
  • [b2ddf0f9a2] - doc: refine process.kill() and exit explanations (Rich Trott) #2918
  • [f68fed2e6f] - http: remove redundant code in _deferToConnect (Malcolm Ahoy) #2769
  • [f542e74c93] - http: guard against response splitting in trailers (Ben Noordhuis) #2945
  • [bc9f629387] - http_parser: do not dealloc during kOnExecute (Fedor Indutny) #2956
  • [1860e0cebd] - lib,src: remove usage of events.EventEmitter (Sakthipriyan Vairamani) #2921
  • [d4cd5ac407] - readline: fix tab completion bug (Matt Harrison) #2816
  • [9760e04839] - repl: don't use tty control codes when $TERM is set to "dumb" (Salman Aljammaz) #2712
  • [cb971cc97d] - repl: backslash bug fix (Sakthipriyan Vairamani) #2968
  • [2034f68668] - src: honor --abort_on_uncaught_exception flag (Evan Lucas) #2776
  • [0b1ca4a9ef] - src: Add ABORT macro (Evan Lucas) #2776
  • [4519dd00f9] - test: test sync version of mkdir & rmdir (Sakthipriyan Vairamani) #2588
  • [816f609c8b] - test: use tmpDir instead of fixtures in readdir (Sakthipriyan Vairamani) #2587
  • [2084f52585] - test: test more http response splitting scenarios (Ben Noordhuis) #2945
  • [fa08d1d8a1] - test: add test-spawn-cmd-named-pipe (Alexis Campailla) #2770
  • [71b5d80682] - test: make cluster tests more time tolerant (Michael Dawson) #2891
  • [3e09dcfc32] - test: update cwd-enoent tests for AIX (Imran Iqbal) #2909
  • [6ea8ec1c59] - tools: single, cross-platform tick processor (Matt Loring) #2868

2015-09-17, Version 4.1.0 (Stable), @Fishrock123

Notable changes

  • buffer:
    • Buffers are now created in JavaScript, rather than C++. This increases the speed of buffer creation (Trevor Norris) #2866.
    • Buffer#slice() now uses Uint8Array#subarray() internally, increasing slice() performance (Karl Skomski) #2777.
  • fs:
    • fs.utimes() now properly converts numeric strings, NaN, and Infinity (Yazhong Liu) #2387.
    • fs.WriteStream now implements _writev, allowing for super-fast bulk writes (Ron Korving) #2167.
  • http: Fixed an issue with certain write() sizes causing errors when using http.request() (Fedor Indutny) #2824.
  • npm: Upgrade to version 2.14.3, see https://github.com/npm/npm/releases/tag/v2.14.3 for more details (Kat Marchán) #2822.
  • src: V8 cpu profiling no longer erroneously shows idle time (Oleksandr Chekhovskyi) #2324.
  • timers: #ref() and #unref() now return the timer they belong to (Sam Roberts) #2905.
  • v8: Lateral upgrade to 4.5.103.33 from 4.5.103.30, contains minor fixes (Ali Ijaz Sheikh) #2870.
    • This fixes a previously known bug where some computed object shorthand properties did not work correctly (#2507).

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [b1abe812cd] - Working on 4.0.1 (Rod Vagg)
  • [f9f8378853] - 2015-09-08, Version 4.0.0 (Stable) Release (Rod Vagg)
  • [9683e5df51] - bindings: close after reading module struct (Fedor Indutny) #2792
  • [4b4cfa2d44] - buffer: always allocate typed arrays outside heap (Trevor Norris) #2893
  • [7df018a29b] - buffer: construct Uint8Array in JS (Trevor Norris) #2866
  • [43397b204e] - (SEMVER-MINOR) build: Updates to enable AIX support (Michael Dawson) #2364
  • [e35b1fd610] - build: clean up the generated tap file (Sakthipriyan Vairamani) #2837
  • [96670ebe37] - deps: backport 6d32be2 from v8's upstream (Michaël Zasso) #2916
  • [94972d5b13] - deps: backport 0d01728 from v8's upstream (Fedor Indutny) #2912
  • [7ebd881c29] - deps: upgrade V8 to 4.5.103.33 (Ali Ijaz Sheikh) #2870
  • [ed47ab6e44] - deps: upgraded to node-gyp@3.0.3 in npm (Kat Marchán) #2822
  • [f4641ae875] - deps: upgrade to npm 2.14.3 (Kat Marchán) #2822
  • [8119693a3d] - deps: update libuv to version 1.7.4 (Saúl Ibarra Corretgé) #2817
  • [6098504685] - deps: cherry-pick 6da51b4 from v8's upstream (Fedor Indutny) #2801
  • [bf42cc8dba] - doc: process exit event is not guaranteed to fire (Rich Trott) #2861
  • [bb0f869f67] - doc: remove incorrect reference to TCP in net docs (Sam Roberts) #2903
  • [302d59dce8] - doc: correct buffer.slice arg syntax (Sam Roberts) #2903
  • [74db9637b7] - doc: describe spawn option.detached (Sam Roberts) #2903
  • [a7bd897273] - doc: rename from iojs(1) to node(1) in benchmarks (Dmitry Vasilyev) #2884
  • [cd643d7c37] - doc: add missing backtick in buffer.markdown (Sven Slootweg) #2881
  • [e8a206e802] - doc: fix broken link in repl.markdown (Danny Nemer) #2827
  • [7ee36d61f7] - doc: fix typos in README (Ionică Bizău) #2852
  • [4d1ae26196] - doc: add tunniclm as a collaborator (Mike Tunnicliffe) #2826
  • [2d77d03643] - doc: fix two doc errors in stream and process (Jeremiah Senkpiel) #2549
  • [55ac24f721] - doc: fixed io.js references in process.markdown (Tristian Flanagan) #2846
  • [cd1297fb57] - doc: use "Calls" over "Executes" for consistency (Minwoo Jung) #2800
  • [d664b95581] - doc: use US English for consistency (Anne-Gaelle Colom) #2784
  • [82ba1839fb] - doc: use 3rd person singular for consistency (Anne-Gaelle Colom) #2765
  • [432cce6e95] - doc: describe process API for IPC (Sam Roberts) #1978
  • [1d75012b9d] - doc: fix comma splice in Assertion Testing doc (Rich Trott) #2728
  • [6108ea9bb4] - fs: consider NaN/Infinity in toUnixTimestamp (Yazhong Liu) #2387
  • [2b6aa9415f] - (SEMVER-MINOR) fs: implemented WriteStream#writev (Ron Korving) #2167
  • [431bf74c55] - http: default Agent.getName to 'localhost' (Malcolm Ahoy) #2825
  • [ea15d71c16] - http_server: fix resume after socket close (Fedor Indutny) #2824
  • [8e5843405b] - src: null env_ field from constructor (Trevor Norris) #2913
  • [0a5f80a11f] - src: use subarray() in Buffer#slice() for speedup (Karl Skomski) #2777
  • [57707e2490] - src: use ZCtxt as a source for v8::Isolates (Roman Klauke) #2547
  • [b0df2273ab] - src: fix v8::CpuProfiler idle sampling (Oleksandr Chekhovskyi) #2324
  • [eaa8e60b91] - streams: refactor LazyTransform to internal/ (Brendan Ashworth) #2566
  • [648c003e14] - test: use tmp directory in chdir test (Sakthipriyan Vairamani) #2589
  • [079a2173d4] - test: fix Buffer OOM error message (Trevor Norris) #2915
  • [52019a1b21] - test: fix default value for additional param (Sakthipriyan Vairamani) #2553
  • [5df5d0423a] - test: remove disabled test (Rich Trott) #2841
  • [9e5f0995bd] - test: split up internet dns tests (Rich Trott) #2802
  • [41f2dde51a] - test: increase dgram timeout for armv6 (Rich Trott) #2808
  • [6e2fe1c21a] - test: remove valid hostname check in test-dns.js (Rich Trott) #2785
  • [779e14f1a7] - test: expect error for test_lookup_ipv6_hint on FreeBSD (Rich Trott) #2724
  • [f931b9dd95] - (SEMVER-MINOR) timer: ref/unref return self (Sam Roberts) #2905
  • [59d03738cc] - tools: enable arrow functions in .eslintrc (Sakthipriyan Vairamani) #2840
  • [69e7b875a2] - tools: open test.tap file in write-binary mode (Sakthipriyan Vairamani) #2837
  • [ff6d30d784] - tools: add missing tick processor polyfill (Matt Loring) #2694
  • [519caba021] - tools: fix flakiness in test-tick-processor (Matt Loring) #2694
  • [ac004b8555] - tools: remove hyphen in TAP result (Sakthipriyan Vairamani) #2718
  • [ba47511976] - tsc: adjust TSC membership for IBM+StrongLoop (James M Snell) #2858
  • [e035266805] - win,msi: fix documentation shortcut url (Brian White) #2781

2015-09-15, io.js Version 3.3.1 @rvagg

Notable changes

  • buffer: Fixed a minor errors that was causing crashes (Michaël Zasso) #2635,
  • child_process: Fix error that was causing crashes (Evan Lucas) #2727
  • crypto: Replace use of rwlocks, unsafe on Windows XP / 2003 (Ben Noordhuis) #2723
  • libuv: Upgrade from 1.7.3 to 1.7.4 (Saúl Ibarra Corretgé) #2817
  • node: Fix faulty process.release.libUrl on Windows (Rod Vagg) #2699
  • node-gyp: Float v3.0.3 which has improved support for Node.js and io.js v0.10 to v4+ (Rod Vagg) #2700
  • npm: Upgrade to version 2.14.3 from 2.13.3, includes a security update, see https://github.com/npm/npm/releases/tag/v2.14.2 for more details, (Kat Marchán) #2696.
  • timers: Improved timer performance from porting the 0.12 implementation, plus minor fixes (Jeremiah Senkpiel) #2540, (Julien Gilli) nodejs/node-v0.x-archive#8751 nodejs/node-v0.x-archive#8905

Known issues

See https://github.com/nodejs/io.js/labels/confirmed-bug for complete and current list of known issues.

  • Some uses of computed object shorthand properties are not handled correctly by the current version of V8. e.g. [{ [prop]: val }] evaluates to [{}]. #2507
  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760.
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [b73ff52fe6] - bindings: close after reading module struct (Fedor Indutny) #2792
  • [aa1140e59a] - buffer: SlowBuffer only accept valid numeric values (Michaël Zasso) #2635
  • [574475d56e] - build: clean up the generated tap file (Sakthipriyan Vairamani) #2837
  • [aa0001271e] - build: remote commands on staging in single session (Rod Vagg) #2717
  • [1428661095] - build: fix v8_enable_handle_zapping override (Karl Skomski) #2731
  • [5a51edd718] - build: add --enable-asan with builtin leakcheck (Karl Skomski) #2376
  • [618caa5de0] - child_process: use stdio.fd even if it is 0 (Evan Lucas) #2727
  • [7be4e49cb6] - child_process: check execFile and fork args (James M Snell) #2667
  • [7f5d6e72c6] - cluster: allow shared reused dgram sockets (Fedor Indutny) #2548
  • [e68c7ec498] - contextify: ignore getters during initialization (Fedor Indutny) nodejs/io.js#2091
  • [610fa964aa] - cpplint: make it possible to run outside git repo (Ben Noordhuis) #2710
  • [4237373dd7] - crypto: replace rwlocks with simple mutexes (Ben Noordhuis) #2723
  • [777eb00306] - deps: upgraded to node-gyp@3.0.3 in npm (Kat Marchán) #2822
  • [b729ad384b] - deps: upgrade to npm 2.14.3 (Kat Marchán) #2822
  • [b09fde761c] - deps: update libuv to version 1.7.4 (Saúl Ibarra Corretgé) #2817
  • [4cf225daad] - deps: float node-gyp v3.0.0 (Rod Vagg) #2700
  • [118f48c0f3] - deps: create .npmrc during npm tests (Kat Marchán) #2696
  • [b3fee8e6a6] - deps: upgrade to npm 2.14.2 (Kat Marchán) #2696
  • [4593539b92] - deps: backport 75e43a6 from v8 upstream (saper) #2636
  • [2d1438cfe0] - doc: fix broken link in repl.markdown (Danny Nemer) #2827
  • [9dd9c85a48] - doc: fix typos in README (Ionică Bizău) #2852
  • [476125d403] - doc: add tunniclm as a collaborator (Mike Tunnicliffe) #2826
  • [0603a92d48] - doc: fix two doc errors in stream and process (Jeremiah Senkpiel) #2549
  • [da2902ddfd] - doc: use "Calls" over "Executes" for consistency (Minwoo Jung) #2800
  • [5e93bc4fba] - doc: use US English for consistency (Anne-Gaelle Colom) #2784
  • [3ee7fbcefd] - doc: use 3rd person singular for consistency (Anne-Gaelle Colom) #2765
  • [4fdccb9eb7] - doc: fix comma splice in Assertion Testing doc (Rich Trott) #2728
  • [28c2d310d6] - doc: update AUTHORS list (Rod Vagg)
  • [324c073fb9] - doc: add TSC meeting minutes 2015-09-02 (Rod Vagg) #2674
  • [8929445686] - doc: update url doc to account for escaping (Jeremiah Senkpiel) #2605
  • [512dad6883] - doc: reorder collaborators by their usernames (Johan Bergström) #2322
  • [8372ea2ca5] - doc,test: enable recursive file watching in Windows (Sakthipriyan Vairamani) #2649
  • [daf6c533cc] - events,lib: don't require EE#listenerCount() (Jeremiah Senkpiel) #2661
  • [d8371a801e] - http_server: fix resume after socket close (Fedor Indutny) #2824
  • [7f7d4fdddd] - node-gyp: float 3.0.1, minor fix for download url (Rod Vagg) #2737
  • [91cee73294] - src: use ZCtxt as a source for v8::Isolates (Roman Klauke) #2547
  • [ac98e13b95] - src: s/ia32/x86 for process.release.libUrl for win (Rod Vagg) #2699
  • [ca6c3223e1] - src: use standard conform snprintf on windows (Karl Skomski) #2404
  • [b028978a53] - src: fix buffer overflow for long exception lines (Karl Skomski) #2404
  • [e73eafd7e7] - src: fix memory leak in ExternString (Karl Skomski) #2402
  • [d370306de1] - src: only set v8 flags if argc > 1 (Evan Lucas) #2646
  • [ed087836af] - streams: refactor LazyTransform to internal/ (Brendan Ashworth) #2566
  • [993c22fe0e] - test: remove disabled test (Rich Trott) #2841
  • [1474f29d1f] - test: split up internet dns tests (Rich Trott) #2802
  • [601a97622b] - test: increase dgram timeout for armv6 (Rich Trott) #2808
  • [1dad19ba81] - test: remove valid hostname check in test-dns.js (Rich Trott) #2785
  • [f3d5891a3f] - test: expect error for test_lookup_ipv6_hint on FreeBSD (Rich Trott) #2724
  • [2ffb21baf1] - test: fix use of common before required (Rod Vagg) #2685
  • [b2c5479a14] - test: refactor to eliminate flaky test (Rich Trott) #2609
  • [fcfd15f8f9] - test: mark eval_messages as flaky (Alexis Campailla) #2648
  • [1865cad7ae] - test: mark test-vm-syntax-error-stderr as flaky (João Reis) #2662
  • [b0014ecd27] - test: mark test-repl-persistent-history as flaky (João Reis) #2659
  • [74ff9bc86c] - timers: minor _unrefActive fixes and improvements (Jeremiah Senkpiel) #2540
  • [5d14a6eca7] - timers: don't mutate unref list while iterating it (Julien Gilli) #2540
  • [6e744c58f2] - timers: Avoid linear scan in _unrefActive. (Julien Gilli) #2540
  • [07fbf835ad] - tools: open test.tap file in write-binary mode (Sakthipriyan Vairamani) #2837
  • [6d9198f7f1] - tools: add missing tick processor polyfill (Matt Loring) #2694
  • [7b16597527] - tools: fix flakiness in test-tick-processor (Matt Loring) #2694
  • [ef83029356] - tools: remove hyphen in TAP result (Sakthipriyan Vairamani) #2718
  • [ac45ef9157] - win,msi: fix documentation shortcut url (Brian White) #2781

2015-09-08, Version 4.0.0 (Stable), @rvagg

Notable changes

This list of changes is relative to the last io.js v3.x branch release, v3.3.0. Please see the list of notable changes in the v3.x, v2.x and v1.x releases for a more complete list of changes from 0.12.x. Note, that some changes in the v3.x series as well as major breaking changes in this release constitute changes required for full convergence of the Node.js and io.js projects.

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some uses of computed object shorthand properties are not handled correctly by the current version of V8. e.g. [{ [prop]: val }] evaluates to [{}]. #2507
  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [4f50d3fb90] - (SEMVER-MAJOR) This commit sets the value of process.release.name to "node". (cjihrig) #2367
  • [d3178d8b1b] - buffer: SlowBuffer only accept valid numeric values (Michaël Zasso) #2635
  • [0cb0f4a6e4] - build: fix v8_enable_handle_zapping override (Karl Skomski) #2731
  • [a7596d7efc] - build: remote commands on staging in single session (Rod Vagg) #2717
  • [be427e9efa] - build: make .msi install to "nodejs", not "node" (Rod Vagg) #2701
  • [5652ce0dbc] - build: fix .pkg creation tooling (Rod Vagg) #2687
  • [101db80111] - build: add --enable-asan with builtin leakcheck (Karl Skomski) #2376
  • [2c3939c9c0] - child_process: use stdio.fd even if it is 0 (Evan Lucas) #2727
  • [609db5a1dd] - child_process: check execFile and fork args (James M Snell) #2667
  • [d010568c23] - (SEMVER-MAJOR) child_process: add callback parameter to .send() (Ben Noordhuis) #2620
  • [c60857a81a] - cluster: allow shared reused dgram sockets (Fedor Indutny) #2548
  • [b2ecbb6191] - contextify: ignore getters during initialization (Fedor Indutny) #2091
  • [3711934095] - cpplint: make it possible to run outside git repo (Ben Noordhuis) #2710
  • [03f900ab25] - crypto: replace rwlocks with simple mutexes (Ben Noordhuis) #2723
  • [847459c29b] - (SEMVER-MAJOR) crypto: show exponent in decimal and hex (Chad Johnston) #2320
  • [e1c976184d] - deps: improve ArrayBuffer performance in v8 (Fedor Indutny) #2732
  • [cc0ab17a23] - deps: float node-gyp v3.0.0 (Rod Vagg) #2700
  • [b2c3c6d727] - deps: create .npmrc during npm tests (Kat Marchán) #2696
  • [babdbfdbd5] - deps: upgrade to npm 2.14.2 (Kat Marchán) #2696
  • [155783d876] - deps: backport 75e43a6 from v8 upstream (again) (saper) #2692
  • [5424d6fcf0] - deps: upgrade V8 to 4.5.103.30 (Ali Ijaz Sheikh) #2632
  • [c43172578e] - (SEMVER-MAJOR) deps: upgrade V8 to 4.5.103.24 (Ali Ijaz Sheikh) #2509
  • [714e96e8b9] - deps: backport 75e43a6 from v8 upstream (saper) #2636
  • [8637755cbf] - doc: add TSC meeting minutes 2015-09-02 (Rod Vagg) #2674
  • [d3d5b93214] - doc: update environment vars in manpage and --help (Roman Reiss) #2690
  • [29f586ac0a] - doc: update url doc to account for escaping (Jeremiah Senkpiel) #2605
  • [ba50cfebef] - doc: reorder collaborators by their usernames (Johan Bergström) #2322
  • [8a9a3bf798] - doc: update changelog for io.js v3.3.0 (Rod Vagg) #2653
  • [6cd0e2664b] - doc: update io.js reference (Ben Noordhuis) #2580
  • [f9539c19e8] - doc: update changelog for io.js v3.2.0 (Rod Vagg) #2512
  • [cded6e7993] - doc: fix CHANGELOG.md on master (Roman Reiss) #2513
  • [93e2830686] - (SEMVER-MINOR) doc: document deprecation of util.is* functions (Sakthipriyan Vairamani) #2447
  • [7038388558] - doc,test: enable recursive file watching in Windows (Sakthipriyan Vairamani) #2649
  • [f3696f64a1] - events,lib: don't require EE#listenerCount() (Jeremiah Senkpiel) #2661
  • [45a2046f5d] - (SEMVER-MAJOR) installer: fix installers for node.js rename (Frederic Hemberger) #2367
  • [7a999a1376] - (SEMVER-MAJOR) lib: add net.Socket#localFamily property (Ben Noordhuis) #956
  • [de88255b0f] - Revert "lib,src: add unix socket getsockname/getpeername" (Ben Noordhuis) #2584
  • [f337595441] - (SEMVER-MAJOR) lib,src: add unix socket getsockname/getpeername (Ben Noordhuis) #956
  • [3b602527d1] - (SEMVER-MAJOR) node: additional cleanup for node rename (cjihrig) #2367
  • [a69ab27ab4] - (SEMVER-MAJOR) node: rename from io.js to node (cjihrig) #2367
  • [9358eee9dd] - node-gyp: float 3.0.1, minor fix for download url (Rod Vagg) #2737
  • [d2d981252b] - src: s/ia32/x86 for process.release.libUrl for win (Rod Vagg) #2699
  • [eba3d3dccd] - src: use standard conform snprintf on windows (Karl Skomski) #2404
  • [cddbec231f] - src: fix buffer overflow for long exception lines (Karl Skomski) #2404
  • [dd3f3417c7] - src: re-enable fast math on arm (Michaël Zasso) #2592
  • [e137c1177c] - (SEMVER-MAJOR) src: enable vector ics on arm again (Ali Ijaz Sheikh) #2509
  • [7ce749d722] - src: replace usage of v8::Handle with v8::Local (Michaël Zasso) #2202
  • [b1a2d9509f] - src: enable v8 deprecation warnings and fix them (Ben Noordhuis) #2091
  • [808de0da03] - (SEMVER-MAJOR) src: apply debug force load fixups from 41e63fb (Ali Ijaz Sheikh) #2509
  • [5201cb0ff1] - src: fix memory leak in ExternString (Karl Skomski) #2402
  • [2308a27c0a] - src: only set v8 flags if argc > 1 (Evan Lucas) #2646
  • [384effed20] - test: fix use of common before required (Rod Vagg) #2685
  • [f146f686b7] - (SEMVER-MAJOR) test: fix test-repl-tab-complete.js for V8 4.5 (Ali Ijaz Sheikh) #2509
  • [fe4b309fd3] - test: refactor to eliminate flaky test (Rich Trott) #2609
  • [619721e6b8] - test: mark eval_messages as flaky (Alexis Campailla) #2648
  • [93ba585b66] - test: mark test-vm-syntax-error-stderr as flaky (João Reis) #2662
  • [367140bca0] - test: mark test-repl-persistent-history as flaky (João Reis) #2659
  • [f6b093343d] - timers: minor _unrefActive fixes and improvements (Jeremiah Senkpiel) #2540
  • [403d7ee7d1] - timers: don't mutate unref list while iterating it (Julien Gilli) #2540
  • [7a8c3e08c3] - timers: Avoid linear scan in _unrefActive. (Julien Gilli) #2540
  • [b630ebaf43] - win,msi: Upgrade from old upgrade code (João Reis) #2439

2015-09-02, Version 3.3.0, @rvagg

Notable changes

  • build: Add a --link-module option to configure that can be used to bundle additional JavaScript modules into a built binary (Bradley Meck) #2497
  • docs: Merge outstanding doc updates from joyent/node (James M Snell) #2378
  • http_parser: Significant performance improvement by having http.Server consume all initial data from its net.Socket and parsing directly without having to enter JavaScript. Any 'data' listeners on the net.Socket will result in the data being "unconsumed" into JavaScript, thereby undoing any performance gains. (Fedor Indutny) #2355
  • libuv: Upgrade to 1.7.3 (from 1.6.1), see ChangeLog for details (Saúl Ibarra Corretgé) #2310
  • V8: Upgrade to 4.4.63.30 (from 4.4.63.26) (Michaël Zasso) #2482

Known issues

See https://github.com/nodejs/io.js/labels/confirmed-bug for complete and current list of known issues.

  • Some uses of computed object shorthand properties are not handled correctly by the current version of V8. e.g. [{ [prop]: val }] evaluates to [{}]. #2507
  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760.
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [1a531b4e44] - (SEMVER-MINOR) Introduce --link-module to ./configure (Bradley Meck) #2497
  • [d2f314c190] - build: fix borked chmod call for release uploads (Rod Vagg) #2645
  • [3172e9c541] - build: set file permissions before uploading (Rod Vagg) #2623
  • [a860d7fae1] - build: change staging directory on new server (Rod Vagg) #2623
  • [50c0baa8d7] - build: rename 'doc' directory to 'docs' for upload (Rod Vagg) #2623
  • [0a0577cf5f] - build: fix bad cherry-pick for vcbuild.bat build-release (Rod Vagg) #2625
  • [34de90194b] - build: only define NODE_V8_OPTIONS if not empty (Evan Lucas) #2532
  • [944174b189] - build: make ci test addons in test/addons (Ben Noordhuis) #2428
  • [e955f9a1b0] - crypto: Use OPENSSL_cleanse to shred the data. (Сковорода Никита Андреевич) #2575
  • [395d736b9d] - debugger: use strict equality comparison (Minwoo Jung) #2558
  • [1d0e5210a8] - deps: upgrade libuv to 1.7.3 (Saúl Ibarra Corretgé) #2310
  • [34ef53364f] - deps: update V8 to 4.4.63.30 (Michaël Zasso) #2482
  • [23579a5f4a] - doc: add TSC meeting minutes 2015-08-12 (Rod Vagg) #2438
  • [0cc59299a4] - doc: add TSC meeting minutes 2015-08-26 (Rod Vagg) #2591
  • [6efa96e33a] - doc: merge CHANGELOG.md with joyent/node ChangeLog (P.S.V.R) #2536
  • [f75d54607b] - doc: clarify cluster behaviour with no workers (Jeremiah Senkpiel) #2606
  • [8936302121] - doc: minor clarification in buffer.markdown (Сковорода Никита Андреевич) #2574
  • [0db0e53753] - doc: add @jasnell and @sam-github to release team (Rod Vagg) #2455
  • [c16e100593] - doc: reorg release team to separate section (Rod Vagg) #2455
  • [e3e00143fd] - doc: fix bad merge on modules.markdown (James M Snell)
  • [2f62455880] - doc: minor additional corrections and improvements (James M Snell) #2378
  • [3bd08aac4b] - doc: minor grammatical update in crypto.markdown (James M Snell) #2378
  • [f707189370] - doc: minor grammatical update (James M Snell) #2378
  • [6c98cf0266] - doc: remove repeated statement in globals.markdown (James M Snell) #2378
  • [48e6ccf8c2] - doc: remove 'dudes' from documentation (James M Snell) #2378
  • [b5d68f8076] - doc: update tense in child_process.markdown (James M Snell) #2378
  • [242e3fe3ba] - doc: fixed worker.id type (James M Snell) #2378
  • [ea9ee15c21] - doc: port is optional for socket.bind() (James M Snell) #2378
  • [0ff6657a50] - doc: fix minor types and grammar in fs docs (James M Snell) #2378
  • [94d83c04f2] - doc: update parameter name in net.markdown (James M Snell) #2378
  • [04111ce40f] - doc: small typo in domain.markdown (James M Snell) #2378
  • [c9fdd1bbbf] - doc: fixed typo in net.markdown (missing comma) (James M Snell) #2378
  • [27c07b3f8e] - doc: update description of fs.exists in fs.markdown (James M Snell) #2378
  • [52018e73d9] - doc: clarification on the 'close' event (James M Snell) #2378
  • [f6d3b87a25] - doc: improve working in stream.markdown (James M Snell) #2378
  • [b5da89431a] - doc: update path.extname documentation (James M Snell) #2378
  • [1d4ea609db] - doc: small clarifications to modules.markdown (James M Snell) #2378
  • [c888985591] - doc: code style cleanups in repl.markdown (James M Snell) #2378
  • [105b493595] - doc: correct grammar in cluster.markdown (James M Snell) #2378
  • [51b86ccac7] - doc: Clarify the module.parent is set once (James M Snell) #2378
  • [d2ffecba2d] - doc: add internal modules notice (Jeremiah Senkpiel) #2523
  • [b36debd5cb] - env: introduce KickNextTick (Fedor Indutny) #2355
  • [1bc446863f] - http_parser: consume StreamBase instance (Fedor Indutny) #2355
  • [ce04b735cc] - src: only memcmp if length > 0 in Buffer::Compare (Karl Skomski) #2544
  • [31823e37c7] - src: DRY getsockname/getpeername code (Ben Noordhuis) #956
  • [13fd96dda3] - src: missing Exception::Error in node_http_parser (Jeremiah Senkpiel) #2550
  • [42e075ae02] - test: improve performance of stringbytes test (Trevor Norris) #2544
  • [fc726399fd] - test: unmark test-process-argv-0.js as flaky (Rich Trott) #2613
  • [7727ba1394] - test: lint and refactor to avoid autocrlf issue (Roman Reiss) #2494
  • [c56aa829f0] - test: use tmpDir instead of fixturesDir (Sakthipriyan Vairamani) #2583
  • [5e65181ea4] - test: handling failure cases properly (Sakthipriyan Vairamani) #2206
  • [c48b95e847] - test: initial list of flaky tests (Alexis Campailla) #2424
  • [94e88498ba] - test: pass args to test-ci via env variable (Alexis Campailla) #2424
  • [09987c7a1c] - test: support flaky tests in test-ci (Alexis Campailla) #2424
  • [08b83c8b45] - test: add test configuration templates (Alexis Campailla) #2424
  • [8f8ab6fa57] - test: runner should return 0 on flaky tests (Alexis Campailla) #2424
  • [0cfd3be9c6] - test: runner support for flaky tests (Alexis Campailla) #2424
  • [3492d2d4c6] - test: make test-process-argv-0 robust (Rich Trott) #2541
  • [a96cc31710] - test: speed up test-child-process-spawnsync.js (Rich Trott) #2542
  • [856baf4c67] - test: make spawnSync() test robust (Rich Trott) #2535
  • [3aa6bbb648] - tools: update release.sh to work with new website (Rod Vagg) #2623
  • [f2f0fe45ff] - tools: make add-on scraper print filenames (Ben Noordhuis) #2428
  • [bb24c4a418] - win,msi: correct installation path registry keys (João Reis) #2565
  • [752977b888] - win,msi: change InstallScope to perMachine (João Reis) #2565

2015-08-25, Version 3.2.0, @rvagg

Notable changes

  • events: Added EventEmitter#listenerCount(event) as a replacement for EventEmitter.listenerCount(emitter, event), which has now been marked as deprecated in the docs. (Sakthipriyan Vairamani) #2349
  • module: Fixed an error with preloaded modules when the current working directory doesn't exist. (Bradley Meck) #2353
  • node: Startup time is now about 5% faster when not passing V8 flags. (Evan Lucas) #2483
  • repl: Tab-completion now works better with arrays. (James M Snell) #2409
  • string_bytes: Fixed an unaligned write in the handling of UCS2 encoding. (Fedor Indutny) #2480
  • tls: Added a new --tls-cipher-list flag that can be used to override the built-in default cipher list. (James M Snell) #2412 Note: it is suggested you use the built-in cipher list as it has been carefully selected to reflect current security best practices and risk mitigation.

Known issues

See https://github.com/nodejs/io.js/labels/confirmed-bug for complete and current list of known issues.

  • Some uses of computed object shorthand properties are not handled correctly by the current version of V8. e.g. [{ [prop]: val }] evaluates to [{}]. #2507
  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760.
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [1cd794f129] - buffer: reapply 07c0667 (Fedor Indutny) #2487
  • [156781dedd] - build: use required platform in android-configure (Evan Lucas) #2501
  • [77075ec906] - crypto: fix mem {de}allocation in ExportChallenge (Karl Skomski) #2359
  • [cb30414d9e] - doc: sync CHANGELOG.md from master (Roman Reiss) #2524
  • [9330f5ef45] - doc: make the deprecations consistent (Sakthipriyan Vairamani) #2450
  • [09437e0146] - doc: fix comments in tls_wrap.cc and _http_client.js (Minwoo Jung) #2489
  • [c9867fed29] - doc: document response.finished in http.markdown (hackerjs) #2414
  • [7f23a83c42] - doc: update AUTHORS list (Rod Vagg) #2505
  • [cd0c362f67] - doc: update AUTHORS list (Rod Vagg) #2318
  • [2c7b9257ea] - doc: add TSC meeting minutes 2015-07-29 (Rod Vagg) #2437
  • [aaefde793e] - doc: add TSC meeting minutes 2015-08-19 (Rod Vagg) #2460
  • [51ef9106f5] - doc: add TSC meeting minutes 2015-06-03 (Rod Vagg) #2453
  • [7130b4cf1d] - doc: fix links to original converged repo (Rod Vagg) #2454
  • [14f2aee1df] - doc: fix links to original gh issues for TSC meetings (Rod Vagg) #2454
  • [87a9ef0a40] - doc: add audio recording links to TSC meeting minutes (Rod Vagg) #2454
  • [f5cf24afbc] - doc: add TSC meeting minutes 2015-07-22 (Rod Vagg) #2436
  • [3f821b96eb] - doc: fix spelling mistake in node.js comment (Jacob Edelman) #2391
  • [3e6a6fcdd6] - (SEMVER-MINOR) events: deprecate static listenerCount function (Sakthipriyan Vairamani) #2349
  • [023386c852] - fs: replace bad_args macro with concrete error msg (Roman Klauke) #2495
  • [d1c27b2e29] - module: fix module preloading when cwd is ENOENT (Bradley Meck) #2353
  • [5d7486941b] - repl: filter integer keys from repl tab complete list (James M Snell) #2409
  • [7f02443a9a] - repl: dont throw ENOENT on NODE_REPL_HISTORY_FILE (Todd Kennedy) #2451
  • [56a2ae9cef] - src: improve startup time (Evan Lucas) #2483
  • [14653c7429] - stream: rename poorly named function (Ben Noordhuis) #2479
  • [1c6e014bfa] - stream: micro-optimize high water mark calculation (Ben Noordhuis) #2479
  • [f1f4b4c46d] - stream: fix off-by-factor-16 error in comment (Ben Noordhuis) #2479
  • [2d3f09bd76] - stream_base: various improvements (Fedor Indutny) #2351
  • [c1ce423b35] - string_bytes: fix unaligned write in UCS2 (Fedor Indutny) #2480
  • [e4d0e86165] - test: refactor test-https-simple.js (Rich Trott) #2433
  • [0ea5c8d737] - test: remove test-timers-first-fire (João Reis) #2458
  • [536c3d0537] - test: use reserved IP in test-net-connect-timeout (Rich Trott) #2257
  • [5df06fd8df] - test: add spaces after keywords (Brendan Ashworth)
  • [e714b5620e] - test: remove unreachable code (Michaël Zasso) #2289
  • [3579f3a2a4] - test: disallow unreachable code (Michaël Zasso) #2289
  • [3545e236fc] - test: reduce timeouts in test-net-keepalive (Brendan Ashworth) #2429
  • [b60e690023] - test: improve test-net-server-pause-on-connect (Brendan Ashworth) #2429
  • [11d1b8fcaf] - test: improve test-net-pingpong (Brendan Ashworth) #2429
  • [5fef5c6562] - (SEMVER-MINOR) tls: add --tls-cipher-list command line switch (James M Snell) #2412
  • [d9b70f9cbf] - tls: handle empty cert in checkServerIndentity (Mike Atkins) #2343
  • [4f8e34c202] - tools: add license boilerplate to check-imports.sh (James M Snell) #2386
  • [b76b9197f9] - tools: enable space-after-keywords in eslint (Brendan Ashworth)
  • [64a8f30a70] - tools: fix anchors in generated documents (Sakthipriyan Vairamani) #2491
  • [22e344ea10] - win: fix custom actions for WiX older than 3.9 (João Reis) #2365
  • [b5bd3ebfc8] - win: fix custom actions on Visual Studio != 2013 (Julien Gilli) #2365

2015-08-18, Version 3.1.0, @Fishrock123

Notable changes

  • buffer: Fixed a couple large memory leaks (Ben Noordhuis) #2352.
  • crypto:
    • Fixed a couple of minor memory leaks (Karl Skomski) #2375.
    • Signing now checks for OpenSSL errors (P.S.V.R) #2342. Note that this may expose previously hidden errors in user code.
  • intl: Intl support using small-icu is now enabled by default in builds (Steven R. Loomis) #2264.
    • String#normalize() can now be used for unicode normalization.
    • The Intl object and various String and Number methods are present, but only support the English locale.
    • For support of all locales, node must be built with full-icu.
  • tls: Fixed tls throughput being much lower after an incorrect merge (Fedor Indutny) #2381.
  • tools: The v8 tick processor now comes bundled with node (Matt Loring) #2090.
    • This can be used by producing performance profiling output by running node with --perf, then running your appropriate platform's script on the output as found in tools/v8-prof.
  • util: util.inspect(obj) now prints the constructor name of the object if there is one (Christopher Monsanto) #1935.

Known issues

See https://github.com/nodejs/io.js/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760.
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [3645dc62ed] - build: work around VS2015 issue in ICU <56 (Steven R. Loomis) #2283
  • [1f12e03266] - (SEMVER-MINOR) build: intl: converge from joyent/node (Steven R. Loomis) #2264
  • [071640abdd] - build: Intl: bump ICU4C from 54 to 55 (Steven R. Loomis) #2293
  • [07a88b0c8b] - build: update manifest to include Windows 10 (Lucien Greathouse) #2332
  • [0bb099f444] - build: expand ~ in install prefix early (Ben Noordhuis) #2307
  • [7fe6dd8f5d] - crypto: check for OpenSSL errors when signing (P.S.V.R) #2342
  • [605f6ee904] - crypto: fix memory leak in PBKDF2Request (Karl Skomski) #2375
  • [ba6eb8af12] - crypto: fix memory leak in ECDH::SetPrivateKey (Karl Skomski) #2375
  • [6a16368611] - crypto: fix memory leak in PublicKeyCipher::Cipher (Karl Skomski) #2375
  • [a760a87803] - crypto: fix memory leak in SafeX509ExtPrint (Karl Skomski) #2375
  • [f45487cd6e] - crypto: fix memory leak in SetDHParam (Karl Skomski) #2375
  • [2ff183dd86] - doc: Update FIPS instructions in README.md (Michael Dawson) #2278
  • [6483bc2e8f] - doc: clarify options for fs.watchFile() (Rich Trott) #2425
  • [e76822f454] - doc: multiple documentation updates cherry picked from v0.12 (James M Snell) #2302
  • [1738c9680b] - net: ensure Socket reported address is current (Ryan Graham) #2095
  • [844d3f0e3e] - path: use '===' instead of '==' for comparison (Sam Stites) #2388
  • [7118b8a882] - path: remove dead code in favor of unit tests (Nathan Woltman) #2282
  • [34f2cfa806] - src: better error message on failed Buffer malloc (Karl Skomski) #2422
  • [b196c1da3c] - src: fix memory leak in DLOpen (Karl Skomski) #2375
  • [d1307b2995] - src: don't use fopen() in require() fast path (Ben Noordhuis) #2377
  • [455ec570d1] - src: rename Buffer::Use() to Buffer::New() (Ben Noordhuis) #2352
  • [fd63e1ce2b] - src: introduce internal Buffer::Copy() function (Ben Noordhuis) #2352
  • [5586ceca13] - src: move internal functions out of node_buffer.h (Ben Noordhuis) #2352
  • [bff9bcddb6] - src: plug memory leaks (Ben Noordhuis) #2352
  • [ccf12df4f3] - (SEMVER-MINOR) src: add total_available_size to v8 statistics (Roman Klauke) #2348
  • [194eeb841b] - test: drop Isolate::GetCurrent() from addon tests (Ben Noordhuis) #2427
  • [46cdb2f6e2] - test: lint addon tests (Ben Noordhuis) #2427
  • [850c794882] - test: refactor test-fs-watchfile.js (Rich Trott) #2393
  • [a3160c0a33] - test: correct spelling of 'childProcess' (muddletoes) #2389
  • [e51f90d747] - test: option to run a subset of tests (João Reis) #2260
  • [cc46d3bca3] - test: clarify dropMembership() call (Rich Trott) #2062
  • [0ee4df9c7a] - test: make listen-fd-cluster/server more robust (Sam Roberts) #1944
  • [cf9ba81398] - test: address timing issues in simple http tests (Gireesh Punathil) #2294
  • [cbb75c4f86] - tls: fix throughput issues after incorrect merge (Fedor Indutny) #2381
  • [94b765f409] - tls: fix check for reused session (Fedor Indutny) #2312
  • [e83a41ad65] - tls: introduce internal onticketkeycallback (Fedor Indutny) #2312
  • [fb0f5d733f] - (SEMVER-MINOR) tools: run the tick processor without building v8 (Matt Loring) #2090
  • [7606bdb897] - (SEMVER-MINOR) util: display constructor when inspecting objects (Christopher Monsanto) #1935

2015-08-04, Version 3.0.0, @rvagg

Notable changes

  • buffer:
    • Due to changes in V8, it has been necessary to reimplement Buffer on top of V8's Uint8Array. Every effort has been made to minimize the performance impact, however Buffer instantiation is measurably slower. Access operations may be faster in some circumstances but the exact performance profile and difference over previous versions will depend on how Buffer is used within applications. (Trevor Norris) #1825.
    • Buffer can now take ArrayBuffers as a constructor argument (Trevor Norris) #2002.
    • When a single buffer is passed to Buffer.concat(), a new, copied Buffer object will be returned; previous behavior was to return the original Buffer object (Sakthipriyan Vairamani) #1937.
  • build: PPC support has been added to core to allow compiling on pLinux BE and LE (AIX support coming soon) (Michael Dawson) #2124.
  • dgram: If an error occurs within socket.send() and a callback has been provided, the error is only passed as the first argument to the callback and not emitted on the socket object; previous behavior was to do both (Matteo Collina & Chris Dickinson) #1796
  • freelist: Deprecate the undocumented freelist core module (Sakthipriyan Vairamani) #2176.
  • http:
    • Status codes now all use the official IANA names as per RFC7231, e.g. http.STATUS_CODES[414] now returns 'URI Too Long' rather than 'Request-URI Too Large' (jomo) #1470.
    • Calling .getName() on an HTTP agent no longer returns a trailing colon, HTTPS agents will no longer return an extra colon near the middle of the string (Brendan Ashworth) #1617.
  • node:
    • NODE_MODULE_VERSION has been bumped to 45 to reflect the break in ABI (Rod Vagg) #2096.
    • Introduce a new process.release object that contains a name property set to 'io.js' and sourceUrl, headersUrl and libUrl (Windows only) properties containing URLs for the relevant resources; this is intended to be used by node-gyp (Rod Vagg) #2154.
    • The version of node-gyp bundled with io.js now downloads and uses a tarball of header files from iojs.org rather than the full source for compiling native add-ons; it is hoped this is a temporary floating patch and the change will be upstreamed to node-gyp soon (Rod Vagg) #2066.
  • repl: Persistent history is now enabled by default. The history file is located at ~/.node_repl_history, which can be overridden by the new environment variable NODE_REPL_HISTORY. This deprecates the previous NODE_REPL_HISTORY_FILE variable. Additionally, the format of the file has been changed to plain text to better handle file corruption. (Jeremiah Senkpiel) #2224.
  • smalloc: The smalloc module has been removed as it is no longer possible to provide the API due to changes in V8 (Ben Noordhuis) #2022.
  • tls: Add server.getTicketKeys() and server.setTicketKeys() methods for TLS session key rotation (Fedor Indutny) #2227.
  • v8: Upgraded to 4.4.63.26
    • ES6: Enabled computed property names
    • ES6: Array can now be subclassed in strict mode
    • ES6: Implement rest parameters in staging, use the --harmony-rest-parameters command line flag
    • ES6: Implement the spread operator in staging, use the --harmony-spreadcalls command line flag
    • Removed SetIndexedPropertiesToExternalArrayData and related APIs, forcing a shift to Buffer to be reimplemented based on Uint8Array
    • Introduction of Maybe and MaybeLocal C++ API for objects which may or may not have a value.
    • Added support for PPC

See also https://github.com/nodejs/node/wiki/Breaking-Changes#300-from-2x for a summary of the breaking changes (SEMVER-MAJOR).

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760.
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [60a974d200] - buffer: fix missing null/undefined check (Trevor Norris) #2195
  • [e6ab2d92bc] - buffer: fix not return on error (Trevor Norris) #2225
  • [1057d1186b] - buffer: rename internal/buffer_new.js to buffer.js (Ben Noordhuis) #2022
  • [4643b8b667] - (SEMVER-MINOR) buffer: allow ArrayBuffer as Buffer argument (Trevor Norris) #2002
  • [e5ada116cd] - buffer: minor cleanup from rebase (Trevor Norris) #2003
  • [b625ab4242] - buffer: fix usage of kMaxLength (Trevor Norris) #2003
  • [eea66e2a7b] - (SEMVER-MAJOR) buffer: fix case of one buffer passed to concat (Sakthipriyan Vairamani) #1937
  • [8664084166] - buffer: make additional changes to native API (Trevor Norris) #1825
  • [36f78f4c1c] - buffer: switch API to return MaybeLocal (Trevor Norris) #1825
  • [571ec13841] - buffer: switch to using Maybe API (Trevor Norris) #1825
  • [d75f5c8d0e] - buffer: finish implementing FreeCallback (Trevor Norris) #1825
  • [63da0dfd3a] - buffer: implement Uint8Array backed Buffer (Trevor Norris) #1825
  • [23be6ca189] - buffer: allow ARGS_THIS to accept a name (Trevor Norris) #1825
  • [971de5e417] - build: prepare Windows installer for i18n support (Frederic Hemberger) #2247
  • [2ba8b23661] - build: add 'x86' option back in to configure (Rod Vagg) #2233
  • [b4226e797a] - build: first set of updates to enable PPC support (Michael Dawson) #2124
  • [24dd016deb] - build: produce symbol map files on windows (Ali Ijaz Sheikh) #2243
  • [423d8944ce] - cluster: do not unconditionally set --debug-port (cjihrig) #1949
  • [fa98b97171] - cluster: add handle ref/unref stubs in rr mode (Ben Noordhuis) #2274
  • [944f68046c] - crypto: remove kMaxLength on randomBytes() (Trevor Norris) #1825
  • [3d3c687012] - deps: update V8 to 4.4.63.26 (Michaël Zasso) #2220
  • [3aad4fa89a] - deps: upgrade v8 to 4.4.63.12 (Ben Noordhuis) #2092
  • [70d1f32f56] - (SEMVER-MAJOR) deps: update v8 to 4.4.63.9 (Ben Noordhuis) #2022
  • [deb7ee93a7] - deps: backport 7b24219346 from v8 upstream (Rod Vagg) #1805
  • [d58e780504] - (SEMVER-MAJOR) deps: update v8 to 4.3.61.21 (Chris Dickinson) iojs/io.js#1632
  • [2a63cf612b] - deps: make node-gyp work with io.js (cjihrig) iojs/io.js#990
  • [bf63266460] - deps: upgrade to npm 2.13.3 (Kat Marchán) #2284
  • [ef2c8cd4ec] - (SEMVER-MAJOR) dgram: make send cb act as "error" event handler (Matteo Collina) #1796
  • [3da057fef6] - (SEMVER-MAJOR) dgram: make send cb act as "error" event handler (Chris Dickinson) #1796
  • [df1994fe53] - Revert "dns: remove AI_V4MAPPED hint flag on FreeBSD" (cjihrig) iojs/io.js#1555
  • [1721968b22] - doc: document repl persistent history changes (Jeremiah Senkpiel) #2224
  • [d12df7f159] - doc: update v8 flags in man page (Michaël Zasso) iojs/io.js#1701
  • [d168d01b04] - doc: properly inheriting from EventEmitter (Sakthipriyan Vairamani) #2168
  • [500f2538cc] - doc: a listener, not "an" listener (Sam Roberts) #1025
  • [54627a919d] - doc: server close event does not have an argument (Sam Roberts) #1025
  • [ed85c95a9c] - doc,test: documents behaviour of non-existent file (Sakthipriyan Vairamani) #2169
  • [2965442308] - (SEMVER-MAJOR) http: fix agent.getName() and add tests (Brendan Ashworth) #1617
  • [2d9456e3e6] - (SEMVER-MAJOR) http: use official IANA Status Codes (jomo) #1470
  • [11e4249227] - (SEMVER-MAJOR) http_server: prefinish vs finish (Fedor Indutny) #1411
  • [9bc2e26720] - net: do not set V4MAPPED on FreeBSD (Julien Gilli) iojs/io.js#1555
  • [ba9ccf227e] - node: remove redundant --use-old-buffer (Rod Vagg) #2275
  • [ef65321083] - (SEMVER-MAJOR) node: do not override message/stack of error (Fedor Indutny) #2108
  • [9f727f5e03] - node-gyp: detect RC build with x.y.z-rc.n format (Rod Vagg) #2171
  • [e52f963632] - node-gyp: download header tarball for compile (Rod Vagg) #2066
  • [902c9ca51d] - node-gyp: make aware of nightly, next-nightly & rc (Rod Vagg) #2066
  • [4cffaa3f55] - (SEMVER-MINOR) readline: allow tabs in input (Rich Trott) #1761
  • [ed6c249104] - (SEMVER-MAJOR) repl: persist history in plain text (Jeremiah Senkpiel) #2224
  • [f7d5e4c618] - (SEMVER-MINOR) repl: default persistence to ~/.node_repl_history (Jeremiah Senkpiel) #2224
  • [ea05e760cd] - repl: don't clobber RegExp.$ properties (Sakthipriyan Vairamani) #2137
  • [d20093246b] - src: disable vector ICs on arm (Michaël Zasso) #2220
  • [04fd4fad46] - (SEMVER-MINOR) src: introduce process.release object (Rod Vagg) #2154
  • [9d34bd1147] - src: increment NODE_MODULE_VERSION to 45 (Rod Vagg) #2096
  • [ceee8d2807] - test: add tests for persistent repl history (Jeremiah Senkpiel) #2224
  • [8e1a8ffe24] - test: remove two obsolete pummel tests (Ben Noordhuis) #2022
  • [ae731ec0fa] - test: don't use arguments.callee (Ben Noordhuis) #2022
  • [21d31c08e7] - test: remove obsolete harmony flags (Chris Dickinson)
  • [64cf71195c] - test: change the hostname to an invalid name (Sakthipriyan Vairamani) #2287
  • [80a1cf7425] - test: fix messages and use return to skip tests (Sakthipriyan Vairamani) #2290
  • [d5ab92bcc1] - test: use common.isWindows consistently (Sakthipriyan Vairamani) #2269
  • [bc733f7065] - test: fix fs.readFile('/dev/stdin') tests (Ben Noordhuis) #2265
  • [3cbb5870e5] - tools: expose skip output to test runner (Johan Bergström) #2130
  • [3b021efe11] - vm: fix symbol access (Domenic Denicola) #1773
  • [7b81e4ba36] - vm: remove unnecessary access checks (Domenic Denicola) #1773
  • [659dadd410] - vm: fix property descriptors of sandbox properties (Domenic Denicola) #1773
  • [9bac1dbae9] - win,node-gyp: enable delay-load hook by default (Bert Belder) iojs/io.js#1433

2015-07-28, Version 2.5.0, @cjihrig

Notable changes

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Using multiple REPL instances in parallel may cause some REPL history corruption or loss. #1634
  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760.
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [bf2cd225a8] - process: resize stderr on SIGWINCH (Jeremiah Senkpiel) #2231
  • [99d9d7e716] - benchmark: add remaining path benchmarks & optimize (Nathan Woltman) #2103
  • [66fc8ca22b] - (SEMVER-MINOR) cluster: emit 'message' event on cluster master (Sam Roberts) #861
  • [eb35968de7] - crypto: fix legacy SNICallback (Fedor Indutny) #1720
  • [fef190cea6] - deps: make node-gyp work with io.js (cjihrig) iojs/io.js#990
  • [b73a7465c5] - deps: upgrade to npm 2.13.2 (Kat Marchán) #2241
  • [0a7bf81d2f] - deps: update V8 to 4.2.77.21 (Ali Ijaz Sheikh) #2238
  • [73cdcdd581] - deps: make node-gyp work with io.js (cjihrig) iojs/io.js#990
  • [04893a736d] - deps: upgrade to npm 2.13.1 (Kat Marchán) #2210
  • [a3c1b9720e] - doc: add GPG fingerprint for cjihrig (cjihrig) #2217
  • [d9f857df3b] - doc: note about custom inspect functions (Sakthipriyan Vairamani) #2142
  • [4ef2b5fbfb] - doc: Replace util.debug with console.error (Yosuke Furukawa) #2214
  • [b612f085ec] - doc: add joaocgreis as a collaborator (João Reis) #2208
  • [6b85d5a4b3] - doc: add TSC meeting minutes 2015-07-15 (Rod Vagg) #2191
  • [c7d8b09162] - doc: recompile before testing core module changes (Phillip Johnsen) #2051
  • [9afee6785e] - http: Check this.connection before using it (Sakthipriyan Vairamani) #2172
  • [2ca5a3db47] - https: reuse TLS sessions in Agent (Fedor Indutny) #2228
  • [fef87fee1d] - (SEMVER-MINOR) lib,test: add freelist deprecation and test (Sakthipriyan Vairamani) #2176
  • [503b089dd8] - net: don't throw on immediately destroyed socket (Evan Lucas) #2251
  • [93660c8b8e] - node: remove bad fn call and check (Trevor Norris) #2157
  • [afd7e37ee0] - repl: better empty line handling (Sakthipriyan Vairamani) #2163
  • [81ea52aa01] - repl: improving line continuation handling (Sakthipriyan Vairamani) #2163
  • [30edb5aee9] - repl: preventing REPL crash with inherited properties (Sakthipriyan Vairamani) #2163
  • [77fa385e5d] - repl: fixing undefined in invalid REPL keyword error (Sakthipriyan Vairamani) #2163
  • [8fd3ce100e] - src: make base64 decoding 50% faster (Ben Noordhuis) #2193
  • [c786d6341d] - test: do not use public IPs for timeout testing (Rich Trott) #2057
  • [4e78cd71c0] - test: skip IPv6 part before testing it (Sakthipriyan Vairamani) #2226
  • [ac70bc8240] - test: fix valgrind uninitialized memory warning (Ben Noordhuis) #2193
  • [ac7d3fa0d9] - test: add -no_rand_screen to s_client opts on Win (Shigeki Ohtsu) #2209
  • [79c865a53f] - test: changing process.exit to return while skipping tests (Sakthipriyan Vairamani) #2109
  • [69298d36cf] - test: formatting skip messages for TAP parsing (Sakthipriyan Vairamani) #2109
  • [543dabb609] - timers: improve Timer.now() performance (Ben Noordhuis) #2256
  • [3663b124e6] - timers: remove unused Timer.again() (Ben Noordhuis) #2256
  • [bcce5cf9bb] - timers: remove unused Timer.getRepeat() (Ben Noordhuis) #2256
  • [f2c83bd202] - timers: remove unused Timer.setRepeat() (Ben Noordhuis) #2256
  • [e11fc67225] - (SEMVER-MINOR) tls: add getTicketKeys()/setTicketKeys() (Fedor Indutny) #2227
  • [68b06e94e3] - tools: use local or specified $NODE for test-npm (Jeremiah Senkpiel) #1984
  • [ab479659c7] - util: delay creation of debug context (Ali Ijaz Sheikh) #2248
  • [6391f4d2fd] - util: removing redundant checks in is* functions (Sakthipriyan Vairamani) #2179
  • [b148c0dff3] - win,node-gyp: enable delay-load hook by default (Bert Belder) iojs/io.js#1433
  • [f90f1e75bb] - win,node-gyp: enable delay-load hook by default (Bert Belder) iojs/io.js#1433

2015-07-17, Version 2.4.0, @Fishrock123

Notable changes

  • src: Added a new --track-heap-objects flag to track heap object allocations for heap snapshots (Bradley Meck) #2135.
  • readline: Fixed a freeze that affected the repl if the keypress event handler threw (Alex Kocharin) #2107.
  • npm: Upgraded to v2.13.0, release notes can be found in https://github.com/npm/npm/releases/tag/v2.13.0 (Forrest L Norvell) #2152.

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760.
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

2015-07-09, Version 2.3.4, @Fishrock123

Notable changes

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760.
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

2015-07-09, Version 1.8.4, @Fishrock123

Maintenance release

Notable changes

  • openssl: Upgrade to 1.0.2d, fixes CVE-2015-1793 (Alternate Chains Certificate Forgery) #2141.

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • readline: split escapes are processed incorrectly, see #1403

Commits

  • [52b1230628] - deps: update deps/openssl/conf/arch/*/opensslconf.h (Shigeki Ohtsu) #2141
  • [20ff1e2ecb] - deps: upgrade openssl sources to 1.0.2d (Shigeki Ohtsu) #2141

2015-07-09, Version 0.12.7 (Stable)

Commits

2015-07-09, Version 0.10.40 (Maintenance)

Commits

2015-07-04, Version 2.3.3, @Fishrock123

Notable changes

  • deps: Fixed an out-of-band write in utf8 decoder. This is an important security update as it can be used to cause a denial of service attack.

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal. #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760.
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion. #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [030f8045c7] - deps: fix out-of-band write in utf8 decoder (Fedor Indutny)
  • [0f09b8db28] - doc: don't recommend domains for error handling (Benjamin Gruenbaum) #2056
  • [9cd44bb2b6] - util: prepend '(node) ' to deprecation messages (Sakthipriyan Vairamani) #1892

2015-07-04, Version 1.8.3, @rvagg

Maintenance release

Notable changes

  • v8: Fixed an out-of-band write in utf8 decoder. This is an important security update as it can be used to cause a denial of service attack.
  • openssl: Upgrade to 1.0.2b and 1.0.2c, introduces DHE man-in-the-middle protection (Logjam) and fixes malformed ECParameters causing infinite loop (CVE-2015-1788). See the security advisory for full details. (Shigeki Ohtsu) #1950 #1958
  • build:
    • Added support for compiling with Microsoft Visual C++ 2015
    • Started building and distributing headers-only tarballs along with binaries

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • readline: split escapes are processed incorrectly, see #1403

Commits

2015-07-03, Version 0.12.6 (Stable)

Notable changes

  • deps: Fixed an out-of-band write in utf8 decoder. This is an important security update as it can be used to cause a denial of service attack.

Commits

  • [78b0e30954] - deps: fix out-of-band write in utf8 decoder (Fedor Indutny)

2015-07-01, Version 2.3.2, @rvagg

Notable changes

  • build:
    • Added support for compiling with Microsoft Visual C++ 2015
    • Started building and distributing headers-only tarballs along with binaries

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

2015-06-23, Version 2.3.1, @rvagg

Notable changes

  • module: The number of syscalls made during a require() have been significantly reduced again (see #1801 from v2.2.0 for previous work), which should lead to a performance improvement (Pierre Inglebert) #1920.
  • npm:
  • zlib: A bug was discovered where the process would abort if the final part of a zlib decompression results in a buffer that would exceed the maximum length of 0x3fffffff bytes (~1GiB). This was likely to only occur during buffered decompression (rather than streaming). This is now fixed and will instead result in a thrown RangeError (Michaël Zasso) #1811.

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [e56758a5e0] - async-wrap: add provider id and object info cb (Trevor Norris) #1896
  • [d5637e67c9] - buffer: fix cyclic dependency with util (Brendan Ashworth) #1988
  • [c5353d7c62] - build: remove lint from test-ci on windows (Johan Bergström) #2004
  • [c207e8d223] - build: fix pkg-config output parsing in configure (Ben Noordhuis) #1986
  • [8d8a26e8f7] - build: don't run lint from test-ci (Johan Bergström) #1965
  • [1ec53c044d] - build: simplify execution of built binary (Johan Bergström) #1955
  • [3beb880716] - crypto: add cert check to CNNIC Whitelist (Shigeki Ohtsu) #1895
  • [48c0fb8b1a] - deps: make node-gyp work with io.js (cjihrig) iojs/io.js#990
  • [6a359b1ce9] - deps: upgrade to npm 2.11.3 (Forrest L Norvell) #2018
  • [6aab2f3b9a] - deps: make node-gyp work with io.js (cjihrig) iojs/io.js#990
  • [3e12561b55] - deps: upgrade to npm 2.11.2 (Rebecca Turner) #1956
  • [8ac50819b6] - doc: add security section to README.md (Rod Vagg) #1948
  • [1f93b63b11] - doc: change the info to the same as in gitconfig (Christian Tellnes) #2000
  • [0cf94e6856] - doc: mention CI in Collaborator Guide (Rich Trott) #1995
  • [7a3006efe4] - doc: add TOC links to Collaborator Guide (Rich Trott) #1994
  • [30638b150f] - doc: add TSC meeting notes 2015-06-10 (Bert Belder) #1943
  • [c4ec04136b] - doc: reformat authors section (Johan Bergström) #1966
  • [96165f9be2] - doc: minor clarification in the modules API doc. (Сковорода Никита Андреевич) #1983
  • [5c2707c1b2] - doc: benchmark/README.md copyedit (Rich Trott) #1970
  • [74fdf732d0] - doc: copyedit COLLABORATOR_GUIDE.md (Rich Trott) #1964
  • [5fe6e83640] - doc: copyedit GOVERNANCE.md (Rich Trott) #1963
  • [428526544c] - doc: add ChALkeR as collaborator (Сковорода Никита Андреевич) #1927
  • [5dfe0d5d61] - doc: remove irrelevant SEMVER-MINOR & MAJOR (Rod Vagg)
  • [fb8811d95e] - lib,test: fix whitespace issues (Roman Reiss) #1971
  • [a4f4909f3d] - module: fix stat with long paths on Windows (Michaël Zasso) #2013
  • [a71ee93afe] - module: reduce syscalls during require search (Pierre Inglebert) #1920
  • [671e64ac73] - module: allow long paths for require on Windows (Michaël Zasso)
  • [061342a500] - net: Defer reading until listeners could be added (James Hartig) #1496
  • [5d2b846d11] - test: assert tmp and fixture dirs different (Rich Trott) #2015
  • [b0990ef45d] - test: confirm symlink (Rich Trott) #2014
  • [3ba4f71fc4] - test: check result as early as possible (Rich Trott) #2007
  • [0abcf44d6b] - test: add Buffer slice UTF-8 test (Rich Trott) #1989
  • [88c1831ff4] - test: tmpdir creation failures should fail tests (Rich Trott) #1976
  • [52a822d944] - test: fix test-cluster-worker-disconnect (Santiago Gimeno) #1919
  • [7c79490bfb] - test: only refresh tmpDir for tests that need it (Rich Trott) #1954
  • [88d7904c0b] - test: remove test repetition (Rich Trott) #1874
  • [91dfb5e094] - tools: make test-npm work without global npm (Jeremiah Senkpiel) #1926
  • [3777f41562] - tools: enable whitespace related rules in eslint (Roman Reiss) #1971
  • [626432d843] - util: dont repeat isBuffer (Brendan Ashworth) #1988
  • [1d79f572f1] - util: move deprecate() to internal module (Brendan Ashworth) #1988
  • [4b4b1760b5] - v8: cherry-pick uclibc build patch from upstream (Ben Noordhuis) #1974
  • [5d0cee46bb] - vm: remove unnecessary HandleScopes (Ben Noordhuis) #2001
  • [0ecf9457b5] - win,node-gyp: enable delay-load hook by default (Bert Belder) iojs/io.js#1433
  • [953b3e75e8] - win,node-gyp: enable delay-load hook by default (Bert Belder) iojs/io.js#1433
  • [3806d875d3] - zlib: prevent uncaught exception in zlibBuffer (Michaël Zasso) #1811

2015-06-22, Version 0.12.5 (Stable)

Commits

2015-06-18, Version 0.10.39 (Maintenance)

Commits

  • [456c22f63f] - openssl: upgrade to 1.0.1o (Addressing multiple CVEs) #25523
  • [9d19dfbfdb] - install: fix source path for openssl headers (Oguz Bastemur) #14089
  • [4028669531] - install: make sure opensslconf.h is overwritten (Oguz Bastemur) #14089
  • [d38e865fce] - timers: fix timeout when added in timer's callback (Julien Gilli) #17203
  • [e7c84f82c7] - windows: broadcast WM_SETTINGCHANGE after install (Mathias Küsel) #25100

2015-06-13, Version 2.3.0, @rvagg

Notable changes

  • libuv: Upgraded to 1.6.0 and 1.6.1, see full ChangeLog for details. (Saúl Ibarra Corretgé) #1905 #1889. Highlights include:
    • Fix TTY becoming blocked on OS X
    • Fix UDP send callbacks to not to be synchronous
    • Add uv_os_homedir() (exposed as os.homedir(), see below)
  • npm: See full release notes for details. (Kat Marchán) #1899. Highlight:
    • Use GIT_SSH_COMMAND (available as of Git 2.3)
  • openssl:
    • Upgrade to 1.0.2b and 1.0.2c, introduces DHE man-in-the-middle protection (Logjam) and fixes malformed ECParameters causing infinite loop (CVE-2015-1788). See the security advisory for full details. (Shigeki Ohtsu) #1950 #1958
    • Support FIPS mode of OpenSSL, see README for instructions. (Fedor Indutny) #1890
  • os: Add os.homedir() method. (Colin Ihrig) #1791
  • smalloc: Deprecate whole module. (Vladimir Kurchatkin) #1822
  • Add new collaborators:

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [9c0a1b8cfc] - cluster: wait on servers closing before disconnect (Oleg Elifantiev) #1400
  • [0f68377f69] - crypto: support FIPS mode of OpenSSL (Fedor Indutny) #1890
  • [38d1afc24d] - (SEMVER-MINOR) crypto: add getCurves() to get supported ECs (Brian White) #1914
  • [a4dbf45b59] - crypto: update root certificates (Ben Noordhuis) #1833
  • [81029c639a] - debugger: improve ESRCH error message (Jackson Tian) #1863
  • [2a7fd0ad32] - deps: update UPGRADING.md doc to openssl-1.0.2c (Shigeki Ohtsu) #1958
  • [6b3df929e0] - deps: replace all headers in openssl (Shigeki Ohtsu) #1958
  • [664a659696] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) #1836
  • [42a8de2ac6] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389
  • [c66c3d9fa3] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389
  • [86737cf0a0] - deps: upgrade openssl sources to 1.0.2c (Shigeki Ohtsu) #1958
  • [94804969b7] - deps: update asm files for openssl-1.0.2b (Shigeki Ohtsu) #1950
  • [38444915e0] - deps: replace all headers in openssl (Shigeki Ohtsu) #1950
  • [f62b613252] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) #1836
  • [f624d0122c] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) iojs/io.js#1389
  • [dcd67cc8d7] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) iojs/io.js#1389
  • [c21b24decf] - deps: upgrade openssl sources to 1.0.2b (Shigeki Ohtsu) #1950
  • [2dc819b09a] - deps: make node-gyp work with io.js (cjihrig) iojs/io.js#990
  • [f41b7f12b5] - deps: upgrade to npm 2.11.1 (Kat Marchán) #1899
  • [a5bd466440] - deps: update libuv to version 1.6.1 (Saúl Ibarra Corretgé) #1905
  • [aa33db3238] - deps: update libuv to version 1.6.0 (Saúl Ibarra Corretgé) #1889
  • [0ee497f0b4] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) #1836
  • [b5cd2f0986] - dgram: partially revert 18d457b (Saúl Ibarra Corretgé) #1889
  • [a3cc43d0a4] - doc: add Trott as collaborator (Rich Trott) #1962
  • [cf5020fc02] - doc: add domenic as collaborator (Domenic Denicola) #1942
  • [11ed5f31ab] - doc: add Olegas as collaborator (Oleg Elifantiev) #1930
  • [f500e1833b] - doc: add ofrobots as collaborator (Ali Ijaz Sheikh)
  • [717724611a] - doc: add monsanto as collaborator (Christopher Monsanto) #1932
  • [7192b6688c] - doc: add rlidwka as collaborator (Alex Kocharin) #1929
  • [9f3a03f0d4] - doc: add references to crypto.getCurves() (Roman Reiss) #1918
  • [ff39ecb914] - doc: remove comma splice (Rich Trott) #1900
  • [deb8b87dc9] - doc: add note about available ECC curves (Ryan Petschek) #1913
  • [89a5b9040e] - doc: fix http.IncomingMessage.socket documentation (Сковорода Никита Андреевич) #1867
  • [d29034b34b] - doc: adjust changelog to clarify client revert (Rod Vagg) #1859
  • [a79dece8ad] - docs: add return value for sync fs functions (Tyler Anton) #1770
  • [1cb72c14c4] - docs: delete unused/duplicate css files (Robert Kowalski) #1770
  • [53a4eb3198] - fs: make SyncWriteStream non-enumerable (Sakthipriyan Vairamani) #1870
  • [a011c3243f] - fs: minor refactoring (Sakthipriyan Vairamani) #1870
  • [8841132f30] - fs: remove inStatWatchers and use Map for lookup (Sakthipriyan Vairamani) #1870
  • [67a11b9bcc] - fs: removing unnecessary nullCheckCallNT (Sakthipriyan Vairamani) #1870
  • [09f2a67bd8] - fs: improve error message descriptions (Sakthipriyan Vairamani) #1870
  • [2dcef83b5f] - fs: use kMaxLength from binding (Vladimir Kurchatkin) #1903
  • [353e26e3c7] - (SEMVER-MINOR) fs: Add string encoding option for Stream method (Yosuke Furukawa) #1845
  • [8357c5084b] - fs: set encoding on fs.createWriteStream (Yosuke Furukawa) #1844
  • [02c345020a] - gitignore: don't ignore the debug npm module (Kat Marchán) #1908
  • [b5b8ff117c] - lib: don't use global Buffer (Roman Reiss) #1794
  • [a251657058] - node: mark promises as handled as soon as possible (Vladimir Kurchatkin) #1952
  • [2eb170874a] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389
  • [a130132c8f] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) iojs/io.js#1389
  • [6e78e5feaa] - (SEMVER-MINOR) os: add homedir() (cjihrig) #1791
  • [d9e250295b] - Revert "readline: allow tabs in input" (Jeremiah Senkpiel) #1961
  • [4b3d493c4b] - readline: allow tabs in input (Rich Trott) #1761
  • [6d95f4ff92] - (SEMVER-MINOR) smalloc: deprecate whole module (Vladimir Kurchatkin) #1822
  • [8c71a9241d] - src: hide InitializeICUDirectory symbol (Ben Noordhuis) #1815
  • [5b6f575c1f] - Revert "src: add getopt option parser" (Evan Lucas) #1862
  • [c0e7bf2d8c] - src: add getopt option parser (Evan Lucas) #1804
  • [8ea6844d26] - test: add test for failed save in REPL (Rich Trott) #1818
  • [03ce84dfa1] - test: fix cluster-worker-wait-server-close races (Sam Roberts) #1953
  • [a6b8ee19b8] - test: create temp dir in common.js (Rich Trott) #1877
  • [ff8202c6f4] - test: fix undeclared variable access (Roman Reiss) #1794
  • [d9ddd7d345] - test: remove TODO comment (Rich Trott) #1820
  • [6537fd4b55] - test: remove TODO (Rich Trott) #1875
  • [a804026c9b] - test: fix broken FreeBSD test (Santiago Gimeno) #1881
  • [43a82f8a71] - test: fix test-sync-io-option (Evan Lucas) #1840
  • [4ed25f664d] - test: add -no_rand_screen for tls-server-verify (Shigeki Ohtsu) #1836
  • [4cf323d23d] - test: kill child in tls-server-verify for speed up (Shigeki Ohtsu) #1836
  • [e6ccdcc1fe] - test: improve console output of tls-server-verify (João Reis) #1836
  • [975e5956f0] - test: run tls-server-verify servers in parallel (João Reis) #1836
  • [b18604ba2c] - test: running tls-server-verify clients in parallel (João Reis) #1836
  • [f78c722df5] - test: remove hardwired references to 'iojs' (Rod Vagg) #1882
  • [bd99e8de8e] - test: more test coverage for maxConnections (Rich Trott) #1855
  • [b9267189a5] - test: fix test-child-process-stdout-flush-exit (Santiago Gimeno) #1868
  • [d20f018dcf] - test: loosen condition to detect infinite loop (Yosuke Furukawa) #1857
  • [e0e96acc6f] - test: remove smalloc add-on test (Ben Noordhuis) #1835
  • [8704c58fc4] - test: remove unneeded comment task (Rich Trott) #1858
  • [8732977536] - tls: fix references to undefined cb (Fedor Indutny) #1951
  • [75930bb38c] - tls: prevent use-after-free (Fedor Indutny) #1702
  • [5795e835a1] - tls: emit errors on close whilst async action (Fedor Indutny) #1702
  • [59d9734e21] - tls_wrap: invoke queued callbacks in DestroySSL (Fedor Indutny) #1702
  • [6e4d30286d] - tools: enable/add additional eslint rules (Roman Reiss) #1794
  • [098354a9f8] - tools: update certdata.txt (Ben Noordhuis) #1833
  • [a2d921d6a0] - tools: customize mk-ca-bundle.pl (Ben Noordhuis) #1833
  • [5be9efca40] - tools: update mk-ca-bundle.pl to HEAD of upstream (Ben Noordhuis) #1833
  • [1baba0580d] - tools: Fix copying contents of deps/npm (thefourtheye) #1853
  • [628845b816] - (SEMVER-MINOR) util: introduce printDeprecationMessage function (Vladimir Kurchatkin) #1822
  • [91d0a8b19c] - win,node-gyp: enable delay-load hook by default (Bert Belder) iojs/io.js#1433

2015-06-01, Version 2.2.1, @rvagg

Notable changes

  • http: Reverts the move of the client property of IncomingMessage to its prototype. Although undocumented, this property was used and assumed to be an "own property" in the wild, most notably by request which is used by npm. (Michaël Zasso) #1852.

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [c5a1009903] - build: avoid passing empty strings to build flags (Johan Bergström) #1789
  • [5d83401086] - doc: put SEMVER-MINOR on pre-load module fix 2.2.0 (Rod Vagg)
  • [4d6b768e5d] - http: revert deprecation of client property (Michaël Zasso) #1852

2015-05-31, Version 2.2.0, @rvagg

Notable changes

  • node: Speed-up require() by replacing usage of fs.statSync() and fs.readFileSync() with internal variants that are faster for this use-case and do not create as many objects for the garbage collector to clean up. The primary two benefits are: significant increase in application start-up time on typical applications and better start-up time for the debugger by eliminating almost all of the thousands of exception events. (Ben Noordhuis) #1801.
  • node: Resolution of pre-load modules (-r or --require) now follows the standard require() rules rather than just resolving paths, so you can now pre-load modules in node_modules. (Ali Ijaz Sheikh) #1812.
  • npm: Upgraded npm to v2.11.0. New hooks for preversion, version, and postversion lifecycle events, some SPDX-related license changes and license file inclusions. See the release notes for full details.

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [a77c330c32] - (SEMVER-MINOR) child_process: expose ChildProcess constructor (Evan Lucas) #1760
  • [3a1bc067d4] - Revert "core: set PROVIDER type as Persistent class id" (Ben Noordhuis) #1827
  • [f9fd554500] - deps: make node-gyp work with io.js (cjihrig) iojs/io.js#990
  • [c1afa53648] - deps: upgrade npm to 2.11.0 (Forrest L Norvell) iojs/io.js#1829
  • [ff794498e7] - doc: fs.*File() also accept encoding strings (Rich Trott) #1806
  • [98649fd31a] - doc: add documentation for AtExit hook (Steve Sharp) #1014
  • [eb1856dfd1] - doc: clarify stability of fs.watch and relatives (Rich Trott) #1775
  • [a74c2c9458] - doc: state url decoding behavior (Josh Gummersall) #1731
  • [ba76a9d872] - doc: remove bad semver-major entry from CHANGELOG (Rod Vagg) #1782
  • [a6a3f8c78d] - doc: fix changelog s/2.0.3/2.1.0 (Rod Vagg)
  • [2c686fd3ce] - http: flush stored header (Vladimir Kurchatkin) #1695
  • [1eec5f091a] - http: simplify code and remove unused properties (Brian White) #1572
  • [1bbf8d0720] - lib: speed up require(), phase 2 (Ben Noordhuis) #1801
  • [b14fd1a720] - lib: speed up require(), phase 1 (Ben Noordhuis) #1801
  • [5abd4ac079] - lib: simplify nextTick() usage (Brian White) #1612
  • [5759722cfa] - (SEMVER-MINOR) src: fix module search path for preload modules (Ali Ijaz Sheikh) #1812
  • [a65762cab6] - src: remove old code (Brendan Ashworth) #1819
  • [93a44d5228] - src: fix deferred events not working with -e (Ben Noordhuis) #1793
  • [8059393934] - test: check error type from net.Server.listen() (Rich Trott) #1821
  • [4e90c82cdb] - test: add heap profiler add-on regression test (Ben Noordhuis) #1828
  • [6dfca71af0] - test: don't lint autogenerated test/addons/doc-*/ (Ben Noordhuis) #1793
  • [c2b8b30836] - test: remove stray copyright notices (Ben Noordhuis) #1793
  • [280fb01daf] - test: fix deprecation warning in addons test (Ben Noordhuis) #1793
  • [8606793999] - tools: pass constant to logger instead of string (Johan Bergström) #1842
  • [fbd2b59716] - tools: add objectLiteralShorthandProperties to .eslintrc (Evan Lucas) #1760
  • [53e98cc1b4] - win,node-gyp: enable delay-load hook by default (Bert Belder) #1763

2015-05-24, Version 2.1.0, @rvagg

Notable changes

  • crypto: Diffie-Hellman key exchange (DHE) parameters ('dhparams') must now be 1024 bits or longer or an error will be thrown. A warning will also be printed to the console if you supply less than 2048 bits. See https://weakdh.org/ for further context on this security concern. (Shigeki Ohtsu) #1739.
  • node: A new --trace-sync-io command line flag will print a warning and a stack trace whenever a synchronous API is used. This can be used to track down synchronous calls that may be slowing down an application. (Trevor Norris) #1707.
  • node: To allow for chaining of methods, the setTimeout(), setKeepAlive(), setNoDelay(), ref() and unref() methods used in 'net', 'dgram', 'http', 'https' and 'tls' now return the current instance instead of undefined (Roman Reiss & Evan Lucas) #1699 #1768 #1779.
  • npm: Upgraded to v2.10.1, release notes can be found in https://github.com/npm/npm/releases/tag/v2.10.1 and https://github.com/npm/npm/releases/tag/v2.10.0.
  • util: A significant speed-up (in the order of 35%) for the common-case of a single string argument to util.format(), used by console.log() (Сковорода Никита Андреевич) #1749.

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [9da168b71f] - buffer: optimize Buffer.byteLength (Brendan Ashworth) #1713
  • [2b1c01c2cc] - build: refactor pkg-config for shared libraries (Johan Bergström) #1603
  • [3c44100558] - core: set PROVIDER type as Persistent class id (Trevor Norris) #1730
  • [c1de6d249e] - (SEMVER-MINOR) core: implement runtime flag to trace sync io (Trevor Norris) #1707
  • [9e7099fa4e] - deps: make node-gyp work with io.js (cjihrig) iojs/io.js#990
  • [c54d057598] - deps: upgrade to npm 2.10.1 (Rebecca Turner) #1763
  • [367ffd167d] - doc: update AUTHORS list (Rod Vagg) #1776
  • [2bb2f06b3e] - doc: fix typo in CONTRIBUTING.md (Rich Trott) #1755
  • [515afc6367] - doc: path is ignored in url.format (Maurice Butler) #1753
  • [f0a8bc3f84] - doc: fix spelling in CHANGELOG (Felipe Batista)
  • [86dd244d9b] - doc: add notes to child_process.fork() and .exec() (Rich Trott) #1718
  • [066274794c] - doc: update links from iojs/io.js to nodejs/io.js (Frederic Hemberger) #1715
  • [cb381fe3e0] - (SEMVER-MINOR) net: return this from setNoDelay and setKeepAlive (Roman Reiss) #1779
  • [85d9983009] - net: persist net.Socket options before connect (Evan Lucas) #1518
  • [39dde3222e] - (SEMVER-MINOR) net,dgram: return this from ref and unref methods (Roman Reiss) #1768
  • [5773438913] - test: fix jslint error (Michaël Zasso) #1743
  • [867631986f] - test: fix test-sync-io-option (Santiago Gimeno) #1734
  • [f29762f4dd] - test: enable linting for tests (Roman Reiss) #1721
  • [2a71f02988] - tls: emit errors happening before handshake finish (Malte-Thorben Bruns) #1769
  • [80342f649d] - tls: use .destroy(err) instead of destroy+emit (Fedor Indutny) #1711
  • [9b35be5810] - tls: make server not use DHE in less than 1024bits (Shigeki Ohtsu) #1739
  • [214d02040e] - util: speed up common case of formatting string (Сковорода Никита Андреевич) #1749
  • [d144e96fbf] - win,node-gyp: enable delay-load hook by default (Bert Belder) #1763
  • [0d6d3dda95] - win,node-gyp: make delay-load hook C89 compliant (Sharat M R) TooTallNate/node-gyp#616

2015-05-22, Version 0.12.4 (Stable)

Commits

2015-05-17, Version 1.8.2, @rvagg

Maintenance release

Notable changes

  • crypto: significantly reduced memory usage for TLS (Fedor Indutny & Сковорода Никита Андреевич) #1529
  • npm: Upgrade npm to 2.9.0. See the v2.8.4 and v2.9.0 release notes for details. Summary:

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • readline: split escapes are processed incorrectly, see #1403

Commits

2015-05-15, Version 2.0.2, @Fishrock123

Notable changes

  • win,node-gyp: the delay-load hook for windows addons has now been correctly enabled by default, it had wrongly defaulted to off in the release version of 2.0.0 (Bert Belder) #1433
  • os: tmpdir()'s trailing slash stripping has been refined to fix an issue when the temp directory is at '/'. Also considers which slash is used by the operating system. (cjihrig) #1673
  • tls: default ciphers have been updated to use gcm and aes128 (Mike MacCana) #1660
  • build: v8 snapshots have been re-enabled by default as suggested by the v8 team, since prior security issues have been resolved. This should give some perf improvements to both startup and vm context creation. (Trevor Norris) #1663
  • src: fixed preload modules not working when other flags were used before --require (Yosuke Furukawa) #1694
  • dgram: fixed send()'s callback not being asynchronous (Yosuke Furukawa) #1313
  • readline: emitKeys now keeps buffering data until it has enough to parse. This fixes an issue with parsing split escapes. (Alex Kocharin) #1601
  • cluster: works now properly emit 'disconnect' to cluser.worker (Oleg Elifantiev) #1386
  • events: uncaught errors now provide some context (Evan Lucas) #1654

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.

Commits

  • [8a0e5295b4] - build: use backslashes for paths on windows (Johan Bergström) #1698
  • [20c9a52227] - build: move --with-intl to intl optgroup (Johan Bergström) #1680
  • [36cdc7c8ac] - build: re-enable V8 snapshots (Trevor Norris) #1663
  • [5883a59b21] - cluster: disconnect event not emitted correctly (Oleg Elifantiev) #1386
  • [0f850f7ae7] - deps: provide TXT chunk info in c-ares (Fedor Indutny)
  • [7e1c0e75ed] - deps: sync with upstream bagder/c-ares@bba4dc5 (Ben Noordhuis) #1678
  • [18d457bd34] - dgram: call send callback asynchronously (Yosuke Furukawa) #1313
  • [8b9a1537ad] - events: provide better error message for unhandled error (Evan Lucas) #1654
  • [19ffb5cf1c] - lib: fix eslint styles (Yosuke Furukawa) #1539
  • [76937051f8] - os: refine tmpdir() trailing slash stripping (cjihrig) #1673
  • [aed6bce906] - readline: turn emitKeys into a streaming parser (Alex Kocharin) #1601
  • [0a461e5360] - src: fix preload when used with prior flags (Yosuke Furukawa) #1694
  • [931a0d4634] - src: add type check to v8.setFlagsFromString() (Roman Klauke) #1652
  • [08d08668c9] - src,deps: replace LoadLibrary by LoadLibraryW (Cheng Zhao) #226
  • [4e2f999a62] - test: fix infinite loop detection (Yosuke Furukawa) #1681
  • [5755fc099f] - tls: update default ciphers to use gcm and aes128 (Mike MacCana) #1660
  • [966acb9916] - tools: remove closure_linter to eslint on windows (Yosuke Furukawa) #1685
  • [c58264e58b] - tools: make eslint work on subdirectories (Roman Reiss) #1686
  • [0b21ab13b7] - tools: refactor make test-npm into test-npm.sh (Jeremiah Senkpiel) #1662
  • [f07b3b600b] - tools: set eslint comma-spacing to 'warn' (Roman Reiss) #1672
  • [f9dd34d301] - tools: replace closure-linter with eslint (Yosuke Furukawa) #1539
  • [64d3210c98] - win,node-gyp: enable delay-load hook by default (Bert Belder) #1667

2015-05-13, Version 0.12.3 (Stable)

Commits

2015-05-07, Version 2.0.1, @rvagg

Notable changes

  • async_wrap: (Trevor Norris) #1614
    • it is now possible to filter by providers
    • bit flags have been removed and replaced with method calls on the binding object
    • note that this is an unstable API so feature additions and breaking changes won't change io.js semver
  • libuv: resolves numerous io.js issues:
    • #862 prevent spawning child processes with invalid stdio file descriptors
    • #1397 fix EPERM error with fs.access(W_OK) on Windows
    • #1621 build errors associated with the bundled libuv
    • #1512 should properly fix Windows termination errors
  • addons: the NODE_DEPRECATED macro was causing problems when compiling addons with older compilers, this should now be resolved (Ben Noordhuis) #1626
  • V8: upgrade V8 from 4.2.77.18 to 4.2.77.20 with minor fixes, including a bug preventing builds on FreeBSD

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • readline: split escapes are processed incorrectly, see #1403

Commits

  • [7dde95a8bd] - async-wrap: remove before/after calls in init (Trevor Norris) #1614
  • [bd42ba056a] - async-wrap: set flags using functions (Trevor Norris) #1614
  • [4b2c786449] - async-wrap: pass PROVIDER as first arg to init (Trevor Norris) #1614
  • [84bf609fd2] - async-wrap: don't call init callback unnecessarily (Trevor Norris) #1614
  • [04cc03b029] - deps: update libuv to 1.5.0 (Saúl Ibarra Corretgé) #1646
  • [b16d9c28e8] - deps: upgrade v8 to 4.2.77.20 (Ben Noordhuis) #1639
  • [9ec3109272] - doc: add TC meeting 2015-04-29 minutes (Rod Vagg) #1585
  • [2c7206254c] - doc: fix typo in readme.md (AQNOUCH Mohammed) #1643
  • [71dc7152ee] - doc: fix PR link in CHANGELOG (Brian White) #1624
  • [b97b96d05a] - install: fix NameError (thefourtheye) #1628
  • [6ccbe75384] - js_stream: fix buffer index in DoWrite (Shigeki Ohtsu) #1635
  • [c43855c49c] - src: export the ParseEncoding function on Windows (Ivan Kozik) #1596
  • [8315b22390] - src: fix pedantic cpplint whitespace warnings (Ben Noordhuis) #1640
  • [b712af79a7] - src: fix NODE_DEPRECATED macro with old compilers (Ben Noordhuis) #1626
  • [2ed10f1349] - src: fix minor inefficiency in Buffer::New() call (Ben Noordhuis) #1577
  • [f696c9efab] - src: fix deprecated use of Buffer::New() (Ben Noordhuis) #1577
  • [0c8f13df8f] - tools: remove unused GuessWordSize function (thefourtheye) #1638

2015-05-04, Version 2.0.0, @rvagg

Breaking changes

Full details at https://github.com/nodejs/node/wiki/Breaking-Changes#200-from-1x

  • V8 upgrade to 4.2, minor changes to C++ API
  • os.tmpdir() is now cross-platform consistent and no longer returns a path with a trailing slash on any platform
  • While not a breaking change the 'smalloc' module has been deprecated in anticipation of it becoming unsupportable with a future upgrade to V8 4.4. See #1451 for further information.

Note: a new version of the 'url' module was reverted prior to release as it was decided the potential for breakage across the npm ecosystem was too great and that more compatibility work needed to be done before releasing it. See #1602 for further information.

Notable changes

  • crypto: significantly reduced memory usage for TLS (Fedor Indutny & Сковорода Никита Андреевич) #1529
  • net: socket.connect() now accepts a 'lookup' option for a custom DNS resolution mechanism, defaults to dns.lookup() (Evan Lucas) #1505
  • npm: Upgrade npm to 2.9.0. See the v2.8.4 and v2.9.0 release notes for details. Notable items:
    • Add support for default author field to make npm init -y work without user-input (@othiym23) npm/npm/d8eee6cf9d
    • Include local modules in npm outdated and npm update (@ArnaudRinquin) npm/npm#7426
    • The prefix used before the version number on npm version is now configurable via tag-version-prefix (@kkragenbrink) npm/npm#8014
  • os: os.tmpdir() is now cross-platform consistent and will no longer returns a path with a trailing slash on any platform (Christian Tellnes) #747
  • process:
    • process.nextTick() performance has been improved by between 2-42% across the benchmark suite, notable because this is heavily used across core (Brian White) #1571
    • New process.geteuid(), process.seteuid(id), process.getegid() and process.setegid(id) methods allow you to get and set effective UID and GID of the process (Evan Lucas) #1536
  • repl:
    • REPL history can be persisted across sessions if the NODE_REPL_HISTORY_FILE environment variable is set to a user accessible file, NODE_REPL_HISTORY_SIZE can set the maximum history size and defaults to 1000 (Chris Dickinson) #1513
    • The REPL can be placed in to one of three modes using the NODE_REPL_MODE environment variable: sloppy, strict or magic (default); the new magic mode will automatically run "strict mode only" statements in strict mode (Chris Dickinson) #1513
  • smalloc: the 'smalloc' module has been deprecated due to changes coming in V8 4.4 that will render it unusable
  • util: add Promise, Map and Set inspection support (Christopher Monsanto) #1471
  • V8: upgrade to 4.2.77.18, see the ChangeLog for full details. Notable items:
    • Classes have moved out of staging; the class keyword is now usable in strict mode without flags
    • Object literal enhancements have moved out of staging; shorthand method and property syntax is now usable ({ method() { }, property })
    • Rest parameters (function(...args) {}) are implemented in staging behind the --harmony-rest-parameters flag
    • Computed property names ({['foo'+'bar']:'bam'}) are implemented in staging behind the --harmony-computed-property-names flag
    • Unicode escapes ('\u{xxxx}') are implemented in staging behind the --harmony_unicode flag and the --harmony_unicode_regexps flag for use in regular expressions
  • Windows:
    • Random process termination on Windows fixed (Fedor Indutny) #1512 / #1563
    • The delay-load hook introduced to fix issues with process naming (iojs.exe / node.exe) has been made opt-out for native add-ons. Native add-ons should include 'win_delay_load_hook': 'false' in their binding.gyp to disable this feature if they experience problems . (Bert Belder) #1433
  • Governance:
    • Rod Vagg (@rvagg) was added to the Technical Committee (TC)
    • Jeremiah Senkpiel (@Fishrock123) was added to the Technical Committee (TC)

Known issues

See https://github.com/nodejs/node/labels/confirmed-bug for complete and current list of known issues.

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • readline: split escapes are processed incorrectly, see #1403

Commits

  • [5404cbc745] - buffer: fix copy() segfault with zero arguments (Trevor Norris) #1520
  • [3d3083b91f] - buffer: little improve for Buffer.concat method (Jackson Tian) #1437
  • [e67542ae17] - build: disable -Og when building with clang (Ben Noordhuis) #1609
  • [78f4b038f8] - build: turn on debug-safe optimizations with -Og (Ben Noordhuis) #1569
  • [a5dcff827a] - build: Use option groups in configure output (Johan Bergström) #1533
  • [2a3c8c187e] - build: remove -J from test-ci (Rod Vagg) #1544
  • [e6874dd0f9] - crypto: track external memory for SSL structures (Fedor Indutny) #1529
  • [935c9d3fa7] - deps: make node-gyp work with io.js (cjihrig) #990
  • [56e4255382] - deps: upgrade npm to 2.9.0 (Forrest L Norvell) #1573
  • [509b59ea7c] - deps: enable v8 postmortem debugging again (Ben Noordhuis) #1232
  • [01652c7709] - deps: upgrade v8 to 4.2.77.18 (Chris Dickinson) #1506
  • [01e6632d70] - deps: upgrade v8 to 4.2.77.15 (Ben Noordhuis) #1399
  • [db4ded5903] - deps: enable v8 postmortem debugging again (Ben Noordhuis) #1232
  • [36cd5fb9d2] - (SEMVER-MAJOR) deps: upgrade v8 to 4.2.77.13 (Ben Noordhuis) #1232
  • [b3a7da1091] - deps: update http_parser to 2.5.0 (Fedor Indutny) #1517
  • [ac1fb39ce8] - doc: add rvagg to the TC (Rod Vagg) #1613
  • [dacc1fa35c] - doc: update AUTHORS list (Rod Vagg) #1586
  • [2a3a1909ab] - doc: add require() lines to child.stdio example (Nick Raienko) #1504
  • [02388dbf40] - doc: fix some cross-references (Alexander Gromnitsky) #1584
  • [57c4cc26e2] - doc: add TC meeting 2015-04-22 minutes (Rod Vagg) #1556
  • [b4ad5d7050] - doc: improve http.request and https.request opts (Roman Reiss) #1551
  • [7dc8eec0a6] - doc: deprecate smalloc module (Ben Noordhuis) #1566
  • [1bcdf46ca7] - doc: add TC meeting 2015-04-15 minutes (Rod Vagg) #1498
  • [391cae3595] - doc: Add Known issues to v1.7.0/1.7.1 CHANGELOG (Yosuke Furukawa) #1473
  • [e55fdc47a7] - doc: fix util.deprecate example (Nick Raienko) #1535
  • [5178f93bc0] - doc: Add Addon API (NAN) to working group list (Julian Duque) #1523
  • [f3cc50f811] - doc: add TC meeting 2015-04-08 minutes (Rod Vagg) #1497
  • [bb254b533b] - doc: update branch to master (Roman Reiss) #1511
  • [22aafa5597] - doc: add Fishrock123 to the TC (Jeremiah Senkpiel) #1507
  • [b16a328ede] - doc: add spaces to child.kill example (Nick Raienko) #1503
  • [26327757f8] - doc: update AUTHORS list (Rod Vagg) #1476
  • [f9c681cf62] - fs: validate fd on fs.write (Julian Duque) #1553
  • [801b47acc5] - gitignore: ignore xcode workspaces and projects (Roman Klauke) #1562
  • [d5ce47e433] - (SEMVER-MINOR) lib: deprecate the smalloc module (Ben Noordhuis) #1564
  • [7384ca83f9] - module: remove '' from Module.globalPaths (Chris Yip) #1488
  • [b4f5898395] - net: ensure Write/ShutdownWrap references handle (Fedor Indutny) #1590
  • [4abe2fa1cf] - (SEMVER-MINOR) net: add lookup option to Socket.prototype.connect (Evan Lucas) #1505
  • [1bef717476] - (SEMVER-MINOR) net: cleanup connect logic (Evan Lucas) #1505
  • [c7782c0af8] - node: improve nextTick performance (Brian White) #1571
  • [b57cc51d8d] - (SEMVER-MAJOR) os: remove trailing slash from os.tmpdir() (Christian Tellnes) #747
  • [ca219b00d1] - repl: fix for a+ fd clearing the file on read (Chris Dickinson) #1605
  • [051d482b15] - repl: fix _debugger by properly proxying repl (Chris Dickinson) #1605
  • [2e2fce0502] - repl: fix persistent history and env variable name (Roman Reiss) #1593
  • [ea5195ccaf] - repl: do not save history for non-terminal repl (Fedor Indutny) #1575
  • [0450ce7db2] - repl: add mode detection, cli persistent history (Chris Dickinson) #1513
  • [af9fe3bbc7] - (SEMVER-MAJOR) src: bump NODE_MODULE_VERSION due to V8 API (Rod Vagg) #1532
  • [279f6116aa] - src: fix -Wmissing-field-initializers warning (Ben Noordhuis) #1606
  • [73062521a4] - src: deprecate smalloc public functions (Ben Noordhuis) #1565
  • [ccb199af17] - src: fix deprecation warnings (Ben Noordhuis) #1565
  • [609fa0de03] - src: fix NODE_DEPRECATED macro (Ben Noordhuis) #1565
  • [3c92ca2b5c] - (SEMVER-MINOR) src: add ability to get/set effective uid/gid (Evan Lucas) #1536
  • [30b7349176] - stream_base: dispatch reqs in the stream impl (Fedor Indutny) #1563
  • [0fa6c4a6fc] - string_decoder: don't cache Buffer.isEncoding (Brian White) #1548
  • [f9b226c1c1] - test: extend timeouts for ARMv6 (Rod Vagg) #1554
  • [bfae8236b1] - test: fix test-net-dns-custom-lookup test assertion (Evan Lucas) #1531
  • [547213913b] - test: adjust Makefile/test-ci, add to vcbuild.bat (Rod Vagg) #1530
  • [550c2638c0] - tls: use SSL_set_cert_cb for async SNI/OCSP (Fedor Indutny) #1464
  • [1787416376] - tls: destroy singleUse context immediately (Fedor Indutny) #1529
  • [2684c902c4] - tls: zero SSL_CTX freelist for a singleUse socket (Fedor Indutny) #1529
  • [2d241b3b82] - tls: destroy SSL once it is out of use (Fedor Indutny) #1529
  • [f7620fb96d] - tls_wrap: Unlink TLSWrap and SecureContext objects (Сковорода Никита Андреевич) #1580
  • [a7d74633f2] - tls_wrap: use localhost if options.host is empty (Guilherme Souza) #1493
  • [702997c1f0] - Revert "url: significantly improve the performance of the url module" (Rod Vagg) #1602
  • [0daed24883] - Revert "url: delete href cache on all setter code paths" (Rod Vagg) #1602
  • [0f39ef4ca1] - Revert "url: fix treatment of some values as non-empty" (Rod Vagg) #1602
  • [66877216bd] - url: fix treatment of some values as non-empty (Petka Antonov) #1589
  • [dbdd81a91b] - url: delete href cache on all setter code paths (Petka Antonov) #1589
  • [3fd7fc429c] - url: significantly improve the performance of the url module (Petka Antonov) #1561
  • [bf7ac08dd0] - util: add Map and Set inspection support (Christopher Monsanto) #1471
  • [30e83d2e84] - win,node-gyp: optionally allow node.exe/iojs.exe to be renamed (Bert Belder) #1266
  • [3bda6cbfa4] - (SEMVER-MAJOR) win,node-gyp: enable delay-load hook by default (Bert Belder) #1433

2015-04-20, Version 1.8.1, @chrisdickinson

Notable changes

  • NOTICE: Skipped v1.8.0 due to problems with release tooling. See #1436 for details.
  • build: Support for building io.js as a static library (Marat Abdullin) #1341
  • deps: Upgrade openssl to 1.0.2a (Shigeki Ohtsu) #1389
    • Users should see performance improvements when using the crypto API. See here for details.
  • npm: Upgrade npm to 2.8.3. See the release notes for details. Includes improved git support. Summary:
    • 387f889 #7961 Ensure that hosted git SSH URLs always have a valid protocol when stored in resolved fields in npm-shrinkwrap.json. (@othiym23)
    • 394c2f5 Switch the order in which hosted Git providers are checked to git:, git+https:, then git+ssh: (from git:, git+ssh:, then git+https:) in an effort to go from most to least likely to succeed, to make for less confusing error message. (@othiym23)
    • 431c3bf #7699 npm-registry-client@6.3.2: Don't send body with HTTP GET requests when logging in. (@smikes)
    • 15efe12 #7872 Use the new version of hosted-git-info to pass along credentials embedded in git URLs. Test it. Test it a lot. (@othiym23)
    • b027319 #7920 Scoped packages with peerDependencies were installing the peerDependencies into the wrong directory. (@ewie)
    • 6b0f588 #7867 Use git shorthand and git URLs as presented by user. Support new hosted-git-info shortcut syntax. Save shorthand in package.json. Try cloning via git:, git+ssh:, and git+https:, in that order, when supported by the underlying hosting provider. (@othiym23)
  • src: Allow multiple arguments to be passed to process.nextTick (Trevor Norris) #1077
  • module: The interaction of require('.') with NODE_PATH has been restored and deprecated. This functionality will be removed at a later point. (Roman Reiss) #1363

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • url.resolve may transfer the auth portion of the url when resolving between two full hosts, see #1435.
  • readline: split escapes are processed incorrectly, see #1403

Commits

  • [53ed89d927] - Revert "build: use %PYTHON% instead of python" (Rod Vagg) #1475
  • [2b744b0ab7] - src: revert NODE_MODULE_VERSION to 43 (Chris Dickinson) #1460
  • [431673ebd1] - buffer: fast-case for empty string in byteLength (Jackson Tian) #1441
  • [1b22bad35f] - build: fix logic for shared library flags (Jeremiah Senkpiel) #1454
  • [91943a99d5] - build: use %PYTHON% instead of python (Rod Vagg) #1444
  • [c7769d417b] - build: Expose xz compression level (Johan Bergström) #1428
  • [a530b2baf1] - build: fix error message in configure (Shigeki Ohtsu) #1389
  • [92dfb794f9] - build: enable ssl support on arm64 (Shigeki Ohtsu) #1389
  • [7de0dcde83] - deps: make node-gyp work with io.js (cjihrig) #990
  • [4870213f9e] - deps: upgrade npm to 2.8.3 (Forrest L Norvell)
  • [49bb7ded2c] - deps: fix git case sensitivity issue in npm (Chris Dickinson) #1456
  • [4830b4bce8] - deps: add docs to upgrade openssl (Shigeki Ohtsu) #1389
  • [11bec72c87] - deps: update asm files for openssl-1.0.2a (Shigeki Ohtsu) #1389
  • [53924d8ebe] - deps: update asm Makefile for openssl-1.0.2a (Shigeki Ohtsu) #1389
  • [418e839456] - deps: update openssl.gyp/gypi for openssl-1.0.2a (Shigeki Ohtsu) #1389
  • [02f12ab666] - deps: update opensslconf.h for 1.0.2a (Shigeki Ohtsu) #1389
  • [eb7a23595f] - deps: add x32 and arm64 support for opensslconf.h (Shigeki Ohtsu) #1389
  • [033a663127] - deps: replace all headers in openssl (Shigeki Ohtsu) #1389
  • [ae8831f240] - deps: backport openssl patch of alt cert chains 1 (Shigeki Ohtsu) #1389
  • [71316c46d9] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) #1389
  • [d293a4f096] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) #1389
  • [e4872d7405] - deps: upgrade openssl to 1.0.2a (Shigeki Ohtsu) #1389
  • [a1c9ef3142] - deps, build: add support older assembler (Shigeki Ohtsu) #1389
  • [76f219c128] - doc: Document forced pushing with git (Johan Bergström) #1420
  • [12e51d56c1] - doc: add Addon API WG (Rod Vagg) #1226
  • [7956a13dad] - http: logically respect maxSockets (fengmk2) #1242
  • [5b844e140b] - module: fix style (Roman Reiss) #1453
  • [3ad82c335d] - (SEMVER-MINOR) module: handle NODE_PATH in require('.') (Roman Reiss) #1363
  • [cd60ff0328] - net: add fd into listen2 debug info (Jackson Tian) #1442
  • [10e31ba56c] - (SEMVER-MINOR) node: allow multiple arguments passed to nextTick (Trevor Norris) #1077
  • [116c54692a] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) #1389
  • [62f5f4cec9] - src: remove duplicate byteLength from Buffer (Jackson Tian) #1438
  • [51d0808c90] - stream: remove duplicated expression (Yazhong Liu) #1444
  • [deb9d23d7b] - test: fix error message check for openssl-1.0.2a (Shigeki Ohtsu) #1389
  • [ca8c9ec2c8] - win,node-gyp: optionally allow node.exe/iojs.exe to be renamed (Bert Belder) #1266

2015-04-14, Version 1.7.1, @rvagg

Notable changes

  • build: A syntax error in the Makefile for release builds caused 1.7.0 to be DOA and unreleased. (Rod Vagg) #1421.

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • readline: split escapes are processed incorrectly, see #1403

Commits

2015-04-14, Version 1.7.0, @rvagg

Notable changes

  • C++ API: Fedor Indutny contributed a feature to V8 which has been backported to the V8 bundled in io.js. SealHandleScope allows a C++ add-on author to seal a HandleScope to prevent further, unintended allocations within it. Currently only enabled for debug builds of io.js. This feature helped detect the leak in #1075 and is now activated on the root HandleScope in io.js. (Fedor Indutny) #1395.
  • ARM: This release includes significant work to improve the state of ARM support for builds and tests. The io.js CI cluster's ARMv6, ARMv7 and ARMv8 build servers are now all (mostly) reporting passing builds and tests.
    • ARMv8 64-bit (AARCH64) is now properly supported, including a backported fix in libuv that was mistakenly detecting the existence of epoll_wait(). (Ben Noordhuis) #1365.
    • ARMv6: #1376 reported a problem with Math.exp() on ARMv6 (incl Raspberry Pi). The culprit is erroneous codegen for ARMv6 when using the "fast math" feature of V8. --nofast_math has been turned on for all ARMv6 variants by default to avoid this, fast math can be turned back on with --fast_math. (Ben Noordhuis) #1398.
    • Tests: timeouts have been tuned specifically for slower platforms, detected as ARMv6 and ARMv7. (Roman Reiss) #1366.
  • npm: Upgrade npm to 2.7.6. See the release notes for details. Summary:
    • b747593#7630 Don't automatically log all git failures as errors. maybeGithub needs to be able to fail without logging to support its fallback logic. (@othiym23)
    • 78005eb#7743 Always quote arguments passed to npm run-script. This allows build systems and the like to safely escape glob patterns passed as arguments to run-scripts with npm run-script <script> -- <arguments>. This is a tricky change to test, and may be reverted or moved to npm@3 if it turns out it breaks things for users. (@mantoni)
    • da015ee#7074 read-package-json@1.3.3: read-package-json no longer caches package.json files, which trades a very small performance loss for the elimination of a large class of really annoying race conditions. See #7074 for the grisly details. (@othiym23)

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894
  • readline: split escapes are processed incorrectly, see #1403

Commits

  • [d2b62a4973] - benchmark: don't check wrk in non-http benchmark (Jackson Tian) #1368
  • [fd90b33b94] - build: validate options passed to configure (Johan Bergström) #1335
  • [04b02f5e34] - build: Remove deprecated flags (Johan Bergström) #1407
  • [39d395c966] - build: minor changes to fix rpm build (Dan Varga) #1408
  • [f9a2d31b32] - build: Simplify fetching release version (Johan Bergström) #1405
  • [cd38a4af8f] - build: support building io.js as a static library (Marat Abdullin) #1341
  • [d726a177ed] - build: Remove building against a shared V8 (Johan Bergström) #1331
  • [a5244d3a39] - (SEMVER-MINOR) deps: backport 1f8555 from v8's upstream (Fedor Indutny) #1395
  • [09d4a286ea] - deps: make node-gyp work with io.js (cjihrig) #990
  • [cc8376ae67] - deps: upgrade npm to 2.7.6 (Forrest L Norvell) #1390
  • [5b0e5755a0] - deps: generate opensslconf.h for architectures (Shigeki Ohtsu) #1377
  • [7d14aa0222] - deps: add Makefile to generate opensslconf.h (Shigeki Ohtsu) #1377
  • [29a3301461] - deps: make opensslconf.h include each target arch (Shigeki Ohtsu) #1377
  • [93a1a07ef4] - doc: remove keepAlive options from http.request (Jeremiah Senkpiel) #1392
  • [3ad6ea7c38] - doc: remove redundant parameter in end listener. (Alex Yursha) #1387
  • [2bc3532461] - doc: document Console class (Jackson Tian) #1388
  • [69bc1382b7] - doc: properly indent http.Agent keepAlive options (Jeremiah Senkpiel) #1384
  • [b464d467a2] - doc: update curl usage in COLLABORATOR_GUIDE (Roman Reiss) #1382
  • [61c0e7b70f] - doc: update CONTRIBUTING links. (Andrew Crites) #1380
  • [8d467e521c] - doc: add TC meeting 2015-03-18 minutes (Rod Vagg) #1370
  • [8ba9c4a7c2] - doc: add TC meeting 2015-04-01 minutes (Rod Vagg) #1371
  • [48facf93ad] - doc: update AUTHORS list (Rod Vagg) #1372
  • [1219e7466c] - lib: reduce process.binding() calls (Brendan Ashworth) #1367
  • [264a8f3a1b] - linux: fix epoll_pwait() fallback on arm64 (Ben Noordhuis) #1365
  • [f0bf6bb024] - readline: fix calling constructor without new (Alex Kocharin) #1385
  • [ff74931107] - smalloc: do not track external memory (Fedor Indutny) #1375
  • [a07c69113a] - (SEMVER-MINOR) src: use global SealHandleScope (Fedor Indutny) #1395
  • [a4d88475fa] - src: disable fast math only on armv6 (Ben Noordhuis) #1398
  • [e306c78f83] - src: disable fast math on arm (Ben Noordhuis) #1398
  • [7049d7b474] - test: increase timeouts on ARM (Roman Reiss) #1366
  • [3066f2c0c3] - test: double test timeout on arm machines (Ben Noordhuis) #1357
  • [66db9241cb] - tools: Remove unused files (Johan Bergström) #1406
  • [8bc8bd4bc2] - tools: add to install deps/openssl/config/archs (Shigeki Ohtsu) #1377
  • [907aaf325a] - win,node-gyp: optionally allow node.exe/iojs.exe to be renamed (Bert Belder) #1266
  • [372bf83818] - zlib: make constants keep readonly (Jackson Tian) #1361

2015-04-06, Version 1.6.4, @Fishrock123

Notable changes

  • npm: upgrade npm to 2.7.5. See npm CHANGELOG.md for details. Includes two important security fixes. Summary:
    • 300834e tar@2.0.0: Normalize symbolic links that point to targets outside the extraction root. This prevents packages containing symbolic links from overwriting targets outside the expected paths for a package. Thanks to Tim Cuthbertson and the team at Lift Security for working with the npm team to identify this issue. (@othiym23)
    • 0dc6875 semver@4.3.2: Package versions can be no more than 256 characters long. This prevents a situation in which parsing the version number can use exponentially more time and memory to parse, leading to a potential denial of service. Thanks to Adam Baldwin at Lift Security for bringing this to our attention. (@isaacs)
    • eab6184 #7766 One last tweak to ensure that GitHub shortcuts work with private repositories. (@iarna)
    • a840a13 #7746 Only fix up git URL paths when there are paths to fix up. (@othiym23)
  • openssl: preliminary work has been done for an upcoming upgrade to OpenSSL 1.0.2a #1325 (Shigeki Ohtsu). See #589 for additional details.
  • timers: a minor memory leak when timers are unreferenced was fixed, alongside some related timers issues #1330 (Fedor Indutny). This appears to have fixed the remaining leak reported in #1075.
  • android: it is now possible to compile io.js for Android and related devices #1307 (Giovanny Andres Gongora Granada).

Known issues

  • Some problems with unreferenced timers running during beforeExit are still to be resolved. See #1264.
  • Surrogate pair in REPL can freeze terminal #690
  • Not possible to build io.js as a static library #686
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894

Commits

2015-03-31, Version 1.6.3, @rvagg

Notable changes

  • fs: corruption can be caused by fs.writeFileSync() and append-mode fs.writeFile() and fs.writeFileSync() under certain circumstances, reported in #1058, fixed in #1063 (Olov Lassus).
  • iojs: an "internal modules" API has been introduced to allow core code to share JavaScript modules internally only without having to expose them as a public API, this feature is for core-only #848 (Vladimir Kurchatkin).
  • timers: two minor problems with timers have been fixed:
    • Timer#close() is now properly idempotent #1288 (Petka Antonov).
    • setTimeout() will only run the callback once now after an unref() during the callback #1231 (Roman Reiss).
    • NOTE: there are still other unresolved concerns with the timers code, such as #1152.
  • Windows: a "delay-load hook" has been added for compiled add-ons on Windows that should alleviate some of the problems that Windows users may be experiencing with add-ons in io.js #1251 (Bert Belder).
  • V8: minor bug-fix upgrade for V8 to 4.1.0.27.
  • npm: upgrade npm to 2.7.4. See npm CHANGELOG.md for details. Summary:
    • 1549106 #7641 Due to 448efd0, running npm shrinkwrap --dev caused production dependencies to no longer be included in npm-shrinkwrap.json. Whoopsie! (@othiym23)
    • fb0ac26 #7579 Only block removing files and links when we're sure npm isn't responsible for them. This change is hard to summarize, because if things are working correctly you should never see it, but if you want more context, just go read the commit message, which lays it all out. (@othiym23)
    • 051c473 #7552 bundledDependencies are now properly included in the installation context. This is another fantastically hard-to-summarize bug, and once again, I encourage you to read the commit message if you're curious about the details. The snappy takeaway is that this unbreaks many use cases for ember-cli. (@othiym23)
    • fe1bc38#7672 npm-registry-client@3.1.2: Fix client-side certificate handling by correcting property name. (@atamon)
    • 89ce829#7630 hosted-git-info@1.5.3: Part 3 of ensuring that GitHub shorthand is handled consistently. (@othiym23)
    • 63313eb#7630 realize-package-specifier@2.2.0: Part 2 of ensuring that GitHub shorthand is handled consistently. (@othiym23)
    • 3ed41bf#7630 npm-package-arg@3.1.1: Part 1 of ensuring that GitHub shorthand is handled consistently. (@othiym23)

Known issues

  • Some problems exist with timers and unref() still to be resolved. See #1152.
  • Possible small memory leak(s) may still exist but have yet to be properly identified, details at #1075.
  • Surrogate pair in REPL can freeze terminal #690
  • Not possible to build io.js as a static library #686
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894

Commits

  • [7dd5e824be] - assert: simplify logic of testing buffer equality (Alex Yursha) #1171
  • [a2ea16838f] - debugger: don't spawn child process in remote mode (Jackson Tian) #1282
  • [2752da4b64] - deps: make node-gyp work with io.js (cjihrig) #990
  • [f166cdecf1] - deps: upgrade npm to 2.7.4 (Forrest L Norvell)
  • [318d9d8fd7] - deps: upgrade v8 to 4.1.0.27 (Ben Noordhuis) #1289
  • [269e46be37] - deps: make node-gyp work with io.js (cjihrig) #990
  • [b542fb94a4] - deps: upgrade npm to 2.7.3 (Forrest L Norvell) #1219
  • [73de13511d] - doc: add WG links in WORKING_GROUPS.md & fix nits (Farrin Reid) #1113
  • [19641b17be] - doc: decouple sidebar scrolling (Roman Reiss) #1274
  • [dbccf8d3ed] - doc: fix spelling error in feature flags (Phillip Lamplugh) #1286
  • [5e609e9324] - Revert "doc: clarify real name requirement" (Jeremiah Senkpiel) #1276
  • [45814216ee] - doc: fix format docs discrepancy (Brendan Ashworth) #1255
  • [4e9bf93e9c] - doc: clarify real name requirement (Roman Reiss) #1250
  • [e84dd5f651] - doc: document repl on-demand module loading (Roman Reiss) #1249
  • [c9207f7fc2] - fs: fix corruption in writeFile and writeFileSync (Olov Lassus) #1063
  • [2db758c562] - iojs: introduce internal modules (Vladimir Kurchatkin) #848
  • [36f017afaf] - js2c: fix module id generation on windows (Ben Noordhuis) #1281
  • [1832743e18] - lib: add missing new for errors lib/*.js (Mayhem) #1246
  • [ea37ac04f4] - src: ignore ENOTCONN on shutdown race with child (Ben Noordhuis) #1214
  • [f06b16f2e9] - src: fix minor memleak in preload-modules (Ali Ijaz Sheikh) #1265
  • [2903410aa8] - src: don't lazy-load timer globals (Ben Noordhuis) #1280
  • [2e5b87a147] - src: remove unnecessary environment lookups (Ben Noordhuis) #1238
  • [7e88a9322c] - src: make accessors immune to context confusion (Ben Noordhuis) #1238
  • [c8fa8ccdbc] - streams: use strict on _stream_wrap (Brendan Ashworth) #1279
  • [8a945814dd] - string_decoder: optimize write() (Brian White) #1209
  • [8d1c87ea0a] - test: fix race in parallel/test-vm-debug-context (Ben Noordhuis) #1294
  • [955c1508da] - test: reduce sequential/test-fs-watch flakiness (Roman Reiss) #1275
  • [77c2da10fd] - timers: make Timer.close idempotent (Petka Antonov) #1288
  • [776b73b243] - timers: cleanup interval handling (Jeremiah Senkpiel) #1272
  • [caf0b36de3] - timers: assure setTimeout callback only runs once (Roman Reiss) #1231
  • [2ccc8f3970] - tls_wrap: fix this incredibly stupid leak (Fedor Indutny) #1244
  • [e74b5d278c] - tls_wrap: fix BIO leak on SSL error (Fedor Indutny) #1244
  • [ba93c583bc] - win,node-gyp: optionally allow node.exe/iojs.exe to be renamed (Bert Belder) #1266
  • [08acf1352c] - win,node-gyp: make delay-load hook optional (Bert Belder) #1266
  • [3d46fefe0c] - win,node-gyp: allow node.exe/iojs.exe to be renamed (Bert Belder) #1251

2015-03-31, Version 0.12.2 (Stable)

Commits

  • [7a37910f25] - uv: Upgrade to 1.4.2 #9179
  • [2704c62933] - npm: Upgrade to 2.7.4 #14180
  • [a103712a62] - V8: do not add extra newline in log file (Julien Gilli)
  • [2fc5eeb3da] - V8: Fix --max_old_space_size=4096 integer overflow (Andrei Sedoi) #9200
  • [605329d7f7] - asyncwrap: fix constructor condition for early ret (Trevor Norris) #9146
  • [a33f23cbbc] - buffer: align chunks on 8-byte boundary (Fedor Indutny) #9375
  • [a35ba2f67d] - buffer: fix pool offset adjustment (Trevor Norris)
  • [c0766eb1a4] - build: fix use of strict aliasing (Trevor Norris) #9179
  • [6c3647c38d] - console: allow Object.prototype fields as labels (Colin Ihrig) #9116
  • [4823afcbe2] - fs: make F_OK/R_OK/W_OK/X_OK not writable (Jackson Tian) #9060
  • [b3aa876f08] - fs: properly handle fd passed to truncate() (Bruno Jouhier) #9161
  • [d6484f3f7b] - http: fix assert on data/end after socket error (Fedor Indutny) #14087
  • [04b63e022a] - lib: fix max size check in Buffer constructor (Ben Noordhuis) #657
  • [2411bea0df] - lib: fix stdio/ipc sync i/o regression (Ben Noordhuis) #9179
  • [b8604fa480] - module: replace NativeModule.require (Herbert Vojčík) #9201
  • [1a2a4dac23] - net: allow port 0 in connect() (cjihrig) #9268
  • [bada87bd66] - net: unref timer in parent sockets (Fedor Indutny) #891
  • [c66f8c21f0] - path: refactor for performance and consistency (Nathan Woltman) #9289
  • [9deade4322] - smalloc: extend user API (Trevor Norris) #905
  • [61fe1fe21b] - src: fix for SIGINT crash on FreeBSD (Fedor Indutny) #14184
  • [b233131901] - src: fix builtin modules failing with --use-strict (Julien Gilli) #9237
  • [7e9d2f8de8] - watchdog: fix timeout for early polling return (Saúl Ibarra Corretgé) #9410

2015-03-23, Version 1.6.2, @rvagg

Notable changes

  • Windows: The ongoing work in improving the state of Windows support has resulted in full test suite passes once again. As noted in the release notes for v1.4.2, CI system and configuration problems prevented it from properly reporting problems with the Windows tests, the problems with the CI and the codebase appear to have been fully resolved.
  • FreeBSD: A kernel bug impacting io.js/Node.js was discovered and a patch has been introduced to prevent it causing problems for io.js (Fedor Indutny) #1218.
  • module: you can now require('.') instead of having to require('./'), this is considered a bugfix (Michaël Zasso) #1185.
  • v8: updated to 4.1.0.25 including patches for --max_old_space_size values above 4096 and Solaris support, both of which are already included in io.js.

Known issues

  • Possible small memory leak(s) may still exist but have yet to be properly identified, details at #1075.
  • Surrogate pair in REPL can freeze terminal #690
  • Not possible to build io.js as a static library #686
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894

Commits

  • [fe4434b77a] - deps: upgrade v8 to 4.1.0.25 (Johan Bergström) #1224
  • [d8f383ba3f] - doc: update AUTHORS list (Rod Vagg) #1234
  • [bc9c1a5a7b] - doc: fix typo in CHANGELOG (Mathieu Darse) #1230
  • [99c79f8d41] - doc: call js function in null context (Ben Noordhuis) #1125
  • [55abf34be5] - doc: don't use using namespace v8 (Ben Noordhuis) #1125
  • [c4e1b82120] - doc: replace v8::Handle with v8::Local (Ben Noordhuis) #1125
  • [2f1b78347c] - doc: remove unnecessary v8::HandleScopes (Ben Noordhuis) #1125
  • [409d413363] - doc: remove uses of v8::Isolate::GetCurrent() (Ben Noordhuis) #1125
  • [33fea6ed5f] - lib: don't penalize setInterval() common case (Ben Noordhuis) #1221
  • [31da9758a0] - lib: don't penalize setTimeout() common case (Ben Noordhuis) #1221
  • [6fc5e95354] - module: allow require('.') (Michaël Zasso) #1185
  • [9ae1a61214] - node: ensure that streams2 won't .end() stdin (Fedor Indutny) #1233
  • [b64983d77c] - src: reset signal handler to SIG_DFL on FreeBSD (Fedor Indutny) #1218
  • [9705a34e96] - test: move sequential/test-signal-unregister (Ben Noordhuis) #1227
  • [10a9c00563] - test: fix timing issue in signal test (Ben Noordhuis) #1227
  • [999fbe9d96] - test: fix crypto-binary-default bad crypto check (Brendan Ashworth) #1141
  • [2b3b2d392f] - test: add setTimeout/setInterval multi-arg tests (Ben Noordhuis) #1221
  • [849319a260] - util: Check input to util.inherits (Connor Peet) #1240
  • [cf081a4712] - vm: fix crash on fatal error in debug context (Ben Noordhuis) #1229

2015-03-23, Version 0.12.1 (Stable)

Commits

  • [3b511a8ccd] - openssl: upgrade to 1.0.1m (Addressing multiple CVES)

2015-03-23, Version 0.10.38 (Maintenance)

Commits

  • [3b511a8ccd] - openssl: upgrade to 1.0.1m (Addressing multiple CVES)

2015-03-20, Version 1.6.1, @rvagg

Notable changes

  • path: New type-checking on path.resolve() #1153 uncovered some edge-cases being relied upon in the wild, most notably path.dirname(undefined). Type-checking has been loosened for path.dirname(), path.basename(), and path.extname() (Colin Ihrig) #1216.
  • querystring: Internal optimizations in querystring.parse() and querystring.stringify() #847 prevented Number literals from being properly converted via querystring.escape() #1208, exposing a blind-spot in the test suite. The bug and the tests have now been fixed (Jeremiah Senkpiel) #1213.

Known issues

  • Possible remaining TLS-related memory leak(s), details at #1075.
  • Surrogate pair in REPL can freeze terminal #690
  • Not possible to build io.js as a static library #686
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894

Commits

  • [3b9eab9779] - build: make check aliases test (Johan Bergström) #1211
  • [4c731042d4] - configure: use cc and c++ as defaults on os x (Ben Noordhuis) #1210
  • [8de78e470d] - path: reduce type checking on some methods (cjihrig) #1216
  • [c9aec2b716] - querystring: fix broken stringifyPrimitive (Jeremiah Senkpiel) #1213
  • [a89f5c2156] - querystring: parse numbers correctly (Jeremiah Senkpiel) #1213
  • [2034137385] - smalloc: don't mix malloc() and new char[] (Ben Noordhuis) #1205

2015-03-19, Version 1.6.0, @chrisdickinson

Notable changes

  • node: a new -r or --require command-line option can be used to pre-load modules at start-up (Ali Ijaz Sheikh) #881.
  • querystring: parse() and stringify() are now faster (Brian White) #847.
  • http: the http.ClientRequest#flush() method has been deprecated and replaced with http.ClientRequest#flushHeaders() to match the same change now in Node.js v0.12 as per joyent/node#9048 (Yosuke Furukawa) #1156.
  • net: allow server.listen() to accept a String option for port, e.g. { port: "1234" }, to match the same option being accepted in net.connect() as of joyent/node#9268 (Ben Noordhuis) #1116.
  • tls: further work on the reported memory leak although there appears to be a minor leak remaining for the use-case in question, track progress at #1075.
  • v8: backport a fix for an integer overflow when --max_old_space_size values above 4096 are used (Ben Noordhuis) #1166.
  • platforms: the io.js CI system now reports passes on FreeBSD and SmartOS (Solaris).
  • npm: upgrade npm to 2.7.1. See npm CHANGELOG.md for details. Summary:
    • 6823807 #7121 npm install --save for Git dependencies saves the URL passed in, instead of the temporary directory used to clone the remote repo. Fixes using Git dependencies when shrinkwwapping. In the process, rewrote the Git dependency caching code. Again. No more single-letter variable names, and a much clearer workflow. (@othiym23)
    • abdd040 read-package-json@1.3.2: Provide more helpful error messages when JSON parse errors are encountered by using a more forgiving JSON parser than JSON.parse. (@smikes)
    • c56cfcd #7525 npm dedupe handles scoped packages. (@KidkArolis)
    • 4ef1412 #7075 If you try to tag a release as a valid semver range, npm publish and npm tag will error early instead of proceeding. (@smikes)

Known issues

  • Possible remaining TLS-related memory leak(s), details at #1075.
  • Surrogate pair in REPL can freeze terminal #690
  • Not possible to build io.js as a static library #686
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894

Commits

  • [a84ea66b35] - deps: upgrade to openssl-1.0.1m (Shigeki Ohtsu) #1206
  • [3bc445f6c2] - doc: fix a broken collaborator github link (Aleksanteri Negru-Vode) #1204
  • [813a536126] - buffer: removing duplicate code (Thorsten Lorenz) #1144
  • [1514b82355] - (SEMVER-MINOR) src: add -r/--require flags for preloading modules (Ali Ijaz Sheikh) #881
  • [f600111d82] - test: cache lazy properties, fix style nits (Rod Vagg) #1196
  • [3038b8ee6a] - test: double timeout in tls-wrap-timeout.js (Fedor Indutny) #1201
  • [dd37fb4c48] - build: remove incorrect argument in vcbuild.bat (Jeremiah Senkpiel) #1198
  • [2b2e48a4b9] - lib: don't error in repl when cwd doesn't exist (Ben Noordhuis) #1194
  • [2c6f79c08c] - src: don't error at startup when cwd doesn't exist (Ben Noordhuis) #1194
  • [c15e81afdd] - test: Introduce knowledge of FreeBSD jails (Johan Bergström) #1167
  • [fe0f015c51] - src: fix crypto bio integer wraparound on 32 bits (Ben Noordhuis) #1192
  • [2b63bcd247] - doc: add yosuke-furukawa as collaborator (Yosuke Furukawa) #1183
  • [69350baaef] - doc: update test section in CONTRIBUTING.md (Ben Noordhuis) #1181
  • [3c8ae2d934] - doc: add petkaantonov as collaborator (Petka Antonov) #1179
  • [92c1ad97c0] - doc: add silverwind as collaborator (Roman Reiss) #1176
  • [14c74d5326] - doc: add jbergstroem as collaborator (Johan Bergström) #1175
  • [8b2363d2fd] - configure: use gcc and g++ as CC and CXX defaults (Ben Noordhuis) #1174
  • [08ec897f82] - doc: fix typo in buffer module documentation (Alex Yursha) #1169
  • [c638dad567] - benchmark: add output format option [csv] (Brendan Ashworth) #777
  • [97d8d4928d] - benchmark: add plot_csv R graphing script (Brendan Ashworth) #777
  • [22793da485] - v8: fix --max_old_space_size=4096 integer overflow (Ben Noordhuis) #1166
  • [b2e00e38dc] - (SEMVER-MINOR) http: add flushHeaders and deprecate flush (Yosuke Furukawa) #1156
  • [68d4bed2fd] - make: remove node_dtrace from cpplint excludes (Julien Gilli) joyent/node#8741
  • [30666f22ca] - net: use cached peername to resolve remote fields (James Hartig) joyent/node#9366
  • [e6e616fdcb] - doc: fix '\' typos on Windows (Steven Vercruysse) joyent/node#9412
  • [89bf6c05e9] - build: allow custom PackageMaker path (Julien Gilli) joyent/node#9377
  • [f58e59649d] - lib: remove broken NODE_MODULE_CONTEXTS feature (Ben Noordhuis) #1162
  • [2551c1d2ca] - src: use Number::New() for heapTotal/heapUsed (Ben Noordhuis) #1148
  • [4f394998ba] - src: don't create js string twice on error (Ben Noordhuis) #1148
  • [eb995d6822] - path: add type checking for path inputs (cjihrig) #1153
  • [a28945b128] - doc: reflect new require('events') behaviour (Alex Yursha) #975
  • [85a92a37ef] - querystring: optimize parse and stringify (Brian White) #847
  • [65d0a8eca8] - deps: make node-gyp work with io.js (cjihrig) #990
  • [7d0baf1741] - deps: upgrade npm to 2.7.1 (Forrest L Norvell) #1142
  • [4eb8810a27] - tls: re-enable .writev() on TLSWrap (Fedor Indutny) #1155
  • [e90ed790c3] - tls: fix leak on DoWrite() errors (Fedor Indutny) #1154
  • [056ed4b0c9] - src: revert -r/--require flags (Chris Dickinson) #1150
  • [7a5b023bac] - doc: fix vm module examples (FangDun Cai) #1147
  • [7bde3f1a8f] - (SEMVER-MINOR) src: add -r/--require flags for preloading modules (Ali Ijaz Sheikh) #881
  • [53e200acc2] - test: fix test-http-content-length (Jeremiah Senkpiel) #1145
  • [d8c4a932c9] - crypto: add deprecated ValiCert CA for cross cert (Shigeki Ohtsu) #1135
  • [82f067e60b] - test: fix ext commands to be double quoted (Shigeki Ohtsu) #1122
  • [5ecdc0314d] - test: add test for reading a large file through a pipe (Santiago Gimeno) #1074
  • [a6af709489] - fs: use stat.st_size only to read regular files (Santiago Gimeno) #1074
  • [0782c24993] - test: fix readfile-zero-byte-liar test (Santiago Gimeno) #1074
  • [e2c9040995] - src: do not leak handles on debug and exit (Fedor Indutny) #1133
  • [8c4f0df464] - v8: fix build on solaris platforms (Johan Bergström) #1079
  • [41c9daa143] - build: fix incorrect set in vcbuild.bat (Bert Belder)
  • [07c066724c] - buffer: align chunks on 8-byte boundary (Fedor Indutny) #1126
  • [d33a647b4b] - doc: make tools/update-authors.sh cross-platform (Ben Noordhuis) #1121
  • [8453fbc879] - https: don't overwrite servername option (skenqbx) #1110
  • [60dac07b06] - doc: add Malte-Thorben Bruns to .mailmap (Ben Noordhuis) #1118
  • [480b48244f] - (SEMVER-MINOR) lib: allow server.listen({ port: "1234" }) (Ben Noordhuis) #1116
  • [80e14d736e] - doc: move checkServerIdentity option to tls.connect() (skenqbx) #1107
  • [684a5878b6] - doc: fix missing periods in url.markdown (Ryuichi Okumura) #1115
  • [8431fc53f1] - tls_wrap: proxy handle methods in prototype (Fedor Indutny) #1108
  • [8070b1ff99] - buffer: Don't assign .parent if none exists (Trevor Norris) #1109

2015-03-11, Version 0.10.37 (Maintenance)

Commits

  • [dcff5d565c] - uv: update to 0.10.36 (CVE-2015-0278) #9274
  • [f2a45caf2e] - domains: fix stack clearing after error handled (Jonas Dohse) #9364
  • [d01a900078] - buffer: reword Buffer.concat error message (Chris Dickinson) #8723
  • [c8239c08d7] - console: allow Object.prototype fields as labels (Julien Gilli) #9215
  • [431eb172f9] - V8: log version in profiler log file (Ben Noordhuis) #9043
  • [8bcd0a4c4a] - http: fix performance regression for GET requests (Florin-Cristian Gavrila) #9026

2015-03-09, Version 1.5.1, @rvagg

Notable changes

  • tls: The reported TLS memory leak has been at least partially resolved via various commits in this release. Current testing indicated that there may still be some leak problems. Track complete progress at #1075.
  • http: Fixed an error reported at joyent/node#9348 and npm/npm#7349. Pending data was not being fully read upon an 'error' event leading to an assertion failure on socket.destroy(). (Fedor Indutny) #1103

Known issues

  • Possible remaining TLS-related memory leak(s), details at #1075.
  • Windows still reports some minor test failures and we are continuing to address all of these as a priority. See #1005.
  • Surrogate pair in REPL can freeze terminal #690
  • Not possible to build io.js as a static library #686
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894

Commits

  • [030a92347d] - benchmark: chunky http client benchmark variation (Rudi Cilibrasi) #228
  • [3b57819b58] - crypto: fix leak in SafeX509ExtPrint (Fedor Indutny) #1087
  • [f8c893dd39] - doc: fix confusion markdown in util.markdown (Yazhong Liu) #1097
  • [e763220f66] - doc: update clang version prerequisite (Brendan Ashworth) #1094
  • [0f7c8ebeea] - doc: replace article "an" with "a" in net docs (Evan Lucas) #1093
  • [cf565b5516] - fs: fix .write() not coercing non-string values (Jeremiah Senkpiel) #1102
  • [1a3ca8223e] - http_client: ensure empty socket on error (Fedor Indutny) #1103
  • [8670613d2d] - node_crypto_bio: adjust external memory size (Fedor Indutny) #1085
  • [528d8786ff] - src: fix memory leak in fs.writeSync error path (Ben Noordhuis) #1092
  • [648fc63cd1] - src: fix mismatched delete[] in src/node_file.cc (Ben Noordhuis) #1092
  • [9f7c9811e2] - src: add missing Context::Scope (Ben Noordhuis) #1084
  • [fe36076c78] - stream_base: WriteWrap::New/::Dispose (Fedor Indutny) #1090
  • [7f4c95e160] - tls: do not leak WriteWrap objects (Fedor Indutny) #1090
  • [4bd3620382] - url: remove redundant assignment in url.parse (Alex Kocharin) #1095

2015-03-06, Version 1.5.0, @rvagg

Notable changes

  • buffer: New Buffer#indexOf() method, modelled off Array#indexOf(). Accepts a String, Buffer or a Number. Strings are interpreted as UTF8. (Trevor Norris) #561
  • fs: options object properties in 'fs' methods no longer perform a hasOwnProperty() check, thereby allowing options objects to have prototype properties that apply. (Jonathan Ong) #635
  • tls: A likely TLS memory leak was reported by PayPal. Some of the recent changes in stream_wrap appear to be to blame. The initial fix is in #1078, you can track the progress toward closing the leak at #1075 (Fedor Indutny).
  • npm: Upgrade npm to 2.7.0. See npm CHANGELOG.md for details including why this is a semver-minor when it could have been semver-major. Summary:
    • 145af65 #4887 Replace calls to the node-gyp script bundled with npm by passing the --node-gyp=/path/to/node-gyp option to npm. Swap in pangyp or a version of node-gyp modified to work better with io.js without having to touch npm's code! (@ackalker)
    • 2f6a1df #1999 Only run stop and start scripts (plus their pre- and post- scripts) when there's no restart script defined. This makes it easier to support graceful restarts of services managed by npm. (@watilde / @scien)
    • 448efd0 #2853 Add support for --dev and --prod to npm ls, so that you can list only the trees of production or development dependencies, as desired. (@watilde)
    • a0a8777 #7463 Split the list printed by npm run-script into lifecycle scripts and scripts directly invoked via npm run-script. (@watilde)
    • a5edc17 #6749 init-package-json@1.3.1: Support for passing scopes to npm init so packages are initialized as part of that scope / organization / team. (@watilde)
  • TC: Colin Ihrig (@cjihrig) resigned from the TC due to his desire to do more code and fewer meetings.

Known issues

  • Possible TLS-related memory leak, details at #1075.
  • Windows still reports some minor test failures and we are continuing to address all of these as a priority. See #1005.
  • Surrogate pair in REPL can freeze terminal #690
  • Not possible to build io.js as a static library #686
  • process.send() is not synchronous as the docs suggest, a regression introduced in 1.0.2, see #760 and fix in #774
  • Calling dns.setServers() while a DNS query is in progress can cause the process to crash on a failed assertion #894

Commits

  • [b27931b0fe] - benchmark: fix wrk check (Brian White) #1076
  • [2b79052494] - benchmark: check for wrk ahead of running benchmarks (Johan Bergström) #982
  • [31421afe89] - buffer: reword Buffer.concat error message (Chris Dickinson) joyent/node#8723
  • [78581c8d90] - (SEMVER-MINOR) buffer: add indexOf() method (Trevor Norris) #561
  • [37bb1df7c4] - build: remove mdb from io.js (Johan Bergström) #1023
  • [726671cb0e] - build: add basic mips/mipsel support (Ben Noordhuis) #1045
  • [a45d4f8fd6] - build: remove tools/wrk from the tree (Johan Bergström) #982
  • [dee07e2983] - deps: make node-gyp work with io.js (cjihrig) #990
  • [fe14802fb7] - deps: upgrade npm to 2.7.0 (Forrest L Norvell) #1080
  • [31142415de] - doc: add TC meeting 2015-02-18 minutes (Rod Vagg) #1051
  • [6190a2236b] - doc: remove cjihrig from TC (cjihrig) #1056
  • [9741291fe9] - doc: fix child_process heading depth (Sam Roberts) #1038
  • [c8110692a5] - doc: add explanations for querystring (Robert Kowalski) joyent/node#9259
  • [8fb711e06c] - doc: fix default value of opts.decodeURIComponent (h7lin) joyent/node#9259
  • [6433ad1eef] - doc: add missing newline in CHANGELOG (Rod Vagg)
  • [555a7c48cf] - events: optimize listener array cloning (Brian White) #1050
  • [4d0329ebeb] - (SEMVER-MINOR) fs: remove unnecessary usage of .hasOwnProperty() (Jonathan Ong) #635
  • [4874182065] - http: send Content-Length when possible (Christian Tellnes) #1062
  • [08133f45c7] - http: optimize outgoing requests (Brendan Ashworth) #605
  • [dccb69a21a] - js_stream: fix leak of instances (Fedor Indutny) #1078
  • [4ddd6406ce] - lib: avoid .toLowerCase() call in Buffer#write() (Ben Noordhuis) #1048
  • [bbf54a554a] - lib: hand-optimize Buffer constructor (Ben Noordhuis) #1048
  • [9d2b89d06c] - net: allow port 0 in connect() (cjihrig) joyent/node#9268
  • [e0835c9cda] - node: improve performance of nextTick (Trevor Norris) #985
  • [8f5f12bb48] - smalloc: export constants from C++ (Vladimir Kurchatkin) #920
  • [0697f8b44d] - smalloc: validate arguments in js (Vladimir Kurchatkin) #920
  • [1640dedb3b] - src: fix ucs-2 buffer encoding regression (Ben Noordhuis) #1042
  • [2eda2d6096] - src: fix external string length calculation (Ben Noordhuis) #1042
  • [4aea16f214] - src: rename confusingly named local variable (Ben Noordhuis) #1042
  • [c9ee654290] - src: simplify node::Utf8Value() (Ben Noordhuis) #1042
  • [364cc7e08a] - src: remove NODE_INVALID_UTF8 environment variable (Ben Noordhuis) #1042
  • [826cde8661] - src: fix gc heuristic for external twobyte strings (Ben Noordhuis) #1042
  • [f5b7e18243] - src: remove unused code (Ben Noordhuis) #1042
  • [4ae64b2626] - src: extract node env init out of process init (Petka Antonov) #980
  • [b150c9839e] - src: fix -Wempty-body compiler warnings (Ben Noordhuis) #974
  • [fb284e2e4d] - src: fix compiler warning in smalloc.cc (Ben Noordhuis) #1055
  • [583a868bcd] - stream_wrap: add HandleScope's in uv callbacks (Fedor Indutny) #1078
  • [e2fb733a95] - test: simplify parallel/test-stringbytes-external (Ben Noordhuis) #1042
  • [7b554b1a8f] - test: don't spawn child processes in domain test (Ben Noordhuis) #974
  • [b72fa03057] - test: adds a test for undefined value in setHeader (Ken Perkins) #970
  • [563771d8b1] - test: split parts out of host-headers test into its own test (Johan Bergström) #1049
  • [671fbd5a9d] - test: refactor all tests that depends on crypto (Johan Bergström) #1049
  • [c7ad320472] - test: check for openssl cli and provide path if it exists (Johan Bergström) #1049
  • [71776f9057] - test: remove unused