Skip to content

2026-04-01, Version 25.9.0 (Current)#62522

Open
github-actions[bot] wants to merge 103 commits intov25.xfrom
v25.9.0-proposal
Open

2026-04-01, Version 25.9.0 (Current)#62522
github-actions[bot] wants to merge 103 commits intov25.xfrom
v25.9.0-proposal

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions bot commented Mar 31, 2026

  • [312476cb84] - (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger) #61674
  • [bfff8cb2ab] - (SEMVER-MINOR) benchmark: add benchmarks for experimental stream/iter (James M Snell) #62066
  • [62d2cd473b] - (SEMVER-MINOR) cli: add --max-heap-size option (tannal) #58708
  • [d0ebf0e44b] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #62183
  • [f85b9d9fa8] - (SEMVER-MINOR) repl: add customizable error handling (Anna Henningsen) #62188
  • [67b854d407] - (SEMVER-MINOR) repl: remove dependency on domain module (Matteo Collina) #61227
  • [966b700623] - (SEMVER-MINOR) sea: support code cache for ESM entrypoint in SEA (Joyee Cheung) #62158
  • [e1f0d2a014] - (SEMVER-MINOR) stream: add stream/iter Implementation (James M Snell) #62066
  • [fd41ef31f6] - (SEMVER-MINOR) test: add tests for experimental stream/iter implementation (James M Snell) #62066
  • [2c63d3006c] - test_runner: add exports option for module mocks (sangwook) #61727
Commits
  • [312476cb84] - (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger) #61674
  • [bfff8cb2ab] - (SEMVER-MINOR) benchmark: add benchmarks for experimental stream/iter (James M Snell) #62066
  • [c721d68502] - benchmark: fix destructuring in dgram/single-buffer (Ali Hassan) #62084
  • [e2f03c8e92] - buffer: improve performance of multiple Buffer operations (Ali Hassan) #61871
  • [2fcd07f1ba] - build: support empty libname flags in configure.py (Antoine du Hamel) #62477
  • [b800c57fce] - build: fix timezone-update path references (Chengzhong Wu) #62280
  • [7dc5a1e9b4] - build: skip dockit on IBMi (SRAVANI GUNDEPALLI) #62189
  • [f0eea0f905] - build: fix --node-builtin-modules-path (Filip Skokan) #62115
  • [62d2cd473b] - (SEMVER-MINOR) cli: add --max-heap-size option (tannal) #58708
  • [ac4b485698] - crypto: update root certificates to NSS 3.121 (Node.js GitHub Bot) #62485
  • [d0ebf0e44b] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #62183
  • [3009980d9d] - crypto: add crypto::GetSSLCtx API for addon access to OpenSSL contexts (Tim Perry) #62254
  • [f5725ca81d] - crypto: reject ML-KEM/ML-DSA PKCS#8 import without seed in SubtleCrypto (Filip Skokan) #62218
  • [f69ed4bc3f] - crypto: rename CShakeParams and KmacParams length to outputLength (Filip Skokan) #61875
  • [4d96e53570] - crypto: refactor WebCrypto AEAD algorithms auth tag handling (Filip Skokan) #62169
  • [93d77719e8] - crypto: read algorithm name property only once in normalizeAlgorithm (Filip Skokan) #62170
  • [3d2e23a981] - deps: update ada to 3.4.4 (Node.js GitHub Bot) #62414
  • [176d6d2205] - deps: update timezone to 2026a (Node.js GitHub Bot) #62164
  • [95c7fc67ba] - deps: update googletest to 2461743991f9aa53e9a3625eafcbacd81a3c74cd (Node.js GitHub Bot) #62484
  • [e5e9f2044a] - deps: update simdjson to 4.5.0 (Node.js GitHub Bot) #62382
  • [905b94266a] - deps: update ngtcp2 to 1.21.0 (Node.js GitHub Bot) #62051
  • [180c150122] - deps: V8: cherry-pick cf1bce40a5ef (Richard Lau) #62449
  • [bc265aa003] - deps: upgrade npm to 11.12.1 (npm team) #62448
  • [f1b28612c4] - deps: V8: cherry-pick b25cd62c7ba2 (Yagiz Nizipli) #62354
  • [757719d2af] - deps: disable rust icu compiled_data features (Chengzhong Wu) #62284
  • [3bdc955b63] - deps: update sqlite to 3.51.3 (Node.js GitHub Bot) #62256
  • [a9703d194a] - deps: update googletest to 73a63ea05dc8ca29ec1d2c1d66481dd0de1950f1 (Node.js GitHub Bot) #61927
  • [85138935cb] - deps: update merve to 1.2.2 (Node.js GitHub Bot) #62213
  • [231521e75e] - diagnostics_channel: add diagnostics channels for web locks (Ilyas Shabi) #62123
  • [08ff16e0ba] - doc: move sqlite type conversion section to correct level (René) #62482
  • [61cc747dd8] - doc: add Rafael to last security release steward (Rafael Gonzaga) #62423
  • [64cfa5a6fa] - doc: use npm-published version of doc-kit (Aviv Keller) #62139
  • [1020321fb0] - doc: fix overstated Date header requirement in response.sendDate (Kit Dallege) #62206
  • [9caa7855b2] - doc: fix guaranteed typo (lilianakatrina684-a11y) #62374
  • [e254f65306] - doc: enhance clarification about the main field (Mowafak Almahaini) #62302
  • [9e724b53f8] - doc: remove spawn with shell example from bat/cmd section (Kit Dallege) #62243
  • [7f37c17516] - doc: minor typo fix (Jeff Matson) #62358
  • [eb0ca98f01] - doc: add path to vulnerabilities.json mention (Rafael Gonzaga) #62355
  • [198b6e0932] - doc: deprecate CryptoKey use in node:crypto (Filip Skokan) #62321
  • [17e5aee6c5] - doc: fix small environment_variables typo (chris) #62279
  • [193d629895] - doc: test and test-only targets do not run linter (Xavier Stouder) #62120
  • [4a1f20ec4a] - doc: clarify fs.ReadStream and fs.WriteStream are not constructable (Kit Dallege) #62208
  • [f976c9214d] - doc: clarify that any truthy value of shell is part of DEP0190 (Antoine du Hamel) #62249
  • [4d83972681] - doc: remove outdated Chrome 66 and ndb references from debugger (Kit Dallege) #62202
  • [71f2eada5b] - doc: add throwIfNoEntry version history to fs.stat (kovan) #62204
  • [670c80893b] - doc: add note (and caveat) for mock.module about customization hooks (Jacob Smith) #62075
  • [2ff5cb13f5] - doc,test: clarify --eval syntax for leading '-' scripts (kovan) #62244
  • [6c6c9004c4] - esm: fix typo in worker loader hook comment (jakecastelli) #62475
  • [1cdd23c9f3] - esm: fix source phase identity bug in loadCache eviction (Guy Bedford) #62415
  • [4f4ff15794] - esm: fix path normalization in finalizeResolution (Antoine du Hamel) #62080
  • [088167d102] - events: avoid cloning listeners array on every emit (Gürgün Dayıoğlu) #62261
  • [0250b436ee] - fs: fix cpSync to handle non-ASCII characters (Stefan Stojanovic) #61950
  • [b67a8fb171] - inspector: add Target.getTargets and extract TargetManager (Kohei) #62487
  • [ffcc5a5722] - lib: make SubtleCrypto.supports enumerable (Filip Skokan) #62307
  • [92ef2ad8fa] - lib: prefer primordials in SubtleCrypto (Filip Skokan) #62226
  • [40a43ac4d0] - module: fix coverage of mocked CJS modules imported from ESM (Marco) #62133
  • [3ef0a5b90e] - quic: remove CryptoKey support from session keys option (Filip Skokan) #62335
  • [3c8dd8eb8e] - repl: use vm DONT_CONTEXTIFY context (Chengzhong Wu) #62371
  • [f85b9d9fa8] - (SEMVER-MINOR) repl: add customizable error handling (Anna Henningsen) #62188
  • [e4c164e045] - repl: handle exceptions from async context after close (Anna Henningsen) #62165
  • [67b854d407] - (SEMVER-MINOR) repl: remove dependency on domain module (Matteo Collina) #61227
  • [966b700623] - (SEMVER-MINOR) sea: support code cache for ESM entrypoint in SEA (Joyee Cheung) #62158
  • [fe82baf970] - src: improve EC JWK import performance (Filip Skokan) #62396
  • [d490b171e0] - src: handle null backing store in ArrayBufferViewContents::Read (Mert Can Altin) #62343
  • [0e4af848bc] - src: convert context_frame field in AsyncWrap to internal field (Anna Henningsen) #62103
  • [02980b8c8f] - src: enable compilation/linking with OpenSSL 4.0 (Filip Skokan) #62410
  • [064f7c2fa6] - src: use stack allocation in indexOf latin1 path (Mert Can Altin) #62268
  • [ede52bc2dc] - src,sqlite: fix filterFunc dangling reference (Edy Silva) #62281
  • [e1f0d2a014] - (SEMVER-MINOR) stream: add stream/iter Implementation (James M Snell) #62066
  • [03839fb087] - stream: preserve error over AbortError in pipeline (Marco) #62113
  • [0000d2f011] - stream: replace bind with arrow function for onwrite callback (Ali Hassan) #62087
  • [3796a73719] - test: update WPT for WebCryptoAPI to 2cb332d710 (Node.js GitHub Bot) #62483
  • [ad8309415b] - test: update WPT for url to fc3e651593 (Node.js GitHub Bot) #62379
  • [bed89b037e] - test: wait for reattach before initial break on restart (Yuya Inoue) #62471
  • [c9ffffcc55] - test: disable flaky WPT Blob test on AIX (James M Snell) #62470
  • [fd41ef31f6] - (SEMVER-MINOR) test: add tests for experimental stream/iter implementation (James M Snell) #62066
  • [1b9d8d3eec] - test: avoid flaky run wait in debugger restart test (Yuya Inoue) #62112
  • [cb08a29d51] - test: skip test-cluster-dgram-reuse on AIX 7.3 (Stewart X Addison) #62238
  • [abea0af8a9] - test: add WebCrypto Promise.prototype.then pollution regression tests (Filip Skokan) #62226
  • [47a2132269] - test: update WPT for WebCryptoAPI to 6a1c545d77 (Node.js GitHub Bot) #62187
  • [2c63d3006c] - test_runner: add exports option for module mocks (sangwook) #61727
  • [44ac0e1302] - test_runner: make it compatible with fake timers (Matteo Collina) #59272
  • [1865691275] - test_runner: set non-zero exit code when suite errors occur (Edy Silva) #62282
  • [0252b2bab8] - tools: bump picomatch from 4.0.3 to 4.0.4 in /tools/eslint (dependabot[bot]) #62439
  • [3368155267] - tools: bump yaml from 2.8.2 to 2.8.3 in /tools/doc (dependabot[bot]) #62437
  • [5e47c359f5] - tools: adopt the --check-for-duplicates NCU flag (Antoine du Hamel) #62478
  • [4a604e82d0] - tools: bump picomatch in /tools/doc (dependabot[bot]) #62438
  • [d1a98b4ddb] - tools: bump flatted from 3.4.1 to 3.4.2 in /tools/eslint (dependabot[bot]) #62375
  • [c32daa1ab4] - tools: bump eslint deps (Huáng Jùnliàng) #62356
  • [7a2fcc6d41] - tools: do not swallow error in lint-nix workflow (Antoine du Hamel) #62292
  • [c41a2871b5] - tools: add eslint-plugin-regexp (Huáng Jùnliàng) #62093
  • [56dfeb06df] - tools: fix timeout errors in lint-nix job (Antoine du Hamel) #62265
  • [22fc8078e8] - tools: bump flatted from 3.3.3 to 3.4.1 in /tools/eslint (dependabot[bot]) #62255
  • [409b0663bd] - tools: bump undici from 6.23.0 to 6.24.1 in /tools/doc (dependabot[bot]) #62250
  • [67c69750f4] - tools: validate all commits that are pushed to main (Antoine du Hamel) #62246
  • [7d9db8cd21] - tools: keep GN files when updating Merve (Antoine du Hamel) #62167
  • [6c8fa42ba2] - typings: rationalise TypedArray types (René) #62174
  • [531c64d04e] - url: enable simdutf for ada (Yagiz Nizipli) #61477
  • [2000caccde] - util: allow color aliases in styleText (sangwook) #62180
  • [0aed332ab4] - wasm: support js string constant esm import (Guy Bedford) #62198
  • [d3fd4a978b] - worker: heap profile optimizations (Ilyas Shabi) #62201
  • [e992a34a18] - zlib: fix use-after-free when reset() is called during write (Matteo Collina) #62325

tannal and others added 30 commits March 25, 2026 10:40
PR-URL: #58708
Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
Replace the domain-based error handling with AsyncLocalStorage and
setUncaughtExceptionCaptureCallback. This removes the REPL's dependency
on the deprecated domain module while preserving all existing behavior:

- Synchronous errors during eval are caught and displayed
- Async errors (setTimeout, promises, etc.) are caught via the
  uncaught exception capture callback
- Top-level await errors are caught and displayed
- The REPL continues operating after errors
- Multiple REPL instances can coexist with errors routed correctly

Changes:
- Use AsyncLocalStorage to track which REPL instance owns an async
  context, replacing domain's automatic async tracking
- Add setupExceptionCapture() to install
  setUncaughtExceptionCaptureCallback for catching async errors and
  routing them to the correct REPL
- Extract error handling logic into REPLServer.prototype._handleError()
- Wrap eval execution in replContext.run() for async context tracking
- Update newListener protection to check AsyncLocalStorage context
- Throw ERR_INVALID_ARG_VALUE if options.domain is passed

PR-URL: #61227
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
a9da9ff recently restructured async context handling
in the REPL source so that it no longer uses the domain module,
and instead performs its own async context tracking.

That change was not intended to be breaking, but it affected
behavior for uncaught exceptions thrown after the REPL was closed.
Those would now be treated as uncaught exceptions on the process
level, which is probably not intentional in most situations.

While it's understandably not great that we handle execptions
after closing the REPL instance, I am confident that it's
best to restore the previous behavior for now and add more
granular handling options separately and intentionally
in a (potentially semver-major) follow-up change.

Refs: #61227
PR-URL: #62165
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Fixes: #61878
PR-URL: #61950
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
PR-URL: #62115
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
The initial support for ESM entrypoint in SEA didn't support
code cache. This patch implements that by following a path
similar to how code cache in CJS SEA entrypoint is supported:
at build time we generate the code cache from C++ and put it
into the sea blob, and at runtime we consume it via a special
case in compilation routines - for CJS this was
CompileFunctionForCJSLoader, in the case of SourceTextModule,
it's in Module::New.

PR-URL: #62158
Refs: #61813
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
PR-URL: #62167
Reviewed-By: Shelley Vohr <shelley.vohr@gmail.com>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
PR-URL: #62169
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
PR-URL: #62075
Reviewed-By: Pietro Marchini <pietro.marchini94@gmail.com>
PR-URL: #62087
Reviewed-By: Mattias Buelens <mattias@buelens.com>
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
PR-URL: #62174
Reviewed-By: Daijiro Wachi <daijiro.wachi@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Zeyu "Alex" Yang <himself65@outlook.com>
PR-URL: #62187
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Whether or not an exception should be handled when it
was thrown in the REPL's context but the REPL is already
closed is something that will depend on the details of
the specific REPL instance's use case.

Adding this option lets the REPL's creator control the
details of this behavior.

This resolves a TODO recently added in bd3cba5.

PR-URL: #62188
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
PR-URL: #62189
Reviewed-By: Richard Lau <richard.lau@ibm.com>
Reviewed-By: Abdirahim Musse <abdirahim.musse@ibm.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
PR #61178 added the throwIfNoEntry option to fs.stat and
fsPromises.stat (shipped in v25.7.0) but did not add corresponding
YAML version history entries. The sync variants (fs.statSync,
fs.lstatSync) already had history entries from PR #33716.

Fixes: #62185

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
PR-URL: #62204
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Remove the Chrome 66.0.3345.0 version check (Chrome 66 shipped in
2018), the claim that Chrome DevTools doesn't support debugging worker
threads (which uses time-tied language), and the recommendation to use
ndb (which has been archived since July 2023).

Fixes: #54078

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
PR-URL: #62202
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
PR-URL: #62213
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
PR-URL: #62226
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Jordan Harband <ljharb@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Zeyu "Alex" Yang <himself65@outlook.com>
PR-URL: #62226
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Jordan Harband <ljharb@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Zeyu "Alex" Yang <himself65@outlook.com>
Extends the Wasm ESM Integration for importing WebAssembly
modules in either the source phase or instance phase to support
importing static JS string constants from the special
import name `wasm:js/string-constants`.

PR-URL: #62198
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
PR-URL: #61927
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
PR-URL: #62123
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
PR-URL: #62201
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com>
Reviewed-By: theanarkh <theratliter@gmail.com>
Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
PR-URL: #62246
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Zeyu "Alex" Yang <himself65@outlook.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
PR-URL: #61477
Reviewed-By: Daniel Lemire <daniel@lemire.me>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
Reviewed-By: Robert Nagy <ronagy@icloud.com>
PR-URL: #62249
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Bumps [undici](https://github.com/nodejs/undici) from 6.23.0 to 6.24.1.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.23.0...v6.24.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.24.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
PR-URL: #62250
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Aviv Keller <me@aviv.sh>
PR #59872 renamed the config key from `num` to `n` but did not update
the destructuring in main(), leaving `{ num: n }` which resolves to
undefined. This caused the benchmark to produce near-zero throughput
since the send-batching logic never fires when n is undefined.

Refs: #59872
PR-URL: #62084
Refs: nodejs/performance#187
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
PR-URL: #62080
Refs: https://github.com/nodejs/node/pull/61478/changes/BASE..6cd90e1c0167f94c7dc671d10316e561c81f26af#r2871221559
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
panva and others added 18 commits March 31, 2026 10:46
PR-URL: #62396
Reviewed-By: James M Snell <jasnell@gmail.com>
The test Blob-array-buffer.any.js can be flaky on
AIX due to a recognized race condition in v8.

The failed assert is in deps/v8/src/base/platform/platform-aix.cc
on line 199, preceeded by the comment:

> If this check fails it's most likely due to a racing condition
> where another thread has mapped the same address right before we
> do. Since this could cause hard-to-debug issues, potentially with
> security impact, and we can't recover from this, the best we can do
> is abort the process.

Disabling the test on AIX until the underlying issue can
be resolved (if it can be resolved at all) is really the
only option currently.

Reliability Report: https://github.com/nodejs/reliability/blob/main/reports/2026-03-28.md
Signed-off-by: James M Snell <jasnell@gmail.com>
Assisted-by: Opencode/Opus 4.6
PR-URL: #62470
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
PR-URL: #62471
Refs: #61762
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com>
Reviewed-By: Kohei Ueno <kohei.ueno119@gmail.com>
PR-URL: #62051
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: #62382
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: #62477
Reviewed-By: Paolo Insogna <paolo@cowtech.it>
Reviewed-By: Beth Griggs <bethanyngriggs@gmail.com>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
Reviewed-By: James M Snell <jasnell@gmail.com>
PR-URL: #62478
Refs: nodejs/node-core-utils#1035
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
PR-URL: #62379
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
PR-URL: #62482
Reviewed-By: Edy Silva <edigleyssonsilva@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
PR-URL: #62483
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Daijiro Wachi <daijiro.wachi@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
PR-URL: #62484
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
PR-URL: #62487
Reviewed-By: Ryuhei Shima <shimaryuhei@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Bumps [yaml](https://github.com/eemeli/yaml) from 2.8.2 to 2.8.3.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.2...v2.8.3)

---
updated-dependencies:
- dependency-name: yaml
  dependency-version: 2.8.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
PR-URL: #62437
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Bumps [picomatch](https://github.com/micromatch/picomatch) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.3...4.0.4)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
PR-URL: #62439
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
PR-URL: #62164
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Richard Lau <richard.lau@ibm.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
PR-URL: #62414
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
This is the certdata.txt[0] from NSS 3.121.

This is the version of NSS that shipped in Firefox 149.0 on 2026-03-24.

Certificates added:
- OISTE Server Root RSA G1
- e-Szigno TLS Root CA 2023

Certificates removed:
-  OISTE Server Root RSA G1

[0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_121_RTM/lib/ckfw/builtins/certdata.txt

PR-URL: #62485
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Notable changes:

async_hooks:
  * (SEMVER-MINOR) add using scopes to AsyncLocalStorage (Stephen Belanger) #61674
benchmark:
  * (SEMVER-MINOR) add benchmarks for experimental stream/iter (James M Snell) #62066
cli:
  * (SEMVER-MINOR) add --max-heap-size option (tannal) #58708
crypto:
  * (SEMVER-MINOR) add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #62183
repl:
  * (SEMVER-MINOR) add customizable error handling (Anna Henningsen) #62188
  * (SEMVER-MINOR) remove dependency on domain module (Matteo Collina) #61227
sea:
  * (SEMVER-MINOR) support code cache for ESM entrypoint in SEA (Joyee Cheung) #62158
stream:
  * (SEMVER-MINOR) add stream/iter Implementation (James M Snell) #62066
test:
  * (SEMVER-MINOR) add tests for experimental stream/iter implementation (James M Snell) #62066
test_runner:
  * add exports option for module mocks (sangwook) #61727

PR-URL: #62522
@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/actions
  • @nodejs/build
  • @nodejs/gyp
  • @nodejs/performance
  • @nodejs/security-wg
  • @nodejs/tsc
  • @nodejs/url

@github-actions github-actions bot added release Issues and PRs related to Node.js releases. v25.x Issues that can be reproduced on v25.x or PRs targeting the v25.x-staging branch. labels Mar 31, 2026
@aduh95 aduh95 marked this pull request as ready for review March 31, 2026 13:10
@aduh95 aduh95 added the request-ci Add this label to start a Jenkins CI on a PR. label Mar 31, 2026
@github-actions github-actions bot removed the request-ci Add this label to start a Jenkins CI on a PR. label Mar 31, 2026
@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

@codecov
Copy link
Copy Markdown

codecov bot commented Mar 31, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.70%. Comparing base (2ea7a7b) to head (c104d5a).
⚠️ Report is 16 commits behind head on v25.x.

Additional details and impacted files
@@            Coverage Diff             @@
##            v25.x   #62522      +/-   ##
==========================================
+ Coverage   89.67%   89.70%   +0.03%     
==========================================
  Files         682      700      +18     
  Lines      206376   213797    +7421     
  Branches    39568    41019    +1451     
==========================================
+ Hits       185060   191796    +6736     
- Misses      13444    14087     +643     
- Partials     7872     7914      +42     

see 107 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release Issues and PRs related to Node.js releases. v25.x Issues that can be reproduced on v25.x or PRs targeting the v25.x-staging branch.

Projects

None yet

Development

Successfully merging this pull request may close these issues.