chore(deps): update node.js to v24.5.0 #638
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
github-actions
bot
added
qa:running
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
344291c to
d9872cb
Compare
github-actions
bot
added
qa:running
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate
bot
force-pushed
the
renovate/node-24.x
branch
from
d9872cb to
86aa4cf
Compare
github-actions
bot
added
qa:running
github-actions
bot
added
status:merged
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
24.4.1-alpine3.21->24.5.0-alpine3.2124.1.0->24.2.1Release Notes
nodejs/node (node)
v24.5.0: 2025-07-31, Version 24.5.0 (Current), @aduh95Compare Source
Notable Changes
Upgrade to OpenSSL 3.5
This release is distributed with OpenSSL 3.5.1, following the announcement that
OpenSSL 3.5 will be supported until April 2030, while Node.js 24 will be
supported until April 2028. Read more about OpenSSL support in their blog post:
https://openssl-library.org/post/2025-02-20-openssl-3.5-lts/.
Contributed by Richard Lau in #58100.
Unflag
--experimental-wasm-modulesNode.js supports both source phase imports and instance phase imports to WebAssembly
modules and for WASM imports to JavaScript, in line with the current Phase 3
WebAssembly ESM Integration proposal.
The implementation and the specification are still subject to change.
Contributed by Guy Bedford in #57038.
Built-in proxy support in
request()andAgentnode:httpandnode:httpsnow support proxies. WhenNODE_USE_ENV_PROXYis set to
1, the default global agent would parse thehttp_proxy/HTTP_PROXY,https_proxy/HTTPS_PROXY,no_proxy/NO_PROXYsettings from theenvironment variables, and proxy the requests sent through the built-in http/https
client accordingly.
To use global proxy support from the command line:
In addition,
http.Agentandhttps.Agentnow support the customproxyEnvoptions.For reference,
fetch()already supportsNODE_USE_ENV_PROXYas of Node.js 24.0.0.Contributed by Joyee Cheung in #58980.
Add
setDefaultCACertificates()tonode:tlsThis API allows dynamically configuring CA certificates that will be used by the
Node.js TLS clients by default.
Once called, the provided certificates will become the default CA certificate list
returned by
tls.getCACertificates('default')and used by TLS connections thatdon't specify their own CA certificates.
To add system CA certificates to the default bundle (which includes the Mozilla
CA certificates):
Contributed by Joyee Cheung in #58822.
Other notable changes
d5640ca58a] - (SEMVER-MINOR) cli: support${pid}placeholder in--cpu-prof-name(Haram Jeong) #59072c52aaacfc5] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #58440927742b342] - doc: update the instruction on how to verify releases (Antoine du Hamel) #59113f753645cd8] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #580879791ff3480] - (SEMVER-MINOR) worker: add web locks api (ishabi) #58666Commits
5457c7a8a1] - benchmark: adjust configuration for string-decoder bench (Rafael Gonzaga) #5918728538f2255] - benchmark: add --track to benchmark (Rafael Gonzaga) #59174a28d804497] - benchmark: small lint fix on _cli.js (Rafael Gonzaga) #5917209717eb68e] - benchmark: drop misc/punycode benchmark (Rafael Gonzaga) #59171ad6757ef02] - benchmark: fix sqlite-is-transaction (Rafael Gonzaga) #591707fc3143f61] - benchmark: reduce N for diagnostics_channel subscribe benchmark (Arthur Angelo) #59116f2812723a0] - buffer: cache Environment::GetCurrent to avoid repeated calls (Mert Can Altin) #59043e3e729ca60] - build: remove suppressions.supp (Rafael Gonzaga) #59079dc66422768] - build,deps,tools: prepare to update to OpenSSL 3.5 (Richard Lau) #58100f5da4947d9] - cli: add --use-env-proxy (Joyee Cheung) #59151d5640ca58a] - (SEMVER-MINOR) cli: support${pid}placeholder in --cpu-prof-name (Haram Jeong) #59072eeeb40e95b] - (SEMVER-MINOR) crypto: add tls.setDefaultCACertificates() (Joyee Cheung) #58822135fca5b72] - crypto: avoid copying buffers to UTF-8 strings incrypto.hash()(Renegade334) #59067998cef10e3] - deps: update archs files for openssl-3.5.1 (Node.js GitHub Bot) #592341f06ca956a] - deps: upgrade openssl sources to openssl-3.5.1 (Node.js GitHub Bot) #5923455a90eed8d] - deps: upgrade npm to 11.5.1 (npm team) #591992b5d451ae0] - deps: update amaro to 1.1.1 (Node.js GitHub Bot) #59141af789d9b5c] - deps: update undici to 7.12.0 (Node.js GitHub Bot) #59135a34e44545e] - deps: update sqlite to 3.50.3 (Node.js GitHub Bot) #59132bfe4781c7d] - deps: update googletest to7e17b15(Node.js GitHub Bot) #5913172adf52e51] - deps: update ada to 3.2.6 (Node.js GitHub Bot) #589662a5f35b589] - deps: V8: cherry-pick3d750c2(Michaël Zasso) #587503f813eaba7] - deps: update archs files for openssl-3.0.17 (Node.js GitHub Bot) #59134fb52d0d8df] - deps: upgrade openssl sources to openssl-3.0.17 (Node.js GitHub Bot) #59134f122602f9d] - deps: update corepack to 0.34.0 (Node.js GitHub Bot) #59133c52aaacfc5] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #58440927742b342] - doc: update the instruction on how to verify releases (Antoine du Hamel) #591139a8d2020ad] - doc: copyedit SECURITY.md (Rich Trott) #591903da5bc0668] - doc: fix broken sentence inURL.parse(Superchupu) #5916406cd7461e0] - doc: improve onboarding instructions (Joyee Cheung) #59159dfb72d158b] - doc: add constraints for mem leak to threat model (Rafael Gonzaga) #5891751b8dfd5c6] - doc: add Aditi-1400 to collaborators (Aditi) #591574ffa756ce3] - doc: avoid suggesting testing fast api with intense loop (Chengzhong Wu) #591116f81b274f7] - doc: fix typo in writing-test.md (SeokHun) #5912388e434e687] - doc: add new environment variables doc page (Dario Piotrowicz) #59052b1a318d706] - doc: update release key for aduh95 (Antoine du Hamel) #5887734c49000c9] - doc: add missing section forsetReturnArraysinsqlite.md(Edy Silva) #590749b2e965aff] - doc: add RafaelGSS as steward July 25 (Rafael Gonzaga) #590782d1dcb87e6] - doc: clarify ERR_FS_FILE_TOO_LARGE to reflect fs.readFile() I/O limit (Haram Jeong) #59050999b5e51e7] - doc: run license-builder (github-actions[bot]) #590561940a2cb46] - doc: fix typed list formatting (Aviv Keller) #590196cb5e0d22f] - doc: refineutil.parseArgsdefaultdefinition (Slayer95) #58958d2e7f8e13a] - doc: remove unused import inzlib.md(coderaiser) #590419d02960149] - doc: add missing environment variables to manpage (amir lavasani) #5896345ffdb34fb] - doc: add stability index to the--watch-kill-signalflag (Dario Piotrowicz) #589973924c43600] - doc: add missing<code>blocks (Antoine du Hamel) #58995cb95e183f3] - doc: add scroll margin to links (Roman Reiss) #58982c9ded6ba15] - doc: add sponsorship link to RafaelGSS (Rafael Gonzaga) #58983b919fe0447] - (SEMVER-MINOR) esm: unflag --experimental-wasm-modules (Guy Bedford) #5703871bb6cd077] - esm: js-string Wasm builtins in ESM Integration (Guy Bedford) #590208d869e6d62] - fs: fix return value of fs APIs (theanarkh) #589967f654cee9e] - (SEMVER-MINOR) http,https: add built-in proxy support in http/https.request and Agent (Joyee Cheung) #5898085d6a28f4f] - inspector: initial support for Network.loadNetworkResource (Shima Ryuhei) #58077cfaa299f2e] - lib: fix incorrectArrayBufferPrototypeGetDetachedprimordial type (Dario Piotrowicz) #58978d555db22ad] - lib: flag to conditionally modify proto on deprecate (Rafael Gonzaga) #5892896c9dd79e6] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #59140324d9fc9d4] - meta: enable jsdoc/check-tag-names rule (Yagiz Nizipli) #5852104c751463b] - meta: add marco-ippolito to security release stewards (Marco Ippolito) #58944fe0195fdcc] - module: fix conditions override in synchronous resolve hooks (Joyee Cheung) #59011515b581d47] - module: throw error when re-runing errored module jobs (Joyee Cheung) #58957f753645cd8] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #5808715e6c28d82] - node-api,doc: update links to ecma262 with section names (Chengzhong Wu) #59087f67b686551] - perf_hooks: do not expose SafeMap via Histogram wrapper (René) #590943d2f919f7c] - process: make execve's args argument optional (Allon Murienik) #584121a44265810] - repl: handle errors from getters during completion (Shima Ryuhei) #59044467dbd31e6] - repl: fix repl crashing on variable declarations without init (Dario Piotrowicz) #590323a3eb6852d] - repl: improve REPL disabling completion on proxies and getters (Dario Piotrowicz) #5889155838e79b8] - src: call unmask after install signal handler (theanarkh) #5905977649ad93b] - src: useFastStringKeyforTrackV8FastApiCall(Anna Henningsen) #5914886babf9c4b] - src: use C++20constevalforFastStringKey(Anna Henningsen) #5914888b99eeae1] - src: remove declarations of removed BaseObject static fns (Anna Henningsen) #59093d89390fc8f] - src: add cache to nearest parent package json (Ilyas Shabi) #5908621780075e4] - src: check import attributes value types as strings (Chengzhong Wu) #58986ef89c2fac9] - src,test: fix config file parsing for flags defaulted to true (Edy Silva) #591101e990866e0] - test: mark web lock held test as flaky (Ilyas Shabi) #59144ba8e95a785] - test: use mustSucceed in test-fs-read (Sungwon) #5920439978f507f] - test: prepare test-crypto-rsa-dsa for newer OpenSSL (Richard Lau) #581001c3aadb9d6] - test: fix flaky test-worker-message-port-transfer-filehandle test (Alex Yang) #59158a0d22e9c51] - test: remove timeout in test-https-proxy-request-handshake-failure (Joyee Cheung) #591657e0a0fccc1] - test: expand linting rules aroundassertw literal messages (Anna Henningsen) #59147c6070046c3] - test: update WPT for WebCryptoAPI toab08796(Node.js GitHub Bot) #5912915d8cc908e] - test: update WPT for WebCryptoAPI to19d82c5(Node.js GitHub Bot) #5912983023e5144] - test: skip tests that cause timeouts on IBM i (Abdirahim Musse) #5901482d4175ec3] - test: updatestartCLIto set--port=0by default (Dario Piotrowicz) #5904216dc53c143] - (SEMVER-MINOR) test: move http proxy tests to test/client-proxy (Joyee Cheung) #58980a9511a6066] - test: mark test-inspector-network-fetch as flaky on Windows (Joyee Cheung) #590911cffcc02a3] - test: add missing port=0 arg in test-debugger-extract-function-name (Dario Piotrowicz) #5897783cdf1701b] - test_runner: clean up promisified interval generation (René) #58824195d6038dc] - tools: clarify README linter error message (Joyee Cheung) #5916051f578a3bf] - tools: add support for URLs to PR commits inmerge.sh(Antoine du Hamel) #5916220be9012eb] - tools: bump @eslint/plugin-kit from 0.3.1 to 0.3.3 in /tools/eslint (dependabot[bot]) #59119623e264e93] - tools: ignore CVE mention when linting release proposals (Antoine du Hamel) #590370e547e09ab] - tools,test: enforce best practices to detect never settling promises (Antoine du Hamel) #58992075d1968db] - util: respect nested formats in styleText (Alex Yang) #590989791ff3480] - (SEMVER-MINOR) worker: add web locks api (ishabi) #58666Configuration
📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled because a matching PR was automerged previously.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.