Update Node.js to v26.10.0 - #203
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
26.9.0β26.10.0Release Notes
nodejs/node (node)
v26.10.0: 2026-09-22, Version 26.10.0 (Current), @βaduh95Compare Source
Notable Changes
c0a42d23e5] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #β65627eb4fabe81e] - doc: add araujogui to collaborators (Guilherme AraΓΊjo) #β6609064fb33d791] - (SEMVER-MINOR) ffi: load libraries from a mounted VFS (Matteo Collina) #β659092b1701f810] - (SEMVER-MINOR) fs: add openAsBlobSync (greenhead) #β65644080e76b3d7] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #β6472513e61f6ae6] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #β65825a326546094] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #β658060306b0a71e] - (SEMVER-MINOR) sqlite: bind undefined to NULL (Trevor Burnham) #β657093c999edef7] - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell) #β65805f7d18ec360] - (SEMVER-MINOR) test: expand histogram test coverage (James M Snell) #β658253ce4d23bbb] - (SEMVER-MINOR) util: implement util.throttle (James M Snell) #β65899336f33ccc1] - (SEMVER-MINOR) util: implement debounce (James M Snell) #β65899Commits
2bf082453b] - assert: fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) #β64449c518831d00] - benchmark: add --csv option to compare.js with --analyze (James M Snell) #β6592289bae46e68] - buffer: fix unaligned UTF-16LE decoding (Matteo Collina) #β6590501cee9dcef] - build: do not use bundled simdutf when built with--shared-simdutf(Antoine du Hamel) #β6589120606a4d19] - build: suppress OpenSSL asm warnings with clang (Richard Lau) #β66023a76e97b5c5] - build: derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) #β65744ac7fcf0cef] - build: sync cargo/rustc version warnings (Richard Lau) #β65912f24a495b36] - build: fix quiet default for make builds (Shelley Vohr) #β65826c4381765fe] - child_process: clear timeout timer on spawn-time error too (kishore280) #β655068955781eeb] - crypto: remove redundentstd::movecall (Antoine du Hamel) #β661110b88aa5a15] - crypto: read RSA-PSS restrictions from provider (Filip Skokan) #β66108f90d3d3cb0] - crypto: skip private RSA parameters in key details (Filip Skokan) #β6610897828d91db] - crypto: use provider EC group names (Filip Skokan) #β661083de05da569] - crypto: fetch ciphers for private-key encoding (Filip Skokan) #β66108ca8ee04594] - crypto: decode PKCS#1 keys through providers (Filip Skokan) #β6610854a625e953] - crypto: derive keys through EVP_KDF (Filip Skokan) #β66108971adece6a] - crypto: use names for asymmetric key algorithms (Filip Skokan) #β65966bfb544eb00] - crypto: optimize and benchmark key preparation (Filip Skokan) #β65892c0a42d23e5] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #β65627c58a4e0ba7] - crypto: add Hybrid KEMs to Web Cryptography (Filip Skokan) #β6575970edf90851] - crypto: avoid EC reconstruction for signature sizing (Filip Skokan) #β65908fab5dddd77] - crypto: avoid EC raw export reconstruction (Filip Skokan) #β65908220a499614] - crypto: export EC JWK coordinates directly (Filip Skokan) #β65908f1295e11db] - crypto: read EC curve metadata directly (Filip Skokan) #β65908775173a5db] - crypto: optimize private EC JWK import (Filip Skokan) #β65908e44669bb7d] - crypto: validate the limit of PBKDF2 iterations (Filip Skokan) #β65704cd5a7611e9] - crypto: use primordials in HKDF info validation (Filip Skokan) #β6570494affce749] - Revert "deps: V8: overridedepot_toolsversion" (Richard Lau) #β66110870a366c49] - deps: V8: cherry-pick95efbaf(Igor Sheludko) #β66020d62a452738] - deps: V8: backporta0607c5(Antoine du Hamel) #β65891e8edeffe2d] - deps: update googletest to8eff9e3(Node.js GitHub Bot) #β66009eb4fabe81e] - doc: add araujogui to collaborators (Guilherme AraΓΊjo) #β660902fffb3872d] - doc: fix duplicate 'the' typo innode_platform.cc(Muhammad Al-Muzahid) #β66058317abb8131] - doc: clarify sub-1000ms behavior in socket.setKeepAlive (Haram Jeong) #β658691c12f815c2] - doc: remove obsolete mentioning of cl.exe on windows (Chengzhong Wu) #β660382cc17dd67c] - doc: note that default signal handling resets the signal mask (Shelley Vohr) #β658773a69cc1bf4] - doc: clarify QUIC async write backpressure (John Finnerty) #β65947549694349d] - doc: clarify permission model scope for output paths (Rafael Gonzaga) #β660043325ded3a8] - doc: fix sign-off format in AGENTS.md (Filip Skokan) #β6595889aa2bd10c] - doc: fill in missing zstd docs (James M Snell) #β658678d1ce4d477] - doc: add inoway46 as triager (Yuya Inoue) #β655659a3697c5c7] - doc: document windowsHide for child_process.fork (Christopher Buss) #β6588769911bf6b5] - doc: qualify directory read ordering for native fs (Trivikram Kamat) #β658682d0c3fed12] - doc: add DOMException section to errors API reference (Avocado) #β65206f744023cce] - doc: expand revert commit collaborator instructions (Mike McCready) #β65848412399efd3] - doc: clarify supported Python releases (Mike McCready) #β6585079331f5779] - doc: note that FreeEnvironment() runs a shared event loop (Shelley Vohr) #β656916ddbb9982f] - doc,test: account for OpenSSL 4.1 behaviours (Filip Skokan) #β6595664fb33d791] - (SEMVER-MINOR) ffi: load libraries from a mounted VFS (Matteo Collina) #β6590907fcf1ed02] - ffi: throw ERR_INVALID_ARG_TYPE for wrong-typed pointer and size (Soul Lee) #β65842b7406b0a9b] - fs: coerce FileHandle.read length like fs.read (Xia Chao) #β65521cb9995be4d] - fs: honor dereference for symlinks nested in cpSync trees (Christian Aurich) #β657312b1701f810] - (SEMVER-MINOR) fs: add openAsBlobSync (greenhead) #β656449b3f1aa03f] - fs: throw on existing dir in cpSync with errorOnExist (Daijiro Wachi) #β641242b502e0798] - fs: support removing read-only files in rmSync on Windows (Sparsh :)) #β6445377d8f17ab1] - http: don't destroy socket after request completes (Barath Raj) #β6595246f76ed57b] - http2: settle pending write callbacks on destroy (Matteo Collina) #β66016205443721d] - http2: fix onread assert when destroying session from stream handler (Sankalp Thakur) #β651167e1db4724a] - inspector: report an error when DOM storage is unavailable (Avocado) #β6597395110712b8] - inspector: fix abort when two Environments own the inspector (Shelley Vohr) #β658779fd3e6caa4] - inspector: fix crash when the IsolateData has no platform (Shelley Vohr) #β65818cce2795ad7] - lib: fix AbortSignal.any() abort propagation (Yuya Inoue) #β660142c0ccc0067] - lib: fix for FileHandle.readableWebStream (Patrick DaΜhne) #β5884228acafe6a0] - lib: avoid repeat internal receiver checks (Filip Skokan) #β65910b9b0e33923] - lib: avoid unsafe array iteration in cli table (Donghoon Kang) #β658387f514d3310] - lib: fix shared buffer growability validation (Filip Skokan) #β658457534117e38] - lib: optimize internal Web IDL dictionaries (Filip Skokan) #β65857bdacc08fbe] - lib: validate sequence iterator objects (Filip Skokan) #β658445b6ac71fb2] - lib: use Web IDL interface brand checks (Filip Skokan) #β65846da341e2571] - lib,src: apply multiple updates to dtls implementation (James M Snell) #β6551113eb4843d5] - meta: bump step-security/harden-runner from 2.21.0 to 2.21.1 (dependabot[bot]) #β660440f759174af] - meta: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 (dependabot[bot]) #β66046c75b830082] - meta: bump cachix/cachix-action (dependabot[bot]) #β660471ada7055a4] - meta: bump github/codeql-action/init from 4.37.9 to 4.38.0 (dependabot[bot]) #β660481ed8b05742] - meta: bump github/codeql-action/analyze from 4.37.9 to 4.38.0 (dependabot[bot]) #β660499165abe840] - meta: bump github/codeql-action/autobuild from 4.37.9 to 4.38.0 (dependabot[bot]) #β66050d03e7313cf] - meta: add joyeecheung as v8 currency strategic initiative champion (Joyee Cheung) #β6596553d7592378] - meta: expand on collaborator restoration process (Chengzhong Wu) #β65962fa972d02b2] - meta: add web-standards as webidl owners (Filip Skokan) #β65856080e76b3d7] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #β647250d14c0e507] - path: removeStringPrototypeCharCodeAtfrom some methods ofposix(Wiyeong Seo) #β5466813e61f6ae6] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #β65825a326546094] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #β6580632401c2229] - perf_hooks: reuse buffer for uv metrics (Donghoon Kang) #β659855e2fbfe0e5] - perf_hooks: validate import normalization offset (Matteo Collina) #β659504743cd8d33] - quic: fix two small bugs in HTTP/3 stream internals (Tim Perry) #β659700df54fb38f] - quic: improve stream cleanup & lookup (Tim Perry) #β659447cf448889c] - quic: fix timeout regression from11ed325(James M Snell) #β6602861a98e6512] - quic: fix readable stream truncation on stop-sending, abort & timeout (Tim Perry) #β63967975cac593c] - quic: add promise to QuicStream for pending strms (Marten Richter) #β65862ae29cc92ea] - quic: split headers out from src/quic/stream.{h/cc} (James M Snell) #β65863833c58d9dc] - quic: fix crash in onStreamClose (Marten Richter) #β6586184ecb21343] - quic: reject zero addressLRUSize (Christian Aurich) #β65827293e69d065] - sqlite: throw on invalid URL path instead of abort (Guilherme AraΓΊjo) #β660266f5fb76d0e] - sqlite: track registered user-defined functions (Trivikram Kamat) #β65896baf112b639] - sqlite: always copy changeset before applying (Trivikram Kamat) #β658700306b0a71e] - (SEMVER-MINOR) sqlite: bind undefined to NULL (Trevor Burnham) #β657091f24901c0c] - src: fix-Wextrawarning inWriteFileSync(Antoine du Hamel) #β66020b98787fe2d] - src: reuse crypto GetCipherInfo in DTLS session (Ilyas Shabi) #β66022410093dbf7] - src: avoid union type-punning in trace values (Khaidi Chu) #β659339ec030b1e7] - src: print exception thrown during primordial initialization (Joyee Cheung) #β65991a0f99f1d6c] - src: support building with the V8 sandbox (Shelley Vohr) #β6223727c62235d0] - src: ffi: create fast-call metadata Symbols lazily (Matteo Collina) #β660155a5abd8fd0] - src: avoid copying SEA snapshot data (Colin McDonnell) #β65876a05023f331] - src: fix crash on empty, foreign or truncated --snapshot-blob files (Shelley Vohr) #β659554141e22606] - src: don't kill own process group on failed spawn (Lazizbek Ergashev) #β6505405f4e54eda] - src: fix external reference list race between concurrent isolates (Shelley Vohr) #β657791518b7d67f] - src: keep the first snapshot blob alive for later isolates (Shelley Vohr) #β6577962e2bf025c] - src: detach cppgc wrappers from their Realm before it is freed (Shelley Vohr) #β65778afc3e559d2] - src: fix Stop() terminating the next Environment on the isolate (Shelley Vohr) #β65819f245e53b29] - src: seed V8 from the OS CSPRNG instead of OpenSSL's DRBG (Colin McDonnell) #β65796830ca7df7a] - src: fix null pointer call when running without a startup snapshot (Shelley Vohr) #β6582048158fba8c] - src: stop leaking a CppHeap in CommonEnvironmentSetup (Shelley Vohr) #β657923c999edef7] - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell) #β65805e5d2a336bd] - stream: destroy half-open sockets after iteration (Matteo Collina) #β659864075161405] - stream: destroy Duplex.from async function on early return (Aman Chadha(IVIXMMI)) #β659637d245cfd8d] - stream: fixup stream/iter to drop at most one entry per share call (James M Snell) #β6602830e1f7651c] - stream: reject unbounded at SyncShare construction (James M Snell) #β660280372056cd8] - stream: make share budget failures detach before throwing (James M Snell) #β6602836cc238dce] - stream: make Broadcast.from abort its background pump (James M Snell) #β660283134ca6f8e] - stream: update broadcast to retain buffered data with zero consumers (James M Snell) #β6602804e5c282a1] - stream: fix async iteration of undefined chunks (Caleb Everett) #β65969f81a1483b3] - stream: avoid promise allocation for parked transform writes (Matteo Collina) #β65625aec01c5ae1] - stream: keep webstream stream states in fast-mode objects (Matteo Collina) #β65625898cd55bdf] - stream: reject closed only after sink abort settles (Lazizbek Ergashev) #β657275661526006] - stream: fix ERR_INVALID_STATE when cancelling Readable.toWeb() (Richard Scarrott) #β62773fb8a97f46b] - stream: improve handling of falsy errors in stream/iter (James M Snell) #β65864cfee7fa3d9] - stream: amortize writable buffer compaction (GΓΌrgΓΌn DayΔ±oΔlu) #β6584715605210f8] - stream: create write request objects lazily (Matteo Collina) #β64455619470a9ae] - stream: allocate stream read buffers from a slab (Matteo Collina) #β644557e79c33354] - test: consolidate crypto provider cache coverage (Filip Skokan) #β66108dcc9c3c02a] - test: avoid call tochmodSyncintest-fs-cp-async-file-modes(Antoine du Hamel) #β66104dda22c06d7] - test: deflake test-run-watch-cwd-isolation-none-* (Antoine du Hamel) #β66035d63928dda0] - test: move permission FFI test to native suite (Yuya Inoue) #β6605980c1bf7fb5] - test: deflake user timing WPT assertions (Filip Skokan) #β6603612116d1d70] - test: unskiptest-watch-create-isolation-none(Antoine du Hamel) #β66041e90575cb4d] - test: deflake util.throttle tests (Filip Skokan) #β66034f7d18ec360] - (SEMVER-MINOR) test: expand histogram test coverage (James M Snell) #β65825bfa6d49b5c] - test: implement low-risk test optimizations (James M Snell) #β65926c3307ebddf] - test: update WPT for WebCryptoAPI to55ce71b(Node.js GitHub Bot) #β65813ee29c56993] - test: prevent parser reuse across close scenarios (Filip Skokan) #β660178a27474044] - test: cover cpSync fast path timestamp preservation (Abhinandan Kumar) #β6567889297305c0] - test: fix stderr Buffer assertion in exec encoding test (greenhead) #β66008d4cb916624] - test: skip test-vfs-real-provider-watch.js on IBM i (SRAVANI GUNDEPALLI) #β659876515db8ab6] - test: fix RSA/DSA wrong-passphrase flake (Filip Skokan) #β65983fa19ecad9d] - test: improve sequential test performance (James M Snell) #β659283666d6a238] - test: schedule WPT variants individually (Filip Skokan) #β65984f2aa27d82d] - test: overlap SLH-DSA signature checks (Filip Skokan) #β659802170207253] - test: unref cancelled broadcast source timer (Filip Skokan) #β6598071a54aaf5f] - test: collect timeout signals explicitly (Filip Skokan) #β659801a15aff897] - test: skip retries in DNS timeout coverage (Filip Skokan) #β659805c7e6b4a6e] - test: synchronize ordered runner events (Filip Skokan) #β6598037f24eddc9] - test: reuse fixed primes in DH tests (Filip Skokan) #β65980831ec42bcc] - test: avoid idle HTTP/HTTPS connections (Filip Skokan) #β65980f523342bcd] - test: close WebAssembly test HTTP servers (Filip Skokan) #β65980f23847a122] - test: use named parameters in DH stress test (Filip Skokan) #β659807131e3b437] - test: reduce ZIP64 stress test I/O (Filip Skokan) #β65980e4ca72a984] - test: avoid allocations in external memory test (Filip Skokan) #β659757fe64727a2] - test: cover experimental stream iterator builtins (Jungwon Sohn) #β6596488ba17bae2] - test: deflake node-api test-free-called (Christian Aurich) #β659486eee01fbae] - test: fix flaky common WPT inspector test (Yuya Inoue) #β65937858702e51c] - test: skip C++ symbols in tick-processor-arguments (Philipp Dunkel) #β65906472215ff9b] - test: try fixing windows build replacing WMIC (James M Snell) #β659497f5168149c] - test: fix flaky test-bench-stream (Matteo Collina) #β658749f2d544576] - test: move sqlite length validation out of the reentry test (Trevor Burnham) #β6576975a9fa65ac] - test: fix flaky cleanup in http2 test (Tim Perry) #β65701f8cdf05586] - test,benchmark: use OpenSSL feature helpers (Filip Skokan) #β6576288b12c03cd] - test_runner: avoid reusing v8 serializers (Yuya Inoue) #β659519b3085e660] - test_runner: fix quote escaping in JUnit (Jihwan) #β6597102c2302c31] - tls: propagate singleUse to the secure context (Carlos Vinicius) #β660252a8b5d9269] - tls: load all CRLs from a PEM bundle (Lazizbek Ergashev) #β65577d141ddb8dc] - tls: defer re-entrant calls to SSL state machine from JS (Tim Perry) #β65105b7fe779632] - tools: updatetools/v8for Python 3.13 (Richard Lau) #β661096105b37a3d] - tools: bump eslint-plugin-jsdoc in /tools/eslint in the eslint group (dependabot[bot]) #β66102060ed69df9] - tools: disable fortify warnings intest-shared(Antoine du Hamel) #β66020f8b7a2ff41] - tools: clean up handling of shared libs inshell.nix(Antoine du Hamel) #β658913c9586c1fc] - tools: group CodeQL GHA updates (Antoine du Hamel) #β66057aa531a34f7] - tools: summarize auto-start-ci failures (Filip Skokan) #β65979b7eef15f59] - tools: bump the eslint group in /tools/eslint with 6 updates (dependabot[bot]) #β660458914947d7c] - tools: update pgo build doc for linux (Chengzhong Wu) #β66024a5b1659d5b] - tools: avoid workflow shell interpolation (Filip Skokan) #β66013caf0ee0d7b] - tools: use self-repository references (Filip Skokan) #β66013d5880dcb05] - tools: correct Slack action version comments (Filip Skokan) #β6601366f182f565] - tools: make checkout credential use explicit (Filip Skokan) #β66013287ece3f22] - tools: pass author to commit message validator (Filip Skokan) #β660126314ccf93b] - tools: reduce test runner timing overhead (Filip Skokan) #β65980441350a867] - tools: do not download build tools when linting Nix files (Antoine du Hamel) #β6596115f2549f74] - tools: bump js-yaml from 4.3.1 to 4.3.2 in /tools/eslint (dependabot[bot]) #β659310e449d02a6] - tools: bump js-yaml from 4.3.1 to 4.3.2 in /tools/lint-md (dependabot[bot]) #β6593281eba460b5] - tools: fix commit queue error summary matching (Filip Skokan) #β65913e5bbcfdd78] - tools: lint PR commit messages without approval (Filip Skokan) #β6587507ae602005] - tools: unlabel author ready on base branch conflicts (Filip Skokan) #β65872e3ad68289a] - tools: improve benchmark build cache reuse (Filip Skokan) #β6585946ddc0220d] - tools: apply feedback to and simplify contributor guidance workflow (Filip Skokan) #β6578566fd78803d] - trace_events: fix abort when Node.js does not own the V8 platform (Shelley Vohr) #β659543cb3c23a19] - typings: add task_queue internal binding types (Seongeun Lee) #β65662c5c7036e7b] - typings: add timeoutInfo to TimersBinding (greenhead) #β6581162fe96c166] - typings: add missing sea binding properties (μ΄νλ―Έ) #β65815e51673b4ed] - url: add Symbol.toStringTag to URLPattern (Khaidi Chu) #β659253ce4d23bbb] - (SEMVER-MINOR) util: implement util.throttle (James M Snell) #β65899336f33ccc1] - (SEMVER-MINOR) util: implement debounce (James M Snell) #β6589916e3e7eff3] - vfs: add --vfs-mount and --vfs-load startup flags (Philipp Dunkel) #β65748c50cb9a553] - vfs: write RealFSProvider files to open fd (Christian Aurich) #β658851bbc5488a5] - vfs: close the fs hook gaps for mounted paths (Philipp Dunkel) #β65852816790e0e5] - vfs: resolve symlinks when checking rename descendants (Trivikram Kamat) #β65904a9149093df] - vfs: support renaming implicit ZIP directories (Trivikram Kamat) #β65752cf5d4a8fe6] - vfs: reject statfs for missing paths (Trivikram Kamat) #β65693de552bd044] - vfs: return FileHandle from fs.promises.open (Trivikram Kamat) #β6573008f96f142e] - vfs: give ZipProvider option bags a null prototype (Philipp Dunkel) #β658535c4d319028] - vfs: commit ZipProvider handles the way open(2) does (Philipp Dunkel) #β6585329d3406b6c] - vfs: apply open(2) effects to ZipProvider handles (Philipp Dunkel) #β65853e379c26a92] - vfs: align virtual file handles with open(2) (Philipp Dunkel) #β658547cdf5f014a] - vfs: answer for unowned paths under reserved root (Philipp Dunkel) #β658145e55085bc1] - zlib: reject invalid zstd dictionaries (James M Snell) #β658674cdcf7f6a4] - zlib: fix zstd reset (James M Snell) #β65867678ff3561a] - zlib: improve zstd decoding across chunk boundaries (James M Snell) #β65865Configuration
π Schedule: (UTC)
π¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
β» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
π Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.