Skip to content

chore(deps): update node.js to v24.14.1#129

Merged
renovate-sh-app[bot] merged 1 commit intomainfrom
grafanarenovatebot/node-24.x
Mar 27, 2026
Merged

chore(deps): update node.js to v24.14.1#129
renovate-sh-app[bot] merged 1 commit intomainfrom
grafanarenovatebot/node-24.x

Conversation

@renovate-sh-app
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
node (source) patch 24.14.024.14.1

Release Notes

nodejs/node (node)

v24.14.1: 2026-03-24, Version 24.14.1 'Krypton' (LTS), @​RafaelGSS prepared by @​juanarbol

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
  • (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
  • (CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
  • (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan) - Medium
  • (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
  • (CVE-2026-21712) handle url crash on different url formats (RafaelGSS) - Medium
  • (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low
  • (CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

| datasource   | package | from     | to       |
| ------------ | ------- | -------- | -------- |
| node-version | node    | v24.14.0 | v24.14.1 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app renovate-sh-app Bot requested a review from a team as a code owner March 27, 2026 01:30
@renovate-sh-app renovate-sh-app Bot enabled auto-merge (squash) March 27, 2026 01:30
@renovate-sh-app renovate-sh-app Bot merged commit cad0fe9 into main Mar 27, 2026
12 checks passed
@renovate-sh-app renovate-sh-app Bot deleted the grafanarenovatebot/node-24.x branch March 27, 2026 08:10
This was referenced Apr 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant