Conversation
thomhurst
added
dependencies
thomhurst
had a problem deploying
to
Pull Requests
GitHub Actions
Failure
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This is a Renovate-generated PR that updates docs/package.json engines constraint from >=18.0 to >=24.14.1.
Concern: Over-constraining the Node.js engine requirement
The jump from >=18.0 to >=24.14.1 skips two active LTS versions — Node 20 (EOL April 2026) and Node 22 (current LTS, EOL April 2027). Requiring >=24.14.1 means anyone running the docs tooling on Node 20 or Node 22 would get an engines warning/error, even though the docs tooling almost certainly works fine on those versions.
Why this matters:
- Node 24.14.1 is a security release for the Node 24 LTS line, but the CVEs it fixes (HTTP/2 flow control, SNI callback, HMAC timing, etc.) are low-relevance for a static docs generator.
- Pegging to a very specific patch version (
>=24.14.1) as the floor is unusual and will break any CI or contributor environment on Node 22 or Node 20. - Node 18 genuinely reached EOL in April 2025, so dropping it is correct — but there's no reason to skip Node 20 and 22 at the same time.
Suggested alternative:
"engines": {
"node": ">=22.0.0"
}This drops the EOL'd Node 18, retains compatibility with the current LTS (Node 22), and doesn't pin to a patch version that Renovate will rapidly supersede with the next security release anyway.
If there's a specific incompatibility with Node 22 in the docs tooling, it would be worth calling that out explicitly — but absent that, I'd recommend a less aggressive bump here.
There was a problem hiding this comment.
Code Review
This Renovate PR updates docs/package.json engines from >=18.0 to >=24.14.1.
Concern: Over-constraining the Node.js engine requirement
The jump skips two active LTS versions — Node 20 (EOL April 2026) and Node 22 (current LTS, EOL April 2027). Requiring >=24.14.1 means anyone running the docs tooling on Node 20 or Node 22 would get an engines error, even though the docs tooling almost certainly works fine on those versions.
Why this matters:
- Node 24.14.1 is a security release for the Node 24 line, but the CVEs fixed (HTTP/2 flow control, SNI, HMAC timing, etc.) are low-relevance for a static docs generator.
- Pegging to a specific patch version as the minimum floor is unusual; Renovate will open another PR with the next security release, creating churn.
- Node 18 genuinely reached EOL in April 2025, so dropping it is correct — but there is no reason to also drop Node 20 and 22.
Suggested alternative:
"engines": {
"node": ">=22.0.0"
}This drops EOL'd Node 18, keeps compatibility with the current LTS (Node 22), and avoids patch-version pinning. If there is a known incompatibility with Node 22 in the docs tooling, that would be worth documenting — but absent that, a less aggressive bump is preferable.
thomhurst
force-pushed
the
renovate/node-24.x
branch
from
d87a801 to
5a6c599
Compare
thomhurst
had a problem deploying
to
Pull Requests
GitHub Actions
Failure
There was a problem hiding this comment.
Code Review (Follow-up)
The previous reviews from this session raised a concern that has not been addressed: the jump from >=18.20.8 to >=24.14.1 skips two actively-supported LTS versions (Node 20, EOL April 2026; Node 22, current LTS, EOL April 2027).
The change is still as-submitted. The concern stands:
- Patch-version pinning as a floor (
>=24.14.1) is unusual and will trigger another Renovate PR with every Node 24 security release, creating unnecessary churn. - Dropping Node 22 support for a docs static site is overly aggressive — there is no documented incompatibility to justify it.
- Node 18 EOL is the only real motivation here, and that's fully addressed by bumping to
>=20.0.0or>=22.0.0.
Recommended alternative:
"engines": {
"node": ">=22.0.0"
}This cleanly drops EOL'd Node 18, retains the current LTS (Node 22), and avoids patch-pinning. If Node 24-specific APIs are actually required by the docs tooling, please document that in the PR — otherwise this bump is unnecessarily restrictive.
Renovate PR #5264 bumped the engines.node constraint to >=24.14.1, but GitHub Actions runners only have 24.14.0 available via setup-node, causing the docs deploy CI job to fail.
Renovate PR #5264 bumped the engines.node constraint to >=24.14.1, but GitHub Actions runners only have 24.14.0 available via setup-node, causing the docs deploy CI job to fail.
2 participants
This PR contains the following updates:
>=18.20.8→>=24.14.1Release Notes
nodejs/node (node)
v24.14.1: 2026-03-24, Version 24.14.1 'Krypton' (LTS), @RafaelGSS prepared by @juanarbolCompare Source
This is a security release.
Notable Changes
Commits
6fae244080] - (CVE-2026-21717) build,test: test array index hash collision (Joyee Cheung) nodejs-private/node-private#828cc0910c62e] - (CVE-2026-21713) crypto: use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan) nodejs-private/node-private#82280cb042cf3] - deps: update undici to 7.24.4 (Node.js GitHub Bot) #62271f5b8667dc2] - deps: update undici to 7.24.3 (Node.js GitHub Bot) #6223308852637d9] - deps: update undici to 7.22.0 (Node.js GitHub Bot) #6203561097db9fb] - deps: upgrade npm to 11.11.0 (npm team) #619949ac0f9f81e] - deps: upgrade npm to 11.10.1 (npm team) #618923dab3c4698] - deps: V8: overridedepot_toolsversion (Richard Lau) #6234487521e99d1] - deps: V8: backport1361b2a(Joyee Cheung) nodejs-private/node-private#828045013366f] - deps: V8: backport185f0fe(Joyee Cheung) nodejs-private/node-private#828af22629ea8] - deps: V8: backport0a8b1cd(snek) nodejs-private/node-private#828380ea72eef] - (CVE-2026-21710) http: use null prototype for headersDistinct/trailersDistinct (Matteo Collina) nodejs-private/node-private#821d6b6051e08] - (CVE-2026-21716) permission: include permission check on lib/fs/promises (RafaelGSS) nodejs-private/node-private#795bfdecef9da] - (CVE-2026-21715) permission: add permission check to realpath.native (RafaelGSS) nodejs-private/node-private#794c015edf313] - (CVE-2026-21714) src: handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) nodejs-private/node-private#832cba66c48a5] - (CVE-2026-21712) src: handle url crash on different url formats (RafaelGSS) nodejs-private/node-private#816df8fbfb93d] - (CVE-2026-21637) tls: wrap SNICallback invocation in try/catch (Matteo Collina) nodejs-private/node-private#819v24.14.0: 2026-02-24, Version 24.14.0 'Krypton' (LTS), @ruyadorno prepared by @aduh95Compare Source
Notable Changes
8b6d31d379] - (SEMVER-MINOR) async_hooks: addtrackPromisesoption tocreateHook()(Joyee Cheung) #6141568da144b4e] - build,deps: replace cjs-module-lexer with merve (Yagiz Nizipli) #61456f3a24c76e4] - (SEMVER-MINOR) deps: add LIEF as a dependency (Joyee Cheung) #611671948861d23] - (SEMVER-MINOR) events: repurposeevents.listenerCount()to accept EventTargets (René) #60214d6f7c8d06f] - (SEMVER-MINOR) fs: addignoreoption tofs.watch(Matteo Collina) #61433cb54b3ca6e] - (SEMVER-MINOR) http: addhttp.setGlobalProxyFromEnv()(Joyee Cheung) #6095335b1759d06] - (SEMVER-MINOR) module: allow subpath imports that start with#/(Jan Martin) #608642d72ea66f2] - (SEMVER-MINOR) process: preserveAsyncLocalStorageinqueueMicrotaskonly when needed (Gürgün Dayıoğlu) #609136f4a4f6c8e] - (SEMVER-MINOR) sea: split sea binary manipulation code (Joyee Cheung) #61167c0ceb9b065] - (SEMVER-MINOR) sqlite: enable defensive mode by default (Bart Louwers) #6126633d8e8303b] - (SEMVER-MINOR) sqlite: add sqlite prepare options args (Guilherme Araújo) #61311563ab699eb] - (SEMVER-MINOR) src: add initial support for ESM in embedder API (Joyee Cheung) #615484c80031000] - (SEMVER-MINOR) stream: addbytes()method tonode:stream/consumers(wantaek) #60426f5233df4ff] - (SEMVER-MINOR) stream: do not passreadable.compose()output viaReadable.from()(René) #60907345a40fda3] - (SEMVER-MINOR) test: use fixture directories for sea tests (Joyee Cheung) #61167972f82411d] - (SEMVER-MINOR) test_runner: addenvoption torunfunction (Ethan Arrowood) #61367d77f98c4b6] - (SEMVER-MINOR) test_runner: support expecting a test-case to fail (Jacob Smith) #606698e900af6ba] - (SEMVER-MINOR) util: addconvertProcessSignalToExitCodeutility (Erick Wendel) #60963Commits
180778fb9a] - assert: fix loose deepEqual arrays with undefined and null failing (Ruben Bridgewater) #615878b6d31d379] - (SEMVER-MINOR) async_hooks: add trackPromises option to createHook() (Joyee Cheung) #6141583bcd38d35] - benchmark: add streaming TextDecoder benchmark (Сковорода Никита Андреевич) #615494c105844c5] - build: add support for Visual Studio 2026 (Michaël Zasso) #607271f84fd91d9] - build: skip sscache action on non-main branches (Joyee Cheung) #6179030601b680f] - build: add--shared-nbytesconfigure flag (Antoine du Hamel) #61341c6253eda49] - build: add--shared-hdr-histogramconfigure flag (Antoine du Hamel) #61280584c189037] - build: add--shared-gtestconfigure flag (Antoine du Hamel) #612795998987881] - build: aix: deoptimize implementation-visitor.cc with --shared (Stewart X Addison) #6155068da144b4e] - build,deps: replace cjs-module-lexer with merve (Yagiz Nizipli) #614566a4511bafb] - build,win: fix vs2022 compilation (Stefan Stojanovic) #615302d6735db8a] - deps: upgrade npm to 11.9.0 (npm team) #61685699e2f8f81] - deps: update amaro to 1.1.7 (Node.js GitHub Bot) #617307be76316d6] - deps: update minimatch to 10.1.2 (Node.js GitHub Bot) #6173297e5a65013] - deps: update undici to 7.21.0 (Node.js GitHub Bot) #6168374e4710ee7] - deps: update googletest to56efe39(Node.js GitHub Bot) #61605b5113e2a2a] - deps: update amaro to 1.1.6 (Node.js GitHub Bot) #61603f3a24c76e4] - (SEMVER-MINOR) deps: add LIEF as a dependency (Joyee Cheung) #61167c370c3dc06] - (SEMVER-MINOR) deps: add tools and scripts to pull LIEF as a dependency (Joyee Cheung) #61167e54975e17d] - deps: V8: cherry-pick highway@dcc0ca1(Richard Lau) #61008625b90b76b] - deps: update undici to 7.19.2 (Node.js GitHub Bot) #6156605e9a9fb5e] - deps: update undici to 7.19.1 (Node.js GitHub Bot) #615143d41643e38] - deps: update undici to 7.19.0 (Node.js GitHub Bot) #6147017b363a66c] - dns: fix Windows SRV ECONNREFUSED by adjusting c-ares fallback detection (notvivek12) #6145333d0a8c22d] - doc: clarify EventEmitter error handling in threat model (Matteo Collina) #617015b8e72cf85] - doc: mention default option for test runner env (Steven) #61659f44e67fac2] - doc: fix --inspect security warning section (Tim Perry) #61675a0e09c9043] - doc: documenturl.format(urlString)as deprecated under DEP0169 (René) #616445e719248fe] - doc: deprecation add more codemod (Augustin Mauroy) #616428f5a3e5df4] - doc: fix grammatical error in README.md (ayj8201) #61653d52b535163] - doc: correct tools README Boxstarter link (Mike McCready) #616384889dc4f59] - doc: updateserver.dropMaxConnectionlink (YuSheng Chen) #615848e48e72f2a] - doc: clean up writing-and-running-benchmarks.md (Hardanish Singh) #613451948861d23] - (SEMVER-MINOR) events: repurposeevents.listenerCount()to accept EventTargets (René) #60214d6f7c8d06f] - (SEMVER-MINOR) fs: add ignore option to fs.watch (Matteo Collina) #614332d7e5f9581] - http: implement slab allocation for HTTP header parsing (Mert Can Altin) #61375cb54b3ca6e] - (SEMVER-MINOR) http: add http.setGlobalProxyFromEnv() (Joyee Cheung) #609536df8be48ce] - lib: use utf8 fast path for streaming TextDecoder (Сковорода Никита Андреевич) #61549830fff0aca] - lib: recycle queues (Robert Nagy) #61461069874bdbd] - lib: use StringPrototypeStartsWith from primordials in locks (Taejin Kim) #614927824c7589e] - lib: unify ICU and no-ICU TextDecoder (Сковорода Никита Андреевич) #61409f81430702a] - lib: prefercall()overapply()if argument list is not array (Livia Medeiros) #60796a723f72e1e] - lib: add support for readable byte streams to .toWeb() (Hans Klunder) #58664b78d814b3d] - meta: persist sccache daemon until end of build workflows (René) #6163940a872a4b9] - meta: bump github/codeql-action from 4.31.9 to 4.32.0 (dependabot[bot]) #616220637bdb3be] - meta: bump step-security/harden-runner from 2.14.0 to 2.14.1 (dependabot[bot]) #61621e8d9bd9fc5] - meta: bump actions/setup-python from 6.1.0 to 6.2.0 (dependabot[bot]) #61627c517df2b65] - meta: bump actions/setup-node from 6.1.0 to 6.2.0 (dependabot[bot]) #616259a64f2f25d] - meta: bump actions/cache from 5.0.1 to 5.0.3 (dependabot[bot]) #616240e5922e95e] - meta: bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (dependabot[bot]) #616235da7b51091] - meta: bump actions/stale from 10.1.0 to 10.1.1 (dependabot[bot]) #61620c085c8a43f] - meta: bump actions/checkout from 6.0.1 to 6.0.2 (dependabot[bot]) #61619ce2acf0275] - meta: bump actions/download-artifact from 6.0.0 to 7.0.0 (dependabot[bot]) #61242629f0eaac5] - meta: bump actions/checkout from 6.0.0 to 6.0.1 (dependabot[bot]) #61239cd80d369c9] - meta: bump actions/upload-artifact from 5.0.0 to 6.0.0 (dependabot[bot]) #612388c75e4e1fa] - meta: bump actions/checkout from 5.0.1 to 6.0.0 (dependabot[bot]) #609255a9e9f4127] - meta: bump actions/checkout from 5.0.0 to 5.0.1 (dependabot[bot]) #607671519251dd1] - module: do not invoke resolve hooks twice for imported cjs (Joyee Cheung) #615298d7190b3fe] - module: do not wrap module._load when tracing is not enabled (Joyee Cheung) #6147935b1759d06] - (SEMVER-MINOR) module: allow subpath imports that start with#/(Jan Martin) #608647a83b38921] - net: defer synchronous destroy calls in internalConnect (RajeshKumar11) #6165816bab79421] - process: do not truncate long strings in--print(Mohamed Akram) #614972d72ea66f2] - (SEMVER-MINOR) process: preserve AsyncLocalStorage in queueMicrotask only when needed (Gürgün Dayıoğlu) #609139cc1c4604f] - repl: fix getters triggering side effects during completion (Dario Piotrowicz) #6104393703306a1] - repl: tab completion targets<class>instead ofnew <class>(Đỗ Trọng Hải) #603196f4a4f6c8e] - (SEMVER-MINOR) sea: split sea binary manipulation code (Joyee Cheung) #6116746a2dad4db] - sqlite: avoid extra copy for large text binds (Ali Hassan) #61580f91a377f7e] - sqlite: use DictionaryTemplate for run() result (Mert Can Altin) #614320e7571ae3e] - sqlite: change approach to fix segfault SQLTagStore (Bart Louwers) #604628e8f70524a] - sqlite: reserve vectors space (Guilherme Araújo) #61540c0ceb9b065] - (SEMVER-MINOR) sqlite: enable defensive mode by default (Bart Louwers) #6126633d8e8303b] - (SEMVER-MINOR) sqlite: add sqlite prepare options args (Guilherme Araújo) #61311f0d8f37002] - src: elide heap allocation in structured clone implementation (Anna Henningsen) #61703db478c4336] - src: use simdutf for one-byte string UTF-8 write in stringBytes (Mert Can Altin) #61696563ab699eb] - (SEMVER-MINOR) src: add initial support for ESM in embedder API (Joyee Cheung) #61548da13186a15] - src: throw RangeError on failed ArrayBuffer BackingStore allocation (Chengzhong Wu) #614804c80031000] - (SEMVER-MINOR) stream: add bytes() method to stream/consumers (wantaek) #60426f5233df4ff] - (SEMVER-MINOR) stream: do not passreadable.compose()output viaReadable.from()(René) #60907ad04a469c8] - test: restraint version replacement pattern in snapshots (Chengzhong Wu) #617482d3b4a8d65] - test: print stack immediately avoiding GC interleaving (Chengzhong Wu) #6169938f43a6d4e] - test: fix case-insensitive path matching on Windows (Matteo Collina) #6168206513f5ff2] - test: fix flaky test-performance-eventloopdelay (Matteo Collina) #616299d79c66c61] - test: remove duplicate wpt tests (Filip Skokan) #61617eac9f4f401] - test: fix race condition in watch mode tests (Matteo Collina) #61615ecf5947575] - test: update WPT for url toe3c46fd(Node.js GitHub Bot) #61602356ff5fece] - test: use the skipIfNoWatch() utility function (Luigi Pinca) #615314b2187aea2] - test: unify assertSnapshot common patterns (Chengzhong Wu) #615908c25489d63] - test: split test-fs-watch-ignore-* (Luigi Pinca) #6149443b8a2b7e7] - test: add some validation for JSON doc output (Antoine du Hamel) #61413345a40fda3] - (SEMVER-MINOR) test: use fixture directories for sea tests (Joyee Cheung) #6116724cf6b8326] - test: reveal wpt evaluation errors in status files (Chengzhong Wu) #61358d4034dfb62] - test: forbid use of named imports for fixtures (Antoine du Hamel) #612284f871ee897] - test: enforce better never-settling-promise detection (Antoine du Hamel) #609768e9adedf02] - test: ensure assertions are reached on all tests (Antoine du Hamel) #60845273832802e] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60763e06adcb52f] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60760aeed0ccc02] - test: useRegExp.escapeto improve test reliability (Antoine du Hamel) #6080374bcd0adab] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60728407807b08e] - test: skip tests not passing withoutNODE_OPTIONSsupport (Antoine du Hamel) #60912a9e70cefb0] - test: ensure assertions are reached on more tests (Antoine du Hamel) #6063421b23cd0d0] - test_runner: fix test enqueue when test file has syntax error (Edy Silva) #615736a4de694b2] - test_runner: fix passingexpectFailure(Moshe Atlow) #615686640de2b0f] - test_runner: differentiate todo and failure styles (Moshe Atlow) #61564972f82411d] - (SEMVER-MINOR) test_runner: add env option to run function (Ethan Arrowood) #61367d77f98c4b6] - (SEMVER-MINOR) test_runner: support expecting a test-case to fail (Jacob Smith) #60669f98986cbb9] - tools: switch to ARM runners on GHA jobs (Antoine du Hamel) #61903034589dd93] - tools: avoid building twice in coverage jobs (Antoine du Hamel) #61899e50e2f00bb] - tools: use ubuntu-slim runner in GHA (Antoine du Hamel) #61759f658f48ccb] - tools: use ubuntu-slim runner in GHA (Antoine du Hamel) #6173465c77d74ff] - tools: use ubuntu-latest runner innotify-on-pushworkflow (Antoine du Hamel) #61742605905556a] - tools: enforce removal oflts-watch-*labels on release proposals (Antoine du Hamel) #61672f0f98d4c03] - tools: use ubuntu-slim runner in meta GitHub Actions (Tierney Cyren) #61663ab63ddf354] - tools: add LIEF to license builder (Chengzhong Wu) #615238a0f6192c9] - tools: enforce trailing commas intest/es-module(Antoine du Hamel) #608914afbbcf39e] - tools: enforce trailing commas intest/sequential(Antoine du Hamel) #608924c1abf752c] - tools,win: upgrade install additional tools to Visual Studio 2026 (Mike McCready) #615628e900af6ba] - (SEMVER-MINOR) util: add convertProcessSignalToExitCode utility (Erick Wendel) #60963v24.13.1: 2026-02-10, Version 24.13.1 'Krypton' (LTS), @aduh95Compare Source
Notable Changes
1f64d6841e] - build: add support for Python 3.14 (Christian Clauss) #5998330e500fc09] - cli: mark--heapsnapshot-near-heap-limitas stable (Joyee Cheung) #60956bc0a55f086] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #614198a67c00bf5] - doc: mark--build-snapshotand--build-snapshot-configas stable (Joyee Cheung) #609543999c2a910] - meta: add avivkeller to collaborators (Aviv Keller) #61115fa542fbae6] - meta: add gurgunday to collaborators (Gürgün Dayıoğlu) #61094ff11eda2f2] - meta: add Renegade334 to collaborators (Renegade334) #607142e387fb969] - url: update ada to v3.4.2 and support unicode 17 (Yagiz Nizipli) #61593bb206782d4] - v8: markv8.queryObjects()as stable (Joyee Cheung) #60957Commits
a73279c60d] - assert: use a set instead of an array for faster lookup (Ruben Bridgewater) #610766a61bcd73c] - assert,util: fix deep comparison for sets and maps with mixed types (Ruben Bridgewater) #61388cf0eabcd42] - assert,util: improve deep comparison performance (Ruben Bridgewater) #61076ff3b9ac183] - benchmark: add SQLite benchmarks (Guilherme Araújo) #61401e1f7d68c94] - benchmark: use boolean options in benchmark tests (SeokhunEom) #6012991127c91cd] - benchmark: allow boolean option values (SeokhunEom) #60129170fda55f6] - benchmark: add microbench on isInsideNodeModules (Chengzhong Wu) #609913976381b41] - benchmark: fix incorrect base64 input in byteLength benchmark (semimikoh) #60841c702fccd76] - benchmark: use typescript for import cjs benchmark (Joyee Cheung) #6066392c517c62d] - buffer: make methods work on Uint8Array instances (Neal Beeken) #56578be95382edb] - buffer: let Buffer.of use heap (Сковорода Никита Андреевич) #605031f64d6841e] - build: test on Python 3.14 (Christian Clauss) #59983ea4687981b] - build: update android-patches/trap-handler.h.patch (Mo Luo) #60369b3a7a8c780] - build: update devcontainer.json to use paired nix env (Joyee Cheung) #614147168d0b5e3] - build: add embedtest into native suite (Joyee Cheung) #61357e00755a977] - build: fix misplaced comma in ldflags (hqzing) #6129472fcc3ee9d] - build: fix crate vendor file checksums on windows (Chengzhong Wu) #6132976a73d68fd] - build: expose libplatform symbols in shared libnode (Joyee Cheung) #61144ef8d26ce5c] - build: fix inconsistent quoting inMakefile(Antoine du Hamel) #605112d23968783] - build: remove temporal updater (Chengzhong Wu) #611514c2655f1c2] - build: update test-wpt-report to use NODE instead of OUT_NODE (Filip Skokan) #61024eaea6821fc] - build: skip build-ci on actions with a separate test step (Chengzhong Wu) #61073dfd4e12037] - build: run embedtest with node_g when BUILDTYPE=Debug (Chengzhong Wu) #60850775c77234b] - build,tools: fix addon build deadlock on errors (Vladimir Morozov) #613215deafc10fa] - build,win: improve logs when ClangCL is missing (Mike McCready) #61438e2481c5c6e] - build,win: update WinGet configurations to Python 3.14 (Mike McCready) #61431d2586b7e4c] - child_process: treat ipc length header as unsigned uint32 (Ryuhei Shima) #6134430e500fc09] - cli: mark --heapsnapshot-near-heap-limit as stable (Joyee Cheung) #609562c7da15612] - cluster: fix port reuse between cluster (Ryuhei Shima) #60141bc0a55f086] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #614192d5f20e9c3] - crypto: update root certificates to NSS 3.117 (Node.js GitHub Bot) #60741fba95be188] - deps: update archs files for openssl-3.5.5 (Node.js GitHub Bot) #6154708697289e0] - deps: upgrade openssl sources to openssl-3.5.5 (Node.js GitHub Bot) #61547403c50c04d] - deps: update corepack to 0.34.6 (Node.js GitHub Bot) #615103b24691aeb] - deps: upgrade npm to 11.8.0 (npm team) #614662bba7efdc4] - deps: update googletest to8508785(Node.js GitHub Bot) #614178f8c6f6162] - deps: update sqlite to 3.51.2 (Node.js GitHub Bot) #61339c46009053c] - deps: update icu to 78.2 (Node.js GitHub Bot) #60523b46b8dd91b] - deps: update ada to v3.4.0 (Yagiz Nizipli) #6131588c6b17e18] - deps: update zlib to 1.3.1-e00f703 (Node.js GitHub Bot) #611350030c05ba9] - deps: update cjs-module-lexer to 2.2.0 (Node.js GitHub Bot) #6127177437cff89] - deps: update nbytes to 0.1.2 (Node.js GitHub Bot) #61270fb0f05a937] - deps: update timezone to 2025c (Node.js GitHub Bot) #61138b426a47c05] - deps: nghttp2: revert7784fa9(Antoine du Hamel) #61136c07a38f700] - deps: update nghttp2 to 1.68.0 (nodejs-github-bot) #61136c2ddc9a18b] - deps: update simdjson to 4.2.4 (Node.js GitHub Bot) #61056f38cd6da8e] - deps: update googletest to065127f(Node.js GitHub Bot) #61055a9a6a4cdb2] - deps: brotli: cherry-picke230f47(liujiahui) #610035a40023aae] - deps: upgrade npm to 11.7.0 (npm team) #610114121e7a413] - deps: update sqlite to 3.51.1 (Node.js GitHub Bot) #60899e8a09fc896] - deps: update zlib to 1.3.1-63d7e16 (Node.js GitHub Bot) #608988df5862ee5] - deps: upgrade npm to 11.6.4 (npm team) #608536c1c8cbdcc] - deps: update sqlite to 3.51.0 (Node.js GitHub Bot) #606142d1efc7c1b] - deps: upgrade npm to 11.6.3 (npm team) #607853a2de1c23b] - deps: update brotli to 1.2.0 (Node.js GitHub Bot) #6054058c5d40bd1] - deps: update simdjson to 4.2.2 (Node.js GitHub Bot) #60740e6b607ef50] - deps: update googletest to1b96fa1(Node.js GitHub Bot) #60739650c9e0305] - deps: update minimatch to 10.1.1 (Node.js GitHub Bot) #60543ef1951d5d5] - deps: update inspector_protocol to1b1bcbb(Node.js GitHub Bot) #60705eb068305dd] - deps: update cjs-module-lexer to 2.1.1 (Node.js GitHub Bot) #60646ee1d99131c] - deps: update simdjson to 4.2.1 (Node.js GitHub Bot) #6064423582967b7] - deps: V8: cherry-pick1441665(Domagoj Stolfa) #60989155eaedff2] - deps: V8: cherry-pick394a805(Lu Yahan) #60962c95a4a0f43] - deps: V8: backportbbaae8e(Lu Yahan) #609626f123f186d] - doc: move Security-Team from TSC to SECURITY (Rafael Gonzaga) #614952e3337d15b] - doc: addedrequestOCSPoption totls.connect(ikeyan) #61064f505f81577] - doc: restore @ChALkeR to collaborators (Сковорода Никита Андреевич) #6155312fb95d0c9] - doc: update IBM/Red Hat volunteers with dedicated project time (Beth Griggs) #61588283ab61ed2] - doc: align Buffer.concat documentation with behavior (Gürgün Dayıoğlu) #60405fc9c906d5f] - doc: removevprefix for version references (Mike McCready) #614884a88ed09e8] - doc: mention constructor comparison in assert.deepStrictEqual (Hamza Kargin) #602539b29d56491] - doc: add CVE delay mention (Rafael Gonzaga) #614654815e4ac52] - doc: update previous version links in BUILDING (Mike McCready) #614578a43244e6c] - doc: include OpenJSF handle for security stewards (Rafael Gonzaga) #6145489a7f184a1] - doc: clarify process.argv[1] behavior for -e/--eval (Jeevankumar S) #61366b4041aba1c] - doc: remove Windows Dev Home instructions from BUILDING (Mike McCready) #61434fa7830bac0] - doc: clarify TypedArray properties on Buffer (Roman Reiss) #6135545663c8956] - doc: update Python 3.14 manual install instructions (Windows) (Mike McCready) #614280248357f26] - doc: note resume build should not be done on node-test-commit (Stewart X Addison) #61373b254bab513] - doc: refine WebAssembly error documentation (sangwook) #613828aca37c6ef] - doc: add deprecation history for url.parse (Eng Zer Jun) #613898047ac3aac] - doc: add marco and rafael in last sec release (Marco Ippolito) #6138361190bf4b4] - doc: packages: example of private import switch to internal (coderaiser) #61343346311c42f] - doc: add esm and cjs examples to node:v8 (Alfredo González) #61328c07c80717c] - doc: addConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.