v6.16.1

What's Changed

• fix some typos by @Uzlopak in #3217
• websocket: move codeblock in parseCloseBody by @Uzlopak in #3215
• fetch: enable wpt test request-referrer.any.js by @Uzlopak in #3223
• fetch: wpt add /fetch/api/resources/cache.py to server.mjs by @Uzlopak in #3225
• add pipe support for wpt server by @KhafraDev in #3228
• test: reduce the number of requests in fire-and-forget.js by @tsctx in #3229
• ci: add node 22 in ci test matrix, use 22 for coverage by @Uzlopak in #3226
• fetch: don't set an invalid origin header by @KhafraDev in #3235
• fail wpt runner if expected failures does not match actual by @KhafraDev in #3236
• fix: ignore content-length when dumping HEAD by @ronag in #3222

Full Changelog: v6.16.0...v6.16.1

v6.16.0

What's Changed

• add index to sequence converter errors by @KhafraDev in #3178
• build(deps-dev): bump borp from 0.12.0 to 0.13.0 by @dependabot in #3179
• build(deps): bump node from 21-alpine3.19 to 22-alpine3.19 in /build by @dependabot in #3180
• build(deps): bump superagent from 8.1.2 to 9.0.2 in /benchmarks by @dependabot in #3181
• fix: keep raw header name by @tsctx in #3183
• fix(fetch): improve Headers and Request type-compatibility by @kettanaito in #1964
• fix 3 mimesniff tests by @KhafraDev in #3185
• build(deps): bump hendrikmuhs/ccache-action from 1.2.12 to 1.2.13 by @dependabot in #3187
• build(deps): bump codecov/codecov-action from 4.1.1 to 4.3.1 by @dependabot in #3191
• build(deps): bump github/codeql-action from 3.24.9 to 3.25.3 by @dependabot in #3192
• build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @dependabot in #3189
• build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #3188
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3 by @dependabot in #3190
• build(deps): bump node from 9459e24 to 487dc5d in /build by @dependabot in #3195
• perf: avoid spread in makeRequest() by @gunjam in #3193
• refactor: code cleanup by @tsctx in #3194
• fix parsing when receiving empty body websocket by @KhafraDev in #3205
• fix: MockResponseCallbackOptions type by @merojosa in #2951
• docs(proxy): fix typo by @kanadgupta in #3207
• fix websocket receiving an invalid utf-8 in close frame by @KhafraDev in #3206
• perf: avoid setImmediate if body is reading by @ronag in #3210
• fix: request abort signal by @ronag in #3209
• fix: remove abort handler on close by @ronag in #3211
• fix: pass abort function by @tsctx in #3212
• websocket: 200x faster generate mask by @tsctx in #3204
• use FinalizationRegistry to cancel the body if response is collected by @mcollina in #3199
• websocket: don't clone buffer if it's not needed. by @tsctx in #3214
• websocket: use FastBuffer by @tsctx in #3213

New Contributors

• @kettanaito made their first contribution in #1964
• @gunjam made their first contribution in #3193
• @merojosa made their first contribution in #2951
• @kanadgupta made their first contribution in #3207

Full Changelog: v6.15.0...v6.16.0

v6.15.0

What's Changed

• Expose EnvHttpProxyAgent to Node.js core bundle, so it can be turned … by @mcollina in #3148
• test: add headerslist copy check by @tsctx in #3156
• chore: ensure automated v6 release compared to v6 by @mweberxyz in #3149
• fetch: do not leak signal listeners by @mcollina in #3158
• fix: request cache mode is not the same as request mode by @tsibley in #3151
• fetch: don't re-lowercase HeadersList by @tsctx in #3159
• fix casing issue when cloning Headers object by @KhafraDev in #3160
• build(deps): bump node from 6d0f18a to db8772d in /build by @dependabot in #3163
• fix header cloning bug by @tsctx in #3162
• chore: change bench naming for h2 by @metcoder95 in #3165
• expose WebSocket related events in node bundle by @KhafraDev in #3167
• feat: add support for if-match on retry handler by @metcoder95 in #3144
• fix: correct firing order of abort events by @tsctx in #3169
• create fast MessageEvent by @KhafraDev in #3170
• chore: add explicitly @fastify/busboy by @Uzlopak in #3172
• chore: remove sinon as dev dependency by @Uzlopak in #3171
• webidl changes by @KhafraDev in #3175
• preserve dictionary key name in webidl errors by @KhafraDev in #3176

New Contributors

• @tsibley made their first contribution in #3151

Full Changelog: v6.14.1...v6.15.0

v6.14.1

What's Changed

• fix: tweak keep-alive timeout implementation by @mweberxyz in #3145
• build(deps-dev): bump borp from 0.11.0 to 0.12.0 by @dependabot in #3153
• build(deps): bump node from ad255c6 to 6d0f18a in /build by @dependabot in #3154
• fix(EnvHttpProxyAgent): prefer lowercase env vars by @10xLaCroixDrinker in #3152

Full Changelog: v6.14.0...v6.14.1

v6.14.0

What's Changed

• bench: enable benchmarks for h2 by @metcoder95 in #3100
• perf: improve performance of isomorphicEncode by @tsctx in #3101
• util: remove isReadableAborted by @Uzlopak in #3104
• fix(types): The second parameter of EventSource is optional by @zbinlin in #3106
• fix: onConnect types by @ronag in #3116
• add dispatcher option to EventSource by @KhafraDev in #3119
• core: improve parseURL by @Uzlopak in #3102
• test: increase coverage by @Uzlopak in #3121
• docs: add directions to run docs and benchmarks by @FatumaA in #3092
• perf: avoid unnecessary clone by @tsctx in #3117
• build(deps-dev): bump borp from 0.10.0 to 0.11.0 by @dependabot in #3126
• drop node support for < v18.17.0 by @KhafraDev in #3125
• test: improve test and ci performance by @Uzlopak in #3135
• Added EnvHttpProxyAgent to support HTTP_PROXY by @10xLaCroixDrinker in #2994
• fetch: Change wording of "Body is unusable" error by @nzakas in #3105
• perf: use class instead of object literals with getters by @tsctx in #3138
• fix: unhandled exception or failing error body by @ronag in #3137
• reuse realm for Request/Response by @KhafraDev in #3142
• fix(H2-#3140): abort requets upon GOAWAY by @metcoder95 in #3143
• don't store realm on Request/Response by @KhafraDev in #3146
• improve: wasm build by @Uzlopak in #3074

New Contributors

• @10xLaCroixDrinker made their first contribution in #2994
• @nzakas made their first contribution in #3105

Full Changelog: v6.13.0...v6.14.0

v6.13.0

What's Changed

• build(deps): bump node from 9696b26 to ad255c6 in /build by @dependabot in #3073
• test: remove only by @metcoder95 in #3077
• fix: defer errors with setImmediate by @ronag in #3081
• improve DecoratorHandler by @Uzlopak in #3079
• chore: removed unused escapeFormDataName by @mcollina in #3084
• Mention option to pass streams into FormData by @JaoodxD in #3086
• fetch: improve performance of isValidEncodedURL by @Uzlopak in #3090
• optimize utf8Decode by @Uzlopak in #3085
• refactor: h2 refactoring by @metcoder95 in #3082
• Skip the creation of a transform stream in fetch by @mcollina in #3093
• fetch: improve performance of urlHasHttpsScheme by @Uzlopak in #3094
• fetch: avoid creation of an intermediary ReadableStream by @KhafraDev in #3095
• test: duplicate jest unspecific tests to native runner by @Uzlopak in #3075
• build(deps): bump node from ad255c6 to 6d0f18a in /build by @dependabot in #3096
• fetch: improve performance of isValidHeaderValue by @Uzlopak in #3098
• chore: automate releases with pr by @mweberxyz in #3089

New Contributors

• @github-actions made their first contribution in #3099

Full Changelog: v6.12.0...v6.13.0

v6.12.0

What's Changed

• fix: broken test by @tsctx in #3045
• fix: http2 header parsing by @climba03003 in #3047
• types: fix Request.refererPolicy and RequestInit.refererPolicy are incompatible by @zbinlin in #3039
• fix(types): onHeaders always takes headers as an array of buffer by @ronag in #3050
• fix: ProxyAgent causes request.headers.host to be forcibly reset by @1zilc in #3026
• fallback to Buffer.isUtf8 on platforms without icu by @KhafraDev in #3006
• build(deps): bump github/codeql-action from 3.24.6 to 3.24.9 by @dependabot in #3037
• build(deps): bump actions/dependency-review-action from 4.1.3 to 4.2.5 by @dependabot in #3035
• build(deps): bump node from 577f8eb to 87524df in /build by @dependabot in #3055
• build(deps): bump node from 87524df to 9696b26 in /build by @dependabot in #3058
• fetch: Block ports 4190 & 6679 by @KhafraDev in #3059
• test: activate testing for interceptors and cache by @Uzlopak in #3061
• cache: improve test coverage by @Uzlopak in #3063
• feat: modernize fuzzing by @Uzlopak in #3060
• fix: request abort by @ronag in #3056
• fix: signal handling by @ronag in #3053
• fix(H2): handle goaway properly by @metcoder95 in #3057
• test: client, set body to null if bigger than CHUNK_LIMIT by @Uzlopak in #3064
• mock: improve mock interceptor by @Uzlopak in #3062
• fix: bad client destroy on servername change by @ronag in #3066
• perf: improve isBlobLike by @Uzlopak in #3070
• test: add sanity check for llhttp wasm files by @Uzlopak in #3068

New Contributors

• @zbinlin made their first contribution in #3039
• @1zilc made their first contribution in #3026

Full Changelog: v6.11.1...v6.12.0

v6.11.1

⚠️ Security Release ⚠️

What's Changed

• Fixes GHSA-m4v8-wqvr-p9f7 CVE-2024-30260
• Fixes GHSA-9qxr-qj54-h672 CVE-2024-30261
• Revert "fix: don't leak internal class (#3024)" by @mcollina in #3044

Full Changelog: v6.11.0...v6.11.1

v6.11.0

What's Changed

• refactor(#3023): Pass headers as array instead by @metcoder95 in #3025
• fix: don't leak internal class by @ronag in #3024
• build(deps): bump codecov/codecov-action from 4.1.0 to 4.1.1 by @dependabot in #3034
• build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @dependabot in #3038
• build(deps-dev): bump borp from 0.9.1 to 0.10.0 by @dependabot in #2947
• missing commits by @ronag in #3040
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #3036
• fix: regexp pattern by @tsctx in #3041

Full Changelog: v6.10.2...v6.11.0

v5.28.4

⚠️ Security Release ⚠️

• Fixes GHSA-m4v8-wqvr-p9f7 CVE-2024-30260
• Fixes GHSA-9qxr-qj54-h672 CVE-2024-30261

Full Changelog: v5.28.3...v5.28.4