You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Based on the list of guidelines we've established on integrating npm and node,
here is a grouped list of the breaking changes with the reasoning as to why they
fit within the guidelines linked above. Note that all the breaking changes were
made in 9.0.0.
All subsequent minor and patch releases after npm@9.0.0 do not contain any
breaking changes.
Engines
Explanation: the node engines supported by npm@9 make it safe to allow npm@9 as the default in any LTS version of 14 or 16, as well as anything later than or including 18.0.0
npm is now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0
Filesystem
Explanation: when run as root previous versions of npm attempted to manage file ownership automatically on the user's behalf. this behavior was problematic in many cases and has been removed in favor of allowing users to manage their own filesystem permissions
npm will no longer attempt to modify ownership of files it creates.
Auth
Explanation: any errors thrown from users having unsupported auth configurations will show npm config fix in the remediation instructions, which will allow the user to automatically have their auth config fixed.
The presence of auth related settings that are not scoped to a specific
registry found in a config file is no longer supported and will throw errors.
Login
Explanation: the default auth-type has changed and users can opt back into the old behavior with npm config set auth-type=legacy. login and adduser have also been seperated making each command more closely match it's name instead of being aliases for each other.
Legacy auth types sso, saml & legacy have been consolidated into "legacy".
auth-type defaults to "web"
login and adduser are now separate commands that send different data to the registry.
auth-type config values web and legacy only try their respective methods,
npm no longer tries them all and waits to see which one doesn't fail.
Tarball Packing
Explanation: previously using multiple ignore/allow lists when packing was an undefined behavior, and now the order of operations is strictly defined when packing a tarball making it easier to follow and should only affect users relying on the previously undefined behavior.
npm pack now follows a strict order of operations when applying ignore rules.
If a files array is present in the package.json, then rules in .gitignore
and .npmignore files from the root will be ignored.
Display/Debug/Timing Info
Explanation: these changes center around the display of information to the terminal including timing and debug log info. We do not anticipate these changes breaking any existing workflows.
Links generated from git urls will now use HEAD instead of master as the default ref.
timing has been removed as a value for --loglevel.
--timing will show timing information regardless of --loglevel, except when --silent.
When run with the --timing flag, npm now writes timing data to a file
alongside the debug log data, respecting the logs-dir option and falling
back to <CACHE>/_logs/ dir, instead of directly inside the cache directory.
The timing file data is no longer newline delimited JSON, and instead each run
will create a uniquely named <ID>-timing.json file, with the <ID> portion
being the same as the debug log.
npm now outputs some json errors on stdout. Previously npm would output
all json formatted errors on stderr, making it difficult to parse as the
stderr stream usually has logs already written to it.
Config/Command Deprecations or Removals
Explanation: install-links is the only config or command in the list that has an effect on package installs. We fixed a number of issues that came up during prereleases with this change. It will also only be applied to new package trees created without a package-lock.json file. Any install with an existing lock file will not be changed.
Deprecate boolean install flags in favor of --install-strategy.
npm config set will no longer accept deprecated or invalid config options.
install-links config defaults to "true".
node-version config has been removed.
npm-version config has been removed.
npm access subcommands have been renamed.
npm birthday has been removed.
npm set-script has been removed.
npm bin has been removed (use npx or npm exec to execute binaries).
Other notable changes
doc:
add parallelism note to os.cpus() (Colin Ihrig) #45895
By default Node.js is built so that all dependencies are bundled into the Node.js binary itself. Some Node.js distributions prefer to manage dependencies externally. There are existing build options that allow dependencies with native code to be externalized. This commit adds additional options so that dependencies with JavaScript code (including WASM) can also be externalized. This addition does not affect binaries shipped by the Node.js project but will allow other distributions to externalize additional dependencies when needed.
The File class is part of the FileAPI. It can be used anywhere a Blob can, for example in URL.createObjectURL and FormData. It contains two properties that Blobs do not have: lastModified, the last time the file was modified in ms, and name, the name of the file.
The node:test module supports mocking during testing via a top-level mock
object.
test('spies on an object method',(t)=>{constnumber={value: 5,add(a){returnthis.value+a;},};t.mock.method(number,'add');assert.strictEqual(number.add(3),8);assert.strictEqual(number.add.mock.calls.length,1);});
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
This PR includes no changesets
When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
added
dependencies
This PR contains the following updates:
16->18>=v14.21.2->>=v18.14.0Release Notes
nodejs/node
v18.14.0: 2023-02-02, Version 18.14.0 'Hydrogen' (LTS), @BethGriggs prepared by @juanarbolCompare Source
Notable changes
Updated npm to 9.3.1
Based on the list of guidelines we've established on integrating
npmandnode,here is a grouped list of the breaking changes with the reasoning as to why they
fit within the guidelines linked above. Note that all the breaking changes were
made in 9.0.0.
All subsequent minor and patch releases after
npm@9.0.0do not contain anybreaking changes.
Engines
npmis now compatible with the following semver range for node:^14.17.0 || ^16.13.0 || >=18.0.0Filesystem
npmwill no longer attempt to modify ownership of files it creates.Auth
registry found in a config file is no longer supported and will throw errors.
Login
sso,saml&legacyhave been consolidated into"legacy".auth-typedefaults to"web"loginandadduserare now separate commands that send different data to the registry.auth-typeconfig valueswebandlegacyonly try their respective methods,npm no longer tries them all and waits to see which one doesn't fail.
Tarball Packing
npm packnow follows a strict order of operations when applying ignore rules.If a
filesarray is present in thepackage.json, then rules in.gitignoreand
.npmignorefiles from the root will be ignored.Display/Debug/Timing Info
HEADinstead ofmasteras the default ref.timinghas been removed as a value for--loglevel.--timingwill show timing information regardless of--loglevel, except when--silent.--timingflag,npmnow writes timing data to a filealongside the debug log data, respecting the
logs-diroption and fallingback to
<CACHE>/_logs/dir, instead of directly inside the cache directory.will create a uniquely named
<ID>-timing.jsonfile, with the<ID>portionbeing the same as the debug log.
npmnow outputs some json errors on stdout. Previouslynpmwould outputall json formatted errors on stderr, making it difficult to parse as the
stderr stream usually has logs already written to it.
Config/Command Deprecations or Removals
--install-strategy.npm config setwill no longer accept deprecated or invalid config options.install-linksconfig defaults to"true".node-versionconfig has been removed.npm-versionconfig has been removed.npm accesssubcommands have been renamed.npm birthdayhas been removed.npm set-scripthas been removed.npm binhas been removed (usenpxornpm execto execute binaries).Other notable changes
Commits
1352f08778] - assert: removeassert.snapshot(Moshe Atlow) #461124ee3238643] - async_hooks: refactor to usevalidateObject(Deokjin Kim) #4600479e0bf9b64] - benchmark: include webstreams benchmark (Rafael Gonzaga) #45876ed1ac82469] - benchmark,tools: use os.availableParallelism() (Deokjin Kim) #4600316ee02f2eb] - (SEMVER-MINOR) buffer: add buffer.isUtf8 for utf8 validation (Yagiz Nizipli) #459473bf2371a57] - build: add extra semi check (Jiawen Geng) #46194560ee24157] - build: fix arm64 cross-compile from powershell (Stefan Stojanovic) #4589048e3ad3aca] - build: add option to disable shared readonly heap (Anna Henningsen) #4588752a7887b94] - (SEMVER-MINOR) crypto: add CryptoKey Symbol.toStringTag (Filip Skokan) #46042a558774a40] - crypto: add cipher update/final methods encoding validation (vitpavlenko) #45990599d1dc841] - crypto: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) #4618524a101698c] - crypto: return correct bit length in KeyObject's asymmetricKeyDetails (Filip Skokan) #461062de50fef84] - (SEMVER-MINOR) crypto: add KeyObject Symbol.toStringTag (Filip Skokan) #46043782b6f6f9f] - crypto: ensure exported webcrypto EC keys use uncompressed point format (Ben Noordhuis) #460217a97f3f43b] - crypto: fix CryptoKey prototype WPT (Filip Skokan) #458571a8aa50aa2] - crypto: fix CryptoKey WebIDL conformance (Filip Skokan) #45855c6436450ee] - crypto: fix error when getRandomValues is called without arguments (Filip Skokan) #458544cdf0002c5] - debugger: refactor console in lib/internal/debugger/inspect.js (Debadree Chatterjee) #45847b7fe8c70fa] - deps: update simdutf to 3.1.0 (Node.js GitHub Bot) #46257eaeb870cd7] - deps: upgrade npm to 9.3.1 (npm team) #462427c03a3d676] - deps: upgrade npm to 9.3.0 (npm team) #46193340d76accb] - deps: cherrypick simdutf patch (Jiawen Geng) #46194cce2af4306] - deps: bump googletest to 2023.01.13 (Jiawen Geng) #46198d251a66bed] - deps: add /deps/**/.github/ to .gitignore (Luigi Pinca) #46091874054f469] - deps: add simdutf version to metadata (Mike Roth) #461452497702b82] - deps: update simdutf to 2.1.0 (Node.js GitHub Bot) #46128c8492b7f4c] - deps: update corepack to 0.15.3 (Node.js GitHub Bot) #46037d148f357fd] - deps: update simdutf to 2.0.9 (Node.js GitHub Bot) #45975422a98199c] - deps: update to uvwasi 0.0.14 (Colin Ihrig) #459707812752db0] - deps: fix updater github workflow job (Yagiz Nizipli) #459724063cdcef6] - Revert "deps: disable avx512 for simutf on benchmark ci" (Yagiz Nizipli) #4594864d3e3f3ba] - deps: disable avx512 for simutf on benchmark ci (Yagiz Nizipli) #45803c9845fc334] - deps: add simdutf dependency (Yagiz Nizipli) #458036963c96547] - deps: update timezone to 2022g (Node.js GitHub Bot) #45731874f6c340b] - deps: update undici to 5.14.0 (Node.js GitHub Bot) #458127599b913d5] - deps: upgrade npm to 9.2.0 (npm team) #457804844935ff3] - deps: upgrade npm to 9.1.3 (npm team) #456938dce62c7fe] - deps: V8: cherry-pick5fe919f(Richard Lau) #455878de642517e] - dgram: sync the old handle state to new handle (theanarkh) #46041de2b7a9640] - doc: fix mismatched arguments ofNodeEventTarget(Deokjin Kim) #456786317502d10] - doc: update events API example to have runnable code (Deokjin Kim) #45760a9db45eee1] - doc: add note to tls docs about secureContext availability (Tim Gerk) #462245294371063] - doc: add text around collaborative expectations (Michael Dawson) #46121be85d5a6eb] - doc: update to match changed--dns-result-orderdefault (Mordy Tikotzky) #461484f2d9ea6da] - doc: add Node-API media link (Kevin Eady) #461899bfd40466f] - doc: update http.setMaxIdleHTTPParsers arguments (Debadree Chatterjee) #46168d7a8c076e1] - doc: use "file system" instead of "filesystem" (Rich Trott) #46178e54483cd2b] - doc: https update default request timeout (Marco Ippolito) #46184335110b0fb] - doc: make options of readableStream.pipeTo as optional (Deokjin Kim) #46180ec34cad712] - doc: add PerformanceObserver.supportedEntryTypes to doc (theanarkh) #45962d0f905bd6f] - doc: duplex and readable from uncaught execption warning (Marco Ippolito) #46135512feaafa4] - doc: remove outdated sections frommaintaining-v8(Antoine du Hamel) #46137849a3e2ce7] - doc: fix (EC)DHE remark in TLS docs (Tobias Nießen) #46114a3c9c1b4e6] - doc: fix ERR_TLS_RENEGOTIATION_DISABLED text (Tobias Nießen) #461221834e94ebb] - doc: fix spelling in SECURITY.md (Vaishno Chaitanya) #461243968698af5] - doc: abort controller emits error in child process (Debadree Chatterjee) #460721ec14c2c61] - doc: fixevent.cancelBubbledocumentation (Deokjin Kim) #459865539977f80] - doc: add personal pronouns option (Filip Skokan) #461181fabef3a81] - doc: mention how to run ncu-ci citgm (Rafael Gonzaga) #4609084dc65ab87] - doc: include updating release optional step (Rafael Gonzaga) #4608976c7ea1e74] - doc: describe argument ofSymbol.for(Deokjin Kim) #460192307a74990] - doc: update isUtf8 description (Yagiz Nizipli) #45973fa5b65ea24] - doc: use console.error for error case in timers and tls (Deokjin Kim) #4600229d509c100] - doc: fix wrong output of example inurl.protocol(Deokjin Kim) #4595461dbca2690] - doc: useos.availableParallelism()in async_context and cluster (Deokjin Kim) #4597986b2c8cea2] - doc: make EventEmitterAsyncResource'soptionsas optional (Deokjin Kim) #45985335acf7748] - doc: replace single executable champion in strategic initiatives doc (Darshan Sen) #45956aab35a9388] - doc: update error message of example in repl (Deokjin Kim) #4592053a94a95ff] - doc: fix typos in packages.md (Eric Mutta) #4595783875f46cf] - doc: remove port from example inurl.hostname(Deokjin Kim) #45927162d3a94e3] - doc: show output of example in http (Deokjin Kim) #4591553684e4506] - (SEMVER-MINOR) doc: add parallelism note to os.cpus() (Colin Ihrig) #45895546e083d36] - doc: fix wrong output of example inurl.password(Deokjin Kim) #4592814c95ecd23] - doc: fix some history entries indeprecations.md(Antoine du Hamel) #45891d94dba973b] - doc: add tip for NODE_MODULE (theanarkh) #45797662f574c5b] - doc: reduce likelihood of mismerges during release (Richard Lau) #4586448ea28aa30] - doc: add backticks to webcrypto rsaOaepParams (Filip Skokan) #45883726b285163] - doc: remove release cleanup step (Michaël Zasso) #458585eb93f1de9] - doc: add stream/promises pipeline and finished to doc (Marco Ippolito) #45832f874d0ba74] - doc: remove Juan Jose keys (Rafael Gonzaga) #4582767efe2a55e] - doc: fix wrong output of example in util (Deokjin Kim) #45825b709af31e0] - doc: sort http.createServer() options alphabetically (Luigi Pinca) #45680ebe292113a] - doc,crypto: fix WebCryptoAPI import keyData and export return (Filip Skokan) #46076204757719c] - errors: refactor to use a method that formats a list string (Daeyeon Jeong) #45793463bb9602e] - esm: markimportAssertionsas required (Antoine du Hamel) #461640bdf2db079] - esm: rewrite loader hooks test (Geoffrey Booth) #46016297773c6d1] - events: change status ofevent.returnvalueto legacy (Deokjin Kim) #46175d088d6e5c3] - events: change status ofevent.cancelBubbleto legacy (Deokjin Kim) #4614636be0c4ee2] - events: change status ofevent.srcElementto legacy (Deokjin Kim) #46085b239f0684a] - events: fix violation of symbol naming convention (Deokjin Kim) #45978aec340b312] - fs: refactor to usevalidateInteger(Deokjin Kim) #46008e620de6444] - http: refactor to usevalidateHeaderName(Deokjin Kim) #461433e70b7d863] - http: writeHead if statusmessage is undefined dont override headers (Marco Ippolito) #461733d1dd96c4f] - http: refactor to use min of validateNumber for maxTotalSockets (Deokjin Kim) #461154df1fcc9db] - (SEMVER-MINOR) http: join authorization headers (Marco Ippolito) #459828c06e2f645] - http: replacevarwithconston code of comment (Deokjin Kim) #459513c0c5e0567] - (SEMVER-MINOR) http: improved timeout defaults handling (Paolo Insogna) #45778edcd4fc576] - lib: use kEmptyObject and update JSDoc in webstreams (Deokjin Kim) #46183d6fc855b8a] - lib: refactor to use validate function (Deokjin Kim) #46101bc17f37b98] - lib: reuse invalid state errors on webstreams (Rafael Gonzaga) #4608686554bf27c] - lib: fix incorrect use of console intrinsic (Colin Ihrig) #460447fc7b19124] - lib: update JSDoc ofgetOwnPropertyValueOrDefault(Deokjin Kim) #46010c1cc1f9e12] - lib: usekEmptyObjectas default value for options (Deokjin Kim) #46011db617222da] - meta: update AUTHORS (Node.js GitHub Bot) #4621510afecd0d8] - meta: update AUTHORS (Node.js GitHub Bot) #46130d8ce990ce6] - meta: update comment inCODEOWNERSto better reflect current policy (Antoine du Hamel) #45944e3f0194168] - meta: update AUTHORS (Node.js GitHub Bot) #46040d31c478929] - meta: update AUTHORS (Node.js GitHub Bot) #4596810a276a3e0] - meta: addnodejs/loadersto CODEOWNERS (Geoffrey Booth) #4594056247d7c87] - meta: addnodejs/test_runnerto CODEOWNERS (Antoine du Hamel) #459353bef8bc743] - meta: update AUTHORS (Node.js GitHub Bot) #45899baf30ee935] - module: fix unintended mutation (Antoine du Hamel) #461083ad584c357] - net: handle socket.write(cb) edge case (Santiago Gimeno) #459222ab35cf0cc] - node-api: disambiguate napi_add_finalizer (Chengzhong Wu) #454016e9676e986] - node-api: generalize finalizer second pass callback (Chengzhong Wu) #44141b2faceff0a] - (SEMVER-MINOR) os: add availableParallelism() (Colin Ihrig) #458958fac4c5684] - perf_hooks: fix checking range ofoptions.figuresin createHistogram (Deokjin Kim) #45999ea73702847] - process,worker: ensure code after exit() effectless (ywave620) #45620784ed594ea] - repl: improve robustness wrt to prototype pollution (Antoine du Hamel) #45604fcfde3412e] - src: rename internal module declaration as internal bindings (Chengzhong Wu) #45551646cadccd0] - src: fix endianness of simdutf (Yagiz Nizipli) #4625794605b1665] - src: replace unreachable code with static_assert (Tobias Nießen) #462093ce39bbcb7] - src: hide kMaxDigestMultiplier outside HKDF impl (Tobias Nießen) #462069648b06e09] - src: distinguish env stopping flags (Chengzhong Wu) #4590753ecd20bbd] - src: remove return after abort (Shelley Vohr) #46172c4c8931b9d] - src: remove unnecessary semicolons (Shelley Vohr) #46171fab72b1677] - src: use simdutf for converting externalized builtins to UTF-16 (Anna Henningsen) #4611967729961e7] - src: use constant strings for memory info names (Chengzhong Wu) #460870ac4e5dd34] - src: fix typo in node_snapshotable.cc (Vadim) #46103b454a7665d] - src: keep PipeWrap::Open function consistent with TCPWrap (theanarkh) #4606441f5a29cca] - src: speed up process.getActiveResourcesInfo() (Darshan Sen) #4601402a61dd6bd] - src: fix typo innode_file.cc(Vadim) #4599899c033ed98] - src: fix crash on OnStreamRead on Windows (Santiago Gimeno) #4587827d6a8b2b1] - src: fix creatingIsolates from addons (Anna Henningsen) #458859ca31cdba3] - src: use string_view for FastStringKey implementation (Anna Henningsen) #45914e4fc3abfd5] - src: fix UB in overflow checks (Ben Noordhuis) #45882574afac26a] - src: check size of args before using for exec_path (A. Wilcox) #45902f0692468cd] - src: fix tls certificate root store data race (Ben Noordhuis) #45767a749ceda2e] - src: add undici and acorn toprocess.versions(Debadree Chatterjee) #4562108a6a61575] - src,lib: the handle keeps loop alive in cluster rr mode (theanarkh) #46161a87963de6b] - stream: fix pipeline calling end on destination more than once (Debadree Chatterjee) #46226cde59606cd] - (SEMVER-MINOR) stream: implement finished() for ReadableStream and WritableStream (Debadree Chatterjee) #46205441d9de33e] - stream: refactor to usevalidateFunction(Deokjin Kim) #46007325fc08d48] - stream: fix typo in JSDoc (Deokjin Kim) #45991536322fa1c] - test: update postject to 1.0.0-alpha.4 (Node.js GitHub Bot) #46212a3056f4125] - test: refactor to avoid mutation of global by a loader (Michaël Zasso) #462201790569518] - test: improve test coverage for WHATWGTextDecoder(Juan José) #45241896027c006] - test: add fix so that test exits if port 42 is unprivileged (Suyash Nayan) #45904257224da0e] - test: useos.availableParallelism()(Deokjin Kim) #460037e1462dd02] - test: update Web Events WPT (Deokjin Kim) #4605140d52fbc5f] - test: add test to once() in event lib (Jonathan Diaz) #46126f3518f3337] - test: useprocess.hrtime.bigintinstead ofprocess.hrtime(Deokjin Kim) #458774d6dd10464] - test: print failed JS/parallel tests (Geoffrey Booth) #459607cb6fef6d6] - test: fix test broken under --node-builtin-modules-path (Geoffrey Booth) #4589455e4140c34] - test: fix mock.method to support class instances (Erick Wendel) #45608286acaa6fe] - test: update encoding wpt to latest (Yagiz Nizipli) #4585022c1e918ce] - test: update url wpt to latest (Yagiz Nizipli) #458525fa6a70bbd] - test: add CryptoKey transferring tests (Filip Skokan) #458114aaec07266] - test: add postject to fixtures (Darshan Sen) #45298da78f9cbb8] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #458603269423032] - test,esm: validate more edge cases for dynamic imports (Antoine du Hamel) #46059cade2fccf4] - test_runner: run t.after() if test body throws (Colin Ihrig) #4587087a0e86604] - test_runner: parse yaml (Moshe Atlow) #45815757a022443] - tls: don't treat fatal TLS alerts as EOF (David Benjamin) #44563c6457cbf8d] - tls: fix re-entrancy issue with TLS close_notify (David Benjamin) #44563fcca2d5ea6] - tools: update lint-md-dependencies (Node.js GitHub Bot) #4621409adb86c19] - tools: fix macro name in update-undici (Almeida) #462171b0cc79785] - tools: add automation for updating postject dependency (Darshan Sen) #4615738df662119] - tools: update create-or-update-pull-request-action (Michaël Zasso) #461693f4c0c0de1] - tools: update eslint to 8.31.0 (Node.js GitHub Bot) #46131f3dc4329e6] - tools: update lint-md-dependencies to rollup@3.9.1 (Node.js GitHub Bot) #46129fafbd1ca72] - tools: move update-eslint.sh to dep_updaters/ (Luigi Pinca) #46088609df01fa9] - tools: make update-eslint.sh work with npm@9 (Luigi Pinca) #4608831b8cf1a4d] - tools: fix lint rule recommendation (Colin Ihrig) #460440a80cbdcb1] - tools: update lint-md-dependencies to rollup@3.9.0 (Node.js GitHub Bot) #4603918503fa7ba] - tools: update doc to unist-util-select@4.0.2 (Node.js GitHub Bot) #46038b48e82ec1d] - tools: add release host var to promotion script (Ruy Adorno) #459133b93b0c1f5] - tools: add url toAUTHORSupdate automation (Antoine du Hamel) #45971623b0eba81] - tools: update lint-md-dependencies to rollup@3.8.1 (Node.js GitHub Bot) #45967b0e88377fe] - tools: update GitHub workflow action (Mohammed Keyvanzadeh) #45937974442e69d] - tools: update lint-md dependencies (Node.js GitHub Bot) #458135aaa8c3bbf] - tools: enforce use of trailing commas intools/(Antoine du Hamel) #458891e32520f72] - tools: addArrayPrototypeConcatto the list of primordials to avoid (Antoine du Hamel) #44445e0cda56204] - tools: fix incorrect version history order (Fabien Michel) #457287438ff175a] - tools: update eslint to 8.29.0 (Node.js GitHub Bot) #457331e11247b91] - Revert "tools: update V8 gypfiles for RISC-V" (Lu Yahan) #461560defe4effa] - trace_events: refactor to usevalidateStringArray(Deokjin Kim) #46012f1dcbe7652] - util: add fast path for text-decoder fatal flag (Yagiz Nizipli) #45803277d9da876] - vm: refactor to use validate function (Deokjin Kim) #4617696f1b2e731] - vm: refactor to usevalidateStringArray(Deokjin Kim) #46020v18.13.0: 2023-01-05, Version 18.13.0 'Hydrogen' (LTS), @danielleadamsCompare Source
Notable changes
Add support for externally shared js builtins
By default Node.js is built so that all dependencies are bundled into the Node.js binary itself. Some Node.js distributions prefer to manage dependencies externally. There are existing build options that allow dependencies with native code to be externalized. This commit adds additional options so that dependencies with JavaScript code (including WASM) can also be externalized. This addition does not affect binaries shipped by the Node.js project but will allow other distributions to externalize additional dependencies when needed.
Contributed by Michael Dawson in #44376
Introduce
FileThe File class is part of the FileAPI. It can be used anywhere a Blob can, for example in
URL.createObjectURLandFormData. It contains two properties that Blobs do not have:lastModified, the last time the file was modified in ms, andname, the name of the file.Contributed by Khafra in #45139
Support function mocking on Node.js test runner
The
node:testmodule supports mocking during testing via a top-levelmockobject.
Contributed by Colin Ihrig in #45326
Other notable changes
url.parse(Antoine du Hamel) #45576Commits
40123a6bb0] - (SEMVER-MINOR) async_hooks: add hook to stop propagation (Gerhard Stöbich) #453869925d20ed8] - benchmark: add variety of inputs to text-encoder (Yagiz Nizipli) #457875e167bd658] - benchmark: make benchmarks runnable in older versions of Node.js (Joyee Cheung) #45746a1421623ac] - benchmark: add v8 serialize benchmark (Yagiz Nizipli) #45476fcf61884cc] - benchmark: add text-encoder benchmark (Yagiz Nizipli) #45450762d285c98] - benchmark: add parameters to text-decoder benchmark (Yagiz Nizipli) #45363ab891ecbff] - benchmark: fix text-decoder benchmark (Yagiz Nizipli) #453631ed312a737] - benchmark: add blob benchmark (Yagiz Nizipli) #449902ee3d81277] - bootstrap: merge main thread and worker thread initializations (Joyee Cheung) #44869e638ea4f48] - bootstrap: check more metadata when loading the snapshot (Joyee Cheung) #44132bfcf4f0046] - buffer: make decodeUTF8 params loose (Yagiz Nizipli) #456103a7f3d5993] - (SEMVER-MINOR) buffer: introduce File (Khafra) #45139345b847aa6] - buffer: fix validation of options inBlobconstructor (Antoine du Hamel) #451561ddc438444] - build: disable v8 snapshot compression by default (Joyee Cheung) #45716bd1a2fbd91] - build: add python 3.11 support for android (Mohammed Keyvanzadeh) #457652b0ace302d] - build: rework gyp files for zlib (Richard Lau) #455895ab7a30a06] - build: avoid redefined macro (Michaël Zasso) #45544f58b32c22e] - build: fix env.h for cpp20 (Jiawen Geng) #455161de1f679ec] - Revert "build: remove precompiled header and debug information for host builds" (Stefan Stojanovic) #4543289d1eb58b0] - build: add --v8-disable-object-print flag (MURAKAMI Masahiko) #45458f2a4def232] - build: make scripts in gyp run with right python (Jiawen Geng) #45435473a879c91] - build: workaround for node-core-utils (Jiawen Geng) #45199abcc034c61] - build: fix icu-small build with ICU 72.1 (Steven R. Loomis) #451958a99221a21] - build: remove unused language files (Ben Noordhuis) #451383fb44f9413] - build: add GitHub token to auto-start-ci workflow (Richard Lau) #451852aac993bb2] - build: add version info to timezone update PR (Darshan Sen) #450210db19b3c60] - build: support Python 3.11 (Luigi Pinca) #45191fb008a2e9b] - build,deps,src: fix Intel VTune profiling support (Shi Lei) #4524861bc27a5b4] - build,win: pass --debug-nghttp2 to configure (Santiago Gimeno) #452097b68c06988] - child_process: validate arguments for null bytes (Darshan Sen) #44782bac6b7d900] - crypto: simplify lazy loading of internal modules (Antoine du Hamel) #458092fbf95662c] - crypto: fix CipherBase Update int32 overflow (Marco Ippolito) #457690100fd445b] - crypto: refactor ArrayBuffer to bigint conversion utils (Antoine du Hamel) #45567fa0a2d8e5d] - crypto: refactor verify acceptable key usage functions (Filip Skokan) #45569ef64b86d0d] - crypto: fix ECDH webcrypto public CryptoKey usages (Filip Skokan) #45569b92b80424a] - crypto: validate CFRG webcrypto JWK import "d" and "x" are a pair (Filip Skokan) #45569621e3c9cd4] - crypto: use DataError for CFRG webcrypto raw and jwk import key checks (Filip Skokan) #455698fcfbeffe1] - crypto: use DataError for webcrypto keyData import failures (Filip Skokan) #45569a976a63138] - crypto: fix X25519 and X448 webcrypto public CryptoKey usages (Filip Skokan) #4556927adcc9c4b] - crypto: ensure "x" is present when importing private CFRG webcrypto keys (Filip Skokan) #45569f27ebab56c] - crypto: clear OpenSSL error queue after calling X509_check_private_key() (Filip Skokan) #45495319ae095fb] - crypto: update root certificates (Luigi Pinca) #45490dae92e78d6] - crypto: clear OpenSSL error queue after calling X509_verify() (Takuro Sato) #453771ba1809dfd] - crypto: handle more webcrypto errors with OperationError (Filip Skokan) #45320b54f8761ae] - crypto: handle unsupported AES ciphers in webcrypto (Filip Skokan) #4532157f507f1dd] - crypto: fix webcrypto HMAC "get key length" in deriveKey and generateKey (Filip Skokan) #449177565a75ee5] - crypto: remove webcrypto HKDF and PBKDF2 default-applied lengths (Filip Skokan) #44945631421e8d0] - crypto: simplify webcrypto ECDH deriveBits (Filip Skokan) [#44946](https://togithub.com/nodejs/node/pull/4Configuration
📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate. View repository job log here.