2026-01-26, Version 25.5.0 (Current) by github-actions[bot] · Pull Request #61519 · nodejs/node · GitHub

[99a4e51f93] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419
[fbe4da5725] - (SEMVER-MINOR) deps: add LIEF as a dependency (Joyee Cheung) #61167
[0feab0f083] - (SEMVER-MINOR) deps: add tools and scripts to pull LIEF as a dependency (Joyee Cheung) #61167
[e91b296001] - (SEMVER-MINOR) fs: add ignore option to fs.watch (Matteo Collina) #61433
[b351910af1] - (SEMVER-MINOR) sea: add --build-sea to generate SEA directly with Node.js binary (Joyee Cheung) #61167
[957292e233] - (SEMVER-MINOR) sea: split sea binary manipulation code (Joyee Cheung) #61167
[f289817ff8] - (SEMVER-MINOR) sqlite: enable defensive mode by default (Bart Louwers) #61266
[069f3603e2] - (SEMVER-MINOR) sqlite: add sqlite prepare options args (Guilherme Araújo) #61311
[5a984b9a09] - src: use node- prefix on thread names (Stewart X Addison) #61307
[75c06bc2a8] - (SEMVER-MINOR) test: migrate to --build-sea in existing SEA tests (Joyee Cheung) #61167
[cabd58f1cb] - (SEMVER-MINOR) test: use fixture directories for sea tests (Joyee Cheung) #61167
[ff1fcabfc9] - (SEMVER-MINOR) test_runner: support expecting a test-case to fail (Jacob Smith) #60669

Commits

[778a56f3c9] - assert,util: fix deep comparison for sets and maps with mixed types (Ruben Bridgewater) #61388
[32cd18e37f] - async_hooks: enabledHooksExist shall return if hooks are enabled (Gerhard Stöbich) #61054
[482b2568bc] - benchmark: add SQLite benchmarks (Guilherme Araújo) #61401
[e9a34263bb] - buffer: make methods work on Uint8Array instances (Neal Beeken) #56578
[8255cdefcf] - build: add --shared-nbytes configure flag (Antoine du Hamel) #61341
[8dd379d110] - build: update android-patches/trap-handler.h.patch (Mo Luo) #60369
[1b4b5eb0e4] - build: update devcontainer.json to use paired nix env (Joyee Cheung) #61414
[86e2a763ad] - build: infer cargo mode with gyp var build_type directly (Chengzhong Wu) #61354
[7e211e6942] - build: add embedtest into native suite (Joyee Cheung) #61357
[637470e79f] - build: fix misplaced comma in ldflags (hqzing) #61294
[a1a0f77a45] - build: fix crate vendor file checksums on windows (Chengzhong Wu) #61329
[d597b8e342] - build,tools: fix addon build deadlock on errors (Vladimir Morozov) #61321
[b5cdc27ba4] - build,win: improve logs when ClangCL is missing (Mike McCready) #61438
[ef01f0c033] - build,win: update WinGet configurations to Python 3.14 (Mike McCready) #61431
[d8a1cdeefe] - child_process: treat ipc length header as unsigned uint32 (Ryuhei Shima) #61344
[588b00fafa] - cluster: fix port reuse between cluster (Ryuhei Shima) #60141
[99a4e51f93] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419
[048f7a5c9c] - deps: upgrade npm to 11.8.0 (npm team) #61466
[fbe4da5725] - (SEMVER-MINOR) deps: add LIEF as a dependency (Joyee Cheung) #61167
[0feab0f083] - (SEMVER-MINOR) deps: add tools and scripts to pull LIEF as a dependency (Joyee Cheung) #61167
[4bb00d7e3c] - deps: update googletest to 85087857ad10bd407cd6ed2f52f7ea9752db621f (Node.js GitHub Bot) #61417
[6a3c614f27] - deps: update sqlite to 3.51.2 (Node.js GitHub Bot) #61339
[13c0397d6d] - deps: update icu to 78.2 (Node.js GitHub Bot) #60523
[098ec6f196] - deps: update ada to v3.4.0 (Yagiz Nizipli) #61315
[320b576125] - deps: update zlib to 1.3.1-e00f703 (Node.js GitHub Bot) #61135
[98f5e7cf51] - deps: V8: cherry-pick highway@dcc0ca1cd42 (Richard Lau) #61008
[e326df79c9] - deps: V8: backport 209d2db9e24a (Zhijin Zeng) #61322
[85e959e569] - doc: remove v prefix for version references (Mike McCready) #61488
[b6cc5d77a1] - doc: mention constructor comparison in assert.deepStrictEqual (Hamza Kargin) #60253
[236d7ee635] - doc: add CVE delay mention (Rafael Gonzaga) #61465
[0729fb6ee7] - doc: update previous version links in BUILDING (Mike McCready) #61457
[0fb464252f] - doc: include OpenJSF handle for security stewards (Rafael Gonzaga) #61454
[3331bdca7c] - doc: clarify process.argv[1] behavior for -e/--eval (Jeevankumar S) #61366
[94b34c38e2] - doc: remove Windows Dev Home instructions from BUILDING (Mike McCready) #61434
[a17016ee81] - doc: clarify TypedArray properties on Buffer (Roman Reiss) #61355
[214fac9d7e] - doc: update Python 3.14 manual install instructions (Windows) (Mike McCready) #61428
[6a32a685a6] - doc: note resume build should not be done on node-test-commit (Stewart X Addison) #61373
[2a8e8dfaf3] - doc: refine WebAssembly error documentation (sangwook) #61382
[f3caf27f8b] - doc: add deprecation history for url.parse (Eng Zer Jun) #61389
[5ab8057856] - doc: add marco and rafael in last sec release (Marco Ippolito) #61383
[f83cb1e785] - doc: packages: example of private import switch to internal (coderaiser) #61343
[3d23bcd0e2] - doc: add esm and cjs examples to node:v8 (Alfredo González) #61328
[1d159550e0] - doc: added 'secure' event to tls.TLSSocket (ikeyan) #61066
[90080d2892] - doc: restore @watilde to collaborators (Daijiro Wachi) #61350
[a87f7a50f8] - doc: run license-builder (github-actions[bot]) #61348
[adf5c84701] - doc: clean up writing-and-running-benchmarks.md (Hardanish Singh) #61345
[2be98add0c] - doc: document ALPNCallback option for TLSSocket constructor (ikeyan) #61331
[2db4893c8d] - esm: ensure watch mode restarts after syntax errors (Xavier Stouder) #61232
[828feb2e6b] - events: remove redundant todo (Gürgün Dayıoğlu) #60595
[e91b296001] - (SEMVER-MINOR) fs: add ignore option to fs.watch (Matteo Collina) #61433
[606184fae5] - fs: remove duplicate getValidatedPath calls (Mert Can Altin) #61359
[434fcd7f8f] - fs: fix errorOnExist behavior for directory copy in fs.cp (Nicholas Paun) #60946
[bacba16f5e] - fs: fix ENOTDIR in globSync when file is treated as dir (sangwook) #61259
[7697ce0310] - fs: remove duplicate fd validation in sync functions (Mert Can Altin) #61361
[8abd54f597] - gyp: aix: change gcc version detection so CXX="ccache g++" works (Stewart X Addison) #61464
[24033ee7ea] - http: fix rawHeaders exceeding maxHeadersCount limit (Max Harari) #61285
[cf56327939] - http2: validate initialWindowSize per HTTP/2 spec (Matteo Collina) #61402
[696935eeeb] - inspector: initial support storage inspection (Ryuhei Shima) #61139
[3d5e718e38] - lib: fix typo in util.js comment (Taejin Kim) #61365
[f55a5fea00] - lib: fix TypeScript support check in jitless mode (sangwook) #61382
[b3fbc3c375] - meta: do not fast-track npm updates (Antoine du Hamel) #61475
[2423ecdaef] - meta: fix typos in issue template config (Daijiro Wachi) #61399
[e2df85a33a] - meta: label v8 module PRs (René) #61325
[bc9e5f7d4d] - node-api: fix node_api_create_object_with_properties name (Vladimir Morozov) #61319
[4f30c21c59] - node-api: use Node-API in comments (Vladimir Morozov) #61320
[62d71eb28d] - quic: copy options.certs buffer instead of detaching (Chengzhong Wu) #61403
[4bbbe75ba1] - quic: move quic behind compile time flag (Matteo Collina) #61444
[b351910af1] - (SEMVER-MINOR) sea: add --build-sea to generate SEA directly with Node.js binary (Joyee Cheung) #61167
[957292e233] - (SEMVER-MINOR) sea: split sea binary manipulation code (Joyee Cheung) #61167
[f289817ff8] - (SEMVER-MINOR) sqlite: enable defensive mode by default (Bart Louwers) #61266
[6442229880] - sqlite: add some tests (Guilherme Araújo) #61410
[069f3603e2] - (SEMVER-MINOR) sqlite: add sqlite prepare options args (Guilherme Araújo) #61311
[df02d00d61] - src: improve StringBytes::Encode perf on UTF8 (Сковорода Никита Андреевич) #61131
[e35814ba80] - src: add missing override specifier to Clean() (Tobias Nießen) #61429
[803ff7d3de] - src: cache context lookup in vectored io loops (Mert Can Altin) #61387
[58abe99cbf] - src: cache missing package.json files in the C++ package config cache (Michael Smith) #60425
[2a542094e4] - src: use starts_with instead of rfind/find (Tobias Nießen) #61426
[77cacf6d9d] - src: use C++ nullptr in sqlite (Tobias Nießen) #61416
[344cc629d4] - src: use C++ nullptr in webstorage (Tobias Nießen) #61407
[9f25cad26c] - src: fix pointer alignment (jhofstee) #61336
[5a984b9a09] - src: use node- prefix on thread names (Stewart X Addison) #61307
[d4cf423a65] - stream: export namespace object from internal end-of-stream module (René) #61455
[7d8232e34c] - test: add some validation for JSON doc output (Antoine du Hamel) #61413
[75c06bc2a8] - (SEMVER-MINOR) test: migrate to --build-sea in existing SEA tests (Joyee Cheung) #61167
[cabd58f1cb] - (SEMVER-MINOR) test: use fixture directories for sea tests (Joyee Cheung) #61167
[bcffca8911] - test: aix: mark test_threadsafe_function/test flaky on AIX (Stewart X Addison) #61452
[29399501c1] - test: add implicit test for fs dispose handling with using (Ilyas Shabi) #61140
[3bb481571a] - test: reveal wpt evaluation errors in status files (Chengzhong Wu) #61358
[a132be7f71] - test: check new WebCryptoAPI enum values (Filip Skokan) #61406
[72f1463735] - test: split test-esm-loader-hooks (Joyee Cheung) #61374
[39105e4c5f] - test: aix: mark test-emit-on-destroyed as flaky (Stewart X Addison) #61381
[3f17acfb1c] - test: add webidl web-platform tests (Yagiz Nizipli) #61316
[89983cf747] - test: update url web-platform tests (Yagiz Nizipli) #61315
[73c0a242d7] - test: forbid use of named imports for fixtures (Antoine du Hamel) #61228
[a49d54308e] - test: enforce better never-settling-promise detection (Antoine du Hamel) #60976
[335cb0b5cc] - test: ensure assertions are reached on all tests (Antoine du Hamel) #60845
[5ee02c789a] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60763
[141fb82ffb] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60760
[edf90ce457] - test: use RegExp.escape to improve test reliability (Antoine du Hamel) #60803
[f5f9b2dcf6] - test: ensure assertions are reached on more tests (Antoine du Hamel) #60728
[ec1cbbe0b6] - test_runner: fix memory leaks in runner (Abhishek Kv. Savani) #60860
[399ac68427] - test_runner: fix coverage report when a directory is named file (Heath Dutton🕴️) #61169
[6e1beda333] - test_runner: print info when test restarts (Xavier Stouder) #61160
[f5803ccb86] - test_runner: fix rerun ambiguous test failures (Moshe Atlow) #61392
[a5a4c3eb44] - test_runner: nix dead reporter code (Vas Sudanagunta) #59700
[ff1fcabfc9] - (SEMVER-MINOR) test_runner: support expecting a test-case to fail (Jacob Smith) #60669
[ade4fc2338] - tools: copyedit Nix files (Antoine du Hamel) #61447
[7c2242beb9] - tools: validate release commit diff as part of lint-release-proposal (Antoine du Hamel) #61440
[ca4ebed258] - tools: use ad-hoc flag to lint Nix files (Antoine du Hamel) #61405
[05ce2c87f3] - tools: fix vcbuild lint-js-build (Vladimir Morozov) #61318
[41adb54a37] - tools: enforce trailing commas in test/es-module (Antoine du Hamel) #60891
[eebd732a52] - tools: enforce trailing commas in test/sequential (Antoine du Hamel) #60892
[8b73739e03] - typings: add typing for string_decoder (Taejin Kim) #61368
[e88dd012ad] - v8: changing total_allocated_bytes to avoid ABI changes (Caio Lima) #60800
[c75ad3d87d] - v8: add GCProfiler support for erm (Ilyas Shabi) #61191
[611c179663] - zlib: validate write_result array length (Ryuhei Shima) #61342

Original commit message: [riscv] Fix compilation error and disassembling error when enabling the RISC-V C extension Change-Id: I34a930f7bcda514698ce64d132cbe05fa32b323c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6934163 Reviewed-by: Yahan Lu (LuYahan) <yahan@iscas.ac.cn> Reviewed-by: Kasper Lund <kasperl@rivosinc.com> Commit-Queue: Yahan Lu (LuYahan) <yahan@iscas.ac.cn> Cr-Commit-Position: refs/heads/main@{#102431} Refs: v8/v8@209d2db Co-authored-by: kxxt <rsworktech@outlook.com> PR-URL: #61322 Reviewed-By: Stewart X Addison <sxa@redhat.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>

Original commit message: Fix for GCC 15 compiler error on PPC8/PPC9/PPC10 Refs: google/highway@dcc0ca1 PR-URL: #61008 Fixes: #60992 Refs: google/highway#2443 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com>

PR-URL: #60728 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net>

PR-URL: #60803 Reviewed-By: LiviaMedeiros <livia@cirno.name> Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

PR-URL: #60760 Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

PR-URL: #60763 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>

PR-URL: #60845 Reviewed-By: Chemi Atlow <chemi@atlow.co.il> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>

PR-URL: #60892 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Jake Yuesong Li <jake.yuesong@gmail.com>

PR-URL: #60891 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Chengzhong Wu <legendecas@gmail.com>

Tests should be explicit regarding whether a promise is expected to settle, and the test should fail when the behavior does not meet expectations. PR-URL: #60976 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Erick Wendel <erick.workspace@gmail.com>

Correct the implementaton of enabledHooksExist to return true if there are enabled hooks. Adapt callsites which used getHooksArrays() as workaround. PR-URL: #61054 Fixes: #61019 Refs: #59873 Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>

PR-URL: #61228 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>

PR-URL: #61135 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>

PR-URL: #61321 Reviewed-By: Aviv Keller <me@aviv.sh> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

PR-URL: #61315 Reviewed-By: Matthew Aitken <maitken033380023@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

PR-URL: #61325 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Chengzhong Wu <legendecas@gmail.com> Reviewed-By: Aviv Keller <me@aviv.sh> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

PR-URL: #61329 Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: Aviv Keller <me@aviv.sh> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

PR-URL: #60523 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Steven R Loomis <srl295@gmail.com>

PR-URL: #61294 Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Aviv Keller <me@aviv.sh> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Chengzhong Wu <legendecas@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

PR-URL: #61331 Reviewed-By: Aviv Keller <me@aviv.sh> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

PR-URL: #61307 Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Stephen Belanger <admin@stephenbelanger.com> Reviewed-By: Gerhard Stöbich <deb2001-github@yahoo.de> Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>

PR-URL: #61345 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com>

PR-URL: #61348 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>

Fixes: #60086 PR-URL: #60141 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

Fixes: nodejs/TSC#1813 PR-URL: #61350 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com> Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day> Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de> Reviewed-By: Xuguang Mei <meixuguang@gmail.com> Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>

Fixes: #61286 PR-URL: #61342 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>

Instead of adding a separate command to run the embedtest, since it's now run by the node binary via tools/test.py and test/embedding/test-embedding.js, put embedding into the native suite in test scripts. This helps adding more embedding tests into the folder and run them automatically without listing them one by one in the scripts. PR-URL: #61357 Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: Stefan Stojanovic <stefan.stojanovic@janeasystems.com>

Move watch dependency reporting earlier in module resolution to ensure file dependencies are tracked even when parsing fails. Fixes: #61153 PR-URL: #61232 Reviewed-By: Aviv Keller <me@aviv.sh> Reviewed-By: Moshe Atlow <moshe@atlow.co.il> Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com> Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com>

PR-URL: #61316 Reviewed-By: Matthew Aitken <maitken033380023@gmail.com> Reviewed-By: Jason Zhang <xzha4350@gmail.com> Reviewed-By: Chengzhong Wu <legendecas@gmail.com> Reviewed-By: Mattias Buelens <mattias@buelens.com>

PR-URL: #61475 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Richard Lau <richard.lau@ibm.com>

PR-URL: #60253 Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Aviv Keller <me@aviv.sh>

Notable changes: crypto: * update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419 deps: * (SEMVER-MINOR) add LIEF as a dependency (Joyee Cheung) #61167 * (SEMVER-MINOR) add tools and scripts to pull LIEF as a dependency (Joyee Cheung) #61167 fs: * (SEMVER-MINOR) add ignore option to fs.watch (Matteo Collina) #61433 sea: * (SEMVER-MINOR) add --build-sea to generate SEA directly with Node.js binary (Joyee Cheung) #61167 * (SEMVER-MINOR) split sea binary manipulation code (Joyee Cheung) #61167 sqlite: * (SEMVER-MINOR) enable defensive mode by default (Bart Louwers) #61266 * (SEMVER-MINOR) add sqlite prepare options args (Guilherme Araújo) #61311 src: * use node- prefix on thread names (Stewart X Addison) #61307 test: * (SEMVER-MINOR) migrate to --build-sea in existing SEA tests (Joyee Cheung) #61167 * (SEMVER-MINOR) use fixture directories for sea tests (Joyee Cheung) #61167 test_runner: * (SEMVER-MINOR) support expecting a test-case to fail (Jacob Smith) #60669 PR-URL: #61519

Review requested:

@nodejs/actions
@nodejs/build
@nodejs/devcontainer
@nodejs/gyp
@nodejs/performance
@nodejs/security-wg
@nodejs/single-executable
@nodejs/tsc

CI: https://ci.nodejs.org/job/node-test-pull-request/71029/
CITGM (v25.x): https://ci.nodejs.org/view/Node.js-citgm/job/citgm-smoker/3681/
CITGM (v25.5.0-proposal): https://ci.nodejs.org/view/Node.js-citgm/job/citgm-smoker/3682/

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.85%. Comparing base (92a7585) to head (1751d19).
⚠️ Report is 119 commits behind head on v25.x.

Additional details and impacted files

@@            Coverage Diff             @@
##            v25.x   #61519      +/-   ##
==========================================
+ Coverage   88.48%   88.85%   +0.36%     
==========================================
  Files         704      678      -26     
  Lines      208612   203638    -4974     
  Branches    40260    39056    -1204     
==========================================
- Hits       184592   180934    -3658     
+ Misses      16009    14981    -1028     
+ Partials     8011     7723     -288

see 196 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

CI: https://ci.nodejs.org/job/node-test-pull-request/71034/
CITGM (v25.x): https://ci.nodejs.org/view/Node.js-citgm/job/citgm-smoker/3681/
CITGM (v25.5.0-proposal): https://ci.nodejs.org/view/Node.js-citgm/job/citgm-smoker/3682/
📦: https://ci-release.nodejs.org/job/iojs+release/11549/ + https://ci-release.nodejs.org/job/iojs+release/11551/

7.19.x undici is broken in that users do not get 401 responses under some conditions, they get network errors instead, pending release of nodejs/undici#4769 in 7.19.2? and a final confirmation the undici upgrades shouldn't be included.

Being able to obtain the 401 Response is critical for e.g. recalculating proof-of-possession tokens in response to server-provided challenges in the OAuth 2.0 DPoP extension, for dynamically discovering the www-authenticate scheme and resource server metadata of a protected resource, etc.

I'm happy to quickly re-test and confirm 7.19.2 is fine when it is released or releasing my blocking review when the 7.19.0 and 7.19.1 update commits are dropped.

PR-URL: #61488 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Jacob Smith <jacob@frende.me> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

Notable changes: crypto: * update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419 deps: * (SEMVER-MINOR) add LIEF as a dependency (Joyee Cheung) #61167 * (SEMVER-MINOR) add tools and scripts to pull LIEF as a dependency (Joyee Cheung) #61167 fs: * (SEMVER-MINOR) add ignore option to fs.watch (Matteo Collina) #61433 sea: * (SEMVER-MINOR) add `--build-sea` to generate SEA directly with Node.js binary (Joyee Cheung) #61167 * (SEMVER-MINOR) split sea binary manipulation code (Joyee Cheung) #61167 sqlite: * (SEMVER-MINOR) enable defensive mode by default (Bart Louwers) #61266 * (SEMVER-MINOR) add sqlite prepare options args (Guilherme Araújo) #61311 src: * use node- prefix on thread names (Stewart X Addison) #61307 test: * (SEMVER-MINOR) migrate to `--build-sea` in existing SEA tests (Joyee Cheung) #61167 * (SEMVER-MINOR) use fixture directories for sea tests (Joyee Cheung) #61167 test_runner: * (SEMVER-MINOR) support expecting a test-case to fail (Jacob Smith) #60669 PR-URL: #61519

I've removed the Undici updates from this proposal.

📦: https://ci-release.nodejs.org/job/iojs+release/11554/

Undici updates were dropped.

#61523 seems important enough to include

@addaleax The license file is good enough I think:

node/LICENSE

Lines 989 to 993 in 1751d19

    
           - LIEF, located at deps/LIEF, is licensed as follows: 
        
             """ 
        
                                            Apache License 
        
                                      Version 2.0, January 2004 
        
                                   http://www.apache.org/licenses/

lgtm

Notable changes: crypto: * update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419 deps: * (SEMVER-MINOR) add LIEF as a dependency (Joyee Cheung) #61167 * (SEMVER-MINOR) add tools and scripts to pull LIEF as a dependency (Joyee Cheung) #61167 fs: * (SEMVER-MINOR) add ignore option to fs.watch (Matteo Collina) #61433 sea: * (SEMVER-MINOR) add `--build-sea` to generate SEA directly with Node.js binary (Joyee Cheung) #61167 * (SEMVER-MINOR) split sea binary manipulation code (Joyee Cheung) #61167 sqlite: * (SEMVER-MINOR) enable defensive mode by default (Bart Louwers) #61266 * (SEMVER-MINOR) add sqlite prepare options args (Guilherme Araújo) #61311 src: * use node- prefix on thread names (Stewart X Addison) #61307 test: * (SEMVER-MINOR) migrate to `--build-sea` in existing SEA tests (Joyee Cheung) #61167 * (SEMVER-MINOR) use fixture directories for sea tests (Joyee Cheung) #61167 test_runner: * (SEMVER-MINOR) support expecting a test-case to fail (Jacob Smith) #60669 PR-URL: #61519

PR-URL: #61519

zengdage and others added 30 commits January 20, 2026 13:47

test: ensure assertions are reached on more tests

f5f9b2d

PR-URL: #60728 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net>

test: use RegExp.escape to improve test reliability

edf90ce

PR-URL: #60803 Reviewed-By: LiviaMedeiros <livia@cirno.name> Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

test: ensure assertions are reached on more tests

141fb82

PR-URL: #60760 Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

test: ensure assertions are reached on more tests

5ee02c7

PR-URL: #60763 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>

test: ensure assertions are reached on all tests

335cb0b

PR-URL: #60845 Reviewed-By: Chemi Atlow <chemi@atlow.co.il> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>

tools: enforce trailing commas in test/sequential

eebd732

PR-URL: #60892 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Jake Yuesong Li <jake.yuesong@gmail.com>

tools: enforce trailing commas in test/es-module

41adb54

PR-URL: #60891 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Chengzhong Wu <legendecas@gmail.com>

test: forbid use of named imports for fixtures

73c0a24

PR-URL: #61228 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>

deps: update zlib to 1.3.1-e00f703

320b576

PR-URL: #61135 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>

build,tools: fix addon build deadlock on errors

d597b8e

PR-URL: #61321 Reviewed-By: Aviv Keller <me@aviv.sh> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

deps: update ada to v3.4.0

098ec6f

PR-URL: #61315 Reviewed-By: Matthew Aitken <maitken033380023@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

test: update url web-platform tests

89983cf

PR-URL: #61315 Reviewed-By: Matthew Aitken <maitken033380023@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

build: fix crate vendor file checksums on windows

a1a0f77

PR-URL: #61329 Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: Aviv Keller <me@aviv.sh> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

deps: update icu to 78.2

13c0397

PR-URL: #60523 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Steven R Loomis <srl295@gmail.com>

doc: document ALPNCallback option for TLSSocket constructor

2be98ad

PR-URL: #61331 Reviewed-By: Aviv Keller <me@aviv.sh> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

cluster: fix port reuse between cluster

588b00f

Fixes: #60086 PR-URL: #60141 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

zlib: validate write_result array length

611c179

Fixes: #61286 PR-URL: #61342 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>

test: add webidl web-platform tests

3f17acf

PR-URL: #61316 Reviewed-By: Matthew Aitken <maitken033380023@gmail.com> Reviewed-By: Jason Zhang <xzha4350@gmail.com> Reviewed-By: Chengzhong Wu <legendecas@gmail.com> Reviewed-By: Mattias Buelens <mattias@buelens.com>

aduh95 and others added 2 commits January 25, 2026 00:07

meta: do not fast-track npm updates

b3fbc3c

PR-URL: #61475 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Richard Lau <richard.lau@ibm.com>

doc: mention constructor comparison in assert.deepStrictEqual

b6cc5d7

PR-URL: #60253 Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Aviv Keller <me@aviv.sh>

github-actions Bot added release Issues and PRs related to Node.js releases. v25.x labels Jan 25, 2026

github-actions Bot assigned aduh95 Jan 25, 2026

aduh95 approved these changes Jan 25, 2026

View reviewed changes

aduh95 marked this pull request as ready for review January 25, 2026 17:49

aymen94 approved these changes Jan 26, 2026

View reviewed changes

panva previously requested changes Jan 26, 2026

View reviewed changes

aduh95 force-pushed the v25.5.0-proposal branch from d612a05 to a03efc9 Compare January 26, 2026 12:43

aduh95 force-pushed the v25.5.0-proposal branch from a03efc9 to 1751d19 Compare January 26, 2026 12:45

panva approved these changes Jan 26, 2026

View reviewed changes

cjihrig approved these changes Jan 26, 2026

View reviewed changes

mcollina approved these changes Jan 26, 2026

View reviewed changes

aduh95 merged commit 1751d19 into v25.x Jan 26, 2026
26 of 27 checks passed

aduh95 deleted the v25.5.0-proposal branch January 26, 2026 20:30

aduh95 added a commit that referenced this pull request Jan 26, 2026

Working on v25.5.1

3528643

PR-URL: #61519

2026-01-26, Version 25.5.0 (Current) by github-actions[bot] · Pull Request #61519 · nodejs/node · GitHub

Uh oh!

Uh oh!

2026-01-26, Version 25.5.0 (Current) - #61519

2026-01-26, Version 25.5.0 (Current)#61519
aduh95 merged 117 commits into
v25.xfrom
v25.5.0-proposal

github-actions Bot commented Jan 25, 2026 •
edited by aduh95
Loading

Uh oh!

Uh oh!

nodejs-github-bot commented Jan 25, 2026

Uh oh!

nodejs-github-bot commented Jan 25, 2026 •
edited by aduh95
Loading

Uh oh!

Uh oh!

codecov Bot commented Jan 25, 2026 •
edited
Loading

Uh oh!

Uh oh!

nodejs-github-bot commented Jan 25, 2026 •
edited by aduh95
Loading

Uh oh!

Uh oh!

panva left a comment •
edited
Loading

Uh oh!

Uh oh!

aduh95 commented Jan 26, 2026 •
edited
Loading

Uh oh!

Uh oh!

addaleax commented Jan 26, 2026

Uh oh!

targos commented Jan 26, 2026

Uh oh!

mcollina left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

19 participants

2026-01-26, Version 25.5.0 (Current) by github-actions[bot] · Pull Request #61519 · nodejs/node · GitHub

Uh oh!

Uh oh!

2026-01-26, Version 25.5.0 (Current) - #61519

2026-01-26, Version 25.5.0 (Current)#61519aduh95 merged 117 commits intov25.xnodejs/node:v25.xfrom v25.5.0-proposalnodejs/node:v25.5.0-proposalCopy head branch name to clipboard

Conversation

github-actions Bot commented Jan 25, 2026 • edited by aduh95 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

nodejs-github-bot commented Jan 25, 2026

Uh oh!

nodejs-github-bot commented Jan 25, 2026 • edited by aduh95 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codecov Bot commented Jan 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

nodejs-github-bot commented Jan 25, 2026 • edited by aduh95 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

panva left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

aduh95 commented Jan 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

addaleax commented Jan 26, 2026

Uh oh!

targos commented Jan 26, 2026

Uh oh!

mcollina left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

19 participants

2026-01-26, Version 25.5.0 (Current)#61519
aduh95 merged 117 commits into
v25.xfrom
v25.5.0-proposal

github-actions Bot commented Jan 25, 2026 •
edited by aduh95
Loading

nodejs-github-bot commented Jan 25, 2026 •
edited by aduh95
Loading

codecov Bot commented Jan 25, 2026 •
edited
Loading

nodejs-github-bot commented Jan 25, 2026 •
edited by aduh95
Loading

panva left a comment •
edited
Loading

aduh95 commented Jan 26, 2026 •
edited
Loading