Skip to content

fix(major deps): update node.js to v24 #286

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 7, 2025

This PR contains the following updates:

Package Change Age Confidence
node (source) 23.11.1 -> 24.5.0 age confidence

Release Notes

nodejs/node (node)

v24.5.0: 2025-07-31, Version 24.5.0 (Current), @​aduh95

Compare Source

Notable Changes
Upgrade to OpenSSL 3.5

This release is distributed with OpenSSL 3.5.1, following the announcement that
OpenSSL 3.5 will be supported until April 2030, while Node.js 24 will be
supported until April 2028. Read more about OpenSSL support in their blog post:
https://openssl-library.org/post/2025-02-20-openssl-3.5-lts/.

Contributed by Richard Lau in #​58100.

Unflag --experimental-wasm-modules

Node.js supports both source phase imports and instance phase imports to WebAssembly
modules and for WASM imports to JavaScript, in line with the current Phase 3
WebAssembly ESM Integration proposal.
The implementation and the specification are still subject to change.

Contributed by Guy Bedford in #​57038.

Built-in proxy support in request() and Agent

node:http and node:https now support proxies. When NODE_USE_ENV_PROXY
is set to 1, the default global agent would parse the http_proxy/HTTP_PROXY,
https_proxy/HTTPS_PROXY, no_proxy/NO_PROXY settings from the
environment variables, and proxy the requests sent through the built-in http/https
client accordingly.

To use global proxy support from the command line:

NODE_USE_ENV_PROXY=1 HTTP_PROXY=http://proxy.example.com:8080 HTTPS_PROXY=http://proxy.example.com:8080 NO_PROXY=localhost,127.0.0.1 node client.js

In addition, http.Agent and https.Agent now support the custom proxyEnv options.

const agent = new https.Agent({ proxyEnv: { HTTPS_PROXY: 'http://proxy.example.com:8080' } });

For reference, fetch() already supports NODE_USE_ENV_PROXY as of Node.js 24.0.0.

Contributed by Joyee Cheung in #​58980.

Add setDefaultCACertificates() to node:tls

This API allows dynamically configuring CA certificates that will be used by the
Node.js TLS clients by default.

Once called, the provided certificates will become the default CA certificate list
returned by tls.getCACertificates('default') and used by TLS connections that
don't specify their own CA certificates.

To add system CA certificates to the default bundle (which includes the Mozilla
CA certificates):

tls.setDefaultCACertificates(tls.getCACertificates('default').concat(tls.getCACertificates('system')));

Contributed by Joyee Cheung in #​58822.

Other notable changes
  • [d5640ca58a] - (SEMVER-MINOR) cli: support ${pid} placeholder in --cpu-prof-name (Haram Jeong) #​59072
  • [c52aaacfc5] - (SEMVER-MINOR) dns: support max timeout (theanarkh) #​58440
  • [927742b342] - doc: update the instruction on how to verify releases (Antoine du Hamel) #​59113
  • [f753645cd8] - (SEMVER-MINOR) net: update net.blocklist to allow file save and file management (alphaleadership) #​58087
  • [9791ff3480] - (SEMVER-MINOR) worker: add web locks api (ishabi) #​58666
Commits

v24.4.1: 2025-07-15, Version 24.4.1 (Current), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • (CVE-2025-27209) HashDoS in V8 with new RapidHash algorithm
  • (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
Commits

v24.4.0: 2025-07-09, Version 24.4.0 (Current), @​RafaelGSS

Compare Source

Notable Changes
  • [22b60e8a57] - (SEMVER-MINOR) crypto: support outputLength option in crypto.hash for XOF functions (Aditi) #​58121
  • [80dec9849d] - (SEMVER-MINOR) doc: add all watch-mode related flags to node.1 (Dario Piotrowicz) #​58719
  • [87f4d078b3] - (SEMVER-MINOR) fs: add disposable mkdtempSync (Kevin Gibbons) #​58516
  • [9623c50b53] - (SEMVER-MINOR) permission: propagate permission model flags on spawn (Rafael Gonzaga) #​58853
  • [797ec4da04] - (SEMVER-MINOR) sqlite: add support for readBigInts option in db connection level (Miguel Marcondes Filho) #​58697
  • [ed966a0215] - (SEMVER-MINOR) src,permission: add support to permission.has(addon) (Rafael Gonzaga) #​58951
  • [fe17f5d285] - (SEMVER-MINOR) watch: add --watch-kill-signal flag (Dario Piotrowicz) #​58719
Commits

v24.3.0: 2025-06-24, Version 24.3.0 (Current), @​RafaelGSS

Compare Source

Notable Changes
  • [841609ac1c] - doc: add islandryu to collaborators (Shima Ryuhei) #​58714
  • [839964ece8] - (SEMVER-MINOR) fs: allow correct handling of burst in fs-events with AsyncIterator (Philipp Dunkel) #​58490
  • [9b28f40834] - (SEMVER-MINOR) module: remove experimental warning from type stripping (Marco Ippolito) #​58643
  • [7cdda927fa] - test: fix test-timeout-flag after revert of auto subtest wait (Pietro Marchini) #​58282
  • [dce1995c55] - Revert "test_runner: remove promises returned by t.test()" (Romain Menke) #​58282
  • [8b0c5edbb6] - Revert "test_runner: remove promises returned by test()" (Romain Menke) #​58282
  • [713fbad7b6] - (SEMVER-MINOR) test_runner: support object property mocking (Idan Goshen) #​58438
  • [ef0230abaf] - (SEMVER-MINOR) url: add fileURLToPathBuffer API (James M Snell) #​58700
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label May 7, 2025
@renovate renovate bot force-pushed the renovate/major-major-deps branch 5 times, most recently from 1983cfc to 016e2f4 Compare May 15, 2025 19:20
@renovate renovate bot force-pushed the renovate/major-major-deps branch 3 times, most recently from a372fce to f17f503 Compare May 23, 2025 04:04
@renovate renovate bot force-pushed the renovate/major-major-deps branch 6 times, most recently from 48ce14c to 5ebadee Compare May 29, 2025 11:39
@renovate renovate bot force-pushed the renovate/major-major-deps branch 5 times, most recently from de70b6f to 1788820 Compare June 8, 2025 17:24
@renovate renovate bot force-pushed the renovate/major-major-deps branch 6 times, most recently from 377a950 to cad705f Compare June 16, 2025 20:33
@renovate renovate bot force-pushed the renovate/major-major-deps branch 3 times, most recently from 3999dea to bd5791a Compare June 25, 2025 19:55
@renovate renovate bot force-pushed the renovate/major-major-deps branch from bd5791a to 8c58c0c Compare July 10, 2025 01:35
@renovate renovate bot force-pushed the renovate/major-major-deps branch from 8c58c0c to 6e9ad50 Compare July 16, 2025 04:00
@renovate renovate bot force-pushed the renovate/major-major-deps branch from 6e9ad50 to 4e98e20 Compare August 1, 2025 07:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants