2026-06-01, Version 26.3.0 (Current)#63664
Open
github-actions[bot] wants to merge 142 commits into
Open
Conversation
PR-URL: #62394 Reviewed-By: Mattias Buelens <mattias@buelens.com> Reviewed-By: James M Snell <jasnell@gmail.com>
PR-URL: #63417 Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Signed-off-by: Joyee Cheung <joyeec9h3@gmail.com> PR-URL: #63307 Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Stewart X Addison <sxa@redhat.com> Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Signed-off-by: Nad Alaba <37968805+nadalaba@users.noreply.github.com> PR-URL: #63117 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Signed-off-by: Moshe Atlow <moshe@atlow.co.il> PR-URL: #63429 Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com> Reviewed-By: Chemi Atlow <chemi@atlow.co.il> Reviewed-By: Aviv Keller <me@aviv.sh>
Signed-off-by: Moshe Atlow <moshe@atlow.co.il> PR-URL: #63429 Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com> Reviewed-By: Chemi Atlow <chemi@atlow.co.il> Reviewed-By: Aviv Keller <me@aviv.sh>
Signed-off-by: Chengzhong Wu <cwu631@bloomberg.net> PR-URL: #62322 Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Signed-off-by: Daijiro Wachi <daijiro.wachi@gmail.com> PR-URL: #63434 Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com> Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
Signed-off-by: Moshe Atlow <moshe@atlow.co.il> PR-URL: #63435 Reviewed-By: Chemi Atlow <chemi@atlow.co.il> Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
RHEL 8 machines now use clang 20.1. Signed-off-by: Richard Lau <richard.lau@ibm.com> PR-URL: #63441 Refs: nodejs/build#4265 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Stewart X Addison <sxa@redhat.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Use a uv_check_t on BindingData to process outbound pending packet send, and use TrySend for actually sending packets when possible. Results in an 8% improvement in req/s and ~24% improvement in p95 latency. Also sets us up better for future improvements in libuv if the changes proposed in libuv/libuv#5116 are accepted. Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Improves overall performance and sets us up for eventual support for GRO/GSO batching in libuv in the future. Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Set up for when libuv eventually supports ECN marking. Pass the ECN marking stuff into ngtcp2. Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Every stream, session, and endpoint creates aliased structs for stats and state. These were creating v8::ArrayBuffer allocations and views for each instance, which is expensive. This adds a new arena mechanism for AliasedStructs that allocates in pages and allows Streams and Sessions to share the same underlying ArrayBuffer for their stats and state. Since these are never exposed to users, this is safe and results in a significant reduction in allocation counts. Each arena maintains a freelist of pages, where each page is a max of 16KB bytes. Pages are lazily allocated and freed as needed. Each slot in the arena corresponds to a single struct instance, and the slot index is used to calculate the byte offset within the page for that struct's view. The perf improvement is modest but measurable. The key benefit is in reduced memory fragmentation and GC overhead. Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
* Adds invalid this protections in the stats classes * Collects internal private fields into a single private symbol to reduce the number of private field accesses * Adds and corrects isQuic* class checks * Preserve stream id and direction after destroy * Improve stats close snapshotting * Fixes a handful of other bugs and doc issues Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: James M Snell <jasnell@gmail.com> Assisted-by: Opencode:Opus 4.6 PR-URL: #63267 Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com> PR-URL: #63583 Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Since the ESM loader is captured in the snapshot now, there's no need to lazy load the helpers. Load them eagerly to capture them into the snapshot. This also reduces the noise coming out of --print-bytecode since we no longer compile the helper functions at run time. Signed-off-by: Joyee Cheung <joyeec9h3@gmail.com> PR-URL: #63550 Reviewed-By: Chengzhong Wu <legendecas@gmail.com> Reviewed-By: Geoffrey Booth <webadmin@geoffreybooth.com>
Ensure overlapping next() calls on a single share() consumer resolve in the same order they were requested. Fixes: #63477 Signed-off-by: Kamat, Trivikram <16024985+trivikr@users.noreply.github.com> Assisted-by: openai:gpt-5.5 PR-URL: #63478 Fixes: #63477 Reviewed-By: James M Snell <jasnell@gmail.com>
Refs: #63489 Signed-off-by: Kamat, Trivikram <16024985+trivikr@users.noreply.github.com> Co-authored-by: Antoine du Hamel <duhamelantoine1995@gmail.com> Assisted-by: openai:gpt-5.5 PR-URL: #63541 Reviewed-By: Ethan Arrowood <ethan@arrowood.dev> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com> PR-URL: #63586 Refs: nodejs/node-core-utils#1043 Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Signed-off-by: Chengzhong Wu <cwu631@bloomberg.net> PR-URL: #63588 Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Signed-off-by: Tim Perry <pimterry@gmail.com> PR-URL: #63198 Reviewed-By: Ethan Arrowood <ethan@arrowood.dev> Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Signed-off-by: Chengzhong Wu <legendecas@gmail.com> PR-URL: #63591 Reviewed-By: Jake Yuesong Li <jake.yuesong@gmail.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Forward Node.js tail stream data through a pipe-style data listener instead of manually draining readable events. This keeps compose closer to the stream pipe hot path while preserving backpressure with pause and resume. Signed-off-by: Kamat, Trivikram <16024985+trivikr@users.noreply.github.com> Assisted-by: openai:gpt-5.5 PR-URL: #63593 Reviewed-By: Robert Nagy <ronagy@icloud.com> Reviewed-By: Ethan Arrowood <ethan@arrowood.dev> Reviewed-By: Jake Yuesong Li <jake.yuesong@gmail.com> Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
The 8 KiB default has been unchanged since 2015. With the threshold check `size < (Buffer.poolSize >>> 1)`, this means allocations of 4 KiB or larger bypass the pool entirely — including 4 KiB itself, a common page and HTTP-frame size. Raising the default to 64 KiB extends pool coverage to ~32 KiB allocations, capturing common sizes used by HTTP parsers, stream chunks, and small file reads. Throughput improvements on workers-k=8 fs.readFileSync benchmarks (Linux/glibc) at the affected sizes, with no regressions elsewhere: file size | 8 KiB pool | 64 KiB pool | delta -----------+--------------+---------------+------- 4 KiB | 326k ops/s | 360k ops/s | +10% 8 KiB | 202k ops/s | 254k ops/s | +26% 16 KiB | 148k ops/s | 181k ops/s | +23% 64 KiB | 86k ops/s | 87k ops/s | ~ 1 MiB | 12k ops/s | 13k ops/s | ~ Cost: +56 KiB RSS per realm at startup. Signed-off-by: Matteo Collina <hello@matteocollina.com> PR-URL: #63597 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: LiviaMedeiros <livia@cirno.name> Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de> Reviewed-By: Ethan Arrowood <ethan@arrowood.dev> Reviewed-By: Stephen Belanger <admin@stephenbelanger.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
Defer non-critical warnings to the next event loop iteration when can_call_into_js() returns false. This prevents crashes when V8 emits warnings during REPL preview evaluation or other contexts where JavaScript execution is temporarily forbidden. When a warning is emitted inside DisallowJavascriptExecutionScope, ProcessEmitWarningGeneric cannot be called immediately. Instead, use env->SetImmediate() to queue the warning emission for after the scope exits. This preserves full warning formatting, deprecation codes, and --redirect-warnings routing. Signed-off-by: Divyanshu Sharma <Divyanshu88999@gmail.com> PR-URL: #63491 Fixes: #63473 Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net>
Signed-off-by: Guilherme Araújo <arauujogui@gmail.com> PR-URL: #62999 Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day> Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Ethan Arrowood <ethan@arrowood.dev>
PR-URL: #63602 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Add a new httpValidation option to http.createServer() and
http.request() / http.ClientRequest that controls how strictly
HTTP header values are validated:
- 'strict' - reject any non-ASCII or control characters (default)
- 'relaxed' - allow the non-ASCII characters permitted by the
Fetch specification (kLenientHeaderValueRelaxed)
- 'insecure' - disable all validation (like insecureHTTPParser)
The option is threaded through _storeHeader -> processHeader ->
storeHeader -> validateHeaderValue, and also through
writeInformation -> processInformationHeader -> validateHeaderValue.
Cannot be used together with insecureHTTPParser.
Fixes: #61582
Signed-off-by: RajeshKumar11 <kakumanurajeshkumar@gmail.com>
PR-URL: #61597
Refs: #61582
Refs: https://fetch.spec.whatwg.org/#header-value
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Tim Perry <pimterry@gmail.com>
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com> PR-URL: #63609 Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Chengzhong Wu <legendecas@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com> PR-URL: #63611 Reviewed-By: Mattias Buelens <mattias@buelens.com> Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Ethan Arrowood <ethan@arrowood.dev> Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com>
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com> PR-URL: #63612 Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Signed-off-by: Matteo Collina <hello@matteocollina.com> PR-URL: #63621 Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com> Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Paolo Insogna <paolo@cowtech.it> Reviewed-By: Moshe Atlow <moshe@atlow.co.il> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com> PR-URL: #63517 Refs: https://hackerone.com/reports/3752489 Reviewed-By: James M Snell <jasnell@gmail.com>
Signed-off-by: Joyee Cheung <joyeec9h3@gmail.com> PR-URL: #63650 Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Tobias Nießen <tniessen@tnie.de> Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com>
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com> PR-URL: #63625 Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com> PR-URL: #63055 Backport-PR-URL: #63153 Refs: https://developer.apple.com/documentation/apple-silicon/about-the-rosetta-translation-environment/ Refs: nodejs/build#4317 Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: René <contact.9a5d6388@renegade334.me.uk> Reviewed-By: Stewart X Addison <sxa@redhat.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com> Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
aduh95
added a commit
that referenced
this pull request
May 30, 2026
Notable changes: buffer: * (SEMVER-MINOR) increase `Buffer.poolSize` default to 64 KiB (Matteo Collina) #63597 crypto: * update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527 doc: * downgrade macOS x64 support to Tier 2 (Antoine du Hamel) #63055 http: * (SEMVER-MINOR) add `httpValidation` option to configure header value validation (RajeshKumar11) #61597 inspector: * (SEMVER-MINOR) expose precise coverage start to JS runtime (sangwook) #63079 lib,permission: * (SEMVER-MINOR) add `permission.drop` (Rafael Gonzaga) #62672 PR-URL: #63664
Notable changes: buffer: * (SEMVER-MINOR) increase `Buffer.poolSize` default to 64 KiB (Matteo Collina) #63597 crypto: * update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527 doc: * downgrade macOS x64 support to Tier 2 (Antoine du Hamel) #63055 http: * (SEMVER-MINOR) add `httpValidation` option to configure header value validation (RajeshKumar11) #61597 inspector: * (SEMVER-MINOR) expose precise coverage start to JS runtime (sangwook) #63079 lib,permission: * (SEMVER-MINOR) add `permission.drop` (Rafael Gonzaga) #62672 PR-URL: #63664
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Potential changes to macOS Universal Binary availability
With Apple and its ecosystem progressively dropping support for Intel-based
architectures, it has become apparent that the Node.js project may not be able
to maintain the universal binaries we currently distribute for the full lifetime
of Node.js 26. This change serves to communicate that risk. At present, our
intention remains to continue shipping universal binaries supporting both Apple
Silicon and Intel-based Macs for as long as practical.
Contributed by Antoine du Hamel in #63055.
Other notable changes
a2a4b33dd8] - (SEMVER-MINOR) buffer: increaseBuffer.poolSizedefault to 64 KiB (Matteo Collina) #63597051a2152f7] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #6352749462eca37] - (SEMVER-MINOR) http: addhttpValidationoption to configure header value validation (RajeshKumar11) #6159797b7ab19bd] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #63079cfb80a2103] - (SEMVER-MINOR) lib,permission: addpermission.drop(Rafael Gonzaga) #62672Commits
a2a4b33dd8] - (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina) #635970eff3e23b9] - build: defNODE_USE_NODE_CODE_CACHEonly used in node_mksnapshot (Chengzhong Wu) #63588447ab2d252] - build,win: fix VS2022 arm64 PGO build (Stefan Stojanovic) #6341386032758e4] - build,win: replace LTCG with Thin LTO for releases (Stefan Stojanovic) #631145f4d794052] - build,win: add Rust toolchain automated configuration Windows (Mike McCready) #63381051a2152f7] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527d0f65e3579] - crypto: coerce -0 keylen to +0 in pbkdf2 and scrypt (Jordan Harband) #63531e3ddb326c9] - crypto: harden WebCrypto against prototype pollution (Filip Skokan) #63363e04cd17dc0] - crypto: pass CryptoKey handles to KDF jobs (Filip Skokan) #6336364ba74d847] - crypto: remove async from WebCrypto methods (Filip Skokan) #63363bd230418b4] - crypto: add WebCrypto CryptoJob mode (Filip Skokan) #633631a4090a83d] - debugger: surface inspector failures in probe mode (Joyee Cheung) #63437dbc78ff825] - debugger,test: deflake resume failure test and add debug logs (Joyee Cheung) #635244da442f432] - deps: upgrade npm to 11.16.0 (npm team) #6360263372cfa87] - deps: SQLite: cherry-pick b869ed6b067d623cb1383549f2a18aa35508385d (Junsu Han) #63525e286fa170d] - deps: upgrade npm to 11.15.0 (npm team) #63463de996437a5] - doc: downgrade macOS x64 to Tier 2 (Antoine du Hamel) #6305522ac78750c] - doc: remove duplicated sentences in large-pull-requests.md (Joyee Cheung) #63650532f7f2085] - doc: updategit node landinstructions for security releases (Antoine du Hamel) #63586c61f90dfb9] - doc: drop --experimental from --permission (Rafael Gonzaga) #63583fd69d7b16a] - doc: improvefs.StatFsproperties descriptions (aymanxdev) #62578693257782c] - doc: generate llms.txt (Guilherme Araújo) #6202755a57beb26] - doc: explicitly ask for reproducible in JS (Rafael Gonzaga) #634794895c2babc] - doc: fix URL postMessage example in worker_threads (Kit Dallege) #622030355c36e37] - doc: clarifyfilteroption ofsqlite.database.applyChangeset(Antoine du Hamel) #63515c85ee22df6] - doc: fix double spaces in ERR_TLS_INVALID_PROTOCOL_METHOD (Daijiro Wachi) #6351162947192f6] - doc: move hyperlinks outside of text blocks (Aviv Keller) #634939849690a1d] - doc: edit Rust toolchain general install instructions (Antoine du Hamel) #63488885d2462e9] - doc: fix double space in modules.md (Daijiro Wachi) #6351242fbb48bc6] - doc: fix "options" to "option" in tls.createServer (Daijiro Wachi) #6345305a7b0a301] - doc: add Rust toolchain general install instructions (Mike McCready) #63426e13dfd7ed0] - doc: update toolchain for official releases (Richard Lau) #6344182306881cc] - doc: fix typo in deprecations (Daijiro Wachi) #63434eeb77d217c] - doc,lib: align WebCrypto names with spec (Filip Skokan) #63518679e13c57f] - errors: handle V8 warnings in DisallowJavascriptExecutionScope (Divyanshu Sharma) #634917f41f5d803] - ffi: validate 'void' as parameter type in getFunction and getFunctions (Anshika Jain) #63504972cd227cb] - ffi: remove function signature property aliases (René) #634825d7805e433] - ffi: move DynamicLibrary disposer to native layer (René) #634595a0b32dc24] - gyp: update deps gypfiles (Nad Alaba) #6311749462eca37] - (SEMVER-MINOR) http: add httpValidation option to configure header value validation (RajeshKumar11) #61597e3c6629ee3] - http2: emit session close before stream close (Matteo Collina) #6341497b7ab19bd] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #63079fdc0b3d49c] - lib: definekEnumerablePropertyatomically (Antoine du Hamel) #6360999baf27aeb] - lib: fix typos in esm loader comments (RonGamzu) #63465cfb80a2103] - (SEMVER-MINOR) lib,permission: add permission.drop (Rafael Gonzaga) #626728e75efb9bc] - meta: flip mcollina emails in .mailmap (Matteo Collina) #63621a4ae97045f] - meta: label "source maps" PRs (Chengzhong Wu) #635913455a48ae1] - meta: addvfssubsystem label (René) #6233101bfcdfc20] - meta: skip scheduled workflows on forks (Jamie Magee) #63565bc4c457eae] - meta: add additional gitignore entries (James M Snell) #63267e1d65d9509] - module: load ESM helpers eagerly in the snapshot (Joyee Cheung) #635506a97b0932a] - quic: add proper error codes & messages for QUIC failures (Tim Perry) #631985989f4a6e1] - quic: support hostname verification (James M Snell) #63483b4d30e7a78] - quic: add stream idle timeout (James M Snell) #634838a1017f774] - quic: add block list support for endpoints (James M Snell) #634835a3ab93c49] - quic: improve peer cert verification (James M Snell) #634839701a82a78] - quic: handle h3 max header size option (James M Snell) #6348371788a2048] - quic: add rate limiting docs (James M Snell) #63483309bd49906] - quic: cache timestamp for address lru cache (James M Snell) #634832ce5588d51] - quic: add session creation rate limiting (James M Snell) #6348398808baed1] - quic: refine rate limiting (James M Snell) #6348375a4176b32] - quic: flip preferred address policy default to 'ignore' (James M Snell) #634838b6b03d60c] - quic: add doc note about certificate size limitations (James M Snell) #6348330eff873e0] - quic: add applicationOptions to session (James M Snell) #632674303daa43c] - quic: add getters for local and remote transport parameters (James M Snell) #63267e1b1bb5465] - quic: improve recv coalescing test sizes (James M Snell) #6326725a416f457] - quic: add initial RTT option to session options (James M Snell) #6326722e91c357f] - quic: enable recvmmsg batching in Endpoint (James M Snell) #63267c96d8a9d9b] - quic: improve stream header collection performance (James M Snell) #63267409460f2ce] - quic: add reusePort option to QuicEndpoint (James M Snell) #632679a2afffec9] - quic: coalesce received data into fewer buffers (James M Snell) #63267f9a6a2f558] - quic: apply multiple additional minor improvements (James M Snell) #63267ea5f3724ee] - quic: fix tests that are missing serverEndpoint close (James M Snell) #632676cffc931fc] - quic: fixup some v8:: qualifiers (James M Snell) #632679bc875e522] - quic: fix premature unref of endpoint when listening (James M Snell) #63267f940d6b1be] - quic: fixup UAFs in bindingdata, streams, and app (James M Snell) #63267fd00e0acb0] - quic: fix UAF in Application::OnTimeout() (James M Snell) #63267378dbf00e9] - quic: improve the quic js structure (James M Snell) #632670045dc30b6] - quic: improve internal structure of QuicStream (James M Snell) #632675e38946b26] - quic: add aliased struct arenas (James M Snell) #6326795430437a0] - quic: add handshake timeout and default connection limits (James M Snell) #632675622701429] - quic: implement rate limiting for version nego and immediate close (James M Snell) #63267b171f391cd] - quic: fixup linting issue after other changes (James M Snell) #6326724e9f4f177] - quic: fix crash in early handshake failure (James M Snell) #632675025e85d0a] - quic: eliminate per-received datagram allocation (James M Snell) #63267aec1e17ec5] - quic: cache the timestamp on send and receive (James M Snell) #632679560084560] - quic: add support for future ECN marking (James M Snell) #632672b3ff8ada2] - quic: improve batching of packet sending (James M Snell) #63267fe3639a4d6] - quic: improve backend quic packet processing (James M Snell) #63267f043013d9a] - src: remove TOCTOU race condition when encoding SAB-backedBuffers (Antoine du Hamel) #63517343958224d] - src: skip duplicate UTF-8 validation in TextDecoder fatal path (Mert Can Altin) #632312906fa833d] - src: dispatch ToV8Value(string_view) via StringBytes::Encode (Mert Can Altin) #63370860f9d8d4b] - src: fix ContextifyContext property definer interception result (Chengzhong Wu) #63549fcccffcbe6] - src: fix crash when reading length on Storage.prototype (Mohamed Sayed) #6352955f65f9fb6] - src: improve token return value check (James M Snell) #634837a36ca46cd] - src: exposenode::RegisterContextto make a node managed context (Chengzhong Wu) #623229bda92963c] - src,sqlite: only passxFilterwhen user provided a callback (Antoine du Hamel) #63516563db50f38] - stream: switch to internalsleepbinding (Antoine du Hamel) #63611a6e2322ee6] - stream: use data listener for compose forwarding (Trivikram Kamat) #635937198895c6b] - stream: serialize concurrent share consumer reads (Trivikram Kamat) #6347870ba8be1d7] - stream: fix lint error (Antoine du Hamel) #635981608d905a7] - stream: reject pending reads on iterator throw (Trivikram Kamat) #63555dc12b730d8] - stream: wait for push writer end fallback to drain (Trivikram Kamat) #635034f40a85a1a] - stream: flush each fused stateless transform (Trivikram Kamat) #63468526e0fc427] - stream: avoid duplicate writes in toWritable (Trivikram Kamat) #633600008d01f9c] - stream: propagate abort reason in share and broadcast (Trivikram Kamat) #63358217338e18b] - stream: fix Writable.toWeb() hang on synchronous drain (sangwook) #61197381f4b1b10] - stream: disallow writing string chunk with 'buffer' encoding (René) #63062cbee0de1cb] - stream: alignReadable.toWebtermination with eos (ikeyan) #62394be91f0a927] - test: shorten path in net pipe connect errors (Matteo Collina) #6340583cada8bcc] - test: deflake test-debugger-probe-timeout (Joyee Cheung) #635473560b96a10] - test: deflake test-webcrypto-crypto-job-mode (Filip Skokan) #635430c9c52373a] - test: remove test-node-output-v8-warning (Joyee Cheung) #6346912052dbe14] - test: cover webcrypto prototype pollution systematically (Filip Skokan) #635208c479f274a] - test: update test426-fixtures to 9b9e225b5a63139e9a95cdd1bf874a8f0b9d131 (Node.js GitHub Bot) #633732ca32a5ee8] - test: update WPT for url to e4a4672e9e (Node.js GitHub Bot) #633721bf875bd21] - test: deflake async-hooks statwatcher test (Trivikram Kamat) #6339697dbfa09f7] - test: avoid test_runner watch restart in spec snapshot (Trivikram Kamat) #633928b038d7b33] - test: reduce watch mode restart flakiness (Trivikram Kamat) #63390f504c01d66] - test: get rid of unnecessaryAbortControllerinstanciations (Antoine du Hamel) #63489170585ff90] - test: isolate rerun-failures state file under tmpdir (Chemi Atlow) #63449935468a49e] - test: fixup quic tests (James M Snell) #63267fbbdfdcfc7] - test: wait for ok before initial break after restart (Yuya Inoue) #62807db808ad77d] - test: unskip snapshot reproducibility test (Joyee Cheung) #63307259d8b3dce] - test: update WPT for WebCryptoAPI to 97bbc7247a (Node.js GitHub Bot) #63417d56c6cd708] - test_runner: ignore erased TS lines in coverage (Matteo Collina) #6351016015f1565] - test_runner: fix suite diagnostic chanel end (Moshe Atlow) #63533003b9ccbe9] - test_runner: dont buffer unordered events in process isolation mode (Moshe Atlow) #63432fdc4b5aed4] - test_runner: fix --test-rerun-failures swallowing failures on retry (Chemi Atlow) #634316a0bd2f329] - test_runner: add parentId to test events with testId (Moshe Atlow) #63435a646c93254] - test_runner: show replayed-from-attempt hint in spec reporter (Moshe Atlow) #63429b1fa59cbb6] - test_runner: preserve run duration when using test-rerun (Moshe Atlow) #634296ac7ff24ac] - tools: refinev8.nixsource definition (Antoine du Hamel) #6362559c01b959f] - tools: add lint rule for aborted AbortController (Trivikram Kamat) #635412ab034f6f9] - tools: bump @node-core/doc-kit in /tools/doc in the doc group (dependabot[bot]) #63494a6af903e0a] - tools: bump brace-expansion from 5.0.5 to 5.0.6 in /tools/eslint (dependabot[bot]) #63415215cd543dd] - tools: skip commit-lint on backport pull requests (Marco) #633780479f28e95] - tools: fix skip oftest-interneton forks (Antoine du Hamel) #6349269dfadf785] - tools: mock some Python utils inv8.nixto reuse builds (Antoine du Hamel) #634547b3e222cda] - util: remove unused functions (Antoine du Hamel) #636125a1f67c27b] - util: create hex style cache and fast path (Guilherme Araújo) #62999