2026-09-08, Version 24.21.0 'Krypton' (LTS) - #65873

Merged

aduh95 merged 238 commits into

v24.xfrom

v24.21.0-proposal

Sep 8, 2026

Commits on Aug 26, 2026

crypto: support loading private keys through STORE loaders

panva
authored and
aduh95
committed
afca0a9

Commits on Aug 27, 2026

test_runner: fix env option validation

hanityx
authored and
aduh95
committed
32ead10
buffer: treat detached ArrayBuffers as empty

Archkon
authored and
aduh95
committed
cc9ee6c
tools: sync mk-ca-bundle.pl with curl

Archkon
authored and
aduh95
committed
ceb0e99
doc: correct default highWaterMark values

umuoy1
authored and
aduh95
committed
b48699e
src: update repeated use strings to env

jasnell
authored and
aduh95
committed
8c11bea
url: handle unparsable serialized URLs in setters

mcollina
authored and
aduh95
committed
9ffc0da
doc: document ArrayBuffer support in pbkd2Sync

kyungrae2002
authored and
aduh95
committed
a0a1239
util: add non-throwing MIMEType.parse

jasnell
authored and
aduh95
committed
35c635b
test: update WPT for WebCryptoAPI to 82c3d9069c

nodejs-github-bot
authored and
aduh95
committed
7e27910
src: report why --enable-fips failed

panva
authored and
aduh95
committed
7f21e37
doc: remove `--expose-gc` flag from CLI documentation

dario-piotrowicz
authored and
aduh95
committed
9b2ca70
crypto: fix disabling FIPS mode

panva
authored and
aduh95
committed
6ed1e38
build: handle malformed OpenSSL macros

panva
authored and
aduh95
committed
2d21f41
build: check FIPS option value in node.gyp

panva
authored and
aduh95
committed
89a6724
doc: clarify OpenSSL FIPS configuration

panva
authored and
aduh95
committed
44c0c8f
esm: fix wasm import name in error message

hyemimi
authored and
aduh95
committed
c0a8ef6
sqlite: bind ArrayBuffer

mike-git374
authored and
aduh95
committed
fbe8861
meta: update sccache to 0.17.0

Renegade334
authored and
aduh95
committed
cfad1d5
sqlite: fix undefined behaviour in `Session::Changeset()`

ndossche
authored and
aduh95
committed
cdb732b
sqlite: bind Boolean

mike-git374
authored and
aduh95
committed
c154225
dns: fix crash on setServers with port 0

lazerg
authored and
aduh95
committed
37b9e9a
net: improve performance of net.BlockList

jasnell
authored and
aduh95
committed
41c7062
fs: add windowsHandle option to file streams

PickBas
authored and
aduh95
committed
212fe77
test: increase timeout in probe-failure-hang-during-evaluate

joyeecheung
authored and
aduh95
committed
b0c1277
stream: fix recursive WritableStream abort

standard-Chan
authored and
aduh95
committed
b89c8f5
doc: fix grammar in worker_threads.md

hyemimi
authored and
aduh95
committed
d82a616
src: expose Windows-only fs open flags

PickBas
authored and
aduh95
committed
b055a43
tools: lazy-abort failed PR merges in CQ
aduh95
committed
f41509b
sqlite: clear SQLTagStore bindings

mcollina
authored and
aduh95
committed
514e3f3
doc: remove usage of `util.inherits`

AugustinMauroy
authored and
aduh95
committed
314f9b2
dns: validate port range in `setServers()`

Renegade334
authored and
aduh95
committed
15f95fc
meta: add Aviv Keller to `.mailmap`

avivkeller
authored and
aduh95
committed
8f3d01b
doc: clarify sqlite bare parameter default

skdas20
authored and
aduh95
committed
2ba198d
tools: prefilter commit queue metadata

panva
authored and
aduh95
committed
5e1db5a
sqlite: reject non-positive backup rates

trivikr
authored and
aduh95
committed
61a0463
test: use libuv clock for immediate queue test

trivikr
authored and
aduh95
committed
cf7680e
tools: move ncu config to global for commit queue

panva
authored and
aduh95
committed
0d7c793
test: update passphrases to comply with the next OpenSSL FIPS mode

panva
authored and
aduh95
committed
00f4240
zlib: validate pledgedSrcSize for sync zstd

Archkon
authored and
aduh95
committed
5858c2b
tls: fix authorized state on no-cert TLS1.3 client cert resumption

pimterry
authored and
aduh95
committed
dcf65c5
doc: document quic stopSending() and resetStream()

theSnackOverflow
authored and
aduh95
committed
39ea929
src: reuse cached env strings in remaining files

leah-1ee
authored and
aduh95
committed
d7463b9
esm: only register text format when enabled

efekrskl
authored and
aduh95
committed
cd84d55
sqlite: validate maxSize argument in createTagStore()

Anshikakalpana
authored and
aduh95
committed
d6d2a71
doc: finalize statements in sqlite examples

araujogui
authored and
aduh95
committed
5234a51
lib: add and test [EnforceRange] in webcrypto dictionaries

panva
authored and
aduh95
committed
424fe2b
quic: fix infinite loop if STOP_SENDING received on a buffering stream

pimterry
authored and
aduh95
committed
cd776fe
doc: document sqlite parameter binding

araujogui
authored and
aduh95
committed
b7932e6
quic: convert incoming :status header to number

authored and
aduh95
committed
88bee43
http: emit drain on socket takeover and avoid stale HWM reuse

trivenay
authored and
aduh95
committed
4b90031
benchmark: add test runner hooks and options

luanmuniz
authored and
aduh95
committed
c8837e1
sqlite: check null returns from sqlite value functions

ndossche
authored and
aduh95
committed
b8faee0
doc: fix permission documentation examples

greenheadHQ
authored and
aduh95
committed
1bf7737
test,doc: cover and document multi-byte offset/size in randomFill

kyungrae2002
authored and
aduh95
committed
ac11f88
doc: report proper return type on urlPattern.test

bmuenzenmeyer
authored and
aduh95
committed
be25cdd
tools: delay removal of `commit-queue` label
aduh95
committed
7d9dcfa
doc: fix broken internal links

greenheadHQ
authored and
aduh95
committed
39f4c83
lib: use validateArray for array arguments

greenheadHQ
authored and
aduh95
committed
7e8c2c9
url: bounds-check short Windows file URL paths

Archkon
authored and
aduh95
committed
8e2461d
lib: harden webidl dictionary member reads

panva
authored and
aduh95
committed
151ca7e
src: match cmd.exe case-insensitively in task runner

Archkon
authored and
aduh95
committed
c990140
sea: reject trailing content in config JSON

Archkon
authored and
aduh95
committed
703b854
sea: handle NUL bytes in asset keys

Archkon
authored and
aduh95
committed
ec5e2d6
sea: avoid dangling CLI option pointers

Archkon
authored and
aduh95
committed
2ba7406
tools: use the read-only token when filtering PRs in CQ
aduh95
committed
e624785
process: validate resource stats array offsets

Archkon
authored and
aduh95
committed
dff2b67
test: allow half-open CONNECT tunnel sockets

trivikr
authored and
aduh95
committed
e4b1e3e
test: avoid deadlock issue in pipeline http2 tests to fix flakiness

authored and
aduh95
committed
881f8d0
tools: fix GITHUB_TOKEN permissions for CQ workflow
aduh95
committed
dac2573
tools: bump js-yaml from 4.2.0 to 4.3.1 in /tools/eslint

dependabot[bot]
authored and
aduh95
committed
7827485
tools: bump js-yaml from 4.2.0 to 4.3.1 in /tools/lint-md

dependabot[bot]
authored and
aduh95
committed
60bfa16
build: deprecate always enabled `--enable-static`

legendecas
authored and
aduh95
committed
273e72d
test: fix hidden error in test-http-server-stale-close.js

nektro
authored and
aduh95
committed
d45c010
deps: update googletest to d89aac5f0dd4021198d903d39de16f896726de21

nodejs-github-bot
authored and
aduh95
committed
96b4af1
test: update WPT for urlpattern to 4832db4761

nodejs-github-bot
authored and
aduh95
committed
2aa2655
test: update WPT for WebCryptoAPI to 4c2fd05ed5

nodejs-github-bot
authored and
aduh95
committed
550d242
sqlite: reject statement-less SQL in SQLTagStore

TrevorBurnham
authored and
aduh95
committed
043dfe4
sqlite: reject statement-less SQL in prepare()

TrevorBurnham
authored and
aduh95
committed
6ae81be
assert: improve documentation wording

Kamal Rawal
authored and
aduh95
committed
84d706c
tools: remove skip logic in `commit-queue.sh`
aduh95
committed
6d9999f
deps: enable AVX-512 OpenSSL asm with clang

lemire
authored and
aduh95
committed
4ad043b
doc: update synopsis

AugustinMauroy
authored and
aduh95
committed
c3b120e
test_runner: do not tag-filter test file wrappers

atlowChemi
authored and
aduh95
committed
d01dda7
src: add SetAbortHandler

maxhfisher
authored and
aduh95
committed
c8625a4
typings: add credentials internal binding types

HoonDongKang
authored and
aduh95
committed
f15e8c9
lib,src: improve histogram implementation

jasnell
authored and
aduh95
committed
0529772
tools: only include fast-tracked and old enough PRs in CQ
aduh95
committed
ac8a68e
src: cache permission strings

jasnell
authored and
aduh95
committed
18e16e7
src: use DictionaryTemplate for permission diag channel message

jasnell
authored and
aduh95
committed
968b2ca
src: make minor cleanup to permission checks

jasnell
authored and
aduh95
committed
8e831a3
src: simplify c++ diagnostics channel API

jasnell
authored and
aduh95
committed
a0f3c62
doc: create ai-guidelines and include to CONTRIBUTING

committed
f471114
deps: float ICU-23262 patch for icu78

Renegade334
authored and
aduh95
committed
ca1c67b
module: fix --check on ambiguous ESM files

bitpshr
authored and
aduh95
committed
961bd04
stream: use validateBuffer for BYOB reader view

greenheadHQ
authored and
aduh95
committed
f9c21ea
crypto: read WebCrypto inputs through primordials

panva
authored and
aduh95
committed
7defefa
test: account for [EnforceRange] in test-webcrypto-prototype-pollution

panva
authored and
aduh95
committed
ac98352
http2: avoid uaf while receiving and sending rst_stream

Eusgor
authored and
aduh95
committed
f43bed0
crypto: remove obsolete BoringSSL shims

panva
authored and
aduh95
committed
a9bd780
crypto: use available BoringSSL APIs

panva
authored and
aduh95
committed
8029383
test: cover `realpathSync` resolving symlinks after a FIFO stat

unstubbable
authored and
aduh95
committed
5ded71f
util: preserve function names without source map names

privatenumber
authored and
aduh95
committed
cea9786
src: escape Windows environment variables in task runner
aduh95
committed
22e5023
benchmark: complete the sqlite is-transaction fix

geeksilva97
authored and
aduh95
committed
ed7ba3c
meta: move one or more collaborators to emeritus

nodejs-github-bot
authored and
aduh95
committed
f85b6ec
typings: add internal_only_v8 binding typeis

HoonDongKang
authored and
aduh95
committed
c57c83b
doc: document http2 header constants

harjothkhara
authored and
aduh95
committed
d7accdc
meta: add unified http api initiative

jasnell
authored and
aduh95
committed
b41b07c
inspector: avoid calling into JS from V8 interrupts

joyeecheung
authored and
aduh95
committed
b42d664
deps: cherry-pick libuv/libuv@e640dc9

ulofiai
authored and
aduh95
committed
670b366
doc: document open pull request limit

mcollina
authored and
aduh95
committed
c3eb51d
stream: preserve falsy cancellation reasons

trivikr
authored and
aduh95
committed
d631e91
benchmark: apply `highWaterMark` in webstreams `pipe-to`

mcollina
authored and
aduh95
committed
1d8f045
stream: cut promise churn in webstreams hot paths

mcollina
authored and
aduh95
committed
c577669
stream: consolidate non-op algorithm callbacks

mcollina
authored and
aduh95
committed
859ea01
doc: fix SQLite changeset constant descriptions

greenheadHQ
authored and
aduh95
committed
113b808
quic: fix wake up blob

martenrichter
authored and
aduh95
committed
ddc41c1
test: use for-of instead of forEach

devfep
authored and
aduh95
committed
f82060c
test: convert forEach to for in test-constant.js file

Nixxy25
authored and
aduh95
committed
a60572a
test: replace `forEach()` with `for...of` in parallel tests

pmarkert
authored and
aduh95
committed
8d6b89f
test: convert test-async-local-storage-bind to async loop

freida-code
authored and
aduh95
committed
ba87603
doc: add missing `added:` tags to `fs.lchmod`

lazerg
authored and
aduh95
committed
3165b5d
doc: fix typo in onboarding.md

minirang
authored and
aduh95
committed
0b1fb8f
doc: fix lint clean command

greenheadHQ
authored and
aduh95
committed
39ecedb
stream: use validateNumber for BYOB reader options.min

greenheadHQ
authored and
aduh95
committed
3a174ce
stream: use validateObject for zlib/iter params

greenheadHQ
authored and
aduh95
committed
74d53bd
stream: avoid leaking consumers on signal failure

trivikr
authored and
aduh95
committed
386ed6a
typings: add watchdog internal binding types

leah-1ee
authored and
aduh95
committed
e64de34
typings: add diagnostics_channel typings

leah-1ee
authored and
aduh95
committed
b103a4a
debugger: wait for target startup

authored and
aduh95
committed
9b9dd6e
typings: add signal_wrap internal binding types

leah-1ee
authored and
aduh95
committed
a40bfc7
util: use more primordials in `comparisons.js`

Ayoub-Mabrouk
authored and
aduh95
committed
64c20b4
test: enforce exit code in `test-http-server-stale-close`
aduh95
committed
6ff69ba
repl: add benchmarks

avivkeller
authored and
aduh95
committed
cd1e6ce
http: fix keylog listener setup on existing agent sockets

shani-singh1
authored and
aduh95
committed
04785c8

Commits on Sep 7, 2026

build: pass target architecture to small-icu genccode

ulofiai
authored and
aduh95
committed
5a5d73e
test: avoid timer race in event loop delay test

trivikr
authored and
aduh95
committed
fe0e4f1
deps: update googletest to 49495eacfdbda3f4b6ba219923fedbb2e3f99376

nodejs-github-bot
authored and
aduh95
committed
3e58e48
doc: add missing return types in buffer.md

inoway46
authored and
aduh95
committed
4533572
doc: add missing return types in fs.md

chasetonco
authored and
aduh95
committed
a1e9c3a
doc: document setRawMode write access on Windows

edemaine
authored and
aduh95
committed
2480acb
doc: clarify copyFile symlink behavior

cookesan
authored and
aduh95
committed
6f9b9df
doc: update security release prepare command

RafaelGSS
authored and
aduh95
committed
9b92fdc
doc: clarify how fs.Dirent file types are determined

soreavis
authored and
aduh95
committed
64cd3a6
stream: reject pull on signal abort during flush

trivikr
authored and
aduh95
committed
b8a7a75
sqlite: prevent reentrant session.close()

trivikr
authored and
aduh95
committed
a61a5fd
module: cache nearest parent package.json per directory

codebytere
authored and
aduh95
committed
bd21e67
buffer: prevent string write offset overflow

mcollina
authored and
aduh95
committed
2ba8661
test_runner: fix junit report on empty diagnostic

lazerg
authored and
aduh95
committed
6a248ac
doc: clarify that ipv4 mapped to ipv6 are classified as ipv6

gamemaker1
authored and
aduh95
committed
7809f11
diagnostics_channel: validate before channel activation

trivikr
authored and
aduh95
committed
94b118d
stream: decouple transform backpressure changes

mcollina
authored and
aduh95
committed
86d1196
quic: do not destroy incoming streams that have a consumer

trivenay
authored and
aduh95
committed
9017f4a
fs: treat `std::errc::permission_denied` as `EPERM` error

PickBas
authored and
aduh95
committed
b269616
build,win: add PGO workload scripts

StefanStojanovic
authored and
aduh95
committed
f62bc0f
quic: write desired size needs update on maxstream

martenrichter
authored and
aduh95
committed
18a7ccf
tools: make env variables consistent in cron jobs
aduh95
committed
67697de
test_runner: add classname hierarchy for JUnit reporter

mag123c
authored and
aduh95
committed
e7a68bc
deps: update simdjson to 4.6.7

nodejs-github-bot
authored and
aduh95
committed
c2aa446
deps: update zlib to 1.3.2.1-motley-8002e91

nodejs-github-bot
authored and
aduh95
committed
6bdcd12
module: report unreadable package.json

bitpshr
authored and
aduh95
committed
349c53c
crypto: fix missing error checks on ASN1_STRING_to_UTF8()

ndossche
authored and
aduh95
committed
419af8b
fs: fix out-of-bounds write in mkdtemp for long prefixes

frandle331-yh
authored and
aduh95
committed
c358761
tools: bump brace-expansion in `/tools/clang-format`

dependabot[bot]
authored and
aduh95
committed
bbe7651
dns: validate address type in lookupService

lazerg
authored and
aduh95
committed
0978866
child_process: keep SIGWINCH from killing on Win

PickBas
authored and
aduh95
committed
33d0c7d
test: fix Linux debug skip in SEA test guard

guhyunwoo
authored and
aduh95
committed
6438c70
doc: update outdated nodejs.org guide links

HoonDongKang
authored and
aduh95
committed
a7e8269
doc: clarify socket destroyed behavior

dayun6530
authored and
aduh95
committed
290c1fe
test: use common/child_process spawnSync helpers

ganjanggejang
authored and
aduh95
committed
06c7684
tools: fix max body length handler in `create-release-proposal.sh`
aduh95
committed
bc1f271
doc: fix broken TLS security level example

soreavis
authored and
aduh95
committed
fde6776
meta: move targos to emeritus

targos
authored and
aduh95
committed
186e1b7
doc: document that an empty OPENSSL_CONF skips config loading

authored and
aduh95
committed
45c4011
test_runner: mock dual-package with conditional exports

maruthang
authored and
aduh95
committed
339acf4
test_runner: use run options with isolation="none"

inukshuk
authored and
aduh95
committed
7cb9c9c
net: handle undefined parent in _unrefTimer and _destroy

Shivay-98
authored and
aduh95
committed
f45ef73
test: deflake test-net-listen-ipv6only

Han5991
authored and
aduh95
committed
38fdbb6
doc: fix broken GYP link in n-api.md

HoonDongKang
authored and
aduh95
committed
b13f425
util: fix formatting of functions returned from getters

gibson042
authored and
aduh95
committed
10cbb6d
doc: remove outdated WASI version fallback

hyemimi
authored and
aduh95
committed
eb36462
tools: improve commit queue failure comment

panva
authored and
aduh95
committed
b0f54bd
benchmark: add test-only and mock timers cases

luanmuniz
authored and
aduh95
committed
ad1d788
http: cache maxHeaderPairs per header section

GetThatCookie
authored and
aduh95
committed
48d9cd4
src: fix out-of-bounds write when transcoding odd-length ucs2

Nashit-h
authored and
aduh95
committed
ea5935b
fs: allocate FSReqPromise stat arrays lazily

MarshallOfSound
authored and
aduh95
committed
fcb4333
fs: pass symlink type in cp when filter is provided

shulaoda
authored and
aduh95
committed
bc54dd8
url: speed up URLSearchParams

anonrig
authored and
aduh95
committed
7d5428c
test_runner: print coverage and diagnostic info with dot reporter

mag123c
authored and
aduh95
committed
b06c61a
esm: avoid super-linear data URL MIME regex

skdas20
authored and
aduh95
committed
0312ee1
test: add Headers coverage and benchmark

anonrig
authored and
aduh95
committed
a98e27f
stream: avoid duplicated endReadableNT scheduling

mcollina
authored and
aduh95
committed
4ec4fab
quic: reset rejected HTTP/3 request streams with H3_REQUEST_REJECTED

trivenay
authored and
aduh95
committed
2460b17
dgram: don't swallow bind errors when callback is provided

armanmikoyan
authored and
aduh95
committed
774f663
lib: use bracket notation instead of startsWith/endsWith for single char

kimtaejin3
authored and
aduh95
committed
6bf8521
url: speed up WHATWG URL parsing

anonrig
authored and
aduh95
committed
58390f8
url: skip unused href reuse comparison

anonrig
authored and
aduh95
committed
a500256
quic: mark drain promise handled

jasnell
authored and
aduh95
committed
a4c770c
fs: fix glob early return skipping sibling entries

authored and
aduh95
committed
c9233b9
quic: changes for nghttp3_conn_close_stream2

martenrichter
authored and
aduh95
committed
f277983
test: simplify test-timers-interval-promisified.js

HoonDongKang
authored and
aduh95
committed
f38f154
doc: fix broken links in cli.md

HoonDongKang
authored and
aduh95
committed
034a827
test: remove test-debugger-run-after-quit-restart as flaky on macOS

inoway46
authored and
aduh95
committed
929d570
test: use spawnSyncAndAssert in windowsHide test

ganjanggejang
authored and
aduh95
committed
421ee11
test: convert forEach to for of test-messageevent-brandcheck file

nachiketap11
authored and
aduh95
committed
7d135d2
stream: reuse unexposed managed read buffers

GetThatCookie
authored and
aduh95
committed
6b8b9c3
test_runner: match dotfiles in default coverage exclude

semimikoh
authored and
aduh95
committed
67da38c
tty: add raw-vt and io raw modes

samuel-williams-shopify
authored and
aduh95
committed
600663b
repl: keep entries added while history file is loading

mhayk
authored and
aduh95
committed
4f6eda3
doc: fix property names in os.networkInterfaces() example

hanityx
authored and
aduh95
committed
0e6f9ae
stream: drain pending writes before broadcast end

trivikr
authored and
aduh95
committed
93d822b
perf_hooks: add statistical hypothesis testing to histogram

jasnell
authored and
aduh95
committed
5197b5a
benchmark: add --analyze mode to compare.js

jasnell
authored and
aduh95
committed
90d127d
src: fix heap value deduplication in embedder graph

IlyasShabi
authored and
aduh95
committed
793cf69
stream: prevent share from eagerly draining source

trivikr
authored and
aduh95
committed
1640682
util: fix OSC 8 hyperlink stripping in stripVTControlCharacters

authored and
aduh95
committed
b68a7c3
fs: fix realpath of namespaced drive paths

jazelly
authored and
aduh95
committed
8a5b1ae
fs: use sized reads for large files in readFileUtf8

codebytere
authored and
aduh95
committed
367549e
http: improve performance with known-length calls to end()

pimterry
authored and
aduh95
committed
75df6cb
permission: enforce addon permission in GetLinkedBinding

RafaelGSS
authored and
aduh95
committed
1722dda
tls: throw on invalid ALPNProtocols instead of aborting

sankalpsthakur
authored and
aduh95
committed
b0ef155
util: allow single-line format when break length is infinite

hamidrezaghavami
authored and
aduh95
committed
fa9d4e0
doc: update AHAFS reference link

ChocoChip0519
authored and
aduh95
committed
cd6205f
stream: encode whole chunks in TextEncoderStream

mcollina
authored and
aduh95
committed
107e96d
crypto: update root certificates to NSS 3.126

nodejs-github-bot
authored and
aduh95
committed
71106e1
stream: normalize fused stateless transform results

trivikr
authored and
aduh95
committed
9e2c477
events: inline createEvent hybrid dispatch closure

slagiewka
authored and
aduh95
committed
6ee4b40
events: inline iterationCondition hybrid dispatch closure

slagiewka
authored and
aduh95
committed
e6c34f9
deps: upgrade openssl sources to openssl-3.5.8

nodejs-github-bot
authored and
aduh95
committed
6274fcc
deps: update archs files for openssl-3.5.8

nodejs-github-bot
authored and
aduh95
committed
0268ca5
test: account for varied OpenSSL CCM final behaviours

panva
authored and
aduh95
committed
1433cf9
test: fix link-local dgram scope assertion

panva
authored and
aduh95
committed
39e0457
deps: update undici to 7.29.1

nodejs-github-bot
authored and
aduh95
committed
53cba01
deps: update corepack to 0.36.0

nodejs-github-bot
authored and
aduh95
committed
07faaee
src: add missing vector include

panva
authored and
aduh95
committed
e3c6bd6
http2: adapt receive deferral for Node.js 24

mcollina
authored and
aduh95
committed
83a2755
2026-09-08, Version 24.21.0 'Krypton' (LTS)
aduh95
committed
955266b