Skip to content

fix(major deps): update node.js to v24#286

Merged
zdenko-kovac merged 1 commit into
mainfrom
renovate/major-major-deps
Sep 12, 2025
Merged

fix(major deps): update node.js to v24#286
zdenko-kovac merged 1 commit into
mainfrom
renovate/major-major-deps

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 7, 2025

This PR contains the following updates:

Package Change Age Confidence
node (source) 23.11.1 -> 24.8.0 age confidence

Release Notes

nodejs/node (node)

v24.8.0: 2025-09-10, Version 24.8.0 (Current), @​targos

Compare Source

Notable Changes
HTTP/2 Network Inspection Support in Node.js

Node.js now supports inspection of HTTP/2 network calls in Chrome DevTools for Node.js.

Usage

Write a test.js script that makes HTTP/2 requests.

const http2 = require('node:http2');

const client = http2.connect('https://nghttp2.org');

const req = client.request([
  ':path', '/',
  ':method', 'GET',
]);

Run it with these options:

node --inspect-wait --experimental-network-inspection test.js

Open about:inspect on Google Chrome and click on Open dedicated DevTools for Node.
The Network tab will let you track your HTTP/2 calls.

Contributed by Darshan Sen in #​59611.

Other Notable Changes
  • [7a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #​59570
  • [4b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #​59570
  • [3e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #​59647
  • [b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #​59544
  • [430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #​59537
  • [d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #​59428
Commits

v24.7.0: 2025-08-27, Version 24.7.0 (Current), @​targos

Compare Source

Notable Changes
Post-Quantum Cryptography in node:crypto

OpenSSL 3.5 on 24.x kicked off post-quantum cryptography efforts in Node.js by
allowing use of NIST's post-quantum cryptography standards for future-proofing
applications against quantum computing threats. The following post-quantum
algorithms are now available in node:crypto:

  • ML-KEM (FIPS 203, Module-Lattice-Based Key-Encapsulation Mechanism Standard) through new crypto.encapsulate() and crypto.decapsulate() methods.
  • ML-DSA (FIPS 204, Module-Lattice-Based Digital Signature Standard) in the existing crypto.sign() and crypto.verify() methods.

Contributed by Filip Skokan in #​59259 and #​59491.

Modern Algorithms in Web Cryptography API

The second substantial extension to the Web Cryptography API
(globalThis.crypto.subtle) was recently accepted for incubation by WICG.
The following algorithms and methods from this extension are now available in
the Node.js Web Cryptography API implementation:

  • AES-OCB
  • ChaCha20-Poly1305
  • ML-DSA
  • ML-KEM
  • SHA-3
  • SHAKE
  • subtle.getPublicKey()
  • SubtleCrypto.supports()
  • ... with more coming in future releases.

Contributed by Filip Skokan in #​59365, #​59569, #​59461, and #​59539.

Node.js execution argument support in single executable applications

The single executable application configuration now supports additional fields
to specify Node.js execution arguments and control how they can be extended when
the application is run.

  • execArgv takes an array of strings for the execution arguments to be used.
  • execArgvExtension takes one of the following values:
    • "none": No additional execution arguments are allowed.
    • "cli": Additional execution arguments can be provided via a special command-line flag --node-options="--flag1 --flag2=value" at run time.
    • "env" (default): Additional execution arguments can be provided via the NODE_OPTIONS environment variable at run time.

For example, with the following configuration:

{
  "main": "/path/to/bundled/script.js",
  "output": "/path/to/write/the/generated/blob.blob",
  "execArgv": ["--no-warnings"],
  "execArgvExtension": "cli",
}

If the generated single executable application is named sea, then running:

sea --node-options="--max-old-space-size=4096" user-arg1 user-arg2

Would be equivalent to running:

node --no-warnings --max-old-space-size=4096 /path/to/bundled/script.js user-arg1 user-arg2

Contributed by Joyee Cheung in #​59314 and #​59560.

Root certificates updated to NSS 3.114

Certificates added:

  • TrustAsia TLS ECC Root CA
  • TrustAsia TLS RSA Root CA
  • SwissSign RSA TLS Root CA 2022 - 1

Certificates removed:

  • GlobalSign Root CA
  • Entrust.net Premium 2048 Secure Server CA
  • Baltimore CyberTrust Root
  • Comodo AAA Services root
  • XRamp Global CA Root
  • Go Daddy Class 2 CA
  • Starfield Class 2 CA
Other Notable Changes
  • [d3afc63c44] - (SEMVER-MINOR) crypto: add argon2() and argon2Sync() methods (Ranieri Althoff) #​50353
  • [6ae202fcdf] - (SEMVER-MINOR) http: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) #​59315
  • [dafee05358] - (SEMVER-MINOR) http2: add support for raw header arrays in h2Stream.respond() (Tim Perry) #​59455
  • [8dc6f5b696] - (SEMVER-MINOR) stream: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) #​59464
Commits

v24.6.0: 2025-08-14, Version 24.6.0 (Current), @​RafaelGSS

Compare Source

Notable Changes
  • [471fe712b3] - (SEMVER-MINOR) cli: add NODE_USE_SYSTEM_CA=1 (Joyee Cheung) #​59276
  • [38aedfbf73] - (SEMVER-MINOR) crypto: support ML-DSA KeyObject, sign, and verify (Filip Skokan) #​59259
  • [201304537e] - (SEMVER-MINOR) zlib: add dictionary support to zstdCompress and zstdDecompress (lluisemper) #​59240
  • [e79c93a5d0] - (SEMVER-MINOR) http: add server.keepAliveTimeoutBuffer option (Haram Jeong) #​59243
  • [c144d69efc] - lib: docs deprecate _http_* (Sebastian Beltran) #​59293
  • [aeb4de55a7] - (SEMVER-MINOR) fs: port SonicBoom module to fs module as Utf8Stream (James M Snell) #​58897
Commits
  • [f7484575ff] - assert: change utils to use index instead of for...of (방진혁) #​59278
  • [269cd16185] - benchmark: remove deprecated _extend from benchmark (Rafael Gonzaga) #​59228
  • [848e49c20b] - benchmark: add fs warmup to writefile-promises (Bruno Rodrigues) #​59215
  • [8c609be1b1] - benchmark: add calibrate-n script (Rafael Gonzaga) [#&

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label May 7, 2025
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 5 times, most recently from 1983cfc to 016e2f4 Compare May 15, 2025 19:20
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 3 times, most recently from a372fce to f17f503 Compare May 23, 2025 04:04
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 6 times, most recently from 48ce14c to 5ebadee Compare May 29, 2025 11:39
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 5 times, most recently from de70b6f to 1788820 Compare June 8, 2025 17:24
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 6 times, most recently from 377a950 to cad705f Compare June 16, 2025 20:33
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 3 times, most recently from 3999dea to bd5791a Compare June 25, 2025 19:55
@renovate renovate Bot force-pushed the renovate/major-major-deps branch from bd5791a to 8c58c0c Compare July 10, 2025 01:35
@renovate renovate Bot force-pushed the renovate/major-major-deps branch from 8c58c0c to 6e9ad50 Compare July 16, 2025 04:00
@renovate renovate Bot force-pushed the renovate/major-major-deps branch from 6e9ad50 to 4e98e20 Compare August 1, 2025 07:09
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 6 times, most recently from 2c27787 to 802aef4 Compare August 21, 2025 17:13
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 6 times, most recently from 8e7b603 to 1bd68d2 Compare August 28, 2025 02:09
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 7 times, most recently from c594b76 to 4d12168 Compare September 5, 2025 21:08
@renovate renovate Bot force-pushed the renovate/major-major-deps branch 3 times, most recently from 0bfb48a to f6488c5 Compare September 10, 2025 03:13
@renovate renovate Bot force-pushed the renovate/major-major-deps branch from f6488c5 to 08cde75 Compare September 11, 2025 01:43
@zdenko-kovac zdenko-kovac merged commit d71cb08 into main Sep 12, 2025
9 checks passed
@zdenko-kovac zdenko-kovac deleted the renovate/major-major-deps branch September 12, 2025 08:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants