Skip to content

build(deps): update node.js to v24#1341

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/node-24.x
Open

build(deps): update node.js to v24#1341
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/node-24.x

Conversation

@renovate

@renovate renovate Bot commented Nov 8, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
node final major 16.20.2-alpine24.17.0-alpine age confidence
node stage major 16.20.2-alpine24.17.0-alpine age confidence
@types/node (source) devDependencies major 14.18.6324.13.2 age confidence

Release Notes

nodejs/node (node)

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Nov 8, 2025
@renovate renovate Bot force-pushed the renovate/node-24.x branch 3 times, most recently from e9734ab to 9620e1c Compare November 16, 2025 23:54
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 224c58f to 450ad39 Compare December 9, 2025 00:14
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 733f8e5 to 170f1fc Compare December 14, 2025 07:51
@renovate renovate Bot force-pushed the renovate/node-24.x branch 5 times, most recently from 4deb073 to 7f45ddd Compare January 16, 2026 23:01
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 4767fcb to 565b324 Compare January 23, 2026 19:09
@renovate renovate Bot force-pushed the renovate/node-24.x branch 4 times, most recently from ccf4ec2 to 541cfa4 Compare February 8, 2026 01:28
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from a8f437b to a5e4cd5 Compare February 13, 2026 04:01
@renovate renovate Bot force-pushed the renovate/node-24.x branch 5 times, most recently from eeac854 to f368bff Compare March 6, 2026 08:39
@renovate renovate Bot force-pushed the renovate/node-24.x branch from f368bff to 01d52e9 Compare March 26, 2026 08:56
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from cc6bf2c to 09f68d6 Compare April 19, 2026 04:46
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 09f68d6 to 157f2b0 Compare May 8, 2026 04:52
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 157f2b0 to e114dba Compare May 12, 2026 01:26
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 6d8010e to cf3b275 Compare May 21, 2026 22:32
@renovate renovate Bot force-pushed the renovate/node-24.x branch 3 times, most recently from 7131808 to 12bab2e Compare June 6, 2026 01:50
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 12bab2e to 915e97a Compare June 10, 2026 23:28
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 915e97a to 992081a Compare June 18, 2026 20:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants