Skip to content

chore(deps): update node.js to v24#16

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/node-24.x
Open

chore(deps): update node.js to v24#16
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/node-24.x

Conversation

@renovate

@renovate renovate Bot commented Nov 1, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
node (source) major 2024.17.0
node (source) engines major 2024.17.0
node uses-with major 18.20.824.17.0
node uses-with major 20.20.224.17.0

Release Notes

nodejs/node (node)

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "after 7am on the first day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Nov 1, 2025
@renovate renovate Bot force-pushed the renovate/node-24.x branch from a35214e to 74c6fec Compare November 12, 2025 05:31
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 74c6fec to ce2501d Compare December 1, 2025 11:35
@renovate renovate Bot force-pushed the renovate/node-24.x branch from ce2501d to b077d9e Compare December 12, 2025 16:13
@renovate renovate Bot force-pushed the renovate/node-24.x branch from b077d9e to e9b8a5c Compare January 14, 2026 07:58
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 214ca8b to d4df229 Compare February 11, 2026 19:34
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 4d653a9 to 8406530 Compare March 1, 2026 18:44
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 8406530 to 183dae6 Compare March 31, 2026 09:51
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 183dae6 to 31bdf29 Compare April 19, 2026 07:42
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 31bdf29 to 1d70536 Compare May 1, 2026 11:10
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 61ea45c to 7870f67 Compare May 23, 2026 15:56
@renovate renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 39cb2b3 to 444f152 Compare June 24, 2026 02:47
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 444f152 to 4ab98ff Compare June 28, 2026 03:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants