Skip to content

chore(deps): update node.js to >= 24.22.1 - #28

Merged
renovate[bot] merged 1 commit into
masterfrom
renovate/node-24.x
Oct 21, 2026
Merged

renovate[bot] merged 1 commit into
masterfrom
renovate/node-24.x

Conversation

@renovate

@renovate renovate Bot commented Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
node (source) engines minor >= 24.21.0 → >= 24.22.1

Release Notes

nodejs/node (node)

v24.22.1: 2026-10-21, Version 24.22.1 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
  • (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
  • (CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
  • (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
  • (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
  • (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
  • (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
  • (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov)
  • crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
  • deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
  • deps: update timezone to 2026e (Node.js GitHub Bot)
  • deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
  • deps: update undici to 7.30.1 (Node.js GitHub Bot)
Commits

v24.22.0: 2026-10-14, Version 24.22.0 'Krypton' (LTS), @​richardlau prepared by @​aduh95

Compare Source

Notable Changes
  • [ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #​65627
  • [c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #​65553
  • [a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #​65484
  • [c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #​65484
  • [51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #​63411
  • [d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #​66090
  • [acc1578179] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #​65593
  • [a7f8de6362] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #​64725
  • [60c3eb61bd] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #​65825
  • [6b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #​65806
  • [75456a3512] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #​65606
  • [72d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #​65434
  • [41161dda87] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #​64232
  • [adbc757d70] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #​64232
  • [241339f072] - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell) #​65805
  • [63b0974d9e] - (SEMVER-MINOR) util: implement util.throttle (James M Snell) #​65899
  • [a3bbb5a26f] - (SEMVER-MINOR) util: implement debounce (James M Snell) #​65899
Commits

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • On day 1 and 15 of the month (* * 1,15 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Oct 15, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Error: ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION

  × installing dependencies
  ╰─▶ 8 lockfile entries failed verification:
        @bufbuild/buf-darwin-arm64@1.74.0 was published at 2026-10-
      15T08:23:03.000Z, within the minimumReleaseAge cutoff (2026-10-
      14T23:16:48.158Z)
        @bufbuild/buf-darwin-x64@1.74.0 was published at 2026-10-
      15T08:23:13.000Z, within the minimumReleaseAge cutoff (2026-10-
      14T23:16:48.158Z)
        @bufbuild/buf-linux-aarch64@1.74.0 was published at 2026-10-
      15T08:23:27.000Z, within the minimumReleaseAge cutoff (2026-10-
      14T23:16:48.158Z)
        @bufbuild/buf-linux-armv7@1.74.0 was published at 2026-10-
      15T08:23:36.000Z, within the minimumReleaseAge cutoff (2026-10-
      14T23:16:48.158Z)
        @bufbuild/buf-linux-x64@1.74.0 was published at 2026-10-
      15T08:23:46.000Z, within the minimumReleaseAge cutoff (2026-10-
      14T23:16:48.158Z)
        @bufbuild/buf-win32-arm64@1.74.0 was published at 2026-10-
      15T08:23:58.000Z, within the minimumReleaseAge cutoff (2026-10-
      14T23:16:48.158Z)
        @bufbuild/buf-win32-x64@1.74.0 was published at 2026-10-
      15T08:24:13.000Z, within the minimumReleaseAge cutoff (2026-10-
      14T23:16:48.158Z)
        @bufbuild/buf@1.74.0 was published at 2026-10-15T08:24:21.000Z, within
      the minimumReleaseAge cutoff (2026-10-14T23:16:48.158Z)
  help: The lockfile contains entries that the active policies reject. This
        can mean the lockfile is stale, or that someone committed a lockfile
        that bypassed the policy locally — inspect recent changes to pnpm-
        lock.yaml before trusting it. If the changes look expected, run "pnpm
        clean --lockfile" and then "pnpm install" to rebuild from a fresh
        resolution. If the fresh resolution still fails and you trust the
        affected packages, relax the policy that flagged them.


@renovate
renovate Bot force-pushed the renovate/node-24.x branch from cafdb29 to 72e1aeb Compare October 21, 2026 11:52
@renovate renovate Bot changed the title chore(deps): update node.js to >= 24.22.0 chore(deps): update node.js to >= 24.22.1 Oct 21, 2026
@renovate
renovate Bot merged commit 4f86e07 into master Oct 21, 2026
2 checks passed
@renovate
renovate Bot deleted the renovate/node-24.x branch October 21, 2026 16:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants