Node.js 24.21.0 release notes

Notable Changes

[71106e1f17] - crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495
[afca0a912d] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #63949
[6274fccbd9] - deps: update OpenSSL to 3.5.8 (Node.js GitHub Bot) #65542
[53cba013c7] - deps: update Undici to 7.29.1 (Node.js GitHub Bot) #65789
[0529772798] - (SEMVER-MINOR) lib,src: improve histogram implementation (James M Snell) #65024
[41c7062b81] - (SEMVER-MINOR) net: improve performance of net.BlockList (James M Snell) #64974
[5197b5a3c5] - (SEMVER-MINOR) perf_hooks: add statistical hypothesis testing to histogram (James M Snell) #65416
[35c635b032] - (SEMVER-MINOR) util: add non-throwing MIMEType.parse (James M Snell) #64965

Commits

[84d706cb9b] - assert: improve documentation wording (Kamal Rawal) #64953
[90d127db33] - (SEMVER-MINOR) benchmark: add --analyze mode to compare.js (James M Snell) #65416
[ad1d7884c3] - benchmark: add test-only and mock timers cases (Luan Muniz) #64097
[1d8f045914] - benchmark: apply highWaterMark in webstreams pipe-to (Matteo Collina) #65138
[ed7ba3c993] - benchmark: complete the sqlite is-transaction fix (Edy Silva) #65218
[c8837e1aa3] - benchmark: add test runner hooks and options (Luan Muniz) #63754
[2ba8661e23] - buffer: prevent string write offset overflow (Matteo Collina) #65043
[cc9ee6c2ae] - buffer: treat detached ArrayBuffers as empty (Archkon) #64504
[5a5d73e4c5] - build: pass target architecture to small-icu genccode (ulofiai) #65095
[273e72d1a5] - build: deprecate always enabled --enable-static (Chengzhong Wu) #65103
[89a67246e3] - build: check FIPS option value in node.gyp (Filip Skokan) #64982
[2d21f41cd5] - build: handle malformed OpenSSL macros (Filip Skokan) #64982
[f62bc0f862] - build,win: add PGO workload scripts (Stefan Stojanovic) #63696
[33d0c7dc12] - child_process: keep SIGWINCH from killing on Win (Kirill Saied) #64510
[71106e1f17] - crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495
[419af8b86d] - crypto: fix missing error checks on ASN1_STRING_to_UTF8() (Nora Dossche) #65200
[8029383f3f] - crypto: use available BoringSSL APIs (Filip Skokan) #65423
[a9bd780e19] - crypto: remove obsolete BoringSSL shims (Filip Skokan) #65423
[7defefad3f] - crypto: read WebCrypto inputs through primordials (Filip Skokan) #65115
[6ed1e38627] - crypto: fix disabling FIPS mode (Filip Skokan) #64982
[afca0a912d] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #63949
[9b9dd6e9cf] - debugger: wait for target startup (Filip Skokan) #65194
[07faaeeffd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
[53cba013c7] - deps: update undici to 7.29.1 (Node.js GitHub Bot) #65789
[0268ca547c] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542
[6274fccbd9] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542
[6bdcd121fa] - deps: update zlib to 1.3.2.1-motley-8002e91 (Node.js GitHub Bot) #65316
[c2aa446b6d] - deps: update simdjson to 4.6.7 (Node.js GitHub Bot) #65318
[3e58e48ea8] - deps: update googletest to 49495eacfdbda3f4b6ba219923fedbb2e3f99376 (Node.js GitHub Bot) #65317
[670b3665c0] - deps: cherry-pick libuv/libuv@e640dc9 (ulofiai) #65118
[ca1c67b021] - deps: float ICU-23262 patch for icu78 (René) #64678
[4ad043b0aa] - deps: enable AVX-512 OpenSSL asm with clang (Daniel Lemire) #65136
[96b4af109b] - deps: update googletest to d89aac5f0dd4021198d903d39de16f896726de21 (Node.js GitHub Bot) #65153
[774f663c56] - dgram: don't swallow bind errors when callback is provided (armanmikoyan) #62602
[94b118d62e] - diagnostics_channel: validate before channel activation (Trivikram Kamat) #65313
[09788665bd] - dns: validate address type in lookupService (Lazizbek Ergashev) #64878
[15f95fc0e2] - dns: validate port range in setServers() (René) #65021
[37b9e9a154] - dns: fix crash on setServers with port 0 (Lazizbek Ergashev) #65009
[cd6205fa0d] - doc: update AHAFS reference link (Taeuk Ha) #65481
[0e6f9ae42e] - doc: fix property names in os.networkInterfaces() example (Jihwan) #65469
[034a827b41] - doc: fix broken links in cli.md (Donghoon Kang) #65412
[eb364621d4] - doc: remove outdated WASI version fallback (이혜미) #65303
[b13f425bf8] - doc: fix broken GYP link in n-api.md (Donghoon Kang) #65413
[45c4011067] - doc: document that an empty OPENSSL_CONF skips config loading (Orgad Shaneh) #64949
[fde6776c5f] - doc: fix broken TLS security level example (soreavis) #65391
[290c1fec04] - doc: clarify socket destroyed behavior (Dayun) #65395
[a7e8269947] - doc: update outdated nodejs.org guide links (Donghoon Kang) #65394
[7809f11249] - doc: clarify that ipv4 mapped to ipv6 are classified as ipv6 (Vedant Kulkarni) #62117
[64cd3a6e95] - doc: clarify how fs.Dirent file types are determined (soreavis) #64532
[9b92fdce14] - doc: update security release prepare command (Rafael Gonzaga) #64699
[6f9b9df3c1] - doc: clarify copyFile symlink behavior (T) #62941
[2480acb550] - doc: document setRawMode write access on Windows (Erik Demaine) #63856
[a1e9c3a5db] - doc: add missing return types in fs.md (Chaseton Collins) #65307
[4533572040] - doc: add missing return types in buffer.md (Yuya Inoue) #65308
[39ecedbbd2] - doc: fix lint clean command (greenhead) #65274
[0b1fb8fcd8] - doc: fix typo in onboarding.md (서울민트초코) #65295
[3165b5d38a] - doc: add missing added: tags to fs.lchmod (Lazizbek Ergashev) #65283
[113b808e59] - doc: fix SQLite changeset constant descriptions (greenhead) #65265
[c3eb51d5a1] - doc: document open pull request limit (Matteo Collina) #65250
[d7accdcd52] - doc: document http2 header constants (Harjoth Khara) #64548
[f47111416f] - doc: create ai-guidelines and include to CONTRIBUTING (Rafael Gonzaga) #62105
[c3b120e737] - doc: update synopsis (Augustin Mauroy) #65171
[39f4c831fd] - doc: fix broken internal links (greenhead) #64901
[be25cdd69e] - doc: report proper return type on urlPattern.test (Brian Muenzenmeyer) #64831
[1bf7737810] - doc: fix permission documentation examples (greenhead) #64897
[b7932e68a1] - doc: document sqlite parameter binding (Guilherme Araújo) #65089
[5234a5169c] - doc: finalize statements in sqlite examples (Guilherme Araújo) #65088
[39ea929da7] - doc: document quic stopSending() and resetStream() (Issac) #64888
[2ba198db73] - doc: clarify sqlite bare parameter default (Sumit Kumar Das) #62009
[314f9b200f] - doc: remove usage of util.inherits (Augustin Mauroy) #60817
[d82a61662c] - doc: fix grammar in worker_threads.md (이혜미) #64913
[44c0c8ff5b] - doc: clarify OpenSSL FIPS configuration (Filip Skokan) #64982
[9b2ca70e0d] - doc: remove --expose-gc flag from CLI documentation (Dario Piotrowicz) #58909
[a0a12397b9] - doc: document ArrayBuffer support in pbkd2Sync (kyungrae2002) #64976
[b48699e077] - doc: correct default highWaterMark values (Yilong Li) #64617
[0312ee133c] - esm: avoid super-linear data URL MIME regex (Sumit Kumar Das) #61951
[cd84d55c81] - esm: only register text format when enabled (Efe Karasakal) #64992
[c0a8ef611e] - esm: fix wasm import name in error message (이혜미) #64950
[e6c34f90c2] - events: inline iterationCondition hybrid dispatch closure (Szymon Łągiewka) #64473
[6ee4b40c91] - events: inline createEvent hybrid dispatch closure (Szymon Łągiewka) #64473
[367549eed5] - fs: use sized reads for large files in readFileUtf8 (Shelley Vohr) #65328
[8a5b1ae4c2] - fs: fix realpath of namespaced drive paths (Jason Zhang) #65378
[c9233b950d] - fs: fix glob early return skipping sibling entries (Srinu desetti) #64895
[bc54dd8905] - fs: pass symlink type in cp when filter is provided (Jerry Zhao) #62654
[fcb4333aca] - fs: allocate FSReqPromise stat arrays lazily (Samuel Attard) #63886
[c35876154e] - fs: fix out-of-bounds write in mkdtemp for long prefixes (Hierax_Umbra) #64770
[b269616936] - fs: treat std::errc::permission_denied as EPERM error (Kirill Saied) #64698
[212fe77e76] - fs: add windowsHandle option to file streams (Kirill Saied) #63851
[75df6cb435] - http: improve performance with known-length calls to end() (Tim Perry) #65466
[48d9cd4a28] - http: cache maxHeaderPairs per header section (GetThatCookie) #64988
[04785c8f43] - http: fix keylog listener setup on existing agent sockets (Shani Singh) #65066
[4b90031534] - http: emit drain on socket takeover and avoid stale HWM reuse (Naman Trivedi) #64991
[83a27559cd] - http2: adapt receive deferral for Node.js 24 (Matteo Collina) #65093
[f43bed0ecc] - http2: avoid uaf while receiving and sending rst_stream (esgor) #64166
[b42d664321] - inspector: avoid calling into JS from V8 interrupts (Joyee Cheung) #65028
[6bf852197d] - lib: use bracket notation instead of startsWith/endsWith for single char (Taejin Kim) #61500
[151ca7e104] - lib: harden webidl dictionary member reads (Filip Skokan) #65115
[7e8c2c9f44] - lib: use validateArray for array arguments (greenhead) #64959
[424fe2bc5a] - lib: add and test [EnforceRange] in webcrypto dictionaries (Filip Skokan) #65091
[0529772798] - (SEMVER-MINOR) lib,src: improve histogram implementation (James M Snell) #65024
[186e1b76e8] - meta: move targos to emeritus (Michaël Zasso) #65393
[b41b07c72a] - meta: add unified http api initiative (James M Snell) #65139
[f85b6ecd67] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #65182
[8f3d01bdce] - meta: add Aviv Keller to .mailmap (Aviv Keller) #65048
[cfad1d5b28] - meta: update sccache to 0.17.0 (René) #64985
[349c53c441] - module: report unreadable package.json (Paul Bouchon) #65223
[bd21e6706e] - module: cache nearest parent package.json per directory (Shelley Vohr) #65326
[961bd04370] - module: fix --check on ambiguous ESM files (Paul Bouchon) #65203
[f45ef73420] - net: handle undefined parent in _unrefTimer and _destroy (Shivay-98) #64644
[41c7062b81] - (SEMVER-MINOR) net: improve performance of net.BlockList (James M Snell) #64974
[5197b5a3c5] - (SEMVER-MINOR) perf_hooks: add statistical hypothesis testing to histogram (James M Snell) #65416
[1722ddac28] - permission: enforce addon permission in GetLinkedBinding (Rafael Gonzaga) #65432
[dff2b675db] - process: validate resource stats array offsets (Archkon) #65098
[f277983e7b] - quic: changes for nghttp3_conn_close_stream2 (Marten Richter) #64574
[a4c770c78e] - quic: mark drain promise handled (James M Snell) #65319
[2460b171c5] - quic: reset rejected HTTP/3 request streams with H3_REQUEST_REJECTED (trivenay) #65442
[18a7ccf302] - quic: write desired size needs update on maxstream (Marten Richter) #64768
[9017f4a780] - quic: do not destroy incoming streams that have a consumer (trivenay) #65335
[ddc41c1ef4] - quic: fix wake up blob (Marten Richter) #64044
[88bee43d7c] - quic: convert incoming :status header to number (Hallison Pereira Melo) #63589
[cd776fe97c] - quic: fix infinite loop if STOP_SENDING received on a buffering stream (Tim Perry) #64715
[4f6eda3c23] - repl: keep entries added while history file is loading (Mhayk Whandson) #64513
[cd1e6ce29b] - repl: add benchmarks (Aviv Keller) #64590
[2ba740669d] - sea: avoid dangling CLI option pointers (Archkon) #64755
[ec5e2d6856] - sea: handle NUL bytes in asset keys (Archkon) #64773
[703b854293] - sea: reject trailing content in config JSON (Archkon) #64774
[a61a5fdd1c] - sqlite: prevent reentrant session.close() (Trivikram Kamat) #65349
[6ae81be0a3] - sqlite: reject statement-less SQL in prepare() (Trevor Burnham) #65157
[043dfe4996] - sqlite: reject statement-less SQL in SQLTagStore (Trevor Burnham) #65157
[b8faee02e1] - sqlite: check null returns from sqlite value functions (Nora Dossche) #63288
[d6d2a71bee] - sqlite: validate maxSize argument in createTagStore() (Anshika Jain) #63792
[61a046309f] - sqlite: reject non-positive backup rates (Trivikram Kamat) #64893
[514e3f30fb] - sqlite: clear SQLTagStore bindings (Matteo Collina) #65041
[c1542255b8] - sqlite: bind Boolean (mike-git374) #62001
[cdb732beb5] - sqlite: fix undefined behaviour in Session::Changeset() (Nora Dossche) #63637
[fbe8861111] - sqlite: bind ArrayBuffer (mike-git374) #62061
[e3c6bd6bc8] - src: add missing vector include (Filip Skokan) #65622
[793cf69df8] - src: fix heap value deduplication in embedder graph (Ilyas Shabi) #64801
[ea5935b04c] - src: fix out-of-bounds write when transcoding odd-length ucs2 (nashit hayat) #64512
[22e5023f4d] - src: escape Windows environment variables in task runner (Antoine du Hamel) #65217
[a0f3c62bd9] - src: simplify c++ diagnostics channel API (James M Snell) #65158
[8e831a3d2e] - src: make minor cleanup to permission checks (James M Snell) #65158
[968b2ca3a3] - src: use DictionaryTemplate for permission diag channel message (James M Snell) #65158
[18e16e7f8d] - src: cache permission strings (James M Snell) #65158
[c8625a4b6f] - src: add SetAbortHandler (Max H Fisher) #64684
[c990140d60] - src: match cmd.exe case-insensitively in task runner (Archkon) #64907
[d7463b9dbc] - src: reuse cached env strings in remaining files (Seongeun Lee) #65039
[b055a43b93] - src: expose Windows-only fs open flags (Kirill Saied) #64775
[7f21e37496] - src: report why --enable-fips failed (Filip Skokan) #64979
[8c11beae27] - src: update repeated use strings to env (James M Snell) #64760
[9e2c477e26] - stream: normalize fused stateless transform results (Trivikram Kamat) #65367
[107e96dd41] - stream: encode whole chunks in TextEncoderStream (Matteo Collina) #65414
[164068279b] - stream: prevent share from eagerly draining source (Trivikram Kamat) #65338
[93d822bdc1] - stream: drain pending writes before broadcast end (Trivikram Kamat) #65334
[6b8b9c362f] - stream: reuse unexposed managed read buffers (GetThatCookie) #64990
[4ec4fab367] - stream: avoid duplicated endReadableNT scheduling (Matteo Collina) #65310