Skip to content

chore(deps): update node runtime#62

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/node-runtime
Open

chore(deps): update node runtime#62
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/node-runtime

Conversation

@renovate

@renovate renovate Bot commented May 21, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@types/node (source) ^24.12.4^24.13.2 age confidence devDependencies minor
actions/setup-node 48b55a0 action pinDigest
node (source) >=24.15.0>=24.17.0 age confidence engines minor
node 24.15.0-slim24.17.0-slim age confidence stage minor
node 24.15.0-slim24.17.0-slim age confidence final minor
pnpm (source) 10.33.410.34.4 age confidence packageManager minor
pnpm (source) >=10.33.4>=10.34.4 age confidence engines minor

Release Notes

nodejs/node (node)

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Lisbon)

  • Branch creation
    • "before 5am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/node-runtime branch 2 times, most recently from e9c47c3 to c385214 Compare May 24, 2026 21:11
@renovate renovate Bot changed the title chore(deps): update node.js to >=24.16.0 chore(deps): update node runtime May 24, 2026
@renovate renovate Bot changed the title chore(deps): update node runtime chore(deps): update node runtime - autoclosed May 28, 2026
@renovate renovate Bot closed this May 28, 2026
@renovate renovate Bot deleted the renovate/node-runtime branch May 28, 2026 10:02
@renovate renovate Bot changed the title chore(deps): update node runtime - autoclosed chore(deps): pin dependencies May 28, 2026
@renovate renovate Bot reopened this May 28, 2026
@renovate renovate Bot force-pushed the renovate/node-runtime branch 4 times, most recently from 4bb2a7a to cfb1a5c Compare May 31, 2026 01:52
@renovate renovate Bot force-pushed the renovate/node-runtime branch from cfb1a5c to b8dc02d Compare June 7, 2026 10:04
@renovate renovate Bot changed the title chore(deps): pin dependencies chore(deps): update node runtime Jun 7, 2026
@renovate renovate Bot force-pushed the renovate/node-runtime branch 6 times, most recently from f886ee7 to bfd6f77 Compare June 14, 2026 20:56
@renovate renovate Bot force-pushed the renovate/node-runtime branch 2 times, most recently from e2c0c7b to ebc6f36 Compare June 21, 2026 16:44
@renovate renovate Bot force-pushed the renovate/node-runtime branch from ebc6f36 to 1e1b891 Compare June 22, 2026 01:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants