Skip to content

feat(deps): update dependency nodejs/node (v24.12.0 → v24.18.0)#1510

Open
erhardt-consulting-bot wants to merge 1 commit into
mainfrom
renovate/nodejs-node-24.x
Open

feat(deps): update dependency nodejs/node (v24.12.0 → v24.18.0)#1510
erhardt-consulting-bot wants to merge 1 commit into
mainfrom
renovate/nodejs-node-24.x

Conversation

@erhardt-consulting-bot

@erhardt-consulting-bot erhardt-consulting-bot commented Jan 13, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
nodejs/node minor v24.12.0v24.18.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

nodejs/node (nodejs/node)

v24.18.0: 2026-06-23, Version 24.18.0 'Krypton' (LTS), @​richardlau prepared by @​sxa

Compare Source

Notable Changes
  • [e07e7a31e1] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #​63527
  • [44c8ebcbd6] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #​64004
  • [d3ef4122ee] - (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina) #​63597
  • [bb2857b85a] - (SEMVER-MINOR) crypto: align key argument names in docs and error messages (Filip Skokan) #​62527
  • [b9d5e87880] - (SEMVER-MINOR) crypto: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) #​62527
  • [ccd756d61e] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #​62183
  • [4c9251fc09] - (SEMVER-MINOR) http: add writeInformation to send arbitrary 1xx status codes (Tim Perry) #​63155
  • [8c989ec4a3] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #​63079
  • [3f54c8ba32] - Revert "stream: noop pause/resume on destroyed streams" (Stewart X Addison) #​63834
Commits

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Zurich)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@erhardt-consulting-bot erhardt-consulting-bot force-pushed the renovate/nodejs-node-24.x branch 6 times, most recently from 170c43c to 746d6ce Compare January 15, 2026 21:24
@erhardt-consulting-bot erhardt-consulting-bot force-pushed the renovate/nodejs-node-24.x branch 9 times, most recently from 07df38f to b020dab Compare January 27, 2026 00:05
@erhardt-consulting-bot erhardt-consulting-bot force-pushed the renovate/nodejs-node-24.x branch 15 times, most recently from 29f005d to d43425e Compare February 3, 2026 20:06
@erhardt-consulting-bot erhardt-consulting-bot force-pushed the renovate/nodejs-node-24.x branch 5 times, most recently from b4c3df3 to 4cab143 Compare February 18, 2026 13:05
@erhardt-consulting-bot erhardt-consulting-bot force-pushed the renovate/nodejs-node-24.x branch 4 times, most recently from cfd5c42 to 33e3a22 Compare February 24, 2026 16:09
@erhardt-consulting-bot erhardt-consulting-bot changed the title feat(deps): update dependency nodejs/node (v24.12.0 → v24.13.1) feat(deps): update dependency nodejs/node (v24.12.0 → v24.14.0) Feb 24, 2026
@erhardt-consulting-bot erhardt-consulting-bot force-pushed the renovate/nodejs-node-24.x branch 9 times, most recently from af85a29 to 0fedfb3 Compare March 2, 2026 21:48
@erhardt-consulting-bot erhardt-consulting-bot force-pushed the renovate/nodejs-node-24.x branch 3 times, most recently from e9bf9d0 to af19e15 Compare March 9, 2026 16:46
@erhardt-consulting-bot erhardt-consulting-bot force-pushed the renovate/nodejs-node-24.x branch 7 times, most recently from 1875851 to c7dc654 Compare March 11, 2026 18:25
| datasource  | package     | from     | to       |
| ----------- | ----------- | -------- | -------- |
| github-tags | nodejs/node | v24.12.0 | v24.18.0 |
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant