Skip to content

chore(deps): update node.js to v24.17.0 - #225

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-24.x
Closed

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-24.x

Conversation

@renovate

@renovate renovate Bot commented Apr 26, 2026 •

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
node (source) minor 24 → 24.17.0 age confidence
@types/node (source) devDependencies major ^22.19.20 → ^24.13.2 age confidence

Release Notes

nodejs/node (node)

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

✂ Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot

changeset-bot Bot commented Apr 26, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 7e4db03

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@renovate
renovate Bot force-pushed the renovate/node-24.x branch 6 times, most recently from 63ab78b to c7d2a11 Compare April 30, 2026 13:48
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from c7d2a11 to 29f8278 Compare May 8, 2026 05:08
@codecov

codecov Bot commented May 8, 2026 •

Copy link
Copy Markdown

Bundle Report

Changes will decrease total bundle size by 58.72kB (-75.98%) ⬇️. This is within the configured threshold ✅

Detailed changes
Bundle name Size Change
nodekit-esm 18.57kB -58.72kB (-75.98%) ⬇️

Affected Assets, Files, and Routes:

view changes for bundle: nodekit-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.ts -36.98kB 10.92kB -77.2%
index.js -21.74kB 7.64kB -73.98%

@renovate
renovate Bot force-pushed the renovate/node-24.x branch 3 times, most recently from f5d3aee to a3d0a67 Compare May 12, 2026 02:35
@botond-szabo
botond-szabo added this pull request to the merge queue May 20, 2026
@botond-szabo
botond-szabo removed this pull request from the merge queue due to a manual request May 20, 2026
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 59a91b4 to 6aa799d Compare May 21, 2026 14:15
@renovate renovate Bot changed the title chore(deps): update node.js to v24.15.0 chore(deps): update node.js to v24.16.0 May 21, 2026
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 4 times, most recently from 00d2fad to 9f55c64 Compare June 4, 2026 08:33
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 3 times, most recently from 6b8715c to 3a5acf0 Compare June 11, 2026 02:51
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from 3a5acf0 to 7e4db03 Compare June 18, 2026 06:39
@renovate renovate Bot changed the title chore(deps): update node.js to v24.16.0 chore(deps): update node.js to v24.17.0 Jun 18, 2026
@botond-szabo
botond-szabo deleted the renovate/node-24.x branch June 23, 2026 08:57
@renovate

renovate Bot commented Jun 23, 2026

Copy link
Copy Markdown
Contributor Author

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 24.x releases. But if you manually upgrade to 24.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant