Skip to content

Releases: nodejs/node

2017-11-07, Version 4.8.6 'Argon' (Maintenance), @MylesBorins

15 Nov 15:28
Compare
Choose a tag to compare

This Maintenance release comes with 47 commits. This includes 26 commits which are updates to dependencies,
8 which are build / tool related, 4 which are doc related, and 2 which are test related.

This release includes a security update to openssl that has been deemed low severity for the Node.js project.

Notable Changes

  • crypto:
    • update root certificates (Ben Noordhuis) #13279
    • update root certificates (Ben Noordhuis) #12402
  • deps:
    • add support for more modern versions of INTL (Bruno Pagani) #13040
    • upgrade openssl sources to 1.0.2m (Shigeki Ohtsu) #16691
    • upgrade openssl sources to 1.0.2l (Daniel Bevenius) #13233

Commits

2017-10-31, Version 9.0.0 (Current), @jasnell

03 Nov 05:08
v9.0.0
Compare
Choose a tag to compare

Notable Changes

Commits

Semver-Major

  • [de4a749788] - (SEMVER-MAJOR) internal/util: use internal/errors.js (Sebastian Van Sande) #11301
  • [db2e093e05] - (SEMVER-MAJOR) assert: handle enumerable symbol keys (Ruben Bridgewater) #15169
  • [b0d3bec95c] - (SEMVER-MAJOR) assert: use Same-value equality in deepStrictEqual (Ruben Bridgewater) #15398
  • [e13d1df89b] - (SEMVER-MAJOR) assert: support custom errors (geek) #15304
  • [ea2e6363f2] - (SEMVER-MAJOR) assert: use SameValueZero in deepStrictEqual (Ruben Bridgewater) #15036
  • [c53db1e8e9] - (SEMVER-MAJOR) assert: show thrown message in doesNotThrow() (Ruslan Bekenev) #12167
  • [fc463639fa] - (SEMVER-MAJOR) assert: fix assert.fail with zero arguments (Ruben Bridgewater) [#13974](https://github.com/nodejs/no...
Read more

2017-10-31, Version 8.9.0 'Carbon' (LTS), @gibfahn

03 Nov 05:08
v8.9.0
f76ce0a
Compare
Choose a tag to compare

This release marks the transition of Node.js v8 into Long Term Support (LTS) with the codename 'Carbon'. The v8 release line now moves in to "Active LTS" and will remain so until April 2019. After that time it will move in to "Maintenance" until end of life in December 2019.

Notable Changes

  • doc:
    • add Gibson Fahnestock to Release team (Gibson Fahnestock) #16620
  • deps:
    • update npm to 5.5.1 (Myles Borins) #16509
  • http2:
    • The exposed http2 socket is no longer manipulatable (Anatoli Papirovski) #16330
  • module:
    • support custom paths to require.resolve() (cjihrig) #16397
  • util:
    • util.TextEncoder and util.TextDecoder are no longer experimental. There will no longer be a warning when they are used (James M Snell) #15743

Commits

Read more

2017-10-25, Version 8.8.1 (Current), @cjihrig

03 Nov 05:07
v8.8.1
dc6bbb4
Compare
Choose a tag to compare

Notable Changes

  • net:
    • Fix timeout with null handle issue. This is a regression in Node 8.8.0 #16489

Commits

2017-10-24, Version 8.8.0 (Current), @MylesBorins

25 Oct 15:49
Compare
Choose a tag to compare

Notable Changes

  • crypto:
    • expose ECDH class #8188
  • http2:
    • http2 is now exposed by default without the need for a flag #15685
    • a new environment variable NODE_NO_HTTP2 has been added to allow userland http2 to be required #15685
    • support has been added for generic Duplex streams #16269
  • module:
    • resolve and instantiate loader pipeline hooks have been added to the ESM lifecycle #15445
  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

Read more

2017-10-24, Version 6.11.5 'Boron' (LTS), @MylesBorins

25 Oct 15:49
Compare
Choose a tag to compare

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/oct-2017-dos/ for details on patched vulnerabilities.

Notable Changes

  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

Version 4.8.5 'Argon' (Maintenance), @MylesBorins

25 Oct 15:45
Compare
Choose a tag to compare

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/oct-2017-dos/ for details on patched vulnerabilities.

Notable Changes

  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

2017-10-11, Version 8.7.0 (Current), @MylesBorins

23 Oct 19:54
Compare
Choose a tag to compare

Notable Changes

  • deps:
    • update npm to 5.4.2
      #15600
    • upgrade libuv to 1.15.0
      #15745
    • update V8 to 6.1.534.42
      15393
  • dgram:
    • support for setting dgram socket buffer size
      #13623
  • fs:
    • add support O_DSYNC file open constant
      #15451
  • util:
    • deprecate obj.inspect for custom inspection
      #15631
  • tools, build:
    • there is a fancy new macOS installer
      #15179
  • Added new collaborators

Commits

Read more

2017-10-03, Version 6.11.4 'Boron' (LTS), @MylesBorins

23 Oct 19:53
Compare
Choose a tag to compare

This LTS release comes with 91 commits. This includes 29 which are test related,
28 which are doc related, 11 which are build / tool related and 3 commits which are updates to dependencies.

Notable Changes

  • net:
    • support passing undefined to listen() to match behavior in v4.x and v8.x (Sam Roberts) #14234

Commits

Read more

2017-09-26, Version 8.6.0 (Current), @jasnell

23 Oct 19:53
v8.6.0
Compare
Choose a tag to compare

Notable Changes

  • crypto
    • Support for multiple ECDH curves. #15206
  • dgram
    • Added setMulticastInterface() API. #7855
    • Custom lookup functions are now supported. #14560
  • n-api
    • The command-line flag is no longer required to use N-API. #14902
  • tls
    • Docs-only deprecation of parseCertString(). #14245
  • New Contributors

Commits

  • [4f7d9392e7] - assert: improve AssertionError in case of "Errors" (Ruben Bridgewater) #15025
  • [f6c65e6e19] - assert: fix boxed primitives in deepStrictEqual (Ruben Bridgewater) #15050
  • [7fa175f6d3] - assert: fix deepEqual inconsistencies (Ruben Bridgewater) #14491
  • [17d8dfec70] - async_hooks: support promise resolve hook (Anna Henningsen) #15296
  • [81723a9172] - (SEMVER-MINOR) async_hooks,doc: some async_hooks improvements (James M Snell) #15103
  • [535f8d5281] - benchmark: var to const (Ruben Bridgewater) #13757
  • [0f8f37ed45] - benchmark: improve and add more inspect benchmarks (Ruben Bridgewater) #14881
  • [3bf718c3fe] - benchmark: enable assert benchmark with short len (Rich Trott) #15174
  • [d30a5836b6] - benchmark: provide default methods for assert (Rich Trott) #15174
  • [142d2ed057] - benchmark: use smaller n value in some http tests (Peter Marshall) #14002
  • [5e4f87ae65] - buffer: improve Buffer.from performance (Anatoli Papirovski) #15178
  • [8bbbda55e4] - build: use generic names for linting tasks (Nikolai Vavilov) #15272
  • [9685b9ff2f] - build: don't fail make test on source tarballs (Gibson Fahnestock) #15441
  • [354f32040d] - build: remove unused configuration variable (Ben Noordhuis) #15266
  • [5d217ad5d7] - build: add support for link-module to vcbuild (Bartosz Sosnowski) #15410
  • [607832d3c3] - child_process: set shell to false in fork() (Alex Gresnel) #15352
  • [c26e93b309] - crypto: fix Node_SignFinal (David Benjamin) #15024
  • [bd07574718] - (SEMVER-MINOR) crypto: support multiple ECDH curves and auto (Roga Pria Sembada) #15206
  • [5e043a6c78] - deps: define BUILDING_NGHTTP2 during nghttp2 build (Ben Noordhuis) #15487
  • [2e75ac028a] - deps: v8: fix potential segfault in profiler (Ali Ijaz Sheikh) #15498
  • [2944ea6c6b] - (SEMVER-MINOR) dgram: add custom lookup function in sockets (cjihrig) #14560
  • [b24ee68133] - (SEMVER-MINOR) dgram: added setMulticastInterface() (Will Young) #7855
  • [f6b484461c] - doc: ctc -> tsc in onboarding extras (Bryan English) #15621
  • [f38666a967] - doc: ctc -> tsc in collab guide (Bryan English) #15590
  • [02c62df75e] - doc: remove invalid hash in link (Vse Mozhet Byt) #15542
  • [6cd64f36bc] - doc: note caveats in process message serialization (Joyee Cheung) #12963
  • [1fbb86c64b] - doc: fix 'aborted' event documentation (Luigi Pinca) #15471
  • [2326d655de] - doc: fix types and description for dns.resolveTxt (Tobias Nießen) #15472
  • [fcbee7b4bb] - doc: fix some links in http2.md (Vse Mozhet Byt) #15481
  • [9d6b0e6f6f] - doc: fix external links with 404 status (Vse Mozhet Byt) #15463
  • [29fd88c3e5] - doc: fix new nits in links (Vse Mozhet Byt) #15449
  • [4efc6fec6b] - doc: fix some internal links (Vse Mozhet Byt) #15293
  • [5ea4b88a29] - doc: adding sebdeckers to collaborators (Sebastiaan Deckers) #15354
  • [d5d498b6dc] - doc: update AUTHORS list (Michaël Zasso) #15181
  • [950f7f5fe1] - doc: update README with SHASUMS256.txt.sig info (Jon Moss) #15107
  • [38422d5963] - doc: fix nits in esm.md (Vse Mozhet Byt) #15315
  • [b0f5b2a38c] - doc: fix "added in" for Buffer.allocUnsafeSlow() (Tuan Anh Tran) #15330
  • [8112f496dc] - doc: add missing heading for error (Jon Moss) #15325
  • [29707afd82] - doc: add missing doc for readable._destroy (Michaël Zasso) #15316
  • [9f4480ce90] - doc: use consistent terminology in process doc (Rich Trott) #15321
  • [a53a0d8b38] - doc: fix emitKeypressEvents stream type (Oblosys) #15399
  • [b5c1a82560] - doc: fix http.ClientRequest method descriptions (Antoine AMARA) #15163
  • [f0e411d1b2] - doc: prevent displaying empty version picker (Chris Young) #15420
  • [acb0d012b3] - doc: make mkdtemp example work on Windows (Bartosz Sosnowski) #15408
  • [bdfed1ad25] - doc: fix entryTypes type and missing link (Mani Maghsoudlou) #15406
  • [7fa2bee5e7] - doc: add documentation for the 'timeout' event (Luigi Pinca) #15443
  • [b09eeb4a3d] - (SEMVER-MINOR) doc, tls: mark parseCertString() as deprecated (XadillaX) #14245
  • [e0f5e3a199] - docs: clarify usage cli options -e,-p on windows (Łukasz Szewczak) #15568
  • [a792ea7709] - docs: update 8.5.0 changelog (Myles Borins) #15384
  • [[0a8258b3de](https://github.com/nodejs/node/commit/0a...
Read more