Skip to content

Releases: nodejs/node

2017-10-24, Version 8.8.0 (Current), @MylesBorins

25 Oct 15:49
Compare
Choose a tag to compare

Notable Changes

  • crypto:
    • expose ECDH class #8188
  • http2:
    • http2 is now exposed by default without the need for a flag #15685
    • a new environment variable NODE_NO_HTTP2 has been added to allow userland http2 to be required #15685
    • support has been added for generic Duplex streams #16269
  • module:
    • resolve and instantiate loader pipeline hooks have been added to the ESM lifecycle #15445
  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

Read more

2017-10-24, Version 6.11.5 'Boron' (LTS), @MylesBorins

25 Oct 15:49
Compare
Choose a tag to compare

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/oct-2017-dos/ for details on patched vulnerabilities.

Notable Changes

  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

Version 4.8.5 'Argon' (Maintenance), @MylesBorins

25 Oct 15:45
Compare
Choose a tag to compare

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/oct-2017-dos/ for details on patched vulnerabilities.

Notable Changes

  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

2017-10-11, Version 8.7.0 (Current), @MylesBorins

23 Oct 19:54
Compare
Choose a tag to compare

Notable Changes

  • deps:
    • update npm to 5.4.2
      #15600
    • upgrade libuv to 1.15.0
      #15745
    • update V8 to 6.1.534.42
      15393
  • dgram:
    • support for setting dgram socket buffer size
      #13623
  • fs:
    • add support O_DSYNC file open constant
      #15451
  • util:
    • deprecate obj.inspect for custom inspection
      #15631
  • tools, build:
    • there is a fancy new macOS installer
      #15179
  • Added new collaborators

Commits

Read more

2017-10-03, Version 6.11.4 'Boron' (LTS), @MylesBorins

23 Oct 19:53
Compare
Choose a tag to compare

This LTS release comes with 91 commits. This includes 29 which are test related,
28 which are doc related, 11 which are build / tool related and 3 commits which are updates to dependencies.

Notable Changes

  • net:
    • support passing undefined to listen() to match behavior in v4.x and v8.x (Sam Roberts) #14234

Commits

Read more

2017-09-26, Version 8.6.0 (Current), @jasnell

23 Oct 19:53
v8.6.0
Compare
Choose a tag to compare

Notable Changes

  • crypto
    • Support for multiple ECDH curves. #15206
  • dgram
    • Added setMulticastInterface() API. #7855
    • Custom lookup functions are now supported. #14560
  • n-api
    • The command-line flag is no longer required to use N-API. #14902
  • tls
    • Docs-only deprecation of parseCertString(). #14245
  • New Contributors

Commits

  • [4f7d9392e7] - assert: improve AssertionError in case of "Errors" (Ruben Bridgewater) #15025
  • [f6c65e6e19] - assert: fix boxed primitives in deepStrictEqual (Ruben Bridgewater) #15050
  • [7fa175f6d3] - assert: fix deepEqual inconsistencies (Ruben Bridgewater) #14491
  • [17d8dfec70] - async_hooks: support promise resolve hook (Anna Henningsen) #15296
  • [81723a9172] - (SEMVER-MINOR) async_hooks,doc: some async_hooks improvements (James M Snell) #15103
  • [535f8d5281] - benchmark: var to const (Ruben Bridgewater) #13757
  • [0f8f37ed45] - benchmark: improve and add more inspect benchmarks (Ruben Bridgewater) #14881
  • [3bf718c3fe] - benchmark: enable assert benchmark with short len (Rich Trott) #15174
  • [d30a5836b6] - benchmark: provide default methods for assert (Rich Trott) #15174
  • [142d2ed057] - benchmark: use smaller n value in some http tests (Peter Marshall) #14002
  • [5e4f87ae65] - buffer: improve Buffer.from performance (Anatoli Papirovski) #15178
  • [8bbbda55e4] - build: use generic names for linting tasks (Nikolai Vavilov) #15272
  • [9685b9ff2f] - build: don't fail make test on source tarballs (Gibson Fahnestock) #15441
  • [354f32040d] - build: remove unused configuration variable (Ben Noordhuis) #15266
  • [5d217ad5d7] - build: add support for link-module to vcbuild (Bartosz Sosnowski) #15410
  • [607832d3c3] - child_process: set shell to false in fork() (Alex Gresnel) #15352
  • [c26e93b309] - crypto: fix Node_SignFinal (David Benjamin) #15024
  • [bd07574718] - (SEMVER-MINOR) crypto: support multiple ECDH curves and auto (Roga Pria Sembada) #15206
  • [5e043a6c78] - deps: define BUILDING_NGHTTP2 during nghttp2 build (Ben Noordhuis) #15487
  • [2e75ac028a] - deps: v8: fix potential segfault in profiler (Ali Ijaz Sheikh) #15498
  • [2944ea6c6b] - (SEMVER-MINOR) dgram: add custom lookup function in sockets (cjihrig) #14560
  • [b24ee68133] - (SEMVER-MINOR) dgram: added setMulticastInterface() (Will Young) #7855
  • [f6b484461c] - doc: ctc -> tsc in onboarding extras (Bryan English) #15621
  • [f38666a967] - doc: ctc -> tsc in collab guide (Bryan English) #15590
  • [02c62df75e] - doc: remove invalid hash in link (Vse Mozhet Byt) #15542
  • [6cd64f36bc] - doc: note caveats in process message serialization (Joyee Cheung) #12963
  • [1fbb86c64b] - doc: fix 'aborted' event documentation (Luigi Pinca) #15471
  • [2326d655de] - doc: fix types and description for dns.resolveTxt (Tobias Nießen) #15472
  • [fcbee7b4bb] - doc: fix some links in http2.md (Vse Mozhet Byt) #15481
  • [9d6b0e6f6f] - doc: fix external links with 404 status (Vse Mozhet Byt) #15463
  • [29fd88c3e5] - doc: fix new nits in links (Vse Mozhet Byt) #15449
  • [4efc6fec6b] - doc: fix some internal links (Vse Mozhet Byt) #15293
  • [5ea4b88a29] - doc: adding sebdeckers to collaborators (Sebastiaan Deckers) #15354
  • [d5d498b6dc] - doc: update AUTHORS list (Michaël Zasso) #15181
  • [950f7f5fe1] - doc: update README with SHASUMS256.txt.sig info (Jon Moss) #15107
  • [38422d5963] - doc: fix nits in esm.md (Vse Mozhet Byt) #15315
  • [b0f5b2a38c] - doc: fix "added in" for Buffer.allocUnsafeSlow() (Tuan Anh Tran) #15330
  • [8112f496dc] - doc: add missing heading for error (Jon Moss) #15325
  • [29707afd82] - doc: add missing doc for readable._destroy (Michaël Zasso) #15316
  • [9f4480ce90] - doc: use consistent terminology in process doc (Rich Trott) #15321
  • [a53a0d8b38] - doc: fix emitKeypressEvents stream type (Oblosys) #15399
  • [b5c1a82560] - doc: fix http.ClientRequest method descriptions (Antoine AMARA) #15163
  • [f0e411d1b2] - doc: prevent displaying empty version picker (Chris Young) #15420
  • [acb0d012b3] - doc: make mkdtemp example work on Windows (Bartosz Sosnowski) #15408
  • [bdfed1ad25] - doc: fix entryTypes type and missing link (Mani Maghsoudlou) #15406
  • [7fa2bee5e7] - doc: add documentation for the 'timeout' event (Luigi Pinca) #15443
  • [b09eeb4a3d] - (SEMVER-MINOR) doc, tls: mark parseCertString() as deprecated (XadillaX) #14245
  • [e0f5e3a199] - docs: clarify usage cli options -e,-p on windows (Łukasz Szewczak) #15568
  • [a792ea7709] - docs: update 8.5.0 changelog (Myles Borins) #15384
  • [[0a8258b3de](https://github.com/nodejs/node/commit/0a...
Read more

2017-09-12, Version 8.5.0 (Current), @MylesBorins

23 Oct 19:52
Compare
Choose a tag to compare

Notable Changes

  • build
    • Snapshots are now re-enabled in V8
      #14875
  • console
    • Implement minimal console.group().
      #14910
  • deps
    • upgrade libuv to 1.14.1
      #14866
    • update nghttp2 to v1.25.0
      #14955
  • dns
    • Add verbatim option to dns.lookup(). When true, results from the DNS
      resolver are passed on as-is, without the reshuffling that Node.js
      otherwise does that puts IPv4 addresses before IPv6 addresses.
      #14731
  • fs
    • add fs.copyFile and fs.copyFileSync which allows for more efficient
      copying of files.
      #15034
  • inspector
    • Enable async stack traces #13870
  • module
    • Add support for ESM. This is currently behind the --experimental-modules flag
      and requires the .mjs extension.
      node --experimental-modules index.mjs
      #14369
  • napi
  • os
    • Add support for CIDR notation to the output of the networkInterfaces() method.
      #14307
  • perf_hooks
    • An initial implementation of the Performance Timing API for Node.js. This is the
      same Performance Timing API implemented by modern browsers with a number of Node.js
      specific properties. The User Timing mark() and measure() APIs are implemented.
      #14680
  • tls
    • multiple PFX in createSecureContext
      #14793
  • Added new collaborators

Commits

Read more

2017-09-05, Version 6.11.3 'Boron' (LTS), @MylesBorins

05 Sep 19:57
Compare
Choose a tag to compare

This LTS release comes with 152 commits. This includes 75 which are test related,
25 which are doc related, 21 which are build / tool related and 3 commits which are updates to dependencies.

Notable Changes

  • build:
    • Codesigning is fixed on macOS (Evan Lucas) #14179
  • deps:
    • Snapshots are turned back on!!! (Yang Guo) #14385
  • path:
    • win32 volume-relative paths are working again! (Timothy Gu) #14440
  • tools:
    • v6.x can now build with ICU 59 (Steven R. Loomis) #12078

Commits

Read more