crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs by panva · Pull Request #63411 · nodejs/node · GitHub
Skip to content

crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs - #63411

Merged
nodejs-github-bot merged 4 commits into
nodejs:mainfrom
panva:crypto-add-siv-modes
Aug 22, 2026
Merged

nodejs-github-bot merged 4 commits into
nodejs:mainfrom
panva:crypto-add-siv-modes

Conversation

@panva

@panva panva commented May 18, 2026

Copy link
Copy Markdown
Member

Closes #63393

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

@nodejs-github-bot nodejs-github-bot added lib / src Issues and PRs involving general changes in the lib/ or src/ directories. needs-ci PRs that need a full CI run. labels May 18, 2026
@panva
panva force-pushed the crypto-add-siv-modes branch from a1ea9b7 to 127a852 Compare May 18, 2026 13:24
@panva
panva requested a review from tniessen May 18, 2026 13:24
@panva panva added the crypto Issues and PRs related to the crypto subsystem. label May 18, 2026
@panva
panva marked this pull request as ready for review May 18, 2026 13:24
@panva panva added dont-land-on-v22.x PRs that should not land on the v22.x-staging branch and should not be released in v22.x. dont-land-on-v24.x PRs that should not land on the v24.x-staging branch and should not be released in v24.x. dont-land-on-v25.x labels May 18, 2026
@panva
panva force-pushed the crypto-add-siv-modes branch from 687e02b to b5764bc Compare May 18, 2026 13:45
@codecov

codecov Bot commented May 18, 2026 •

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 87.09677% with 8 lines in your changes missing coverage. Please review.
✅ Project coverage is 90.11%. Comparing base (fd5b135) to head (1ef6bd0).
⚠️ Report is 46 commits behind head on main.

Files with missing lines Patch % Lines
src/crypto/crypto_cipher.cc 87.09% 2 Missing and 6 partials ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main   #63411      +/-   ##
==========================================
- Coverage   90.12%   90.11%   -0.01%     
==========================================
  Files         752      752              
  Lines      252325   252371      +46     
  Branches    47456    47472      +16     
==========================================
+ Hits       227407   227436      +29     
- Misses      16217    16233      +16     
- Partials     8701     8702       +1     
Files with missing lines Coverage Δ
src/crypto/crypto_cipher.h 68.47% <ø> (ø)
src/crypto/crypto_cipher.cc 78.04% <87.09%> (+1.34%) ⬆️

... and 31 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@panva panva added review wanted PRs that need review. semver-minor PRs that contain new features and should be released in the next minor version. and removed dont-land-on-v24.x PRs that should not land on the v24.x-staging branch and should not be released in v24.x. labels May 25, 2026
@panva
panva requested review from ChALkeR and jasnell June 7, 2026 09:57
@panva
panva marked this pull request as draft June 11, 2026 09:09
@panva
panva marked this pull request as ready for review June 14, 2026 10:13
@panva
panva force-pushed the crypto-add-siv-modes branch from 944bf43 to 7c39722 Compare June 29, 2026 08:14
Comment thread deps/ncrypto/ncrypto.h Outdated
Comment thread deps/ncrypto/ncrypto.cc Outdated
@panva
panva requested a review from tniessen June 30, 2026 21:04
@hylmarj

hylmarj commented Aug 17, 2026

Copy link
Copy Markdown

Do you have any idea when this feature will be released, and if so, in which version?

@panva
panva force-pushed the crypto-add-siv-modes branch from 823805b to 71999e4 Compare August 20, 2026 09:20
@panva panva removed the review wanted PRs that need review. label Aug 20, 2026
@nodejs-github-bot

This comment was marked as outdated.

@nodejs-github-bot

This comment was marked as outdated.

@nodejs-github-bot

This comment was marked as outdated.

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

@panva panva added the commit-queue PRs queued for automated landing through the Commit Queue. label Aug 22, 2026
@nodejs-github-bot
nodejs-github-bot merged commit e573bd6 into nodejs:main Aug 22, 2026
70 checks passed
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

@nodejs-github-bot nodejs-github-bot removed the commit-queue PRs queued for automated landing through the Commit Queue. label Aug 22, 2026
@panva
panva deleted the crypto-add-siv-modes branch August 22, 2026 08:25
aduh95 pushed a commit that referenced this pull request Aug 25, 2026
Closes #63393

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #63411
Reviewed-By: James M Snell <jasnell@gmail.com>
aduh95 pushed a commit that referenced this pull request Aug 25, 2026
Closes #63393

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #63411
Reviewed-By: James M Snell <jasnell@gmail.com>
nodejs-github-bot added a commit that referenced this pull request Aug 25, 2026
Notable changes:

benchmark:
  * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416
crypto:
  * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495
  * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411
diagnostics_channel:
  * mark TracingChannel as stable (Abdelrahman Awad) #64525
lib,src:
  * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024
net:
  * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974
perf_hooks:
  * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416
repl:
  * add basic syntax highlighting (Aviv Keller) #64591
sqlite:
  * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232
  * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232
util:
  * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965
zlib:
  * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339

PR-URL: #65551
aduh95 pushed a commit that referenced this pull request Aug 26, 2026
Notable changes:

benchmark:
  * (SEMVER-MINOR) add --analyze mode to compare.js (James M Snell) #65416
crypto:
  * update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495
  * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411
diagnostics_channel:
  * mark TracingChannel as stable (Abdelrahman Awad) #64525
lib,src:
  * (SEMVER-MINOR) improve histogram implementation (James M Snell) #65024
net:
  * (SEMVER-MINOR) improve performance of net.BlockList (James M Snell) #64974
perf_hooks:
  * (SEMVER-MINOR) add statistical hypothesis testing to histogram (James M Snell) #65416
repl:
  * add basic syntax highlighting (Aviv Keller) #64591
sqlite:
  * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232
  * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232
util:
  * (SEMVER-MINOR) add non-throwing MIMEType.parse (James M Snell) #64965
zlib:
  * (SEMVER-MINOR) add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339

PR-URL: #65551
panva added a commit to panva/node that referenced this pull request Sep 19, 2026
Closes nodejs#63393

PR-URL: nodejs#63411
Reviewed-By: James M Snell <jasnell@gmail.com>

Assisted-by: Codex
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
@panva panva added the backport-open-v24.x Indicate that the PR has an open backport label Sep 19, 2026
panva added a commit to panva/node that referenced this pull request Sep 19, 2026
Closes nodejs#63393

PR-URL: nodejs#63411
Reviewed-By: James M Snell <jasnell@gmail.com>

Assisted-by: Codex
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
panva added a commit to panva/node that referenced this pull request Sep 19, 2026
Closes nodejs#63393

PR-URL: nodejs#63411
Reviewed-By: James M Snell <jasnell@gmail.com>

Assisted-by: Codex
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
aduh95 pushed a commit that referenced this pull request Sep 21, 2026
PR-URL: #63411
Backport-PR-URL: #66128
Fixes: #63393
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
@panva panva added backported-to-v24.x PRs backported to the v24.x-staging branch. and removed backport-open-v24.x Indicate that the PR has an open backport labels Sep 21, 2026
nodejs-github-bot added a commit that referenced this pull request Oct 11, 2026
Notable changes:

crypto:
  * (SEMVER-MINOR) add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627
  * (SEMVER-MINOR) add a generic MAC API (Filip Skokan) #65553
  * (SEMVER-MINOR) discover ciphers from OpenSSL providers (Filip Skokan) #65484
  * (SEMVER-MINOR) discover hashes from OpenSSL providers (Filip Skokan) #65484
  * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411
doc:
  * add araujogui to collaborators (Guilherme Araújo) #66090
  * deprecate `Server.prototype._listen2` in `node:net` (Antoine du Hamel) #65593
net:
  * (SEMVER-MINOR) support sending net.BoundSocket to threads and child processes (Guy Bedford) #64725
perf_hooks:
  * (SEMVER-MINOR) implement SlidingWindowHistogram (James M Snell) #65825
  * (SEMVER-MINOR) implement qrde analysis support in Histogram (James M Snell) #65806
  * (SEMVER-MINOR) implement Histogram meanCI API (James M Snell) #65606
  * (SEMVER-MINOR) add CBOR export/import for histogram exchange (James M Snell) #65434
sqlite:
  * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232
  * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232
src,lib:
  * (SEMVER-MINOR) add util.markPromiseAsHandled (James M Snell) #65805
test:
  * (SEMVER-MINOR) expand histogram test coverage (James M Snell) #65825
util:
  * (SEMVER-MINOR) implement util.throttle (James M Snell) #65899
  * (SEMVER-MINOR) implement debounce (James M Snell) #65899

PR-URL: #66667
aduh95 pushed a commit that referenced this pull request Oct 13, 2026
Notable changes:

crypto:
  * (SEMVER-MINOR) add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627
  * (SEMVER-MINOR) add a generic MAC API (Filip Skokan) #65553
  * (SEMVER-MINOR) discover ciphers from OpenSSL providers (Filip Skokan) #65484
  * (SEMVER-MINOR) discover hashes from OpenSSL providers (Filip Skokan) #65484
  * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411
doc:
  * add araujogui to collaborators (Guilherme Araújo) #66090
  * deprecate `Server.prototype._listen2` in `node:net` (Antoine du Hamel) #65593
net:
  * (SEMVER-MINOR) support sending net.BoundSocket to threads and child processes (Guy Bedford) #64725
perf_hooks:
  * (SEMVER-MINOR) implement SlidingWindowHistogram (James M Snell) #65825
  * (SEMVER-MINOR) implement qrde analysis support in Histogram (James M Snell) #65806
  * (SEMVER-MINOR) implement Histogram meanCI API (James M Snell) #65606
  * (SEMVER-MINOR) add CBOR export/import for histogram exchange (James M Snell) #65434
sqlite:
  * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232
  * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232
src,lib:
  * (SEMVER-MINOR) add util.markPromiseAsHandled (James M Snell) #65805
util:
  * (SEMVER-MINOR) implement util.throttle (James M Snell) #65899
  * (SEMVER-MINOR) implement debounce (James M Snell) #65899

PR-URL: #66667
aduh95 pushed a commit that referenced this pull request Oct 13, 2026
Notable changes:

crypto:
  * (SEMVER-MINOR) add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627
  * (SEMVER-MINOR) add a generic MAC API (Filip Skokan) #65553
  * (SEMVER-MINOR) discover ciphers from OpenSSL providers (Filip Skokan) #65484
  * (SEMVER-MINOR) discover hashes from OpenSSL providers (Filip Skokan) #65484
  * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411
doc:
  * add araujogui to collaborators (Guilherme Araújo) #66090
  * deprecate `Server.prototype._listen2` in `node:net` (Antoine du Hamel) #65593
net:
  * (SEMVER-MINOR) support sending net.BoundSocket to threads and child processes (Guy Bedford) #64725
perf_hooks:
  * (SEMVER-MINOR) implement SlidingWindowHistogram (James M Snell) #65825
  * (SEMVER-MINOR) implement qrde analysis support in Histogram (James M Snell) #65806
  * (SEMVER-MINOR) implement Histogram meanCI API (James M Snell) #65606
  * (SEMVER-MINOR) add CBOR export/import for histogram exchange (James M Snell) #65434
sqlite:
  * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232
  * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232
src,lib:
  * (SEMVER-MINOR) add util.markPromiseAsHandled (James M Snell) #65805
util:
  * (SEMVER-MINOR) implement util.throttle (James M Snell) #65899
  * (SEMVER-MINOR) implement debounce (James M Snell) #65899

PR-URL: #66667
richardlau pushed a commit that referenced this pull request Oct 14, 2026
Notable changes:

crypto:
  * (SEMVER-MINOR) add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627
  * (SEMVER-MINOR) add a generic MAC API (Filip Skokan) #65553
  * (SEMVER-MINOR) discover ciphers from OpenSSL providers (Filip Skokan) #65484
  * (SEMVER-MINOR) discover hashes from OpenSSL providers (Filip Skokan) #65484
  * (SEMVER-MINOR) enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411
doc:
  * add araujogui to collaborators (Guilherme Araújo) #66090
  * deprecate `Server.prototype._listen2` in `node:net` (Antoine du Hamel) #65593
net:
  * (SEMVER-MINOR) support sending net.BoundSocket to threads and child processes (Guy Bedford) #64725
perf_hooks:
  * (SEMVER-MINOR) implement SlidingWindowHistogram (James M Snell) #65825
  * (SEMVER-MINOR) implement qrde analysis support in Histogram (James M Snell) #65806
  * (SEMVER-MINOR) implement Histogram meanCI API (James M Snell) #65606
  * (SEMVER-MINOR) add CBOR export/import for histogram exchange (James M Snell) #65434
sqlite:
  * (SEMVER-MINOR) add StatementSync.prototype.close() (Guilherme Araújo) #64232
  * (SEMVER-MINOR) add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232
src,lib:
  * (SEMVER-MINOR) add util.markPromiseAsHandled (James M Snell) #65805
util:
  * (SEMVER-MINOR) implement util.throttle (James M Snell) #65899
  * (SEMVER-MINOR) implement debounce (James M Snell) #65899

PR-URL: #66667
markharding added a commit to futo-org/Harbor that referenced this pull request Oct 19, 2026
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [node](https://nodejs.org) ([source](https://github.com/nodejs/node)) | minor | `24.18.0` → `24.22.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/99) for more information.

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

### [`v24.22.0`](https://github.com/nodejs/node/releases/tag/v24.22.0): 2026-10-14, Version 24.22.0 'Krypton' (LTS), @&#8203;richardlau prepared by @&#8203;aduh95

[Compare Source](https://github.com/nodejs/node/compare/v24.21.0...v24.22.0)

##### Notable Changes

- \[[`ddbf974b47`](https://github.com/nodejs/node/commit/ddbf974b47)] - **(SEMVER-MINOR)** **crypto**: add `crypto.parsePKCS12()` (Brian Muenzenmeyer) [#&#8203;65627](https://github.com/nodejs/node/pull/65627)
- \[[`c162c68ff0`](https://github.com/nodejs/node/commit/c162c68ff0)] - **(SEMVER-MINOR)** **crypto**: add a generic MAC API (Filip Skokan) [#&#8203;65553](https://github.com/nodejs/node/pull/65553)
- \[[`a4ab3d84d7`](https://github.com/nodejs/node/commit/a4ab3d84d7)] - **(SEMVER-MINOR)** **crypto**: discover ciphers from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`c2f1e829ea`](https://github.com/nodejs/node/commit/c2f1e829ea)] - **(SEMVER-MINOR)** **crypto**: discover hashes from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`51aad5a80d`](https://github.com/nodejs/node/commit/51aad5a80d)] - **(SEMVER-MINOR)** **crypto**: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) [#&#8203;63411](https://github.com/nodejs/node/pull/63411)
- \[[`d11c65d2f2`](https://github.com/nodejs/node/commit/d11c65d2f2)] - **doc**: add araujogui to collaborators (Guilherme Araújo) [#&#8203;66090](https://github.com/nodejs/node/pull/66090)
- \[[`acc1578179`](https://github.com/nodejs/node/commit/acc1578179)] - **doc**: deprecate `Server.prototype._listen2` in `node:net` (Antoine du Hamel) [#&#8203;65593](https://github.com/nodejs/node/pull/65593)
- \[[`a7f8de6362`](https://github.com/nodejs/node/commit/a7f8de6362)] - **(SEMVER-MINOR)** **net**: support sending `net.BoundSocket` to threads and child processes (Guy Bedford) [#&#8203;64725](https://github.com/nodejs/node/pull/64725)
- \[[`60c3eb61bd`](https://github.com/nodejs/node/commit/60c3eb61bd)] - **(SEMVER-MINOR)** **perf_hooks**: implement `SlidingWindowHistogram` (James M Snell) [#&#8203;65825](https://github.com/nodejs/node/pull/65825)
- \[[`6b3e6f9d5c`](https://github.com/nodejs/node/commit/6b3e6f9d5c)] - **(SEMVER-MINOR)** **perf_hooks**: implement qrde analysis support in Histogram (James M Snell) [#&#8203;65806](https://github.com/nodejs/node/pull/65806)
- \[[`75456a3512`](https://github.com/nodejs/node/commit/75456a3512)] - **(SEMVER-MINOR)** **perf_hooks**: implement Histogram `meanCI` API (James M Snell) [#&#8203;65606](https://github.com/nodejs/node/pull/65606)
- \[[`72d1b40c56`](https://github.com/nodejs/node/commit/72d1b40c56)] - **(SEMVER-MINOR)** **perf_hooks**: add CBOR export/import for histogram exchange (James M Snell) [#&#8203;65434](https://github.com/nodejs/node/pull/65434)
- \[[`41161dda87`](https://github.com/nodejs/node/commit/41161dda87)] - **(SEMVER-MINOR)** **sqlite**: add `StatementSync.prototype.close()` (Guilherme Araújo) [#&#8203;64232](https://github.com/nodejs/node/pull/64232)
- \[[`adbc757d70`](https://github.com/nodejs/node/commit/adbc757d70)] - **(SEMVER-MINOR)** **sqlite**: add `StatementSync.prototype[Symbol.dispose]()` (Guilherme Araújo) [#&#8203;64232](https://github.com/nodejs/node/pull/64232)
- \[[`241339f072`](https://github.com/nodejs/node/commit/241339f072)] - **(SEMVER-MINOR)** **src,lib**: add `util.markPromiseAsHandled` (James M Snell) [#&#8203;65805](https://github.com/nodejs/node/pull/65805)
- \[[`63b0974d9e`](https://github.com/nodejs/node/commit/63b0974d9e)] - **(SEMVER-MINOR)** **util**: implement `util.throttle` (James M Snell) [#&#8203;65899](https://github.com/nodejs/node/pull/65899)
- \[[`a3bbb5a26f`](https://github.com/nodejs/node/commit/a3bbb5a26f)] - **(SEMVER-MINOR)** **util**: implement `debounce` (James M Snell) [#&#8203;65899](https://github.com/nodejs/node/pull/65899)

##### Commits

- \[[`e6832b2cb1`](https://github.com/nodejs/node/commit/e6832b2cb1)] - **assert**: fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) [#&#8203;64449](https://github.com/nodejs/node/pull/64449)
- \[[`a079177d9f`](https://github.com/nodejs/node/commit/a079177d9f)] - **benchmark**: add --csv option to compare.js with --analyze (James M Snell) [#&#8203;65922](https://github.com/nodejs/node/pull/65922)
- \[[`10b1a0f70f`](https://github.com/nodejs/node/commit/10b1a0f70f)] - **benchmark**: fix max-regressions detection in compare.js (James M Snell) [#&#8203;65587](https://github.com/nodejs/node/pull/65587)
- \[[`e0c7ba8ad5`](https://github.com/nodejs/node/commit/e0c7ba8ad5)] - **benchmark**: add --analyze option to benchmark/scatter.js (James M Snell) [#&#8203;65594](https://github.com/nodejs/node/pull/65594)
- \[[`21fed10bb0`](https://github.com/nodejs/node/commit/21fed10bb0)] - **benchmark**: add crypto class benchmarks (Filip Skokan) [#&#8203;65518](https://github.com/nodejs/node/pull/65518)
- \[[`fa912242b7`](https://github.com/nodejs/node/commit/fa912242b7)] - **buffer**: fix unaligned UTF-16LE decoding (Matteo Collina) [#&#8203;65905](https://github.com/nodejs/node/pull/65905)
- \[[`a6bd0c1413`](https://github.com/nodejs/node/commit/a6bd0c1413)] - **build**: suppress OpenSSL asm warnings with clang (Richard Lau) [#&#8203;66023](https://github.com/nodejs/node/pull/66023)
- \[[`94e12139ee`](https://github.com/nodejs/node/commit/94e12139ee)] - **build**: derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) [#&#8203;65744](https://github.com/nodejs/node/pull/65744)
- \[[`7a2f322943`](https://github.com/nodejs/node/commit/7a2f322943)] - **build**: fix quiet default for make builds (Shelley Vohr) [#&#8203;65826](https://github.com/nodejs/node/pull/65826)
- \[[`c280d650b0`](https://github.com/nodejs/node/commit/c280d650b0)] - **build**: allow linking shared dependencies in the GN build (Shelley Vohr) [#&#8203;65797](https://github.com/nodejs/node/pull/65797)
- \[[`4b23a4472c`](https://github.com/nodejs/node/commit/4b23a4472c)] - **build**: enable the V8 sandbox in shared-cage builds (Shelley Vohr) [#&#8203;62237](https://github.com/nodejs/node/pull/62237)
- \[[`676e15c003`](https://github.com/nodejs/node/commit/676e15c003)] - **build**: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) [#&#8203;65464](https://github.com/nodejs/node/pull/65464)
- \[[`f784058482`](https://github.com/nodejs/node/commit/f784058482)] - **build**: remove obsolete configure flags (Chengzhong Wu) [#&#8203;65456](https://github.com/nodejs/node/pull/65456)
- \[[`f63f37d243`](https://github.com/nodejs/node/commit/f63f37d243)] - **build**: activate correct default flags for riscv64 (Stewart X Addison) [#&#8203;65708](https://github.com/nodejs/node/pull/65708)
- \[[`da46ac075d`](https://github.com/nodejs/node/commit/da46ac075d)] - **build**: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) [#&#8203;65491](https://github.com/nodejs/node/pull/65491)
- \[[`249e9a16dd`](https://github.com/nodejs/node/commit/249e9a16dd)] - **build,src**: gate jspi flag on V8_ENABLE_WEBASSEMBLY (Piotr Kubaj) [#&#8203;66082](https://github.com/nodejs/node/pull/66082)
- \[[`146f00f64b`](https://github.com/nodejs/node/commit/146f00f64b)] - **child_process**: clear timeout timer on spawn-time error too (kishore280) [#&#8203;65506](https://github.com/nodejs/node/pull/65506)
- \[[`13987f4418`](https://github.com/nodejs/node/commit/13987f4418)] - **crypto**: remove redundent `std::move` call (Antoine du Hamel) [#&#8203;66111](https://github.com/nodejs/node/pull/66111)
- \[[`ef957ac85f`](https://github.com/nodejs/node/commit/ef957ac85f)] - **crypto**: skip private RSA parameters in key details (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`8feccc5e22`](https://github.com/nodejs/node/commit/8feccc5e22)] - **crypto**: use provider EC group names (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`764e0d1120`](https://github.com/nodejs/node/commit/764e0d1120)] - **crypto**: fetch ciphers for private-key encoding (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`50ffed1979`](https://github.com/nodejs/node/commit/50ffed1979)] - **crypto**: decode [PKCS#1](https://github.com/PKCS/node/issues/1) keys through providers (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`56c16b2fd6`](https://github.com/nodejs/node/commit/56c16b2fd6)] - **crypto**: derive keys through EVP_KDF (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`a4effe6809`](https://github.com/nodejs/node/commit/a4effe6809)] - **crypto**: use names for asymmetric key algorithms (Filip Skokan) [#&#8203;65966](https://github.com/nodejs/node/pull/65966)
- \[[`ddbf974b47`](https://github.com/nodejs/node/commit/ddbf974b47)] - **(SEMVER-MINOR)** **crypto**: add crypto.parsePKCS12() (Brian Muenzenmeyer) [#&#8203;65627](https://github.com/nodejs/node/pull/65627)
- \[[`8e631aa48f`](https://github.com/nodejs/node/commit/8e631aa48f)] - **crypto**: add Hybrid KEMs to Web Cryptography (Filip Skokan) [#&#8203;65759](https://github.com/nodejs/node/pull/65759)
- \[[`5c51129e16`](https://github.com/nodejs/node/commit/5c51129e16)] - **crypto**: optimize private EC JWK import (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`c2ec40c2d7`](https://github.com/nodejs/node/commit/c2ec40c2d7)] - **crypto**: disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) [#&#8203;65172](https://github.com/nodejs/node/pull/65172)
- \[[`e198aa0f79`](https://github.com/nodejs/node/commit/e198aa0f79)] - **crypto**: read RSA-PSS restrictions from provider (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`253784f0e9`](https://github.com/nodejs/node/commit/253784f0e9)] - **crypto**: optimize and benchmark key preparation (Filip Skokan) [#&#8203;65892](https://github.com/nodejs/node/pull/65892)
- \[[`80a6ad509b`](https://github.com/nodejs/node/commit/80a6ad509b)] - **crypto**: avoid EC reconstruction for signature sizing (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`5b592b772c`](https://github.com/nodejs/node/commit/5b592b772c)] - **crypto**: avoid EC raw export reconstruction (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`ee956ae3bf`](https://github.com/nodejs/node/commit/ee956ae3bf)] - **crypto**: export EC JWK coordinates directly (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`684008be58`](https://github.com/nodejs/node/commit/684008be58)] - **crypto**: read EC curve metadata directly (Filip Skokan) [#&#8203;65908](https://github.com/nodejs/node/pull/65908)
- \[[`f4665f1c41`](https://github.com/nodejs/node/commit/f4665f1c41)] - **crypto**: validate the limit of PBKDF2 iterations (Filip Skokan) [#&#8203;65704](https://github.com/nodejs/node/pull/65704)
- \[[`624abbecd7`](https://github.com/nodejs/node/commit/624abbecd7)] - **crypto**: use primordials in HKDF info validation (Filip Skokan) [#&#8203;65704](https://github.com/nodejs/node/pull/65704)
- \[[`e4d916f175`](https://github.com/nodejs/node/commit/e4d916f175)] - **crypto**: add mgf1Hash for RSA-OAEP (Adam Mcgrath) [#&#8203;65073](https://github.com/nodejs/node/pull/65073)
- \[[`db8a9162a8`](https://github.com/nodejs/node/commit/db8a9162a8)] - **crypto**: fix multi-prime RSA JWKs (Filip Skokan) [#&#8203;65649](https://github.com/nodejs/node/pull/65649)
- \[[`022ac83504`](https://github.com/nodejs/node/commit/022ac83504)] - **crypto**: cache valid ECDH key pairs (Filip Skokan) [#&#8203;65615](https://github.com/nodejs/node/pull/65615)
- \[[`c61953ebcc`](https://github.com/nodejs/node/commit/c61953ebcc)] - **crypto**: add strict mode to --force-fips (Filip Skokan) [#&#8203;65645](https://github.com/nodejs/node/pull/65645)
- \[[`db6ea132a5`](https://github.com/nodejs/node/commit/db6ea132a5)] - **crypto**: add FIPS indicator diagnostics channel (Filip Skokan) [#&#8203;65645](https://github.com/nodejs/node/pull/65645)
- \[[`c162c68ff0`](https://github.com/nodejs/node/commit/c162c68ff0)] - **(SEMVER-MINOR)** **crypto**: add a generic MAC API (Filip Skokan) [#&#8203;65553](https://github.com/nodejs/node/pull/65553)
- \[[`2b62aafd20`](https://github.com/nodejs/node/commit/2b62aafd20)] - **crypto**: validate JWK usages before key_ops (Filip Skokan) [#&#8203;65550](https://github.com/nodejs/node/pull/65550)
- \[[`ec7819db69`](https://github.com/nodejs/node/commit/ec7819db69)] - **crypto**: fix RSA-PSS oversized salt handling (Filip Skokan) [#&#8203;65550](https://github.com/nodejs/node/pull/65550)
- \[[`a4ab3d84d7`](https://github.com/nodejs/node/commit/a4ab3d84d7)] - **(SEMVER-MINOR)** **crypto**: discover ciphers from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`c2f1e829ea`](https://github.com/nodejs/node/commit/c2f1e829ea)] - **(SEMVER-MINOR)** **crypto**: discover hashes from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`51aad5a80d`](https://github.com/nodejs/node/commit/51aad5a80d)] - **(SEMVER-MINOR)** **crypto**: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) [#&#8203;63411](https://github.com/nodejs/node/pull/63411)
- \[[`5a46a9acbb`](https://github.com/nodejs/node/commit/5a46a9acbb)] - **crypto**: improve SubtleCrypto.supports() accuracy (Filip Skokan) [#&#8203;65222](https://github.com/nodejs/node/pull/65222)
- \[[`191ebfb26c`](https://github.com/nodejs/node/commit/191ebfb26c)] - **crypto**: fix public PKCS8 export error (한국) [#&#8203;65609](https://github.com/nodejs/node/pull/65609)
- \[[`b6d7ed372b`](https://github.com/nodejs/node/commit/b6d7ed372b)] - **crypto**: fix private SPKI export error (Filip Skokan) [#&#8203;65550](https://github.com/nodejs/node/pull/65550)
- \[[`79509c25a4`](https://github.com/nodejs/node/commit/79509c25a4)] - **crypto**: correct CCM decryption FIPS error message (kyungrae) [#&#8203;65450](https://github.com/nodejs/node/pull/65450)
- \[[`9adc87bc16`](https://github.com/nodejs/node/commit/9adc87bc16)] - **crypto**: harden X509Certificate state (Filip Skokan) [#&#8203;65518](https://github.com/nodejs/node/pull/65518)
- \[[`c63aa331b4`](https://github.com/nodejs/node/commit/c63aa331b4)] - **crypto**: optimize key slot caching (Filip Skokan) [#&#8203;65518](https://github.com/nodejs/node/pull/65518)
- \[[`87daea43a7`](https://github.com/nodejs/node/commit/87daea43a7)] - **crypto**: add null checks for OPENSSL_INIT_new() (Nora Dossche) [#&#8203;63457](https://github.com/nodejs/node/pull/63457)
- \[[`98ca5e9358`](https://github.com/nodejs/node/commit/98ca5e9358)] - **crypto**: prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) [#&#8203;65112](https://github.com/nodejs/node/pull/65112)
- \[[`0c090a28cd`](https://github.com/nodejs/node/commit/0c090a28cd)] - **crypto**: avoid throwing CryptoKey brand checks (Filip Skokan) [#&#8203;65503](https://github.com/nodejs/node/pull/65503)
- \[[`a13cc3f723`](https://github.com/nodejs/node/commit/a13cc3f723)] - **crypto**: avoid throwing KeyObject brand checks (Filip Skokan) [#&#8203;65503](https://github.com/nodejs/node/pull/65503)
- \[[`b8db0045ef`](https://github.com/nodejs/node/commit/b8db0045ef)] - **deps**: V8: cherry-pick [`ea9c016`](https://github.com/nodejs/node/commit/ea9c016f26ad) (Gundepalli Sravani) [#&#8203;66570](https://github.com/nodejs/node/pull/66570)
- \[[`ba09b53487`](https://github.com/nodejs/node/commit/ba09b53487)] - **deps**: V8: backport [`c355350`](https://github.com/nodejs/node/commit/c3553509f460) (Jakob Linke) [#&#8203;66089](https://github.com/nodejs/node/pull/66089)
- \[[`9ce8ef405b`](https://github.com/nodejs/node/commit/9ce8ef405b)] - **deps**: V8: backport [`8901c79`](https://github.com/nodejs/node/commit/8901c793e439) (Toon Verwaest) [#&#8203;66089](https://github.com/nodejs/node/pull/66089)
- \[[`fb0d0ca289`](https://github.com/nodejs/node/commit/fb0d0ca289)] - **deps**: V8: backport [`0b94a9f`](https://github.com/nodejs/node/commit/0b94a9fd23ba) (Ruan Gustavo) [#&#8203;65753](https://github.com/nodejs/node/pull/65753)
- \[[`2faca508c0`](https://github.com/nodejs/node/commit/2faca508c0)] - **deps**: update googletest to [`8eff9e3`](https://github.com/nodejs/node/commit/8eff9e336692fc95961e096564f1044c600b881d) (Node.js GitHub Bot) [#&#8203;66009](https://github.com/nodejs/node/pull/66009)
- \[[`4396c9bffe`](https://github.com/nodejs/node/commit/4396c9bffe)] - **deps**: update googletest to [`283c175`](https://github.com/nodejs/node/commit/283c17563fe7a1111cd7f581aa5d541e8baeff2f) (Node.js GitHub Bot) [#&#8203;65833](https://github.com/nodejs/node/pull/65833)
- \[[`8a5b12570c`](https://github.com/nodejs/node/commit/8a5b12570c)] - **deps**: update simdjson to 4.6.11 (Node.js GitHub Bot) [#&#8203;65834](https://github.com/nodejs/node/pull/65834)
- \[[`c47feb09e8`](https://github.com/nodejs/node/commit/c47feb09e8)] - **deps**: update zlib to 1.3.2.1-motley-285e94b (Node.js GitHub Bot) [#&#8203;65835](https://github.com/nodejs/node/pull/65835)
- \[[`9f0d905286`](https://github.com/nodejs/node/commit/9f0d905286)] - **deps**: upgrade npm to 11.19.1 (npm team) [#&#8203;65573](https://github.com/nodejs/node/pull/65573)
- \[[`373cd332d8`](https://github.com/nodejs/node/commit/373cd332d8)] - **deps**: update googletest to [`36ba75f`](https://github.com/nodejs/node/commit/36ba75f0ad5383a9759f17f3f72fd4661c72cb6d) (Node.js GitHub Bot) [#&#8203;65654](https://github.com/nodejs/node/pull/65654)
- \[[`aeed6132a7`](https://github.com/nodejs/node/commit/aeed6132a7)] - **deps**: update simdjson to 4.6.9 (Node.js GitHub Bot) [#&#8203;65655](https://github.com/nodejs/node/pull/65655)
- \[[`2583571342`](https://github.com/nodejs/node/commit/2583571342)] - **deps**: update zlib to 1.3.2.1-motley-5eb4d7e (Node.js GitHub Bot) [#&#8203;65494](https://github.com/nodejs/node/pull/65494)
- \[[`d11c65d2f2`](https://github.com/nodejs/node/commit/d11c65d2f2)] - **doc**: add araujogui to collaborators (Guilherme Araújo) [#&#8203;66090](https://github.com/nodejs/node/pull/66090)
- \[[`0a4a8d602a`](https://github.com/nodejs/node/commit/0a4a8d602a)] - **doc**: fix duplicate 'the' typo in `node_platform.cc` (Muhammad Al-Muzahid) [#&#8203;66058](https://github.com/nodejs/node/pull/66058)
- \[[`b6538138ef`](https://github.com/nodejs/node/commit/b6538138ef)] - **doc**: clarify sub-1000ms behavior in socket.setKeepAlive (Haram Jeong) [#&#8203;65869](https://github.com/nodejs/node/pull/65869)
- \[[`d319fa7de4`](https://github.com/nodejs/node/commit/d319fa7de4)] - **doc**: remove obsolete mentioning of cl.exe on windows (Chengzhong Wu) [#&#8203;66038](https://github.com/nodejs/node/pull/66038)
- \[[`67cb305b59`](https://github.com/nodejs/node/commit/67cb305b59)] - **doc**: note that default signal handling resets the signal mask (Shelley Vohr) [#&#8203;65877](https://github.com/nodejs/node/pull/65877)
- \[[`160d44e025`](https://github.com/nodejs/node/commit/160d44e025)] - **doc**: clarify QUIC async write backpressure (John Finnerty) [#&#8203;65947](https://github.com/nodejs/node/pull/65947)
- \[[`ffd47a7ee5`](https://github.com/nodejs/node/commit/ffd47a7ee5)] - **doc**: clarify permission model scope for output paths (Rafael Gonzaga) [#&#8203;66004](https://github.com/nodejs/node/pull/66004)
- \[[`2e1772a8ab`](https://github.com/nodejs/node/commit/2e1772a8ab)] - **doc**: fill in missing zstd docs (James M Snell) [#&#8203;65867](https://github.com/nodejs/node/pull/65867)
- \[[`9f88c6f8dc`](https://github.com/nodejs/node/commit/9f88c6f8dc)] - **doc**: add inoway46 as triager (Yuya Inoue) [#&#8203;65565](https://github.com/nodejs/node/pull/65565)
- \[[`c2620d01f3`](https://github.com/nodejs/node/commit/c2620d01f3)] - **doc**: document windowsHide for child_process.fork (Christopher Buss) [#&#8203;65887](https://github.com/nodejs/node/pull/65887)
- \[[`6076111e1a`](https://github.com/nodejs/node/commit/6076111e1a)] - **doc**: qualify directory read ordering for native fs (Trivikram Kamat) [#&#8203;65868](https://github.com/nodejs/node/pull/65868)
- \[[`7bf048a336`](https://github.com/nodejs/node/commit/7bf048a336)] - **doc**: add DOMException section to errors API reference (Avocado) [#&#8203;65206](https://github.com/nodejs/node/pull/65206)
- \[[`414b6bfa62`](https://github.com/nodejs/node/commit/414b6bfa62)] - **doc**: expand revert commit collaborator instructions (Mike McCready) [#&#8203;65848](https://github.com/nodejs/node/pull/65848)
- \[[`c8ac91692c`](https://github.com/nodejs/node/commit/c8ac91692c)] - **doc**: note that FreeEnvironment() runs a shared event loop (Shelley Vohr) [#&#8203;65691](https://github.com/nodejs/node/pull/65691)
- \[[`cc47cc0983`](https://github.com/nodejs/node/commit/cc47cc0983)] - **doc**: clarify security triage dispositions and permission boundaries (Rafael Gonzaga) [#&#8203;65436](https://github.com/nodejs/node/pull/65436)
- \[[`8b79a71e78`](https://github.com/nodejs/node/commit/8b79a71e78)] - **doc**: fix default limit of maxHeadersCount (Aryn H) [#&#8203;65472](https://github.com/nodejs/node/pull/65472)
- \[[`56b1252a54`](https://github.com/nodejs/node/commit/56b1252a54)] - **doc**: fix return types for sync methods (Chiang Fong Lee) [#&#8203;58575](https://github.com/nodejs/node/pull/58575)
- \[[`da0d32a333`](https://github.com/nodejs/node/commit/da0d32a333)] - **doc**: document REPL DEP0185 throws and uncaught-exception behavior (Adrián Estrada) [#&#8203;64993](https://github.com/nodejs/node/pull/64993)
- \[[`f8ab3619b6`](https://github.com/nodejs/node/commit/f8ab3619b6)] - **doc**: document close() error when in a sqlite callback (Trivikram Kamat) [#&#8203;65090](https://github.com/nodejs/node/pull/65090)
- \[[`131f1db302`](https://github.com/nodejs/node/commit/131f1db302)] - **doc**: clarify return type of `fs.mkdtemp*` (Antoine du Hamel) [#&#8203;65743](https://github.com/nodejs/node/pull/65743)
- \[[`7755e98183`](https://github.com/nodejs/node/commit/7755e98183)] - **doc**: update `changelog-maker` instructions for releasing (Juan José) [#&#8203;65707](https://github.com/nodejs/node/pull/65707)
- \[[`f982a53433`](https://github.com/nodejs/node/commit/f982a53433)] - **doc**: add stability status to `crypto.setEngine` (Antoine du Hamel) [#&#8203;65746](https://github.com/nodejs/node/pull/65746)
- \[[`17be003f7c`](https://github.com/nodejs/node/commit/17be003f7c)] - **doc**: remove outdated TLS authorized warning (Tim Perry) [#&#8203;65597](https://github.com/nodejs/node/pull/65597)
- \[[`424002232d`](https://github.com/nodejs/node/commit/424002232d)] - **doc**: fix stale TOC in maintaining-dependencies (greenhead) [#&#8203;65523](https://github.com/nodejs/node/pull/65523)
- \[[`dddb9b57a5`](https://github.com/nodejs/node/commit/dddb9b57a5)] - **doc**: refactor the AI guidelines (Joyee Cheung) [#&#8203;65269](https://github.com/nodejs/node/pull/65269)
- \[[`397b58e113`](https://github.com/nodejs/node/commit/397b58e113)] - **doc**: fix triggerAsyncId() comment in async_hooks example (soreavis) [#&#8203;64583](https://github.com/nodejs/node/pull/64583)
- \[[`338ec94d83`](https://github.com/nodejs/node/commit/338ec94d83)] - **doc**: fix fsPromises.watch overflow value (Matt Radbourne) [#&#8203;64605](https://github.com/nodejs/node/pull/64605)
- \[[`f18be21b14`](https://github.com/nodejs/node/commit/f18be21b14)] - **doc**: clarify stream direction in options.stdio note (Avocado) [#&#8203;65236](https://github.com/nodejs/node/pull/65236)
- \[[`f07c6acd8b`](https://github.com/nodejs/node/commit/f07c6acd8b)] - **doc**: clarify signal listener behavior (Som Samantray) [#&#8203;65243](https://github.com/nodejs/node/pull/65243)
- \[[`8bc17b0c7a`](https://github.com/nodejs/node/commit/8bc17b0c7a)] - **doc**: add test reporter event lifecycle diagram (sangwook) [#&#8203;63780](https://github.com/nodejs/node/pull/63780)
- \[[`452e7477d4`](https://github.com/nodejs/node/commit/452e7477d4)] - **doc**: discourage AbortSignal cleanup for long-lived resources (Efe Karasakal) [#&#8203;64342](https://github.com/nodejs/node/pull/64342)
- \[[`acc1578179`](https://github.com/nodejs/node/commit/acc1578179)] - **doc**: deprecate `Server.prototype._listen2` in `node:net` (Antoine du Hamel) [#&#8203;65593](https://github.com/nodejs/node/pull/65593)
- \[[`e7ed4361d6`](https://github.com/nodejs/node/commit/e7ed4361d6)] - **doc,test**: account for OpenSSL 4.1 behaviours (Filip Skokan) [#&#8203;65956](https://github.com/nodejs/node/pull/65956)
- \[[`c65fafeab4`](https://github.com/nodejs/node/commit/c65fafeab4)] - **errors**: validate constructor name (Christian Aurich) [#&#8203;65607](https://github.com/nodejs/node/pull/65607)
- \[[`f6b47938b7`](https://github.com/nodejs/node/commit/f6b47938b7)] - **events**: fix weak listener retention overwrite (Aryan) [#&#8203;64024](https://github.com/nodejs/node/pull/64024)
- \[[`a27db42c3e`](https://github.com/nodejs/node/commit/a27db42c3e)] - **fs**: coerce FileHandle.read length like fs.read (Xia Chao) [#&#8203;65521](https://github.com/nodejs/node/pull/65521)
- \[[`f3019b522a`](https://github.com/nodejs/node/commit/f3019b522a)] - **fs**: throw on existing dir in cpSync with errorOnExist (Daijiro Wachi) [#&#8203;64124](https://github.com/nodejs/node/pull/64124)
- \[[`cd1011458f`](https://github.com/nodejs/node/commit/cd1011458f)] - **fs**: support removing read-only files in rmSync on Windows (Sparsh :)) [#&#8203;64453](https://github.com/nodejs/node/pull/64453)
- \[[`d659dd8cd8`](https://github.com/nodejs/node/commit/d659dd8cd8)] - **fs**: give directories created by cpSync the source directory's mode (Shelley Vohr) [#&#8203;65488](https://github.com/nodejs/node/pull/65488)
- \[[`1dfb047293`](https://github.com/nodejs/node/commit/1dfb047293)] - **fs**: handle recursive watch setup races (Filip Skokan) [#&#8203;65699](https://github.com/nodejs/node/pull/65699)
- \[[`bc431c8413`](https://github.com/nodejs/node/commit/bc431c8413)] - **fs**: apply nocase to literal glob exclude patterns (Yusuke Hayashi) [#&#8203;64817](https://github.com/nodejs/node/pull/64817)
- \[[`dd5662e641`](https://github.com/nodejs/node/commit/dd5662e641)] - **fs**: do not descend into symlinks for \*\* unless following symlinks (RafaelGSS) [#&#8203;65435](https://github.com/nodejs/node/pull/65435)
- \[[`ac4cf54292`](https://github.com/nodejs/node/commit/ac4cf54292)] - **fs**: watch directories, not files, in recursive fs.watch fallback (Shelley Vohr) [#&#8203;65486](https://github.com/nodejs/node/pull/65486)
- \[[`7804bfbd71`](https://github.com/nodejs/node/commit/7804bfbd71)] - **fs**: preserve directory timestamps in cp (Abhinandan Kumar) [#&#8203;65540](https://github.com/nodejs/node/pull/65540)
- \[[`ba5ca5a1a5`](https://github.com/nodejs/node/commit/ba5ca5a1a5)] - **fs**: fix recursive watch error handling (Filip Skokan) [#&#8203;65635](https://github.com/nodejs/node/pull/65635)
- \[[`b71c4c0551`](https://github.com/nodejs/node/commit/b71c4c0551)] - **fs**: fix rmSync error messages for non-ASCII paths (Yeaseen) [#&#8203;61233](https://github.com/nodejs/node/pull/61233)
- \[[`53b4700892`](https://github.com/nodejs/node/commit/53b4700892)] - **http**: don't destroy socket after request completes (Barath Raj) [#&#8203;65952](https://github.com/nodejs/node/pull/65952)
- \[[`96d4c23f17`](https://github.com/nodejs/node/commit/96d4c23f17)] - **http**: fast-forward teardown of unread messages (Matteo Collina) [#&#8203;65732](https://github.com/nodejs/node/pull/65732)
- \[[`742b4bf5a6`](https://github.com/nodejs/node/commit/742b4bf5a6)] - **http**: coalesce chunked writes during auto-corking (GetThatCookie) [#&#8203;64987](https://github.com/nodejs/node/pull/64987)
- \[[`8921108175`](https://github.com/nodejs/node/commit/8921108175)] - **http2**: settle pending write callbacks on destroy (Matteo Collina) [#&#8203;66016](https://github.com/nodejs/node/pull/66016)
- \[[`9a2f77a3fc`](https://github.com/nodejs/node/commit/9a2f77a3fc)] - **http2**: fix onread assert when destroying session from stream handler (Sankalp Thakur) [#&#8203;65116](https://github.com/nodejs/node/pull/65116)
- \[[`99e41eb43a`](https://github.com/nodejs/node/commit/99e41eb43a)] - **http2**: error for incomplete reads on RST, auto-drain, deprecate aborted (Tim Perry) [#&#8203;63249](https://github.com/nodejs/node/pull/63249)
- \[[`d520b9601c`](https://github.com/nodejs/node/commit/d520b9601c)] - **http2**: fix write deadlock exposed by larger window sizes (Tim Perry) [#&#8203;65440](https://github.com/nodejs/node/pull/65440)
- \[[`86b2497aae`](https://github.com/nodejs/node/commit/86b2497aae)] - **http2**: fix async context loss when trailers carry END_STREAM (Orgad Shaneh) [#&#8203;63814](https://github.com/nodejs/node/pull/63814)
- \[[`536ccc7daf`](https://github.com/nodejs/node/commit/536ccc7daf)] - **https**: limit proxy CONNECT response headers (Matteo Collina) [#&#8203;64545](https://github.com/nodejs/node/pull/64545)
- \[[`fe6147832b`](https://github.com/nodejs/node/commit/fe6147832b)] - **inspector**: fix abort when two Environments own the inspector (Shelley Vohr) [#&#8203;65877](https://github.com/nodejs/node/pull/65877)
- \[[`843a27782a`](https://github.com/nodejs/node/commit/843a27782a)] - **inspector**: fix crash when the IsolateData has no platform (Shelley Vohr) [#&#8203;65818](https://github.com/nodejs/node/pull/65818)
- \[[`3f0b6d3308`](https://github.com/nodejs/node/commit/3f0b6d3308)] - **lib**: avoid repeat internal receiver checks (Filip Skokan) [#&#8203;65910](https://github.com/nodejs/node/pull/65910)
- \[[`0039479b4a`](https://github.com/nodejs/node/commit/0039479b4a)] - **lib**: fix shared buffer growability validation (Filip Skokan) [#&#8203;65845](https://github.com/nodejs/node/pull/65845)
- \[[`e7907130ae`](https://github.com/nodejs/node/commit/e7907130ae)] - **lib**: use Web IDL interface brand checks (Filip Skokan) [#&#8203;65846](https://github.com/nodejs/node/pull/65846)
- \[[`7ae085552b`](https://github.com/nodejs/node/commit/7ae085552b)] - **lib**: fix AbortSignal.any() abort propagation (Yuya Inoue) [#&#8203;66014](https://github.com/nodejs/node/pull/66014)
- \[[`01032f4fdc`](https://github.com/nodejs/node/commit/01032f4fdc)] - **lib**: fix for FileHandle.readableWebStream (Patrick Dähne) [#&#8203;58842](https://github.com/nodejs/node/pull/58842)
- \[[`60a9a28206`](https://github.com/nodejs/node/commit/60a9a28206)] - **lib**: avoid unsafe array iteration in cli table (Donghoon Kang) [#&#8203;65838](https://github.com/nodejs/node/pull/65838)
- \[[`230a7fcef0`](https://github.com/nodejs/node/commit/230a7fcef0)] - **lib**: optimize internal Web IDL dictionaries (Filip Skokan) [#&#8203;65857](https://github.com/nodejs/node/pull/65857)
- \[[`7cc02b14ec`](https://github.com/nodejs/node/commit/7cc02b14ec)] - **lib**: validate sequence iterator objects (Filip Skokan) [#&#8203;65844](https://github.com/nodejs/node/pull/65844)
- \[[`c2bb3aeccc`](https://github.com/nodejs/node/commit/c2bb3aeccc)] - **lib**: defer source map payload decoding until first use (Shelley Vohr) [#&#8203;65490](https://github.com/nodejs/node/pull/65490)
- \[[`c4b390cf17`](https://github.com/nodejs/node/commit/c4b390cf17)] - **lib**: optimize async context frame activation (Tim Perry) [#&#8203;65519](https://github.com/nodejs/node/pull/65519)
- \[[`3e4fc50a4f`](https://github.com/nodejs/node/commit/3e4fc50a4f)] - **lib**: use validateArray for array arguments (JunHwan Choi) [#&#8203;65344](https://github.com/nodejs/node/pull/65344)
- \[[`b351ac9cd4`](https://github.com/nodejs/node/commit/b351ac9cd4)] - **meta**: bump step-security/harden-runner from 2.21.0 to 2.21.1 (dependabot\[bot]) [#&#8203;66044](https://github.com/nodejs/node/pull/66044)
- \[[`693e890fec`](https://github.com/nodejs/node/commit/693e890fec)] - **meta**: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 (dependabot\[bot]) [#&#8203;66046](https://github.com/nodejs/node/pull/66046)
- \[[`9c2abc13c2`](https://github.com/nodejs/node/commit/9c2abc13c2)] - **meta**: bump github/codeql-action/init from 4.37.9 to 4.38.0 (dependabot\[bot]) [#&#8203;66048](https://github.com/nodejs/node/pull/66048)
- \[[`b3c5c2b91d`](https://github.com/nodejs/node/commit/b3c5c2b91d)] - **meta**: bump github/codeql-action/analyze from 4.37.9 to 4.38.0 (dependabot\[bot]) [#&#8203;66049](https://github.com/nodejs/node/pull/66049)
- \[[`2428b13b02`](https://github.com/nodejs/node/commit/2428b13b02)] - **meta**: bump github/codeql-action/autobuild from 4.37.9 to 4.38.0 (dependabot\[bot]) [#&#8203;66050](https://github.com/nodejs/node/pull/66050)
- \[[`eff5d15041`](https://github.com/nodejs/node/commit/eff5d15041)] - **meta**: add joyeecheung as v8 currency strategic initiative champion (Joyee Cheung) [#&#8203;65965](https://github.com/nodejs/node/pull/65965)
- \[[`aa549fed0d`](https://github.com/nodejs/node/commit/aa549fed0d)] - **meta**: expand on collaborator restoration process (Chengzhong Wu) [#&#8203;65962](https://github.com/nodejs/node/pull/65962)
- \[[`593b40eb2b`](https://github.com/nodejs/node/commit/593b40eb2b)] - **meta**: add web-standards as webidl owners (Filip Skokan) [#&#8203;65856](https://github.com/nodejs/node/pull/65856)
- \[[`e711d3fef3`](https://github.com/nodejs/node/commit/e711d3fef3)] - **meta**: bump actions/checkout from 7.0.0 to 7.0.1 (dependabot\[bot]) [#&#8203;65718](https://github.com/nodejs/node/pull/65718)
- \[[`0fc8a38f5b`](https://github.com/nodejs/node/commit/0fc8a38f5b)] - **meta**: cleanup targos emeritus changes (Antoine du Hamel) [#&#8203;65738](https://github.com/nodejs/node/pull/65738)
- \[[`2ca2fd566d`](https://github.com/nodejs/node/commit/2ca2fd566d)] - **meta**: bump github/codeql-action/init from 4.37.3 to 4.37.9 (dependabot\[bot]) [#&#8203;65714](https://github.com/nodejs/node/pull/65714)
- \[[`325709818e`](https://github.com/nodejs/node/commit/325709818e)] - **meta**: bump github/codeql-action/autobuild from 4.37.3 to 4.37.9 (dependabot\[bot]) [#&#8203;65717](https://github.com/nodejs/node/pull/65717)
- \[[`8481d22f72`](https://github.com/nodejs/node/commit/8481d22f72)] - **meta**: bump actions/setup-node from 6.4.0 to 7.0.0 (dependabot\[bot]) [#&#8203;65720](https://github.com/nodejs/node/pull/65720)
- \[[`cd2bd5d9fd`](https://github.com/nodejs/node/commit/cd2bd5d9fd)] - **meta**: bump step-security/harden-runner from 2.20.0 to 2.21.0 (dependabot\[bot]) [#&#8203;65721](https://github.com/nodejs/node/pull/65721)
- \[[`fdec747105`](https://github.com/nodejs/node/commit/fdec747105)] - **meta**: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.9 (dependabot\[bot]) [#&#8203;65722](https://github.com/nodejs/node/pull/65722)
- \[[`34c2fca088`](https://github.com/nodejs/node/commit/34c2fca088)] - **meta**: bump github/codeql-action/analyze from 4.37.3 to 4.37.9 (dependabot\[bot]) [#&#8203;65723](https://github.com/nodejs/node/pull/65723)
- \[[`46d4549938`](https://github.com/nodejs/node/commit/46d4549938)] - **meta**: document collaborator automation (Filip Skokan) [#&#8203;65671](https://github.com/nodejs/node/pull/65671)
- \[[`a7f8de6362`](https://github.com/nodejs/node/commit/a7f8de6362)] - **(SEMVER-MINOR)** **net**: support sending net.BoundSocket to threads and child processes (Guy Bedford) [#&#8203;64725](https://github.com/nodejs/node/pull/64725)
- \[[`466f1f8e62`](https://github.com/nodejs/node/commit/466f1f8e62)] - **net**: fix BlockList.fromJSON for IPv4-mapped IPv6 rules (Daijiro Wachi) [#&#8203;64125](https://github.com/nodejs/node/pull/64125)
- \[[`cd04cb10d6`](https://github.com/nodejs/node/commit/cd04cb10d6)] - **net**: recognize bare IPv6 loopback addresses in isLoopback (Daijiro Wachi) [#&#8203;63619](https://github.com/nodejs/node/pull/63619)
- \[[`d983942636`](https://github.com/nodejs/node/commit/d983942636)] - **node-api**: make object property arrays const (Yilong Li) [#&#8203;65621](https://github.com/nodejs/node/pull/65621)
- \[[`cc124394cc`](https://github.com/nodejs/node/commit/cc124394cc)] - **path**: remove `StringPrototypeCharCodeAt` from some methods of `posix` (Wiyeong Seo) [#&#8203;54668](https://github.com/nodejs/node/pull/54668)
- \[[`60c3eb61bd`](https://github.com/nodejs/node/commit/60c3eb61bd)] - **(SEMVER-MINOR)** **perf_hooks**: implement SlidingWindowHistogram (James M Snell) [#&#8203;65825](https://github.com/nodejs/node/pull/65825)
- \[[`6b3e6f9d5c`](https://github.com/nodejs/node/commit/6b3e6f9d5c)] - **(SEMVER-MINOR)** **perf_hooks**: implement qrde analysis support in Histogram (James M Snell) [#&#8203;65806](https://github.com/nodejs/node/pull/65806)
- \[[`8aa870940c`](https://github.com/nodejs/node/commit/8aa870940c)] - **perf_hooks**: reuse buffer for uv metrics (Donghoon Kang) [#&#8203;65985](https://github.com/nodejs/node/pull/65985)
- \[[`9cfbfae660`](https://github.com/nodejs/node/commit/9cfbfae660)] - **perf_hooks**: validate import normalization offset (Matteo Collina) [#&#8203;65950](https://github.com/nodejs/node/pull/65950)
- \[[`75456a3512`](https://github.com/nodejs/node/commit/75456a3512)] - **(SEMVER-MINOR)** **perf_hooks**: implement Histogram meanCI API (James M Snell) [#&#8203;65606](https://github.com/nodejs/node/pull/65606)
- \[[`127cb31864`](https://github.com/nodejs/node/commit/127cb31864)] - **perf_hooks**: add missing resource timing attributes (greenhead) [#&#8203;65017](https://github.com/nodejs/node/pull/65017)
- \[[`72d1b40c56`](https://github.com/nodejs/node/commit/72d1b40c56)] - **(SEMVER-MINOR)** **perf_hooks**: add CBOR export/import for histogram exchange (James M Snell) [#&#8203;65434](https://github.com/nodejs/node/pull/65434)
- \[[`847fe4d049`](https://github.com/nodejs/node/commit/847fe4d049)] - **permission**: block FileHandle fsync and fdatasync (Rafael Gonzaga) [#&#8203;65431](https://github.com/nodejs/node/pull/65431)
- \[[`fa9188bd63`](https://github.com/nodejs/node/commit/fa9188bd63)] - **quic**: fix two small bugs in HTTP/3 stream internals (Tim Perry) [#&#8203;65970](https://github.com/nodejs/node/pull/65970)
- \[[`ee80beaa9f`](https://github.com/nodejs/node/commit/ee80beaa9f)] - **quic**: fix crash in onStreamClose (Marten Richter) [#&#8203;65861](https://github.com/nodejs/node/pull/65861)
- \[[`98486dd764`](https://github.com/nodejs/node/commit/98486dd764)] - **quic**: reject zero addressLRUSize (Christian Aurich) [#&#8203;65827](https://github.com/nodejs/node/pull/65827)
- \[[`97516fc256`](https://github.com/nodejs/node/commit/97516fc256)] - **quic**: stop guarding ngtcp2_recv_stop_sending callback field (René) [#&#8203;65688](https://github.com/nodejs/node/pull/65688)
- \[[`024bef25eb`](https://github.com/nodejs/node/commit/024bef25eb)] - **quic**: remove unused fin flag from blob reader wakeup (trivenay) [#&#8203;65315](https://github.com/nodejs/node/pull/65315)
- \[[`5468337456`](https://github.com/nodejs/node/commit/5468337456)] - **quic**: release stream arenas before cleanup (Trivikram Kamat) [#&#8203;65410](https://github.com/nodejs/node/pull/65410)
- \[[`a794e36970`](https://github.com/nodejs/node/commit/a794e36970)] - **sqlite**: throw on invalid URL path instead of abort (Guilherme Araújo) [#&#8203;66026](https://github.com/nodejs/node/pull/66026)
- \[[`f58a55b8d0`](https://github.com/nodejs/node/commit/f58a55b8d0)] - **sqlite**: add diagnostic channel (Guilherme Araújo) [#&#8203;62241](https://github.com/nodejs/node/pull/62241)
- \[[`be849bc6af`](https://github.com/nodejs/node/commit/be849bc6af)] - **sqlite**: reject connection access from authorizer callbacks (Trevor Burnham) [#&#8203;65156](https://github.com/nodejs/node/pull/65156)
- \[[`41161dda87`](https://github.com/nodejs/node/commit/41161dda87)] - **(SEMVER-MINOR)** **sqlite**: add StatementSync.prototype.close() (Guilherme Araújo) [#&#8203;64232](https://github.com/nodejs/node/pull/64232)
- \[[`adbc757d70`](https://github.com/nodejs/node/commit/adbc757d70)] - **(SEMVER-MINOR)** **sqlite**: add StatementSync.prototype\[Symbol.dispose]\() (Guilherme Araújo) [#&#8203;64232](https://github.com/nodejs/node/pull/64232)
- \[[`b7b18fdbc9`](https://github.com/nodejs/node/commit/b7b18fdbc9)] - **sqlite**: run backup completion in callback scope (Filip Skokan) [#&#8203;65666](https://github.com/nodejs/node/pull/65666)
- \[[`59827acd7f`](https://github.com/nodejs/node/commit/59827acd7f)] - **sqlite**: isolate applyChangeset filter errors (Trivikram Kamat) [#&#8203;64823](https://github.com/nodejs/node/pull/64823)
- \[[`5a01df2d15`](https://github.com/nodejs/node/commit/5a01df2d15)] - **sqlite**: reject deserialize() while in a callback (Trivikram Kamat) [#&#8203;64796](https://github.com/nodejs/node/pull/64796)
- \[[`c9b6e75a2e`](https://github.com/nodejs/node/commit/c9b6e75a2e)] - **sqlite**: refactor error helpers and user function pointers (Ali Hassan) [#&#8203;62794](https://github.com/nodejs/node/pull/62794)
- \[[`d4eb6c62a9`](https://github.com/nodejs/node/commit/d4eb6c62a9)] - **sqlite**: prevent database close during callbacks (Matteo Collina) [#&#8203;64743](https://github.com/nodejs/node/pull/64743)
- \[[`83b3431c25`](https://github.com/nodejs/node/commit/83b3431c25)] - **src**: detach cppgc wrappers from their Realm before it is freed (Shelley Vohr) [#&#8203;65778](https://github.com/nodejs/node/pull/65778)
- \[[`13ed7e35e7`](https://github.com/nodejs/node/commit/13ed7e35e7)] - **src**: list scripts when `--run` has no command (James Ross) [#&#8203;64606](https://github.com/nodejs/node/pull/64606)
- \[[`0f62f2b2df`](https://github.com/nodejs/node/commit/0f62f2b2df)] - **src**: print exception thrown during primordial initialization (Joyee Cheung) [#&#8203;65991](https://github.com/nodejs/node/pull/65991)
- \[[`70117640f7`](https://github.com/nodejs/node/commit/70117640f7)] - **src**: don't kill own process group on failed spawn (Lazizbek Ergashev) [#&#8203;65054](https://github.com/nodejs/node/pull/65054)
- \[[`64649abfd4`](https://github.com/nodejs/node/commit/64649abfd4)] - **src**: keep the first snapshot blob alive for later isolates (Shelley Vohr) [#&#8203;65779](https://github.com/nodejs/node/pull/65779)
- \[[`3c814e8c3c`](https://github.com/nodejs/node/commit/3c814e8c3c)] - **src**: fix Stop() terminating the next Environment on the isolate (Shelley Vohr) [#&#8203;65819](https://github.com/nodejs/node/pull/65819)
- \[[`a3ababcebb`](https://github.com/nodejs/node/commit/a3ababcebb)] - **src**: fix null pointer call when running without a startup snapshot (Shelley Vohr) [#&#8203;65820](https://github.com/nodejs/node/pull/65820)
- \[[`7331f5cfcc`](https://github.com/nodejs/node/commit/7331f5cfcc)] - **src**: stop leaking a CppHeap in CommonEnvironmentSetup (Shelley Vohr) [#&#8203;65792](https://github.com/nodejs/node/pull/65792)
- \[[`5570a84048`](https://github.com/nodejs/node/commit/5570a84048)] - **src**: fix use-after-free in CleanupHookThunkRun (Caleb Everett) [#&#8203;65630](https://github.com/nodejs/node/pull/65630)
- \[[`abe1b673e9`](https://github.com/nodejs/node/commit/abe1b673e9)] - **src**: keep global list of addon-provided cleanup hooks (Anna Henningsen) [#&#8203;63985](https://github.com/nodejs/node/pull/63985)
- \[[`2203ac9382`](https://github.com/nodejs/node/commit/2203ac9382)] - **src**: fix startup snapshot reproducibility of InternalFieldInfo (Chengzhong Wu) [#&#8203;65684](https://github.com/nodejs/node/pull/65684)
- \[[`b282765d99`](https://github.com/nodejs/node/commit/b282765d99)] - **src**: fix live lock between environments with blocked requests (Ilyas Shabi) [#&#8203;65520](https://github.com/nodejs/node/pull/65520)
- \[[`61ca3ba93c`](https://github.com/nodejs/node/commit/61ca3ba93c)] - **src**: apply IsolateSettings when using a snapshot (Shelley Vohr) [#&#8203;65407](https://github.com/nodejs/node/pull/65407)
- \[[`33b8d6e10f`](https://github.com/nodejs/node/commit/33b8d6e10f)] - **src**: add re-entrancy guard to TriggerUncaughtException (Temuulen Undrakhbayar) [#&#8203;64327](https://github.com/nodejs/node/pull/64327)
- \[[`49232db71e`](https://github.com/nodejs/node/commit/49232db71e)] - **src**: reuse cached strings in CompileSerializeMain (agape1225) [#&#8203;65453](https://github.com/nodejs/node/pull/65453)
- \[[`e3f52b80a5`](https://github.com/nodejs/node/commit/e3f52b80a5)] - **src**: report libuv error when openAsBlob cannot stat (Paul Bouchon) [#&#8203;65517](https://github.com/nodejs/node/pull/65517)
- \[[`42a5a19027`](https://github.com/nodejs/node/commit/42a5a19027)] - **src**: shave about 20 bytes off each TLSWrap instance (James M Snell) [#&#8203;65144](https://github.com/nodejs/node/pull/65144)
- \[[`a06bb51e22`](https://github.com/nodejs/node/commit/a06bb51e22)] - **src**: use UTF-8 for task runner filesystem paths (Archkon) [#&#8203;64868](https://github.com/nodejs/node/pull/64868)
- \[[`241339f072`](https://github.com/nodejs/node/commit/241339f072)] - **(SEMVER-MINOR)** **src,lib**: add util.markPromiseAsHandled (James M Snell) [#&#8203;65805](https://github.com/nodejs/node/pull/65805)
- \[[`1260642ace`](https://github.com/nodejs/node/commit/1260642ace)] - **stream**: destroy Duplex.from async function on early return (Aman Chadha(IVIXMMI)) [#&#8203;65963](https://github.com/nodejs/node/pull/65963)
- \[[`5f06defdbd`](https://github.com/nodejs/node/commit/5f06defdbd)] - **stream**: make share budget failures detach before throwing (James M Snell) [#&#8203;66028](https://github.com/nodejs/node/pull/66028)
- \[[`d1c60d898d`](https://github.com/nodejs/node/commit/d1c60d898d)] - **stream**: update broadcast to retain buffered data with zero consumers (James M Snell) [#&#8203;66028](https://github.com/nodejs/node/pull/66028)
- \[[`bbb00558c5`](https://github.com/nodejs/node/commit/bbb00558c5)] - **stream**: avoid promise allocation for parked transform writes (Matteo Collina) [#&#8203;65625](https://github.com/nodejs/node/pull/65625)
- \[[`3216bc3912`](https://github.com/nodejs/node/commit/3216bc3912)] - **stream**: keep webstream stream states in fast-mode objects (Matteo Collina) [#&#8203;65625](https://github.com/nodejs/node/pull/65625)
- \[[`70c1415686`](https://github.com/nodejs/node/commit/70c1415686)] - **stream**: reject closed only after sink abort settles (Lazizbek Ergashev) [#&#8203;65727](https://github.com/nodejs/node/pull/65727)
- \[[`f8737b8ee5`](https://github.com/nodejs/node/commit/f8737b8ee5)] - **stream**: fix ERR_INVALID_STATE when cancelling Readable.toWeb() (Richard Scarrott) [#&#8203;62773](https://github.com/nodejs/node/pull/62773)
- \[[`faa16f671c`](https://github.com/nodejs/node/commit/faa16f671c)] - **stream**: amortize writable buffer compaction (Gürgün Dayıoğlu) [#&#8203;65847](https://github.com/nodejs/node/pull/65847)
- \[[`6262e0b8c6`](https://github.com/nodejs/node/commit/6262e0b8c6)] - **stream**: create write request objects lazily (Matteo Collina) [#&#8203;64455](https://github.com/nodejs/node/pull/64455)
- \[[`0f0566de15`](https://github.com/nodejs/node/commit/0f0566de15)] - **stream**: allocate stream read buffers from a slab (Matteo Collina) [#&#8203;64455](https://github.com/nodejs/node/pull/64455)
- \[[`02c776a7c6`](https://github.com/nodejs/node/commit/02c776a7c6)] - **stream**: ensure that stateful transforms preserve this (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`4b29051971`](https://github.com/nodejs/node/commit/4b29051971)] - **stream**: fix nested async flushing with infinite sources (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`2e54186d97`](https://github.com/nodejs/node/commit/2e54186d97)] - **stream**: ensure from() observes returned rejecting promise correctly (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`fd68d5ca6a`](https://github.com/nodejs/node/commit/fd68d5ca6a)] - **stream**: apply source normalization once at call time (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`49ee85b462`](https://github.com/nodejs/node/commit/49ee85b462)] - **stream**: make pipeTo source normalization independent of Writer (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`d7d0440f08`](https://github.com/nodejs/node/commit/d7d0440f08)] - **stream**: pre-aborted pipeTo now applies dest failure handling (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`6d8e643ef3`](https://github.com/nodejs/node/commit/6d8e643ef3)] - **stream**: ensure async dispoal after endSync awaits for drain (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`a082916c00`](https://github.com/nodejs/node/commit/a082916c00)] - **stream**: ensure factory signals remain active through closing (James M Snell) [#&#8203;65658](https://github.com/nodejs/node/pull/65658)
- \[[`38829295a7`](https://github.com/nodejs/node/commit/38829295a7)] - **stream**: skip unobserved 'readable' emission at EOF (Matteo Collina) [#&#8203;65749](https://github.com/nodejs/node/pull/65749)
- \[[`d535859c22`](https://github.com/nodejs/node/commit/d535859c22)] - **stream**: avoid per-chunk promises in webstream adapters (Matteo Collina) [#&#8203;65548](https://github.com/nodejs/node/pull/65548)
- \[[`80568f6818`](https://github.com/nodejs/node/commit/80568f6818)] - **stream**: address stream/iter review feedback (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`6952928f68`](https://github.com/nodejs/node/commit/6952928f68)] - **stream**: replace object sentinel with symbol (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`9c22c4124c`](https://github.com/nodejs/node/commit/9c22c4124c)] - **stream**: cancel active stream/iter pulls (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`24d87990cf`](https://github.com/nodejs/node/commit/24d87990cf)] - **stream**: fix merge settlement tagging and falsy error tracking (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`1e215c4b51`](https://github.com/nodejs/node/commit/1e215c4b51)] - **stream**: ensure full-close semantics when closed (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`f499d6fadf`](https://github.com/nodejs/node/commit/f499d6fadf)] - **stream**: fixup writer to terminate on consumer return/throw (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`2130738033`](https://github.com/nodejs/node/commit/2130738033)] - **stream**: ensure iterator cleanup on done, reject, etc (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`748adc6275`](https://github.com/nodejs/node/commit/748adc6275)] - **stream**: fixup cancelation handling in pull() (James M Snell) [#&#8203;65652](https://github.com/nodejs/node/pull/65652)
- \[[`47b3f6a1fa`](https://github.com/nodejs/node/commit/47b3f6a1fa)] - **stream**: fix early drain after Utf8Stream reopen (Matteo Collina) [#&#8203;65633](https://github.com/nodejs/node/pull/65633)
- \[[`6dab5412cf`](https://github.com/nodejs/node/commit/6dab5412cf)] - **test**: skip RSA-PSS keygen deprecation tests with BoringSSL (Shelley Vohr) [#&#8203;65808](https://github.com/nodejs/node/pull/65808)
- \[[`95d9a25b61`](https://github.com/nodejs/node/commit/95d9a25b61)] - **test**: consolidate crypto provider cache coverage (Filip Skokan) [#&#8203;66108](https://github.com/nodejs/node/pull/66108)
- \[[`612db6d5b2`](https://github.com/nodejs/node/commit/612db6d5b2)] - **test**: deflake user timing WPT assertions (Filip Skokan) [#&#8203;66036](https://github.com/nodejs/node/pull/66036)
- \[[`61a73d31eb`](https://github.com/nodejs/node/commit/61a73d31eb)] - **test**: fix RSA/DSA wrong-passphrase flake (Filip Skokan) [#&#8203;65983](https://github.com/nodejs/node/pull/65983)
- \[[`d9f4a3ee3e`](https://github.com/nodejs/node/commit/d9f4a3ee3e)] - **test**: reuse fixed primes in DH tests (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`a0fd0a8bd6`](https://github.com/nodejs/node/commit/a0fd0a8bd6)] - **test**: use named parameters in DH stress test (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`810a6b00ee`](https://github.com/nodejs/node/commit/810a6b00ee)] - **test**: update tests to run with OpenSSL >= 3.0 FIPS mode (Filip Skokan) [#&#8203;64960](https://github.com/nodejs/node/pull/64960)
- \[[`dc6b9ba5b2`](https://github.com/nodejs/node/commit/dc6b9ba5b2)] - **test**: deflake test-run-watch-cwd-isolation-none-\* (Antoine du Hamel) [#&#8203;66035](https://github.com/nodejs/node/pull/66035)
- \[[`0f27bd2459`](https://github.com/nodejs/node/commit/0f27bd2459)] - **test**: unskip `test-watch-create-isolation-none` (Antoine du Hamel) [#&#8203;66041](https://github.com/nodejs/node/pull/66041)
- \[[`1019f624f3`](https://github.com/nodejs/node/commit/1019f624f3)] - **test**: deflake util.throttle tests (Filip Skokan) [#&#8203;66034](https://github.com/nodejs/node/pull/66034)
- \[[`b4a6719f37`](https://github.com/nodejs/node/commit/b4a6719f37)] - **(SEMVER-MINOR)** **test**: expand histogram test coverage (James M Snell) [#&#8203;65825](https://github.com/nodejs/node/pull/65825)
- \[[`047d7c53d2`](https://github.com/nodejs/node/commit/047d7c53d2)] - **test**: implement low-risk test optimizations (James M Snell) [#&#8203;65926](https://github.com/nodejs/node/pull/65926)
- \[[`33775d2bbb`](https://github.com/nodejs/node/commit/33775d2bbb)] - **test**: prevent parser reuse across close scenarios (Filip Skokan) [#&#8203;66017](https://github.com/nodejs/node/pull/66017)
- \[[`b8c5283cbc`](https://github.com/nodejs/node/commit/b8c5283cbc)] - **test**: fix stderr Buffer assertion in exec encoding test (greenhead) [#&#8203;66008](https://github.com/nodejs/node/pull/66008)
- \[[`13a2982002`](https://github.com/nodejs/node/commit/13a2982002)] - **test**: improve sequential test performance (James M Snell) [#&#8203;65928](https://github.com/nodejs/node/pull/65928)
- \[[`a578933da0`](https://github.com/nodejs/node/commit/a578933da0)] - **test**: overlap SLH-DSA signature checks (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`bfdf20729d`](https://github.com/nodejs/node/commit/bfdf20729d)] - **test**: unref cancelled broadcast source timer (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`b29154d471`](https://github.com/nodejs/node/commit/b29154d471)] - **test**: collect timeout signals explicitly (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`384d4fe3ea`](https://github.com/nodejs/node/commit/384d4fe3ea)] - **test**: skip retries in DNS timeout coverage (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`c7323843f4`](https://github.com/nodejs/node/commit/c7323843f4)] - **test**: synchronize ordered runner events (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`625290573a`](https://github.com/nodejs/node/commit/625290573a)] - **test**: avoid idle HTTP/HTTPS connections (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`2bde68398f`](https://github.com/nodejs/node/commit/2bde68398f)] - **test**: close WebAssembly test HTTP servers (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`4c702e401b`](https://github.com/nodejs/node/commit/4c702e401b)] - **test**: deflake node-api test-free-called (Christian Aurich) [#&#8203;65948](https://github.com/nodejs/node/pull/65948)
- \[[`0b6d945ebc`](https://github.com/nodejs/node/commit/0b6d945ebc)] - **test**: skip C++ symbols in tick-processor-arguments (Philipp Dunkel) [#&#8203;65906](https://github.com/nodejs/node/pull/65906)
- \[[`e04210b383`](https://github.com/nodejs/node/commit/e04210b383)] - **test**: try fixing windows build replacing WMIC (James M Snell) [#&#8203;65949](https://github.com/nodejs/node/pull/65949)
- \[[`aed73444de`](https://github.com/nodejs/node/commit/aed73444de)] - **test**: fix flaky cleanup in http2 test (Tim Perry) [#&#8203;65701](https://github.com/nodejs/node/pull/65701)
- \[[`22f47ff728`](https://github.com/nodejs/node/commit/22f47ff728)] - **test**: update WPT WebCrypto, WebIDL and interfaces (Filip Skokan) [#&#8203;65679](https://github.com/nodejs/node/pull/65679)
- \[[`f2af511a24`](https://github.com/nodejs/node/commit/f2af511a24)] - **test**: zero-fill buffers before the string length limit check (Christian Aurich) [#&#8203;65755](https://github.com/nodejs/node/pull/65755)
- \[[`a28aad9960`](https://github.com/nodejs/node/commit/a28aad9960)] - **test**: update WPT for url to [`c23755a`](https://github.com/nodejs/node/commit/c23755a144) (Node.js GitHub Bot) [#&#8203;65651](https://github.com/nodejs/node/pull/65651)
- \[[`ba65bb149a`](https://github.com/nodejs/node/commit/ba65bb149a)] - **test**: fix recursive fs.watch error fixture (Filip Skokan) [#&#8203;65683](https://github.com/nodejs/node/pull/65683)
- \[[`f3b9f132b1`](https://github.com/nodejs/node/commit/f3b9f132b1)] - **test**: update streams WPT (Jeong SeokChan) [#&#8203;65638](https://github.com/nodejs/node/pull/65638)
- \[[`d2e0f2d3bd`](https://github.com/nodejs/node/commit/d2e0f2d3bd)] - **test**: deflake fastutf8stream destroy and reopen tests (Christian Aurich) [#&#8203;65554](https://github.com/nodejs/node/pull/65554)
- \[[`7b5896c136`](https://github.com/nodejs/node/commit/7b5896c136)] - **test**: cover Readable.from() sync iterator errors (jakecastelli) [#&#8203;65515](https://github.com/nodejs/node/pull/65515)
- \[[`66eafad642`](https://github.com/nodejs/node/commit/66eafad642)] - **test**: document WPT runner workflows (Filip Skokan) [#&#8203;65510](https://github.com/nodejs/node/pull/65510)
- \[[`2e2dc0f556`](https://github.com/nodejs/node/commit/2e2dc0f556)] - **test**: simplify test-worker-heap-profile.js (Donghoon Kang) [#&#8203;65372](https://github.com/nodejs/node/pull/65372)
- \[[`2e57caac46`](https://github.com/nodejs/node/commit/2e57caac46)] - **test**: prefer in-memory databases in sqlite tests (Paul Bouchon) [#&#8203;64701](https://github.com/nodejs/node/pull/64701)
- \[[`cef908596e`](https://github.com/nodejs/node/commit/cef908596e)] - **test**: fix typo from funciton to function (parkhojeong) [#&#8203;63403](https://github.com/nodejs/node/pull/63403)
- \[[`4c7bbd4182`](https://github.com/nodejs/node/commit/4c7bbd4182)] - **test**: widen the gap in the resolver maxTimeout comparison (Shelley Vohr) [#&#8203;65780](https://github.com/nodejs/node/pull/65780)
- \[[`25c81c9eff`](https://github.com/nodejs/node/commit/25c81c9eff)] - **test**: fix the thread-spawn handshake in the WASI threads fixture (Shelley Vohr) [#&#8203;65780](https://github.com/nodejs/node/pull/65780)
- \[[`cab5dcedbe`](https://github.com/nodejs/node/commit/cab5dcedbe)] - **test**: only count restarts after the write in watch emit-restarted test (Shelley Vohr) [#&#8203;65780](https://github.com/nodejs/node/pull/65780)
- \[[`db0ca93e94`](https://github.com/nodejs/node/commit/db0ca93e94)] - **test**: ignore tunnel resets in proxy invalid-char-in-url test (Shelley Vohr) [#&#8203;65780](https://github.com/nodejs/node/pull/65780)
- \[[`1f0087040a`](https://github.com/nodejs/node/commit/1f0087040a)] - **test**: handle EPIPE in closed channel test (Christian Aurich) [#&#8203;65770](https://github.com/nodejs/node/pull/65770)
- \[[`ed4e5df638`](https://github.com/nodejs/node/commit/ed4e5df638)] - **test**: deflake test-runner-coverage (Christian Aurich) [#&#8203;65728](https://github.com/nodejs/node/pull/65728)
- \[[`48ecb16909`](https://github.com/nodejs/node/commit/48ecb16909)] - **test**: set type=none on IBM i for empty source (Abdirahim Musse) [#&#8203;65545](https://github.com/nodejs/node/pull/65545)
- \[[`554a3fba98`](https://github.com/nodejs/node/commit/554a3fba98)] - **test**: deflake WASI poll timing checks (Filip Skokan) [#&#8203;65672](https://github.com/nodejs/node/pull/65672)
- \[[`91b5389430`](https://github.com/nodejs/node/commit/91b5389430)] - **test**: skip `fs-watch-recursive-delete-race` on AIX (Antoine du Hamel) [#&#8203;65698](https://github.com/nodejs/node/pull/65698)
- \[[`4ed0c8cc6c`](https://github.com/nodejs/node/commit/4ed0c8cc6c)] - **test**: deflake test-inspect-async-hook-setup-at-inspect (Christian Aurich) [#&#8203;65584](https://github.com/nodejs/node/pull/65584)
- \[[`500b98cc7d`](https://github.com/nodejs/node/commit/500b98cc7d)] - **test**: deflake test-watch-mode-restart-esm-loading-error (Christian Aurich) [#&#8203;65623](https://github.com/nodejs/node/pull/65623)
- \[[`099c20fcbd`](https://github.com/nodejs/node/commit/099c20fcbd)] - **test**: avoid orphaned child on Windows abort test (Kirill Saied) [#&#8203;65451](https://github.com/nodejs/node/pull/65451)
- \[[`fc9364fe55`](https://github.com/nodejs/node/commit/fc9364fe55)] - **test**: riscv64: skip node-api sea test (Stewart X Addison) [#&#8203;65569](https://github.com/nodejs/node/pull/65569)
- \[[`c9d6b5f731`](https://github.com/nodejs/node/commit/c9d6b5f731)] - **test**: mark platform-specific tests as flaky (Filip Skokan) [#&#8203;65562](https://github.com/nodejs/node/pull/65562)
- \[[`cb93d40549`](https://github.com/nodejs/node/commit/cb93d40549)] - **test,benchmark**: use OpenSSL feature helpers (Filip Skokan) [#&#8203;65762](https://github.com/nodejs/node/pull/65762)
- \[[`b4b859319d`](https://github.com/nodejs/node/commit/b4b859319d)] - **test_runner**: avoid reusing v8 serializers (Yuya Inoue) [#&#8203;65951](https://github.com/nodejs/node/pull/65951)
- \[[`b3766225e1`](https://github.com/nodejs/node/commit/b3766225e1)] - **test_runner**: fix quote escaping in JUnit (Jihwan) [#&#8203;65971](https://github.com/nodejs/node/pull/65971)
- \[[`ec37f934db`](https://github.com/nodejs/node/commit/ec37f934db)] - **tls**: propagate singleUse to the secure context (Carlos Vinicius) [#&#8203;66025](https://github.com/nodejs/node/pull/66025)
- \[[`21aec3f286`](https://github.com/nodejs/node/commit/21aec3f286)] - **tls**: defer re-entrant calls to SSL state machine from JS (Tim Perry) [#&#8203;65105](https://github.com/nodejs/node/pull/65105)
- \[[`ffd3de2831`](https://github.com/nodejs/node/commit/ffd3de2831)] - **tls**: read the peer certificate chain without consuming it (Tony Gies) [#&#8203;65602](https://github.com/nodejs/node/pull/65602)
- \[[`3481ea3c43`](https://github.com/nodejs/node/commit/3481ea3c43)] - **tls**: don't trigger SNICallback or OCSPRequest from the TLS lib stack (Tim Perry) [#&#8203;64827](https://github.com/nodejs/node/pull/64827)
- \[[`d75957f0c8`](https://github.com/nodejs/node/commit/d75957f0c8)] - **tls**: drop hand-rolled TLS client hello parser (Tim Perry) [#&#8203;64827](https://github.com/nodejs/node/pull/64827)
- \[[`c555ba0aeb`](https://github.com/nodejs/node/commit/c555ba0aeb)] - **tools**: update `tools/v8` for Python 3.13 (Richard Lau) [#&#8203;66109](https://github.com/nodejs/node/pull/66109)
- \[[`aafff27ebe`](https://github.com/nodejs/node/commit/aafff27ebe)] - **tools**: bump eslint-plugin-jsdoc in /tools/eslint in the eslint group (dependabot\[bot]) [#&#8203;66102](https://github.com/nodejs/node/pull/66102)
- \[[`7a481ebd2c`](https://github.com/nodejs/node/commit/7a481ebd2c)] - **tools**: group CodeQL GHA updates (Antoine du Hamel) [#&#8203;66057](https://github.com/nodejs/node/pull/66057)
- \[[`b2252b4074`](https://github.com/nodejs/node/commit/b2252b4074)] - **tools**: summarize auto-start-ci failures (Filip Skokan) [#&#8203;65979](https://github.com/nodejs/node/pull/65979)
- \[[`499fe73da7`](https://github.com/nodejs/node/commit/499fe73da7)] - **tools**: bump the eslint group in /tools/eslint with 6 updates (dependabot\[bot]) [#&#8203;66045](https://github.com/nodejs/node/pull/66045)
- \[[`d004d957ae`](https://github.com/nodejs/node/commit/d004d957ae)] - **tools**: update pgo build doc for linux (Chengzhong Wu) [#&#8203;66024](https://github.com/nodejs/node/pull/66024)
- \[[`bfa329dbba`](https://github.com/nodejs/node/commit/bfa329dbba)] - **tools**: correct Slack action version comments (Filip Skokan) [#&#8203;66013](https://github.com/nodejs/node/pull/66013)
- \[[`d55d30313b`](https://github.com/nodejs/node/commit/d55d30313b)] - **tools**: make checkout credential use explicit (Filip Skokan) [#&#8203;66013](https://github.com/nodejs/node/pull/66013)
- \[[`0a9e844866`](https://github.com/nodejs/node/commit/0a9e844866)] - **tools**: pass author to commit message validator (Filip Skokan) [#&#8203;66012](https://github.com/nodejs/node/pull/66012)
- \[[`f5edf1cd7c`](https://github.com/nodejs/node/commit/f5edf1cd7c)] - **tools**: reduce test runner timing overhead (Filip Skokan) [#&#8203;65980](https://github.com/nodejs/node/pull/65980)
- \[[`1cb899f727`](https://github.com/nodejs/node/commit/1cb899f727)] - **tools**: bump js-yaml from 4.3.1 to 4.3.2 in /tools/eslint (dependabot\[bot]) [#&#8203;65931](https://github.com/nodejs/node/pull/65931)
- \[[`9a1d47bc53`](https://github.com/nodejs/node/commit/9a1d47bc53)] - **tools**: bump js-yaml from 4.3.1 to 4.3.2 in /tools/lint-md (dependabot\[bot]) [#&#8203;65932](https://githu…
elrincondehiro pushed a commit to elrincondehiro/web-ecommerce that referenced this pull request Oct 20, 2026
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | Type | Update |
|---|---|---|---|---|---|
| [@astrojs/check](https://github.com/withastro/astro/tree/main/packages/language-tools/astro-check) ([source](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check)) | [`0.9.10` → `0.9.11`](https://renovatebot.com/diffs/npm/@astrojs%2fcheck/0.9.10/0.9.11) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@astrojs%2fcheck/0.9.11?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@astrojs%2fcheck/0.9.10/0.9.11?slim=true) | devDependencies | patch |
| [@astrojs/node](https://docs.astro.build/en/guides/integrations-guide/node/) ([source](https://github.com/withastro/astro/tree/HEAD/packages/integrations/node)) | [`11.1.7` → `11.1.9`](https://renovatebot.com/diffs/npm/@astrojs%2fnode/11.1.7/11.1.9) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@astrojs%2fnode/11.1.9?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@astrojs%2fnode/11.1.7/11.1.9?slim=true) | dependencies | patch |
| [@astrojs/svelte](https://docs.astro.build/en/guides/integrations-guide/svelte/) ([source](https://github.com/withastro/astro/tree/HEAD/packages/integrations/svelte)) | [`9.0.1` → `9.1.0`](https://renovatebot.com/diffs/npm/@astrojs%2fsvelte/9.0.1/9.1.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@astrojs%2fsvelte/9.1.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@astrojs%2fsvelte/9.0.1/9.1.0?slim=true) | dependencies | minor |
| [@playwright/test](https://playwright.dev) ([source](https://github.com/microsoft/playwright)) | [`1.64.0` → `1.64.1`](https://renovatebot.com/diffs/npm/@playwright%2ftest/1.64.0/1.64.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@playwright%2ftest/1.64.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@playwright%2ftest/1.64.0/1.64.1?slim=true) | devDependencies | patch |
| [@react-email/render](https://react.email) ([source](https://github.com/resend/react-email/tree/HEAD/packages/render)) | [`2.1.0` → `2.1.1`](https://renovatebot.com/diffs/npm/@react-email%2frender/2.1.0/2.1.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@react-email%2frender/2.1.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@react-email%2frender/2.1.0/2.1.1?slim=true) | dependencies | patch |
| [@react-email/ui](https://github.com/resend/react-email) ([source](https://github.com/resend/react-email/tree/HEAD/packages/ui)) | [`6.11.1` → `6.11.3`](https://renovatebot.com/diffs/npm/@react-email%2fui/6.11.1/6.11.3) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@react-email%2fui/6.11.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@react-email%2fui/6.11.1/6.11.3?slim=true) | devDependencies | patch |
| [@swc/core](https://swc.rs) ([source](https://github.com/swc-project/swc/tree/HEAD/packages/core)) | [`1.16.13` → `1.16.18`](https://renovatebot.com/diffs/npm/@swc%2fcore/1.16.13/1.16.18) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@swc%2fcore/1.16.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@swc%2fcore/1.16.13/1.16.18?slim=true) | devDependencies | patch |
| [amir20/dozzle](https://github.com/amir20/dozzle) | `v11.3.2` → `v11.3.4` | ![age](https://developer.mend.io/api/mc/badges/age/docker/amir20%2fdozzle/v11.3.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/amir20%2fdozzle/v11.3.2/v11.3.4?slim=true) |  | patch |
| [astro](https://astro.build) ([source](https://github.com/withastro/astro/tree/HEAD/packages/astro)) | [`7.3.8` → `7.4.1`](https://renovatebot.com/diffs/npm/astro/7.3.8/7.4.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/astro/7.4.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/astro/7.3.8/7.4.1?slim=true) | dependencies | minor |
| [axllent/mailpit](https://mailpit.axllent.org) ([source](https://github.com/axllent/mailpit)) | `v1.31.5` → `v1.31.6` | ![age](https://developer.mend.io/api/mc/badges/age/docker/axllent%2fmailpit/v1.31.6?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/axllent%2fmailpit/v1.31.5/v1.31.6?slim=true) |  | patch |
| [eslint](https://eslint.org) ([source](https://github.com/eslint/eslint)) | [`10.12.0` → `10.13.0`](https://renovatebot.com/diffs/npm/eslint/10.12.0/10.13.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/eslint/10.13.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint/10.12.0/10.13.0?slim=true) | dependencies | minor |
| [eslint](https://eslint.org) ([source](https://github.com/eslint/eslint)) | [`10.12.0` → `10.13.0`](https://renovatebot.com/diffs/npm/eslint/10.12.0/10.13.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/eslint/10.13.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint/10.12.0/10.13.0?slim=true) | devDependencies | minor |
| [getmeili/meilisearch](https://github.com/meilisearch/meilisearch) | `v1.54.3` → `v1.55.0` | ![age](https://developer.mend.io/api/mc/badges/age/docker/getmeili%2fmeilisearch/v1.55.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/getmeili%2fmeilisearch/v1.54.3/v1.55.0?slim=true) |  | minor |
| [node](https://nodejs.org) ([source](https://github.com/nodejs/node)) | [`24.21.0` → `24.22.0`](https://renovatebot.com/diffs/npm/node/v24.21.0/v24.22.0) | ![age](https://developer.mend.io/api/mc/badges/age/node-version/node/v24.22.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/node-version/node/v24.21.0/v24.22.0?slim=true) | engines | minor |
| [node](https://nodejs.org) ([source](https://github.com/nodejs/node)) | `24.21.0` → `24.22.0` | ![age](https://developer.mend.io/api/mc/badges/age/node-version/node/v24.22.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/node-version/node/v24.21.0/v24.22.0?slim=true) |  | minor |
| [node](https://hub.docker.com/_/node) ([source](https://github.com/nodejs/node)) | `24.21.0-trixie` → `24.22.0-trixie` | ![age](https://developer.mend.io/api/mc/badges/age/docker/node/24.22.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/node/24.21.0/24.22.0?slim=true) | container | minor |
| [node](https://hub.docker.com/_/node) ([source](https://github.com/nodejs/node)) | `24.21.0-alpine3.24` → `24.22.0-alpine3.24` | ![age](https://developer.mend.io/api/mc/badges/age/docker/node/24.22.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/node/24.21.0/24.22.0?slim=true) | final | minor |
| [node](https://hub.docker.com/_/node) ([source](https://github.com/nodejs/node)) | `24.21.0-alpine3.24` → `24.22.0-alpine3.24` | ![age](https://developer.mend.io/api/mc/badges/age/docker/node/24.22.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/node/24.21.0/24.22.0?slim=true) | stage | minor |
| [nodemailer](https://nodemailer.com/) ([source](https://github.com/nodemailer/nodemailer)) | [`10.1.0` → `10.1.7`](https://renovatebot.com/diffs/npm/nodemailer/10.1.0/10.1.7) | ![age](https://developer.mend.io/api/mc/badges/age/npm/nodemailer/10.1.7?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/nodemailer/10.1.0/10.1.7?slim=true) | devDependencies | patch |
| [pnpm](https://pnpm.io) ([source](https://github.com/pnpm/pnpm/tree/HEAD/pnpm/npm/pnpm)) | [`12.11.2` → `12.14.0`](https://renovatebot.com/diffs/npm/pnpm/12.11.2/12.14.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/12.14.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/12.11.2/12.14.0?slim=true) | packageManager | minor |
| [pnpm](https://pnpm.io) ([source](https://github.com/pnpm/pnpm/tree/HEAD/pnpm/npm/pnpm)) | [`12.11.2` → `12.14.0`](https://renovatebot.com/diffs/npm/pnpm/12.11.2/12.14.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/12.14.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/12.11.2/12.14.0?slim=true) | engines | minor |
| [react-email](https://github.com/resend/react-email) ([source](https://github.com/resend/react-email/tree/HEAD/packages/react-email)) | [`6.11.1` → `6.11.3`](https://renovatebot.com/diffs/npm/react-email/6.11.1/6.11.3) | ![age](https://developer.mend.io/api/mc/badges/age/npm/react-email/6.11.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/react-email/6.11.1/6.11.3?slim=true) | dependencies | patch |
| [renovate/renovate](https://renovatebot.com) ([source](https://github.com/renovatebot/renovate)) | [`44.151.2` → `44.172.2`](https://octochangelog.com/compare?repo=renovatebot%2Frenovate&from=44.151.2&to=44.172.2) | ![age](https://developer.mend.io/api/mc/badges/age/docker/renovate%2frenovate/44.172.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/renovate%2frenovate/44.151.2/44.172.2?slim=true) | container | minor |
| [resend](https://github.com/resend/resend-node) | [`6.32.1` → `6.34.1`](https://renovatebot.com/diffs/npm/resend/6.32.1/6.34.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/resend/6.34.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/resend/6.32.1/6.34.1?slim=true) | dependencies | minor |
| stripe/stripe-cli | `v1.53.1` → `v1.54.1` | ![age](https://developer.mend.io/api/mc/badges/age/docker/stripe%2fstripe-cli/v1.54.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/stripe%2fstripe-cli/v1.53.1/v1.54.1?slim=true) |  | minor |
| [svelte-check](https://github.com/sveltejs/language-tools) | [`4.7.6` → `4.7.7`](https://renovatebot.com/diffs/npm/svelte-check/4.7.6/4.7.7) | ![age](https://developer.mend.io/api/mc/badges/age/npm/svelte-check/4.7.7?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/svelte-check/4.7.6/4.7.7?slim=true) | devDependencies | patch |
| [typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint) ([source](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)) | [`8.71.1` → `8.72.0`](https://renovatebot.com/diffs/npm/typescript-eslint/8.71.1/8.72.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/typescript-eslint/8.72.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript-eslint/8.71.1/8.72.0?slim=true) | dependencies | minor |
| [vitest](https://vitest.dev) ([source](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest)) | [`5.0.3` → `5.0.5`](https://renovatebot.com/diffs/npm/vitest/5.0.3/5.0.5) | ![age](https://developer.mend.io/api/mc/badges/age/npm/vitest/5.0.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vitest/5.0.3/5.0.5?slim=true) | devDependencies | patch |

---

### Release Notes

<details>
<summary>withastro/astro (@&#8203;astrojs/check)</summary>

### [`v0.9.11`](https://github.com/withastro/astro/blob/HEAD/packages/language-tools/astro-check/CHANGELOG.md#0911)

[Compare Source](https://github.com/withastro/astro/compare/@astrojs/check@0.9.10...@astrojs/check@0.9.11)

##### Patch Changes

- [#&#8203;18445](https://github.com/withastro/astro/pull/18445) [`d736df7`](https://github.com/withastro/astro/commit/d736df7a9cc03c12b22e538f058fb1f769672471) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes the `--preserveWatchOutput` help text, which described the opposite of the flag's behavior. Setting it to `true` keeps output between checks in watch mode.

- [#&#8203;18444](https://github.com/withastro/astro/pull/18444) [`c55134c`](https://github.com/withastro/astro/commit/c55134c1d3c238a43e17cfeff136375a4d9d5d35) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes `astro check --watch` exiting immediately when the project path contains `node_modules` or `.git`

</details>

<details>
<summary>withastro/astro (@&#8203;astrojs/node)</summary>

### [`v11.1.9`](https://github.com/withastro/astro/blob/HEAD/packages/integrations/node/CHANGELOG.md#1119)

[Compare Source](https://github.com/withastro/astro/compare/@astrojs/node@11.1.8...@astrojs/node@11.1.9)

##### Patch Changes

- [#&#8203;18382](https://github.com/withastro/astro/pull/18382) [`c75e897`](https://github.com/withastro/astro/commit/c75e89711a4935a0befea6f768842f6d6a9de2bb) Thanks [@&#8203;Llois41](https://github.com/Llois41)! - Fixes the standalone server not logging `Server listening on …` when `HOST` is an IP address, which happens on Node.js 26.12 and later

### [`v11.1.8`](https://github.com/withastro/astro/blob/HEAD/packages/integrations/node/CHANGELOG.md#1118)

[Compare Source](https://github.com/withastro/astro/compare/@astrojs/node@11.1.7...@astrojs/node@11.1.8)

##### Patch Changes

- [#&#8203;18335](https://github.com/withastro/astro/pull/18335) [`7526077`](https://github.com/withastro/astro/commit/7526077d4f2bb805ceeb41d3ff4e691b8abd0ad9) Thanks [@&#8203;lx3133584](https://github.com/lx3133584)! - Fix silent exit with code 0 on EADDRINUSE in standalone mode
- Updated dependencies \[[`b7a1bd9`](https://github.com/withastro/astro/commit/b7a1bd99ac7c68cf36078058f15f1bd1fab4cbe8)]:
  - [@&#8203;astrojs/internal-helpers](https://github.com/astrojs/internal-helpers)@0.13.0

</details>

<details>
<summary>withastro/astro (@&#8203;astrojs/svelte)</summary>

### [`v9.1.0`](https://github.com/withastro/astro/blob/HEAD/packages/integrations/svelte/CHANGELOG.md#910)

[Compare Source](https://github.com/withastro/astro/compare/@astrojs/svelte@9.0.1...@astrojs/svelte@9.1.0)

##### Minor Changes

- [#&#8203;18277](https://github.com/withastro/astro/pull/18277) [`2715958`](https://github.com/withastro/astro/commit/2715958666b0a706b069d0592da3a070b3796a9b) Thanks [@&#8203;florian-lefebvre](https://github.com/florian-lefebvre)! - Increases the minimum Node.js version to 22.22.0

  The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's [Node.js support policy](https://docs.astro.build/en/upgrade-astro/#support).

</details>

<details>
<summary>microsoft/playwright (@&#8203;playwright/test)</summary>

### [`v1.64.1`](https://github.com/microsoft/playwright/releases/tag/v1.64.1)

[Compare Source](https://github.com/microsoft/playwright/compare/v1.64.0...v1.64.1)

##### Bug Fixes

- [#&#8203;43247](https://github.com/microsoft/playwright/issues/43247) \[Bug]: \_electron.launch intermittently loses a packaged app's first window since 1.64.0
- [#&#8203;43242](https://github.com/microsoft/playwright/issues/43242) \[Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

</details>

<details>
<summary>resend/react-email (@&#8203;react-email/render)</summary>

### [`v2.1.1`](https://github.com/resend/react-email/blob/HEAD/packages/render/CHANGELOG.md#211)

[Compare Source](https://github.com/resend/react-email/compare/@react-email/render@2.1.0...@react-email/render@2.1.1)

##### Patch Changes

- [`f356e81`](https://github.com/resend/react-email/commit/f356e81): `render` now only loads `prettier` when `pretty: true` is used, so rendering without it no longer fails with "Failed to load external module prettier" in Next.js dev with Turbopack on Bun

</details>

<details>
<summary>resend/react-email (@&#8203;react-email/ui)</summary>

### [`v6.11.3`](https://github.com/resend/react-email/blob/HEAD/packages/ui/CHANGELOG.md#6113)

[Compare Source](https://github.com/resend/react-email/compare/@react-email/ui@6.11.2...@react-email/ui@6.11.3)

##### Patch Changes

- [`88562d0`](https://github.com/resend/react-email/commit/88562d0): The compatibility check now applies `--esbuild-plugins` when it bundles a template that passes `config`, `theme` or `utility` to `<Tailwind>`, so templates whose imports need a plugin no longer log a build error.
- [`7f545c6`](https://github.com/resend/react-email/commit/7f545c6): Bump `next` to 16.4.1 so the prebuilt preview server works in projects on Next.js 16.4. Next 16.4 loads a `server/preview-props.json` manifest that a 16.3 build doesn't emit, so `email dev` failed with `ENOENT` when `next` was deduped to 16.4.

### [`v6.11.2`](https://github.com/resend/react-email/blob/HEAD/packages/ui/CHANGELOG.md#6112)

[Compare Source](https://github.com/resend/react-email/compare/@react-email/ui@6.11.1...@react-email/ui@6.11.2)

</details>

<details>
<summary>swc-project/swc (@&#8203;swc/core)</summary>

### [`v1.16.18`](https://github.com/swc-project/swc/blob/HEAD/CHANGELOG.md#11618---2026-10-11)

[Compare Source](https://github.com/swc-project/swc/compare/v1.16.17...v1.16.18)

##### Bug Fixes

- **(bindings)** Fall back to a safe cache root on Unix ([#&#8203;12500](https://github.com/swc-project/swc/issues/12500)) ([2125403](https://github.com/swc-project/swc/commit/2125403ad6c5cb7b8329852f5f84b797ede99146))

- **(es/minifier)** Check decl for side effect ([#&#8203;12501](https://github.com/swc-project/swc/issues/12501)) ([6841927](https://github.com/swc-project/swc/commit/6841927dd3b72b51b7deaa238d88df9ce0f3fb9f))

### [`v1.16.17`](https://github.com/swc-project/swc/blob/HEAD/CHANGELOG.md#11617---2026-10-11)

[Compare Source](https://github.com/swc-project/swc/compare/v1.16.13...v1.16.17)

##### Bug Fixes

- **(bindings)** Fall back to a secure Windows profile cache ([#&#8203;12452](https://github.com/swc-project/swc/issues/12452)) ([2c0fb89](https://github.com/swc-project/swc/commit/2c0fb896611f5b9d462886db9d8089813a99a4a6))

- **(bindings)** Allow opting out of Unix cache root security checks ([#&#8203;12469](https://github.com/swc-project/swc/issues/12469)) ([e87fa40](https://github.com/swc-project/swc/commit/e87fa401933d6c27e5b14f26d9c3381cccc53cdc))

- **(ci)** Run main CodSpeed benchmarks after policy skips ([1b6d869](https://github.com/swc-project/swc/commit/1b6d869ec415609664a06150df8ec4d614fdb3f8))

- **(ci)** Match Rust's z10 baseline in s390x release builds ([#&#8203;12489](https://github.com/swc-project/swc/issues/12489)) ([b96f92f](https://github.com/swc-project/swc/commit/b96f92fa6ddafac71133185c7c760855f27b6ed6))

- **(ci)** Raise native addon MSRV to Rust 1.85 ([#&#8203;12491](https://github.com/swc-project/swc/issues/12491)) ([54a2324](https://github.com/swc-project/swc/commit/54a232401c81a3c97851128b92904b5b0308c4b4))

- **(ci)** Repair empty crate release changeset ([#&#8203;12499](https://github.com/swc-project/swc/issues/12499)) ([6bf5f8c](https://github.com/swc-project/swc/commit/6bf5f8cf38e005fd03c2a4bc49d9021432033695))

- **(cli)** Resolve out-dir source map paths relative to output ([#&#8203;12481](https://github.com/swc-project/swc/issues/12481)) ([717914f](https://github.com/swc-project/swc/commit/717914f88f4f19caa1dd93e971628acb4bd608d1))

- **(deps)** Update cargo ([#&#8203;10278](https://github.com/swc-project/swc/issues/10278)) ([fc7a9e2](https://github.com/swc-project/swc/commit/fc7a9e2c159409d97ae0647534a9b9cdefb6eaed))

- **(es/compat)** Preserve consecutive loop labels ([#&#8203;12472](https://github.com/swc-project/swc/issues/12472)) ([28c3370](https://github.com/swc-project/swc/commit/28c33708dc691a64358255b5aec02f1c7eb62cdf))

- **(es/estree)** Fix AST roundtrip bugs and implement missing conversions ([#&#8203;12440](https://github.com/swc-project/swc/issues/12440)) ([898b592](https://github.com/swc-project/swc/commit/898b5926d17b86e14262437b90ca37b043adecda))
  - **BREAKING**: fix AST roundtrip bugs and implement missing conversions ([#&#8203;12440](https://github.com/swc-project/swc/issues/12440))

- **(es/fixer)** Preserve parentheses in JSX sequence expressions ([#&#8203;12485](https://github.com/swc-project/swc/issues/12485)) ([7a36735](https://github.com/swc-project/swc/commit/7a36735f5636e5880cc4030d3b916dd19cedeb9b))

- **(es/preset-env)** Lower for-await in native async functions ([#&#8203;12414](https://github.com/swc-project/swc/issues/12414)) ([2b3d306](https://github.com/swc-project/swc/commit/2b3d306be5af54033ca69dca8826c7b7a1e1c861))

- **(react-compiler)** Protect long call chains from stack overflow ([#&#8203;12473](https://github.com/swc-project/swc/issues/12473)) ([a19b101](https://github.com/swc-project/swc/commit/a19b1019b3d58ca5c91552d1b89c6488af6b1740))

- Direct unapproved contributors to open issues ([#&#8203;12479](https://github.com/swc-project/swc/issues/12479)) ([3fac5ec](https://github.com/swc-project/swc/commit/3fac5ec63d2f396c017e9782d24797f470d3627d))

##### Features

- **(ci)** Restrict pull requests to trusted contributors ([#&#8203;12463](https://github.com/swc-project/swc/issues/12463)) ([ee297d6](https://github.com/swc-project/swc/commit/ee297d6e3680b1c62b30e978da9e4bcb89c1d5d9))

- **(es/codegen)** Support configurable output indentation ([#&#8203;12490](https://github.com/swc-project/swc/issues/12490)) ([2058335](https://github.com/swc-project/swc/commit/2058335cad1883d55956b3f3c0a895494041ffc6))
  - **BREAKING**: support configurable output indentation ([#&#8203;12490](https://github.com/swc-project/swc/issues/12490))

##### Miscellaneous Tasks

- **(deps)** Replace dependency babel-eslint with [@&#8203;babel/eslint-parser](https://github.com/babel/eslint-parser) ^7.11.0 ([#&#8203;12456](https://github.com/swc-project/swc/issues/12456)) ([a933f98](https://github.com/swc-project/swc/commit/a933f98502309c168f4343843815eecfab6653e4))

- **(deps)** Replace dependency npm-run-all with npm-run-all2 ^5.0.0 ([#&#8203;12457](https://github.com/swc-project/swc/issues/12457)) ([98e6c6e](https://github.com/swc-project/swc/commit/98e6c6e4f21c9d58a48ef37a16e045e5385fea56))

- **(deps)** Update npm ([#&#8203;12468](https://github.com/swc-project/swc/issues/12468)) ([7c75e36](https://github.com/swc-project/swc/commit/7c75e364758053454d4fb41157b310c2d74b4c60))

##### Performance

- **(es/compat)** Skip empty block-scoping renames ([#&#8203;12478](https://github.com/swc-project/swc/issues/12478)) ([952db74](https://github.com/swc-project/swc/commit/952db74fa0bbf3f5293153c44fff034e1637f371))

- **(es/parser)** Scan template literals with byte search ([#&#8203;12474](https://github.com/swc-project/swc/issues/12474)) ([3c46139](https://github.com/swc-project/swc/commit/3c46139b86b27a7b3fefcf7b19ca07a63de9db0a))

##### Refactor

- **(es/parser)** Isolate parser state and make grammar parameters explicit ([#&#8203;12425](https://github.com/swc-project/swc/issues/12425)) ([5898e8a](https://github.com/swc-project/swc/commit/5898e8aba9301d325a7fd395f339c6e27122c80c))

##### Ci

- Refresh CodSpeed main baseline ([c19d531](https://github.com/swc-project/swc/commit/c19d53129ea2f3c2f2c1547e6bdd17a10d9e4948))

</details>

<details>
<summary>amir20/dozzle</summary>

### [`v11.3.4`](https://github.com/amir20/dozzle/releases/tag/v11.3.4)

[Compare Source](https://github.com/amir20/dozzle/compare/v11.3.3...v11.3.4)

Sorry y'all for the back-to-back releases. We had to fix a critical bug in MCP server.

#####    🚀 Features

- **cloud**:
  - Match histogram and real total on the log search page  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5** in [#&#8203;5466](https://github.com/amir20/dozzle/issues/5466) [<samp>(5cc18)</samp>](https://github.com/amir20/dozzle/commit/5cc183da)
- **hosts**:
  - Clean up every host on a schedule  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5** in [#&#8203;5467](https://github.com/amir20/dozzle/issues/5467) [<samp>(54f29)</samp>](https://github.com/amir20/dozzle/commit/54f293e3)
- **logs**:
  - Copy is the default line action, group the actions menu  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5** in [#&#8203;5461](https://github.com/amir20/dozzle/issues/5461) [<samp>(5272b)</samp>](https://github.com/amir20/dozzle/commit/5272badc)
  - Search similar lines, clean up the cloud search page  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5** in [#&#8203;5462](https://github.com/amir20/dozzle/issues/5462) [<samp>(a04c0)</samp>](https://github.com/amir20/dozzle/commit/a04c0727)
- **search**:
  - Hand the find query to cloud search  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5** in [#&#8203;5469](https://github.com/amir20/dozzle/issues/5469) [<samp>(7fd2f)</samp>](https://github.com/amir20/dozzle/commit/7fd2f98d)

#####    🐞 Bug Fixes

- **cloud**:
  - Render plan entitlements Cloud sends instead of guessing  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5** in [#&#8203;5472](https://github.com/amir20/dozzle/issues/5472) [<samp>(a1482)</samp>](https://github.com/amir20/dozzle/commit/a1482b89)
  - Show the search window and total Cloud sends  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5** in [#&#8203;5473](https://github.com/amir20/dozzle/issues/5473) [<samp>(f3ab0)</samp>](https://github.com/amir20/dozzle/commit/f3ab0e42)
- **deps**:
  - Update all non-major dependencies  -  in [#&#8203;5459](https://github.com/amir20/dozzle/issues/5459) [<samp>(7d783)</samp>](https://github.com/amir20/dozzle/commit/7d783823)
- **mcp**:
  - ⚠️ Serve the 2026-07-28 protocol so ChatGPT can connect  -  by [@&#8203;amir20](https://github.com/amir20) in [#&#8203;5465](https://github.com/amir20/dozzle/issues/5465) [<samp>(4d6ef)</samp>](https://github.com/amir20/dozzle/commit/4d6ef5f7)
- **search**:
  - Stop the palette running hidden cloud searches  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5** in [#&#8203;5471](https://github.com/amir20/dozzle/issues/5471) [<samp>(041de)</samp>](https://github.com/amir20/dozzle/commit/041de99e)

#####     [View changes on GitHub](https://github.com/amir20/dozzle/compare/v11.3.3...v11.3.4)

### [`v11.3.3`](https://github.com/amir20/dozzle/releases/tag/v11.3.3)

[Compare Source](https://github.com/amir20/dozzle/compare/v11.3.2...v11.3.3)

#####    🚀 Features

- **agent**:
  - Warn on the built-in cert and audit mutating calls  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5442](https://github.com/amir20/dozzle/issues/5442) [<samp>(d341c)</samp>](https://github.com/amir20/dozzle/commit/d341caf6)
- **cloud**:
  - Add per-mount rw to inspect_container  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5433](https://github.com/amir20/dozzle/issues/5433) [<samp>(a69af)</samp>](https://github.com/amir20/dozzle/commit/a69af713)
  - Inspect_containers, every container's inspect in one call  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5438](https://github.com/amir20/dozzle/issues/5438) [<samp>(942b5)</samp>](https://github.com/amir20/dozzle/commit/942b577b)
  - Welcome modal offers Telegram or Discord for alerts  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5446](https://github.com/amir20/dozzle/issues/5446) [<samp>(6e472)</samp>](https://github.com/amir20/dozzle/commit/6e4729af)
- **icons**:
  - Add missing icon for coredns  -  by [@&#8203;RajibRashid](https://github.com/RajibRashid) in [#&#8203;5443](https://github.com/amir20/dozzle/issues/5443) [<samp>(1dc25)</samp>](https://github.com/amir20/dozzle/commit/1dc2568e)
  - Add icons for fastmcp  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5451](https://github.com/amir20/dozzle/issues/5451) [<samp>(55c6e)</samp>](https://github.com/amir20/dozzle/commit/55c6e89a)
- **setup**:
  - Pitch Cloud after auto-update, around chat and checked updates  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5445](https://github.com/amir20/dozzle/issues/5445) [<samp>(63bc9)</samp>](https://github.com/amir20/dozzle/commit/63bc9bd7)
  - Put the Cloud step right after actions, Connect as primary  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5448](https://github.com/amir20/dozzle/issues/5448) [<samp>(2f277)</samp>](https://github.com/amir20/dozzle/commit/2f277c28)
- **ui**:
  - Show the version behind a latest image tag  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5454](https://github.com/amir20/dozzle/issues/5454) [<samp>(ef1bb)</samp>](https://github.com/amir20/dozzle/commit/ef1bbdc2)

#####    🐞 Bug Fixes

- **deps**:
  - Update all non-major dependencies  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5432](https://github.com/amir20/dozzle/issues/5432) [<samp>(35ac1)</samp>](https://github.com/amir20/dozzle/commit/35ac16a4)
  - Update dependency markdown-it to ^15.0.3  -  in [#&#8203;5440](https://github.com/amir20/dozzle/issues/5440) [<samp>(d9881)</samp>](https://github.com/amir20/dozzle/commit/d9881cdf)
  - Update all non-major dependencies  -  in [#&#8203;5447](https://github.com/amir20/dozzle/issues/5447) [<samp>(59825)</samp>](https://github.com/amir20/dozzle/commit/59825fa8)
  - Update all non-major dependencies  -  in [#&#8203;5455](https://github.com/amir20/dozzle/issues/5455) [<samp>(065ad)</samp>](https://github.com/amir20/dozzle/commit/065adabc)
- **k8s**:
  - Memory bar, limits, and network/disk from the kubelet  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5457](https://github.com/amir20/dozzle/issues/5457) [<samp>(c0d2f)</samp>](https://github.com/amir20/dozzle/commit/c0d2f75c)
- **nav**:
  - Keep the container popup open while the pointer heads for it  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5434](https://github.com/amir20/dozzle/issues/5434) [<samp>(a75d5)</samp>](https://github.com/amir20/dozzle/commit/a75d5d8b)
- **setup**:
  - Stop the wizard losing people on the Cloud step  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5460](https://github.com/amir20/dozzle/issues/5460) [<samp>(e51f8)</samp>](https://github.com/amir20/dozzle/commit/e51f8e28)
- **web**:
  - Don't exit the server on an empty host segment  -  by [@&#8203;amir20](https://github.com/amir20) and **Claude Opus 5.5 (1M context)** in [#&#8203;5453](https://github.com/amir20/dozzle/issues/5453) [<samp>(ec83b)</samp>](https://github.com/amir20/dozzle/commit/ec83b962)

#####     [View changes on GitHub](https://github.com/amir20/dozzle/compare/v11.3.2...v11.3.3)

</details>

<details>
<summary>withastro/astro (astro)</summary>

### [`v7.4.1`](https://github.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#741)

[Compare Source](https://github.com/withastro/astro/compare/astro@7.4.0...astro@7.4.1)

##### Patch Changes

- [#&#8203;18425](https://github.com/withastro/astro/pull/18425) [`6fdc36e`](https://github.com/withastro/astro/commit/6fdc36ed97316d932d2e143b85739f0af37ab329) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Preserves the last modified date of cached optimized images and incrementally restored build output when copying them into the build output on all platforms

- [#&#8203;18419](https://github.com/withastro/astro/pull/18419) [`395d195`](https://github.com/withastro/astro/commit/395d19525986a276bf81af7bd365e7a35dc20ef3) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes a typo in the error message shown when a font `cssVariable` is invalid

- [#&#8203;18401](https://github.com/withastro/astro/pull/18401) [`484822f`](https://github.com/withastro/astro/commit/484822fbba652745c4f2da5ef434a350203578e2) Thanks [@&#8203;danielmlr](https://github.com/danielmlr)! - Fixes a bug where projects whose path contains an apostrophe (`'`) failed to load sessions, middleware, a cache provider, or a `src/fetch.ts` handler

- [#&#8203;18407](https://github.com/withastro/astro/pull/18407) [`a6e00be`](https://github.com/withastro/astro/commit/a6e00beae6c134d0c1b5248eb02fbf119b7d64e9) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes a `TSCONFIG_ERROR` during `astro build` when a parent directory contains a `tsconfig.json` that cannot be resolved, such as one extending `astro/tsconfigs/strict` without installed dependencies

- [#&#8203;18427](https://github.com/withastro/astro/pull/18427) [`908f167`](https://github.com/withastro/astro/commit/908f1672a9fe6c40e6b73bfb0307f0d1f3ac2057) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes an `Unterminated string` build error when application code imports from `astro/config` (for example, `fontProviders` in a shared fonts module)

- [#&#8203;18428](https://github.com/withastro/astro/pull/18428) [`40e7d54`](https://github.com/withastro/astro/commit/40e7d54c7f969b402f011d32ccd87123835d0aa1) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes missing styles in production builds for conditionally rendered framework components (e.g. Svelte components inside `{#if}` blocks) imported by a hydrated island

- [#&#8203;18424](https://github.com/withastro/astro/pull/18424) [`617ff59`](https://github.com/withastro/astro/commit/617ff59820b4a5777eb5d3765c09d29082b11acc) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes style-only HMR in `.astro` components falling back to a full page reload when a PostCSS plugin (such as `@unocss/postcss`) lists the component as a dependency of its own style

- [#&#8203;18274](https://github.com/withastro/astro/pull/18274) [`70834bb`](https://github.com/withastro/astro/commit/70834bbea43695c563358ea055d32ecb5e0a78dd) Thanks [@&#8203;Princesseuh](https://github.com/Princesseuh)! - Fixes increasing memory usage when editing the Astro configuration while the dev server is running

### [`v7.4.0`](https://github.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#740)

[Compare Source](https://github.com/withastro/astro/compare/astro@7.3.8...astro@7.4.0)

##### Minor Changes

- [#&#8203;17894](https://github.com/withastro/astro/pull/17894) [`b7a1bd9`](https://github.com/withastro/astro/commit/b7a1bd99ac7c68cf36078058f15f1bd1fab4cbe8) Thanks [@&#8203;Princesseuh](https://github.com/Princesseuh)! - Adds a new `--timings` flag to `astro build` to help you find what slows down your builds

  When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the `--timings` flag to your build command to print a summary once the build finishes:

  ```sh
  astro build --timings
  ```

  This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

- [#&#8203;17830](https://github.com/withastro/astro/pull/17830) [`a937b0d`](https://github.com/withastro/astro/commit/a937b0d3ec236c8dd1c62a7a4da7c65b2fdbb7c1) Thanks [@&#8203;florian-lefebvre](https://github.com/florian-lefebvre)! - Adds a new optional `getFontProperties()` callback to font providers

  Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

  All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

  ```ts
  import type { FontProvider } from 'astro';

  const provider: FontProvider = {
  	name: 'my-provider',
  	resolveFont: ({ familyName }) => {
  		// ...
  	},
  	getFontProperties: ({ familyName }) => ({
  		weights: ['400', '700'],
  		styles: ['normal', 'italic'],
  		subsets: ['latin'],
  		formats: ['woff2'],
  	}),
  };
  ```

- [#&#8203;17830](https://github.com/withastro/astro/pull/17830) [`a937b0d`](https://github.com/withastro/astro/commit/a937b0d3ec236c8dd1c62a7a4da7c65b2fdbb7c1) Thanks [@&#8203;florian-lefebvre](https://github.com/florian-lefebvre)! - Adds a `fetch()` function to the font provider `init()` context

  This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

  ```ts
  import type { FontProvider } from 'astro';
  import type { InitializedProvider } from 'unifont';
  import { acmeProvider } from '@acme/unifont-provider';

  export function acmeFontProvider(): FontProvider {
  	const provider = acmeProvider();
  	let initializedProvider: InitializedProvider | undefined;
  	return {
  		name: provider._name,
  		async init(context) {
  			initializedProvider = await provider(context);
  		},
  		// ...
  	};
  }
  ```

- [#&#8203;18015](https://github.com/withastro/astro/pull/18015) [`0b30239`](https://github.com/withastro/astro/commit/0b302391059dbc4f8ece24d7b44599c7ec9fef24) Thanks [@&#8203;florian-lefebvre](https://github.com/florian-lefebvre)! - Adds `experimental.redirectPage`, letting you provide your own `src/pages/3xx.astro` in place of the redirect page Astro generates in static builds.

  A static site has no server to send an HTTP `Location` header, so Astro generates a small HTML page with a `<meta http-equiv="refresh">` tag for each redirect it builds:

  - Your [`redirects`](https://docs.astro.build/en/reference/configuration-reference/#redirects) entries
  - `Astro.redirect()` calls in prerendered pages
  - i18n redirects

  That page's markup, wording, and refresh delay were fixed, so you could not brand or translate it.

  To enable this feature, add the experimental flag to your Astro config:

  ```js
  // astro.config.mjs
  import { defineConfig } from 'astro/config';

  export default defineConfig({
    experimental: {
      redirectPage: true,
    },
  });
  ```

  Then create `src/pages/3xx.astro`. Astro renders it once per redirect, passing that redirect's details as props:

  ```astro
  ---
  // src/pages/3xx.astro
  import type { RedirectPageProps as Props } from 'astro';

  const { from, to, status, delay } = Astro.props;
  ---

  <html lang="en">
    <head>
      <meta http-equiv="refresh" content={`${delay};url=${to}`} />
      <meta name="robots" content="noindex" />
      <title>Redirecting…</title>
    </head>
    <body>
      <p>This page has moved. <a href={to}>Continue to {to}</a>.</p>
    </body>
  </html>
  ```

  Your page must render a `<meta http-equiv="refresh">` tag pointing at `to`, because in a static build that tag is the redirect. Astro logs a warning during the build if it is missing.

  See the [experimental redirect page documentation](https://docs.astro.build/en/reference/experimental-flags/redirect-page/) for more information.

- [#&#8203;18265](https://github.com/withastro/astro/pull/18265) [`910ee69`](https://github.com/withastro/astro/commit/910ee69147c4c2460f2b31a294bc70c5269f44d4) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Adds a `notFound()` handler to `astro/fetch` and `astro/hono` that renders the custom 404 page when no route matches, including a prerendered `404.astro`

  Add it before `pages()` in a custom worker or server entrypoint that does not run inside `App.render`, such as a Hono app used directly as a Cloudflare worker. Without it, `pages()` and `middleware()` return an empty 404 with an internal `X-Astro-Error` header for unmatched routes. `astro()` already includes this handling.

  ```ts
  import { Hono } from 'hono';
  import { notFound, pages } from 'astro/hono';
  import { cf } from '@astrojs/cloudflare/hono';

  const app = new Hono();
  app.use(cf());
  app.use(notFound());
  app.use(pages());
  export default app;
  ```

- [#&#8203;18177](https://github.com/withastro/astro/pull/18177) [`7d814e5`](https://github.com/withastro/astro/commit/7d814e5ac3e7c84b4e4fd4e6c7cc6820f553742c) Thanks [@&#8203;Princesseuh](https://github.com/Princesseuh)! - Adds support for separate `build` and `runtime` image services

  `image.service` now also accepts a `build` and a `runtime` service. The `build` service optimizes images on prerendered pages when you build your site, and is also used during development. The `runtime` service handles images on on-demand rendered pages and the image endpoint of your deployed site.

  The following example uses Sharp to optimize images on prerendered pages, and an image CDN for on-demand rendered pages:

  ```js
  // astro.config.mjs
  import { defineConfig } from 'astro/config';

  export default defineConfig({
    image: {
      service: {
        build: { entrypoint: 'astro/assets/services/sharp' },
        runtime: { entrypoint: 'my-image-cdn-service' },
      },
    },
  });
  ```

##### Changes for integration authors

`config.image.service` keeps the shape the user configured it with. When a project sets `build` and `runtime` services, `config.image.service.entrypoint` and `config.image.service.config` are `undefined`.

If your integration reads `image.service`, check for the `runtime` property to get the service you need:

```ts
'astro:config:done': ({ config }) => {
  const { service } = config.image;
  const runtimeService = 'runtime' in service ? service.runtime : service;

  if (runtimeService.entrypoint === 'astro/assets/services/sharp') {
    // ...
  }
},
```

Setting `image.service` with `updateConfig()` replaces the existing service instead of merging with it when the two use different shapes. For example, setting a single service in a project that uses `build` and `runtime` services replaces both.

- [#&#8203;18277](https://github.com/withastro/astro/pull/18277) [`2715958`](https://github.com/withastro/astro/commit/2715958666b0a706b069d0592da3a070b3796a9b) Thanks [@&#8203;florian-lefebvre](https://github.com/florian-lefebvre)! - Increases the minimum Node.js version to 22.22.0

  The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's [Node.js support policy](https://docs.astro.build/en/upgrade-astro/#support).

- [#&#8203;18313](https://github.com/withastro/astro/pull/18313) [`71e2b24`](https://github.com/withastro/astro/commit/71e2b24bb365e5a8809fc0432716f91ecc6d8ab5) Thanks [@&#8203;matthewp](https://github.com/matthewp)! - Allows integrations to control where Astro writes client, server, and prerender build output.

  Custom prerenderers can access the final output locations through the new `outputDirectories` context:

  ```ts
  setPrerenderer((defaultPrerenderer, { outputDirectories }) => {
    const { client, server, prerender } = outputDirectories

    return createPrerenderer({
      defaultPrerenderer,
      client,
      server,
      prerender,
    })
  })
  ```

- [#&#8203;18177](https://github.com/withastro/astro/pull/18177) [`7d814e5`](https://github.com/withastro/astro/commit/7d814e5ac3e7c84b4e4fd4e6c7cc6820f553742c) Thanks [@&#8203;Princesseuh](https://github.com/Princesseuh)! - Lets custom prerenderers report the images used on prerendered pages

  Astro now generates images on prerendered pages from the image information that a prerenderer's `getStaticPaths()` and `render()` return. If your prerenderer wraps Astro's default one, pass this information through:

  ```js
  setPrerenderer((defaultPrerenderer) => ({
    name: 'my-prerenderer',
    async setup() {
      await defaultPrerenderer.setup?.();
    },
    async getStaticPaths() {
      const result = await defaultPrerenderer.getStaticPaths();
      const { paths, metadata } = Array.isArray(result) ? { paths: result } : result;
      return { paths: paths.filter(({ pathname }) => !pathname.startsWith('/drafts')), metadata };
    },
    render(request, options) {
      return defaultPrerenderer.render(request, options);
    },
    async teardown() {
      await defaultPrerenderer.teardown?.();
    },
  }));
  ```

  Returning a plain array from `getStaticPaths()` or a plain `Response` from `render()` still works, but is deprecated: images used on those pages are not generated.

- [#&#8203;17932](https://github.com/withastro/astro/pull/17932) [`b905ff1`](https://github.com/withastro/astro/commit/b905ff1a8649b7a9a9056d9b05ca25ae7b3c07a1) Thanks [@&#8203;Princesseuh](https://github.com/Princesseuh)! - Adds support for experimental parallel prerendering

  This experimental feature makes `astro build` render your static pages in parallel, using multiple CPU cores at once instead of one. On sites with many pages, this can significantly reduce build times, at the cost of higher memory usage.

  To enable this feature, add the experimental flag in your Astro config:

  ```js
  // astro.config.mjs
  import { defineConfig } from 'astro/config';

  export default defineConfig({
    experimental: {
      parallelPrerender: true,
    },
  });
  ```

  By default, Astro uses all available CPU cores but one. Each additional worker increases the memory used by your build. If your build runs out of memory, or does not get faster, set `workers` to a lower number:

  ```js
  // astro.config.mjs
  import { defineConfig } from 'astro/config';

  export default defineConfig({
    experimental: {
      parallelPrerender: {
        workers: 4,
      },
    },
  });
  ```

  Each worker renders as many pages at once as your [`build.concurrency`](https://docs.astro.build/en/reference/configuration-reference/#buildconcurrency) setting allows.

  This feature has no effect when your adapter provides its own way of prerendering pages. Among official adapters, this only applies to `@astrojs/cloudflare`. Astro logs a warning during the build when the flag is ignored.

  For more information on enabling and using this feature in your project, see the [experimental parallel prerendering docs](https://docs.astro.build/en/reference/experimental-flags/parallel-prerender/).

##### Patch Changes

- [#&#8203;18313](https://github.com/withastro/astro/pull/18313) [`71e2b24`](https://github.com/withastro/astro/commit/71e2b24bb365e5a8809fc0432716f91ecc6d8ab5) Thanks [@&#8203;matthewp](https://github.com/matthewp)! - Fixes deployment integrations being unable to use Vite manifests when preparing build output

- [#&#8203;18270](https://github.com/withastro/astro/pull/18270) [`0c3bf11`](https://github.com/withastro/astro/commit/0c3bf116ee70aae4772313fc167a372c7d54869e) Thanks [@&#8203;ArmandPhilippot](https://github.com/ArmandPhilippot)! - Fixes the JSDoc for CSP utilities to point to the render context reference in docs.

- [#&#8203;18368](https://github.com/withastro/astro/pull/18368) [`1f04637`](https://github.com/withastro/astro/commit/1f04637a6ca23b59e8982424248ead47d6a3ec31) Thanks [@&#8203;43081j](https://github.com/43081j)! - Replaces internal use of `find-proc` with `tinyps`.

- [#&#8203;18355](https://github.com/withastro/astro/pull/18355) [`59b9cc0`](https://github.com/withastro/astro/commit/59b9cc00726495bb45f5c4b000dbbb7b5a19d662) Thanks [@&#8203;matthewp](https://github.com/matthewp)! - Fixes prerender errors being silently swallowed when using a custom `src/fetch.ts` with an adapter that prerenders in its own runtime, such as `@astrojs/cloudflare`. Previously, a page that threw during prerendering was written as an empty HTML file and the build succeeded. The build now fails with the underlying error.

- [#&#8203;18177](https://github.com/withastro/astro/pull/18177) [`7d814e5`](https://github.com/withastro/astro/commit/7d814e5ac3e7c84b4e4fd4e6c7cc6820f553742c) Thanks [@&#8203;Princesseuh](https://github.com/Princesseuh)! - Fixes original images being kept despite only `width` or `height` being read.

- [#&#8203;18353](https://github.com/withastro/astro/pull/18353) [`af54bfa`](https://github.com/withastro/astro/commit/af54bfaebff9180cb96822c0da11737b4b26e65a) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes `glob()` loader swallowing rendering errors during content sync, which allowed `astro build` to exit successfully (code 0) even when a remark/rehype plugin threw an error

- [#&#8203;18271](https://github.com/withastro/astro/pull/18271) [`23e8e28`](https://github.com/withastro/astro/commit/23e8e28c22effe006fe19abb193802e2fec8eaab) Thanks [@&#8203;ArmandPhilippot](https://github.com/ArmandPhilippot)! - Fixes the `sync` command description in `astro help`, which only mentioned content collections.

- Updated dependencies \[[`b7a1bd9`](https://github.com/withastro/astro/commit/b7a1bd99ac7c68cf36078058f15f1bd1fab4cbe8), [`2715958`](https://github.com/withastro/astro/commit/2715958666b0a706b069d0592da3a070b3796a9b)]:
  - [@&#8203;astrojs/internal-helpers](https://github.com/astrojs/internal-helpers)@0.13.0
  - [@&#8203;astrojs/markdown-satteri](https://github.com/astrojs/markdown-satteri)@0.4.4
  - [@&#8203;astrojs/telemetry](https://github.com/astrojs/telemetry)@3.4.0

</details>

<details>
<summary>axllent/mailpit</summary>

### [`v1.31.6`](https://github.com/axllent/mailpit/blob/HEAD/CHANGELOG.md#v1316)

[Compare Source](https://github.com/axllent/mailpit/compare/v1.31.5...v1.31.6)

##### Fix

- Remove expired envelope cache entries and clear them on auto-prune ([#&#8203;748](https://github.com/axllent/mailpit/issues/748))

</details>

<details>
<summary>eslint/eslint (eslint)</summary>

### [`v10.13.0`](https://github.com/eslint/eslint/releases/tag/v10.13.0)

[Compare Source](https://github.com/eslint/eslint/compare/v10.12.0...v10.13.0)

##### Features

- [`48d5cc4`](https://github.com/eslint/eslint/commit/48d5cc47e43478670ccf95a74f7a73e8408152b5) feat: report references inside IIFEs in `no-use-before-define` ([#&#8203;21238](https://github.com/eslint/eslint/issues/21238)) (Irfan fandi)
- [`a39d9fb`](https://github.com/eslint/eslint/commit/a39d9fb1fdb5db546f6407580cac531ba3370450) feat: add `globalThis` to `no-obj-calls` ([#&#8203;21382](https://github.com/eslint/eslint/issues/21382)) (synthex-byte)
- [`66ac583`](https://github.com/eslint/eslint/commit/66ac58383e076940c11a5d7213ad079028d1140e) feat: check `yield*` expressions in `no-unsafe-optional-chaining` ([#&#8203;21399](https://github.com/eslint/eslint/issues/21399)) (xbinaryx)

##### Bug Fixes

- [`87bd2ce`](https://github.com/eslint/eslint/commit/87bd2cef7b2309739c29598fb2be335f4bed71a3) fix: avoid redeclared `let` when `no-var` and `one-var` fix together ([#&#8203;21389](https://github.com/eslint/eslint/issues/21389)) (Daniel Pinto)

##### Documentation

- [`4783a68`](https://github.com/eslint/eslint/commit/4783a6806fb73ea4843ac46c6ae3d8285f56c288) docs: Update README (GitHub Actions Bot)
- [`43f0ac9`](https://github.com/eslint/eslint/commit/43f0ac90e7858a834a0e68309e6397fb4cfa72dd) docs: clarify parameter description in `getText` ([#&#8203;21287](https://github.com/eslint/eslint/issues/21287)) (lumir)

##### Chores

- [`b59d889`](https://github.com/eslint/eslint/commit/b59d889c7c18d8c73144e6ba46e9e7f3e7da0196) chore: update github/codeql-action action to v4.38.3 ([#&#8203;21412](https://github.com/eslint/eslint/issues/21412)) (renovate\[bot])
- [`95e51a0`](https://github.com/eslint/eslint/commit/95e51a0518b15015304eca9844b3f64c1fc167ca) ci: re-enable `@typescript-eslint/typescript-eslint` in ecosystem tests ([#&#8203;21410](https://github.com/eslint/eslint/issues/21410)) (Francesco Trotta)
- [`317fcb3`](https://github.com/eslint/eslint/commit/317fcb365f19e912a60d171a9d5a8d1f16fe4660) chore: update ecosystem plugins ([#&#8203;21409](https://github.com/eslint/eslint/issues/21409)) (ESLint Bot)
- [`b92decf`](https://github.com/eslint/eslint/commit/b92decf8ead7cc4082a18a4a0ab28f3c7c589887) perf: skip no-redeclare scan for single-declaration variables ([#&#8203;21365](https://github.com/eslint/eslint/issues/21365)) (James Ross)
- [`47b7063`](https://github.com/eslint/eslint/commit/47b7063b3f3f7bc7a5bcb87c082577e4e8b96e24) chore: update dependency [@&#8203;eslint/json](https://github.com/eslint/json) to ^2.1.1 ([#&#8203;21398](https://github.com/eslint/eslint/issues/21398)) (renovate\[bot])
- [`e5aea41`](https://github.com/eslint/eslint/commit/e5aea414cc00555ecd43f6e608bf80e0f9a6d4d6) chore: update ecosystem plugins ([#&#8203;21390](https://github.com/eslint/eslint/issues/21390)) (ESLint Bot)

</details>

<details>
<summary>meilisearch/meilisearch (getmeili/meilisearch)</summary>

### [`v1.55.0`](https://github.com/meilisearch/meilisearch/releases/tag/v1.55.0): 🔭

[Compare Source](https://github.com/meilisearch/meilisearch/compare/v1.54.3...v1.55.0)

##### 🌈 Improvements

##### Preview the effect of a dynamic search rule

Apply an inline-specified dynamic search rule to a search query.

Search query objects in the following endpoints now have an additional, optional `inlineRule` parameter.

When present and not `null`, then Meilisearch will check if query satisfies the conditions of the dynamic search rule specified in `inlineRule`, and if so will apply the actions of the rule as if it had been sent to the `PATCH /dynamicSearchRule/{:uid}` endpoint.

Additionally, if the `Meili-Include-Metadata` header is present in the request with the value `true`, then the `metadata` in the response will contain information about whether the conditions of the inline rule were satisfied and if not why.

Meilisearch Cloud will use this backend feature to implement a preview UI for dynamic search rules.

Using `inlineRule` requires Meilisearch Enterprise Edition and the `dynamicSearchRules` experimental feature.

By [@&#8203;dureuill](https://github.com/dureuill) in [#&#8203;6669](https://github.com/meilisearch/meilisearch/pull/6669)

##### Details

1. There is a new `InlineRule` object with the following field:
   1. `uid`, string, mandatory: unique ID of the rule. If there is already a rule with this id, then the inline rule will replace the existing rule for the duration of this search query.
   2. `active`, boolean, optional, defaults to `true`: whether the rule is active. The actions of an inactive inline rule never apply to the search, but its conditions are still checked
   3. `conditions`: `RuleConditions` object, identical to the `conditions` field in the body of `PATCH /dynamic-search-rules/{:uid}`
   4. `actions`: `RuleActions` object, identical to the `actions` field in the body of `PATCH /dynamic-search-rules/{:uid}`
   5. `precedence`: integer, optional, identical to the `precedence` field in the body of `PATCH /dynamic-search-rules/{:uid}`
2. The `POST /indexes/{:indexUid}/search` body has an additional, optional (defaults to `null`) `inlineRule` field which is an `InlineRule` object.
3. In the `POST /multi-search` body, the objects inside the `queries` array have an additional, optional (defaults to `null`) `inlineRule` field which is an `InlineRule` object.

##### Examples

<details>

<summary>Passing a search rule specific to the user making the request</summary>

```jsonc
// POST /indexes/movies/search
{
  "q": "super hero",
  "inlineRule": {
    "uid": "user-likes-batman",
    "actions": {
      "scale": [
        {
          // filter recent Batman movies
          "filter": "hero = batman AND release_time = fresh",
          "weight": 1.2 // moderate relevancy boost
        }
      ]
    }
  }
}
```

</details>

<details>

<summary>Previewing the effect of a search rule</summary>

```jsonc
// POST /multi-search -H 'Meili-Include-Metadata: true`

{
  "queries": [
    // base query without inline rule
    {
      "q": "fashion",
      "filter": "color = blue AND category = shirt"
    },
    // same query with inline rule
    {
      "q": "fashion",
      "filter": "color = blue AND category = shirt",
      "inlineRule": {
        "uid": "special-sales",
        "conditions": {
          "query": {
            "words": "pants",
          },
            "filter": {
              "values": {
                "color":  "yellow",
                "stock_intent": "destock"
            }
          }
        }
      }
    }
  ]
}
```

Response:

```jsonc
{
  // [ ... ] some other fields
  "results": [
    // results without the rule
    {
      "hits": [ ... ] // documents returned without the rule
    },
    // results with the rule
    {
      // [...] some other fields
      "hits": [...], // documents returned with the rule. Here the same, because the conditions of the rules are not satisfied
      "metadata": {
        // [...] some other fields
        "inlineRuleConditionOutcomes":  {
          "satisfiesActiveCondition": true,
          "satisfiesQueryWordsCondition": {
            "missingWord": "pants"
          },
        "satifiesFilterCondition": {
          "missingConstraintOnField": {
            "field":  "stock_intent"
          },
          "unmetConstraintOnField":
            "field": "color"
          }
        }
      }
    }
  ]
}
```

</details>

##### Improve `showPerformanceDetails` at search time

When setting `showPerformanceDetails` to `true` in a search request, the response's `performanceDetails` will now display an entry for the facet distribution computation.

<details><summary>New trace entries</summary>

**Request**

```bash
curl -X POST 'http://localhost:7700/indexes/movies/search' \
  -H 'Content-Type: application/json' \
  -d '{
    "q": "batman",
    "facets": ["genres"],
    "showPerformanceDetails": true,
    "limit": 3
  }'
```

**Response**

```json
{
    "hits": [
		# ...
    ],
    "query": "batman",
    "processingTimeMs": 4,
    "limit": 3,
    "offset": 0,
    "estimatedTotalHits": 68,
    "facetDistribution": {
        "genres": {
			#...
        }
    },
    "facetStats": {},
    "requestUid": "01a12f80-0e1b-7632-b4f3-c8d4914048c9",
    "performanceDetails": {
        "wait in queue": "68.58µs",
        "preprocess filters > prepare": "100.25µs",
        "preprocess filters": "100.42µs",
        "process > prepare": "115.54µs",
        "process > send to remote": "102.71µs",
        "process > execute local > load field ids map": "30.88µs",
        "process > execute local > query[0] > tokenize query": "265.38µs",
        "process > execute local > query[0] > evaluate query": "890.96µs",
        "process > execute local > query[0] > keyword ranking": "425.04µs",
        "process > execute local > query[0]": "2.95ms",
        "process > execute local > pin hits": "9.92µs",
        "process > execute local > format": "94.62µs",
        "process > execute local > facet distribution > compute facet distribution": "315.75µs",
        "process > execute local > facet distribution > compute facet stats": "27.71µs",
        "process > execute local > facet distribution": "432.62µs",
        "process > execute local": "3.81ms",
        "process > wait for remote": "50.96µs",
        "process > merge": "905.62µs",
        "process": "5.07ms"
    }
}
```

Three additional steps:

```json
        "process > execute local > facet distribution > compute facet distribution": "315.75µs",
        "process > execute local > facet distribution > compute facet stats": "27.71µs",
        "process > execute local > facet distribution": "432.62µs",
```

</details>

By [@&#8203;ManyTheFish](https://github.com/ManyTheFish) in [#&#8203;6644](https://github.com/meilisearch/meilisearch/pull/6644)

##### 🦋 Fixes

##### Avoid panic at search time during formatting

Documents containing raw unicode codepoints (e.g. `\u03b1`) would cause a panic at search time when formatting results for highlighting when using some segmenters.

A failure at the segmenter's level no longer causes a panic.

By [@&#8203;dureuill](https://github.com/dureuill) in [#&#8203;6673](https://github.com/meilisearch/meilisearch/pull/6673)

##### Fix search performance of ranking score threshold

> \[!IMPORTANT]\
> This fix modifies the relevancy of the engine in some circumstances. This is allowed as per our back-compatiblity policy.

To avoid a performance sink when using the `rankingScoreThreshold` parameter in a search, Meilisearch now guarantees that **the search will stop after evaluating the first document whose score is below the threshold**. Previously Meilisearch would try to evaluate more documents, which could lead to evaluating all documents in the database, causing a very long search time.

By [@&#8203;ManyTheFish](https://github.com/ManyTheFish) in [#&#8203;6661](https://github.com/meilisearch/meilisearch/pull/6661)

##### Prevent unsupported `binaryQuantization` deactivation in embedder settings

> \[!WARNING]\
> This fix introduces a breaking change in the Meilisearch API. Because the previous behavior would corrupt the embeddings in the database, this is allowed by our back-compatibility policy.

Since the exact value of embeddings is not retained when the embedder is configured for binary quantize embeddings, disabling the binary quantization on an index is not allowed.

Unfortunately, an oversight in the API allowed to accidentally disable binary quantization by passing `binaryQuantization: null` in a setting update. This now results in an error.

By [@&#8203;dureuill](https://github.com/dureuill) in [#&#8203;6656](https://github.com/meilisearch/meilisearch/pull/6656)

##### 🔩 Miscellaneous

- Maintainability: replace some `unreachable!()` code paths with static typing  by [@&#8203;dureuill](https://github.com/dureuill) in [#&#8203;6670](https://github.com/meilisearch/meilisearch/pull/6670)
- Add GHA to enforce benchmarks label on each PR by [@&#8203;curquiza](https://github.com/curquiza) in [#&#8203;6663](https://github.com/meilisearch/meilisearch/pull/6663)
- Add link to MCP guide in generated API reference by [@&#8203;Strift](https://github.com/Strift) in [#&#8203;6650](https://github.com/meilisearch/meilisearch/pull/6650)
- Add link to agentic search demo & fix links by [@&#8203;Strift](https://github.com/Strift) in [#&#8203;6655](https://github.com/meilisearch/meilisearch/pull/6655)
- Small changes to CONTRIBUTING.md by [@&#8203;dureuill](https://github.com/dureuill) in [#&#8203;6668](https://github.com/meilisearch/meilisearch/pull/6668)
- Bump actions/setup-java from 5.7.0 to 6.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6662](https://github.com/meilisearch/meilisearch/pull/6662)
- Fix OpenAPI docs by [@&#8203;curquiza](https://github.com/curquiza) in [#&#8203;6667](https://github.com/meilisearch/meilisearch/pull/6667)
- CI: Fix flaky tests by [@&#8203;dureuill](https://github.com/dureuill) in [#&#8203;6674](https://github.com/meilisearch/meilisearch/pull/6674)

**Full Changelog**: <https://github.com/meilisearch/meilisearch/compare/v1.54.3...v1.55.0>

</details>

<details>
<summary>nodejs/node (node)</summary>

### [`v24.22.0`](https://github.com/nodejs/node/releases/tag/v24.22.0): 2026-10-14, Version 24.22.0 'Krypton' (LTS), @&#8203;richardlau prepared by @&#8203;aduh95

[Compare Source](https://github.com/nodejs/node/compare/v24.21.0...v24.22.0)

##### Notable Changes

- \[[`ddbf974b47`](https://github.com/nodejs/node/commit/ddbf974b47)] - **(SEMVER-MINOR)** **crypto**: add `crypto.parsePKCS12()` (Brian Muenzenmeyer) [#&#8203;65627](https://github.com/nodejs/node/pull/65627)
- \[[`c162c68ff0`](https://github.com/nodejs/node/commit/c162c68ff0)] - **(SEMVER-MINOR)** **crypto**: add a generic MAC API (Filip Skokan) [#&#8203;65553](https://github.com/nodejs/node/pull/65553)
- \[[`a4ab3d84d7`](https://github.com/nodejs/node/commit/a4ab3d84d7)] - **(SEMVER-MINOR)** **crypto**: discover ciphers from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`c2f1e829ea`](https://github.com/nodejs/node/commit/c2f1e829ea)] - **(SEMVER-MINOR)** **crypto**: discover hashes from OpenSSL providers (Filip Skokan) [#&#8203;65484](https://github.com/nodejs/node/pull/65484)
- \[[`51aad5a80d`](https://github.com/nodejs/node/commit/51aad5a80d)] - **(SEMVER-MINOR)** **crypto**: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) [#&#8203;63411](https://github.com/nodejs/node/pull/63411)
- \[[`d11c65d2f2`](https://github.com/nodejs/node/commit/d11c65d2f2)] - **doc**: add araujogui to collaborators (Guilherme Araújo) [#&#8203;66090](https://github.com/nodejs/node/pull/66090)
- \[[`acc1578179`](https://github.com/nodejs/node/commit/acc1578179)] - **doc**: deprecate `Server.prototype._listen2` in `node:net` (Antoine du Hamel) [#&#8203;65593](https://github.com/nodejs/node/pull/65593)
- \[[`a7f8de6362`](https://github.com/nodejs/node/commit/a7f8de6362)] - **(SEMVER-MINOR)** **net**: support sending `net.BoundSocket` to threads and child processes (Guy Bedford) [#&#8203;64725](https://github.com/nodejs/node/pull/64725)
- \[[`60c3eb61bd`](https://github.com/nodejs/node/commit/60c3eb61bd)] - **(SEMVER-MINOR)** **perf_hooks**: implement `SlidingWindowHistogram` (James M Snell) [#&#8203;65825](https://github.com/nodejs/node/pull/65825)
- \[[`6b3e6f9d5c`](https://github.com/nodejs/node/commit/6b3e6f9d5c)] - **(SEMVER-MI…
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

author ready PRs with CI started, the required approvals, and no outstanding review comments. backported-to-v24.x PRs backported to the v24.x-staging branch. crypto Issues and PRs related to the crypto subsystem. dont-land-on-v22.x PRs that should not land on the v22.x-staging branch and should not be released in v22.x. lib / src Issues and PRs involving general changes in the lib/ or src/ directories. needs-ci PRs that need a full CI run. review wanted PRs that need review. semver-minor PRs that contain new features and should be released in the next minor version.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

crypto: support AES-*-SIV and AES-*-GCM-SIV in createCipheriv()

6 participants