OpenSSL update assessment, and Node.js project plans

Summary The OpenSSL Security releases of May 3 2022 affects Node.js 17.x and 18.x but highest serverity is “Low” Analysis Our assessment of the security advisory is: The 1c_rehash script allows command injection (CVE-2022-1292) Node.js doesn’t use or ship the 1c_rehash script. Therefore, Node.js is not affected 1OCSP_basic_verify may incorrectly Read more…

Node’s new CLI test runner

#​436 — May 5, 2022 Read on the Web Node Weekly Node v18.1.0 (Current) Released — There’s an initial version of a CLI based test runner (which you start with 1node –test – see docs here) and there have also been further developments on implementing the WebAssembly Web API. Michaël Zasso The Read more…

Node v14.19.2 (LTS)

Notable Changes doc: New release key for Bryan English Learn more at: https://github.com/nodejs/node/pull/42102 Contributed by Bryan English (@bengl) npm: Upgrade 1npm to 1v6.14.17 . Learn more at: https://github.com/nodejs/node/pull/42900 Contributed by Ruy Adorno (@ruyadorno) V8: V8 had a stack overflow issue affecting the 1vm module, cherry-picking 1cc9a8a37445e from V8 solves this Read more…

Node v18.1.0 (Current)

Notable Changes [ 1c46e7bbf69 ] – doc: add @kuriyosh to collaborators (Yoshiki Kurihara) #42824 [ 1b0f7c4c8f9 ] – (SEMVER-MINOR) lib,src: implement WebAssembly Web API (Tobias Nießen) #42701 [ 178a860ae58 ] – (SEMVER-MINOR) test_runner: add initial CLI runner (Colin Ihrig) #42658 [ 1bf9240ae8c ] – (SEMVER-MINOR) worker: add hasRef() to MessagePort Read more…

Deno 1.21 improves REPL, error handling

Deno 1.21 has been released. This latest upgrade to the JavaScript/TypeScript runtime features improvements to the REPL (read-evaluate-print loop) and a move away from default type-checking. The Deno REPL is a tool for prototyping and trying out new things. With Deno 1.21, an 1-–eval-file flag can be used with the Read more…

Now Node 16 gets the Fetch API too

🇺🇦 #​435 — April 28, 2022 Read on the Web Node Weekly Node 18’s ‘Prefix-Only’ Core Modules — A look at a new type of core module that can’t be imported quite like the others, e.g. 1import test from ‘node:test’ – what is this unusual package name notation about? Colin Read more…

Node v16.15.0 (LTS)

Notable changes Add fetch API Adds experimental support to the fetch API. This adds the 1–experimental-fetch flag that installs the 1fetch , 1Request , 1Response , 1Headers , and 1FormData globals. (SEMVER-MINOR) add fetch (Michaël Zasso) #41749 (SEMVER-MINOR) add FormData global when fetch is enabled (Michaël Zasso) #41956 Other notable Read more…

Node.js 18 released

🇺🇦 #​434 — April 21, 2022 Read on the Web Node Weekly Node.js 18 (Current) Released — Almost exactly one year after Node 16 and two after Node 14 comes the newest version of Node. It’s a ‘current’ branch release for now, but will become an LTS (Long-Term Support) release Read more…