Notable Changes This release marks the transition of Node.js 16.x into Long Term Support (LTS) with the codename ‘Gallium’. The 16.x release line now moves into “Active LTS” and will remain so until October 2022. After that time, it will move into “Maintenance” until end of life in April 2024. Read more…
#410 — October 21, 2021 Read on the Web Node Weekly Node v17 (Current) Released — Being sixteen flew by in a flash for me at least, but so too has it for Node 16 remaining the cutting edge ‘release’ line. v17 now takes over that role with Node 16 Read more…
Notable Changes Fixed distribution for native addon builds This release fixes an issue introduced in Node.js v17.0.0, where some V8 headers were missing from the distributed tarball, making it impossible to build native addons. These headers are now included. #40526 Fixed stream issues Fixed a regression in 1stream.promises.pipeline , which Read more…
Notable Changes Experimental ESM Loader Hooks API Node.js ESM Loader hooks have been consolidated to represent the steps involved needed to facilitate future loader chaining: 1resolve : 1resolve [+ 1getFormat ] 1load : 1getFormat + 1getSource + 1transformSource For consistency, 1getGlobalPreloadCode has been renamed to 1globalPreload . A loader exporting Read more…
Deno 1.15, the latest release of the JavaScript runtime positioned as a secure alternative to Node.js, features a new flag that makes it easier to run Node.js programs in Deno. Deno 1.15 was published October 12. When the 1–compat flag is present, Deno will automatically set up Node global variables, Read more…
Node.js 17 has been released. The latest version of the popular JavaScript runtime brings more “promisified” APIs and support for OpenSSL 3.0. Downloadable from the Node.js website, Node.js 17 follows a strategic initiative to provide promise-based core APIs. This version adds promise-based APIs for the Readline module, which offers an Read more…
Notable Changes Deprecations and Removals [ 1f182b9b29f ] – (SEMVER-MAJOR) dns: runtime deprecate type coercion of 1dns.lookup options (Antoine du Hamel) #39793 [ 14b030d0573 ] – doc: deprecate (doc-only) http abort related (dr-js) #36670 [ 136e2ffe6dc ] – (SEMVER-MAJOR) module: subpath folder mappings EOL (Guy Bedford) #40121 [ 164287e4d45 ] Read more…
TypeScript 4.5, a planned upgrade to Microsoft’s strongly typed language based on JavaScript, is set to support ECMAScript modules in Node.js. TypeScript 4.5 became available as a beta release on October 1. Node.js, which can work with TypeScript, has been working to support ECMAScript modules (ESM), which enable packaging of Read more…
#409 — October 14, 2021 Read on the Web Node Weekly The GitHub Advisory Database Now Powers 1npm audit — 1npm audit is a command you can run to scan your project’s dependencies for known security vulnerabilities. Edward Thomson (GitHub) Node 16.11.1, 14.18.1, and 12.22.7 Released — Billed as the ‘October Read more…
Notable changes CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium) The http parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS). More details will be available at CVE-2021-22959 after publication. CVE-2021-22960: HTTP Request Smuggling Read more…
