Node v14.17.3 (LTS)

Notable Changes Node.js 14.17.2 introduced a regression in the Windows installer on non-English locales that is being fixed in this release. There is no need to download this release if you are not using the Windows installer. Commits [ 10f00104a2c ] – win,msi: use localized “Authenticated Users” name (Richard Lau) Read more…

Node v12.22.3 (LTS)

Notable Changes Node.js 12.22.2 introduced a regression in the Windows installer on non-English locales that is being fixed in this release. There is no need to download this release if you are not using the Windows installer. Commits [ 1182f86a4d4 ] – win,msi: use localized “Authenticated Users” name (Richard Lau) Read more…

Node v16.4.1 (Current)

Notable Changes Vulnerabilities fixed: CVE-2021-22918: libuv upgrade – Out of bounds read (Medium) Node.js is vulnerable to out-of-bounds read in libuv’s uv__idna_toascii() function which is used to convert strings to ASCII. This is called by Node’s dns module’s lookup() function and can lead to information disclosures or crashes. You can Read more…

Node v14.17.2 (LTS)

Notable Changes Vulnerabilities fixed: CVE-2021-22918: libuv upgrade – Out of bounds read (Medium) Node.js is vulnerable to out-of-bounds read in libuv’s uv__idna_toascii() function which is used to convert strings to ASCII. This is called by Node’s dns module’s lookup() function and can lead to information disclosures or crashes. You can Read more…

Node v12.22.2 (LTS)

Notable Changes Vulnerabilities fixed: CVE-2021-22918: libuv upgrade – Out of bounds read (Medium) Node.js is vulnerable to out-of-bounds read in libuv’s uv__idna_toascii() function which is used to convert strings to ASCII. This is called by Node’s dns module’s lookup() function and can lead to information disclosures or crashes. You can Read more…

Node v16.4.0 (Current)

Notable changes async_hooks: stabilize part of AsyncLocalStorage (Vladimir de Turckheim) #37675 deps: upgrade npm to 7.18.1 (npm-robot) #39065 update V8 to 9.1.269.36 (Michaël Zasso) #38273 dns: allow 1–dns-result-order to change default dns verbatim (Ouyang Yadong) #38099 Commits [ 1d2b972ee52 ] – async_hooks: check for empty contexts before removing (Bryan English) Read more…

Node v14.17.1 (LTS)

Notable Changes [ 16035492c8f ] – deps: update ICU to 69.1 (Michaël Zasso) #38178 [ 19417fd0bc8 ] – errors: align source-map stacks with spec (Benjamin Coe) #37252 Commits [ 187fa636953 ] – assert: refactor to use more primordials (Antoine du Hamel) #36234 [ 1cfff3b4462 ] – assert: refactor to avoid Read more…

Node v16.3.0 (Current)

Notable Changes cli: add -C alias for –conditions flag (Guy Bedford) #38755 deps: add workspaces support to npm install commands (Ruy Adorno) #38750 Commits [ 14e58ec4aa6 ] – benchmark: output JSON-compatible numbers (Michaël Zasso) #38778 [ 17a9d0fd5a9 ] – benchmark: fix http elapsed time (Antoine du Hamel) #38743 [ 1a98d631905 Read more…

Node v16.2.0 (Current)

Notable Changes [ 136b948560c ] – (SEMVER-MINOR) async_hooks: use new v8::Context PromiseHook API (Stephen Belanger) #36394 [ 1c0deeeacb2 ] – lib: support setting process.env.TZ on windows (James M Snell) #38642 [ 14c4902748c ] – (SEMVER-MINOR) module: add support for 1URL to 1import.meta.resolve (Antoine du Hamel) #38587 [ 1c182198c44 ] – Read more…

Node v14.17.0 (LTS)

Notable Changes Diagnostics channel (experimental module) 1diagnostics_channel is a new experimental module that provides an API to create named channels to report arbitrary message data for diagnostics purposes. The module was initially introduced in Node.js v15.1.0 and is backported to v14.17.0 to enable testing it at a larger scale. With Read more…