Notable changes
OpenSSL-3.0.1
OpenSSL-3.0.1 contains a fix for CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl (Moderate). This is a vulnerability in OpenSSL that may be exploited through Node.js. More information can be read here: https://www.openssl.org/news/secadv/20211214.txt.
Contributed by Richard Lau #41177.
Other Notable Changes
-
lib:
- make AbortSignal cloneable/transferable (James M Snell) #41050
-
deps:
- upgrade npm to 8.3.0 (npm team) #41127
-
doc:
- add @bnb as a collaborator (Tierney Cyren) #41100
-
process:
- add
1getActiveResourcesInfo()
(Darshan Sen) #40813
- add
-
timers:
- add experimental scheduler api (James M Snell) #40909
Commits
- [
] – assert: prefer reference comparison over string comparison (Darshan Sen) #41015199fb6d48eb
- [
] – assert: use stricter stack frame detection in .ifError() (Ruben Bridgewater) #410061a7dfa43dc7
- [
] – buffer: fix128761de6d41Blob
constructor on various
1TypedArrays (Irakli Gozalishvili) #40706
- [
] – build: update openssl config generator Dockerfile (Richard Lau) #4117718fcb71a5ab
- [
] – build: use ‘<(python)’ instead of ‘python’ (Cheng Zhao) #4114613a9ffa86db
- [
] – build: fix comment-labeled workflow (Mestery) #41176185f1537c28
- [
] – build: use gh cli in workflows file (Mestery) #40985161c53a667a
- [
] – build: fix commit-queue-rebase functionality (Rich Trott) #4114011fc6fd66ff
- [
] – build: skip documentation generation if no ICU (Rich Trott) #410911831face7d1
- [
] – build: re-enable V8 concurrent marking (Michaël Zasso) #410131c776c9236e
- [
] – build: add12125449f891--without-corepack
(Jonah Snider) #41060
- [
] – build: fail early in test-macos.yml (Rich Trott) #4103516327685363
- [
] – build: add tools/doc to tools.yml updates (Rich Trott) #410361ee4186b305
- [
] – build: update Actions versions (Mestery) #409871db30bc97d0
- [
] – build: set persist-credentials: false on workflows (Rich Trott) #409721db9cef3c4f
- [
] – build: add OpenSSL gyp artifacts to .gitignore (Luigi Pinca) #40967129739f813f
- [
] – build: remove legacy -J test.py option from Makefile/vcbuild (Rich Trott) #4094511b8baf0e4f
- [
] – build: ignore unrelated workflow changes in slow Actions tests (Rich Trott) #4092815c27ec8385
- [
] – build,tools: automate enforcement of emeritus criteria (Rich Trott) #4115518957c9bd1c
- [
] – cluster: use linkedlist for round_robin_handle (twchn) #406151e924dc7982
- [
] – crypto: add missing null check (Michael Dawson) #405981c757fa513e
- [
] – deps: update archs files for quictls/openssl-3.0.1+quic (Richard Lau) #41177135fe14454b
- [
] – deps: upgrade openssl sources to quictls/openssl-3.0.1+quic (Richard Lau) #4117710b2103419f
- [
] – deps: upgrade npm to 8.3.0 (npm team) #411271fae4945ab3
- [
] – deps: upgrade npm to 8.2.0 (npm team) #4106513a1d952e68
- [
] – deps: update Acorn to v8.6.0 (Michaël Zasso) #409931627b5bb718
- [
] – deps: patch V8 to 9.6.180.15 (Michaël Zasso) #409491a2fb12f9c6
- [
] – doc: fix closing parenthesis (AlphaDio) #41190193111e4662
- [
] – doc: add security steward on/offboarding steps (Michael Dawson) #411291f883bf3d12
- [
] – doc: align module resolve algorithm with implementation (Qingyu Deng) #3883711274a25b14
- [
] – doc: update nodejs-sec managers (Michael Dawson) #41128134c6c59014
- [
] – doc: move style guide to findable location (Rich Trott) #411191db26bdb011
- [
] – doc: fix comments in test-fs-watch.js (jakub-g) #4104614369c6d9f6
- [
] – doc: document support building with Python 3.10 on Windows (Christian Clauss) #41098193f5bd34e9
- [
] – doc: add note about pip being required (Piotr Rybak) #406691d8fa227c26
- [
] – doc: remove OpenJSF Slack nodejs from support doc (Rich Trott) #41108195691801f3
- [
] – doc: simplify major release preparation (Bethany Nicolle Griggs) #408161e3ac384d78
- [
] – doc: clarify escaping for ES modules (notroid5) #4107413406910040
- [
] – doc: add @bnb as a collaborator (Tierney Cyren) #411001668284b5a1
- [
] – doc: add explicit declaration of fd with null val (Henadzi) #40704194d09113a2
- [
] – doc: expand entries for isIP(), isIPv4(), and isIPv6() (Rich Trott) #410281b353ded677
- [
] – doc: link to commit queue guide (Geoffrey Booth) #410301f18aa14b1d
- [
] – doc: specify that1681edbe75f1message.socket
can be nulled (Luigi Pinca) #41014
- [
] – doc: fix JSDoc in ESM loaders examples (Mestery) #4098417c41f32f06
- [
] – doc: remove legacy -J test.py option from BUILDING.md (Rich Trott) #40945161b2e2ef9e
- [
] – doc,lib,tools: align multiline comments (Rich Trott) #411091c9b09d124e
- [
] – (SEMVER-MINOR) errors: add support for cause in aborterror (James M Snell) #41008112023dff4b
- [
] – (SEMVER-MINOR) esm: working mock test (Bradley Farias) #392401b0b7943e8f
- [
] – (SEMVER-MINOR) events: propagate abortsignal reason in new AbortError ctor in events (James M Snell) #41008137dbc3b9e9
- [
] – (SEMVER-MINOR) events: propagate weak option for kNewListener (James M Snell) #4089911b8d4e4867
- [
] – (SEMVER-MINOR) fs: accept URL as argument for1bbdcd0513b1fs.rm
and
1fs.rmSync(Antoine du Hamel) #41132
- [
] – fs: fix error codes for146108f8d501fs.cp
(Antoine du Hamel) #41106
- [
] – fs: fix1e25671cddb1length
option being ignored during
1read()(Shinho Ahn) #40906
- [
] – (SEMVER-MINOR) fs: propagate abortsignal reason in new AbortSignal constructors (James M Snell) #4100816eda874be0
- [
] – http: don’t write empty data on req/res end() (Santiago Gimeno) #41116170ed4ef248
- [
] – (SEMVER-MINOR) http2: propagate abortsignal reason in new AbortError constructor (James M Snell) #4100814b3bf7e818
- [
] – inspector: add missing initialization (Michael Dawson) #4102218d87303f76
- [
] – lib: include return types in JSDoc (Rich Trott) #411301b191e66ddf
- [
] – (SEMVER-MINOR) lib: make AbortSignal cloneable/transferable (James M Snell) #410501348707fca6
- [
] – (SEMVER-MINOR) lib: add abortSignal.throwIfAborted() (James M Snell) #4095114ba883d384
- [
] – lib: use consistent types in JSDoc @returns (Rich Trott) #410891cc3e430c11
- [
] – (SEMVER-MINOR) lib: propagate abortsignal reason in new AbortError constructor in blob (James M Snell) #410081a1ed7f2810
- [
] – lib: do not lazy load EOL in blob (Ruben Bridgewater) #4100411572db3e86
- [
] – (SEMVER-MINOR) lib: add AbortSignal.timeout (James M Snell) #40899162c4b4c85b
- [
] – lib,test,tools: use consistent JSDoc types (Rich Trott) #409891f0d874342d
- [
] – meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #41154103e6771137
- [
] – meta: move to emeritus automatically after 18 months (Rich Trott) #411551e26c187b85
- [
] – meta: move silverwind to emeriti (Roman Reiss) #411711b89fb3ef0a
- [
] – meta: update AUTHORS (Node.js GitHub Bot) #4114410fc148321f
- [
] – meta: update AUTHORS (Node.js GitHub Bot) #410881d6d1d6647c
- [
] – meta: move one or more TSC members to emeritus (Node.js GitHub Bot) #409081f30d6bcaff
- [
] – meta: increase security policy response targets (Matteo Collina) #409681033a646d82
- [
] – node-api,doc: document parms which can be optional (Michael Dawson) #4102116b6e1d054e
- [
] – perf_hooks: use spec-compliant193ea1666f61structuredClone
(Michaël Zasso) #40904
- [
] – (SEMVER-MINOR) process: add1d8a21259001getActiveResourcesInfo()
(Darshan Sen) #40813
- [
] – (SEMVER-MINOR) readline: propagate signal.reason in awaitable question (James M Snell) #41008167124ac63a
- [
] – readline: skip escaping characters again (Ruben Bridgewater) #4100518fac878ff5
- [
] – src: fix limit calculation (Michael Dawson) #410261d3de937782
- [
] – src: use a higher limit in the NearHeapLimitCallback (Joyee Cheung) #4104116f0ec9835a
- [
] – src,crypto: remove uses of190097ab8911AllocatedBuffer
from
1crypto_sig(Darshan Sen) #40895
- [
] – stream: add isErrored helper (Robert Nagy) #411211b59c513c31
- [
] – stream: allow readable to end early without error (Robert Nagy) #4088111787bfab68
- [
] – (SEMVER-MINOR) stream: use cause options in AbortError constructors (James M Snell) #41008101e8c15c8a
- [
] – stream: remove whatwg streams experimental warning (James M Snell) #4097110e21c64ae9
- [
] – stream: cleanup eos (Robert Nagy) #409981513305c7d7
- [
] – test: do not load absolute path crypto engines twice (Richard Lau) #411771da8baf4bbb
- [
] – test: skip ESLint tests if no Intl (Rich Trott) #4110511f6a9c3e31
- [
] – test: add missing JSDoc parameter name (Rich Trott) #410571ce656a80b5
- [
] – test: deflake test-trace-atomics-wait (Luigi Pinca) #410181fb8f2e9643
- [
] – test: add auth option case for url.format (Hirotaka Tagawa / wafuwafu13) #405161de1748aca4
- [
] – Revert “test: skip different params test for OpenSSL 3.x” (Daniel Bevenius) #406401943547a0eb
- [
] – (SEMVER-MINOR) timers: add experimental scheduler api (James M Snell) #4090910caa3483d2
- [
] – (SEMVER-MINOR) timers: propagate signal.reason in awaitable timers (James M Snell) #410081e795547651
- [
] – tls: improve handling of shutdown (Jameson Nash) #361111a77cae1ef7
- [
] – tools: update doc to remark-rehype@10.1.0 (Node.js GitHub Bot) #411491db410e7d3e
- [
] – tools: update lint-md-dependencies to rollup@2.61.1 vfile-reporter@7.0.3 (Node.js GitHub Bot) #411501e3870f3f17
- [
] – tools: enable jsdoc/require-returns-type ESLint rule (Rich Trott) #4113016fc92bd191
- [
] – tools: update ESLint to 8.4.1 (Rich Trott) #41114170e6fe860a
- [
] – tools: enable JSDoc check-alignment lint rule (Rich Trott) #41109178894fa888
- [
] – tools: strip comments from lint-md rollup output (Rich Trott) #41092140a773aa29
- [
] – tools: update highlight.js to 11.3.1 (Rich Trott) #4109117b606cfef6
- [
] – tools: enable jsdoc/require-returns-check lint rule (Rich Trott) #41089152633a9e95
- [
] – tools: update ESLint to 8.4.0 (Luigi Pinca) #410851dc0405e7fb
- [
] – tools: enable jsdoc/require-param-name lint rule (Rich Trott) #410571855f15d059
- [
] – tools: use jsdoc recommended rules (Rich Trott) #41057178265e095a
- [
] – tools: rollback highlight.js (Richard Lau) #4107819cfdf15da6
- [
] – tools: remove Babel from license-builder.sh (Rich Trott) #410491fe3e09bb4b
- [
] – tools: udpate packages in tools/doc (Rich Trott) #41036162e0aa9725
- [
] – tools: install and enable JSDoc linting in ESLint (Rich Trott) #410271a959f4fa72
- [
] – tools: include JSDoc in ESLint updating tool (Rich Trott) #410271661960e471
- [
] – tools: ignore unrelated workflow changes in slow Actions tests (Antoine du Hamel) #409901e2922714ee
- [
] – tools: remove unneeded tool in update-eslint.sh (Rich Trott) #4099516525226ff7
- [
] – tools: consolidate ESLint dependencies (Rich Trott) #4099515400b7963d
- [
] – tools: update ESLint update script to consolidate dependencies (Rich Trott) #40995186d5af14bc
- [
] – tools: run ESLint update to minimize diff on subsequent update (Rich Trott) #4099518427099f66
- [
] – tools,test: make -J behavior default for test.py (Rich Trott) #40945182daaa9914
- [
] – url: detect hostname more reliably in url.parse() (Rich Trott) #410311db77780cb9
- [
] – util: serialize falsy cause values while inspecting errors (Ruben Bridgewater) #41097166b5083c1e
- [
] – util: make sure error causes of any type may be inspected (Ruben Bridgewater) #41097109d29ca8d9
- [
] – (SEMVER-MINOR) util: pass through the inspect function to custom inspect functions (Ruben Bridgewater) #410191f5ff88b3cb
- [
] – util: escape lone surrogate code points using .inspect() (Ruben Bridgewater) #410011a0326f0941
- [
] – (SEMVER-MINOR) util: add numericSeparator to util.inspect (Ruben Bridgewater) #41003191df200ad6
- [
] – (SEMVER-MINOR) util: always visualize cause property in errors during inspection (Ruben Bridgewater) #410021da87413257
Windows 32-bit Installer: https://nodejs.org/dist/v17.3.0/node-v17.3.0-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v17.3.0/node-v17.3.0-x64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v17.3.0/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v17.3.0/win-x64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v17.3.0/node-v17.3.0.pkg
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v17.3.0/node-v17.3.0-darwin-arm64.tar.gz
macOS Intel 64-bit Binary: https://nodejs.org/dist/v17.3.0/node-v17.3.0-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v17.3.0/node-v17.3.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v17.3.0/node-v17.3.0-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v17.3.0/node-v17.3.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v17.3.0/node-v17.3.0-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v17.3.0/node-v17.3.0-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v17.3.0/node-v17.3.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v17.3.0/node-v17.3.0.tar.gz
Other release files: https://nodejs.org/dist/v17.3.0/
Documentation: https://nodejs.org/docs/v17.3.0/api/
SHASUMS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53 -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
5300264598a643445378a51bf1d62242281ae602045934bf6fcacf6f6ba3abda node-v17.3.0-aix-ppc64.tar.gz
b504ba3628337f7ac2c67d04bf30e56082942345aa1a50e0e464f51df6662ff3 node-v17.3.0-darwin-arm64.tar.gz
8f19364dd1159ce4ae8cfb3414508ee9092b8d3cf428b13c0d2aec7ac406e1ba node-v17.3.0-darwin-arm64.tar.xz
d4fa7d01c3b08cecdb71eee1da27a5e0e2d31bd25ad3bee1807df95811c2ce3f node-v17.3.0-darwin-x64.tar.gz
eb231bd4ad5950ccb5572fc4bb099266a634d6788559424976c8e9fb7fc320d6 node-v17.3.0-darwin-x64.tar.xz
9cb2ac1e9a3e7df31269699e02dcc55069cd1f27fd0417650fb95acf8f3e7a22 node-v17.3.0-headers.tar.gz
b5f1f5bdb2405e626448100aa50879f859288eee4651a496270fc4c4486b28fc node-v17.3.0-headers.tar.xz
6f236f47fc68fa535bd0f769d9e12767a6b5251875aea2632c227ca55d1ab7ae node-v17.3.0-linux-arm64.tar.gz
ad298da8144635a7ae470b973bddca4270e5a3e5cb919991c367b6e4ea5aa5a9 node-v17.3.0-linux-arm64.tar.xz
f92c17fc61af2a47a9b9e42b8e795abfbe18a1fa4e51de52d7362cae74ad487d node-v17.3.0-linux-armv7l.tar.gz
660e89b1cf388493a9c00e7720b4bfafa903db12d00481ddae9edf22e950b728 node-v17.3.0-linux-armv7l.tar.xz
7161e93479e3df1b18f2fb75b36ef75fd1cbdf2cc610262f510531ef731d0050 node-v17.3.0-linux-ppc64le.tar.gz
810b3e203bc1d450e543f7c945a136acb7e2f16152839e6f8cf87b4f1ee8c3bb node-v17.3.0-linux-ppc64le.tar.xz
de1b0007f4d46e786f2583b7312e3262820e6535bc16b45da57de65a8472e824 node-v17.3.0-linux-s390x.tar.gz
10f1da9e679232797e273ca15c6205b86b438eccfceb56f41951af63239cdf76 node-v17.3.0-linux-s390x.tar.xz
479fb0b4b6405fb7240376187e2823cf384635a4998bdbaddc3ea826b63c8c74 node-v17.3.0-linux-x64.tar.gz
b54b4b7d0732f2dbad9c13f5b909411cde3cc9989bfdeb7557c400e4c93fe6ee node-v17.3.0-linux-x64.tar.xz
f960b616eace93d171a0d15e67c62116aa3c6100eb6266046774cc478487b9d9 node-v17.3.0.pkg
2914a3f0dc02ec6046f81ff12e1fb1fcf2b346b6b50e2c944440fdd165efd3ff node-v17.3.0.tar.gz
e4e4c4e64854698f2590144a177bcc7e7c0befb52020288fdae5c0da0d015d03 node-v17.3.0.tar.xz
8876df18c5327e495f6dc4e576c66885c85ec77438386921bc93589788178b18 node-v17.3.0-win-x64.7z
a7a1d01ca796aa48f3690f1637bf4677dab81cd8608c082e325ebf575d5f832f node-v17.3.0-win-x64.zip
62c94ff583c9e2b267f839bd24893bb2a3ee090547658be003e0ba11047d593b node-v17.3.0-win-x86.7z
8e766aca83e5a7d01faeb57121f4af4963726b0e8a3f70ff3eeb51493c61ba96 node-v17.3.0-win-x86.zip
a2480ad99c7d02a67c71cb462adbb4dad0a2c3884c7fea2ac2da543be18661a6 node-v17.3.0-x64.msi
5b3b8acff16964add6b24c408060430edf7c2060408568e4286f7dc758cf8cb6 node-v17.3.0-x86.msi
9f0b2a11ed3a956a773f4072e40c05645445cbd100d71c30737656159f0e5e42 win-x64/node.exe
281c2c43920b76ee23c32f110917b50b92977b15842dceada2ed84d7a29e8d34 win-x64/node.lib
484ab403a7743cf8e2d04e8e1cc0e1b419e48b601402e01c248a386549c847d8 win-x64/node_pdb.7z
074124c6ccbc5ceed67c0f7a4091d2e72fb236a6d1a27cb7aaca950e4215ccdc win-x64/node_pdb.zip
1e4d4bdc1855e032af72080e3390a19d637a85058b52f94d7918b33f0c8ad0db win-x86/node.exe
9d79fc5845cf0e8602ea59057639cf2b3731058eb9ada1b8c3bd52638732f4d7 win-x86/node.lib
59680a579e30520af180b9ea543ab854b485e287520b7c7b01abef3b1085eb8f win-x86/node_pdb.7z
5b5a3f76e247c52c005757935f8360a7d4766134ff7fb858c858567b5785fee3 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----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=mHZa
-----END PGP SIGNATURE-----
0 Comments