Skip to content

Releases: nodejs/node

2017-10-25, Version 8.8.1 (Current), @cjihrig

03 Nov 05:07
@MylesBorins MylesBorins
v8.8.1
This tag was signed with the committer’s verified signature.
cjihrig Colin Ihrig
GPG key ID: 7434390BDBE9B9C5
Learn about vigilant mode.
dc6bbb4
This commit was signed with the committer’s verified signature.
cjihrig Colin Ihrig
GPG key ID: 7434390BDBE9B9C5
Learn about vigilant mode.
Compare
Choose a tag to compare
2017-10-25, Version 8.8.1 (Current), @cjihrig

Notable Changes

  • net:
    • Fix timeout with null handle issue. This is a regression in Node 8.8.0 #16489

Commits

Assets 2

2017-10-24, Version 8.8.0 (Current), @MylesBorins

25 Oct 15:49
@MylesBorins MylesBorins
v8.8.0
b9cdef5
Compare
Choose a tag to compare
2017-10-24, Version 8.8.0 (Current), @MylesBorins

Notable Changes

  • crypto:
    • expose ECDH class #8188
  • http2:
    • http2 is now exposed by default without the need for a flag #15685
    • a new environment variable NODE_NO_HTTP2 has been added to allow userland http2 to be required #15685
    • support has been added for generic Duplex streams #16269
  • module:
    • resolve and instantiate loader pipeline hooks have been added to the ESM lifecycle #15445
  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

Read more
Assets 2

2017-10-24, Version 6.11.5 'Boron' (LTS), @MylesBorins

25 Oct 15:49
@MylesBorins MylesBorins
v6.11.5
e4f3e73
Compare
Choose a tag to compare
2017-10-24, Version 6.11.5 'Boron' (LTS), @MylesBorins

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/oct-2017-dos/ for details on patched vulnerabilities.

Notable Changes

  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

Assets 2

Version 4.8.5 'Argon' (Maintenance), @MylesBorins

25 Oct 15:45
@MylesBorins MylesBorins
v4.8.5
83d5580
Compare
Choose a tag to compare
Version 4.8.5 'Argon' (Maintenance), @MylesBorins

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/oct-2017-dos/ for details on patched vulnerabilities.

Notable Changes

  • zlib:
    • CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector. nodejs-private/node-private#95

Commits

Assets 2

2017-10-11, Version 8.7.0 (Current), @MylesBorins

23 Oct 19:54
@MylesBorins MylesBorins
v8.7.0
dc4f1b9
Compare
Choose a tag to compare
2017-10-11, Version 8.7.0 (Current), @MylesBorins

Notable Changes

  • deps:
    • update npm to 5.4.2
      #15600
    • upgrade libuv to 1.15.0
      #15745
    • update V8 to 6.1.534.42
      15393
  • dgram:
    • support for setting dgram socket buffer size
      #13623
  • fs:
    • add support O_DSYNC file open constant
      #15451
  • util:
    • deprecate obj.inspect for custom inspection
      #15631
  • tools, build:
    • there is a fancy new macOS installer
      #15179
  • Added new collaborators

Commits

Read more
Assets 2

2017-10-03, Version 6.11.4 'Boron' (LTS), @MylesBorins

23 Oct 19:53
@MylesBorins MylesBorins
v6.11.4
8691fdf
Compare
Choose a tag to compare
2017-10-03, Version 6.11.4 'Boron' (LTS), @MylesBorins

This LTS release comes with 91 commits. This includes 29 which are test related,
28 which are doc related, 11 which are build / tool related and 3 commits which are updates to dependencies.

Notable Changes

  • net:
    • support passing undefined to listen() to match behavior in v4.x and v8.x (Sam Roberts) #14234

Commits

Read more
Assets 2

2017-09-26, Version 8.6.0 (Current), @jasnell

23 Oct 19:53
@MylesBorins MylesBorins
v8.6.0
This tag was signed with the committer’s verified signature.
jasnell James M Snell
GPG key ID: 7341B15C070877AC
Learn about vigilant mode.
b48ff2a
Compare
Choose a tag to compare
2017-09-26, Version 8.6.0 (Current), @jasnell

Notable Changes

  • crypto
    • Support for multiple ECDH curves. #15206
  • dgram
    • Added setMulticastInterface() API. #7855
    • Custom lookup functions are now supported. #14560
  • n-api
    • The command-line flag is no longer required to use N-API. #14902
  • tls
    • Docs-only deprecation of parseCertString(). #14245
  • New Contributors

Commits

  • [4f7d9392e7] - assert: improve AssertionError in case of "Errors" (Ruben Bridgewater) #15025
  • [f6c65e6e19] - assert: fix boxed primitives in deepStrictEqual (Ruben Bridgewater) #15050
  • [7fa175f6d3] - assert: fix deepEqual inconsistencies (Ruben Bridgewater) #14491
  • [17d8dfec70] - async_hooks: support promise resolve hook (Anna Henningsen) #15296
  • [81723a9172] - (SEMVER-MINOR) async_hooks,doc: some async_hooks improvements (James M Snell) #15103
  • [535f8d5281] - benchmark: var to const (Ruben Bridgewater) #13757
  • [0f8f37ed45] - benchmark: improve and add more inspect benchmarks (Ruben Bridgewater) #14881
  • [3bf718c3fe] - benchmark: enable assert benchmark with short len (Rich Trott) #15174
  • [d30a5836b6] - benchmark: provide default methods for assert (Rich Trott) #15174
  • [142d2ed057] - benchmark: use smaller n value in some http tests (Peter Marshall) #14002
  • [5e4f87ae65] - buffer: improve Buffer.from performance (Anatoli Papirovski) #15178
  • [8bbbda55e4] - build: use generic names for linting tasks (Nikolai Vavilov) #15272
  • [9685b9ff2f] - build: don't fail make test on source tarballs (Gibson Fahnestock) #15441
  • [354f32040d] - build: remove unused configuration variable (Ben Noordhuis) #15266
  • [5d217ad5d7] - build: add support for link-module to vcbuild (Bartosz Sosnowski) #15410
  • [607832d3c3] - child_process: set shell to false in fork() (Alex Gresnel) #15352
  • [c26e93b309] - crypto: fix Node_SignFinal (David Benjamin) #15024
  • [bd07574718] - (SEMVER-MINOR) crypto: support multiple ECDH curves and auto (Roga Pria Sembada) #15206
  • [5e043a6c78] - deps: define BUILDING_NGHTTP2 during nghttp2 build (Ben Noordhuis) #15487
  • [2e75ac028a] - deps: v8: fix potential segfault in profiler (Ali Ijaz Sheikh) #15498
  • [2944ea6c6b] - (SEMVER-MINOR) dgram: add custom lookup function in sockets (cjihrig) #14560
  • [b24ee68133] - (SEMVER-MINOR) dgram: added setMulticastInterface() (Will Young) #7855
  • [f6b484461c] - doc: ctc -> tsc in onboarding extras (Bryan English) #15621
  • [f38666a967] - doc: ctc -> tsc in collab guide (Bryan English) #15590
  • [02c62df75e] - doc: remove invalid hash in link (Vse Mozhet Byt) #15542
  • [6cd64f36bc] - doc: note caveats in process message serialization (Joyee Cheung) #12963
  • [1fbb86c64b] - doc: fix 'aborted' event documentation (Luigi Pinca) #15471
  • [2326d655de] - doc: fix types and description for dns.resolveTxt (Tobias Nießen) #15472
  • [fcbee7b4bb] - doc: fix some links in http2.md (Vse Mozhet Byt) #15481
  • [9d6b0e6f6f] - doc: fix external links with 404 status (Vse Mozhet Byt) #15463
  • [29fd88c3e5] - doc: fix new nits in links (Vse Mozhet Byt) #15449
  • [4efc6fec6b] - doc: fix some internal links (Vse Mozhet Byt) #15293
  • [5ea4b88a29] - doc: adding sebdeckers to collaborators (Sebastiaan Deckers) #15354
  • [d5d498b6dc] - doc: update AUTHORS list (Michaël Zasso) #15181
  • [950f7f5fe1] - doc: update README with SHASUMS256.txt.sig info (Jon Moss) #15107
  • [38422d5963] - doc: fix nits in esm.md (Vse Mozhet Byt) #15315
  • [b0f5b2a38c] - doc: fix "added in" for Buffer.allocUnsafeSlow() (Tuan Anh Tran) #15330
  • [8112f496dc] - doc: add missing heading for error (Jon Moss) #15325
  • [29707afd82] - doc: add missing doc for readable._destroy (Michaël Zasso) #15316
  • [9f4480ce90] - doc: use consistent terminology in process doc (Rich Trott) #15321
  • [a53a0d8b38] - doc: fix emitKeypressEvents stream type (Oblosys) #15399
  • [b5c1a82560] - doc: fix http.ClientRequest method descriptions (Antoine AMARA) #15163
  • [f0e411d1b2] - doc: prevent displaying empty version picker (Chris Young) #15420
  • [acb0d012b3] - doc: make mkdtemp example work on Windows (Bartosz Sosnowski) #15408
  • [bdfed1ad25] - doc: fix entryTypes type and missing link (Mani Maghsoudlou) #15406
  • [7fa2bee5e7] - doc: add documentation for the 'timeout' event (Luigi Pinca) #15443
  • [b09eeb4a3d] - (SEMVER-MINOR) doc, tls: mark parseCertString() as deprecated (XadillaX) #14245
  • [e0f5e3a199] - docs: clarify usage cli options -e,-p on windows (Łukasz Szewczak) #15568
  • [a792ea7709] - docs: update 8.5.0 changelog (Myles Borins) #15384
  • [[0a8258b3de](https://github.com/nodejs/node/commit/0a...
Read more
Assets 2

2017-09-12, Version 8.5.0 (Current), @MylesBorins

23 Oct 19:52
@MylesBorins MylesBorins
v8.5.0
a2a2ff4
Compare
Choose a tag to compare
2017-09-12, Version 8.5.0 (Current), @MylesBorins

Notable Changes

  • build
    • Snapshots are now re-enabled in V8
      #14875
  • console
    • Implement minimal console.group().
      #14910
  • deps
    • upgrade libuv to 1.14.1
      #14866
    • update nghttp2 to v1.25.0
      #14955
  • dns
    • Add verbatim option to dns.lookup(). When true, results from the DNS
      resolver are passed on as-is, without the reshuffling that Node.js
      otherwise does that puts IPv4 addresses before IPv6 addresses.
      #14731
  • fs
    • add fs.copyFile and fs.copyFileSync which allows for more efficient
      copying of files.
      #15034
  • inspector
    • Enable async stack traces #13870
  • module
    • Add support for ESM. This is currently behind the --experimental-modules flag
      and requires the .mjs extension.
      node --experimental-modules index.mjs
      #14369
  • napi
  • os
    • Add support for CIDR notation to the output of the networkInterfaces() method.
      #14307
  • perf_hooks
    • An initial implementation of the Performance Timing API for Node.js. This is the
      same Performance Timing API implemented by modern browsers with a number of Node.js
      specific properties. The User Timing mark() and measure() APIs are implemented.
      #14680
  • tls
    • multiple PFX in createSecureContext
      #14793
  • Added new collaborators

Commits

  • [87c3e1d7de] - fix --prof-process --preprocess flag (davidmarkclements) #14966
  • [bcf0e5d676] - assert: handle errors properly with deep*Equal (Ruben Bridgewater) #15001
  • [7174dc2e8a] - assert: handle sparse arrays in deepStrictEqual (Ruben Bridgewater) #15027
  • [b40105df3b] - async_hooks: don't abort unnecessarily (Trevor Norris) #14722
  • [3e73ea8745] - async_hooks: improve comments and function names (Trevor Norris) #14722
  • [700d576962] - async_hooks: emitAfter correctly on fatalException (Trevor Norris) #14914
  • [78a36e0dd1] - async_wrap: unroll unnecessarily DRY code (Trevor Norris) #14722
  • [fadccbaa17] - async_wrap: return undefined if domain is disposed (Trevor Norris) #14722
  • [8d11220e0b] - benchmark: add default configs to buffer benchmark (Rich Trott) #15175
  • [7feb99455a] - benchmark: fix issues in dns benchmark (Ian Perkins) #14936
  • [978889f8c0] - benchmark: fix dgram/bind-params.js benchmark (Rich Trott) #14948
  • [7f1ea7c3af] - benchmark: removed unused arguments from callbacks (Abhishek Raj) #14919
  • [ca3ec90285] - benchmark: convert var to es6 const (Sebastian Murphy) #12886
  • [bda5585012] - buffer: fix MAX_LENGTH constant export (Anna Henningsen) #14821
  • [b9e1f60333] - buffer: increase coverage by removing dead code (Marcelo Gobelli) #15100
  • [5b8fa29649] - build: display HTTP2 configure --help options (Daniel Bevenius) #15198
  • [6de4e10c7a] - build: add NetBSD support to opensslconf.h (Roy Marples) #14313
  • [ebb3c2ce6f] - build: add npx to zip and 7z packages (Richard Lau) #15033
  • [b946693f4b] - build: fix indentation in node.gyp (Alexey Orlenko) #15051
  • [c8be90cabf] - build: for --enable-static, run only cctest (Daniel Bevenius) #14892
  • [77dfa73cf2] - build: better support for python3 systems (Ben Noordhuis) #14737
  • [8f3537f66a] - build: allow proper generation of html docs (Jon Moss) #14932
  • [838d3fef72] - build: don't add libraries when --enable-static (Daniel Bevenius) #14912
  • [9d373981f4] - build: remove duplicated code (Ruslan Bekenev) #13482
  • [e12a9c567c] - build: re-enable snapshots in v8.x (Myles Borins) #14875
  • [3a68b0bb98] - console: improve console.group() (Rich Trott) #14999
  • [a46e59d52d] - (SEMVER-MINOR) console: implement minimal console.group() (Rich Trott) #14910
  • [78a71aa123] - crypto: fix error of createCipher in wrap mode (Shigeki Ohtsu) #15037
  • [41bf40e209] - crypto: warn if counter mode used in createCipher (Shigeki Ohtsu) #13821
  • [ba5a697bdb] - deps: cherry-pick 5005faed5 from V8 upstream (Miguel Martins) #15177
  • [d18bb3d1dd] - deps: cherry-pick 1aead19 from upstream V8 (Ben Noordhuis) #15184
  • [acf9650730] - deps: upgrade libuv to 1.14.1 (cjihrig) #14866
  • [296729c41e] - deps: cherry-pick 0ef4a0c64b6 from c-ares upstream (Anna Henningsen) #15023
  • [3f7bdc5ab7] - deps: cherry-pick e020aae394 from V8 upstream (Ben Noordhuis) #14913
  • [c46e7e1988] - deps: fixup nghttp2 version number (Anna Henningsen) #14955
  • [4eb907f26b] - deps: update nghttp2 to v1.25.0 (Anna Henningsen) #14955
  • [9f46bde440] - deps: backport d727680 from V8 upstream (Matt Loring) #14947
  • [56bb199ef0] - deps: cherry-pick eb306f463e from nghttp2 upstream (Anna Henningsen) #14808
  • [55eed604a9] - deps: backport f9c4b7a from upstream V8 (Matt Loring) #14001
  • [b7f7d67677] - deps: backport bca8409 from upstream V8 (Matt Loring) #14001
  • [a67e7f9b35] - deps: backport 6e9e2e5 from upstream V8 (Matt Loring) #14001
  • [6e2f62262d] - deps: backport 3d8e87a from upstream V8 (Matt Loring) #14001
  • [6cb718b87a] - deps: backport 5152d97 from upstream V8 (Matt Loring) [#14...
Read more
Assets 2

2017-09-05, Version 6.11.3 'Boron' (LTS), @MylesBorins

05 Sep 19:57
@MylesBorins MylesBorins
v6.11.3
dbce2ec
Compare
Choose a tag to compare
2017-09-05, Version 6.11.3 'Boron' (LTS), @MylesBorins

This LTS release comes with 152 commits. This includes 75 which are test related,
25 which are doc related, 21 which are build / tool related and 3 commits which are updates to dependencies.

Notable Changes

  • build:
    • Codesigning is fixed on macOS (Evan Lucas) #14179
  • deps:
    • Snapshots are turned back on!!! (Yang Guo) #14385
  • path:
    • win32 volume-relative paths are working again! (Timothy Gu) #14440
  • tools:
    • v6.x can now build with ICU 59 (Steven R. Loomis) #12078

Commits

Read more
Assets 2