chore(deps): bump node.js to v22.23.5 by renovate[bot] · Pull Request #58 · tmlmt/cooklang-parser

renovate · 2025-11-12T04:43:24Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
node (source)		minor	`22.17.1` → `22.23.5`
@types/node (source)	devDependencies	minor	`22.19.0` → `22.20.5`

Release Notes

nodejs/node (node)

`v22.23.5`: 2026-11-11, Version 22.23.5 'Jod' (LTS), @aduh95

Compare Source

This is a security release.

Notable Changes

(CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High
(CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) – High
(CVE-2026-123865) http2: detect streams abandoned by nghttp2 (Matteo Collina) – High
(CVE-2026-123866) http2: retain buffers until socket writes finish (Matteo Collina) – High
(CVE-2026-123872) tls: disable resumption for mTLS with no session id context (Tim Perry) – High
(CVE-2026-123872) tls: don't allow renegotiation or HRR to change SNI (Tim Perry) – High
(CVE-2026-123872) tls: don't allow TLS resumption to change SNI (Tim Perry) – High
(CVE-2026-123874) http2: retain streams during pending writes (Matteo Collina) – High
(CVE-2026-123828) http2: avoid overflowing ALTSVC buffers (Matteo Collina) – Medium
(CVE-2026-123867) tls: apply the CA of SNI contexts without a certificate (Matteo Collina) – Medium
(CVE-2026-123868) http2: charge inbound DATA retained by streams to maxSessionMemory (Matteo Collina) – Medium
(CVE-2026-123871) http: redact proxy credentials in invalid proxy URL errors (Matteo Collina) – Medium
(CVE-2026-123875) http2: guard against null write request on cancelled stream (Matteo Collina) – Medium
(CVE-2026-123877) https: isolate Agent TLS policy keys (Matteo Collina) – Medium
(CVE-2026-123829) permission: do not leak denied descendants in recursive fs.watch (RafaelGSS) – Low
(CVE-2026-123862) zlib: handle params callback after destroy (Matteo Collina) – Low
(CVE-2026-123873) permission: check heap snapshot destination (RafaelGSS) – Low
deps: update llhttp to 9.4.4 (Antoine du Hamel)
deps: update sqlite to 3.54.1 (Node.js GitHub Bot)

Commits

[554fff40f0] - deps: update llhttp to 9.4.4 (Antoine du Hamel) nodejs-private/node-private#1038
[6577cbf231] - deps: update sqlite to 3.54.1 (Node.js GitHub Bot) #66816
[61d93c6086] - deps: update sqlite to 3.54.0 (Node.js GitHub Bot) #66663
[cd18f6bdff] - http: redact proxy credentials in invalid proxy URL errors (Matteo Collina) nodejs-private/node-private#1001
[6cd7e80d68] - http2: retain buffers until socket writes finish (Matteo Collina) nodejs-private/node-private#1017
[9bce421783] - http2: release headers when a stream is removed (Matteo Collina) nodejs-private/node-private#1026
[30fd852c0d] - http2: detect streams abandoned by nghttp2 (Matteo Collina) #66641
[21fb5d0348] - http2: guard against null write request on cancelled stream (Matteo Collina) #67252
[af6fbb6564] - https: isolate Agent TLS policy keys (Matteo Collina) nodejs-private/node-private#1036
[5c9eed3b1e] - permission: do not leak denied descendants in recursive fs.watch (RafaelGSS) nodejs-private/node-private#967
[5e497aec89] - src: fix the fs permission tree node on wildcard nodes (James M Snell) nodejs-private/node-private#986
[06af164d09] - tls: disable resumption for mTLS with no session id context (Tim Perry) nodejs-private/node-private#1030
[209c7e4d83] - tls: don't allow renegotiation or HRR to change SNI (Tim Perry) nodejs-private/node-private#1030
[05e452f075] - tls: don't allow TLS resumption to change SNI (Tim Perry) nodejs-private/node-private#1030
[67da864a89] - tls: apply the CA of SNI contexts without a certificate (Matteo Collina) nodejs-private/node-private#1020
[c841c6c7f1] - tls,http: prevent nested parser execution from empty writes (Matteo Collina) nodejs-private/node-private#1021
[ea159e84dd] - zlib: handle params callback after destroy (Matteo Collina) nodejs-private/node-private#1037

`v22.23.4`: 2026-10-21, Version 22.23.4 'Jod' (LTS), @aduh95

Compare Source

This is a security release.

Notable Changes

(CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
(CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
(CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
(CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
(CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
(CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
(CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov)
crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
deps: update timezone to 2026e (Node.js GitHub Bot)
deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
deps: update sqlite to 3.53.4 (Node.js GitHub Bot)
deps: update undici to 6.29.1 (Node.js GitHub Bot)

Commits

[68fa0df6d6] - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) #66877
[dd6b47573b] - crypto: reset random caches across snapshots (Filip Skokan) nodejs-private/node-private#987
[a62b7d5362] - crypto: harden X.509 conversion and formatting (Filip Skokan) nodejs-private/node-private#966
[ec9e5e4a3e] - crypto: update root certificates to NSS 3.129 (Node.js GitHub Bot) #66496
[a538a9515d] - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) #66868
[67d294739f] - deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov) nodejs-private/node-private#1002
[1ab9db8a74] - deps: update timezone to 2026e (Node.js GitHub Bot) #66419
[52b4bcab03] - deps: update timezone to 2026d (Node.js GitHub Bot) #66333
[60f4833d41] - deps: update archs files for openssl-3.5.9 (Node.js GitHub Bot) #66396
[05470dc308] - deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) #66396
[47333fe4f4] - deps: update sqlite to 3.53.4 (Node.js GitHub Bot) #64745
[98258b855f] - deps: update sqlite to 3.53.3 (Node.js GitHub Bot) #64180
[a8349b6408] - deps: update sqlite to 3.53.2 (Node.js GitHub Bot) #63774
[e9e295bcc1] - deps: cherry-pick e807d4e from SQLite (Junsu Han) #63525
[512a9b61f0] - deps: update sqlite to 3.53.1 (Node.js GitHub Bot) #63217
[e708247254] - deps: update sqlite to 3.53.0 (Node.js GitHub Bot) #62699
[857be5afa3] - deps: update undici to 6.29.1 (Node.js GitHub Bot) #66765
[19c5056002] - dns: validate resolve inputs for null bytes (James M Snell) nodejs-private/node-private#984
[e7b2985d59] - http: ensure agent data guard works without I/O (James M Snell) nodejs-private/node-private#983
[50ab804edc] - permission: check permission model in realpathSync (RafaelGSS) nodejs-private/node-private#973
[a18ec92752] - src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) nodejs-private/node-private#1002
[4342503fd8] - tls: reject chains containing blocked public keys (Ulises Gascon) #66871
[d7663560ac] - tls: reject non-canonical IP addresses (Matteo Collina) nodejs-private/node-private#982
[beb4cd4cd3] - tls: match IPv6 hosts against IP-Address SANs (Pascal Garber) #64145
[4b42e56aaf] - tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett) #66855

`v22.23.3`: 2026-09-23, Version 22.23.3 'Jod' (LTS), @aduh95 prepared by @juanarbol

Compare Source

Notable Changes

[fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
[871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
[b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #64884
[e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324
[a9cb31129f] - deps: update OpenSSL 3.5.8 (Node.js GitHub Bot) #65542
[2a3548e51c] - deps: update Undici to 6.28.1 (mcollina) #65790
[3909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710
[66de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623

Commits

[44cf27b8fa] - build: update binary-upload to use correct tarball name (Stewart X Addison) #65282
[fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
[71feba6b69] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527
[871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
[2a3548e51c] - deps: update undici to 6.28.1 (mcollina) #65790
[59d853a4df] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542
[a9cb31129f] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542
[3376e27de2] - deps: V8: cherry-pick a6eaf75 (Camillo Bruni) #65402
[b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #64884
[4e4bd1b104] - deps: update timezone to 2026c (Node.js GitHub Bot) #64588
[7d82841b4e] - deps: update c-ares to 1.34.8 (Node.js GitHub Bot) #64330
[01855a19d3] - deps: c-ares: cherry-pick 8ba37af (René) #64110
[23fb398c3d] - deps: update corepack to 0.35.0 (Node.js GitHub Bot) #63375
[5286330365] - deps: update corepack to 0.34.7 (Node.js GitHub Bot) #62810
[6d6c3c98b1] - deps: update timezone to 2026b (Node.js GitHub Bot) #62962
[e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324
[d9cb8468a3] - doc: clarify filter option of sqlite.database.applyChangeset (Antoine du Hamel) #63515
[c9c5662d91] - doc: add sxa GPG key (ed25519) (Stewart X Addison) #64193
[37f21068c4] - fs: restore fs patchability in ESM loader (Joyee Cheung) #62835
[7c2df5dd96] - http2: avoid uaf while receiving and sending rst_stream (esgor) #64166
[3909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710
[66de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623
[ce9139107f] - src: escape Windows environment variables in task runner (Antoine du Hamel) #65217
[839480a471] - test: fix link-local dgram scope assertion (Filip Skokan) #65629
[40eac4a32f] - test: account for varied OpenSSL CCM final behaviours (Filip Skokan) #65542
[75098a9e8c] - tools: update gr2m/create-or-update-pull-request-action to v1.10.1 (Mike McCready) #63065
[08b6ac0416] - tools: revert OpenSSL update workflow to ubuntu-latest (Richard Lau) #62627
[02cafc479f] - tools: fix commit linter for semver-major release proposals (Antoine du Hamel) #62993
[6f6cd3768d] - tools: sync mk-ca-bundle.pl with curl (Archkon) #64753
[bc5753d438] - tools: remove envinfo from our workflows (Antoine du Hamel) #64259
[d68ee9f8a5] - tools: validate version number in release proposal commit message lint (Antoine du Hamel) #64070
[38ee2e895f] - tools: avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #63938
[fdc65e489f] - tools: use different branch for tool updates on staging branches (Antoine du Hamel) #63110
[e5a6fde002] - tools: update gyp-next to 0.22.1 (Node.js GitHub Bot) #62961
[5fbbad6e82] - url: handle unparsable serialized URLs in setters (Matteo Collina) #64651
[ed019e4854] - util: preserve function names without source map names (Hiroki Osame) #65108

`v22.23.2`: 2026-07-29, Version 22.23.2 'Jod' (LTS), @marco-ippolito

Compare Source

This is a security release.

Notable Changes

(CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
(CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
(CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
(CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
(CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
(CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
(CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
(CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
(CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
(CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
deps: update llhttp to 9.4.3 (Paolo Insogna)
deps: update undici to 6.28.0 (Node.js GitHub Bot)

Commits

[4b12ac38a1] - deps: update llhttp to 9.4.3 (Paolo Insogna) nodejs-private/node-private#935
[3fd0aa51d0] - deps: update undici to 6.28.0 (Node.js GitHub Bot) #64714
[22efc051a3] - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) nodejs-private/node-private#929
[c8525ac3a6] - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) nodejs-private/node-private#932
[daa6d25e3d] - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) nodejs-private/node-private#921
[f14d78b9e0] - (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) #63752
[51123159fe] - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) nodejs-private/node-private#934
[acaf4266b2] - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) nodejs-private/node-private#930
[440329f624] - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) nodejs-private/node-private#911
[ed18b9cc07] - (CVE-2026-58039) permission: check final report output path (RafaelGSS) nodejs-private/node-private#926
[0566c3cccd] - (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) nodejs-private/node-private#927
[0d072480c3] - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) nodejs-private/node-private#931

`v22.23.1`: 2026-06-23, Version 22.23.1 'Jod' (LTS), @RafaelGSS

Compare Source

This release includes a fix for an unexpected behavior introduced
by the recent security release (22.23.0).

Commits

[41d2ee13be] - build: switch coverage-windows to windows-2022 (Richard Lau) #63940
[eaa292549e] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #64004

`v22.23.0`: 2026-06-18, Version 22.23.0 'Jod' (LTS), @aduh95

Compare Source

This is a security release.

Notable Changes

(CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
(CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
(CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
(CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
(CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
(CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
(CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
(CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
(CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
(CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
(CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low

Commits

[38b4c5ed51] - (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) nodejs-private/node-private#878
[ad8a10c1bb] - deps: update llhttp to 9.4.2 (Antoine du Hamel) nodejs-private/node-private#890
[ca825a87cc] - deps: update undici to 6.27.0 (aduh95) #63711
[a1a5bb9683] - (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 (Tim Perry) #62891
[0f48583512] - (SEMVER-MAJOR) deps: update nghttp2 to 1.69.0 (Node.js GitHub Bot) #62891
[38c869fc05] - deps: update nghttp2 to 1.68.0 (nodejs-github-bot) #61136
[290667c84f] - deps: update nghttp2 to 1.67.1 (nodejs-github-bot) #59790
[c9f3da76aa] - deps: update nghttp2 to 1.66.0 (Node.js GitHub Bot) #58786
[60890be563] - deps: update nghttp2 to 1.65.0 (Node.js GitHub Bot) #57269
[5024c7d5d8] - deps: update archs files for openssl-3.5.7 (Node.js GitHub Bot) #63820
[7f4eb5af2e] - deps: upgrade openssl sources to openssl-3.5.7 (Node.js GitHub Bot) #63820
[ebb4ec78a8] - deps: fix aix implicit declaration in OpenSSL (Abdirahim Musse) #62656
[5763d40826] - deps: update llhttp to 9.4.1 (Node.js GitHub Bot) #63045
[c551a51d0c] - (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) nodejs-private/node-private#868
[0a22d40180] - (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) nodejs-private/node-private#846
[c79968e108] - (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) nodejs-private/node-private#855
[0c37bff2ff] - http2: fix DEP0194 message (KaKa) #58669
[ea5dc6b529] - (SEMVER-MAJOR) http2: remove support for priority signaling (Matteo Collina) #58293
[9b6af26132] - (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) nodejs-private/node-private#867
[28dcd38864] - (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) nodejs-private/node-private#873
[2f62693801] - (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) nodejs-private/node-private#870
[1662a3ea09] - test: add session reuse host verification regressions (Matteo Collina) nodejs-private/node-private#854
[718d5d0e2c] - test: skip test-fs-utimes-y2K38 on armv7 (Richard Lau) #63836
[041185b61f] - test: skip test-cluster-dgram-reuse on AIX 7.3 (Stewart X Addison) #62238
[fd890ba01d] - (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) nodejs-private/node-private#854
[39d1d09684] - (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) nodejs-private/node-private#857
[2197a47144] - (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) nodejs-private/node-private#869

`v22.22.3`: 2026-05-13, Version 22.22.3 'Jod' (LTS), @marco-ippolito

Compare Source

Commits

[4f780905c5] - crypto: fix potential null pointer dereference when BIO_meth_new() fails (Nora Dossche) #61788
[4a09efb947] - crypto: update root certificates to NSS 3.121 (Node.js GitHub Bot) #62485
[e4c0d99839] - deps: update timezone to 2026a (Node.js GitHub Bot) #62164
[0226c8dd7a] - deps: update simdjson to 4.5.0 (Node.js GitHub Bot) #62382
[e742ab748c] - deps: update sqlite to 3.51.3 (Node.js GitHub Bot) #62256
[73cac0571a] - deps: update amaro to 1.1.8 (Node.js GitHub Bot) #62151
[ae5c162b93] - deps: update amaro to 1.1.7 (Node.js GitHub Bot) #61730
[b819cb9977] - deps: update amaro to 1.1.6 (Node.js GitHub Bot) #61603
[bbcce09dc7] - deps: update sqlite to 3.52.0 (Node.js GitHub Bot) #62150
[22ff2d81ce] - deps: update simdjson to 4.3.1 (Node.js GitHub Bot) #61930
[f49b51d75c] - deps: update acorn-walk to 8.3.5 (Node.js GitHub Bot) #61928
[1a5cec0d49] - deps: update acorn to 8.16.0 (Node.js GitHub Bot) #61925
[d339497688] - deps: update nbytes to 0.1.3 (Node.js GitHub Bot) #61879
[3ff8ffd459] - deps: remove stale OpenSSL arch configs (René) #61834
[b8ddbc1e9a] - deps: update llhttp to 9.3.1 (Node.js GitHub Bot) #61827
[ffda97afd4] - deps: update googletest to 2461743 (Node.js GitHub Bot) #62484
[79aa32cf4f] - deps: update googletest to 73a63ea (Node.js GitHub Bot) #61927
[b6957e13b6] - deps: update archs files for openssl-3.5.6 (Node.js GitHub Bot) #62629
[3a27669063] - deps: upgrade openssl sources to openssl-3.5.6 (Node.js GitHub Bot) #62629
[d568a1bb53] - deps: upgrade npm to 10.9.8 (npm team) #62463
[ec11f3c1d5] - deps: V8: backport 85b3900 (Thibaud Michaud) #62783
[08609712ed] - deps: V8: backport 1b27e46 (Thibaud Michaud) #62783
[dcc60d5ab2] - deps: V8: backport 9997fc0 (Thibaud Michaud) #62783
[1d1f4451fb] - deps: V8: cherry-pick b96e40d (Clemens Backes) #62783
[2268567237] - deps: V8: cherry-pick 7cb6188 (Thibaud Michaud) #62783
[92804cdbea] - deps: V8: cherry-pick e7ccf0a (Thibaud Michaud) #62783
[eae2c27a40] - deps: V8: cherry-pick 8e214ec (Thibaud Michaud) #62783
[a1799a49bb] - deps: V8: backport 63b8849 (Thibaud Michaud) #62783
[a2df2d8731] - deps: V8: backport 3239427 (Thibaud Michaud) #62783
[e3d65c7dca] - deps: V8: backport 89dc6ea (Thibaud Michaud) #62783
[5e7db133de] - deps: V8: backport 910cb91 (Jakob Kummerow) #62783
[d0c24a28af] - deps: V8: cherry-pick b8f91e5 (Thibaud Michaud) #62783
[d358687824] - deps: V8: cherry-pick cf03d55 (Thibaud Michaud) #62783
[67c8b2c349] - deps: V8: cherry-pick 692f3d5 (Sébastien Doeraene) #62783
[71e5a59ffd] - deps: V8: cherry-pick c734674 (Manos Koukoutos) #62783
[f0dbe81c7b] - deps: V8: cherry-pick b2f3aea (Thibaud Michaud) #62783
[d333f480c3] - deps: V8: cherry-pick 5f1342c (Matthias Liedtke) #62783
[db722725bb] - deps: use npm undici@six tag in update-undici.sh (Matteo Collina) #63012
[9b57979d9c] - doc: add Rafael to last security release steward (Rafael Gonzaga) #62423
[d8075585bf] - doc: add path to vulnerabilities.json mention (Rafael Gonzaga) #62355
[6ec9a70204] - doc: clarify fs.ReadStream and fs.WriteStream are not constructable (Kit Dallege) #62208
[1fc86fcb6e] - doc: add note (and caveat) for mock.module about customization hooks (Jacob Smith) #62075
[491be80bd9] - doc: add efekrskl as triager (Efe) #61876
[18558293a3] - doc: fix module.stripTypeScriptTypes indentation (René) #61992
[8e20976522] - doc: explicitly mention Slack handle (Rafael Gonzaga) #61986
[70b8e6b4fb] - doc: rename invalid function parameter (René) #61942
[4045c76f6c] - doc: clarify status of feature request issues (Antoine du Hamel) #61505
[c54652f2aa] - doc: remove incorrect mention of module in typescript.md (Rob Palmer) #61839
[9fad6cedf5] - doc: clarify async caveats for events.once() (René) #61572
[2f1e5733fe] - doc: update Juan's security steward info (Juan José) #61754
[a64bdb5068] - doc: fix overstated Date header r

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Copenhagen)

Branch creation
- "before 7am every weekday,every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/node-22.x branch from 4ce4176 to 538586f Compare December 3, 2025 19:32

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.1~~ chore(deps): bump @types/node to v22.19.2 Dec 9, 2025

renovate Bot force-pushed the renovate/node-22.x branch from 538586f to 79c1da5 Compare December 9, 2025 03:40

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.2~~ chore(deps): bump @types/node to v22.19.3 Dec 14, 2025

renovate Bot force-pushed the renovate/node-22.x branch from 79c1da5 to bdb4bd3 Compare December 14, 2025 02:13

renovate Bot force-pushed the renovate/node-22.x branch from bdb4bd3 to a816302 Compare December 31, 2025 16:48

renovate Bot force-pushed the renovate/node-22.x branch from a816302 to 4e7c083 Compare January 8, 2026 19:33

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.3~~ chore(deps): bump @types/node to v22.19.4 Jan 10, 2026

renovate Bot force-pushed the renovate/node-22.x branch from 4e7c083 to e209c1a Compare January 10, 2026 01:02

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.4~~ chore(deps): bump @types/node to v22.19.5 Jan 10, 2026

renovate Bot force-pushed the renovate/node-22.x branch 3 times, most recently from 1966c00 to 2169939 Compare January 13, 2026 14:48

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.5~~ chore(deps): bump @types/node to v22.19.6 Jan 13, 2026

renovate Bot force-pushed the renovate/node-22.x branch from 2169939 to ba04440 Compare January 13, 2026 15:13

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.6~~ chore(deps): bump @types/node to v22.19.7 Jan 15, 2026

renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from 500f4d6 to 77283e7 Compare January 19, 2026 16:37

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.7~~ chore(deps): bump @types/node to v22.19.8 Feb 3, 2026

renovate Bot force-pushed the renovate/node-22.x branch from 77283e7 to e65cf90 Compare February 3, 2026 08:57

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.8~~ chore(deps): bump @types/node to v22.19.9 Feb 5, 2026

renovate Bot force-pushed the renovate/node-22.x branch from e65cf90 to 9ab4470 Compare February 5, 2026 16:43

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.9~~ chore(deps): bump @types/node to v22.19.10 Feb 8, 2026

renovate Bot force-pushed the renovate/node-22.x branch from 9ab4470 to b2e3ff4 Compare February 8, 2026 00:41

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.10~~ chore(deps): bump @types/node to v22.19.11 Feb 10, 2026

renovate Bot force-pushed the renovate/node-22.x branch from b2e3ff4 to e8ab68d Compare February 10, 2026 17:48

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.11~~ chore(deps): bump @types/node to v22.19.12 Feb 26, 2026

renovate Bot force-pushed the renovate/node-22.x branch from e8ab68d to 12edb52 Compare February 26, 2026 04:52

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.12~~ chore(deps): bump @types/node to v22.19.13 Feb 26, 2026

renovate Bot force-pushed the renovate/node-22.x branch from 12edb52 to a7e229b Compare February 26, 2026 20:56

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.13~~ chore(deps): bump @types/node to v22.19.15 Mar 6, 2026

renovate Bot force-pushed the renovate/node-22.x branch from a7e229b to 874ee8c Compare March 6, 2026 01:26

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.15~~ chore(deps): bump @types/node to v22.19.16 Apr 3, 2026

renovate Bot force-pushed the renovate/node-22.x branch from 874ee8c to 99fcea8 Compare April 3, 2026 09:47

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.16~~ chore(deps): bump @types/node to v22.19.17 Apr 3, 2026

renovate Bot force-pushed the renovate/node-22.x branch from 99fcea8 to 2125535 Compare April 3, 2026 13:10

renovate Bot force-pushed the renovate/node-22.x branch from 2125535 to 966c252 Compare April 29, 2026 18:41

renovate Bot changed the title ~~chore(deps): bump @types/node to v22.19.17~~ chore(deps): bump node.js to v22.22.2 Apr 29, 2026

renovate Bot force-pushed the renovate/node-22.x branch from 966c252 to 2eff2a6 Compare May 8, 2026 05:46

renovate Bot force-pushed the renovate/node-22.x branch from 2eff2a6 to f79b19d Compare July 26, 2026 01:43

renovate Bot changed the title ~~chore(deps): bump node.js to v22.22.2~~ chore(deps): bump node.js to v22.23.1 Jul 26, 2026

renovate Bot force-pushed the renovate/node-22.x branch from f79b19d to a051c80 Compare July 29, 2026 19:00

renovate Bot changed the title ~~chore(deps): bump node.js to v22.23.1~~ chore(deps): bump node.js to v22.23.2 Jul 29, 2026

renovate Bot force-pushed the renovate/node-22.x branch from a051c80 to 3fe0e86 Compare August 26, 2026 15:36

renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from b7a5d80 to c274860 Compare September 16, 2026 00:56

renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from 2947ce7 to b938ab2 Compare September 24, 2026 04:45

renovate Bot changed the title ~~chore(deps): bump node.js to v22.23.2~~ chore(deps): bump node.js to v22.23.3 Sep 24, 2026

renovate Bot force-pushed the renovate/node-22.x branch from b938ab2 to 0801816 Compare October 2, 2026 01:24

renovate Bot force-pushed the renovate/node-22.x branch from 0801816 to 3f32ac4 Compare October 21, 2026 11:49

renovate Bot changed the title ~~chore(deps): bump node.js to v22.23.3~~ chore(deps): bump node.js to v22.23.4 Oct 21, 2026

chore(deps): bump node.js to v22.23.5

402af60

renovate Bot force-pushed the renovate/node-22.x branch from 3f32ac4 to 402af60 Compare November 11, 2026 22:47

renovate Bot changed the title ~~chore(deps): bump node.js to v22.23.4~~ chore(deps): bump node.js to v22.23.5 Nov 11, 2026

Navigation Menu

Repository navigation

chore(deps): bump node.js to v22.23.5 - #58

chore(deps): bump node.js to v22.23.5#58
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-22.x

renovate Bot commented Nov 12, 2025 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Nov 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v22.23.5: 2026-11-11, Version 22.23.5 'Jod' (LTS), @​aduh95

Notable Changes

Commits

v22.23.4: 2026-10-21, Version 22.23.4 'Jod' (LTS), @​aduh95

Notable Changes

Commits

v22.23.3: 2026-09-23, Version 22.23.3 'Jod' (LTS), @​aduh95 prepared by @​juanarbol

Notable Changes

Commits

v22.23.2: 2026-07-29, Version 22.23.2 'Jod' (LTS), @​marco-ippolito

Notable Changes

Commits

v22.23.1: 2026-06-23, Version 22.23.1 'Jod' (LTS), @​RafaelGSS

Commits

v22.23.0: 2026-06-18, Version 22.23.0 'Jod' (LTS), @​aduh95

Notable Changes

Commits

v22.22.3: 2026-05-13, Version 22.22.3 'Jod' (LTS), @​marco-ippolito

Commits

Configuration

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Nov 12, 2025 •

edited

Loading

`v22.23.5`: 2026-11-11, Version 22.23.5 'Jod' (LTS), @aduh95

`v22.23.4`: 2026-10-21, Version 22.23.4 'Jod' (LTS), @aduh95

`v22.23.3`: 2026-09-23, Version 22.23.3 'Jod' (LTS), @aduh95 prepared by @juanarbol

`v22.23.2`: 2026-07-29, Version 22.23.2 'Jod' (LTS), @marco-ippolito

`v22.23.1`: 2026-06-23, Version 22.23.1 'Jod' (LTS), @RafaelGSS

`v22.23.0`: 2026-06-18, Version 22.23.0 'Jod' (LTS), @aduh95

`v22.22.3`: 2026-05-13, Version 22.22.3 'Jod' (LTS), @marco-ippolito