v0.9.0-pre.1
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.9.0-pre.1/turso_cli-installer.sh | sh
powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.9.0-pre.1/turso_cli-installer.ps1 | iex"
| File | Platform | Checksum |
|---|---|---|
| turso_cli-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| turso_cli-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| turso_cli-aarch64-pc-windows-msvc.zip | ARM64 Windows | checksum |
| turso_cli-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| turso_cli-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| turso_cli-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
RustFS 1.0.2-preview.1 (preview)
- docs(release): validate candidates on release branch by @overtrue in https://github.com/rustfs/rustfs/pull/8280
- fix(scanner): validate checkpoints against global cycle fence by @abe723 in https://github.com/rustfs/rustfs/pull/8278
- fix(ci): restore E2E membership and pagination timeouts by @overtrue in https://github.com/rustfs/rustfs/pull/8281
- ci: locate the auto-testing checkout for lanes that run evidence from a subdirectory by @majinghe in https://github.com/rustfs/rustfs/pull/8279
- fix(s3): bound multipart copy admission and HTTP write buffers by @overtrue in https://github.com/rustfs/rustfs/pull/8288
- fix(connect): preserve site replication S3 key path by @overtrue in https://github.com/rustfs/rustfs/pull/8300
- fix: resolve Rust 1.99 Clippy warnings by @houseme in https://github.com/rustfs/rustfs/pull/8301
- ci: remove Docker Hub description sync by @overtrue in https://github.com/rustfs/rustfs/pull/8303
- fix(connect): send endpoint origin for relay session authentication by @overtrue in https://github.com/rustfs/rustfs/pull/8310
- fix(sse): guard copy-source SSE-C keys over TLS and reject bucket-keyed KMS context by @reatang in https://github.com/rustfs/rustfs/pull/8296
- feat(table-catalog): expose durable strong diagnostics by @marshawcoco in https://github.com/rustfs/rustfs/pull/8232
- feat(s3select): support quoted record delimiters by @GatewayJ in https://github.com/rustfs/rustfs/pull/8203
- chore(release): merge 1.0.1 back into main and refresh installation references by @overtrue in https://github.com/rustfs/rustfs/pull/8314
- perf(ecstore): reduce multipart and object I/O overhead by @GatewayJ in https://github.com/rustfs/rustfs/pull/8095
- docs(release): maintain milestones after publishing by @overtrue in https://github.com/rustfs/rustfs/pull/8317
- fix(heal): skip removed usage observations during read repair by @hkwi in https://github.com/rustfs/rustfs/pull/8135
- feat(webdav): report quota properties on PROPFIND by @Hatsune-Imagine in https://github.com/rustfs/rustfs/pull/8197
- fix(scanner): preserve checkpoint children in large prefixes by @jkossis in https://github.com/rustfs/rustfs/pull/8292
- fix(s3): correct ListParts pagination termination and markers by @qwerprog in https://github.com/rustfs/rustfs/pull/8295
- feat(iam): expose stored bucket tags to OPA by @rjregenold in https://github.com/rustfs/rustfs/pull/8298
- fix(scanner): drain terminal remote responses to clean EOF by @abe723 in https://github.com/rustfs/rustfs/pull/8306
- fix(http): classify peer closures from error sources by @abe723 in https://github.com/rustfs/rustfs/pull/8307
- test(connect): verify local runtime peer credential boundary by @overtrue in https://github.com/rustfs/rustfs/pull/8304
- fix: resolve pagination fixtures and heal recovery CI failures by @overtrue in https://github.com/rustfs/rustfs/pull/8316
- docs: trim redundant project skills by @overtrue in https://github.com/rustfs/rustfs/pull/8323
- docs(storage): verify object generation authority contract by @overtrue in https://github.com/rustfs/rustfs/pull/8322
- fix(oidc): ignore groups without a matching policy at login by @nilsmelchert in https://github.com/rustfs/rustfs/pull/8164
- refactor(storage): bind rename rollback to its commit context by @overtrue in https://github.com/rustfs/rustfs/pull/8324
- refactor(storage): separate metadata scheduling from quorum decisions by @overtrue in https://github.com/rustfs/rustfs/pull/8327
- test(storage): verify rejected rollback inspection on real disks by @overtrue in https://github.com/rustfs/rustfs/pull/8331
- test(storage): make commit fault checkpoints independent by @overtrue in https://github.com/rustfs/rustfs/pull/8326
- fix(listing): count logical prefixes before pagination by @overtrue in https://github.com/rustfs/rustfs/pull/8328
- fix(scanner): isolate and coalesce dirty usage journals by @houseme in https://github.com/rustfs/rustfs/pull/8325
- fix(storage): retain typed owners across borrowed writes by @overtrue in https://github.com/rustfs/rustfs/pull/8329
- fix(ecstore): hide rollback backup residue in prefix listings by @overtrue in https://github.com/rustfs/rustfs/pull/8335
- fix(protocols): enforce S3 policies for file protocol operations by @GatewayJ in https://github.com/rustfs/rustfs/pull/8262
- test(ecstore): enforce main core regression gates by @overtrue in https://github.com/rustfs/rustfs/pull/8338
- fix(test): restore authenticated cluster fault scenarios by @overtrue in https://github.com/rustfs/rustfs/pull/8340
- ci: coerce the pool timeout input to a number by @majinghe in https://github.com/rustfs/rustfs/pull/8255
- fix(ecstore): own listing workers through cancellation by @houseme in https://github.com/rustfs/rustfs/pull/8342
- test: allow cleanup fixture CI headroom by @cxymds in https://github.com/rustfs/rustfs/pull/8336
- fix(s3): encode multipart listing response keys by @overtrue in https://github.com/rustfs/rustfs/pull/8347
- perf(scanner): reduce scan and checkpoint peak allocations by @houseme in https://github.com/rustfs/rustfs/pull/8346
- fix(auth): return ExpiredToken for retained STS credentials by @houseme in https://github.com/rustfs/rustfs/pull/8344
- docs: refresh security advisory lessons by @overtrue in https://github.com/rustfs/rustfs/pull/8350
- fix(heal): bound durable MRF rescheduling by @houseme in https://github.com/rustfs/rustfs/pull/8351
- build(deps): bump the dependencies group with 4 updates by @dependabot[bot] in https://github.com/rustfs/rustfs/pull/8359
- fix(table-catalog): verify Iceberg metadata path signatures by @GatewayJ in https://github.com/rustfs/rustfs/pull/8291
- fix(heal): increase stack size for absence receipt replay test by @overtrue in https://github.com/rustfs/rustfs/pull/8361
- fix(compose): Refactor volume paths and add service_completed_success… by @svengo in https://github.com/rustfs/rustfs/pull/8355
- fix(heal): retry typed RPC transport failures after peer restart by @overtrue in https://github.com/rustfs/rustfs/pull/8365
- fix(obs): avoid reactor panic in OTLP periodic exports by @houseme in https://github.com/rustfs/rustfs/pull/8368
- test(ecstore): verify multi-generation authority model by @overtrue in https://github.com/rustfs/rustfs/pull/8339
- fix(protocols): share the server context with protocol storage by @overtrue in https://github.com/rustfs/rustfs/pull/8367
- build(deps): bump rustls from 0.23.42 to 0.23.45 in /fuzz in the cargo group across 1 directory by @dependabot[bot] in https://github.com/rustfs/rustfs/pull/8370
- test(ecstore): cover real metadata cache and late identity reads by @overtrue in https://github.com/rustfs/rustfs/pull/8371
- ci: do not run some actions on fork by @yihong0618 in https://github.com/rustfs/rustfs/pull/8318
- fix(ecstore): refresh parsed bucket configs on every load by @overtrue in https://github.com/rustfs/rustfs/pull/8379
- fix(tier): drop reserved internal headers from transition PUT by @shurkus in https://github.com/rustfs/rustfs/pull/8363
- feat(table-catalog): support disabling empty catalogs by @GatewayJ in https://github.com/rustfs/rustfs/pull/8376
- test(e2e): bound mixed-version multipart acknowledgement by @overtrue in https://github.com/rustfs/rustfs/pull/8381
- feat(table-catalog): add durable catalog backups by @marshawcoco in https://github.com/rustfs/rustfs/pull/8266
- fix(ecstore): skip warning for absent .minio.sys volume by @ormandj in https://github.com/rustfs/rustfs/pull/8373
- chore(deps): refresh workspace dependencies and hotpath profiling by @houseme in https://github.com/rustfs/rustfs/pull/8380
- feat(http3): add opt-in QUIC transport by @tommady in https://github.com/rustfs/rustfs/pull/7903
- test(iam): freeze OIDC federation boundaries by @GatewayJ in https://github.com/rustfs/rustfs/pull/8393
- fix(heal): defer replacement retries until dangling grace expires by @cxymds in https://github.com/rustfs/rustfs/pull/8388
- feat(scanner): admit background disk I/O by @houseme in https://github.com/rustfs/rustfs/pull/8389
- ci: add daily main sync for the gateway integration branch by @overtrue in https://github.com/rustfs/rustfs/pull/8401
- fix(table-catalog): preserve credential vending after rename by @marshawcoco in https://github.com/rustfs/rustfs/pull/8400
- fix(obs): export bucket gauges from live snapshots by @houseme in https://github.com/rustfs/rustfs/pull/8399
- feat(targets): support Kafka SASL without TLS by @houseme in https://github.com/rustfs/rustfs/pull/8398
- test: record multipart target response diagnostics by @overtrue in https://github.com/rustfs/rustfs/pull/8382
- fix: stabilize scanner leases and connect diagnostics by @houseme in https://github.com/rustfs/rustfs/pull/8394
- refactor(iam): add verified federated identity model by @GatewayJ in https://github.com/rustfs/rustfs/pull/8413
- fix: resume stalled GET bodies and classify transient storage failures by @houseme in https://github.com/rustfs/rustfs/pull/8414
- fix(table-catalog): drop migrated tables after rename by @marshawcoco in https://github.com/rustfs/rustfs/pull/8417
- fix(table-catalog): reuse held entry locks in warehouse scans by @marshawcoco in https://github.com/rustfs/rustfs/pull/8418
- feat: support object lock remaining retention days by @v-belyakov in https://github.com/rustfs/rustfs/pull/8407
- refactor(iam): separate federated provider views by @GatewayJ in https://github.com/rustfs/rustfs/pull/8415
- feat(quota): add sharded durable reservation protocol by @houseme in https://github.com/rustfs/rustfs/pull/8402
- feat(auth): allow custom secret keys beyond 40 bytes by @cxymds in https://github.com/rustfs/rustfs/pull/8419
- fix(admin): resolve event destination subscription target types by @cxymds in https://github.com/rustfs/rustfs/pull/8386
- fix(ecstore): make deletes cancellation-safe and reclaim their residue by @cppudge in https://github.com/rustfs/rustfs/pull/8378
- fix(ci): preserve heal quorum retries and synchronize background tests by @cxymds in https://github.com/rustfs/rustfs/pull/8422
- test(ecstore): cover late GET object generation changes by @overtrue in https://github.com/rustfs/rustfs/pull/8383
- test(ecstore): cover mixed metadata arrival orders by @overtrue in https://github.com/rustfs/rustfs/pull/8385
- test(connect): reject unknown health flags by @overtrue in https://github.com/rustfs/rustfs/pull/8142
- test(connect): restore subscriber readiness deadlines by @overtrue in https://github.com/rustfs/rustfs/pull/8285
- ci(e2e): require fresh distributed JUnit reports by @overtrue in https://github.com/rustfs/rustfs/pull/8384
- refactor(iam): separate OIDC authentication mapping by @GatewayJ in https://github.com/rustfs/rustfs/pull/8416
- fix(lifecycle): coordinate tier free-version recovery scans by @cxymds in https://github.com/rustfs/rustfs/pull/8387
- fix: reconcile bucket generations and observe lock failures by @houseme in https://github.com/rustfs/rustfs/pull/8421
- fix(listing): continue versioned delimiter listings from raw key by @eye-gu in https://github.com/rustfs/rustfs/pull/8424
- fix(obs): pass RustFS build version to telemetry by @houseme in https://github.com/rustfs/rustfs/pull/8425
- fix(storage): warn on stalled local disk operations by @overtrue in https://github.com/rustfs/rustfs/pull/8395
- fix(rustfs): keep recovery handler within S3 gateway by @houseme in https://github.com/rustfs/rustfs/pull/8429
- fix(zip): statically link liblzma on macOS by @houseme in https://github.com/rustfs/rustfs/pull/8434
- refactor(iam): remove legacy OIDC federation paths by @GatewayJ in https://github.com/rustfs/rustfs/pull/8433
- fix: auto-repair breaking changes from 446479791 by @overtrue in https://github.com/rustfs/rustfs/pull/8451
- refactor(iam): construct OIDC runtime directly by @GatewayJ in https://github.com/rustfs/rustfs/pull/8436
- fix(ecstore): allow cold-start recovery at EC read quorum by @cxymds in https://github.com/rustfs/rustfs/pull/8458
- fix(scanner): avoid placeholder retention and resume checkpoints by @houseme in https://github.com/rustfs/rustfs/pull/8460
- fix(dev): restore VS Code debug configurations by @overtrue in https://github.com/rustfs/rustfs/pull/8450
- fix(storage): preserve heal failures and timeout responses by @houseme in https://github.com/rustfs/rustfs/pull/8462
- ci: reduce repeated PR runner work by @overtrue in https://github.com/rustfs/rustfs/pull/8463
- refactor(iam): organize OIDC runtime modules by @GatewayJ in https://github.com/rustfs/rustfs/pull/8445
- ci: reuse workspace test builds for serial ILM checks by @overtrue in https://github.com/rustfs/rustfs/pull/8465
- fix(log-analyzer): match structured heal writer failures by @houseme in https://github.com/rustfs/rustfs/pull/8469
- test(scanner): bound expansion fixture preparation I/O by @houseme in https://github.com/rustfs/rustfs/pull/8473
- docs: refresh security advisory lessons by @overtrue in https://github.com/rustfs/rustfs/pull/8472
- refactor(oidc): isolate config updates and replication view by @GatewayJ in https://github.com/rustfs/rustfs/pull/8446
- fix(obs): honor RUSTFS_OBS_USE_STDOUT with per-signal endpoints by @Pirat83 in https://github.com/rustfs/rustfs/pull/8476
- fix(scanner): skip child prefixes removed before they are opened by @basic-system in https://github.com/rustfs/rustfs/pull/8479
- feat(tls): reload and publish external certificate generations by @houseme in https://github.com/rustfs/rustfs/pull/8467
- build(deps): bump the dependencies group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/rustfs/rustfs/pull/8481
- fix: auto-repair breaking changes from acd26afd8 by @overtrue in https://github.com/rustfs/rustfs/pull/8483
- fix(s3): normalize PUT read quorum failures as unavailable by @cxymds in https://github.com/rustfs/rustfs/pull/8484
- fix(ecstore): recover interrupted delete transactions by @houseme in https://github.com/rustfs/rustfs/pull/8468
- fix(scanner): account remote progress and preserve dispatch limits by @houseme in https://github.com/rustfs/rustfs/pull/8485
- test(ecstore): deflake bucket sentinel and dispatch rollback tests by @cppudge in https://github.com/rustfs/rustfs/pull/8488
- fix(ecstore): validate recovery evidence before mutation by @houseme in https://github.com/rustfs/rustfs/pull/8487
- ci: guard OIDC architecture boundaries by @GatewayJ in https://github.com/rustfs/rustfs/pull/8447
- fix(s3): short-circuit conditional reads at metadata quorum by @houseme in https://github.com/rustfs/rustfs/pull/8459
- fix(oidc): recover providers after startup discovery failures by @GatewayJ in https://github.com/rustfs/rustfs/pull/8475
- fix: refresh peer metadata without blocking bucket mutations by @cxymds in https://github.com/rustfs/rustfs/pull/8486
- test(ecstore): cover delete cleanup crashes and retries by @overtrue in https://github.com/rustfs/rustfs/pull/8471
- test(storage): make recovery and upgrade checks deterministic by @houseme in https://github.com/rustfs/rustfs/pull/8491
- fix(test): discover data dirs by listing instead of info.data_dir by @overtrue in https://github.com/rustfs/rustfs/pull/8495
- test(e2e): borrow URLs in internode RPC helpers by @houseme in https://github.com/rustfs/rustfs/pull/8497
- fix(admin): add OIDC policy log fields by @GatewayJ in https://github.com/rustfs/rustfs/pull/8496
- fix(scanner): reuse observations and expose complete usage by @houseme in https://github.com/rustfs/rustfs/pull/8498
- test: isolate license and rebalance cancellation fixtures by @houseme in https://github.com/rustfs/rustfs/pull/8500
- test(e2e): bound scanner witnesses by the reported schedule by @houseme in https://github.com/rustfs/rustfs/pull/8501
- fix(scanner): bound superseded waits for regular maintenance by @houseme in https://github.com/rustfs/rustfs/pull/8502
- fix(s3): match AWS duplicate bucket responses by @cxymds in https://github.com/rustfs/rustfs/pull/8503
- fix(ilm): make missing lifecycle expiry targets idempotent by @cxymds in https://github.com/rustfs/rustfs/pull/8504
- perf(ecstore): isolate cleanup and preserve metadata authority by @houseme in https://github.com/rustfs/rustfs/pull/8289
- fix(table-catalog): allow commits after object-backed rename by @marshawcoco in https://github.com/rustfs/rustfs/pull/8508
- fix(obs): isolate bucket usage dashboards by cluster by @houseme in https://github.com/rustfs/rustfs/pull/8510
- fix(audit): preserve request identity and verified client address by @houseme in https://github.com/rustfs/rustfs/pull/8513
- refactor(iam): encapsulate federated authorization models by @GatewayJ in https://github.com/rustfs/rustfs/pull/8514
- fix(heal): reject incomplete administrator bucket discovery by @cxymds in https://github.com/rustfs/rustfs/pull/8512
- fix(ecstore): group rename data commit observations by @houseme in https://github.com/rustfs/rustfs/pull/8516
- fix: suppress clippy too_many_arguments on rename_data_commit_from_observations by @overtrue in https://github.com/rustfs/rustfs/pull/8515
- fix(server): restore socket peer fallback for client rate limits by @houseme in https://github.com/rustfs/rustfs/pull/8519
- fix(heal): merge disjoint replacement generations in cluster status by @majinghe in https://github.com/rustfs/rustfs/pull/8521
- fix(heal): preserve retained replacement histories by @houseme in https://github.com/rustfs/rustfs/pull/8525
- perf(heal): index replacement history reconciliation by @houseme in https://github.com/rustfs/rustfs/pull/8527
- fix(server): cancel request watchdogs with response futures by @houseme in https://github.com/rustfs/rustfs/pull/8528
- fix(ci): repair profiling and compact transition test gates by @houseme in https://github.com/rustfs/rustfs/pull/8526
- fix(build): enforce GNU ABI floor and canonical target metadata by @houseme in https://github.com/rustfs/rustfs/pull/8524
- feat(table-catalog): support durable-strong table maintenance by @marshawcoco in https://github.com/rustfs/rustfs/pull/8523
- fix(replication): skip version-addressed marker pre-check on targets that mint their own version ids by @ajax-bakun-n in https://github.com/rustfs/rustfs/pull/8492
- fix(ci): select Python 3.14 for Connect acceptance by @houseme in https://github.com/rustfs/rustfs/pull/8530
- fix(ci): prepare Docker environment for Connect acceptance by @houseme in https://github.com/rustfs/rustfs/pull/8531
- chore(deps): refresh crates and use Pyroscope 2.1.2 by @houseme in https://github.com/rustfs/rustfs/pull/8540
- fix(heal): unblock automatic replacement recovery by @houseme in https://github.com/rustfs/rustfs/pull/8533
- fix(ci): restore main lint and test reliability by @overtrue in https://github.com/rustfs/rustfs/pull/8543
- feat(table-catalog): add opt-in periodic maintenance queueing by @marshawcoco in https://github.com/rustfs/rustfs/pull/8537
- fix(heal): safely recover missing bucket directories by default by @cxymds in https://github.com/rustfs/rustfs/pull/8517
- fix(s3): advise retry after typed lock timeouts by @houseme in https://github.com/rustfs/rustfs/pull/8546
- chore(release): prepare 1.0.2 by @overtrue in https://github.com/rustfs/rustfs/pull/8549
- test(heal): avoid needless collect in legacy root recovery test (1.0.2 backport) by @overtrue in https://github.com/rustfs/rustfs/pull/8551
- @abe723 made their first contribution in https://github.com/rustfs/rustfs/pull/8278
- @Hatsune-Imagine made their first contribution in https://github.com/rustfs/rustfs/pull/8197
- @nilsmelchert made their first contribution in https://github.com/rustfs/rustfs/pull/8164
- @svengo made their first contribution in https://github.com/rustfs/rustfs/pull/8355
- @shurkus made their first contribution in https://github.com/rustfs/rustfs/pull/8363
- @ormandj made their first contribution in https://github.com/rustfs/rustfs/pull/8373
- @tommady made their first contribution in https://github.com/rustfs/rustfs/pull/7903
- @v-belyakov made their first contribution in https://github.com/rustfs/rustfs/pull/8407
- @cppudge made their first contribution in https://github.com/rustfs/rustfs/pull/8378
- @eye-gu made their first contribution in https://github.com/rustfs/rustfs/pull/8424
- @Pirat83 made their first contribution in https://github.com/rustfs/rustfs/pull/8476
- @basic-system made their first contribution in https://github.com/rustfs/rustfs/pull/8479
Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.1...1.0.2-preview.1
2026-10-14, Version 26.12.0 (Current), @richardlau
- [
1ebd6d3677] - (SEMVER-MINOR) doc,lib,src: throw on missing WebAssembly or RX support (Paolo Insogna) #66533 - [
7f1937d2b9] - (SEMVER-MINOR) http: add websocketMask() and websocketUnmask() (James M Snell) #66335
- [
30e76bb16a] - benchmark: fix input passed to subtle.digest in webcrypto-digest (Rafael Gonzaga) #66608 - [
adef72223a] - benchmark: fix buffer option in buffer read/write benchmarks (Rafael Gonzaga) #66604 - [
2f498f08fe] - benchmark: add util.parseArgs benchmark (Rafael Gonzaga) #66599 - [
4ce8412e18] - benchmark: fix url-searchparams-sort to sort a fresh list (RafaelGSS) #66535 - [
493bd6c66e] - benchmark,tools: fix napi benchmarks on GHA (Nigro Simone) #66423 - [
e4515552d6] - build: run QUIC CI for V8 changes (Yuya Inoue) #66602 - [
a888e51062] - build: support Python 3.15 (Mike McCready) #65750 - [
2afab9a63b] - build: do not include shared gtest innodelink path (Antoine du Hamel) #66626 - [
f88c2f8ec6] - build,test: enable temporal support on no-ICU and system-ICU builds (Antoine du Hamel) #66697 - [
5fd03e6fdf] - child_process: propagate config-file permission flags to children (Rafael Gonzaga) #66559 - [
f771134b07] - crypto: isolate provider EC PKCS8 encoding (Filip Skokan) #66413 - [
4e00a293db] - crypto: remove key export and metadata locks (Filip Skokan) #66413 - [
bcd8018775] - crypto: remove verify setup key locking (Filip Skokan) #66413 - [
883250fee2] - crypto: remove KEM key locking (Filip Skokan) #66413 - [
9d98805071] - crypto: remove RSA-OAEP key locking (Filip Skokan) #66413 - [
d6293e7bb1] - crypto: skip secret key mutex allocation (Filip Skokan) #66413 - [
8d8af8003e] - crypto: keep the root cert store per Environment (Shelley Vohr) #66411 - [
c6f0614785] - crypto: remove select Web Crypto warnings (Filip Skokan) #66312 - [
e5360b5a08] - deps: update googletest to 988ea2c1798de7779f656df2281dd36d6039a17a (Node.js GitHub Bot) #66652 - [
7eb230a2c1] - deps: update acorn to 8.19.0 (Node.js GitHub Bot) #66655 - [
af946ba8f3] - deps: update sqlite to 3.54.0 (Node.js GitHub Bot) #66663 - [
007872a85d] - deps: V8: cherry-pick 8d14d49c4040 (Antoine du Hamel) #66627 - [
f44aec4966] - deps: update simdjson to 5.0.3 (Daniel Lemire) #66620 - [
1a33e914e8] - deps: V8: cherry-pick 7d5eb1df2a72 (inoway46) #66566 - [
3294d51e5a] - diagnostics_channel: fix default callback context (Matteo Collina) #66481 - [
5c602a5824] - doc: list futimes among fd APIs disabled by the permission model (Rafael Gonzaga) #66649 - [
eaeb4736c8] - doc: add Test Runner to list of built-in diagnostic channels (Vas Sudanagunta) #66563 - [
0e1c99afae] - doc: document stream/iter behaviors and Node.js extensions (James M Snell) #66483 - [
846236367d] - doc: document URL and Uint8Array references in process.permission (Rafael Gonzaga) #66557 - [
fc3b067be7] - doc: clarify http Agent keepSocketAlive behavior (Efe Karasakal) #66252 - [
73a4e90ce2] - doc: document keepAliveTimeoutBuffer server option (Efe Karasakal) #66286 - [
bb816582af] - doc: fix request.reusedSocket timeout example (Efe Karasakal) #66286 - [
82223ab4d9] - doc: clarify revert PR label policy (Antoine du Hamel) #66529 - [
c6f59d4e8e] - doc: clarify node binary misuse after compromise (Rafael Gonzaga) #66530 - [
8904178498] - doc: document linux-x64-musl build toolchain (Issac) #66523 - [
1e8247a74e] - doc: run license-builder (github-actions[bot]) #66517 - [
b2773d5e4c] - doc: add missing return types in cluster.md (Daniel Pinto) #66453 - [
1ebd6d3677] - (SEMVER-MINOR) doc,lib,src: throw on missing WebAssembly or RX support (Paolo Insogna) #66533 - [
c1073f31de] - ffi: fix exportArrayBuffer type check (Trivikram Kamat) #66455 - [
69148ee0ff] - fs: lock FileHandle on first read in pull() and pullSync() (James M Snell) #66483 - [
700c60a1cd] - fs: serialize FileHandle writer() async writes (James M Snell) #66483 - [
32833def1c] - http: reduce raw header name allocations (Roberto Bianchi) #66488 - [
7f1937d2b9] - (SEMVER-MINOR) http: add websocketMask() and websocketUnmask() (James M Snell) #66335 - [
115731dda7] - http2: speed up response getHeaders (Roberto Bianchi) #66592 - [
447c36cb45] - lib: fix AbortSignal.any() nested composite leak (Darius) #66617 - [
1722ced4b4] - lib: add --allow-fs-vfs to permission available flags (Rafael Gonzaga) #66554 - [
062ece77fc] - lib: fix benchmark record acknowledgement race (Filip Skokan) #66430 - [
05d0b14438] - lib: set exit code on failed node:bench run() (RafaelGSS) #66534 - [
2cab299471] - lib: default node:bench warmup to 10 invocations (RafaelGSS) #66536 - [
83f507845d] - meta: bump nodejs/node-pr-labeler to dfe5eb3 (Soul Lee) #66606 - [
6fbffd5ee5] - meta: bump codecov/codecov-action from 7.1.0 to 7.1.1 (dependabot[bot]) #66448 - [
bd567f8bd6] - module: fix require of imports with package map (Lazizbek Ergashev) #66565 - [
c442f471a5] - module: synchronously load most ES modules (Geoffrey Booth) #62530 - [
51f66f0134] - permission: keep explicit fs grants when dropping a covering directory (Rafael Gonzaga) #66556 - [
1aa10d80e2] - process: mark process.finalization as release candidate (Matteo Collina) #66436 - [
dd4715a6ba] - querystring: fix value decoding after encoded keys (Ved Chaudhari) #66553 - [
9648a6ba8e] - quic: reject closed stream writer writes with a TypeError (James M Snell) #66483 - [
d6f566baf8] - quic: give each BindingData its own allocator state (Shelley Vohr) #66411 - [
c3204c15bd] - quic: validate session close error codes (Christian Aurich Zanettini Martins) #66302 - [
5b87354f5a] - quic: destroy stream on invalid promise body (Christian Aurich Zanettini Martins) #66260 - [
9ef698c781] - sqlite: validate aggregate() name and options (Guilherme Araújo) #66463 - [
bbf41f8cfb] - sqlite: persist enableDefensive() across reopen (Trivikram Kamat) #66404 - [
54867cd25e] - sqlite: throw on oversized strings instead of aborting (Trivikram Kamat) #66521 - [
4314cde48b] - src: release uv_fs_t in permission WildcardIfDir (Rafael Gonzaga) #66555 - [
0e58916f08] - src: stop including simdjson.h from env.h (Daniel Lemire) #66620 - [
06f56a55bb] - src: use native CopyArrayBufferBytes for webstream buffer copy (René) #66400 - [
2e3dd5bb63] - src: fix config file handling (Marco Ippolito) #66431 - [
cd86506bc2] - src: mark config file as stable (Marco Ippolito) #66431 - [
15ff9884e4] - stream: skip idle webstreams start and watchers (Matteo Collina) #66424 - [
3f75c89fb8] - stream: add pipeToSync() failOnIncompleteClose option (James M Snell) #66483 - [
6cecf140e7] - stream: do not fail the writer when pipeToSync() cannot close (James M Snell) #66483 - [
16833534b6] - stream: fix fromSync() async input error messages (James M Snell) #66483 - [
af41622ad8] - stream: reject closed fromWritable() writes with a TypeError (James M Snell) #66483 - [
4b83c6c38e] - stream: accept explicit stream/iter budgets below 16384 (James M Snell) #66483 - [
f302fbd04a] - stream: reduce per-chunk overhead in stream/iter consumers (James M Snell) #66483 - [
7ba60dcdbe] - stream: keep the original error when writer.fail() throws (James M Snell) #66483 - [
dcac51a7db] - stream: align pull() abort handling with the spec (James M Snell) #66483 - [
995dee6b6b] - stream: honor stream/iter protocols on function objects (James M Snell) #66483 - [
6eaf91353a] - stream: do not hold back nested async data in from() (James M Snell) #66483 - [
69d44aedb4] - stream: bound pre-batched async values in from() (James M Snell) #66483 - [
6b1e7c4cf1] - stream: guard shareSync() against re-entrant source reads (James M Snell) #66483 - [
8a47365425] - stream: split oversized share batches under drop-oldest (James M Snell) #66483 - [
30cbc4e643] - stream: reject drop-newest backpressure in shareSync() (James M Snell) #66483 - [
42ae08594e] - stream: detach shareSync consumers on strict budget errors (James M Snell) #66483 - [
fa49de9ba6] - stream: keep share buffer when all consumers detach (James M Snell) #66483 - [
e6662cb904] - stream: fix Utf8Stream flush handling (James M Snell) #66473 - [
93596b1a9e] - stream: add dump()/dumpSync() for stream/iter (Ethan Arrowood) #65598 - [
4ba6ce1b0c] - stream: port remaining SonicBoom tests for Utf8Stream (Matteo Collina) #66275 - [
cd8b5fa5b0] - test: tolerate async block count updates in test-fs-stat-bigint (Rafael Gonzaga) #66576 - [
30814ce991] - test: replace discard loops with dump() (Ethan Arrowood) #65598 - [
20441b8fc0] - test: run node-bench tools test sequentially (Filip Skokan) #66338 - [
9618da6fe3] - test: remove duplicated cases in permission fs-read fixture (Rafael Gonzaga) #66450 - [
c348a4cb46] - test: run instantiateStreaming-bad-imports WPT (Filip Skokan) #66322 - [
7d4fda6ba7] - test: honor allowed WPT promise rejections (Filip Skokan) #66322 - [
d4c87eb086] - test: scope Blob WPT failures to big-endian (Filip Skokan) #66322 - [
7309ddf204] - test_runner: rerun failing todo tests in suites (Barak) #66605 - [
da908b3072] - test_runner: report load errors with --test-isolation=none (Lazizbek Ergashev) #66550 - [
b18e121625] - test_runner: add mock call assertions to t.assert (Guilherme Araújo) #66476 - [
3d691ab75e] - tools: restore Python 3.14 for daily WPT (Filip Skokan) #66699 - [
714aca1ef6] - tools: switch to PGP and SHA256 in ICU updater (Antoine du Hamel) #66469 - [
fa9fca45e4] - tools: lint thread_local in src (Shelley Vohr) #66411 - [
dbc3e97847] - tools: copy hdr_histogram_internal.h in update-histogram.sh (Filipe Oliveira (Redis)) #66528 - [
4760c27904] - tools: bump the eslint group in /tools/eslint with 5 updates (dependabot[bot]) #66445 - [
63c20ee58e] - vfs: add ComposableProvider for layered mounts (Matteo Collina) #66235 - [
ab057989af] - watch: strip underscore aliases of watch flags (Trivikram Kamat) #66365
release-1.30.6
nginx-1.30.6 stable version has been released, with fixes for buffer overflow vulnerability when using alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when evaluating string expressions with variables (CVE-2026-93479), request body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery vulnerability when using TLS session ticket key rotation (CVE-2026-97629), and use-after-free vulnerability when using ngx_http_ssi_module with AIO (CVE-2026-97205).
See official CHANGES-1.30 on nginx.org.
Below is a release summary generated by GitHub.
Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.5...release-1.30.6
release-1.31.7
nginx-1.31.7 mainline version has been released, with fixes for buffer overflow vulnerability when using alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when evaluating string expressions with variables (CVE-2026-93479), request body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery vulnerability when using TLS session ticket key rotation (CVE-2026-97629), and use-after-free vulnerability when using ngx_http_ssi_module with AIO (CVE-2026-97205).
See official CHANGES on nginx.org.
Below is a release summary generated by GitHub.
- Dav: destination validation for COPY and MOVE with "alias" by @VadimZhestikov in https://github.com/nginx/nginx/pull/1764
- Version bump by @pluknet in https://github.com/nginx/nginx/pull/1773
- SSL: set c->error on connection reset SSL_read() error. by @pluknet in https://github.com/nginx/nginx/pull/1271
- SSL: support for iPAddress subjectAltName in certificates. by @jimf5 in https://github.com/nginx/nginx/pull/1264
- Rejected zero size in buffer-size directives. by @sbhowmikf5 in https://github.com/nginx/nginx/pull/1644
- HTTP/2: implement RFC 9218 Extensible Prioritization Scheme for HTTP by @ac000 in https://github.com/nginx/nginx/pull/1520
- QUIC: support BPF reload and binary upgrade by @saikrishnakumarreddy in https://github.com/nginx/nginx/pull/1756
- QUIC: fixed binary upgrade from older versions by @route443 in https://github.com/nginx/nginx/pull/1813
- Updated OpenSSL and PCRE used for win32 builds by @pluknet in https://github.com/nginx/nginx/pull/1816
- GeoIP2: support for GeoIP2 http & stream modules by @nitin9977 in https://github.com/nginx/nginx/pull/1655
Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.6...release-1.31.7
2026-10-14, Version 24.22.0 'Krypton' (LTS), @richardlau prepared by @aduh95
- [
ddbf974b47] - (SEMVER-MINOR) crypto: addcrypto.parsePKCS12()(Brian Muenzenmeyer) #65627 - [
c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553 - [
a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484 - [
c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #65484 - [
51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 - [
d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #66090 - [
acc1578179] - doc: deprecateServer.prototype._listen2innode:net(Antoine du Hamel) #65593 - [
a7f8de6362] - (SEMVER-MINOR) net: support sendingnet.BoundSocketto threads and child processes (Guy Bedford) #64725 - [
60c3eb61bd] - (SEMVER-MINOR) perf_hooks: implementSlidingWindowHistogram(James M Snell) #65825 - [
6b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #65806 - [
75456a3512] - (SEMVER-MINOR) perf_hooks: implement HistogrammeanCIAPI (James M Snell) #65606 - [
72d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #65434 - [
41161dda87] - (SEMVER-MINOR) sqlite: addStatementSync.prototype.close()(Guilherme Araújo) #64232 - [
adbc757d70] - (SEMVER-MINOR) sqlite: addStatementSync.prototype[Symbol.dispose]()(Guilherme Araújo) #64232 - [
241339f072] - (SEMVER-MINOR) src,lib: addutil.markPromiseAsHandled(James M Snell) #65805 - [
63b0974d9e] - (SEMVER-MINOR) util: implementutil.throttle(James M Snell) #65899 - [
a3bbb5a26f] - (SEMVER-MINOR) util: implementdebounce(James M Snell) #65899
- [
e6832b2cb1] - assert: fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) #64449 - [
a079177d9f] - benchmark: add --csv option to compare.js with --analyze (James M Snell) #65922 - [
10b1a0f70f] - benchmark: fix max-regressions detection in compare.js (James M Snell) #65587 - [
e0c7ba8ad5] - benchmark: add --analyze option to benchmark/scatter.js (James M Snell) #65594 - [
21fed10bb0] - benchmark: add crypto class benchmarks (Filip Skokan) #65518 - [
fa912242b7] - buffer: fix unaligned UTF-16LE decoding (Matteo Collina) #65905 - [
a6bd0c1413] - build: suppress OpenSSL asm warnings with clang (Richard Lau) #66023 - [
94e12139ee] - build: derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) #65744 - [
7a2f322943] - build: fix quiet default for make builds (Shelley Vohr) #65826 - [
c280d650b0] - build: allow linking shared dependencies in the GN build (Shelley Vohr) #65797 - [
4b23a4472c] - build: enable the V8 sandbox in shared-cage builds (Shelley Vohr) #62237 - [
676e15c003] - build: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #65464 - [
f784058482] - build: remove obsolete configure flags (Chengzhong Wu) #65456 - [
f63f37d243] - build: activate correct default flags for riscv64 (Stewart X Addison) #65708 - [
da46ac075d] - build: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) #65491 - [
249e9a16dd] - build,src: gate jspi flag on V8_ENABLE_WEBASSEMBLY (Piotr Kubaj) #66082 - [
146f00f64b] - child_process: clear timeout timer on spawn-time error too (kishore280) #65506 - [
13987f4418] - crypto: remove redundentstd::movecall (Antoine du Hamel) #66111 - [
ef957ac85f] - crypto: skip private RSA parameters in key details (Filip Skokan) #66108 - [
8feccc5e22] - crypto: use provider EC group names (Filip Skokan) #66108 - [
764e0d1120] - crypto: fetch ciphers for private-key encoding (Filip Skokan) #66108 - [
50ffed1979] - crypto: decode PKCS#1 keys through providers (Filip Skokan) #66108 - [
56c16b2fd6] - crypto: derive keys through EVP_KDF (Filip Skokan) #66108 - [
a4effe6809] - crypto: use names for asymmetric key algorithms (Filip Skokan) #65966 - [
ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627 - [
8e631aa48f] - crypto: add Hybrid KEMs to Web Cryptography (Filip Skokan) #65759 - [
5c51129e16] - crypto: optimize private EC JWK import (Filip Skokan) #65908 - [
c2ec40c2d7] - crypto: disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) #65172 - [
e198aa0f79] - crypto: read RSA-PSS restrictions from provider (Filip Skokan) #66108 - [
253784f0e9] - crypto: optimize and benchmark key preparation (Filip Skokan) #65892 - [
80a6ad509b] - crypto: avoid EC reconstruction for signature sizing (Filip Skokan) #65908 - [
5b592b772c] - crypto: avoid EC raw export reconstruction (Filip Skokan) #65908 - [
ee956ae3bf] - crypto: export EC JWK coordinates directly (Filip Skokan) #65908 - [
684008be58] - crypto: read EC curve metadata directly (Filip Skokan) #65908 - [
f4665f1c41] - crypto: validate the limit of PBKDF2 iterations (Filip Skokan) #65704 - [
624abbecd7] - crypto: use primordials in HKDF info validation (Filip Skokan) #65704 - [
e4d916f175] - crypto: add mgf1Hash for RSA-OAEP (Adam Mcgrath) #65073 - [
db8a9162a8] - crypto: fix multi-prime RSA JWKs (Filip Skokan) #65649 - [
022ac83504] - crypto: cache valid ECDH key pairs (Filip Skokan) #65615 - [
c61953ebcc] - crypto: add strict mode to --force-fips (Filip Skokan) #65645 - [
db6ea132a5] - crypto: add FIPS indicator diagnostics channel (Filip Skokan) #65645 - [
c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553 - [
2b62aafd20] - crypto: validate JWK usages before key_ops (Filip Skokan) #65550 - [
ec7819db69] - crypto: fix RSA-PSS oversized salt handling (Filip Skokan) #65550 - [
a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484 - [
c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #65484 - [
51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 - [
5a46a9acbb] - crypto: improve SubtleCrypto.supports() accuracy (Filip Skokan) #65222 - [
191ebfb26c] - crypto: fix public PKCS8 export error (한국) #65609 - [
b6d7ed372b] - crypto: fix private SPKI export error (Filip Skokan) #65550 - [
79509c25a4] - crypto: correct CCM decryption FIPS error message (kyungrae) #65450 - [
9adc87bc16] - crypto: harden X509Certificate state (Filip Skokan) #65518 - [
c63aa331b4] - crypto: optimize key slot caching (Filip Skokan) #65518 - [
87daea43a7] - crypto: add null checks for OPENSSL_INIT_new() (Nora Dossche) #63457 - [
98ca5e9358] - crypto: prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) #65112 - [
0c090a28cd] - crypto: avoid throwing CryptoKey brand checks (Filip Skokan) #65503 - [
a13cc3f723] - crypto: avoid throwing KeyObject brand checks (Filip Skokan) #65503 - [
b8db0045ef] - deps: V8: cherry-pick ea9c016f26ad (Gundepalli Sravani) #66570 - [
ba09b53487] - deps: V8: backport c3553509f460 (Jakob Linke) #66089 - [
9ce8ef405b] - deps: V8: backport 8901c793e439 (Toon Verwaest) #66089 - [
fb0d0ca289] - deps: V8: backport 0b94a9fd23ba (Ruan Gustavo) #65753 - [
2faca508c0] - deps: update googletest to 8eff9e336692fc95961e096564f1044c600b881d (Node.js GitHub Bot) #66009 - [
4396c9bffe] - deps: update googletest to 283c17563fe7a1111cd7f581aa5d541e8baeff2f (Node.js GitHub Bot) #65833 - [
8a5b12570c] - deps: update simdjson to 4.6.11 (Node.js GitHub Bot) #65834 - [
c47feb09e8] - deps: update zlib to 1.3.2.1-motley-285e94b (Node.js GitHub Bot) #65835 - [
9f0d905286] - deps: upgrade npm to 11.19.1 (npm team) #65573 - [
373cd332d8] - deps: update googletest to 36ba75f0ad5383a9759f17f3f72fd4661c72cb6d (Node.js GitHub Bot) #65654 - [
aeed6132a7] - deps: update simdjson to 4.6.9 (Node.js GitHub Bot) #65655 - [
2583571342] - deps: update zlib to 1.3.2.1-motley-5eb4d7e (Node.js GitHub Bot) #65494 - [
d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #66090 - [
0a4a8d602a] - doc: fix duplicate 'the' typo innode_platform.cc(Muhammad Al-Muzahid) #66058 - [
b6538138ef] - doc: clarify sub-1000ms behavior in socket.setKeepAlive (Haram Jeong) #65869 - [
d319fa7de4] - doc: remove obsolete mentioning of cl.exe on windows (Chengzhong Wu) #66038 - [
67cb305b59] - doc: note that default signal handling resets the signal mask (Shelley Vohr) #65877 - [
160d44e025] - doc: clarify QUIC async write backpressure (John Finnerty) #65947 - [
ffd47a7ee5] - doc: clarify permission model scope for output paths (Rafael Gonzaga) #66004 - [
2e1772a8ab] - doc: fill in missing zstd docs (James M Snell) #65867 - [
9f88c6f8dc] - doc: add inoway46 as triager (Yuya Inoue) #65565 - [
c2620d01f3] - doc: document windowsHide for child_process.fork (Christopher Buss) #65887 - [
6076111e1a] - doc: qualify directory read ordering for native fs (Trivikram Kamat) #65868 - [
7bf048a336] - doc: add DOMException section to errors API reference (Avocado) #65206 - [
414b6bfa62] - doc: expand revert commit collaborator instructions (Mike McCready) #65848 - [
c8ac91692c] - doc: note that FreeEnvironment() runs a shared event loop (Shelley Vohr) #65691 - [
cc47cc0983] - doc: clarify security triage dispositions and permission boundaries (Rafael Gonzaga) #65436 - [
8b79a71e78] - doc: fix default limit of maxHeadersCount (Aryn H) #65472 - [
56b1252a54] - doc: fix return types for sync methods (Chiang Fong Lee) #58575 - [
da0d32a333] - doc: document REPL DEP0185 throws and uncaught-exception behavior (Adrián Estrada) #64993 - [
f8ab3619b6] - doc: document close() error when in a sqlite callback (Trivikram Kamat) #65090 - [
131f1db302] - doc: clarify return type offs.mkdtemp*(Antoine du Hamel) #65743 - [
7755e98183] - doc: updatechangelog-makerinstructions for releasing (Juan José) #65707 - [
f982a53433] - doc: add stability status tocrypto.setEngine(Antoine du Hamel) #65746 - [
17be003f7c] - doc: remove outdated TLS authorized warning (Tim Perry) #65597 - [
424002232d] - doc: fix stale TOC in maintaining-dependencies (greenhead) #65523 - [
dddb9b57a5] - doc: refactor the AI guidelines (Joyee Cheung) #65269 - [
397b58e113] - doc: fix triggerAsyncId() comment in async_hooks example (soreavis) #64583 - [
338ec94d83] - doc: fix fsPromises.watch overflow value (Matt Radbourne) #64605 - [
f18be21b14] - doc: clarify stream direction in options.stdio note (Avocado) #65236 - [
f07c6acd8b] - doc: clarify signal listener behavior (Som Samantray) #65243 - [
8bc17b0c7a] - doc: add test reporter event lifecycle diagram (sangwook) #63780 - [
452e7477d4] - doc: discourage AbortSignal cleanup for long-lived resources (Efe Karasakal) #64342 - [
acc1578179] - doc: deprecateServer.prototype._listen2innode:net(Antoine du Hamel) #65593 - [
e7ed4361d6] - doc,test: account for OpenSSL 4.1 behaviours (Filip Skokan) #65956 - [
c65fafeab4] - errors: validate constructor name (Christian Aurich) #65607 - [
f6b47938b7] - events: fix weak listener retention overwrite (Aryan) #64024 - [
a27db42c3e] - fs: coerce FileHandle.read length like fs.read (Xia Chao) #65521 - [
f3019b522a] - fs: throw on existing dir in cpSync with errorOnExist (Daijiro Wachi) #64124 - [
cd1011458f] - fs: support removing read-only files in rmSync on Windows (Sparsh :)) #64453 - [
d659dd8cd8] - fs: give directories created by cpSync the source directory's mode (Shelley Vohr) #65488 - [
1dfb047293] - fs: handle recursive watch setup races (Filip Skokan) #65699 - [
bc431c8413] - fs: apply nocase to literal glob exclude patterns (Yusuke Hayashi) #64817 - [
dd5662e641] - fs: do not descend into symlinks for ** unless following symlinks (RafaelGSS) #65435 - [
ac4cf54292] - fs: watch directories, not files, in recursive fs.watch fallback (Shelley Vohr) #65486 - [
7804bfbd71] - fs: preserve directory timestamps in cp (Abhinandan Kumar) #65540 - [
ba5ca5a1a5] - fs: fix recursive watch error handling (Filip Skokan) #65635 - [
b71c4c0551] - fs: fix rmSync error messages for non-ASCII paths (Yeaseen) #61233 - [
53b4700892] - http: don't destroy socket after request completes (Barath Raj) #65952 - [
96d4c23f17] - http: fast-forward teardown of unread messages (Matteo Collina) #65732 - [
742b4bf5a6] - http: coalesce chunked writes during auto-corking (GetThatCookie) #64987 - [
8921108175] - http2: settle pending write callbacks on destroy (Matteo Collina) #66016 - [
9a2f77a3fc] - http2: fix onread assert when destroying session from stream handler (Sankalp Thakur) #65116 - [
99e41eb43a] - http2: error for incomplete reads on RST, auto-drain, deprecate aborted (Tim Perry) #63249 - [
d520b9601c] - http2: fix write deadlock exposed by larger window sizes (Tim Perry) #65440 - [
86b2497aae] - http2: fix async context loss when trailers carry END_STREAM (Orgad Shaneh) #63814 - [
536ccc7daf] - https: limit proxy CONNECT response headers (Matteo Collina) #64545 - [
fe6147832b] - inspector: fix abort when two Environments own the inspector (Shelley Vohr) #65877 - [
843a27782a] - inspector: fix crash when the IsolateData has no platform (Shelley Vohr) #65818 - [
3f0b6d3308] - lib: avoid repeat internal receiver checks (Filip Skokan) #65910 - [
0039479b4a] - lib: fix shared buffer growability validation (Filip Skokan) #65845 - [
e7907130ae] - lib: use Web IDL interface brand checks (Filip Skokan) #65846 - [
7ae085552b] - lib: fix AbortSignal.any() abort propagation (Yuya Inoue) #66014 - [
01032f4fdc] - lib: fix for FileHandle.readableWebStream (Patrick Dähne) #58842 - [
60a9a28206] - lib: avoid unsafe array iteration in cli table (Donghoon Kang) #65838 - [
230a7fcef0] - lib: optimize internal Web IDL dictionaries (Filip Skokan) #65857 - [
7cc02b14ec] - lib: validate sequence iterator objects (Filip Skokan) #65844 - [
c2bb3aeccc] - lib: defer source map payload decoding until first use (Shelley Vohr) #65490 - [
c4b390cf17] - lib: optimize async context frame activation (Tim Perry) #65519 - [
3e4fc50a4f] - lib: use validateArray for array arguments (JunHwan Choi) #65344 - [
b351ac9cd4] - meta: bump step-security/harden-runner from 2.21.0 to 2.21.1 (dependabot[bot]) #66044 - [
693e890fec] - meta: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 (dependabot[bot]) #66046 - [
9c2abc13c2] - meta: bump github/codeql-action/init from 4.37.9 to 4.38.0 (dependabot[bot]) #66048 - [
b3c5c2b91d] - meta: bump github/codeql-action/analyze from 4.37.9 to 4.38.0 (dependabot[bot]) #66049 - [
2428b13b02] - meta: bump github/codeql-action/autobuild from 4.37.9 to 4.38.0 (dependabot[bot]) #66050 - [
eff5d15041] - meta: add joyeecheung as v8 currency strategic initiative champion (Joyee Cheung) #65965 - [
aa549fed0d] - meta: expand on collaborator restoration process (Chengzhong Wu) #65962 - [
593b40eb2b] - meta: add web-standards as webidl owners (Filip Skokan) #65856 - [
e711d3fef3] - meta: bump actions/checkout from 7.0.0 to 7.0.1 (dependabot[bot]) #65718 - [
0fc8a38f5b] - meta: cleanup targos emeritus changes (Antoine du Hamel) #65738 - [
2ca2fd566d] - meta: bump github/codeql-action/init from 4.37.3 to 4.37.9 (dependabot[bot]) #65714 - [
325709818e] - meta: bump github/codeql-action/autobuild from 4.37.3 to 4.37.9 (dependabot[bot]) #65717 - [
8481d22f72] - meta: bump actions/setup-node from 6.4.0 to 7.0.0 (dependabot[bot]) #65720 - [
cd2bd5d9fd] - meta: bump step-security/harden-runner from 2.20.0 to 2.21.0 (dependabot[bot]) #65721 - [
fdec747105] - meta: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.9 (dependabot[bot]) #65722 - [
34c2fca088] - meta: bump github/codeql-action/analyze from 4.37.3 to 4.37.9 (dependabot[bot]) #65723 - [
46d4549938] - meta: document collaborator automation (Filip Skokan) #65671 - [
a7f8de6362] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #64725 - [
466f1f8e62] - net: fix BlockList.fromJSON for IPv4-mapped IPv6 rules (Daijiro Wachi) #64125 - [
cd04cb10d6] - net: recognize bare IPv6 loopback addresses in isLoopback (Daijiro Wachi) #63619 - [
d983942636] - node-api: make object property arrays const (Yilong Li) #65621 - [
cc124394cc] - path: removeStringPrototypeCharCodeAtfrom some methods ofposix(Wiyeong Seo) #54668 - [
60c3eb61bd] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #65825 - [
6b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #65806 - [
8aa870940c] - perf_hooks: reuse buffer for uv metrics (Donghoon Kang) #65985 - [
9cfbfae660] - perf_hooks: validate import normalization offset (Matteo Collina) #65950 - [
75456a3512] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #65606 - [
127cb31864] - perf_hooks: add missing resource timing attributes (greenhead) #65017 - [
72d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #65434 - [
847fe4d049] - permission: block FileHandle fsync and fdatasync (Rafael Gonzaga) #65431 - [
fa9188bd63] - quic: fix two small bugs in HTTP/3 stream internals (Tim Perry) #65970 - [
ee80beaa9f] - quic: fix crash in onStreamClose (Marten Richter) #65861 - [
98486dd764] - quic: reject zero addressLRUSize (Christian Aurich) #65827 - [
97516fc256] - quic: stop guarding ngtcp2_recv_stop_sending callback field (René) #65688 - [
024bef25eb] - quic: remove unused fin flag from blob reader wakeup (trivenay) #65315 - [
5468337456] - quic: release stream arenas before cleanup (Trivikram Kamat) #65410 - [
a794e36970] - sqlite: throw on invalid URL path instead of abort (Guilherme Araújo) #66026 - [
f58a55b8d0] - sqlite: add diagnostic channel (Guilherme Araújo) #62241 - [
be849bc6af] - sqlite: reject connection access from authorizer callbacks (Trevor Burnham) #65156 - [
41161dda87] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #64232 - [
adbc757d70] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 - [
b7b18fdbc9] - sqlite: run backup completion in callback scope (Filip Skokan) #65666 - [
59827acd7f] - sqlite: isolate applyChangeset filter errors (Trivikram Kamat) #64823 - [
5a01df2d15] - sqlite: reject deserialize() while in a callback (Trivikram Kamat) #64796 - [
c9b6e75a2e] - sqlite: refactor error helpers and user function pointers (Ali Hassan) #62794 - [
d4eb6c62a9] - sqlite: prevent database close during callbacks (Matteo Collina) #64743 - [
83b3431c25] - src: detach cppgc wrappers from their Realm before it is freed (Shelley Vohr) #65778 - [
13ed7e35e7] - src: list scripts when--runhas no command (James Ross) #64606 - [
0f62f2b2df] - src: print exception thrown during primordial initialization (Joyee Cheung) #65991 - [
70117640f7] - src: don't kill own process group on failed spawn (Lazizbek Ergashev) #65054 - [
64649abfd4] - src: keep the first snapshot blob alive for later isolates (Shelley Vohr) #65779 - [
3c814e8c3c] - src: fix Stop() terminating the next Environment on the isolate (Shelley Vohr) #65819 - [
a3ababcebb] - src: fix null pointer call when running without a startup snapshot (Shelley Vohr) #65820 - [
7331f5cfcc] - src: stop leaking a CppHeap in CommonEnvironmentSetup (Shelley Vohr) #65792 - [
5570a84048] - src: fix use-after-free in CleanupHookThunkRun (Caleb Everett) #65630 - [
abe1b673e9] - src: keep global list of addon-provided cleanup hooks (Anna Henningsen) #63985 - [
2203ac9382] - src: fix startup snapshot reproducibility of InternalFieldInfo (Chengzhong Wu) #65684 - [
b282765d99] - src: fix live lock between environments with blocked requests (Ilyas Shabi) #65520 - [
61ca3ba93c] - src: apply IsolateSettings when using a snapshot (Shelley Vohr) #65407 - [
33b8d6e10f] - src: add re-entrancy guard to TriggerUncaughtException (Temuulen Undrakhbayar) #64327 - [
49232db71e] - src: reuse cached strings in CompileSerializeMain (agape1225) #65453 - [
e3f52b80a5] - src: report libuv error when openAsBlob cannot stat (Paul Bouchon) #65517 - [
42a5a19027] - src: shave about 20 bytes off each TLSWrap instance (James M Snell) #65144 - [
a06bb51e22] - src: use UTF-8 for task runner filesystem paths (Archkon) #64868 - [
241339f072] - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell) #65805 - [
1260642ace] - stream: destroy Duplex.from async function on early return (Aman Chadha(IVIXMMI)) #65963 - [
5f06defdbd] - stream: make share budget failures detach before throwing (James M Snell) #66028 - [
d1c60d898d] - stream: update broadcast to retain buffered data with zero consumers (James M Snell) #66028 - [
bbb00558c5] - stream: avoid promise allocation for parked transform writes (Matteo Collina) #65625 - [
3216bc3912] - stream: keep webstream stream states in fast-mode objects (Matteo Collina) #65625 - [
70c1415686] - stream: reject closed only after sink abort settles (Lazizbek Ergashev) #65727 - [
f8737b8ee5] - stream: fix ERR_INVALID_STATE when cancelling Readable.toWeb() (Richard Scarrott) #62773 - [
faa16f671c] - stream: amortize writable buffer compaction (Gürgün Dayıoğlu) #65847 - [
6262e0b8c6] - stream: create write request objects lazily (Matteo Collina) #64455 - [
0f0566de15] - stream: allocate stream read buffers from a slab (Matteo Collina) #64455 - [
02c776a7c6] - stream: ensure that stateful transforms preserve this (James M Snell) #65658 - [
4b29051971] - stream: fix nested async flushing with infinite sources (James M Snell) #65658 - [
2e54186d97] - stream: ensure from() observes returned rejecting promise correctly (James M Snell) #65658 - [
fd68d5ca6a] - stream: apply source normalization once at call time (James M Snell) #65658 - [
49ee85b462] - stream: make pipeTo source normalization independent of Writer (James M Snell) #65658 - [
d7d0440f08] - stream: pre-aborted pipeTo now applies dest failure handling (James M Snell) #65658 - [
6d8e643ef3] - stream: ensure async dispoal after endSync awaits for drain (James M Snell) #65658 - [
a082916c00] - stream: ensure factory signals remain active through closing (James M Snell) #65658 - [
38829295a7] - stream: skip unobserved 'readable' emission at EOF (Matteo Collina) #65749 - [
d535859c22] - stream: avoid per-chunk promises in webstream adapters (Matteo Collina) #65548 - [
80568f6818] - stream: address stream/iter review feedback (James M Snell) #65652 - [
6952928f68] - stream: replace object sentinel with symbol (James M Snell) #65652 - [
9c22c4124c] - stream: cancel active stream/iter pulls (James M Snell) #65652 - [
24d87990cf] - stream: fix merge settlement tagging and falsy error tracking (James M Snell) #65652 - [
1e215c4b51] - stream: ensure full-close semantics when closed (James M Snell) #65652 - [
f499d6fadf] - stream: fixup writer to terminate on consumer return/throw (James M Snell) #65652 - [
2130738033] - stream: ensure iterator cleanup on done, reject, etc (James M Snell) #65652 - [
748adc6275] - stream: fixup cancelation handling in pull() (James M Snell) #65652 - [
47b3f6a1fa] - stream: fix early drain after Utf8Stream reopen (Matteo Collina) #65633 - [
6dab5412cf] - test: skip RSA-PSS keygen deprecation tests with BoringSSL (Shelley Vohr) #65808 - [
95d9a25b61] - test: consolidate crypto provider cache coverage (Filip Skokan) #66108 - [
612db6d5b2] - test: deflake user timing WPT assertions (Filip Skokan) #66036 - [
61a73d31eb] - test: fix RSA/DSA wrong-passphrase flake (Filip Skokan) #65983 - [
d9f4a3ee3e] - test: reuse fixed primes in DH tests (Filip Skokan) #65980 - [
a0fd0a8bd6] - test: use named parameters in DH stress test (Filip Skokan) #65980 - [
810a6b00ee] - test: update tests to run with OpenSSL >= 3.0 FIPS mode (Filip Skokan) #64960 - [
dc6b9ba5b2] - test: deflake test-run-watch-cwd-isolation-none-* (Antoine du Hamel) #66035 - [
0f27bd2459] - test: unskiptest-watch-create-isolation-none(Antoine du Hamel) #66041 - [
1019f624f3] - test: deflake util.throttle tests (Filip Skokan) #66034 - [
b4a6719f37] - (SEMVER-MINOR) test: expand histogram test coverage (James M Snell) #65825 - [
047d7c53d2] - test: implement low-risk test optimizations (James M Snell) #65926 - [
33775d2bbb] - test: prevent parser reuse across close scenarios (Filip Skokan) #66017 - [
b8c5283cbc] - test: fix stderr Buffer assertion in exec encoding test (greenhead) #66008 - [
13a2982002] - test: improve sequential test performance (James M Snell) #65928 - [
a578933da0] - test: overlap SLH-DSA signature checks (Filip Skokan) #65980 - [
bfdf20729d] - test: unref cancelled broadcast source timer (Filip Skokan) #65980 - [
b29154d471] - test: collect timeout signals explicitly (Filip Skokan) #65980 - [
384d4fe3ea] - test: skip retries in DNS timeout coverage (Filip Skokan) #65980 - [
c7323843f4] - test: synchronize ordered runner events (Filip Skokan) #65980 - [
625290573a] - test: avoid idle HTTP/HTTPS connections (Filip Skokan) #65980 - [
2bde68398f] - test: close WebAssembly test HTTP servers (Filip Skokan) #65980 - [
4c702e401b] - test: deflake node-api test-free-called (Christian Aurich) #65948 - [
0b6d945ebc] - test: skip C++ symbols in tick-processor-arguments (Philipp Dunkel) #65906 - [
e04210b383] - test: try fixing windows build replacing WMIC (James M Snell) #65949 - [
aed73444de] - test: fix flaky cleanup in http2 test (Tim Perry) #65701 - [
22f47ff728] - test: update WPT WebCrypto, WebIDL and interfaces (Filip Skokan) #65679 - [
f2af511a24] - test: zero-fill buffers before the string length limit check (Christian Aurich) #65755 - [
a28aad9960] - test: update WPT for url to c23755a144 (Node.js GitHub Bot) #65651 - [
ba65bb149a] - test: fix recursive fs.watch error fixture (Filip Skokan) #65683 - [
f3b9f132b1] - test: update streams WPT (Jeong SeokChan) #65638 - [
d2e0f2d3bd] - test: deflake fastutf8stream destroy and reopen tests (Christian Aurich) #65554 - [
7b5896c136] - test: cover Readable.from() sync iterator errors (jakecastelli) #65515 - [
66eafad642] - test: document WPT runner workflows (Filip Skokan) #65510 - [
2e2dc0f556] - test: simplify test-worker-heap-profile.js (Donghoon Kang) #65372 - [
2e57caac46] - test: prefer in-memory databases in sqlite tests (Paul Bouchon) #64701 - [
cef908596e] - test: fix typo from funciton to function (parkhojeong) #63403 - [
4c7bbd4182] - test: widen the gap in the resolver maxTimeout comparison (Shelley Vohr) #65780 - [
25c81c9eff] - test: fix the thread-spawn handshake in the WASI threads fixture (Shelley Vohr) #65780 - [
cab5dcedbe] - test: only count restarts after the write in watch emit-restarted test (Shelley Vohr) #65780 - [
db0ca93e94] - test: ignore tunnel resets in proxy invalid-char-in-url test (Shelley Vohr) #65780 - [
1f0087040a] - test: handle EPIPE in closed channel test (Christian Aurich) #65770 - [
ed4e5df638] - test: deflake test-runner-coverage (Christian Aurich) #65728 - [
48ecb16909] - test: set type=none on IBM i for empty source (Abdirahim Musse) #65545 - [
554a3fba98] - test: deflake WASI poll timing checks (Filip Skokan) #65672 - [
91b5389430] - test: skipfs-watch-recursive-delete-raceon AIX (Antoine du Hamel) #65698 - [
4ed0c8cc6c] - test: deflake test-inspect-async-hook-setup-at-inspect (Christian Aurich) #65584 - [
500b98cc7d] - test: deflake test-watch-mode-restart-esm-loading-error (Christian Aurich) #65623 - [
099c20fcbd] - test: avoid orphaned child on Windows abort test (Kirill Saied) #65451 - [
fc9364fe55] - test: riscv64: skip node-api sea test (Stewart X Addison) #65569 - [
c9d6b5f731] - test: mark platform-specific tests as flaky (Filip Skokan) #65562 - [
cb93d40549] - test,benchmark: use OpenSSL feature helpers (Filip Skokan) #65762 - [
b4b859319d] - test_runner: avoid reusing v8 serializers (Yuya Inoue) #65951 - [
b3766225e1] - test_runner: fix quote escaping in JUnit (Jihwan) #65971 - [
ec37f934db] - tls: propagate singleUse to the secure context (Carlos Vinicius) #66025 - [
21aec3f286] - tls: defer re-entrant calls to SSL state machine from JS (Tim Perry) #65105 - [
ffd3de2831] - tls: read the peer certificate chain without consuming it (Tony Gies) #65602 - [
3481ea3c43] - tls: don't trigger SNICallback or OCSPRequest from the TLS lib stack (Tim Perry) #64827 - [
d75957f0c8] - tls: drop hand-rolled TLS client hello parser (Tim Perry) #64827 - [
c555ba0aeb] - tools: updatetools/v8for Python 3.13 (Richard Lau) #66109 - [
aafff27ebe] - tools: bump eslint-plugin-jsdoc in /tools/eslint in the eslint group (dependabot[bot]) #66102 - [
7a481ebd2c] - tools: group CodeQL GHA updates (Antoine du Hamel) #66057 - [
b2252b4074] - tools: summarize auto-start-ci failures (Filip Skokan) #65979 - [
499fe73da7] - tools: bump the eslint group in /tools/eslint with 6 updates (dependabot[bot]) #66045 - [
d004d957ae] - tools: update pgo build doc for linux (Chengzhong Wu) #66024 - [
bfa329dbba] - tools: correct Slack action version comments (Filip Skokan) #66013 - [
d55d30313b] - tools: make checkout credential use explicit (Filip Skokan) #66013 - [
0a9e844866] - tools: pass author to commit message validator (Filip Skokan) #66012 - [
f5edf1cd7c] - tools: reduce test runner timing overhead (Filip Skokan) #65980 - [
1cb899f727] - tools: bump js-yaml from 4.3.1 to 4.3.2 in /tools/eslint (dependabot[bot]) #65931 - [
9a1d47bc53] - tools: bump js-yaml from 4.3.1 to 4.3.2 in /tools/lint-md (dependabot[bot]) #65932 - [
a1649b36bc] - tools: fix commit queue error summary matching (Filip Skokan) #65913 - [
ff25d0a268] - tools: lint PR commit messages without approval (Filip Skokan) #65875 - [
ab3c2a81f4] - tools: unlabel author ready on base branch conflicts (Filip Skokan) #65872 - [
c97d09cb4a] - tools: apply feedback to and simplify contributor guidance workflow (Filip Skokan) #65785 - [
5410d94903] - tools: removetruefrom branch name for auto-update automation (Antoine du Hamel) #64961 - [
7a45a46798] - tools: bump @humanfs/node from 0.16.7 to 0.16.8 in /tools/eslint (dependabot[bot]) #65757 - [
5df6d29a24] - tools: bump browserslist from 4.28.4 to 4.28.8 in /tools/eslint (dependabot[bot]) #65758 - [
8a9f89bdaa] - tools: refine contributor guidance workflow (Filip Skokan) #65745 - [
ed3e9a2583] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #65716 - [
8d4f0cf264] - tools: do not flag force push as invalid message (Antoine du Hamel) #65700 - [
350b3e69bb] - tools: retry first-time contributor query (Filip Skokan) #65648 - [
fbbfcc499f] - tools: query first-time contributor status (Filip Skokan) #65592 - [
b5885fc823] - tools: offset GitHub crons by 3 minutes (Michaël Zasso) #65612 - [
0cdd3171c0] - tools: label PRs lacking second approval (Filip Skokan) #65538 - [
5240f00c2e] - tools: welcome first-time contributors (Filip Skokan) #65533 - [
fbde6050aa] - tools: enable concurrency for eslint (Huáng Jùnliàng) #62352 - [
ebc028d75d] - trace_events: fix abort when Node.js does not own the V8 platform (Shelley Vohr) #65954 - [
55db777a9a] - typings: add task_queue internal binding types (Seongeun Lee) #65662 - [
ac37bbe109] - typings: add timeoutInfo to TimersBinding (greenhead) #65811 - [
3d9177b477] - typings: add missing sea binding properties (이혜미) #65815 - [
b23928a1f1] - typings: add types for performance binding (Jungwon Sohn) #65574 - [
f67ed991a6] - typings: add encodeIntoResults to EncodingBinding (greenhead) #65350 - [
a1ae3dd285] - typings: add typing for permission binding (Seungmin Nam) #65385 - [
fc43781ee8] - typings: fix fs_event_wrap start filename type (leah-1ee) #65661 - [
7e6a56c367] - typings: add fs_event_wrap internal binding types (leah-1ee) #65661 - [
7508db2cf8] - typings: add stream_pipe internal binding types (Seongeun Lee) #65664 - [
1957f9a282] - typings: add profiler internal binding types (Seongeun Lee) #65660 - [
62ee9eef22] - typings: add ffi internal binding types (Donghoon Kang) #65734 - [
6cad9a6f77] - typings: update zlib binding declarations (이혜미) #65639 - [
54d77431e6] - url: add Symbol.toStringTag to URLPattern (Khaidi Chu) #65925 - [
6345c6d24f] - url: align URLPatternInit dictionary conversion with WebIDL (Piyush Yadav) #65498 - [
63b0974d9e] - (SEMVER-MINOR) util: implement util.throttle (James M Snell) #65899 - [
a3bbb5a26f] - (SEMVER-MINOR) util: implement debounce (James M Snell) #65899 - [
212f6c6c7b] - util: canonicalize namespaced tags in inspect() (René) #63257 - [
b44c072228] - zlib: reject invalid zstd dictionaries (James M Snell) #65867 - [
de1074d592] - zlib: fix zstd reset (James M Snell) #65867 - [
d7e7308c76] - zlib: improve zstd decoding across chunk boundaries (James M Snell) #65865