Trino 482
See the release notes or download Trino
v25.3.7
- fix(security): bump golang.org/x/crypto and x/net for HIGH CVEs by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9763
Full Changelog: https://github.com/dgraph-io/dgraph/compare/v25.3.6...v25.3.7
v25.3.7
- fix(security): bump golang.org/x/crypto and x/net for HIGH CVEs by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9763
Full Changelog: https://github.com/dgraph-io/dgraph/compare/v25.3.6...v25.3.7
Fluent Bit 4.2.6
https://fluentbit.io/announcements/v4.2.6/
- release: update to 4.2.6 by @github-actions[bot] in https://github.com/fluent/fluent-bit/pull/11907
- workflows: Windows docker insufficient disk space fix [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11906
- time: time_tz: Handle conversion rules of windows and IANA tzinfo [Back port to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11911
- out_stackdriver: fix multiple memory leaks and potential corruption [Backport to 4.2] by @baizhenyu in https://github.com/fluent/fluent-bit/pull/11916
- parser: Add IANA time_zone support for native timestamps [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11919
- oauth2: harden token refresh parsing [Backport to 4.2] by @baizhenyu in https://github.com/fluent/fluent-bit/pull/11923
- dockerfiles: windows: fixed VS Build Tools installation [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11920
- workflows: Windows Docker insufficient disk space fix (2nd attempt) [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11927
- out_stackdriver: backport codeowners change by @braydonk in https://github.com/fluent/fluent-bit/pull/11921
- github: workflows: Process unit tests on 4.2 branch [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11932
- github: workflows: Specify OS configs explicitly [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11935
- regex: Plug a regex literal crash [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11946
- in_windows_exporter_metrics: Plug bitwise glitches on 32bit oses [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11947
- unicode: Use the correct maximum size of Cyrillic [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11929
- out_forward: process type and length of pong strictly [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11949
- node_exporter_metrics: Add file path to error messages [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11992
- out_es/out_opensearch: sanitize bulk action metadata [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11993
- tests: runtime: Try to eliminate flakyness on CI load [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11994
- scheduler: Plug FD leaks on destroy [Backport to 4.2] by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12001
Full Changelog: https://github.com/fluent/fluent-bit/compare/v4.2.5...v4.2.6
4.36
S3 / S3 API
- s3api: sort repeated SigV4 query values — @7y-9 (#10031)
- s3api: reject malformed Range offsets — @guankai (#10034)
- s3api: preserve requested AES256 copy encryption — @7y-9 (#10049)
- s3api: preserve equals signs in tag values — @guankai (#10058)
- s3api: apply static config file updates on reload — @chrislusf (#10096)
- s3: keep a file promoted to a directory retrievable as an object — @chrislusf (#10070)
- s3: skip 503 when client disconnects during remote cache wait — @chrislusf (#10071)
- s3: avoid reading upload body when writing JSON errors — @qzhello (#10073)
- s3: propagate IAM changes from standalone weed s3 to peer pods — @chrislusf (#10095)
- s3: replicate by fanning out from the gateway to every holder — @chrislusf (#10078)
Iceberg
- iceberg: support namespace property updates — @chrislusf (#10052)
- iceberg: return 400 for invalid namespace/table names — @chrislusf (#10051)
- iceberg: support table register — @chrislusf (#10067)
- iceberg: support multi-table transaction commit — @chrislusf (#10066)
- iceberg: support views — @chrislusf (#10069)
- iceberg: support table rename — @chrislusf (#10068)
- iceberg: detect table-exists through the wrapped manager error — @chrislusf (#10075)
S3 Tables
- s3tables: fix create-after-rename overwriting the renamed table — @chrislusf (#10091)
- s3tables: allow hyphens in namespace and table names — @chrislusf (#10093)
STS / IAM / Security
- sts: authorize AssumeRole by the role's trust policy — @chrislusf (#10097)
- sts: enforce session-policy explicit deny during role chaining — @chrislusf (#10103)
- security: add BearerPrefix constant for Authorization headers — @chrislusf (#10101)
Filer
- filer: propagate proxyChunkId query params to volume server — @MorezMartin (#10036)
- filer: apply -filer.disk default to metadata log assigns — @jk2lx (#10080)
- filer.backup: repair chunk-incomplete and stale destination entries — @kisow (#10082)
- filer: mint volume read JWT when proxying chunk reads — @chrislusf (#10100)
Mount (FUSE)
- mount: don't hang close() when a writer is killed during flush — @chrislusf (#10090)
- mount: skip redundant permission checks under default_permissions — @chrislusf (#10089)
- mount: confirm an empty directory rebuild before caching it — @chrislusf (#10092)
- mount: don't fail close() on a benign FUSE interrupt — @chrislusf (#10102)
- fix: enforce XATTR_REPLACE semantics in setxattr — @shiftraodd (#10059)
Volume / EC / Storage
- feat: support marking volumes by collection — @7y-9 (#9585)
- Volume balancing by step — @m-sementsov (#10035)
- Fix stale cache fallback for empty volume locations in wdclient — @os-pradipbabar (#10081)
- chunk_cache: close data/index files on initialization error — @AlexArtemis (#10057)
Shell (EC tooling)
- shell: support batched EC encode and multi-volume selection in ec.encode — @qzhello (#10030)
- shell: exclude failed EC shard copies from rebuild recoverability gate — @qzhello (#10043)
- shell ec.rebuild: allow targeting rebuild to specific volume IDs — @plisandro (#10087)
Worker
- worker: don't leak task goroutines on forced shutdown — @chrislusf (#10062)
PostgreSQL
- postgres: resolve startup message length type mismatch and uint underflow OOM risk — @198wmj (#10065)
- postgres: prevent uint32 underflow & OOM in message parsing — @sshhan (#10099)
Util / Core
- util: support IPv6 host port parsing — @guankai (#10046)
- util: trim minFreeSpace values before parsing — @guankai (#10083)
- util/http: lazily init the global HTTP client to fix admin metrics nil panic — @chrislusf (#10044)
- benchmark: close CPU profile file handle after profiling — @AlexArtemis (#10048)
Error-handling cleanups
- fix: use %w instead of %v in fmt.Errorf to preserve error chain — @DanielWu-star (#10047)
- refactor: 将 fmt.Errorf 中的 %v 替换为 %w 以保留错误链 — @aCuteBegCinner (#10050)
- fix: resolve inconsistent usage of error variables — @mumingl (#10060)
Dependencies
- bump cassandra-gocql-driver to v2.1.2 — @chrislusf (#10033)
- bump ydb-go-sdk/v3 3.139.5 → 3.141.0 — @dependabot (#10041)
- bump modernc.org/sqlite 1.49.1 → 1.53.0 — @dependabot (#10040)
- bump reedsolomon 1.14.0 → 1.14.1 — @dependabot (#10039)
- bump testcontainers-go 0.40.0 → 0.43.0 — @dependabot (#10042)
- bump iceberg-go 0.5.0 → 0.6.0 — @dependabot (#10038)
- bump jackson-databind 2.18.6 → 2.22.0 (test/java/spark) — @dependabot (#10094)
- deps: replace deleted tyler-smith/go-bip39 with cosmos fork — @chrislusf (#10088)
Build / CI / Telemetry
- build(deps): bump actions/checkout 6 → 7 — @dependabot (#10037)
- telemetry: sync go.mod/go.sum with parent module deps — @chrislusf (#10045)
- @guankai made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10034
- @DanielWu-star made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10047
- @AlexArtemis made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10048
- @aCuteBegCinner made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10050
- @mumingl made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10060
- @shiftraodd made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10059
- @198wmj made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10065
- @jk2lx made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10080
- @sshhan made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10099
Full Changelog: https://github.com/seaweedfs/seaweedfs/compare/4.35...4.36
v2.2.3
This release includes 48 updates, covering AI Gateway enhancements, multi-provider LLM protocol compatibility, gateway stability, Gateway API and Helm improvements, test coverage, and release maintenance.
- New Features: 11 items
- Bug Fixes: 28 items
- Documentation Updates: 1 item
- Testing Improvements: 5 items
- Release and Dependency Maintenance: 3 items
-
Related PR: #3849
Contributor: @GHX5T-SOL
Change Log: Key Auth now supports multiple credentials for a single service.
Feature Value: Simplifies migration and multi-client access scenarios where more than one key must be managed for the same service. -
Related PR: #3838
Contributor: @Betula-L
Change Log:jwt-authnow supports remote JWKS.
Feature Value: Makes centralized key management and key rotation easier for JWT-based authentication. -
Related PR: #3894
Contributor: @JianweiWang
Change Log:ai-security-guardadds structuredx_higressdeny responses, error-path metrics, and AI logging.
Feature Value: Improves observability and policy feedback for AI content safety enforcement. -
Related PR: #3898
Contributor: @zat366
Change Log:ai-load-balanceradds acluster_hashload balancing policy based on FNV-1a consistent hashing.
Feature Value: Provides more stable routing across model backend clusters. -
Related PR: #3895
Contributor: @JianweiWang
Change Log:ai-security-guardadds Embedding API content detection support.
Feature Value: Extends AI content safety checks beyond chat/completion-style requests. -
Related PR: #3916
Contributor: @ponypony0123
Change Log:model-routeraddskeepOriginalModelNameto preserve the full original model name.
Feature Value: Helps users keep downstream model identity semantics intact while still applying model routing rules. -
Related PR: #3979
Contributor: @EndlessSeeker
Change Log: Helm now supports skipping IngressClass creation.
Feature Value: Better supports clusters where IngressClass resources are pre-managed or controlled by platform teams. -
Related PR: #3981
Contributor: @EndlessSeeker
Change Log: GatewayClass isolation is now configurable.
Feature Value: Gives operators more control over resource boundaries in multi-GatewayClass environments. -
Related PR: #3943
Contributor: @zijiren233
Change Log: Enhanced SSL passthrough support.
Feature Value: Improves Higress support for TLS passthrough scenarios. -
Related PR: #3989
Contributor: @Rand01ph
Change Log: AI Proxy adds vLLM passthrough support for Anthropic Messages and newer OpenAI endpoints.
Feature Value: Improves compatibility for users running vLLM behind Higress as an AI gateway. -
Related PR: #4000
Contributor: @ponypony0123
Change Log: Added theai-context-limitWASM plugin for context window limit enforcement.
Feature Value: Helps reduce failures and cost risks caused by requests that exceed model context limits.
-
Related PR: #3864
Contributor: @Jing-ze
Change Log:ai-proxyre-anchorsX-HI-ORIGINAL-AUTHon the first hop to fix cascaded-gateway 401 responses.
Feature Value: Restores correct authentication behavior in cascaded gateway deployments. -
Related PR: #3839
Contributor: @zat366
Change Log:ai-proxyusesHasSuffixinstead ofContainsin Claude API name detection.
Feature Value: Avoids sub-path misidentification and improves Claude-compatible routing accuracy. -
Related PR: #3870
Contributor: @CH3CHO
Change Log: Fixed descriptions forbasePath-related fields in theai-proxyplugin.
Feature Value: Makes plugin configuration documentation clearer and less error-prone. -
Related PR: #3869
Contributor: @CH3CHO
Change Log: Fixed test cases inregistry/nacos/mcpserver/watcher_test.go.
Feature Value: Improves reliability of registry and MCP server watcher tests. -
Related PR: #3860
Contributor: @Jing-ze
Change Log:ai-proxynow routes Anthropic Messages natively to Vertex:rawPredict.
Feature Value: Improves Vertex AI compatibility for Anthropic Messages requests. -
Related PR: #3851
Contributor: @JianweiWang
Change Log:ai-statisticsskips empty streaming model values.
Feature Value: Prevents inaccurate or noisy model statistics for streaming requests. -
Related PR: #3904
Contributor: @Jing-ze
Change Log:ai-proxystripsanthropic-betaandanthropic-versionheaders in Vertex passthrough mode.
Feature Value: Avoids incompatible headers when routing Anthropic-style requests through Vertex. -
Related PR: #3914
Contributor: @Jing-ze
Change Log: Bumpedoauth2-proxyto fix a nil panic in the OIDC verifier callback.
Feature Value: Improves OIDC authentication stability. -
Related PR: #3923
Contributor: @johnlanni
Change Log: Removed request-count rebuild triggers in WASM.
Feature Value: Reduces unnecessary rebuild behavior. -
Related PR: #3922
Contributor: @johnlanni
Change Log: Rebuilds the MCP filter under high memory usage.
Feature Value: Improves runtime stability under memory pressure. -
Related PR: #3928
Contributor: @Jing-ze
Change Log: FixedSet-Cookieheader corruption during OIDC session refresh.
Feature Value: Prevents broken sessions during OIDC refresh flows. -
Related PR: #3964
Contributor: @EndlessSeeker
Change Log: Merges InferencePool route configs correctly during HTTPRoute merging.
Feature Value: Fixes route config loss in Gateway API inference routing scenarios. -
Related PR: #3971
Contributor: @EndlessSeeker
Change Log: Helm disables alpha Gateway API watches by default.
Feature Value: Reduces default install risk from alpha API watchers. -
Related PR: #3980
Contributor: @EndlessSeeker
Change Log: Sets Gateway status address type by value.
Feature Value: Fixes Gateway status address reporting. -
Related PR: #3956
Contributor: @XinhhD
Change Log:ai-proxycleans clientAuthorizationheaders for API-key providers.
Feature Value: Prevents client credentials from leaking into upstream API-key provider requests. -
Related PR: #3973
Contributor: @XinhhD
Change Log:ai-proxypreserves VertexthoughtSignaturevalues in OpenAI tool calls.
Feature Value: Improves Vertex tool-call compatibility. -
Related PR: #3985
Contributor: @XinhhD
Change Log:ai-proxyincludes tool call type in Claude stream deltas.
Feature Value: Improves Claude stream compatibility for tool calls. -
Related PR: #3924
Contributor: @geekspeng
Change Log: Helm movesimagePullPolicyfrom PodSpec to the gateway container level.
Feature Value: Aligns rendered gateway manifests with Kubernetes container-level image pull policy semantics. -
Related PR: #3905
Contributor: @philo-x
Change Log: Fixed golang-filter architecture mismatch during local gateway builds on arm64 macOS.
Feature Value: Improves local build reliability on Apple Silicon machines. -
Related PR: #3998
Contributor: @yyyCode
Change Log: Helm usesChart.Versionas the default plugin-server image tag.
Feature Value: Keeps plugin-server image tag defaults aligned with chart versions. -
Related PR: #3994
Contributor: @EndlessSeeker
Change Log: Preserves Ingress LoadBalancer hostnames.
Feature Value: Avoids losing hostname-based load balancer addresses in Ingress status. -
Related PR: #4002
Contributor: @geekspeng
Change Log: Helm appliesimagePullPolicyto the controller container and promtail sidecar.
Feature Value: Ensures rendered manifests apply image pull behavior consistently across containers. -
Related PR: #3988
Contributor: @enkilee
Change Log: Fixed several typos.
Feature Value: Improves repository documentation and code readability. -
Related PR: #3962
Contributor: @CH3CHO
Change Log:ai-cachehandles SSE first chunks that only contain a role, fixing #3953.
Feature Value: Improves AI cache compatibility with streaming responses. -
Related PR: #3990
Contributor: @XinhhD
Change Log:ai-proxyadds IDs for Vertex tool calls.
Feature Value: Improves downstream tool-call correlation and compatibility. -
Related PR: #4013
Contributor: @EndlessSeeker
Change Log: OIDC now fails closed when the verifier is unavailable.
Feature Value: Avoids unsafe authentication behavior during verifier failures. -
Related PR: #4012
Contributor: @EndlessSeeker
Change Log: Hardened cluster key rate-limit cookie parsing.
Feature Value: Improves robustness for cluster-level rate-limit cookie handling. -
Related PR: #4016
Contributor: @EndlessSeeker
Change Log: Reverted "Skip TLS certificate verification for HTTPS upstreams".
Feature Value: Restores safer TLS verification behavior for HTTPS upstreams.
- Related PR: #3890
Contributor: @FAUST-BENCHOU
Change Log: Added the missing Chinese README for extensions.
Feature Value: Improves documentation coverage for Chinese users.
-
Related PR: #3871
Contributor: @Jing-ze
Change Log: Expanded unit test coverage for thewasm-go/mcpmcp-server framework.
Feature Value: Improves confidence in MCP server framework behavior. -
Related PR: #3873
Contributor: @Jing-ze
Change Log: Added end-to-end transformer coverage and fixed silent error wrapping.
Feature Value: Improves transformer reliability and error visibility. -
Related PR: #3875
Contributor: @Jing-ze
Change Log: Covered thehmac-auth-apisixalgorithm matrix, clock skew, and authentication edge cases.
Feature Value: Strengthens authentication plugin reliability. -
Related PR: #3878
Contributor: @Jing-ze
Change Log: Coveredtraffic-tagoperators, weight CDF boundaries, and parser rejection paths.
Feature Value: Improves confidence in traffic tagging behavior under edge conditions. -
Related PR: #3879
Contributor: @Jing-ze
Change Log: Increased unit test coverage to at least 90% across 9 WASM plugins.
Feature Value: Improves plugin quality and regression protection.
-
Related PR: #3987
Contributor: @johnlanni
Change Log: Updated the Envoy submodule.
Feature Value: Keeps the gateway data-plane dependency aligned with the release baseline. -
Related PR: #4017
Contributor: @johnlanni
Change Log: Updated the Envoy submodule.
Feature Value: Pulls in the latest Envoy dependency updates for the release. -
Related PR: #4019
Contributor: @EndlessSeeker
Change Log: Released v2.2.3.
Feature Value: Updates release metadata and versioned dependencies for Higress v2.2.3.
- 🚀 New Features: 11 items
- 🐛 Bug Fixes: 28 items
- 📚 Documentation Updates: 1 item
- 🧪 Testing Improvements: 5 items
- 🔧 Release and Dependency Maintenance: 3 items
Total: 48 changes
Thank you to all contributors for your hard work! 🎉
This release includes 8 updates, covering MCP configuration fixes, LLM provider usability improvements, route and service stability, YAML cleanup, and workflow maintenance.
- New Features: 1 item
- Bug Fixes: 7 items
- Related PR: #722
Contributor: @CH3CHO
Change Log: Added support for collapsing token lists for LLM providers.
Feature Value: Improves readability and usability when configuring providers with many tokens.
-
Related PR: #724
Contributor: @JayLi52
Change Log: Fixed parsing when MCP service names contain colons.
Feature Value: Prevents MCP service configuration failures caused by service-name parsing. -
Related PR: #733
Contributor: @CH3CHO
Change Log: Fixed stale state inServiceWeightTable.
Feature Value: Keeps service weight display and edits aligned with the current state. -
Related PR: #729
Contributor: @CH3CHO
Change Log: Fixed a possible NPE inSystemServiceImpl.
Feature Value: Improves backend stability for system service operations. -
Related PR: #730
Contributor: @CH3CHO
Change Log: Trims trailing whitespace inhigress-configYAML data before submission.
Feature Value: Avoids configuration noise and accidental YAML formatting issues. -
Related PR: #734
Contributor: @CH3CHO
Change Log: Improved SSE transport path concatenation inDirectRoutingDetailStrategy.
Feature Value: Prevents incorrect direct-routing paths for SSE transport. -
Related PR: #735
Contributor: @JayLi52
Change Log: Preserves same-name routes when deleting MCP servers.
Feature Value: Avoids deleting unrelated routes that share a name with the MCP server. -
Related PR: #737
Contributor: @CH3CHO
Change Log: Fixed deploy-to-OSS workflow failures caused by Node.js 20 deprecation.
Feature Value: Restores release and deployment automation reliability.
- 🚀 New Features: 1 item
- 🐛 Bug Fixes: 7 items
Total: 8 changes
Thanks to all contributors for their hard work! 🎉
- @GHX5T-SOL made their first contribution in #3849
- @FAUST-BENCHOU made their first contribution in #3890
- @ponypony0123 made their first contribution in #3916
- @XinhhD made their first contribution in #3956
- @geekspeng made their first contribution in #3924
- @philo-x made their first contribution in #3905
- @yyyCode made their first contribution in #3998
- @zijiren233 made their first contribution in #3943
- @enkilee made their first contribution in #3988
- @Rand01ph made their first contribution in #3989
Full Changelog:
- Higress: v2.2.2...v2.2.3
- Higress Console: v2.2.2...v2.2.3
2026-06-24, Version 26.4.0 (Current), @aduh95
- [
cde0daabcc] - (SEMVER-MINOR) doc: updateblockListstability status to release candidate (alphaleadership) #63050 - [
b78f5a7537] - (SEMVER-MINOR) fs: support caller-suppliedreadFile()buffers (Matteo Collina) #63634 - [
417aacbc36] - (SEMVER-MINOR) http: close pre-request sockets incloseIdleConnections(semimikoh) #63470 - [
fbb108be7d] - (SEMVER-MINOR) loader: implement package maps (Maël Nison) #62239 - [
45494d5a8a] - (SEMVER-MINOR) net: supportTCP_KEEPINTVLandTCP_KEEPCNTinsetKeepAlive(Guy Bedford) #63825 - [
ee29465e77] - (SEMVER-MINOR) tls: add certificateCompression option (Tim Perry) #62217 - [
b17817eb2b] - (SEMVER-MINOR) vfs: dispatchnode:fs/promisesto mounted VFS instances (Matteo Collina) #63537 - [
7bc93a6ac5] - (SEMVER-MINOR) vfs: add minimalnode:vfssubsystem (Matteo Collina) #63115
- [
c7eb83b46a] - benchmark: add child_process async path baselines (Yagiz Nizipli) #63929 - [
066fff17a5] - benchmark: remove old alias usage in ffi benchmarks (Anna Henningsen) #63666 - [
509cd1b94f] - buffer: optimize Buffer.prototype.copy (Robert Nagy) #63828 - [
86e651bbd0] - buffer: use simdutf for two-byte utf8 byteLength (Mert Can Altin) #63639 - [
d3f4ed9015] - build: suppress compiler warnings for histogram (Richard Lau) #63980 - [
82dd7ddbe6] - build: add QUIC CI job for PRs matching QUIC related paths (Tim Perry) #63875 - [
1124c0652d] - build: remove redundant intermediate node_aix_shared (Chengzhong Wu) #63747 - [
e510ee8087] - build: build codecache and snapshot with libnode (Chengzhong Wu) #63626 - [
5b583dace5] - build: enable maglev by default on Linux ppc64le (Richard Lau) #63474 - [
a2324246b4] - build: remove duplicated node_use_sqlite and node_use_ffi conditions (Chengzhong Wu) #63629 - [
2a467a5f69] - Revert "build, doc: generate node.1 with doc-kit" (Antoine du Hamel) #64091 - [
e01dec45b8] - build, doc: generate node.1 with doc-kit (Aviv Keller) #62044 - [
2ab9848fe4] - child_process: pass spawn options to the binding positionally (Yagiz Nizipli) #63930 - [
04c04c8b5c] - child_process: serialize advanced IPC messages natively (Yagiz Nizipli) #63933 - [
1eef57293d] - crypto: support non-byte WebCrypto lengths and cSHAKE (Filip Skokan) #63988 - [
788a66e147] - crypto: share WebCrypto method and usage helpers (Filip Skokan) #63975 - [
f9fdce3f46] - crypto: use EVP_MAC for HMAC on OpenSSL >=3 (Filip Skokan) #63942 - [
7e9ca87e58] - crypto: make webcrypto aliasKeyFormat directional (Filip Skokan) #63910 - [
656e57ebbf] - crypto: fix unhandled error in Hash._transform (Haram Jeong) #63261 - [
65536f0d98] - crypto: refactor keyObject.toCryptoKey() and SubtleCrypto.getPublicKey() (Filip Skokan) #63622 - [
978f1d2bcc] - crypto: handle cipher context allocation failures (Tian Teng) #63542 - [
5551e8f773] - crypto: deduplicate X509 subject matching logic (Tobias Nießen) #63644 - [
57ae87640a] - crypto: fix warnings in test_node_crypto.cc (Maya Lekova) #63490 - [
9984b05dff] - crypto: coerce -0 to +0 before native calls (Filip Skokan) #63556 - [
88011a3689] - crypto,tls: do not ignore BN_get_word error (Tobias Nießen) #63895 - [
9a3393d14f] - debugger: lazily wait for initial break output (Trivikram Kamat) #63969 - [
b0bfcb9c59] - debugger: defer probe pause handling until startup (Trivikram Kamat) #63608 - [
8516003953] - debugger: await initialization after run and restart (Trivikram Kamat) #63607 - [
4438cb5284] - debugger: add --max-hit option to probe mode (Joyee Cheung) #63704 - [
238b54ed2a] - debugger: add more logs to probe mode (Joyee Cheung) #63663 - [
bbef54b413] - deps: libffi: cherry-pick 9ca53a19833d (Anthony Green) #64040 - [
9761385dbd] - deps: update libffi to 3.6.0 (Node.js GitHub Bot) #64040 - [
373ec2d092] - deps: update acorn to 8.17.0 (Node.js GitHub Bot) #63901 - [
e44b5d487e] - (SEMVER-MINOR) deps: update OpenSSL build config to support compression (Tim Perry) #62217 - [
3ed287a2e2] - deps: upgrade npm to 11.17.0 (npm team) #63857 - [
b1b597c797] - deps: add ngtcp2_fmt.c to build configuration (ngtcp2.gyp) (沈鸿飞) #63821 - [
0bf8e12305] - deps: V8: add CopyArrayBufferBytes API (Robert Nagy) #63828 - [
e49d7301a5] - deps: update ngtcp2 to 1.23.0 (Node.js GitHub Bot) #63777 - [
e5c079004b] - deps: update nghttp3 to 1.16.0 (Node.js GitHub Bot) #63776 - [
d599fa2346] - deps: update googletest to 7140cd416cecd7462a8aae488024abeee55598e4 (Node.js GitHub Bot) #63775 - [
bc09f1508c] - deps: update sqlite to 3.53.2 (Node.js GitHub Bot) #63774 - [
60787746c4] - deps: update zlib to 1.3.2.1-motley-3246f1b (Node.js GitHub Bot) #63773 - [
971af104f1] - deps: update amaro to 1.1.10 (Node.js GitHub Bot) #63670 - [
e17f665444] - deps: update googletest to 8736d2cd5c1dcba41170ed2fddca14021d4916c3 (Node.js GitHub Bot) #63669 - [
7591949457] - dgram: add synchronous Socket connectSync() (Guy Bedford) #63932 - [
d75222d7cb] - dgram: add synchronous Socket.prototype.bindSync() (Guy Bedford) #63838 - [
0cf8342ae2] - dns: coerce -0 to +0 in lookup and resolver inputs (Filip Skokan) #63556 - [
e068299320] - doc: update gcc toolchains togcc-13andg++-13(Louie Llaneta) #64018 - [
65178bdcf3] - doc: add aduh95 to last security release steward (Antoine du Hamel) #63981 - [
83eedfe85b] - doc: fix typo in util.md (Daijiro Wachi) #63961 - [
54948c78e7] - doc: clarify callback exceptions (Matteo Collina) #63939 - [
205d0a57f2] - doc: fix incorrect test runner mock examples (Kimaswa Emmanuel Yusufu) #63656 - [
44809b176c] - doc: clarify fromReadable() duck-typed contract (Trivikram Kamat) #63682 - [
9cb15fcc85] - doc: fix typo in cli.md (Daijiro Wachi) #63883 - [
394d0bb928] - doc: fix typo in vm.md (Daijiro Wachi) #63881 - [
59b7be8193] - doc: fix typo in packages.md (Daijiro Wachi) #63882 - [
33c236cea9] - doc: fix a/an article typos in module, util, and dns (Daijiro Wachi) #63766 - [
30595da67b] - doc: update npm supported versions link (hojeong park) #63672 - [
5919ba7e97] - doc: fix AES-OCB IV length in SubtleCrypto.supports example (Anshika Jain) #63717 - [
51cab5cb72] - doc: add webstreams to args forpipelinefromstream/promises(David Sanders) #63628 - [
ce85b2af88] - doc: fix "used to sent" → "used to send" in http2 (Daijiro Wachi) #63700 - [
298735e8df] - doc: mark Node.js 25 as End-of-Life (Antoine du Hamel) #63692 - [
56948518b9] - doc: clarify tty raw mode applies to input processing only (Muhammad Zeeshan) #63438 - [
32ff731248] - doc: add worker_threads history entries (Bob Put) #63545 - [
cde0daabcc] - (SEMVER-MINOR) doc: updateblockListstability status to release candidate (alphaleadership) #63050 - [
d29483fc4f] - doc,crypto: mark argon2 and encap/decap as stable (Filip Skokan) #63924 - [
6e668331d9] - events: improveaddAbortListenerperf by caching options object (Raz Luvaton) #52367 - [
97aafe2519] - ffi: add fast support for almost all other platforms (Paolo Insogna) #63941 - [
f52cf5eeaa] - ffi: add experimental fast FFI call API for AArch64 and x86_64 (Paolo Insogna) #63068 - [
d9461fee05] - ffi: port semi-colon fix for riscv64 (and others) (Stewart X Addison) #63794 - [
4c8402e0a8] - fs: do not treat EPERM as ENOTEMPTY on Windows (Kirill Saied) #63709 - [
b78f5a7537] - (SEMVER-MINOR) fs: support caller-supplied readFile() buffers (Matteo Collina) #63634 - [
3d0097d489] - fs: prevent spurious recursive watch events on prefix siblings (Marco) #63095 - [
14d829cb3c] - fs: ignore deleted dirs in recursive watch scan (Trivikram Kamat) #63686 - [
ceba08a1ea] - fs: coerce -0 to +0 in mode flags and watch intervals (Filip Skokan) #63556 - [
6577d3b282] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #64004 - [
417aacbc36] - (SEMVER-MINOR) http: close pre-request sockets in closeIdleConnections (semimikoh) #63470 - [
b7fd13a59a] - http2: retain header memory in session accounting (Matteo Collina) #63752 - [
e611ccd167] - inspector: fix inspector.close() documented behavior (Chengzhong Wu) #63837 - [
a44f51eef3] - lib: fix missing lazyDOMException import (Filip Skokan) #64033 - [
27cc4ec598] - lib: add lint rule to enforce use ofkEmptyObject(Antoine du Hamel) #63790 - [
7ee31b0bf4] - lib: improve control abstraction coverage in frozen intrinsics (Renegade334) #63698 - [
078457839a] - lib: add Iterator global to primordials (Renegade334) #63698 - [
58837dc4dd] - lib: remove source map deadcode in type stripping (Chengzhong Wu) #63738 - [
e7513a8b9e] - lib: makeNavigator#languagegetter throw on invalidthis(Mohamed Sayed) #63601 - [
fbb108be7d] - (SEMVER-MINOR) loader: implement package maps (Maël Nison) #62239 - [
ea0b8e1dc2] - meta: bump github/codeql-action from 4.35.3 to 4.36.1 (dependabot[bot]) #63724 - [
ac90719532] - meta: bump actions/cache from 5.0.4 to 5.0.5 (dependabot[bot]) #62847 - [
3ed3de3062] - meta: bump actions/checkout from 6.0.2 to 6.0.3 (dependabot[bot]) #63726 - [
d08d57bf70] - meta: bump codecov/codecov-action from 6.0.0 to 6.0.1 (dependabot[bot]) #63725 - [
e748d192cf] - meta: bump cachix/cachix-action (dependabot[bot]) #63729 - [
10554eb131] - meta: bump actions/stale from 10.2.0 to 10.3.0 (dependabot[bot]) #63728 - [
791885f2af] - meta: bump step-security/harden-runner from 2.19.0 to 2.19.4 (dependabot[bot]) #63727 - [
32d9a407d9] - meta: bump cachix/install-nix-action from 31.10.5 to 31.10.6 (dependabot[bot]) #63723 - [
b97c7bed07] - module: enable existing machinery for deferred import of static modules (Maya Lekova) #63712 - [
4becad2117] - module: use file: URL as sourceURL for type-stripped CommonJS (Joyee Cheung) #63705 - [
c71c85b95f] - net: early TCP binding via synchronous net.BoundSocket (Guy Bedford) #63951 - [
45494d5a8a] - (SEMVER-MINOR) net: support TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive (Guy Bedford) #63825 - [
3988efa1f3] - net: coerce -0 to +0 in BlockList prefixes (Filip Skokan) #63556 - [
484efd1c44] - quic: fix get_reader bug that dropped data on FIN (Tim Perry) #63946 - [
04a17fe6f0] - quic: expose QUIC certificates as JS X509Certificate, not raw handles (Tim Perry) #63191 - [
b62d5696dc] - quic: fix reader backpressure deadlock on idle connections (Tim Perry) #63950 - [
3f1c8d7453] - quic: fix broken listEndpoints export, test callbacks & nghttp3 include (Tim Perry) #63874 - [
d8538b9deb] - quic: impl. cb for http/3 settings/app. options (Marten Richter) #63558 - [
643b19716e] - quic: add listEndpoints API (James M Snell) #63536 - [
2bce35bea4] - sqlite: do not leave database open after failed open (Yagiz Nizipli) #63854 - [
394af52abb] - sqlite: fix stack-use-after-scope with function callback (ndossche) #63640 - [
10f03e5958] - src: omit unconvertible names in cjs_lexer::Parse (Yagiz Nizipli) #63943 - [
1723773d41] - src: keep global list of addon-provided cleanup hooks (Anna Henningsen) #63985 - [
ef12e9ea44] - src: guard OpenSSL compression header include (Filip Skokan) #64009 - [
48af8a6d8d] - src: handle empty MaybeLocal in cjs_lexer::Parse (Yagiz Nizipli) #63885 - [
2a672ee9e8] - src: fast path empty native immediate drain (Gürgün Dayıoğlu) #62969 - [
db6a31d1a1] - src: do not track weakBaseObjects as childrens ofRealms (Anna Henningsen) #63842 - [
5fb837ff46] - src: allow tracking children inMemoryTrackerwith weak edges (Anna Henningsen) #63842 - [
6d22d373a9] - src: use C++14 deprecated attribute forNODE_DEPRECATED(Anna Henningsen) #63755 - [
7ac3fe1992] - src: add cleanup hooks tonode::ObjectWrap(Anna Henningsen) #63642 - [
d82d369155] - src: fix edge case when deflateInit2() fails with Z_VERSION_ERROR (Nora Dossche) #63476 - [
03858d152b] - src: remove redundanthandle_field in ffi (Anna Henningsen) #63665 - [
1682264f6b] - src: add Latin1 fast path in StringBytes::Encode utf8 (Mert Can Altin) #63385 - [
cc29696acf] - stream: fix Writable.toWeb() desiredSize for non-object-mode (Matteo Collina) #62986 - [
d9967a25b2] - stream: handle falsy push writer fail reasons (Trivikram Kamat) #63569 - [
b53f8f75c9] - stream: reduce allocations on WHATWG streams hot paths (Matteo Collina) #63876 - [
315ca426d8] - stream: handle setEncoding after buffered data (Matteo Collina) #63973 - [
06413cd6bd] - stream: fix Utf8Stream stall after full write of multi-byte data (Daijiro Wachi) #63964 - [
a9f9a3dafa] - stream: keep overlapping broadcast reads pending (Trivikram Kamat) #63500 - [
009cca11bd] - stream: refine the stream/iter backpressure (James M Snell) #63697 - [
3f81dcfc99] - stream: only pass the expected number of parameters to callbacks (Antoine du Hamel) #63909 - [
9a83b5d1fe] - stream: fix dropped first chunk in Utf8Stream buffer mode (Daijiro Wachi) #63833 - [
0bdf5adea9] - stream: remove transform-writer handling in pipeTo (Trivikram Kamat) #63684 - [
10272a94b6] - stream: check done before backpressure in stream reader (Daijiro Wachi) #63699 - [
792c410631] - stream: fix pipeToSync byte accounting (Trivikram Kamat) #63564 - [
3cfafbc54b] - stream: reject pull() reads on abort (Trivikram Kamat) #63498 - [
640a8cede5] - stream: fast-path stateless transform flush results (Trivikram Kamat) #63605 - [
ece4477872] - stream: optimize pipeTo promise handling (Matteo Collina) #63572 - [
2cb84c2daf] - stream: handle sync writev completion in pipeTo (Trivikram Kamat) #63561 - [
7d9fdda5fa] - stream: settle pending broadcast reads on return (Trivikram Kamat) #63603 - [
e2aea3aac7] - test: tolerate duplicate watch change events (Trivikram Kamat) #63937 - [
ea6300593a] - test: mark test-debugger-run-after-quit-restart as flaky on macOS (Matteo Collina) #64006 - [
be1b204fa4] - test: update WPT for url to d4598eba09 (Node.js GitHub Bot) #63899 - [
b3d0d05b05] - test: update WPT for WebCryptoAPI to 03a1476844 (Node.js GitHub Bot) #63900 - [
046af2609f] - test: update WPT for urlpattern to 23aac92784 (Node.js GitHub Bot) #63898 - [
562b831a98] - test: add tests for 3 methods in utils (Daijiro Wachi) #63765 - [
28e3629dd3] - test: mark SEA tests flaky on linux arm debug (Trivikram Kamat) #63743 - [
243aa846de] - test: validate ERR_INVALID_THIS for scheduler methods (Daijiro Wachi) #63764 - [
6bd07df2bc] - test: add coverage outside SEA (Daijiro Wachi) #63744 - [
bd67c9d11b] - test: update WPT for urlpattern to 2f28df545c (Node.js GitHub Bot) #63771 - [
e40bfe7081] - test: make Brotli 16GB test wait for backpressure (Trivikram Kamat) #63389 - [
444c03fd3b] - test: add regression test for usingObjectWrapin worker (Mohamed Akram) #63642 - [
771230df78] - test: accept SIGILL aborts in async-hooks tests (Trivikram Kamat) #63687 - [
0b3cd8e5e6] - test: add more test cases for pathToFileURL (Rafael Gonzaga) #63293 - [
0cbc77c60e] - test: update test426-fixtures to 2965987bf4c96afa400c9356c8e620cb340aaee (Node.js GitHub Bot) #63668 - [
f53dee5fe4] - test: update WPT for WebCryptoAPI to 0c413fb56b (Node.js GitHub Bot) #63647 - [
3048f8dc1a] - test,debugger: add test for type stripping in debugger probe mode (Joyee Cheung) #63748 - [
9485caa97e] - test_runner: remove unused shuffleArrayWithSeed (Daijiro Wachi) #63847 - [
34433a4a87] - test_runner: fix watch cwd with isolation none (Trivikram Kamat) #63690 - [
2e7da29b7c] - test_runner: avoid recompiling coverage globs for every file (sangwook) #63675 - [
205295a31e] - test_runner: cacheshouldSkipFileCoverageresult per URL (sangwook) #63675 - [
ee29465e77] - (SEMVER-MINOR) tls: add certificateCompression option (Tim Perry) #62217 - [
57d060ed2b] - tls: route event listener exceptions through error handlers (Antoine du Hamel) #63822 - [
d2dc6f8506] - tools: bump piscina from 5.1.4 to 5.2.0 in /tools/doc (dependabot[bot]) #64002 - [
b0c418f605] - tools: update sccache to v0.16.0 (Michaël Zasso) #63078 - [
2af8433bef] - tools: bump js-yaml from 4.1.1 to 4.2.0 in /tools/lint-md (dependabot[bot]) #63948 - [
8ba5b8574b] - tools: bump js-yaml from 4.1.1 to 4.2.0 in /tools/eslint (dependabot[bot]) #63947 - [
325087be5b] - tools: enforce iterator result property order (Trivikram Kamat) #63526 - [
314f417db7] - tools: update the llhttp updater script (Antoine du Hamel) #63819 - [
c6e4f5a4fe] - tools: avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #63938 - [
363912acc3] - tools: align Bash snippets in GHA withlint-shconventions (Antoine du Hamel) #63829 - [
cfd16e973c] - tools: bump @node-core/doc-kit in /tools/doc in the doc group (dependabot[bot]) #63760 - [
1566872706] - tools: bump the eslint group in /tools/eslint with 7 updates (dependabot[bot]) #63730 - [
08437a3a5b] - tools: fix zlib updater script (Antoine du Hamel) #63707 - [
e883366172] - url: fix URLSearchParams(null) to prudce null= per spec (Marco) #63782 - [
60e83d9bfd] - util: fix scientific notation formatting (Daijiro Wachi) #63823 - [
5f7f60ac36] - util: fix -0 formatting when numericSeparator is enabled (Daijiro Wachi) #63815 - [
af1a11e0dd] - util: remove style caches from styleText slow path (Guilherme Araújo) #63706 - [
b17817eb2b] - (SEMVER-MINOR) vfs: dispatch fs/promises to mounted VFS instances (Matteo Collina) #63537 - [
7bc93a6ac5] - (SEMVER-MINOR) vfs: add minimal node:vfs subsystem (Matteo Collina) #63115 - [
584e7527c4] - vm: fix property queries for proxy sandboxes (Brian Meek) #63742 - [
a926e72eaf] - watch: print name of changed file that triggers restart (Marco) #63781 - [
32a2621ca4] - watch: cancel pending restart on shutdown (Trivikram Kamat) #63383 - [
692215d1b1] - zlib: coerce -0 to +0 for crc32 seeds (Filip Skokan) #63556
v3.6.16
- Matthoffman/unpin brotli4j by @matthoffman in https://github.com/Netflix/zuul/pull/2151
Full Changelog: https://github.com/Netflix/zuul/compare/v3.6.15...v3.6.16