Skip to content

chore(deps): update node.js - #248

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-22.x
Open

chore(deps): update node.js#248
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-22.x

Conversation

@renovate

@renovate renovate Bot commented Sep 15, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
node (source) engines minor >= 22.17.1>= 22.23.2
node uses-with minor 22.17.122.23.2
node (source) final minor 22.17.122.23.2

Release Notes

nodejs/node (node)

v22.23.2: 2026-07-29, Version 22.23.2 'Jod' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
  • (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
  • (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
  • (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
  • (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
  • (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
  • (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
  • (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
  • (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
  • (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
  • deps: update llhttp to 9.4.3 (Paolo Insogna)
  • deps: update undici to 6.28.0 (Node.js GitHub Bot)
Commits

v22.23.1: 2026-06-23, Version 22.23.1 'Jod' (LTS), @​RafaelGSS

Compare Source

This release includes a fix for an unexpected behavior introduced
by the recent security release (22.23.0).

Commits

v22.23.0: 2026-06-18, Version 22.23.0 'Jod' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v22.22.3: 2026-05-13, Version 22.22.3 'Jod' (LTS), @​marco-ippolito

Compare Source

Commits

v22.22.2

Compare Source

v22.22.1: 2026-03-05, Version 22.22.1 'Jod' (LTS)

Compare Source

Notable Changes
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/node-22.x branch 4 times, most recently from c7b420a to 46d5a14 Compare September 25, 2025 01:36
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from 34f3574 to 072d3bc Compare October 2, 2025 00:50
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 5 times, most recently from a443cf9 to 52bbc78 Compare October 22, 2025 20:56
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 5 times, most recently from 4a8a46c to 21e6dc0 Compare November 4, 2025 19:37
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 21e6dc0 to a855000 Compare November 5, 2025 03:15
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from a855000 to 7295bf5 Compare November 19, 2025 00:30
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 4 times, most recently from 5abb602 to 683b2e8 Compare December 9, 2025 14:06
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from 5a88eb4 to e225d44 Compare December 30, 2025 14:37
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 5 times, most recently from 29a21c4 to 8b2db37 Compare January 14, 2026 21:53
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 3 times, most recently from c06b63c to d811658 Compare March 17, 2026 18:12
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 4 times, most recently from bd1f0a8 to 83a4af4 Compare April 22, 2026 22:31
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 6 times, most recently from ae50c3b to 487c7a3 Compare May 14, 2026 21:13
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 3 times, most recently from f65d67d to 0dd3256 Compare May 20, 2026 12:57
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from fe037e6 to 3404433 Compare June 11, 2026 18:12
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 8 times, most recently from 9faacb3 to dfe78c7 Compare June 24, 2026 21:37
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from ec769d8 to af82a07 Compare July 14, 2026 09:52
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from af82a07 to d951991 Compare July 14, 2026 23:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants