Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 8, 2025

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
node (source) minor 22.13.022.22.0 age confidence
@types/node (source) devDependencies minor 22.13.022.19.7 age confidence

Release Notes

nodejs/node (node)

v22.22.0: 2026-01-13, Version 22.22.0 'Jod' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

  • (CVE-2025-59465) add TLSSocket default error handler
  • (CVE-2025-55132) disable futimes when permission model is enabled
    lib,permission:
  • (CVE-2025-55130) require full read and write to symlink APIs
    src:
  • (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks
    src,lib:
  • (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle
    tls:
  • (CVE-2026-21637) route callback exceptions through error handlers
Commits

v22.21.1: 2025-10-28, Version 22.21.1 'Jod' (LTS), @​aduh95

Compare Source

Commits

v22.21.0: 2025-10-20, Version 22.21.0 'Jod' (LTS), @​aduh95

Compare Source

Notable Changes
  • [1486fedea1] - (SEMVER-MINOR) cli: add --use-env-proxy (Joyee Cheung) #​59151
  • [bedaaa11fc] - (SEMVER-MINOR) http: support http proxy for fetch under NODE_USE_ENV_PROXY (Joyee Cheung) #​57165
  • [af8b5fa29d] - (SEMVER-MINOR) http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) #​59824
  • [42102594b1] - (SEMVER-MINOR) http,https: add built-in proxy support in http/https.request and Agent (Joyee Cheung) #​58980
  • [686ac49b82] - (SEMVER-MINOR) src: add percentage support to --max-old-space-size (Asaf Federman) #​59082
Commits

v22.20.0: 2025-09-24, Version 22.20.0 'Jod' (LTS), @​richardlau

Compare Source

Notable Changes
OpenSSL updated to 3.5.2

For official Node.js builds, or builds using the default build configuration, Node.js now bundles OpenSSL 3.5.2. This update allows Node.js 22.x to be supported through to the planned End-of-Life date of 2027-04-30 as the previously bundled OpenSSL 3.0.x goes out of support in September 2026.

This change does not affect third-party builds of Node.js that link to an external OpenSSL (or OpenSSL-compatible) library.

Other notable changes
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/node-22.x branch 2 times, most recently from a993604 to 70bedd4 Compare October 11, 2025 14:34
@renovate renovate bot force-pushed the renovate/node-22.x branch 2 times, most recently from 46b3e4c to bdcc57b Compare October 21, 2025 02:51
@renovate renovate bot changed the title Update dependency node to v22.20.0 Update dependency node to v22.21.0 Oct 21, 2025
@renovate renovate bot force-pushed the renovate/node-22.x branch from bdcc57b to 03c5bdf Compare October 29, 2025 01:06
@renovate renovate bot changed the title Update dependency node to v22.21.0 Update dependency node to v22.21.1 Oct 29, 2025
@renovate renovate bot force-pushed the renovate/node-22.x branch from 03c5bdf to cfbc73a Compare November 3, 2025 03:15
@renovate renovate bot force-pushed the renovate/node-22.x branch from cfbc73a to cbe3e36 Compare November 12, 2025 05:11
@renovate renovate bot force-pushed the renovate/node-22.x branch 3 times, most recently from 9283b03 to b701aa6 Compare December 14, 2025 03:34
@renovate renovate bot force-pushed the renovate/node-22.x branch 2 times, most recently from 5a45d0d to 0e21045 Compare January 13, 2026 18:49
@renovate renovate bot changed the title Update dependency node to v22.21.1 Update dependency node to v22.22.0 Jan 13, 2026
@renovate renovate bot force-pushed the renovate/node-22.x branch from 0e21045 to 0f441fb Compare January 15, 2026 19:30
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​types/​node@​22.13.0 ⏵ 22.19.710010081 +196 +1100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant