2026-03-05, Version 22.22.1 'Jod' (LTS)

Notable Changes

• [


• [


• [


• [


• [


• [


• [

Commits

• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [ to collaborators (Сковорода Никита Андреевич) ] - doc: update IBM/Red Hat volunteers with dedicated project time (Beth Griggs) ] - doc: mention constructor comparison in assert.deepStrictEqual (Hamza Kargin) ] - doc: add CVE delay mention (Rafael Gonzaga) ] - doc: include OpenJSF handle for security stewards (Rafael Gonzaga) ] - doc: clarify process.argv[1] behavior for -e/--eval (Jeevankumar S) ] - doc: remove Windows Dev Home instructions from BUILDING (Mike McCready) ] - doc: clarify TypedArray properties on Buffer (Roman Reiss) ] - doc: note resume build should not be done on node-test-commit (Stewart X Addison) ] - doc: refine WebAssembly error documentation (sangwook) ] - doc: add deprecation history for url.parse (Eng Zer Jun) ] - doc: add marco and rafael in last sec release (Marco Ippolito) ] - doc: packages: example of private import switch to internal (coderaiser) ] - doc: add esm and cjs examples to node:v8 (Alfredo González) ] - doc: added 'secure' event to tls.TLSSocket (ikeyan) ] - doc: restore


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [


• [ to collaborators (Aviv Keller) ] - doc: add gurgunday to collaborators (Gürgün Dayıoğlu) ] - doc: add File modes cross-references in fs methods (Mohit Raj Saxena) ] - doc: add missing zstd to mjs example of zlib (Deokjin Kim) ] - doc: clarify fileURLToPath security considerations (Rafael Gonzaga) ] - doc: replace column with columnNumber in example of util.getCallSites (Deokjin Kim) ] - doc: correct spelling in BUILDING.md (Rich Trott) ] - doc: update debuglog examples to use 'foo-bar' instead of 'foo' (xiaoyao) ] - doc: fix typos in changelogs (Rich Trott) ] - doc: mark module.register as active development (Chengzhong Wu) ] - doc: add fullName property to SuiteContext (PaulyBearCoding) ] - doc: keep sidebar module visible when navigating docs (Botato) ] - doc: correct concurrency wording in test() documentation (Azad Gupta) ] - doc: clarify that CQ only picks up PRs targeting main (René) ] - doc: clarify license section and add contributor note (KaleruMadhu) ] - doc: correct tls ALPNProtocols types (René) ] - doc: remove mention of SMS 2FA (Antoine du Hamel) ] - doc: domain.add() does not accept timer objects (René) ] - doc: update Collaborators list to reflect hybrist handle change (Antoine du Hamel) ] - doc: fix linter issues (Antoine du Hamel) ] - doc: correct values/references for buffer.kMaxLength (René) ] - doc: recommend events.once to manage 'close' event (Dan Fabulich) ] - doc: highlight module loading difference between import and require (Ajay A) ] - doc: fix typo in process.unref documentation (우혁) ] - doc: add some entries to glossary.md (Mohataseem Khan) ] - doc: improve agent.createConnection docs for http and https agents (JaeHo Jang) ] - doc: fix pseudo code in modules.md (chirsz) ] - doc: add missing variable in code snippet (Koushil Mankali) ] - doc: add missing word in single-executable-applications.md (Konstantin Tsabolov) ] - doc: fix typo in http.md (Michael Solomon) ] - doc: update devcontainer.json and add documentation (Joyee Cheung) ] - doc: add haramj as triager (Haram Jeong) ] - doc: clarify require(esm) description (dynst) ] - doc: instantiate resolver object (Donghoon Nam) ] - doc: clarify --use-system-ca support status (Joyee Cheung) ] - doc: add missing CAA type to dns.resolveAny() & dnsPromises.resolveAny() (Jimmy Leung) ] - doc: use any for worker_threads.Worker 'error' event argument err (Jonas Geiler) ] - doc: update decorator documentation to reflect actual policy (Muhammad Salman Aziz) ] - doc: document wildcard supported by tools/test.py (Joyee Cheung) ] - doc: fix blob.bytes() heading level (XTY) ] - doc: fix not working code example in vm docs (Artur Gawlik) ] - doc: improve code snippet alternative of url.parse() using WHATWG URL (Steven) ] - doc: use markdown when branch-diff major release (Rafael Gonzaga) ] - doc: update teams in collaborator-guide.md and add links (Bart Louwers) ] - doc: update previous version links in BUILDING (Mike McCready) ] - doc: correct description of error.stack accessor behavior (René) ] - doc: fix link in --env-file=file section (N. Bighetti) ] - doc: fix v22 changelog after security release (Marco Ippolito) ] - doc: add missing history entry for sqlite.md (Antoine du Hamel) ] - doc, module: change async customization hooks to experimental (Gerhard Stöbich) ] - doc,src,lib: clarify experimental status of Web Storage support (Antoine du Hamel) ] - esm: avoid throw when module specifier is not url (Craig Macomber (Microsoft)) ] - events: remove redundant todo (Gürgün Dayıoğlu) ] - events: remove eventtarget custom inspect branding (Efe) ] - fs: remove duplicate getValidatedPath calls (Mert Can Altin) ] - fs: fix errorOnExist behavior for directory copy in fs.cp (Nicholas Paun) ] - fs: fix ENOTDIR in globSync when file is treated as dir (sangwook) ] - fs: remove duplicate fd validation in sync functions (Mert Can Altin) ] - fs: detect dot files when using globstar (Robin van Wijngaarden) ] - fs: validate statfs path (Efe) ] - gyp: aix: change gcc version detection so CXX="ccache g++" works (Stewart X Addison) ] - http: fix rawHeaders exceeding maxHeadersCount limit (Max Harari) ] - http: replace startsWith with strict equality (btea) ] - http: lazy allocate cookies array (Robert Nagy) ] - http: fix http client leaky with double response (theanarkh) ] - http,https: fix double ERR_PROXY_TUNNEL emission (Shima Ryuhei) ] - http2: add diagnostics channels for client stream request body (Darshan Sen) ] - http2: rename variable to additionalPseudoHeaders (Tobias Nießen) ] - http2: validate initialWindowSize per HTTP/2 spec (Matteo Collina) ] - http2: do not crash on mismatched ping buffer length (René) ] - inspector: inspect HTTP response body (Chengzhong Wu) ] - inspector: add network payload buffer size limits (Chengzhong Wu) ] - lib: fix typo in util.js comment (Taejin Kim) ] - lib: fix TypeScript support check in jitless mode (sangwook) ] - lib: gbk decoder is gb18030 decoder per spec (Сковорода Никита Андреевич) ] - lib: enforce use of URLParse (Antoine du Hamel) ] - lib: use FastBuffer for empty buffer allocation (Gürgün Dayıoğlu) ] - lib: fix constructor in _errnoException stack tree (SeokHun) ] - lib: fix typo in QuicSessionStats (SeokHun) ] - lib: remove redundant destroyHook checks (Gürgün Dayıoğlu) ] - lib,src: isInsideNodeModules should test on the first non-internal frame (Chengzhong Wu) ] - meta: do not fast-track npm updates (Antoine du Hamel) ] - meta: fix typos in issue template config (Daijiro Wachi) ] - meta: label v8 module PRs (René) ] - meta: bump step-security/harden-runner from 2.13.2 to 2.14.0 (dependabot[bot]) ] - meta: bump actions/setup-node from 6.0.0 to 6.1.0 (dependabot[bot]) ] - meta: bump actions/cache from 4.3.0 to 5.0.1 (dependabot[bot]) ] - meta: bump github/codeql-action from 4.31.6 to 4.31.9 (dependabot[bot]) ] - meta: bump codecov/codecov-action from 5.5.1 to 5.5.2 (dependabot[bot]) ] - meta: bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 (dependabot[bot]) ] - meta: move lukekarrys to emeritus (Node.js GitHub Bot) ] - meta: bump actions/setup-python from 6.0.0 to 6.1.0 (dependabot[bot]) ] - meta: bump github/codeql-action from 4.31.3 to 4.31.6 (dependabot[bot]) ] - meta: bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 (dependabot[bot]) ] - meta: bump github/codeql-action from 4.31.2 to 4.31.3 (dependabot[bot]) ] - meta: bump step-security/harden-runner from 2.13.1 to 2.13.2 (dependabot[bot]) ] - meta: add Renegade334 to collaborators (Renegade334) ] - meta: bump actions/download-artifact from 5.0.0 to 6.0.0 (dependabot[bot]) ] - meta: bump actions/upload-artifact from 4.6.2 to 5.0.0 (dependabot[bot]) ] - meta: bump github/codeql-action from 3.30.5 to 4.31.2 (dependabot[bot]) ] - meta: bump actions/setup-node from 5.0.0 to 6.0.0 (dependabot[bot]) ] - meta: bump actions/stale from 10.0.0 to 10.1.0 (dependabot[bot]) ] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) ] - meta: loop userland-migrations in deprecations (Chengzhong Wu) ] - meta: call create-release-post.yml post release (Aviv Keller) ] - module: preserve URL in the parent created by createRequire() (Joyee Cheung) ] - msi: fix WiX warnings (Stefan Stojanovic) ] - node-api: use Node-API in comments (Vladimir Morozov) ] - node-api: use local files for instanceof test (Vladimir Morozov) ] - os: freeze signals constant (Xavier Stouder) ] - perf_hooks: fix stack overflow error (Antoine du Hamel) ] - repl: fix pasting after moving the cursor to the left (Ruben Bridgewater) ] - src: replace ranges::sort for libc++13 compatibility on armhf (Rebroad) ] - src: add missing override specifier to Clean() (Tobias Nießen) ] - src: cache context lookup in vectored io loops (Mert Can Altin) ] - src: use C++ nullptr in webstorage (Tobias Nießen) ] - src: fix pointer alignment (jhofstee) ] - src: dump snapshot source with node:generate_default_snapshot_source (Joyee Cheung) ] - src: add HandleScope to edge loop in heap_utils (Mert Can Altin) ] - src: remove redundant CHECK (Tobias Nießen) ] - src: fix off-thread cert loading in bundled cert mode (Joyee Cheung) ] - src: handle DER decoding errors from system certificates (Joyee Cheung) ] - src: use static_cast instead of C-style cast (Michaël Zasso) ] - src: move Node-API version detection to where it is used (Anna Henningsen) ] - src: avoid C strings in more C++ exception throws (Anna Henningsen) ] - src: move napi_addon_register_func to node_api_types.h (Anna Henningsen) ] - src: remove unconditional NAPI_EXPERIMENTAL in node.h (Chengzhong Wu) ] - src: clean up generic counter implementation (Anna Henningsen) ] - src: add enum handle for ToStringHelper + formatting (Burkov Egor) ] - src: fix timing of snapshot serialize callback (Joyee Cheung) ] - src: add COUNT_GENERIC_USAGE utility for tests (Joyee Cheung) ] - src: use cached primordials_string (Sohyeon Kim) ] - src: implement Windows-1252 encoding support and update related tests (Mert Can Altin) ] - src,permission: fix permission.has on empty param (Rafael Gonzaga) ] - src,permission: add debug log on is_tree_granted (Rafael Gonzaga) ] - stream: fix isErrored/isWritable for WritableStreams (René) ] - stream: don't try to read more if reading (Robert Nagy) ] - test: skip strace test with shared openssl (Richard Lau) ] - test: mark test-strace-openat-openssl as flaky (Antoine du Hamel) ] - test: skip --build-sea tests on platforms where SEA is flaky (Joyee Cheung) ] - test: fix flaky debugger test (Ryuhei Shima) ] - test: ensure removeListener event fires for once() listeners (sangwook) ] - test: delay writing the files only on macOS (Luigi Pinca) ] - test: asserts that import.meta.resolve invokes sync loader hooks (Chengzhong Wu) ] - test: check util.parseArgs argv parsing with actual process execution (René) ] - test: remove unneccessary repl magic_mode tests (Dario Piotrowicz) ] - test: skip sea tests on riscv64 (Stewart X Addison) ] - test: mark stringbytes-external-max flaky on AIX (Stewart X Addison) ] - test: update test426 fixtures (Rich Trott) ] - test: skip SEA inspect test if inspector is not available (Livia Medeiros) ] - test: use assert.match for non-literal regexp tests (René) ] - test: fix embedtest in debug windows (Vladimir Morozov) ] - test: fix debug test crashes caused by sea tests (Vladimir Morozov) ] - test: replace deprecated regex test assertions in http trailers test (Aditya Chopra) ] - test: prefer major GC in cppgc-object teardown (sangwook) ] - test: skip test that cause timeout on IBM i (SRAVANI GUNDEPALLI) ] - test: limit the concurrency of WPTRunner for RISC-V (Levi Zim) ] - test: fix test-strace-openat-openssl for RISC-V (Levi Zim) ] - test: fix status when compiled without inspector (Antoine du Hamel) ] - test: apply a delay to watch-mode-kill-signal tests (Joyee Cheung) ] - test: async iife in repl (Tony Gorez) ] - test: parallelize sea tests when there's enough disk space (Joyee Cheung) ] - test: only show overridden env in child process failures (Joyee Cheung) ] - test: add more logs to test-esm-loader-hooks-inspect-wait (Joyee Cheung) ] - test: mark stringbytes-external-exceed-max tests as flaky on AIX (Joyee Cheung) ] - test: correct conditional secure heap flags test (Shelley Vohr) ] - test: fix flaky test-watch-mode-kill-signal-* (Joyee Cheung) ] - test: capture stack trace in debugger timeout errors (Joyee Cheung) ] - test: ensure assertions are reachable in test/async-hooks (Antoine du Hamel) ] - test: increase debugger waitFor timeout on macOS (Chengzhong Wu) ] - test: fix small compile warning in test_network_requests_buffer.cc (xiaocainiao633) ] - test: split test-runner-watch-mode-kill-signal (Joyee Cheung) ] - test: fix incorrect calculation in test-perf-hooks.js (Joyee Cheung) ] - test: skip sea tests on x64 macOS (Joyee Cheung) ] - test: move sea tests into test/sea (Joyee Cheung) ] - test: skip tests that cause timeouts on IBM i (SRAVANI GUNDEPALLI) ] - test: deflake test-fs-promises-watch-iterator (Luigi Pinca) ] - test: deflake test-repl-paste-big-data (Livia Medeiros) ] - test: add new startNewREPLSever testing utility (Dario Piotrowicz) ] - test: skip failing tests when compiled without amaro (Yuki Okita) ] - test: skip failing test on macOS 15.7+ (Antoine du Hamel) ] - tools: switch to ARM runners on GHA jobs (Antoine du Hamel) ] - tools: avoid building twice in coverage jobs (Antoine du Hamel) ] - tools: use ubuntu-slim runner in GHA (Antoine du Hamel) ] - tools: use ubuntu-slim runner in GHA (Antoine du Hamel) ] - tools: use ubuntu-latest runner in notify-on-push workflow (Antoine du Hamel) ] - tools: use ubuntu-slim runner in meta GitHub Actions (Tierney Cyren) ] - tools: update gyp-next to 0.21.1 (Node.js GitHub Bot) ] - tools: fix vcbuild lint-js-build (Vladimir Morozov) ] - tools: only report commit validation failure on Slack (Antoine du Hamel) ] - tools: use sparse-checkout in linter jobs (Antoine du Hamel) ] - tools: simplify notify-on-push (Antoine du Hamel) ] - tools: fix update-nghttp2 signature verification (Richard Lau) ] - tools: improve log output of create-release-proposal (Antoine du Hamel) ] - tools: fix vcbuild test when path contain spaces (stduhpf) ] - tools: do not run test-linux workflow for changes on vcbuild.bat (Antoine du Hamel) ] - tools: disable some new cpplint rules before update (Michaël Zasso) ] - tools: don't fetch V8 deps in the source tree (Richard Lau) ] - tools: add temporal updater (Chengzhong Wu) ] - tools: dump config.gypi as json (Chengzhong Wu) ] - tools: bump js-yaml from 4.1.0 to 4.1.1 in /tools/lint-md (dependabot[bot]) ] - tools: bump js-yaml from 4.1.0 to 4.1.1 in /tools/doc in the doc group (dependabot[bot]) ] - tools: remove unsupported cooldown from Dependabot config (Antoine du Hamel) ] - tools: update sccache to v0.12.0 (Michaël Zasso) ] - tools: update gyp-next to 0.21.0 (Node.js GitHub Bot) ] - tools: replace invalid expression in dependabot config (Riddhi) ] - tools: skip unaffected GHA jobs for changes in test/internet (Antoine du Hamel) ] - tools: do not use short hashes for deps versioning to avoid collision (Antoine du Hamel) ] - tools: fix update-icu script (Michaël Zasso) ] - tools: fix linter for semver-major release proposals (Antoine du Hamel) ] - tools: fix failing release-proposal linter for LTS transitions (Antoine du Hamel) ] - tools: remove undici from daily wpt.fyi job (Filip Skokan) ] - tools: add lint rule to ensure assertions are reached (Antoine du Hamel) ] - tools: update gyp-next to 0.20.5 (Node.js GitHub Bot) ] - tools: optimize wildcard execution in tools/test.py (Joyee Cheung) ] - tools: use cooldown property correctly (Rafael Gonzaga) ] - tools: validate release commit diff as part of lint-release-proposal (Antoine du Hamel) ] - tools,doc: fix format-md files list (Stefan Stojanovic) ] - tools,doc: update JavaScript primitive types to match MDN Web Docs (JustApple) ] - typings: add typing for string_decoder (Taejin Kim) ] - typings: add missing properties and method in Worker (Woohyun Sung) ] - typings: add missing properties in HTTPParser (Woohyun Sung) ] - typings: delete undefined property in ConfigBinding (Woohyun Sung) ] - typings: add buffer internalBinding typing (방진혁) ] - url: add fast path to getPathFromURL decoder (Gürgün Dayıoğlu) ] - url: remove array.reduce usage (Gürgün Dayıoğlu) ] - util: optimize toASCIILower function using V8s native toLowerCase (Mert Can Altin) ] - util: limit inspect to only show own properties (Ruben Bridgewater) ] - util: fix parseArgs skipping positional arg with --eval and --print (azadgupta1) ] - util: assert getCallSites does not invoke Error.prepareStackTrace (Chengzhong Wu) ] - util: fix stylize of special properties in inspect (Ge Gao) ] - util: use more defensive code when inspecting error objects (Antoine du Hamel) ] - util: mark special properties when inspecting them (Ruben Bridgewater) ] - vm: make vm.Module.evaluate() conditionally synchronous (Joyee Cheung) ] - win: upgrade Visual Studio workload from 2019 to 2022 (Jiawen Geng) ] - worker: update code examples for node:worker_threads module (fisker Cheung) ] - worker: remove not implemented declarations (Artur Gawlik) ] - zlib: validate write_result array length (Ryuhei Shima) #61342