Skip to content

Update Node.js to >=22.23.4 - #729

Open
ok wants to merge 1 commit into
mainfrom
renovate/node-22.x
Open

ok wants to merge 1 commit into
mainfrom
renovate/node-22.x

Conversation

@ok

@ok ok commented Oct 26, 2026

Copy link
Copy Markdown
Owner

This PR contains the following updates:

Package Type Update Change
node (source) engines patch >=22.23.3 → >=22.23.4

Release Notes

nodejs/node (node)

v22.23.4: 2026-10-21, Version 22.23.4 'Jod' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
  • (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
  • (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
  • (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
  • (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
  • (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
  • (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov)
  • crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
  • deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
  • deps: update timezone to 2026e (Node.js GitHub Bot)
  • deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
  • deps: update sqlite to 3.53.4 (Node.js GitHub Bot)
  • deps: update undici to 6.29.1 (Node.js GitHub Bot)
Commits

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "before 8am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants