chore(deps): update node.js to v26.3.0#3527
Open
renovate[bot] wants to merge 2 commits into
Open
Conversation
Contributor
Author
|
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ❌ Deployment failed View logs |
dotfiles-worker | 2c7e4c7 | Jun 01 2026, 02:56 PM |
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
26.2.0→26.3.0Release Notes
nodejs/node (node)
v26.3.0: 2026-06-01, Version 26.3.0 (Current), @aduh95Compare Source
Notable Changes
Potential changes to macOS Universal Binary availability
With Apple and its ecosystem progressively dropping support for Intel-based
architectures, it has become apparent that the Node.js project may not be able
to maintain the universal binaries we currently distribute for the full lifetime
of Node.js 26. This change serves to communicate that risk. At present, our
intention remains to continue shipping universal binaries supporting both Apple
Silicon and Intel-based Macs for as long as practical.
Contributed by Antoine du Hamel in #63055.
Other notable changes
a2a4b33dd8] - (SEMVER-MINOR) buffer: increaseBuffer.poolSizedefault to 64 KiB (Matteo Collina) #63597051a2152f7] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #6352749462eca37] - (SEMVER-MINOR) http: addhttpValidationoption to configure header value validation (RajeshKumar11) #6159797b7ab19bd] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #63079cfb80a2103] - (SEMVER-MINOR) lib,permission: addpermission.drop(Rafael Gonzaga) #62672Commits
a2a4b33dd8] - (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina) #635970eff3e23b9] - build: defNODE_USE_NODE_CODE_CACHEonly used in node_mksnapshot (Chengzhong Wu) #63588447ab2d252] - build,win: fix VS2022 arm64 PGO build (Stefan Stojanovic) #6341386032758e4] - build,win: replace LTCG with Thin LTO for releases (Stefan Stojanovic) #631145f4d794052] - build,win: add Rust toolchain automated configuration Windows (Mike McCready) #63381051a2152f7] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527d0f65e3579] - crypto: coerce -0 keylen to +0 in pbkdf2 and scrypt (Jordan Harband) #63531e3ddb326c9] - crypto: harden WebCrypto against prototype pollution (Filip Skokan) #63363e04cd17dc0] - crypto: pass CryptoKey handles to KDF jobs (Filip Skokan) #6336364ba74d847] - crypto: remove async from WebCrypto methods (Filip Skokan) #63363bd230418b4] - crypto: add WebCrypto CryptoJob mode (Filip Skokan) #633631a4090a83d] - debugger: surface inspector failures in probe mode (Joyee Cheung) #63437dbc78ff825] - debugger,test: deflake resume failure test and add debug logs (Joyee Cheung) #635244da442f432] - deps: upgrade npm to 11.16.0 (npm team) #6360263372cfa87] - deps: SQLite: cherry-pickb869ed6(Junsu Han) #63525e286fa170d] - deps: upgrade npm to 11.15.0 (npm team) #63463de996437a5] - doc: downgrade macOS x64 to Tier 2 (Antoine du Hamel) #6305522ac78750c] - doc: remove duplicated sentences in large-pull-requests.md (Joyee Cheung) #63650532f7f2085] - doc: updategit node landinstructions for security releases (Antoine du Hamel) #63586c61f90dfb9] - doc: drop --experimental from --permission (Rafael Gonzaga) #63583fd69d7b16a] - doc: improvefs.StatFsproperties descriptions (aymanxdev) #62578693257782c] - doc: generate llms.txt (Guilherme Araújo) #6202755a57beb26] - doc: explicitly ask for reproducible in JS (Rafael Gonzaga) #634794895c2babc] - doc: fix URL postMessage example in worker_threads (Kit Dallege) #622030355c36e37] - doc: clarifyfilteroption ofsqlite.database.applyChangeset(Antoine du Hamel) #63515c85ee22df6] - doc: fix double spaces in ERR_TLS_INVALID_PROTOCOL_METHOD (Daijiro Wachi) #6351162947192f6] - doc: move hyperlinks outside of text blocks (Aviv Keller) #634939849690a1d] - doc: edit Rust toolchain general install instructions (Antoine du Hamel) #63488885d2462e9] - doc: fix double space in modules.md (Daijiro Wachi) #6351242fbb48bc6] - doc: fix "options" to "option" in tls.createServer (Daijiro Wachi) #6345305a7b0a301] - doc: add Rust toolchain general install instructions (Mike McCready) #63426e13dfd7ed0] - doc: update toolchain for official releases (Richard Lau) #6344182306881cc] - doc: fix typo in deprecations (Daijiro Wachi) #63434eeb77d217c] - doc,lib: align WebCrypto names with spec (Filip Skokan) #63518679e13c57f] - errors: handle V8 warnings in DisallowJavascriptExecutionScope (Divyanshu Sharma) #634917f41f5d803] - ffi: validate 'void' as parameter type in getFunction and getFunctions (Anshika Jain) #63504972cd227cb] - ffi: remove function signature property aliases (René) #634825d7805e433] - ffi: move DynamicLibrary disposer to native layer (René) #634595a0b32dc24] - gyp: update deps gypfiles (Nad Alaba) #6311749462eca37] - (SEMVER-MINOR) http: add httpValidation option to configure header value validation (RajeshKumar11) #61597e3c6629ee3] - http2: emit session close before stream close (Matteo Collina) #6341497b7ab19bd] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #630796bef10e7b7] - lib: cleanup stateless diffiehellman key handling (Filip Skokan) #62645fdc0b3d49c] - lib: definekEnumerablePropertyatomically (Antoine du Hamel) #6360999baf27aeb] - lib: fix typos in esm loader comments (RonGamzu) #63465cfb80a2103] - (SEMVER-MINOR) lib,permission: add permission.drop (Rafael Gonzaga) #626728e75efb9bc] - meta: flip mcollina emails in .mailmap (Matteo Collina) #63621a4ae97045f] - meta: label "source maps" PRs (Chengzhong Wu) #635913455a48ae1] - meta: addvfssubsystem label (René) #6233101bfcdfc20] - meta: skip scheduled workflows on forks (Jamie Magee) #63565bc4c457eae] - meta: add additional gitignore entries (James M Snell) #63267e1d65d9509] - module: load ESM helpers eagerly in the snapshot (Joyee Cheung) #635506a97b0932a] - quic: add proper error codes & messages for QUIC failures (Tim Perry) #631985989f4a6e1] - quic: support hostname verification (James M Snell) #63483b4d30e7a78] - quic: add stream idle timeout (James M Snell) #634838a1017f774] - quic: add block list support for endpoints (James M Snell) #634835a3ab93c49] - quic: improve peer cert verification (James M Snell) #634839701a82a78] - quic: handle h3 max header size option (James M Snell) #6348371788a2048] - quic: add rate limiting docs (James M Snell) #63483309bd49906] - quic: cache timestamp for address lru cache (James M Snell) #634832ce5588d51] - quic: add session creation rate limiting (James M Snell) #6348398808baed1] - quic: refine rate limiting (James M Snell) #6348375a4176b32] - quic: flip preferred address policy default to 'ignore' (James M Snell) #634838b6b03d60c] - quic: add doc note about certificate size limitations (James M Snell) #6348330eff873e0] - quic: add applicationOptions to session (James M Snell) #632674303daa43c] - quic: add getters for local and remote transport parameters (James M Snell) #63267e1b1bb5465] - quic: improve recv coalescing test sizes (James M Snell) #6326725a416f457] - quic: add initial RTT option to session options (James M Snell) #6326722e91c357f] - quic: enable recvmmsg batching in Endpoint (James M Snell) #63267c96d8a9d9b] - quic: improve stream header collection performance (James M Snell) #63267409460f2ce] - quic: add reusePort option to QuicEndpoint (James M Snell) #632679a2afffec9] - quic: coalesce received data into fewer buffers (James M Snell) #63267f9a6a2f558] - quic: apply multiple additional minor improvements (James M Snell) #63267ea5f3724ee] - quic: fix tests that are missing serverEndpoint close (James M Snell) #632676cffc931fc] - quic: fixup some v8:: qualifiers (James M Snell) #632679bc875e522] - quic: fix premature unref of endpoint when listening (James M Snell) #63267f940d6b1be] - quic: fixup UAFs in bindingdata, streams, and app (James M Snell) #63267fd00e0acb0] - quic: fix UAF in Application::OnTimeout() (James M Snell) #63267378dbf00e9] - quic: improve the quic js structure (James M Snell) #632670045dc30b6] - quic: improve internal structure of QuicStream (James M Snell) #632675e38946b26] - quic: add aliased struct arenas (James M Snell) #6326795430437a0] - quic: add handshake timeout and default connection limits (James M Snell) #632675622701429] - quic: implement rate limiting for version nego and immediate close (James M Snell) #63267b171f391cd] - quic: fixup linting issue after other changes (James M Snell) #6326724e9f4f177] - quic: fix crash in early handshake failure (James M Snell) #632675025e85d0a] - quic: eliminate per-received datagram allocation (James M Snell) #63267aec1e17ec5] - quic: cache the timestamp on send and receive (James M Snell) #632679560084560] - quic: add support for future ECN marking (James M Snell) #632672b3ff8ada2] - quic: improve batching of packet sending (James M Snell) #63267fe3639a4d6] - quic: improve backend quic packet processing (James M Snell) #63267f043013d9a] - src: remove TOCTOU race condition when encoding SAB-backedBuffers (Antoine du Hamel) #63517343958224d] - src: skip duplicate UTF-8 validation in TextDecoder fatal path (Mert Can Altin) #632312906fa833d] - src: dispatch ToV8Value(string_view) via StringBytes::Encode (Mert Can Altin) #63370860f9d8d4b] - src: fix ContextifyContext property definer interception result (Chengzhong Wu) #63549fcccffcbe6] - src: fix crash when reading length on Storage.prototype (Mohamed Sayed) #6352955f65f9fb6] - src: improve token return value check (James M Snell) #634837a36ca46cd] - src: exposenode::RegisterContextto make a node managed context (Chengzhong Wu) #623229bda92963c] - src,sqlite: only passxFilterwhen user provided a callback (Antoine du Hamel) #63516563db50f38] - stream: switch to internalsleepbinding (Antoine du Hamel) #63611a6e2322ee6] - stream: use data listener for compose forwarding (Trivikram Kamat) #635937198895c6b] - stream: serialize concurrent share consumer reads (Trivikram Kamat) #6347870ba8be1d7] - stream: fix lint error (Antoine du Hamel) #635981608d905a7] - stream: reject pending reads on iterator throw (Trivikram Kamat) #63555dc12b730d8] - stream: wait for push writer end fallback to drain (Trivikram Kamat) #635034f40a85a1a] - stream: flush each fused stateless transform (Trivikram Kamat) #63468526e0fc427] - stream: avoid duplicate writes in toWritable (Trivikram Kamat) #633600008d01f9c] - stream: propagate abort reason in share and broadcast (Trivikram Kamat) #63358217338e18b] - stream: fix Writable.toWeb() hang on synchronous drain (sangwook) #61197381f4b1b10] - stream: disallow writing string chunk with 'buffer' encoding (René) #63062cbee0de1cb] - stream: alignReadable.toWebtermination with eos (ikeyan) #62394be91f0a927] - test: shorten path in net pipe connect errors (Matteo Collina) #6340583cada8bcc] - test: deflake test-debugger-probe-timeout (Joyee Cheung) #635473560b96a10] - test: deflake test-webcrypto-crypto-job-mode (Filip Skokan) #635430c9c52373a] - test: remove test-node-output-v8-warning (Joyee Cheung) #6346912052dbe14] - test: cover webcrypto prototype pollution systematically (Filip Skokan) #635208c479f274a] - test: update test426-fixtures to9b9e225(Node.js GitHub Bot) #633732ca32a5ee8] - test: update WPT for url toe4a4672(Node.js GitHub Bot) #633721bf875bd21] - test: deflake async-hooks statwatcher test (Trivikram Kamat) #6339697dbfa09f7] - test: avoid test_runner watch restart in spec snapshot (Trivikram Kamat) #633928b038d7b33] - test: reduce watch mode restart flakiness (Trivikram Kamat) #63390f504c01d66] - test: get rid of unnecessaryAbortControllerinstanciations (Antoine du Hamel) #63489170585ff90] - test: isolate rerun-failures state file under tmpdir (Chemi Atlow) #63449935468a49e] - test: fixup quic tests (James M Snell) #63267fbbdfdcfc7] - test: wait for ok before initial break after restart (Yuya Inoue) #62807db808ad77d] - test: unskip snapshot reproducibility test (Joyee Cheung) #63307259d8b3dce] - test: update WPT for WebCryptoAPI to97bbc72(Node.js GitHub Bot) #63417d56c6cd708] - test_runner: ignore erased TS lines in coverage (Matteo Collina) #6351016015f1565] - test_runner: fix suite diagnostic chanel end (Moshe Atlow) #63533003b9ccbe9] - test_runner: dont buffer unordered events in process isolation mode (Moshe Atlow) #63432fdc4b5aed4] - test_runner: fix --test-rerun-failures swallowing failures on retry (Chemi Atlow) #634316a0bd2f329] - test_runner: add parentId to test events with testId (Moshe Atlow) #63435a646c93254] - test_runner: show replayed-from-attempt hint in spec reporter (Moshe Atlow) #63429b1fa59cbb6] - test_runner: preserve run duration when using test-rerun (Moshe Atlow) #634296ac7ff24ac] - tools: refinev8.nixsource definition (Antoine du Hamel) #6362559c01b959f] - tools: add lint rule for aborted AbortController (Trivikram Kamat) #635412ab034f6f9] - tools: bump @node-core/doc-kit in /tools/doc in the doc group (dependabot[bot]) #63494a6af903e0a] - tools: bump brace-expansion from 5.0.5 to 5.0.6 in /tools/eslint (dependabot[bot]) #63415215cd543dd] - tools: skip commit-lint on backport pull requests (Marco) #633780479f28e95] - tools: fix skip oftest-interneton forks (Antoine du Hamel) #6349269dfadf785] - tools: mock some Python utils inv8.nixto reuse builds (Antoine du Hamel) #634547b3e222cda] - util: remove unused functions (Antoine du Hamel) #636125a1f67c27b] - util: create hex style cache and fast path (Guilherme Araújo) #62999Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.