Skip to content

chore(deps): update node.js to v22.23.2 - #98

Open
renovate[bot] wants to merge 1 commit into
developfrom
renovate/node-22.x
Open

chore(deps): update node.js to v22.23.2#98
renovate[bot] wants to merge 1 commit into
developfrom
renovate/node-22.x

Conversation

@renovate

@renovaterenovateBot commented Mar 13, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

PackageUpdateChange
node (source)minor22.12.022.23.2

Release Notes

nodejs/node (node)

v22.23.2: 2026-07-29, Version 22.23.2 'Jod' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
  • (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
  • (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
  • (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
  • (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
  • (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
  • (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
  • (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
  • (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
  • (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
  • deps: update llhttp to 9.4.3 (Paolo Insogna)
  • deps: update undici to 6.28.0 (Node.js GitHub Bot)
Commits

v22.23.1: 2026-06-23, Version 22.23.1 'Jod' (LTS), @​RafaelGSS

Compare Source

This release includes a fix for an unexpected behavior introduced
by the recent security release (22.23.0).

Commits

v22.23.0: 2026-06-18, Version 22.23.0 'Jod' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v22.22.3: 2026-05-13, Version 22.22.3 'Jod' (LTS), @​marco-ippolito

Compare Source

Commits

v22.22.2: 2026-03-24, Version 22.22.2 'Jod' (LTS), @​RafaelGSS prepared by @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
  • (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
  • (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) - Medium
  • (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
  • (CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
  • (CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
  • (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low
Commits

v22.22.1: 2026-03-05, Version 22.22.1 'Jod' (LTS)

Compare Source

Notable Changes
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • "before 8am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 9e8e371 to 2496697CompareApril 23, 2025 16:59
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 2496697 to 19a7de9CompareMay 15, 2025 19:26
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 19a7de9 to ed76daaCompareMay 24, 2025 23:51
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from ed76daa to 96fbaedCompareJune 25, 2025 16:39
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 96fbaed to ce004a6CompareJuly 26, 2025 19:58
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from ce004a6 to 2e7f08eCompareAugust 4, 2025 18:37
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 2e7f08e to 387be5fCompareAugust 31, 2025 10:26
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 623c307 to 6d6cbf8CompareOctober 7, 2025 07:06
@renovaterenovateBot changed the title chore(deps): update node.js to v22chore(deps): update node.js to v22.20.0Oct 7, 2025
@renovate
renovateBotforce-pushed the renovate/node-22.x branch 3 times, most recently from 0e77a57 to 199ffa4CompareOctober 7, 2025 18:54
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 199ffa4 to 4662358CompareOctober 11, 2025 11:15
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 4662358 to a95f634CompareOctober 11, 2025 11:25
@renovaterenovateBot changed the title chore(deps): update node.js to v22.20.0chore(deps): update node.js to v22.20.0 - autoclosedOct 20, 2025
@renovaterenovateBot closed this Oct 20, 2025
@renovate
renovateBot deleted the renovate/node-22.x branch October 20, 2025 09:25
@renovaterenovateBot changed the title chore(deps): update node.js to v22.20.0 - autoclosedchore(deps): update node.js to v22.20.0Oct 20, 2025
@renovaterenovateBot reopened this Oct 20, 2025
@renovate
renovateBotforce-pushed the renovate/node-22.x branch 4 times, most recently from 0bd6509 to 3cec075CompareOctober 22, 2025 06:58
@renovaterenovateBot changed the title chore(deps): update node.js to v22.20.0chore(deps): update node.js to v22.21.0Oct 22, 2025
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 3cec075 to 00178a7CompareOctober 29, 2025 23:59
@renovaterenovateBot changed the title chore(deps): update node.js to v22.21.0chore(deps): update node.js to v22.21.1Oct 29, 2025
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 00178a7 to 9e23f44CompareJanuary 14, 2026 22:06
@renovaterenovateBot changed the title chore(deps): update node.js to v22.21.1chore(deps): update node.js to v22.22.0Jan 14, 2026
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 9e23f44 to 0c06d22CompareMarch 6, 2026 01:04
@renovaterenovateBot changed the title chore(deps): update node.js to v22.22.0chore(deps): update node.js to v22.22.1Mar 6, 2026
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 0c06d22 to f7722f0CompareMarch 25, 2026 17:28
@renovaterenovateBot changed the title chore(deps): update node.js to v22.22.1chore(deps): update node.js to v22.22.2Mar 25, 2026
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from f7722f0 to 75199cfCompareMay 14, 2026 20:53
@renovaterenovateBot changed the title chore(deps): update node.js to v22.22.2chore(deps): update node.js to v22.22.3May 14, 2026
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from 75199cf to ba825ccCompareJune 18, 2026 18:12
@renovaterenovateBot changed the title chore(deps): update node.js to v22.22.3chore(deps): update node.js to v22.23.0Jun 18, 2026
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from ba825cc to ea44fd4CompareJune 24, 2026 00:41
@renovaterenovateBot changed the title chore(deps): update node.js to v22.23.0chore(deps): update node.js to v22.23.1Jun 24, 2026
@renovate
renovateBotforce-pushed the renovate/node-22.x branch from ea44fd4 to 8c1574cCompareJuly 30, 2026 00:50
@renovaterenovateBot changed the title chore(deps): update node.js to v22.23.1chore(deps): update node.js to v22.23.2Jul 30, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants