Skip to content

lib: use Object.freeze to avoid defensive cloning in SourceMap - #62830

Merged
aduh95 merged 4 commits into
nodejs:mainfrom
watilde:fixes-memory-sourcemap
May 19, 2026
Merged

aduh95 merged 4 commits into
nodejs:mainfrom
watilde:fixes-memory-sourcemap

Conversation

@watilde

@watilde watilde commented Apr 19, 2026

Copy link
Copy Markdown
Member

No description provided.

@nodejs-github-bot nodejs-github-bot added the needs-ci PRs that need a full CI run. label Apr 19, 2026
@watilde
watilde force-pushed the fixes-memory-sourcemap branch from 3b8cc82 to 73ffd8a Compare April 19, 2026 10:40
@watilde watilde changed the title perf: use Object.freeze to avoid defensive cloning in SourceMap lib: use Object.freeze to avoid defensive cloning in SourceMap Apr 19, 2026
@codecov

codecov Bot commented Apr 19, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.65%. Comparing base (d44a71a) to head (673e0a2).
⚠️ Report is 264 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #62830      +/-   ##
==========================================
+ Coverage   89.61%   89.65%   +0.03%     
==========================================
  Files         706      706              
  Lines      219203   219389     +186     
  Branches    41995    42061      +66     
==========================================
+ Hits       196445   196692     +247     
+ Misses      14663    14589      -74     
- Partials     8095     8108      +13     
Files with missing lines Coverage Δ
lib/internal/source_map/source_map.js 99.48% <100.00%> (+0.25%) ⬆️

... and 49 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@legendecas legendecas added semver-major PRs that contain breaking changes and should be released in the next major version. source maps Issues and PRs related to source map support. labels Apr 20, 2026

@legendecas legendecas left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would you mind adding a note on https://github.com/nodejs/node/blob/main/doc/api/module.md#sourcemappayload that the returned payload is frozen? Thanks!

@legendecas legendecas left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would you mind fixing the linter complaints? Thanks

Comment thread doc/api/module.md
@watilde
watilde force-pushed the fixes-memory-sourcemap branch from bd11c1e to f5cc42f Compare April 23, 2026 10:36
@watilde
watilde force-pushed the fixes-memory-sourcemap branch from f5cc42f to f493f69 Compare April 23, 2026 11:04
@watilde

watilde commented Apr 23, 2026

Copy link
Copy Markdown
Member Author

Fix, rebase and make the commit Verified.

@legendecas legendecas added the commit-queue-squash PRs the Commit Queue should land as one squashed commit. label Apr 23, 2026
Co-authored-by: Chengzhong Wu <legendecas@gmail.com>
@watilde watilde added the request-ci Add this label to start a Jenkins CI on a PR. Only starts once the PR has an approving review. label Apr 23, 2026
@watilde watilde removed needs-ci PRs that need a full CI run. request-ci Add this label to start a Jenkins CI on a PR. Only starts once the PR has an approving review. labels Apr 25, 2026
@legendecas legendecas added request-ci Add this label to start a Jenkins CI on a PR. Only starts once the PR has an approving review. needs-ci PRs that need a full CI run. labels Apr 25, 2026
@github-actions github-actions Bot removed the request-ci Add this label to start a Jenkins CI on a PR. Only starts once the PR has an approving review. label Apr 25, 2026
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

@legendecas legendecas added the author ready PRs with CI started, the required approvals, and no outstanding review comments. label Apr 27, 2026
@watilde watilde removed the needs-ci PRs that need a full CI run. label May 15, 2026
@aduh95 aduh95 added the commit-queue PRs queued for automated landing through the Commit Queue. label May 19, 2026
@nodejs-github-bot nodejs-github-bot added commit-queue-failed PRs whose Commit Queue landing failed and need manual intervention before retrying. and removed commit-queue PRs queued for automated landing through the Commit Queue. labels May 19, 2026
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator
Commit Queue failed
- Loading data for nodejs/node/pull/62830
✔  Done loading data for nodejs/node/pull/62830
----------------------------------- PR info ------------------------------------
Title      lib: use Object.freeze to avoid defensive cloning in SourceMap (#62830)
Author     Daijiro Wachi <daijiro.wachi@gmail.com> (@watilde)
Branch     watilde:fixes-memory-sourcemap -> nodejs:main
Labels     semver-major, author ready, source maps, commit-queue-squash
Commits    4
 - lib: use Object.freeze to avoid defensive cloning in SourceMap
 - doc: clarify sourceMap.payload behavior and immutability
 - doc: add change metadata for validator message
 - doc: fix unclosed YAML comment in sourceMap.payload
Committers 2
 - Daijiro Wachi <daijiro.wachi@gmail.com>
 - GitHub <noreply@github.com>
PR-URL: https://github.com/nodejs/node/pull/62830
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
------------------------------ Generated metadata ------------------------------
PR-URL: https://github.com/nodejs/node/pull/62830
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
--------------------------------------------------------------------------------
   ℹ  This PR was created on Sun, 19 Apr 2026 10:37:36 GMT
   ✔  Approvals: 1
   ✔  - Chengzhong Wu (@legendecas) (TSC): https://github.com/nodejs/node/pull/62830#pullrequestreview-4175823264
   ✘  semver-major requires at least 2 TSC approvals
   ✔  Last GitHub CI successful
   ℹ  Last Full PR CI on 2026-04-25T16:24:18Z: https://ci.nodejs.org/job/node-test-pull-request/72922/
- Querying data for job/node-test-pull-request/72922/
✔  Build data downloaded
   ✔  Last Jenkins CI successful
--------------------------------------------------------------------------------
   ✔  Aborted `git node land` session in /home/runner/work/node/node/.ncu
https://github.com/nodejs/node/actions/runs/26103949075

@legendecas

Copy link
Copy Markdown
Member

Given that this is a breaking change, this needs another @nodejs/tsc review, thanks!

@legendecas legendecas added commit-queue PRs queued for automated landing through the Commit Queue. and removed commit-queue-failed PRs whose Commit Queue landing failed and need manual intervention before retrying. labels May 19, 2026
@nodejs-github-bot nodejs-github-bot added commit-queue-failed PRs whose Commit Queue landing failed and need manual intervention before retrying. and removed commit-queue PRs queued for automated landing through the Commit Queue. labels May 19, 2026
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator
Commit Queue failed
- Loading data for nodejs/node/pull/62830
✔  Done loading data for nodejs/node/pull/62830
----------------------------------- PR info ------------------------------------
Title      lib: use Object.freeze to avoid defensive cloning in SourceMap (#62830)
Author     Daijiro Wachi <daijiro.wachi@gmail.com> (@watilde)
Branch     watilde:fixes-memory-sourcemap -> nodejs:main
Labels     semver-major, author ready, source maps, commit-queue-squash
Commits    4
 - lib: use Object.freeze to avoid defensive cloning in SourceMap
 - doc: clarify sourceMap.payload behavior and immutability
 - doc: add change metadata for validator message
 - doc: fix unclosed YAML comment in sourceMap.payload
Committers 2
 - Daijiro Wachi <daijiro.wachi@gmail.com>
 - GitHub <noreply@github.com>
PR-URL: https://github.com/nodejs/node/pull/62830
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
------------------------------ Generated metadata ------------------------------
PR-URL: https://github.com/nodejs/node/pull/62830
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
--------------------------------------------------------------------------------
   ℹ  This PR was created on Sun, 19 Apr 2026 10:37:36 GMT
   ✔  Approvals: 2
   ✔  - Chengzhong Wu (@legendecas) (TSC): https://github.com/nodejs/node/pull/62830#pullrequestreview-4175823264
   ✔  - Yagiz Nizipli (@anonrig) (TSC): https://github.com/nodejs/node/pull/62830#pullrequestreview-4320305018
   ✔  Last GitHub CI successful
   ℹ  Last Full PR CI on 2026-05-19T14:32:59Z: https://ci.nodejs.org/job/node-test-pull-request/72922/
- Querying data for job/node-test-pull-request/72922/
✔  Build data downloaded
   ✔  Last Jenkins CI successful
--------------------------------------------------------------------------------
   ✔  No git cherry-pick in progress
   ✔  No git am in progress
   ✔  No git rebase in progress
--------------------------------------------------------------------------------
- Bringing origin/main up to date...
From https://github.com/nodejs/node
 * branch                  main       -> FETCH_HEAD
✔  origin/main is now up-to-date
- Downloading patch for 62830
From https://github.com/nodejs/node
 * branch                  refs/pull/62830/merge -> FETCH_HEAD
✔  Fetched commits as 783b38248310..673e0a2285e9
--------------------------------------------------------------------------------
[main 69cf5e6625] lib: use Object.freeze to avoid defensive cloning in SourceMap
 Author: Daijiro Wachi <daijiro.wachi@gmail.com>
 Date: Sun Apr 19 19:40:37 2026 +0900
 2 files changed, 19 insertions(+), 8 deletions(-)
Auto-merging doc/api/module.md
[main 9ca29e4b19] doc: clarify sourceMap.payload behavior and immutability
 Author: Daijiro Wachi <daijiro.wachi@gmail.com>
 Date: Thu Apr 23 19:36:22 2026 +0900
 1 file changed, 4 insertions(+)
Auto-merging doc/api/module.md
[main 7b0a139518] doc: add change metadata for validator message
 Author: Daijiro Wachi <daijiro.wachi@gmail.com>
 Date: Fri Apr 24 02:52:24 2026 +0900
 1 file changed, 5 insertions(+)
Auto-merging doc/api/module.md
[main 4251de19a1] doc: fix unclosed YAML comment in sourceMap.payload
 Author: Daijiro Wachi <daijiro.wachi@gmail.com>
 Date: Sat Apr 25 18:32:39 2026 +0900
 1 file changed, 2 insertions(+)
   ✔  Patches applied
There are 4 commits in the PR. Attempting to fixup everything into first commit.
[main 1bd0ca9117] lib: use Object.freeze to avoid defensive cloning in SourceMap
 Author: Daijiro Wachi <daijiro.wachi@gmail.com>
 Date: Sun Apr 19 19:40:37 2026 +0900
 3 files changed, 30 insertions(+), 8 deletions(-)
--------------------------------- New Message ----------------------------------
lib: use Object.freeze to avoid defensive cloning in SourceMap

PR-URL: #62830
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>

[main c2e25ee445] lib: use Object.freeze to avoid defensive cloning in SourceMap
Author: Daijiro Wachi <daijiro.wachi@gmail.com>
Date: Sun Apr 19 19:40:37 2026 +0900
3 files changed, 30 insertions(+), 8 deletions(-)
✖ c2e25ee4458f66a963f8dfaa3f456d6744cdf674
✔ 0:0 no Assisted-by metadata assisted-by-is-trailer
✔ 0:0 no Co-authored-by metadata co-authored-by-is-trailer
✔ 0:0 skipping fixes-url fixes-url
✔ 0:0 blank line after title line-after-title
✔ 0:0 line-lengths are valid line-length
✔ 0:0 metadata is at end of message metadata-end
✔ 1:8 PR-URL is valid. pr-url
✔ 0:0 reviewers are valid reviewers
✖ 0:0 Commit must have a "Signed-off-by" trailer signed-off-by
✔ 0:0 valid subsystems subsystem
✔ 0:0 Title is formatted correctly. title-format
⚠ 0:50 Title should be <= 50 columns. title-length

ℹ Please fix the commit message and try again.
Please manually ammend the commit message, by running
git commit --amend
Once commit message is fixed, finish the landing command running
git node land --continue

https://github.com/nodejs/node/actions/runs/26114797253

@aduh95
aduh95 merged commit b1387e6 into nodejs:main May 19, 2026
87 checks passed
@aduh95

aduh95 commented May 19, 2026

Copy link
Copy Markdown
Contributor

Landed in b1387e6

@watilde
watilde deleted the fixes-memory-sourcemap branch May 20, 2026 04:34
RafaelGSS added a commit that referenced this pull request Oct 27, 2026
Notable changes:

async_hooks:
  * (SEMVER-MAJOR) remove legacy AsyncLocalStorage implementation (Matteo Collina) #63641
benchmark:
  * (SEMVER-MAJOR) protect against accidental fork bomb (James M Snell) #66132
build:
  * (SEMVER-MAJOR) remove the bundled FIPS provider build (Filip Skokan) #64777
  * (SEMVER-MAJOR) require OpenSSL 3 or later (Filip Skokan) #64777
  * (SEMVER-MAJOR) downgrade Intel macOS support to experimental (Antoine du Hamel) #65427
crypto:
  * (SEMVER-MAJOR) move DEP0093 to End-of-Life (Filip Skokan) #64777
  * (SEMVER-MAJOR) remove legacy OpenSSL code paths (Filip Skokan) #64777
  * (SEMVER-MAJOR) validate digest output encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate update input encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate inputEncoding in Cipher/Decipher update (Maruthan G) #66247
  * (SEMVER-MAJOR) move DEP0198 to End-of-Life (Filip Skokan) #64000
  * (SEMVER-MAJOR) move DEP0203 and DEP0204 to End-of-Life (Filip Skokan) #63188
  * (SEMVER-MAJOR) reject resizable backing stores in Web Crypto buffer parameters (Filip Skokan) #63925
  * (SEMVER-MAJOR) throw on uninitialized DH computeSecret (Filip Skokan) #63922
  * (SEMVER-MAJOR) runtime-deprecate calling Hmac.digest() more than once (Madelyn) #63624
crypto,https,tls:
  * (SEMVER-MAJOR) end OpenSSL engine support (Filip Skokan) #64777
deps:
  * (SEMVER-MAJOR) update archs files for openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) upgrade openssl sources to openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) remove ncrypto legacy OpenSSL backend (Filip Skokan) #64777
  * (SEMVER-MAJOR) update V8 to 15.6.75.13 (Joyee Cheung) #66601
  * (SEMVER-MAJOR) update V8 to 15.5.35.20 (Joyee Cheung) #66537
  * (SEMVER-MAJOR) update V8 to 15.2.124.38 (Joyee Cheung) #65161
  * (SEMVER-MAJOR) upgrade npm to 12.1.0 (npm team) #66212
dgram:
  * (SEMVER-MAJOR) skip the custom lookup for literal IP addresses (Ruben Bridgewater) #64131
dns:
  * (SEMVER-MAJOR) do not consult hosts file in reverse lookups (Archkon) #64268
  * (SEMVER-MAJOR) stop using deprecated functions in `SetServers` (Antoine du Hamel) #64356
doc:
  * (SEMVER-MAJOR) remove OpenSSL 1.x references (Filip Skokan) #64777
  * (SEMVER-MAJOR) update Node.js 27 official binary toolchains (Richard Lau) #66377
domain:
  * (SEMVER-MAJOR) runtime-deprecate the module (Matteo Collina) #65074
  * (SEMVER-MAJOR) port to AsyncLocalStorage (Matteo Collina) #61095
fs:
  * (SEMVER-MAJOR) implement glob natively (Aviv Keller) #65392
  * (SEMVER-MAJOR) return Buffer from mkdtemp when prefix is a Buffer (Hamid Reza Ghavami) #64397
http:
  * (SEMVER-MAJOR) reject responses exceeding header limit (Matteo Collina) #65010
  * (SEMVER-MAJOR) runtime deprecate instantiating without new (Yagiz Nizipli) #64853
  * (SEMVER-MAJOR) increase keepAliveTimeout default to 65 seconds (Tim Perry) #62782
  * (SEMVER-MAJOR) make req.headers have a null prototype (Matteo Collina) #62900
  * (SEMVER-MAJOR) reject addTrailers after finish (Ryuhei Shima) #62832
http2:
  * (SEMVER-MAJOR) increase default window sizes (Matteo Collina) #64623
lib:
  * (SEMVER-MAJOR) deprecate _http_* (Sebastian Beltran) #58535
  * (SEMVER-MAJOR) insert argv[0] at argv[1] in setDeserializeMainFunction (Daijiro Wachi) #62928
  * (SEMVER-MAJOR) use `Object.freeze` to avoid defensive cloning in `SourceMap` (Daijiro Wachi) #62830
  * (SEMVER-MAJOR) reject SharedArrayBuffer in Blob constructor per spec (Ali Hassan) #63046
lib,src:
  * (SEMVER-MAJOR) remove `--no-experimental-websocket` CLI flag (Antoine du Hamel) #65284
net:
  * (SEMVER-MAJOR) race family autoselection attempts (Matteo Collina) #66229
  * (SEMVER-MAJOR) throw on multiple listen calls (Matteo Collina) #64871
  * (SEMVER-MAJOR) runtime-deprecate Server.prototype._listen2 (Guilherme Araújo) #64794
  * (SEMVER-MAJOR) add experimental net/promises API (Ethan Arrowood) #63965
repl:
  * (SEMVER-MAJOR) use inspector over vm (Aviv Keller) #64034
src:
  * (SEMVER-MAJOR) officially deprecate `node::ObjectWrap` (Anna Henningsen) #63756
  * (SEMVER-MAJOR) merge `CreateEnvironment()` overloads (Anna Henningsen) #63596
src, test:
src,lib:
  * (SEMVER-MAJOR) add --allow-env permission (James M Snell) #66132
stream:
  * (SEMVER-MAJOR) destroy source when map iterator closes early (Y1D7NG) #64264
test:
  * (SEMVER-MAJOR) fix fs write encoding coverage (Filip Skokan) #66247
test,benchmark:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-only coverage (Filip Skokan) #64777
test,tools:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-era FIPS leftovers (Filip Skokan) #64777
test_runner:
  * use AsyncLocalStorage instead of async_hooks (Matteo Collina) #66795
tls:
  * (SEMVER-MAJOR) move _tls_* to end-of-life (Sebastian Beltran) #60658
zlib:
  * (SEMVER-MAJOR) convert classes to modern syntax and eol DEP0184 (Yagiz Nizipli) #64849

PR-URL: #67062
RafaelGSS added a commit that referenced this pull request Oct 27, 2026
Notable changes:

async_hooks:
  * (SEMVER-MAJOR) remove legacy AsyncLocalStorage implementation (Matteo Collina) #63641
benchmark:
  * (SEMVER-MAJOR) protect against accidental fork bomb (James M Snell) #66132
build:
  * (SEMVER-MAJOR) remove the bundled FIPS provider build (Filip Skokan) #64777
  * (SEMVER-MAJOR) require OpenSSL 3 or later (Filip Skokan) #64777
  * (SEMVER-MAJOR) downgrade Intel macOS support to experimental (Antoine du Hamel) #65427
crypto:
  * (SEMVER-MAJOR) move DEP0093 to End-of-Life (Filip Skokan) #64777
  * (SEMVER-MAJOR) remove legacy OpenSSL code paths (Filip Skokan) #64777
  * (SEMVER-MAJOR) validate digest output encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate update input encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate inputEncoding in Cipher/Decipher update (Maruthan G) #66247
  * (SEMVER-MAJOR) move DEP0198 to End-of-Life (Filip Skokan) #64000
  * (SEMVER-MAJOR) move DEP0203 and DEP0204 to End-of-Life (Filip Skokan) #63188
  * (SEMVER-MAJOR) reject resizable backing stores in Web Crypto buffer parameters (Filip Skokan) #63925
  * (SEMVER-MAJOR) throw on uninitialized DH computeSecret (Filip Skokan) #63922
  * (SEMVER-MAJOR) runtime-deprecate calling Hmac.digest() more than once (Madelyn) #63624
crypto,https,tls:
  * (SEMVER-MAJOR) end OpenSSL engine support (Filip Skokan) #64777
deps:
  * (SEMVER-MAJOR) update archs files for openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) upgrade openssl sources to openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) remove ncrypto legacy OpenSSL backend (Filip Skokan) #64777
  * (SEMVER-MAJOR) update V8 to 15.6.75.13 (Joyee Cheung) #66601
  * (SEMVER-MAJOR) update V8 to 15.5.35.20 (Joyee Cheung) #66537
  * (SEMVER-MAJOR) update V8 to 15.2.124.38 (Joyee Cheung) #65161
  * (SEMVER-MAJOR) upgrade npm to 12.1.0 (npm team) #66212
dgram:
  * (SEMVER-MAJOR) skip the custom lookup for literal IP addresses (Ruben Bridgewater) #64131
dns:
  * (SEMVER-MAJOR) do not consult hosts file in reverse lookups (Archkon) #64268
  * (SEMVER-MAJOR) stop using deprecated functions in `SetServers` (Antoine du Hamel) #64356
doc:
  * (SEMVER-MAJOR) remove OpenSSL 1.x references (Filip Skokan) #64777
  * (SEMVER-MAJOR) update Node.js 27 official binary toolchains (Richard Lau) #66377
domain:
  * (SEMVER-MAJOR) runtime-deprecate the module (Matteo Collina) #65074
  * (SEMVER-MAJOR) port to AsyncLocalStorage (Matteo Collina) #61095
fs:
  * (SEMVER-MAJOR) implement glob natively (Aviv Keller) #65392
  * (SEMVER-MAJOR) return Buffer from mkdtemp when prefix is a Buffer (Hamid Reza Ghavami) #64397
http:
  * (SEMVER-MAJOR) reject responses exceeding header limit (Matteo Collina) #65010
  * (SEMVER-MAJOR) runtime deprecate instantiating without new (Yagiz Nizipli) #64853
  * (SEMVER-MAJOR) increase keepAliveTimeout default to 65 seconds (Tim Perry) #62782
  * (SEMVER-MAJOR) make req.headers have a null prototype (Matteo Collina) #62900
  * (SEMVER-MAJOR) reject addTrailers after finish (Ryuhei Shima) #62832
http2:
  * (SEMVER-MAJOR) increase default window sizes (Matteo Collina) #64623
lib:
  * (SEMVER-MAJOR) deprecate _http_* (Sebastian Beltran) #58535
  * (SEMVER-MAJOR) insert argv[0] at argv[1] in setDeserializeMainFunction (Daijiro Wachi) #62928
  * (SEMVER-MAJOR) use `Object.freeze` to avoid defensive cloning in `SourceMap` (Daijiro Wachi) #62830
  * (SEMVER-MAJOR) reject SharedArrayBuffer in Blob constructor per spec (Ali Hassan) #63046
lib,src:
  * (SEMVER-MAJOR) remove `--no-experimental-websocket` CLI flag (Antoine du Hamel) #65284
net:
  * (SEMVER-MAJOR) race family autoselection attempts (Matteo Collina) #66229
  * (SEMVER-MAJOR) throw on multiple listen calls (Matteo Collina) #64871
  * (SEMVER-MAJOR) runtime-deprecate Server.prototype._listen2 (Guilherme Araújo) #64794
  * (SEMVER-MAJOR) add experimental net/promises API (Ethan Arrowood) #63965
repl:
  * (SEMVER-MAJOR) use inspector over vm (Aviv Keller) #64034
src:
  * (SEMVER-MAJOR) officially deprecate `node::ObjectWrap` (Anna Henningsen) #63756
  * (SEMVER-MAJOR) merge `CreateEnvironment()` overloads (Anna Henningsen) #63596
src, test:
src,lib:
  * (SEMVER-MAJOR) add --allow-env permission (James M Snell) #66132
stream:
  * (SEMVER-MAJOR) destroy source when map iterator closes early (Y1D7NG) #64264
test:
  * (SEMVER-MAJOR) fix fs write encoding coverage (Filip Skokan) #66247
test,benchmark:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-only coverage (Filip Skokan) #64777
test,tools:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-era FIPS leftovers (Filip Skokan) #64777
test_runner:
  * use AsyncLocalStorage instead of async_hooks (Matteo Collina) #66795
tls:
  * (SEMVER-MAJOR) move _tls_* to end-of-life (Sebastian Beltran) #60658
zlib:
  * (SEMVER-MAJOR) convert classes to modern syntax and eol DEP0184 (Yagiz Nizipli) #64849

PR-URL: #67062
RafaelGSS added a commit that referenced this pull request Oct 27, 2026
Notable changes:

async_hooks:
  * (SEMVER-MAJOR) remove legacy AsyncLocalStorage implementation (Matteo Collina) #63641
benchmark:
  * (SEMVER-MAJOR) protect against accidental fork bomb (James M Snell) #66132
build:
  * (SEMVER-MAJOR) remove the bundled FIPS provider build (Filip Skokan) #64777
  * (SEMVER-MAJOR) require OpenSSL 3 or later (Filip Skokan) #64777
  * (SEMVER-MAJOR) downgrade Intel macOS support to experimental (Antoine du Hamel) #65427
crypto:
  * (SEMVER-MAJOR) move DEP0093 to End-of-Life (Filip Skokan) #64777
  * (SEMVER-MAJOR) remove legacy OpenSSL code paths (Filip Skokan) #64777
  * (SEMVER-MAJOR) validate digest output encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate update input encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate inputEncoding in Cipher/Decipher update (Maruthan G) #66247
  * (SEMVER-MAJOR) move DEP0198 to End-of-Life (Filip Skokan) #64000
  * (SEMVER-MAJOR) move DEP0203 and DEP0204 to End-of-Life (Filip Skokan) #63188
  * (SEMVER-MAJOR) reject resizable backing stores in Web Crypto buffer parameters (Filip Skokan) #63925
  * (SEMVER-MAJOR) throw on uninitialized DH computeSecret (Filip Skokan) #63922
  * (SEMVER-MAJOR) runtime-deprecate calling Hmac.digest() more than once (Madelyn) #63624
crypto,https,tls:
  * (SEMVER-MAJOR) end OpenSSL engine support (Filip Skokan) #64777
deps:
  * (SEMVER-MAJOR) update archs files for openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) upgrade openssl sources to openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) remove ncrypto legacy OpenSSL backend (Filip Skokan) #64777
  * (SEMVER-MAJOR) update V8 to 15.6.75.13 (Joyee Cheung) #66601
  * (SEMVER-MAJOR) update V8 to 15.5.35.20 (Joyee Cheung) #66537
  * (SEMVER-MAJOR) update V8 to 15.2.124.38 (Joyee Cheung) #65161
  * (SEMVER-MAJOR) upgrade npm to 12.1.0 (npm team) #66212
dgram:
  * (SEMVER-MAJOR) skip the custom lookup for literal IP addresses (Ruben Bridgewater) #64131
dns:
  * (SEMVER-MAJOR) do not consult hosts file in reverse lookups (Archkon) #64268
  * (SEMVER-MAJOR) stop using deprecated functions in `SetServers` (Antoine du Hamel) #64356
doc:
  * (SEMVER-MAJOR) remove OpenSSL 1.x references (Filip Skokan) #64777
  * (SEMVER-MAJOR) update Node.js 27 official binary toolchains (Richard Lau) #66377
domain:
  * (SEMVER-MAJOR) runtime-deprecate the module (Matteo Collina) #65074
  * (SEMVER-MAJOR) port to AsyncLocalStorage (Matteo Collina) #61095
fs:
  * (SEMVER-MAJOR) implement glob natively (Aviv Keller) #65392
  * (SEMVER-MAJOR) return Buffer from mkdtemp when prefix is a Buffer (Hamid Reza Ghavami) #64397
http:
  * (SEMVER-MAJOR) reject responses exceeding header limit (Matteo Collina) #65010
  * (SEMVER-MAJOR) runtime deprecate instantiating without new (Yagiz Nizipli) #64853
  * (SEMVER-MAJOR) increase keepAliveTimeout default to 65 seconds (Tim Perry) #62782
  * (SEMVER-MAJOR) make req.headers have a null prototype (Matteo Collina) #62900
  * (SEMVER-MAJOR) reject addTrailers after finish (Ryuhei Shima) #62832
http2:
  * (SEMVER-MAJOR) increase default window sizes (Matteo Collina) #64623
lib:
  * (SEMVER-MAJOR) deprecate _http_* (Sebastian Beltran) #58535
  * (SEMVER-MAJOR) insert argv[0] at argv[1] in setDeserializeMainFunction (Daijiro Wachi) #62928
  * (SEMVER-MAJOR) use `Object.freeze` to avoid defensive cloning in `SourceMap` (Daijiro Wachi) #62830
  * (SEMVER-MAJOR) reject SharedArrayBuffer in Blob constructor per spec (Ali Hassan) #63046
lib,src:
  * (SEMVER-MAJOR) remove `--no-experimental-websocket` CLI flag (Antoine du Hamel) #65284
net:
  * (SEMVER-MAJOR) race family autoselection attempts (Matteo Collina) #66229
  * (SEMVER-MAJOR) throw on multiple listen calls (Matteo Collina) #64871
  * (SEMVER-MAJOR) runtime-deprecate Server.prototype._listen2 (Guilherme Araújo) #64794
  * (SEMVER-MAJOR) add experimental net/promises API (Ethan Arrowood) #63965
repl:
  * (SEMVER-MAJOR) use inspector over vm (Aviv Keller) #64034
src:
  * (SEMVER-MAJOR) officially deprecate `node::ObjectWrap` (Anna Henningsen) #63756
  * (SEMVER-MAJOR) merge `CreateEnvironment()` overloads (Anna Henningsen) #63596
src, test:
src,lib:
  * (SEMVER-MAJOR) add --allow-env permission (James M Snell) #66132
stream:
  * (SEMVER-MAJOR) destroy source when map iterator closes early (Y1D7NG) #64264
test:
  * (SEMVER-MAJOR) fix fs write encoding coverage (Filip Skokan) #66247
test,benchmark:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-only coverage (Filip Skokan) #64777
test,tools:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-era FIPS leftovers (Filip Skokan) #64777
test_runner:
  * use AsyncLocalStorage instead of async_hooks (Matteo Collina) #66795
tls:
  * (SEMVER-MAJOR) move _tls_* to end-of-life (Sebastian Beltran) #60658
zlib:
  * (SEMVER-MAJOR) convert classes to modern syntax and eol DEP0184 (Yagiz Nizipli) #64849

PR-URL: #67062
RafaelGSS added a commit that referenced this pull request Oct 27, 2026
Notable changes:

async_hooks:
  * (SEMVER-MAJOR) remove legacy AsyncLocalStorage implementation (Matteo Collina) #63641
benchmark:
  * (SEMVER-MAJOR) protect against accidental fork bomb (James M Snell) #66132
build:
  * (SEMVER-MAJOR) remove the bundled FIPS provider build (Filip Skokan) #64777
  * (SEMVER-MAJOR) require OpenSSL 3 or later (Filip Skokan) #64777
  * (SEMVER-MAJOR) downgrade Intel macOS support to experimental (Antoine du Hamel) #65427
crypto:
  * (SEMVER-MAJOR) move DEP0093 to End-of-Life (Filip Skokan) #64777
  * (SEMVER-MAJOR) remove legacy OpenSSL code paths (Filip Skokan) #64777
  * (SEMVER-MAJOR) validate digest output encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate update input encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate inputEncoding in Cipher/Decipher update (Maruthan G) #66247
  * (SEMVER-MAJOR) move DEP0198 to End-of-Life (Filip Skokan) #64000
  * (SEMVER-MAJOR) move DEP0203 and DEP0204 to End-of-Life (Filip Skokan) #63188
  * (SEMVER-MAJOR) reject resizable backing stores in Web Crypto buffer parameters (Filip Skokan) #63925
  * (SEMVER-MAJOR) throw on uninitialized DH computeSecret (Filip Skokan) #63922
  * (SEMVER-MAJOR) runtime-deprecate calling Hmac.digest() more than once (Madelyn) #63624
crypto,https,tls:
  * (SEMVER-MAJOR) end OpenSSL engine support (Filip Skokan) #64777
deps:
  * (SEMVER-MAJOR) update archs files for openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) upgrade openssl sources to openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) remove ncrypto legacy OpenSSL backend (Filip Skokan) #64777
  * (SEMVER-MAJOR) update V8 to 15.6.75.13 (Joyee Cheung) #66601
  * (SEMVER-MAJOR) update V8 to 15.5.35.20 (Joyee Cheung) #66537
  * (SEMVER-MAJOR) update V8 to 15.2.124.38 (Joyee Cheung) #65161
  * (SEMVER-MAJOR) upgrade npm to 12.1.0 (npm team) #66212
dgram:
  * (SEMVER-MAJOR) skip the custom lookup for literal IP addresses (Ruben Bridgewater) #64131
dns:
  * (SEMVER-MAJOR) do not consult hosts file in reverse lookups (Archkon) #64268
  * (SEMVER-MAJOR) stop using deprecated functions in `SetServers` (Antoine du Hamel) #64356
doc:
  * (SEMVER-MAJOR) remove OpenSSL 1.x references (Filip Skokan) #64777
  * (SEMVER-MAJOR) update Node.js 27 official binary toolchains (Richard Lau) #66377
domain:
  * (SEMVER-MAJOR) runtime-deprecate the module (Matteo Collina) #65074
  * (SEMVER-MAJOR) port to AsyncLocalStorage (Matteo Collina) #61095
fs:
  * (SEMVER-MAJOR) implement glob natively (Aviv Keller) #65392
  * (SEMVER-MAJOR) return Buffer from mkdtemp when prefix is a Buffer (Hamid Reza Ghavami) #64397
http:
  * (SEMVER-MAJOR) reject responses exceeding header limit (Matteo Collina) #65010
  * (SEMVER-MAJOR) runtime deprecate instantiating without new (Yagiz Nizipli) #64853
  * (SEMVER-MAJOR) increase keepAliveTimeout default to 65 seconds (Tim Perry) #62782
  * (SEMVER-MAJOR) make req.headers have a null prototype (Matteo Collina) #62900
  * (SEMVER-MAJOR) reject addTrailers after finish (Ryuhei Shima) #62832
http2:
  * (SEMVER-MAJOR) increase default window sizes (Matteo Collina) #64623
lib:
  * (SEMVER-MAJOR) deprecate _http_* (Sebastian Beltran) #58535
  * (SEMVER-MAJOR) insert argv[0] at argv[1] in setDeserializeMainFunction (Daijiro Wachi) #62928
  * (SEMVER-MAJOR) use `Object.freeze` to avoid defensive cloning in `SourceMap` (Daijiro Wachi) #62830
  * (SEMVER-MAJOR) reject SharedArrayBuffer in Blob constructor per spec (Ali Hassan) #63046
lib,src:
  * (SEMVER-MAJOR) remove `--no-experimental-websocket` CLI flag (Antoine du Hamel) #65284
net:
  * (SEMVER-MAJOR) race family autoselection attempts (Matteo Collina) #66229
  * (SEMVER-MAJOR) throw on multiple listen calls (Matteo Collina) #64871
  * (SEMVER-MAJOR) runtime-deprecate Server.prototype._listen2 (Guilherme Araújo) #64794
  * (SEMVER-MAJOR) add experimental net/promises API (Ethan Arrowood) #63965
repl:
  * (SEMVER-MAJOR) use inspector over vm (Aviv Keller) #64034
src:
  * (SEMVER-MAJOR) officially deprecate `node::ObjectWrap` (Anna Henningsen) #63756
  * (SEMVER-MAJOR) merge `CreateEnvironment()` overloads (Anna Henningsen) #63596
src, test:
src,lib:
  * (SEMVER-MAJOR) add --allow-env permission (James M Snell) #66132
stream:
  * (SEMVER-MAJOR) destroy source when map iterator closes early (Y1D7NG) #64264
test:
  * (SEMVER-MAJOR) fix fs write encoding coverage (Filip Skokan) #66247
test,benchmark:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-only coverage (Filip Skokan) #64777
test,tools:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-era FIPS leftovers (Filip Skokan) #64777
test_runner:
  * use AsyncLocalStorage instead of async_hooks (Matteo Collina) #66795
tls:
  * (SEMVER-MAJOR) move _tls_* to end-of-life (Sebastian Beltran) #60658
zlib:
  * (SEMVER-MAJOR) convert classes to modern syntax and eol DEP0184 (Yagiz Nizipli) #64849

PR-URL: #67062
RafaelGSS added a commit that referenced this pull request Oct 28, 2026
Notable changes:

build:
  * (SEMVER-MAJOR) remove the bundled FIPS provider build (Filip Skokan) #64777
  * (SEMVER-MAJOR) require OpenSSL 3 or later (Filip Skokan) #64777
  * (SEMVER-MAJOR) downgrade Intel macOS support to experimental (Antoine du Hamel) #65427
crypto:
  * (SEMVER-MAJOR) move DEP0093 to End-of-Life (Filip Skokan) #64777
  * (SEMVER-MAJOR) remove legacy OpenSSL code paths (Filip Skokan) #64777
  * (SEMVER-MAJOR) validate digest output encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate update input encodings (Filip Skokan) #66247
  * (SEMVER-MAJOR) validate inputEncoding in Cipher/Decipher update (Maruthan G) #66247
  * (SEMVER-MAJOR) move DEP0198 to End-of-Life (Filip Skokan) #64000
  * (SEMVER-MAJOR) move DEP0203 and DEP0204 to End-of-Life (Filip Skokan) #63188
  * (SEMVER-MAJOR) reject resizable backing stores in Web Crypto buffer parameters (Filip Skokan) #63925
  * (SEMVER-MAJOR) throw on uninitialized DH computeSecret (Filip Skokan) #63922
  * (SEMVER-MAJOR) runtime-deprecate calling Hmac.digest() more than once (Madelyn) #63624
crypto,https,tls:
  * (SEMVER-MAJOR) end OpenSSL engine support (Filip Skokan) #64777
deps:
  * (SEMVER-MAJOR) update archs files for openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) upgrade openssl sources to openssl-4.1.0 (Node.js GitHub Bot) #66971
  * (SEMVER-MAJOR) remove ncrypto legacy OpenSSL backend (Filip Skokan) #64777
  * (SEMVER-MAJOR) update V8 to 15.6.75.13 (Joyee Cheung) #66601
  * (SEMVER-MAJOR) upgrade npm to 12.1.0 (npm team) #66212
dgram:
  * (SEMVER-MAJOR) skip the custom lookup for literal IP addresses (Ruben Bridgewater) #64131
dns:
  * (SEMVER-MAJOR) do not consult hosts file in reverse lookups (Archkon) #64268
  * (SEMVER-MAJOR) stop using deprecated functions in `SetServers` (Antoine du Hamel) #64356
doc:
  * (SEMVER-MAJOR) remove OpenSSL 1.x references (Filip Skokan) #64777
  * (SEMVER-MAJOR) update Node.js 27 official binary toolchains (Richard Lau) #66377
domain:
  * (SEMVER-MAJOR) runtime-deprecate the module (Matteo Collina) #65074
  * (SEMVER-MAJOR) port to AsyncLocalStorage (Matteo Collina) #61095
fs:
  * (SEMVER-MAJOR) implement glob natively (Aviv Keller) #65392
  * (SEMVER-MAJOR) return Buffer from mkdtemp when prefix is a Buffer (Hamid Reza Ghavami) #64397
http:
  * (SEMVER-MAJOR) reject responses exceeding header limit (Matteo Collina) #65010
  * (SEMVER-MAJOR) runtime deprecate instantiating without new (Yagiz Nizipli) #64853
  * (SEMVER-MAJOR) increase keepAliveTimeout default to 65 seconds (Tim Perry) #62782
  * (SEMVER-MAJOR) make req.headers have a null prototype (Matteo Collina) #62900
  * (SEMVER-MAJOR) reject addTrailers after finish (Ryuhei Shima) #62832
http2:
  * (SEMVER-MAJOR) increase default window sizes (Matteo Collina) #64623
lib:
  * (SEMVER-MAJOR) deprecate _http_* (Sebastian Beltran) #58535
  * (SEMVER-MAJOR) insert argv[0] at argv[1] in setDeserializeMainFunction (Daijiro Wachi) #62928
  * (SEMVER-MAJOR) use `Object.freeze` to avoid defensive cloning in `SourceMap` (Daijiro Wachi) #62830
  * (SEMVER-MAJOR) reject SharedArrayBuffer in Blob constructor per spec (Ali Hassan) #63046
lib,src:
  * (SEMVER-MAJOR) remove `--no-experimental-websocket` CLI flag (Antoine du Hamel) #65284
net:
  * (SEMVER-MAJOR) race family autoselection attempts (Matteo Collina) #66229
  * (SEMVER-MAJOR) throw on multiple listen calls (Matteo Collina) #64871
  * (SEMVER-MAJOR) runtime-deprecate Server.prototype._listen2 (Guilherme Araújo) #64794
  * (SEMVER-MAJOR) add experimental net/promises API (Ethan Arrowood) #63965
repl:
  * (SEMVER-MAJOR) use inspector over vm (Aviv Keller) #64034
src:
  * (SEMVER-MAJOR) officially deprecate `node::ObjectWrap` (Anna Henningsen) #63756
  * (SEMVER-MAJOR) merge `CreateEnvironment()` overloads (Anna Henningsen) #63596
src,lib:
  * (SEMVER-MAJOR) add --allow-env permission (James M Snell) #66132
stream:
  * (SEMVER-MAJOR) destroy source when map iterator closes early (Y1D7NG) #64264
test_runner:
  * use AsyncLocalStorage instead of async_hooks (Matteo Collina) #66795
tls:
  * (SEMVER-MAJOR) move _tls_* to end-of-life (Sebastian Beltran) #60658
zlib:
  * (SEMVER-MAJOR) convert classes to modern syntax and eol DEP0184 (Yagiz Nizipli) #64849

PR-URL: #67062
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

author ready PRs with CI started, the required approvals, and no outstanding review comments. commit-queue-failed PRs whose Commit Queue landing failed and need manual intervention before retrying. commit-queue-squash PRs the Commit Queue should land as one squashed commit. semver-major PRs that contain breaking changes and should be released in the next major version. source maps Issues and PRs related to source map support.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants