2025-06-23, Version 20.19.3 'Iron' (LTS), @marco-ippolito — Node.js

Notable Changes

[c535a3c483] - crypto: graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable (Filip Skokan) #56142
[af1dc63815] - crypto: update root certificates to NSS 3.108 (Node.js GitHub Bot) #57381
[01d63a4ddf] - deps: update timezone to 2025b (Node.js GitHub Bot) #57857
[b6daa344eb] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102

Commits

[fc1fa7a357] - build: use FILE_OFFSET_BITS=64 esp. on 32-bit arch (RafaelGSS) #58090
[79e0812181] - build: use glob for dependencies of out/Makefile (Richard Lau) #55789
[f56e62851a] - crypto: allow length=0 for HKDF and PBKDF2 in SubtleCrypto.deriveBits (Filip Skokan) #55866
[c535a3c483] - crypto: graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable (Filip Skokan) #56142
[39925de8b1] - crypto: allow non-multiple of 8 in SubtleCrypto.deriveBits (Filip Skokan) #55296
[af1dc63815] - crypto: update root certificates to NSS 3.108 (Node.js GitHub Bot) #57381
[d09008add3] - deps: V8: cherry-pick 1a3ecc2483b2 (Michaël Zasso) #58342
[fd56652425] - deps: V8: cherry-pick 182d9c05e78b (Andrey Kosyakov) #58342
[447481e829] - deps: V8: cherry-pick third_party/zlib\@646b7f569718 (Hans Wennborg) #58342
[eb447168df] - deps: update simdutf to 6.4.2 (Node.js GitHub Bot) #57855
[01d63a4ddf] - deps: update timezone to 2025b (Node.js GitHub Bot) #57857
[10fb49f2a9] - deps: update icu to 77.1 (Node.js GitHub Bot) #57455
[f1dc7d0205] - deps: update corepack to 0.32.0 (Node.js GitHub Bot) #57265
[7a2e64bb8a] - deps: update simdutf to 6.4.0 (Node.js GitHub Bot) #56764
[e80669be0d] - doc: mention reports should align with Node.js CoC (Rafael Gonzaga) #57607
[7b2c0bc92e] - doc: add gurgunday as triager (Gürgün Dayıoğlu) #57594
[791e4879de] - doc: document REPL custom eval arguments (Dario Piotrowicz) #57690
[2917f09876] - doc: improved fetch docs (Alessandro Miliucci) #57296
[d940b15843] - doc: clarify unhandledRejection events behaviors in process doc (Dario Piotrowicz) #57654
[71c664fab7] - doc: update position type to integer | null in fs (Yukihiro Hasegawa) #57745
[0c0fbfa9c6] - doc: add missing v0.x changelog entries (Antoine du Hamel) #57779
[e99462c9fc] - doc: correct deprecation type of assert.CallTracker (René) #57997
[c7e92696ef] - doc: add returns for https.get (Eng Zer Jun) #58025
[ccc42b69ce] - doc: fix env variable name in util.styleText (Antoine du Hamel) #58072
[b6daa344eb] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102
[e5d6a3df16] - doc: fix AsyncLocalStorage example response changes after node v18 (Naor Tedgi (Abu Emma)) #57969
[f006411998] - doc: fix typo of file zlib.md (yusheng chen) #58093
[5193735df4] - doc: add missing options.signal to readlinePromises.createInterface() (Jimmy Leung) #55456
[fd44af730f] - doc: fix misaligned options in vm.compileFunction() (Jimmy Leung) #58145
[0fdcc0ddcd] - doc: add ambassaor message (Brian Muenzenmeyer) #57600
[5ca9616bd3] - doc: increase z-index of header element (Dario Piotrowicz) #57851
[81342d10f0] - doc: fix deprecation type for DEP0148 (Livia Medeiros) #57785
[776becfe01] - doc: remove mention of --require not supporting ES modules (Huáng Jùnliàng) #57620
[3140a8f133] - doc: add missing deprecated badges in fs.md (Yukihiro Hasegawa) #57384
[441ce24ae3] - doc: deprecate passing invalid types in fs.existsSync (Carlos Espa) #55892
[0556f54544] - http: correctly translate HTTP method (Paolo Insogna) #52701
[c2c6d2b035] - http: be more generational GC friendly (ywave620) #56767
[cdf3fa241c] - http2: skip writeHead if stream is closed (Shima Ryuhei) #57686
[bbd5aec785] - http2: fix graceful session close (Kushagra Pandey) #57808
[b427ae4f34] - meta: remove build-windows.yml (Aviv Keller) #54662
[49e624f554] - os: fix netmask format check condition in getCIDR function (Wiyeong Seo) #57324
[d582954434] - src: remove unused variable in crypto_x509.cc (Michaël Zasso) #57754
[234a505e96] - src: allow embedder customization of OOMErrorHandler (Shelley Vohr) #57325
[c0252cd380] - src: fix -Wunreachable-code-return in node_sea (Shelley Vohr) #57664
[fcd1622fc1] - src: fix kill signal 0 on Windows (Stefan Stojanovic) #57695
[850192b06b] - test: skip broken sea on rhel8 (Marco Ippolito) #58761
[3cf7cfb695] - test: update WPT for WebCryptoAPI to edd42c005c (Node.js GitHub Bot) #57365
[f57765bdcf] - test: mark test-without-async-context-frame flaky on windows (James M Snell) #56753
[275ea8e7ef] - test: force GC in test-file-write-stream4 (Luigi Pinca) #57930
[da6a13c338] - test: deflake test-http2-options-max-headers-block-length (Luigi Pinca) #57959
[56fce6691e] - test: prevent extraneous HOSTNAME substitution in test-runner-output (René) #58076
[c9c0be5596] - test: update expected error message for macOS (Antoine du Hamel) #57742
[3cbf5f93d2] - test: fix missing edge case in test-blob-slice-with-large-size (Joyee Cheung) #58414
[bffd4ec379] - test: skip in test-buffer-tostring-rangeerror on allocation failure (Joyee Cheung) #58415
[8237346fb7] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #54593
[b90c4ab937] - tools: remove unused osx-pkg-postinstall.sh (Antoine du Hamel) #57667
[414013dcfb] - tools: edit create-release-proposal workflow to handle pr body length (Elves Vieira) #57841
[7c449ed6b3] - tools: fix tarball testing directory (Marco Ippolito) #57994
[d164dc2d38] - tools: update sccache version to v0.10.0 (Marco Ippolito) #57994
[debd3c2cc0] - tools: disable failing test envs in test-linux CI (Antoine du Hamel) #58351
[152112505a] - typings: fix ImportModuleDynamicallyCallback return type (Chengzhong Wu) #57160
[363bf744ab] - worker: flush stdout and stderr on exit (Matteo Collina) #56428