Skip to content

Update dependency node to v24.22.1 (main) - #592

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-node-24.x
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-node-24.x

Conversation

@renovate

@renovate renovate Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change Pending
node (source) minor 24.21.0 → 24.22.1 v24.22.2

Release Notes

nodejs/node (node)

v24.22.1: 2026-10-21, Version 24.22.1 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
  • (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
  • (CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
  • (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
  • (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
  • (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
  • (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
  • (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov)
  • crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
  • deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
  • deps: update timezone to 2026e (Node.js GitHub Bot)
  • deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
  • deps: update undici to 7.30.1 (Node.js GitHub Bot)
Commits

v24.22.0: 2026-10-14, Version 24.22.0 'Krypton' (LTS), @​richardlau prepared by @​aduh95

Compare Source

Notable Changes
  • [ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #​65627
  • [c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #​65553
  • [a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #​65484
  • [c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #​65484
  • [51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #​63411
  • [d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #​66090
  • [acc1578179] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #​65593
  • [a7f8de6362] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #​64725
  • [60c3eb61bd] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #​65825
  • [6b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #​65806
  • [75456a3512] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #​65606
  • [72d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #​65434
  • [41161dda87] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #​64232
  • [adbc757d70] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #​64232
  • [241339f072] - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell) #​65805
  • [63b0974d9e] - (SEMVER-MINOR) util: implement util.throttle (James M Snell) #​65899
  • [a3bbb5a26f] - (SEMVER-MINOR) util: implement debounce (James M Snell) #​65899
Commits

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 21, 2026 01:37
@coderabbitai

coderabbitai Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

No actionable comments were generated in the recent review.

Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: 9eebc1bd-71e2-4cac-8229-12e0ba796086
Commits

Reviewing files that changed from the base of the PR and between 534726c and 596cd11.

Files selected for processing: 1
  • .tool-versions
Files skipped from review as they are similar to previous changes: 1
  • .tool-versions

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 10 remain after this review.

Walkthrough

The .tool-versions file updates the configured Node.js version from 24.21.0 to 24.22.1.

Changes: Tooling version

Layer / File(s) Summary
Node.js version pin
.tool-versions
The configured Node.js version changes from 24.21.0 to 24.22.1.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Suggested reviewers: bohdanmar, cuipinghuo

Merge Risk: Minimal · up to 596cd

No issue requiring a fix before merge is identified; proceed with normal validation.

Pre-merge checks: Passed 5
Check name Status Explanation
Title check Passed The title "Update dependency node to v24.22.1 (main)" matches the only change in the changeset, which updates the Node.js version in .tool-versions from 24.21.0 to 24.22.1. It names the package, the t…
Description check Passed The description is a Renovate-generated dependency update. It states the Node.js update from 24.21.0 to 24.22.1 and includes release notes for that version. It relates directly to the .tool-versions c…
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within survi…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title "Update dependency node to v24.22.1 (main)" matches the only change in the changeset, which updates the Node.js version in .tool-versions from 24.21.0 to 24.22.1. It names the package, the target version, and the branch.

Full details: Description check

Explanation

The description is a Renovate-generated dependency update. It states the Node.js update from 24.21.0 to 24.22.1 and includes release notes for that version. It relates directly to the .tool-versions change.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

🚀 Preview is available at https://0fca9b1c.enterprise-contract.pages.dev

@fullsend-ai-review fullsend-ai-review Bot added the risk/moderate PR risk: moderate label Oct 21, 2026
@fullsend-ai-review

fullsend-ai-review Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

<!-- fullsend:risk-assessment -->
Risk Assessment: moderate (2/5)

Details

Routine Renovate bot patch-version bump of Node.js (24.22.1) in .tool-versions; Tier 1 signals are identical to the prior assessment and Tier 2 shows no specific change warranting deviation, so the prior score of 2 is preserved by anchoring.

Previous run

<!-- fullsend:risk-assessment -->
Risk Assessment: moderate (2/5)

Details

Routine Renovate bot patch-version bump of Node.js (24.22.0 → 24.22.1) in .tool-versions; Tier 1 and Tier 2 signals are unchanged from the prior assessment (single file, bot author, no protected paths, low churn), so the prior score of 2 is preserved by anchoring.

Previous run (2)

Risk Assessment: moderate (2/5)

Details

Routine Renovate bot patch-version bump of Node.js (24.21.0 → 24.22.0) in .tool-versions; single dependency file changed with low churn and no protected paths or security-sensitive files.

@fullsend-ai-review

fullsend-ai-review Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Looks good to me

<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJmaW5kaW5ncyI6W119 -->

Previous run

Looks good to me

<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJmaW5kaW5ncyI6W119 -->

Previous run (2)

Looks good to me

<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJmaW5kaW5ncyI6W119 -->

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Oct 21, 2026
@renovate
renovate Bot force-pushed the renovate/main-node-24.x branch from 6cd2e40 to 534726c Compare October 25, 2026 00:46
@renovate renovate Bot changed the title Update dependency node to v24.22.0 (main) Update dependency node to v24.22.1 (main) Oct 25, 2026
@github-actions

Copy link
Copy Markdown
Contributor

🚀 Preview is available at https://a1b7f04d.enterprise-contract.pages.dev

@fullsend-ai-review
fullsend-ai-review Bot dismissed their stale review October 25, 2026 00:58

Superseded by updated review

fullsend-ai-review[bot]

This comment was marked as outdated.

Acepresso
Acepresso previously approved these changes Oct 25, 2026
robnester-rh
robnester-rh previously approved these changes Oct 27, 2026

@robnester-rh robnester-rh left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@renovate
renovate Bot dismissed stale reviews from robnester-rh and Acepresso via 596cd11 October 27, 2026 15:52
@renovate
renovate Bot force-pushed the renovate/main-node-24.x branch from 534726c to 596cd11 Compare October 27, 2026 15:52
@github-actions

Copy link
Copy Markdown
Contributor

🚀 Preview is available at https://1f7aa303.enterprise-contract.pages.dev

@fullsend-ai-review
fullsend-ai-review Bot dismissed their stale review October 27, 2026 16:03

Superseded by updated review

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

main ready-for-merge All reviewers approved — ready to merge renovate risk/moderate PR risk: moderate size: XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants