Skip to content

chore(deps): update node.js to v24.18.0#1228

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-24.x
Open

chore(deps): update node.js to v24.18.0#1228
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-24.x

Conversation

@renovate

@renovate renovate Bot commented May 18, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
node (source) minor 24.15.024.18.0 age confidence
@types/node (source) devDependencies minor 24.12.324.13.3 age confidence

Release Notes

nodejs/node (node)

v24.18.0: 2026-06-23, Version 24.18.0 'Krypton' (LTS), @​richardlau prepared by @​sxa

Compare Source

Notable Changes
  • [e07e7a31e1] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #​63527
  • [44c8ebcbd6] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #​64004
  • [d3ef4122ee] - (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina) #​63597
  • [bb2857b85a] - (SEMVER-MINOR) crypto: align key argument names in docs and error messages (Filip Skokan) #​62527
  • [b9d5e87880] - (SEMVER-MINOR) crypto: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) #​62527
  • [ccd756d61e] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #​62183
  • [4c9251fc09] - (SEMVER-MINOR) http: add writeInformation to send arbitrary 1xx status codes (Tim Perry) #​63155
  • [8c989ec4a3] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #​63079
  • [3f54c8ba32] - Revert "stream: noop pause/resume on destroyed streams" (Stewart X Addison) #​63834
Commits

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate-approve[bot]
renovate-approve Bot previously approved these changes May 18, 2026
@c2fo-cibot c2fo-cibot Bot added the size/XS Denotes a PR that changes 0-9 lines label May 18, 2026
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 692b43e to 8f820ca Compare May 21, 2026 15:38
@renovate renovate Bot changed the title chore(deps): update dependency @types/node to v24.12.4 chore(deps): update node.js to v24.16.0 May 21, 2026
renovate-approve[bot]
renovate-approve Bot previously approved these changes May 21, 2026
@c2fo-cibot c2fo-cibot Bot added size/S Denotes a PR that changes 10-29 lines and removed size/XS Denotes a PR that changes 0-9 lines labels May 21, 2026
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 8f820ca to 51654cb Compare May 28, 2026 18:45
@coveralls

coveralls commented May 28, 2026

Copy link
Copy Markdown

Coverage Report for CI Build 28067093326

Coverage remained the same at 96.845%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 765
Covered Lines: 747
Line Coverage: 97.65%
Relevant Branches: 471
Covered Branches: 450
Branch Coverage: 95.54%
Branches in Coverage %: Yes
Coverage Strength: 2924353.87 hits per line

💛 - Coveralls

@renovate renovate Bot force-pushed the renovate/node-24.x branch 4 times, most recently from 4363cc6 to 39a954a Compare June 4, 2026 09:12
@renovate renovate Bot force-pushed the renovate/node-24.x branch from 39a954a to a2abfc7 Compare June 6, 2026 00:51
@renovate renovate Bot force-pushed the renovate/node-24.x branch 6 times, most recently from ec70364 to ca38299 Compare June 18, 2026 05:41
@renovate renovate Bot changed the title chore(deps): update node.js to v24.16.0 chore(deps): update node.js to v24.17.0 Jun 18, 2026
@renovate renovate Bot force-pushed the renovate/node-24.x branch from ca38299 to f6a35ce Compare June 24, 2026 00:42
@renovate renovate Bot changed the title chore(deps): update node.js to v24.17.0 chore(deps): update node.js to v24.18.0 Jun 24, 2026
@renovate renovate Bot force-pushed the renovate/node-24.x branch from f6a35ce to 13691b8 Compare July 8, 2026 09:28
@renovate

renovate Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Scope: all 13 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 38, reused 0, downloaded 0, added 0
Progress: resolved 39, reused 0, downloaded 0, added 0
/tmp/renovate/repos/github/C2FO/fast-csv/packages/format:
 ERR_PNPM_NO_MATURE_MATCHING_VERSION  Version 24.13.3 (released 16 hours ago) of @types/node does not meet the minimumReleaseAge constraint

This error happened while installing a direct dependency of /tmp/renovate/repos/github/C2FO/fast-csv/packages/format

The latest release of @types/node is "26.1.1". Published at 7/8/2026 6:47:46 AM

Other releases are:
  * ts2.5: 12.12.6 published at 11/5/2019
  * ts2.6: 12.12.6 published at 11/5/2019
  * ts2.0: 12.12.6 published at 11/5/2019
  * ts2.1: 12.12.6 published at 11/5/2019
  * ts2.2: 12.12.6 published at 11/5/2019
  * ts2.4: 12.12.6 published at 11/5/2019
  * ts2.3: 12.12.6 published at 11/5/2019
  * ts2.7: 12.12.6 published at 11/5/2019
  * ts2.8: 13.13.4 published at 4/26/2020
  * ts2.9: 14.0.1 published at 5/13/2020
  * ts3.0: 14.6.0 published at 8/17/2020
  * ts3.1: 14.10.1 published at 9/11/2020
  * ts3.2: 14.14.9 published at 11/19/2020
  * ts3.3: 14.14.20 published at 1/4/2021
  * ts3.4: 14.14.31 published at 2/19/2021
  * ts3.5: 15.6.1 published at 5/25/2021
  * ts3.6: 16.6.2 published at 8/18/2021
  * ts3.7: 16.11.7 published at 11/8/2021
  * ts3.8: 17.0.21 published at 2/23/2022
  * ts3.9: 17.0.41 published at 6/7/2022
  * ts4.0: 18.7.14 published at 8/29/2022
  * ts4.1: 18.11.9 published at 11/1/2022
  * ts4.2: 18.15.3 published at 3/14/2023
  * ts4.3: 20.6.0 published at 9/8/2023
  * ts4.4: 20.6.0 published at 9/8/2023
  * ts4.5: 20.10.0 published at 11/24/2023
  * ts4.6: 20.11.25 published at 3/6/2024
  * ts4.7: 20.14.8 published at 6/22/2024
  * ts4.8: 22.9.0 published at 11/5/2024
  * ts4.9: 22.9.3 published at 11/23/2024
  * ts5.0: 22.13.14 published at 3/27/2025
  * ts5.1: 24.1.0 published at 7/22/2025
  * ts5.2: 25.5.0 published at 3/12/2026
  * ts5.3: 25.9.3 published at 6/10/2026
  * ts5.4: 25.9.3 published at 6/10/2026
  * ts5.5: 25.9.3 published at 6/10/2026
  * ts5.6: 26.1.1 published at 7/8/2026 6:47:46 AM
  * ts5.9: 26.1.1 published at 7/8/2026 6:47:46 AM
  * ts5.8: 26.1.1 published at 7/8/2026 6:47:46 AM
  * ts5.7: 26.1.1 published at 7/8/2026 6:47:46 AM
  * ts6.0: 26.1.1 published at 7/8/2026 6:47:46 AM

If you need the full list of all 2354 published versions run "$ pnpm view @types/node versions".

If you want to install the matched version ignoring the time it was published, you can add the package name to the minimumReleaseAgeExclude setting. Read more about it: https://pnpm.io/settings#minimumreleaseageexclude

@renovate renovate Bot force-pushed the renovate/node-24.x branch from 13691b8 to b376488 Compare July 8, 2026 23:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/S Denotes a PR that changes 10-29 lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant