nodejs/node

Notable Changes

• child_process:
  • TypedArray and DataView values are now accepted as input by
    execFileSync and spawnSync. #22409
• coverage:
  • Native V8 code coverage information can now be output to disk by setting the
    environment variable NODE_V8_COVERAGE to a directory. #22527
• deps:
  • The bundled npm was upgraded to version 6.4.1. #22591
    • Changelogs:
      6.3.0-next.0
      6.3.0
      6.4.0
      6.4.1
• fs:
  • The methods fs.read, fs.readSync, fs.write, fs.writeSync,
    fs.writeFile and fs.writeFileSync now all accept TypedArray and
    DataView objects. #22150
  • A new boolean option, withFileTypes, can be passed to to fs.readdir and
    fs.readdirSync. If set to true, the methods return an array of directory
    entries. These are objects that can be used to determine the type of each
    entry and filter them based on that without calling fs.stat. #22020
• http2:
  • The http2 module is no longer experimental. #22466
• os:
  • Added two new methods: os.getPriority and os.setPriority, allowing to
    manipulate the scheduling priority of processes. #22407
• process:
  • Added process.allowedNodeEnvironmentFlags. This object can be used to
    programmatically validate and list flags that are allowed in the
    NODE_OPTIONS environment variable. #19335
• src:
  • Deprecated option variables in public C++ API. #22515
  • Refactored options parsing. #22392
• vm:
  • Added vm.compileFunction, a method to create new JavaScript functions from
    a source body, with options similar to those of the other vm methods. #21571
• Added new collaborators:
  • lundibundi - Denys Otrishko

Commits

• [bdd3afbb87] - assert: fix loose set and map comparison (Ruben Bridgewater) #22495
• [e2a801a5e6] - async_hooks: adding regression test case for async/await (Anto Aravinth) #22374
• [48648f5194] - benchmark: add lines to scatter plots (Denys Otrishko) #22074
• [9a10421f53] - build: use arm64 as DESTCPU for aarch64 (Daniel Bevenius) #22548
• [4862ce1816] - build: use 0o octal notation in configure (Anna Henningsen) #22536
• [efe71e9e31] - build: Don't set -fno-threadsafe-statics on macOS (Kyle Fuller) #22198
• [fc1259bf56] - build: use npm ci (Refael Ackermann) #22399
• [660c515e60] - build: move available-node variable to top (Daniel Bevenius) #22356
• [8f760c2476] - build: touch tools/doc/node_modules after run (Daniel Bevenius) #22350
• [fd6033c341] - build: add test-doc to test target (Daniel Bevenius) #22294
• [ed874e40d1] - build: use echo command instead of shell comments (Daniel Bevenius) #22293
• [3915537c13] - build,tools: tweak the travis config (Refael Ackermann) #22417
• [2f9295e68b] - build,win: remove unmatched endlocal statement (Refael Ackermann) #22627
• [180bb0b7d8] - child_process: fix handling of incorrect uid/gid in spawn (Denys Otrishko) #22574
• [5321c312c2] - (SEMVER-MINOR) child_process: allow typed arrays for input (Sarat Addepalli) #22409
• [43092ebfa2] - cli: more flexible width when printing --help (Anna Henningsen) #22637
• [18ce2b8911] - cli: generate --help text in JS (Anna Henningsen) #22490
• [dec42b54f7] - cli: fix flags on help output (Gus Caplan) #22271
• [9a0dad2097] - (SEMVER-MINOR) coverage: expose native V8 coverage (Benjamin Coe) #22527
• [989fd73f1e] - crypto: fix incorrect use of INT_MAX in validation (Tobias Nießen) #22581
• [c47c79e1ca] - crypto: improve setAuthTag (Tobias Nießen) #22538
• [ea34cc7b88] - crypto: deduplicate public key parsing (Tobias Nießen) #22553
• [59a6c60a92] - crypto: add support for OCB mode for AEAD (Tobias Nießen) #21447
• [2c33dc36b1] - deps: update to nghttp2 1.33.0 (Anna Henningsen) #22649
• [212e6bb092] - deps: cherry-pick 22116dd from upstream V8 (Marcel Laverdet) #21992
• [f7295493c4] - deps: backport a8f6869 from upstream V8 (Ben Newman) #22122
• [c84c27f7de] - deps: cherry-pick bf5ea81 from upstream V8 (Ali Ijaz Sheikh) #22114
• [a986abc529] - deps: fix V8 test regression (Michaël Zasso) #22677
• [a5c0bc44ac] - deps: backport 4 CPU profiler commits from upstream V8 (Peter Marshall) #22028
• [11c96987ff] - (SEMVER-MINOR) deps: upgrade npm to 6.4.1 (Kat Marchán) #22591
• [5f44ce8b8b] - deps: backport String::Utf8Length with isolate (Michaël Zasso) #22531
• [d50e1ffa52] - deps: backport String::Write{OneByte,Utf8} with isolate (Michaël Zasso) #22531
• [3dc9cfc4af] - deps: backport StackFrame::GetFrame with isolate (Michaël Zasso) #22531
• [1be23f7b95] - deps: sync V8 embedder string with master branch (Michaël Zasso) #22573
• [aa22dc8d68] - deps: import acorn@5.7.2 (Sam Ruby) #22488
• [611f423e1b] - deps: patch V8 to 6.8.275.30 (Michaël Zasso) #22125
• [90e99dac86] - deps: upgrade to libuv 1.23.0 (cjihrig) #22365
• [eab377f681] - deps: fix CRLF in text file not present in upstream (Joyee Cheung) #22340
• [c4ef170484] - doc: remove usage of deprecated V8 APIs in addons.md (Michaël Zasso) #22667
• [a448c8b779] - doc: add blurb about implications of ABI stability (Gabriel Schulhof) #22508
• [a3e3ae01fb] - doc: clarify Readable paused/flowing!==object mode (Chris White) #22619
• [56e654a47f] - doc: update a link in v8.md (lakamsani) #22639
• [805875d33b] - doc: add personal pronoun for danbev (Daniel Bevenius) #22670
• [71502f219c] - doc: improve ECDH example (Tobias Nießen) #22607
• [a4545ad8dc] - doc: indicate createSecureContext arg is optional (Rich Trott) #22545
• [0e862da422] - doc: remove _optional_ designation for tls options (Rich Trott) #22545
• [c7268c45bc] - doc: improve examples in buffer docs (pranshuchittora) #22170
• [395ba7b046] - doc: fix a typo in fs.md (Vse Mozhet Byt) #22635
• [7d8ef42058] - doc: clarify fallback behavior of module require (TomCoded) #22494
• [3cec988e79] - doc: Remove 'dnt_helper.js' (MaleDong) #22595
• [5c2a6d8dfb] - doc: add section on how to build debug build (Troels Liebe Bentsen) #22510
• [bfdb28e45a] - doc: fix up warning text about character devices (Anna Henningsen) #22569
• [56f73a1996] - doc: add profiling APIs to the diagnostics support document (Matheus Marchini) #22588
• [6f0e83ee03] - doc: update Linux perf test status in our CI (Matheus Marchini) #22588
• [ae934186df] - doc: make Stability Index more concise (Rich Trott) #22544
• [c3a4cc4c16] - doc: unify deprecation wording (Tobias Nießen) #22555
• [e24cd92b66] - doc: remove redundant 'Example:' and similar notes (Vse Mozhet Byt) #22537
• [1d38399bcd] - doc: replace 1 by process.stdout.fd (Weijia Wang) #22564
• [5e7c6518a3] - doc: warn against streaming from character devices (Gireesh Punathil) #21212
• [05d432c2a6] - doc: initial cut at support tiers for diag tools (Michael Dawson) #21870
• [397235ec62] - doc: simplify http2 wording and formatting (Rich Trott) #22541
• [81364a7e16] - doc: clarify ERR_AMBIGUOUS_ARGUMENT (Rich Trott) #22542
• [46063b8479] - doc: add GitHub email set up link to COLLABORATOR_GUIDE (Denys Otrishko) #22525
• [9b4403dd7d] - doc: clarify git config name/email requirements (Anna Henningsen) #22433
• [2875f72c46] - doc: document removed error codes (Sarat Addepalli) #22100
• [c833d83d21] - doc: support 'removed' field in doc YAML sections (Sarat Addepalli) #22100
• [e2541303f3] - doc: tweak macOS-firewall note position (ZYSzys) #22440
• [6228433926] - doc: add lundibundi to collaborators (Denys Otrishko) #22491
• [2a849ba241] - doc: state callback behavior on empty buffer (Ruben Verborgh) #22461
• [f27a25472c] - doc: make createPushResponse() more detailled (MaleDong) #22366
• [282a45d042] - doc: update wrapping-related documentation (Gabriel Schulhof) #22363
• [c17e980534] - doc: clarify fs.write[Sync]() descriptions (Vse Mozhet Byt) #22402
• [1ebaa2af4a] - doc: unify optional arguments format in headings (Vse Mozhet Byt) #22397
• [d86e615549] - doc: clarify documentation of pipes and zlib objects (Andreas Girgensohn) #22354
• [e6440888b1] - doc: add doc for --loader option (Sarat Addepalli) #22104
• [9142935eb2] - doc: clarify that new URL().port could be an empty string (Matteo Collina) #22232
• [c894145e28] - doc: Windows building supported on x64 (Refael Ackermann) #21443
• [797229810e] - doc: clarify ServerResponse explanations (MaleDong) #22305
• [2260bb9214] - (SEMVER-MINOR) fs: update read to work with any TypedArray/DataView (Sarat Addepalli) #22150
• [ad97314418] - (SEMVER-MINOR) fs: readdir optionally returning type information (Bryan English) #22020
• [1e9d3e64cd] - gyp: muffle xcodebuild warnings (Ujjwal Sharma) #21999
• [c07a065699] - http: adding doc and debug for calling empty string on write function (Anto Aravinth) #22118
• [4cdecc5ebe] - http2: don't expose the original socket through the socket proxy (Szymon Marczak) #22650
• [f77bbe8cab] - (SEMVER-MINOR) http2: graduate from experimental (James M Snell) #22466
• [a740145e1b] - http2: throw better error when accessing unbound socket proxy (James M Snell) #22486
• [d3ceaa1d41] - http2: emit timeout on compat request and response (James M Snell) #22252
• [f0be05342b] - lib: merge onread handlers for http2 streams & net.Socket (Ashok) #22449
• [1eac11f626] - lib: extract validateNumber validator (Jon Moss) #22249
• [3f93782767] - lib: remove unused exec param (MaleDong) #22274
• [46fbc23614] - lib,src: standardize owner\_symbol for handles (Anna Henningsen) #22002
• [96213c8027] - n-api: clean up thread-safe function (Gabriel Schulhof) #22259
• [609ae33bbe] - n-api: remove idle_running from TsFn (Lars-Magnus Skog) #22520
• [ad0072abfa] - os: don't use getCheckedFunction() in userInfo() (cjihrig) #22609
• [219da67e2e] - (SEMVER-MINOR) os: add os.{get,set}Priority() (cjihrig) #22407
• [30b22a676d] - os: destructure ERR_SYSTEM_ERROR properly (cjihrig) #22394
• [3b44053ce8] - os: improve networkInterfaces performance (Ruben Bridgewater) #22359
• [107c8c0d4d] - perf_hooks: move strings to env (James M Snell) #22401
• [2bf46ae45e] - (SEMVER-MINOR) process: add allowedNodeEnvironmentFlags property (Christopher Hiller) #19335
• [5af6a89a73] - process: use owner_symbol for \_getActive\* (Anna Henningsen) #22002
• [0b340ab5e7] - repl: tab auto complete big arrays (Ruben Bridgewater) #22408
• [1025868d5c] - src: remove calls to deprecated V8 functions (Equals) (Michaël Zasso) #22665
• [c637d41b9d] - src: remove calls to deprecated v8 functions (IntegerValue) (Ujjwal Sharma) #22129
• [be86ddb7ec] - src: promote v8 name spaces with using (Gireesh Punathil) #22641
• [b1e5491ae9] - src: remove calls to deprecated V8 functions (Int32Value) (Michaël Zasso) #22662
• [e5e72e60f0] - src: skip warnings for our own deprecated APIs (Anna Henningsen) #22666
• [dbb8f37377] - src: remove editing leftovers from options help text (Anna Henningsen) #22636
• [4e651983e5] - src: allow UTF-16 in generic StringBytes decode call (Anna Henningsen) #22622
• [f064d44fad] - src: warn about odd UTF-16 decoding function signature (Anna Henningsen) #22623
• [516d71af66] - src: fix a typo in the comment (Gireesh Punathil) #22640
• [1edd47e0b7] - src: disable debug options when inspector is unavailable (Anna Henningsen) #22657
• [cfca8518f8] - src: add NODE\_EXTERN to class definition (Anna Henningsen) #22559
• [c8e586c859] - src: add trace points to dns (Chin Huang) #21840
• [b8299585bc] - src: make CLI options programatically accesible (Anna Henningsen) #22490
• [8930268382] - src: fix node::FatalException (Tobias Nießen) #22654
• [bac4c41328] - (SEMVER-MINOR) src: deprecate option variables in public API (Anna Henningsen) #22515
• [956502949b] - src: remove calls to deprecated v8 functions (Uint32Value) (Ujjwal Sharma) #22143
• [b2a955a269] - src: rework (mostly internal) functions to use Maybes (Ujjwal Sharma) #21935
• [0a65727f0a] - src: remove calls to deprecated v8 functions (ToString) (Ujjwal Sharma) #21935
• [75a9192549] - src: fix external memory usage going negative (Mathias Buus) #22594
• [99146772e0] - src: remove calls to deprecated v8 functions (BooleanValue) (Ujjwal Sharma) #22075
• [a7c0cb87be] - src: do not pass code to ScriptCompiler::CreateCodeCacheForFunction (Michaël Zasso) #22596
• [332b035a96] - src: use String::Utf8Length with isolate (Michaël Zasso) #22531
• [8375f753c0] - src: use String::Write{OneByte,Utf8} with isolate (Michaël Zasso) #22531
• [9478f29387] - src: use StackFrame::GetFrame with isolate (Michaël Zasso) #22531
• [f8feb0253d] - src: add missing NODE\_WANT\_INTERNALS guards (Anna Henningsen) #22514
• [2c5dfef393] - src: fix NODE_OPTIONS parsing bug (Anna Henningsen) #22529
• [034ba7322f] - src: fix --without-ssl build (Ian McKellar) #22484
• [2767ebad2f] - src: move more to node_process.cc from node.cc (James M Snell) #22422
• [8fd55fffee] - (SEMVER-MINOR) src: refactor options parsing (Anna Henningsen) #22392
• [198cf417b5] - src: yield empty maybes for failed AsyncWrap::MakeCallback calls (Anna Henningsen) #22078
• [02e3daaa57] - src: implement v8::Platform::CallDelayedOnWorkerThread (Alexey Kozyatinskiy) #22383
• [c207865e24] - src: encode 0x27 (') for special URLs (Timothy Gu) #22022
• [4638ce6f03] - src: perform integrity checks on built-in code cache (Joyee Cheung) #22152
• [866965ec0e] - src: fix race on modpending (Ryan Petrich) #21611
• [383d578d76] - src,deps: add isolate parameter to String::Concat (Michaël Zasso) #22521
• [4ed300a585] - stream: update emit readable debug statement (Daniel Bevenius) #22613
• [53fb7af1b2] - stream: restore flow if there are 'data' handlers after once('readable') (Matteo Collina) #22209
• [dd772c1f13] - test: refactor test-gc-tls-external-memory (Anna Henningsen) #22651
• [7a3bbd21f3] - Revert "test: mark async-hooks/test-callback-error as flaky" (Anna Henningsen) #22655
• [4791cd7f0a] - test: fix flaky async-hooks/test-callback-error (Anna Henningsen) #22655
• [c26747d9af] - test: fix flaky test-worker-message-port-transfer-self (Anna Henningsen) #22658
• [e5b732f25d] - test: add test to dynamic enablement of trace-events (Ali Ijaz Sheikh) #22114
• [2025eaf999] - test: improve assertion in process test (Anna Henningsen) #22634
• [7a70dce251] - test: fix test-trace-events-dns (Rich Trott) #22674
• [cb15017bfe] - test: fix flaky parallel/test-fs-write-file-typedarrays (Anna Henningsen) #22659
• [7627b0430a] - test: use module.exports consistently (James M Snell) #22557
• [d3740d843a] - test: improve assertions in test-cli-node-print-help (Anna Henningsen) #22489
• [67372016bb] - test: move test that depends on dns query to internet (Joyee Cheung) #22516
• [82732ef4f7] - test: fix typo in test name (Rich Trott) #22605
• [d3bb7419f2] - test: refacor spawn[Sync]Pwd (Refael Ackermann) #22522
• [4cdc61bc8c] - test: move AEAD test vectors out of script (Tobias Nießen) #21873
• [d27e463ca6] - test: properly extend process.env in child_process (Lucas Woo) #22430
• [863899970b] - test: add test for internalConnect() when address type is IPv6 (Yaniv Friedensohn) #22444
• [7f85288808] - test: remove string literal from strictEqual() (Scott Van Gilder) #22512
• [81d824b132] - test: move custom WHATWG URL tests into separate files (Joyee Cheung) #22442
• [6f31478229] - test: remove third argument from strictEqual() (Neeraj Laad) #22451
• [d02fb36379] - test: move common.isCPPSymbolsNotMapped to tick-processor tests (James M Snell) #22459
• [9ec105ccdc] - test: improve code coverage for string decoder (Benjamin Chen) #22306
• [1e7deb72d2] - test: add streams benchmark test (Denys Otrishko) #22335
• [ef60a8d7a5] - test: add vm benchmark test (Denys Otrishko) #22335
• [400aac8c5f] - test: add v8 benchmark test (Denys Otrishko) #22335
• [a8b8d3fe56] - test: move common.onGC to individual module (James M Snell) #22446
• [6d0c3d19b8] - test: flaky everywhere test-trace-events-fs-sync (Refael Ackermann) #22483
• [7f2d3d0ed4] - test: move hijackstdio out of require('common') (James M Snell) #22462
• [fcf059a667] - test: add test unknown credential error of process.setgroups (Masashi Hirano) #22368
• [ae016c8e6d] - test: add tests for dnsPromises.lookup (Masashi Hirano) #21559
• [98af1704ae] - test: move common.ArrayStream to separate module (James M Snell) #22447
• [e68438246e] - test: remove isGlibc from common (James M Snell) #22443
• [acfb29cbd8] - test: harden sequential/test-performance (Ruben Bridgewater) #22404
• [38b0c1f04d] - test: remove redundant cli tests (Bryan English) #22355
• [e8e014a8dc] - test: improve assert message in http timeout test (Rich Trott) #22403
• [22adebfc9a] - test: move http timeout test to parallel (Rich Trott) #22403
• [5aa3100c29] - test: fix flaky http timeout test (Rich Trott) #22403
• [33994d896a] - test: remove third argument from assert.strictEqual() (Dzmitry_Prudnikau) #22371
• [fbc189b9eb] - test: cover error case in os getCheckedFunction() (cjihrig) #22394
• [149c209171] - test: harden test-gc-http-client (Ruben Bridgewater) #22373
• [acfb72486d] - test: remove harmony flags (Ruben Bridgewater) #22285
• [44bcc1d71a] - test: fix cctest URLTest.ToFilePath on Win32 without Intl (James M Snell) #22265
• [2ed22dfa3a] - test: mark async-hooks/test-callback-error as flaky (Joyee Cheung) #22330
• [4a28d38788] - test: mark async-hooks/test-statwatcher as flaky (Joyee Cheung) #22330
• [5cfab145a1] - test: remove common.hasTracing (Rich Trott) #22250
• [7794d4e0b8] - test,stream: fix pipeline test so it runs well on Windows in older nodes (Matteo Collina) #22456
• [696f7a54b5] - tls: improve debugging assertion (Anna Henningsen) #22625
• [2ca21998d3] - tools: add [src] links to async_hooks.html (Sam Ruby) #22656
• [c32d5577b6] - tools: add [src] links to assert.html (Sam Ruby) #22601
• [f5520cc53d] - tools: specify rule disabled in test-assert.js (Rich Trott) #22563
• [15b7f75e49] - tools: specify rules disabled in common/dns.js (Rich Trott) #22563
• [50100f3a9c] - tools: Include links to source code in documentation (Sam Ruby) #22405
• [14ac77e2e2] - tools: add missing package-lock to clang-format (Michaël Zasso) #22500
• [9d246f97d1] - tools: update ESLint to 5.4.0 (Rich Trott) #22454
• [725a2b14f2] - tools: simplify ESLint invocation in Makefile (Rich Trott) #22348
• [5b14066c14] - util: restore all information in inspect (Ruben Bridgewater) #22437
• [f86ca8948a] - util: Fix number format for pad (MaleDong) #21906
• [1828017053] - util: mark special entries as such (Ruben Bridgewater) #22287
• [f763ac7dd0] - util: escape symbol and non-enumerable keys (Ruben Bridgewater) #22300
• [3dc3a3196a] - util: improve empty typed array inspection (Ruben Bridgewater) #22284
• [e9ac683efc] - util: properly indent special properties (Ruben Bridgewater) #22291
• [459d676203] - util: harden util.inspect (Ruben Bridgewater) #21869
• [cdf6471234] - util: fix sparse array inspection (Ruben Bridgewater) #22283
• [2b1cb3b01f] - util,assert: improve performance (Ruben Bridgewater) #22197
• [4d4180b46b] - util,assert: improve comparison performance (Ruben Bridgewater) #22258
• [2937a79c45] - (SEMVER-MINOR) vm: add bindings for v8::CompileFunctionInContext (Ujjwal Sharma) #21571
• [eebcec7db5] - win, build: remove superfluous error message (Bartosz Sosnowski) #22580
• [041c779814] - win,build: build N-API addons in parallel (Bartosz Sosnowski) #22582
• [1daa82a8fc] - worker: display MessagePort status in util.inspect() (Anna Henningsen) #22658
• [887c43ffa7] - worker: remove redundant function call to setupPortReferencing (Ouyang Yadong) #22298
• [8e542eaf5f] - zlib: fix memory leak for invalid input (Anna Henningsen) #22713

This is a security release. All Node.js users should consult the security release summary at:

https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/

for details on patched vulnerabilities.

Fixes for the following CVEs are included in this release:

• CVE-2018-0732 (OpenSSL)
• CVE-2018-7166 (Node.js)
• CVE-2018-12115 (Node.js)

Notable Changes

• buffer:
  • Fix out-of-bounds (OOB) write in Buffer.write() for UCS-2 encoding (CVE-2018-12115)
  • Fix unintentional exposure of uninitialized memory in Buffer.alloc() (CVE-2018-7166)
• deps:
  • Upgrade to OpenSSL 1.1.0i, fixing:
    • Client DoS due to large DH parameter (CVE-2018-0732)
    • ECDSA key extraction via local side-channel (CVE not assigned)
  • Upgrade V8 from 6.7 to 6.8 (Michaël Zasso) #21079
    • Memory reduction and performance improvements, details at: https://v8project.blogspot.com/2018/06/v8-release-68.html
• http: http.get() and http.request() (and https variants) can now accept three arguments to allow for a URL and an options object (Sam Ruby) #21616
• Added new collaborators
  • Sam Ruby (https://github.com/rubys)
  • George Adams (https://github.com/gdams)

Commits

• [58a9ae118e] - assert: fix loose assert with map and set (Ruben Bridgewater) #22145
• [1c577016b8] - benchmark: improve assert benchmarks (Ruben Bridgewater) #22211
• [734323d9eb] - buffer: stop alloc() uninitialized memory return (cjihrig) nodejs-private/node-private#137
• [2c4c17b708] - buffer: avoid overrun on UCS-2 string write (Rod Vagg) nodejs-private/node-private#138
• [6622ac798d] - buffer: use FastBuffer when fill is set to 0 (Сковорода Никита Андреевич) #21989
• [f506a5f46e] - build: make --shared-[...]-path work on Windows (Jeremy Apthorp) #21530
• [1be6fb93c8] - build: add CONFIG_FLAGS to with-code-cache target (Daniel Bevenius) [#22207](https
  ://github.com/nodejs/node/pull/22207)
• [4520bb8a73] - build: make tools/doc/node_modules non-phony (Daniel Bevenius) #22189
• [c42ff4ebd8] - build: add crypto check to build targets (Daniel Bevenius) #22148
• [cdb8c1b44d] - build: extract common parts from addon .buildstamp (Daniel Bevenius) #22171
• [1e7a8c3016] - build: reset embedder string to "-node.0" (Michaël Zasso) #21079
• [86ab2c041e] - crypto: remove unused SSLWrap handle methods (Jon Moss) #22216
• [9212875406] - crypto: simplify state failure handling (Tobias Nießen) #22131
• [916a1d59f0] - crypto: simplify Hmac::HmacUpdate (Tobias Nießen) #22132
• [2dc7f17e8b] - (SEMVER-MINOR) crypto: add better scrypt option aliases (Anna Henningsen) #21525
• [fcf422e921] - deps: backport c608122b from upstream (Ruben Bridgewater) #22210
• [a07ccaeb19] - deps: update archs files for OpenSSL-1.1.0i (Shigeki Ohtsu) #22318
• [473996c90f] - deps: add s390 asm rules for OpenSSL-1.1.0 (Shigeki Ohtsu) #19794
• [05e48fd018] - deps: upgrade openssl sources to 1.1.0i (Shigeki Ohtsu) #22318
• [f8bc5d6320] - deps: cherry-pick 09bca09 from upstream V8 (Matheus Marchini) #22068
• [c69fdc9d5f] - (SEMVER-MINOR) deps: remove thread_local to fix V8 compilation (Peter Marshall) #21668
• [981fff714e] - deps: refactor v8.gyp (Michaël Zasso) #22017
• [5fa3ffad20] - (SEMVER-MINOR) deps: patch the V8 API to be backwards compatible with 6.7 (Peter Marshall) #21668
• [6eed40acbb] - deps: cherry-pick 804a693 from upstream V8 (Matheus Marchini) #21855
• [7eccaf86d6] - deps: V8: Backport of 0dd3390 from upstream (James M Snell) #21899
• [328c89925a] - deps: cherry-pick 907d7bc from upstream V8 (Michaël Zasso) #21838
• [afacfd2992] - deps: cherry-pick 2075910 from upstream V8 (Michaël Zasso) #21838
• [4f24256274] - deps: cherry-pick 555c811 from upstream V8 (Anna Henningsen) #21741
• [7b4272a14d] - deps: cherry-pick 477df06 from upstream v8 (Gus Caplan) #21644
• [a0bf7aa07c] - deps: cherry-pick 70c4340 from upstream V8 (Matheus Marchini) #21126
• [4994ac65b0] - deps: cherry-pick acc336c from upstream V8 (Matheus Marchini) #21126
• [be569f82f1] - deps: cherry-pick b20faff from upstream V8 (Matheus Marchini) #21126
• [6df5feb13f] - deps: cherry-pick aa6ce3e from upstream V8 (Michaël Zasso) #21079
• [8b9a956f9e] - deps: cherry-pick 5dd3395 from upstream V8 (Matheus Marchini) #21386
• [548008a6f6] - deps: update v8.gyp and run Torque (Michaël Zasso) #21079
• [9c74271a96] - deps: update V8 to 6.8.275.24 (Michaël Zasso) #21079
• [a3f3c40966] - doc: simplify urlObject.hash text (Rich Trott) #22326
• [d2848697dc] - doc: simplify urlObject.hash description (Rich Trott) #22326
• [6d29986f4d] - doc: simplify format description of urlObject.auth (Rich Trott) #22324
• [a658a4df34] - doc: remove redundant explanation of format (Rich Trott) #22324
• [3236697c0b] - doc: use italics for words-as-words (Rich Trott) #22324
• [da76b61f59] - doc: bump ICU version to avoid confusion (Csaba Palfi) #22313
• [e04b0532bf] - doc: document 'inherit' option for stdio (non-shorthand) (James Bromwell) #22309
• [882c2c017a] - doc: clarify http2 docs around class exports (James M Snell) #22247
• [dd96ba5b89] - doc: add multiple issue templates for GitHub (Tobias Nießen) #22215
• [d95a22c304] - doc: declare all parameter types (Sam Ruby) #21782
• [9e25028981] - doc: add missing option for child_process.spawnSync() (James Bromwell) #22231
• [ef8d0fc490] - doc: list encodings supported by buffer.transcode (James M Snell) #22263
• [1b41cd44b5] - doc: discuss special protocol handling (James M Snell) #22261
• [cea8d4f4e9] - doc: replace _WG_ with _team_ (Rich Trott) #22183
• [fafdae4ce1] - doc: add subprocess.ref() and subprocess.unref() (Thomas Hunter II) #22220
• [d4f3615aaf] - doc: add gdams to collaborators (George Adams) [#22236](https://github.com/nodejs/n
  ode/pull/22236)
• [e75885f2e6] - doc: specify options parameter type in zlib.md (Vse Mozhet Byt) #21920
• [40af9767a2] - doc: declare all parameter types (Sam Ruby) #21782
• [38dd407c83] - doc: remove unused error codes from errors.md (Сковорода Никита Андреевич) #21491
• [6c7733f58a] - doc: update recommendations for createCipher (Tobias Nießen) #22087
• [34300aaaa4] - doc: correct crypto.randomFill() and randomFillSync() (Gerhard Stoebich) #21550
• [28870a46ac] - doc: add rubys to collaborators (Sam Ruby) #22109
• [d2ad9a2c13] - doc: fix return type of server.address() (Weijia Wang) #22043
• [168abb5801] - doc: rename stackStartFunction in assert.md (Eugene Y. Q. Shen) #22077
• [d364f9c8e7] - doc: fix changelog for v10.8.0 (Michaël Zasso) #22072
• [abac0c56b8] - doc: mark DEP0004 and DEP0042 as End-of-Life (Jon Moss) #22033
• [c6a56ae23e] - doc: correct grammatical error in BUILDING.md (Brandon Lee) #22067
• [29bc55320c] - doc: fixup process.binding deprecation code (James M Snell) #22062
• [ec9d529a32] - doc: documentation deprecation of process.binding (James M Snell) #22004
• [37369eba38] - (SEMVER-MINOR) http: allow url and options to be passed to http*.request and http*.get (Sam Ruby) #21616
• [1ca46ab6f4] - http,tls: name anonymous callbacks (Marco Levrero) #21412
• [8d226c6a79] - http2: correcting the heading format (Anto Aravinth) #22262
• [7223a91a50] - http2: explicitly disallow nested push streams (James M Snell) #22245
• [cee78bf7a2] - http2: avoid race condition in OnHeaderCallback (James M Snell) #22256
• [fcca2f7e49] - http2: remove streamError from docs (James M Snell) #22246
• [2bf9a4a09e] - https: allow url and options to be passed to https.request (Sam Ruby) #22003
• [4c5dc6e012] - inspector: tie objects lifetime to the thread they belong to (Eugene Ostroukhov) #22242
• [39898695b6] - inspector: add inspector_protocol as a direct dependency (Andrey Lushnikov) #21975
• [311ec12702] - inspector: fixed V8InspectorClient::currentTimeMS (Aleksey Kozyatinskiy) #21917
• [8f7e37337f] - lib: remove unused filterInternalStackFrames param (MaleDong) #22267
• [3f729aac20] - lib: extract validateString validator (Jon Moss) #22101
• [f570c19c89] - perf_hooks: avoid memory leak on gc observer (James M Snell) #22241
• [76a65921d3] - readline,zlib: named anonymous functions (Anto Aravinth) #21792
• [e4f346892c] - repl: support mult-line string-keyed objects (Sam Ruby) #21805
• [d0b0ea971a] - src: remove unnecessary writes in tls_wrap.cc (Anna Henningsen) #21984
• [b2ac7a750f] - src: avoid possible race during NodeBIO initialization (Anna Henningsen) #21984
• [d85b0a3c10] - src: use smart pointers for NodeBIO (Anna Henningsen) #21984
• [82e71dd8bd] - src: fix integer overflow in GetNow (Anatoli Papirovski) #22214
• [2737b46e16] - src: add READONLY_STRING_PROPERTY and simplify config (Jon Moss) #22222
• [8b5485dcf5] - src: fix up doc comment for experimental-worker bool (Anna Henningsen) #22165
• [e90e56f4ca] - src: remove calls to deprecated v8 functions (NumberValue) (Ujjwal Sharma) #22094
• [c09872b749] - src: remove unused env->vm_parsing_context_symbol (Jon Moss) #22034
• [6ca00d7044] - src: remove unused env strings (Jon Moss) #22137
• [0ca831a0ed] - src: clean up PackageConfig pseudo-boolean fields (Anna Henningsen) #21987
• [00c33a5131] - src: clean up agent loop when exiting through destructor (Anna Henningsen) #21867
• [ba480d33ce] - src: use only one tracing write fs req at a time (Anna Henningsen) #21867
• [6b58746b2e] - src: use unique_ptr for internal JSON trace writer (Anna Henningsen) #21867
• [ce48936077] - src: plug trace file file descriptor leak (Anna Henningsen) #21867
• [89e23021fb] - src: initialize file trace writer on tracing thread (Anna Henningsen) [#21867](http
  s://github.com/nodejs/node/pull/21867)
• [56edd5fc5b] - src: close tracing event loop (Anna Henningsen) #21867
• [4c9c1bbc45] - src: fix tracing if cwd or file path is inaccessible (Anna Henningsen) #21867
• [c101b396aa] - src: refactor default trace writer out of agent (Anna Henningsen) #21867
• [daafe6c195] - src: refactor tracing agent code (Anna Henningsen) #21867
• [4379140dbf] - src: minor refactor of node_trace_events.cc (Anna Henningsen) #21867
• [cde0e5f396] - src: reduce unnecessary includes (Anna Henningsen) #21867
• [31e3e6f1f8] - stream: fix readable behavior for highWaterMark === 0 (Denys Otrishko) #21690
• [9d89b3c7ec] - test: rename some allegories (Vse Mozhet Byt) #22307
• [1d15f33277] - test: call gc() explicitly to avoid OOM (Refael Ackermann) #22301
• [a7dad4565b] - test: move test-http-client-timeout-option-with-agent to sequential (Ouyang Yadong) #22083
• [a414b0757a] - test: add test-http2-large-file sequential test (James M Snell) #22254
• [01fe2cee5b] - test: fix error messages for OpenSSL-1.1.0i (Shigeki Ohtsu) #22318
• [c145690aad] - test: improve test coverage for comparisons (Ruben Bridgewater) #22212
• [bdc644f2ec] - test: remove common.fileExists() (Rich Trott) #22151
• [bc1cb7b7fc] - test: handle errors correctly in GC http test (Ouyang Yadong) #22185
• [cefc4a03cc] - test: remove second arg from assert.ifError() (Musa Hamwala) #22190
• [b1cbbbc7af] - test: move require of https to after crypto check (Daniel Bevenius) #22148
• [a6ab19a96a] - test: move require of http2 to after crypto check (Daniel Bevenius) #22148
• [7a4c7e6c82] - test: don't mask descriptor.enumerable (Thomas Leah) #22172
• [5018661a85] - test: remove common.fileExists() (Richard Lau) #22200
• [77ce40fa03] - test: remove unused argument in assertion (yahavfuchs) #22113
• [6daa4f8797] - test: update postmortem metadata test (cjihrig) #21079
• [16a929b867] - test: fix scriptParsed event expectations (Ingvar Stepanyan) #21079
• [e58c17b849] - test: update certificates and private keys (Fedor Indutny) #22184
• [d38ccaa421] - test: fix n-api addon build warnings (Kyle Farnung) #21808
• [d66e52fb8e] - test: run ESM tests in parallel (Michaël Zasso) #21919
• [6cff57e98d] - test: fix incorrect file mode check (Timothy Gu) #22023
• [dafaff3a5e] - test: remove unused config (Benjamin Gruenbaum) #21985
• [a569ae4b44] - test: remove third argument from assert.strictEqual() (Rishabh Singh) #22051
• [a60060b499] - test: remove third argument from call to assert.strictEqual() (Michael Sommer) #22047
• [246a94f301] - test: see value of "hadError" in tls test (Oryan Moshe) #22069
• [a40ee213b3] - test: improve reliability in http2-session-timeout (Rich Trott) #22026
• [e2d97eeb65] - test: remove outdated documentation (Jon Moss) #22009
• [94746d6a47] - test: remove outdated, non-functioning test (Anatoli Papirovski) #20894
• [0beffc0f3b] - test: remove test/gc, integrate into parallel (Anna Henningsen) #22001
• [c2372eac16] - test: add tracing crash regression test (Eugene Ostroukhov) #21867
• [7e23080d45] - test: pass through stderr in benchmark tests (Anna Henningsen) #21860
• [52020dc09a] - test: refactor test-http2-compat-serverresponse-finished.js (Anto Aravinth) #21929
• [88665b3cef] - test,doc: fix async-hooks coverage doc for md lint (Rod Vagg) #22296
• [d60b017135] - test,doc: adjust markdown table for linting (Rich Trott) #22221
• [8f56cc0321] - test,doc: adjust async-hooks coverage doc for lint (Rich Trott) #22221
• [5c41caa1cc] - test,doc: wrap common module md doc at 80 chars (Rich Trott) #22221
• [21883be05d] - test,doc: fix lint error in test fixtures (Rich Trott) [#22221](https://github.com/
  nodejs/node/pull/22221)
• [ec2209dc8b] - tls: change var to const (Eugen Cazacu) #22219
• [2d1c1853e9] - tls: remove SLAB_BUFFER_SIZE (Anatoli Papirovski) #21199
• [f989681e34] - tls: preallocate SSL cipher array (Tobias Nießen) #22136
• [6cd2d1dddc] - tools: fix header escaping regression (Sam Ruby) #22084
• [80dd0445c6] - tools: add no-misleading-character-class ESLint rule (Vse Mozhet Byt) #22278
• [bc35f17b7b] - tools: do not autolink section to itself (Vse Mozhet Byt) #22138
• [950a4a9b91] - tools: update ESLint to 5.3.0 (Rich Trott) #22134
• [0c67d326dc] - tools: convert addon-verify to remark (Sam Ruby) #21978
• [c85d00b786] - tools: produce JSON documentation using unified/remark/rehype (Sam Ruby) #21697
• [f0c871b0c7] - tools: add make format-cpp to run clang-format on C++ diffs (Joyee Cheung) #21997
• [5a4abbadfe] - tools: update to using dmn 1.0.11 (Rich Trott) #22035
• [7a7c194f4e] - tools: fix docs and run known_issues by default (Jon Moss) #21910
• [4995b28a11] - tools,build: apply markdown linting to test dir (Rich Trott) #22221
• [ad46cca104] - trace_events: add node.promises category, rejection counter (James M Snell) #22124
• [b171fa2530] - util: improve display of iterators and weak entries (Ruben Bridgewater) #20961
• [f1c22eaa56] - util,assert: fix boxed primitives bug (Ruben Bridgewater) #22243
• [677d10cdd1] - worker: fix deadlock when calling terminate from exit handler (Anna Henningsen) #22073
• [4b0d2de5f4] - zlib: remove unused parameters (MaleDong) #22115

This is a security release. All Node.js users should consult the security release summary at:

https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/

for details on patched vulnerabilities.

Fixes for the following CVEs are included in this release:

• CVE-2018-0732 (OpenSSL)
• CVE-2018-12115 (Node.js)

Notable Changes

• buffer: Fix out-of-bounds (OOB) write in Buffer.write() for UCS-2 encoding (CVE-2018-12115)
• deps: Upgrade to OpenSSL 1.0.2p, fixing:
  • Client DoS due to large DH parameter (CVE-2018-0732)
  • ECDSA key extraction via local side-channel (CVE not assigned)

Commits

• [fc14d812b7] - buffer: avoid overrun on UCS-2 string write (Rod Vagg) nodejs-private/node-private#138
• [8f59838ae7] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) #1836
• [97607f8622] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) #1389
• [46e4917d98] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) #1389
• [1b93677a81] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #22320
• [ebf399473b] - deps: upgrade openssl sources to 1.0.2p (Shigeki Ohtsu) #22320
• [131c5ed438] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) #1389
• [3139897ff5] - test: fix error messages for OpenSSL-1.0.2p (Shigeki Ohtsu) #22320
• [0c047c4d9a] - test: update certificates and private keys (Fedor Indutny) #22184
• [7c6d0f604b] - test: update keys/Makefile to clean and build all (Daniel Bevenius) #19975

This is a security release. All Node.js users should consult the security release summary at:

https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/

for details on patched vulnerabilities.

Fixes for the following CVEs are included in this release:

• CVE-2018-0732 (OpenSSL)
• CVE-2018-12115 (Node.js)

Notable Changes

• buffer: Fix out-of-bounds (OOB) write in Buffer.write() for UCS-2 encoding (CVE-2018-12115)
• deps: Upgrade to OpenSSL 1.0.2p, fixing:
  • Client DoS due to large DH parameter (CVE-2018-0732)
  • ECDSA key extraction via local side-channel (CVE not assigned)

Commits

• [0052926476] - buffer: avoid overrun on UCS-2 string write (Rod Vagg) nodejs-private/node-private#138
• [dbe6551b89] - deps: add -no_rand_screen to openssl s_client (Shigeki Ohtsu) #1836
• [7829bbcacb] - deps: fix asm build error of openssl in x86_win32 (Shigeki Ohtsu) #1389
• [cddca629b5] - deps: fix openssl assembly error on ia32 win32 (Fedor Indutny) #1389
• [e6014aed52] - deps: copy all openssl header files to include dir (Shigeki Ohtsu) #22320
• [37ddce514d] - deps: upgrade openssl sources to 1.0.2p (Shigeki Ohtsu) #22320
• [08a150fcca] - inspector: don't bind to 0.0.0.0 by default (Ben Noordhuis) #21376
• [19b9d7fd77] - openssl: fix keypress requirement in apps on win32 (Shigeki Ohtsu) #1389
• [7ccb0422fc] - test: fix error messages for OpenSSL-1.0.2p (Shigeki Ohtsu) #22320
• [58b9497ca8] - test: update certificates and private keys (Fedor Indutny) #22184
• [9863e11ea8] - test: update keys/Makefile to clean and build all (Daniel Bevenius) #19975

Notable Changes

• deps:
  • Upgrade npm to 6.2.0. #21592
    • npm has moved. This release updates various URLs to point to the right
      places for bugs, support, and PRs.
    • Fix the regular expression matching in xcode_emulation in node-gyp to
      also handle version numbers with multiple-digit major versions which would
      otherwise break under use of XCode 10.
    • The npm tree has been significantly flattened. Tarball size for the npm
      package has gone from 8MB to 4.8MB.
    • Changelogs:
      6.2.0-next.0,
      6.2.0-next.1,
      6.2.0.

Commits

• [335575e49b] - benchmark: remove arrays benchmark (Peter Marshall) #21831
• [62024b651e] - build: create V8 code cache after script is run (Joyee Cheung) #21567
• [50ccda2a00] - build: increase macOS minimum supported version (Michaël Zasso) #21883
• [5e1ceaabaa] - build: remove redundant Makefile target (Rich Trott) #21915
• [4f00562ef0] - build: add new benchmark targets (Kenny Yuan) #20905
• [4c5fc5c7ce] - build: move to npm ci where possible (Rich Trott) #21802
• [e0f3d5703a] - build,win,v8: allow precompiling objects-inl.h (João Reis) #21772
• [87ed6e6351] - (SEMVER-MINOR) deps: upgrade npm to 6.2.0 (Kat Marchán) #21592
• [f868415cf6] - deps: cherry-pick 804a693 from upstream V8 (Matheus Marchini) #21855
• [b56c8ad879] - deps: V8: Backport of 0dd3390 from upstream (James M Snell) #21899
• [ec0ff7008a] - deps: cherry-pick 907d7bc from upstream V8 (Michaël Zasso) #21838
• [c23e8b51ea] - deps: cherry-pick 2075910 from upstream V8 (Michaël Zasso) #21838
• [40fedd3620] - dgram: add getters/setters for private APIs (cjihrig) #21923
• [98ef8cfb8e] - dgram: make _createSocketHandle() internal only (cjihrig) #21923
• [ae17d18013] - dgram: hide underscored Socket properties (cjihrig) #21923
• [b5b74382e0] - dgram: hide _healthCheck() and _stopReceiving() (cjihrig) #21923
• [b5ae33959b] - doc: add pronouns to readme (Teddy Katz) #22036
• [f4b6031e39] - doc: clarify text about internal module changes (MaleDong) #22024
• [1f9570bd10] - doc: add missing worker error (Benjamin Gruenbaum) #21947
• [67d7a15886] - doc: fix typo in releases.md (Vitor Bruno de Oliveira Barth) #21990
• [2a0fa4792e] - doc: do not advise to cancel full CI on onboarding (Vse Mozhet Byt) #21977
• [478dbee8fe] - doc: replace deprecated CI job (Vse Mozhet Byt) #21938
• [5b0c451e61] - doc: add guide for updating N-API API surface (Hitesh Kanwathirtha) #21877
• [96bb6052e9] - doc: add node-test-commit-custom-suites to docs (Rich Trott) #21927
• [c44df51249] - doc: link n-api module init to multi-load addons (Gabriel Schulhof) #21891
• [c3d9000111] - doc: document http2 network error behaviour (Anna Henningsen) #21861
• [e8d5787840] - doc: document MODULE_NOT_FOUND error (Jacob Page) #21894
• [5e562fd792] - doc: fix sorting in the vm.Module section (Vse Mozhet Byt) #21931
• [eabe907e03] - doc: fix descriptions of sync methods in fs.md (Tim Ruffles) #21747
• [bd352f0298] - doc: update and improve the release guide (Michaël Zasso) #21868
• [fd5a0c7a1f] - doc: fix incorrect method name (Anto Aravinth) #21908
• [af1530e06d] - doc: add cjihrig pronouns (cjihrig) #21901
• [4d78a21d8c] - doc: add missing require to example in http2.md (Kevin Simper) #21858
• [ab0da57150] - doc: make minor improvements to collab guide (Rich Trott) #21862
• [b510cdc756] - doc: fix worker example to receive message (Sakthipriyan Vairamani (thefourtheye)) #21486
• [d91742aa9a] - fs: reduce memory retention when streaming small files (Anna Henningsen) #21968
• [484140e223] - fs: stop lazy loading stream constructors (Michaël Zasso) #21776
• [8799f43fb0] - http: revert "http: always emit close on req and res" (Michaël Zasso) #21809
• [a5928712c9] - http: name anonymous function in _http_common.js (Petras) #21755
• [337b2df82f] - http2: release request()'s "connect" event listener after it runs (James Ide) #21916
• [1e15581823] - http2: remove unused nghttp2 error list (Anna Henningsen) #21827
• [baf3027c77] - lib: remove usc-2 encoding (Brian White) #21964
• [9817e405ee] - (SEMVER-MINOR) lib,src: replace all C++ promises with JS promises (Ruben Bridgewater) #20830
• [45816c50ac] - n-api: guard against cond null dereference (Gabriel Schulhof) #21871
• [2548f75a92] - src: use UTF-8 for naming interfaces in unix (Ujjwal Sharma) #21926
• [6b6a26bb8d] - src: use kInternalized instead of kNormal (Ujjwal Sharma) #21926
• [2c95b96e8e] - src: remove calls to deprecated v8 functions (NewFromUtf8) (Ujjwal Sharma) #21926
• [e0336b2891] - src: fix may be uninitialized warning in n-api (Michael Dawson) #21898
• [2f3a28dbf2] - src: use available ReqWrap instance for libuv req (Jon Moss) #21980
• [80b5c914bb] - src: add proper MemoryInfoName to wrappers (Joyee Cheung) #21939
• [f6606bf9e4] - src: add missing cmath include to traced_value.cc (Anna Henningsen) #21924
• [be75795868] - src: don't store one-use strings in variable (Jon Moss) #21876
• [d9cd171a6b] - src: remove unnecessary else (Jon Moss) #21874
• [4f8620e2b7] - src: fix formatting of PIDs (Tobias Nießen) #21852
• [d0f8af021f] - src: use offset calc. instead of req-\>data in node_file (Anna Henningsen) #21839
• [41ff1bb9c7] - src: prepare for V8 Swallowed Rejection Hook (Benedikt Meurer) #21838
• [c45623a548] - src: avoid unnecessarily formatting a warning (Tobias Nießen) #21832
• [6af4f1f515] - stream: name anonymous function in _stream_writable.js (mariotsi) #21753
• [d0c16f4b2a] - stream: named anonymous functions in _stream_readable.js (Simionescu, Radu) #21750
• [3d05d82353] - test: improve assertions in child-process-execsync (bhavayAnand9) #22016
• [62fd84528e] - test: improve inspect readability (Ruben Bridgewater) #21624
• [fe1823dc21] - test: remove custom AsyncHooksTestConfiguration (Jon Moss) #22008
• [4510ca349e] - test: add tests for fs/promises chown functions (shisama) #20574
• [61ae592c4f] - test: remove setTimeout in test-net-connect-unref (conectado) #21969
• [4958501ac0] - test: remove timeout from test-pipe-stream (Anna Henningsen) #21837
• [af6b82469d] - test: fix unreliable test-fs-stat-bigint (sagulati) #21949
• [793a5bb4af] - test: don't fail http2 abort test if 'data' is called multiple times (Sam Ruby) #21925
• [623ef4961b] - test: address flaky worker test (Rich Trott) #21893
• [3213c09e3a] - test: provide better message for orphan output documentation (Sam Ruby) #21913
• [eea199bf98] - test: fix http2 connection abort test (Anna Henningsen) #21861
• [bea1ee8e8e] - test: make crashOnUnhandleRejection opt-out (Michaël Zasso) #21849
• [81915632e4] - test: allow tests to pass without internet (Helio Frota) #21909
• [46d14fc0e8] - test: refactor cluster-net-listen-relative-path (Rich Trott) #21863
• [756dff498a] - test: refactor test-module-loading assertions (Bruno Pinho) #21833
• [292aa42bd1] - test: fix faulty relpath test (Gus Caplan) #20954
• [a086604f8f] - test: remove 3rd arg from to assert.strictEqual() (hectorcoronado) #21828
• [580071dde4] - tls: named anonymous functions in _tls_wrap.js (prayag21) #21756
• [0f70017f35] - tls: name anonymous function in tls.js (Kevin Lacabane) #21754
• [0151486b9d] - tools: patch gyp to avoid xcrun errors (Ujjwal Sharma) #21520
• [b520216518] - tools: update cpplint to check for inline headers (Ujjwal Sharma) #21521
• [98d461e8cc] - tools: update ESLint to 5.2.0 (Yuta Hiroto) #21817
• [ce527d973a] - tools: define xrange() in Python 3 (cclauss) #21945
• [254aa83174] - tools: remove obsolete entries from license (Rich Trott) #21979
• [36f8b82697] - tools: flatten apidoc headers (Sam Ruby) #21936
• [5e71d63bfe] - tools: validate apidoc links (Sam Ruby) #21889
• [b98bf829d0] - tools: build API TOC using raw headers (Sam Ruby) #21922
• [5606f0b1f2] - tools: create HTML docs with unified/remark/rehype (Sam Ruby) #21490
• [f89d194deb] - tools: improve update-eslint.sh (Rich Trott) #21819
• [6b925ebaba] - tools: make getnodeversion.py python3-compatible (silverwind) #21872
• [ff5c6dcd1b] - tools: properly convert .gypi in install.py (Michael Achenbach) #21850
• [02e665c712] - tools,test: remove unused config hooks (Jon Moss) #22010
• [cfeed2b193] - trace_events: add support for builtin trace (James M Snell) #21899
• [d7edee4954] - trace_events: add more process metadata (James M Snell) #21785
• [9a88fe4d5e] - vm: rename vm.Module to vm.SourceTextModule (Gus Caplan) #22007

Notable Changes

• console:
  • The console.timeLog() method has been implemented. #21312
• deps:
  • Upgrade to libuv 1.22.0. #21731
  • Upgrade to ICU 62.1 (Unicode 11, CLDR 33.1). #21728
• http:
  • Added support for passing both timeout and agent options to
    http.request. #21204
• inspector:
  • Expose the original console API in require('inspector').console. #21659
• napi:
  • Added experimental support for functions dealing with bigint numbers. #21226
• process:
  • The process.hrtime.bigint() method has been implemented. #21256
  • Added the --title command line argument to set the process title on
    startup. #21477
• trace_events:
  • Added process_name metadata. #21477
• Added new collaborators
  • codebytere - Shelley Vohr

Commits

• [8c97ffb2f5] - assert: improve simple assert (Ruben Bridgewater) #21626
• [9776f1cbef] - benchmark: add n-api function args benchmark (Kenny Yuan) #21555
• [576f1ea978] - buffer: remove superfluous assignment (Tobias Nießen) #21844
• [6bb2b5a51d] - build: account for pure C sources in build-addons-napi (Anna Henningsen) #21797
• [c02fb88936] - build: enabling lto at configure (Octavian Soldea) #21677
• [2a0862cec9] - console: fix timeEnd() not coercing the input (Ruben Bridgewater) #21779
• [f3c397cd21] - (SEMVER-MINOR) console: implement timeLog method (Michaël Zasso) #21312
• [73cafd853c] - console,util: avoid pair array generation in C++ (Anna Henningsen) #20831
• [d9825c7a16] - crypto: prevent Sign::SignFinal from crashing (Tobias Nießen) #21815
• [07cce880bf] - crypto: handle OpenSSL error queue in CipherBase (Tobias Nießen) #21288
• [355c5e3c95] - deps: cherry-pick 555c811 from upstream V8 (Anna Henningsen) #21741
• [42d75392c5] - deps: patch V8 to 6.7.288.49 (Myles Borins) #21727
• [6920091488] - deps: upgrade to libuv 1.22.0 (cjihrig) #21731
• [122ae24f62] - deps: icu 62.1 bump (Unicode 11, CLDR 33.1) (Steven R. Loomis) #21728
• [a5233c7e17] - deps: cherry-pick 477df06 from upstream v8 (Gus Caplan) #21644
• [506631a9f9] - doc: fix structure and formatting in inspector.md (Vse Mozhet Byt) #21709
• [53b587a5af] - doc: add documentation for buffer.byteOffset (Andreas Madsen) #21718
• [51dfebf9ac] - doc: fix vm.runInNewContext signature (Michaël Zasso) #21824
• [10f9374ea3] - doc: make markdown input compliant (Sam Ruby) #21780
• [02982998db] - doc: add my pronoun (Ruben Bridgewater) #21813
• [ca8c96035a] - doc: update readme with my pronouns (Lance Ball) #21818
• [d33281b36f] - doc: prevent some redirections (Vse Mozhet Byt) #21811
• [0de0f89d0c] - doc: add "Edit on GitHub" link (Rich Trott) #21703
• [7ab6efdb94] - doc: add policy for landing new npm releases (Myles Borins) #21594
• [3d93273bf7] - doc: add OS X to instead of only macOS (XadillaX) #21033
• [577d24baa4] - doc: fix module.children description (Travis Fischer) #21672
• [cd6601b87a] - doc: fix HTTP res 'finish' description (Sergey Zelenov) #21670
• [51db88b0f1] - doc: fix http2stream.pushStream error doc (Сковорода Никита Андреевич) #21487
• [6e1917a596] - doc: update changelog with 9.x EOL (Сковорода Никита Андреевич) #21612
• [cd77d8782a] - doc: improve documentation of fs sync methods (iwko) #21243
• [1044bafec4] - doc: remove _Node.js style callback_ (Rich Trott) #21701
• [971679328e] - doc: add codebytere as collaborator (Shelley Vohr) #21700
• [034fe19862] - doc: add links to inline HTML table (Rich Trott) #21678
• [04eed2342d] - doc: remove "note that" from fs doc (Rich Trott) #21646
• [c8d5bab022] - doc: fix doc for napi_create_function (Gabriel Schulhof)
• [f7aa22a0eb] - doc: improve guide text for CI runs (Rich Trott) #21645
• [6f8ebc08b9] - doc: unify spelling of backpressure (Thomas Watson) #21630
• [3fffc7e95f] - errors: fix undefined HTTP2 and tls errors (Shailesh Shekhawat) #21564
• [b758006c23] - fs: fix fsPromises.lchmod error on non-Mac (Masashi Hirano) #21435
• [4fa7150962] - fs: support pseudofiles in promises.readFile (Timothy Gu) #21497
• [bba500d0ea] - (SEMVER-MINOR) http: fix request with option timeout and agent (killagu) #21204
• [0b3c80ca31] - http2: fix issues with aborted respondWithFile()s (Anna Henningsen) #21561
• [238ef58841] - http2: remove waitTrailers listener after closing a stream (RidgeA) #21764
• [07160cd2fd] - http2: order declarations in core.js (Rich Trott) #21689
• [c88af232c8] - http2: pass incoming set-cookie header as array (Gerhard Stoebich) #21360
• [2922028362] - (SEMVER-MINOR) inspector: expose original console (Matteo Collina) #21659
• [b2291296ef] - inspector: split main thread interface from transport (Eugene Ostroukhov) #21182
• [4ed4bf3bdd] - lib: update punycode to 2.1.1 (Rich Trott) #21768
• [4433ecbf30] - lib: refactor cli table (Ruben Bridgewater) #20960
• [92d79212ec] - lib: consolidate redundant require() calls (cjihrig) #21699
• [ed774b7930] - messaging: fix edge cases with transferring ports (Timothy Gu) #21540
• [221c8bd58f] - messaging: use actual DOMException for DataCloneError (Timothy Gu) #21540
• [4f3bbfaaca] - n-api: test uint32 truncation (Gabriel Schulhof) #21722
• [b8ba003fbf] - n-api: remove experimental gate from status codes (Gabriel Schulhof) #21680
• [109c59971a] - n-api: create functions directly (Gabriel Schulhof) #21688
• [cec166e85f] - n-api: restrict exports by version (Kyle Farnung) #19962
• [3096ee5a4b] - (SEMVER-MINOR) napi: add bigint support (Gus Caplan) #21226
• [581390c59d] - process: split bootstrappers by threads that can run them (Joyee Cheung) #21378
• [f1b18ba412] - (SEMVER-MINOR) process: implement process.hrtime.bigint() (Joyee Cheung) #21256
• [961f6e8623] - process: fix process.exitCode handling for fatalException (Denys Otrishko) #21739
• [4b613d3976] - repl: make own properties shadow prototype properties (Sam Ruby) #21588
• [1019c2d317] - src: fix async hooks crashing when there is no node context (Javier Gonzalez) #19134
• [a9a718696e] - src: make heap snapshot & embedder graph accessible for tests (Anna Henningsen) #21741
• [5121278f5c] - src: use V8 graph heap snapshot API (Anna Henningsen) #21741
• [d42dbde1a8] - src: add iteration over all base objects to Environment (Anna Henningsen) #21741
• [4ed5d1a623] - src: add HandleWrap::AddWrapMethods (Jon Moss) #21769
• [51d613db2d] - src: start annotating native code side effect (Timothy Gu) #21458
• [466601f47f] - src: remove .h if -inl.h is already included (Daniel Bevenius) #21381
• [a68b7dda5f] - src: add node_process.cc (James M Snell) #21105
• [cb698111c4] - src: add comment on CallbackScope exception behaviour (Anna Henningsen) #21743
• [712809eb1b] - src: enable more detailed memory tracking (Anna Henningsen) #21742
• [277077853f] - src: make Environment::is_stopping_worker inline (Jon Moss) #21720
• [d06305635d] - (SEMVER-MINOR) src: add --title command line argument (James M Snell) #21477
• [ceec23e6e4] - src: remove using directives from spawn_sync.h (Daniel Bevenius) #21634
• [3a627c830b] - src: add context-aware init macro and doc (Gabriel Schulhof) #21318
• [aa5994f2b9] - src,tools: use https://nodejs.org URL when possible. (XhmikosR) #21719
• [0108ff6b51] - test: add support for NODE_TEST_DIR on a separate mount point (Antoine du HAMEL) #21552
• [eef975ebae] - test: move inspector test back to parallel, unmark flaky (Anna Henningsen) #21806
• [67908e9933] - test: fix build warnings in bigint N-API test (Anna Henningsen) #21796
• [6b72583bf8] - test: refactor test-tls-connect-memleak, move to parallel (Anna Henningsen) #21794
• [174a9db51a] - test: refactor test-net-connect-memleak, move to parallel (Anna Henningsen) #21794
• [b338ff54bb] - test: add gc tracking to common API (Anna Henningsen) #21794
• [4e60ce8f87] - test: fix flaky test-debug-prompt (Rich Trott) #21826
• [a2edb59870] - test: fix comment of fs.promises write (Ryuichi Sakagami) #21708
• [32ad163038] - test: add test of fs.promises write for non-string buffers (Ryuichi Sakagami) #21708
• [7352b72fc9] - test: add heap snapshot tests (Anna Henningsen) #21741
• [678313d18b] - test: add filehandle sync() and datasync() tests (Masashi Hirano) #20530
• [a09bdb5847] - test: improve console table error output (Ruben Bridgewater) #20960
• [600349aaba] - test: refactor process/worker exitCode tests (Denys Otrishko) #21739
• [15026511b8] - test: remove timer in fs.watchFile() test (Rich Trott) #21694
• [ae5d5658b9] - test: fix flaky watchFile() (Rich Trott) #21694
• [ada3f34cd4] - test: fix weird string error (Jon Moss) #21793
• [f46536be23] - test: fix timeouts when running worker tests with --worker (Anna Henningsen) #21791
• [f386c0a517] - test: add test for dns.promises.resolve . (Keita Akutsu) #21691
• [11e9b4ecee] - test: fix parallel/test-tls-env-extra-ca.js (Niicck) #21647
• [eda7fffba4] - test: swap arguments in strictEqual() (Sohail Rajdev) #21660
• [194d1955a7] - test: fix test-tls-connect-memleak (Rich Trott) #21681
• [24f649c8cf] - test: fix pummel/test-net-connect-memleak (Rich Trott) #21658
• [021dd5404c] - test: remove unnecessary string literals (Jacek Pospychała) #21638
• [47b10e30c0] - test: replace third argument with comment in strict equals (Developer Davo) #21603
• [25dac95164] - test: fix args passed to strictEqual (Haroon Khan) #21584
• [fe9888a34a] - test: check type for Worker filename argument (Masashi Hirano) #21620
• [9cd5c0ec79] - test: add test for missing dynamic instantiate hook (Michaël Zasso) #21506
• [dc84858787] - test,util: add missing tests and conditions (MaleDong) #21455
• [c26ba082ae] - tools: avoid global install of dmn for lint update (Rich Trott) #21744
• [e030dd7d65] - tools: add no-duplicate-requires rule (Gus Caplan) #21712
• [b9bbbbe5d1] - tools: build all.json by combining generated JSON (Sam Ruby) #21637
• [214c608208] - tools: lint doc code examples in strict mode (Vse Mozhet Byt) #21615
• [27d17d4600] - trace_events: add traced_value.cc/traced_value.h (James M Snell) #21475
• [c4d7413a15] - (SEMVER-MINOR) trace_events: add process_name metadata (James M Snell) #21477
• [b0943a655e] - worker: exit after uncaught exception (Denys Otrishko) #21739
• [25fef3d8d4] - workers: fix invalid exit code in parent upon uncaught exception (Denys Otrishko) #21713
• [48b16aad47] - zlib: instance-ify two methods (Jon Moss) #21702
• [dae7130929] - zlib: track memory allocated by zlib (Anna Henningsen) #21608
• [96dae83713] - zlib: fix memory leak for unused zlib instances (Anna Henningsen) #21607

Notable Changes

• dns:
  • An experimental promisified version of the dns module is now available. Give
    it a try with require('dns').promises. #21264
• fs:
  • fs.lchown has been undeprecated now that libuv supports it. #21498
• lib:
  • Atomics.wake is being renamed to Atomics.notify in the ECMAScript
    specification (reference).
    Since Node.js now has experimental support for worker threads, we are being
    proactive and added a notify alias, while emitting a warning if
    wake is used. #21413 #21518
• n-api:
  • Add API for asynchronous functions. #17887
• util:
  • util.inspect is now able to return a result instead of throwing when the
    maximum call stack size is exceeded during inspection. #20725
• vm:
  • Add script.createCachedData(). This API replaces the produceCachedData
    option of the Script constructor that is now deprecated. #20300
• worker:
  • Support for relative paths has been added to the Worker constructor. Paths
    are interpreted relative to the current working directory. #21407

Commits

• [a526b4e2c7] - atomis: add notify alias (Gus Caplan) #21413
• [9030e933f4] - benchmark: create napi benchmark directory (Rich Trott) #21046
• [3d3dbae7d8] - build: remove requirement to re-run ./configure (Anna Henningsen) #21371
• [a7505c029a] - build: speed up startup with V8 code cache (Joyee Cheung) #21405
• [7d2fe5d770] - build: improve Travis CI settings (Timothy Gu) #21459
• [225063184d] - build: fail on instrumentation errors (Benjamin Coe) #21071
• [6f80e305d0] - build: build addons in parallel on Windows (Bartosz Sosnowski) #21403
• [42f5ff8346] - build: add crypto check to markdown lint target (Daniel Bevenius) #21326
• [c214403c1a] - build: fix building with --build-v8-with-gn (Yang Guo) #21330
• [76ef7acf6d] - (SEMVER-MINOR) build, win: make LTCG optional (Bartosz Sosnowski) #21186
• [45a83760ec] - crypto: fix UB in computing max message size (Ben Noordhuis) #21462
• [fefa57a7a4] - crypto: remove outdated comment (Timothy Gu) #21511
• [e7776c63da] - crypto: refer to correct deprecation id in comment (Michaël Zasso) #21399
• [b30840da5f] - deps: fix gypi sysroot settings on V8 (Matheus Marchini) #21494
• [a48d98ef04] - deps: float fix on node-gyp in npm tree (Myles Borins) #21448
• [fe6d707bc4] - deps: float 0c27d793 from openssl (ECDSA blinding) (Rod Vagg) #21345
• [f162939c32] - deps: upgrade to libuv 1.21.0 (cjihrig) #21466
• [62ca2cf21c] - deps: cherry-pick 70c4340 from upstream V8 (Matheus Marchini) #21126
• [ab27e0e785] - deps: cherry-pick acc336c from upstream V8 (Matheus Marchini) #21126
• [37a5c8c2ff] - deps: cherry-pick b20faff from upstream V8 (Matheus Marchini) #21126
• [4663d1c22e] - deps: backport aa6ce3e from upstream V8 (Matheus Marchini) #21126
• [5d7218965d] - deps: cherry-pick 5dd3395 from upstream V8 (Matheus Marchini) #21386
• [18179f8ae9] - (SEMVER-MINOR) dns: remove Resolver#cancel() from promises API (cjihrig) #21264
• [aa864ba4a9] - (SEMVER-MINOR) dns: add promisified dns module (cjihrig) #21264
• [1d73ba8322] - doc: fix some links (Vse Mozhet Byt) #21619
• [24bc6ab726] - doc: fix some typos in N-API docs (Vse Mozhet Byt) #21614
• [cadc74d92d] - doc: fix heading level in errors.md (Vse Mozhet Byt) #21618
• [eb6dcf2696] - doc: fix typo in fs.md (Hugo Josefson) #21579
• [e081866f64] - doc: add DataView to appropriate crypto methods (Gerhard Stoebich) #21549
• [51a434f711] - doc: fix some typos in deprecations.md and vm.md (Vse Mozhet Byt) #21569
• [0f1d73761d] - doc: fix function name in process.md (Joonas Rouhiainen) #21523
• [bc28398cbe] - doc: separate unrelated info about child_process.exec() (Charmander) #21516
• [504c0cdd01] - doc: fix code example and formatting in crypto.md (Victor Belozyorov) #21500
• [511d610dca] - doc: updated docs to include --experimental-worker flag (Jo Colina) #21461
• [c050279d23] - doc: add bcoe as collaborator (Benjamin Coe) #21536
• [f5fc412092] - doc: clarify setServers() methods in dns.md (Shivang Saxena) #21469
• [4647f61a94] - doc: Improve doc for Http2 headers object (Gerhard Stoebich) #21296
• [6cca5a8b0e] - doc: update AUTHORS list (Michaël Zasso) #21468
• [de195d50dd] - doc: update LICENSE file (Rich Trott) #21472
• [dad782165a] - doc: fix sort in sections, lists, tables of dns.md (Vse Mozhet Byt) #21505
• [dbd810e5d4] - doc: show options arg to new Worker is optional (Thomas Watson) #21508
• [23598239d1] - doc: fix HTTP req/res 'close' description (Robert Nagy) #21047
• [02bc99daa7] - doc: correct parameters, return types in crypto.md (ZaneHannanAU) #21420
• [5bb6e5c5df] - doc: restore documentation for two error codes (Сковорода Никита Андреевич) #21484
• [c324b85a15] - doc: sort error codes in errors.md (Сковорода Никита Андреевич) #21485
• [361e4f250c] - doc: fix list format in cli.md (Vse Mozhet Byt) #21467
• [8e5104b094] - doc: explain HTTP writeHead()'s fast path behavior (Gireesh Punathil) #21289
• [8a997a503c] - doc: note synchronous part of child_process.spawn (Jamie Davis) #21234
• [e94474913e] - doc: add example of using filter with cctest (Daniel Bevenius) #21401
• [9e3168478c] - doc: fix missing parentPort link in worker_threads (Thomas Watson) #21430
• [1e5afb7d22] - errors: fix ERR_MISSING_DYNAMIC_INSTANTIATE_HOOK (Сковорода Никита Андреевич) #21493
• [29299cc50a] - esm: loader hook URL validation and error messages (guybedford) #21352
• [2e07d4596c] - fs: undeprecate lchown() (cjihrig) #21498
• [5a71e7941d] - http2: track memory allocated by nghttp2 (Anna Henningsen) #21374
• [3ba9a445de] - http2: fix memory leak when headers are not emitted (Anna Henningsen) #21373
• [45fe865fbc] - inspector: use js_app.html as the landing page for chrome devtools (GauthamBanasandra) #21385
• [d1b750d360] - inspector: add debugging for WebSocket messages (Timothy Gu) #21473
• [0d98fe6ef9] - lib: fix segfault with --without-intl (Rich Trott) #21589
• [5cd78ba911] - module: experimental modules runMain separation (guybedford) #21350
• [c87037286f] - n-api: fix compiler warning (cjihrig) #21597
• [91384bfe5f] - (SEMVER-MINOR) n-api: add API for asynchronous functions (Gabriel Schulhof) #17887
• [50f833db07] - net: report uv_tcp_open() errors (cjihrig) #21428
• [881d99b3e6] - net: validate fds passed to Socket constructor (cjihrig) #21429
• [0a1e8e0172] - per_context: add warning to Atomics.wake (Gus Caplan) #21518
• [cd2b80c1f5] - process: avoid using the same fd for ipc and stdio (cjihrig) #21466
• [2d6b337df9] - process: remove unused arguments in setup() (Joyee Cheung) #21377
• [1894d6c985] - repl: fix tab completion for object properties with special char (Weijia Wang) #21556
• [0550a58b08] - src: remove StreamBase::kFlagHasWritev (Anna Henningsen) #21527
• [a8a7575410] - src: remove extra ReadStop() call (Anna Henningsen) #21528
• [bb0795a5c5] - src: slightly simplify FSEventWrap (Anna Henningsen) #21533
• [7acfacbee0] - src: add null check to GetCategoryGroupEnabled() (cjihrig) #21545
• [eb8d60b447] - src: move context bootstrap to js (Gus Caplan) #21518
• [54227ee133] - src: add native debugging code to workers (Anna Henningsen) #21423
• [e0bcb6aa17] - src: avoid common case heap allocation (Ben Noordhuis) #21409
• [75e07feba8] - src: introduce inspect-brk-node (Daniel Bevenius) #20819
• [2377aec000] - src: fix debugging for multiple categories (Anna Henningsen) #21422
• [95fa3c6535] - test: add worker prefix to test-message* tests (Michaël Zasso) #21512
• [b28fd37a69] - test: fix ESM test (Anna Henningsen) #21605
• [e7abde44db] - test: add a request-response test for MessageChannel (itaysabato) #21514
• [623cf11dda] - test: skip non-doc files in test-make-doc checks (Vse Mozhet Byt) #21531
• [8f1aa3c5e8] - test: use aliases for smart pointers in fixture (Daniel Bevenius) #21419
• [7e10697ba0] - test: make cctest fixture use node::NewIsolate (Daniel Bevenius) #21419
• [9f2bf3c1b3] - test: add some test cases for validateOffsetLengthWrite (Keita Akutsu) #21195
• [245c885abb] - test: fix test-net-socket-constructor (Santiago Gimeno) #21466
• [357eaf3c95] - test: lint fixes for ESLint update (cjihrig) #20855
• [bfac7beaf5] - test: move net bytes-per-chunk test to sequential (Rich Trott) #21457
• [91f111fcb2] - test: remove string error from strictEqual (Fernando Doglio) #21292
• [2fa49a39e6] - test: add tests for end event of stream.Duplex (Masashi Hirano) #21325
• [6b40ba11c1] - test: avoid running fsync on directory on AIX (John Barboza) #21298
• [e038b2fa9a] - test: assert process.setgroups is undefined on windows (Masashi Hirano) #21286
• [d7ff752e9e] - test: add tests for process.setgroups() (Masashi Hirano) #21286
• [81046f94ff] - test: move net bytes-per-chunk test to parallel (Anna Henningsen) #21322
• [9cef72dd21] - test: remove the third string literal argument from assert.strictEqual() (Kevin Thomas) #21406
• [23f22bc614] - test: check that benchmark tests are minimal (Rich Trott) #21046
• [29593e20d5] - test: run misc benchmark only once in tests (Rich Trott) #21046
• [f461ae2f45] - test: move test-benchmark-path to sequential (Rich Trott) #21393
• [5d6d6fb121] - tools: build all.html by combining generated HTML (Sam Ruby) #21568
• [21d73a5869] - tools: update ESLint to 5.0.0 (cjihrig) #20855
• [a1580a0c4e] - tools: fix typo in .eslintrc.js (Christopher Hiller) #21449
• [7cc979d4d3] - (SEMVER-MINOR) util: recover from maximum call stack size (Ruben Bridgewater) #20725
• [140836a1bc] - util: fix comment typos (Renée Kooi) #21436
• [4fc05ac7e1] - (SEMVER-MINOR) vm: add Script.createCodeCache() (Gus Caplan) #20300
• [97b21862f5] - (SEMVER-MINOR) win, build: generate .sln only when necessary (Bartosz Sosnowski) #21284
• [ba8ee17de5] - win, build: fix building on 32-bit machines (Bartosz Sosnowski) #21437
• [206e5bf7af] - worker: support relative paths (itaysabato) #21407
• [41c4b2c76a] - workers: add test for messagePort.onmessage (Michaël Zasso) #21510
• [49706b44b7] - workers: replace message types string by constants (Weijia Wang) #21537
• [fb2592ff12] - workers,trace_events: set thread name for workers (James M Snell) #21246

Notable Changes

• crypto:
  • Support for crypto.scrypt() has been added. #20816
• fs:
  • BigInt support has been added to fs.stat and fs.watchFile. #20220
  • APIs that take mode as arguments no longer throw on values larger than
    0o777. #20636 #20975 (Fixes: #20498)
  • Fix crashes in closed event watchers. #20985 (Fixes: #20297)
• Worker Threads:
  • Support for multi-threading has been added behind the
    --experimental-worker flag in the worker_threads module. This feature
    is experimental and may receive breaking changes at any time. #20876

Commits

• [a6986fe8b6] - async_hooks: remove deprecated example (Mathias Buus) #20998
• [4b9817bf1e] - benchmark: disable only the ESLint rule needing it (Rich Trott) #21133
• [ecba1c57b1] - (SEMVER-MINOR) benchmark: port cluster/echo to worker (Timothy Gu) #20876
• [02adb2d62c] - (SEMVER-MINOR) build: expose openssl scrypt functions to addons (Ben Noordhuis) #20816
• [c3fbac432f] - build: install markdown linter for travis (Richard Lau) #21215
• [896017b134] - build: build addon tests in parallel (Anna Henningsen) #21155
• [76927fc734] - build: stop distclean from deleting v8 files (Ujjwal Sharma) #21164
• [b044256f2a] - build: use LC_ALL of C for maximum compatibility (Rich Trott) #21222
• [78c7d666fb] - build: don't change locale on smartos (Refael Ackermann) #21220
• [c688a00a6d] - build: fix 'gas_version' check on localized environments (Evandro Oliveira) #20394
• [79b3423fb5] - build: initial .travis.yml implementation (Anna Henningsen) #21059
• [ea4be72f22] - child_process: swallow errors in internal communication (Anatoli Papirovski) #21108
• [9981220e2a] - crypto: fix behavior of createCipher in wrap mode (Tobias Nießen) #21287
• [d0cb9cbb35] - (SEMVER-MINOR) crypto: drop Math.pow(), use static exponentation (Ben Noordhuis) #20816
• [2d9c3cc89d] - (SEMVER-MINOR) crypto: refactor randomBytes() (Ben Noordhuis) #20816
• [6262fa44d6] - (SEMVER-MINOR) crypto: refactor pbkdf2() and pbkdf2Sync() methods (Ben Noordhuis) #20816
• [c9b4592dbf] - (SEMVER-MINOR) crypto: add scrypt() and scryptSync() methods (Ben Noordhuis) #20816
• [495756264a] - (SEMVER-MINOR) crypto: DRY type checking (Ben Noordhuis) #20816
• [e4a7e0d28b] - deps: float ea7abee from openssl / CVE-2018-0732 (Rod Vagg) #21282
• [0b90b071c4] - deps: Upgrade node-inspect to 1.11.5 (Jan Krems) #21055
• [ffc29c12da] - deps: patch V8 to 6.7.288.46 (Myles Borins) #21260
• [14bb905d18] - deps: V8: cherry-pick a440efb27f from upstream (Yang Guo) #21022
• [65b9c427ac] - dns: improve setServers() errors and performance (Jamie Davis) #20445
• [bc20ec0c0f] - doc: eliminate _you_ from N-API doc (Rich Trott) #21382
• [318d6831bf] - doc: use imperative in COLLABORATOR_GUIDE (Rich Trott) #21340
• [177a7c06a8] - doc: remove obsolete wiki references from BUILDING (Rich Trott) #21369
• [15023df050] - doc: add davisjam to collaborators (Jamie Davis) #21273
• [17c21b67ac] - doc: fix indentation in console.md (Vse Mozhet Byt) #21367
• [ef74368416] - doc: fix heading of optional console method args (Michaël Zasso) #21311
• [4f17841c20] - doc: use Class Method label consistently (Rich Trott) #21357
• [4566ebacf4] - doc: wrap style guide at 80 characters (Rich Trott) #21361
• [6c41f33571] - doc: wrap pull-requests.md at 80 characters (Rich Trott) #21361
• [b8213f17cc] - doc: remove linking of url text to url (Rich Trott) #21361
• [3f78220c2b] - doc: correct styling of _GitHub_ in onboarding doc (Rich Trott) #21361
• [9e994cb119] - doc: wrap releases.md at 80 chars (Rich Trott) #21361
• [e00e5e6d5d] - doc: switch the order of Writable and Readable (Joseph Gordon) #21333
• [e1b571d6b7] - doc: make Deprecation cycle explanation more brief (Rich Trott) #21303
• [df0f7a3b4d] - doc: clarify async execute callback usage (Michael Dawson) #21217
• [c5a65594ef] - doc: move 5 collaborators to emeritus status (Rich Trott) #21272
• [c1d53f86f8] - doc: update NODE_OPTIONS section in cli.md (Vse Mozhet Byt) #21229
• [13fd09bfa7] - doc: add build wg info to releases.md (Jon Moss) #21275
• [0da910f9a5] - doc: move Italo A. Casas to Release Emeritus (Myles Borins) #21315
• [6f7de0b8d9] - doc: trim deprecation level definition text (Rich Trott) #21241
• [dd2fc90dcf] - doc: fix reference to workerData in worker_threads (Jeremiah Senkpiel) #21180
• [5e46c16371] - doc: fix type in stream doc (Aliaksei Tuzik) #21178
• [85dc9ac418] - doc: add Michaël Zasso to Release team (Michaël Zasso) #21114
• [5fa5ab6c48] - doc: naming function as suggested in addon docs (Tommaso Allevi) #21067
• [fe5d35123b] - (SEMVER-MINOR) doc: document BigInt support in fs.Stats (Joyee Cheung) #20220
• [2c4f80ffba] - doc: remove spaces around slashes (Rich Trott) #21140
• [72e7e1da2d] - doc: alphabetize tls options (Rich Trott) #21139
• [06ac81e786] - doc: streamline errors.md introductory material (Rich Trott) #21138
• [73b8975b41] - doc: simplify deprecation language (Rich Trott) #21136
• [6caa354377] - (SEMVER-MINOR) doc: explain Worker semantics in async_hooks.md (Anna Henningsen) #20876
• [9f9355d6d2] - doc: fix inconsistent documentation (host vs hostname) (Davis Okoth) #20933
• [a5c571424a] - doc: document file mode caveats on Windows (Joyee Cheung) #20636
• [a75e44d135] - esm: ensure require.main for CJS top-level loads (Guy Bedford) #21150
• [04e8f0749e] - (SEMVER-MINOR) fs: support BigInt in fs.*stat and fs.watchFile (Joyee Cheung) #20220
• [c09bfd81b7] - fs: do not crash when using a closed fs event watcher (Joyee Cheung) #20985
• [bacb2cb550] - fs: refactor fs module (James M Snell) #20764
• [db0bb5214a] - fs: improve fchmod{Sync} validation (cjihrig) #20588
• [2ffb9d6b5c] - fs: drop duplicate API in promises mode (Сковорода Никита Андреевич) #20559
• [fc0b3610e2] - fs: don't limit ftruncate() length to 32 bits (cjihrig) #20851
• [469baa062e] - fs: add length validation to fs.truncate() (cjihrig) #20851
• [6aade4a765] - http: remove a pair of outdated comments (Mark S. Everitt) #21214
• [bcaf59c739] - http2: fix memory leak for uncommon headers (Anna Henningsen) #21336
• [dee250fd77] - http2: safer Http2Session destructor (Anatoli Papirovski) #21194
• [296fd57324] - inspector: stop dragging platform pointer (Eugene Ostroukhov)
• [fb71337bdf] - (SEMVER-MINOR) lib: rename checkIsArrayBufferView() (Ben Noordhuis) #20816
• [f3570f201b] - (SEMVER-MINOR) lib: replace checkUint() with validateInt32() (Ben Noordhuis) #20816
• [b4b7d368be] - lib: unmask mode_t values with 0o777 (Joyee Cheung) #20975
• [36e5100a39] - lib: support ranges in validateInt32() (cjihrig) #20588
• [2fe88d2218] - lib: mask mode_t type of arguments with 0o777 (Joyee Cheung) #20636
• [a0cfb0c9d4] - lib: add validateInteger() validator (cjihrig) #20851
• [740d9f1a0e] - lib,src: make StatWatcher a HandleWrap (Anna Henningsen) #21244
• [a657984109] - lib,src: remove openssl feature conditionals (Ben Noordhuis) #21094
• [653b20b26d] - loader: remove unused error code in module_job (Gus Caplan) #21354
• [5d3dfedca2] - meta: remove CODEOWNERS (Rich Trott) #21161
• [169bff3e9e] - n-api: name CallbackBundle function fields (Anna Henningsen) #21240
• [1dc9330b3a] - n-api: improve runtime perf of n-api func call (Kenny Yuan) #21072
• [9047c8182c] - n-api: remove unused napi_env member (Gabriel Schulhof) #21127
• [18c057ab26] - net: emit 'close' when socket ends before connect (Brett Kiefer) #21290
• [a3fd1cd8ea] - perf_hooks: remove less useful bootstrap marks (James M Snell) #21247
• [8fddf591c5] - perf_hooks: set bootstrap complete in only one place (James M Snell) #21247
• [fc2956d37a] - process: backport process/methods file (Michaël Zasso) #21172
• [78ad4e9dde] - src: remove unused argc var in node_stat_watcher (Daniel Bevenius) #21337
• [7fa1344143] - src: use %zx in printf for size_t (Anna Henningsen) #21323
• [671346ee8f] - src: do proper error checking in AsyncWrap::MakeCallback (Anna Henningsen) #21189
• [aa468abc4c] - src: unify native symbol inspection code (Anna Henningsen) #21238
• [e92b89a75d] - src: fix http2 typos (Anatoli Papirovski) #21194
• [4f01168414] - src: do not persist fs_poll handle in stat_watcher (Anatoli Papirovski) #21093
• [685b9b2a6a] - src: do not persist timer handle in cares_wrap (Anatoli Papirovski) #21093
• [4757771db3] - src: add consistency check to node_platform.cc (Anna Henningsen) #21156
• [8e2e16721b] - src: add node_encoding.cc (James M Snell) #21112
• [39b38754eb] - src: cleanup beforeExit for consistency (James M Snell) #21113
• [314b47d1cf] - (SEMVER-MINOR) src: add Env::profiler_idle_notifier_started() (Timothy Gu) #20876
• [5209ff9562] - (SEMVER-MINOR) src: remove unused fields msg_ and env_ (Daniel Bevenius) #20876
• [9a734132f9] - (SEMVER-MINOR) src: make handle onclose property a Symbol (Anna Henningsen) #20876
• [e6f06807b1] - (SEMVER-MINOR) src: simplify handle closing (Anna Henningsen) #20876
• [65924c70e8] - (SEMVER-MINOR) src: remove unused fields isolate_ (Daniel Bevenius) #20876
• [de7403f813] - (SEMVER-MINOR) src: cleanup per-isolate state on platform on isolate unregister (Anna Henningsen) #20876
• [ba17c9e46b] - src: refactor bootstrap to use bootstrap object (James M Snell) #20917
• [cbdc1fdf44] - src, tools: add check for left leaning pointers (Daniel Bevenius) #21010
• [935309325b] - test: fix deprecation warning due to util.print (Tobias Nießen) #21265
• [d7ba75f8aa] - test: add test to check colorMode type of Console (Masashi Hirano) #21248
• [0b00172df8] - test: removing unnecessary parameter from assert call (djmgit) #21307
• [dea3ac7bff] - test: improve statwatcher async_hooks test (Anna Henningsen) #21244
• [792335f712] - test: add workerdata-sharedarraybuffer test (Jeremiah Senkpiel) #21180
• [e8d15cb149] - test: mark test-inspector-port-zero-cluster flaky (Rich Trott) #21251
• [688bdfef7f] - test: add crypto check to test-http2-debug (Daniel Bevenius) #21205
• [2270ab2a12] - test: remove string literals from assert.strictEqual() calls (James Kylstra) #21211
• [187951c0fc] - test: move inspector-stress-http to sequential (Rich Trott) #21227
• [bda34ea203] - test: check gc does not resurrect the loop (Anatoli Papirovski) #21093
• [4d782c4720] - test: improve assert error messages (Hristijan Gjorgjievski) #21160
• [2655c7b194] - test: mark fs-readfile-tostring-fail flaky for all (Rich Trott) #21177
• [17954c2b01] - test: improve internal/buffer.js test coverage (Masashi Hirano) #21061
• [2ff4704447] - test: move test-readuint to test-buffer-readuint (Michaël Zasso) #21170
• [9c3a7bf076] - test: make url-util-format engine agnostic (Rich Trott) #21141
• [3d8ec8f85c] - test: make url-parse-invalid-input engine agnostic (Rich Trott) #21132
• [0b0370f884] - test: remove unref in http2 test (Anatoli Papirovski) #21145
• [14a017cf8d] - test: apply promises API to fourth appendFile test (Rich Trott) #21131
• [aa9dbf666b] - test: apply promises API to fourth appendFile test (Rich Trott) #21131
• [185b9e45d3] - test: apply promises API to third appendFile test (Rich Trott) #21131
• [c400448e85] - test: improve debug output in trace-events test (Rich Trott) #21120
• [a4ad9891e3] - test: add test for Linux perf (Matheus Marchini) #20783
• [e16036c462] - test: create new directory v8-updates (Matheus Marchini) #20783
• [93ce63c89f] - (SEMVER-MINOR) test: add test against unsupported worker features (Timothy Gu) #20876
• [94dcdfb898] - test: increase coverage for fs.promises.truncate (Masashi Hirano) #20638
• [c9cee63179] - test,tools: refactor custom ESLint for readability (Rich Trott) #21134
• [ed05d9a821] - (SEMVER-MINOR) test,tools: enable running tests under workers (Anna Henningsen) #20876
• [6285fe94f6] - tools: do not disable quotes rule in .eslintrc.js (Rich Trott) #21338
• [98346de08c] - tools: lint doc/*.md files (Rich Trott) #21361
• [521f8f1d95] - tools: add BigInt64Array and BigUint64Array to globals (Joyee Cheung) #21255
• [a5c386d1ba] - tools: add option to use custom template with js2c.py (Shelley Vohr) #21187
• [7f70fe83ef] - tools: add BigInt to globals (Nikolai Vavilov) #21237
• [4e742e379b] - tools: update tooling to work with new macOS CLI … (Rich Trott) #21173
• [ed2b57bcd5] - tools: remove unused global types from type-parser (Rich Trott) #21135
• [d46446afc5] - v8: replace Buffer with FastBuffer in deserialize (Ujjwal Sharma) #21196
• [917960e0a1] - win, build: add documentation support to vcbuild (Bartosz Sosnowski) #19663
• [03fbc9e749] - (SEMVER-MINOR) worker: rename to worker_threads (Anna Henningsen) #20876
• [9ad42b766e] - (SEMVER-MINOR) worker: improve error (de)serialization (Anna Henningsen) #20876
• [6b1a887aa2] - (SEMVER-MINOR) worker: enable stdio (Anna Henningsen) #20876
• [c97fb91e55] - (SEMVER-MINOR) worker: restrict supported extensions (Timothy Gu) #20876
• [109c92e8fa] - (SEMVER-MINOR) worker: initial implementation (Anna Henningsen) #20876
• [d1f372f052] - (SEMVER-MINOR) worker: add SharedArrayBuffer sharing (Anna Henningsen) #20876
• [f447acd87b] - (SEMVER-MINOR) worker: support MessagePort passing in messages (Anna Henningsen) #20876
• [337be58ee6] - (SEMVER-MINOR) worker: implement MessagePort and MessageChannel (Anna Henningsen) #20876
• [4a54ebc3bd] - worker,src: display remaining handles if uv\_loop\_close fails (Anna Henningsen) #21238
• [529d24e3e8] - Revert "workers,trace_events: set thread name for workers" (James M Snell) #21363
• [dfb5cf6963] - workers,trace_events: set thread name for workers (James M Snell) #21246

Notable Changes

• Fixes memory exhaustion DoS (CVE-2018-7164): Fixes a bug introduced in 9.7.0 that increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream.
• http2
  • (CVE-2018-7161): Fixes Denial of Service vulnerability by updating the http2 implementation to not crash under certain circumstances during cleanup
  • (CVE-2018-1000168): Fixes Denial of Service vulnerability by upgrading nghttp2 to 1.32.0
• tls (CVE-2018-7162): Fixes Denial of Service vulnerability by updating the TLS implementation to not crash upon receiving
• n-api: Prevent use-after-free in napi_delete_async_work

Commits

• [1bbfe9a72b] - build: fix configure script for double-digits (Misty De Meo) #21183
• [4c90ee8fc6] - deps: update to nghttp2 1.32.0 (James M Snell) nodejs-private/node-private#117
• [e5c2f575b1] - deps: patch V8 to 6.7.288.45 (Michaël Zasso) #21192
• [03ded94ffe] - deps: patch V8 to 6.7.288.44 (Michaël Zasso) #21146
• [4de7e0c96c] - deps,npm: float node-gyp patch on npm (Rich Trott) #21239
• [92d7b6c9a0] - fs: fix promises reads with pos > 4GB (cjihrig) #21148
• [8681402228] - http2: fixup http2stream cleanup and other nits (James M Snell) nodejs-private/node-private#115
• [53f8563353] - n-api: back up env before async work finalize (Gabriel Schulhof) #21129
• [9ba8ed1371] - src: re-add Realloc() shrink after reading stream data (Anna Henningsen) nodejs-private/node-private#128
• [8e979482fa] - Revert "src: restore stdio on program exit" (Evan Lucas) #21257
• [cb5ec64956] - src: reset TTY mode before cleaning up resources (Anna Henningsen) #21257
• [ae5567eaea] - test: add regression test for nghttp2 CVE-2018-1000168 (James M Snell) nodejs-private/node-private#117
• [e87bf625dd] - test: add tls write error regression test (Shigeki Ohtsu) nodejs-private/node-private#127
• [eea2bce58d] - tls: fix SSL write error handling (Anna Henningsen) nodejs-private/node-private#127
• [1e49eadd68] - tools,gyp: fix regex for version matching (Rich Trott) #21216