Skip to content

Update Node.js to v22.23.0#25

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-22.x
Open

Update Node.js to v22.23.0#25
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/node-22.x

Conversation

@renovate

@renovate renovate Bot commented Jul 20, 2025

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
node final minor 22.14.0-slim22.23.0-slim

Release Notes

nodejs/node (node)

v22.23.0: 2026-06-18, Version 22.23.0 'Jod' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v22.22.3: 2026-05-13, Version 22.22.3 'Jod' (LTS), @​marco-ippolito

Compare Source

Commits

v22.22.2: 2026-03-24, Version 22.22.2 'Jod' (LTS), @​RafaelGSS prepared by @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
  • (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
  • (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) - Medium
  • (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
  • (CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
  • (CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
  • (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low
Commits

v22.22.1: 2026-03-05, Version 22.22.1 'Jod' (LTS)

Compare Source

Notable Changes
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Rome)

  • Branch creation
    • Between 12:00 AM and 06:59 AM, only on Sunday and Saturday (* 0-6 * * 6,0)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/node-22.x branch from 1d605d2 to 6296a2a Compare August 4, 2025 23:10
@renovate renovate Bot changed the title chore(deps): update node.js to v22.17.1 chore(deps): update node.js to v22.18.0 Aug 4, 2025
@renovate renovate Bot force-pushed the renovate/node-22.x branch from 6296a2a to 57af0b9 Compare September 1, 2025 15:45
@renovate renovate Bot changed the title chore(deps): update node.js to v22.18.0 chore(deps): update node.js to v22.19.0 Sep 1, 2025
@renovate renovate Bot force-pushed the renovate/node-22.x branch from 57af0b9 to fe7d750 Compare September 24, 2025 20:13
@renovate renovate Bot changed the title chore(deps): update node.js to v22.19.0 chore(deps): update node.js to v22.20.0 Sep 24, 2025
@renovate renovate Bot force-pushed the renovate/node-22.x branch from fe7d750 to d1624e8 Compare October 25, 2025 19:41
@renovate renovate Bot changed the title chore(deps): update node.js to v22.20.0 chore(deps): update node.js to v22.21.0 Oct 25, 2025
@renovate renovate Bot force-pushed the renovate/node-22.x branch from d1624e8 to f952f11 Compare November 2, 2025 07:59
@renovate renovate Bot changed the title chore(deps): update node.js to v22.21.0 chore(deps): update node.js to v22.21.1 Nov 2, 2025
@renovate renovate Bot force-pushed the renovate/node-22.x branch from f952f11 to 5aa4e65 Compare January 16, 2026 23:25
@renovate renovate Bot changed the title chore(deps): update node.js to v22.21.1 chore(deps): update node.js to v22.22.0 Jan 16, 2026
@renovate renovate Bot force-pushed the renovate/node-22.x branch from 5aa4e65 to a1936b9 Compare March 8, 2026 11:59
@renovate renovate Bot changed the title chore(deps): update node.js to v22.22.0 chore(deps): update node.js to v22.22.1 Mar 8, 2026
@renovate renovate Bot force-pushed the renovate/node-22.x branch from a1936b9 to 0e960d4 Compare March 31, 2026 10:36
@renovate renovate Bot changed the title chore(deps): update node.js to v22.22.1 chore(deps): update node.js to v22.22.2 Mar 31, 2026
@renovate renovate Bot changed the title chore(deps): update node.js to v22.22.2 Update Node.js to v22.22.2 Apr 15, 2026
@renovate renovate Bot force-pushed the renovate/node-22.x branch from 0e960d4 to 4c655a4 Compare May 16, 2026 12:10
@renovate renovate Bot changed the title Update Node.js to v22.22.2 Update Node.js to v22.22.3 May 16, 2026
@renovate renovate Bot force-pushed the renovate/node-22.x branch from 4c655a4 to f36b44c Compare June 21, 2026 03:14
@renovate renovate Bot changed the title Update Node.js to v22.22.3 Update Node.js to v22.23.0 Jun 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants