Node.js

News from 2018

18 Jul Node v10.7.0 (Current)
- console:
  - The console.timeLog() method has been implemented. #21312
- deps:
  - Upgrade to libuv 1.22.0. #21731
  - Upgrade to ICU 62.1 (Unicode 11, CLDR 33.1). #21728
- http:
  - Added support for passing both timeout and agent options to http.request. #21204
- inspector:
  - Expose the original console API in require('inspector').console. #21659
- napi:
  - Added experimental support for functions dealing with bigint numbers. #21226
- process:
  - The process.hrtime.bigint() method has been implemented. #21256
  - Added the --title command line argument to set the process title on startup. #21477
- trace_events:
  - Added process_name metadata. #21477
- Added new collaborators
  - codebytere - Shelley Vohr
Read more...
04 Jul Node v10.6.0 (Current)
- dns:
  - An experimental promisified version of the dns module is now available. Give it a try with require('dns').promises. #21264
- fs:
  - fs.lchown has been undeprecated now that libuv supports it. #21498
- lib:
  - Atomics.wake is being renamed to Atomics.notify in the ECMAScript specification (reference). Since Node.js now has experimental support for worker threads, we are being proactive and added a notify alias, while emitting a warning if wake is used. #21413 #21518
- n-api:
  - Add API for asynchronous functions. #17887
- util:
  - util.inspect is now able to return a result instead of throwing when the maximum call stack size is exceeded during inspection. #20725
- vm:
  - Add script.createCachedData(). This API replaces the produceCachedData option of the Script constructor that is now deprecated. #20300
- worker:
  - Support for relative paths has been added to the Worker constructor. Paths are interpreted relative to the current working directory. #21407
Read more...
20 Jun Node v10.5.0 (Current)
- crypto:
  - Support for crypto.scrypt() has been added. #20816
- fs:
  - BigInt support has been added to fs.stat and fs.watchFile. #20220
  - APIs that take mode as arguments no longer throw on values larger than 0o777. #20636 #20975 (Fixes: #20498)
  - Fix crashes in closed event watchers. #20985 (Fixes: #20297)
- Worker Threads:
  - Support for multi-threading has been added behind the --experimental-worker flag in the worker_threads module. This feature is experimental and may receive breaking changes at any time. #20876
Read more...
12 Jun Node v8.11.3 (LTS)
- buffer (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang
- http2
  - (CVE-2018-7161): Fixes Denial of Service vulnerability by updating the http2 implementation to not crash under certain circumstances during cleanup
  - (CVE-2018-1000168): Fixes Denial of Service vulnerability by upgrading nghttp2 to 1.32.0
Read more...
12 Jun Node v6.14.3 (LTS)
- buffer (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang
- [7dbcfc6217] - src: avoid hanging on Buffer#fill 0-length input (Сковорода Никита Андреевич) nodejs-private/node-private#121
Read more...
12 Jun Node v9.11.2 (Current)
- Fixes memory exhaustion DoS (CVE-2018-7164): Fixes a bug introduced in 9.7.0 that increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream.
- buffer (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang
- http2
  - (CVE-2018-7161): Fixes Denial of Service vulnerability by updating the http2 implementation to not crash under certain circumstances during cleanup
  - (CVE-2018-1000168): Fixes Denial of Service vulnerability by upgrading nghttp2 to 1.32.0
- tls (CVE-2018-7162): Fixes Denial of Service vulnerability by updating the TLS implementation to not crash upon receiving
Read more...
12 Jun Node v10.4.1 (Current)
- Fixes memory exhaustion DoS (CVE-2018-7164): Fixes a bug introduced in 9.7.0 that increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream.
- http2
  - (CVE-2018-7161): Fixes Denial of Service vulnerability by updating the http2 implementation to not crash under certain circumstances during cleanup
  - (CVE-2018-1000168): Fixes Denial of Service vulnerability by upgrading nghttp2 to 1.32.0
- tls (CVE-2018-7162): Fixes Denial of Service vulnerability by updating the TLS implementation to not crash upon receiving
- n-api: Prevent use-after-free in napi_delete_async_work
Read more...
12 Jun June 2018 Security Releases
(Update 12-June-2018) Security releases available
Updates are now available for all active Node.js release lines. These include the fix for the vulnerabilities identified in the initial announcement (below).
We recommend that all users upgrade as soon as possible.
Read more...
06 Jun Node v10.4.0 (Current)
- deps:
  - update V8 to 6.7.288.43 (Michaël Zasso) #19989
- stream:
  - ensure Stream.pipeline re-throws errors without callback (Blaine Bublitz) #20437
Read more...
29 May Node v10.3.0 (Current)
- deps:
  - upgrade npm to 6.1.0 (Rebecca Turner) #20190
- fs:
  - fix reads with pos > 4GB (Mathias Buus) #21003
- net:
  - new option to allow IPC servers to be readable and writable by all users (Bartosz Sosnowski) #19472
- stream:
  - fix removeAllListeners() for Stream.Readable to work as expected when no arguments are passed (Kael Zhang) #20924
- Added new collaborators
  - jdlaton John-David Dalton
Read more...
24 May Node v10.2.1 (Current)
23 May Node v10.2.0 (Current)
15 May Node v8.11.2 (LTS)
09 May Node v10.1.0 (Current)
30 Apr Node v6.14.2 (LTS)
24 Apr Node v10.0.0 (Current)
05 Apr Node v9.11.1 (Current)
04 Apr Node v9.11.0 (Current)
30 Mar Node v9.10.1 (Current)
30 Mar Node v8.11.1 (LTS)
30 Mar Node v6.14.1 (LTS)
30 Mar Node v4.9.1 (Maintenance)
28 Mar Node v9.10.0 (Current)
28 Mar Node v8.11.0 (LTS)
28 Mar Node v6.14.0 (LTS)
28 Mar Node v4.9.0 (Maintenance)
21 Mar March 2018 Security Releases
21 Mar Node v9.9.0 (Current)
08 Mar Node v9.8.0 (Current)
07 Mar Node v8.10.0 (LTS)
06 Mar Node v6.13.1 (LTS)
02 Mar Node v9.7.1 (Current)
01 Mar Node v9.7.0 (Current)
23 Feb Node v9.6.1 (Current)
22 Feb Node v9.6.0 (Current)
13 Feb Node v6.13.0 (LTS)
01 Feb Node v9.5.0 (Current)
10 Jan Node v9.4.0 (Current)
08 Jan Meltdown and Spectre - Impact On Node.js
03 Jan Node v8.9.4 (LTS)
02 Jan Node v6.12.3 (LTS)