Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
6521f88
Working on v24.14.1
ruyadorno Feb 24, 2026
bfdecef
permission: add permission check to realpath.native
RafaelGSS Jan 5, 2026
d6b6051
permission: include permission check on lib/fs/promises
RafaelGSS Jan 5, 2026
df8fbfb
tls: wrap SNICallback invocation in try/catch
mcollina Feb 17, 2026
380ea72
http: use null prototype for headersDistinct/trailersDistinct
mcollina Feb 19, 2026
af22629
deps: V8: backport 0a8b1cdcc8b2
devsnek Jul 17, 2025
0450133
deps: V8: backport 185f0fe09b72
joyeecheung Feb 26, 2026
87521e9
deps: V8: backport 1361b2a49d02
joyeecheung Mar 4, 2026
6fae244
build,test: test array index hash collision
joyeecheung Jan 29, 2026
cba66c4
src: handle url crash on different url formats
RafaelGSS Feb 10, 2026
cc0910c
crypto: use timing-safe comparison in Web Cryptography HMAC and KMAC
panva Feb 20, 2026
c015edf
src: handle NGHTTP2_ERR_FLOW_CONTROL error code
RafaelGSS Mar 11, 2026
3dab3c4
deps: V8: override `depot_tools` version
richardlau Mar 22, 2026
9ac0f9f
deps: upgrade npm to 11.10.1
npm-cli-bot Feb 22, 2026
61097db
deps: upgrade npm to 11.11.0
npm-cli-bot Feb 27, 2026
0885263
deps: update undici to 7.22.0
nodejs-github-bot Mar 2, 2026
f5b8667
deps: update undici to 7.24.3
nodejs-github-bot Mar 15, 2026
80cb042
deps: update undici to 7.24.4
nodejs-github-bot Mar 16, 2026
d89bb1b
2026-03-24, Version 24.14.1 'Krypton' (LTS)
juanarbol Mar 16, 2026
6cf69f4
Merge tag 'v24.14.1' into node-v24.14.1-nsolid-v6.2.2-release
santigimeno Mar 25, 2026
89d10b1
2026-03-25, Version 24.14.1-nsolid-v6.2.2 'Krypton'
santigimeno Mar 25, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
3 changes: 2 additions & 1 deletion CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,8 @@ release.
</tr>
<tr>
<td valign="top">
<b><a href="doc/changelogs/CHANGELOG_V24.md#24.14.0">24.14.0</a></b><br/>
<b><a href="doc/changelogs/CHANGELOG_V24.md#24.14.1">24.14.1</a></b><br/>
<a href="doc/changelogs/CHANGELOG_V24.md#24.14.0">24.14.0</a><br/>
<a href="doc/changelogs/CHANGELOG_V24.md#24.13.1">24.13.1</a><br/>
<a href="doc/changelogs/CHANGELOG_V24.md#24.13.0">24.13.0</a><br/>
<a href="doc/changelogs/CHANGELOG_V24.md#24.12.0">24.12.0</a><br/>
Expand Down
2 changes: 1 addition & 1 deletion common.gypi
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@

# Reset this number to 0 on major V8 upgrades.
# Increment by one for each non-official patch applied to deps/v8.
'v8_embedder_string': '-node.41',
'v8_embedder_string': '-node.44',

##### V8 defaults for Node.js #####

Expand Down
2 changes: 1 addition & 1 deletion deps/npm/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -50,4 +50,4 @@ npm <command>

#### Is "npm" an acronym for "Node Package Manager"?

Contrary to popular belief, **`npm`** **is not** in fact an acronym for "Node Package Manager"; It is a recursive bacronymic abbreviation for **"npm is not an acronym"** (if the project was named "ninaa", then it would be an acronym). The precursor to **`npm`** was actually a bash utility named **"pm"**, which was the shortform name of **"pkgmakeinst"** - a bash function that installed various things on various platforms. If **`npm`** were to ever have been considered an acronym, it would be as "node pm" or, potentially "new pm".
Contrary to popular belief, **`npm`** **is not** an acronym for "Node Package Manager." It is a recursive backronymic abbreviation for **"npm is not an acronym"** (if the project were named "ninaa," then it would be an acronym). The precursor to **`npm`** was actually a bash utility named **"pm"**, which was the shortform name of **"pkgmakeinst"** - a bash function that installed various things on various platforms. If **`npm`** were ever considered an acronym, it would be as "node pm" or, potentially, "new pm".
32 changes: 32 additions & 0 deletions deps/npm/docs/content/commands/npm-get.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
---
title: npm-get
section: 1
description: Get a value from the npm configuration
---

### Synopsis

```bash
npm get [<key> ...] (See `npm config`)
```

Note: This command is unaware of workspaces.

### Description

Get a value from the npm configuration

### Configuration

#### `long`

* Default: false
* Type: Boolean

Show extended information in `ls`, `search`, and `help-search`.



### See Also

* [npm help config](/commands/npm-config)
15 changes: 15 additions & 0 deletions deps/npm/docs/content/commands/npm-install-test.md
Original file line number Diff line number Diff line change
Expand Up @@ -264,7 +264,22 @@ If the requested version is a `dist-tag` and the given tag does not pass the
will be used. For example, `foo@latest` might install `foo@1.2` even though
`latest` is `2.0`.

This config cannot be used with: `min-release-age`

#### `min-release-age`

* Default: null
* Type: null or Number

If set, npm will build the npm tree such that only versions that were
available more than the given number of days ago will be installed. If there
are no versions available for the current set of dependencies, the command
will error.

This flag is a complement to `before`, which accepts an exact date instead
of a relative number of days.

This config cannot be used with: `before`

#### `bin-links`

Expand Down
15 changes: 15 additions & 0 deletions deps/npm/docs/content/commands/npm-install.md
Original file line number Diff line number Diff line change
Expand Up @@ -606,7 +606,22 @@ If the requested version is a `dist-tag` and the given tag does not pass the
will be used. For example, `foo@latest` might install `foo@1.2` even though
`latest` is `2.0`.

This config cannot be used with: `min-release-age`

#### `min-release-age`

* Default: null
* Type: null or Number

If set, npm will build the npm tree such that only versions that were
available more than the given number of days ago will be installed. If there
are no versions available for the current set of dependencies, the command
will error.

This flag is a complement to `before`, which accepts an exact date instead
of a relative number of days.

This config cannot be used with: `before`

#### `bin-links`

Expand Down
229 changes: 229 additions & 0 deletions deps/npm/docs/content/commands/npm-ll.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,229 @@
---
title: npm-ll
section: 1
description: List installed packages
---

### Synopsis

```bash
npm ll [[<@scope>/]<pkg> ...]

alias: la
```

### Description

List installed packages

### Configuration

#### `all`

* Default: false
* Type: Boolean

When running `npm outdated` and `npm ls`, setting `--all` will show all
outdated or installed packages, rather than only those directly depended
upon by the current project.



#### `json`

* Default: false
* Type: Boolean

Whether or not to output JSON data, rather than the normal output.

* In `npm pkg set` it enables parsing set values with JSON.parse() before
saving them to your `package.json`.

Not supported by all npm commands.



#### `long`

* Default: false
* Type: Boolean

Show extended information in `ls`, `search`, and `help-search`.



#### `parseable`

* Default: false
* Type: Boolean

Output parseable results from commands that write to standard output. For
`npm search`, this will be tab-separated table format.



#### `global`

* Default: false
* Type: Boolean

Operates in "global" mode, so that packages are installed into the `prefix`
folder instead of the current working directory. See
[folders](/configuring-npm/folders) for more on the differences in behavior.

* packages are installed into the `{prefix}/lib/node_modules` folder, instead
of the current working directory.
* bin files are linked to `{prefix}/bin`
* man pages are linked to `{prefix}/share/man`



#### `depth`

* Default: `Infinity` if `--all` is set; otherwise, `0`
* Type: null or Number

The depth to go when recursing packages for `npm ls`.

If not set, `npm ls` will show only the immediate dependencies of the root
project. If `--all` is set, then npm will show all dependencies by default.



#### `omit`

* Default: 'dev' if the `NODE_ENV` environment variable is set to
'production'; otherwise, empty.
* Type: "dev", "optional", or "peer" (can be set multiple times)

Dependency types to omit from the installation tree on disk.

Note that these dependencies _are_ still resolved and added to the
`package-lock.json` or `npm-shrinkwrap.json` file. They are just not
physically installed on disk.

If a package type appears in both the `--include` and `--omit` lists, then
it will be included.

If the resulting omit list includes `'dev'`, then the `NODE_ENV` environment
variable will be set to `'production'` for all lifecycle scripts.



#### `include`

* Default:
* Type: "prod", "dev", "optional", or "peer" (can be set multiple times)

Option that allows for defining which types of dependencies to install.

This is the inverse of `--omit=<type>`.

Dependency types specified in `--include` will not be omitted, regardless of
the order in which omit/include are specified on the command-line.



#### `link`

* Default: false
* Type: Boolean

Used with `npm ls`, limiting output to only those packages that are linked.



#### `package-lock-only`

* Default: false
* Type: Boolean

If set to true, the current operation will only use the `package-lock.json`,
ignoring `node_modules`.

For `update` this means only the `package-lock.json` will be updated,
instead of checking `node_modules` and downloading dependencies.

For `list` this means the output will be based on the tree described by the
`package-lock.json`, rather than the contents of `node_modules`.



#### `unicode`

* Default: false on windows, true on mac/unix systems with a unicode locale,
as defined by the `LC_ALL`, `LC_CTYPE`, or `LANG` environment variables.
* Type: Boolean

When set to true, npm uses unicode characters in the tree output. When
false, it uses ascii characters instead of unicode glyphs.



#### `workspace`

* Default:
* Type: String (can be set multiple times)

Enable running a command in the context of the configured workspaces of the
current project while filtering by running only the workspaces defined by
this configuration option.

Valid values for the `workspace` config are either:

* Workspace names
* Path to a workspace directory
* Path to a parent workspace directory (will result in selecting all
workspaces within that folder)

When set for the `npm init` command, this may be set to the folder of a
workspace which does not yet exist, to create the folder and set it up as a
brand new workspace within the project.

This value is not exported to the environment for child processes.

#### `workspaces`

* Default: null
* Type: null or Boolean

Set to true to run the command in the context of **all** configured
workspaces.

Explicitly setting this to false will cause commands like `install` to
ignore workspaces altogether. When not set explicitly:

- Commands that operate on the `node_modules` tree (install, update, etc.)
will link workspaces into the `node_modules` folder. - Commands that do
other things (test, exec, publish, etc.) will operate on the root project,
_unless_ one or more workspaces are specified in the `workspace` config.

This value is not exported to the environment for child processes.

#### `include-workspace-root`

* Default: false
* Type: Boolean

Include the workspace root when workspaces are enabled for a command.

When false, specifying individual workspaces via the `workspace` config, or
all workspaces via the `workspaces` flag, will cause npm to operate only on
the specified workspaces, and not on the root project.

This value is not exported to the environment for child processes.

#### `install-links`

* Default: false
* Type: Boolean

When set file: protocol dependencies will be packed and installed as regular
dependencies instead of creating a symlink. This option has no effect on
workspaces.



### See Also

* [npm help config](/commands/npm-config)
2 changes: 1 addition & 1 deletion deps/npm/docs/content/commands/npm-ls.md
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ Note that nested packages will *also* show the paths to the specified packages.
For example, running `npm ls promzard` in npm's source tree will show:

```bash
npm@11.9.0 /path/to/npm
npm@11.11.0 /path/to/npm
└─┬ init-package-json@0.0.4
└── promzard@0.1.5
```
Expand Down
15 changes: 15 additions & 0 deletions deps/npm/docs/content/commands/npm-outdated.md
Original file line number Diff line number Diff line change
Expand Up @@ -165,7 +165,22 @@ If the requested version is a `dist-tag` and the given tag does not pass the
will be used. For example, `foo@latest` might install `foo@1.2` even though
`latest` is `2.0`.

This config cannot be used with: `min-release-age`

#### `min-release-age`

* Default: null
* Type: null or Number

If set, npm will build the npm tree such that only versions that were
available more than the given number of days ago will be installed. If there
are no versions available for the current set of dependencies, the command
will error.

This flag is a complement to `before`, which accepts an exact date instead
of a relative number of days.

This config cannot be used with: `before`

### See Also

Expand Down
Loading
Loading