Skip to content

chore(deps): update node.js to v24.14.1#33

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/node-24.x
Open

chore(deps): update node.js to v24.14.1#33
renovate[bot] wants to merge 1 commit intomainfrom
renovate/node-24.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Dec 19, 2025

This PR contains the following updates:

Package Update Change
node (source) minor 24.9.024.14.1

Release Notes

nodejs/node (node)

v24.14.1

Compare Source

v24.14.0

Compare Source

v24.13.1

Compare Source

v24.13.0: 2026-01-13, Version 24.13.0 'Krypton' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

Commits

v24.12.0: 2025-12-10, Version 24.12.0 'Krypton' (LTS), @​targos

Compare Source

Notable Changes
  • [1a00b5f68a] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #​59778
  • [ff5754077d] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga) #​59982
  • [8987159234] - (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito) #​60600
  • [92c484ebf4] - (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho) #​59953
  • [b11bc5984e] - (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers) #​60217
  • [e7da5b4b7d] - (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito) #​60178
  • [a7f7d10c06] - (SEMVER-MINOR) src: add an option to make compile cache portable (Aditi) #​58797
  • [92ea669240] - (SEMVER-MINOR) src,permission: add --allow-inspector ability (Rafael Gonzaga) #​59711
  • [05d7509bd2] - (SEMVER-MINOR) v8: add cpu profile (theanarkh) #​59807
Commits

v24.11.1

Compare Source

v24.11.0

Compare Source

v24.10.0: 2025-10-08, Version 24.10.0 (Current), @​RafaelGSS

Compare Source

Notable Changes
  • [31bb476895] - (SEMVER-MINOR) console: allow per-stream inspectOptions option (Anna Henningsen) #​60082
  • [3b92be2fb8] - (SEMVER-MINOR) lib: remove util.getCallSite (Rafael Gonzaga) #​59980
  • [18c79d9e1c] - (SEMVER-MINOR) sqlite: create authorization api (Guilherme Araújo) #​59928
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link
Copy Markdown

github-actions bot commented Dec 19, 2025

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Security Fixes (Critical):

  • CVE-2025-59465 (High): Fixed HTTP/2 HEADERS frame crash vulnerability that could cause denial-of-service
  • CVE-2025-55131 (High): Fixed uninitialized memory exposure in buffer allocation when using vm module with timeout
  • CVE-2025-55130 (High): Fixed permission model bypass via symlink path concatenation for --allow-fs-read/--allow-fs-write
  • CVE-2025-59466 (Medium): Fixed uncatchable "Maximum call stack size exceeded" errors when async_hooks.createHook() is enabled
  • CVE-2026-21637 (Medium): Fixed TLS callback exception handling
  • CVE-2025-55132 (Low): Fixed futimes() permission bypass in permission model

Feature Updates:

  • Type stripping marked as stable in module system
  • New HTTP server optimization options
  • Enhanced SQLite API with authorization capabilities
  • Improved Node-API functionality
  • Updated dependencies: c-ares v1.34.6, undici v7.18.2

Breaking Changes: None identified - this is a security and stability release within the same major version line

🎯 Impact Scope Investigation

File Changes: Only mise.toml is modified (Node.js version from 24.9.0 → 24.14.1)

Usage Analysis:

  • No Node.js engine constraints found in package.json
  • No .nvmrc or .node-version files present
  • CI pipeline uses mise-action which reads from mise.toml - will automatically use new version
  • Build script targets "node" runtime but is framework-agnostic
  • Project uses Bun as primary runtime but Node.js for CLI distribution (shebang: #!/usr/bin/env node)

Dependency Impact: No changes to npm dependencies required - this is a runtime update only

💡 Recommended Actions

Immediate Actions:

  1. Merge immediately - This is a critical security update with multiple CVE fixes
  2. The update is fully backward compatible within the v24 LTS line
  3. No code changes or configuration updates required

Post-Merge Verification:

  1. Run mise install to ensure new Node.js version is installed locally
  2. Execute bun run build && bun test to verify compatibility
  3. Test CLI functionality: ./dist/index.js --help

🔗 Reference Links

Generated by koki-develop/claude-renovate-review

@renovate renovate bot force-pushed the renovate/node-24.x branch from 53739e2 to 140e5fd Compare January 15, 2026 00:36
@renovate renovate bot changed the title chore(deps): update dependency node to v24.12.0 chore(deps): update dependency node to v24.13.0 Jan 15, 2026
@renovate renovate bot force-pushed the renovate/node-24.x branch from 140e5fd to 64546cb Compare February 12, 2026 00:37
@renovate renovate bot changed the title chore(deps): update dependency node to v24.13.0 chore(deps): update dependency node to v24.13.1 Feb 12, 2026
@renovate renovate bot changed the title chore(deps): update dependency node to v24.13.1 chore(deps): update node.js to v24.13.1 Feb 12, 2026
@renovate renovate bot force-pushed the renovate/node-24.x branch from 64546cb to 5785519 Compare February 27, 2026 00:47
@renovate renovate bot changed the title chore(deps): update node.js to v24.13.1 chore(deps): update node.js to v24.14.0 Feb 27, 2026
@renovate renovate bot force-pushed the renovate/node-24.x branch from 5785519 to bffe3c4 Compare March 27, 2026 00:48
@renovate renovate bot changed the title chore(deps): update node.js to v24.14.0 chore(deps): update node.js to v24.14.1 Mar 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants