Release v1.17.8 by github-actions[bot] · Pull Request #845 · overmindtech/cli

github-actions · 2026-04-28T08:16:52Z

Copybara Sync - Release v1.17.8

This PR was automatically created by Copybara, syncing changes from the overmindtech/workspace monorepo.

Original author: TP Honey (thomas.honey@overmind.tech)

What happens when this PR is merged?

The tag-on-merge workflow will automatically create the v1.17.8 tag on main
This tag will trigger the release workflow, which will:
- Run tests
- Build and publish release binaries via GoReleaser
- Upload packages to Cloudsmith

Review Checklist

Changes look correct and match the expected monorepo sync
Tests pass (see CI checks below)

This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 4am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 81df82caee6a29c85bfa238411f6510a627db7d3

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/aws/aws-sdk-go-v2/config](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.32.14` → `v1.32.15` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.15?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.14/v1.32.15?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/autoscaling](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.65.0` → `v1.66.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.66.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.65.0/v1.66.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.56.0` → `v1.56.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.56.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.56.0/v1.56.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/ecs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.77.0` → `v1.78.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.78.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.77.0/v1.78.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/rds](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.117.1` → `v1.118.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.118.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.117.1/v1.118.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/service/autoscaling)</summary> ### [`v1.66.0`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-10-16) #### General Highlights - **Dependency Update**: Bump minimum Go version to 1.23. - **Dependency Update**: Updated to the latest SDK module versions #### Module Highlights - `github.com/aws/aws-sdk-go-v2/service/acmpca`: [v1.45.0](service/acmpca/CHANGELOG.md#v1450-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/amplify`: [v1.38.0](service/amplify/CHANGELOG.md#v1380-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi`: [v1.29.0](service/apigatewaymanagementapi/CHANGELOG.md#v1290-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/apprunner`: [v1.39.0](service/apprunner/CHANGELOG.md#v1390-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/apptest`: [v1.10.0](service/apptest/CHANGELOG.md#v1100-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/autoscalingplans`: [v1.30.0](service/autoscalingplans/CHANGELOG.md#v1300-2025-10-16) - **Feature**: Updated FIPS endpoints for US GovCloud regions - `github.com/aws/aws-sdk-go-v2/service/batch`: [v1.58.0](service/batch/CHANGELOG.md#v1580-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/bcmdataexports`: [v1.12.0](service/bcmdataexports/CHANGELOG.md#v1120-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/billingconductor`: [v1.26.0](service/billingconductor/CHANGELOG.md#v1260-2025-10-16) - **Feature**: New feature: service flat CLI and first AWS managed pricing plan (BasicPricingPlan) - `github.com/aws/aws-sdk-go-v2/service/customerprofiles`: [v1.54.0](service/customerprofiles/CHANGELOG.md#v1540-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/databrew`: [v1.39.0](service/databrew/CHANGELOG.md#v1390-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/dataexchange`: [v1.40.0](service/dataexchange/CHANGELOG.md#v1400-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/dlm`: [v1.35.0](service/dlm/CHANGELOG.md#v1350-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/freetier`: [v1.13.0](service/freetier/CHANGELOG.md#v1130-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/gamelift`: [v1.47.0](service/gamelift/CHANGELOG.md#v1470-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/georoutes`: [v1.7.0](service/georoutes/CHANGELOG.md#v170-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/globalaccelerator`: [v1.35.0](service/globalaccelerator/CHANGELOG.md#v1350-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/grafana`: [v1.32.0](service/grafana/CHANGELOG.md#v1320-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/identitystore`: [v1.33.0](service/identitystore/CHANGELOG.md#v1330-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/ivs`: [v1.48.0](service/ivs/CHANGELOG.md#v1480-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/ivsrealtime`: [v1.31.0](service/ivsrealtime/CHANGELOG.md#v1310-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/kafka`: [v1.44.0](service/kafka/CHANGELOG.md#v1440-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/keyspaces`: [v1.24.0](service/keyspaces/CHANGELOG.md#v1240-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/kms`: [v1.46.0](service/kms/CHANGELOG.md#v1460-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/lexmodelbuildingservice`: [v1.34.0](service/lexmodelbuildingservice/CHANGELOG.md#v1340-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/lexruntimev2`: [v1.35.0](service/lexruntimev2/CHANGELOG.md#v1350-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/lookoutequipment`: [v1.36.0](service/lookoutequipment/CHANGELOG.md#v1360-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/m2`: [v1.26.0](service/m2/CHANGELOG.md#v1260-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/machinelearning`: [v1.34.0](service/machinelearning/CHANGELOG.md#v1340-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/marketplaceentitlementservice`: [v1.34.0](service/marketplaceentitlementservice/CHANGELOG.md#v1340-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/mediapackagev2`: [v1.32.0](service/mediapackagev2/CHANGELOG.md#v1320-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/medicalimaging`: [v1.22.0](service/medicalimaging/CHANGELOG.md#v1220-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/memorydb`: [v1.33.0](service/memorydb/CHANGELOG.md#v1330-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/migrationhubconfig`: [v1.31.0](service/migrationhubconfig/CHANGELOG.md#v1310-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/networkflowmonitor`: [v1.10.0](service/networkflowmonitor/CHANGELOG.md#v1100-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/osis`: [v1.21.0](service/osis/CHANGELOG.md#v1210-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/personalize`: [v1.46.0](service/personalize/CHANGELOG.md#v1460-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/personalizeruntime`: [v1.33.0](service/personalizeruntime/CHANGELOG.md#v1330-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/pinpointsmsvoice`: [v1.29.0](service/pinpointsmsvoice/CHANGELOG.md#v1290-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/polly`: [v1.54.0](service/polly/CHANGELOG.md#v1540-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/pricing`: [v1.40.0](service/pricing/CHANGELOG.md#v1400-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/qldb`: [v1.31.0](service/qldb/CHANGELOG.md#v1310-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/qldbsession`: [v1.31.0](service/qldbsession/CHANGELOG.md#v1310-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/route53recoverycontrolconfig`: [v1.32.0](service/route53recoverycontrolconfig/CHANGELOG.md#v1320-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/ssm`: [v1.66.0](service/ssm/CHANGELOG.md#v1660-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/ssmcontacts`: [v1.31.0](service/ssmcontacts/CHANGELOG.md#v1310-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/ssmguiconnect`: [v1.5.0](service/ssmguiconnect/CHANGELOG.md#v150-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/timestreamquery`: [v1.36.0](service/timestreamquery/CHANGELOG.md#v1360-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/voiceid`: [v1.30.0](service/voiceid/CHANGELOG.md#v1300-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing - `github.com/aws/aws-sdk-go-v2/service/workspacesweb`: [v1.33.0](service/workspacesweb/CHANGELOG.md#v1330-2025-10-16) - **Feature**: Update endpoint ruleset parameters casing </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: da0ed0d6647f0b9e1cb54f42a9f9396fd98be2ae

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/nats-io/nats-server/v2](https://redirect.github.com/nats-io/nats-server) | `v2.12.6` → `v2.12.7` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fnats-io%2fnats-server%2fv2/v2.12.7?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fnats-io%2fnats-server%2fv2/v2.12.6/v2.12.7?slim=true) | | [github.com/nats-io/nats.go](https://redirect.github.com/nats-io/nats.go) | `v1.50.0` → `v1.51.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fnats-io%2fnats.go/v1.51.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fnats-io%2fnats.go/v1.50.0/v1.51.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>nats-io/nats-server (github.com/nats-io/nats-server/v2)</summary> ### [`v2.12.7`](https://redirect.github.com/nats-io/nats-server/releases/tag/v2.12.7) [Compare Source](https://redirect.github.com/nats-io/nats-server/compare/v2.12.6...v2.12.7) #### Changelog Refer to the [2.12 Upgrade Guide](https://docs.nats.io/release-notes/whats_new/whats_new_212) for backwards compatibility notes with 2.11.x. ##### Go Version - 1.25.9 ([#8017](https://redirect.github.com/nats-io/nats-server/issues/8017)) ##### Dependencies - github.com/nats-io/nats.go v1.50.0 ([#8000](https://redirect.github.com/nats-io/nats-server/issues/8000)) ##### CVEs - TBD ##### Improved JetStream - Purging subjects from a stream now only loads filestore blocks within the range of where those subjects appear ([#8004](https://redirect.github.com/nats-io/nats-server/issues/8004)) - Multi-filtered load next or previous message code paths now correctly identify single subject filters or full wildcards and switch to optimized paths ([#8012](https://redirect.github.com/nats-io/nats-server/issues/8012), 8013) - The `max_mem_store` and `max_file_store` configuration options can now be increased (but not decreased) via config reload ([#8014](https://redirect.github.com/nats-io/nats-server/issues/8014)) ##### Fixed General - `no_auth_user` is now restricted to client connections only - Overlapping wildcard patterns in ACL `deny` patterns are now enforced correctly - Queue subscriptions can no longer incorrectly bypass non-queue ACL `deny` patterns Leafnodes - Pre-`CONNECT` guard improvements for leafnode connections, fixing a potential panic - ACL permissions are now correctly enforced for inbound leaf messages in all cases - Duplicate `INFO` permissions updates are now only accepted for solicited leaf connections - The `max_payload` limit is now correctly enforced for leafnode connections - A panic on leafnode connect when failing to resolve an account has been fixed ([#7991](https://redirect.github.com/nats-io/nats-server/issues/7991)) JetStream - Consumer `max_ack_pending` should no longer become stuck due to deleted messages being left in the consumer pending state ([#7984](https://redirect.github.com/nats-io/nats-server/issues/7984)) - When scaling up a stream and adding subjects at the same time, the new subject filters are now correctly subscribed ([#8003](https://redirect.github.com/nats-io/nats-server/issues/8003)) - Filestore caches are no longer expired and evicted from memory too eagerly after a recent write ([#8009](https://redirect.github.com/nats-io/nats-server/issues/8009)) - Stream leaders can catch up from a snapshot if required ([#8021](https://redirect.github.com/nats-io/nats-server/issues/8021)) MQTT - The `jwt` is now correctly sent to auth callout for MQTT clients, fixing a regression introduced in 2.12.6 ([#7997](https://redirect.github.com/nats-io/nats-server/issues/7997), [#7999](https://redirect.github.com/nats-io/nats-server/issues/7999)) WebSockets - The fast-path for connections with no `CONNECT` block will now use the WebSocket-specific `no_auth_user` instead of the global one if configured ##### Complete Changes </details> <details> <summary>nats-io/nats.go (github.com/nats-io/nats.go)</summary> ### [`v1.51.0`](https://redirect.github.com/nats-io/nats.go/releases/tag/v1.51.0) [Compare Source](https://redirect.github.com/nats-io/nats.go/compare/v1.50.0...v1.51.0) #### Changelog ##### ADDED - Core NATS: - Option to customize write buffer size ([#2057](https://redirect.github.com/nats-io/nats.go/issues/2057)) - Option to automatically reconnect on write error ([#2055](https://redirect.github.com/nats-io/nats.go/issues/2055)) - Accessors for JetStream API level and `IsSysAccount` from `ServerInfo` ([#2060](https://redirect.github.com/nats-io/nats.go/issues/2060)) ##### FIXED - Core NATS: - Make websocket frame validation more robust ([#2050](https://redirect.github.com/nats-io/nats.go/issues/2050)) - JetStream: - Fix deadlock in `Consume()` when calling `Stop`/`Drain` from `ConsumeErrHandler` ([#2059](https://redirect.github.com/nats-io/nats.go/issues/2059)) ##### IMPROVED - Fix typos in tests. Thanks [@deining](https://redirect.github.com/deining) for the contribution ([#2049](https://redirect.github.com/nats-io/nats.go/issues/2049)) - Fix deprecation warnings by bumping GH actions to their latest versions. Thanks [@deining](https://redirect.github.com/deining) for the contibution ([#2048](https://redirect.github.com/nats-io/nats.go/issues/2048)) - Code linting: remove functions min and max. Thanks [@deining](https://redirect.github.com/deining) for the contribution ([#2047](https://redirect.github.com/nats-io/nats.go/issues/2047)) ##### Complete Changes </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 8cdb2a385d9ed73ebc52f035f5e0b363165e79fe

> ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | alpine | final | patch | `3.23.3` → `3.23.4` | | alpine | stage | patch | `3.23.3` → `3.23.4` | | nginx | | minor | `1.29.8-alpine` → `1.30.0-alpine` | | [node](https://redirect.github.com/nodejs/node) | final | minor | `24.14.1-trixie-slim` → `24.15.0-trixie-slim` | | [node](https://redirect.github.com/nodejs/node) | final | minor | `24.14.1-alpine3.23` → `24.15.0-alpine3.23` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v24.15.0`](https://redirect.github.com/nodejs/node/releases/tag/v24.15.0): 2026-04-15, Version 24.15.0 'Krypton' (LTS), @aduh95 [Compare Source](https://redirect.github.com/nodejs/node/compare/v24.14.1...v24.15.0) ##### Notable Changes - \[[`3d87ecacbc`](https://redirect.github.com/nodejs/node/commit/3d87ecacbc)] - **(SEMVER-MINOR)** **cli**: add --max-heap-size option (tannal) [#58708](https://redirect.github.com/nodejs/node/pull/58708) - \[[`83c38672f7`](https://redirect.github.com/nodejs/node/commit/83c38672f7)] - **cli**: add --require-module/--no-require-module (Joyee Cheung) [#60959](https://redirect.github.com/nodejs/node/pull/60959) - \[[`54ef940e01`](https://redirect.github.com/nodejs/node/commit/54ef940e01)] - **(SEMVER-MINOR)** **crypto**: add raw key formats support to the KeyObject APIs (Filip Skokan) [#62240](https://redirect.github.com/nodejs/node/pull/62240) - \[[`f4a3edc47a`](https://redirect.github.com/nodejs/node/commit/f4a3edc47a)] - **(SEMVER-MINOR)** **fs**: add `throwIfNoEntry` option for fs.stat and fs.promises.stat (Juan José) [#61178](https://redirect.github.com/nodejs/node/pull/61178) - \[[`5cdcba17cc`](https://redirect.github.com/nodejs/node/commit/5cdcba17cc)] - **(SEMVER-MINOR)** **http2**: add http1Options for HTTP/1 fallback configuration (Amol Yadav) [#61713](https://redirect.github.com/nodejs/node/pull/61713) - \[[`8b6be3fe14`](https://redirect.github.com/nodejs/node/commit/8b6be3fe14)] - **module**: mark require(esm) as stable (Joyee Cheung) [#60959](https://redirect.github.com/nodejs/node/pull/60959) - \[[`68fbc0c6cc`](https://redirect.github.com/nodejs/node/commit/68fbc0c6cc)] - **module**: mark module compile cache as stable (Joyee Cheung) [#60971](https://redirect.github.com/nodejs/node/pull/60971) - \[[`c851e76f8c`](https://redirect.github.com/nodejs/node/commit/c851e76f8c)] - **(SEMVER-MINOR)** **net**: add `setTOS` and `getTOS` to `Socket` (Amol Yadav) [#61503](https://redirect.github.com/nodejs/node/pull/61503) - \[[`6ac4304c87`](https://redirect.github.com/nodejs/node/commit/6ac4304c87)] - **(SEMVER-MINOR)** **sqlite**: add limits property to DatabaseSync (Mert Can Altin) [#61298](https://redirect.github.com/nodejs/node/pull/61298) - \[[`aaf9af1672`](https://redirect.github.com/nodejs/node/commit/aaf9af1672)] - **sqlite**: mark as release candidate (Matteo Collina) [#61262](https://redirect.github.com/nodejs/node/pull/61262) - \[[`eb77a7a297`](https://redirect.github.com/nodejs/node/commit/eb77a7a297)] - **(SEMVER-MINOR)** **src**: add C++ support for diagnostics channels (RafaelGSS) [#61869](https://redirect.github.com/nodejs/node/pull/61869) - \[[`6834ca13bb`](https://redirect.github.com/nodejs/node/commit/6834ca13bb)] - **(SEMVER-MINOR)** **stream**: rename `Duplex.toWeb()` type option to `readableType` (René) [#61632](https://redirect.github.com/nodejs/node/pull/61632) - \[[`f5f21d36a6`](https://redirect.github.com/nodejs/node/commit/f5f21d36a6)] - **test\_runner**: add exports option for module mocks (sangwook) [#61727](https://redirect.github.com/nodejs/node/pull/61727) - \[[`1f2025fd1e`](https://redirect.github.com/nodejs/node/commit/1f2025fd1e)] - **(SEMVER-MINOR)** **test\_runner**: expose worker ID for concurrent test execution (Ali Hassan) [#61394](https://redirect.github.com/nodejs/node/pull/61394) - \[[`1ca20fc33d`](https://redirect.github.com/nodejs/node/commit/1ca20fc33d)] - **(SEMVER-MINOR)** **test\_runner**: show interrupted test on SIGINT (Matteo Collina) [#61676](https://redirect.github.com/nodejs/node/pull/61676) ##### Commits - \[[`148373cea1`](https://redirect.github.com/nodejs/node/commit/148373cea1)] - **assert,util**: improve comparison performance (Ruben Bridgewater) [#61176](https://redirect.github.com/nodejs/node/pull/61176) - \[[`e5558b0859`](https://redirect.github.com/nodejs/node/commit/e5558b0859)] - **assert,util**: fix deep comparing invalid dates skipping properties (Ruben Bridgewater) [#61076](https://redirect.github.com/nodejs/node/pull/61076) - \[[`83cffd92b5`](https://redirect.github.com/nodejs/node/commit/83cffd92b5)] - **async\_hooks**: enabledHooksExist shall return if hooks are enabled (Gerhard Stöbich) [#61054](https://redirect.github.com/nodejs/node/pull/61054) - \[[`2c9436b43d`](https://redirect.github.com/nodejs/node/commit/2c9436b43d)] - **benchmark**: fix destructuring in dgram/single-buffer (Ali Hassan) [#62084](https://redirect.github.com/nodejs/node/pull/62084) - \[[`837acd7382`](https://redirect.github.com/nodejs/node/commit/837acd7382)] - **benchmark**: add startup benchmark for ESM entrypoint (Joyee Cheung) [#61769](https://redirect.github.com/nodejs/node/pull/61769) - \[[`a6ced7d272`](https://redirect.github.com/nodejs/node/commit/a6ced7d272)] - **buffer**: improve performance of multiple Buffer operations (Ali Hassan) [#61871](https://redirect.github.com/nodejs/node/pull/61871) - \[[`a82003bf8b`](https://redirect.github.com/nodejs/node/commit/a82003bf8b)] - **buffer**: optimize buffer.concat performance (Mert Can Altin) [#61721](https://redirect.github.com/nodejs/node/pull/61721) - \[[`83dfd0be1d`](https://redirect.github.com/nodejs/node/commit/83dfd0be1d)] - **buffer**: disallow ArrayBuffer transfer on pooled buffer (Chengzhong Wu) [#61372](https://redirect.github.com/nodejs/node/pull/61372) - \[[`ed2d0cb1bf`](https://redirect.github.com/nodejs/node/commit/ed2d0cb1bf)] - **build**: support empty libname flags in `configure.py` (Antoine du Hamel) [#62477](https://redirect.github.com/nodejs/node/pull/62477) - \[[`09f7920267`](https://redirect.github.com/nodejs/node/commit/09f7920267)] - **build**: fix timezone-update path references (Chengzhong Wu) [#62280](https://redirect.github.com/nodejs/node/pull/62280) - \[[`af46b15b91`](https://redirect.github.com/nodejs/node/commit/af46b15b91)] - **build**: use path-ignore in GHA coverage-windows.yml (Chengzhong Wu) [#61811](https://redirect.github.com/nodejs/node/pull/61811) - \[[`2cf77eadd1`](https://redirect.github.com/nodejs/node/commit/2cf77eadd1)] - **build**: generate\_config\_gypi.py generates valid JSON (Shelley Vohr) [#61791](https://redirect.github.com/nodejs/node/pull/61791) - \[[`e0220f0c35`](https://redirect.github.com/nodejs/node/commit/e0220f0c35)] - **build**: build with v8 gdbjit support on supported platform (Joyee Cheung) [#61010](https://redirect.github.com/nodejs/node/pull/61010) - \[[`5505511dcb`](https://redirect.github.com/nodejs/node/commit/5505511dcb)] - **build**: enable -DV8\_ENABLE\_CHECKS flag (Ryuhei Shima) [#61327](https://redirect.github.com/nodejs/node/pull/61327) - \[[`5f8ecf3940`](https://redirect.github.com/nodejs/node/commit/5f8ecf3940)] - **build**: add --debug-symbols to build with -g without enabling DCHECKs (Joyee Cheung) [#61100](https://redirect.github.com/nodejs/node/pull/61100) - \[[`ab18c0867b`](https://redirect.github.com/nodejs/node/commit/ab18c0867b)] - **build**: fix --node-builtin-modules-path (Filip Skokan) [#62115](https://redirect.github.com/nodejs/node/pull/62115) - \[[`bfa60d5782`](https://redirect.github.com/nodejs/node/commit/bfa60d5782)] - **build**: fix GN for new merve dep (Shelley Vohr) [#61984](https://redirect.github.com/nodejs/node/pull/61984) - \[[`0d1975fe3a`](https://redirect.github.com/nodejs/node/commit/0d1975fe3a)] - **build,win**: add WinGet Visual Studio 2022 Build Tools Edition config (Mike McCready) [#61652](https://redirect.github.com/nodejs/node/pull/61652) - \[[`10b2bb5fa6`](https://redirect.github.com/nodejs/node/commit/10b2bb5fa6)] - **child\_process**: add tracing channel for spawn (Marco) [#61836](https://redirect.github.com/nodejs/node/pull/61836) - \[[`3d87ecacbc`](https://redirect.github.com/nodejs/node/commit/3d87ecacbc)] - **(SEMVER-MINOR)** **cli**: add --max-heap-size option (tannal) [#58708](https://redirect.github.com/nodejs/node/pull/58708) - \[[`83c38672f7`](https://redirect.github.com/nodejs/node/commit/83c38672f7)] - **cli**: add --require-module/--no-require-module (Joyee Cheung) [#60959](https://redirect.github.com/nodejs/node/pull/60959) - \[[`9d37233824`](https://redirect.github.com/nodejs/node/commit/9d37233824)] - **crypto**: update root certificates to NSS 3.121 (Node.js GitHub Bot) [#62485](https://redirect.github.com/nodejs/node/pull/62485) - \[[`b0cbfe38a4`](https://redirect.github.com/nodejs/node/commit/b0cbfe38a4)] - **crypto**: add crypto::GetSSLCtx API for addon access to OpenSSL contexts (Tim Perry) [#62254](https://redirect.github.com/nodejs/node/pull/62254) - \[[`dc034a4ac9`](https://redirect.github.com/nodejs/node/commit/dc034a4ac9)] - **crypto**: reject ML-KEM/ML-DSA [PKCS#8](https://redirect.github.com/PKCS/node/issues/8) import without seed in SubtleCrypto (Filip Skokan) [#62218](https://redirect.github.com/nodejs/node/pull/62218) - \[[`8aa6e706df`](https://redirect.github.com/nodejs/node/commit/8aa6e706df)] - **crypto**: refactor WebCrypto AEAD algorithms auth tag handling (Filip Skokan) [#62169](https://redirect.github.com/nodejs/node/pull/62169) - \[[`20cb932bcf`](https://redirect.github.com/nodejs/node/commit/20cb932bcf)] - **crypto**: read algorithm name property only once in normalizeAlgorithm (Filip Skokan) [#62170](https://redirect.github.com/nodejs/node/pull/62170) - \[[`e2934162b4`](https://redirect.github.com/nodejs/node/commit/e2934162b4)] - **crypto**: add missing AES dictionaries (Filip Skokan) [#62099](https://redirect.github.com/nodejs/node/pull/62099) - \[[`8b8db52f65`](https://redirect.github.com/nodejs/node/commit/8b8db52f65)] - **crypto**: fix importKey required argument count check (Filip Skokan) [#62099](https://redirect.github.com/nodejs/node/pull/62099) - \[[`bd5458db29`](https://redirect.github.com/nodejs/node/commit/bd5458db29)] - **crypto**: fix missing nullptr check on RSA\_new() (ndossche) [#61888](https://redirect.github.com/nodejs/node/pull/61888) - \[[`7302c7ed22`](https://redirect.github.com/nodejs/node/commit/7302c7ed22)] - **crypto**: fix handling of null BUF\_MEM\* in ToV8Value() (Nora Dossche) [#61885](https://redirect.github.com/nodejs/node/pull/61885) - \[[`8d0c22ea20`](https://redirect.github.com/nodejs/node/commit/8d0c22ea20)] - **crypto**: fix potential null pointer dereference when BIO\_meth\_new() fails (Nora Dossche) [#61788](https://redirect.github.com/nodejs/node/pull/61788) - \[[`72aad8b40f`](https://redirect.github.com/nodejs/node/commit/72aad8b40f)] - **crypto**: always return certificate serial numbers as uppercase (Anna Henningsen) [#61752](https://redirect.github.com/nodejs/node/pull/61752) - \[[`2395fc0f4d`](https://redirect.github.com/nodejs/node/commit/2395fc0f4d)] - **crypto**: rename CShakeParams and KmacParams length to outputLength (Filip Skokan) [#61875](https://redirect.github.com/nodejs/node/pull/61875) - \[[`541be3aaf2`](https://redirect.github.com/nodejs/node/commit/541be3aaf2)] - **crypto**: recognize raw formats in keygen (Filip Skokan) [#62480](https://redirect.github.com/nodejs/node/pull/62480) - \[[`54ef940e01`](https://redirect.github.com/nodejs/node/commit/54ef940e01)] - **(SEMVER-MINOR)** **crypto**: add raw key formats support to the KeyObject APIs (Filip Skokan) [#62240](https://redirect.github.com/nodejs/node/pull/62240) - \[[`bef1949823`](https://redirect.github.com/nodejs/node/commit/bef1949823)] - **deps**: V8: cherry-pick [`33e7739`](https://redirect.github.com/nodejs/node/commit/33e7739c134d) (Thibaud Michaud) [#62567](https://redirect.github.com/nodejs/node/pull/62567) - \[[`2e1a565a55`](https://redirect.github.com/nodejs/node/commit/2e1a565a55)] - **deps**: update ada to 3.4.4 (Node.js GitHub Bot) [#62414](https://redirect.github.com/nodejs/node/pull/62414) - \[[`d0418bad10`](https://redirect.github.com/nodejs/node/commit/d0418bad10)] - **deps**: update timezone to 2026a (Node.js GitHub Bot) [#62164](https://redirect.github.com/nodejs/node/pull/62164) - \[[`53aad66415`](https://redirect.github.com/nodejs/node/commit/53aad66415)] - **deps**: update googletest to [`2461743`](https://redirect.github.com/nodejs/node/commit/2461743991f9aa53e9a3625eafcbacd81a3c74cd) (Node.js GitHub Bot) [#62484](https://redirect.github.com/nodejs/node/pull/62484) - \[[`90fab71a84`](https://redirect.github.com/nodejs/node/commit/90fab71a84)] - **deps**: update simdjson to 4.5.0 (Node.js GitHub Bot) [#62382](https://redirect.github.com/nodejs/node/pull/62382) - \[[`a416ddf6d9`](https://redirect.github.com/nodejs/node/commit/a416ddf6d9)] - **deps**: V8: cherry-pick [`cf1bce4`](https://redirect.github.com/nodejs/node/commit/cf1bce40a5ef) (Richard Lau) [#62449](https://redirect.github.com/nodejs/node/pull/62449) - \[[`4d9123e57d`](https://redirect.github.com/nodejs/node/commit/4d9123e57d)] - **deps**: upgrade npm to 11.12.1 (npm team) [#62448](https://redirect.github.com/nodejs/node/pull/62448) - \[[`952d715028`](https://redirect.github.com/nodejs/node/commit/952d715028)] - **deps**: update sqlite to 3.51.3 (Node.js GitHub Bot) [#62256](https://redirect.github.com/nodejs/node/pull/62256) - \[[`f3fd7ed426`](https://redirect.github.com/nodejs/node/commit/f3fd7ed426)] - **deps**: update googletest to [`73a63ea`](https://redirect.github.com/nodejs/node/commit/73a63ea05dc8ca29ec1d2c1d66481dd0de1950f1) (Node.js GitHub Bot) [#61927](https://redirect.github.com/nodejs/node/pull/61927) - \[[`71a2f82d7c`](https://redirect.github.com/nodejs/node/commit/71a2f82d7c)] - **deps**: upgrade npm to 11.11.1 (npm team) [#62216](https://redirect.github.com/nodejs/node/pull/62216) - \[[`84f60c26f7`](https://redirect.github.com/nodejs/node/commit/84f60c26f7)] - **deps**: update amaro to 1.1.8 (Node.js GitHub Bot) [#62151](https://redirect.github.com/nodejs/node/pull/62151) - \[[`43159d0e5f`](https://redirect.github.com/nodejs/node/commit/43159d0e5f)] - **deps**: update sqlite to 3.52.0 (Node.js GitHub Bot) [#62150](https://redirect.github.com/nodejs/node/pull/62150) - \[[`b887657b38`](https://redirect.github.com/nodejs/node/commit/b887657b38)] - **deps**: V8: cherry-pick [`aa0b288`](https://redirect.github.com/nodejs/node/commit/aa0b288f87cc) (Richard Lau) [#62136](https://redirect.github.com/nodejs/node/pull/62136) - \[[`7ab885b323`](https://redirect.github.com/nodejs/node/commit/7ab885b323)] - **deps**: update ada to 3.4.3 (Node.js GitHub Bot) [#62049](https://redirect.github.com/nodejs/node/pull/62049) - \[[`671ddec2b9`](https://redirect.github.com/nodejs/node/commit/671ddec2b9)] - **deps**: update minimatch to 10.2.4 (Node.js GitHub Bot) [#62016](https://redirect.github.com/nodejs/node/pull/62016) - \[[`290fe37d4d`](https://redirect.github.com/nodejs/node/commit/290fe37d4d)] - **deps**: update simdjson to 4.3.1 (Node.js GitHub Bot) [#61930](https://redirect.github.com/nodejs/node/pull/61930) - \[[`a13bee76b5`](https://redirect.github.com/nodejs/node/commit/a13bee76b5)] - **deps**: update acorn-walk to 8.3.5 (Node.js GitHub Bot) [#61928](https://redirect.github.com/nodejs/node/pull/61928) - \[[`f0e40b35b9`](https://redirect.github.com/nodejs/node/commit/f0e40b35b9)] - **deps**: update acorn to 8.16.0 (Node.js GitHub Bot) [#61925](https://redirect.github.com/nodejs/node/pull/61925) - \[[`463dfa023a`](https://redirect.github.com/nodejs/node/commit/463dfa023a)] - **deps**: update minimatch to 10.2.2 (Node.js GitHub Bot) [#61830](https://redirect.github.com/nodejs/node/pull/61830) - \[[`4b2e4bb108`](https://redirect.github.com/nodejs/node/commit/4b2e4bb108)] - **deps**: update nbytes to 0.1.3 (Node.js GitHub Bot) [#61879](https://redirect.github.com/nodejs/node/pull/61879) - \[[`5626cb83d0`](https://redirect.github.com/nodejs/node/commit/5626cb83d0)] - **deps**: remove stale OpenSSL arch configs (René) [#61834](https://redirect.github.com/nodejs/node/pull/61834) - \[[`52668874fd`](https://redirect.github.com/nodejs/node/commit/52668874fd)] - **deps**: update llhttp to 9.3.1 (Node.js GitHub Bot) [#61827](https://redirect.github.com/nodejs/node/pull/61827) - \[[`b3387b07b1`](https://redirect.github.com/nodejs/node/commit/b3387b07b1)] - **deps**: update googletest to [`5a9c3f9`](https://redirect.github.com/nodejs/node/commit/5a9c3f9e8d9b90bbbe8feb32902146cb8f7c1757) (Node.js GitHub Bot) [#61731](https://redirect.github.com/nodejs/node/pull/61731) - \[[`196268cb4c`](https://redirect.github.com/nodejs/node/commit/196268cb4c)] - **deps**: V8: cherry-pick [`c5ff7c4`](https://redirect.github.com/nodejs/node/commit/c5ff7c4d6cde) (Chengzhong Wu) [#61372](https://redirect.github.com/nodejs/node/pull/61372) - \[[`36869b52de`](https://redirect.github.com/nodejs/node/commit/36869b52de)] - **deps**: update merve to 1.2.2 (Node.js GitHub Bot) [#62213](https://redirect.github.com/nodejs/node/pull/62213) - \[[`3cbac055de`](https://redirect.github.com/nodejs/node/commit/3cbac055de)] - **deps**: update merve to 1.2.0 (Node.js GitHub Bot) [#62149](https://redirect.github.com/nodejs/node/pull/62149) - \[[`7757cc3495`](https://redirect.github.com/nodejs/node/commit/7757cc3495)] - **deps**: V8: backport [`6a0a25a`](https://redirect.github.com/nodejs/node/commit/6a0a25abaed3) (Vivian Wang) [#61670](https://redirect.github.com/nodejs/node/pull/61670) - \[[`359797c2fb`](https://redirect.github.com/nodejs/node/commit/359797c2fb)] - **deps,src**: prepare for cpplint update (Michaël Zasso) [#60901](https://redirect.github.com/nodejs/node/pull/60901) - \[[`ace802e59b`](https://redirect.github.com/nodejs/node/commit/ace802e59b)] - **diagnostics\_channel**: add diagnostics channels for web locks (Ilyas Shabi) [#62123](https://redirect.github.com/nodejs/node/pull/62123) - \[[`a072411b03`](https://redirect.github.com/nodejs/node/commit/a072411b03)] - **doc**: remove spawn with shell example from bat/cmd section (Kit Dallege) [#62243](https://redirect.github.com/nodejs/node/pull/62243) - \[[`0b152449af`](https://redirect.github.com/nodejs/node/commit/0b152449af)] - **doc**: fix typo in --disable-wasm-trap-handler description (Dmytro Semchuk) [#61820](https://redirect.github.com/nodejs/node/pull/61820) - \[[`73ea387ad7`](https://redirect.github.com/nodejs/node/commit/73ea387ad7)] - **doc**: remove obsolete Boxstarter automated install (Mike McCready) [#61785](https://redirect.github.com/nodejs/node/pull/61785) - \[[`7f234add8e`](https://redirect.github.com/nodejs/node/commit/7f234add8e)] - **doc**: deprecate `module.register()` (DEP0205) (Geoffrey Booth) [#62395](https://redirect.github.com/nodejs/node/pull/62395) - \[[`12fc3c6a30`](https://redirect.github.com/nodejs/node/commit/12fc3c6a30)] - **doc**: clarify that features cannot be both experimental and deprecated (Antoine du Hamel) [#62456](https://redirect.github.com/nodejs/node/pull/62456) - \[[`1ecc5962a2`](https://redirect.github.com/nodejs/node/commit/1ecc5962a2)] - **doc**: fix 'transfered' typo in quic.md (lilianakatrina684-a11y) [#62492](https://redirect.github.com/nodejs/node/pull/62492) - \[[`56741a1303`](https://redirect.github.com/nodejs/node/commit/56741a1303)] - **doc**: move sqlite type conversion section to correct level (René) [#62482](https://redirect.github.com/nodejs/node/pull/62482) - \[[`12b04d17d5`](https://redirect.github.com/nodejs/node/commit/12b04d17d5)] - **doc**: add Rafael to last security release steward (Rafael Gonzaga) [#62423](https://redirect.github.com/nodejs/node/pull/62423) - \[[`c4567e4a8d`](https://redirect.github.com/nodejs/node/commit/c4567e4a8d)] - **doc**: fix overstated Date header requirement in response.sendDate (Kit Dallege) [#62206](https://redirect.github.com/nodejs/node/pull/62206) - \[[`384a41047f`](https://redirect.github.com/nodejs/node/commit/384a41047f)] - **doc**: enhance clarification about the main field (Mowafak Almahaini) [#62302](https://redirect.github.com/nodejs/node/pull/62302) - \[[`93d19b1a1c`](https://redirect.github.com/nodejs/node/commit/93d19b1a1c)] - **doc**: minor typo fix (Jeff Matson) [#62358](https://redirect.github.com/nodejs/node/pull/62358) - \[[`3db35d2c59`](https://redirect.github.com/nodejs/node/commit/3db35d2c59)] - **doc**: add path to vulnerabilities.json mention (Rafael Gonzaga) [#62355](https://redirect.github.com/nodejs/node/pull/62355) - \[[`57b105c9d5`](https://redirect.github.com/nodejs/node/commit/57b105c9d5)] - **doc**: deprecate CryptoKey use in node:crypto (Filip Skokan) [#62321](https://redirect.github.com/nodejs/node/pull/62321) - \[[`490168c993`](https://redirect.github.com/nodejs/node/commit/490168c993)] - **doc**: fix small environment\_variables typo (chris) [#62279](https://redirect.github.com/nodejs/node/pull/62279) - \[[`0291be584b`](https://redirect.github.com/nodejs/node/commit/0291be584b)] - **doc**: test and test-only targets do not run linter (Xavier Stouder) [#62120](https://redirect.github.com/nodejs/node/pull/62120) - \[[`ba0a82a1e1`](https://redirect.github.com/nodejs/node/commit/ba0a82a1e1)] - **doc**: clarify fs.ReadStream and fs.WriteStream are not constructable (Kit Dallege) [#62208](https://redirect.github.com/nodejs/node/pull/62208) - \[[`125bdbf504`](https://redirect.github.com/nodejs/node/commit/125bdbf504)] - **doc**: clarify that any truthy value of `shell` is part of DEP0190 (Antoine du Hamel) [#62249](https://redirect.github.com/nodejs/node/pull/62249) - \[[`a141ad0aeb`](https://redirect.github.com/nodejs/node/commit/a141ad0aeb)] - **doc**: remove outdated Chrome 66 and ndb references from debugger (Kit Dallege) [#62202](https://redirect.github.com/nodejs/node/pull/62202) - \[[`44bde8e573`](https://redirect.github.com/nodejs/node/commit/44bde8e573)] - **doc**: add note (and caveat) for `mock.module` about customization hooks (Jacob Smith) [#62075](https://redirect.github.com/nodejs/node/pull/62075) - \[[`8c46a1ca1a`](https://redirect.github.com/nodejs/node/commit/8c46a1ca1a)] - **doc**: copyedit `addons.md` (Antoine du Hamel) [#62071](https://redirect.github.com/nodejs/node/pull/62071) - \[[`7f989f02f7`](https://redirect.github.com/nodejs/node/commit/7f989f02f7)] - **doc**: correct `util.convertProcessSignalToExitCode` validation behavior (René) [#62134](https://redirect.github.com/nodejs/node/pull/62134) - \[[`a4466ebdac`](https://redirect.github.com/nodejs/node/commit/a4466ebdac)] - **doc**: add efekrskl as triager (Efe) [#61876](https://redirect.github.com/nodejs/node/pull/61876) - \[[`db516eca3a`](https://redirect.github.com/nodejs/node/commit/db516eca3a)] - **doc**: fix markdown for `expectFailure` values (Jacob Smith) [#62100](https://redirect.github.com/nodejs/node/pull/62100) - \[[`ad97045125`](https://redirect.github.com/nodejs/node/commit/ad97045125)] - **doc**: include url.resolve() in DEP0169 application deprecation (Mike McCready) [#62002](https://redirect.github.com/nodejs/node/pull/62002) - \[[`309f37ba42`](https://redirect.github.com/nodejs/node/commit/309f37ba42)] - **doc**: expand SECURITY.md with non-vulnerability examples (Rafael Gonzaga) [#61972](https://redirect.github.com/nodejs/node/pull/61972) - \[[`dbb3551b7b`](https://redirect.github.com/nodejs/node/commit/dbb3551b7b)] - **doc**: separate in-types and out-types in SQLite conversion docs (René) [#62034](https://redirect.github.com/nodejs/node/pull/62034) - \[[`191c433db8`](https://redirect.github.com/nodejs/node/commit/191c433db8)] - **doc**: fix small logic error in DETECT\_MODULE\_SYNTAX (René) [#62025](https://redirect.github.com/nodejs/node/pull/62025) - \[[`8511b1c784`](https://redirect.github.com/nodejs/node/commit/8511b1c784)] - **doc**: fix module.stripTypeScriptTypes indentation (René) [#61992](https://redirect.github.com/nodejs/node/pull/61992) - \[[`dd1139f52c`](https://redirect.github.com/nodejs/node/commit/dd1139f52c)] - **doc**: update DEP0040 (punycode) to application type deprecation (Mike McCready) [#61916](https://redirect.github.com/nodejs/node/pull/61916) - \[[`54009e9c62`](https://redirect.github.com/nodejs/node/commit/54009e9c62)] - **doc**: explicitly mention Slack handle (Rafael Gonzaga) [#61986](https://redirect.github.com/nodejs/node/pull/61986) - \[[`78fa1a1a49`](https://redirect.github.com/nodejs/node/commit/78fa1a1a49)] - **doc**: support toolchain Visual Studio 2022 & 2026 + Windows 11 SDK (Mike McCready) [#61864](https://redirect.github.com/nodejs/node/pull/61864) - \[[`d8204d3cdb`](https://redirect.github.com/nodejs/node/commit/d8204d3cdb)] - **doc**: rename invalid `function` parameter (René) [#61942](https://redirect.github.com/nodejs/node/pull/61942) - \[[`a5a14482fb`](https://redirect.github.com/nodejs/node/commit/a5a14482fb)] - **doc**: clarify status of feature request issues (Antoine du Hamel) [#61505](https://redirect.github.com/nodejs/node/pull/61505) - \[[`bd0688feb6`](https://redirect.github.com/nodejs/node/commit/bd0688feb6)] - **doc**: add esm and cjs examples to node:vm (Alfredo González) [#61498](https://redirect.github.com/nodejs/node/pull/61498) - \[[`240b512f9f`](https://redirect.github.com/nodejs/node/commit/240b512f9f)] - **doc**: clarify build environment is trusted in threat model (Matteo Collina) [#61865](https://redirect.github.com/nodejs/node/pull/61865) - \[[`5dd48e3456`](https://redirect.github.com/nodejs/node/commit/5dd48e3456)] - **doc**: remove incorrect mention of `module` in `typescript.md` (Rob Palmer) [#61839](https://redirect.github.com/nodejs/node/pull/61839) - \[[`9502c22055`](https://redirect.github.com/nodejs/node/commit/9502c22055)] - **doc**: simplify addAbortListener example (Chemi Atlow) [#61842](https://redirect.github.com/nodejs/node/pull/61842) - \[[`6fec397828`](https://redirect.github.com/nodejs/node/commit/6fec397828)] - **doc**: clean up globals.md (René) [#61822](https://redirect.github.com/nodejs/node/pull/61822) - \[[`a810f5ccef`](https://redirect.github.com/nodejs/node/commit/a810f5ccef)] - **doc**: clarify async caveats for `events.once()` (René) [#61572](https://redirect.github.com/nodejs/node/pull/61572) - \[[`2bf990bb1a`](https://redirect.github.com/nodejs/node/commit/2bf990bb1a)] - **doc**: update Juan's security steward info (Juan José) [#61754](https://redirect.github.com/nodejs/node/pull/61754) - \[[`0312db948d`](https://redirect.github.com/nodejs/node/commit/0312db948d)] - **doc**: fix methods being documented as properties in `process.md` (Antoine du Hamel) [#61765](https://redirect.github.com/nodejs/node/pull/61765) - \[[`e558b26e7f`](https://redirect.github.com/nodejs/node/commit/e558b26e7f)] - **doc**: add riscv64 info into platform list (Lu Yahan) [#42251](https://redirect.github.com/nodejs/node/pull/42251) - \[[`49254e3dc0`](https://redirect.github.com/nodejs/node/commit/49254e3dc0)] - **doc**: fix dropdown menu being obscured at <600px due to stacking context (Jeff) [#61735](https://redirect.github.com/nodejs/node/pull/61735) - \[[`4ff01b5c10`](https://redirect.github.com/nodejs/node/commit/4ff01b5c10)] - **doc**: fix spacing in process message event (Aviv Keller) [#61756](https://redirect.github.com/nodejs/node/pull/61756) - \[[`94097a79d6`](https://redirect.github.com/nodejs/node/commit/94097a79d6)] - **doc**: move describe/it aliases section before expectFailure (Luca Raveri) [#61567](https://redirect.github.com/nodejs/node/pull/61567) - \[[`b7cd31acbe`](https://redirect.github.com/nodejs/node/commit/b7cd31acbe)] - **doc**: fix broken links of net.md (YuSheng Chen) [#61673](https://redirect.github.com/nodejs/node/pull/61673) - \[[`ae5e353fe2`](https://redirect.github.com/nodejs/node/commit/ae5e353fe2)] - **doc**: clean up Windows code snippet in `child_process.md` (reillylm) [#61422](https://redirect.github.com/nodejs/node/pull/61422) - \[[`ea9beb6a3c`](https://redirect.github.com/nodejs/node/commit/ea9beb6a3c)] - **doc**: update to Visual Studio 2026 manual install (Mike McCready) [#61655](https://redirect.github.com/nodejs/node/pull/61655) - \[[`42057c84e2`](https://redirect.github.com/nodejs/node/commit/42057c84e2)] - **doc,module**: add missing doc for syncHooks.deregister() (Joyee Cheung) [#61959](https://redirect.github.com/nodejs/node/pull/61959) - \[[`a035bd5235`](https://redirect.github.com/nodejs/node/commit/a035bd5235)] - **doc,test**: clarify --eval syntax for leading '-' scripts (kovan) [#62244](https://redirect.github.com/nodejs/node/pull/62244) - \[[`deb0b78460`](https://redirect.github.com/nodejs/node/commit/deb0b78460)] - **esm**: fix typo in worker loader hook comment (jakecastelli) [#62475](https://redirect.github.com/nodejs/node/pull/62475) - \[[`b93bf7dbfc`](https://redirect.github.com/nodejs/node/commit/b93bf7dbfc)] - **esm**: fix source phase identity bug in loadCache eviction (Guy Bedford) [#62415](https://redirect.github.com/nodejs/node/pull/62415) - \[[`679d18b57f`](https://redirect.github.com/nodejs/node/commit/679d18b57f)] - **esm**: fix path normalization in `finalizeResolution` (Antoine du Hamel) [#62080](https://redirect.github.com/nodejs/node/pull/62080) - \[[`171e9fc268`](https://redirect.github.com/nodejs/node/commit/171e9fc268)] - **esm**: update outdated FIXME comment in translators.js (Karan Mangtani) [#61715](https://redirect.github.com/nodejs/node/pull/61715) - \[[`cc19728228`](https://redirect.github.com/nodejs/node/commit/cc19728228)] - **events**: avoid cloning listeners array on every emit (Gürgün Dayıoğlu) [#62261](https://redirect.github.com/nodejs/node/pull/62261) - \[[`458c92be52`](https://redirect.github.com/nodejs/node/commit/458c92be52)] - **events**: don't call resume after close (Сковорода Никита Андреевич) [#60548](https://redirect.github.com/nodejs/node/pull/60548) - \[[`4691f3e7fb`](https://redirect.github.com/nodejs/node/commit/4691f3e7fb)] - **fs**: fix cpSync to handle non-ASCII characters (Stefan Stojanovic) [#61950](https://redirect.github.com/nodejs/node/pull/61950) - \[[`f4a3edc47a`](https://redirect.github.com/nodejs/node/commit/f4a3edc47a)] - **(SEMVER-MINOR)** **fs**: add `throwIfNoEntry` option for fs.stat and fs.promises.stat (Juan José) [#61178](https://redirect.github.com/nodejs/node/pull/61178) - \[[`58e4d50cd0`](https://redirect.github.com/nodejs/node/commit/58e4d50cd0)] - **http**: fix use-after-free when freeParser is called during llhttp\_execute (Gerhard Stöbich) [#62095](https://redirect.github.com/nodejs/node/pull/62095) - \[[`0a4ad85ab0`](https://redirect.github.com/nodejs/node/commit/0a4ad85ab0)] - **http**: validate ClientRequest path on set (Matteo Collina) [#62030](https://redirect.github.com/nodejs/node/pull/62030) - \[[`f8178ac3e6`](https://redirect.github.com/nodejs/node/commit/f8178ac3e6)] - **http**: validate headers in writeEarlyHints (Richard Clarke) [#61897](https://redirect.github.com/nodejs/node/pull/61897) - \[[`899884d0ed`](https://redirect.github.com/nodejs/node/commit/899884d0ed)] - **http**: remove redundant keepAliveTimeoutBuffer assignment (Efe) [#61743](https://redirect.github.com/nodejs/node/pull/61743) - \[[`08d2e40694`](https://redirect.github.com/nodejs/node/commit/08d2e40694)] - **http**: attach error handler to socket synchronously in onSocket (RajeshKumar11) [#61770](https://redirect.github.com/nodejs/node/pull/61770) - \[[`1c2064c1f8`](https://redirect.github.com/nodejs/node/commit/1c2064c1f8)] - **http**: fix keep-alive socket reuse race in requestOnFinish (Martin Slota) [#61710](https://redirect.github.com/nodejs/node/pull/61710) - \[[`38e9c66e0f`](https://redirect.github.com/nodejs/node/commit/38e9c66e0f)] - **http2**: add strictSingleValueFields option to relax header validation (Tim Perry) [#59917](https://redirect.github.com/nodejs/node/pull/59917) - \[[`5cdcba17cc`](https://redirect.github.com/nodejs/node/commit/5cdcba17cc)] - **(SEMVER-MINOR)** **http2**: add http1Options for HTTP/1 fallback configuration (Amol Yadav) [#61713](https://redirect.github.com/nodejs/node/pull/61713) - \[[`687c0acd00`](https://redirect.github.com/nodejs/node/commit/687c0acd00)] - **http2**: fix FileHandle leak in respondWithFile (sangwook) [#61707](https://redirect.github.com/nodejs/node/pull/61707) - \[[`0c8f802ec2`](https://redirect.github.com/nodejs/node/commit/0c8f802ec2)] - **inspector**: add Target.getTargets and extract TargetManager (Kohei) [#62487](https://redirect.github.com/nodejs/node/pull/62487) - \[[`7de8a303c1`](https://redirect.github.com/nodejs/node/commit/7de8a303c1)] - **inspector**: unwrap internal/debugger/inspect imports (René) [#61974](https://redirect.github.com/nodejs/node/pull/61974) - \[[`59ac10a4fd`](https://redirect.github.com/nodejs/node/commit/59ac10a4fd)] - **lib**: make SubtleCrypto.supports enumerable (Filip Skokan) [#62307](https://redirect.github.com/nodejs/node/pull/62307) - \[[`9dc102ba90`](https://redirect.github.com/nodejs/node/commit/9dc102ba90)] - **lib**: prefer primordials in SubtleCrypto (Filip Skokan) [#62226](https://redirect.github.com/nodejs/node/pull/62226) - \[[`78a9aa8f32`](https://redirect.github.com/nodejs/node/commit/78a9aa8f32)] - **lib**: fix source map url parse in dynamic imports (Chengzhong Wu) [#61990](https://redirect.github.com/nodejs/node/pull/61990) - \[[`16b8cc6643`](https://redirect.github.com/nodejs/node/commit/16b8cc6643)] - **lib**: improve argument handling in Blob constructor (Ms2ger) [#61980](https://redirect.github.com/nodejs/node/pull/61980) - \[[`a03b5d39b8`](https://redirect.github.com/nodejs/node/commit/a03b5d39b8)] - **lib**: reduce cycles in esm loader and load it in snapshot (Joyee Cheung) [#61769](https://redirect.github.com/nodejs/node/pull/61769) - \[[`1017bf5f86`](https://redirect.github.com/nodejs/node/commit/1017bf5f86)] - **lib**: remove top-level getOptionValue() calls in lib/internal/modules (Joyee Cheung) [#61769](https://redirect.github.com/nodejs/node/pull/61769) - \[[`d79984b41b`](https://redirect.github.com/nodejs/node/commit/d79984b41b)] - **lib**: optimize styleText when validateStream is false (Rafael Gonzaga) [#61792](https://redirect.github.com/nodejs/node/pull/61792) - \[[`6462b89d10`](https://redirect.github.com/nodejs/node/commit/6462b89d10)] - **meta**: bump actions/download-artifact from 7.0.0 to 8.0.0 (dependabot\[bot]) [#62063](https://redirect.github.com/nodejs/node/pull/62063) - \[[`5bb89916ea`](https://redirect.github.com/nodejs/node/commit/5bb89916ea)] - **meta**: bump actions/upload-artifact from 6.0.0 to 7.0.0 (dependabot\[bot]) [#62062](https://redirect.github.com/nodejs/node/pull/62062) - \[[`b067d74d94`](https://redirect.github.com/nodejs/node/commit/b067d74d94)] - **meta**: bump step-security/harden-runner from 2.14.2 to 2.15.0 (dependabot\[bot]) [#62064](https://redirect.github.com/nodejs/node/pull/62064) - \[[`830e5cd125`](https://redirect.github.com/nodejs/node/commit/830e5cd125)] - **meta**: bump github/codeql-action from 4.32.0 to 4.32.4 (dependabot\[bot]) [#61911](https://redirect.github.com/nodejs/node/pull/61911) - \[[`16c839a3dd`](https://redirect.github.com/nodejs/node/commit/16c839a3dd)] - **meta**: bump step-security/harden-runner from 2.14.1 to 2.14.2 (dependabot\[bot]) [#61909](https://redirect.github.com/nodejs/node/pull/61909) - \[[`498abf661e`](https://redirect.github.com/nodejs/node/commit/498abf661e)] - **meta**: bump actions/stale from 10.1.1 to 10.2.0 (dependabot\[bot]) [#61908](https://redirect.github.com/nodejs/node/pull/61908) - \[[`78ac17f426`](https://redirect.github.com/nodejs/node/commit/78ac17f426)] - **module**: fix coverage of mocked CJS modules imported from ESM (Marco) [#62133](https://redirect.github.com/nodejs/node/pull/62133) - \[[`46cfad4138`](https://redirect.github.com/nodejs/node/commit/46cfad4138)] - **module**: run require.resolve through module.registerHooks() (Joyee Cheung) [#62028](https://redirect.github.com/nodejs/node/pull/62028) - \[[`8b6be3fe14`](https://redirect.github.com/nodejs/node/commit/8b6be3fe14)] - **module**: mark require(esm) as stable (Joyee Cheung) [#60959](https://redirect.github.com/nodejs/node/pull/60959) - \[[`68fbc0c6cc`](https://redirect.github.com/nodejs/node/commit/68fbc0c6cc)] - **module**: mark module compile cache as stable (Joyee Cheung) [#60971](https://redirect.github.com/nodejs/node/pull/60971) - \[[`c851e76f8c`](https://redirect.github.com/nodejs/node/commit/c851e76f8c)] - **(SEMVER-MINOR)** **net**: add `setTOS` and `getTOS` to `Socket` (Amol Yadav) [#61503](https://redirect.github.com/nodejs/node/pull/61503) - \[[`4c206ecb31`](https://redirect.github.com/nodejs/node/commit/4c206ecb31)] - **quic**: remove CryptoKey support from session keys option (Filip Skokan) [#62335](https://redirect.github.com/nodejs/node/pull/62335) - \[[`2f9c085cf5`](https://redirect.github.com/nodejs/node/commit/2f9c085cf5)] - **sqlite**: handle stmt invalidation (Guilherme Araújo) [#61877](https://redirect.github.com/nodejs/node/pull/61877) - \[[`6ac4304c87`](https://redirect.github.com/nodejs/node/commit/6ac4304c87)] - **(SEMVER-MINOR)** **sqlite**: add limits property to DatabaseSync (Mert Can Altin) [#61298](https://redirect.github.com/nodejs/node/pull/61298) - \[[`aaf9af1672`](https://redirect.github.com/nodejs/node/commit/aaf9af1672)] - **sqlite**: mark as release candidate (Matteo Collina) [#61262](https://redirect.github.com/nodejs/node/pull/61262) - \[[`7d67e5d693`](https://redirect.github.com/nodejs/node/commit/7d67e5d693)] - **src**: convert context\_frame field in AsyncWrap to internal field (Anna Henningsen) [#62103](https://redirect.github.com/nodejs/node/pull/62103) - \[[`d8ea1aaa8a`](https://redirect.github.com/nodejs/node/commit/d8ea1aaa8a)] - **src**: make AsyncWrap subclass internal field counts explicit (Anna Henningsen) [#62103](https://redirect.github.com/nodejs/node/pull/62103) - \[[`1dbf3bedbe`](https://redirect.github.com/nodejs/node/commit/1dbf3bedbe)] - **src**: improve EC JWK import performance (Filip Skokan) [#62396](https://redirect.github.com/nodejs/node/pull/62396) - \[[`cd84af747b`](https://redirect.github.com/nodejs/node/commit/cd84af747b)] - **src**: handle null backing store in ArrayBufferViewContents::Read (Mert Can Altin) [#62343](https://redirect.github.com/nodejs/node/pull/62343) - \[[`4f553cdc01`](https://redirect.github.com/nodejs/node/commit/4f553cdc01)] - **src**: enable compilation/linking with OpenSSL 4.0 (Filip Skokan) [#62410](https://redirect.github.com/nodejs/node/pull/62410) - \[[`70f8057258`](https://redirect.github.com/nodejs/node/commit/70f8057258)] - **src**: use stack allocation in indexOf latin1 path (Mert Can Altin) [#62268](https://redirect.github.com/nodejs/node/pull/62268) - \[[`d788467b6a`](https://redirect.github.com/nodejs/node/commit/d788467b6a)] - **src**: expose async context frame debugging helper to JS (Anna Henningsen) [#62103](https://redirect.github.com/nodejs/node/pull/62103) - \[[`4213f893ec`](https://redirect.github.com/nodejs/node/commit/4213f893ec)] - **src**: release context frame in AsyncWrap::EmitDestroy (Gerhard Stöbich) [#61995](https://redirect.github.com/nodejs/node/pull/61995) - \[[`79fb8cbcf5`](https://redirect.github.com/nodejs/node/commit/79fb8cbcf5)] - **src**: use validate\_ascii\_with\_errors instead of validate\_ascii (Сковорода Никита Андреевич) [#61122](https://redirect.github.com/nodejs/node/pull/61122) - \[[`2df328d59e`](https://redirect.github.com/nodejs/node/commit/2df328d59e)] - **src**: fix flags argument offset in JSUdpWrap (Weixie Cui) [#61948](https://redirect.github.com/nodejs/node/pull/61948) - \[[`eb77a7a297`](https://redirect.github.com/nodejs/node/commit/eb77a7a297)] - **(SEMVER-MINOR)** **src**: add C++ support for diagnostics channels (RafaelGSS) [#61869](https://redirect.github.com/nodejs/node/pull/61869) - \[[`6cda3d30c0`](https://redirect.github.com/nodejs/node/commit/6cda3d30c0)] - **src**: remove unnecessary `c_str()` conversions in diagnostic messages (Anna Henningsen) [#61786](https://redirect.github.com/nodejs/node/pull/61786) - \[[`26c6045363`](https://redirect.github.com/nodejs/node/commit/26c6045363)] - **src**: use bool literals in TraceEnvVarOptions (Tobias Nießen) [#61425](https://redirect.github.com/nodejs/node/pull/61425) - \[[`3c8f700fd7`](https://redirect.github.com/nodejs/node/commit/3c8f700fd7)] - **src**: track allocations made by zstd streams (Anna Henningsen) [#61717](https://redirect.github.com/nodejs/node/pull/61717) - \[[`94dbb36d4d`](https://redirect.github.com/nodejs/node/commit/94dbb36d4d)] - **src**: do not store compression methods on Brotli classes (Anna Henningsen) [#61717](https://redirect.github.com/nodejs/node/pull/61717) - \[[`bef661f182`](https://redirect.github.com/nodejs/node/commit/bef661f182)] - **src**: extract zlib allocation tracking into its own class (Anna Henningsen) [#61717](https://redirect.github.com/nodejs/node/pull/61717) - \[[`e8079a8297`](https://redirect.github.com/nodejs/node/commit/e8079a8297)] - **src**: release memory for zstd contexts in `Close()` (Anna Henningsen) [#61717](https://redirect.github.com/nodejs/node/pull/61717) - \[[`6e1197a3cc`](https://redirect.github.com/nodejs/node/commit/6e1197a3cc)] - **src**: add more checks and clarify docs for external references (Joyee Cheung) [#61719](https://redirect.github.com/nodejs/node/pull/61719) - \[[`c28a22c4be`](https://redirect.github.com/nodejs/node/commit/c28a22c4be)] - **src**: fix cjs\_lexer external reference registration (Joyee Cheung) [#61718](https://redirect.github.com/nodejs/node/pull/61718) - \[[`9e2c5fd7c9`](https://redirect.github.com/nodejs/node/commit/9e2c5fd7c9)] - **src**: simply uint32 to string as it must not fail (Chengzhong Wu) [#60846](https://redirect.github.com/nodejs/node/pull/60846) - \[[`df435d32b8`](https://redirect.github.com/nodejs/node/commit/df435d32b8)] - **src**: build v8 tick processor as built-in source text modules (Joyee Cheung) [#60518](https://redirect.github.com/nodejs/node/pull/60518) - \[[`2cb3573735`](https://redirect.github.com/nodejs/node/commit/2cb3573735)] - **src,sqlite**: fix filterFunc dangling reference (Edy Silva) [#62281](https://redirect.github.com/nodejs/node/pull/62281) - \[[`c44f53b544`](https://redirect.github.com/nodejs/node/commit/c44f53b544)] - **stream**: preserve error over AbortError in pipeline (Marco) [#62113](https://redirect.github.com/nodejs/node/pull/62113) - \[[`dc541370b4`](https://redirect.github.com/nodejs/node/commit/dc541370b4)] - **stream**: replace bind with arrow function for onwrite callback (Ali Hassan) [#62087](https://redirect.github.com/nodejs/node/pull/62087) - \[[`f6cdfbfaa7`](https://redirect.github.com/nodejs/node/commit/f6cdfbfaa7)] - **stream**: optimize webstreams pipeTo (Mattias Buelens) [#62079](https://redirect.github.com/nodejs/node/pull/62079) - \[[`fcf2a9f788`](https://redirect.github.com/nodejs/node/commit/fcf2a9f788)] - **stream**: fix brotli error handling in web compression streams (Filip Skokan) [#62107](https://redirect.github.com/nodejs/node/pull/62107) - \[[`cdec579c6b`](https://redirect.github.com/nodejs/node/commit/cdec579c6b)] - **stream**: improve Web Compression spec compliance (Filip Skokan) [#62107](https://redirect.github.com/nodejs/node/pull/62107) - \[[`dbe5898379`](https://redirect.github.com/nodejs/node/commit/dbe5898379)] - **stream**: fix UTF-8 character corruption in fast-utf8-stream (Matteo Collina) [#61745](https://redirect.github.com/nodejs/node/pull/61745) - \[[`531e62cd74`](https://redirect.github.com/nodejs/node/commit/531e62cd74)] - **stream**: fix TransformStream race on cancel with pending write (Marco) [#62040](https://redirect.github.com/nodejs/node/pull/62040) - \[[`a3751f2249`](https://redirect.github.com/nodejs/node/commit/a3751f2249)] - **stream**: accept ArrayBuffer in CompressionStream and DecompressionStream (조수민) [#61913](https://redirect.github.com/nodejs/node/pull/61913) - \[[`65aa8f68d0`](https://redirect.github.com/nodejs/node/commit/65aa8f68d0)] - **stream**: fix pipeTo to defer writes per WHATWG spec (Matteo Collina) [#61800](https://redirect.github.com/nodejs/node/pull/61800) - \[[`15f32b4935`](https://redirect.github.com/nodejs/node/commit/15f32b4935)] - **stream**: fix decoded fromList chunk boundary check (Thomas Watson) [#61884](https://redirect.github.com/nodejs/node/pull/61884) - \[[`569767e52e`](https://redirect.github.com/nodejs/node/commit/569767e52e)] - **stream**: add fast paths for webstreams read and pipeTo (Matteo Collina) [#61807](https://redirect.github.com/nodejs/node/pull/61807) - \[[`6834ca13bb`](https://redirect.github.com/nodejs/node/commit/6834ca13bb)] - **(SEMVER-MINOR)** **stream**: rename `Duplex.toWeb()` type option to `readableType` (René) [#61632](https://redirect.github.com/nodejs/node/pull/61632) - \[[`5ed5474437`](https://redirect.github.com/nodejs/node/commit/5ed5474437)] - **test**: update WPT for WebCryptoAPI to [`2cb332d`](https://redirect.github.com/nodejs/node/commit/2cb332d710) (Node.js GitHub Bot) [#62483](https://redirect.github.com/nodejs/node/pull/62483) - \[[`3c9c0f8577`](https://redirect.github.com/nodejs/node/commit/3c9c0f8577)] - **test**: fix test-buffer-zero-fill-cli to be effective (Сковорода Никита Андреевич) [#60623](https://redirect.github.com/nodejs/node/pull/60623) - \[[`19a52a1abe`](https://redirect.github.com/nodejs/node/commit/19a52a1abe)] - **test**: update WPT for url to [`fc3e651`](https://redirect.github.com/nodejs/node/commit/fc3e651593) (Node.js GitHub Bot) [#62379](https://redirect.github.com/nodejs/node/pull/62379) - \[[`111ba9bd5b`](https://redirect.github.com/nodejs/node/commit/111ba9bd5b)] - **test**: wait for reattach before initial break on restart (Yuya Inoue) [#62471](https://redirect.github.com/nodejs/node/pull/62471) - \[[`0897c6cc08`](https://redirect.github.com/nodejs/node/commit/0897c6cc08)] - **test**: disable flaky WPT Blob test on AIX (James M Snell) [#62470](https://redirect.github.com/nodejs/node/pull/62470) - \[[`1c3d93bfab`](https://redirect.github.com/nodejs/node/commit/1c3d93bfab)] - **test**: avoid flaky run wait in debugger restart test (Yuya Inoue) [#62112](https://redirect.github.com/nodejs/node/pull/62112) - \[[`83416a640a`](https://redirect.github.com/nodejs/node/commit/83416a640a)] - **test**: skip test-cluster-dgram-reuse on AIX 7.3 (Stewart X Addison) [#62238](https://redirect.github.com/nodejs/node/pull/62238) - \[[`af8d0922dd`](https://redirect.github.com/nodejs/node/commit/af8d0922dd)] - **test**: add WebCrypto Promise.prototype.then pollution regression tests (Filip Skokan) [#62226](https://redirect.github.com/nodejs/node/pull/62226) - \[[`fc9a60ec74`](https://redirect.github.com/nodejs/node/commit/fc9a60ec74)] - **test**: update WPT for WebCryptoAPI to [`6a1c545`](https://redirect.github.com/nodejs/node/commit/6a1c545d77) (Node.js GitHub Bot) [#62187](https://redirect.github.com/nodejs/node/pull/62187) - \[[`12ba2d74fe`](https://redirect.github.com/nodejs/node/commit/12ba2d74fe)] - **test**: update WPT for url to [`c928b19`](https://redirect.github.com/nodejs/node/commit/c928b19ab0) (Node.js GitHub Bot) [#62148](https://redirect.github.com/nodejs/node/pull/62148) - \[[`4e15e5b647`](https://redirect.github.com/nodejs/node/commit/4e15e5b647)] - **test**: update WPT for WebCryptoAPI to [`c9e9558`](https://redirect.github.com/nodejs/node/commit/c9e955840a) (Node.js GitHub Bot) [#62147](https://redirect.github.com/nodejs/node/pull/62147) - \[[`dc66a05558`](https://redirect.github.com/nodejs/node/commit/dc66a05558)] - **test**: improve WPT report runner (Filip Skokan) [#62107](https://redirect.github.com/nodejs/node/pull/62107) - \[[`9536e5621b`](https://redirect.github.com/nodejs/node/commit/9536e5621b)] - **test**: update WPT compression to [`ae05f5c`](https://redirect.github.com/nodejs/node/commit/ae05f5cb53) (Filip Skokan) [#62107](https://redirect.github.com/nodejs/node/pull/62107) - \[[`fb1c0bda0a`](https://redirect.github.com/nodejs/node/commit/fb1c0bda0a)] - **test**: update WPT for WebCryptoAPI to [`42e4732`](https://redirect.github.com/nodejs/node/commit/42e47329fd) (Node.js GitHub Bot) [#62048](https://redirect.github.com/nodejs/node/pull/62048) - \[[`d886f27485`](https://redirect.github.com/nodejs/node/commit/d886f27485)] - **test**: fix skipping behavior for `test-runner-run-files-undefined` (Antoine du Hamel) [#62026](https://redirect.github.com/nodejs/node/pull/62026) - \[[`f79df03e0b`](https://redirect.github.com/nodejs/node/commit/f79df03e0b)] - **test**: remove unnecessary `process.exit` calls from test files (Antoine du Hamel) [#62020](https://redirect.github.com/nodejs/node/pull/62020) - \[[`1319295467`](https://redirect.github.com/nodejs/node/commit/1319295467)] - **test**: skip `test-url` on `--shared-ada` builds (Antoine du Hamel) [#62019](https://redirect.github.com/nodejs/node/pull/62019) - \[[`2ea06727c6`](https://redirect.github.com/nodejs/node/commit/2ea06727c6)] - **test**: skip strace test with shared openssl (Richard Lau) [#61987](https://redirect.github.com/nodejs/node/pull/61987) - \[[`c0680d5df7`](https://redirect.github.com/nodejs/node/commit/c0680d5df7)] - **test**: avoid flaky debugger restart waits (Yuya Inoue) [#61773](https://redirect.github.com/nodejs/node/pull/61773) - \[[`22b748ef72`](https://redirect.github.com/nodejs/node/commit/22b748ef72)] - **test**: fix typos in test files (Daijiro Wachi) [#61408](https://redirect.github.com/nodejs/node/pull/61408) - \[[`a20bf9a84d`](https://redirect.github.com/nodejs/node/commit/a20bf9a84d)] - **test**: allow filtering async internal frames in assertSnapshot (Joyee Cheung) [#61769](https://redirect.github.com/nodejs/node/pull/61769) - \[[`ec2913f036`](https://redirect.github.com/nodejs/node/commit/ec2913f036)] - **test**: unify assertSnapshot stacktrace transform (Chengzhong Wu) [#61665](https://redirect.github.com/nodejs/node/pull/61665) - \[[`460f41233d`](https://redirect.github.com/nodejs/node/commit/460f41233d)] - **test**: check stability block position in API markdown (René) [#58590](https://redirect.github.com/nodejs/node/pull/58590) - \[[`9ad02065d5`](https://redirect.github.com/nodejs/node/commit/9ad02065d5)] - **test**: adapt buffer test for v8 sandbox (Shelley Vohr) [#61772](https://redirect.github.com/nodejs/node/pull/61772) - \[[`5cf001736e`](https://redirect.github.com/nodejs/node/commit/5cf001736e)] - **test**: update FileAPI tests from WPT (Ms2ger) [#61750](https://redirect.github.com/nodejs/node/pull/61750) - \[[`84c7a23223`](https://redirect.github.com/nodejs/node/commit/84c7a23223)] - **test**: update WPT for WebCryptoAPI to [`7cbe7e8`](https://redirect.github.com/nodejs/node/commit/7cbe7e8ed9) (Node.js GitHub Bot) [#61729](https://redirect.github.com/nodejs/node/pull/61729) - \[[`276a32fd10`](https://redirect.github.com/nodejs/node/commit/276a32fd10)] - **test**: update WPT for url to [`efb889e`](https://redirect.github.com/nodejs/node/commit/efb889eb4c) (Node.js GitHub Bot) [#61728](https://redirect.github.com/nodejs/node/pull/61728) - \[[`f5f21d36a6`](https://redirect.github.com/nodejs/node/commit/f5f21d36a6)] - **test\_runner**: add exports option for module mocks (sangwook) [#61727](https://redirect.github.com/nodejs/node/pull/61727) - \[[`bfc8a12977`](https://redirect.github.com/nodejs/node/commit/bfc8a12977)] - **test\_runner**: make it compatible with fake timers (Matteo Collina) [#59272](https://redirect.github.com/nodejs/node/pull/59272) - \[[`e0cde40e1d`](https://redirect.github.com/nodejs/node/commit/e0cde40e1d)] - **test\_runner**: set non-zero exit code when suite errors occur (Edy Silva) [#62282](https://redirect.github.com/nodejs/node/pull/62282) - \[[`d74efd6834`](https://redirect.github.com/nodejs/node/commit/d74efd6834)] - **test\_runner**: run afterEach on runtime skip (Igor Shevelenkov) [#61525](https://redirect.github.com/nodejs/node/pull/61525) - \[[`8287ca749e`](https://redirect.github.com/nodejs/node/commit/8287ca749e)] - **test\_runner**: expose expectFailure message (sangwook) [#61563](https://redirect.github.com/nodejs/node/pull/61563) - \[[`1f2025fd1e`](https://redirect.github.com/nodejs/node/commit/1f2025fd1e)] - **(SEMVER-MINOR)** **test\_runner**: expose worker ID for concurrent test execution (Ali Hassan) [#61394](https://redirect.github.com/nodejs/node/pull/61394) - \[[`b1199c7bb4`](https://redirect.github.com/nodejs/node/commit/b1199c7bb4)] - **test\_runner**: replace native methods with primordials (Ayoub Mabrouk) [#61219](https://redirect.github.com/nodejs/node/pull/61219) - \[[`1ca20fc33d`](https://redirect.github.com/nodejs/node/commit/1ca20fc33d)] - **(SEMVER-MINOR)** **test\_runner**: show interrupted test on SIGINT (Matteo Collina) [#61676](https://redirect.github.com/nodejs/node/pull/61676) - \[[`207ba4f89f`](https://redirect.github.com/nodejs/node/commit/207ba4f89f)] - **test\_runner**: fix suite rerun (Moshe Atlow) [#61775](https://redirect.github.com/nodejs/node/pull/61775) - \[[`9927335c11`](https://redirect.github.com/nodejs/node/commit/9927335c11)] - **tls**: forward keepAlive, keepAliveInitialDelay, noDelay to socket (Sergey Zelenov) [#62004](https://redirect.github.com/nodejs/node/pull/62004) - \[[`a1c3c901c0`](https://redirect.github.com/nodejs/node/commit/a1c3c901c0)] - **tools**: bump picomatch from 4.0.3 to 4.0.4 in /tools/eslint (dependabot\[bot]) [#62439](https://redirect.github.com/nodejs/node/pull/62439) - \[[`1c6f5ed7c2`](https://redirect.github.com/nodejs/node/commit/1c6f5ed7c2)] - **tools**: adopt the `--check-for-duplicates` NCU flag (Antoine du Hamel) [#62478](https://redirect.github.com/nodejs/node/pull/62478) - \[[`b53377e8fe`](https://redirect.github.com/nodejs/node/commit/b53377e8fe)] - **tools**: bump flatted from 3.4.1 to 3.4.2 in /tools/eslint (dependabot\[bot]) [#62375](https://redirect.github.com/nodejs/node/pull/62375) - \[[`f102e79b80`](https://redirect.github.com/nodejs/node/commit/f102e79b80)] - **tools**: bump eslint deps (Huáng Jùnliàng) [#62356](https://redirect.github.com/nodejs/node/pull/62356) - \[[`f5d74f8216`](https://redirect.github.com/nodejs/node/commit/f5d74f8216)] - **tools**: add eslint-plugin-regexp (Huáng Jùnliàng) [#62093](https://redirect.github.com/nodejs/node/pull/62093) - \[[`bc5b9a04ad`](https://redirect.github.com/nodejs/node/commit/bc5b9a04ad)] - **tools**: bump flatted from 3.3.3 to 3.4.1 in /tools/eslint (dependabot\[bot]) [#62255](https://redirect.github.com/nodejs/node/pull/62255) - \[[`bad48b9700`](https://redirect.github.com/nodejs/node/commit/bad48b9700)] - **tools**: validate all commits that are pushed to `main` (Antoine du Hamel) [#62246](https://redirect.github.com/nodejs/node/pull/62246) - \[[`795d663ff4`](https://redirect.github.com/nodejs/node/commit/795d663ff4)] - **tools**: keep GN files when updating Merve (Antoine du Hamel) [#62167](https://redirect.github.com/nodejs/node/pull/62167) - \[[`0b6fa913f1`](https://redirect.github.com/nodejs/node/commit/0b6fa913f1)] - **tools**: revert timezone update GHA workflow to ubuntu-latest (Richard Lau) [#62140](https://redirect.github.com/nodejs/node/pull/62140) - \[[`840e098e99`](https://redirect.github.com/nodejs/node/commit/840e098e99)] - **tools**: i </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 670885d070e881f2c4984f1149324929e2167dfc

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/getsentry/sentry-go](https://redirect.github.com/getsentry/sentry-go) | `v0.45.0` → `v0.45.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgetsentry%2fsentry-go/v0.45.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgetsentry%2fsentry-go/v0.45.0/v0.45.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>getsentry/sentry-go (github.com/getsentry/sentry-go)</summary> ### [`v0.45.1`](https://redirect.github.com/getsentry/sentry-go/releases/tag/v0.45.1): 0.45.1 [Compare Source](https://redirect.github.com/getsentry/sentry-go/compare/v0.45.0...v0.45.1) ##### Bug Fixes 🐛 - Add missing TracesSampler fields for SamplingContext by [@giortzisg](https://redirect.github.com/giortzisg) in [#1259](https://redirect.github.com/getsentry/sentry-go/pull/1259) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 4cb161eab924b9dca6d25197f776b61cb46de609

… (#4744) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://redirect.github.com/Azure/azure-sdk-for-go) | `v1.21.0` → `v1.21.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fazcore/v1.21.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fazcore/v1.21.0/v1.21.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 120a468b4a1108139180535aca78e474e15de6bb

## Summary Implements ENG-3804: net-new upgrade off `main` for **hashicorp/aws** v6 (constraint `>= 6.28, < 6.42` — IAM v6.4 requires aws `>= 6.28`; upper bound keeps the existing ECS cap), **Terraform >= 1.12.0**, and the Terraform AWS module majors from the approved plan (EKS v21, RDS Aurora v10, EFS v2, IAM IRSA v6 path, VPC v6, ACM v6, S3 v5, Honeycomb integrations v2.1). **Kubernetes, Helm, and 1Password** provider constraints are unchanged from `main`; Renovate can re-raise those after merge. ## Notable behaviour / review callouts - **EKS v21**: `cluster_*` args renamed per module upgrade guide; `addons` use `resolve_conflicts_on_create` / `resolve_conflicts_on_update` = `OVERWRITE`. **`eks_managed_node_group_defaults` was removed in v21** — former defaults are duplicated on `intel` and `arm` node groups (CNI policy attach, gp3 root volume, `use_latest_ami_release_version`, Inspector exclusion tag, `enable_monitoring = false` for otelcol). - **IMDS hop limit** and **OIDC issuer URL** changes from v21 will show as in-place updates on launch templates and IRSA trust policies (expected noise). - **IAM v6** `iam-role-for-service-accounts-eks` → `iam-role-for-service-accounts` @ 6.4.0; `role_name` → `name`; `role_policy_arns` → `policies` where applicable. Module outputs use `arn` / `name` instead of deprecated `iam_role_arn` / `iam_role_name`. - **RDS Aurora v10**: `cluster_instance_class`, `master_password_wo` + `master_password_wo_version`, instance settings under `instances.writer`, `security_group_ingress_rules` per CIDR (expect **short destroy/create** on legacy `aws_security_group_rule` — 1–5s window; no `removed`/`import` without state access). - **EFS v2**: per-CIDR `security_group_ingress_rules` (NFS 2049), `policy_statements` as map. - **cloudfront-drata-proxy** `versions.tf`: aws raised to `>= 6.28, < 6.42` so it composes with the root constraint. ## Validation - `terraform init -backend=false -upgrade` + `TERRAFORM_ENV_NAME=dogfood terraform validate` in `deploy/` — **success** (existing unrelated `data.aws_region.current.name` deprecation warnings). - `terraform init -backend=false -upgrade` + `terraform validate` in `cli/` — **success**. CI **Terraform plan** on this PR is the source of truth for the full graph; please confirm SG destroys/creates look independent and there are no surprise cluster replacements. ## Rollout (post-merge) Per plan: **dogfood** applies on merge via existing workflow; **prod** is **manual** `workflow_dispatch` (plan then apply in a low-traffic window). Close superseded Renovate PR #4743 after merge when appropriate. ## Docs - `deploy/README.md`: note that Terraform **>= 1.12.0** is required.  <div><a href="https://cursor.com/agents/bc-ba2743dd-e09f-4acc-970f-81f6e3b62a5f"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a href="https://cursor.com/background-agent?bcId=bc-ba2743dd-e09f-4acc-970f-81f6e3b62a5f"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: cursor[bot] <206951365+cursor[bot]@users.noreply.github.com> GitOrigin-RevId: 12d96eeaf75eea73552eacff876b95e3a3e4d07b

## Summary Provision `brentdb` as Brent's first PostgreSQL database, following `docs/adding-database-to-new-service.md`. This is Phase 1 of the Plan Reviews in Brent project — a pure infrastructure phase that unblocks all downstream phases needing durable state. The database is empty after this phase. No domain tables are defined — Phase 5 creates the first migration with Plan/Review tables. ## Changes ### Local Development - Add `brentdb` service (postgres:16) and volume to docker-compose - Create `brentdb.env` with local credentials - Add `BRENT_BACKEND_PG*` environment variables to `op.local.env` ### Service Wiring (dbkit) - Register database flags via `dbkit.AddDatabaseFlags` in `root.go` - Populate `dbkit.Config` from Viper in `config.go` - Add `DbConfig` to `ServerConfig`, `pgxpool.Pool` to `Server` - Connect to database in `Init()`, close pool in `Stop()` - Add migrate-on-start in `start.go` before server initialization ### sqlc and Atlas Scaffolding - Add `sqlc.yaml` with gateway-pattern type overrides - Create `models/placeholder.sql` (Ping query), `schema.sql`, `generate.go` - Create empty `migrations/` directory with `atlas.sum` - Generate sqlc boilerplate (`db.go`, `models.go`, `placeholder.sql.go`) ### Build Scripts - `build/reset_database.sh` — drop/recreate DB, apply migrations, regenerate schema + sqlc - `build/make_migration.sh` — generate new migration from schema changes - `build/dbshell.sh` — open psql shell to local database ### CI - Add `brent-backend-code-gen` job (postgres:16 service, sqlc diff/vet, Atlas migration checks, go generate, git diff) - Add `go/dbkit/**` and `go/auth/**` to `brent-backend` path filter - Add `brent-backend-code-gen` to `ci-gate` needs ### Terraform (Aurora Provisioning) - Create `brent_backend.tf` with `random_password`, `postgresql_role`, `postgresql_database`, and `brentdb-config` ConfigMap (DB vars only) - Add brentdb outputs to `outputs.tf` - Add `BRENT_BACKEND_PG*` fields to both 1Password items in `1password.tf` ### Kubernetes - Add `BRENT_BACKEND_PGPASSWORD` to ExternalSecret - Add `brentdb-config` configMapRef to deployment envFrom ### Documentation - Add Persistence section to `brent-backend/README.md` - Add BUGBOT.md for atlas.sum ordering enforcement ## Key Decisions - **Database name**: `brentdb` (project plan naming, not `brentbackenddb`) - **No pgvector**: plain postgres:16 (no vector-search use case) - **No migration files**: empty `atlas.sum` only; Phase 5 adds first migration - **Separate ConfigMap**: kustomize `configmap.yaml` kept for app config; Terraform manages a separate `brentdb-config` for DB vars - **Migrate-on-start**: matches api-server pattern; skipped locally via `BRENT_BACKEND_STARTUP_SKIP_MIGRATE=true`  <div><a href="https://cursor.com/agents/bc-bbfc332a-c5c6-4de3-91e8-a0003718308b"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a href="https://cursor.com/background-agent?bcId=bc-bbfc332a-c5c6-4de3-91e8-a0003718308b"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> GitOrigin-RevId: 90f684240aa6e383a3a1daf12e452ee306cb8d1e

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/jackc/pgx/v5](https://redirect.github.com/jackc/pgx) | `v5.9.1` → `v5.9.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fjackc%2fpgx%2fv5/v5.9.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fjackc%2fpgx%2fv5/v5.9.1/v5.9.2?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### pgx: SQL Injection via placeholder confusion with dollar quoted string literals [GHSA-j88v-2chj-qfwx](https://redirect.github.com/advisories/GHSA-j88v-2chj-qfwx) <details> <summary>More information</summary> #### Details ##### Impact SQL Injection can occur when: 1. The non-default simple protocol is used. 2. A dollar quoted string literal is used in the SQL query. 3. That string literal contains text that would be would be interpreted as a placeholder outside of a string literal. 4. The value of that placeholder is controllable by the attacker. e.g. ```go attackValue := `$tag$; drop table canary; --` _, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue) ``` This is unlikely to occur outside of a contrived scenario. ##### Patches The problem is resolved in v5.9.2. ##### Workarounds Do not use the simple protocol to execute queries matching all the above conditions. #### Severity - CVSS Score: 2.3 / 10 (Low) - Vector String: `CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N` #### References - [https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx](https://redirect.github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx) - [https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da](https://redirect.github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da) - [https://github.com/jackc/pgx/releases/tag/v5.9.2](https://redirect.github.com/jackc/pgx/releases/tag/v5.9.2) - [https://github.com/advisories/GHSA-j88v-2chj-qfwx](https://redirect.github.com/advisories/GHSA-j88v-2chj-qfwx) This data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-j88v-2chj-qfwx) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### Release Notes <details> <summary>jackc/pgx (github.com/jackc/pgx/v5)</summary> ### [`v5.9.2`](https://redirect.github.com/jackc/pgx/compare/v5.9.1...v5.9.2) [Compare Source](https://redirect.github.com/jackc/pgx/compare/v5.9.1...v5.9.2) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: c727d731a5cc5e1502e16d50a83b4f60feff7d5f

## Summary - `api-server` trace exports were being rejected by the `otelcol-node` DaemonSet with `400 Bad Request: http: request body too large`, dropping ~50k spans/hour from a single pod in prod. - Root cause: `confighttp`'s default `max_request_body_size` is 20 MiB (post-CVE-2024-36129), and `api-server` spans carry full LLM prompts/responses/tool outputs as attributes, so 512-span batches routinely cross the cap. - Fix lifts the collector's HTTP body limit to 64 MiB and shrinks the SDK's `MaxExportBatchSize` from the default 512 to 128 so batches stay comfortably under the receiver cap. ## Linear Ticket Fixes: [ENG-3936](https://linear.app/overmind/issue/ENG-3936/api-server-otel-batches-dropped-by-node-collector-400-request-body-too) — api-server OTel batches dropped by node collector: "400 request body too large" - **Purpose**: Stop silent trace loss on `api-server` (and any other service emitting large LLM-payload spans) by aligning the OTLP HTTP receiver limit and the SDK's batch size so full payloads can be delivered to Honeycomb. ## Changes ### Collector (otelcol-node DaemonSet) - `app-of-apps/otel-collectors/base/node-values.yaml`: set `receivers.otlp.protocols.http.max_request_body_size: 67108864` (64 MiB). Comment references ENG-3936 and the CVE-2024-36129 default. - `app-of-apps/otel-collectors/base-eks/node-values.yaml`: same change for the EKS-flavoured values file. These are the only two places in the repo that configure an OTLP HTTP receiver on `0.0.0.0:4318`. ### Go OTel SDK (shared tracer init used by all Go services) - `go/tracing/main.go`: add `sdktrace.WithMaxExportBatchSize(128)` to `batcherOpts` (previously relied on the SDK default of 512). Extended the comment above `batcherOpts` to explain the link between batch size and the collector's body limit, and why we lowered it (large LLM payloads on spans). - `go/tracing/main_test.go`: renamed `TestBatcherOptsQueueSize` to `TestBatcherOpts` and added an assertion that `MaxExportBatchSize == 128` alongside the existing `MaxQueueSize == 8192` check, so the batch size stays in lock-step with the collector config. ### Reviewer focus - The 64 MiB / 128-span pairing is deliberate: even with per-span payloads in the hundreds of KB, 128 spans should stay well under 64 MiB. If you want to tune either value, keep the collector limit and SDK batch size in sync (the comment in `main.go` and the test assertion are the tripwires). - No changes to span attribute truncation in this PR — that's tracked separately as the longer-term follow-up. This PR unblocks trace delivery; attribute trimming/relocation is next. - Honeycomb monitor for `"request body too large"` on the `kubernetes-metrics` dataset is a runtime/UI step and not part of this PR. ## Approved Plan - **Plan approver**: Daniel Carabas - **Approval ticket**: https://linear.app/overmind/issue/ENG-3939/approve-plan-stop-dropping-otel-batches-at-otelcol-node-raise-receiver > Deviation analysis and reviewer assignment are handled automatically by the > pre-approved PR review automation (see docs/PREAPPROVED_CHANGES.md).  --- > [!NOTE] > **Medium Risk** > Touches production telemetry export/collector settings; mis-tuning could increase collector memory/CPU or still lead to rejected/dropped spans under load. > > **Overview** > Stops OTLP trace export batches from being rejected by `otelcol-node` due to oversized HTTP request bodies. > > The node collector OTLP/HTTP receiver limit is raised to **64 MiB** (`max_request_body_size`) in both base and EKS values, and the Go tracer config lowers `BatchSpanProcessor` `MaxExportBatchSize` to **128** (with a tightened test) to keep large LLM-payload span batches under the receiver cap. > > <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit b52023d6d905862bc880e591d577ff4d506893b6. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup>  GitOrigin-RevId: cbcfcc86c71e149e19ed3e5c54240e52197dcbe0

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [goreleaser/goreleaser](https://redirect.github.com/goreleaser/goreleaser) | patch | `v2.15.3` → `v2.15.4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>goreleaser/goreleaser (goreleaser/goreleaser)</summary> ### [`v2.15.4`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.15.4) [Compare Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.15.3...v2.15.4) #### Announcement Read the official announcement: [Announcing GoReleaser v2.15](https://goreleaser.com/blog/goreleaser-v2.15/). #### Changelog ##### Bug fixes - [`d077fe1`](https://redirect.github.com/goreleaser/goreleaser/commit/d077fe1cfc533bf5351c2d0993ac32d7f59bcdb3): fix(build): allow explicit binary with ellipsis when single main ([@caarlos0](https://redirect.github.com/caarlos0)) - [`3140abb`](https://redirect.github.com/goreleaser/goreleaser/commit/3140abb162e23ff77ebf27ca4094c6f7bdbd6c47): fix(build): set per-binary artifact IDs for ./... builds ([@caarlos0](https://redirect.github.com/caarlos0) and [@Copilot](https://redirect.github.com/Copilot)) - [`eb11599`](https://redirect.github.com/goreleaser/goreleaser/commit/eb11599419e9f1004397d7aa6dbb3128a9d7128c): fix(deps): quill git-lfs ([#6577](https://redirect.github.com/goreleaser/goreleaser/issues/6577)) ([@caarlos0](https://redirect.github.com/caarlos0)) - [`343700b`](https://redirect.github.com/goreleaser/goreleaser/commit/343700b91614a3e463226ea2aa67f56e2add31f0): fix(docker): install syft, cosign, docker, and docker-buildx from upstream releases ([#6576](https://redirect.github.com/goreleaser/goreleaser/issues/6576)) ([@caarlos0](https://redirect.github.com/caarlos0), [@kevinburkesegment](https://redirect.github.com/kevinburkesegment), and [@Copilot](https://redirect.github.com/Copilot)) - [`87b542b`](https://redirect.github.com/goreleaser/goreleaser/commit/87b542bc0d7c31942154d1f9df1e3e15f1c7d7d9): fix(homebrew\_cask): sha256 before url in per-arch blocks ([@kkd16](https://redirect.github.com/kkd16)) - [`e35ff62`](https://redirect.github.com/goreleaser/goreleaser/commit/e35ff62839fd569357d70a9b9174bec56338a577): fix(rust): add arm- and armv7-unknown-linux-musleabihf build targets ([#6581](https://redirect.github.com/goreleaser/goreleaser/issues/6581)) ([@mozzieongit](https://redirect.github.com/mozzieongit)) - [`03735a4`](https://redirect.github.com/goreleaser/goreleaser/commit/03735a41036a25f03662cd75e169458403c64fc3): fix(rust): grouping of different arm version when creating archives ([#6582](https://redirect.github.com/goreleaser/goreleaser/issues/6582)) ([@caarlos0](https://redirect.github.com/caarlos0)) - [`1f86232`](https://redirect.github.com/goreleaser/goreleaser/commit/1f8623275212b1482ae230ba06f05fa898bb52e0): fix: gen-nix-licenses script ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Documentation updates - [`0136377`](https://redirect.github.com/goreleaser/goreleaser/commit/0136377e45d20e9651bde9089e8dce0f26ab9ad5): docs: clarify template vars ([@caarlos0](https://redirect.github.com/caarlos0) and [@SAY-5](https://redirect.github.com/SAY-5)) - [`b026ca9`](https://redirect.github.com/goreleaser/goreleaser/commit/b026ca93356699c1d9e9ae0e2df005f484adbe3c): docs: fix image URLs ([@caarlos0](https://redirect.github.com/caarlos0)) - [`fcc53cb`](https://redirect.github.com/goreleaser/goreleaser/commit/fcc53cb09f326ad90956a008cb1c67f163086559): docs: fix image urls ([#6578](https://redirect.github.com/goreleaser/goreleaser/issues/6578)) ([@caarlos0](https://redirect.github.com/caarlos0)) - [`24df9ce`](https://redirect.github.com/goreleaser/goreleaser/commit/24df9cef7dfd7b678f65ad7d844a536263e6ef01): docs: fix include, prefix shortcodes to avoid collisions ([@caarlos0](https://redirect.github.com/caarlos0)) - [`5b47f38`](https://redirect.github.com/goreleaser/goreleaser/commit/5b47f38526c0718888defc7e19c11fdef97d123e): docs: fix version link when full version ([@caarlos0](https://redirect.github.com/caarlos0)) **Full Changelog**: <goreleaser/goreleaser@v2.15.3...v2.15.4> #### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). #### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6), [Twitter](https://twitter.com/goreleaser), and [Telegram](https://t.me/goreleasernews)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 5a4a33104c80d271a261fd19deff4b197fbdf50d

> [!NOTE] > **Low Risk** > Low risk: changes are limited to CI configuration and integration test execution flow, mainly improving reliability and avoiding false failures when setup is skipped or incomplete. > > **Overview** > Improves Azure integration test reliability by **injecting PostgreSQL Flexible Server admin credentials** into the CI secret set and **increasing the weekly workflow test timeout** to 120 minutes. > > Updates several Azure integration tests to **skip the `Run` subtests unless `Setup` completed successfully**, avoiding downstream failures when resource provisioning is skipped/aborted (including simplifying the flow log test’s prior preflight check). > > Separately, the docs link checker config now excludes `cloud.google.com` URLs to avoid lychee redirect-follow issues. > > <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 7c55da628d3773524b284824e8eafacbe728c7bc. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup>  GitOrigin-RevId: e5e7357ae8194d3377e756f0424561b8eb5a0bbc

DavidS-ovm and others added 18 commits April 28, 2026 08:16

Run go mod tidy

45a9201

tphoney approved these changes Apr 28, 2026

View reviewed changes

tphoney merged commit 908ac0f into main Apr 28, 2026

tphoney deleted the copybara/v1.17.8 branch April 28, 2026 08:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Release v1.17.8#845

Release v1.17.8#845
tphoney merged 18 commits intomainfrom
copybara/v1.17.8

github-actions Bot commented Apr 28, 2026 •

edited by tphoney

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

github-actions Bot commented Apr 28, 2026 • edited by tphoney Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Copybara Sync - Release v1.17.8

What happens when this PR is merged?

Review Checklist

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

github-actions Bot commented Apr 28, 2026 •

edited by tphoney

Loading