Upstream update available: nodejs 24.12.0 → 24.15.0 #5
Labels
No labels
ai-summary
bot
cve
llm-analysis
needs-build
needs-triage
priority/high
security
security-release
severity-critical
source-nvd
update/major
update/minor
upstream-update
upstream/github
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
rpms/nodejs#5
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Upstream update available:
nodejs24.12.0→24.15.0Package
nodejsnodejsniceos-5.224.12.0-1minorpython_rpmleafgithub-upstreamUpstream
githubnodejs/node24.15.0v24.15.0github_release2026-04-16T07:16:28ZFalseSignals
TrueFalse-ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/minor, upstream-update, upstream/githubNiceSOFT AI preliminary stability analysis
1. Краткий вывод
Автоматический deep-analysis через LLM/web_search не был завершён корректно, поэтому ниже приведён безопасный fallback-анализ без неподтверждённых утверждений. Обновление
nodejsс24.12.0до24.15.0найдено upstream-monitor и требует обычной мейнтейнерской проверки перед PR/merge.2. Риск для НАЙС.ОС
Риск:
unknownдо ручной проверки. Для стабильной политики НАЙС.ОС обновление нельзя считать автоматически безопасным только по факту наличия новой upstream-версии.3. Что изменилось upstream
Notable Changes
github.com/nodejs/node@3d87ecacbc" target="_blank" rel="noopener noreferrer">[3d87ecacbc] - (SEMVER-MINOR) cli: add --max-heap-size option (tannal) #58708github.com/nodejs/node@83c38672f7" target="_blank" rel="noopener noreferrer">[83c38672f7] - cli: add --require-module/--no-require-module (Joyee Cheung) #60959github.com/nodejs/node@54ef940e01" target="_blank" rel="noopener noreferrer">[54ef940e01] - (SEMVER-MINOR) crypto: add raw key formats support to the KeyObject APIs (Filip Skokan) #62240github.com/nodejs/node@f4a3edc47a" target="_blank" rel="noopener noreferrer">[f4a3edc47a] - (SEMVER-MINOR) fs: addthrowIfNoEntryoption for fs.stat and fs.promises.stat (Juan José) #61178github.com/nodejs/node@5cdcba17cc" target="_blank" rel="noopener noreferrer">[5cdcba17cc] - (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav) #61713github.com/nodejs/node@8b6be3fe14" target="_blank" rel="noopener noreferrer">[8b6be3fe14] - module: mark require(esm) as stable (Joyee Cheung) #60959github.com/nodejs/node@68fbc0c6cc" target="_blank" rel="noopener noreferrer">[68fbc0c6cc] - module: mark module compile cache as stable (Joyee Cheung) #60971github.com/nodejs/node@c851e76f8c" target="_blank" rel="noopener noreferrer">[c851e76f8c] - (SEMVER-MINOR) net: addsetTOSandgetTOStoSocket(Amol Yadav) #61503github.com/nodejs/node@6ac4304c87" target="_blank" rel="noopener noreferrer">[6ac4304c87] - (SEMVER-MINOR) sqlite: add limits property to DatabaseSync (Mert Can Altin) #61298github.com/nodejs/node@aaf9af1672" target="_blank" rel="noopener noreferrer">[aaf9af1672] - sqlite: mark as release candidate (Matteo Collina) #61262github.com/nodejs/node@eb77a7a297" target="_blank" rel="noopener noreferrer">[eb77a7a297] - (SEMVER-MINOR) src: add C++ support for diagnostics channels (RafaelGSS) #61869github.com/nodejs/node@6834ca13bb" target="_blank" rel="noopener noreferrer">[6834ca13bb] - (SEMVER-MINOR) stream: renameDuplex.toWeb()type option toreadableType(René) #61632github.com/nodejs/node@f5f21d36a6" target="_blank" rel="noopener noreferrer">[f5f21d36a6] - test_runner: add exports option for module mocks (sangwook) #61727github.com/nodejs/node@1f2025fd1e" target="_blank" rel="noopener noreferrer">[1f2025fd1e] - (SEMVER-MINOR) test_runner: expose worker ID for concurrent test execution (Ali Hassan) #61394github.com/nodejs/node@1ca20fc33d" target="_blank" rel="noopener noreferrer">[1ca20fc33d] - (SEMVER-MINOR) test_runner: show interrupted test on SIGINT (Matteo C...[truncated 51713 chars]
4. Security/CVE
Подтверждённых CVE в fallback-режиме не выявлено. Если обновление позиционируется upstream как security release, нужно проверить официальный changelog, release notes и CVE/advisory-источники вручную.
5. ABI/API/CLI/config риск
Для пакета
nodejsнужно проверить изменение CLI/options, поведения по умолчанию, форматов конфигурации и совместимость со скриптами, которые могут использовать пакет в НАЙС.ОС. Без завершённого web-search анализа риск остаётсяunknown.6. Риск для RPM-сборки и dist-git
Проверить
SPECS,SOURCES, source lock, патчи,BuildRequires/Requires,%check, SBOM и воспроизводимость сборки. Если upstream изменил систему сборки или layout исходников, spec может потребовать ручной правки.7. Риск для системы и зависимых компонентов
Проверить reverse dependencies, пользовательские сценарии и любые автоматические скрипты, которые вызывают
nodejs. Для НАЙС.ОС приоритет — стабильность, поэтому при отсутствии доказательств совместимости обновление должно идти через PR и ручной review.8. Проверки мейнтейнера
24.15.0с текущей версией24.12.0.%check, если доступен.9. Рекомендация
issue-onlyдо ручной проверки. Если сборка и smoke tests проходят, можно перевести вupdate candidate.10. Источники
Примечание: fallback создан потому, что LLM/web_search не вернул завершённый анализ. Причина:
HTTP 429 POST <a href="https://api.openai.com/v1/responses" target="_blank" rel="noopener noreferrer">api.openai.com — responses</a>: { "error": { "message": "You exceeded your current quota, please check your plan and billing details. For more information on this error, read the docs: <a href="https://platform.openai.com/docs/guides/error-codes/api-errors" target="_blank" rel="noopener noreferrer">platform.openai.com — api errors</a>.", "type": "insufficient_quota", "param": null, "code": "insufficient_quota" } }.Upstream release notes / description
Notable Changes
github.com/nodejs/node@3d87ecacbc" target="_blank" rel="noopener noreferrer">[3d87ecacbc] - (SEMVER-MINOR) cli: add --max-heap-size option (tannal) #58708github.com/nodejs/node@83c38672f7" target="_blank" rel="noopener noreferrer">[83c38672f7] - cli: add --require-module/--no-require-module (Joyee Cheung) #60959github.com/nodejs/node@54ef940e01" target="_blank" rel="noopener noreferrer">[54ef940e01] - (SEMVER-MINOR) crypto: add raw key formats support to the KeyObject APIs (Filip Skokan) #62240github.com/nodejs/node@f4a3edc47a" target="_blank" rel="noopener noreferrer">[f4a3edc47a] - (SEMVER-MINOR) fs: addthrowIfNoEntryoption for fs.stat and fs.promises.stat (Juan José) #61178github.com/nodejs/node@5cdcba17cc" target="_blank" rel="noopener noreferrer">[5cdcba17cc] - (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav) #61713github.com/nodejs/node@8b6be3fe14" target="_blank" rel="noopener noreferrer">[8b6be3fe14] - module: mark require(esm) as stable (Joyee Cheung) #60959github.com/nodejs/node@68fbc0c6cc" target="_blank" rel="noopener noreferrer">[68fbc0c6cc] - module: mark module compile cache as stable (Joyee Cheung) #60971github.com/nodejs/node@c851e76f8c" target="_blank" rel="noopener noreferrer">[c851e76f8c] - (SEMVER-MINOR) net: addsetTOSandgetTOStoSocket(Amol Yadav) #61503github.com/nodejs/node@6ac4304c87" target="_blank" rel="noopener noreferrer">[6ac4304c87] - (SEMVER-MINOR) sqlite: add limits property to DatabaseSync (Mert Can Altin) #61298github.com/nodejs/node@aaf9af1672" target="_blank" rel="noopener noreferrer">[aaf9af1672] - sqlite: mark as release candidate (Matteo Collina) #61262github.com/nodejs/node@eb77a7a297" target="_blank" rel="noopener noreferrer">[eb77a7a297] - (SEMVER-MINOR) src: add C++ support for diagnostics channels (RafaelGSS) #61869github.com/nodejs/node@6834ca13bb" target="_blank" rel="noopener noreferrer">[6834ca13bb] - (SEMVER-MINOR) stream: renameDuplex.toWeb()type option toreadableType(René) #61632github.com/nodejs/node@f5f21d36a6" target="_blank" rel="noopener noreferrer">[f5f21d36a6] - test_runner: add exports option for module mocks (sangwook) #61727github.com/nodejs/node@1f2025fd1e" target="_blank" rel="noopener noreferrer">[1f2025fd1e] - (SEMVER-MINOR) test_runner: expose worker ID for concurrent test execution (Ali Hassan) #61394github.com/nodejs/node@1ca20fc33d" target="_blank" rel="noopener noreferrer">[1ca20fc33d] - (SEMVER-MINOR) test_runner: show interrupted test on SIGINT (Matteo Collina) #61676Commits
github.com/nodejs/node@148373cea1" target="_blank" rel="noopener noreferrer">[148373cea1] - assert,util: improve comparison performance (Ruben Bridgewater) #61176github.com/nodejs/node@e5558b0859" target="_blank" rel="noopener noreferrer">[e5558b0859] - assert,util: fix deep comparing invalid dates skipping properties (Ruben Bridgewater) #61076github.com/nodejs/node@83cffd92b5" target="_blank" rel="noopener noreferrer">[83cffd92b5] - async_hooks: enabledHooksExist shall return if hooks are enabled (Gerhard Stöbich) #61054github.com/nodejs/node@2c9436b43d" target="_blank" rel="noopener noreferrer">[2c9436b43d] - benchmark: fix destructuring in dgram/single-buffer (Ali Hassan) #62084github.com/nodejs/node@837acd7382" target="_blank" rel="noopener noreferrer">[837acd7382] - benchmark: add startup benchmark for ESM entrypoint (Joyee Cheung) #61769github.com/nodejs/node@a6ced7d272" target="_blank" rel="noopener noreferrer">[a6ced7d272] - buffer: improve performance of multiple Buffer operations (Ali Hassan) #61871github.com/nodejs/node@a82003bf8b" target="_blank" rel="noopener noreferrer">[a82003bf8b] - buffer: optimize buffer.concat performance (Mert Can Altin) #61721github.com/nodejs/node@83dfd0be1d" target="_blank" rel="noopener noreferrer">[83dfd0be1d] - buffer: disallow ArrayBuffer transfer on pooled buffer (Chengzhong Wu) #61372github.com/nodejs/node@ed2d0cb1bf" target="_blank" rel="noopener noreferrer">[ed2d0cb1bf] - build: support empty libname flags inconfigure.py(Antoine du Hamel) #62477github.com/nodejs/node@09f7920267" target="_blank" rel="noopener noreferrer">[09f7920267] - build: fix timezone-update path references (Chengzhong Wu) #62280github.com/nodejs/node@af46b15b91" target="_blank" rel="noopener noreferrer">[af46b15b91] - build: use path-ignore in GHA coverage-windows.yml (Chengzhong Wu) #61811github.com/nodejs/node@2cf77eadd1" target="_blank" rel="noopener noreferrer">[2cf77eadd1] - build: generate_config_gypi.py generates valid JSON (Shelley Vohr) #61791github.com/nodejs/node@e0220f0c35" target="_blank" rel="noopener noreferrer">[e0220f0c35] - build: build with v8 gdbjit support on supported platform (Joyee Cheung) #61010github.com/nodejs/node@5505511dcb" target="_blank" rel="noopener noreferrer">[5505511dcb] - build: enable -DV8_ENABLE_CHECKS flag (Ryuhei Shima) #61327github.com/nodejs/node@5f8ecf3940" target="_blank" rel="noopener noreferrer">[5f8ecf3940] - build: add --debug-symbols to build with -g without enabling DCHECKs (Joyee Cheung) [#61100](https...[truncated 48708 chars]
NiceOS maintainer checklist
Versionand related fields inSPECS/*.speconly if policy allows it.SOURCES/sources.lock.json, manifests, metadata and SBOM.Bot metadata
niceos_upstream_monitor.py 2.1.2-openai-deep2026-05-21T00:10:51Z