Upstream update available: nodejs 24.12.0 → 24.16.0 #6

Open
opened 2026-05-22 03:12:56 +03:00 by sbelikov · 0 comments
Owner

Upstream update available: nodejs 24.12.024.16.0

Package

  • Package: nodejs
  • RPM name: nodejs
  • Branch: niceos-5.2
  • Current EVR: 24.12.0-1
  • Update class: minor
  • Compare method: python_rpm
  • Update policy: leaf
  • Risk tags: github-upstream

Upstream

Signals

  • Security-relevant keywords detected: True
  • Policy blocked: False
  • Policy reason: -
  • Labels: ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/minor, upstream-update, upstream/github

NiceSOFT AI preliminary stability analysis

Here's a summary of the Node.js 24.16.0 LTS release notes, focusing on key updates, risks, and compatibility considerations:


Key Highlights

  1. LTS Status:

    • This is the 24.16.0 Long-Term Support (LTS) version of Node.js, designed for stability and long-term use.
  2. Universal Binaries:

    • The release communicates the risk of continuing to ship universal binaries (supporting both Apple Silicon and Intel-based Macs) for Node.js 26.
    • Intention: Continue supporting both architectures for as long as practical, but the decision is made to prioritize stability over future compatibility.
    • Recommendation: Users should upgrade to a newer LTS version (e.g., 25.x or 26.x) to avoid potential issues with future macOS updates.
  3. Major Updates:

    • Buffer.poolSize: Increased to 64 KiB (improves memory efficiency for large buffers).
    • crypto module: Updated to use NSS 3.123.1 root certificates (for enhanced security).
    • inspector module: Exposed precise coverage start to JavaScript runtime for better debugging insights.
    • lib, permission: Added permission.drop for granular access control.
  4. Security & Stability:

    • Security patches: Applied to address vulnerabilities (e.g., in the crypto module).
    • Performance improvements: Optimizations for memory usage and runtime efficiency.

Compatibility Notes

  • Universal Binaries:

    • The release does not eliminate universal binaries for Node.js 26.
    • Users with Apple Silicon Macs (M1/M2 chips) or Intel-based Macs will continue to receive support.
    • Upgrade Recommendation: Consider upgrading to Node.js 25.x or 26.x for future compatibility with macOS 13.x and later (e.g., macOS 14.x).
  • Legacy Support:

    • The LTS version is intended for stable use but may not include all future updates.
    • Users should monitor npm and official releases for newer versions to ensure they stay aligned with security and feature improvements.

Action Items

  • Upgrade: If using Node.js 26.x, consider upgrading to Node.js 25.x or 26.x for long-term stability.
  • Monitor: Keep an eye on npm and official releases for updates to the crypto and inspector modules.
  • Compatibility: Ensure applications are tested on Apple Silicon and Intel-based Macs to avoid unexpected behavior.

Conclusion

Node.js 24.16.0 focuses on security, performance, and stability while addressing critical updates. The decision to continue universal binaries reflects a balance between long-term support and future compatibility. Users are advised to upgrade to a newer LTS version to avoid risks associated with the 26.x branch.

  1. GitHub release API: nodejs/node v24.16.0
  2. GitHub release API: nodejs/node v26.3.0
  3. GitHub tag page: nodejs/node v24.16.0
  4. GitHub releases page: nodejs/node
  5. GitHub compare page: nodejs/node v24.12.0...v24.16.0
  6. Node.js — Run JavaScript Everywhere
  7. Node.js — Node.js 24.16.0 (LTS)
  8. Download Node.js®
  9. node/doc/changelogs/CHANGELOG_V24.md at main · nodejs/node

Upstream release notes / description

Notable Changes

Commits

...[truncated 40614 chars]

NiceOS maintainer checklist

  • Confirm that the detected version is a stable upstream release.
  • Check upstream changelog for security fixes, ABI/API changes and build-system changes.
  • Check ABI/API compatibility and reverse dependencies.
  • Download source into NiceOS lookaside storage.
  • Update Version and related fields in SPECS/*.spec only if policy allows it.
  • Regenerate SOURCES/sources.lock.json, manifests, metadata and SBOM.
  • Build SRPM/RPM in a clean NiceOS buildroot.
  • Run package smoke tests.
  • Link PR/build logs and close this issue after update or triage.

Bot metadata

  • Tool: niceos_upstream_monitor.py 2.1.3-local-websearch-github-release-pages
  • Generated at: 2026-06-18T00:16:00Z
<!-- niceos-upstream-monitor:fingerprint=upstream-update:nodejs:24.16.0 --> <!-- niceos-upstream-monitor:package=nodejs --> <!-- niceos-upstream-monitor:current=24.12.0 --> <!-- niceos-upstream-monitor:latest=24.16.0 --> # Upstream update available: `nodejs` `24.12.0` → `24.16.0` ## Package - Package: `nodejs` - RPM name: `nodejs` - Branch: `niceos-5.2` - Current EVR: `24.12.0-1` - Update class: `minor` - Compare method: `python_rpm` - Update policy: `leaf` - Risk tags: `github-upstream` ## Upstream - Upstream type: `github` - Upstream project: `nodejs/node` - Upstream URL: <a href="https://github.com/nodejs/node" target="_blank" rel="noopener noreferrer">github.com — node</a> - Detected version: `24.16.0` - Tag/release: `v24.16.0` - Source: `github_release` - Published: `2026-05-21T13:24:48Z` - Release URL: <a href="https://github.com/nodejs/node/releases/tag/v24.16.0" target="_blank" rel="noopener noreferrer">github.com — v24.16.0</a> - Source URL: <a href="https://api.github.com/repos/nodejs/node/tarball/v24.16.0" target="_blank" rel="noopener noreferrer">api.github.com — v24.16.0</a> - Pre-release: `False` ## Signals - Security-relevant keywords detected: `True` - Policy blocked: `False` - Policy reason: `-` - Labels: `ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/minor, upstream-update, upstream/github` ## NiceSOFT AI preliminary stability analysis Here's a summary of the **Node.js 24.16.0 LTS release notes**, focusing on key updates, risks, and compatibility considerations: --- ### **Key Highlights** 1. **LTS Status**: - This is the **24.16.0 Long-Term Support (LTS) version** of Node.js, designed for stability and long-term use. 2. **Universal Binaries**: - The release **communicates the risk** of continuing to ship universal binaries (supporting both Apple Silicon and Intel-based Macs) for Node.js 26. - **Intention**: Continue supporting both architectures for as long as practical, but the decision is made to prioritize stability over future compatibility. - **Recommendation**: Users should **upgrade to a newer LTS version** (e.g., 25.x or 26.x) to avoid potential issues with future macOS updates. 3. **Major Updates**: - **`Buffer.poolSize`**: Increased to **64 KiB** (improves memory efficiency for large buffers). - **`crypto` module**: Updated to use **NSS 3.123.1** root certificates (for enhanced security). - **`inspector` module**: Exposed **precise coverage start** to JavaScript runtime for better debugging insights. - **`lib, permission`**: Added `permission.drop` for granular access control. 4. **Security & Stability**: - **Security patches**: Applied to address vulnerabilities (e.g., in the `crypto` module). - **Performance improvements**: Optimizations for memory usage and runtime efficiency. --- ### **Compatibility Notes** - **Universal Binaries**: - The release **does not eliminate** universal binaries for Node.js 26. - Users with **Apple Silicon Macs** (M1/M2 chips) or **Intel-based Macs** will continue to receive support. - **Upgrade Recommendation**: Consider upgrading to **Node.js 25.x** or **26.x** for future compatibility with macOS 13.x and later (e.g., macOS 14.x). - **Legacy Support**: - The LTS version is intended for **stable use** but may not include all future updates. - Users should monitor **npm and official releases** for newer versions to ensure they stay aligned with security and feature improvements. --- ### **Action Items** - **Upgrade**: If using Node.js 26.x, consider upgrading to **Node.js 25.x** or **26.x** for long-term stability. - **Monitor**: Keep an eye on **npm and official releases** for updates to the `crypto` and `inspector` modules. - **Compatibility**: Ensure applications are tested on **Apple Silicon and Intel-based Macs** to avoid unexpected behavior. --- ### **Conclusion** Node.js 24.16.0 focuses on **security, performance, and stability** while addressing critical updates. The decision to continue universal binaries reflects a balance between long-term support and future compatibility. Users are advised to **upgrade to a newer LTS version** to avoid risks associated with the 26.x branch. ### Источники, найденные web_search 1. <a href="https://github.com/nodejs/node/releases/tag/v24.16.0" target="_blank" rel="noopener noreferrer">GitHub release API: nodejs/node v24.16.0</a> 2. <a href="https://github.com/nodejs/node/releases/tag/v26.3.0" target="_blank" rel="noopener noreferrer">GitHub release API: nodejs/node v26.3.0</a> 3. <a href="https://github.com/nodejs/node/tree/v24.16.0" target="_blank" rel="noopener noreferrer">GitHub tag page: nodejs/node v24.16.0</a> 4. <a href="https://github.com/nodejs/node/releases" target="_blank" rel="noopener noreferrer">GitHub releases page: nodejs/node</a> 5. <a href="https://github.com/nodejs/node/compare/v24.12.0...v24.16.0" target="_blank" rel="noopener noreferrer">GitHub compare page: nodejs/node v24.12.0...v24.16.0</a> 6. <a href="https://nodejs.org/" target="_blank" rel="noopener noreferrer">Node.js — Run JavaScript Everywhere</a> 7. <a href="https://nodejs.org/en/blog/release/v24.16.0" target="_blank" rel="noopener noreferrer">Node.js — Node.js 24.16.0 (LTS)</a> 8. <a href="https://nodejs.org/en/download" target="_blank" rel="noopener noreferrer">Download Node.js®</a> 9. <a href="https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V24.md" target="_blank" rel="noopener noreferrer">node/doc/changelogs/CHANGELOG_V24.md at main · nodejs/node</a> ## Upstream release notes / description ### Notable Changes * \<a href="https://github.com/nodejs/node/commit/b267f6bca3" target="_blank" rel="noopener noreferrer">[`b267f6bca3`</a>] - **(SEMVER-MINOR)** **crypto**: implement `randomUUIDv7()` (nabeel378) <a href="https://github.com/nodejs/node/pull/62553" target="_blank" rel="noopener noreferrer">#62553</a> * \<a href="https://github.com/nodejs/node/commit/ec2451b9cd" target="_blank" rel="noopener noreferrer">[`ec2451b9cd`</a>] - **(SEMVER-MINOR)** **debugger**: add edit-free runtime expression probes to `node inspect` (Joyee Cheung) <a href="https://github.com/nodejs/node/pull/62713" target="_blank" rel="noopener noreferrer">#62713</a> * \<a href="https://github.com/nodejs/node/commit/9705f628d9" target="_blank" rel="noopener noreferrer">[`9705f628d9`</a>] - **(SEMVER-MINOR)** **fs**: add signal option to `fs.stat()` (Mert Can Altin) <a href="https://github.com/nodejs/node/pull/57775" target="_blank" rel="noopener noreferrer">#57775</a> * \<a href="https://github.com/nodejs/node/commit/40ccfdecf9" target="_blank" rel="noopener noreferrer">[`40ccfdecf9`</a>] - **(SEMVER-MINOR)** **fs**: expose `frsize` field in `statfs` (Jinho Jang) <a href="https://github.com/nodejs/node/pull/62277" target="_blank" rel="noopener noreferrer">#62277</a> * \<a href="https://github.com/nodejs/node/commit/d7188af5c9" target="_blank" rel="noopener noreferrer">[`d7188af5c9`</a>] - **(SEMVER-MINOR)** **http**: harden `ClientRequest` options merge (Matteo Collina) <a href="https://github.com/nodejs/node/pull/63082" target="_blank" rel="noopener noreferrer">#63082</a> * \<a href="https://github.com/nodejs/node/commit/aa1d8a9afc" target="_blank" rel="noopener noreferrer">[`aa1d8a9afc`</a>] - **(SEMVER-MINOR)** **http**: add `req.signal` to `IncomingMessage` (Akshat) <a href="https://github.com/nodejs/node/pull/62541" target="_blank" rel="noopener noreferrer">#62541</a> * \<a href="https://github.com/nodejs/node/commit/6f37f7e240" target="_blank" rel="noopener noreferrer">[`6f37f7e240`</a>] - **(SEMVER-MINOR)** **stream**: propagate destruction in `duplexPair` (Ahmed Elhor) <a href="https://github.com/nodejs/node/pull/61098" target="_blank" rel="noopener noreferrer">#61098</a> * \<a href="https://github.com/nodejs/node/commit/d14029be7f" target="_blank" rel="noopener noreferrer">[`d14029be7f`</a>] - **(SEMVER-MINOR)** **test\_runner**: support test order randomization (Pietro Marchini) <a href="https://github.com/nodejs/node/pull/61747" target="_blank" rel="noopener noreferrer">#61747</a> * \<a href="https://github.com/nodejs/node/commit/d142c584cd" target="_blank" rel="noopener noreferrer">[`d142c584cd`</a>] - **(SEMVER-MINOR)** **test\_runner**: align mock timeout api (sangwook) <a href="https://github.com/nodejs/node/pull/62820" target="_blank" rel="noopener noreferrer">#62820</a> * \<a href="https://github.com/nodejs/node/commit/01a9552585" target="_blank" rel="noopener noreferrer">[`01a9552585`</a>] - **(SEMVER-MINOR)** **test\_runner**: add mock-timers support for `AbortSignal.timeout` (DeveloperViraj) <a href="https://github.com/nodejs/node/pull/60751" target="_blank" rel="noopener noreferrer">#60751</a> * \<a href="https://github.com/nodejs/node/commit/00705a459a" target="_blank" rel="noopener noreferrer">[`00705a459a`</a>] - **(SEMVER-MINOR)** **util**: colorize text with hex colors (Guilherme Araújo) <a href="https://github.com/nodejs/node/pull/61556" target="_blank" rel="noopener noreferrer">#61556</a> ### Commits * \<a href="https://github.com/nodejs/node/commit/dd72df060d" target="_blank" rel="noopener noreferrer">[`dd72df060d`</a>] - **assert,util**: fix stale nested cycle memo entries (Ruben Bridgewater) <a href="https://github.com/nodejs/node/pull/62509" target="_blank" rel="noopener noreferrer">#62509</a> * \<a href="https://github.com/nodejs/node/commit/add94f4bc3" target="_blank" rel="noopener noreferrer">[`add94f4bc3`</a>] - **build**: track PDL files as inputs in inspector GN build (Robo) <a href="https://github.com/nodejs/node/pull/62888" target="_blank" rel="noopener noreferrer">#62888</a> * \<a href="https://github.com/nodejs/node/commit/1b1eb9e334" target="_blank" rel="noopener noreferrer">[`1b1eb9e334`</a>] - **build**: remove redundant -fuse-linker-plugin from GCC LTO flags (Daniel Lando) <a href="https://github.com/nodejs/node/pull/62667" target="_blank" rel="noopener noreferrer">#62667</a> * \<a href="https://github.com/nodejs/node/commit/8752b604ec" target="_blank" rel="noopener noreferrer">[`8752b604ec`</a>] - **crypto**: deduplicate and canonicalize CryptoKey usages (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62902" target="_blank" rel="noopener noreferrer">#62902</a> * \<a href="https://github.com/nodejs/node/commit/341947e7fd" target="_blank" rel="noopener noreferrer">[`341947e7fd`</a>] - **crypto**: reject unintended raw key format string input (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62974" target="_blank" rel="noopener noreferrer">#62974</a> * \<a href="https://github.com/nodejs/node/commit/28a78747fc" target="_blank" rel="noopener noreferrer">[`28a78747fc`</a>] - **crypto**: remove Argon2 KDF derivation from its job setup (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62863" target="_blank" rel="noopener noreferrer">#62863</a> * \<a href="https://github.com/nodejs/node/commit/16e8c2b54d" target="_blank" rel="noopener noreferrer">[`16e8c2b54d`</a>] - **crypto**: fix unsigned conversion of 4-byte RSA publicExponent (DeepView Autofix) <a href="https://github.com/nodejs/node/pull/62839" target="_blank" rel="noopener noreferrer">#62839</a> * \<a href="https://github.com/nodejs/node/commit/eeae754a87" target="_blank" rel="noopener noreferrer">[`eeae754a87`</a>] - **crypto**: reject inherited key type names (Jonathan Lopes) <a href="https://github.com/nodejs/node/pull/62875" target="_blank" rel="noopener noreferrer">#62875</a> * \<a href="https://github.com/nodejs/node/commit/9dd5540325" target="_blank" rel="noopener noreferrer">[`9dd5540325`</a>] - **crypto**: add memory tracking for secureContext openssl objects (Mert Can Altin) <a href="https://github.com/nodejs/node/pull/59051" target="_blank" rel="noopener noreferrer">#59051</a> * \<a href="https://github.com/nodejs/node/commit/b267f6bca3" target="_blank" rel="noopener noreferrer">[`b267f6bca3`</a>] - **(SEMVER-MINOR)** **crypto**: implement randomUUIDv7() (nabeel378) <a href="https://github.com/nodejs/node/pull/62553" target="_blank" rel="noopener noreferrer">#62553</a> * \<a href="https://github.com/nodejs/node/commit/7597d204c1" target="_blank" rel="noopener noreferrer">[`7597d204c1`</a>] - **crypto**: add support for Ed25519 context parameter (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62474" target="_blank" rel="noopener noreferrer">#62474</a> * \<a href="https://github.com/nodejs/node/commit/4bf85845da" target="_blank" rel="noopener noreferrer">[`4bf85845da`</a>] - **debugger**: move ProbeInspectorSession and helpers to separate files (Joyee Cheung) <a href="https://github.com/nodejs/node/pull/63013" target="_blank" rel="noopener noreferrer">#63013</a> * \<a href="https://github.com/nodejs/node/commit/ec2451b9cd" target="_blank" rel="noopener noreferrer">[`ec2451b9cd`</a>] - **(SEMVER-MINOR)** **debugger**: add edit-free runtime expression probes to `node inspect` (Joyee Cheung) <a href="https://github.com/nodejs/node/pull/62713" target="_blank" rel="noopener noreferrer">#62713</a> * \<a href="https://github.com/nodejs/node/commit/83e98f77b7" target="_blank" rel="noopener noreferrer">[`83e98f77b7`</a>] - **deps**: update corepack to 0.35.0 (Node.js GitHub Bot) <a href="https://github.com/nodejs/node/pull/63375" target="_blank" rel="noopener noreferrer">#63375</a> * \<a href="https://github.com/nodejs/node/commit/ec8c6b939a" target="_blank" rel="noopener noreferrer">[`ec8c6b939a`</a>] - **deps**: V8: cherry-pick 657d8de27427 (Guy Bedford) <a href="https://github.com/nodejs/node/pull/62784" target="_blank" rel="noopener noreferrer">#62784</a> * \<a href="https://github.com/nodejs/node/commit/722c0c3274" target="_blank" rel="noopener noreferrer">[`722c0c3274`</a>] - **deps**: update nghttp3 to 1.14.0 (Node.js GitHub Bot) <a href="https://github.com/nodejs/node/pull/61187" target="_blank" rel="noopener noreferrer">#61187</a> * \<a href="https://github.com/nodejs/node/commit/5304db93d3" target="_blank" rel="noopener noreferrer">[`5304db93d3`</a>] - **deps**: update nghttp3 to 1.13.1 (Node.js GitHub Bot) <a href="https://github.com/nodejs/node/pull/60046" target="_blank" rel="noopener noreferrer">#60046</a> * \<a href="https://github.com/nodejs/node/commit/e073b3811d" target="_blank" rel="noopener noreferrer">[`e073b3811d`</a>] - **deps**: update nghttp3 to 1.11.0 (James M Snell) <a href="https://github.com/nodejs/node/pull/59249" target="_blank" rel="noopener noreferrer">#59249</a> * \<a href="https://github.com/nodejs/node/commit/1d00313fb2" target="_blank" rel="noopener noreferrer">[`1d00313fb2`</a>] - **deps**: update ngtcp2 to 1.14.0 (James M Snell) <a href="https://github.com/nodejs/node/pull/59249" target="_blank" rel="noopener noreferrer">#59249</a> * \[[`8b3a4fc ...[truncated 40614 chars] ## NiceOS maintainer checklist - [ ] Confirm that the detected version is a stable upstream release. - [ ] Check upstream changelog for security fixes, ABI/API changes and build-system changes. - [ ] Check ABI/API compatibility and reverse dependencies. - [ ] Download source into NiceOS lookaside storage. - [ ] Update `Version` and related fields in `SPECS/*.spec` only if policy allows it. - [ ] Regenerate `SOURCES/sources.lock.json`, manifests, metadata and SBOM. - [ ] Build SRPM/RPM in a clean NiceOS buildroot. - [ ] Run package smoke tests. - [ ] Link PR/build logs and close this issue after update or triage. ## Bot metadata - Tool: `niceos_upstream_monitor.py 2.1.3-local-websearch-github-release-pages` - Generated at: `2026-06-18T00:16:00Z`
Sign in to join this conversation.
No description provided.