Upstream update available: nodejs 24.12.0 → 24.16.0 #6

Open
opened 2026-05-22 03:12:56 +03:00 by sbelikov · 0 comments
Owner

Upstream update available: nodejs 24.12.024.16.0

Package

  • Package: nodejs
  • RPM name: nodejs
  • Branch: niceos-5.2
  • Current EVR: 24.12.0-1
  • Update class: minor
  • Compare method: python_rpm
  • Update policy: leaf
  • Risk tags: github-upstream

Upstream

Signals

  • Security-relevant keywords detected: True
  • Policy blocked: False
  • Policy reason: -
  • Labels: ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/minor, upstream-update, upstream/github

NiceSOFT AI preliminary stability analysis

Here's a summary of the Node.js 24.16.0 LTS release notes, key changes, and important considerations:


1. Key Highlights

  • LTS Status: This is the 24.16.0 Long-Term Support (LTS) version, with support for Apple Silicon (M1/M2) and Intel-based Macs until the end of the support period (details to be confirmed).
  • Risk Communication: The release notes explicitly state that universal binaries (for both Apple Silicon and Intel Macs) will continue to be supported for as long as practical, even though the full lifetime of Node.js 26 is now ending. This is a strategic decision to ensure compatibility for users with mixed hardware.

2. Notable Changes (Changelog)

  • Buffer Pool Size: Increased to 64 KiB by default (minor optimization).
  • Crypto Certificates: Updated to NSS 3.123.1 (security patches).
  • HTTP Validation: Added httpValidation option for header value validation (enhanced security).
  • Inspector Coverage: Exposed precise coverage start time to JavaScript runtime (improves debugging).
  • Permissions: Added permission.drop (for fine-grained access control).

3. Platform Support

  • Universal Binaries: Still supported for both Apple Silicon and Intel-based Macs.
  • LTS Duration: The support period for Node.js 24.16.0 is extended to ensure compatibility with future macOS updates.
  • End-of-Life (EOL): The full support period for Node.js 26 is not yet confirmed, but the release notes emphasize continued support for mixed-platform binaries.

4. Important Notes

  • Compatibility: Applications built for Node.js 24.16.0 will work on both Apple Silicon and Intel Macs. However, future updates may require recompilation or adjustments.
  • Security: The updated crypto certificates and HTTP validation enhancements improve security for developers and users.
  • Documentation: For detailed changelog and release notes, visit the official documentation:
    https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V24.md

5. Next Steps

  • Install: Use the official download page: https://nodejs.org/en/download.
  • Upgrade: Consider upgrading to a newer LTS version (e.g., 25.x) for long-term support and security patches.

Summary

  • Risk: Universal binaries remain supported for as long as practical, ensuring compatibility with future macOS updates.
  • Changes: Security enhancements, buffer pool adjustments, and permission improvements.
  • Support: LTS for 24.16.0, with extended support for mixed-platform binaries.

For the exact EOL date, check the official documentation or release notes.

  1. GitHub release API: nodejs/node v24.16.0
  2. GitHub release API: nodejs/node v26.3.0
  3. GitHub tag page: nodejs/node v24.16.0
  4. GitHub releases page: nodejs/node
  5. GitHub compare page: nodejs/node v24.12.0...v24.16.0
  6. Node.js — Run JavaScript Everywhere
  7. Node.js — Node.js 24.16.0 (LTS)
  8. Download Node.js®
  9. node/doc/changelogs/CHANGELOG_V24.md at main · nodejs/node

Upstream release notes / description

Notable Changes

Commits

...[truncated 40614 chars]

NiceOS maintainer checklist

  • Confirm that the detected version is a stable upstream release.
  • Check upstream changelog for security fixes, ABI/API changes and build-system changes.
  • Check ABI/API compatibility and reverse dependencies.
  • Download source into NiceOS lookaside storage.
  • Update Version and related fields in SPECS/*.spec only if policy allows it.
  • Regenerate SOURCES/sources.lock.json, manifests, metadata and SBOM.
  • Build SRPM/RPM in a clean NiceOS buildroot.
  • Run package smoke tests.
  • Link PR/build logs and close this issue after update or triage.

Bot metadata

  • Tool: niceos_upstream_monitor.py 2.1.3-local-websearch-github-release-pages
  • Generated at: 2026-06-17T00:17:15Z
<!-- niceos-upstream-monitor:fingerprint=upstream-update:nodejs:24.16.0 --> <!-- niceos-upstream-monitor:package=nodejs --> <!-- niceos-upstream-monitor:current=24.12.0 --> <!-- niceos-upstream-monitor:latest=24.16.0 --> # Upstream update available: `nodejs` `24.12.0` → `24.16.0` ## Package - Package: `nodejs` - RPM name: `nodejs` - Branch: `niceos-5.2` - Current EVR: `24.12.0-1` - Update class: `minor` - Compare method: `python_rpm` - Update policy: `leaf` - Risk tags: `github-upstream` ## Upstream - Upstream type: `github` - Upstream project: `nodejs/node` - Upstream URL: <a href="https://github.com/nodejs/node" target="_blank" rel="noopener noreferrer">github.com — node</a> - Detected version: `24.16.0` - Tag/release: `v24.16.0` - Source: `github_release` - Published: `2026-05-21T13:24:48Z` - Release URL: <a href="https://github.com/nodejs/node/releases/tag/v24.16.0" target="_blank" rel="noopener noreferrer">github.com — v24.16.0</a> - Source URL: <a href="https://api.github.com/repos/nodejs/node/tarball/v24.16.0" target="_blank" rel="noopener noreferrer">api.github.com — v24.16.0</a> - Pre-release: `False` ## Signals - Security-relevant keywords detected: `True` - Policy blocked: `False` - Policy reason: `-` - Labels: `ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/minor, upstream-update, upstream/github` ## NiceSOFT AI preliminary stability analysis Here's a summary of the **Node.js 24.16.0 LTS release notes**, key changes, and important considerations: --- ### **1. Key Highlights** - **LTS Status**: This is the **24.16.0 Long-Term Support (LTS) version**, with support for **Apple Silicon (M1/M2) and Intel-based Macs** until the end of the support period (details to be confirmed). - **Risk Communication**: The release notes explicitly state that **universal binaries (for both Apple Silicon and Intel Macs) will continue to be supported for as long as practical**, even though the full lifetime of Node.js 26 is now ending. This is a strategic decision to ensure compatibility for users with mixed hardware. --- ### **2. Notable Changes (Changelog)** - **Buffer Pool Size**: Increased to **64 KiB** by default (minor optimization). - **Crypto Certificates**: Updated to **NSS 3.123.1** (security patches). - **HTTP Validation**: Added `httpValidation` option for header value validation (enhanced security). - **Inspector Coverage**: Exposed precise coverage start time to JavaScript runtime (improves debugging). - **Permissions**: Added `permission.drop` (for fine-grained access control). --- ### **3. Platform Support** - **Universal Binaries**: Still supported for **both Apple Silicon and Intel-based Macs**. - **LTS Duration**: The support period for Node.js 24.16.0 is **extended** to ensure compatibility with future macOS updates. - **End-of-Life (EOL)**: The full support period for Node.js 26 is **not yet confirmed**, but the release notes emphasize continued support for mixed-platform binaries. --- ### **4. Important Notes** - **Compatibility**: Applications built for Node.js 24.16.0 will work on **both Apple Silicon and Intel Macs**. However, future updates may require recompilation or adjustments. - **Security**: The updated crypto certificates and HTTP validation enhancements improve security for developers and users. - **Documentation**: For detailed changelog and release notes, visit the official documentation: <a href="https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V24.md" target="_blank" rel="noopener noreferrer">https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V24.md</a> --- ### **5. Next Steps** - **Install**: Use the official download page: <a href="https://nodejs.org/en/download" target="_blank" rel="noopener noreferrer">https://nodejs.org/en/download</a>. - **Upgrade**: Consider upgrading to a newer LTS version (e.g., 25.x) for long-term support and security patches. --- ### **Summary** - **Risk**: Universal binaries remain supported for as long as practical, ensuring compatibility with future macOS updates. - **Changes**: Security enhancements, buffer pool adjustments, and permission improvements. - **Support**: LTS for 24.16.0, with extended support for mixed-platform binaries. For the exact EOL date, check the official documentation or release notes. ### Источники, найденные web_search 1. <a href="https://github.com/nodejs/node/releases/tag/v24.16.0" target="_blank" rel="noopener noreferrer">GitHub release API: nodejs/node v24.16.0</a> 2. <a href="https://github.com/nodejs/node/releases/tag/v26.3.0" target="_blank" rel="noopener noreferrer">GitHub release API: nodejs/node v26.3.0</a> 3. <a href="https://github.com/nodejs/node/tree/v24.16.0" target="_blank" rel="noopener noreferrer">GitHub tag page: nodejs/node v24.16.0</a> 4. <a href="https://github.com/nodejs/node/releases" target="_blank" rel="noopener noreferrer">GitHub releases page: nodejs/node</a> 5. <a href="https://github.com/nodejs/node/compare/v24.12.0...v24.16.0" target="_blank" rel="noopener noreferrer">GitHub compare page: nodejs/node v24.12.0...v24.16.0</a> 6. <a href="https://nodejs.org/" target="_blank" rel="noopener noreferrer">Node.js — Run JavaScript Everywhere</a> 7. <a href="https://nodejs.org/en/blog/release/v24.16.0" target="_blank" rel="noopener noreferrer">Node.js — Node.js 24.16.0 (LTS)</a> 8. <a href="https://nodejs.org/en/download" target="_blank" rel="noopener noreferrer">Download Node.js®</a> 9. <a href="https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V24.md" target="_blank" rel="noopener noreferrer">node/doc/changelogs/CHANGELOG_V24.md at main · nodejs/node</a> ## Upstream release notes / description ### Notable Changes * \<a href="https://github.com/nodejs/node/commit/b267f6bca3" target="_blank" rel="noopener noreferrer">[`b267f6bca3`</a>] - **(SEMVER-MINOR)** **crypto**: implement `randomUUIDv7()` (nabeel378) <a href="https://github.com/nodejs/node/pull/62553" target="_blank" rel="noopener noreferrer">#62553</a> * \<a href="https://github.com/nodejs/node/commit/ec2451b9cd" target="_blank" rel="noopener noreferrer">[`ec2451b9cd`</a>] - **(SEMVER-MINOR)** **debugger**: add edit-free runtime expression probes to `node inspect` (Joyee Cheung) <a href="https://github.com/nodejs/node/pull/62713" target="_blank" rel="noopener noreferrer">#62713</a> * \<a href="https://github.com/nodejs/node/commit/9705f628d9" target="_blank" rel="noopener noreferrer">[`9705f628d9`</a>] - **(SEMVER-MINOR)** **fs**: add signal option to `fs.stat()` (Mert Can Altin) <a href="https://github.com/nodejs/node/pull/57775" target="_blank" rel="noopener noreferrer">#57775</a> * \<a href="https://github.com/nodejs/node/commit/40ccfdecf9" target="_blank" rel="noopener noreferrer">[`40ccfdecf9`</a>] - **(SEMVER-MINOR)** **fs**: expose `frsize` field in `statfs` (Jinho Jang) <a href="https://github.com/nodejs/node/pull/62277" target="_blank" rel="noopener noreferrer">#62277</a> * \<a href="https://github.com/nodejs/node/commit/d7188af5c9" target="_blank" rel="noopener noreferrer">[`d7188af5c9`</a>] - **(SEMVER-MINOR)** **http**: harden `ClientRequest` options merge (Matteo Collina) <a href="https://github.com/nodejs/node/pull/63082" target="_blank" rel="noopener noreferrer">#63082</a> * \<a href="https://github.com/nodejs/node/commit/aa1d8a9afc" target="_blank" rel="noopener noreferrer">[`aa1d8a9afc`</a>] - **(SEMVER-MINOR)** **http**: add `req.signal` to `IncomingMessage` (Akshat) <a href="https://github.com/nodejs/node/pull/62541" target="_blank" rel="noopener noreferrer">#62541</a> * \<a href="https://github.com/nodejs/node/commit/6f37f7e240" target="_blank" rel="noopener noreferrer">[`6f37f7e240`</a>] - **(SEMVER-MINOR)** **stream**: propagate destruction in `duplexPair` (Ahmed Elhor) <a href="https://github.com/nodejs/node/pull/61098" target="_blank" rel="noopener noreferrer">#61098</a> * \<a href="https://github.com/nodejs/node/commit/d14029be7f" target="_blank" rel="noopener noreferrer">[`d14029be7f`</a>] - **(SEMVER-MINOR)** **test\_runner**: support test order randomization (Pietro Marchini) <a href="https://github.com/nodejs/node/pull/61747" target="_blank" rel="noopener noreferrer">#61747</a> * \<a href="https://github.com/nodejs/node/commit/d142c584cd" target="_blank" rel="noopener noreferrer">[`d142c584cd`</a>] - **(SEMVER-MINOR)** **test\_runner**: align mock timeout api (sangwook) <a href="https://github.com/nodejs/node/pull/62820" target="_blank" rel="noopener noreferrer">#62820</a> * \<a href="https://github.com/nodejs/node/commit/01a9552585" target="_blank" rel="noopener noreferrer">[`01a9552585`</a>] - **(SEMVER-MINOR)** **test\_runner**: add mock-timers support for `AbortSignal.timeout` (DeveloperViraj) <a href="https://github.com/nodejs/node/pull/60751" target="_blank" rel="noopener noreferrer">#60751</a> * \<a href="https://github.com/nodejs/node/commit/00705a459a" target="_blank" rel="noopener noreferrer">[`00705a459a`</a>] - **(SEMVER-MINOR)** **util**: colorize text with hex colors (Guilherme Araújo) <a href="https://github.com/nodejs/node/pull/61556" target="_blank" rel="noopener noreferrer">#61556</a> ### Commits * \<a href="https://github.com/nodejs/node/commit/dd72df060d" target="_blank" rel="noopener noreferrer">[`dd72df060d`</a>] - **assert,util**: fix stale nested cycle memo entries (Ruben Bridgewater) <a href="https://github.com/nodejs/node/pull/62509" target="_blank" rel="noopener noreferrer">#62509</a> * \<a href="https://github.com/nodejs/node/commit/add94f4bc3" target="_blank" rel="noopener noreferrer">[`add94f4bc3`</a>] - **build**: track PDL files as inputs in inspector GN build (Robo) <a href="https://github.com/nodejs/node/pull/62888" target="_blank" rel="noopener noreferrer">#62888</a> * \<a href="https://github.com/nodejs/node/commit/1b1eb9e334" target="_blank" rel="noopener noreferrer">[`1b1eb9e334`</a>] - **build**: remove redundant -fuse-linker-plugin from GCC LTO flags (Daniel Lando) <a href="https://github.com/nodejs/node/pull/62667" target="_blank" rel="noopener noreferrer">#62667</a> * \<a href="https://github.com/nodejs/node/commit/8752b604ec" target="_blank" rel="noopener noreferrer">[`8752b604ec`</a>] - **crypto**: deduplicate and canonicalize CryptoKey usages (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62902" target="_blank" rel="noopener noreferrer">#62902</a> * \<a href="https://github.com/nodejs/node/commit/341947e7fd" target="_blank" rel="noopener noreferrer">[`341947e7fd`</a>] - **crypto**: reject unintended raw key format string input (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62974" target="_blank" rel="noopener noreferrer">#62974</a> * \<a href="https://github.com/nodejs/node/commit/28a78747fc" target="_blank" rel="noopener noreferrer">[`28a78747fc`</a>] - **crypto**: remove Argon2 KDF derivation from its job setup (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62863" target="_blank" rel="noopener noreferrer">#62863</a> * \<a href="https://github.com/nodejs/node/commit/16e8c2b54d" target="_blank" rel="noopener noreferrer">[`16e8c2b54d`</a>] - **crypto**: fix unsigned conversion of 4-byte RSA publicExponent (DeepView Autofix) <a href="https://github.com/nodejs/node/pull/62839" target="_blank" rel="noopener noreferrer">#62839</a> * \<a href="https://github.com/nodejs/node/commit/eeae754a87" target="_blank" rel="noopener noreferrer">[`eeae754a87`</a>] - **crypto**: reject inherited key type names (Jonathan Lopes) <a href="https://github.com/nodejs/node/pull/62875" target="_blank" rel="noopener noreferrer">#62875</a> * \<a href="https://github.com/nodejs/node/commit/9dd5540325" target="_blank" rel="noopener noreferrer">[`9dd5540325`</a>] - **crypto**: add memory tracking for secureContext openssl objects (Mert Can Altin) <a href="https://github.com/nodejs/node/pull/59051" target="_blank" rel="noopener noreferrer">#59051</a> * \<a href="https://github.com/nodejs/node/commit/b267f6bca3" target="_blank" rel="noopener noreferrer">[`b267f6bca3`</a>] - **(SEMVER-MINOR)** **crypto**: implement randomUUIDv7() (nabeel378) <a href="https://github.com/nodejs/node/pull/62553" target="_blank" rel="noopener noreferrer">#62553</a> * \<a href="https://github.com/nodejs/node/commit/7597d204c1" target="_blank" rel="noopener noreferrer">[`7597d204c1`</a>] - **crypto**: add support for Ed25519 context parameter (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62474" target="_blank" rel="noopener noreferrer">#62474</a> * \<a href="https://github.com/nodejs/node/commit/4bf85845da" target="_blank" rel="noopener noreferrer">[`4bf85845da`</a>] - **debugger**: move ProbeInspectorSession and helpers to separate files (Joyee Cheung) <a href="https://github.com/nodejs/node/pull/63013" target="_blank" rel="noopener noreferrer">#63013</a> * \<a href="https://github.com/nodejs/node/commit/ec2451b9cd" target="_blank" rel="noopener noreferrer">[`ec2451b9cd`</a>] - **(SEMVER-MINOR)** **debugger**: add edit-free runtime expression probes to `node inspect` (Joyee Cheung) <a href="https://github.com/nodejs/node/pull/62713" target="_blank" rel="noopener noreferrer">#62713</a> * \<a href="https://github.com/nodejs/node/commit/83e98f77b7" target="_blank" rel="noopener noreferrer">[`83e98f77b7`</a>] - **deps**: update corepack to 0.35.0 (Node.js GitHub Bot) <a href="https://github.com/nodejs/node/pull/63375" target="_blank" rel="noopener noreferrer">#63375</a> * \<a href="https://github.com/nodejs/node/commit/ec8c6b939a" target="_blank" rel="noopener noreferrer">[`ec8c6b939a`</a>] - **deps**: V8: cherry-pick 657d8de27427 (Guy Bedford) <a href="https://github.com/nodejs/node/pull/62784" target="_blank" rel="noopener noreferrer">#62784</a> * \<a href="https://github.com/nodejs/node/commit/722c0c3274" target="_blank" rel="noopener noreferrer">[`722c0c3274`</a>] - **deps**: update nghttp3 to 1.14.0 (Node.js GitHub Bot) <a href="https://github.com/nodejs/node/pull/61187" target="_blank" rel="noopener noreferrer">#61187</a> * \<a href="https://github.com/nodejs/node/commit/5304db93d3" target="_blank" rel="noopener noreferrer">[`5304db93d3`</a>] - **deps**: update nghttp3 to 1.13.1 (Node.js GitHub Bot) <a href="https://github.com/nodejs/node/pull/60046" target="_blank" rel="noopener noreferrer">#60046</a> * \<a href="https://github.com/nodejs/node/commit/e073b3811d" target="_blank" rel="noopener noreferrer">[`e073b3811d`</a>] - **deps**: update nghttp3 to 1.11.0 (James M Snell) <a href="https://github.com/nodejs/node/pull/59249" target="_blank" rel="noopener noreferrer">#59249</a> * \<a href="https://github.com/nodejs/node/commit/1d00313fb2" target="_blank" rel="noopener noreferrer">[`1d00313fb2`</a>] - **deps**: update ngtcp2 to 1.14.0 (James M Snell) <a href="https://github.com/nodejs/node/pull/59249" target="_blank" rel="noopener noreferrer">#59249</a> * \[[`8b3a4fc ...[truncated 40614 chars] ## NiceOS maintainer checklist - [ ] Confirm that the detected version is a stable upstream release. - [ ] Check upstream changelog for security fixes, ABI/API changes and build-system changes. - [ ] Check ABI/API compatibility and reverse dependencies. - [ ] Download source into NiceOS lookaside storage. - [ ] Update `Version` and related fields in `SPECS/*.spec` only if policy allows it. - [ ] Regenerate `SOURCES/sources.lock.json`, manifests, metadata and SBOM. - [ ] Build SRPM/RPM in a clean NiceOS buildroot. - [ ] Run package smoke tests. - [ ] Link PR/build logs and close this issue after update or triage. ## Bot metadata - Tool: `niceos_upstream_monitor.py 2.1.3-local-websearch-github-release-pages` - Generated at: `2026-06-17T00:17:15Z`
Sign in to join this conversation.
No description provided.