Upstream update available: nodejs 24.12.0 → 24.18.0 #9

New issue

Open

opened 2026-06-24 03:17:10 +03:00 by sbelikov · 0 comments

sbelikov commented 2026-06-24 03:17:10 +03:00

Owner

Copy link

Upstream update available: nodejs 24.12.0 → 24.18.0

Package

• Package: nodejs
• RPM name: nodejs
• Branch: niceos-5.2
• Current EVR: 24.12.0-1
• Update class: minor
• Compare method: python_rpm
• Update policy: leaf
• Risk tags: github-upstream

Upstream

• Upstream type: github
• Upstream project: nodejs/node
• Upstream URL: github.com — node
• Detected version: 24.18.0
• Tag/release: v24.18.0
• Source: github_release
• Published: 2026-06-23T23:11:37Z
• Release URL: github.com — v24.18.0
• Source URL: api.github.com — v24.18.0
• Pre-release: False

Signals

• Security-relevant keywords detected: True
• Policy blocked: False
• Policy reason: -
• Labels: ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/minor, upstream-update, upstream/github

NiceSOFT AI preliminary stability analysis

Here's a summary of the Node.js 24.18.0 LTS release notes, key changes, and official sources:

---

Key Highlights of Node.js 24.18.0 LTS

1. LTS Status:

   • This is the 24.18.0 Long-Term Support (LTS) version, offering stability and security updates for 2 years.

2. New Features:

   • --import-text Flag:
     Added to support importing text-based modules (e.g., import text in package.json).
     GitHub Release
   • Performance Improvements:
     • perf_hooks Module:
       Added sampling of delay per event loop iteration to better monitor performance.
     • tls Module:
       Enhanced to report negotiated TLS groups for better security visibility.
     • buffer Module:
       Removed an unreachable overflow check in atob for improved stability.
   • Security Fixes:
     • Updated to address potential vulnerabilities in the TLS implementation.

3. Bug Fixes:

   • Fixed issues in the perf_hooks and tls modules.
   • Improved stability in the buffer module.

---

Official Sources

1. Node.js Official Website:

   • https://nodejs.org/en/blog/release/v24.18.0
   • Provides full release notes, changelog, and download links.

2. GitHub Release Page:

   • https://github.com/nodejs/node/releases/tag/v24.18.0
   • Detailed commit history and changes per commit.

3. Changelog File:

   • https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V24.md
   • Official documentation with detailed release notes.

---

Important Notes

• Upgrade Path:
  If you're using an older version (e.g., 24.12.0), upgrade to 24.18.0 to benefit from the latest features and security patches.
• Compatibility:
  The LTS version is compatible with most modern applications and tools.

---

Summary

Node.js 24.18.0 introduces improvements in performance, security, and usability, with key additions like the --import-text flag and enhanced TLS support. Always check the official sources for the latest details and updates.

Источники, найденные web_search

1. GitHub release API: nodejs/node v24.18.0
2. GitHub release API: nodejs/node v26.5.0
3. GitHub tag page: nodejs/node v24.18.0
4. GitHub releases page: nodejs/node
5. GitHub compare page: nodejs/node v24.12.0...v24.18.0
6. Node.js — Run JavaScript Everywhere
7. Node.js — Node.js 24.18.0 (LTS)
8. Download Node.js®
9. Node.js
10. node/doc/changelogs/CHANGELOG_V24.md at main · nodejs/node · GitHub

Upstream release notes / description

Notable Changes

• <a href="github.com/nodejs/node@e07e7a31e1" target="_blank" rel="noopener noreferrer">[e07e7a31e1] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527
• <a href="github.com/nodejs/node@44c8ebcbd6" target="_blank" rel="noopener noreferrer">[44c8ebcbd6] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #64004
• <a href="github.com/nodejs/node@d3ef4122ee" target="_blank" rel="noopener noreferrer">[d3ef4122ee] - (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina) #63597
• <a href="github.com/nodejs/node@bb2857b85a" target="_blank" rel="noopener noreferrer">[bb2857b85a] - (SEMVER-MINOR) crypto: align key argument names in docs and error messages (Filip Skokan) #62527
• <a href="github.com/nodejs/node@b9d5e87880" target="_blank" rel="noopener noreferrer">[b9d5e87880] - (SEMVER-MINOR) crypto: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) #62527
• <a href="github.com/nodejs/node@ccd756d61e" target="_blank" rel="noopener noreferrer">[ccd756d61e] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #62183
• <a href="github.com/nodejs/node@4c9251fc09" target="_blank" rel="noopener noreferrer">[4c9251fc09] - (SEMVER-MINOR) http: add writeInformation to send arbitrary 1xx status codes (Tim Perry) #63155
• <a href="github.com/nodejs/node@8c989ec4a3" target="_blank" rel="noopener noreferrer">[8c989ec4a3] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #63079
• <a href="github.com/nodejs/node@3f54c8ba32" target="_blank" rel="noopener noreferrer">[3f54c8ba32] - Revert "stream: noop pause/resume on destroyed streams" (Stewart X Addison) #63834

Commits

• <a href="github.com/nodejs/node@d3ef4122ee" target="_blank" rel="noopener noreferrer">[d3ef4122ee] - (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina) #63597
• <a href="github.com/nodejs/node@9ff36e40f0" target="_blank" rel="noopener noreferrer">[9ff36e40f0] - build: add --enable-all-experimentals build flag (Paolo Insogna) #62755
• <a href="github.com/nodejs/node@7c22ee23aa" target="_blank" rel="noopener noreferrer">[7c22ee23aa] - build: def NODE_USE_NODE_CODE_CACHE only used in node_mksnapshot (Chengzhong Wu) #63588
• <a href="github.com/nodejs/node@2551abdb4a" target="_blank" rel="noopener noreferrer">[2551abdb4a] - build,win: enable x64 PGO (Stefan Stojanovic) #62761
• <a href="github.com/nodejs/node@e8a55ce9b1" target="_blank" rel="noopener noreferrer">[e8a55ce9b1] - crypto: strengthen argument CHECKs in TurboSHAKE (Tobias Nießen) #62763
• <a href="github.com/nodejs/node@ae61cd68f3" target="_blank" rel="noopener noreferrer">[ae61cd68f3] - crypto: harden WebCrypto against prototype pollution (Filip Skokan) #63363
• <a href="github.com/nodejs/node@3d05a1d396" target="_blank" rel="noopener noreferrer">[3d05a1d396] - crypto: pass CryptoKey handles to KDF jobs (Filip Skokan) #63363
• <a href="github.com/nodejs/node@f9d10a3f6b" target="_blank" rel="noopener noreferrer">[f9d10a3f6b] - crypto: remove async from WebCrypto methods (Filip Skokan) #63363
• <a href="github.com/nodejs/node@e431d93e9e" target="_blank" rel="noopener noreferrer">[e431d93e9e] - crypto: add WebCrypto CryptoJob mode (Filip Skokan) #63363
• <a href="github.com/nodejs/node@56e2505e48" target="_blank" rel="noopener noreferrer">[56e2505e48] - crypto: wire ML-DSA and ML-KEM for use when using BoringSSL (Filip Skokan) #63255
• <a href="github.com/nodejs/node@3bac77f2a8" target="_blank" rel="noopener noreferrer">[3bac77f2a8] - crypto: wire ChaCha20-Poly1305 in Web Cryptography when using BoringSSL (Filip Skokan) #63255
• <a href="github.com/nodejs/node@1bff901b09" target="_blank" rel="noopener noreferrer">[1bff901b09] - crypto: wire AES-KW in Web Cryptography when using BoringSSL (Filip Skokan) #63255
• <a href="github.com/nodejs/node@4433fca3df" target="_blank" rel="noopener noreferrer">[4433fca3df] - crypto: harden CryptoKey algorithm slots (Filip Skokan) #63111
• <a href="github.com/nodejs/node@b5cf01217a" target="_blank" rel="noopener noreferrer">[b5cf01217a] - crypto: harden KeyObject internal slots (Filip Skokan) #63111
• <a href="github.com/nodejs/node@ce84aef37d" target="_blank" rel="noopener noreferrer">[ce84aef37d] - crypto: add guards and adjust tests for BoringSSL (Filip Skokan) #62883
• <a href="github.com/nodejs/node@26781689b0" target="_blank" rel="noopener noreferrer">[26781689b0] - crypto: reject duplicate ML-KEM JWK key_ops (Filip Skokan) #62905
• <a href="github.com/nodejs/node@aeea8f4970" target="_blank" rel="noopener noreferrer">[aeea8f4970] - crypto: add JWK support for ML-KEM and SLH-DSA key types (Filip Skokan) #62706
• <a href="github.com/nodejs/node@407cf91656" target="_blank" rel="noopener noreferrer">[407cf91656] - crypto: guard against size_t overflow on experimental 32-bit arch (Filip Skokan) #62626
• <a href="github.com/nodejs/node@bb2857b85a" target="_blank" rel="noopener noreferrer">[bb2857b85a] - (SEMVER-MINOR) crypto: align key argument names in docs and error messages (Filip Skokan) #62527
• <a href="github.com/nodejs/node@b9d5e87880" target="_blank" rel="noopener noreferrer">[b9d5e87880] - (SEMVER-MINOR) crypto: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) #62527
• [[b46d52b283](http

...[truncated 25222 chars]

NiceOS maintainer checklist

• Confirm that the detected version is a stable upstream release.
• Check upstream changelog for security fixes, ABI/API changes and build-system changes.
• Check ABI/API compatibility and reverse dependencies.
• Download source into NiceOS lookaside storage.
• Update Version and related fields in SPECS/*.spec only if policy allows it.
• Regenerate SOURCES/sources.lock.json, manifests, metadata and SBOM.
• Build SRPM/RPM in a clean NiceOS buildroot.
• Run package smoke tests.
• Link PR/build logs and close this issue after update or triage.

Bot metadata

• Tool: niceos_upstream_monitor.py 2.1.3-local-websearch-github-release-pages
• Generated at: 2026-07-26T00:17:31Z

<!-- niceos-upstream-monitor:fingerprint=upstream-update:nodejs:24.18.0 --> <!-- niceos-upstream-monitor:package=nodejs --> <!-- niceos-upstream-monitor:current=24.12.0 --> <!-- niceos-upstream-monitor:latest=24.18.0 --> # Upstream update available: `nodejs` `24.12.0` → `24.18.0` ## Package - Package: `nodejs` - RPM name: `nodejs` - Branch: `niceos-5.2` - Current EVR: `24.12.0-1` - Update class: `minor` - Compare method: `python_rpm` - Update policy: `leaf` - Risk tags: `github-upstream` ## Upstream - Upstream type: `github` - Upstream project: `nodejs/node` - Upstream URL: <a href="https://github.com/nodejs/node" target="_blank" rel="noopener noreferrer">github.com — node</a> - Detected version: `24.18.0` - Tag/release: `v24.18.0` - Source: `github_release` - Published: `2026-06-23T23:11:37Z` - Release URL: <a href="https://github.com/nodejs/node/releases/tag/v24.18.0" target="_blank" rel="noopener noreferrer">github.com — v24.18.0</a> - Source URL: <a href="https://api.github.com/repos/nodejs/node/tarball/v24.18.0" target="_blank" rel="noopener noreferrer">api.github.com — v24.18.0</a> - Pre-release: `False` ## Signals - Security-relevant keywords detected: `True` - Policy blocked: `False` - Policy reason: `-` - Labels: `ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/minor, upstream-update, upstream/github` ## NiceSOFT AI preliminary stability analysis Here's a summary of the **Node.js 24.18.0 LTS release notes**, key changes, and official sources: --- ### **Key Highlights of Node.js 24.18.0 LTS** 1. **LTS Status**: - This is the **24.18.0 Long-Term Support (LTS) version**, offering stability and security updates for 2 years. 2. **New Features**: - **`--import-text` Flag**: Added to support importing text-based modules (e.g., `import text` in `package.json`). <a href="https://github.com/nodejs/node/releases/tag/v24.18.0" target="_blank" rel="noopener noreferrer">GitHub Release</a> - **Performance Improvements**: - **`perf_hooks` Module**: Added sampling of delay per event loop iteration to better monitor performance. - **`tls` Module**: Enhanced to report negotiated TLS groups for better security visibility. - **`buffer` Module**: Removed an unreachable overflow check in `atob` for improved stability. - **Security Fixes**: - Updated to address potential vulnerabilities in the TLS implementation. 3. **Bug Fixes**: - Fixed issues in the `perf_hooks` and `tls` modules. - Improved stability in the `buffer` module. --- ### **Official Sources** 1. **Node.js Official Website**: - <a href="https://nodejs.org/en/blog/release/v24.18.0" target="_blank" rel="noopener noreferrer">https://nodejs.org/en/blog/release/v24.18.0</a> - Provides full release notes, changelog, and download links. 2. **GitHub Release Page**: - <a href="https://github.com/nodejs/node/releases/tag/v24.18.0" target="_blank" rel="noopener noreferrer">https://github.com/nodejs/node/releases/tag/v24.18.0</a> - Detailed commit history and changes per commit. 3. **Changelog File**: - <a href="https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V24.md" target="_blank" rel="noopener noreferrer">https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V24.md</a> - Official documentation with detailed release notes. --- ### **Important Notes** - **Upgrade Path**: If you're using an older version (e.g., 24.12.0), upgrade to 24.18.0 to benefit from the latest features and security patches. - **Compatibility**: The LTS version is compatible with most modern applications and tools. --- ### **Summary** Node.js 24.18.0 introduces improvements in performance, security, and usability, with key additions like the `--import-text` flag and enhanced TLS support. Always check the official sources for the latest details and updates. ### Источники, найденные web_search 1. <a href="https://github.com/nodejs/node/releases/tag/v24.18.0" target="_blank" rel="noopener noreferrer">GitHub release API: nodejs/node v24.18.0</a> 2. <a href="https://github.com/nodejs/node/releases/tag/v26.5.0" target="_blank" rel="noopener noreferrer">GitHub release API: nodejs/node v26.5.0</a> 3. <a href="https://github.com/nodejs/node/tree/v24.18.0" target="_blank" rel="noopener noreferrer">GitHub tag page: nodejs/node v24.18.0</a> 4. <a href="https://github.com/nodejs/node/releases" target="_blank" rel="noopener noreferrer">GitHub releases page: nodejs/node</a> 5. <a href="https://github.com/nodejs/node/compare/v24.12.0...v24.18.0" target="_blank" rel="noopener noreferrer">GitHub compare page: nodejs/node v24.12.0...v24.18.0</a> 6. <a href="https://nodejs.org/" target="_blank" rel="noopener noreferrer">Node.js — Run JavaScript Everywhere</a> 7. <a href="https://nodejs.org/en/blog/release/v24.18.0" target="_blank" rel="noopener noreferrer">Node.js — Node.js 24.18.0 (LTS)</a> 8. <a href="https://nodejs.org/en/download" target="_blank" rel="noopener noreferrer">Download Node.js®</a> 9. <a href="https://nodejs.org/en/blog/release" target="_blank" rel="noopener noreferrer">Node.js</a> 10. <a href="https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V24.md" target="_blank" rel="noopener noreferrer">node/doc/changelogs/CHANGELOG_V24.md at main · nodejs/node · GitHub</a> ## Upstream release notes / description ### Notable Changes * \<a href="https://github.com/nodejs/node/commit/e07e7a31e1" target="_blank" rel="noopener noreferrer">[`e07e7a31e1`</a>] - **crypto**: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) <a href="https://github.com/nodejs/node/pull/63527" target="_blank" rel="noopener noreferrer">#63527</a> * \<a href="https://github.com/nodejs/node/commit/44c8ebcbd6" target="_blank" rel="noopener noreferrer">[`44c8ebcbd6`</a>] - **http**: avoid stream listeners on idle agent sockets (Matteo Collina) <a href="https://github.com/nodejs/node/pull/64004" target="_blank" rel="noopener noreferrer">#64004</a> * \<a href="https://github.com/nodejs/node/commit/d3ef4122ee" target="_blank" rel="noopener noreferrer">[`d3ef4122ee`</a>] - **(SEMVER-MINOR)** **buffer**: increase Buffer.poolSize default to 64 KiB (Matteo Collina) <a href="https://github.com/nodejs/node/pull/63597" target="_blank" rel="noopener noreferrer">#63597</a> * \<a href="https://github.com/nodejs/node/commit/bb2857b85a" target="_blank" rel="noopener noreferrer">[`bb2857b85a`</a>] - **(SEMVER-MINOR)** **crypto**: align key argument names in docs and error messages (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62527" target="_blank" rel="noopener noreferrer">#62527</a> * \<a href="https://github.com/nodejs/node/commit/b9d5e87880" target="_blank" rel="noopener noreferrer">[`b9d5e87880`</a>] - **(SEMVER-MINOR)** **crypto**: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62527" target="_blank" rel="noopener noreferrer">#62527</a> * \<a href="https://github.com/nodejs/node/commit/ccd756d61e" target="_blank" rel="noopener noreferrer">[`ccd756d61e`</a>] - **(SEMVER-MINOR)** **crypto**: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62183" target="_blank" rel="noopener noreferrer">#62183</a> * \<a href="https://github.com/nodejs/node/commit/4c9251fc09" target="_blank" rel="noopener noreferrer">[`4c9251fc09`</a>] - **(SEMVER-MINOR)** **http**: add writeInformation to send arbitrary 1xx status codes (Tim Perry) <a href="https://github.com/nodejs/node/pull/63155" target="_blank" rel="noopener noreferrer">#63155</a> * \<a href="https://github.com/nodejs/node/commit/8c989ec4a3" target="_blank" rel="noopener noreferrer">[`8c989ec4a3`</a>] - **(SEMVER-MINOR)** **inspector**: expose precise coverage start to JS runtime (sangwook) <a href="https://github.com/nodejs/node/pull/63079" target="_blank" rel="noopener noreferrer">#63079</a> * \<a href="https://github.com/nodejs/node/commit/3f54c8ba32" target="_blank" rel="noopener noreferrer">[`3f54c8ba32`</a>] - _**Revert**_ "**stream**: noop pause/resume on destroyed streams" (Stewart X Addison) <a href="https://github.com/nodejs/node/pull/63834" target="_blank" rel="noopener noreferrer">#63834</a> ### Commits * \<a href="https://github.com/nodejs/node/commit/d3ef4122ee" target="_blank" rel="noopener noreferrer">[`d3ef4122ee`</a>] - **(SEMVER-MINOR)** **buffer**: increase Buffer.poolSize default to 64 KiB (Matteo Collina) <a href="https://github.com/nodejs/node/pull/63597" target="_blank" rel="noopener noreferrer">#63597</a> * \<a href="https://github.com/nodejs/node/commit/9ff36e40f0" target="_blank" rel="noopener noreferrer">[`9ff36e40f0`</a>] - **build**: add --enable-all-experimentals build flag (Paolo Insogna) <a href="https://github.com/nodejs/node/pull/62755" target="_blank" rel="noopener noreferrer">#62755</a> * \<a href="https://github.com/nodejs/node/commit/7c22ee23aa" target="_blank" rel="noopener noreferrer">[`7c22ee23aa`</a>] - **build**: def `NODE_USE_NODE_CODE_CACHE` only used in node\_mksnapshot (Chengzhong Wu) <a href="https://github.com/nodejs/node/pull/63588" target="_blank" rel="noopener noreferrer">#63588</a> * \<a href="https://github.com/nodejs/node/commit/2551abdb4a" target="_blank" rel="noopener noreferrer">[`2551abdb4a`</a>] - **build,win**: enable x64 PGO (Stefan Stojanovic) <a href="https://github.com/nodejs/node/pull/62761" target="_blank" rel="noopener noreferrer">#62761</a> * \<a href="https://github.com/nodejs/node/commit/e8a55ce9b1" target="_blank" rel="noopener noreferrer">[`e8a55ce9b1`</a>] - **crypto**: strengthen argument CHECKs in TurboSHAKE (Tobias Nießen) <a href="https://github.com/nodejs/node/pull/62763" target="_blank" rel="noopener noreferrer">#62763</a> * \<a href="https://github.com/nodejs/node/commit/ae61cd68f3" target="_blank" rel="noopener noreferrer">[`ae61cd68f3`</a>] - **crypto**: harden WebCrypto against prototype pollution (Filip Skokan) <a href="https://github.com/nodejs/node/pull/63363" target="_blank" rel="noopener noreferrer">#63363</a> * \<a href="https://github.com/nodejs/node/commit/3d05a1d396" target="_blank" rel="noopener noreferrer">[`3d05a1d396`</a>] - **crypto**: pass CryptoKey handles to KDF jobs (Filip Skokan) <a href="https://github.com/nodejs/node/pull/63363" target="_blank" rel="noopener noreferrer">#63363</a> * \<a href="https://github.com/nodejs/node/commit/f9d10a3f6b" target="_blank" rel="noopener noreferrer">[`f9d10a3f6b`</a>] - **crypto**: remove async from WebCrypto methods (Filip Skokan) <a href="https://github.com/nodejs/node/pull/63363" target="_blank" rel="noopener noreferrer">#63363</a> * \<a href="https://github.com/nodejs/node/commit/e431d93e9e" target="_blank" rel="noopener noreferrer">[`e431d93e9e`</a>] - **crypto**: add WebCrypto CryptoJob mode (Filip Skokan) <a href="https://github.com/nodejs/node/pull/63363" target="_blank" rel="noopener noreferrer">#63363</a> * \<a href="https://github.com/nodejs/node/commit/56e2505e48" target="_blank" rel="noopener noreferrer">[`56e2505e48`</a>] - **crypto**: wire ML-DSA and ML-KEM for use when using BoringSSL (Filip Skokan) <a href="https://github.com/nodejs/node/pull/63255" target="_blank" rel="noopener noreferrer">#63255</a> * \<a href="https://github.com/nodejs/node/commit/3bac77f2a8" target="_blank" rel="noopener noreferrer">[`3bac77f2a8`</a>] - **crypto**: wire ChaCha20-Poly1305 in Web Cryptography when using BoringSSL (Filip Skokan) <a href="https://github.com/nodejs/node/pull/63255" target="_blank" rel="noopener noreferrer">#63255</a> * \<a href="https://github.com/nodejs/node/commit/1bff901b09" target="_blank" rel="noopener noreferrer">[`1bff901b09`</a>] - **crypto**: wire AES-KW in Web Cryptography when using BoringSSL (Filip Skokan) <a href="https://github.com/nodejs/node/pull/63255" target="_blank" rel="noopener noreferrer">#63255</a> * \<a href="https://github.com/nodejs/node/commit/4433fca3df" target="_blank" rel="noopener noreferrer">[`4433fca3df`</a>] - **crypto**: harden CryptoKey algorithm slots (Filip Skokan) <a href="https://github.com/nodejs/node/pull/63111" target="_blank" rel="noopener noreferrer">#63111</a> * \<a href="https://github.com/nodejs/node/commit/b5cf01217a" target="_blank" rel="noopener noreferrer">[`b5cf01217a`</a>] - **crypto**: harden KeyObject internal slots (Filip Skokan) <a href="https://github.com/nodejs/node/pull/63111" target="_blank" rel="noopener noreferrer">#63111</a> * \<a href="https://github.com/nodejs/node/commit/ce84aef37d" target="_blank" rel="noopener noreferrer">[`ce84aef37d`</a>] - **crypto**: add guards and adjust tests for BoringSSL (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62883" target="_blank" rel="noopener noreferrer">#62883</a> * \<a href="https://github.com/nodejs/node/commit/26781689b0" target="_blank" rel="noopener noreferrer">[`26781689b0`</a>] - **crypto**: reject duplicate ML-KEM JWK key\_ops (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62905" target="_blank" rel="noopener noreferrer">#62905</a> * \<a href="https://github.com/nodejs/node/commit/aeea8f4970" target="_blank" rel="noopener noreferrer">[`aeea8f4970`</a>] - **crypto**: add JWK support for ML-KEM and SLH-DSA key types (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62706" target="_blank" rel="noopener noreferrer">#62706</a> * \<a href="https://github.com/nodejs/node/commit/407cf91656" target="_blank" rel="noopener noreferrer">[`407cf91656`</a>] - **crypto**: guard against size\_t overflow on experimental 32-bit arch (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62626" target="_blank" rel="noopener noreferrer">#62626</a> * \<a href="https://github.com/nodejs/node/commit/bb2857b85a" target="_blank" rel="noopener noreferrer">[`bb2857b85a`</a>] - **(SEMVER-MINOR)** **crypto**: align key argument names in docs and error messages (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62527" target="_blank" rel="noopener noreferrer">#62527</a> * \<a href="https://github.com/nodejs/node/commit/b9d5e87880" target="_blank" rel="noopener noreferrer">[`b9d5e87880`</a>] - **(SEMVER-MINOR)** **crypto**: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) <a href="https://github.com/nodejs/node/pull/62527" target="_blank" rel="noopener noreferrer">#62527</a> * \[[`b46d52b283`](http ...[truncated 25222 chars] ## NiceOS maintainer checklist - [ ] Confirm that the detected version is a stable upstream release. - [ ] Check upstream changelog for security fixes, ABI/API changes and build-system changes. - [ ] Check ABI/API compatibility and reverse dependencies. - [ ] Download source into NiceOS lookaside storage. - [ ] Update `Version` and related fields in `SPECS/*.spec` only if policy allows it. - [ ] Regenerate `SOURCES/sources.lock.json`, manifests, metadata and SBOM. - [ ] Build SRPM/RPM in a clean NiceOS buildroot. - [ ] Run package smoke tests. - [ ] Link PR/build logs and close this issue after update or triage. ## Bot metadata - Tool: `niceos_upstream_monitor.py 2.1.3-local-websearch-github-release-pages` - Generated at: `2026-07-26T00:17:31Z`

sbelikov added the

ai-summary

bot

needs-build

needs-triage

priority/high

security-release

upstream-update

upstream/github

update/minor

labels 2026-06-24 03:17:10 +03:00

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

niceos-5.2

update-nodejs-24.15.0

No results found.

Labels

Clear labels   

ai-summary

Issue contains local NiceSOFT AI generated preliminary analysis

  

bot

Created by automation

  

cve

Created by niceos_cve_create_issues.py

  

llm-analysis

Created by niceos_cve_create_issues.py

  

needs-build

Needs build verification

  

needs-triage

Needs maintainer triage

  

priority/high

High priority

  

security

Created by niceos_cve_create_issues.py

  

security-release

Release notes mention security fixes or CVE

  

severity-critical

Created by niceos_cve_create_issues.py

  

source-nvd

Created by niceos_cve_create_issues.py

  

update/major

Major update

  

update/minor

Minor update

  

upstream-update

New upstream version is available

  

upstream/github

GitHub upstream

No labels

ai-summary

bot

cve

llm-analysis

needs-build

needs-triage

priority/high

security

security-release

severity-critical

source-nvd

update/major

update/minor

upstream-update

upstream/github

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

rpms/nodejs#9

No description provided.