Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
109 commits
Select commit Hold shift + click to select a range
98d328a
src: detect whether the string is one byte representation or not
theweipeng Dec 21, 2024
041a217
fs: fix rmSync error code
koplas Feb 25, 2025
3d103ec
src: improve error handling in spawn_sync
jasnell Feb 23, 2025
20c032e
test: resolve race condition in test-net-write-fully-async-*
mcollina Feb 25, 2025
7f48811
doc: add esm examples to node:util
mfdebian Feb 25, 2025
975e2a5
src: improve error handling in module_wrap
jasnell Feb 23, 2025
936a999
src: improve error handling in buffer and dotenv
jasnell Feb 24, 2025
a089810
test: allow embedder running async context frame test
codebytere Feb 26, 2025
350f62d
src: fix ThrowInvalidURL call in PathToFileURL
danielmbrasil Feb 26, 2025
83eed33
doc: add streamResetBurst and streamResetRate
Sujal-Raj Feb 26, 2025
e80bbb7
sqlite,test,doc: allow Buffer and URL as database location
geeksilva97 Feb 27, 2025
6a2e4c5
build,win: disable node pch with ccache
StefanStojanovic Feb 27, 2025
eb3576f
test: assert write return values in buffer-bigint64
nektro Feb 28, 2025
f803d6c
test: swap assert.strictEqual() parameters
lpinca Feb 28, 2025
b74e0ff
doc: add missing assert return types
cjihrig Feb 28, 2025
cea50b7
lib: optimize priority queue
gurgunday Feb 28, 2025
f845ad9
src: improve error handling in `tcp_wrap.cc`
jasnell Feb 26, 2025
96b2bfb
src: improve error handling in `tty_wrap.cc`
jasnell Feb 26, 2025
185d1ff
src: improve error handling in `node_messaging.cc`
jasnell Feb 26, 2025
6fd2ec6
doc: add @geeksilva97 to collaborators
geeksilva97 Feb 28, 2025
f34d78d
deps: update ada to 3.1.3
nodejs-github-bot Mar 1, 2025
0ac977d
deps: update gyp file for ngtcp2 1.11.0
richardlau Feb 27, 2025
a757f00
net: emit an error when custom lookup resolves to a non-string address
geeksilva97 Mar 1, 2025
35c283a
src: reduce string allocations on sqlite
anonrig Mar 1, 2025
f95ecca
doc: add 1ilsang to triage team
1ilsang Mar 1, 2025
0f8cd32
doc: fix rendering of DEP0174 description
dsanders11 Mar 1, 2025
5955aca
tools: remove deps/zlib/GN-scraper.py
legendecas Mar 2, 2025
03844d9
doc: clarify `path.isAbsolute` is not path traversal mitigation
ericfortis Mar 2, 2025
0fd3d91
test: more common.mustNotCall in net, tls
nektro Mar 3, 2025
718305d
module: add dynamic file-specific ESM warnings
mertcanaltin Mar 3, 2025
d5ccf17
meta: bump actions/upload-artifact from 4.6.0 to 4.6.1
dependabot[bot] Mar 3, 2025
63dbbe7
meta: bump actions/cache from 4.2.0 to 4.2.2
dependabot[bot] Mar 3, 2025
91394aa
meta: bump step-security/harden-runner from 2.10.4 to 2.11.0
dependabot[bot] Mar 3, 2025
e6a98af
meta: bump peter-evans/create-pull-request from 7.0.6 to 7.0.7
dependabot[bot] Mar 3, 2025
0b0c9cc
meta: bump actions/download-artifact from 4.1.8 to 4.1.9
dependabot[bot] Mar 3, 2025
ce1cfff
deps: update amaro to 0.4.1
marco-ippolito Feb 28, 2025
8d0f1a7
test: module syntax should throw
marco-ippolito Feb 28, 2025
5788574
tools: bump the eslint group in /tools/eslint with 5 updates
dependabot[bot] Mar 3, 2025
b402799
deps: update corepack to 0.32.0
nodejs-github-bot Mar 4, 2025
46b06be
module: handle cached linked async jobs in require(esm)
joyeecheung Mar 4, 2025
d2f49e7
doc: recommend `erasableSyntaxOnly` in ts docs
robpalme Mar 4, 2025
a22c21c
v8: add v8.getCppHeapStatistics() method
Aditi-1400 Mar 4, 2025
2fa6e65
tools: add more details about rolling inspector_protocol
legendecas Mar 4, 2025
17c9e76
src: fix typo in comment
aduh95 Mar 3, 2025
3bf546c
Revert "test: temporary remove resource check from fs read-write"
RafaelGSS Mar 4, 2025
90cd780
src: make more error handling improvements
jasnell Mar 1, 2025
b10ac9a
src: refactor SubtleCrypto algorithm and length validations
panva Mar 4, 2025
984f7ef
readline: add support for `Symbol.dispose`
aduh95 Mar 4, 2025
77e1a85
tools: revert to use @stylistic/eslint-plugin-js v3
joyeecheung Mar 4, 2025
7a554d9
src: use cached `emit` v8::String
daeyeon Mar 5, 2025
15d7908
stream: fix sizeAlgorithm validation in WritableStream
daeyeon Mar 5, 2025
3fe8eac
doc: update node-api version matrix
legendecas Mar 5, 2025
fd49144
tools: extract target abseil to abseil.gyp
legendecas Mar 5, 2025
906f23d
crypto: add support for intermediate certs in --use-system-ca
timja Mar 5, 2025
41ea5a2
src: make even more improvements to error handling
jasnell Mar 1, 2025
fbe464e
doc: fix Windows ccache section position
StefanStojanovic Mar 5, 2025
f8dde3a
test: skip uv-thread-name on IBM i
abmusse Mar 5, 2025
2569e56
tools: switch back to official OpenSSL
richardlau Mar 5, 2025
99abfb6
test: update compression wpt
anonrig Mar 5, 2025
2daee76
assert: improve myers diff performance
Mar 6, 2025
e178acf
doc: ping nodejs/tsc for each security pull request
RafaelGSS Mar 6, 2025
4d86a42
src: remove redundant qualifiers in src/quic
anonrig Mar 6, 2025
75f11ae
tls: implement tls.getCACertificates()
joyeecheung Mar 6, 2025
5c9f1a4
doc: recommend setting `noEmit: true` in `tsconfig.json`
styfle Mar 6, 2025
6f1c622
src: use Maybe<void> in ProcessEmitWarningSync
daeyeon Mar 6, 2025
4e438c3
doc: use more clear name in getSystemErrorMessage's example
IkumaTadokoro Mar 4, 2025
4af2f7f
test: use `assert.match` in `test-esm-import-meta`
aduh95 Mar 7, 2025
17d4074
win,build: add option to enable Control Flow Guard
huseyinacacak-janea Mar 7, 2025
b17163b
src: allow embedder customization of OOMErrorHandler
codebytere Mar 7, 2025
ee5ce5c
meta: move RaisinTen back to collaborators, triagers and SEA champion
RaisinTen Mar 7, 2025
8e64d38
tools: import rather than require ESLint plugins
targos Mar 7, 2025
2fbd3bb
build: fix compatibility with V8's `depot_tools`
richardlau Mar 7, 2025
99b2369
test: simplify test-tls-connect-abort-controller.js
anonrig Mar 7, 2025
d07bd79
net: replace brand checks with identity checks
anonrig Mar 7, 2025
9fd217d
src: add config file support
marco-ippolito Aug 27, 2024
d8937f1
src: create THROW_ERR_OPTIONS_BEFORE_BOOTSTRAPPING
marco-ippolito Feb 18, 2025
433657d
src: namespace config file flags
marco-ippolito Feb 21, 2025
5a21fa4
test: add more coverage to node_config_file
marco-ippolito Feb 21, 2025
274c18a
src: set default config as node.config.json
marco-ippolito Feb 27, 2025
28792ee
test: skip `test-config-json-schema` with quic
richardlau Feb 27, 2025
6c22e44
meta: set nodejs/config as codeowner
marco-ippolito Mar 2, 2025
37664e8
src: fix node_config_file.h compilation error in GN build
zcbenz Mar 3, 2025
bf788d9
src: refactor SubtleCrypto algorithm and length validations
panva Mar 4, 2025
66cd385
meta: bump ossf/scorecard-action from 2.4.0 to 2.4.1
dependabot[bot] Mar 8, 2025
89599be
meta: bump github/codeql-action from 3.28.8 to 3.28.10
dependabot[bot] Mar 8, 2025
5204d49
meta: bump codecov/codecov-action from 5.3.1 to 5.4.0
dependabot[bot] Mar 8, 2025
0ad450f
timers: simplify the compareTimersLists function
gurgunday Mar 8, 2025
5e51c62
src: fix process exit listeners not receiving unsettled tla codes
dario-piotrowicz Mar 8, 2025
792ef16
doc: revise `tsconfig.json` note
styfle Mar 8, 2025
3dc3207
src: do not pass nullptr to std::string ctor
ckerr Mar 9, 2025
5054fc7
test_runner: change ts default glob
marco-ippolito Mar 9, 2025
2b2267f
tools: add config subspace
marco-ippolito Mar 9, 2025
36542b5
test: update WPT for WebCryptoAPI to edd42c005c
nodejs-github-bot Mar 9, 2025
5c20dcc
esm: fix module.exports export on CJS modules
guybedford Mar 7, 2025
4056c1f
deps: upgrade openssl sources to quictls/openssl-3.0.16
nodejs-github-bot Mar 5, 2025
9e1fce9
deps: update archs files for openssl-3.0.16
nodejs-github-bot Mar 5, 2025
03cd792
deps: update simdjson to 3.12.2
nodejs-github-bot Mar 10, 2025
f4de7ce
doc: add info on how project manages social media
mhdawson Mar 4, 2025
e05e0e5
test: update WPT for urlpattern to 3b6b19853a
nodejs-github-bot Mar 10, 2025
d44ccb3
doc: revise webcrypto.md types, interfaces, and added versions
panva Mar 10, 2025
9b4f7aa
doc: add Darshan back as voting TSC member
mhdawson Mar 10, 2025
77668ff
doc: fix usage of module.registerSync in comment
timokoessler Mar 10, 2025
b866755
test: test runner run plan
pmarchini Mar 10, 2025
21b6423
sqlite: reset statement immediately in run()
cjihrig Mar 11, 2025
323e3ac
crypto: update root certificates to NSS 3.108
nodejs-github-bot Mar 11, 2025
4fe9916
dns: remove redundant code using common variable
deokjinkim Mar 11, 2025
1c271b1
doc: make first parameter optional in `util.getCallSites`
deokjinkim Mar 11, 2025
4762f4a
net: validate non-string host for socket.connect
daeyeon Mar 11, 2025
39e295d
2025-03-13, Version 23.10.0 (Current)
nodejs-github-bot Mar 12, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
meta: bump step-security/harden-runner from 2.10.4 to 2.11.0
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.4 to 2.11.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@cb605e5...4d991eb)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
PR-URL: #57258
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
  • Loading branch information
dependabot[bot] authored and aduh95 committed Mar 9, 2025
commit 91394aaf3db8751f632ee9a3c6b10b2b403081c4
2 changes: 1 addition & 1 deletion .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ jobs:

steps:
- name: Harden Runner
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
with:
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

Expand Down