v20.19.3 proposal #58588
v20.19.3 proposal #58588
Conversation
PR-URL: #57994 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: Edy Silva <edigleyssonsilva@gmail.com>
PR-URL: #57994 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: Edy Silva <edigleyssonsilva@gmail.com>
If the buffer allocation fails due to insufficient memory, there is no point continue testing toString(). PR-URL: #58415 Reviewed-By: LiviaMedeiros <livia@cirno.name> Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
The test only cares about whether a size outside the range of the 32-bit signed integers works with Blob.prototype.slice(). If it fails due to allocation failure when the system does not have enough memory, the test should just be skipped. The test previously only skipped the test when the allocation failure happens during allocation of the buffer source, but it could also happen during Blob.prototype.slice(). PR-URL: #58414 Fixes: #57235 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Tobias Nießen <tniessen@tnie.de> Reviewed-By: LiviaMedeiros <livia@cirno.name> Reviewed-By: Michaël Zasso <targos@protonmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Stefan Stojanovic <stefan.stojanovic@janeasystems.com>
This is the certdata.txt[0] from NSS 3.108. This is the version of NSS that shipped in Firefox 136.0 on 2025-03-04. Certificates added: - D-TRUST BR Root CA 2 2023 - D-TRUST EV Root CA 2 2023 Certificates removed: - SwissSign Silver CA - G2 [0] https://raw.githubusercontent.com/nss-dev/nss/refs/tags/NSS_3_108_RTM/lib/ckfw/builtins/certdata.txt PR-URL: #57381 Reviewed-By: Moshe Atlow <moshe@atlow.co.il> Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com>
PR-URL: #55296 Reviewed-By: James M Snell <jasnell@gmail.com>
The `out/Makefile` target in `Makefile` has an incomplete list of `.gyp` files for Node.js dependencies in `deps`, but also the ones that are listed are unconditional. If using any of the `--shared-*` configure options, it should be possible to still build Node.js if the corresponding directory under `deps` is removed. Convert the explicit list of dependency `*.gyp` files for the `out/Makefile` target to a glob. This will pick up any toplevel `.gyp` files for dependencies present in `deps`. PR-URL: #55789 Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com>
PR-URL: #55892 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Jason Zhang <xzha4350@gmail.com>
PR-URL: #56142 Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Signed-off-by: Matteo Collina <hello@matteocollina.com> PR-URL: #56428 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Paolo Insogna <paolo@cowtech.it>
PR-URL: #56764 Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Michael Dawson <midawson@redhat.com>
PR-URL: #57265 Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: #57384 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
PR-URL: #57620 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com> Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com> Reviewed-By: Jordan Harband <ljharb@gmail.com> Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
This special case was missed in the previous changes to this file. Refs: #55514 Refs: #42923 Fixes: #57669 PR-URL: #57695 Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Jake Yuesong Li <jake.yuesong@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Richard Lau <rlau@redhat.com>
PR-URL: #57742 Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com>
increase the z-index of the header element to make sure that opened pickers from it (such as the node version picker) are on top of other content PR-URL: #57851 Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Co-Authored-By: richardlau - Richard Lau <rlau@redhat.com> PR-URL: #58090 Refs: #57934 Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: Michael Dawson <midawson@redhat.com>
|
Review requested:
|
nodejs-github-bot
added
build
marco-ippolito
force-pushed
the
v20.19.3-proposal
branch
from
b00ffce to
75b2daa
Compare
Notable changes: crypto: * graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable (Filip Skokan) #56142 * update root certificates to NSS 3.108 (Node.js GitHub Bot) #57381 deps: * update timezone to 2025b (Node.js GitHub Bot) #57857 doc: * stabilize util.styleText (Rafael Gonzaga) #56265 * add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102 PR-URL: #58588
|
Sea test are failing on rhel8-ppc64le @nodejs/build @nodejs/single-executable, they all result in a Release CI failed https://ci-release.nodejs.org/job/iojs+release/11014/ @ryanaslett @StefanStojanovic PTAL |
So apparently its a regression because the failure is consistent. |
FWIW
which seems kind of odd, looking at the contents of 3cf7cfb. |
|
Super weird |
|
❓ https://ci.nodejs.org/job/node-test-commit-plinux/59312/ ✅ 3cf7cfb has nothing to do with the SEA failure, but i'll deferr to the releaser's team best judgement. If you end up dropping it then you can't include c535a3c either, the algorithm can't be considered stable without all its related backports. |
I've retried the ❌ run and it passed https://ci.nodejs.org/job/node-test-commit-plinux/59422/ ✅ , the issue is not persistent and not 3cf7cfb |
|
@nodejs/single-executable any idea which commit might have caused this regression? |
Im unable to troubleshoot this, beyond "this is probably something to do with those specific machines". I've provided the secrets and keys, but @StefanStojanovic was the point on that change. I do not believe that we verified vs2019 as a target, so It may just be that those machines need updating. |
|
Thanks for tagging me for visibility. In the initial investigation, I wasn't able to find the root cause. @marco-ippolito can 2b3b2a0 be dropped (as it really doesn't do anything except changing the way Windows binaries are signed). I apologize for opening a PR for backporting that at a bad time, as it is now blocking the release, so feel free to remove it. I'll definitely continue the investigation on this next week, but I do not see any reason why it should be a blocker for the release. |
Notable changes: crypto: * graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable (Filip Skokan) #56142 * update root certificates to NSS 3.108 (Node.js GitHub Bot) #57381 deps: * update timezone to 2025b (Node.js GitHub Bot) #57857 doc: * add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102 PR-URL: #58588
marco-ippolito
force-pushed
the
v20.19.3-proposal
branch
from
172a0f5 to
fb7d05e
Compare
|
Dropped the commit and changed the release date to 2025-06-17 |
|
@nodejs/releasers asking for help on this release. I have no idea how to fix the test failing on rhel |
|
Let's bisect git bisect bad fb7d05e07cf211968a7a0db502f67861cc64d15f
git bisect good 14d228a5fff4621c472f654d00c1ae6c1ce751bchttps://ci.nodejs.org/job/node-test-commit-plinux/59465/ Bisecting [10fb49f] deps: update icu to 77.1 GOOD 🟢 Bisecting [d582954] src: remove unused variable in crypto_x509.cc GOOD 🟢 Bisecting [1521125] typings: fix Bisecting [8237346] test,crypto: update WebCryptoAPI WPT GOOD 🟢 Bisecting [3cf7cfb] test: update WPT for WebCryptoAPI to edd42c005c GOOD 🟢 Bisecting [b427ae4] meta: remove Bisecting [fb7d05e] 2025-06-17, Version 20.19.3 'Iron' (LTS) BAD 🔴 |
|
The release commit is the bad commit fb7d05e, it makes the test fail 🫤 |
|
I'm not able to think of how that change could affect SEA. It's just as surprising as the webcrypto WPT update that was being suspected earlier. Weird that this fails on just rhel8-ppc64le and not on rhel9-ppc64le. @nodejs/platform-ppc might know why. I suspect this is because of a platform limitation. Another way of debugging this would be to study the core dump if one is produced or run the SEA in a debugger and check the backtrace to know where the segmentation fault is happening. |
|
I agree this is a @nodejs/build specifically @nodejs/platform-ppc issue so not really much I can do about it |
2025-06-17, Version 20.19.3 'Iron' (LTS), @marco-ippolito
Notable Changes
c535a3c483] - crypto: graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable (Filip Skokan) #56142af1dc63815] - crypto: update root certificates to NSS 3.108 (Node.js GitHub Bot) #5738101d63a4ddf] - deps: update timezone to 2025b (Node.js GitHub Bot) #57857b6daa344eb] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102Commits
fc1fa7a357] - build: use FILE_OFFSET_BITS=64 esp. on 32-bit arch (RafaelGSS) #5809079e0812181] - build: use glob for dependencies of out/Makefile (Richard Lau) #55789f56e62851a] - crypto: allow length=0 for HKDF and PBKDF2 in SubtleCrypto.deriveBits (Filip Skokan) #55866c535a3c483] - crypto: graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable (Filip Skokan) #5614239925de8b1] - crypto: allow non-multiple of 8 in SubtleCrypto.deriveBits (Filip Skokan) #55296af1dc63815] - crypto: update root certificates to NSS 3.108 (Node.js GitHub Bot) #57381d09008add3] - deps: V8: cherry-pick 1a3ecc2483b2 (Michaël Zasso) #58342fd56652425] - deps: V8: cherry-pick 182d9c05e78b (Andrey Kosyakov) #58342447481e829] - deps: V8: cherry-pick third_party/zlib@646b7f569718 (Hans Wennborg) #58342eb447168df] - deps: update simdutf to 6.4.2 (Node.js GitHub Bot) #5785501d63a4ddf] - deps: update timezone to 2025b (Node.js GitHub Bot) #5785710fb49f2a9] - deps: update icu to 77.1 (Node.js GitHub Bot) #57455f1dc7d0205] - deps: update corepack to 0.32.0 (Node.js GitHub Bot) #572657a2e64bb8a] - deps: update simdutf to 6.4.0 (Node.js GitHub Bot) #56764e80669be0d] - doc: mention reports should align with Node.js CoC (Rafael Gonzaga) #576077b2c0bc92e] - doc: add gurgunday as triager (Gürgün Dayıoğlu) #57594791e4879de] - doc: document REPL custom eval arguments (Dario Piotrowicz) #576902917f09876] - doc: improved fetch docs (Alessandro Miliucci) #57296d940b15843] - doc: clarifyunhandledRejectionevents behaviors in process doc (Dario Piotrowicz) #5765471c664fab7] - doc: update position type to integer | null in fs (Yukihiro Hasegawa) #577450c0fbfa9c6] - doc: add missing v0.x changelog entries (Antoine du Hamel) #57779e99462c9fc] - doc: correct deprecation type ofassert.CallTracker(René) #57997c7e92696ef] - doc: add returns for https.get (Eng Zer Jun) #58025ccc42b69ce] - doc: fix env variable name inutil.styleText(Antoine du Hamel) #58072b6daa344eb] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #58102e5d6a3df16] - doc: fixAsyncLocalStorageexample response changes after node v18 (Naor Tedgi (Abu Emma)) #57969f006411998] - doc: fix typo of filezlib.md(yusheng chen) #580935193735df4] - doc: add missing options.signal to readlinePromises.createInterface() (Jimmy Leung) #55456fd44af730f] - doc: fix misaligned options in vm.compileFunction() (Jimmy Leung) #581450fdcc0ddcd] - doc: add ambassaor message (Brian Muenzenmeyer) #576005ca9616bd3] - doc: increase z-index of header element (Dario Piotrowicz) #5785181342d10f0] - doc: fix deprecation type forDEP0148(Livia Medeiros) #57785776becfe01] - doc: remove mention of--requirenot supporting ES modules (Huáng Jùnliàng) #576203140a8f133] - doc: add missingdeprecatedbadges infs.md(Yukihiro Hasegawa) #57384441ce24ae3] - doc: deprecate passing invalid types infs.existsSync(Carlos Espa) #558920556f54544] - http: correctly translate HTTP method (Paolo Insogna) #52701c2c6d2b035] - http: be more generational GC friendly (ywave620) #56767cdf3fa241c] - http2: skip writeHead if stream is closed (Shima Ryuhei) #57686bbd5aec785] - http2: fix graceful session close (Kushagra Pandey) #57808b427ae4f34] - meta: removebuild-windows.yml(Aviv Keller) #5466249e624f554] - os: fix netmask format check condition in getCIDR function (Wiyeong Seo) #57324d582954434] - src: remove unused variable in crypto_x509.cc (Michaël Zasso) #57754234a505e96] - src: allow embedder customization of OOMErrorHandler (Shelley Vohr) #57325c0252cd380] - src: fix -Wunreachable-code-return in node_sea (Shelley Vohr) #57664fcd1622fc1] - src: fix kill signal 0 on Windows (Stefan Stojanovic) #576953cf7cfb695] - test: update WPT for WebCryptoAPI to edd42c005c (Node.js GitHub Bot) #57365f57765bdcf] - test: mark test-without-async-context-frame flaky on windows (James M Snell) #56753275ea8e7ef] - test: force GC in test-file-write-stream4 (Luigi Pinca) #57930da6a13c338] - test: deflake test-http2-options-max-headers-block-length (Luigi Pinca) #5795956fce6691e] - test: prevent extraneous HOSTNAME substitution in test-runner-output (René) #58076c9c0be5596] - test: update expected error message for macOS (Antoine du Hamel) #577423cbf5f93d2] - test: fix missing edge case in test-blob-slice-with-large-size (Joyee Cheung) #58414bffd4ec379] - test: skip in test-buffer-tostring-rangeerror on allocation failure (Joyee Cheung) #584158237346fb7] - test,crypto: update WebCryptoAPI WPT (Filip Skokan) #54593b90c4ab937] - tools: remove unusedosx-pkg-postinstall.sh(Antoine du Hamel) #57667414013dcfb] - tools: edit create-release-proposal workflow to handle pr body length (Elves Vieira) #578417c449ed6b3] - tools: fix tarball testing directory (Marco Ippolito) #57994d164dc2d38] - tools: update sccache version to v0.10.0 (Marco Ippolito) #57994debd3c2cc0] - tools: disable failing test envs intest-linuxCI (Antoine du Hamel) #58351152112505a] - typings: fixImportModuleDynamicallyCallbackreturn type (Chengzhong Wu) #57160363bf744ab] - worker: flush stdout and stderr on exit (Matteo Collina) #56428