Skip to content

Update Node.js to v22.23.3 - #1306

Open
renovate[bot] wants to merge 1 commit into
developfrom
renovate/node-22.x
Open

renovate[bot] wants to merge 1 commit into
developfrom
renovate/node-22.x

Conversation

@renovate

@renovate renovate Bot commented Sep 30, 2025 •

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
node (source) volta minor 22.19.0 → 22.23.3

Release Notes

nodejs/node (node)

v22.23.3: 2026-09-23, Version 22.23.3 'Jod' (LTS), @​aduh95 prepared by @​juanarbol

Compare Source

Notable Changes
Commits

v22.23.2: 2026-07-29, Version 22.23.2 'Jod' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
  • (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
  • (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
  • (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
  • (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
  • (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
  • (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
  • (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
  • (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
  • (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
  • deps: update llhttp to 9.4.3 (Paolo Insogna)
  • deps: update undici to 6.28.0 (Node.js GitHub Bot)
Commits

v22.23.1: 2026-06-23, Version 22.23.1 'Jod' (LTS), @​RafaelGSS

Compare Source

This release includes a fix for an unexpected behavior introduced
by the recent security release (22.23.0).

Commits

v22.23.0: 2026-06-18, Version 22.23.0 'Jod' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v22.22.3: 2026-05-13, Version 22.22.3 'Jod' (LTS), @​marco-ippolito

Compare Source

Commits

v22.22.2

Compare Source

v22.22.1: 2026-03-05, Version 22.22.1 'Jod' (LTS)

Compare Source

Notable Changes
Commits

❗ Important

✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai

coderabbitai Bot commented Sep 30, 2025 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 8411c7e5-3172-4828-a00d-499717c3f193

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 24f2a6a to 2a8cc9b Compare October 1, 2025 02:45
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 2a8cc9b to ce9041d Compare October 10, 2025 21:01
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from ce9041d to 254a1f1 Compare October 22, 2025 15:08
@renovate renovate Bot changed the title Update Node.js to v22.20.0 Update Node.js to v22.21.0 Oct 22, 2025
@renovate renovate Bot changed the title Update Node.js to v22.21.0 chore(deps): update node.js to v22.21.0 Oct 22, 2025
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 254a1f1 to 5d90a19 Compare October 28, 2025 22:03
@renovate renovate Bot changed the title chore(deps): update node.js to v22.21.0 chore(deps): update node.js to v22.21.1 Oct 28, 2025
@renovate renovate Bot changed the title chore(deps): update node.js to v22.21.1 Update Node.js to v22.21.1 Nov 5, 2025
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 5d90a19 to e5c0b48 Compare November 10, 2025 16:12
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from e5c0b48 to 539544b Compare November 18, 2025 11:12
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 539544b to e6785a5 Compare December 3, 2025 14:43
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from e6785a5 to 8610de6 Compare December 31, 2025 16:29
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from ad23703 to c9fbf48 Compare January 13, 2026 15:05
@renovate renovate Bot changed the title Update Node.js to v22.21.1 Update Node.js to v22.22.0 Jan 13, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from 8211e66 to 97fc707 Compare January 23, 2026 17:47
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 97fc707 to 0ae1335 Compare February 2, 2026 15:49
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from 498c484 to c888f3a Compare February 17, 2026 14:44
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from c888f3a to 9868aa1 Compare March 5, 2026 19:50
@renovate renovate Bot changed the title Update Node.js to v22.22.0 Update Node.js to v22.22.1 Mar 5, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 9868aa1 to aebe377 Compare March 13, 2026 11:07
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from aebe377 to 8899535 Compare March 24, 2026 21:49
@renovate renovate Bot changed the title Update Node.js to v22.22.1 Update Node.js to v22.22.2 Mar 24, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 8899535 to c5a4669 Compare April 8, 2026 18:07
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from c5a4669 to 8854eba Compare April 29, 2026 11:45
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from c82b1ab to ad8f9e0 Compare May 13, 2026 21:33
@renovate renovate Bot changed the title Update Node.js to v22.22.2 Update Node.js to v22.22.3 May 13, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from ad8f9e0 to 241a8d6 Compare May 18, 2026 14:10
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 241a8d6 to 7730d42 Compare May 28, 2026 18:03
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from e9f3e0d to 753cfb2 Compare June 18, 2026 07:58
@renovate renovate Bot changed the title Update Node.js to v22.22.3 Update Node.js to v22.23.0 Jun 18, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 753cfb2 to e48afc2 Compare June 23, 2026 18:43
@renovate renovate Bot changed the title Update Node.js to v22.23.0 Update Node.js to v22.23.1 Jun 23, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch 2 times, most recently from b7577ae to 894ac10 Compare July 16, 2026 16:05
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 894ac10 to ee450ba Compare July 29, 2026 17:01
@renovate renovate Bot changed the title Update Node.js to v22.23.1 Update Node.js to v22.23.2 Jul 29, 2026
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from ee450ba to 4922461 Compare August 12, 2026 00:40
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 4922461 to 7c32036 Compare August 26, 2026 18:14
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 7c32036 to 86f8e83 Compare September 2, 2026 19:39
@renovate
renovate Bot force-pushed the renovate/node-22.x branch from 86f8e83 to 3d1854d Compare September 24, 2026 01:50
@renovate renovate Bot changed the title Update Node.js to v22.23.2 Update Node.js to v22.23.3 Sep 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants