chore(deps): update node.js to v24.22.1 #1041

Merged

renovate merged 1 commits from renovate/node-24.x into main 2026-10-21 15:17:59 +00:00

Conversation 0 Commits 1 Files Changed 1

+1 -1

renovate commented 2026-10-21 12:14:47 +00:00

Owner

Copy link

Copy source

This PR contains the following updates:

Package	Type	Update	Change
node (source)	final	patch	24.22.0-alpine → 24.22.1-alpine

---

Release Notes

nodejs/node (node)

v24.22.1: 2026-10-21, Version 24.22.1 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes

• (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
• (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
• (CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
• (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
• (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
• (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
• (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
• (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov)
• crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
• deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
• deps: update timezone to 2026e (Node.js GitHub Bot)
• deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
• deps: update undici to 7.30.1 (Node.js GitHub Bot)

Commits

• [2a73ee5a89] - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) #​66877
• [4d6990b33c] - crypto: reset random caches across snapshots (Filip Skokan) nodejs-private/node-private#987
• [4b3c9bbf9f] - crypto: harden X.509 conversion and formatting (Filip Skokan) nodejs-private/node-private#1007
• [9243b105b6] - crypto: update root certificates to NSS 3.129 (Node.js GitHub Bot) #​66496
• [1e39cd53c7] - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) #​66868
• [49dff6f57a] - deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov) nodejs-private/node-private#1002
• [fca511adc5] - deps: V8: backport 93cd21e (Joyee Cheung) nodejs-private/node-private#1008
• [18711c7567] - deps: update timezone to 2026e (Node.js GitHub Bot) #​66419
• [fa77cfb1ad] - deps: update timezone to 2026d (Node.js GitHub Bot) #​66333
• [b84f9f186b] - deps: update archs files for openssl-3.5.9 (Node.js GitHub Bot) #​66396
• [ff0664c3ba] - deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) #​66396
• [1d4c89ef87] - deps: update undici to 7.30.1 (Node.js GitHub Bot) #​66764
• [843a1627dc] - dns: validate resolve inputs for null bytes (James M Snell) nodejs-private/node-private#984
• [96c3ccb1fc] - http: ensure agent data guard works without I/O (James M Snell) nodejs-private/node-private#983
• [8dc18a6218] - permission: check permission model in realpathSync (RafaelGSS) nodejs-private/node-private#973
• [b5f41529df] - src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) nodejs-private/node-private#1002
• [01acf0ee74] - tls: reject chains containing blocked public keys (Ulises Gascón) #​66871
• [935918e342] - tls: reject non-canonical IP addresses (Matteo Collina) nodejs-private/node-private#982
• [de49c913f2] - tls: fix ip normalization regression (James M Snell) nodejs-private/node-private#985
• [9dc4bb57f0] - tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett) #​66855

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://hub.docker.com/_/node) ([source](https://github.com/nodejs/node)) | final | patch | `24.22.0-alpine` → `24.22.1-alpine` | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v24.22.1`](https://github.com/nodejs/node/releases/tag/v24.22.1): 2026-10-21, Version 24.22.1 'Krypton' (LTS), @&#8203;aduh95 [Compare Source](https://github.com/nodejs/node/compare/v24.22.0...v24.22.1) This is a security release. ##### Notable Changes - (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) - (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) - (CVE-2026-105483) tls: fix ip normalization regression (James M Snell) - (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina) - (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS) - (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan) - (CVE-2026-111497) src: expose `BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH` (Antoine du Hamel) - (CVE-2026-111497) deps: brotli: cherry-pick [`0ed4268`](https://github.com/nodejs/node/commit/0ed4268a4401abcb44720963) (Evgenii Kliuchnikov) - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) - deps: update timezone to 2026e (Node.js GitHub Bot) - deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) - deps: update undici to 7.30.1 (Node.js GitHub Bot) ##### Commits - \[[`2a73ee5a89`](https://github.com/nodejs/node/commit/2a73ee5a89)] - **crypto**: update root certificates to NSS 3.131.1 (Antoine du Hamel) [#&#8203;66877](https://github.com/nodejs/node/pull/66877) - \[[`4d6990b33c`](https://github.com/nodejs/node/commit/4d6990b33c)] - **crypto**: reset random caches across snapshots (Filip Skokan) [nodejs-private/node-private#987](https://github.com/nodejs-private/node-private/pull/987) - \[[`4b3c9bbf9f`](https://github.com/nodejs/node/commit/4b3c9bbf9f)] - **crypto**: harden X.509 conversion and formatting (Filip Skokan) [nodejs-private/node-private#1007](https://github.com/nodejs-private/node-private/pull/1007) - \[[`9243b105b6`](https://github.com/nodejs/node/commit/9243b105b6)] - **crypto**: update root certificates to NSS 3.129 (Node.js GitHub Bot) [#&#8203;66496](https://github.com/nodejs/node/pull/66496) - \[[`1e39cd53c7`](https://github.com/nodejs/node/commit/1e39cd53c7)] - **deps**: update c-ares to 1.34.9 (Node.js GitHub Bot) [#&#8203;66868](https://github.com/nodejs/node/pull/66868) - \[[`49dff6f57a`](https://github.com/nodejs/node/commit/49dff6f57a)] - **deps**: brotli: cherry-pick [`0ed4268`](https://github.com/nodejs/node/commit/0ed4268a4401abcb44720963) (Evgenii Kliuchnikov) [nodejs-private/node-private#1002](https://github.com/nodejs-private/node-private/pull/1002) - \[[`fca511adc5`](https://github.com/nodejs/node/commit/fca511adc5)] - **deps**: V8: backport [`93cd21e`](https://github.com/nodejs/node/commit/93cd21e8254b) (Joyee Cheung) [nodejs-private/node-private#1008](https://github.com/nodejs-private/node-private/pull/1008) - \[[`18711c7567`](https://github.com/nodejs/node/commit/18711c7567)] - **deps**: update timezone to 2026e (Node.js GitHub Bot) [#&#8203;66419](https://github.com/nodejs/node/pull/66419) - \[[`fa77cfb1ad`](https://github.com/nodejs/node/commit/fa77cfb1ad)] - **deps**: update timezone to 2026d (Node.js GitHub Bot) [#&#8203;66333](https://github.com/nodejs/node/pull/66333) - \[[`b84f9f186b`](https://github.com/nodejs/node/commit/b84f9f186b)] - **deps**: update archs files for openssl-3.5.9 (Node.js GitHub Bot) [#&#8203;66396](https://github.com/nodejs/node/pull/66396) - \[[`ff0664c3ba`](https://github.com/nodejs/node/commit/ff0664c3ba)] - **deps**: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) [#&#8203;66396](https://github.com/nodejs/node/pull/66396) - \[[`1d4c89ef87`](https://github.com/nodejs/node/commit/1d4c89ef87)] - **deps**: update undici to 7.30.1 (Node.js GitHub Bot) [#&#8203;66764](https://github.com/nodejs/node/pull/66764) - \[[`843a1627dc`](https://github.com/nodejs/node/commit/843a1627dc)] - **dns**: validate resolve inputs for null bytes (James M Snell) [nodejs-private/node-private#984](https://github.com/nodejs-private/node-private/pull/984) - \[[`96c3ccb1fc`](https://github.com/nodejs/node/commit/96c3ccb1fc)] - **http**: ensure agent data guard works without I/O (James M Snell) [nodejs-private/node-private#983](https://github.com/nodejs-private/node-private/pull/983) - \[[`8dc18a6218`](https://github.com/nodejs/node/commit/8dc18a6218)] - **permission**: check permission model in realpathSync (RafaelGSS) [nodejs-private/node-private#973](https://github.com/nodejs-private/node-private/pull/973) - \[[`b5f41529df`](https://github.com/nodejs/node/commit/b5f41529df)] - **src**: expose `BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH` (Antoine du Hamel) [nodejs-private/node-private#1002](https://github.com/nodejs-private/node-private/pull/1002) - \[[`01acf0ee74`](https://github.com/nodejs/node/commit/01acf0ee74)] - **tls**: reject chains containing blocked public keys (Ulises Gascón) [#&#8203;66871](https://github.com/nodejs/node/pull/66871) - \[[`935918e342`](https://github.com/nodejs/node/commit/935918e342)] - **tls**: reject non-canonical IP addresses (Matteo Collina) [nodejs-private/node-private#982](https://github.com/nodejs-private/node-private/pull/982) - \[[`de49c913f2`](https://github.com/nodejs/node/commit/de49c913f2)] - **tls**: fix ip normalization regression (James M Snell) [nodejs-private/node-private#985](https://github.com/nodejs-private/node-private/pull/985) - \[[`9dc4bb57f0`](https://github.com/nodejs/node/commit/9dc4bb57f0)] - **tools**: retry Gatekeeper check and stapling after notarization (Ryan Aslett) [#&#8203;66855](https://github.com/nodejs/node/pull/66855) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjcuNSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2Ny41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

renovate scheduled this pull request to auto merge when all checks succeed 2026-10-21 12:14:48 +00:00

renovate added 1 commit 2026-10-21 15:13:10 +00:00

chore(deps): update node.js to v24.22.1 cf0c7e4d42

renovate force-pushed renovate/node-24.x from 3c0ff89be3 to cf0c7e4d42 2026-10-21 15:13:10 +00:00 Compare

renovate merged commit c5eabf42c1 into main 2026-10-21 15:17:59 +00:00

renovate deleted branch renovate/node-24.x 2026-10-21 15:17:59 +00:00

releaser referenced this pull request 2026-10-21 15:19:14 +00:00

chore(release): prepare for v0.10.1 #1042

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

dependencies

Pull requests that update a dependency file

docker

go

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unboundsoftware/schemas#1041