24.13.1

Notable Changes

• [1f64d6841e] - build: add support for Python 3.14 (Christian Clauss) #59983
• [30e500fc09] - cli: mark --heapsnapshot-near-heap-limit as stable (Joyee Cheung) #60956
• [bc0a55f086] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419
• [8a67c00bf5] - doc: mark --build-snapshot and --build-snapshot-config as stable (Joyee Cheung) #60954
• [3999c2a910] - meta: add avivkeller to collaborators (Aviv Keller) #61115
• [fa542fbae6] - meta: add gurgunday to collaborators (Gürgün Dayıoğlu) #61094
• [ff11eda2f2] - meta: add Renegade334 to collaborators (Renegade334) #60714
• [2e387fb969] - url: update ada to v3.4.2 and support unicode 17 (Yagiz Nizipli) #61593
• [bb206782d4] - v8: mark v8.queryObjects() as stable (Joyee Cheung) #60957

Commits

• [a73279c60d] - assert: use a set instead of an array for faster lookup (Ruben Bridgewater) #61076
• [6a61bcd73c] - assert,util: fix deep comparison for sets and maps with mixed types (Ruben Bridgewater) #61388
• [cf0eabcd42] - assert,util: improve deep comparison performance (Ruben Bridgewater) #61076
• [ff3b9ac183] - benchmark: add SQLite benchmarks (Guilherme Araújo) #61401
• [e1f7d68c94] - benchmark: use boolean options in benchmark tests (SeokhunEom) #60129
• [91127c91cd] - benchmark: allow boolean option values (SeokhunEom) #60129
• [170fda55f6] - benchmark: add microbench on isInsideNodeModules (Chengzhong Wu) #60991
• [3976381b41] - benchmark: fix incorrect base64 input in byteLength benchmark (semimikoh) #60841
• [c702fccd76] - benchmark: use typescript for import cjs benchmark (Joyee Cheung) #60663
• [92c517c62d] - buffer: make methods work on Uint8Array instances (Neal Beeken) #56578
• [be95382edb] - buffer: let Buffer.of use heap (Сковорода Никита Андреевич) #60503
• [1f64d6841e] - build: test on Python 3.14 (Christian Clauss) #59983
• [ea4687981b] - build: update android-patches/trap-handler.h.patch (Mo Luo) #60369
• [b3a7a8c780] - build: update devcontainer.json to use paired nix env (Joyee Cheung) #61414
• [7168d0b5e3] - build: add embedtest into native suite (Joyee Cheung) #61357
• [e00755a977] - build: fix misplaced comma in ldflags (hqzing) #61294
• [72fcc3ee9d] - build: fix crate vendor file checksums on windows (Chengzhong Wu) #61329
• [76a73d68fd] - build: expose libplatform symbols in shared libnode (Joyee Cheung) #61144
• [ef8d26ce5c] - build: fix inconsistent quoting in Makefile (Antoine du Hamel) #60511
• [2d23968783] - build: remove temporal updater (Chengzhong Wu) #61151
• [4c2655f1c2] - build: update test-wpt-report to use NODE instead of OUT_NODE (Filip Skokan) #61024
• [eaea6821fc] - build: skip build-ci on actions with a separate test step (Chengzhong Wu) #61073
• [dfd4e12037] - build: run embedtest with node_g when BUILDTYPE=Debug (Chengzhong Wu) #60850
• [775c77234b] - build,tools: fix addon build deadlock on errors (Vladimir Morozov) #61321
• [5deafc10fa] - build,win: improve logs when ClangCL is missing (Mike McCready) #61438
• [e2481c5c6e] - build,win: update WinGet configurations to Python 3.14 (Mike McCready) #61431
• [d2586b7e4c] - child_process: treat ipc length header as unsigned uint32 (Ryuhei Shima) #61344
• [30e500fc09] - cli: mark --heapsnapshot-near-heap-limit as stable (Joyee Cheung) #60956
• [2c7da15612] - cluster: fix port reuse between cluster (Ryuhei Shima) #60141
• [bc0a55f086] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419
• [2d5f20e9c3] - crypto: update root certificates to NSS 3.117 (Node.js GitHub Bot) #60741
• [fba95be188] - deps: update archs files for openssl-3.5.5 (Node.js GitHub Bot) #61547
• [08697289e0] - deps: upgrade openssl sources to openssl-3.5.5 (Node.js GitHub Bot) #61547
• [403c50c04d] - deps: update corepack to 0.34.6 (Node.js GitHub Bot) #61510
• [3b24691aeb] - deps: upgrade npm to 11.8.0 (npm team) #61466
• [2bba7efdc4] - deps: update googletest to 85087857ad10bd407cd6ed2f52f7ea9752db621f (Node.js GitHub Bot) #61417
• [8f8c6f6162] - deps: update sqlite to 3.51.2 (Node.js GitHub Bot) #61339
• [c46009053c] - deps: update icu to 78.2 (Node.js GitHub Bot) #60523
• [b46b8dd91b] - deps: update ada to v3.4.0 (Yagiz Nizipli) #61315
• [88c6b17e18] - deps: update zlib to 1.3.1-e00f703 (Node.js GitHub Bot) #61135
• [0030c05ba9] - deps: update cjs-module-lexer to 2.2.0 (Node.js GitHub Bot) #61271
• [77437cff89] - deps: update nbytes to 0.1.2 (Node.js GitHub Bot) #61270
• [fb0f05a937] - deps: update timezone to 2025c (Node.js GitHub Bot) #61138
• [b426a47c05] - deps: nghttp2: revert 7784fa979d0b (Antoine du Hamel) #61136
• [c07a38f700] - deps: update nghttp2 to 1.68.0 (nodejs-github-bot) #61136
• [c2ddc9a18b] - deps: update simdjson to 4.2.4 (Node.js GitHub Bot) #61056
• [f38cd6da8e] - deps: update googletest to 065127f1e4b46c5f14fc73cf8d323c221f9dc68e (Node.js GitHub Bot) #61055
• [a9a6a4cdb2] - deps: brotli: cherry-pick e230f474b87 (liujiahui) #61003
• [5a40023aae] - deps: upgrade npm to 11.7.0 (npm team) #61011
• [4121e7a413] - deps: update sqlite to 3.51.1 (Node.js GitHub Bot) #60899
• [e8a09fc896] - deps: update zlib to 1.3.1-63d7e16 (Node.js GitHub Bot) #60898
• [8df5862ee5] - deps: upgrade npm to 11.6.4 (npm team) #60853
• [6c1c8cbdcc] - deps: update sqlite to 3.51.0 (Node.js GitHub Bot) #60614
• [2d1efc7c1b] - deps: upgrade npm to 11.6.3 (npm team) #60785
• [3a2de1c23b] - deps: update brotli to 1.2.0 (Node.js GitHub Bot) #60540
• [58c5d40bd1] - deps: update simdjson to 4.2.2 (Node.js GitHub Bot) #60740
• [e6b607ef50] - deps: update googletest to 1b96fa13f549387b7549cc89e1a785cf143a1a50 (Node.js GitHub Bot) #60739
• [650c9e0305] - deps: update minimatch to 10.1.1 (Node.js GitHub Bot) #60543
• [ef1951d5d5] - deps: update inspector_protocol to 1b1bcbbe060e8c8cd8704f00f78978c50991 (Node.js GitHub Bot) #60705
• [eb068305dd] - deps: update cjs-module-lexer to 2.1.1 (Node.js GitHub Bot) #60646
• [ee1d99131c] - deps: update simdjson to 4.2.1 (Node.js GitHub Bot) #60644
• [23582967b7] - deps: V8: cherry-pick 1441665e0d87 (Domagoj Stolfa) #60989
• [155eaedff2] - deps: V8: cherry-pick 394a8053b59e (Lu Yahan) #60962
• [c95a4a0f43] - deps: V8: backport bbaae8e36164 (Lu Yahan) #60962
• [6f123f186d] - doc: move Security-Team from TSC to SECURITY (Rafael Gonzaga) #61495
• [2e3337d15b] - doc: added requestOCSP option to tls.connect (ikeyan) #61064
• [f505f81577] - doc: restore @ChALkeR to collaborators (Сковорода Никита Андреевич) #61553
• [12fb95d0c9] - doc: update IBM/Red Hat volunteers with dedicated project time (Beth Griggs) #61588
• [283ab61ed2] - doc: align Buffer.concat documentation with behavior (Gürgün Dayıoğlu) #60405
• [fc9c906d5f] - doc: remove v prefix for version references (Mike McCready) #61488
• [4a88ed09e8] - doc: mention constructor comparison in assert.deepStrictEqual (Hamza Kargin) #60253
• [9b29d56491] - doc: add CVE delay mention (Rafael Gonzaga) #61465
• [4815e4ac52] - doc: update previous version links in BUILDING (Mike McCready) #61457
• [8a43244e6c] - doc: include OpenJSF handle for security stewards (Rafael Gonzaga) #61454
• [89a7f184a1] - doc: clarify process.argv[1] behavior for -e/--eval (Jeevankumar S) #61366
• [b4041aba1c] - doc: remove Windows Dev Home instructions from BUILDING (Mike McCready) #61434
• [fa7830bac0] - doc: clarify TypedArray properties on Buffer (Roman Reiss) #61355
• [45663c8956] - doc: update Python 3.14 manual install instructions (Windows) (Mike McCready) #61428
• [0248357f26] - doc: note resume build should not be done on node-test-commit (Stewart X Addison) #61373
• [b254bab513] - doc: refine WebAssembly error documentation (sangwook) #61382
• [8aca37c6ef] - doc: add deprecation history for url.parse (Eng Zer Jun) #61389
• [8047ac3aac] - doc: add marco and rafael in last sec release (Marco Ippolito) #61383
• [61190bf4b4] - doc: packages: example of private import switch to internal (coderaiser) #61343
• [346311c42f] - doc: add esm and cjs examples to node:v8 (Alfredo González) #61328
• [c07c80717c] - doc: added 'secure' event to tls.TLSSocket (ikeyan) #61066
• [9f68d30f11] - doc: restore @watilde to collaborators (Daijiro Wachi) #61350
• [a3b08ddb51] - doc: run license-builder (github-actions[bot]) #61348
• [4990812dd9] - doc: document ALPNCallback option for TLSSocket constructor (ikeyan) #61331
• [89e9d19693] - doc: update MDN links (Livia Medeiros) #61062
• [dcffa88fec] - doc: correct description of error.stack accessor behavior (René) #61090
• [31476cd4d1] - doc: add documentation for process.traceProcessWarnings (Alireza Ebrahimkhani) #53641
• [99c783b9ec] - doc: add sqlite session disposal method (René) #61273
• [c7764bed35] - doc: fix filename typo (Hardanish Singh) #61297
• [0f16bca9d8] - doc: fix typos and grammar in BUILDING.md & onboarding.md (Hardanish Singh) #61267
• [4b691b562d] - doc: mention --newVersion release script (Rafael Gonzaga) #61255
• [32e56ab71f] - doc: correct typo in api contributing doc (Mike McCready) #61260
• [9ebf1ffbeb] - doc: add PR-URL requirement for security backports (Rafael Gonzaga) #61256
• [940f83d95d] - doc: add reusePort error behavior to net module (mag123c) #61250
• [8881859ee0] - doc: note corepack package removal in distribution doc (Mike McCready) #61207
• [03a1540cd1] - doc: fix tls.connect() timeout documentation (Azad Gupta) #61079
• [816ce7530d] - doc: missing passed, error and passed properties on TestContext (Xavier Stouder) #61185
• [d825c8858a] - doc: clarify threat model for application-level API exposure (Rafael Gonzaga) #61184
• [a3dd30d0e0] - doc: correct options for net.Socket class and socket.connect (Xavier Stouder) #61179
• [c3e776becd] - doc: document error event on readline InterfaceConstructor (Xavier Stouder) #61170
• [05a6372d30] - doc: add a smooth scrolling effect to the sidebar (btea) #59007
• [76a7eb09ef] - doc: fix test settime docs (Efe) #61117
• [bcbbde6ccc] - doc: correct invalid collaborator profile (JJ) #61091
• [084741d09d] - doc: add a tip about developer mode on Windows (Joyee Cheung) #61112
• [ed4de371d3] - doc: exclude compile-time flag features from security policy (Matteo Collina) #61109
• [3999c2a910] - doc: add @avivkeller to collaborators (Aviv Keller) #61115
• [f3ec066f1a] - doc: warn about short GCM tags visibly (Tobias Nießen) #61082
• [fa542fbae6] - doc: add gurgunday to collaborators (Gürgün Dayıoğlu) #61094
• [49f36722dc] - doc: mark sync module hooks as release candidate (Joyee Cheung) #60960
• [a0adc6afd2] - doc: reorganize docs of module customization hooks (Joyee Cheung) #60960
• [a4097ca048] - doc: mark crypto.hash as stable (Joyee Cheung) #60994
• [8a67c00bf5] - doc: mark --build-snapshot and --build-snapshot-config as stable (Joyee Cheung) #60954
• [0c83169c35] - doc: add File modes cross-references in fs methods (Mohit Raj Saxena) #60286
• [dae815262a] - doc: add missing zstd to mjs example of zlib (Deokjin Kim) #60915
• [28b284880e] - doc: clarify fileURLToPath security considerations (Rafael Gonzaga) #60887
• [6c440af39b] - doc: show the use of string expressions in the SQLTagStore example (schliepa) #60873
• [4c5b62209c] - doc: replace column with columnNumber in example of util.getCallSites (Deokjin Kim) #60881
• [8875c9148e] - doc: correct spelling in BUILDING.md (Rich Trott) #60875
• [d6cb762426] - doc: update debuglog examples to use 'foo-bar' instead of 'foo' (xiaoyao) #60867
• [9eae518796] - doc: correct 'event handle' to 'event handler' in Utf8Stream drop event (Riddhi) #60692
• [c3c3ed27c1] - doc: fix typos in changelogs (Rich Trott) #60855
• [1b975e3017] - doc: mark module.register as active development (Chengzhong Wu) #60849
• [6a6fc0c851] - doc: add fullName property to SuiteContext (PaulyBearCoding) #60762
• [8347d734e6] - doc: add additional codemods for deprecation (Augustin Mauroy) #60811
• [7cc87037c3] - doc: keep sidebar module visible when navigating docs (Botato) #60410
• [1c6618f643] - doc: correct concurrency wording in test() documentation (Azad Gupta) #60773
• [488208004e] - doc: clarify that CQ only picks up PRs targeting main (René) #60731
• [34517940c2] - doc: clarify license section and add contributor note (KaleruMadhu) #60590
• [f080721df4] - doc: correct and expand documentation for SQLTagStore (René) #60200
• [be3d26709d] - doc: correct tls ALPNProtocols types (René) #60143
• [ef82c53131] - doc: remove mention of SMS 2FA (Antoine du Hamel) #60707
• [11b190f63e] - doc: add info about renamed flag in cli.md (Antoine du Hamel) #60690
• [59db9bc654] - doc: fix incorrect slh-dsa oids in crypto.md (Artsiom Malakhau) #60681
• [ad52750cf6] - doc: domain.add() does not accept timer objects (René) #60675
• [2592d94e29] - doc: fix v24 changelog after security release (Marco Ippolito) #61371
• [e0f4ad0af0] - doc,test: add documentation and test on how to use addons in SEA (Joyee Cheung) #59582
• [13af640d94] - esm: ensure watch mode restarts after syntax errors (Xavier Stouder) #61232
• [31afe95d15] - esm: avoid throw when module specifier is not url (Craig Macomber (Microsoft)) #61000
• [311a04cf2d] - esm: improve error messages for ambiguous module syntax (mag123c) #60376
• [cacef92937] - events: remove redundant todo (Gürgün Dayıoğlu) #60595
• [42e1f72561] - events: remove eventtarget custom inspect branding (Efe) #61128
• [fd8b61369b] - fs: remove duplicate getValidatedPath calls (Mert Can Altin) #61359
• [9bb9fc7f2c] - fs: fix errorOnExist behavior for directory copy in fs.cp (Nicholas Paun) #60946
• [55a3c70780] - fs: fix ENOTDIR in globSync when file is treated as dir (sangwook) #61259
• [073a145095] - fs: remove duplicate fd validation in sync functions (Mert Can Altin) #61361
• [b132ecdf60] - fs: validate statfs path (Efe) #61230
• [0ed0a30f74] - fs: fix rmSync to handle non-ASCII characters (Yeaseen) #61108
• [99632b1a3b] - fs: remove broken symlinks in rmSync (sangwook) #61040
• [9cb6757a67] - fs: detect dot files when using globstar (Robin van Wijngaarden) #61012
• [e22aad19e0] - gyp: aix: change gcc version detection so CXX="ccache g++" works (Stewart X Addison) #61464
• [59d94ba7e7] - http: fix rawHeaders exceeding maxHeadersCount limit (Max Harari) #61285
• [