Skip to content

Conversation

@renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Nov 18, 2024

This PR contains the following updates:

Package Type Update Change Pending
alpine final minor 3.20.3 -> 3.22.2
eclipse-temurin final patch 25-jre-alpine -> 25.0.1_8-jre-alpine
eclipse-temurin stage patch 21.0.5_11-jdk -> 21.0.8_9-jdk 21.0.9_10-jdk
golang final minor 1.23.4-alpine -> 1.25.4-alpine
mcr.microsoft.com/dotnet/aspnet final digest 5b558c0 -> 7c4246c
mcr.microsoft.com/dotnet/sdk stage digest d599d65 -> c7445f1
node stage minor 20.18.1-alpine -> 20.19.5-alpine
python final minor 3.12.8-slim -> 3.13.8-slim 3.14.0-slim (+1)
python final minor 3.12.8-alpine -> 3.14.0-alpine

Release Notes

nodejs/node (node)

v20.19.5: 2025-09-03, Version 20.19.5 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

v20.19.4: 2025-07-15, Version 20.19.4 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
Commits

v20.19.3: 2025-06-23, Version 20.19.3 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

v20.19.2: 2025-05-14, Version 20.19.2 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
Commits

v20.19.1: 2025-04-22, Version 20.19.1 'Iron' (LTS), @​UlisesGascon prepared by @​RafaelGSS

Compare Source

Notable Changes
Commits

v20.19.0: 2025-03-13, Version 20.19.0 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
require(esm) is now enabled by default

Support for loading native ES modules using require() had been available on v20.x under the command line flag --experimental-require-module, and available by default on v22.x and v23.x. In this release, it is now no longer behind a flag on v20.x.

This feature has been tested on v23.x and v22.x, and we are looking for user feedback from v20.x to make more final tweaks before fully stabilizing it.
It now no longer emits a warning unless --trace-require-module is explicitly used.
If there happens to be any regressions caused by this feature, users can report it to the Node.js issue tracker. Meanwhile this feature can also be disabled using --no-experimental-require-module as a workaround.

With this feature enabled, Node.js will no longer throw ERR_REQUIRE_ESM if require() is used to load a ES module. It can, however, throw ERR_REQUIRE_ASYNC_MODULE if the ES module being loaded or its dependencies contain top-level await. When the ES module is loaded successfully by require(), the returned object will either be a ES module namespace object similar to what's returned by import(), or what gets exported as "module.exports" in the ES module.

Users can check process.features.require_module to see whether require(esm) is enabled in the current Node.js instance. For packages, the "module-sync" exports condition can be used as a way to detect require(esm) support in the current Node.js instance and allow both require() and import to load the same native ES module. See the documentation for more details about this feature.

Contributed by Joyee Cheung in #​55085

Module syntax detection is now enabled by default

Module syntax detection (the --experimental-detect-module flag) is now
enabled by default. Use --no-experimental-detect-module to disable it if
needed.

Syntax detection attempts to run ambiguous files as CommonJS, and if the module
fails to parse as CommonJS due to ES module syntax, Node.js tries again and runs
the file as an ES module.
Ambiguous files are those with a .js or no extension, where the nearest parent
package.json has no "type" field (either "type": "module" or
"type": "commonjs").
Syntax detection should have no performance impact on CommonJS modules, but it
incurs a slight performance penalty for ES modules; add "type": "module" to
the nearest parent package.json file to eliminate the performance cost.
A use case unlocked by this feature is the ability to use ES module syntax in
extensionless scripts with no nearby package.json.

Thanks to Geoffrey Booth for making this work on #​53619.

Other Notable Changes
  • [285bb4ee14] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #​56566
  • [73b5c16684] - (SEMVER-MINOR) worker: add postMessageToThread (Paolo Insogna) #​53682
  • [de313b2336] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #​56194
  • [4fba01911d] - (SEMVER-MINOR) process: add process.features.require_module (Joyee Cheung) #​55241
  • [df8a045afe] - (SEMVER-MINOR) module: implement the "module-sync" exports condition (Joyee Cheung) #​54648
  • [f9dc1eaef5] - (SEMVER-MINOR) module: add __esModule to require()'d ESM (Joyee Cheung) #​52166
Commits
  • [d84be843e3] - benchmark: add validateStream to styleText bench (Rafael Gonzaga) #​56556
  • [d8eaf5b9b8] - build: fix compatibility with V8's depot_tools (Ri

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested review from a team and yoshi-approver as code owners November 18, 2024 00:55
@forking-renovate forking-renovate bot added the dependencies Pull requests that update a dependency file label Nov 18, 2024
@renovate-bot renovate-bot force-pushed the renovate/docker branch 2 times, most recently from 9cdf015 to 85b2aa2 Compare November 18, 2024 17:40
@renovate-bot renovate-bot changed the title chore(deps): update docker chore(deps): update eclipse-temurin docker tag to v21.0.5_11-jre-alpine Nov 19, 2024
@renovate-bot renovate-bot changed the title chore(deps): update eclipse-temurin docker tag to v21.0.5_11-jre-alpine chore(deps): update docker Nov 19, 2024
@renovate-bot renovate-bot force-pushed the renovate/docker branch 6 times, most recently from 5eedeb0 to 715f56e Compare November 26, 2024 19:06
@renovate-bot renovate-bot force-pushed the renovate/docker branch 10 times, most recently from 7203307 to 07a9eb6 Compare December 4, 2024 01:59
@renovate-bot renovate-bot force-pushed the renovate/docker branch 7 times, most recently from 5765b8c to f782086 Compare December 13, 2024 04:52
@renovate-bot renovate-bot force-pushed the renovate/docker branch 9 times, most recently from a6ae1e6 to 9e5dd95 Compare October 15, 2025 11:15
@renovate-bot renovate-bot force-pushed the renovate/docker branch 9 times, most recently from 4640b02 to 173509f Compare October 22, 2025 12:13
@renovate-bot renovate-bot force-pushed the renovate/docker branch 5 times, most recently from e07e87c to 0301f6b Compare November 1, 2025 01:07
@renovate-bot renovate-bot force-pushed the renovate/docker branch 4 times, most recently from f645794 to 1a12841 Compare November 15, 2025 23:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant