NODEJS-22.23.3 release notes and known issues

Summary

Notable Changes [ fe2a6b2be8 ] - crypto : update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746 [ 871167ddfd ] - deps : update corepack to 0.36.0 (Node.js GitHub Bot) #65653 [ b816fc8958 ] - deps : upgrade npm to 10.9.9 (npm team) #64884 [ e306521444 ] - deps : update icu to 78.3 (Node.js GitHub Bot) #62324 [ a9cb31129f ] - deps : update OpenSSL 3.5.8 (Node.js GitHub Bot) #65542 [ 2a3548e51c ] - deps : update Undici to 6.28.1 (mcollina) #65790 [ 3909ff2c4a ] - node-api : support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710 [ 66de6349ad ] - node-api : add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623 Commits [ 44cf27b8fa ] - build : update binary-upload to use correct tarball name (Stewart X Addison) #65282 [ fe2a6b2be8 ] - crypto : update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746 [ 71feba6b69 ] - crypto : update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527 [ 871167ddfd ] - deps : update corepack to 0.36.0 (Node.js GitHub Bot) #65653 [ 2a3548e51c ] - deps : update undici to 6.28.1 (mcollina) #65790 [ 59d853a4df ] - deps : update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542 [ a9cb31129f ] - deps : upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542 [ 3376e27de2 ] - deps : V8: cherry-pick a6eaf7574109 (Camillo Bruni) #65402 [ b816fc8958 ] - deps : upgrade npm to 10.9.9 (npm team) #64884 [ 4e4bd1b104 ] - deps : update timezone to 2026c (Node.js GitHub Bot) #64588 [ 7d82841b4e ] - deps : update c-ares to 1.34.8 (Node.js GitHub Bot) #64330 [ 01855a19d3 ] - deps : c-ares: cherry-pick 8ba37af8e3fb (René) #64110 [ 23fb398c3d ] - deps : update corepack to 0.35.0 (Node.js GitHub Bot) #63375 [ 5286330365 ] - deps : update corepack to 0.34.7 (Node.js GitHub Bot) #62810 [ 6d6c3c98b1 ] - deps : update timezone to 2026b (Node.js GitHub Bot) #62962 [ e306521444 ] - deps : update icu to 78.3 (Node.js GitHub Bot) #62324 [ d9cb8468a3 ] - doc : clarify filter option of sqlite.database.applyChangeset (Antoine du Hamel) #63515 [ c9c5662d91 ] - doc : add sxa GPG key (ed25519) (Stewart X Addison) #64193 [ 37f21068c4 ] - fs : restore fs patchability in ESM loader (Joyee Cheung) #62835 [ 7c2df5dd96 ] - http2 : avoid uaf while receiving and sending rst_stream (esgor) #64166 [ 3909ff2c4a ] - node-api : support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710 [ 66de6349ad ] - node-api : add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623 [ ce9139107f ] - src : escape Windows environment variables in task runner (Antoine du Hamel) #65217 [ 839480a471 ] - test : fix link-local dgram scope assertion (Filip Skokan) #65629 [ 40eac4a32f ] - test : account for varied OpenSSL CCM final behaviours (Filip Skokan) #65542 [ 75098a9e8c ] - tools : update gr2m/create-or-update-pull-request-action to v1.10.1 (Mike McCready) #63065 [ 08b6ac0416 ] - tools : revert OpenSSL update workflow to ubuntu-latest (Richard Lau) #62627 [ 02cafc479f ] - tools : fix commit linter for semver-major release proposals (Antoine du Hamel) #62993 [ 6f6cd3768d ] - tools : sync mk-ca-bundle.pl with curl (Archkon) #64753 [ bc5753d438 ] - tools : remove envinfo from our workflows (Antoine du Hamel) #64259 [ d68ee9f8a5 ] - tools : validate version number in release proposal commit message lint (Antoine du Hamel) #64070 [ 38ee2e895f ] - tools : avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #63938 [ fdc65e489f ] - tools : use different branch for tool updates on staging branches (Antoine du Hamel) #63110 [ e5a6fde002 ] - tools : update gyp-next to 0.22.1 (Node.js GitHub Bot) #62961 [ 5fbbad6e82 ] - url : handle unparsable serialized URLs in setters (Matteo Collina) #64651 [ ed019e4854 ] - util : preserve function names without source map names (Hiroki Osame) #65108

Improvements and security content

• Notable Changes [ fe2a6b2be8 ] - crypto : update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746 [ 871167ddfd ] - deps : update corepack to 0.36.0 (Node.js GitHub Bot) #65653 [ b816fc8958 ] - deps : upgrade npm to 10.9.9 (npm team) #64884 [ e306521444 ] - deps : update icu to 78.3 (Node.js GitHub Bot) #62324 [ a9cb31129f ] - deps : update OpenSSL 3.5.8 (Node.js GitHub Bot) #65542 [ 2a3548e51c ] - deps : update Undici to 6.28.1 (mcollina) #65790 [ 3909ff2c4a ] - node-api : support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710 [ 66de6349ad ] - node-api : add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623 Commits [ 44cf27b8fa ] - build : update binary-upload to use correct tarball name (Stewart X Addison) #65282 [ fe2a6b2be8 ] - crypto : update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746 [ 71feba6b69 ] - crypto : update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527 [ 871167ddfd ] - deps : update corepack to 0.36.0 (Node.js GitHub Bot) #65653 [ 2a3548e51c ] - deps : update undici to 6.28.1 (mcollina) #65790 [ 59d853a4df ] - deps : update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542 [ a9cb31129f ] - deps : upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542 [ 3376e27de2 ] - deps : V8: cherry-pick a6eaf7574109 (Camillo Bruni) #65402 [ b816fc8958 ] - deps : upgrade npm to 10.9.9 (npm team) #64884 [ 4e4bd1b104 ] - deps : update timezone to 2026c (Node.js GitHub Bot) #64588 [ 7d82841b4e ] - deps : update c-ares to 1.34.8 (Node.js GitHub Bot) #64330 [ 01855a19d3 ] - deps : c-ares: cherry-pick 8ba37af8e3fb (René) #64110 [ 23fb398c3d ] - deps : update corepack to 0.35.0 (Node.js GitHub Bot) #63375 [ 5286330365 ] - deps : update corepack to 0.34.7 (Node.js GitHub Bot) #62810 [ 6d6c3c98b1 ] - deps : update timezone to 2026b (Node.js GitHub Bot) #62962 [ e306521444 ] - deps : update icu to 78.3 (Node.js GitHub Bot) #62324 [ d9cb8468a3 ] - doc : clarify filter option of sqlite.database.applyChangeset (Antoine du Hamel) #63515 [ c9c5662d91 ] - doc : add sxa GPG key (ed25519) (Stewart X Addison) #64193 [ 37f21068c4 ] - fs : restore fs patchability in ESM loader (Joyee Cheung) #62835 [ 7c2df5dd96 ] - http2 : avoid uaf while receiving and sending rst_stream (esgor) #64166 [ 3909ff2c4a ] - node-api : support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710 [ 66de6349ad ] - node-api : add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623 [ ce9139107f ] - src : escape Windows environment variables in task runner (Antoine du Hamel) #65217 [ 839480a471 ] - test : fix link-local dgram scope assertion (Filip Skokan) #65629 [ 40eac4a32f ] - test : account for varied OpenSSL CCM final behaviours (Filip Skokan) #65542 [ 75098a9e8c ] - tools : update gr2m/create-or-update-pull-request-action to v1.10.1 (Mike McCready) #63065 [ 08b6ac0416 ] - tools : revert OpenSSL update workflow to ubuntu-latest (Richard Lau) #62627 [ 02cafc479f ] - tools : fix commit linter for semver-major release proposals (Antoine du Hamel) #62993 [ 6f6cd3768d ] - tools : sync mk-ca-bundle.pl with curl (Archkon) #64753 [ bc5753d438 ] - tools : remove envinfo from our workflows (Antoine du Hamel) #64259 [ d68ee9f8a5 ] - tools : validate version number in release proposal commit message lint (Antoine du Hamel) #64070 [ 38ee2e895f ] - tools : avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #63938 [ fdc65e489f ] - tools : use different branch for tool updates on staging branches (Antoine du Hamel) #63110 [ e5a6fde002 ] - tools : update gyp-next to 0.22.1 (Node.js GitHub Bot) #62961 [ 5fbbad6e82 ] - url : handle unparsable serialized URLs in setters (Matteo Collina) #64651 [ ed019e4854 ] - util : preserve function names without source map names (Hiroki Osame) #65108

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Lifecycle connections

These links connect the publisher update to related Lifecycle records without treating the update publication date as an end-of-support date.

Official publisher evidence