Node.js 22 22.23.3 aflaai

Notable Changes
- [fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
- [871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
- [b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #64884
- [e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324
- [a9cb31129f] - deps: update OpenSSL 3.5.8 (Node.js GitHub Bot) #65542
- [2a3548e51c] - deps: update Undici to 6.28.1 (mcollina) #65790
- [3909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710
- [66de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623
Commits
- [44cf27b8fa] - build: update binary-upload to use correct tarball name (Stewart X Addison) #65282
- [fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
- [71feba6b69] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527
- [871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
- [2a3548e51c] - deps: update undici to 6.28.1 (mcollina) #65790
- [59d853a4df] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542
- [a9cb31129f] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542
- [3376e27de2] - deps: V8: cherry-pick a6eaf7574109 (Camillo Bruni) #65402
- [b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #64884
- [4e4bd1b104] - deps: update timezone to 2026c (Node.js GitHub Bot) #64588
- [7d82841b4e] - deps: update c-ares to 1.34.8 (Node.js GitHub Bot) #64330
- [01855a19d3] - deps: c-ares: cherry-pick 8ba37af8e3fb (René) #64110
- [23fb398c3d] - deps: update corepack to 0.35.0 (Node.js GitHub Bot) #63375
- [5286330365] - deps: update corepack to 0.34.7 (Node.js GitHub Bot) #62810
- [6d6c3c98b1] - deps: update timezone to 2026b (Node.js GitHub Bot) #62962
- [e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324
- [d9cb8468a3] - doc: clarify filter option of sqlite.database.applyChangeset (Antoine du Hamel) #63515
- [c9c5662d91] - doc: add sxa GPG key (ed25519) (Stewart X Addison) #64193
- [37f21068c4] - fs: restore fs patchability in ESM loader (Joyee Cheung) #62835
- [7c2df5dd96] - http2: avoid uaf while receiving and sending rst_stream (esgor) #64166
- [3909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710
- [66de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623
- [ce9139107f] - src: escape Windows environment variables in task runner (Antoine du Hamel) #65217
- [839480a471] - test: fix link-local dgram scope assertion (Filip Skokan) #65629
- [40eac4a32f] - test: account for varied OpenSSL CCM final behaviours (Filip Skokan) #65542
- [75098a9e8c] - tools: update gr2m/create-or-update-pull-request-action to v1.10.1 (Mike McCready) #63065
- [08b6ac0416] - tools: revert OpenSSL update workflow to ubuntu-latest (Richard Lau) #62627
- [02cafc479f] - tools: fix commit linter for semver-major release proposals (Antoine du Hamel) #62993
- [6f6cd3768d] - tools: sync mk-ca-bundle.pl with curl (Archkon) #64753
- [bc5753d438] - tools: remove envinfo from our workflows (Antoine du Hamel) #64259
- [d68ee9f8a5] - tools: validate version number in release proposal commit message lint (Antoine du Hamel) #64070
- [38ee2e895f] - tools: avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #63938
- [fdc65e489f] - tools: use different branch for tool updates on staging branches (Antoine du Hamel) #63110
- [e5a6fde002] - tools: update gyp-next to 0.22.1 (Node.js GitHub Bot) #62961
- [5fbbad6e82] - url: handle unparsable serialized URLs in setters (Matteo Collina) #64651
- [ed019e4854] - util: preserve function names without source map names (Hiroki Osame) #65108