Node.js 15 이전 버전 및 전체 버전

This is a security release.
Notable Changes
Vulnerabilties Fixed:
- CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
- Impacts:
- All versions of the 15.x, 14.x, 12.x and 10.x releases lines
- CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (High)
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
- Impacts:
- All versions of the 15.x, 14.x, 12.x and 10.x releases lines
- CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
- This is a vulnerability in the y18n npm module which may be exploited by prototype pollution. You can read more about it in https://github.com/advisories/GHSA-c4w7-xm78-47vh
- Impacts:
- All versions of the 14.x, 12.x and 10.x releases lines
Other Notable Changes:
- [b6f4901221] - (SEMVER-MINOR) fs: add support for async iterators to fsPromises.writeFile (HiroyukiYagihashi) #37490
- [0709cbb7fe] - (SEMVER-MINOR) net: allow net.BlockList to use net.SocketAddress objects (James M Snell) #37917
- [daa8a7bbcf] - (SEMVER-MINOR) net: add SocketAddress class (James M Snell) #37917
- [a4169ce519] - (SEMVER-MINOR) net: make net.BlockList cloneable (James M Snell) #37917
- [669b81c68b] - (SEMVER-MINOR) net,tls: add abort signal support to connect (Nitzan Uziely) #37735
- [a1123f0a29] - (SEMVER-MINOR) readline: add AbortSignal support to interface (Nitzan Uziely) #37932
Commits
- [ac69b95e47] - crypto: use correct webcrypto RSASSA-PKCS1-v1_5 algorithm name (Filip Skokan) #38029
- [960c6be229] - crypto: add buffering to randomInt (Tobias Nießen) #35110
- [4ef102d34e] - deps: update to cjs-module-lexer@1.1.1 (Guy Bedford) #37992
- [f0e77149a4] - deps: update archs files for OpenSSL-1.1.1k (Hassaan Pasha) #37916
- [bbdcdad2c6] - deps: upgrade openssl sources to 1.1.1k+quic (Hassaan Pasha) #37916
- [913ec56798] - deps: cjs-module-lexer: cherry-pick 22093e765f (pezhmanparsaee) #37895
- [afc6ab2122] - doc: fix asyncLocalStorage.run() description (Darkripper214) #38023
- [b40d35d649] - doc: document how to unref stdin when using readline.Interface (Anu Pasumarthy) #38019
- [ce14080473] - doc: move psmarshall to collaborators emeriti (Peter Marshall) #37994
- [ae70aa3c63] - doc: add distinctive color for code elements inside links (Antoine du Hamel) #37950
- [8792c7c96b] - doc: add missing events.on metadata (Anna Henningsen) #37965
- [a57dc06adf] - doc: improve Buffer's encoding documentation (Michaël Zasso) #37945
- [f3fabb57cf] - doc: add missing cleanup step in OpenSSL upgrade (Tobias Nießen) #37927
- [13c3924af8] - doc: add Windows-specific info to subprocess.kill() (João Lucas Lucchetta) #34867
- [b6f4901221] - (SEMVER-MINOR) fs: add support for async iterators to fsPromises.writeFile (HiroyukiYagihashi) #37490
- [ad7e34446c] - fs: fix chown abort (Darshan Sen) #38004
- [d86aca9a77] - http: optimize debug function correctly (Michaël Zasso) #37966
- [062541aae5] - http2: add specific error code for custom frames (Anna Henningsen) #37936
- [8525231902] - lib: change wording in lib/domain.js comment (Akhil Marsonya) #37933
- [21e399be4c] - lib: change wording in lib/internal/child_process comment (Akhil Marsonya) #37903
- [3ab9619e56] - module: improve error message for invalid data URL (Antoine du Hamel) #37701
- [0709cbb7fe] - (SEMVER-MINOR) net: allow net.BlockList to use net.SocketAddress objects (James M Snell) #37917
- [daa8a7bbcf] - (SEMVER-MINOR) net: add SocketAddress class (James M Snell) #37917
- [a4169ce519] - (SEMVER-MINOR) net: make net.BlockList cloneable (James M Snell) #37917
- [669b81c68b] - (SEMVER-MINOR) net,tls: add abort signal support to connect (Nitzan Uziely) #37735
- [a94cc27cbe] - path: refactor to use more primordials (Akhil Marsonya) #37893
- [6

Notable Changes
- buffer:
- implement btoa and atob (James M Snell) #37529
- deps:
- upgrade npm to 7.7.6 (Ruy Adorno) #37968
- This update adds workspaces support to npm run and npm exec
- doc:
- add legacy status to stability index (James M Snell) #37784
- add @linkgoron to collaborators (Nitzan Uziely) #37817
- http:
- add http.ClientRequest.getRawHeaderNames() (simov) #37660
Commits
- [dc9cd43d8f] - (SEMVER-MINOR) buffer: implement btoa and atob (James M Snell) #37529
- [377830fd28] - child_process: remove unused argument (Rich Trott) #37923
- [cdfc1c8692] - child_process: cleanup AbortSignal duplication (Nitzan Uziely) #37823
- [95aa032413] - (SEMVER-MINOR) child_process: add timeout to spawn and fork (Nitzan Uziely) #37256
- [50fc6b9df0] - crypto: clear errors in SignTraits::DeriveBits (Filip Skokan) #37820
- [79259389a1] - crypto: fix DiffieHellman argument validation (Antoine du Hamel) #37810
- [11d45855cd] - crypto: fix header name (Jiawen Geng) #37792
- [c37806d0ba] - crypto: use macro map for NodeCryptoError (Darshan Sen) #37758
- [bfe3f21ee0] - crypto: fix crypto.verify callback invocation with a private keyobject (Filip Skokan) #37795
- [f2cef54b6f] - deps: upgrade npm to 7.7.6 (Ruy Adorno) #37968
- [ec82feb728] - deps: upgrade npm to 7.7.5 (Ruy Adorno) #37919
- [649e04c4a5] - deps: upgrade npm to 7.7.4 (Ruy Adorno) #37897
- [d5b472b70d] - deps: upgrade npm to 7.7.0 (Ruy Adorno) #37879
- [9e6aa190e3] - deps: add ngtcp2 and nghttp3 (James M Snell) #37682
- [659fc5d684] - doc: fix typos in lib/internal/bootstrap/pre_execution.js (marsonya) #37658
- [ac60d018e2] - doc: add more commands for cherry-picking and changelog to release docs (Danielle Adams) #37785
- [0fe3c7edd3] - doc: spell out ICU acronym on first occurrence (Rich Trott) #37942
- [364c8ac40d] - doc: update GOVERNANCE.md for TSC Charter changes (Rich Trott) #37888
- [e84252b35d] - doc: reduce header nesting in async_hooks.md (Rich Trott) #37839
- [a6f21e2cfc] - doc: fix wording in outgoingMessage.write (Tobias Nießen) #37894
- [30bc2e43e4] - doc: add examples for WHATWG URL objects (James M Snell) #37822
- [c0a424f3e9] - doc: clarify when child process 'spawn' event is *not* emitted (Matthew Francis Brunetti) #37833
- [9defe10371] - doc: fix legacy stability indicator display (Rich Trott) #37838
- [f97a5dd22f] - doc: use sentence-style capitlaztion in template header (Rich Trott) #37837
- [71fde07274] - doc: add Ayase-252 to triagers (Qingyu Deng) #37781
- [8f18133de0] - doc: use sentence case in issues.md headers (marsonya) #37537
- [3376051a0e] - doc: fix JS flavor selection (Antoine du Hamel) #37791
- [b09d032683] - doc: move Derek Lewis back to collaborators (Derek Lewis) #37726
- [6da0a0e85a] - doc: apply style for legacy status (James M Snell) #37784
- [185d4cd4aa] - doc: revoke deprecation of legacy url, change status to legacy (James M Snell) #37784
- [9d160daa89] - doc: add legacy status to stability index (James M Snell) #37784
- [4700042a9b] - doc: add @linkgoron to collaborators (Nitzan Uziely) #37817
- [c4183bbea4] - doc: fix AbortError example for timers (dbachko) #37738
- [50f3ad1946] - doc: fix typo in stream docs (Ian Kerins) #37716
- [2e82a97520] - doc: add gyp maintain info (Jiawen Geng) #37765
- [3925458df7] - doc,tools: use only one level 1 header per page (Rich Trott) #37839
- [e9c161ce12] - http: fix double AbortSignal registration (Nitzan Uziely) #37730
- [a5205819d8] - (SEMVER-MINOR) http: add http.ClientRequest.getRawHeaderNames() (simov) #37660
- [1c043272ea] - http2: treat non-EOF empty frames like other invalid frames (Anna Henningsen) #37875
- [a5bf7de6eb] - http2: fix setting options before handle exists (Anna Henningsen) #37875
- [af7489cb6c] - lib: add brand checks to AbortController and AbortSignal (Mattias Buelens) #37720
- [6e2b60931c] - lib: fix typo in internal/modules/esm/module_job.js (marsonya) #37773
- [3a440ecdf8] - lib: fix typo in lib/internal/crypto/certificate.js (marsonya) #37741
- [3ab223dd32] - node-api: f

Notable Changes
- crypto:
- add optional callback to crypto.sign and crypto.verify (Filip Skokan) #37500
- support JWK objects in create*Key (Filip Skokan) #37254
- deps:
- switch openssl to quictls/openssl (James M Snell) #37601
- update to cjs-module-lexer@1.1.0 (Guy Bedford) #37712
- fs:
- improve fsPromises writeFile performance (Nitzan Uziely) #37610
- improve fsPromises readFile performance (Nitzan Uziely) #37608
- lib:
- implement AbortSignal.abort() (James M Snell) #37693
- node-api:
- define version 8 (Gabriel Schulhof) #37652
- worker:
- add setEnvironmentData/getEnvironmentData (James M Snell) #37486
Commits
- [44514600b2] - assert,util: fix commutativity edge case (Ruben Bridgewater) #37711
- [8666d777cc] - benchmark: add benchmark for fsPromises.writeFile (Nitzan Uziely) #37610
- [e9028eb646] - cluster: restructure to same prototype for cluster child (Yash Ladha) #36610
- [8e1257e26d] - cluster: clarify construct Handle (Jackson Tian) #37385
- [341ee31e15] - crypto: reconcile duplicated code (James M Snell) #37704
- [a2d08d5dfd] - crypto: add internal error codes (Darshan Sen) #37650
- [922f2f0eb2] - (SEMVER-MINOR) crypto: add optional callback to crypto.sign and crypto.verify (Filip Skokan) #37500
- [55e522ca23] - (SEMVER-MINOR) crypto: support JWK objects in create*Key (Filip Skokan) #37254
- [33180fad81] - crypto: add separate error for INVALID_KEY_TYPE (Darshan Sen) #37555
- [d81b9af1fc] - crypto: improve randomUUID performance (Dawid Rusnak) #37243
- [23d654105f] - crypto,test: improve hmac coverage with webcrypto tests (obi-el) #37571
- [dfca2fac24] - (SEMVER-MINOR) deps: update to cjs-module-lexer@1.1.0 (Guy Bedford) #37712
- [ce357c0c11] - (SEMVER-MINOR) deps: update archs files for OpenSSL-1.1.1+quic (James M Snell) #37601
- [6d77b6174f] - (SEMVER-MINOR) deps: switch openssl to quictls/openssl (James M Snell) #37601
- [3e1a46a6a8] - deps: upgrade npm to 7.6.3 (Ruy Adorno) #37721
- [b2fd00398c] - deps: V8: cherry-pick 1648e050cade (Colin Ihrig) #37664
- [7422453072] - deps: upgrade npm to 7.6.1 (Ruy Adorno) #37606
- [89f3aa92b4] - doc: add marsonya as a triager (marsonya) #37667
- [3710857de3] - doc: add hints to http.request() options (Luigi Pinca) #37745
- [5d793737d7] - (SEMVER-MINOR) doc: update maintaining-openssl guide (James M Snell) #37601
- [1022d3d947] - doc: recommend checking abortSignal.aborted first (James M Snell) #37714
- [764aa2dcee] - doc: fix link to googletest fixtures (Tobias Nießen) #37698
- [0d3cc2dc82] - doc: fix typo in description of close event (Tobias Nießen) #37662
- [e55058fed1] - doc: use sentence case in README.md headers (marsonya) #37645
- [e7fc7a4c23] - doc: crypto esm examples (James M Snell) #37594
- [a3abd52e1e] - doc: add localPort to http.request() options (Luigi Pinca) #37586
- [705bdfbe3e] - doc: fix grammar errors in http document (Qingyu Deng) #37265
- [e5f7179d1e] - doc: add document for http.OutgoingMessage (Qingyu Deng) #37265
- [7c0ce17e65] - doc: fix typo in doc/guides/collaborator-guide.md (marsonya) #37643
- [60d8afa9ab] - doc: document that module.evaluate fulfills as undefined (James M Snell) #37663
- [6192315cf3] - doc: remove generated from dsaEncoding description (Marko Kaznovac) #37459
- [e4c8c50b28] - doc: fix typos in /doc/api/fs.md (Merlin Luntke) #37557
- [ebc6f41072] - doc: fix linter issue (Antoine du Hamel) #37657
- [d17aab1775] - doc: add esm examples for assert (James M Snell) #37607
- [366772bf87] - doc: add return type of readline.createInterface (Darshan Sen) #37600
- [f50db89a52] - doc: change lang info string in fs JS snippets (Antoine du Hamel) #37605
- [5a9196e0e4] - doc: apply sentence case to headers in pull-requests.md (marsonya) #37602
- [05badcf755] - doc: fix small typo in 15.11.0 release (Tierney Cyren) #37590
- [e0e7aa1058] - doc: add top-level await syntax in vm.md (Antoine du Hamel) #37077
- [732d8ca811] - doc: clarify that columnOffset applies only to the first line (James M Snell) #37563
- [267bbe3412] - doc: document that

Notable Changes
- [a3e3156b52] - (SEMVER-MINOR) crypto: make FIPS related options always awailable (Vít Ondruch) #36341
- [9ba5c0f9ba] - (SEMVER-MINOR) errors: remove experimental from --enable-source-maps (Benjamin Coe) #37362
Commits
- [d039e6fa80] - assert: refactor to avoid unsafe array iteration (Antoine du Hamel) #37344
- [d2e5529e08] - bootstrap: include v8 module into the builtin snapshot (Joyee Cheung) #36943
- [59861bac0e] - bootstrap: include fs module into the builtin snapshot (Joyee Cheung) #36943
- [458a4108b7] - buffer: make Blob's constructor more spec-compliant (Michaël Zasso) #37361
- [0d564ce214] - buffer: make Blob's slice method more spec-compliant (Michaël Zasso) #37361
- [ddae112133] - child_process: fix spawn and fork abort behavior (Nitzan Uziely) #37325
- [b1e188de8d] - crypto: refactor hasAnyNotIn to avoid unsafe array iteration (Antoine du Hamel) #37433
- [291d9e9936] - crypto: check ed/x webcrypto key import algorithm names (Filip Skokan) #37305
- [a3e3156b52] - (SEMVER-MINOR) crypto: make FIPS related options always awailable (Vít Ondruch) #36341
- [b634469c38] - crypto: refactor to avoid unsafe array iteration (Antoine du Hamel) #37364
- [01773ab614] - crypto: use BoringSSL compatible errors (Shelley Vohr) #37297
- [f3d67000a0] - deps: upgrade npm to 7.6.0 (Ruy Adorno) #37559
- [e1045f1004] - deps: upgrade npm to 7.5.6 (Ruy Adorno) #37496
- [80d3c118f4] - deps: V8: cherry-pick 373f4ae739ee (Richard Lau) #37505
- [1408de7e24] - deps: cherry-pick 8957d4677aa794c230577f234071af0 from V8 upstream (Antoine du Hamel) #37471
- [725d48ae77] - doc: remove experimental from --enable-source-maps (Colin Ihrig) #37540
- [5d939b7a49] - doc: fix typo in doc/api/packages.md (marsonya) #37536
- [cbfc6b1692] - doc: document how to register external bindings for snapshot (Joyee Cheung) #37463
- [dd7a04dc9f] - doc: fix typo "director" instead of "directory" (humanwebpl) #37523
- [ba81e7cb5e] - doc: revise LTS text in collaborator guide (Rich Trott) #37527
- [7529a97a5c] - doc: revise CI text in collaborator guide (Rich Trott) #37526
- [1285b907ce] - doc: revise objections section of collaborator guide (Rich Trott) #37525
- [bc86208a0a] - doc: revise premature disclosure text in collaborator guide (Rich Trott) #37524
- [46af56752e] - doc: change links to use HEAD in top level docs (Michael Dawson) #37494
- [3b737e63ce] - doc: apply sentence case to headers in doc/guides (marsonya) #37506
- [fb5e5bed21] - doc: fix typo in webcrypto.md (marsonya) #37507
- [3b7cb75554] - doc: document the NO_COLOR and FORCE_COLOR env vars (James M Snell) #37477
- [0fac27d546] - doc: add url.resolve replacement example (Antoine du Hamel) #37501
- [2228f44b25] - doc: apply sentence case to guides headers (marsonya) #37497
- [617819e4fb] - doc: update CI requirements for landing pull requests (Antoine du Hamel) #37308
- [4a40759b33] - doc: recommend queueMicrotask over process.nextTick (James M Snell) #37484
- [834f63793a] - doc: apply sentence case to headers in doc/guides (marsonya) #37478
- [7ac0820da0] - doc: fix typo in doc/api/http2/md (marsonya) #37479
- [4ad7a78448] - doc: alphabetize vm Module class properties (Rich Trott) #37451
- [a193d7ca87] - doc: alphabetize crypto Cipher class entries (Rich Trott) #37450
- [54b6f1bcf9] - doc: use HEAD for links in api docs (Michael Dawson) #37437
- [549d24b8ad] - doc: fix alignment of parameters (Michael Dawson) #37422
- [f3559a922b] - doc: fix typo in doc/api/esm.md (marsonya) #37400
- [c3d236d405] - doc: fix "referred to" in fs docs (Tobias Nießen) #37388
- [9ac8c74539] - doc: document x509 error codes (Dan Čermák) #37096
- [9a454afcd6] - doc: fix typo in esm.md (Jay Tailor) #37417
- [b3bf3d9824] - doc: use HEAD in links where possible (Michael Dawson) #37421
- [6675342cd9] - doc: clarify that async_hook callbacks cannot be async (James M Snell) #37384
- [4b54c10500] - doc: use **Default:** more consistently (Colin Ihrig) #37387
- [f20ce47dbb] - doc,child_process: pid can be undefined when

This is a security release.
Notable changes
Vulnerabilities fixed:
- CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
- Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.
- CVE-2021-22884: DNS rebinding in --inspect
- Affected Node.js versions are vulnerable to denial of service attacks when the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.
- CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
- This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in
https://www.openssl.org/news/secadv/20210216.txt
Commits
- [2a3ce5974b] - deps: update archs files for OpenSSL-1.1.1j (Daniel Bevenius) #37412
- [afbce66874] - deps: upgrade openssl sources to 1.1.1j (Daniel Bevenius) #37412
- [4184806dee] - (SEMVER-MINOR) http2: add unknownProtocol timeout (Daniel Bevenius) nodejs-private/node-private#246
- [43ae9c46c3] - src: drop localhost6 as allowed host for inspector (Matteo Collina) nodejs-private/node-private#244

Notable Changes
- crypto:
- add keyObject.export() 'jwk' format option (Filip Skokan) #37081
- deps:
- upgrade to libuv 1.41.0 (Colin Ihrig) #37360
- doc:
- add dmabupt to collaborators (Xu Meng) #37377
- refactor fs docs structure (James M Snell) #37170
- fs:
- add fsPromises.watch() (James M Snell) #37179
- use a default callback for fs.close() (James M Snell) #37174
- add AbortSignal support to watch (Benjamin Gruenbaum) #37190
- perf_hooks:
- introduce createHistogram (James M Snell) #37155
- stream:
- improve Readable.from error handling (Benjamin Gruenbaum) #37158
- timers:
- introduce setInterval async iterator (linkgoron) #37153
- tls:
- add ability to get cert/peer cert as X509Certificate object (James M Snell) #37070
Commits
- [d0f1ff53ff] - async_hooks: set unhandledRejection async context (Sajal Khandelwal) #37281
- [c160d88c9e] - buffer: add @@toStringTag to Blob (Colin Ihrig) #37336
- [8487184457] - child_process: fix bad abort signal leak (Nitzan Uziely) #37257
- [e28ea89b1a] - crypto: fix subtle.importKey JWK OKP public key import (Filip Skokan) #37255
- [55fd6b6611] - crypto: avoid infinite loops in prime generation (Tobias Nießen) #37212
- [9dac99a11a] - crypto: fix and simplify prime option validation (Tobias Nießen) #37164
- [3e2746ff63] - crypto: remove webcrypto "DSA" JWK Key Type operations (Filip Skokan) #37203
- [011910b424] - (SEMVER-MINOR) crypto: add keyObject.export() 'jwk' format option (Filip Skokan) #37081
- [c0eadef495] - deps: upgrade to libuv 1.41.0 (Colin Ihrig) #37360
- [50e81ba0b8] - deps: V8: cherry-pick 0c8b6e415c30 (Matin Zadehdolatabad) #37276
- [d1c1724c69] - deps: upgrade npm to 7.5.3 (Ruy Adorno) #37283
- [20c65b00c2] - deps: V8: backport dfcf1e86fac0 (Michaël Zasso) #37245
- [e63b380f76] - deps: upgrade npm to 7.5.2 (Ruy Adorno) #37191
- [d808db2732] - doc: add dmabupt to collaborators (Xu Meng) #37377
- [dd054ca37f] - doc: optimize HTML rendering (Antoine du Hamel) #37301
- [c188466a18] - doc: fix quotes in stream docs (Tobias Nießen) #37269
- [f5e4625468] - doc: fix backticks in crypto API docs (Tobias Nießen) #37269
- [e2a2bab44e] - doc: link PACKAGE_EXPORTS_RESOLVE to ESM section (Utku Gultopu) #37135
- [1e99175e01] - doc: alphabetize crypto.* methods (Rich Trott) #37353
- [392c86d38b] - doc: use sentence case in benchmark doc (Rich Trott) #37351
- [62b2648a96] - doc: apply sentence-consistently in C++ style guide (Rich Trott) #37350
- [189ce399da] - doc: apply sentence case to release doc headers (Rich Trott) #37349
- [610b29b8bd] - doc: fix performanceEntry.flags style format (Cheng Liu) #37274
- [85b1476f1d] - doc: fix typo in deprecations.md (marsonya) #37282
- [f253cb9303] - doc: fix typo in buffer.md (marsonya) #37268
- [804e7ae713] - doc: add version metadata for packages features (Antoine du Hamel) #37289
- [cdd2fe5651] - doc: fix typo in /api/dns.md (marsonya) #37312
- [7d8fd3f576] - doc: refactor fs docs structure (James M Snell) #37170
- [facf3a5c23] - doc: fix description of hasSubscribers (Tobias Nießen) #37324
- [3464c9f007] - doc: discourage error event (Benjamin Gruenbaum) #37264
- [85bed2ec26] - doc: fix misnamed SHASUMS256.txt name in README.md (marsonya) #37260
- [cd50e93307] - doc: warn about using strings as inputs in crypto (Tobias Nießen) #37248
- [5a4288ebb6] - doc: fix typo in crypto.md (marsonya) #37279
- [0e887caf32] - doc: fix typo in console.md (marsonya) #37279
- [47c4f1fc54] - doc: use sentence case in README headers (Rich Trott) #37251
- [7da1c9b219] - doc: use sentence case for headers in BUILDING.md (Rich Trott) #37250
- [ebf3597db1] - doc: rename N-API to Node-API (Gabriel Schulhof) #37259
- [760f126adb] - doc: mark Certificate methods as static, add missing KeyObject.from (Filip Skokan) #37198
- [aebe532967] - doc: consistent webcrypto node.keyObject format (Filip Skokan) #37200
- [596bfb36a0] - doc: mention CryptoKey in port.postMessage() (Filip Skokan) #37196
- [0702d60def] - doc: fix webcrypto HMAC generateKey example (Filip Skokan) #37197

Notable Changes
- [110063d694] - (SEMVER-MINOR) crypto: add generatePrime/checkPrime (James M Snell) #36997
- [53a0bdff47] - (SEMVER-MINOR) crypto: experimental (Ed/X)25519/(Ed/X)448 support (James M Snell) #36879
- [03460432af] - deps: upgrade npm to 7.5.0 (Ruy Adorno) #37117
- This update adds a new npm diff command.
- [2c7ad38c75] - (SEMVER-MINOR) dgram: support AbortSignal in createSocket (Nitzan Uziely) #37026
- [b7c3f99f7e] - doc: add Zijian Liu to collaborators (ZiJian Liu) #37075
- [02f1d2fda4] - esm: deprecate legacy main lookup for modules (Guy Bedford) #36918
- [75124298d5] - (SEMVER-MINOR) readline: add history event and option to set initial history (Mattias Runge-Broberg) #33662
- [4e757eab96] - (SEMVER-MINOR) readline: add support for the AbortController to the question method (Mattias Runge-Broberg) #33676
Commits
- [602aaf25af] - async_hooks: refactor to avoid unsafe array iteration (Antoine du Hamel) #37125
- [dcd34b0144] - benchmark: add benchmark for NODE_V8_COVERAGE (Benjamin Coe) #36972
- [ec22756ac9] - benchmark: make output RFC 4180 compliant (Tobias Nießen) #37038
- [96cec1e5f3] - benchmark: improve explanations in R script (Tobias Nießen) #36995
- [e4b88b521a] - buffer: avoid creating the backing store in the thread (James M Snell) #37052
- [7b78c6773d] - child_process: allow promisified exec to be cancel (Carlos Fuentes) #34249
- [c4193ba8ae] - crypto: fix encrypted private -> public import (Tobias Nießen) #37056
- [cb3b0ec4fc] - crypto: generateKeyPair('ec') should not support NODE-ED* and NODE-X* (Filip Skokan) #37063
- [110063d694] - (SEMVER-MINOR) crypto: add generatePrime/checkPrime (James M Snell) #36997
- [ab64d74791] - crypto: throw error on invalid object in diffieHellman() (ZiJian Liu) #37016
- [53a0bdff47] - (SEMVER-MINOR) crypto: experimental (Ed/X)25519/(Ed/X)448 support (James M Snell) #36879
- [4551d14b8e] - deps: upgrade npm to 7.5.1 (Ruy Adorno) #37177
- [9d6fd4586f] - deps: update openssl config (James M Snell) #37067
- [f74b376596] - Revert "deps: various quic patches from akamai/openssl" (James M Snell) #37067
- [6756130c4b] - Revert "deps: re-enable OPENSSL_NO_QUIC guards" (James M Snell) #37067
- [52ce1d5f1a] - Revert "deps: update patch and docs for openssl update" (James M Snell) #37067
- [03460432af] - deps: upgrade npm to 7.5.0 (Ruy Adorno) #37117
- [2c7ad38c75] - (SEMVER-MINOR) dgram: support AbortSignal in createSocket (Nitzan Uziely) #37026
- [47bfde00fd] - doc: fix color contrast on <kbd> elements (Antoine du Hamel) #37185
- [3c9077130d] - doc: fix list format in Developer's Certificate of Origin (Akash Negi) #37138
- [8cecce3ff4] - doc: fix markup and alphabetization in errors.md (Rich Trott) #37144
- [a7780815bf] - doc: clarify ERR_INVALID_REPL_INPUT usage (Rich Trott) #37143
- [e7126503e0] - doc: clarify repl exception conditions (Rich Trott) #37142
- [e55d3d0953] - doc: add example for test structure (Turner Jabbour) #35046
- [9b9a1801ba] - doc: remove TOC summary for pages with no TOC (Rich Trott) #37043
- [ae42658be9] - doc: add missing deprecation code (Colin Ihrig) #37147
- [b79b82de8e] - doc: update Buffer encoding option count (Dave Cardwell) #37102
- [ddee21b587] - doc: update BUILDING.md previous versions links (Richard Lau) #37082
- [1710016053] - doc: mention adding Fixes to collaborator onboarding PR (Joyee Cheung) #37097
- [b7c3f99f7e] - doc: add Zijian Liu to collaborators (ZiJian Liu) #37075
- [7ddfa81612] - doc: add tooltip for light/dark mode toggle (Rich Trott) #37044
- [c79688ffe3] - doc: improve AsyncLocalStorage introduction (Romuald Brillout) #36946
- [a7b6464097] - doc: EventTarget and Event are available to user code since v15.0.0 (ExE Boss) #37059
- [3722c15a75] - doc: add missing comma in tty (Matthew Mario Di Pasquale) #37039
- [2cfe7954fc] - doc: list Unsupported Directory Import resolve err (Guy Bedford) #37032
- [fef6ac77e5] - doc: add missing ARIA label for button (Rich Trott) #37031
- [634bedcd6f] - doc,test: fix prime generation descri

Notable changes
- buffer:
- introduce Blob (James M Snell) #36811
- add base64url encoding option (Filip Skokan) #36952
- doc:
- add @iansu to collaborators (Ian Sutherland) #36951
- add @RaisinTen to collaborators (Darshan Sen) #36998
- add @miladfarca to collaborators (Milad Fa) #36934
- fs:
- allow position parameter to be a BigInt in read and readSync (raisinten) #36190
- http:
- attach request as res.req (Ian Storm Taylor) #36505
- expose urlToHttpOptions utility (Yongsheng Zhang) #35960
Commits
- [775b34b822] - (SEMVER-MINOR) buffer: introduce Blob (James M Snell) #36811
- [832cd015d5] - (SEMVER-MINOR) buffer: add base64url encoding option (Filip Skokan) #36952
- [7ce7404f79] - build: fix compiling against openssl with no-psk (Caleb ツ Everett) #36881
- [b7d8e61ef1] - crypto: fix randomInt bias (Tobias Nießen) #36894
- [1149af6265] - (SEMVER-MINOR) crypto: add keyObject.asymmetricKeyDetails for asymmetric keys (Filip Skokan) #36188
- [0398167b35] - crypto: fix WebCrypto import of RSA-PSS keys (Tobias Nießen) #36877
- [e52e860172] - deps: upgrade npm to 7.4.3 (Ruy Adorno) #37018
- [ef3a5f6958] - deps: update ICU to 68.2 (Michaël Zasso) #36980
- [ca479b9e9d] - deps: V8: cherry-pick fe191e8d05cc (Benjamin Coe) #36956
- [6f773fbe84] - deps: upgrade npm to 7.4.2 (Ruy Adorno) #36953
- [4b952d8d3e] - doc: fix maintaining ICU guide (Michaël Zasso) #36980
- [a2559b9044] - doc: add @RaisinTen to collaborators (Darshan Sen) #36998
- [4d5273b156] - doc: fix typo in http.server.requestTimout docs (alexbs) #36987
- [93fc295b75] - doc: add performance notes for fs.readFile (James M Snell) #36880
- [7ea374b159] - doc: clarify maxSockets option of http.Agent (Pooja D P) #36941
- [f3637d5328] - doc: remove pull-requests.md preamble (Rich Trott) #36960
- [d2d9ad7477] - doc: fix module.isPreloading documentation (Antoine du Hamel) #36944
- [48b6781151] - doc: fix crypto.generateKeySync aes allowed length list (Filip Skokan) #36928
- [120db2c169] - doc: fix grammar and link to QUIC in changelog (Dan Dascalescu) #36959
- [af0f0a0f65] - doc: fix percentile range in perf_hooks.md (raisinten) #36938
- [8cf280d9ab] - doc: improve perf_hooks docs (Juan José Arboleda) #36909
- [3ea37c2d67] - doc: fix invalid HTML in doc template (Rich Trott) #36930
- [eaf378aa46] - doc: remove issue template duplication from contributing docs (Rich Trott) #36908
- [7a794417f3] - doc: remove resolving-a-bug-report from contributing docs (Rich Trott) #36905
- [707b97307d] - doc: use ESM syntax for WASI example (Antoine du Hamel) #36848
- [5a9a07e7cd] - doc: add iansu to collaborators (Ian Sutherland) #36951
- [aa3bc74cd6] - doc: fixup typo in metadata entry (James M Snell) #36947
- [22e29ccfa3] - doc: add alternative version links to the packages page (Filip Skokan) #36915
- [80c84a1136] - doc: add miladfarca to collaborators (Milad Fa) #36934
- [e73b1072f3] - doc: update tls test to use better terminology (Michael Dawson) #36851
- [5cbf638c06] - doc: remove unnecessary contributing.md section (Rich Trott) #36891
- [f99b38fedd] - doc: wrap TOC in a <details> tag (Mattia Pontonio) #36896
- [82eccddf1e] - doc: update fs.l/statSync API history for throwIfNoEntry (Andrew Casey) #36882
- [70cd43c32e] - doc: change "it's" to "its" where necessary (Tobias Nießen) #36913
- [02a8f52040] - doc: fix indentation on http2 doc entry (Rich Trott) #36869
- [dc596d0607] - events: remove error listener on signal abort (ZiJian Liu) #36969
- [c4cdf1d830] - (SEMVER-MINOR) fs: allow position parameter to be a BigInt in read and readSync (raisinten) #36190
- [70ee7dce62] - (SEMVER-MINOR) http: attach request as res.req (Ian Storm Taylor) #36505
- [f07e1c9d03] - http: abortIncoming only on socket close (Robert Nagy) #36821
- [aa7243e3d4] - http: refactor ClientRequest destroy (Robert Nagy) #36863
- [80051abfcb] - http: cleanup ClientRequest oncreate (Robert Nagy) #36862
- [f5b8e7b068] - http2: refactor to avoid unsafe array iteration (Antoine du Hamel) #36700
- [8aeba3cb92] - lib: refactor t

This is a security release.
Notable changes
Vulnerabilities fixed:
- CVE-2020-8265: use-after-free in TLSWrap (High)
- Affected Node.js versions are vulnerable to a use-after-free bug in
its TLS implementation. When writing to a TLS enabled socket,
nodeStreamBaseWrite calls nodeTLSWrapDoWrite with a freshly
allocated WriteWrap object as first argument. If the DoWrite method
does not return an error, this object is passed back to the caller as
part of a StreamWriteResult structure. This may be exploited to
corrupt memory leading to a Denial of Service or potentially other
exploits.
- CVE-2020-8287: HTTP Request Smuggling in nodejs (Low)
- Affected versions of Node.js allow two copies of a header field in
a http request. For example, two Transfer-Encoding header fields. In
this case Node.js identifies the first header field and ignores the
second. This can lead to HTTP Request Smuggling
(https://cwe.mitre.org/data/definitions/444.html).
Commits
- [c5dbe831b7] - http: add test for http transfer encoding smuggling (Matteo Collina) nodejs-private/node-private#228
- [e0c9a2285c] - http: unset F_CHUNKED on new Transfer-Encoding (Matteo Collina) nodejs-private/node-private#228
- [9834ef85a0] - src: retain pointers to WriteWrap/ShutdownWrap (James M Snell) nodejs-private/node-private#23

Notable Changes
- child_processes:
- add AbortSignal support (Benjamin Gruenbaum) #36308
- deps:
- update ICU to 68.1 (Michaël Zasso) #36187
- events:
- support signal in EventTarget (Benjamin Gruenbaum) #36258
- graduate Event, EventTarget, AbortController (James M Snell) #35949
- http:
- enable call chaining with setHeader() (pooja d.p) #35924
- module:
- add isPreloading indicator (James M Snell) #36263
- stream:
- support abort signal (Benjamin Gruenbaum) #36061
- add FileHandle support to Read/WriteStream (Momtchil Momtchev) #35922
- worker:
- add experimental BroadcastChannel (James M Snell) #36271
Commits
- [e79bdc313a] - assert: refactor to use more primordials (Antoine du Hamel) #36234
- [2344e3e360] - benchmark: changed fstat to fstatSync (Narasimha Prasanna HN) #36206
- [ca8db41151] - benchmark,child_process: remove failing benchmark parameter (Antoine du Hamel) #36295
- [9db9be774b] - buffer: refactor to use primordials instead of Array#reduce (Antoine du Hamel) #36392
- [8d8d2261a5] - buffer: refactor to use more primordials (Antoine du Hamel) #36166
- [74adc441c4] - build: fix typo in Makefile (raisinten) #36176
- [224a6471cc] - (SEMVER-MINOR) child_process: add AbortSignal support (Benjamin Gruenbaum) #36308
- [4ca1bd8806] - child_process: refactor to use more primordials (Zijian Liu) #36269
- [841e8f444e] - crypto: fix "Invalid JWK" error messages (Filip Skokan) #36200
- [278862aeb9] - deps: upgrade npm to 7.0.15 (Ruy Adorno) #36293
- [66bc2067ce] - deps: V8: cherry-pick 86991d0587a1 (Benjamin Coe) #36254
- [095cef2c11] - deps: update ICU to 68.1 (Michaël Zasso) #36187
- [8d69d8387e] - dgram: refactor to use more primordials (Antoine du Hamel) #36286
- [bef550a50c] - doc: add Powershell oneliner to get Windows version (Michael Bashurov) #30289
- [2649c384c6] - doc: add version metadata to timers/promises (Colin Ihrig) #36378
- [0401ffbfb6] - doc: add process for handling premature disclosure (Michael Dawson) #36155
- [3e5fcda13e] - doc: add table header in intl.md (Rich Trott) #36261
- [65d89fdd69] - doc: adding example to Buffer.isBuffer method (naortedgi) #36233
- [03cf8dbc0e] - doc: fix typo in events.md (Luigi Pinca) #36231
- [b176d61e8c] - doc: fix --experimental-wasm-modules text location (Colin Ihrig) #36220
- [44c4aaddad] - doc: stabilize subpath patterns (Guy Bedford) #36177
- [fdf5d851d0] - doc: add missing version to update cmd (Ruy Adorno) #36204
- [186ad24fdf] - doc: cleanup events.md structure (James M Snell) #36100
- [c14512b9a5] - errors: display original symbol name (Benjamin Coe) #36042
- [855a85c124] - (SEMVER-MINOR) events: support signal in EventTarget (Benjamin Gruenbaum) #36258
- [dc1930923b] - (SEMVER-MINOR) events: graduate Event, EventTarget, AbortController (James M Snell) #35949
- [537e5cbf51] - fs: move method definition from header (Yash Ladha) #36256
- [744b8aa807] - fs: pass ERR_DIR_CLOSED asynchronously to dir.close (Zijian Liu) #36243
- [c04a2df185] - fs: refactor to use more primordials (Antoine du Hamel) #36196
- [58abdcaceb] - (SEMVER-MINOR) http: enable call chaining with setHeader() (pooja d.p) #35924
- [cedf51f3ce] - http2: refactor to use more primordials (Antoine du Hamel) #36357
- [5f41f1b19e] - http2: check write not scheduled in scope destructor (David Halls) #36241
- [4127eb2405] - https: add abortcontroller test (Benjamin Gruenbaum) #36307
- [c2938bde6c] - lib: add uncurried accessor properties to primordials (ExE Boss) #36329
- [f73a0a8069] - lib: fix typo in internal/errors.js (raisinten) #36426
- [617cb58cc8] - lib: refactor primordials.uncurryThis (Antoine du Hamel) #36221
- [cc18907ec4] - module: refactor to use more primordials (Antoine du Hamel) #36348
- [d4de7c7eb9] - (SEMVER-MINOR) module: add isPreloading indicator (James M Snell) #36263
- [8611b8f98a] - net: refactor to use more primordials (Antoine du Hamel) #36303
- [2a24096720] - os: refactor to use more primordials (Antoine du Hamel) #36284
- [0e7f0c6d27] - path: refactor to use more primordials (Ant

Notable Changes
- [6349b1d673] - (SEMVER-MINOR) dns: add a cancel() method to the promise Resolver (Szymon Marczak) #33099
- [9ce9b016e6] - (SEMVER-MINOR) events: add max listener warning for EventTarget (James M Snell) #36001
- [8390f8a86b] - (SEMVER-MINOR) http: add support for abortsignal to http.request (Benjamin Gruenbaum) #36048
- [9c6be3cc90] - (SEMVER-MINOR) http2: allow setting the local window size of a session (Yongsheng Zhang) #35978
- [15ff155c12] - (SEMVER-MINOR) lib: add throws option to fs.f/l/statSync (Andrew Casey) #33716
- [85c85d368a] - (SEMVER-MINOR) path: add path/posix and path/win32 alias modules (ExE Boss) #34962
- [d1baae3640] - (SEMVER-MINOR) readline: add getPrompt to get the current prompt (Mattias Runge-Broberg) #33675
- [5729478509] - (SEMVER-MINOR) src: add loop idle time in diagnostic report (Gireesh Punathil) #35940
- [baa87c1a7d] - (SEMVER-MINOR) util: add util/types alias module (ExE Boss) #34055
Commits
- [34aa0c868e] - assert: refactor to use more primordials (Antoine du Hamel) #35998
- [28d710164a] - async_hooks: refactor to use more primordials (Antoine du Hamel) #36168
- [1924255fdb] - async_hooks: fix leak in AsyncLocalStorage exit (Stephen Belanger) #35779
- [3ee556a867] - benchmark: fix build warnings (Gabriel Schulhof) #36157
- [fcc38a1312] - build: replace which with command -v (raisinten) #36118
- [60874ba941] - build: try “python3” as a last resort for 3.x (Ole André Vadla Ravnås) #35983
- [fbe210b2a1] - build: conditionally clear vcinstalldir (Brian Ingenito) #36009
- [56f83e6876] - build: refactor configure.py to use argparse (raisinten) #35755
- [0b70822461] - child_process: refactor to use more primordials (Antoine du Hamel) #36003
- [e54108f2e4] - cluster: refactor to use more primordials (Antoine du Hamel) #36011
- [272fc794b2] - crypto: fix format warning in AdditionalConfig (raisinten) #36060
- [63a138e02f] - crypto: fix passing TypedArray to webcrypto AES methods (Antoine du Hamel) #36087
- [4a88c73fa5] - deps: upgrade npm to 7.0.14 (nlf) #36238
- [d16e8622a7] - deps: upgrade npm to 7.0.13 (Ruy Adorno) #36202
- [c23ee3744f] - deps: upgrade npm to 7.0.12 (Ruy Adorno) #36153
- [0fcbb1c0d5] - deps: V8: cherry-pick 3176bfd447a9 (Anna Henningsen) #35612
- [27f1bc05fd] - deps: upgrade npm to 7.0.11 (Darcy Clarke) #36112
- [8ae3ffe2be] - deps: V8: cherry-pick 1d0f426311d4 (Ole André Vadla Ravnås) #35986
- [4b7ba11d67] - deps: V8: cherry-pick 4e077ff0444a (Ole André Vadla Ravnås) #35986
- [098a5b1298] - deps: V8: cherry-pick 086eecbd96b6 (Ole André Vadla Ravnås) #35986
- [d2c757ab19] - deps: V8: cherry-pick 27e1ac1a79ff (Ole André Vadla Ravnås) #35986
- [6349b1d673] - (SEMVER-MINOR) dns: add a cancel() method to the promise Resolver (Szymon Marczak) #33099
- [0fbade38ef] - doc: add arm64 macOS as experimental (Richard Lau) #36189
- [42dfda8f78] - doc: remove stray comma in url.md (Rich Trott) #36175
- [8bbdbccbb6] - doc: revise agent.destroy() text (Rich Trott) #36163
- [545ac1fec5] - doc: fix punctuation in v8.md (Rich Trott) #36192
- [a6a90af8c0] - doc: add compatibility/interop technical value (Geoffrey Booth) #35323
- [4ab4a99900] - doc: de-emphasize wrapping in napi_define_class (Gabriel Schulhof) #36159
- [bb29508e8f] - doc: add link for v8.takeCoverage() (Rich Trott) #36135
- [24065b92f1] - doc: mark modules implementation as stable (Guy Bedford) #35781
- [142cacdc63] - doc: clarify text about process not responding (Rich Trott) #36117
- [0ff384b0be] - doc: esm docs consolidation and reordering (Guy Bedford) #36046
- [b17a83a00d] - doc: claim ABI version for Electron v13 (Shelley Vohr) #36101
- [e8a8513b2c] - doc: fix invalid link in worker_threads.md (Rich Trott) #36109
- [cd33594a0d] - doc: move shigeki to emeritus (Rich Trott) #36093
- [eefc6aa6c9] - doc: document the error when cwd not exists in child_process.spawn (FeelyChau) #34505
- [841a2812d0] - doc: fix typo in debugger.md (Rich Trott) #36066
- [500e709439] - doc: update list styles for remark-parse@9 rendering 

Notable changes
This is a security release.
Vulnerabilities fixed:
- CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of service by getting the application to resolve a DNS record with a larger number of responses.
Commits
- [2a44836eeb] - deps: cherry-pick 0d252eb from upstream c-ares (Michael Dawson) nodejs-private/node-private#231
- [b1f5518a0a] - doc: fix events.getEventListeners example (Dmitry Semigradsky) #36085
- [b477447a55] - doc: fix added: info for stream.\_construct() (Luigi Pinca) #36067
- [df211208c0] - test: add missing test coverage for setLocalAddress() (Rich Trott) #36039
- [f5191f5bd2] - test: remove flaky designation for fixed test (Rich Trott) #35961
- [a2f652f7c5] - test: move test-worker-eventlooputil to sequential (Rich Trott) #35996
- [b0b43b27d6] - test: fix unreliable test-fs-write-file.js (Rich Trott) #36102

Notable changes
- events:
- getEventListeners static (Benjamin Gruenbaum) #35991
- fs:
- support abortsignal in writeFile (Benjamin Gruenbaum) #35993
- add support for AbortSignal in readFile (Benjamin Gruenbaum) #35911
- stream:
- fix thrown object reference (Gil Pedersen) #36065
Commits
- [9d9a044c1b] - benchmark: ignore build artifacts for napi addons (Richard Lau) #35970
- [4c6de854be] - benchmark: remove modules that require intl (Richard Lau) #35968
- [292915a6a8] - bootstrap: refactor to use more primordials (Antoine du Hamel) #35999
- [10c9ea771d] - build: fix zlib inlining for IA-32 (raisinten) #35679
- [6ac9c8f31b] - build, tools: look for local installation of NASM (Richard Lau) #36014
- [9757b47c44] - console: use more primordials (Antoine du Hamel) #35734
- [0d7422651b] - crypto: refactor to use more primordials (Antoine du Hamel) #36012
- [dc4936ba50] - crypto: fix comment in ByteSource (Tobias Nießen) #35972
- [7cb5c0911e] - deps: cherry-pick 9a49b22 from V8 upstream (Daniel Bevenius) #35939
- [4b03670877] - dns: fix trace_events name for resolveCaa() (Rich Trott) #35979
- [dcb27600da] - doc: escape asterisk in cctest gtest-filter (raisinten) #36034
- [923276ca53] - doc: move v8.getHeapCodeStatistics() (Rich Trott) #36027
- [71fa9c6b24] - doc: add note regarding file structure in src/README.md (Denys Otrishko) #35000
- [99cb36238d] - doc: advise users to import the full set of trusted release keys (Reşat SABIQ) #32655
- [06cc400160] - doc: fix crypto doc linter errors (Antoine du Hamel) #36035
- [01129a7b39] - doc: revise v8.getHeapSnapshot() (Rich Trott) #35849
- [77d33c9b2f] - doc: update core-validate-commit link in guide (Daijiro Wachi) #35938
- [6d56ba03e2] - doc: update benchmark CI test indicator in README (Rich Trott) #35945
- [8bd364a9b3] - doc: add new wordings to the API description (Pooja D.P) #35588
- [acd3617e1a] - doc: option --prof documentation help added (krank2me) #34991
- [6968b0fd49] - doc: fix release-schedule link in backport guide (Daijiro Wachi) #35920
- [efbfeff62b] - doc: fix incorrect heading level (Bryan Field) #35965
- [9c4b360d08] - doc,crypto: added sign/verify method changes about dsaEncoding (Filip Skokan) #35480
- [85cf30541d] - doc,fs: document value of stats.isDirectory on symbolic links (coderaiser) #27413
- [d6bd78ff82] - doc,net: document socket.timeout (Brandon Kobel) #34543
- [36c20d939a] - doc,stream: write(chunk, encoding, cb) encoding can be null (dev-script) #35372
- [9d26c4d496] - domain: refactor to use more primordials (Antoine du Hamel) #35885
- [d83e253065] - errors: refactor to use more primordials (Antoine du Hamel) #35944
- [567f8d8caf] - (SEMVER-MINOR) events: getEventListeners static (Benjamin Gruenbaum) #35991
- [9e673723e3] - events: fire handlers in correct oder (Benjamin Gruenbaum) #35931
- [ff59fcdf7b] - events: define abort on prototype (Benjamin Gruenbaum) #35931
- [ab0eb4f2c9] - events: support event handlers on prototypes (Benjamin Gruenbaum) #35931
- [33e2ee58a7] - events: define event handler as enumerable (Benjamin Gruenbaum) #35931
- [a7d0c76f86] - events: support emit on nodeeventtarget (Benjamin Gruenbaum) #35851
- [76332a0439] - events: port some wpt tests (Benjamin Gruenbaum) #33621
- [ccf9f0e62e] - (SEMVER-MINOR) fs: support abortsignal in writeFile (Benjamin Gruenbaum) #35993
- [7ef9c707e9] - fs: replace finally with PromisePrototypeFinally (Baruch Odem (Rothkoff)) #35995
- [ccbe267515] - fs: remove unnecessary Function#bind() in fs/promises (Ben Noordhuis) #35208
- [6011bfdec5] - fs: remove unused assignment (Rich Trott) #35882
- [92bdfd141b] - (SEMVER-MINOR) fs: add support for AbortSignal in readFile (Benjamin Gruenbaum) #35911
- [11f592450b] - http2: add has method to proxySocketHandler (masx200) #35197
- [28ed7d062e] - http2: centralise socket event binding in Http2Session (Momtchil Momtchev) #35772
- [429113ebfb] - http2: move events to the JSStreamSocket (Momtchil Momtchev) #35772
- [1dd744a420] - http2: fix error stream write foll

Notable changes
- crypto: fix regression on randomFillSync (James M Snell) #35723
- This fixes issue https://github.com/nodejs/node/issues/35722.
- deps: upgrade npm to 7.0.3 (Ruy Adorno) #35724
- doc: add release key for Danielle Adams (Danielle Adams) #35545
Commits
- [c509485c19] - build: use make functions instead of echo (Antoine du Hamel) #35707
- [f5acc2d030] - crypto: fix regression on randomFillSync (James M Snell) #35723
- [595c8df48d] - deps: upgrade npm to 7.0.3 (Ruy Adorno) #35724
- [69e7f20f2d] - deps: V8: set correct V8 version patch number (Michaël Zasso) #35732
- [b78294dc00] - doc: use kbd element in readline doc (Rich Trott) #35698
- [1efa87082b] - doc: add release key for Danielle Adams (Danielle Adams) #35545
- [6e91d644e3] - doc: use kbd element in os doc (Rich Trott) #35656
- [5a48a7b6f8] - doc: add a statement in the documentation. (Pooja D.P) #35585
- [6a7a61be7c] - src: mark/pop OpenSSL errors in NewRootCertStore (Daniel Bevenius) #35514
- [d54edece99] - test: refactor test-crypto-pbkdf2 (Tobias Nießen) #35693