./lang/nodejs, V8 JavaScript for clients and servers

[ Image CVSweb ] [ Image Homepage ] [ Image RSS ] [ Image Required by ]


Branch: CURRENT, Version: 26.8.1, Package name: nodejs-26.8.1, Maintainer: pkgsrc-users

Node.js is an evented I/O framework for the V8 JavaScript engine. It is
intended for writing scalable network programs such as web servers.

This package holds the latest release.


Required to run:
[textproc/icu] [net/libcares] [security/openssl] [devel/libuv] [lang/gcc49-libs] [www/nghttp2]

Required to build:
[lang/python27] [sysutils/lockf] [lang/gcc49] [pkgtools/cwrappers]

Package options: openssl

Master sites:

Filesize: 59857.016 KB

Version history: (Expand)


CVS history: (Expand)


   2026-08-27 09:26:37 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
nodejs: updated to 26.8.1

26.8.1 (Current)

Notable Changes

Out-of-band release to fix node --version which was reporting an alpha version.

26.8.0 (Current)

Notable Changes

- (SEMVER-MINOR) benchmark: add --analyze mode to compare.js (James M Snell)
- crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot)
- (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs \ 
(Filip Skokan)
- diagnostics_channel: mark TracingChannel as stable (Abdelrahman Awad)
- (SEMVER-MINOR) lib,src: improve histogram implementation (James M Snell)
- (SEMVER-MINOR) net: improve performance of net.BlockList (James M Snell)
- (SEMVER-MINOR) perf_hooks: add statistical hypothesis testing to histogram \ 
(James M Snell)
- repl: add basic syntax highlighting (Aviv Keller)
- (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo)
- (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() \ 
(Guilherme Araújo)
- (SEMVER-MINOR) util: add non-throwing MIMEType.parse (James M Snell)
- (SEMVER-MINOR) zlib: add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel)
   2026-08-21 15:21:02 by Pierre Pronchery | Files touched by this commit (2)
Log message:
lang/nodejs: revert fix

After a discussion with wiz@ and some extended testing, it turns out
that the build fix for {macOS,NetBSD}/amd64 related to c-ares appears to
no longer be necessary. The pull-up request #7242 issued for lang/nodejs
version 26.3.1 (as per pkgsrc-2026Q2) remains relevant and correct
though, per my analysis of the issue.

Tested on NetBSD/amd64 (11.0_RC6)
   2026-08-21 11:37:13 by Pierre Pronchery | Files touched by this commit (2)
Log message:
lang/nodejs: import a partial fix for the build

Tested on NetBSD/amd64 (11.0_RC6), macOS/amd64 (26.5.2).
   2026-08-16 13:56:46 by Ryo ONODERA | Files touched by this commit (2)
Log message:
lang/nodejs: Fix build under NetBSD/i386 11 at least

* Disable HDR_HAS_AVX2_DISPATCH not to use _mm_extract_epi64 C intrinsic
  that is not available for IA32.
   2026-08-06 15:28:13 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
nodejs: updated to 26.7.0

26.7.0 (Current)

Notable Changes

- (SEMVER-MINOR) crypto: support loading private keys through STORE loaders \ 
(Filip Skokan)
- crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot)
- (SEMVER-MINOR) lib: add perfetto support (Chengzhong Wu)
- (SEMVER-MINOR) module: implement Symbol.dispose in ModuleHooks (Remco Haszing)
- (SEMVER-MINOR) test_runner: add support for --test-coverage-include-all \ 
(avivkeller)
   2026-08-01 19:28:22 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
nodejs: updated to 26.5.1

26.5.1 (Current)

Notable Changes

(CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
(CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
(CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – \ 
Medium
(CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) \ 
– Medium
(CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset \ 
(Matteo Collina) – Medium
(CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
(CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
(CVE-2026-56847) permission: enforce fs write permission for trace events \ 
(RafaelGSS) – Low
(CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
(CVE-2026-58044) http: reject requests exceeding max header count (Matteo \ 
Collina) – Low
deps: update llhttp to 9.4.3 (Paolo Insogna)
deps: update undici to 8.9.0 (Node.js GitHub Bot)
   2026-07-08 19:38:00 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
nodejs: updated to 26.5.0

26.5.0

Notable changes

- (SEMVER-MINOR) buffer: implement blob.textStream() (Matthew Aitken)
- (SEMVER-MINOR) esm: add --experimental-import-text flag (Efe)
- (SEMVER-MINOR) perf_hooks: sample delay per event loop iteration (Pablo Erhard)
- (SEMVER-MINOR) stream: expose ReadableStreamTee (Matteo Collina)
- (SEMVER-MINOR) tls: report negotiated TLS groups (Filip Skokan)
   2026-07-03 16:11:58 by Thomas Klausner | Files touched by this commit (3) | Package updated
Log message:
nodejs: update for nodejs 26 (current version)