2026-05-13, Version 22.22.3 'Jod' (LTS), @marco-ippolito

Commits

• [4f780905c5] - crypto: fix potential null pointer dereference when BIO_meth_new() fails (Nora Dossche) #61788
• [4a09efb947] - crypto: update root certificates to NSS 3.121 (Node.js GitHub Bot) #62485
• [e4c0d99839] - deps: update timezone to 2026a (Node.js GitHub Bot) #62164
• [0226c8dd7a] - deps: update simdjson to 4.5.0 (Node.js GitHub Bot) #62382
• [e742ab748c] - deps: update sqlite to 3.51.3 (Node.js GitHub Bot) #62256
• [73cac0571a] - deps: update amaro to 1.1.8 (Node.js GitHub Bot) #62151
• [ae5c162b93] - deps: update amaro to 1.1.7 (Node.js GitHub Bot) #61730
• [b819cb9977] - deps: update amaro to 1.1.6 (Node.js GitHub Bot) #61603
• [bbcce09dc7] - deps: update sqlite to 3.52.0 (Node.js GitHub Bot) #62150
• [22ff2d81ce] - deps: update simdjson to 4.3.1 (Node.js GitHub Bot) #61930
• [f49b51d75c] - deps: update acorn-walk to 8.3.5 (Node.js GitHub Bot) #61928
• [1a5cec0d49] - deps: update acorn to 8.16.0 (Node.js GitHub Bot) #61925
• [d339497688] - deps: update nbytes to 0.1.3 (Node.js GitHub Bot) #61879
• [3ff8ffd459] - deps: remove stale OpenSSL arch configs (René) #61834
• [b8ddbc1e9a] - deps: update llhttp to 9.3.1 (Node.js GitHub Bot) #61827
• [ffda97afd4] - deps: update googletest to 2461743991f9aa53e9a3625eafcbacd81a3c74cd (Node.js GitHub Bot) #62484
• [79aa32cf4f] - deps: update googletest to 73a63ea05dc8ca29ec1d2c1d66481dd0de1950f1 (Node.js GitHub Bot) #61927
• [b6957e13b6] - deps: update archs files for openssl-3.5.6 (Node.js GitHub Bot) #62629
• [3a27669063] - deps: upgrade openssl sources to openssl-3.5.6 (Node.js GitHub Bot) #62629
• [d568a1bb53] - deps: upgrade npm to 10.9.8 (npm team) #62463
• [ec11f3c1d5] - deps: V8: backport 85b390089e51 (Thibaud Michaud) #62783
• [08609712ed] - deps: V8: backport 1b27e4674f11 (Thibaud Michaud) #62783
• [dcc60d5ab2] - deps: V8: backport 9997fc013952 (Thibaud Michaud) #62783
• [1d1f4451fb] - deps: V8: cherry-pick b96e40d5ac85 (Clemens Backes) #62783
• [2268567237] - deps: V8: cherry-pick 7cb6188cf913 (Thibaud Michaud) #62783
• [92804cdbea] - deps: V8: cherry-pick e7ccf0af1bdd (Thibaud Michaud) #62783
• [eae2c27a40] - deps: V8: cherry-pick 8e214ec3ec8c (Thibaud Michaud) #62783
• [a1799a49bb] - deps: V8: backport 63b8849d73ae (Thibaud Michaud) #62783
• [a2df2d8731] - deps: V8: backport 323942700cfe (Thibaud Michaud) #62783
• [e3d65c7dca] - deps: V8: backport 89dc6eab605c (Thibaud Michaud) #62783
• [5e7db133de] - deps: V8: backport 910cb91733dc (Jakob Kummerow) #62783
• [d0c24a28af] - deps: V8: cherry-pick b8f91e510e0f (Thibaud Michaud) #62783
• [d358687824] - deps: V8: cherry-pick cf03d55db2a0 (Thibaud Michaud) #62783
• [67c8b2c349] - deps: V8: cherry-pick 692f3d526a38 (Sébastien Doeraene) #62783
• [71e5a59ffd] - deps: V8: cherry-pick c734674e03f9 (Manos Koukoutos) #62783
• [f0dbe81c7b] - deps: V8: cherry-pick b2f3aea23a01 (Thibaud Michaud) #62783
• [d333f480c3] - deps: V8: cherry-pick 5f1342c20b59 (Matthias Liedtke) #62783
• [db722725bb] - deps: use npm undici@six tag in update-undici.sh (Matteo Collina) #63012
• [9b57979d9c] - doc: add Rafael to last security release steward (Rafael Gonzaga) #62423
• [d8075585bf] - doc: add path to vulnerabilities.json mention (Rafael Gonzaga) #62355
• [6ec9a70204] - doc: clarify fs.ReadStream and fs.WriteStream are not constructable (Kit Dallege) #62208
• [1fc86fcb6e] - doc: add note (and caveat) for mock.module about customization hooks (Jacob Smith) #62075
• [491be80bd9] - doc: add efekrskl as triager (Efe) #61876
• [18558293a3] - doc: fix module.stripTypeScriptTypes indentation (René) #61992
• [8e20976522] - doc: explicitly mention Slack handle (Rafael Gonzaga) #61986
• [70b8e6b4fb] - doc: rename invalid function parameter (René) #61942
• [4045c76f6c] - doc: clarify status of feature request issues (Antoine du Hamel) #61505
• [c54652f2aa] - doc: remove incorrect mention of module in typescript.md (Rob Palmer) #61839
• [9fad6cedf5] - doc: clarify async caveats for events.once() (René) #61572
• [2f1e5733fe] - doc: update Juan's security steward info (Juan José) #61754
• [a64bdb5068] - doc: fix overstated Date header requirement in response.sendDate (Kit Dallege) #62206
• [02797de923] - doc: fix small environment_variables typo (chris) #62279
• [f22ebdc809] - doc: fix small logic error in DETECT_MODULE_SYNTAX (René) #62025
• [9f4508062a] - doc: fix methods being documented as properties in process.md (Antoine du Hamel) #61765
• [3ea39ff135] - doc: fix dropdown menu being obscured at <600px due to stacking context (Jeff) #61735
• [c22445079b] - doc: fix spacing in process message event (Aviv Keller) #61756
• [32831b5223] - doc: fix broken links of net.md (YuSheng Chen) #61673
• [005508d509] - doc: remove obsolete Boxstarter automated install (Mike McCready) #61785
• [45b3506eb8] - doc,src,test: fix dead inspector help URL (semimikoh) #62745
• [37c2fd6f7d] - esm: fix path normalization in finalizeResolution (Antoine du Hamel) #62080
• [1769d74613] - esm: populate separate cache for require(esm) in imported CJS (Joyee Cheung) #59679
• [ee02966ffc] - http: fix keep-alive socket reuse race in requestOnFinish (Martin Slota) #61710
• [2fdb5ce6cc] - http2: fix FileHandle leak in respondWithFile (sangwook) #61707
• [aa2c1eca04] - lib: fix source map url parse in dynamic imports (Chengzhong Wu) #61990
• [785b00cbeb] - meta: pass release version to release worker (flakey5) #62777
• [447fb9a0b5] - meta: persist sccache daemon until end of build workflows (René) #61639
• [5065a0acb3] - module: do not invoke resolve hooks twice for imported cjs (Joyee Cheung) #61529
• [9a2e21305d] - module: do not wrap module._load when tracing is not enabled (Joyee Cheung) #61479
• [b9240bc063] - module: fix sync resolve hooks for require with node: prefixes (Joyee Cheung) #61088
• [2e91b28aaf] - module: handle null source from async loader hooks in sync hooks (Joyee Cheung) #59929
• [39147c154e] - module: use sync cjs when importing cts (Marco Ippolito) #60072
• [12a2462b2c] - module: only put directly require-d ESM into require.cache (Joyee Cheung) #59874
• [cf39566277] - src: fix flags argument offset in JSUdpWrap (Weixie Cui) #61948
• [578a9a9230] - src: clamp WriteUtf8 capacity to INT_MAX in EncodeInto (semimikoh) #62621
• [57c3035fec] - stream: fix decoded fromList chunk boundary check (Thomas Watson) #61884
• [57fb008bb8] - test: update tls junk data error expectations (Filip Skokan) #62629
• [363f9a9d18] - test: skip test-url on --shared-ada builds (Antoine du Hamel) #62019
• [daaead342b] - test: simplify encodeInto large buffer regression test (semimikoh) #62621
• [ecfa766b41] - tools: fix auto-start-ci (Antoine du Hamel) #61900
• [17c0a610af] - tools: fix parsing of commit trailers in lint-release-proposal GHA (Antoine du Hamel) #62077
• [89ad7dc63b] - tools: enforce removal of lts-watch-* labels on release proposals (Antoine du Hamel) #61672
• [5f9bb8ef0c] - tools: revert tools GHA workflow to ubuntu-latest (Richard Lau) #62024
• [977ef80ac1] - url: process crash via malformed UNC hostname in pathToFileURL() (Nicola Del Gobbo) #62574
• [ad8f518a81] - zlib: fix use-after-free when reset() is called during write (Matteo Collina) #62325

Windows 32-bit Installer: https://nodejs.org/dist/v22.22.3/node-v22.22.3-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v22.22.3/node-v22.22.3-x64.msi
Windows ARM 64-bit Installer: https://nodejs.org/dist/v22.22.3/node-v22.22.3-arm64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v22.22.3/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v22.22.3/win-x64/node.exe
Windows ARM 64-bit Binary: https://nodejs.org/dist/v22.22.3/win-arm64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v22.22.3/node-v22.22.3.pkg
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v22.22.3/node-v22.22.3-darwin-arm64.tar.gz
macOS Intel 64-bit Binary: https://nodejs.org/dist/v22.22.3/node-v22.22.3-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v22.22.3/node-v22.22.3-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v22.22.3/node-v22.22.3.tar.gz
Other release files: https://nodejs.org/dist/v22.22.3/
Documentation: https://nodejs.org/docs/v22.22.3/api/

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

40026acf78a808e43d222a0b0e0e711b95ff27934696b7925b53298bc7c8c60a  node-v22.22.3-aix-ppc64.tar.gz
fcc834b0954d47fe1a8f4fcbb9157037b7fc6fe8071c5dab2690f0d6bbf39fdf  node-v22.22.3-arm64.msi
0da7ff74ef8611328c8212f17943368713a2ad953fb7d89a8c8a0eae87c23207  node-v22.22.3-darwin-arm64.tar.gz
753c1629e168cc788ccc46ab61e0b35549fce08c07f82fcd3bb0d41f7fb01e7b  node-v22.22.3-darwin-arm64.tar.xz
45830ba752fa0d892c6dcd640946669801293cac820a33591ded40ac075198ec  node-v22.22.3-darwin-x64.tar.gz
939beff36e3adf3f93c5a9078d559e53245b488d5d47c5faf9fa0f1d21ede54d  node-v22.22.3-darwin-x64.tar.xz
723b896d68a288e9877ea929538494afe8b5808f6fedc3358d2ad77307d1b393  node-v22.22.3-headers.tar.gz
59606231c025ace448404fcd66cf842ada73dd334319e5cae028d5d4ed293430  node-v22.22.3-headers.tar.xz
cc8bc82b2dd0b595c3b95a4c3c9c8c350907cff011afbdee3d1379e812e1e3e3  node-v22.22.3-linux-arm64.tar.gz
1c4a9933a5e45bc88f54f70b5f91232c127ec49f1a5989d23fb85824c7adf9b7  node-v22.22.3-linux-arm64.tar.xz
18fbe1bfdd42045af15f02256ae3e59490d1b9ff93dfc27a223acc2c92740250  node-v22.22.3-linux-armv7l.tar.gz
556e3a339c960d1e3cef3d7244ffaf88e1fa0df757f6fd545c59587603fdd8f1  node-v22.22.3-linux-armv7l.tar.xz
a90f523cf164e1c761bf4c59b5c6aa0d9d552892701ab69499e683ee1fc06bbc  node-v22.22.3-linux-ppc64le.tar.gz
edb5478071bd1375e80195ca52f72823998bb5141b1a09e68bc54b3e2eb67754  node-v22.22.3-linux-ppc64le.tar.xz
4b84e43c29d90e4f901815c399106a49af4ee730d12933af82c82d4dc450308c  node-v22.22.3-linux-s390x.tar.gz
ce398c057830d57a24c458177279a17bc51742d5c22dd4cbe97b10dbd43f2617  node-v22.22.3-linux-s390x.tar.xz
c7a10d6816da8eaaa7534dd73c71c6e2b2c391dbbf845e364902d156615dd1b8  node-v22.22.3-linux-x64.tar.gz
2e5d13569282d016861fae7c8f935e741693c269101a5bebcf761a5376d1f99f  node-v22.22.3-linux-x64.tar.xz
17b494e467956af08d23c092ba10534c2991306360a97d37eac0a66ce4e7981c  node-v22.22.3.pkg
3c354fe130e6a8b71701784f48f010ce9a0af40d9f20292c7a8fb8efed1e694c  node-v22.22.3.tar.gz
f3e6a578db1ab335a4a72785c1e87ad18a2cf6d2fc25747a1d741fb34af0bd0f  node-v22.22.3.tar.xz
09fac9d9531fa3030e3c782b3588165cb9f70559bd576f91ea3472774efb9bbf  node-v22.22.3-win-arm64.7z
00be129a09e8872cd52d3bb8bba12412c5733d2224123a482a2dca4a6fbf2586  node-v22.22.3-win-arm64.zip
42d1ecf662fe82005bbcef990959f07d8dee56e3f6c5e5ddf811ef772073daec  node-v22.22.3-win-x64.7z
6c8d54f635feff4df76c2ca80f45332eb2ff57d25226edce36592e51a177ee33  node-v22.22.3-win-x64.zip
1b9c5d28dbe236f158ce4be3a3963ba32b5b4b5fe328d4145dc77991dd08ac60  node-v22.22.3-win-x86.7z
7ba4260f69e16ba9626d077cb1124f3fb01f60421af2a6c7396aeb4e2d0d8dae  node-v22.22.3-win-x86.zip
f453126a7d40a3e0b5ce3e53cba86a441eaf76b3345563c2b707955c4f1818e1  node-v22.22.3-x64.msi
1917d1dda99daf6127fe89a131206e8fcc31aa7b2f2a6a25249c86a7c5348283  node-v22.22.3-x86.msi
65044d409333b941086486545992141d1145198d7f0e0fc0c3bf62080fd8ee51  win-arm64/node.exe
9b75bbc3be72c84f1d41cd6abb6e5ecc333836015e40a6267ce755554874a13a  win-arm64/node.lib
c08c179a184f6606d1fdf2b92b0f90c2c20ff14a8465bef2e25664676f813f8f  win-arm64/node_pdb.7z
0f926fc7865cf90053055c3fa87753586447ff167bb7e7d0e9c521e578932d97  win-arm64/node_pdb.zip
780f44f2c53c108bae261ada21a525b4bfe733c020ac85e41bfe94479090ac9b  win-x64/node.exe
0d8d8bcc11daea60f5dd4da414e72ccb785718345ec8fbec52cfc7d1a2326293  win-x64/node.lib
77fac850aa97333e8d779830762a03731926eaea8315a18fc1dc8719a8fd0790  win-x64/node_pdb.7z
e6489fe61083682b10319c8e01ecbdd5e3c6ad7b3f05767513a7b37334d6e787  win-x64/node_pdb.zip
2bdf1db06048fa8040dff1518d7693da4cb3d178a236467971d5b77d58e76c26  win-x86/node.exe
a07e94777fb491c1a59103b6987417df35a1dd0a9682220bba43d3c602b8b414  win-x86/node.lib
e2f25e2c0b76c3dc788cd4048edd6d19821c387a8fe8f5c067964ad68702ddda  win-x86/node_pdb.7z
cf8218a77548abb14749f584a12aab6aa9c4badec5f1a69691e659fc186e1a6f  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEzGj1oxBv9EgyLkjtJ/XjjVsKIV8FAmoExfsACgkQJ/XjjVsK
IV+ppw//V46pliQ8laVN7kpc/jtRu+wWvIi06BZrwmARegnyLOZXLRJP+wV4ItkW
gMH+YbpmVAAFyBKZgaLdDjeOE83R/60JQHZ22Smd3P2FIaW8LHlOQ7JM11Nhbyx8
vfWnYzykCITonrTCQt/SEX0dS3L8B3HfAXX83QZoMERJ9oY3SlzZlwJvjTrmShla
wryLgWt0oSTdXx6jBOS5ye8HwjwUq+zhK8C0MbRkGohF6tSXeUwBMMHxOS2dNCaO
yy98ljjd1HXvNRPJz28Em5LZYuL01pn8KzC3goOWcC8sVioN7+fcPdWv3d7unXlw
p8IyjGTUV+zQU5x+4yiQ6GK9HDVeqOA/PdDdLb6bszVHpMXC883SabqHtKodcorG
E9eMjxfN/IwjMaX3A7md48W84IsUFlmutAqsD5Rann6hBYxWrUg2RrULOP21sU3T
V1D6T12ICKh9zeiaSpxCgzZRvMZZAjnX2l/NZ7YtOWRbl/Cgli0forZGQWIO8ZsK
xiuthb4HypMd0pMOtvFmh4V5XNWgHnBEWZVSYKmTTDyWjf6nSR1pPkGS0bzbqMbB
qOlOCT0Rxe83J9evRcpM4V/SpHC6C0tPNTgbihwwtGbcz3JpG+gbac7FR2ZPPJIB
UKkhZg7qpV/IiuHgl4wPcVP+O1peeFg6KipLbKseO/3fsOyyu8U=
=CCHK
-----END PGP SIGNATURE-----