Skip to content

fix(deps): update node.js to v24 - #51

Closed
renovate[bot] wants to merge 5 commits into
mainfrom
renovate/node-24.x
Closed

fix(deps): update node.js to v24#51
renovate[bot] wants to merge 5 commits into
mainfrom
renovate/node-24.x

Conversation

@renovate

@renovate renovate Bot commented Oct 28, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
node (source) volta major 20.19.224.18.0 age confidence
@types/node (source) dependencies major ^20.2.1^24.0.0 age confidence
node (source) volta minor 24.0.024.18.0 age confidence

Release Notes

nodejs/node (node)

v24.18.0: 2026-06-23, Version 24.18.0 'Krypton' (LTS), @​richardlau prepared by @​sxa

Compare Source

Notable Changes
  • [e07e7a31e1] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #​63527
  • [44c8ebcbd6] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #​64004
  • [d3ef4122ee] - (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina) #​63597
  • [bb2857b85a] - (SEMVER-MINOR) crypto: align key argument names in docs and error messages (Filip Skokan) #​62527
  • [b9d5e87880] - (SEMVER-MINOR) crypto: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) #​62527
  • [ccd756d61e] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #​62183
  • [4c9251fc09] - (SEMVER-MINOR) http: add writeInformation to send arbitrary 1xx status codes (Tim Perry) #​63155
  • [8c989ec4a3] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #​63079
  • [3f54c8ba32] - Revert "stream: noop pause/resume on destroyed streams" (Stewart X Addison) #​63834
Commits

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/node-24.x branch from 534793b to af6eba4 Compare October 28, 2025 21:55
@renovate renovate Bot changed the title fix(deps): update dependency node to v24 fix(deps): update node.js to v24 Oct 28, 2025
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from af6eba4 to 84c8c85 Compare November 11, 2025 23:54
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from 84c8c85 to 5b461e8 Compare December 10, 2025 21:38
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from 5b461e8 to 3bd684c Compare January 13, 2026 15:57
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from 3bd684c to b6d929c Compare February 10, 2026 13:44
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from b6d929c to 562446f Compare February 24, 2026 17:27
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from 562446f to 9f9c61f Compare March 24, 2026 21:17
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from 9f9c61f to 9fcf510 Compare April 16, 2026 10:51
JDIZM added a commit that referenced this pull request Apr 21, 2026
Closes or supersedes Renovate PRs:
- #56 typescript v6 (5.5 -> 6.0.3)
- #55 vite-node v6 (3 -> 6)
- #50 vitest v4 (3 -> 4.1.5) + @vitest/coverage-istanbul v4
- #46 / #51 node (20.19 -> 24) + CI matrix now [20, 22, 24]
- #49 / #53 actions/setup-node + actions/checkout v4 -> v5
- #39 eslint-config-prettier v9 -> v10
- @types/node 22 -> 24
- esbuild added as explicit devDep (was transitive, removed by vitest 4)

Surface fixes:
- tsconfig.json: drop deprecated baseUrl + paths (no code used the
  @/* alias; TS 7 will drop the option entirely).
- vitest.config.ts: switch from vite's defineConfig to vitest/config
  so the `test` key type-checks under TS 6.
- calc/compoundInterest.test.ts: the interestOnly debtRepayment
  test was silently under-asserting the year-2 interestMatrix array
  (missing the last two months). vitest 4's toMatchObject is
  stricter on nested Maps and caught it. Added the missing
  288769.25 + 290521 entries.

Left alone: eslint v10 and typescript-eslint v8 require flat-config
migration. Low reward for this small library.

57/57 tests pass, 97.44% stmts, 92.09% branches, 100% lines.
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from 9fcf510 to ff6614b Compare May 21, 2026 13:41
@renovate
renovate Bot force-pushed the renovate/node-24.x branch 2 times, most recently from 149d870 to c04dffb Compare June 24, 2026 01:02
JDIZM and others added 5 commits June 28, 2026 08:37
…ards

Root-cause fixes found in pre-release review of v1.5.0:

- PMT: explicit zero-rate branch ((pv+fv)/nper) instead of dividing by
  zero and returning NaN. Fixes mortgageCalculator (repayment),
  earlyMortgagePayoff, and the debt-repayment path at a 0% rate, which
  previously produced "£NaN" / a bogus "paid off in 1 month" result.
- toDecimalRate: always divide by 100. Drops the ambiguous
  "rate >= 1 ? rate/100 : rate" heuristic that misread a genuine sub-1%
  rate (e.g. a 0.5% safe-withdrawal rate) as 50%. The three new
  calculators are now percentage-only (6 = 6%, 0.5 = 0.5%).
- solveYearsToGoal: validate all inputs (incl. new startingBalance < 0
  guard) before the "already met the target" early return.
- solveYearsToGoal / yearsToFire: reject rates of -100% or lower that
  would NaN the Math.log solve.

Tests expanded 45 -> 76 (97% stmts, 92% branch, 100% functions),
covering the zero-rate, sub-1%, non-monthly-compounding, and guard
branches. CHANGELOG updated with the percentage-only behaviour change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The release workflow runs `npm version <tag>` against main and commits the
bump itself (as it did for v1.4.1 and earlier — the v1.4.1 tag's
package.json still read 1.4.0). The branch had pre-bumped to 1.5.0, which
would make that step fail with "Version not changed". Revert to 1.4.1 so
`gh release create v1.5.0` triggers a clean bump-and-publish. CHANGELOG
keeps the 1.5.0 entry.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Per-repo guidance for agents/contributors: setup, commands, layout,
conventions (rates are percentages, calculators throw on bad input), and
the automated release flow. CLAUDE.md points to AGENTS.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
feat: v1.5.0 — savings goal, early payoff, FIRE calculators
@renovate
renovate Bot force-pushed the renovate/node-24.x branch from c04dffb to 5016519 Compare June 30, 2026 10:53
@JDIZM JDIZM closed this Jun 30, 2026
@JDIZM
JDIZM deleted the renovate/node-24.x branch June 30, 2026 11:50
@renovate

renovate Bot commented Jun 30, 2026

Copy link
Copy Markdown
Contributor Author

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 24.x releases. But if you manually upgrade to 24.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant