Upgrade Node.js to 18.2.0

[depfu]

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

Release Notes

18.2.0

Notable Changes

18.1.0

Notable Changes

• [c46e7bbf69] - doc: add @kuriyosh to collaborators (Yoshiki Kurihara) #42824
• [b0f7c4c8f9] - (SEMVER-MINOR) lib,src: implement WebAssembly Web API (Tobias Nießen) #42701
• [78a860ae58] - (SEMVER-MINOR) test_runner: add initial CLI runner (Colin Ihrig) #42658
• [bf9240ae8c] - (SEMVER-MINOR) worker: add hasRef() to MessagePort (Darshan Sen) #42849

Commits

• [4694f5bb96] - async_hooks: avoid decrementing iterator after erase (Gabriel Bota) #42749
• [459546b4f0] - benchmark: fix misc/startup failure (Antoine du Hamel) #42746
• [6bd24204ea] - bootstrap: use the isolate snapshot in workers (Joyee Cheung) #42702
• [29c8411f99] - bootstrap: move embedded snapshot to SnapshotBuilder (Joyee Cheung) #42702
• [4050b0d64f] - build: enable V8's shared read-only heap (Michaël Zasso) #42809
• [f9994e2029] - build: improve reliability of find_python.cmd script (Luigi Pinca) #42810
• [5d15eb1a14] - build: fix format-cpp (Darshan Sen) #42764
• [7c973474bf] - build: improve the format-cpp error message (Darshan Sen) #42765
• [7681e60829] - crypto: validate this in all webcrypto methods and getters (Filip Skokan) #42815
• [2a4c8263c3] - deps: update undici to 5.1.1 (Michaël Zasso) #42939
• [1102922ef9] - deps: upgrade npm to 8.8.0 (npm team) #42886
• [279892987b] - deps: remove linux-ppc64 architecture (Daniel Bevenius) #42616
• [4abe9879ae] - deps: remove linux-ppc architecture (Daniel Bevenius) #42616
• [8dc71f2266] - deps: remove aix-gcc architecture (Daniel Bevenius) #42616
• [6dc1f82384] - deps: remove archs/aix64-gcc (Daniel Bevenius) #42616
• [e8734a4771] - deps: add note about removing asm archs (Daniel Bevenius) #42616
• [7fae2c9d6e] - deps: add template for generated headers (Daniel Bevenius) #42616
• [294664e32c] - deps: upgrade npm to 8.7.0 (npm team) #42744
• [60e461c45d] - doc: reword "test directory" (LiviaMedeiros) #42817
• [227a45ba60] - doc: remove legacy -J test.py option from BUILDING.md (LiviaMedeiros) #42817
• [e313dc6ed9] - doc: http2.createServer options as optional (Daeyeon Jeong) #42832
• [8f2b2280cd] - doc: record March 2022 security release steward (Richard Lau) #42876
• [e15d22c024] - doc: initial version of security-model-strategy.md (Michael Dawson) #42709
• [fe65996790] - doc: clarify guide on testing internal errors (Livia Medeiros) #42813
• [2f849a460f] - doc: fix markdown formatting in primordials.md (Tobias Nießen) #42877
• [cd2f5a4fd4] - doc: add primordials guidelines (Antoine du Hamel) #38635
• [2d76f72665] - doc: elevate node-clinic diagnostic tier (RafaelGSS) #42802
• [9b61ac2617] - doc: update WebAssembly strategy with Wasm Web API (Tobias Nießen) #42836
• [c6c1dc5833] - doc: order vm.Module linker arguments correctly (Simen Bekkhus) #42797
• [c46e7bbf69] - doc: add @kuriyosh to collaborators (Yoshiki Kurihara) #42824
• [59da1339b4] - doc: add maintaining-webassembly.md (Michael Dawson) #42660
• [d9f3f05cab] - doc: fix outdated documentation for family property (Antoine du Hamel) #42789
• [6fa080cb48] - doc: delete heapdump from diagnostic tooling support tiers (Tony Gorez) #42783
• [c32f76d49e] - doc: fix example in assert.md (Livia Medeiros) #42786
• [6225370b2e] - doc: fix version history for Loaders API (Antoine du Hamel) #42778
• [3d65a3b13e] - doc: add node: prefix for all core modules (Antoine du Hamel) #42752
• [46c880b99b] - doc: clarify core modules that can be loaded without a prefix (Antoine du Hamel) #42753
• [025b3e786a] - doc: consolidate use of multiple-byte units (Antoine du Hamel) #42587
• [962d80b7a1] - doc: add documentation for inherited methods (Luigi Pinca) #42691
• [222b3e6674] - doc: close tag in n-api.md (Livia Medeiros) #42751
• [4c30936065] - doc: copyedit http.OutgoingMessage documentation (Luigi Pinca) #42733
• [d77c59d0f2] - doc: improve fragment (:target) anchors behavior on HTML version (Antoine du Hamel) #42739
• [c50309cb39] - doc: fix added: info for outgoingMessage.writable* (Luigi Pinca) #42737
• [6b7c35e807] - doc: delete mdb_v8 from diagnostic tooling support tiers (Tony Gorez) #42626
• [2a07a9fc3a] - doc: document the 'close' and 'finish' events (Luigi Pinca) #42704
• [ef5ab8179b] - doc: fix added: info for outgoingMessage.{,un}cork() (Luigi Pinca) #42711
• [a6e1e7a5d7] - doc,test: add tests and docs for duplex.fromWeb and duplex.toWeb (Erick Wendel) #42738
• [336242a7c6] - errors,console: refactor to use ES2021 syntax (小菜) #42872
• [0e16120d0d] - errors,vm: update error and use cause (Gus Caplan) #42820
• [a0638a23b0] - esm: fix imports from non-file module (Antoine du Hamel) #42881
• [dab15f69e3] - esm: graduate top-level-await to stable (Antoine du Hamel) #42875
• [48bbb73f36] - fs: fix mkdirSync so ENOSPC is correctly reported (Santiago Gimeno) #42811
• [d33cbabd79] - lib: remove experimental warning from FormData (Xuguang Mei) #42807
• [ad8269450a] - lib,src: use Response URL as WebAssembly location (Tobias Nießen) #42842
• [b0f7c4c8f9] - (SEMVER-MINOR) lib,src: implement WebAssembly Web API (Tobias Nießen) #42701
• [fdc65032a7] - meta: update AUTHORS (Node.js GitHub Bot) #42848
• [33ac027fdf] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #42769
• [14893c5984] - meta: update AUTHORS (Node.js GitHub Bot) #42760
• [2f38b4812c] - meta: move mmarchini to emeritus (mary marchini) #42750
• [718d11fdb0] - perf_hooks: return different functions in timerify (Himself65) #42854
• [e8083664e1] - src: turn SSL_CTX_new CHECK/segfault into JS exception (Anna Henningsen) #42799
• [37ca1102c4] - src: make --no-node-snapshot a per-process option (Joyee Cheung) #42864
• [1976284a92] - src: define fs.constants.S_IWUSR & S_IRUSR for Win (Liviu Ionescu) #42757
• [b7e9dd0278] - src: use node: prefix in example (Antoine du Hamel) #42794
• [1a7af6364d] - src: large page attributing an id on Linux (David CARLIER) #42644
• [494650c09f] - src,crypto: remove uses of AllocatedBuffer from crypto_ec.cc (Darshan Sen) #42766
• [8e0e576669] - test: add tests for extracting function name (Kohei Ueno) #42399
• [fbda87d966] - test: simplify test-gc-{http-client,net}-* (Luigi Pinca) #42782
• [3c796f8328] - test: fix parallel/test-dgram-udp6-link-local-address (Antoine du Hamel) #42795
• [b85a11c28e] - test: improve lib/internal/test_runner/test.js coverage (MURAKAMI Masahiko) #42745
• [59c07a99fb] - test: check ecdsa psychic signature (Filip Skokan) #42863
• [0725064695] - test: fix port in net-perf_hooks (Livia Medeiros) #42761
• [7b701442de] - test: skip test that cannot pass under --node-builtin-modules-path (Geoffrey Booth) #42834
• [37364abc58] - test: fix flaky HTTP server tests (Tobias Nießen) #42846
• [8476ffb85a] - test: use assert.match() instead of assert(regex.test()) (Antoine du Hamel) #42803
• [d311916f37] - test: fix calculations in test-worker-resource-limits (Joyee Cheung) #42702
• [deb3cf49c7] - test: remove the legacy url parser function (Kohei Ueno) #42656
• [be44b1ffcb] - test: improve test coverage of internal/blob (Yoshiki Kurihara) #41513
• [78a860ae58] - (SEMVER-MINOR) test_runner: add initial CLI runner (Colin Ihrig) #42658
• [1e7479d34c] - tools: update lint-md-dependencies (Node.js GitHub Bot) #42932
• [c3c5fe78dc] - tools: bump jsdoccomment from 0.22.1 to 0.29.0 (Rich Trott) #42857
• [97fc00a06e] - tools: update eslint to 8.14.0 (Node.js GitHub Bot) #42845
• [93fd77a16f] - tools: update doc to highlight.js@11.5.1 (Node.js GitHub Bot) #42758
• [47c04813f7] - tools: update lint-md-dependencies (Node.js GitHub Bot) #42759
• [18ae2c39d5] - tools: lint osx shell scripts (Livia Medeiros) #42712
• [4af0fbd41e] - v8: export cpu_profiler_metadata_size in getHeapCodeStatistics (theanarkh) #42818
• [a19fb609d8] - v8: export more fields in getHeapStatistics (theanarkh) #42784
• [1b5856a2a9] - wasi: remove unecessary null check (Michael Dawson) #42819
• [bf9240ae8c] - (SEMVER-MINOR) worker: add hasRef() to MessagePort (Darshan Sen) #42849
• [c3922afa1c] - worker: add hasRef() to the handle object (Darshan Sen) #42756

18.0.0

Node.js 18 is here! Highlights include the update of the V8 JavaScript engine to 10.1, global fetch enabled by default, and a core test runner module.

Initially, Node.js 18 will replace Node.js 17 as our ‘Current’ release line. As per the release schedule, Node.js 18 will be the ‘Current’ release for the next 6 months and then promoted to Long-term Support (LTS) in October 2022. Once promoted to long-term support the release will be designated the codename ‘Hydrogen’. Node.js 18 will be supported until April 2025.

Notable Changes

Deprecations and Removals

• (SEMVER-MAJOR) fs: runtime deprecate string coercion in fs.write, fs.writeFileSync (Livia Medeiros) #42607
• (SEMVER-MAJOR) dns: remove dns.lookup and dnsPromises.lookup options type coercion (Antoine du Hamel) #41431
• (SEMVER-MAJOR) process: runtime deprecate multipleResolves (Benjamin Gruenbaum) #41896
• (SEMVER-MAJOR) stream: remove thenable support (Robert Nagy) #40773
• (SEMVER-MAJOR) tls: move tls.parseCertString to end-of-life (Tobias Nießen) #41479

fetch (experimental)

An experimental fetch API is available on the global scope by default. The implementation is based upon undici, an HTTP/1.1 client written for Node.js by contributors to the project.

const res = await fetch('https://nodejs.org/api/documentation.json');
if (res.ok) {
  const data = await res.json();
  console.log(data);
}

Through this addition, the following globals are made available: fetch, FormData, Headers, Request, Response.

Disable this API with the --no-experimental-fetch command-line flag.

Contributed by Michaël Zasso in #41811.

HTTP Timeouts

server.headersTimeout which limits the amount of time the parser will wait to receive the complete HTTP headers is now set to 60000 (60 seconds) by default.

server.requestTimeout which sets the timeout value in milliseconds for receiving the entire request from the client is now set to 300000 (5 minutes) by default.

If these timeouts expire, the server responds with status 408 without forwarding the request to the request listener and then closes the connection.

Both timeouts must be set to a non-zero value to protect against potential Denial-of-Service attacks in case the server is deployed without a reverse proxy in front.

Contributed by Paolo Insogna in #41263.

Test Runner module (experimental)

The node:test module facilitates the creation of JavaScript tests that report results in TAP format. To access it:

import test from 'node:test';

This module is only available under the node: scheme.

The following is an example implementation of a parent test with two subtests:

test('top level test', async (t) => {
await t.test('subtest 1', (t) => {
assert.strictEqual(1, 1);
});

await t.test('subtest 2', (t) => {
assert.strictEqual(2, 2);
});
});

Read more in https://nodejs.org/dist/latest-v18.x/docs/api/test.html.

Contributed by Colin Ihrig in #42325.

Toolchain and Compiler Upgrades

• Prebuilt binaries for Linux are now built on Red Hat Enterprise Linux (RHEL) 8 and are compatible with Linux distributions based on glibc 2.28 or later, for example, Debian 10, RHEL 8, Ubuntu 20.04.
• Prebuilt binaries for macOS now require macOS 10.15 or later.
• For AIX the minimum supported architecture has been raised from Power 7 to Power 8.

Prebuilt binaries for 32-bit Windows will initially not be available due to issues building the V8 dependency in Node.js. We hope to restore 32-bit Windows binaries for Node.js 18 with a future V8 update.

Node.js does not support running on operating systems that are no longer supported by their vendor. For operating systems where their vendor has planned to end support earlier than April 2025, such as Windows 8.1 (January 2023) and Windows Server 2012 R2 (October 2023), support for Node.js 18 will end at the earlier date.

Full details about the supported toolchains and compilers are documented in the Node.js BUILDING.md file.

Contributed by Richard Lau in #42292, #42604 and #42659,and Michaël Zasso in #42105 and #42666.

17.0.0

Notable Changes

Deprecations and Removals

• [f182b9b29f] - (SEMVER-MAJOR) dns: runtime deprecate type coercion of dns.lookup options (Antoine du Hamel) #39793
• [4b030d0573] - doc: deprecate (doc-only) http abort related (dr-js) #36670
• [36e2ffe6dc] - (SEMVER-MAJOR) module: subpath folder mappings EOL (Guy Bedford) #40121
• [64287e4d45] - (SEMVER-MAJOR) module: runtime deprecate trailing slash patterns (Guy Bedford) #40117

---

All Depfu comment commands

@​depfu refresh

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Pauses all engine updates and closes this PR

[depfu]

Closed in favor of #50.