$ the-wire · showcase
Amaro 1.3.0 moves to registerHooks, snap stops nightly rollbacks
By RepoJournal · Filed · About Node.js · Composed from the cited sources · methodology
Amaro's TypeScript loaders now run through synchronous module.registerHooks so they also intercept require(), while nodejs/snap fixed a generator bug that had been pushing the snap edge channel back to an older nightly.
feat: use module.registerHooks for amaro/strip and amaro/transform nodejs/amaro
amaro/strip and amaro/transform now use synchronous module.registerHooks() where available, which drops the loader thread and means the hooks also apply to require() of TypeScript, not just ESM imports. On Node.js below 22.15 and 23.0 to 23.4 they fall back to module.register(), so engines stays >=22 and the PR is explicitly not breaking. The stated goal is to let Node.js eventually remove modu...
v1.3.0 nodejs/amaro
v1.3.0 carries that hook change as its only feature, alongside a bump of actions/checkout from 7.0.0 to 7.0.1 and an updated CodeQL upload action.
fix(snap): never move snapcraft.yaml to an older version nodejs/snap
The generator picks the newest complete entry from whatever index.tab the cron receives, so a stale copy made it commit the previous version and Launchpad rebuild and publish it; on main this flipped edge back to the previous nightly 19 times since July, including 20261026 to 20261025 to 20261026 on 26 Oct. snapcraft.yaml.sh now reads the version already pinned in snapcraft.yaml from its downlo...
build(deps): bump undici nodejs/remark-preset-lint-node
A routine bump of undici from 7.30.0 to 7.30.1 in the markdown lint preset, whose release notes list a high-severity denial of service via TLS 1.2 certificate-changing renegotiation tracked as CVE-2026-87018.
snap: (auto) updated to 27.0.0-nightly202610263983092f63 nodejs/snap
Separately, the nightly autoupdate commits landed at 27.0.0-nightly202610263983092f63, with 27.0.0-nightly202610259b5d938fad preceding it.
Action items
- → Upgrade undici to 7.30.1 to pick up the fix for CVE-2026-87018 nodejs/undici [plan]
