$ the-wire · showcase
Stale OpenSSL errors cleared, npm 12.2.2 lands in node
By RepoJournal · Filed · About Node.js · Composed from the cited sources · methodology
Node's crypto layer now clears OpenSSL's thread-local error queue at the API boundaries, closing a path where one operation's leftover error surfaced in the next, and npm advanced to 12.2.2 in the same day's batch.
crypto: prevent stale OpenSSL errors nodejs/node
Several crypto operations could return a normal result or a Node.js error while leaving entries in OpenSSL's thread-local error queue, which a later operation would then consume; errors are now cleared at the affected API boundaries and before TLS I/O and private-key parsing, with new regression coverage for key comparison, SPKAC methods, and EC JWK import. If you check OpenSSL error state afte...
deps: upgrade npm to 12.2.2 nodejs/node
npm moves from 12.2.0 through 12.2.2 inside node, per the vendored release notes, bundling the three 12.2.x releases into one dependency bump. Anyone relying on npm behavior pinned to the prior vendored version gets the 12.2.x feature set on the next node build.
build: sync Torque outputs with V8 nodejs/node
V8 15.2 dropped the per-source .inc files and replaced bit-fields.h with bit-field-asserts.cc, so the Torque build outputs are resynced to match. The change is build plumbing for the V8 bump and matters to anyone building node from source against the new V8.
stream: fix pipeTo assert when writer is released during microtask nodejs/node
The deferred write from an earlier change wraps the write in queueMicrotask(), leaving a window where pipeTo can shut down and release the writer before the microtask runs, tripping ERR_INTERNAL_ASSERTION on an undefined writer stream. The fix checks for that released-writer state inside the microtask before writing, so the race no longer aborts the process.
meta: build docs for PRs whose base has no main run nodejs/doc-kit
Also landing: doc-kit's "Generate and Compare Docs" no longer fails on PRs whose base commit has no main run (the stacked PR case), and a follow-up restricts the base lookup to push runs so a pull_request run's missing commit artifact is no longer fetched.
Merge pull request #1763 from vmoroz/PR/fix-windows-addon-pgo nodejs/node-addon-api
Smaller items: node-core-utils keeps llvm-libc src/string through V8 updates, node's security pre-alert template was corrected, and Windows CI for node-addon-api disables inherited PGO.
