2025-08-27, Version 24.7.0 (Current)

Notable changes: crypto: * update root certificates to NSS 3.114 (Node.js GitHub Bot) https://github.com/nodejs/node/pull/59571 * (SEMVER-MINOR) add AES-OCB Web Cryptography algorithm (Filip Skokan) https://github.com/nodejs/node/pull/59539 * (SEMVER-MINOR) support ML-KEM in Web Cryptography (Filip Skokan) https://github.com/nodejs/node/pull/59569 * (SEMVER-MINOR) support ML-KEM, DHKEM, and RSASVE key encapsulation mechanisms (Filip Skokan) https://github.com/nodejs/node/pull/59491 * (SEMVER-MINOR) add argon2() and argon2Sync() methods (Ranieri Althoff) https://github.com/nodejs/node/pull/50353 * (SEMVER-MINOR) support ML-DSA spki/pkcs8 key formats in Web Cryptography (Filip Skokan) https://github.com/nodejs/node/pull/59365 * (SEMVER-MINOR) add ChaCha20-Poly1305 Web Cryptography algorithm (Filip Skokan) https://github.com/nodejs/node/pull/59365 * (SEMVER-MINOR) add subtle.getPublicKey() utility function in Web Cryptography (Filip Skokan) https://github.com/nodejs/node/pull/59365 * (SEMVER-MINOR) add SHA-3 Web Cryptography digest algorithms (Filip Skokan) https://github.com/nodejs/node/pull/59365 * (SEMVER-MINOR) add SHAKE Web Cryptography digest algorithms (Filip Skokan) https://github.com/nodejs/node/pull/59365 * (SEMVER-MINOR) add SubtleCrypto.supports feature detection in Web Cryptography (Filip Skokan) https://github.com/nodejs/node/pull/59365 * (SEMVER-MINOR) support ML-DSA in Web Cryptography (Filip Skokan) https://github.com/nodejs/node/pull/59365 * (SEMVER-MINOR) support ML-KEM KeyObject (Filip Skokan) https://github.com/nodejs/node/pull/59461 http: * (SEMVER-MINOR) add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) https://github.com/nodejs/node/pull/59315 http2: * (SEMVER-MINOR) add support for raw header arrays in h2Stream.respond() (Tim Perry) https://github.com/nodejs/node/pull/59455 sea: * (SEMVER-MINOR) support execArgv in sea config (Joyee Cheung) https://github.com/nodejs/node/pull/59314 stream: * (SEMVER-MINOR) add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) https://github.com/nodejs/node/pull/59464 PR-URL: https://github.com/nodejs/node/pull/59629
2025-12-06 00:20:08 +01:00 · 2025-08-26 07:12:58 +01:00 · 2025-08-26 07:12:58 +01:00 · d3ac95e6a8
commit d3ac95e6a8
parent bcb802cca0
12 changed files with 288 additions and 74 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -39,7 +39,8 @@ release.
 </tr>
 <tr>
  <td valign="top">
-<b><a href="doc/changelogs/CHANGELOG_V24.md#24.6.0">24.6.0</a></b><br/>
+<b><a href="doc/changelogs/CHANGELOG_V24.md#24.7.0">24.7.0</a></b><br/>
+<a href="doc/changelogs/CHANGELOG_V24.md#24.6.0">24.6.0</a><br/>
 <a href="doc/changelogs/CHANGELOG_V24.md#24.5.0">24.5.0</a><br/>
 <a href="doc/changelogs/CHANGELOG_V24.md#24.4.1">24.4.1</a><br/>
 <a href="doc/changelogs/CHANGELOG_V24.md#24.4.0">24.4.0</a><br/>
--- a/doc/api/cli.md
+++ b/doc/api/cli.md
@ -2651,7 +2651,7 @@ The destination for the corresponding test reporter. See the documentation on

 <!-- YAML
 added:
-  - REPLACEME
+  - v24.7.0
 -->

 A path to a file allowing the test runner to persist the state of the test
--- a/doc/api/crypto.md
+++ b/doc/api/crypto.md
@ -2061,7 +2061,7 @@ changes:
  - version: REPLACEME
    pr-url: https://github.com/nodejs/node/pull/59537
    description: Add support for SLH-DSA keys.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59461
    description: Add support for ML-KEM keys.
  - version: v24.6.0
@ -2988,7 +2988,7 @@ Does not perform any other validation checks on the certificate.
 ### `crypto.argon2(algorithm, parameters, callback)`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.2 - Release candidate
@ -3074,7 +3074,7 @@ argon2('argon2id', parameters, (err, derivedKey) => {
 ### `crypto.argon2Sync(algorithm, parameters)`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.2 - Release candidate
@ -3759,7 +3759,7 @@ algorithm names.
 ### `crypto.decapsulate(key, ciphertext[, callback])`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.2 - Release candidate
@ -3819,7 +3819,7 @@ If the `callback` function is provided this function uses libuv's threadpool.
 ### `crypto.encapsulate(key[, callback])`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.2 - Release candidate
@ -3929,7 +3929,7 @@ changes:
  - version: REPLACEME
    pr-url: https://github.com/nodejs/node/pull/59537
    description: Add support for SLH-DSA key pairs.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59461
    description: Add support for ML-KEM key pairs.
  - version: v24.6.0
@ -4057,7 +4057,7 @@ changes:
  - version: REPLACEME
    pr-url: https://github.com/nodejs/node/pull/59537
    description: Add support for SLH-DSA key pairs.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59461
    description: Add support for ML-KEM key pairs.
  - version: v24.6.0
--- a/doc/api/errors.md
+++ b/doc/api/errors.md
@ -1070,7 +1070,7 @@ Key's Asymmetric Key Type is not registered for use in the
 ### `ERR_CRYPTO_KEM_NOT_SUPPORTED`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 Attempted to use KEM operations while Node.js was not compiled with
--- a/doc/api/globals.md
+++ b/doc/api/globals.md
@ -330,7 +330,7 @@ with the [`--no-experimental-websocket`][] CLI flag.
 <!-- YAML
 added: v18.0.0
 changes:
- - version: REPLACEME
+ - version: v24.7.0
   pr-url: https://github.com/nodejs/node/pull/59464
   description: format now accepts `brotli` value.
 - version:
@ -448,7 +448,7 @@ A browser-compatible implementation of {CustomEvent}.
 <!-- YAML
 added: v18.0.0
 changes:
- - version: REPLACEME
+ - version: v24.7.0
   pr-url: https://github.com/nodejs/node/pull/59464
   description: format now accepts `brotli` value.
 - version:
--- a/doc/api/http.md
+++ b/doc/api/http.md
@ -117,7 +117,7 @@ http.get({
 added: v0.3.4
 changes:
  - version:
-    - REPLACEME
+    - v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59315
    description: Add support for `agentKeepAliveTimeoutBuffer`.
  - version:
--- a/doc/api/http2.md
+++ b/doc/api/http2.md
@ -1862,7 +1862,7 @@ and will throw an error.
 added: v8.4.0
 changes:
  - version:
-    - REPLACEME
+    - v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59455
    description: Allow passing headers in raw array format.
  - version:
--- a/doc/api/inspector.md
+++ b/doc/api/inspector.md
@ -606,7 +606,7 @@ HTTP request has failed to load.

 <!-- YAML
 added:
-  - REPLACEME
+  - v24.7.0
 -->

 * `params` {Object}
@ -620,7 +620,7 @@ a WebSocket connection has been initiated.

 <!-- YAML
 added:
-  - REPLACEME
+  - v24.7.0
 -->

 * `params` {Object}
@ -634,7 +634,7 @@ This event indicates that the WebSocket handshake response has been received.

 <!-- YAML
 added:
-  - REPLACEME
+  - v24.7.0
 -->

 * `params` {Object}
--- a/doc/api/test.md
+++ b/doc/api/test.md
@ -1382,7 +1382,7 @@ added:
  - v18.9.0
  - v16.19.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59443
    description: Added a rerunFailuresFilePath option.
  - version: v23.0.0
--- a/doc/api/webcrypto.md
+++ b/doc/api/webcrypto.md
@ -5,22 +5,22 @@ changes:
  - version: REPLACEME
    pr-url: https://github.com/nodejs/node/pull/59544
    description: Argon2 algorithms are now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59539
    description: AES-OCB algorithm is now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59569
    description: ML-KEM algorithms are now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ChaCha20-Poly1305 algorithm is now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHA-3 algorithms are now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHAKE algorithms are now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ML-DSA algorithms are now supported.
  - version:
@ -783,7 +783,7 @@ added: v15.0.0
 ### Static method: `SubtleCrypto.supports(operation, algorithm[, lengthOrAdditionalAlgorithm])`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.1 - Active development
@ -804,7 +804,7 @@ which can be used to detect whether a given algorithm identifier
 ### `subtle.decapsulateBits(decapsulationAlgorithm, decapsulationKey, ciphertext)`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.1 - Active development
@ -823,7 +823,7 @@ The algorithms currently supported include:
 ### `subtle.decapsulateKey(decapsulationAlgorithm, decapsulationKey, ciphertext, sharedKeyAlgorithm, extractable, usages)`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.1 - Active development
@ -847,10 +847,10 @@ The algorithms currently supported include:
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59539
    description: AES-OCB algorithm is now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ChaCha20-Poly1305 algorithm is now supported.
 -->
@ -978,10 +978,10 @@ The algorithms currently supported include:
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHA-3 algorithms are now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHAKE algorithms are now supported.
 -->
@ -1012,7 +1012,7 @@ whose value is one of the above.
 ### `subtle.encapsulateBits(encapsulationAlgorithm, encapsulationKey)`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.1 - Active development
@ -1030,7 +1030,7 @@ The algorithms currently supported include:
 ### `subtle.encapsulateKey(encapsulationAlgorithm, encapsulationKey, sharedKeyAlgorithm, extractable, usages)`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.1 - Active development
@ -1053,10 +1053,10 @@ The algorithms currently supported include:
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59539
    description: AES-OCB algorithm is now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ChaCha20-Poly1305 algorithm is now supported.
 -->
@ -1085,13 +1085,13 @@ The algorithms currently supported include:
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59569
    description: ML-KEM algorithms are now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ChaCha20-Poly1305 algorithm is now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ML-DSA algorithms are now supported.
  - version:
@ -1148,7 +1148,7 @@ specification.
 ### `subtle.getPublicKey(key, keyUsages)`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 > Stability: 1.1 - Active development
@ -1164,13 +1164,13 @@ Derives the public key from a given private key.
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59569
    description: ML-KEM algorithms are now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ChaCha20-Poly1305 algorithm is now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ML-DSA algorithms are now supported.
 -->
@ -1223,13 +1223,13 @@ The {CryptoKey} (secret key) generating algorithms supported include:
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59569
    description: ML-KEM algorithms are now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ChaCha20-Poly1305 algorithm is now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ML-DSA algorithms are now supported.
  - version:
@ -1301,7 +1301,7 @@ The algorithms currently supported include:
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ML-DSA algorithms are now supported.
  - version:
@ -1342,10 +1342,10 @@ The algorithms currently supported include:
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59539
    description: AES-OCB algorithm is now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ChaCha20-Poly1305 algorithm is now supported.
 -->
@ -1415,7 +1415,7 @@ The unwrapped key algorithms supported include:
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ML-DSA algorithms are now supported.
  - version:
@ -1457,10 +1457,10 @@ The algorithms currently supported include:
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59539
    description: AES-OCB algorithm is now supported.
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: ChaCha20-Poly1305 algorithm is now supported.
 -->
@ -1783,13 +1783,13 @@ Represents the Argon2 version number. The default and currently only defined ver
 ### Class: `ContextParams`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 #### `contextParams.name`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {string} Must be `'ML-DSA-44'`[^modern-algos], `'ML-DSA-65'`[^modern-algos], or `'ML-DSA-87'`[^modern-algos].
@ -1797,7 +1797,7 @@ added: REPLACEME
 #### `contextParams.context`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {ArrayBuffer|TypedArray|DataView|Buffer|undefined}
@ -1810,13 +1810,13 @@ which is equivalent to not providing context at all.
 ### Class: `CShakeParams`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 #### `cShakeParams.customization`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {ArrayBuffer|TypedArray|DataView|Buffer|undefined}
@ -1828,7 +1828,7 @@ which is equivalent to not providing customization at all.
 #### `cShakeParams.functionName`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {ArrayBuffer|TypedArray|DataView|Buffer|undefined}
@ -1841,7 +1841,7 @@ which is equivalent to not providing functionName at all.
 #### `cShakeParams.length`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {number} represents the requested output length in bits.
@ -1849,7 +1849,7 @@ added: REPLACEME
 #### `cShakeParams.name`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {string} Must be `'cSHAKE128'`[^modern-algos] or `'cSHAKE256'`[^modern-algos]
@ -1892,7 +1892,7 @@ added: v15.0.0
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHA-3 algorithms are now supported.
 -->
@ -2020,13 +2020,13 @@ which is equivalent to not providing context at all.
 ### Class: `EncapsulatedBits`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 #### `encapsulatedBits.ciphertext`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {ArrayBuffer}
@ -2034,7 +2034,7 @@ added: REPLACEME
 #### `encapsulatedBits.sharedKey`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {ArrayBuffer}
@ -2042,13 +2042,13 @@ added: REPLACEME
 ### Class: `EncapsulatedKey`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 #### `encapsulatedKey.ciphertext`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {ArrayBuffer}
@ -2056,7 +2056,7 @@ added: REPLACEME
 #### `encapsulatedKey.sharedKey`

 <!-- YAML
-added: REPLACEME
+added: v24.7.0
 -->

 * Type: {CryptoKey}
@ -2072,7 +2072,7 @@ added: v15.0.0
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHA-3 algorithms are now supported.
 -->
@ -2135,7 +2135,7 @@ added: v15.0.0
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHA-3 algorithms are now supported.
 -->
@ -2217,7 +2217,7 @@ added: v15.0.0
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHA-3 algorithms are now supported.
 -->
@ -2282,7 +2282,7 @@ added: v15.0.0
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHA-3 algorithms are now supported.
 -->
@ -2341,7 +2341,7 @@ added: v15.0.0
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHA-3 algorithms are now supported.
 -->
@ -2423,7 +2423,7 @@ added: v15.0.0
 <!-- YAML
 added: v15.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59365
    description: SHA-3 algorithms are now supported.
 -->
--- a/doc/api/webstreams.md
+++ b/doc/api/webstreams.md
@ -1480,7 +1480,7 @@ changes:
 <!-- YAML
 added: v17.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59464
    description: format now accepts `brotli` value.
  - version:
@ -1523,7 +1523,7 @@ changes:
 <!-- YAML
 added: v17.0.0
 changes:
-  - version: REPLACEME
+  - version: v24.7.0
    pr-url: https://github.com/nodejs/node/pull/59464
    description: format now accepts `brotli` value.
  - version:
--- a/doc/changelogs/CHANGELOG_V24.md
+++ b/doc/changelogs/CHANGELOG_V24.md
@ -8,6 +8,7 @@
 </tr>
 <tr>
 <td>
+<a href="#24.7.0">24.7.0</a><br/>
 <a href="#24.6.0">24.6.0</a><br/>
 <a href="#24.5.0">24.5.0</a><br/>
 <a href="#24.4.1">24.4.1</a><br/>
@ -48,6 +49,218 @@
  * [io.js](CHANGELOG_IOJS.md)
  * [Archive](CHANGELOG_ARCHIVE.md)

+<a id="24.7.0"></a>
+
+## 2025-08-27, Version 24.7.0 (Current), @targos
+
+### Notable Changes
+
+#### Post-Quantum Cryptography in `node:crypto`
+
+OpenSSL 3.5 on 24.x kicked off post-quantum cryptography efforts in Node.js by
+allowing use of NIST's post-quantum cryptography standards for future-proofing
+applications against quantum computing threats. The following post-quantum
+algorithms are now available in `node:crypto`:
+
+* ML-KEM (FIPS 203, Module-Lattice-Based Key-Encapsulation Mechanism Standard) through new `crypto.encapsulate()` and `crypto.decapsulate()` methods.
+* ML-DSA (FIPS 204, Module-Lattice-Based Digital Signature Standard) in the existing `crypto.sign()` and `crypto.verify()` methods.
+
+Contributed by Filip Skokan in [#59259](https://github.com/nodejs/node/pull/59259) and [#59491](https://github.com/nodejs/node/pull/59491).
+
+### Modern Algorithms in Web Cryptography API
+
+The second substantial [extension to the Web Cryptography API](https://wicg.github.io/webcrypto-modern-algos/)
+(`globalThis.crypto.subtle`) was recently accepted for incubation by WICG.
+The following algorithms and methods from this extension are now available in
+the Node.js Web Cryptography API implementation:
+
+* AES-OCB
+* ChaCha20-Poly1305
+* ML-DSA
+* ML-KEM
+* SHA-3
+* SHAKE
+* `subtle.getPublicKey()`
+* `SubtleCrypto.supports()`
+* ... with more coming in future releases.
+
+Contributed by Filip Skokan in [#59365](https://github.com/nodejs/node/pull/59365), [#59569](https://github.com/nodejs/node/pull/59569), [#59461](https://github.com/nodejs/node/pull/59461), and [#59539](https://github.com/nodejs/node/pull/59539).
+
+#### Node.js execution argument support in single executable applications
+
+The single executable application configuration now supports additional fields
+to specify Node.js execution arguments and control how they can be extended when
+the application is run.
+
+* `execArgv` takes an array of strings for the execution arguments to be used.
+* `execArgvExtension` takes one of the following values:
+  * `"none"`: No additional execution arguments are allowed.
+  * `"cli"`: Additional execution arguments can be provided via a special command-line flag `--node-options="--flag1 --flag2=value"` at run time.
+  * `"env"` (default): Additional execution arguments can be provided via the `NODE_OPTIONS` environment variable at run time.
+
+For example, with the following configuration:
+
+```json
+{
+  "main": "/path/to/bundled/script.js",
+  "output": "/path/to/write/the/generated/blob.blob",
+  "execArgv": ["--no-warnings"],
+  "execArgvExtension": "cli",
+}
+```
+
+If the generated single executable application is named `sea`, then running:
+
+```console
+sea --node-options="--max-old-space-size=4096" user-arg1 user-arg2
+```
+
+Would be equivalent to running:
+
+```console
+node --no-warnings --max-old-space-size=4096 /path/to/bundled/script.js user-arg1 user-arg2
+```
+
+Contributed by Joyee Cheung in [#59314](https://github.com/nodejs/node/pull/59314) and [#59560](https://github.com/nodejs/node/pull/59560).
+
+#### Root certificates updated to NSS 3.114
+
+Certificates added:
+
+* TrustAsia TLS ECC Root CA
+* TrustAsia TLS RSA Root CA
+* SwissSign RSA TLS Root CA 2022 - 1
+
+Certificates removed:
+
+* GlobalSign Root CA
+* Entrust.net Premium 2048 Secure Server CA
+* Baltimore CyberTrust Root
+* Comodo AAA Services root
+* XRamp Global CA Root
+* Go Daddy Class 2 CA
+* Starfield Class 2 CA
+
+#### Other Notable Changes
+
+* \[[`d3afc63c44`](https://github.com/nodejs/node/commit/d3afc63c44)] - **(SEMVER-MINOR)** **crypto**: add argon2() and argon2Sync() methods (Ranieri Althoff) [#50353](https://github.com/nodejs/node/pull/50353)
+* \[[`6ae202fcdf`](https://github.com/nodejs/node/commit/6ae202fcdf)] - **(SEMVER-MINOR)** **http**: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) [#59315](https://github.com/nodejs/node/pull/59315)
+* \[[`dafee05358`](https://github.com/nodejs/node/commit/dafee05358)] - **(SEMVER-MINOR)** **http2**: add support for raw header arrays in h2Stream.respond() (Tim Perry) [#59455](https://github.com/nodejs/node/pull/59455)
+* \[[`8dc6f5b696`](https://github.com/nodejs/node/commit/8dc6f5b696)] - **(SEMVER-MINOR)** **stream**: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) [#59464](https://github.com/nodejs/node/pull/59464)
+
+### Commits
+
+* \[[`0fa22cbf7c`](https://github.com/nodejs/node/commit/0fa22cbf7c)] - **benchmark**: calibrate config v8/serialize.js (Rafael Gonzaga) [#59586](https://github.com/nodejs/node/pull/59586)
+* \[[`f5ece45b45`](https://github.com/nodejs/node/commit/f5ece45b45)] - **benchmark**: reduce readfile-permission-enabled config (Rafael Gonzaga) [#59589](https://github.com/nodejs/node/pull/59589)
+* \[[`8ebd4f4434`](https://github.com/nodejs/node/commit/8ebd4f4434)] - **benchmark**: calibrate length of util.diff (Rafael Gonzaga) [#59588](https://github.com/nodejs/node/pull/59588)
+* \[[`7dee3ffd14`](https://github.com/nodejs/node/commit/7dee3ffd14)] - **benchmark**: reflect current OpenSSL in crypto key benchmarks (Filip Skokan) [#59459](https://github.com/nodejs/node/pull/59459)
+* \[[`027b861ca1`](https://github.com/nodejs/node/commit/027b861ca1)] - **benchmark, test**: replace CRLF variable with string literal (Lee Jiho) [#59466](https://github.com/nodejs/node/pull/59466)
+* \[[`89dd770889`](https://github.com/nodejs/node/commit/89dd770889)] - **build**: do not set `-mminimal-toc` with `clang` (Richard Lau) [#59484](https://github.com/nodejs/node/pull/59484)
+* \[[`e13de4542f`](https://github.com/nodejs/node/commit/e13de4542f)] - **child\_process**: remove unsafe array iteration (hotpineapple) [#59347](https://github.com/nodejs/node/pull/59347)
+* \[[`89fe63551e`](https://github.com/nodejs/node/commit/89fe63551e)] - **crypto**: load system CA certificates off thread (Joyee Cheung) [#59550](https://github.com/nodejs/node/pull/59550)
+* \[[`152c5ef518`](https://github.com/nodejs/node/commit/152c5ef518)] - **(SEMVER-MINOR)** **crypto**: add AES-OCB Web Cryptography algorithm (Filip Skokan) [#59539](https://github.com/nodejs/node/pull/59539)
+* \[[`c6c418343d`](https://github.com/nodejs/node/commit/c6c418343d)] - **crypto**: update root certificates to NSS 3.114 (Node.js GitHub Bot) [#59571](https://github.com/nodejs/node/pull/59571)
+* \[[`18a2ee5b6c`](https://github.com/nodejs/node/commit/18a2ee5b6c)] - **(SEMVER-MINOR)** **crypto**: support ML-KEM in Web Cryptography (Filip Skokan) [#59569](https://github.com/nodejs/node/pull/59569)
+* \[[`72937e5144`](https://github.com/nodejs/node/commit/72937e5144)] - **crypto**: require HMAC key length with SHA-3 hashes in Web Cryptography (Filip Skokan) [#59567](https://github.com/nodejs/node/pull/59567)
+* \[[`b7383186c7`](https://github.com/nodejs/node/commit/b7383186c7)] - **crypto**: fix subtle.getPublicKey error for secret type key inputs (Filip Skokan) [#59558](https://github.com/nodejs/node/pull/59558)
+* \[[`2d05c046db`](https://github.com/nodejs/node/commit/2d05c046db)] - **crypto**: return cached copies from CryptoKey algorithm and usages getters (Filip Skokan) [#59538](https://github.com/nodejs/node/pull/59538)
+* \[[`207ffbeb07`](https://github.com/nodejs/node/commit/207ffbeb07)] - **crypto**: use CryptoKey internal slots in Web Cryptography (Filip Skokan) [#59538](https://github.com/nodejs/node/pull/59538)
+* \[[`4276516781`](https://github.com/nodejs/node/commit/4276516781)] - **crypto**: normalize RsaHashedKeyParams publicExponent (Filip Skokan) [#59538](https://github.com/nodejs/node/pull/59538)
+* \[[`14741539a7`](https://github.com/nodejs/node/commit/14741539a7)] - **(SEMVER-MINOR)** **crypto**: support ML-KEM, DHKEM, and RSASVE key encapsulation mechanisms (Filip Skokan) [#59491](https://github.com/nodejs/node/pull/59491)
+* \[[`d3afc63c44`](https://github.com/nodejs/node/commit/d3afc63c44)] - **(SEMVER-MINOR)** **crypto**: add argon2() and argon2Sync() methods (Ranieri Althoff) [#50353](https://github.com/nodejs/node/pull/50353)
+* \[[`4fe383e45a`](https://github.com/nodejs/node/commit/4fe383e45a)] - **(SEMVER-MINOR)** **crypto**: support ML-DSA spki/pkcs8 key formats in Web Cryptography (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`a95386fbf9`](https://github.com/nodejs/node/commit/a95386fbf9)] - **(SEMVER-MINOR)** **crypto**: subject some algorithms in Web Cryptography on BoringSSL absence (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`3f47a2fb63`](https://github.com/nodejs/node/commit/3f47a2fb63)] - **(SEMVER-MINOR)** **crypto**: add ChaCha20-Poly1305 Web Cryptography algorithm (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`6fcce9058a`](https://github.com/nodejs/node/commit/6fcce9058a)] - **(SEMVER-MINOR)** **crypto**: add subtle.getPublicKey() utility function in Web Cryptography (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`76cde76429`](https://github.com/nodejs/node/commit/76cde76429)] - **(SEMVER-MINOR)** **crypto**: add SHA-3 Web Cryptography digest algorithms (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`247d017501`](https://github.com/nodejs/node/commit/247d017501)] - **(SEMVER-MINOR)** **crypto**: add SHAKE Web Cryptography digest algorithms (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`f4fbcca5ce`](https://github.com/nodejs/node/commit/f4fbcca5ce)] - **(SEMVER-MINOR)** **crypto**: add SubtleCrypto.supports feature detection in Web Cryptography (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`a55382214f`](https://github.com/nodejs/node/commit/a55382214f)] - **(SEMVER-MINOR)** **crypto**: support ML-DSA in Web Cryptography (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`c38988c860`](https://github.com/nodejs/node/commit/c38988c860)] - **crypto**: fix EVPKeyCtxPointer::publicCheck() (Tobias Nießen) [#59471](https://github.com/nodejs/node/pull/59471)
+* \[[`61c3bcdc56`](https://github.com/nodejs/node/commit/61c3bcdc56)] - **(SEMVER-MINOR)** **crypto**: support ML-KEM KeyObject (Filip Skokan) [#59461](https://github.com/nodejs/node/pull/59461)
+* \[[`0821b446fb`](https://github.com/nodejs/node/commit/0821b446fb)] - **deps**: update undici to 7.14.0 (Node.js GitHub Bot) [#59507](https://github.com/nodejs/node/pull/59507)
+* \[[`b3af17c065`](https://github.com/nodejs/node/commit/b3af17c065)] - **deps**: V8: cherry-pick 7b91e3e2cbaf (Milad Fa) [#59485](https://github.com/nodejs/node/pull/59485)
+* \[[`9b69baf146`](https://github.com/nodejs/node/commit/9b69baf146)] - **deps**: V8: cherry-pick 59d52e311bb1 (Milad Fa) [#59485](https://github.com/nodejs/node/pull/59485)
+* \[[`b4f202c2f1`](https://github.com/nodejs/node/commit/b4f202c2f1)] - **doc**: improve `sqlite.backup()` progress/fulfillment documentation (René) [#59598](https://github.com/nodejs/node/pull/59598)
+* \[[`40b217a2f9`](https://github.com/nodejs/node/commit/40b217a2f9)] - **doc**: clarify experimental platform vulnerability policy (Matteo Collina) [#59591](https://github.com/nodejs/node/pull/59591)
+* \[[`cf84fffea5`](https://github.com/nodejs/node/commit/cf84fffea5)] - **doc**: link to `TypedArray.from()` in signature (Aviv Keller) [#59226](https://github.com/nodejs/node/pull/59226)
+* \[[`4bf6ed0bf5`](https://github.com/nodejs/node/commit/4bf6ed0bf5)] - **doc**: fix typos in `environment_variables.md` (PhistucK) [#59536](https://github.com/nodejs/node/pull/59536)
+* \[[`1784c35a49`](https://github.com/nodejs/node/commit/1784c35a49)] - **doc**: add security incident reponse plan (Rafael Gonzaga) [#59470](https://github.com/nodejs/node/pull/59470)
+* \[[`b962560240`](https://github.com/nodejs/node/commit/b962560240)] - **doc**: clarify maxRSS unit in `process.resourceUsage()` (Alex Yang) [#59511](https://github.com/nodejs/node/pull/59511)
+* \[[`e6a6cdb9df`](https://github.com/nodejs/node/commit/e6a6cdb9df)] - **doc**: add missing Zstd strategy constants (RANDRIAMANANTENA Narindra Tiana Annaick) [#59312](https://github.com/nodejs/node/pull/59312)
+* \[[`a6a31cb467`](https://github.com/nodejs/node/commit/a6a31cb467)] - **(SEMVER-MINOR)** **doc**: compress Web Cryptography Algorithm matrix (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`8f8960cfcb`](https://github.com/nodejs/node/commit/8f8960cfcb)] - **doc**: fix the version tls.DEFAULT\_CIPHERS was added (Allon Murienik) [#59247](https://github.com/nodejs/node/pull/59247)
+* \[[`9e76089f1a`](https://github.com/nodejs/node/commit/9e76089f1a)] - **doc**: clarify glob's exclude option behavior (hotpineapple) [#59245](https://github.com/nodejs/node/pull/59245)
+* \[[`dd5f835af7`](https://github.com/nodejs/node/commit/dd5f835af7)] - **doc**: add RafaelGSS as performance strategic lead (Rafael Gonzaga) [#59445](https://github.com/nodejs/node/pull/59445)
+* \[[`2b7a7a525e`](https://github.com/nodejs/node/commit/2b7a7a525e)] - **doc,crypto**: add supported asymmetric key types section (Filip Skokan) [#59492](https://github.com/nodejs/node/pull/59492)
+* \[[`2fafe4c3bb`](https://github.com/nodejs/node/commit/2fafe4c3bb)] - **esm**: link modules synchronously when no async loader hooks are used (Joyee Cheung) [#59519](https://github.com/nodejs/node/pull/59519)
+* \[[`5347c4997a`](https://github.com/nodejs/node/commit/5347c4997a)] - **esm**: show race error message for inner module job race (Joyee Cheung) [#59519](https://github.com/nodejs/node/pull/59519)
+* \[[`b56d8af2fe`](https://github.com/nodejs/node/commit/b56d8af2fe)] - **esm**: sync-ify module translation (Joyee Cheung) [#59453](https://github.com/nodejs/node/pull/59453)
+* \[[`b4a23d6a69`](https://github.com/nodejs/node/commit/b4a23d6a69)] - **http**: trim off brackets from IPv6 addresses with string operations (Krishnadas PC) [#59420](https://github.com/nodejs/node/pull/59420)
+* \[[`6ae202fcdf`](https://github.com/nodejs/node/commit/6ae202fcdf)] - **(SEMVER-MINOR)** **http**: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) [#59315](https://github.com/nodejs/node/pull/59315)
+* \[[`dafee05358`](https://github.com/nodejs/node/commit/dafee05358)] - **(SEMVER-MINOR)** **http2**: add support for raw header arrays in h2Stream.respond() (Tim Perry) [#59455](https://github.com/nodejs/node/pull/59455)
+* \[[`b7ea39d860`](https://github.com/nodejs/node/commit/b7ea39d860)] - **http2**: report sent headers object in client stream dcs (Darshan Sen) [#59419](https://github.com/nodejs/node/pull/59419)
+* \[[`ebe9272dae`](https://github.com/nodejs/node/commit/ebe9272dae)] - **inspector**: initial support websocket inspection (Shima Ryuhei) [#59404](https://github.com/nodejs/node/pull/59404)
+* \[[`b35041c7dc`](https://github.com/nodejs/node/commit/b35041c7dc)] - **inspector**: prevent propagation of promise hooks to noPromise hooks (Shima Ryuhei) [#58841](https://github.com/nodejs/node/pull/58841)
+* \[[`fe7176d7c6`](https://github.com/nodejs/node/commit/fe7176d7c6)] - **lib**: do not modify prototype deprecated asyncResource (encore) (Szymon Łągiewka) [#59518](https://github.com/nodejs/node/pull/59518)
+* \[[`93fc80a1e2`](https://github.com/nodejs/node/commit/93fc80a1e2)] - **(SEMVER-MINOR)** **lib**: refactor kSupportedAlgorithms (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`9a12f71ad9`](https://github.com/nodejs/node/commit/9a12f71ad9)] - **lib**: simplify IPv6 checks in isLoopback() (Krishnadas) [#59375](https://github.com/nodejs/node/pull/59375)
+* \[[`566fb04c82`](https://github.com/nodejs/node/commit/566fb04c82)] - **meta**: update devcontainer to the latest schema (Aviv Keller) [#54347](https://github.com/nodejs/node/pull/54347)
+* \[[`389a24bbff`](https://github.com/nodejs/node/commit/389a24bbff)] - **module**: allow overriding linked requests for a ModuleWrap (Chengzhong Wu) [#59527](https://github.com/nodejs/node/pull/59527)
+* \[[`7880978fe3`](https://github.com/nodejs/node/commit/7880978fe3)] - **module**: correctly detect top-level await in ambiguous contexts (Shima Ryuhei) [#58646](https://github.com/nodejs/node/pull/58646)
+* \[[`99128d9244`](https://github.com/nodejs/node/commit/99128d9244)] - **node-api**: link to other programming language bindings (Chengzhong Wu) [#59516](https://github.com/nodejs/node/pull/59516)
+* \[[`65c870e6cb`](https://github.com/nodejs/node/commit/65c870e6cb)] - **node-api**: clarify enum value ABI stability (Chengzhong Wu) [#59085](https://github.com/nodejs/node/pull/59085)
+* \[[`352d63541a`](https://github.com/nodejs/node/commit/352d63541a)] - **sea**: implement execArgvExtension (Joyee Cheung) [#59560](https://github.com/nodejs/node/pull/59560)
+* \[[`c6e3d5d98d`](https://github.com/nodejs/node/commit/c6e3d5d98d)] - **(SEMVER-MINOR)** **sea**: support execArgv in sea config (Joyee Cheung) [#59314](https://github.com/nodejs/node/pull/59314)
+* \[[`e7084df4db`](https://github.com/nodejs/node/commit/e7084df4db)] - **sqlite**: add sqlite-type symbol for DatabaseSync (Alex Yang) [#59405](https://github.com/nodejs/node/pull/59405)
+* \[[`e2b6bdc640`](https://github.com/nodejs/node/commit/e2b6bdc640)] - **sqlite**: handle ?NNN parameters as positional (Edy Silva) [#59350](https://github.com/nodejs/node/pull/59350)
+* \[[`99e4a12731`](https://github.com/nodejs/node/commit/99e4a12731)] - **sqlite**: avoid useless call to FromMaybe() (Tobias Nießen) [#59490](https://github.com/nodejs/node/pull/59490)
+* \[[`dfd4962e5f`](https://github.com/nodejs/node/commit/dfd4962e5f)] - **src**: enforce assumptions in FIXED\_ONE\_BYTE\_STRING (Tobias Nießen) [#58155](https://github.com/nodejs/node/pull/58155)
+* \[[`93a368df04`](https://github.com/nodejs/node/commit/93a368df04)] - **src**: use simdjson to parse --snapshot-config (Joyee Cheung) [#59473](https://github.com/nodejs/node/pull/59473)
+* \[[`716750fcf8`](https://github.com/nodejs/node/commit/716750fcf8)] - **src**: fix order of CHECK\_NOT\_NULL/dereference (Tobias Nießen) [#59487](https://github.com/nodejs/node/pull/59487)
+* \[[`44a8ecf8d4`](https://github.com/nodejs/node/commit/44a8ecf8d4)] - **src**: assert memory calc for max-old-space-size-percentage (Asaf Federman) [#59460](https://github.com/nodejs/node/pull/59460)
+* \[[`3462b46fca`](https://github.com/nodejs/node/commit/3462b46fca)] - **src**: use simdjson::pad (0hm☘️) [#59391](https://github.com/nodejs/node/pull/59391)
+* \[[`3e1551d845`](https://github.com/nodejs/node/commit/3e1551d845)] - **src**: move shared\_ptr objects in KeyObjectData (Tobias Nießen) [#59472](https://github.com/nodejs/node/pull/59472)
+* \[[`c022c1f85a`](https://github.com/nodejs/node/commit/c022c1f85a)] - **src**: add internal GetOptionsAsFlags (Pietro Marchini) [#59138](https://github.com/nodejs/node/pull/59138)
+* \[[`c0f08454a3`](https://github.com/nodejs/node/commit/c0f08454a3)] - **src**: iterate metadata version entries with std::array (Chengzhong Wu) [#57866](https://github.com/nodejs/node/pull/57866)
+* \[[`f87836f3ae`](https://github.com/nodejs/node/commit/f87836f3ae)] - **src**: internalize `v8::ConvertableToTraceFormat` in traces (Chengzhong Wu) [#57866](https://github.com/nodejs/node/pull/57866)
+* \[[`852b8e46d8`](https://github.com/nodejs/node/commit/852b8e46d8)] - **src**: remove duplicate assignment of `O_EXCL` in node\_constants.cc (Daniel Osvaldo R) [#59049](https://github.com/nodejs/node/pull/59049)
+* \[[`64ffde608f`](https://github.com/nodejs/node/commit/64ffde608f)] - **src**: add Intel CET properties to large\_pages.S (tjuhaszrh) [#59363](https://github.com/nodejs/node/pull/59363)
+* \[[`823dce32ec`](https://github.com/nodejs/node/commit/823dce32ec)] - **src**: update OpenSSL pqc checks (Filip Skokan) [#59436](https://github.com/nodejs/node/pull/59436)
+* \[[`8dc6f5b696`](https://github.com/nodejs/node/commit/8dc6f5b696)] - **(SEMVER-MINOR)** **stream**: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) [#59464](https://github.com/nodejs/node/pull/59464)
+* \[[`b2b8383755`](https://github.com/nodejs/node/commit/b2b8383755)] - **test**: use mustSucceed in test-repl-tab-complete-import (Sohyeon Kim) [#59368](https://github.com/nodejs/node/pull/59368)
+* \[[`e3ad5cc2c6`](https://github.com/nodejs/node/commit/e3ad5cc2c6)] - **test**: skip sea tests on Linux ppc64le (Richard Lau) [#59563](https://github.com/nodejs/node/pull/59563)
+* \[[`f78f47ca5a`](https://github.com/nodejs/node/commit/f78f47ca5a)] - **test**: support standalone env comment in tests (Pietro Marchini) [#59546](https://github.com/nodejs/node/pull/59546)
+* \[[`0e8bc2c7ac`](https://github.com/nodejs/node/commit/0e8bc2c7ac)] - **test**: rename test-net-server-drop-connections-in-cluster.js to -http- (Meghan Denny) [#59532](https://github.com/nodejs/node/pull/59532)
+* \[[`ed339580af`](https://github.com/nodejs/node/commit/ed339580af)] - **test**: lazy-load internalTTy (Pietro Marchini) [#59517](https://github.com/nodejs/node/pull/59517)
+* \[[`fe86bc6da8`](https://github.com/nodejs/node/commit/fe86bc6da8)] - **test**: fix `test-setproctitle` status when `ps` is not available (Antoine du Hamel) [#59523](https://github.com/nodejs/node/pull/59523)
+* \[[`e517792973`](https://github.com/nodejs/node/commit/e517792973)] - **test**: add parseTestMetadata support (Pietro Marchini) [#59503](https://github.com/nodejs/node/pull/59503)
+* \[[`31092972d6`](https://github.com/nodejs/node/commit/31092972d6)] - **test**: update WPT for WebCryptoAPI to ff26d9b307 (Node.js GitHub Bot) [#59497](https://github.com/nodejs/node/pull/59497)
+* \[[`16afd103cc`](https://github.com/nodejs/node/commit/16afd103cc)] - **(SEMVER-MINOR)** **test**: add Web Cryptography wrap/unwrap vectors (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`5598baf34e`](https://github.com/nodejs/node/commit/5598baf34e)] - **(SEMVER-MINOR)** **test**: cleanup test-webcrypto-supports (Filip Skokan) [#59365](https://github.com/nodejs/node/pull/59365)
+* \[[`e7809d6ddb`](https://github.com/nodejs/node/commit/e7809d6ddb)] - **test**: make test-debug-process locale-independent (BCD1me) [#59254](https://github.com/nodejs/node/pull/59254)
+* \[[`ca7856e73c`](https://github.com/nodejs/node/commit/ca7856e73c)] - **test**: mark test-wasi-pthread as flaky (Joyee Cheung) [#59488](https://github.com/nodejs/node/pull/59488)
+* \[[`0ecd82197f`](https://github.com/nodejs/node/commit/0ecd82197f)] - **test**: split test-wasi.js (Joyee Cheung) [#59488](https://github.com/nodejs/node/pull/59488)
+* \[[`0930c218d6`](https://github.com/nodejs/node/commit/0930c218d6)] - **test**: deflake connection refused proxy tests (Joyee Cheung) [#59476](https://github.com/nodejs/node/pull/59476)
+* \[[`7f457f886a`](https://github.com/nodejs/node/commit/7f457f886a)] - **test**: use case-insensitive path checking on Windows in fs.cpSync tests (Joyee Cheung) [#59475](https://github.com/nodejs/node/pull/59475)
+* \[[`37809115f9`](https://github.com/nodejs/node/commit/37809115f9)] - **test**: add missing hasPostData in test-inspector-emit-protocol-event (Shima Ryuhei) [#59412](https://github.com/nodejs/node/pull/59412)
+* \[[`f4722b1672`](https://github.com/nodejs/node/commit/f4722b1672)] - **test**: refactor error checks to use assert.ifError/mustSucceed (Sohyeon Kim) [#59424](https://github.com/nodejs/node/pull/59424)
+* \[[`9ff71a672d`](https://github.com/nodejs/node/commit/9ff71a672d)] - **test**: fix typos (Lee Jiho) [#59330](https://github.com/nodejs/node/pull/59330)
+* \[[`9a7700da62`](https://github.com/nodejs/node/commit/9a7700da62)] - **test**: skip test-watch-mode inspect when no inspector (James M Snell) [#59440](https://github.com/nodejs/node/pull/59440)
+* \[[`e964c4334e`](https://github.com/nodejs/node/commit/e964c4334e)] - **test\_runner**: do not error when getting `fullName` of root context (René) [#59377](https://github.com/nodejs/node/pull/59377)
+* \[[`e076f7857c`](https://github.com/nodejs/node/commit/e076f7857c)] - **test\_runner**: add option to rerun only failed tests (Moshe Atlow) [#59443](https://github.com/nodejs/node/pull/59443)
+* \[[`eb8b1939a4`](https://github.com/nodejs/node/commit/eb8b1939a4)] - **test\_runner**: fix isSkipped check in junit (Sungwon) [#59414](https://github.com/nodejs/node/pull/59414)
+* \[[`4e02ea1c52`](https://github.com/nodejs/node/commit/4e02ea1c52)] - **tools**: update gyp-next to 0.20.3 (Node.js GitHub Bot) [#59603](https://github.com/nodejs/node/pull/59603)
+* \[[`99da7fbe11`](https://github.com/nodejs/node/commit/99da7fbe11)] - **tools**: avoid parsing test files twice (Pietro Marchini) [#59526](https://github.com/nodejs/node/pull/59526)
+* \[[`9a6a8e319b`](https://github.com/nodejs/node/commit/9a6a8e319b)] - **tools**: update coverage GitHub Actions to fixed version (Rich Trott) [#59512](https://github.com/nodejs/node/pull/59512)
+* \[[`8d28236aff`](https://github.com/nodejs/node/commit/8d28236aff)] - **tools**: fix return value of try\_check\_compiler (theanarkh) [#59434](https://github.com/nodejs/node/pull/59434)
+* \[[`52ab64ec3a`](https://github.com/nodejs/node/commit/52ab64ec3a)] - **tools**: bump @eslint/plugin-kit from 0.3.3 to 0.3.4 in /tools/eslint (dependabot\[bot]) [#59271](https://github.com/nodejs/node/pull/59271)
+* \[[`baa22893bb`](https://github.com/nodejs/node/commit/baa22893bb)] - **typings**: add missing URLBinding methods (성우현 | Woohyun Sung) [#59468](https://github.com/nodejs/node/pull/59468)
+* \[[`b68e0d1eca`](https://github.com/nodejs/node/commit/b68e0d1eca)] - **util**: fix error's namespaced node\_modules highlighting using inspect (Ruben Bridgewater) [#59446](https://github.com/nodejs/node/pull/59446)
+* \[[`15ae21b88a`](https://github.com/nodejs/node/commit/15ae21b88a)] - **util**: add some additional error classes to `wellKnownPrototypes` (Mark S. Miller) [#59456](https://github.com/nodejs/node/pull/59456)
+* \[[`c38b7cfa35`](https://github.com/nodejs/node/commit/c38b7cfa35)] - **worker**: fix worker name with \0 (theanarkh) [#59214](https://github.com/nodejs/node/pull/59214)
+* \[[`f54ace694a`](https://github.com/nodejs/node/commit/f54ace694a)] - **worker**: add worker name to report (theanarkh) [#58935](https://github.com/nodejs/node/pull/58935)
+
 <a id="24.6.0"></a>

 ## 2025-08-14, Version 24.6.0 (Current), @RafaelGSS