Commit Graph
68 Commits
Author SHA1 Message Date
Filip Skokan dc7838c191 tools: add an OpenSSL FIPS build to test-shared.yml
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/64960
Fixes: https://github.com/nodejs/node/issues/48379
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Aviv Keller <me@aviv.sh>
2026-08-05 15:38:12 +00:00
Antoine du Hamel 339062296e tools: store "default" OpenSSL version in openssl-matrix.nix
To help with automating keeping in sync with the bundled version.

Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/64962
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Aviv Keller <me@aviv.sh>
2026-08-04 16:34:32 +00:00
Filip Skokan 565c3daebf crypto: support loading private keys through STORE loaders
Accept WHATWG URL objects in private-key inputs and load referenced keys
through OpenSSL STORE loaders. Pass optional property queries and
passphrases while preserving provider-owned EVP_PKEY objects for
ordinary KeyObject and CryptoKey operations.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/63949
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
2026-08-02 20:18:09 +00:00
Chengzhong Wu 83e5d82dd7 build: run perfetto build and test on GHA
Signed-off-by: Chengzhong Wu <cwu631@bloomberg.net>
PR-URL: https://github.com/nodejs/node/pull/64721
Fixes: https://github.com/nodejs/diagnostics/issues/654
Refs: https://github.com/nodejs/node/pull/64565
Reviewed-By: Aviv Keller <me@aviv.sh>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
2026-08-02 14:31:03 +00:00
Node.js GitHub Bot 1b0b7ae7c9 tools: bump nixpkgs pins
- nixpkgs-unstable to bcdf747749ad31ab043d6341a18699a8b9b62ef0
- nixpkgs-26.05-darwin to 329c3d2af6d1b618705150ea39f72c15eb4e613e

PR-URL: https://github.com/nodejs/node/pull/64747
Reviewed-By: Aviv Keller <me@aviv.sh>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2026-08-02 10:56:28 +00:00
Node.js GitHub Bot c76aff4e0a tools: update nixpkgs-unstable to 20535e48e12c86043b577b8518234ff5dbb
PR-URL: https://github.com/nodejs/node/pull/64589
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
2026-07-21 06:37:50 +00:00
Node.js GitHub Bot 56387dda0f tools: update nixpkgs pins
- Unstable to 2065d53daf2c81ed7b57947e2e56682ded62723a
- 26.05 to 572a2c2b6faebd71246e3162e4217d7ca63a9300

PR-URL: https://github.com/nodejs/node/pull/64463
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-07-14 21:16:28 +00:00
Antoine du Hamel 71812d1b43 tools: pin to nixpkgs-26.05-darwin on Intel Macs
Unstable channel no longer supports Intel architecture for macOS. We can
use the 26.05 channel to keep testing on that platform for a little
longer.

Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/64210
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
2026-07-12 18:10:37 +00:00
Node.js GitHub Bot 72b8d91212 tools: update nixpkgs-unstable to d33369954a67ae3322177dc9a3d56409291
PR-URL: https://github.com/nodejs/node/pull/64298
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
2026-07-07 01:09:22 +00:00
Node.js GitHub Bot 0c59d78639 tools: update nixpkgs-unstable to 89570f24e97e614aa34aa9ab1c927b6578a
PR-URL: https://github.com/nodejs/node/pull/64183
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-06-30 01:26:32 +00:00
Antoine du Hamel 9ad22d10c9 tools: add GHA benchmark runner
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/60293
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
2026-06-29 12:07:18 +00:00
Node.js GitHub Bot 1434a079e1 tools: update nixpkgs-unstable to 3e41b24abd260e8f71dbe2f5737d24122f9
PR-URL: https://github.com/nodejs/node/pull/64041
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-06-23 02:04:02 +00:00
Node.js GitHub Bot e3a1c12f81 tools: update nixpkgs-unstable to 49a4bd0573c376468dd7996ddb6f9fa31d8
PR-URL: https://github.com/nodejs/node/pull/63902
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
2026-06-20 12:07:19 +00:00
Node.js GitHub Bot 7378f014ae tools: update nixpkgs-unstable to cbb5cf358f50aa6acc9efd6113b7bcfbc35
PR-URL: https://github.com/nodejs/node/pull/63778
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2026-06-09 02:07:07 +00:00
Node.js GitHub Bot 330f44f29c tools: update nixpkgs-unstable to e9a7635a57597d9754eccebdfc7045e6c86
PR-URL: https://github.com/nodejs/node/pull/63671
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2026-06-02 01:32:11 +00:00
Antoine du Hamel b9e2346a1d tools: refine v8.nix source definition
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/63625
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-05-30 16:39:48 +00:00
Node.js GitHub Bot 73c592be2f tools: update nixpkgs-unstable to 3d8f0f3f72a6cd4d93d0ad13203f2ea1cb7
PR-URL: https://github.com/nodejs/node/pull/63528
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-05-26 02:03:07 +00:00
Antoine du Hamel 11ea171f82 tools: mock some Python utils in v8.nix to reuse builds
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/63454
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-05-22 19:45:33 +00:00
Node.js GitHub Bot 2ebf53330d tools: update nixpkgs-unstable to d233902339c02a9c334e7e593de68855ad2
PR-URL: https://github.com/nodejs/node/pull/63376
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-05-19 01:16:42 +00:00
Node.js GitHub Bot a37c61d1c2 tools: update nixpkgs-unstable to b3da656039dc7a6240f27b2ef8cc6a3ef3b
PR-URL: https://github.com/nodejs/node/pull/63218
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Juan José Arboleda <soyjuanarbol@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-05-12 01:19:14 +00:00
Filip Skokan 1a02250a16 tools: add boringssl to tools/nix/openssl-matrix.nix
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/63206
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2026-05-11 15:36:56 +00:00
Node.js GitHub Bot 711c022416 tools: update nixpkgs-unstable to c6d65881c5624c9cae5ea6cedef24699b0c
PR-URL: https://github.com/nodejs/node/pull/63091
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
2026-05-05 01:47:39 +00:00
Antoine du Hamel d179c7ebca tools: migrate from openssl-matrix.json to openssl-matrix.nix
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/63036
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-05-01 15:33:37 +00:00
Tim Perry 4a32c00fb8 deps: fix integration issues with the latest nghttp2
This is a set of src & tests fixes for nghttp2 due to changes in
v1.67.0+ which require a selection of changes to how we handle
low-level protocol errors when using the latest versions of nghttp2,
changing both some src error handling and updating some tests to match.

Signed-off-by: Tim Perry <pimterry@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/62891
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2026-04-29 12:30:01 +00:00
Node.js GitHub Bot 03c62b1eda tools: update nixpkgs-unstable to 01fbdeef22b76df85ea168fbfe1bfd9e636
PR-URL: https://github.com/nodejs/node/pull/62963
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-04-28 01:49:41 +00:00
Filip Skokan 0f684239c7 tools: add non-default OpenSSL versions to the test-shared workflow
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/62862
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2026-04-26 02:54:37 +00:00
Node.js GitHub Bot 3e32a132c7 tools: update nixpkgs-unstable to ab72be9733b41190ea34f1422a3e4e243ed
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/62821
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2026-04-21 07:13:49 +00:00
Antoine du Hamel aacf7501ce tools: use upstream version of OpenSSL in test-shared
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/62679
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
2026-04-18 09:10:01 +00:00
Antoine du Hamel a0160a858d tools: fix --shared-ffi compilation on macOS
PR-URL: https://github.com/nodejs/node/pull/62737
Refs: https://github.com/NixOS/nixpkgs/blob/13043924aaa7375ce482ebe2494338e058282925/pkgs/top-level/all-packages.nix#L6695-L6698
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Paolo Insogna <paolo@cowtech.it>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
2026-04-14 19:21:20 +00:00
Node.js GitHub Bot e900f3b549 tools: update nixpkgs-unstable to 13043924aaa7375ce482ebe2494338e0582
PR-URL: https://github.com/nodejs/node/pull/62700
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
2026-04-14 19:21:08 +00:00
cjihrigandPaolo Insogna d0fa608c07 lib,src,test,doc: add node:ffi module
PR-URL: https://github.com/nodejs/node/pull/62072
Co-authored-by: Paolo Insogna <paolo@cowtech.it>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Bryan English <bryan@bryanenglish.com>
2026-04-14 10:44:30 +01:00
Antoine du Hamel de5644cba8 tools: make v8.nix more stable
If we only pass to the V8 builders the dependencies it actually needs,
we can avoid rebuilding the same version of V8 just because an unrelated
Node.js dependency has been updated.

PR-URL: https://github.com/nodejs/node/pull/62508
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
2026-04-10 14:34:30 +00:00
Node.js GitHub Bot 511a57a179 tools: update nixpkgs-unstable to a6522db5b947cd7026a40d02acc3ca26136
PR-URL: https://github.com/nodejs/node/pull/62596
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-04-07 01:39:04 +00:00
Node.js GitHub Bot 6a84d4a17c tools: update nixpkgs-unstable to 832efc09b4caf6b4569fbf9dc01bec3082a
PR-URL: https://github.com/nodejs/node/pull/62486
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-03-31 01:34:47 +00:00
Node.js GitHub Bot a98d9f6ad7 tools: update nixpkgs-unstable to 9cf7092bdd603554bd8b63c216e8943cf9b
PR-URL: https://github.com/nodejs/node/pull/62383
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2026-03-24 01:20:09 +00:00
Antoine du Hamel 3db22062cf tools: fix timeout errors in lint-nix job
PR-URL: https://github.com/nodejs/node/pull/62265
Fixes: https://github.com/nodejs/node/issues/62219
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
2026-03-17 16:36:20 +00:00
Node.js GitHub Bot f6d02af01f tools: update nixpkgs-unstable to f82ce7af0b79ac154b12e27ed800aeb9741
PR-URL: https://github.com/nodejs/node/pull/62258
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
2026-03-17 00:59:39 +00:00
Node.js GitHub Bot 5b5f069a27 tools: bump nixpkgs-unstable pin to e38213b91d3786389a446dfce4ff5a8aaf6
PR-URL: https://github.com/nodejs/node/pull/62052
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
2026-03-08 19:05:07 +00:00
Antoine du Hamel 48c208fe66 build: do not depend on V8 deps on --without-bundled-v8 builds
PR-URL: https://github.com/nodejs/node/pull/62033
Reviewed-By: Richard Lau <richard.lau@ibm.com>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
2026-03-03 17:33:54 +01:00
Node.js GitHub Bot 13eb80f3b7 tools: update nixpkgs-unstable to d1c15b7d5806069da59e819999d70e1cec0
PR-URL: https://github.com/nodejs/node/pull/61931
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-02-24 01:23:23 +00:00
Antoine du Hamel d5279e5157 tools: cache V8 build on test-shared workflow
This commit makes the CI use the Nix/Cachix cache rather than the
sccache one for building V8 and its dependencies. This should speed up
the average test-shared build time and reduce the stress on the GHA
binary cache – at the expense of slower builds when touching a file used
to building V8.

PR-URL: https://github.com/nodejs/node/pull/61860
Refs: https://github.com/nodejs/node/issues/61436
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
2026-02-19 07:35:21 +00:00
Node.js GitHub Bot 4d1557a744 tools: update nixpkgs-unstable to 2343bbb58f99267223bc2aac4fc9ea301a1
PR-URL: https://github.com/nodejs/node/pull/61831
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
2026-02-17 01:25:06 +00:00
Node.js GitHub Bot ecd979c95a tools: update nixpkgs-unstable to ae67888ff7ef9dff69b3cf0cc0fbfbcd3a7
PR-URL: https://github.com/nodejs/node/pull/61733
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-02-10 01:42:39 +00:00
Antoine du Hamel 36ca6275c7 tools: test --shared-merve in test-shared workflow
PR-URL: https://github.com/nodejs/node/pull/61649
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
2026-02-05 08:48:27 +00:00
Antoine du Hamel bb7c845936 tools: update OpenSSL to 3.5.5 in test-shared
PR-URL: https://github.com/nodejs/node/pull/61551
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-02-04 10:01:43 +00:00
Node.js GitHub Bot 7de56bdee2 tools: update nixpkgs-unstable to 6308c3b21396534d8aaeac46179c14c439a
PR-URL: https://github.com/nodejs/node/pull/61606
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-02-03 01:24:00 +00:00
Antoine du Hamel ca3d4e0cd3 build: add --shared-lief configure flag
PR-URL: https://github.com/nodejs/node/pull/61536
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
2026-01-28 22:29:05 +01:00
Antoine du Hamel 150d154bf1 tools: move Quic dependencies behind ad-hoc flag
Quic is now behind `--experimental-quic` build flag, its dependencies
should be included only if the user opts-in.

PR-URL: https://github.com/nodejs/node/pull/61446
Refs: https://github.com/nodejs/node/commit/853277a9e22a88307ca7b9fde0025635e368253c
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
2026-01-27 22:20:16 +00:00
Node.js GitHub Bot e33ce7a6fe tools: update nixpkgs-unstable to ab9fbbcf4858bd6d40ba2bbec37ceb4ab6e
PR-URL: https://github.com/nodejs/node/pull/61513
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2026-01-27 00:49:32 +00:00
Antoine du Hamel 9e201e61fd tools: copyedit Nix files
PR-URL: https://github.com/nodejs/node/pull/61447
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
2026-01-22 00:00:53 +00:00