BackPup/node
1
0 Fork 0
mirror of https://github.com/nodejs/node.git synced 2026-11-09 15:11:11 -05:00
Code Issues Packages Projects Releases Wiki Activity
44,818 Commits 266 Branches 972 Tags
e3f4d6a42ece2643746761fd585d8e86c78ff711
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Joyee CheungandJoyee Cheung e3f4d6a42e deps: V8: backport 1361b2a49d02 
Original commit message:

    [strings] improve array index hash distribution

    Previously, the hashes stored in a Name's raw_hash_field for decimal
    numeric strings (potential array indices) consist of the literal
    integer value along with the length of the string. This means
    consecutive numeric strings can have consecutive hash values, which
    can lead to O(n^2) probing for insertion in the worst case when e.g.
    a non-numeric string happen to land in the these buckets.

    This patch adds a build-time flag v8_enable_seeded_array_index_hash that
    scrambles the 24-bit array-index value stored in a Name's raw_hash_field
    to improve the distribution.

    x ^= x >> kShift; x = (x * m1) & kMask;    // round 1
    x ^= x >> kShift; x = (x * m2) & kMask;    // round 2
    x ^= x >> kShift;                          // finalize

    To decode, apply the same steps with the modular inverses of m1 and m2
    in reverse order.

    x ^= x >> kShift; x = (x * m2_inv) & kMask;    // round 1
    x ^= x >> kShift; x = (x * m1_inv) & kMask;    // round 2
    x ^= x >> kShift;                              // finalize

    where kShift = kArrayIndexValueBits / 2, kMask = kArrayIndexValueMask,
    m1, m2 (both odd) are the lower bits of the rapidhash secrets, m1_inv,
    m2_inv (modular inverses) are precomputed modular inverse of m1 and m2.
    The pre-computed values are appended to the hash_seed ByteArray in
    ReadOnlyRoots and accessed in generated code to reduce overhead.
    In call sites that don't already have access to the seeds, we read them
    from the current isolate group/isolate's read only roots.

    To consolidate the code that encode/decode these hashes, this patch
    adds MakeArrayIndexHash/DecodeArrayIndexFromHashField in C++ and CSA
    that perform seeding/unseeding if enabled, and updates places where
    encoding/decoding of array index is needed to use them.

    Bug: 477515021
    Change-Id: I350afe511951a54c4378396538152cc56565fd55
    Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7564330
    Reviewed-by: Leszek Swirski <leszeks@chromium.org>
    Commit-Queue: Joyee Cheung <joyee@igalia.com>
    Cr-Commit-Position: refs/heads/main@{#105596}

Refs: https://github.com/v8/v8/commit/1361b2a49d020a718dc5495713eae0fa67d697b9
Co-authored-by: Joyee Cheung <joyeec9h3@gmail.com>
Backport-PR-URL: https://github.com/nodejs-private/node-private/pull/833
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: https://github.com/nodejs-private/node-private/pull/809
CVE-ID: CVE-2026-21717
2026-03-22 17:04:57 +01:00
.configurations
build,win: update WinGet configurations to Python 3.14
2026-02-24 08:38:59 +01:00
.devcontainer/base
build: update devcontainer.json to use paired nix env
2026-02-24 08:38:58 +01:00
.github
tools: switch to ARM runners on GHA jobs
2026-02-24 08:39:03 +01:00
android-patches
build: update android-patches/trap-handler.h.patch
2026-02-24 08:38:59 +01:00
benchmark
benchmark: add SQLite benchmarks
2026-02-24 08:39:00 +01:00
deps
deps: V8: backport 1361b2a49d02
2026-03-22 17:04:57 +01:00
doc
2026-03-05, Version 22.22.1 'Jod' (LTS)
2026-03-04 10:24:57 +01:00
lib
permission: include permission check on lib/fs/promises
2026-03-22 17:04:56 +01:00
src
permission: add permission check to realpath.native
2026-03-22 17:04:56 +01:00
test
permission: include permission check on lib/fs/promises
2026-03-22 17:04:56 +01:00
tools
deps: V8: override depot_tools version
2026-03-22 13:05:19 +01:00
typings
typings: add typing for string_decoder
2026-02-24 08:38:55 +01:00
.clang-format
Revert "build: upgrade clang-format to v18"
2024-10-04 10:20:08 +02:00
.cpplint
tools: disable some new cpplint rules before update
2026-02-24 00:37:03 +01:00
.editorconfig
tools: move ESLint to tools/eslint
2024-06-20 14:45:27 +02:00
.gitattributes
build: fix crate vendor file checksums on windows
2026-02-24 08:38:53 +01:00
.gitignore
doc: update devcontainer.json and add documentation
2026-02-24 00:36:29 +01:00
.gitpod.yml
doc,tools: switch to @node-core/utils
2023-09-25 11:48:03 +00:00
.mailmap
meta: add mailmap entry for aditi-1400
2025-08-26 11:22:38 +02:00
.npmrc
meta: add .npmrc with ignore-scripts=true
2025-10-07 17:29:39 +02:00
.nycrc
build: fix not valid json in coverage
2024-10-05 11:29:47 +02:00
.yamllint.yaml
build: extend yamllint configuration
2022-02-14 19:09:26 +01:00
android_configure.py
build: exit on unsupported host OS for Android
2024-06-01 10:55:02 +02:00
android-configure
build: test on Python 3.14
2026-02-17 15:39:33 +01:00
BSDmakefile
build: replace which with command -v
2020-11-19 19:33:28 +01:00
BUILD.gn
build: add GN build files
2023-11-11 09:51:05 +00:00
BUILDING.md
doc: supported toolchain with Visual Studio 2022 only
2026-02-24 08:39:04 +01:00
CHANGELOG.md
2026-03-05, Version 22.22.1 'Jod' (LTS)
2026-03-04 10:24:57 +01:00
CODE_OF_CONDUCT.md
tools: avoid unnecessary escaping in markdown formatter
2021-10-31 09:36:05 -07:00
codecov.yml
build: update gcovr to 7.2 and codecov config
2024-08-05 11:15:46 -03:00
common_node.gypi
build: compile with C++20 support
2024-05-08 09:02:02 +02:00
common.gypi
deps: V8: backport 1361b2a49d02
2026-03-22 17:04:57 +01:00
configure
build: test on Python 3.14
2026-02-17 15:39:33 +01:00
configure.py
tools: dump config.gypi as json
2026-02-24 00:36:59 +01:00
CONTRIBUTING.md
doc, meta: use markdown rather than HTML in CONTRIBUTING.md
2024-06-20 14:40:39 +02:00
eslint.config.mjs
tools: bump the eslint group in /tools/eslint with 6 updates
2025-07-24 20:08:32 +02:00
glossary.md
doc: fix linter issues
2026-02-24 00:36:43 +01:00
GOVERNANCE.md
doc: clarify details of TSC public and private meetings
2025-07-27 20:28:13 +02:00
LICENSE
doc: run license-builder
2026-02-24 08:38:54 +01:00
Makefile
build: fix inconsistent quoting in Makefile
2026-02-24 00:37:13 +01:00
node.gni
build: fix node_use_sqlite for GN builds
2025-08-26 11:22:40 +02:00
node.gyp
src: remove unconditional NAPI_EXPERIMENTAL in node.h
2026-02-24 00:36:26 +01:00
node.gypi
build: fix misplaced comma in ldflags
2026-02-24 08:38:54 +01:00
onboarding.md
doc: fix typos and grammar in BUILDING.md & onboarding.md
2026-02-24 00:37:14 +01:00
pyproject.toml
build: upgrade Python linter ruff, add rules ASYNC,PERF
2026-02-24 00:36:53 +01:00
README.md
doc: restore @ChALkeR to collaborators
2026-02-24 08:39:01 +01:00
SECURITY.md
doc: move Security-Team from TSC to SECURITY
2026-02-24 08:39:01 +01:00
tsconfig.json
lib: fix internalBinding typings
2023-09-23 10:48:34 +00:00
unofficial.gni
build: fix node_use_sqlite for GN builds
2025-08-26 11:22:40 +02:00
vcbuild.bat
tools: fix vcbuild lint-js-build
2026-02-24 08:38:56 +01:00

README.md

Node.js

Node.js is an open-source, cross-platform JavaScript runtime environment.

For information on using Node.js, see the Node.js website.

The Node.js project uses an open governance model. The OpenJS Foundation provides support for the project.

Contributors are expected to act in a collaborative manner to move the project forward. We encourage the constructive exchange of contrary opinions and compromise. The TSC reserves the right to limit or block contributors who repeatedly act in ways that discourage, exhaust, or otherwise negatively affect other participants.

This project has a Code of Conduct.

Table of contents

Support

Looking for help? Check out the instructions for getting support.

Release types

  • Current: Under active development. Code for the Current release is in the branch for its major version number (for example, v22.x). Node.js releases a new major version every 6 months, allowing for breaking changes. This happens in April and October every year. Releases appearing each October have a support life of 8 months. Releases appearing each April convert to LTS (see below) each October.
  • LTS: Releases that receive Long Term Support, with a focus on stability and security. Every even-numbered major version will become an LTS release. LTS releases receive 12 months of Active LTS support and a further 18 months of Maintenance. LTS release lines have alphabetically-ordered code names, beginning with v4 Argon. There are no breaking changes or feature additions, except in some special circumstances.
  • Nightly: Code from the Current branch built every 24-hours when there are changes. Use with caution.

Current and LTS releases follow semantic versioning. A member of the Release Team signs each Current and LTS release. For more information, see the Release README.

Download

Binaries, installers, and source tarballs are available at https://nodejs.org/en/download/.

Current and LTS releases

https://nodejs.org/download/release/

The latest directory is an alias for the latest Current release. The latest-codename directory is an alias for the latest release from an LTS line. For example, the latest-hydrogen directory contains the latest Hydrogen (Node.js 18) release.

Nightly releases

https://nodejs.org/download/nightly/

Each directory and filename includes the version (e.g., v22.0.0), followed by the UTC date (e.g., 20240424 for April 24, 2024), and the short commit SHA of the HEAD of the release (e.g., ddd0a9e494). For instance, a full directory name might look like v22.0.0-nightly20240424ddd0a9e494.

API documentation

Documentation for the latest Current release is at https://nodejs.org/api/. Version-specific documentation is available in each release directory in the docs subdirectory. Version-specific documentation is also at https://nodejs.org/download/docs/.

Verifying binaries

Download directories contain a SHASUMS256.txt.asc file with SHA checksums for the files and the releaser PGP signature.

You can get a trusted keyring from nodejs/release-keys, e.g. using curl:

curl -fsLo "/path/to/nodejs-keyring.kbx" "https://github.com/nodejs/release-keys/raw/HEAD/gpg/pubring.kbx"

Alternatively, you can import the releaser keys in your default keyring, see Release keys for commands to how to do that.

Then, you can verify the files you've downloaded locally (if you're using your default keyring, pass --keyring="${GNUPGHOME:-~/.gnupg}/pubring.kbx"):

curl -fsO "https://nodejs.org/dist/${VERSION}/SHASUMS256.txt.asc" \
&& gpgv --keyring="/path/to/nodejs-keyring.kbx" --output SHASUMS256.txt < SHASUMS256.txt.asc \
&& shasum --check SHASUMS256.txt --ignore-missing

Building Node.js

See BUILDING.md for instructions on how to build Node.js from source and a list of supported platforms.

Security

For information on reporting security vulnerabilities in Node.js, see SECURITY.md.

Contributing to Node.js

Current project team members

For information about the governance of the Node.js project, see GOVERNANCE.md.

TSC (Technical Steering Committee)

TSC voting members

TSC regular members

TSC emeriti members

TSC emeriti members

Collaborators

Emeriti

Collaborator emeriti

Collaborators follow the Collaborator Guide in maintaining the Node.js project.

Triagers

Triagers follow the Triage Guide when responding to new issues.

Release keys

Primary GPG keys for Node.js Releasers (some Releasers sign with subkeys):

You can use the keyring the project maintains at https://github.com/nodejs/release-keys/raw/refs/heads/main/gpg-only-active-keys/pubring.kbx. Alternatively, you can import them from a public key server. Have in mind that the project cannot guarantee the availability of the server nor the keys on that server.

gpg --keyserver hkps://keys.openpgp.org --recv-keys 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 # Antoine du Hamel
gpg --keyserver hkps://keys.openpgp.org --recv-keys DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 # Juan José Arboleda
gpg --keyserver hkps://keys.openpgp.org --recv-keys CC68F5A3106FF448322E48ED27F5E38D5B0A215F # Marco Ippolito
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 # Michaël Zasso
gpg --keyserver hkps://keys.openpgp.org --recv-keys 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 # Rafael Gonzaga
gpg --keyserver hkps://keys.openpgp.org --recv-keys C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C # Richard Lau
gpg --keyserver hkps://keys.openpgp.org --recv-keys 108F52B48DB57BB0CC439B2997B01419BD92F80A # Ruy Adorno
gpg --keyserver hkps://keys.openpgp.org --recv-keys A363A499291CBBC940DD62E41F10027AF002F8B0 # Ulises Gascón

See Verifying binaries for how to use these keys to verify a downloaded file.

Other keys used to sign some previous releases

The project maintains a keyring able to verify all past releases of Node.js at https://github.com/nodejs/release-keys/raw/refs/heads/main/gpg/pubring.kbx.

Security release stewards

When possible, the commitment to take slots in the security release steward rotation is made by companies in order to ensure individuals who act as security stewards have the support and recognition from their employer to be able to prioritize security releases. Security release stewards manage security releases on a rotation basis as outlined in the security release process.

License

Node.js is licensed under the MIT License.

This project also depends on external libraries that may use different open-source licenses. For a complete list of included licenses, please see the LICENSE file.

If you are contributing documentation or source changes, please ensure your additions comply with the project’s license guidelines.

Reference in new issue View Git Blame Copy Permalink
S
Description
No description provided
Readme MIT, BSD-2-Clause, Apache-2.0, MIT-0, Zlib, ISC, BSD-3-Clause
3.5 GiB
0 Stars 1 Watchers 0 Forks
Languages
JavaScript 65.4%
C++ 22.6%
Python 8.4%
C 2.1%
HTML 0.5%
Other 0.8%