lib: refactor internal webidl converters by panva · Pull Request #62979 · nodejs/node

panva · 2026-04-26T21:01:09Z

Rework lib/internal/webidl.js into a documented shared converter module that follows the Web IDL conversion algorithms more closely.

Improvements:

Add documented converters and helper factories for primitive values, dictionaries, enums, sequences, interfaces, required arguments, integers, Uint8Array, and BufferSource.
Move WebCrypto onto the shared converters, while keeping compatibility wrappers for its existing BufferSource and BigInteger behavior.
Use shared converters from Blob, Performance, Web Locks, and structured clone option handling.
Add benchmarks for ConvertToInt and WebCrypto Web IDL converter hot paths.
Add focused tests for core converters, WebCrypto converters, integer conversion, and buffer source behavior.

Fixes:

Make the shared BufferSource and Uint8Array converters reject resizable ArrayBuffer and growable SharedArrayBuffer backing stores unless explicitly allowed. WebCrypto preserves its legacy resizable backing-store behavior through compatibility wrappers until a semver-major follow-up can opt in to the stricter behavior.
Use Web IDL ToNumber and ToString behavior for BigInt, Symbol, and object primitive conversion.
Use exact BigInt modulo for 64-bit ConvertToInt wrapping and document the final Number approximation behavior.
Normalize mathematical modulo results to +0 where Web IDL requires it.
Process inherited dictionaries in least-derived to most-derived order, sorting members only within each dictionary level.
Use IteratorComplete truthiness for sequence conversion.
Cover detached buffers, resizable-backed views, growable-backed views, cross-realm buffer sources, mutation-after-call behavior, inherited dictionary member order, and sequence iterator completion behavior.

Benchmark(s)

nodejs-github-bot · 2026-04-26T21:01:14Z

Review requested:

@nodejs/crypto
@nodejs/web-standards

codecov · 2026-04-27T00:01:11Z

Codecov Report

❌ Patch coverage is 99.33086% with 9 lines in your changes missing coverage. Please review.
✅ Project coverage is 89.71%. Comparing base (25f80fb) to head (055016f).
⚠️ Report is 6 commits behind head on main.

Files with missing lines	Patch %	Lines
lib/internal/crypto/webidl.js	98.92%	5 Missing ⚠️
lib/internal/webidl.js	99.53%	4 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #62979      +/-   ##
==========================================
+ Coverage   89.65%   89.71%   +0.05%     
==========================================
  Files         712      712              
  Lines      220822   221266     +444     
  Branches    42373    42416      +43     
==========================================
+ Hits       197985   198498     +513     
+ Misses      14661    14578      -83     
- Partials     8176     8190      +14

Files with missing lines	Coverage Δ
lib/internal/blob.js	`99.44% <100.00%> (+<0.01%)`	⬆️
lib/internal/locks.js	`94.39% <100.00%> (ø)`
lib/internal/perf/performance.js	`93.54% <100.00%> (+0.05%)`	⬆️
lib/internal/worker/js_transferable.js	`98.56% <100.00%> (+0.01%)`	⬆️
lib/internal/webidl.js	`99.43% <99.53%> (+2.70%)`	⬆️
lib/internal/crypto/webidl.js	`99.34% <98.92%> (+0.94%)`	⬆️

... and 45 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

panva · 2026-04-27T08:30:13Z

i'm nearing the end of what i can optimize on the hot paths, just one more fixup then i'll do a final benchmark

panva · 2026-04-27T13:51:56Z

Benchmark CI: https://ci.nodejs.org/view/Node.js%20benchmark/job/benchmark-node-micro-benchmarks/1842

                                                                                         confidence improvement accuracy (*)     (**)    (***)
misc/webcrypto-webidl.js n=1000000 op='normalizeAlgorithm-dict'                                 ***     80.70 %       ±1.24%   ±1.66%   ±2.16%
misc/webcrypto-webidl.js n=1000000 op='normalizeAlgorithm-string'                               ***     57.96 %       ±0.77%   ±1.03%   ±1.36%
misc/webcrypto-webidl.js n=1000000 op='webidl-algorithm-identifier-object'                              -0.98 %       ±3.94%   ±5.27%   ±6.91%
misc/webcrypto-webidl.js n=1000000 op='webidl-algorithm-identifier-string'                              -5.16 %       ±5.97%   ±8.01%  ±10.55%
misc/webcrypto-webidl.js n=1000000 op='webidl-dict-enforce-range'                               ***     13.85 %       ±1.02%   ±1.37%   ±1.81%
misc/webcrypto-webidl.js n=1000000 op='webidl-dict-ensure-sha'                                  ***    170.12 %       ±1.38%   ±1.85%   ±2.45%
misc/webcrypto-webidl.js n=1000000 op='webidl-dict-null'                                        ***    -62.11 %       ±5.31%   ±7.13%   ±9.43%
misc/webcrypto-webidl.js n=1000000 op='webidl-dict'                                             ***     15.13 %       ±0.62%   ±0.83%   ±1.08%
misc/webidl-buffer-source.js n=1000000 input='arraybuffer'                                        *     -4.96 %       ±3.99%   ±5.32%   ±6.92%
misc/webidl-buffer-source.js n=1000000 input='bigint64array'                                             1.45 %       ±5.46%   ±7.27%   ±9.47%
misc/webidl-buffer-source.js n=1000000 input='biguint64array'                                            1.86 %       ±4.37%   ±5.83%   ±7.60%
misc/webidl-buffer-source.js n=1000000 input='buffer'                                                   -0.12 %       ±3.25%   ±4.32%   ±5.63%
misc/webidl-buffer-source.js n=1000000 input='dataview'                                         ***     -8.94 %       ±3.94%   ±5.24%   ±6.83%
misc/webidl-buffer-source.js n=1000000 input='float16array'                                              1.28 %       ±3.69%   ±4.92%   ±6.41%
misc/webidl-buffer-source.js n=1000000 input='float32array'                                             -1.30 %       ±3.71%   ±4.93%   ±6.42%
misc/webidl-buffer-source.js n=1000000 input='float64array'                                              1.09 %       ±5.30%   ±7.05%   ±9.17%
misc/webidl-buffer-source.js n=1000000 input='int16array'                                                0.21 %       ±5.04%   ±6.74%   ±8.86%
misc/webidl-buffer-source.js n=1000000 input='int32array'                                               -1.84 %       ±4.47%   ±5.95%   ±7.76%
misc/webidl-buffer-source.js n=1000000 input='int8array'                                                 1.56 %       ±3.78%   ±5.03%   ±6.55%
misc/webidl-buffer-source.js n=1000000 input='uint16array'                                               1.07 %       ±4.19%   ±5.59%   ±7.29%
misc/webidl-buffer-source.js n=1000000 input='uint32array'                                               0.09 %       ±5.04%   ±6.73%   ±8.79%
misc/webidl-buffer-source.js n=1000000 input='uint8array'                                               -1.34 %       ±5.15%   ±6.87%   ±8.98%
misc/webidl-buffer-source.js n=1000000 input='uint8clampedarray'                                        -2.39 %       ±3.98%   ±5.30%   ±6.91%
misc/webidl-convert-to-int.js n=1000000 input='clamp' converter='byte'                          ***   2364.33 %      ±37.30%  ±50.27%  ±66.73%
misc/webidl-convert-to-int.js n=1000000 input='clamp' converter='long long'                     ***    910.48 %      ±24.25%  ±32.68%  ±43.38%
misc/webidl-convert-to-int.js n=1000000 input='clamp' converter='octet'                         ***   1871.53 %      ±36.50%  ±49.19%  ±65.31%
misc/webidl-convert-to-int.js n=1000000 input='clamp' converter='unsigned long'                 ***    697.51 %      ±12.22%  ±16.47%  ±21.85%
misc/webidl-convert-to-int.js n=1000000 input='clamp' converter='unsigned short'                ***    680.33 %      ±13.68%  ±18.43%  ±24.47%
misc/webidl-convert-to-int.js n=1000000 input='enforce-range' converter='byte'                  ***    789.35 %      ±33.50%  ±45.15%  ±59.93%
misc/webidl-convert-to-int.js n=1000000 input='enforce-range' converter='long long'             ***    817.08 %      ±16.35%  ±22.03%  ±29.24%
misc/webidl-convert-to-int.js n=1000000 input='enforce-range' converter='octet'                 ***    267.04 %       ±5.89%   ±7.86%  ±10.27%
misc/webidl-convert-to-int.js n=1000000 input='enforce-range' converter='unsigned long'         ***    239.33 %       ±5.71%   ±7.63%   ±9.99%
misc/webidl-convert-to-int.js n=1000000 input='enforce-range' converter='unsigned short'        ***    228.15 %       ±8.52%  ±11.40%  ±14.96%
misc/webidl-convert-to-int.js n=1000000 input='fractional' converter='byte'                     ***   3303.13 %     ±155.26% ±209.25% ±277.80%
misc/webidl-convert-to-int.js n=1000000 input='fractional' converter='long long'                ***   3554.14 %     ±130.83% ±176.32% ±234.09%
misc/webidl-convert-to-int.js n=1000000 input='fractional' converter='octet'                    ***   2316.22 %      ±29.23%  ±39.39%  ±52.29%
misc/webidl-convert-to-int.js n=1000000 input='fractional' converter='unsigned long'            ***   2253.50 %      ±46.15%  ±62.20%  ±82.57%
misc/webidl-convert-to-int.js n=1000000 input='fractional' converter='unsigned short'           ***   2028.85 %      ±43.02%  ±57.98%  ±76.98%
misc/webidl-convert-to-int.js n=1000000 input='integer' converter='byte'                        ***   3904.02 %      ±26.77%  ±36.07%  ±47.89%
misc/webidl-convert-to-int.js n=1000000 input='integer' converter='long long'                   ***   4202.53 %      ±39.36%  ±53.04%  ±70.42%
misc/webidl-convert-to-int.js n=1000000 input='integer' converter='octet'                       ***   2569.17 %      ±50.27%  ±67.75%  ±89.95%
misc/webidl-convert-to-int.js n=1000000 input='integer' converter='unsigned long'               ***   2550.93 %      ±39.27%  ±52.93%  ±70.27%
misc/webidl-convert-to-int.js n=1000000 input='integer' converter='unsigned short'              ***   2447.31 %      ±33.04%  ±44.52%  ±59.11%
misc/webidl-convert-to-int.js n=1000000 input='object' converter='byte'                         ***    662.03 %      ±17.80%  ±23.99%  ±31.85%
misc/webidl-convert-to-int.js n=1000000 input='object' converter='long long'                    ***    668.98 %      ±14.18%  ±19.11%  ±25.37%
misc/webidl-convert-to-int.js n=1000000 input='object' converter='octet'                        ***    408.93 %       ±8.99%  ±12.11%  ±16.07%
misc/webidl-convert-to-int.js n=1000000 input='object' converter='unsigned long'                ***    403.11 %       ±7.30%   ±9.83%  ±13.04%
misc/webidl-convert-to-int.js n=1000000 input='object' converter='unsigned short'               ***    400.87 %       ±6.88%   ±9.27%  ±12.30%
misc/webidl-convert-to-int.js n=1000000 input='wrap' converter='byte'                           ***    736.95 %      ±29.07%  ±39.18%  ±52.01%
misc/webidl-convert-to-int.js n=1000000 input='wrap' converter='long long'                      ***    217.47 %       ±4.32%   ±5.82%   ±7.72%
misc/webidl-convert-to-int.js n=1000000 input='wrap' converter='octet'                          ***    481.05 %      ±13.79%  ±18.58%  ±24.66%
misc/webidl-convert-to-int.js n=1000000 input='wrap' converter='unsigned long'                  ***    473.76 %      ±20.60%  ±27.77%  ±36.86%
misc/webidl-convert-to-int.js n=1000000 input='wrap' converter='unsigned short'                 ***    491.65 %      ±27.24%  ±36.71%  ±48.74%

Be aware that when doing many comparisons the risk of a false-positive
result increases. In this case, there are 53 comparisons, you can thus
expect the following amount of false-positive results:
  2.65 false positives, when considering a   5% risk acceptance (*, **, ***),
  0.53 false positives, when considering a   1% risk acceptance (**, ***),
  0.05 false positives, when considering a 0.1% risk acceptance (***)

panva · 2026-04-27T20:57:11Z

(just a rebase, no changes)

mcollina · 2026-04-29T15:35:41Z

@KhafraDev should we make an effort to build something that can be reused by node.js core and undici?

panva · 2026-04-29T15:37:29Z

@KhafraDev should we make an effort to build something that can be reused by node.js core and undici?

I plan on starting exactly that.

KhafraDev · 2026-04-29T16:08:32Z

I'm not sure, I'm not too interested in adding a dependency to undici and both have different requirements. In undici we don't care about primordials, node does. Node implements different specs than undici, so each platform would still have to implement their own converters (the core is easy to implement relatively speaking).

https://www.npmjs.com/package/webidl-conversions

panva · 2026-04-29T19:45:37Z

@KhafraDev I'm not sure what Matteo had in mind but i had node:webidl on mine, which would be available to undici, rather than a dependency we have to wire in to both node and undici. Start off with converters that both undici and node's core uses + dictionary, enum, interface, sequence. The basics.

Nevertheless, that's probably for another issue's discussion. At this point here i'm looking for reviewers to make node's webidls better and faster.

nodejs-github-bot · 2026-05-04T15:21:48Z

Landed in ff10199

Rework lib/internal/webidl.js into a documented shared converter module that follows the Web IDL conversion algorithms more closely. Improvements: - Add documented converters and helper factories for primitive values, dictionaries, enums, sequences, interfaces, required arguments, integers, `Uint8Array`, and `BufferSource`. - Move WebCrypto onto the shared converters, while keeping compatibility wrappers for its existing `BufferSource` and `BigInteger` behavior. - Use shared converters from Blob, Performance, Web Locks, and structured clone option handling. - Add benchmarks for `ConvertToInt` and WebCrypto Web IDL converter hot paths. - Add focused tests for core converters, WebCrypto converters, integer conversion, and buffer source behavior. Fixes: - Make the shared `BufferSource` and `Uint8Array` converters reject resizable `ArrayBuffer` and growable `SharedArrayBuffer` backing stores unless explicitly allowed. WebCrypto preserves its legacy resizable backing-store behavior through compatibility wrappers until a semver-major follow-up can opt in to the stricter behavior. - Use Web IDL `ToNumber` and `ToString` behavior for BigInt, Symbol, and object primitive conversion. - Use exact BigInt modulo for 64-bit `ConvertToInt` wrapping and document the final Number approximation behavior. - Normalize mathematical modulo results to `+0` where Web IDL requires it. - Process inherited dictionaries in least-derived to most-derived order, sorting members only within each dictionary level. - Use `IteratorComplete` truthiness for sequence conversion. - Cover detached buffers, resizable-backed views, growable-backed views, cross-realm buffer sources, mutation-after-call behavior, inherited dictionary member order, and sequence iterator completion behavior. Signed-off-by: Filip Skokan <panva.ip@gmail.com> PR-URL: #62979 Reviewed-By: Сковорода Никита Андреевич <chalkerx@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

Rework lib/internal/webidl.js into a documented shared converter module that follows the Web IDL conversion algorithms more closely. Improvements: - Add documented converters and helper factories for primitive values, dictionaries, enums, sequences, interfaces, required arguments, integers, `Uint8Array`, and `BufferSource`. - Move WebCrypto onto the shared converters, while keeping compatibility wrappers for its existing `BufferSource` and `BigInteger` behavior. - Use shared converters from Blob, Performance, Web Locks, and structured clone option handling. - Add benchmarks for `ConvertToInt` and WebCrypto Web IDL converter hot paths. - Add focused tests for core converters, WebCrypto converters, integer conversion, and buffer source behavior. Fixes: - Make the shared `BufferSource` and `Uint8Array` converters reject resizable `ArrayBuffer` and growable `SharedArrayBuffer` backing stores unless explicitly allowed. WebCrypto preserves its legacy resizable backing-store behavior through compatibility wrappers until a semver-major follow-up can opt in to the stricter behavior. - Use Web IDL `ToNumber` and `ToString` behavior for BigInt, Symbol, and object primitive conversion. - Use exact BigInt modulo for 64-bit `ConvertToInt` wrapping and document the final Number approximation behavior. - Normalize mathematical modulo results to `+0` where Web IDL requires it. - Process inherited dictionaries in least-derived to most-derived order, sorting members only within each dictionary level. - Use `IteratorComplete` truthiness for sequence conversion. - Cover detached buffers, resizable-backed views, growable-backed views, cross-realm buffer sources, mutation-after-call behavior, inherited dictionary member order, and sequence iterator completion behavior. Signed-off-by: Filip Skokan <panva.ip@gmail.com> PR-URL: nodejs#62979 Reviewed-By: Сковорода Никита Андреевич <chalkerx@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

Rework lib/internal/webidl.js into a documented shared converter module that follows the Web IDL conversion algorithms more closely. Improvements: - Add documented converters and helper factories for primitive values, dictionaries, enums, sequences, interfaces, required arguments, integers, `Uint8Array`, and `BufferSource`. - Move WebCrypto onto the shared converters, while keeping compatibility wrappers for its existing `BufferSource` and `BigInteger` behavior. - Use shared converters from Blob, Performance, Web Locks, and structured clone option handling. - Add benchmarks for `ConvertToInt` and WebCrypto Web IDL converter hot paths. - Add focused tests for core converters, WebCrypto converters, integer conversion, and buffer source behavior. Fixes: - Make the shared `BufferSource` and `Uint8Array` converters reject resizable `ArrayBuffer` and growable `SharedArrayBuffer` backing stores unless explicitly allowed. WebCrypto preserves its legacy resizable backing-store behavior through compatibility wrappers until a semver-major follow-up can opt in to the stricter behavior. - Use Web IDL `ToNumber` and `ToString` behavior for BigInt, Symbol, and object primitive conversion. - Use exact BigInt modulo for 64-bit `ConvertToInt` wrapping and document the final Number approximation behavior. - Normalize mathematical modulo results to `+0` where Web IDL requires it. - Process inherited dictionaries in least-derived to most-derived order, sorting members only within each dictionary level. - Use `IteratorComplete` truthiness for sequence conversion. - Cover detached buffers, resizable-backed views, growable-backed views, cross-realm buffer sources, mutation-after-call behavior, inherited dictionary member order, and sequence iterator completion behavior. Signed-off-by: Filip Skokan <panva.ip@gmail.com> PR-URL: #62979 Reviewed-By: Сковорода Никита Андреевич <chalkerx@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

Rework lib/internal/webidl.js into a documented shared converter module that follows the Web IDL conversion algorithms more closely. Improvements: - Add documented converters and helper factories for primitive values, dictionaries, enums, sequences, interfaces, required arguments, integers, `Uint8Array`, and `BufferSource`. - Move WebCrypto onto the shared converters, while keeping compatibility wrappers for its existing `BufferSource` and `BigInteger` behavior. - Use shared converters from Blob, Performance, Web Locks, and structured clone option handling. - Add benchmarks for `ConvertToInt` and WebCrypto Web IDL converter hot paths. - Add focused tests for core converters, WebCrypto converters, integer conversion, and buffer source behavior. Fixes: - Make the shared `BufferSource` and `Uint8Array` converters reject resizable `ArrayBuffer` and growable `SharedArrayBuffer` backing stores unless explicitly allowed. WebCrypto preserves its legacy resizable backing-store behavior through compatibility wrappers until a semver-major follow-up can opt in to the stricter behavior. - Use Web IDL `ToNumber` and `ToString` behavior for BigInt, Symbol, and object primitive conversion. - Use exact BigInt modulo for 64-bit `ConvertToInt` wrapping and document the final Number approximation behavior. - Normalize mathematical modulo results to `+0` where Web IDL requires it. - Process inherited dictionaries in least-derived to most-derived order, sorting members only within each dictionary level. - Use `IteratorComplete` truthiness for sequence conversion. - Cover detached buffers, resizable-backed views, growable-backed views, cross-realm buffer sources, mutation-after-call behavior, inherited dictionary member order, and sequence iterator completion behavior. Signed-off-by: Filip Skokan <panva.ip@gmail.com> PR-URL: nodejs#62979 Backport-PR-URL: nodejs#63563 Reviewed-By: Сковорода Никита Андреевич <chalkerx@gmail.com> Reviewed-By: Matteo Collina <matteo.collina@gmail.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://github.com/nodejs/node) | stage | minor | `24.16.0-trixie` → `24.18.0-trixie` | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v24.18.0`](https://github.com/nodejs/node/releases/tag/v24.18.0): 2026-06-23, Version 24.18.0 'Krypton' (LTS), @richardlau prepared by @sxa [Compare Source](nodejs/node@v24.17.0...v24.18.0) ##### Notable Changes - \[[`e07e7a31e1`](nodejs/node@e07e7a31e1)] - **crypto**: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) [#63527](nodejs/node#63527) - \[[`44c8ebcbd6`](nodejs/node@44c8ebcbd6)] - **http**: avoid stream listeners on idle agent sockets (Matteo Collina) [#64004](nodejs/node#64004) - \[[`d3ef4122ee`](nodejs/node@d3ef4122ee)] - **(SEMVER-MINOR)** **buffer**: increase Buffer.poolSize default to 64 KiB (Matteo Collina) [#63597](nodejs/node#63597) - \[[`bb2857b85a`](nodejs/node@bb2857b85a)] - **(SEMVER-MINOR)** **crypto**: align key argument names in docs and error messages (Filip Skokan) [#62527](nodejs/node#62527) - \[[`b9d5e87880`](nodejs/node@b9d5e87880)] - **(SEMVER-MINOR)** **crypto**: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) [#62527](nodejs/node#62527) - \[[`ccd756d61e`](nodejs/node@ccd756d61e)] - **(SEMVER-MINOR)** **crypto**: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) [#62183](nodejs/node#62183) - \[[`4c9251fc09`](nodejs/node@4c9251fc09)] - **(SEMVER-MINOR)** **http**: add writeInformation to send arbitrary 1xx status codes (Tim Perry) [#63155](nodejs/node#63155) - \[[`8c989ec4a3`](nodejs/node@8c989ec4a3)] - **(SEMVER-MINOR)** **inspector**: expose precise coverage start to JS runtime (sangwook) [#63079](nodejs/node#63079) - \[[`3f54c8ba32`](nodejs/node@3f54c8ba32)] - ***Revert*** "**stream**: noop pause/resume on destroyed streams" (Stewart X Addison) [#63834](nodejs/node#63834) ##### Commits - \[[`d3ef4122ee`](nodejs/node@d3ef4122ee)] - **(SEMVER-MINOR)** **buffer**: increase Buffer.poolSize default to 64 KiB (Matteo Collina) [#63597](nodejs/node#63597) - \[[`9ff36e40f0`](nodejs/node@9ff36e40f0)] - **build**: add --enable-all-experimentals build flag (Paolo Insogna) [#62755](nodejs/node#62755) - \[[`7c22ee23aa`](nodejs/node@7c22ee23aa)] - **build**: def `NODE_USE_NODE_CODE_CACHE` only used in node\_mksnapshot (Chengzhong Wu) [#63588](nodejs/node#63588) - \[[`2551abdb4a`](nodejs/node@2551abdb4a)] - **build,win**: enable x64 PGO (Stefan Stojanovic) [#62761](nodejs/node#62761) - \[[`e8a55ce9b1`](nodejs/node@e8a55ce9b1)] - **crypto**: strengthen argument CHECKs in TurboSHAKE (Tobias Nießen) [#62763](nodejs/node#62763) - \[[`ae61cd68f3`](nodejs/node@ae61cd68f3)] - **crypto**: harden WebCrypto against prototype pollution (Filip Skokan) [#63363](nodejs/node#63363) - \[[`3d05a1d396`](nodejs/node@3d05a1d396)] - **crypto**: pass CryptoKey handles to KDF jobs (Filip Skokan) [#63363](nodejs/node#63363) - \[[`f9d10a3f6b`](nodejs/node@f9d10a3f6b)] - **crypto**: remove async from WebCrypto methods (Filip Skokan) [#63363](nodejs/node#63363) - \[[`e431d93e9e`](nodejs/node@e431d93e9e)] - **crypto**: add WebCrypto CryptoJob mode (Filip Skokan) [#63363](nodejs/node#63363) - \[[`56e2505e48`](nodejs/node@56e2505e48)] - **crypto**: wire ML-DSA and ML-KEM for use when using BoringSSL (Filip Skokan) [#63255](nodejs/node#63255) - \[[`3bac77f2a8`](nodejs/node@3bac77f2a8)] - **crypto**: wire ChaCha20-Poly1305 in Web Cryptography when using BoringSSL (Filip Skokan) [#63255](nodejs/node#63255) - \[[`1bff901b09`](nodejs/node@1bff901b09)] - **crypto**: wire AES-KW in Web Cryptography when using BoringSSL (Filip Skokan) [#63255](nodejs/node#63255) - \[[`4433fca3df`](nodejs/node@4433fca3df)] - **crypto**: harden CryptoKey algorithm slots (Filip Skokan) [#63111](nodejs/node#63111) - \[[`b5cf01217a`](nodejs/node@b5cf01217a)] - **crypto**: harden KeyObject internal slots (Filip Skokan) [#63111](nodejs/node#63111) - \[[`ce84aef37d`](nodejs/node@ce84aef37d)] - **crypto**: add guards and adjust tests for BoringSSL (Filip Skokan) [#62883](nodejs/node#62883) - \[[`26781689b0`](nodejs/node@26781689b0)] - **crypto**: reject duplicate ML-KEM JWK key\_ops (Filip Skokan) [#62905](nodejs/node#62905) - \[[`aeea8f4970`](nodejs/node@aeea8f4970)] - **crypto**: add JWK support for ML-KEM and SLH-DSA key types (Filip Skokan) [#62706](nodejs/node#62706) - \[[`407cf91656`](nodejs/node@407cf91656)] - **crypto**: guard against size\_t overflow on experimental 32-bit arch (Filip Skokan) [#62626](nodejs/node#62626) - \[[`bb2857b85a`](nodejs/node@bb2857b85a)] - **(SEMVER-MINOR)** **crypto**: align key argument names in docs and error messages (Filip Skokan) [#62527](nodejs/node#62527) - \[[`b9d5e87880`](nodejs/node@b9d5e87880)] - **(SEMVER-MINOR)** **crypto**: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) [#62527](nodejs/node#62527) - \[[`b46d52b283`](nodejs/node@b46d52b283)] - **crypto**: unify asymmetric key import through KeyObjectHandle::Init (Filip Skokan) [#62499](nodejs/node#62499) - \[[`ccd756d61e`](nodejs/node@ccd756d61e)] - **(SEMVER-MINOR)** **crypto**: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) [#62183](nodejs/node#62183) - \[[`e07e7a31e1`](nodejs/node@e07e7a31e1)] - **crypto**: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) [#63527](nodejs/node#63527) - \[[`61826df455`](nodejs/node@61826df455)] - **crypto**: coerce -0 keylen to +0 in pbkdf2 and scrypt (Jordan Harband) [#63531](nodejs/node#63531) - \[[`16d2fd3c07`](nodejs/node@16d2fd3c07)] - **crypto**: align verifyOneShot accepted types (Anshika Jain) [#63280](nodejs/node#63280) - \[[`3b8330deda`](nodejs/node@3b8330deda)] - **crypto**: improve system certificate enumeration logic on macOS (Robo) [#62576](nodejs/node#62576) - \[[`141de35399`](nodejs/node@141de35399)] - **debugger**: add --help to `node inspect` and improve docs (Joyee Cheung) [#63201](nodejs/node#63201) - \[[`b76bfcd4fa`](nodejs/node@b76bfcd4fa)] - **deps**: upgrade npm to 11.16.0 (npm team) [#63602](nodejs/node#63602) - \[[`4ec142314c`](nodejs/node@4ec142314c)] - **deps**: SQLite: cherry-pick [`b869ed6`](nodejs/node@b869ed6) (Junsu Han) [#63525](nodejs/node#63525) - \[[`19e8ce1c36`](nodejs/node@19e8ce1c36)] - **deps**: upgrade npm to 11.15.0 (npm team) [#63463](nodejs/node#63463) - \[[`8a264260e2`](nodejs/node@8a264260e2)] - **deps**: update sqlite to 3.53.1 (Node.js GitHub Bot) [#63217](nodejs/node#63217) - \[[`50c8ff3f94`](nodejs/node@50c8ff3f94)] - **deps**: update simdjson to 4.6.4 (Node.js GitHub Bot) [#62811](nodejs/node#62811) - \[[`6e56f01c4b`](nodejs/node@6e56f01c4b)] - **deps**: V8: cherry-pick [`435a2cd`](nodejs/node@435a2cdf664c) (Matthias Liedtke) [#63136](nodejs/node#63136) - \[[`3ba813b242`](nodejs/node@3ba813b242)] - **deps**: cherry-pick [libuv/libuv@`a43e543`](libuv/libuv@a43e543) (Ali Hassan) [#63222](nodejs/node#63222) - \[[`2390e3a5ac`](nodejs/node@2390e3a5ac)] - **doc**: remove duplicated sentences in large-pull-requests.md (Joyee Cheung) [#63650](nodejs/node#63650) - \[[`52a1c18374`](nodejs/node@52a1c18374)] - **doc**: update `git node land` instructions for security releases (Antoine du Hamel) [#63586](nodejs/node#63586) - \[[`3e6b4da037`](nodejs/node@3e6b4da037)] - **doc**: drop --experimental from --permission (Rafael Gonzaga) [#63583](nodejs/node#63583) - \[[`84d05163b9`](nodejs/node@84d05163b9)] - **doc**: explicitly ask for reproducible in JS (Rafael Gonzaga) [#63479](nodejs/node#63479) - \[[`7da2a4450e`](nodejs/node@7da2a4450e)] - **doc**: fix URL postMessage example in worker\_threads (Kit Dallege) [#62203](nodejs/node#62203) - \[[`3d79bd8b29`](nodejs/node@3d79bd8b29)] - **doc**: clarify `filter` option of `sqlite.database.applyChangeset` (Antoine du Hamel) [#63515](nodejs/node#63515) - \[[`4f4174aace`](nodejs/node@4f4174aace)] - **doc**: fix double spaces in ERR\_TLS\_INVALID\_PROTOCOL\_METHOD (Daijiro Wachi) [#63511](nodejs/node#63511) - \[[`388323ca4b`](nodejs/node@388323ca4b)] - **doc**: fix double space in modules.md (Daijiro Wachi) [#63512](nodejs/node#63512) - \[[`5258ccc058`](nodejs/node@5258ccc058)] - **doc**: fix "options" to "option" in tls.createServer (Daijiro Wachi) [#63453](nodejs/node#63453) - \[[`43e83e6507`](nodejs/node@43e83e6507)] - **doc**: fix typo in deprecations (Daijiro Wachi) [#63434](nodejs/node#63434) - \[[`f05a61d54c`](nodejs/node@f05a61d54c)] - **doc**: remove unsupported template type from v8.md (René) [#63410](nodejs/node#63410) - \[[`c39d5fc820`](nodejs/node@c39d5fc820)] - **doc**: fix article usage before vowel-sound acronyms (joao-oliveira-softtor) [#62696](nodejs/node#62696) - \[[`398261f911`](nodejs/node@398261f911)] - **doc**: remove the bi-monthly contributor spotlight section (Claudio Wunder) [#62734](nodejs/node#62734) - \[[`fd9e14c405`](nodejs/node@fd9e14c405)] - **doc**: update http2's `push` and `trailers` events with `rawHeaders` param (YuSheng Chen) [#63259](nodejs/node#63259) - \[[`b943ce6933`](nodejs/node@b943ce6933)] - **doc**: remove inactive members from Triagers list (Antoine du Hamel) [#63329](nodejs/node#63329) - \[[`4b9cdfc022`](nodejs/node@4b9cdfc022)] - **doc**: reference correct function in Module docs (Robin Malfait) [#63247](nodejs/node#63247) - \[[`bed84b6df2`](nodejs/node@bed84b6df2)] - **doc**: replace Visual Studio 2022 Evergreen version reference with 17.14 (Mike McCready) [#63211](nodejs/node#63211) - \[[`32ea70569b`](nodejs/node@32ea70569b)] - **doc**: recommend explicitly Tier 1 or 2 for production applications (Mike McCready) [#63187](nodejs/node#63187) - \[[`4627bcfd82`](nodejs/node@4627bcfd82)] - **doc**: run license-builder (github-actions\[bot]) [#63232](nodejs/node#63232) - \[[`28eba71845`](nodejs/node@28eba71845)] - **doc**: add large pull requests contributing guide (Matteo Collina) [#62829](nodejs/node#62829) - \[[`2648efd438`](nodejs/node@2648efd438)] - **doc**: remove unnecessary `If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.walbeck.it/mwalbeck/docker-cyberchef/pulls/488

nodejs-github-bot added lib / src Issues and PRs related to general changes in the lib or src directory. needs-ci PRs that need a full CI run. labels Apr 26, 2026

panva added the web-standards Issues and PRs related to Web APIs label Apr 26, 2026

ChALkeR mentioned this pull request Apr 26, 2026

lib: fix modulo sign in webidl convertToInt #62940

Closed

ChALkeR reviewed Apr 26, 2026

View reviewed changes

Comment thread lib/internal/webidl.js

ChALkeR reviewed Apr 26, 2026

View reviewed changes