487 commits

Author	SHA1	Message	Date
snek	4772778107	refactor: http upgrade internals (#30612) ... clean up some outdated code and implement a few performance improvements. most notably, the response from `upgradeWebSocket` is now actually used as a normal response. a followup pr will rework raw upgrades to a greater extent	2025-09-19 09:33:32 +02:00
denobot	4c1cdfc9a4	2.5.1 (#30753) ... Bumped versions for 2.5.1 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-09-17 01:58:00 +02:00
denobot	ddebcc01d9	2.5.0 (#30673) ... Bumped versions for 2.5.0 Co-authored-by: littledivy <littledivy@users.noreply.github.com>	2025-09-10 09:17:46 +05:30
Krhougs	c537681065	chore: upgrade hickory-dns to 0.25.2 (#30582) ... This PR upgrades crates from hickory-dns to version 0.25.2 The main reason to upgrade them is that hickory-resolver has break change on `Resolver` initialazation APIs and renamed `tokio-runtime` feature to `tokio`, which breaks dependency resolving with recent crates when embedding deno.	2025-09-08 23:11:23 +02:00
Bartek Iwańczuk	928f26db78	feat: V8 14.0.0 (#30629) ... This commit updates V8 to version 14.0.0. This update brings changes to Temporal support too, which is close to being stabilized. --------- Co-authored-by: snek <snek@deno.com>	2025-09-08 22:12:54 +02:00
snek	287c0854a3	fix(unstable): make QuicListener yield QuicIncoming (#30150)	2025-09-05 19:44:44 +02:00
Bartek Iwańczuk	da1bf978f0	feat: add tcpBacklog arg to Deno.listen{Tls} and Deno.serve (#30541) ... This commit adds `tcpBacklog` argument to `Deno.listen`, `Deno.listenTls` and `Deno.serve` APIs. The argument specifies maximum number of pending connections in the listen queue, and by default is set to 511. Users that expect huge bursts of traffic can customize this option to a higher value. Ref https://github.com/denoland/deno/pull/30471 Closes https://github.com/denoland/deno/issues/30388	2025-08-28 09:43:20 +02:00
Divy	b5808041e0	feat: allow disable hostname verification in TLS (#30409) ... Fixes https://github.com/denoland/deno/issues/28903 Closes https://github.com/denoland/deno/issues/26190 - Adds a new option `unsafelyDisableHostnameVerification` to `Deno.connectTls` and `Deno.startTls` to ignore DNS name mismatch errors from rustls server verifier. - Disable hostname verification in Node.js TLSSocket if `checkServerIdentity` is a no-op. --------- Signed-off-by: Divy Srivastava <dj.srivastava23@gmail.com>	2025-08-23 10:37:57 +05:30
denobot	b7061b0f64	2.4.5 (#30476) ... Bumped versions for 2.4.5 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-08-21 13:41:58 +02:00
Bartek Iwańczuk	278a83f85e	perf(ext/net): change the default TCP backlog to 512 (#30471) ... This change increases default socket backlog from 128 to 512. Towards https://github.com/denoland/deno/issues/30388.	2025-08-21 07:01:50 +00:00
Divy	5c79bc7300	fix(ext/node): mTLS support for node:tls (#30426) ... Fixes https://github.com/denoland/deno/issues/28341 - handle `secureContext.key` and `secureContext.cert` in `new TLSSocket()` - Fix serialize when `secureContext.ca` is an array Fixes MQTT connect support: ``` New connection from 127.0.0.1:58119 on port 8883. 1755367370: New client connected from 127.0.0.1:58119 as 637013c2-53c7-4779-9e84-50dcf2f2f81b (p5, c0, k60, u'test-client'). 1755367370: No will message specified. 1755367370: Sending CONNACK to 637013c2-53c7-4779-9e84-50dcf2f2f81b (0, 0) ```	2025-08-17 16:32:15 +05:30
denobot	5129d036eb	2.4.4 (#30396) ... Bumped versions for 2.4.4 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-08-13 22:26:24 +02:00
cions	ebfd3c3d7c	fix: android build (#30360) ... Fix build error on Android. Patches from https://github.com/cions/termux-deno	2025-08-12 15:47:18 +02:00
林炳权	68297b5f10	chore: Rust 1.89.0 (#30364) ... Related PR: https://github.com/denoland/deno/pull/30354	2025-08-09 11:11:48 +00:00
Leo Kettmeir	43b376cd47	Revert "fix(ext/node): support TLS for unix sockets" (#30284) ... Reverts denoland/deno#30169 Causes issues with playwright's installation of browsers	2025-08-02 09:11:23 +00:00
Bartek Iwańczuk	b05e8b20ac	fix(ext/node): support TLS for unix sockets (#30169) ... This commit adds initial support for connecting Unix socket over TLS in `node:tls.connect()` API --------- Co-authored-by: Divy Srivastava <dj.srivastava23@gmail.com>	2025-08-01 12:00:14 +02:00
David Sherret	ae6ac919de	refactor: remove some url to string clones (#30247)	2025-07-31 10:10:29 -04:00
denobot	5612d2edc7	2.4.3 (#30251) ... Bumped versions for 2.4.3 Please ensure: - [x] Crate versions are bumped correctly - [x] Releases.md is updated correctly (think relevancy and remove reverts) To make edits to this PR: ```shell git fetch upstream release_2_4.3 && git checkout -b release_2_4.3 upstream/release_2_4.3 ``` cc @crowlKats --------- Signed-off-by: Leo Kettmeir <64b2b6d@kettmeir.dev> Co-authored-by: crowlKats <crowlKats@users.noreply.github.com> Co-authored-by: Leo Kettmeir <crowlkats@toaxl.com>	2025-07-30 22:25:42 +00:00
David Sherret	85d342c045	refactor: use Cow<Path> more in permissions (#30227) ... Towards and removing more allocations.	2025-07-29 07:11:57 -04:00
Ruyut	2b904fbb8b	chore: remove redundant operations from README.md (#30228)	2025-07-28 14:41:49 -04:00
snek	3a5ba56801	fix: tunnels in processes that don't listen (#30178) ... fix issue with tunneling vite, which spawns subprocesses, where the subprocess runs a server.	2025-07-24 18:09:27 +02:00
Divy	84136f41bd	fix(ext/node): implement TLSSocket.getPeerCertificate (#30146) ... Fixes https://github.com/denoland/deno/issues/22181 Depends on https://github.com/denoland/rustls-tokio-stream/pull/46 ``` # google.com [Object: null prototype] { ca: false, raw: Uint8Array(3634) [ 48, 130, 14, 46, 48, 130, 13, 22, 160, 3, 2, 1, 2, 2, 17, 0, 139, 141, 66, 93, 177, 192, 98, 133, 16, 71, 29, 49, 153, 205, 184, 162, 48, 13, 6, 9, 42, 134, 72, 134, 247, 13, 1, 1, 11, 5, 0, 48, 59, 49, 11, 48, 9, 6, 3, 85, 4, 6, 19, 2, 85, 83, 49, 30, 48, 28, 6, 3, 85, 4, 10, 19, 21, 71, 111, 111, 103, 108, 101, 32, 84, 114, 117, 115, 116, 32, 83, 101, 114, 118, 105, 99, 101, 115, 49, 12, 48, 10, 6, 3, ... 3534 more items ], subject: [Object: null prototype] { CN: "*.google.com" }, issuer: [Object: null prototype] { C: "US", O: "Google Trust Services", CN: "WR2" }, valid_from: "Jun 23 08:40:16 2025 +00:00", valid_to: "Sep 15 08:40:15 2025 +00:00", serialNumber: "8B8D425DB1C0628510471D3199CDB8A2", fingerprint: "B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32", fingerprint256: "BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E", fingerprint512: "22:AD:69:06:72:DA:B2:8C:10:9D:6E:83:74:2D:9F:5B:10:A1:C6:EB:4F:CA:A6:97:F0:F2:98:2A:16:56:32:0E:E2:F1:FB:A6:B9:AB:53:20:2A:78:0F:11:B3:FD:38:9D:8D:43:97:3A:2F:4F:F4:F1:48:CE:D5:54:DF:3E:D2:7E", subjectaltname: "DNS:*.google.com, DNS:*.appengine.google.com, DNS:*.bdn.dev, DNS:*.origin-test.bdn.dev, DNS:*.cloud.google.com, DNS:*.crowdsource.google.com, DNS:*.datacompute.google.com, DNS:*.google.ca, DNS:*.google.cl, DNS:*.google.co.in, DNS:*.google.co.jp, DNS:*.google.co.uk, DNS:*.google.com.ar, DNS:*.google.com.au, DNS:*.google.com.br, DNS:*.google.com.co, DNS:*.google.com.mx, DNS:*.google.com.tr, DNS:*.google.com.vn, DNS:*.google.de, DNS:*.google.es, DNS:*.google.fr, DNS:*.google.hu, DNS:*.google.it, DNS:*.google.nl, DNS:*.google.pl, DNS:*.google.pt, DNS:*.googleapis.cn, DNS:*.googlevideo.com, DNS:*.gstatic.cn, DNS:*.gstatic-cn.com, DNS:googlecnapps.cn, DNS:*.googlecnapps.cn, DNS:googleapps-cn.com, DNS:*.googleapps-cn.com, DNS:gkecnapps.cn, DNS:*.gkecnapps.cn, DNS:googledownloads.cn, DNS:*.googledownloads.cn, DNS:recaptcha.net.cn, DNS:*.recaptcha.net.cn, DNS:recaptcha-cn.net, DNS:*.recaptcha-cn.net, DNS:widevine.cn, DNS:*.widevine.cn, DNS:ampproject.org.cn, DNS:*.ampproject.org.cn, DNS:ampproject.net.cn, DNS:*.ampproject.net.cn, DNS:google-analytics-cn.com, DNS:*.google-analytics-cn.com, DNS:googleadservices-cn.com, DNS:*.googleadservices-cn.com, DNS:googlevads-cn.com, DNS:*.googlevads-cn.com, DNS:googleapis-cn.com, DNS:*.googleapis-cn.com, DNS:googleoptimize-cn.com, DNS:*.googleoptimize-cn.com, DNS:doubleclick-cn.net, DNS:*.doubleclick-cn.net, DNS:*.fls.doubleclick-cn.net, DNS:*.g.doubleclick-cn.net, DNS:doubleclick.cn, DNS:*.doubleclick.cn, DNS:*.fls.doubleclick.cn, DNS:*.g.doubleclick.cn, DNS:dartsearch-cn.net, DNS:*.dartsearch-cn.net, DNS:googletraveladservices-cn.com, DNS:*.googletraveladservices-cn.com, DNS:googletagservices-cn.com, DNS:*.googletagservices-cn.com, DNS:googletagmanager-cn.com, DNS:*.googletagmanager-cn.com, DNS:googlesyndication-cn.com, DNS:*.googlesyndication-cn.com, DNS:*.safeframe.googlesyndication-cn.com, DNS:app-measurement-cn.com, DNS:*.app-measurement-cn.com, DNS:gvt1-cn.com, DNS:*.gvt1-cn.com, DNS:gvt2-cn.com, DNS:*.gvt2-cn.com, DNS:2mdn-cn.net, DNS:*.2mdn-cn.net, DNS:googleflights-cn.net, DNS:*.googleflights-cn.net, DNS:admob-cn.com, DNS:*.admob-cn.com, DNS:googlesandbox-cn.com, DNS:*.googlesandbox-cn.com, DNS:*.safenup.googlesandbox-cn.com, DNS:*.gstatic.com, DNS:*.metric.gstatic.com, DNS:*.gvt1.com, DNS:*.gcpcdn.gvt1.com, DNS:*.gvt2.com, DNS:*.gcp.gvt2.com, DNS:*.url.google.com, DNS:*.youtube-nocookie.com, DNS:*.ytimg.com, DNS:ai.android, DNS:android.com, DNS:*.android.com, DNS:*.flash.android.com, DNS:g.cn, DNS:*.g.cn, DNS:g.co, DNS:*.g.co, DNS:goo.gl, DNS:www.goo.gl, DNS:google-analytics.com, DNS:*.google-analytics.com, DNS:google.com, DNS:googlecommerce.com, DNS:*.googlecommerce.com, DNS:ggpht.cn, DNS:*.ggpht.cn, DNS:urchin.com, DNS:*.urchin.com, DNS:youtu.be, DNS:youtube.com, DNS:*.youtube.com, DNS:music.youtube.com, DNS:*.music.youtube.com, DNS:youtubeeducation.com, DNS:*.youtubeeducation.com, DNS:youtubekids.com, DNS:*.youtubekids.com, DNS:yt.be, DNS:*.yt.be, DNS:android.clients.google.com, DNS:*.android.google.cn, DNS:*.chrome.google.cn, DNS:*.developers.google.cn, DNS:*.aistudio.google.com", bits: 256, pubkey: Uint8Array(65) [ 4, 82, 124, 91, 44, 55, 150, 59, 173, 66, 3, 42, 3, 48, 243, 252, 242, 238, 62, 56, 67, 45, 186, 88, 195, 170, 129, 209, 39, 72, 148, 35, 52, 252, 65, 115, 34, 178, 1, 58, 68, 24, 148, 49, 1, 117, 194, 133, 159, 182, 255, 197, 61, 22, 246, 124, 52, 140, 25, 111, 76, 127, 24, 123, 77 ], asn1Curve: "1.2.840.10045.3.1.7", nistCurve: "secp256r1" } ```	2025-07-23 13:41:19 +05:30
snek	5f0a3ace4f	chore: update deno_tunnel (#30154) ... tunnels now automatically reconnect and migrate. also use `shutdown` in telemetry instead of `flush` because it times out after 5s, which is important if the tunnel connection is hanged for some reason.	2025-07-21 10:59:30 +02:00
denobot	622c351393	2.4.2 (#30123) ... Bumped versions for 2.4.2 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-07-16 12:51:04 +02:00
snek	46009f7368	chore: switch to deno_tunnel crate (#30049) ... switch to `deno_tunnel` crate for shared code with deploy	2025-07-14 16:11:02 +02:00
David Sherret	76ce7768ab	refactor(permissions): remove access check callback (#30050) ... 1. Removes the access check callback, which was kind of confusing. 1. Requires `CheckedPath` for everything in the `FileSystem` trait to ensure we're always checking permissions.	2025-07-10 21:40:20 -04:00
Divy Srivastava	8a5f0928cd	chore: upgrade to rustls_tokio_stream 0.7 (#29898) ... Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-07-10 20:27:04 +02:00
Bartek Iwańczuk	37157d842b	chore: upgrade rustls (#29988) ... Prerequisite for https://github.com/denoland/deno/pull/29898 Due to very involved changes in rustls and interaction with quinn API (https://github.com/quinn-rs/quinn/issues/2299) we decided to temporarily disable part of the QUIC API test. It's an unstable API and we are seriously blocked by this upgrade for other important work.	2025-07-10 12:47:42 +00:00
David Sherret	2617b4ec6b	refactor(permissions): push down special file checking to permissions container (#30005)	2025-07-09 20:50:26 +00:00
snek	88f16236b1	fix: new signal handling (#30029) ... Set up a new centralized signal handling path, which emulates the default unless something is explicitly registered to prevent it. Fixes: https://github.com/denoland/deno/issues/29590 --------- Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-07-09 09:01:27 +02:00
denobot	c03199ea1e	2.4.1 (#30026) ... Bumped versions for 2.4.1 --------- Signed-off-by: Leo Kettmeir <64b2b6d@kettmeir.dev> Co-authored-by: crowlKats <crowlKats@users.noreply.github.com> Co-authored-by: Leo Kettmeir <crowlkats@toaxl.com>	2025-07-08 07:15:35 +02:00
Leo Kettmeir	b59576cc0f	feat(unstable): tunnelling (#30022) ... Co-authored-by: snek <snek@deno.com>	2025-07-08 02:44:50 +02:00
Nathan Whitaker	9379a74e08	chore: update to edition 2024 (#29923)	2025-07-02 17:59:39 -07:00
denobot	45dfae18ee	2.4.0 (#29959) ... Co-authored-by: dsherret <dsherret@users.noreply.github.com>	2025-07-01 16:21:05 -04:00
denobot	0d76cd50af	2.3.7 (#29853) ... Bumped versions for 2.3.7 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-06-23 23:51:36 +02:00
Divy Srivastava	d84866e933	chore: use aws_lc_rs (#28244)	2025-06-19 01:07:00 -07:00
denobot	d2d8d3775f	2.3.6 (#29722) ... Bumped versions for 2.3.6 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-06-12 14:33:24 +02:00
denobot	644efa157e	2.3.4 (#29510)	2025-05-29 20:00:31 +01:00
林炳权	cb738ee5da	chore: Rust 1.86.0 (#29435) ... Since `rust 1.87.0` reported `undefined symbol: ring::pbkdf2::PBKDF2_HMAC_SHA1::*` in CI and it was difficult to debug locally, use `rust 1.86.0` in CI tests for troubleshoot the errors	2025-05-25 23:40:48 +02:00
Volker Schlecht	99264cd2f2	fix: Support virtio vsock only on systems on which it is available (#29268) (#29354) ... See https://github.com/denoland/deno/issues/29268 for the related discussion. @devsnek @marvinhagemeister	2025-05-21 15:54:05 +02:00
denobot	7b74f38539	2.3.2 (#29320) ... Bumped versions for 2.3.2 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-05-16 01:18:59 +02:00
Divy Srivastava	6002d2624e	fix(ext/node): allow rejectUnauthorized: false in node:tls (#29245) ... Fix #29228 Allow disable TLS cert verification using `options.rejectUnauthorized`. If passed. `--unsafely-ignore-certificate-errors` overrides `rejectUnauthorized: false`	2025-05-13 17:43:58 +05:30
Divy Srivastava	9cb72064d3	fix(ext/node): implement dgram setMulticastLoopback (#29241) ... `npm:multicast-dns` works in Deno now. Ref https://github.com/denoland/deno/issues/18324	2025-05-12 08:53:15 +05:30
Divy Srivastava	c27aaf9f26	fix(ext/node): implement dgram socket setMulticastTTL (#29232) ... Ref https://github.com/ipfs/helia/issues/73#issuecomment-2864091259	2025-05-10 09:22:02 +05:30
Divy Srivastava	e2047941f7	fix(ext/node): dgram multicast group membership (#29207) ... Closes https://github.com/denoland/deno/issues/28421 Ref https://github.com/denoland/deno/issues/18324	2025-05-08 22:07:40 +05:30
Divy Srivastava	802826e54e	fix(ext/node): implement dgram setBroadcast (#29195)	2025-05-08 09:03:43 +05:30
nana4gonta	730f48b170	fix(ext/node): Support mTLS connections node compatibility (#28937) ... Support for running Node.js code that requires mTLS connections on Deno. Ref #21497 Closes https://github.com/denoland/deno/issues/26472 Closes https://github.com/denoland/deno/issues/29148 --------- Co-authored-by: Satya Rohith <me@satyarohith.com> Co-authored-by: Divy Srivastava <dj.srivastava23@gmail.com>	2025-05-06 14:25:18 +05:30
snek	5c6c52d132	fix: update deno_core (#29166) ... for https://github.com/denoland/deno_core/pull/1111	2025-05-05 13:58:34 -05:00
snek	bc1ced8260	refactor: allow lazy main module (#28929) ... implement lazy(?) mode. an unconfigured jsruntime is created if DENO_UNSTABLE_CONTROL_SOCK is present, and later passed into deno_runtime to be configured and used.	2025-04-30 19:59:20 +00:00
denobot	61574bb9c9	2.3.0 (#29102) ... Bumped versions for 2.3.0 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-04-30 09:49:31 +02:00