Skip to content

[24.x] deps: update nghttp2 to 1.69.0#63164

Open
mcollina wants to merge 2 commits intonodejs:v24.x-stagingfrom
mcollina:nghttp2-main-updates-v24.x-staging
Open

[24.x] deps: update nghttp2 to 1.69.0#63164
mcollina wants to merge 2 commits intonodejs:v24.x-stagingfrom
mcollina:nghttp2-main-updates-v24.x-staging

Conversation

@mcollina
Copy link
Copy Markdown
Member

@mcollina mcollina commented May 7, 2026

No description provided.

nodejs-github-bot and others added 2 commits May 7, 2026 12:23
PR-URL: nodejs#62891
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
(cherry picked from commit 5320a1b)
This is a set of src & tests fixes for nghttp2 due to changes in
v1.67.0+ which require a selection of changes to how we handle
low-level protocol errors when using the latest versions of nghttp2,
changing both some src error handling and updating some tests to match.

Signed-off-by: Tim Perry <pimterry@gmail.com>
PR-URL: nodejs#62891
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
(cherry picked from commit 4a32c00)
@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/http2
  • @nodejs/net
  • @nodejs/security-wg

@nodejs-github-bot nodejs-github-bot added lib / src Issues and PRs related to general changes in the lib or src directory. needs-ci PRs that need a full CI run. v24.x Issues that can be reproduced on v24.x or PRs targeting the v24.x-staging branch. labels May 7, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented May 7, 2026

Codecov Report

❌ Patch coverage is 87.50000% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 90.09%. Comparing base (c989497) to head (3fb51d5).
⚠️ Report is 478 commits behind head on v24.x-staging.

Files with missing lines Patch % Lines
src/node_http2.cc 87.50% 0 Missing and 2 partials ⚠️
Additional details and impacted files
@@                Coverage Diff                @@
##           v24.x-staging   #63164      +/-   ##
=================================================
+ Coverage          90.06%   90.09%   +0.02%     
=================================================
  Files                672      673       +1     
  Lines             201174   202293    +1119     
  Branches           39304    39572     +268     
=================================================
+ Hits              181197   182252    +1055     
- Misses             12240    12241       +1     
- Partials            7737     7800      +63     
Files with missing lines Coverage Δ
src/node_http2.h 91.61% <ø> (ø)
src/node_http2.cc 81.85% <87.50%> (-0.15%) ⬇️

... and 151 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@mcollina mcollina changed the title Nghttp2 main updates v24.x staging [24.x] deps: update nghttp2 to 1.69.0 May 7, 2026
@mcollina mcollina added the request-ci Add this label to start a Jenkins CI on a PR. label May 7, 2026
@github-actions github-actions Bot removed the request-ci Add this label to start a Jenkins CI on a PR. label May 7, 2026
@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

@aduh95
Copy link
Copy Markdown
Contributor

aduh95 commented May 7, 2026

@nodejs/lts how confortable are we to land this on LTS release line given the test changes?

@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

@mcollina
Copy link
Copy Markdown
Member Author

mcollina commented May 8, 2026

We need to backport this update due to GHSA-6933-cjhr-5qg6. I assume we don't want to float a patch on top of nghttp2, which also would not please security scanners.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lib / src Issues and PRs related to general changes in the lib or src directory. needs-ci PRs that need a full CI run. v24.x Issues that can be reproduced on v24.x or PRs targeting the v24.x-staging branch.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants