- Fix multiple high‑ and medium‑severity CVEs (e.g., null‑prototype headers, SNICallback try/catch, array index hash collision, timing‑safe crypto comparisons, NGHTTP2 flow‑control handling, URL format crash, permission checks for fs.promi...
- Update core dependencies: undici to 7.24.4, npm to 11.11.0, and backport several V8 fixes
- Add permission checks in lib/fs/promises and realpath.native to harden file‑system APIs