Changes.Watch
Digest
weekly changelog digest

Security changelog digest

Sep 1 - Sep 7, 2025. Useful releases, risky migrations, and noisy updates from the Security channel.

ClerkCloudflareGitHubNode.jsSentrySupabase

Most useful

2025-09-03, Version 20.19.5 'Iron' (LTS), @marco-ippolitoLogs are Generally Available

Most risky

2025-09-03, Version 20.19.5 'Iron' (LTS), @marco-ippolitoLogs are Generally Available

Noise filtered

No matching updates in this bucket.

all updates

Security updates in 2025-w36

2 updates
Node.jsUsefulAI-assisted summary

2025-09-03, Version 20.19.5 'Iron' (LTS), @marco-ippolito

score 0
  • ~Fixed a SHAKE128/256 crypto bug introduced by OpenSSL 3.4, restoring correct hashing behavior.
  • ~Updated core dependencies (OpenSSL to 3.0.16, zlib to 1.3.1, corepack, acorn, minimatch, llhttp) and applied several build and DNS fixes.
  • !Enhanced the module loader: allowed CJS require cycles in the ESM loader, improved handling of async module jobs, added clearer error messages, and prevented re‑running errored module jobs.
Security-relevantbugfixsecurityfeatureminorsource failing
Source
SentryUsefulAI-assisted summary

Logs are Generally Available

score 0
  • +Logs are now generally available in Sentry
  • +Adds live tailing, alerts, dashboards, and full trace context for logs
featuresource failingLast checked 4 days ago
Source