Merge branch 'main' into actions/tools-update-nghttp2

Author: marco-ippolito

.devcontainer/.devcontainer.json

@@ -0,0 +1,19 @@
+{
+  "name": "Node.js Core Developer Environment",
+  "extensions": [
+      "github.vscode-pull-request-github",
+      "ms-vsliveshare.vsliveshare",
+      "vscode-icons-team.vscode-icons",
+      "visualstudioexptteam.vscodeintellicode"
+  ],
+  "dockerFile": "Dockerfile",
+  "initializeCommand": "docker system prune -f -a",
+  "settings": {
+    "terminal.integrated.profiles.linux": {
+      "zsh (login)": {
+        "path": "zsh",
+        "args": ["-l"]
+      }
+    }
+  }
+}

.devcontainer/Dockerfile

@@ -0,0 +1 @@
+FROM nodejs/devcontainer:nightly

.flake8

@@ -27,18 +27,22 @@
 
 # net
 
+/deps/ada @nodejs/url
 /deps/cares @nodejs/net
 /doc/api/dns.md @nodejs/net
 /doc/api/dgram.md @nodejs/net
 /doc/api/net.md @nodejs/net
 /lib/dgram.js @nodejs/net
 /lib/dns.js @nodejs/net
 /lib/net.js @nodejs/net
+/lib/url.js @nodejs/url
 /lib/internal/dgram.js @nodejs/net
 /lib/internal/dns/* @nodejs/net
 /lib/internal/net.js @nodejs/net
 /lib/internal/socket_list.js @nodejs/net
 /lib/internal/js_stream_socket.js @nodejs/net
+/lib/internal/url.js @nodejs/url
+/src/node_url.* @nodejs/url
 /src/cares_wrap.cc @nodejs/net
 /src/connect_wrap.* @nodejs/net
 /src/connection_wrap.* @nodejs/net
@@ -80,7 +84,7 @@
 /doc/api/module.md @nodejs/modules @nodejs/loaders
 /doc/api/modules.md @nodejs/modules @nodejs/loaders
 /doc/api/packages.md @nodejs/modules @nodejs/loaders
-/lib/internal/bootstrap/loaders.js @nodejs/modules @nodejs/loaders
+/lib/internal/bootstrap/realm.js @nodejs/modules @nodejs/loaders
 /lib/internal/modules/* @nodejs/modules @nodejs/loaders
 /lib/internal/process/esm_loader.js @nodejs/modules @nodejs/loaders
 /lib/internal/process/execution.js @nodejs/modules @nodejs/loaders
@@ -111,8 +115,11 @@
 
 # Startup
 
+/test/parallel/test-snapshot-* @nodejs/startup
+/test/parallel/test-bootstrap-* @nodejs/startup
 /benchmark/misc/startup.js @nodejs/startup
 /src/node.cc @nodejs/startup
+/src/node_realm* @nodejs/startup @nodejs/realm
 /src/node_builtins* @nodejs/startup
 /src/node_snapshot* @nodejs/startup
 /lib/internal/bootstrap/* @nodejs/startup
@@ -130,9 +137,23 @@
 
 # Test runner
 
-/test/message/test_runner_* @nodejs/test_runner
 /test/parallel/test-runner-* @nodejs/test_runner
 /doc/api/test.md @nodejs/test_runner
 /lib/test.js @nodejs/test_runner
 /lib/internal/main/test_runner.js @nodejs/test_runner
 /lib/internal/test_runner/* @nodejs/test_runner
+
+# Single Executable Applications
+/deps/postject @nodejs/single-executable
+/doc/api/single-executable-applications.md @nodejs/single-executable
+/doc/contributing/maintaining/maintaining-single-executable-application-support.md @nodejs/single-executable
+/src/node_sea* @nodejs/single-executable
+/test/fixtures/postject-copy @nodejs/single-executable
+/test/parallel/test-single-executable-* @nodejs/single-executable
+/test/sequential/test-single-executable-* @nodejs/single-executable
+/tools/dep_updaters/update-postject.sh @nodejs/single-executable
+
+# Permission Model
+/src/permission/* @nodejs/security-wg
+/doc/api/permissions.md @nodejs/security-wg
+/lib/internal/process/permission.js @nodejs/security-wg

.github/CODEOWNERS

@@ -33,7 +33,7 @@ body:
       label: How often does it reproduce? Is there a required condition?
   - type: textarea
     attributes:
-      label: What is the expected behavior?
+      label: What is the expected behavior? Why is that the expected behavior?
       description: If possible please provide textual output instead of screenshots.
   - type: textarea
     attributes:

.github/ISSUE_TEMPLATE/1-bug-report.yml

@@ -6,4 +6,6 @@ updates:
     directory: /
     schedule:
       interval: monthly
+    commit-message:
+      prefix: meta
     open-pull-requests-limit: 10

.github/dependabot.yml

@@ -2,12 +2,12 @@
 ## earlier entries override later entries
 subSystemLabels:
   # src subsystems
-  /^src\/async-wrap/: c++, async_wrap
+  /^src\/async_wrap/: c++, async_wrap
   /^src\/(?:base64|node_buffer|string_)/: c++, buffer
   /^src\/cares/: c++, cares
   /^src\/(?:process_wrap|spawn_)/: c++, child_process
   /^src\/(?:node_)?crypto/: c++, crypto
-  /^src\/(?:debug-|node_debug)/: c++, debugger
+  /^src\/debug_/: c++, debugger
   /^src\/udp_/: c++, dgram
   /^src\/(?:fs_|node_file|node_stat_watcher)/: c++, fs
   /^src\/node_http_parser/: c++, http_parser
@@ -16,14 +16,13 @@ subSystemLabels:
   /^src\/(?:connect(?:ion)?|pipe|tcp)_/: c++, net
   /^src\/node_os/: c++, os
   /^src\/(?:node_main|signal_)/: c++, process
-  /^src\/timer_/: c++, timers
-  /^src\/(?:CNNICHashWhitelist|node_root_certs|tls_)/: c++, tls
+  /^src\/timer[_s]/: c++, timers
+  /^src\/node_root_certs/: c++, tls
   /^src\/tty_/: c++, tty
   /^src\/node_url/: c++, whatwg-url
   /^src\/node_util/: c++, util
   /^src\/node_v8/: c++, v8 engine
   /^src\/node_contextify/: c++, vm
-  /^src\/.*win32.*/: c++, windows
   /^src\/node_zlib/: c++, zlib
   /^src\/tracing/: c++, tracing
   /^src\/(?:node_api|js_native_api)/: c++, node-api
@@ -33,49 +32,46 @@ subSystemLabels:
   /^src\/node_worker/: c++, worker
   /^src\/quic\/*/: c++, quic, dont-land-on-v14.x
   /^src\/node_bob*/: c++, quic, dont-land-on-v14.x
+  /^src\/node_sea/: single-executable
 
-  # don't label python files as c++
-  /^src\/.+\.py$/: python, needs-ci
-
-  # properly label changes to v8 inspector integration-related files
+  # Properly label changes to V8 inspector integration-related files
   /^src\/inspector_/: c++, inspector, needs-ci
 
-  # don't want to label it a c++ update when we're "only" bumping the Node.js version
+  # Don't want to label it a C++ update when we're "only" bumping the Node.js version
   /^src\/(?!node_version\.h)/: c++
   # BUILDING.md should be marked as 'build' in addition to 'doc'
   /^BUILDING\.md$/: build, doc
-  # meta is a very specific label for things that are policy and or meta-info related
-  /^([A-Z]+$|CODE_OF_CONDUCT|ROADMAP|WORKING_GROUPS|GOVERNANCE|CHANGELOG|\.mail|\.git.+)/: meta
-  # things that edit top-level .md files are always a doc change
+  # 'meta' is a very specific label for things that are policy and or meta-info related
+  /^(?:[A-Z]+$|CODE_OF_CONDUCT|GOVERNANCE|CHANGELOG|\.mail|\.git.+)/: meta
+  # Things that edit top-level .md files are always a doc change
   /^\w+\.md$/: doc
-  # different variants of *Makefile and build files
-  /^(tools\/)?(Makefile|BSDmakefile|create_android_makefiles|\.travis\.yml)$/: build, needs-ci
-  /^tools\/(install\.py|genv8constants\.py|getnodeversion\.py|js2c\.py|utils\.py|configure\.d\/.*)$/: build, python, needs-ci
+  # Different variants of Makefile and build files
+  /^(?:tools\/)?(?:Makefile|BSDmakefile|create_android_makefiles)$/: build, needs-ci
+  /^tools\/(?:install\.py|genv8constants\.py|getnodeversion\.py|js2c\.py|utils\.py|configure\.d\/.*)$/: build, python, needs-ci
   /^vcbuild\.bat$/: build, windows, needs-ci
-  /^(android-)?configure|node\.gyp|common\.gypi$/: build, needs-ci
-  # more specific tools
+  /^(?:android-)?configure|node\.gyp|common\.gypi$/: build, needs-ci
+  # More specific tools
   /^tools\/gyp/: tools, build, gyp, needs-ci, dont-land-on-v14.x
   /^tools\/doc\//: tools, doc
   /^tools\/icu\//: tools, i18n-api, icu, needs-ci
-  /^tools\/(?:osx-pkg\.pmdoc|pkgsrc)\//: tools, macos, install
-  /^tools\/(?:(?:mac)?osx-)/: tools, macos
+  /^tools\/osx-/: tools, macos
   /^tools\/test-npm/: tools, test, npm
   /^tools\/test/: tools, test
   /^tools\/(?:certdata|mkssldef|mk-ca-bundle)/: tools, openssl, tls
   /^tools\/msvs\//: tools, windows, install, needs-ci
   /^tools\/[^/]+\.bat$/: tools, windows, needs-ci
   /^tools\/make-v8/: tools, v8 engine, needs-ci
   /^tools\/v8_gypfiles/: tools, v8 engine, needs-ci
-  /^tools\/(code_cache|snapshot)/: needs-ci
+  /^tools\/snapshot/: needs-ci
   /^tools\/build-addons.mjs/: needs-ci
-  # all other tool changes should be marked as such
+  # All other tool changes should be marked as such
   /^tools\//: tools
-  /^\.eslint|\.remark|\.editorconfig/: tools
+  /^\.eslint|\.editorconfig/: tools
   /^typings\//: typings
 
   ## Dependencies
   # libuv needs an explicit mapping, as the ordinary /deps/ mapping below would
-  # end up as libuv changes labeled with "uv" (which is a non-existing label)
+  # end up as libuv changes labeled with 'uv' (which is a non-existing label)
   /^deps\/uv\//: libuv
   /^deps\/v8\/tools\/gen-postmortem-metadata\.py/: v8 engine, python, post-mortem
   /^deps\/v8\//: v8 engine
@@ -84,18 +80,17 @@ subSystemLabels:
   /^deps\/nghttp2\/nghttp2\.gyp/: build, http2
   /^deps\/nghttp2\//: http2
   /^deps\/ngtcp2\//: quic, dont-land-on-v14.x
-  /^deps\/nghttp3\//: quic, dont-land-on-v14.x
   /^deps\/([^/]+)/: dependencies, $1
 
   ## JS subsystems
   # Oddities first
-  /^lib\/(punycode|\w+\/freelist|sys\.js)/: ''
+  /^lib\/(?:punycode|\w+\/freelist|sys\.js)/: ''
   /^lib\/constants\.js$/: lib / src
-  /^lib\/_(debug_agent|debugger)\.js$/: debugger
-  /^lib(\/\w+)?\/(_)?link(ed)?list/: timers
-  /^lib\/\w+\/bootstrap_node/: lib / src
-  /^lib\/\w+\/v8_prof_/: tools
-  /^lib\/\w+\/socket_list/: net
+  /^lib\/internal/debugger$/: debugger
+  /^lib\/internal\/linkedlist\.js$/: timers
+  /^lib\/internal\/bootstrap/: lib / src
+  /^lib\/internal\/v8_prof_/: tools
+  /^lib\/internal\/socket(?:_list|address)\.js$/: net
   /^lib\/\w+\/streams$/: stream
   /^lib\/.*http2/: http2
   /^lib\/worker_threads.js$/: worker
@@ -111,22 +106,21 @@ subSystemLabels:
   /^lib(?:\/internal)?\/(\w+)(?:\/|$)/: $1  # Subfolders
 
 exlusiveLabels:
-  # more specific tests
+  # More specific tests
   /^test\/addons\//: test, addons
-  /^test\/debugger\//: test, debugger
+  /^test\/debugger/: test, debugger
   /^test\/doctool\//: test, doc, tools
-  /^test\/timers\//: test, timers
+  /^test\/timers/: test, timers
   /^test\/pseudo-tty\//: test, tty
-  /^test\/inspector\//: test, inspector
+  /^test\/inspector/: test, inspector
   /^test\/cctest\/test_inspector/: test, inspector
-  /^test\/cctest\/test_url/: test, whatwg-url
   /^test\/node-api\//: test, node-api
   /^test\/js-native-api\//: test, node-api
   /^test\/async-hooks\//: test, async_hooks
   /^test\/report\//: test, report
   /^test\/fixtures\/es-module/: test, esm
   /^test\/es-module\//: test, esm
-  /^test\/fixtures\/wpt\/streams//: test, web streams
+  /^test\/fixtures\/wpt\/streams\//: test, web streams
 
   /^test\//: test
 
@@ -137,11 +131,9 @@ exlusiveLabels:
   # node-api is treated separately since it is not a JS core module but is still
   # considered a subsystem of sorts
   /^doc\/api\/n-api.md$/: doc, node-api
-  # quic
-  /^doc\/api\/quic.md$/: doc, quic, dont-land-on-v14.x
   # Add worker label to PRs that affect doc/api/worker_threads.md
   /^doc\/api\/worker_threads.md$/: doc, worker
-  # test runner documentation
+  # test_runner documentation
   /^doc\/api\/test.md$/: doc, test_runner, dont-land-on-v14.x
   # Automatically tag JS subsystem-specific API doc changes
   /^doc\/api\/(\w+)\.md$/: doc, $1
@@ -153,13 +145,14 @@ exlusiveLabels:
 
   # More specific benchmarks
   /^benchmark\/buffers\//: benchmark, buffer
-  /^benchmark\/(?:arrays|es)\//: benchmark, v8 engine
+  /^benchmark\/es\//: benchmark, v8 engine
   /^benchmark\/_http/: benchmark, http
   /^benchmark\/(?:misc|fixtures)\//: benchmark
   /^benchmark\/streams\//: benchmark, stream
+  /^benchmark\/url\//: benchmark, url, whatwg-url
   /^benchmark\/([^/]+)\//: benchmark, $1
 
-  /^benchmark\//: benchmark
+  /^benchmark\//: benchmark, performance
 
 allJsSubSystems:
   - assert
@@ -171,6 +164,7 @@ allJsSubSystems:
   - crypto
   - debugger
   - dgram
+  - diagnostics_channel
   - dns
   - domain
   - events
@@ -179,11 +173,14 @@ allJsSubSystems:
   - http
   - https
   - http2
+  - inspector
   - module
   - net
   - os
   - path
+  - perf_hooks
   - process
+  - punycode
   - querystring
   - quic
   - readline
@@ -193,6 +190,7 @@ allJsSubSystems:
   - string_decoder
   - timers
   - tls
+  - trace_events
   - tty
   - typings
   - url

.github/label-pr-config.yml

@@ -46,12 +46,12 @@ jobs:
     if: needs.get-prs-for-ci.outputs.numbers != ''
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab  # v3.5.2
         with:
           persist-credentials: false
 
       - name: Install Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c  # v3.6.0
         with:
           node-version: ${{ env.NODE_VERSION }}