New features

• #417
• #421

Improvements

• #415
• #418

Other (build, dev)

• #411
• #412
• #414
• #416
• #419
• #420
• #422

This project publishes no release notes. Between v5.17.0 and v5.18.0 there were 14 commits, 11 of them substantive:

• chore: ignore TypeScript major-version bumps in dependabot (#380)
• fix(wall): don't derive PersistentContextPtr from node::ObjectWrap (#385)
• otel-thread-ctx: add ThreadContext.invalidate() to flip valid byte (#383)
• test(worker-threads): reap the spawned child after a timeout (#386)
• add 'emit' column-numbers mode using pprof-format Line.column (#382)
• fix(wall): hold the PCP holder in a Global, not a Persistent (#387)
• fix(heap): don't assume a per-isolate state exists (#384)
• fix(otel-thread-ctx): don't derive CtxWrap from node::ObjectWrap (#388)
• fix(otel-thread-ctx): don't assert a record is valid when growing it (#392)
• Follow up on #388 review comments (#391)
• Group patch and minor Dependabot updates for easier approval/merging (#352)

This project publishes no release notes. Between v5.16.0 and v5.17.0 there were 15 commits, 8 of them substantive:

• fix: opt out of node-gyp on install via gypfile:false (#367)
• [heap] Restore original heap size (#371)
• otel-thread-ctx: address review feedback from #347 (#366)
• otel-thread-ctx: publish V8 + ObjectWrap layout constants for readers (#375)
• test: document webpack source map behaviour for column=0 lookups (#299)
• feat: add columnNumbers option to control frame column encoding (#377)
• fix: scope column packing to frames with a missing source map (#378)
• test(time-profiler): stabilize flaky "should update state" (#362)

This project publishes no release notes. Between v5.15.1 and v5.16.0 there were 7 commits, 6 of them substantive:

• Update CI actions to Node.js 24 versions (#356)
• fix: drop no-op install script that triggers Yarn build warning (#363)
• PROF-14694: Port OTEP-4947 thread-context writer from polarsignals/custom-labels (#347)
• Fix lint CI: install from lockfile (npm ci) instead of lockless yarn (#365)
• Simplify map-get.cc to only handle the regular OrderedHashMap (#361)
• Reconcile package.json with package-lock.json for npm ci

This project publishes no release notes. Between v5.15.0 and v5.15.1 there were 5 commits, 4 of them substantive:

• Align heap sample type names with allocation profiles (#351)
• fix(deps): vuln minor upgrades — 6 packages (minor: 2 · patch: 4) (#353)
• fix(allocations): stop the heap sampling when getting profile (#357)
• fix(wall): don't remove the env cleanup hook from inside itself (#360)

This project publishes no release notes. Between v5.14.4 and v5.15.0 there were 11 commits, 7 of them substantive:

• Add release skill for Claude Code (#309)
• wall profiler: use thread-local for the active profiler (#322)
• wall profiler: track live PCPs via an intrusive list (#341)
• fix(wall): break SIGPROF self-chain in signal handler install (#319)
• fix(wall): use current Dispose signature on StartInternal failure (#345)
• feat: Introducing allocation profiler (#343)
• fix(time-profiler): serialize before clearing the source mapper in stop() (#342)

• Fix release tag push and pin actions by SHA (#335)

The release workflow's tag push was rejected by the tag ruleset because
actions/checkout persisted GITHUB_TOKEN credentials, which took precedence
over the dd-octo-sts token in the explicit push URL. Drop the persisted
credentials and downgrade contents permission to read.

Also pin actions/download-artifact and actions/setup-node by commit SHA.

Co-authored-by: Claude Opus 4.7 (1M context) noreply@anthropic.com

• Specify node-gyp-build to major v4 (#336)

• build(deps-dev): bump @types/node from 25.7.0 to 25.9.1 (#333)

Bumps @types/node from 25.7.0 to 25.9.1.

• Release notes
• Commits

---

updated-dependencies:

• dependency-name: "@types/node"
  dependency-version: 25.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Attila Szegedi szegedi@users.noreply.github.com

• v5.14.4

---

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: Christoph Hamsen 37963496+xopham@users.noreply.github.com
Co-authored-by: Claude Opus 4.7 (1M context) noreply@anthropic.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Attila Szegedi szegedi@users.noreply.github.com

This project publishes no release notes. Between v5.13.5 and v5.14.0 there were 15 commits, 9 of them substantive:

• Improve heap profile memory usage by lazily loading js objects (#260)
• Store sampling context in the AsyncContextFrame directly (#255)
• Switch heap profiling to use lazy allocation profile method by default (#281)
• Add timeProfiler.runWithContext (#275)
• Ignore tsconfig auto generated build info file (#290)
• Fix source mapping of zero-column locations (#248)
• Reduce time profiler memory usage with lazy profile tree (#287)
• Rewrite SourceMapper to scan directories with sourceMappingURL support (#292)
• Report missing source maps in profile comments (#298)

This project publishes no release notes. Between v5.13.4 and v5.13.5 there were 14 commits, 7 of them substantive:

• Executing automated changes (#264)
• Update @types/sinon to 21.0.0 (#265)
• DEPENDENCY UPGRADE: patch: @types/node, nan, tmp (#267)
• Eliminate use of delay library (#269)
• Enable dependabot updates (#273)
• Update package-lock.json with results of "npm audit". (#283)
• build(deps): Remove p-limit dependency (#279)

This project publishes no release notes. Between v5.13.3 and v5.13.4 there were 6 commits, 3 of them substantive:

• Add Ilyas to CODEOWNERS (#262)
• Do not reuse PersistentContextPtr instances (#261)
• Moved GC callback registration in StartImpl, to be symmetrical with their deregistration through StopImpl->Dispose. (#271)