RepoJournal
Node.js @nodejs
117 wires and counting

$ follow Node.js

Keep up with Node.js in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-08
stories 64
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Node fixes rmSync on Windows, V8 debugger plugin support

By RepoJournal · Filed · About Node.js

trivikr targos Mike McCready Sparsh :) legendecas Shelley Vohr dependabot
9 people shipped this
trivikr @trivikr 1 cited targos @targos 1 cited Mike McCready @MikeMcC399 1 cited Sparsh :) @SparshGarg999 1 cited legendecas @legendecas 1 cited Shelley Vohr @codebytere 1 cited dependabot @dependabot semantic-release-bot @semantic-release-bot nodejs-github-bot @nodejs-github-bot

Node core ships a fix for removing read-only files on Windows and enables V8 postmortem debugging plugin support.

fs.rmSync failed with EPERM on Windows when Node was built with clang libc++ (such as Electron) because libc++ std::filesystem::remove and remove_all do not clear the read-only attribute before deletion. A Windows-specific helper, ClearReadOnlyAttributeW, now clears FILE_ATTRIBUTE_READONLY recursively before removal, matching MSVC STL behavior [1].

V8 gdb/lldb postmortem plugin support is now built into Node, producing libv8_debug_helper.so or libv8_debug_helper.dylib that can be loaded with the corresponding V8 plugin for the V8 version Node is built against [2]. Separately, running without a startup snapshot (for example with --no-node-snapshot, an --without-node-snapshot build, or a bootstrapped embedder) used to make a null pointer call in Worker startup and NodeMainInstance setup. The call happened through a null SnapshotData* and was reported by UBSan; it only worked because the called function does not touch this. The fix removes that call [3].

On the tooling side, citgm updated all dependencies, including major releases for package-json (v8.0.0), chalk (v6.0.0), execa (v10.0.0), and pnpm (v11.0.0) [4]. The q lookup was removed from citgm because the package is deprecated and the repo archived [5]. changelog-maker dropped the chalk dependency in favor of Node's built-in util.styleText [6].

$ ls nodejs/reviews/ # the step-back reads

the week in review Domain runtime-deprecation lands; security patches ship the month in review Node 26 line lands crypto, stream, and FFI hardening as deprecations tighten the core
Topics: JavaScript Full archive →

Quick answers

What shipped in Node.js on September 8, 2026?
Node core ships a fix for removing read-only files on Windows and enables V8 postmortem debugging plugin support. In total, 34 commits, 26 pull requests, and 4 releases landed.
Who contributed to Node.js on September 8, 2026?
9 developers shipped this update, including dependabot, trivikr, semantic-release-bot, targos, Mike McCready, Sparsh :), legendecas, and nodejs-github-bot, and 1 more.
What were the notable Node.js updates?
fs: support removing read-only files in rmSync on Windows, build: enable V8 gdb/lldb plugin support, and src: fix null pointer call when running without a startup snapshot.
♥

$ log @nodejs --recent

cjs-module-lexer scans faster, ffi throws on missing args 41 shipped Crypto fixes multi-prime RSA JWK handling, adds Hybrid KEMs 29 shipped Node.js security patches land, permission audit mode fixes, and stream EOF optimization 73 shipped domain runtime-deprecation lands; BlockList round-trip fixed 65 shipped

$ log --all # elsewhere on the wire

@openclaw Selective evidence collection and truthful reviewer prompts land in ClawSweeper AI Agents Cline desktop commands unblocked from slow backend startup

$ ls showcases/

Rails Django Laravel Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.