Who contributed to Node.js on May 6, 2026?

2 developers shipped this update, including GeoffreyBooth and mcollina.

What were the notable Node.js updates?

2026-05-05, Version 26.0.0 (Current), @RafaelGSS, 2026-05-05, Version 26.0.0 (Current), and `SnapshotAgent`: Add `normalizeBody` and `normalizeQuery`.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

NODE.JS 26 SHIPS WITH TEMPORAL API ENABLED BY DEFAULT

By RepoJournal · Filed 06:01 UTC on May 6, 2026 · About Node.js

2 people shipped this

GeoffreyBooth @GeoffreyBooth 1 cited

mcollina @mcollina 1 cited

Node.js 26 is live with the Temporal API enabled by default, V8 14.6, and Undici 8.0, marking a major leap forward—but developers upgrading will face breaking changes in assert, build requirements, and core APIs.

Node.js 26 [1][2] arrives as the Current release with Temporal finally production-ready and GCC 13.2 now mandatory for builds [2]. V8 advances to 14.6 and Undici jumps to 8.0, both carrying semver-major implications for the ecosystem. The release also hardens Promise.race() and Promise.any() by skipping unnecessary JS callbacks for losing promises [6], eliminating memory bloat in tight loops that previously caused OOM errors. Assert gains printf-style formatting support [2], a breaking change for code expecting specific error signatures. Meanwhile, the undici team continues stabilizing the HTTP client with snapshot recording now supporting body and query normalization [3], letting teams strip volatile fields like timestamps and cache-busting params from request matching—critical for reliable test snapshots in CI/CD pipelines. Test flakiness fixes across undici [4][5] suggest the team caught race conditions in stream compatibility and timeout handling before they hit production.

Action items

→ Review Node.js 26 breaking changes before upgrading production apps—especially assert behavior and GCC 13.2 requirement nodejs/node [plan]
→ Integrate undici 8.0 and test snapshot normalization options if you rely on request matching in snapshot-based testing nodejs/undici [plan]
→ Monitor Temporal adoption patterns as it moves from experimental to default nodejs/node [monitor]

References

[1] 2026-05-05, Version 26.0.0 (Current), @RafaelGSS ↗ nodejs/node
[2] 2026-05-05, Version 26.0.0 (Current) nodejs/node
[3] `SnapshotAgent`: Add `normalizeBody` and `normalizeQuery` ↗ nodejs/undici
[4] test: deflake stream compat coverage ↗ nodejs/undici
[5] test: resolve flaky timeout in issue-3356 (#5188) nodejs/undici
[6] src: skip JS callback for settled Promise.race losers nodejs/node

Quick answers

What shipped in Node.js on May 6, 2026?: Node.js 26 is live with the Temporal API enabled by default, V8 14.6, and Undici 8.0, marking a major leap forward—but developers upgrading will face breaking changes in assert, build requirements, and core APIs. In total, 25 commits, 23 pull requests, and 1 releases landed.
Who contributed to Node.js on May 6, 2026?: 2 developers shipped this update, including GeoffreyBooth and mcollina.
What were the notable Node.js updates?: 2026-05-05, Version 26.0.0 (Current), @RafaelGSS, 2026-05-05, Version 26.0.0 (Current), and `SnapshotAgent`: Add `normalizeBody` and `normalizeQuery`.

NODE CORE TIGHTENS DNS BEHAVIOR, DOCS TOOLING SHIFTS AWAY FROM OXC

DNS tests now codify a breaking change in record lookup behavior, while the documentation pipeline abandons OXC for a WASM-based alternative after CI runner incompatibility.

javascript 38 shipped 1-min read

@nodejs 1 day ago

SQLITE GARBAGE COLLECTION BUG AND FFI REENTRANCY HAZARDS DEMAND IMMEDIATE PATCHES

Node.js shipped critical fixes overnight for a use-after-free vulnerability in SQLite callbacks and a string buffer corruption bug in Fast FFI reentrant calls that could crash production systems.

javascript 42 shipped 2-min read

@nodejs 2 days ago

NODE.JS STRIPS DEPRECATED API CALLS, FIXES FFI BOOL REGRESSION

Antoine du Hamel landed two critical cleanups in core this cycle, removing deprecated function calls and custom DOM polyfills while the FFI layer gets a precision fix that restores uint8 semantics.

javascript 17 shipped 1-min read

@nodejs 3 days ago

NODE CORE HARDENS CRYPTO AND FFI, UNDICI PATCHES HEADER INJECTION

Node's crypto layer just got faster and safer, while undici plugged a CRLF injection hole that only matters if your app trusts untrusted function objects as headers.

javascript 26 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.