Who contributed to Node.js on May 25, 2026?

1 developer shipped this update, including KevinEady.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

NODE FFI OVERHAUL UNBLOCKS TYPESCRIPT TYPE INFERENCE

By RepoJournal · Filed 06:01 UTC on May 25, 2026 · About Node.js

1 person shipped this

KevinEady @KevinEady 1 cited

Node's FFI implementation is stripping property aliases that were silently blocking TypeScript from inferring function signatures, a change that clears the way for better type safety in native bindings.

The core FFI refactor [1] removes multiple property name aliases from function signature objects that served no practical purpose but prevented TypeScript from narrowing types based on the signature shape. This is the kind of breaking change that hurts now, helps forever. Simultaneously, node-addon-api shipped support for SharedArrayBuffer in TypedArray and TypedArrayOf [2], letting native modules handle concurrent memory access patterns without workarounds. The test runner picked up critical bug fixes [3] where three independent failures in the --test-rerun-failures logic were colluding to mask real test failures as passes. On the infrastructure side, commit-lint is now skipping backport pull requests [4], eliminating noise for maintainers managing cherry-picks across release lines. Node v26 test coverage landed in node-addon-api [5], keeping the addon ecosystem aligned with the main branch.

Action items

→ Review FFI property alias changes before upgrading if you're using native bindings nodejs/node [plan]
→ Update to latest node-addon-api if you need SharedArrayBuffer support in typed arrays nodejs/node-addon-api [plan]
→ Re-run flaky tests locally if you're using --test-rerun-failures nodejs/node [monitor]

References

[1] ffi: remove function signature property aliases nodejs/node
[2] feat: add support for SharedArrayBuffer in TypedArray and TypedArrayOf ↗ nodejs/node-addon-api
[3] test_runner: fix --test-rerun-failures swallowing failures on retry nodejs/node
[4] tools: skip commit-lint on backport pull requests nodejs/node
[5] chore: add node v26 test (#1732) nodejs/node-addon-api

Quick answers

What shipped in Node.js on May 25, 2026?: Node's FFI implementation is stripping property aliases that were silently blocking TypeScript from inferring function signatures, a change that clears the way for better type safety in native bindings. In total, 26 commits and 12 pull requests landed.
Who contributed to Node.js on May 25, 2026?: 1 developer shipped this update, including KevinEady.
What were the notable Node.js updates?: ffi: remove function signature property aliases, feat: add support for SharedArrayBuffer in TypedArray and TypedArrayOf, and test_runner: fix --test-rerun-failures swallowing failures on retry.

NODE CORE TIGHTENS DNS BEHAVIOR, DOCS TOOLING SHIFTS AWAY FROM OXC

DNS tests now codify a breaking change in record lookup behavior, while the documentation pipeline abandons OXC for a WASM-based alternative after CI runner incompatibility.

javascript 38 shipped 1-min read

@nodejs 1 day ago

SQLITE GARBAGE COLLECTION BUG AND FFI REENTRANCY HAZARDS DEMAND IMMEDIATE PATCHES

Node.js shipped critical fixes overnight for a use-after-free vulnerability in SQLite callbacks and a string buffer corruption bug in Fast FFI reentrant calls that could crash production systems.

javascript 42 shipped 2-min read

@nodejs 2 days ago

NODE.JS STRIPS DEPRECATED API CALLS, FIXES FFI BOOL REGRESSION

Antoine du Hamel landed two critical cleanups in core this cycle, removing deprecated function calls and custom DOM polyfills while the FFI layer gets a precision fix that restores uint8 semantics.

javascript 17 shipped 1-min read

@nodejs 3 days ago

NODE CORE HARDENS CRYPTO AND FFI, UNDICI PATCHES HEADER INJECTION

Node's crypto layer just got faster and safer, while undici plugged a CRLF injection hole that only matters if your app trusts untrusted function objects as headers.

javascript 26 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.