$ the-wire · showcase
NODE CORE REMOVES DEAD CODE, UPGRADES NPM, UNDICI FIXES HTTP/2 QUEUE CORRUPTION
By RepoJournal · Filed · About Node.js · Composed from the cited sources · methodology
2 people shipped this
Node's test runner shed unused helpers while the debugger gained new probe termination controls, but the real urgency is undici's HTTP/2 fix for out-of-order stream completion that could leave requests dangling.
The core team is cleaning house [1] with dead code removal in the test runner while adding real functionality to the debugger's probe mode [2], which now supports termination limits for per-probe hits. On the C++ side, node::ObjectWrap is officially deprecated [3] in favor of better userland alternatives that don't lock you into specific Node versions. npm bumped to 11.17.0 [5] with new tooling for script allowlisting and dependency age controls. But the critical fix lives in undici: HTTP/2 streams completing out of order were corrupting the request queue [6], advancing the wrong index and potentially losing running requests entirely. The team also backported WebSocket fragmentation fixes [7] that ensure empty fragments don't trip maxFragments limits, closing a spec compliance gap. fs.readFile now accepts caller-supplied buffers [4], reducing allocation pressure for high-volume workloads.
Action items
- → Update undici to latest immediately if you're using HTTP/2 streams in production nodejs/undici [immediate]
- → Plan upgrade to Node with npm 11.17.0 for dependency security tooling in next release cycle nodejs/node [plan]
- → Remove any direct calls to node::ObjectWrap before upgrading major versions nodejs/node [plan]
- → Monitor undici HTTP/2 deployments for queue misclassification symptoms nodejs/undici [monitor]
References
- [1] test_runner: remove unused shuffleArrayWithSeed ↗ nodejs/node
- [2] debugger: add --max-hit option to probe mode ↗ nodejs/node
- [3] src: officially deprecate `node::ObjectWrap` ↗ nodejs/node
- [4] fs: support caller-supplied readFile() buffers ↗ nodejs/node
- [5] deps: upgrade npm to 11.17.0 ↗ nodejs/node
- [6] fix: preserve h2 queue on out-of-order completion ↗ nodejs/undici
- [7] Cherry-pick 91678cbbce and 7a2db575e0 (#5422) nodejs/undici ↗
