RepoJournal
Node.js @nodejs
179 wires and counting

$ follow Node.js

Keep up with Node.js in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-06-19
stories 13
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

UNDICI FIXES RETRY HANG ON LARGE DOWNLOADS

By RepoJournal · Filed · About Node.js · Composed from the cited sources · methodology

dependabot[bot] bogomya
2 people shipped this
dependabot[bot] @dependabot[bot] 3 cited bogomya @bogomya 1 cited

Undici patched a critical bug where retried Range requests hung indefinitely under backpressure, reproducibly freezing downloads over 1GB from S3.

The RetryAgent was losing flow-control wiring when transparently resuming a connection mid-stream, leaving the socket live but the reader dead [1]. This is the kind of silent hang that kills production jobs without error logs. In parallel, esbuild 0.28.1 shipped a security fix blocking backslash characters in local dev server HTTP requests [2], a small but necessary hardening. Across the Node.js ecosystem, maintenance is steady: full-icu-npm completed its actions/checkout migration to v7 [3], fixing fork PR security checks, while corepack bumped to 6.0.3 [4]. Most of these are dependency hygiene. The undici retry fix is the one that matters for anyone streaming large files or resuming downloads.

$ ls nodejs/reviews/ # the step-back reads

the week in review commit-stream 3.0.0 restricts imports to package root the month in review Node 26 enters LTS as five undici advisories land
Full archive → Weekly reviews →

Quick answers

What shipped in Node.js on June 19, 2026?
Undici patched a critical bug where retried Range requests hung indefinitely under backpressure, reproducibly freezing downloads over 1GB from S3. In total, 6 commits and 7 pull requests landed.
Who contributed to Node.js on June 19, 2026?
2 developers shipped this update, including bogomya and dependabot[bot].
What were the notable Node.js updates?
fix(retry): keep flow-control wired to the active connection across resumes, build(deps-dev): bump esbuild from 0.28.0 to 0.28.1, and Bump actions/checkout from 6 to 7.
♥

$ log @nodejs --recent

Workers preload streams into the startup snapshot; http2 accepts repeated content-encoding 18 shipped HTTP drain stalls after coalesced chunks, undici restores h2 error codes 20 shipped Stale OpenSSL errors cleared, npm 12.2.2 lands in node 26 shipped Node coalesces duplicate DNS lookups, batches HTTP body spans 37 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.