RepoJournal
Node.js @nodejs
143 wires and counting

$ follow Node.js

Keep up with Node.js in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-06-28
stories 12
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

NODE VFS FIX STOPS SILENT FILE FAILURES ON RENAMED HANDLES

By RepoJournal · Filed · About Node.js · Composed from the cited sources · methodology

trivikr avivkeller
2 people shipped this
trivikr @trivikr 1 cited avivkeller @avivkeller 1 cited

A critical filesystem virtualization bug that caused ENOENT errors when tracked files were renamed after opening is now fixed.

The Virtual FileSystem layer in Node's file handling had a fundamental flaw: when you opened a file and then that file was renamed, subsequent reads through the open file descriptor would fail instead of following the inode like the real filesystem does [1]. The fix moves `RealFileHandle.readFileSync()` and `readFile()` to read through the already-open fd using positioned reads rather than reopening the original path, matching native behavior and preserving handle state [1]. In parallel, the zlib module is tightening its decompression security posture by exposing the previously internal `rejectGarbageAfterEnd` option [2] and applying it to web streams to reject trailing gzip members [3], addressing a class of parsing vulnerabilities. Crypto types are now officially documented [5], and the docs got a scrub to fix broken links and duplicate stability labels [4]. Doc-kit merged a feature to allow titles without markdown syntax [6], improving templating flexibility.

$ ls nodejs/reviews/ # the step-back reads

the week in review node-gyp 13.1.0 patches tar CVE, raises CMake floor the month in review Node 26.10.0 lands crypto.parsePKCS12 as npm 12 ships
Full archive → Weekly reviews →

Quick answers

What shipped in Node.js on June 28, 2026?
A critical filesystem virtualization bug that caused ENOENT errors when tracked files were renamed after opening is now fixed. In total, 8 commits and 4 pull requests landed.
Who contributed to Node.js on June 28, 2026?
2 developers shipped this update, including trivikr and avivkeller.
What were the notable Node.js updates?
vfs: read RealFSProvider files from open fd, zlib: expose rejectGarbageAfterEnd option, and zlib: reject trailing gzip members in web streams.
♥

$ log @nodejs --recent

Undici caps EventSource buffering, node:ffi takes plain integers 51 shipped Legacy AsyncLocalStorage removed, FFI permission checks dropped 29 shipped node-gyp 13.1.0 fixes --msvs_version, and citgm's red builds traced to loglevel precedence 17 shipped child_process spawn gets 20% faster, QUIC macro cleaned up 43 shipped

$ log --all # elsewhere on the wire

@vuejs Vue language tools stop calling registerHooks on buggy Node builds @openclaw OpenClaw's deslop sweep removes 1,000+ production lines

$ ls showcases/

Rails Django Laravel Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.