RepoJournal
Node.js

@nodejs

The Node.js runtime - every backend team's CVE source of truth

Keep up with Node.js in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Sun 28 jun
  2. Mon 29 jun
  3. Tue 30 jun
  4. Wed 1 jul
  5. Thu 2 jul
  6. Fri 3 jul
  7. Sat 4 jul
  8. Sun 5 jul
  9. Mon 6 jul
  10. Tue 7 jul
  11. Wed 8 jul
  12. Thu 9 jul
  13. Fri 10 jul
  14. Sat 11 jul
  15. Sun 12 jul
  16. Mon 13 jul
  17. Tue 14 jul
  18. Wed 15 jul
  19. Thu 16 jul
  20. Fri 17 jul
  21. Sat 18 jul
  22. Sun 19 jul
  23. Mon 20 jul
  24. Tue 21 jul
  25. Wed 22 jul
  26. Thu 23 jul
  27. Fri 24 jul
  28. Sat 25 jul
  29. Sun 26 jul
  30. Mon 27 jul
Topics: JavaScript Full archive →

The Wire · Showcase

NODEJS-DIST-INDEXER SHIPS WITH BL DEPENDENCY PATCH

By RepoJournal · Filed · About Node.js

dependabot[bot]
1 person shipped this
dependabot[bot] @dependabot[bot] 1 cited

The Node.js distribution indexer rolled v1.8.17 overnight, pulling in a buffer handling update from the bl library that tightens stream concatenation.

nodejs-dist-indexer v1.8.17 landed with a dependency bump to bl 7.0.6 [2], addressing improvements in the widely-used buffer concatenation library [1]. The release is minor but carries the kind of dependency hygiene that prevents downstream surprises in production distribution pipelines [3]. Reliability reporting for 2026-07-03 is now live [4]. No breaking changes across the stack.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] v1.8.17 ↗ nodejs/nodejs-dist-indexer
  2. [2] chore(deps): bump bl from 7.0.5 to 7.0.6 ↗ nodejs/nodejs-dist-indexer
  3. [3] chore(release): 1.8.17 [skip ci] nodejs/nodejs-dist-indexer
  4. [4] Add report for 2026-07-03 nodejs/reliability

Quick answers

What shipped in Node.js on July 3, 2026?
The Node.js distribution indexer rolled v1.8.17 overnight, pulling in a buffer handling update from the bl library that tightens stream concatenation. In total, 2 commits, 1 pull requests, and 1 releases landed.
Who contributed to Node.js on July 3, 2026?
1 developer shipped this update, including dependabot[bot].
What were the notable Node.js updates?
v1.8.17, chore(deps): bump bl from 7.0.5 to 7.0.6, and chore(release): 1.8.17 [skip ci].

More from @nodejs

Node.js @nodejs

Node DNS Reverse Lookups Fixed, REPL Gets Syntax Highlighting

Node core shipped a DNS fix that stops reverse lookups from consulting /etc/hosts, breaking alignment with documented behavior that caught developers mid-production.

Archkon avivkeller skdas20 github-actions[bot] +2
javascript 14 shipped 1-min read
Node.js @nodejs

NODE CRASHES ON ODD-LENGTH HEX STRINGS VIA WRITEV

A critical crash in Node's binary handling when writing hex strings through Writev is now fixed, along with three other stability improvements shipping across the runtime.

RajeshKumar11 Archkon 3zrv remcohaszing +3
javascript 25 shipped 1-min read
Node.js @nodejs

NODE CORE TIGHTENS DNS BEHAVIOR, DOCS TOOLING SHIFTS AWAY FROM OXC

DNS tests now codify a breaking change in record lookup behavior, while the documentation pipeline abandons OXC for a WASM-based alternative after CI runner incompatibility.

David Evans aduh95 nodejs-github-bot Javonne-liu +4
javascript 38 shipped 1-min read
Node.js @nodejs

SQLITE GARBAGE COLLECTION BUG AND FFI REENTRANCY HAZARDS DEMAND IMMEDIATE PATCHES

Node.js shipped critical fixes overnight for a use-after-free vulnerability in SQLite callbacks and a string buffer corruption bug in Fast FFI reentrant calls that could crash production systems.

GitHub Actions Tim Perry Matteo Collina trivikr +2
javascript 42 shipped 2-min read

Daily updates, in your inbox

Follow Node.js

Keep up with Node.js in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.