Who contributed to Node.js on July 5, 2026?

2 developers shipped this update, including trivikr and dependabot[bot].

What were the notable Node.js updates?

stream: reject iter consumers on abort, stream: fix merge abort for pending sources, and meta: bump shiki from 4.1.0 to 4.3.0 in the remark group across 1 directory.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

NODE STREAM ABORT HANDLING FIXED, DOC-KIT TOOLCHAIN BUMPED ACROSS THE BOARD

By RepoJournal · Filed 06:00 UTC on July 5, 2026 · About Node.js

2 people shipped this

dependabot[bot] @dependabot[bot] 3 cited

trivikr @trivikr 2 cited

Stream consumers now reject immediately when abort signals fire instead of hanging on pending reads, closing a critical gap in Node's async iterator cleanup.

The stream/iter module got two critical fixes overnight [1] [2]. First, `bytes()`, `text()`, `arrayBuffer()`, and `array()` now reject promptly when their abort signal fires while an async iterator read is pending - previously they'd hang if the source was stuck in a `next()` call. Second, `merge()` no longer hangs when abort fires during multi-source merge loops. Both changes reuse abort-aware iterator wrappers to ensure consistent signal handling across the API. On the tooling side, doc-kit pushed a sweep of dependency updates: shiki bumped to 4.3.0 [3], the compiling group (@swc/html-wasm and rolldown) refreshed [4], and six lint tools updated including ESLint to 10.6.0 [5]. ERR_REQUIRE_ASYNC_MODULE got improved diagnostics with non-enumerable requireStack properties [6], and workflows cleaned up by removing envinfo [7].

Action items

→ Review and merge stream abort fixes before next minor release nodejs/node [immediate]
→ Update doc-kit dependencies in your local builds - no breaking changes detected nodejs/doc-kit [plan]
→ Monitor ESLint 10.6.0 integration in CI pipelines for any lint rule regressions nodejs/doc-kit [monitor]

References

[1] stream: reject iter consumers on abort ↗ nodejs/node
[2] stream: fix merge abort for pending sources ↗ nodejs/node
[3] meta: bump shiki from 4.1.0 to 4.3.0 in the remark group across 1 directory ↗ nodejs/doc-kit
[4] meta: bump the compiling group across 1 directory with 2 updates ↗ nodejs/doc-kit
[5] meta: bump the lint group across 1 directory with 6 updates ↗ nodejs/doc-kit
[6] esm: improve ERR_REQUIRE_ASYNC_MODULE nodejs/node
[7] tools: remove `envinfo` from our workflows nodejs/node

Quick answers

What shipped in Node.js on July 5, 2026?: Stream consumers now reject immediately when abort signals fire instead of hanging on pending reads, closing a critical gap in Node's async iterator cleanup. In total, 9 commits and 11 pull requests landed.
Who contributed to Node.js on July 5, 2026?: 2 developers shipped this update, including trivikr and dependabot[bot].
What were the notable Node.js updates?: stream: reject iter consumers on abort, stream: fix merge abort for pending sources, and meta: bump shiki from 4.1.0 to 4.3.0 in the remark group across 1 directory.

Node DNS Reverse Lookups Fixed, REPL Gets Syntax Highlighting

Node core shipped a DNS fix that stops reverse lookups from consulting /etc/hosts, breaking alignment with documented behavior that caught developers mid-production.

javascript 14 shipped 1-min read

@nodejs 2 days ago

NODE CRASHES ON ODD-LENGTH HEX STRINGS VIA WRITEV

A critical crash in Node's binary handling when writing hex strings through Writev is now fixed, along with three other stability improvements shipping across the runtime.

javascript 25 shipped 1-min read

@nodejs 3 days ago

NODE CORE TIGHTENS DNS BEHAVIOR, DOCS TOOLING SHIFTS AWAY FROM OXC

DNS tests now codify a breaking change in record lookup behavior, while the documentation pipeline abandons OXC for a WASM-based alternative after CI runner incompatibility.

javascript 38 shipped 1-min read

@nodejs 4 days ago

SQLITE GARBAGE COLLECTION BUG AND FFI REENTRANCY HAZARDS DEMAND IMMEDIATE PATCHES

Node.js shipped critical fixes overnight for a use-after-free vulnerability in SQLite callbacks and a string buffer corruption bug in Fast FFI reentrant calls that could crash production systems.

javascript 42 shipped 2-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.