Who contributed to Node.js on July 12, 2026?

8 developers shipped this update, including GitHub Actions, nodejs-github-bot, Efe Karasakal, Archkon, mcollina, MoLow, avivkeller, and github-actions.

What were the notable Node.js updates?

deps: update ngtcp2 to 1.24.0, stream: speed up reads and iteration over default WHATWG streams, and fix(legacy-json): don't mutate the ast.

@nodejs

The Node.js runtime — every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

NGTCP2 UPGRADED, STREAM PERFORMANCE SURGES 27 PERCENT

By RepoJournal · Filed 06:56 UTC on July 12, 2026 · About Node.js

8 people shipped this

GitHub Actions @web-flow 1 cited

nodejs-github-bot @nodejs-github-bot 1 cited

Efe Karasakal @efekrskl 1 cited

Archkon @Archkon 1 cited

mcollina @mcollina 1 cited

MoLow @MoLow 1 cited

avivkeller @avivkeller 1 cited

github-actions @github-actions 1 cited

Node core shipped a significant dependency bump and a performance optimization that measurably speeds up WHATWG stream reads across the stack.

The ngtcp2 HTTP/3 transport library jumped to 1.24.0 [1], bringing upstream security and stability improvements directly into Node's dependency chain. Meanwhile, the streams team landed a targeted optimization [2] that skips redundant size algorithm calls on default WHATWG streams, delivering up to 27.5 percent faster buffered reads and 16.6 percent gains on async iteration - meaningful gains for any application moving data at volume. On cleanup, the HTTP module shed unused code [4] when the IncomingMessage._read method got refactored to drop a dead parameter, keeping core lean. The doc-kit team fixed an AST mutation bug [3] that was silently corrupting legacy JSON structures during processing, and shipped 1.4.2 to npm [5] with the patch baked in. Nightly builds are rolling forward [8], and work continues on typo fixes and test documentation improvements [6] [7] across the codebase.

Action items

→ Upgrade ngtcp2 in your next Node LTS window - carries transport layer fixes nodejs/node [plan]
→ Test stream performance with updated Node on high-throughput workloads nodejs/node [monitor]
→ Update doc-kit to 1.4.2 if you parse legacy JSON structures in docs nodejs/doc-kit [immediate]

References

[1] deps: update ngtcp2 to 1.24.0 ↗ nodejs/node
[2] stream: speed up reads and iteration over default WHATWG streams ↗ nodejs/node
[3] fix(legacy-json): don't mutate the ast ↗ nodejs/doc-kit
[4] http: remove unused n arg from IncomingMessage._read nodejs/node
[5] Version Packages ↗ nodejs/doc-kit
[6] src: fix some typo errors and rename some variables ↗ nodejs/node
[7] doc: add scope overview tables for TestsStream events ↗ nodejs/node
[8] snap: (auto) updated to 27.0.0-nightly2026071214166a59cc nodejs/snap

Quick answers

What shipped in Node.js on July 12, 2026?: Node core shipped a significant dependency bump and a performance optimization that measurably speeds up WHATWG stream reads across the stack. In total, 8 commits and 8 pull requests landed.
Who contributed to Node.js on July 12, 2026?: 8 developers shipped this update, including GitHub Actions, nodejs-github-bot, Efe Karasakal, Archkon, mcollina, MoLow, avivkeller, and github-actions.
What were the notable Node.js updates?: deps: update ngtcp2 to 1.24.0, stream: speed up reads and iteration over default WHATWG streams, and fix(legacy-json): don't mutate the ast.

NODE.JS SNAP DROPS YARN, SHIPS TEMPORAL BY DEFAULT

Node.js snap builds are moving forward: Yarn support ends for pre-26 releases, Node 26 enters the CI pipeline, and Temporal becomes a standard feature across all new builds.

javascript 39 shipped 1-min read

@nodejs 2 days ago

NOTHING SHIPPED

All quiet across Node.js overnight.

javascript 1 shipped 1-min read

@nodejs 3 days ago

Node crypto backend split lands, HTTP/3 callbacks corrected

The core team shipped major refactoring across crypto and QUIC while npm 11.18.0 tightens registry handling, and undici's benchmarks catch up to got v15.

javascript 34 shipped 1-min read

@nodejs 4 days ago

HTTP2 CUTS OVERHEAD 30 PERCENT ACROSS HOT PATH

Node core just shipped a series of performance wins that strip per-request allocations from HTTP2, skipping unnecessary trailers round trips and eliminating object clones on every respond() call.

javascript 29 shipped 1-min read

— or follow the whole beat:

Elsewhere on the wire

Elixir & Phoenix about 5 hours ago

ELIXIR CLOSES COMPLETION AND OPERATOR SIGNATURE GAPS

The Elixir team shipped fixes for two long-standing IDE friction points: cursor completion after operators and proper type signatures for the ++ concatenation operator.

elixir 2 shipped 1-min read

Mobile platforms about 5 hours ago

SWIFT TIGHTENS AVAILABILITY DIAGNOSTICS AS FLUTTER TRACKS SKIA UPDATES

Swift's compiler now correctly diagnoses uses of unavailable API members in universally unavailable extensions, closing a gap that let invalid code slip through.

mobile 8 shipped 1-min read

@dotnet about 5 hours ago

ANDROID SSL VALIDATION BYPASS PATCHED; WASM JIT ALIGNMENT FIXES BLOCKER

SslStream on Android was ignoring platform certificate pinning entirely, bypassing network_security_config.xml and allowing rejected certificates through.

dotnet 28 shipped 1-min read

@spring-projects about 5 hours ago

SPRING-AI FIXES SILENT DATA LOSS IN BATCH EMBEDDING STRATEGY

A critical bug in TokenCountBatchingStrategy was dropping duplicate documents during batch processing, silently returning fewer embeddings than requested.

java 9 shipped 1-min read