Who contributed to Node.js on July 25, 2026?

8 developers shipped this update, including David Evans, aduh95, nodejs-github-bot, Javonne-liu, nodejs-crowdin, Guilherme Araújo, bmuenzenmeyer, and avivkeller.

What were the notable Node.js updates?

dns: add tests for ENODATA states, Adds link to beta docs (#8998), and fix(ast): swcify.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

NODE CORE TIGHTENS DNS BEHAVIOR, DOCS TOOLING SHIFTS AWAY FROM OXC

By RepoJournal · Filed 06:56 UTC on July 25, 2026 · About Node.js

8 people shipped this

nodejs-github-bot @nodejs-github-bot 2 cited

David Evans @davidje13 1 cited

aduh95 @aduh95 1 cited

Javonne-liu @Javonne-liu 1 cited

nodejs-crowdin @nodejs-crowdin 1 cited

bmuenzenmeyer @bmuenzenmeyer 1 cited

avivkeller @avivkeller 1 cited

Guilherme Araújo @araujogui

DNS tests now codify a breaking change in record lookup behavior, while the documentation pipeline abandons OXC for a WASM-based alternative after CI runner incompatibility.

The most significant shift in node/node landed with tests that enforce the new ENODATA error thrown when DNS queries find no matching records [1]. This behavior changed in a prior commit, and the new test suite ensures the breaking change sticks: CNAME chains that resolve to domains without the requested record type now error instead of returning empty arrays. On the docs front, the nodejs.org team is promoting the beta API documentation more aggressively, adding prominent navigation links to increase discoverability [2]. Meanwhile, doc-kit ditched OXC for @swc/wasm because OXC does not work on all node.js CI runners [3], a practical acknowledgment that perfect tooling beats broken performance. The project also bumped histogram to 0.11.10 [4] and landed a V8 backport addressing LoongArch64 build failures [5]. Documentation syntax cleanup removed unsupported generic types from stream docs [6]. Crowdin translations synced across the website [7], and reliability reporting continued its automated cadence [8].

Action items

→ Review DNS error handling in your code if you rely on empty array returns from record lookups nodejs/node [plan]
→ Update doc-kit projects to use @swc/wasm if CI is failing on OXC nodejs/doc-kit [plan]
→ Update histogram dependency to 0.11.10 in your build nodejs/node [monitor]

References

[1] dns: add tests for ENODATA states nodejs/node
[2] Adds link to beta docs (#8998) nodejs/nodejs.org
[3] fix(ast): swcify ↗ nodejs/doc-kit
[4] deps: update histogram to 0.11.10 ↗ nodejs/node
[5] deps: V8: backport c4d06ba586f33b8e5 ↗ nodejs/node
[6] doc: remove unsupported syntax from `stream_iter.md` ↗ nodejs/node
[7] [automated]: crowdin sync ↗ nodejs/nodejs.org
[8] Add report for 2026-07-25 nodejs/reliability

Quick answers

What shipped in Node.js on July 25, 2026?: DNS tests now codify a breaking change in record lookup behavior, while the documentation pipeline abandons OXC for a WASM-based alternative after CI runner incompatibility. In total, 24 commits and 14 pull requests landed.
Who contributed to Node.js on July 25, 2026?: 8 developers shipped this update, including David Evans, aduh95, nodejs-github-bot, Javonne-liu, nodejs-crowdin, Guilherme Araújo, bmuenzenmeyer, and avivkeller.
What were the notable Node.js updates?: dns: add tests for ENODATA states, Adds link to beta docs (#8998), and fix(ast): swcify.

SQLITE GARBAGE COLLECTION BUG AND FFI REENTRANCY HAZARDS DEMAND IMMEDIATE PATCHES

Node.js shipped critical fixes overnight for a use-after-free vulnerability in SQLite callbacks and a string buffer corruption bug in Fast FFI reentrant calls that could crash production systems.

javascript 42 shipped 2-min read

@nodejs 2 days ago

NODE.JS STRIPS DEPRECATED API CALLS, FIXES FFI BOOL REGRESSION

Antoine du Hamel landed two critical cleanups in core this cycle, removing deprecated function calls and custom DOM polyfills while the FFI layer gets a precision fix that restores uint8 semantics.

javascript 17 shipped 1-min read

@nodejs 3 days ago

NODE CORE HARDENS CRYPTO AND FFI, UNDICI PATCHES HEADER INJECTION

Node's crypto layer just got faster and safer, while undici plugged a CRLF injection hole that only matters if your app trusts untrusted function objects as headers.

javascript 26 shipped 1-min read

@nodejs 4 days ago

NODE FIXES STACK OVERFLOW IN RECURSIVE READDIR, PATCHES PERMISSION AUDIT MODE

A circular symlink crash in recursive directory traversal just got patched, and permission audit mode finally stops throwing errors when it should only warn.

javascript 23 shipped 1-min read

Elsewhere on the wire

AI Agents about 5 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 5 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.