Who contributed to Node.js on July 27, 2026?

6 developers shipped this update, including Archkon, avivkeller, skdas20, github-actions[bot], dependabot, and semantic-release-bot.

What were the notable Node.js updates?

dns: do not consult hosts file in reverse lookups, dns: do not consult hosts file in reverse lookups, and repl: add basic syntax highlighting.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

Node DNS Reverse Lookups Fixed, REPL Gets Syntax Highlighting

By RepoJournal · Filed 06:56 UTC on July 27, 2026 · About Node.js

6 people shipped this

Archkon @Archkon 2 cited

github-actions[bot] @github-actions[bot] 2 cited

avivkeller @avivkeller 1 cited

skdas20 @skdas20 1 cited

dependabot @dependabot

semantic-release-bot @semantic-release-bot

Node core shipped a DNS fix that stops reverse lookups from consulting /etc/hosts, breaking alignment with documented behavior that caught developers mid-production.

The dns.reverse() method was honoring c-ares lookup order and returning entries from /etc/hosts despite documentation stating it performs pure DNS queries [2]. This fix configures c-ares resolver channels to use only DNS/PTR lookups, aligning reverse() with the behavior of dns.resolve*() [1]. In parallel, Node's REPL now includes basic syntax highlighting [3], a quality-of-life improvement for interactive debugging. Documentation also tightened: assert.deepStrictEqual() docs now explicitly note that object constructors are compared as part of deep strict equality [4], closing a gap between docs and actual behavior. Across the ecosystem, changelog-maker landed v4.4.42 and nodejs-dist-indexer reached v1.8.20 with routine dependency patches [5] [6].

Action items

→ Review and test DNS reverse lookup behavior in your applications, especially if relying on /etc/hosts for local overrides nodejs/node [plan]
→ Test assert.deepStrictEqual() equality checks if you rely on constructor comparisons in validation logic nodejs/node [monitor]

References

[1] dns: do not consult hosts file in reverse lookups ↗ nodejs/node
[2] dns: do not consult hosts file in reverse lookups nodejs/node
[3] repl: add basic syntax highlighting nodejs/node
[4] doc: mention constructor check in deepStrictEqual ↗ nodejs/node
[5] v4.4.42 ↗ nodejs/changelog-maker
[6] v1.8.20 ↗ nodejs/nodejs-dist-indexer

Quick answers

What shipped in Node.js on July 27, 2026?: Node core shipped a DNS fix that stops reverse lookups from consulting /etc/hosts, breaking alignment with documented behavior that caught developers mid-production. In total, 6 commits, 5 pull requests, and 3 releases landed.
Who contributed to Node.js on July 27, 2026?: 6 developers shipped this update, including Archkon, avivkeller, skdas20, github-actions[bot], dependabot, and semantic-release-bot.
What were the notable Node.js updates?: dns: do not consult hosts file in reverse lookups, dns: do not consult hosts file in reverse lookups, and repl: add basic syntax highlighting.

NODE CRASHES ON ODD-LENGTH HEX STRINGS VIA WRITEV

A critical crash in Node's binary handling when writing hex strings through Writev is now fixed, along with three other stability improvements shipping across the runtime.

javascript 25 shipped 1-min read

@nodejs 3 days ago

NODE CORE TIGHTENS DNS BEHAVIOR, DOCS TOOLING SHIFTS AWAY FROM OXC

DNS tests now codify a breaking change in record lookup behavior, while the documentation pipeline abandons OXC for a WASM-based alternative after CI runner incompatibility.

javascript 38 shipped 1-min read

@nodejs 4 days ago

SQLITE GARBAGE COLLECTION BUG AND FFI REENTRANCY HAZARDS DEMAND IMMEDIATE PATCHES

Node.js shipped critical fixes overnight for a use-after-free vulnerability in SQLite callbacks and a string buffer corruption bug in Fast FFI reentrant calls that could crash production systems.

javascript 42 shipped 2-min read

@nodejs 5 days ago

NODE.JS STRIPS DEPRECATED API CALLS, FIXES FFI BOOL REGRESSION

Antoine du Hamel landed two critical cleanups in core this cycle, removing deprecated function calls and custom DOM polyfills while the FFI layer gets a precision fix that restores uint8 semantics.

javascript 17 shipped 1-min read

Elsewhere on the wire

AI Agents about 22 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 22 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 22 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 22 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.