Who contributed to Node.js on July 28, 2026?

7 developers shipped this update, including aduh95, Archkon, trivikr, Efe Karasakal, Node.js GitHub Bot, mcollina, and metcoder95.

What were the notable Node.js updates?

test: ensure assertions are reached on all tests, typings: remove isDataView from types binding, and vfs: make lchown update symlink metadata.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

NODE CORE TIGHTENS TEST COVERAGE AS UNDICI SHIPS H2 NAMESPACE UPGRADE

By RepoJournal · Filed 06:56 UTC on July 28, 2026 · About Node.js

7 people shipped this

aduh95 @aduh95 1 cited

Archkon @Archkon 1 cited

trivikr @trivikr 1 cited

Efe Karasakal @efekrskl 1 cited

mcollina @mcollina 1 cited

metcoder95 @metcoder95 1 cited

Node.js GitHub Bot @nodejs-github-bot

Node's core test suite is closing escape hatches that let assertions slip through linter rules, while Undici moves HTTP/2 options into a cleaner namespace.

The test harness tightening [1] addresses a real gap: tests were destructuring `assert` and `fixtures` to dodge linter enforcement added in recent commits, letting assertions run without proper validation. This is the kind of creeping technical debt that surfaces during large refactors, and catching it now prevents cascading issues down the line. On the type system front, Node is removing `isDataView` from the types binding [2], cleaning up API surface that was creating friction. Meanwhile, Undici shipped a significant H2 options namespace change [6], grouping HTTP/2 settings under a dedicated namespace for better API ergonomics and maintainability. The same team refreshed Undici's Web Platform Test expectations [5] to stay synchronized with upstream test changes, a necessary chore that keeps compatibility signals accurate. Smaller wins include VFS symlink handling fixes [3] that make `lchown()` operate on the link itself rather than following it, and codeowner assignment for URL pattern files [4] to clarify review responsibilities.

Action items

→ Review test suite changes in Node core; audit your own test code for destructured assert patterns nodejs/node [plan]
→ Plan Undici upgrade for H2 namespace changes if you use HTTP/2 client options nodejs/undici [plan]
→ Monitor VFS symlink behavior changes if you rely on lchown in mounted filesystems nodejs/node [monitor]

References

[1] test: ensure assertions are reached on all tests ↗ nodejs/node
[2] typings: remove isDataView from types binding nodejs/node
[3] vfs: make lchown update symlink metadata ↗ nodejs/node
[4] meta: add @nodejs/url as codeowner for node_url_pattern.* nodejs/node
[5] test: update WPT expectations ↗ nodejs/undici
[6] feat: namespace h2 options (#5498) nodejs/undici

Quick answers

What shipped in Node.js on July 28, 2026?: Node's core test suite is closing escape hatches that let assertions slip through linter rules, while Undici moves HTTP/2 options into a cleaner namespace. In total, 11 commits and 7 pull requests landed.
Who contributed to Node.js on July 28, 2026?: 7 developers shipped this update, including aduh95, Archkon, trivikr, Efe Karasakal, Node.js GitHub Bot, mcollina, and metcoder95.
What were the notable Node.js updates?: test: ensure assertions are reached on all tests, typings: remove isDataView from types binding, and vfs: make lchown update symlink metadata.

NET/PROMISES ARRIVES, SECURITY RELEASE DELAYED AGAIN

Node.js ships a promise-based net API that eliminates hand-wired event listeners, while the July security release slips for the second time.

javascript 36 shipped 1-min read

@nodejs 2 days ago

Node DNS Reverse Lookups Fixed, REPL Gets Syntax Highlighting

Node core shipped a DNS fix that stops reverse lookups from consulting /etc/hosts, breaking alignment with documented behavior that caught developers mid-production.

javascript 14 shipped 1-min read

@nodejs 3 days ago

NODE CRASHES ON ODD-LENGTH HEX STRINGS VIA WRITEV

A critical crash in Node's binary handling when writing hex strings through Writev is now fixed, along with three other stability improvements shipping across the runtime.

javascript 25 shipped 1-min read

@nodejs 4 days ago

NODE CORE TIGHTENS DNS BEHAVIOR, DOCS TOOLING SHIFTS AWAY FROM OXC

DNS tests now codify a breaking change in record lookup behavior, while the documentation pipeline abandons OXC for a WASM-based alternative after CI runner incompatibility.

javascript 38 shipped 1-min read

Elsewhere on the wire

AI Agents about 3 hours ago

LANGCHAIN CORES SHIP, ANTHROPIC THINKING BLOCKS FIXED, OPENHANDS TIGHTENS WEBSOCKET AUTH

LangChain released two core packages with critical fixes for streaming stability and environment variable handling, while OpenHands closed a security gap that left WebSocket connections unprotected.

ai-agents 119 shipped 1-min read

Local LLMs about 3 hours ago

OLLAMA RIPS OUT IMAGE GENERATION, LLAMA.CPP SHIPS SPECULATIVE DECODING

Ollama removed its entire MLX image generation pipeline overnight, while llama.cpp landed DSpark speculative decoding and fixed a critical SYCL memory bug affecting Arc GPUs.

+11

llms 239 shipped 2-min read

@CachyOS about 3 hours ago

KERNEL SCHEDULER UPDATES ACROSS BORE AND SCX TOOLING

CachyOS shipped BORE 6.8.0 patches across two kernel series while upgrading its sched-ext ecosystem in parallel, signaling major tuning work ahead.

infra 83 shipped 1-min read

Elixir & Phoenix about 4 hours ago

ELIXIR TIGHTENS ERROR HANDLING ACROSS DATE, ECTO, AND IEXHELPERS

Date.range now surfaces ArgumentError instead of Protocol.UndefinedError when passed invalid step values, catching a class of bugs that silently fail in production code.