Who contributed to Node.js on July 31, 2026?

8 developers shipped this update, including avivkeller, dependabot, trivikr, Soul Lee, Ilyas Shabi, Archkon, btea, and Brian Muenzenmeyer.

What were the notable Node.js updates?

chore(monorepo): break out platform-specific code, ffi: fix optimized buffer conversions, and meta: bump the mdx group with 8 updates.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

NODE.ORG MONOREPO REFACTOR BREAKS VERCEL BUILD, FFI BUFFER FIX LANDS

By RepoJournal · Filed 06:56 UTC on July 31, 2026 · About Node.js

8 people shipped this

dependabot @dependabot 3 cited

avivkeller @avivkeller 2 cited

trivikr @trivikr 2 cited

Archkon @Archkon 1 cited

Soul Lee @soulee-dev

Ilyas Shabi @IlyasShabi

btea @btea

Brian Muenzenmeyer @bmuenzenmeyer

The Node.js website monorepo split broke Vercel CI, but OpenNext is passing - and a critical FFI buffer conversion bug is now fixed.

Node.org's platform-specific code breakout [1] moved vercel.json in a way that triggered Vercel failures, though OpenNext CI is succeeding on the new structure. Meanwhile, the main Node.js repo shipped a fix for optimized FFI buffer conversions [2] that were incorrectly rejecting non-memory-backed pointer values after optimization. The fix restores compatibility with documented pointer representations including bigint and strings while keeping the specialized native fast path intact. On the documentation side, doc-kit landed its monorepo restructuring [8] into packages/core, with follow-up PRs planned to extract generators incrementally. Dependency updates across Node.org include Shiki 4.3.1 [3], Radix UI component bumps [4], and Playwright 1.61.1 [5], while a SQLite state-check fix [6] and glob matcher platform-keying improvement [7] landed in the main repo.

Action items

→ Monitor Vercel deployment status for Node.org after monorepo restructure [ref:1] nodejs/nodejs.org [immediate]
→ Update FFI implementations using optimized buffer conversions [ref:6] nodejs/node [plan]
→ Review doc-kit monorepo packages/core structure as generator PRs land [ref:12] nodejs/doc-kit [monitor]

References

[1] chore(monorepo): break out platform-specific code ↗ nodejs/nodejs.org
[2] ffi: fix optimized buffer conversions ↗ nodejs/node
[3] meta: bump the mdx group with 8 updates ↗ nodejs/nodejs.org
[4] meta: bump the radix group with 8 updates ↗ nodejs/nodejs.org
[5] meta: bump @playwright/test from 1.59.1 to 1.61.1 ↗ nodejs/nodejs.org
[6] sqlite: check database state before calling SQLite ↗ nodejs/node
[7] fs: key glob matcher cache by platform nodejs/node
[8] chore(monorepo): move everything into packages/core ↗ nodejs/doc-kit

Quick answers

What shipped in Node.js on July 31, 2026?: The Node.js website monorepo split broke Vercel CI, but OpenNext is passing - and a critical FFI buffer conversion bug is now fixed. In total, 21 commits and 26 pull requests landed.
Who contributed to Node.js on July 31, 2026?: 8 developers shipped this update, including avivkeller, dependabot, trivikr, Soul Lee, Ilyas Shabi, Archkon, btea, and Brian Muenzenmeyer.
What were the notable Node.js updates?: chore(monorepo): break out platform-specific code, ffi: fix optimized buffer conversions, and meta: bump the mdx group with 8 updates.

NODE 26.7.0 SHIPS WITH CRYPTO UPGRADES AND DNS SECURITY FIX

Node.js 26.7.0 landed overnight with SEMVER-MINOR crypto improvements and a critical DNS vulnerability patch that prevents large resolveAny replies from crashing.

javascript 49 shipped

@nodejs Aug 5

STREAMS SHED ALLOCATIONS, HTTP/2 WINDOWS QUADRUPLE

Node.js core cut per-chunk memory overhead in pipeTo by eliminating redundant promise allocations, while HTTP/2 default window sizes jumped 64x to unlock full bandwidth on high-latency connections.

javascript 70 shipped

@nodejs Aug 4

NODE 26.6.0 AND 24.19.0 LTS LAND WITH FFI EVENT LOOP AND BUFFER STREAMING

Node.js shipped two releases overnight: the current branch gets foreign function interface power, while the LTS line adds blob.textStream() and OpenSSL compression support.

javascript 73 shipped

@nodejs Aug 3

NODE CRYPTO UNLOCKS PRIVATE KEY LOADERS, FFI CRASH FIXED BEFORE IT SPREADS

Node core shipped two critical improvements overnight: crypto now loads private keys through OpenSSL STORE loaders, and FFI fast calls will no longer crash after library close.

javascript 63 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.