Who contributed to Node.js on August 1, 2026?

5 developers shipped this update, including jasnell, mcollina, avivkeller, Tim Perry, and btea.

What were the notable Node.js updates?

stream: reduce per-chunk work in WHATWG tee and BYOB reads, net: multiple dtls improvements, and quic: fix segfault after fragmented client hello.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

NODE CUTS STREAM OVERHEAD, DTLS GAINS STABILITY

By RepoJournal · Filed 06:56 UTC on August 1, 2026 · About Node.js

5 people shipped this

avivkeller @avivkeller 2 cited

jasnell @jasnell 1 cited

mcollina @mcollina 1 cited

Tim Perry @pimterry 1 cited

btea @btea 1 cited

Stream performance just got faster with ring buffer optimization in WHATWG tee operations, while DTLS and QUIC improvements shore up critical network paths.

Matteo Collina landed a major optimization that replaces array-backed queues with ring buffers in WHATWG stream operations [1], eliminating per-chunk `Array.prototype.shift` overhead on BYOB reads. This continues a performance series that systematically removes hot-path allocations from the streams stack. Meanwhile, James Snell shipped multiple DTLS improvements to the net module [2], strengthening Node's datagram transport layer as QUIC support matures. Tim Perry fixed a critical segfault in QUIC's fragmented client hello handling [3], addressing a crash path that could destabilize long-lived connections. On the testing side, Aviv Keller removed a flaky REPL test from the blocklist [4] after a V8 fix, and added `--test-coverage-include-all` support to the test runner [5] to improve coverage reporting on untested files. Over in doc-kit, the search navigation now keeps the URL hash synchronized with jumped-to anchors [6], fixing a UX gap where same-page hits left the address bar stale.

Action items

→ Test stream performance on BYOB workloads after the tee optimization nodejs/node [plan]
→ Review QUIC client hello fragmentation handling if you have long-lived QUIC connections in production nodejs/node [monitor]
→ Enable test coverage reporting with --test-coverage-include-all for fuller coverage visibility nodejs/node [plan]

References

[1] stream: reduce per-chunk work in WHATWG tee and BYOB reads ↗ nodejs/node
[2] net: multiple dtls improvements ↗ nodejs/node
[3] quic: fix segfault after fragmented client hello nodejs/node
[4] test: remove test-repl-user-error-handler from flaky nodejs/node
[5] test_runner: add support for --test-coverage-include-all nodejs/node
[6] fix: sync URL hash when following same-page search hits (#963) nodejs/doc-kit

Quick answers

What shipped in Node.js on August 1, 2026?: Stream performance just got faster with ring buffer optimization in WHATWG tee operations, while DTLS and QUIC improvements shore up critical network paths. In total, 11 commits and 8 pull requests landed.
Who contributed to Node.js on August 1, 2026?: 5 developers shipped this update, including jasnell, mcollina, avivkeller, Tim Perry, and btea.
What were the notable Node.js updates?: stream: reduce per-chunk work in WHATWG tee and BYOB reads, net: multiple dtls improvements, and quic: fix segfault after fragmented client hello.

NODE 26.7.0 SHIPS WITH CRYPTO UPGRADES AND DNS SECURITY FIX

Node.js 26.7.0 landed overnight with SEMVER-MINOR crypto improvements and a critical DNS vulnerability patch that prevents large resolveAny replies from crashing.

javascript 49 shipped

@nodejs Aug 5

STREAMS SHED ALLOCATIONS, HTTP/2 WINDOWS QUADRUPLE

Node.js core cut per-chunk memory overhead in pipeTo by eliminating redundant promise allocations, while HTTP/2 default window sizes jumped 64x to unlock full bandwidth on high-latency connections.

javascript 70 shipped

@nodejs Aug 4

NODE 26.6.0 AND 24.19.0 LTS LAND WITH FFI EVENT LOOP AND BUFFER STREAMING

Node.js shipped two releases overnight: the current branch gets foreign function interface power, while the LTS line adds blob.textStream() and OpenSSL compression support.

javascript 73 shipped

@nodejs Aug 3

NODE CRYPTO UNLOCKS PRIVATE KEY LOADERS, FFI CRASH FIXED BEFORE IT SPREADS

Node core shipped two critical improvements overnight: crypto now loads private keys through OpenSSL STORE loaders, and FFI fast calls will no longer crash after library close.

javascript 63 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.