Who contributed to Node.js on August 5, 2026?

8 developers shipped this update, including mcollina, Antoine du Hamel, Paul Bouchon, umuoy1, avivkeller, btea, Trott, and Node.js GitHub Bot.

What were the notable Node.js updates?

stream: cut per-chunk allocations in pipeTo, http2: increase default window sizes, and ffi: reuse libffi call plans.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

STREAMS SHED ALLOCATIONS, HTTP/2 WINDOWS QUADRUPLE

By RepoJournal · Filed 06:56 UTC on August 5, 2026 · About Node.js

8 people shipped this

avivkeller @avivkeller 3 cited

mcollina @mcollina 2 cited

Paul Bouchon @bitpshr 1 cited

umuoy1 @umuoy1 1 cited

Antoine du Hamel @aduh95

btea @btea

Trott @Trott

Node.js GitHub Bot @nodejs-github-bot

Node.js core cut per-chunk memory overhead in pipeTo by eliminating redundant promise allocations, while HTTP/2 default window sizes jumped 64x to unlock full bandwidth on high-latency connections.

The streams team shipped a major optimization [1] that eliminates the write request records and microtask closures Node.js was creating for every single chunk flowing through pipeTo. The improvement directly unlocks throughput on high-latency networks. Separately, HTTP/2 stream windows jumped from 64KB to 4MB and connection windows to 32MB [2], which the maintainers calculated will deliver 16MB/s (128Mbps) on the stream window instead of 256KB/s on a 250ms RTT connection. The FFI subsystem gained a significant speedup [3] by reusing libffi 3.7's precomputed call plans for fixed-signature functions on x86-64, falling back gracefully on older versions. Test infrastructure got leaner [4] by switching SQLite tests to in-memory databases where filesystem persistence wasn't needed. On the documentation front, doc-kit underwent a major modularization [5] [6] [7], splitting the core engine (now @nodejs/doc-kit at 1.0.0) from Node-specific and legacy generators into separate npm packages with optional peer dependencies.

Action items

→ Upgrade to latest Node.js for streams and HTTP/2 improvements if you run high-latency production clusters nodejs/node [plan]
→ Update doc-kit references if you maintain custom documentation generators nodejs/doc-kit [plan]
→ Monitor reliability reports for any emerging patterns post-release nodejs/reliability [monitor]

References

[1] stream: cut per-chunk allocations in pipeTo ↗ nodejs/node
[2] http2: increase default window sizes ↗ nodejs/node
[3] ffi: reuse libffi call plans ↗ nodejs/node
[4] test: prefer in-memory databases in sqlite tests nodejs/node
[5] refactor(node): extract @node-core/doc-kit package, move core to @nodejs/doc-kit ↗ nodejs/doc-kit
[6] refactor(legacy): extract @nodejs/doc-kit-generator-legacy package ↗ nodejs/doc-kit
[7] refactor(react): extract @nodejs/doc-kit-generator-react package ↗ nodejs/doc-kit

Quick answers

What shipped in Node.js on August 5, 2026?: Node.js core cut per-chunk memory overhead in pipeTo by eliminating redundant promise allocations, while HTTP/2 default window sizes jumped 64x to unlock full bandwidth on high-latency connections. In total, 37 commits and 33 pull requests landed.
Who contributed to Node.js on August 5, 2026?: 8 developers shipped this update, including mcollina, Antoine du Hamel, Paul Bouchon, umuoy1, avivkeller, btea, Trott, and Node.js GitHub Bot.
What were the notable Node.js updates?: stream: cut per-chunk allocations in pipeTo, http2: increase default window sizes, and ffi: reuse libffi call plans.

NODE 26.7.0 SHIPS WITH CRYPTO UPGRADES AND DNS SECURITY FIX

Node.js 26.7.0 landed overnight with SEMVER-MINOR crypto improvements and a critical DNS vulnerability patch that prevents large resolveAny replies from crashing.

javascript 49 shipped

@nodejs Aug 4

NODE 26.6.0 AND 24.19.0 LTS LAND WITH FFI EVENT LOOP AND BUFFER STREAMING

Node.js shipped two releases overnight: the current branch gets foreign function interface power, while the LTS line adds blob.textStream() and OpenSSL compression support.

javascript 73 shipped

@nodejs Aug 3

NODE CRYPTO UNLOCKS PRIVATE KEY LOADERS, FFI CRASH FIXED BEFORE IT SPREADS

Node core shipped two critical improvements overnight: crypto now loads private keys through OpenSSL STORE loaders, and FFI fast calls will no longer crash after library close.

javascript 63 shipped

@nodejs Aug 2

UNDICI FIXES SILENT INTERCEPTOR FAILURE; NODE ADDS ZIP SUPPORT AND HTTP DEPRECATION

Undici's cache() and deduplicate() interceptors were silently breaking on direct Client/Pool use, now fixed with fallback origin detection.

javascript 27 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.