Who contributed to Node.js on August 14, 2026?

7 developers shipped this update, including Adrián Estrada, atlowChemi, geeksilva97, trivikr, panva, avivkeller, and MikeMcC399.

What were the notable Node.js updates?

test_runner: extend tag filter with boolean expression DSL, crypto: improve SubtleCrypto.supports() accuracy, and ffi: reject detached ArrayBuffers as pointers.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

NODE TEST RUNNER GAINS BOOLEAN FILTERS, CRYPTO SPEC COMPLIANCE TIGHTENS

By RepoJournal · Filed 06:56 UTC on August 14, 2026 · About Node.js

7 people shipped this

Adrián Estrada @edsadr 1 cited

atlowChemi @atlowChemi 1 cited

geeksilva97 @geeksilva97 1 cited

trivikr @trivikr 1 cited

panva @panva 1 cited

avivkeller @avivkeller 1 cited

MikeMcC399 @MikeMcC399 1 cited

Node's test runner now supports full boolean expression syntax for tag filtering, while the crypto module closes gaps between implementation and WebCrypto spec.

The test_runner landed a major upgrade to its tag filtering system [1], adding boolean operators (and/or/not), wildcards, and parenthetical grouping to the literal tag filter that shipped weeks earlier. This is the kind of capability teams with large test suites have been waiting for. Meanwhile, SubtleCrypto.supports() tightened its accuracy across four constraint areas [2], eliminating false positives for ML-KEM imports, HKDF output lengths, and RSA key generation that previously claimed support they didn't actually have. On the FFI desk, detached ArrayBuffers are now rejected in pointer conversion paths [3], preventing silent null-pointer passes to native code. The sqlite binding exposed prepared statement statistics [4], and REPL documentation now covers DEP0185 class instantiation behavior [5], filling gaps left by semver-major changes. Over at nodejs.org and citgm, maintainers fixed import alias handling [6] and bumped codecov tooling to resolve Node.js 20 deprecation warnings [7].

Action items

→ Review tag filter syntax in test_runner; boolean expressions open new test organization patterns nodejs/node [plan]
→ Test SubtleCrypto.supports() calls if your crypto code branches on its output nodejs/node [monitor]
→ Check FFI code for detached ArrayBuffer usage; rejections are now enforced nodejs/node [plan]

References

[1] test_runner: extend tag filter with boolean expression DSL ↗ nodejs/node
[2] crypto: improve SubtleCrypto.supports() accuracy ↗ nodejs/node
[3] ffi: reject detached ArrayBuffers as pointers ↗ nodejs/node
[4] sqlite: expose prepared statement statistics ↗ nodejs/node
[5] doc: document REPL DEP0185 throws and uncaught-exception behavior nodejs/node
[6] fix(ui): import aliases should not require preconditions ↗ nodejs/nodejs.org
[7] chore: update codecov/codecov-action to v7.0.0 ↗ nodejs/citgm

Quick answers

What shipped in Node.js on August 14, 2026?: Node's test runner now supports full boolean expression syntax for tag filtering, while the crypto module closes gaps between implementation and WebCrypto spec. In total, 25 commits and 17 pull requests landed.
Who contributed to Node.js on August 14, 2026?: 7 developers shipped this update, including Adrián Estrada, atlowChemi, geeksilva97, trivikr, panva, avivkeller, and MikeMcC399.
What were the notable Node.js updates?: test_runner: extend tag filter with boolean expression DSL, crypto: improve SubtleCrypto.supports() accuracy, and ffi: reject detached ArrayBuffers as pointers.

UNDICI FIXES ABORT HANDLING BUGS THAT HANG REQUESTS

Two critical fixes land in undici for abort signals that were silently ignored during retry backoff and request deduplication, leaving callers hanging indefinitely.

javascript 31 shipped

@nodejs Aug 13

NODE.JS DOCKER AUTOMATION TIGHTENS RELEASE KEY SYNC

Docker-node merged automated release key synchronization today, closing a gap that previously required manual PR creation whenever Node releasers rotated credentials.

javascript 5 shipped

@nodejs Aug 12

NODE CORE TIGHTENS CRYPTO IN FIPS MODE, FIXES SQLITE STATEMENT LEAKS

WebCrypto's experimental XOF digests are now disabled when FIPS mode is enabled, closing a cryptographic gap, while a critical SQLite fix plugs statement lifetime management bugs that could leak resources.

javascript 28 shipped

@nodejs Aug 11

UNDICI 8.10.0 SHIPS AS NODE CORE DEPS SYNC ACROSS THE STACK

Node's HTTP client dependency landed overnight alongside WebCrypto test suite updates and a critical commit queue fix that unblocks the release pipeline.

javascript 41 shipped

Elsewhere on the wire

AI Agents Aug 15

LANGCHAIN SHIPS ENCRYPTED REASONING FIX, CLINE ADDS WEB SEARCH AND VOICE

ChatOpenAI now preserves OpenAI's encrypted reasoning from streamed responses, while Cline releases three versions with provider-executed web search and microphone transcription.

ai-agents 55 shipped

Local LLMs Aug 15

QWEN3.8 LANDS IN OLLAMA WITH DEVELOPER INSTRUCTION SUPPORT

Ollama shipped full Qwen3.8 support overnight, adding reasoning-effort semantics and a critical fix for coding agents that send developer instructions before user messages.

+12

llms 208 shipped

@CachyOS Aug 15

FIRMWARE AND INIT SYNC LANDS AS AUTOS ROLL FORWARD

CachyOS synced linux-firmware with Arch and bumped mkinitcpio to 41.1-1, while the package automation pipeline keeps qview and qtscrcpy current across the AUR-derived repo.

infra 41 shipped

Elixir & Phoenix Aug 15

PHOENIX LIVE VIEW SHIPS UPLOAD OVERHAUL, ELIXIR TUNES CORE PERFORMANCE

SteffenDE landed five critical fixes for LiveView's upload handler in one sweep, while the Elixir core team optimized Version comparison and regex operations.