RepoJournal
Node.js

@nodejs

The Node.js runtime - every backend team's CVE source of truth

Keep up with Node.js in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Sat 18 jul
  2. Sun 19 jul
  3. Mon 20 jul
  4. Tue 21 jul
  5. Wed 22 jul
  6. Thu 23 jul
  7. Fri 24 jul
  8. Sat 25 jul
  9. Sun 26 jul
  10. Mon 27 jul
  11. Tue 28 jul
  12. Wed 29 jul
  13. Thu 30 jul
  14. Fri 31 jul
  15. Sat 1 aug
  16. Sun 2 aug
  17. Mon 3 aug
  18. Tue 4 aug
  19. Wed 5 aug
  20. Thu 6 aug
  21. Fri 7 aug
  22. Sat 8 aug
  23. Sun 9 aug
  24. Mon 10 aug
  25. Tue 11 aug
  26. Wed 12 aug
  27. Thu 13 aug
  28. Fri 14 aug
  29. Sat 15 aug
  30. Today 16 aug
Topics: JavaScript Full archive →

The Wire · Showcase

UNDICI FIXES ABORT HANDLING BUGS THAT HANG REQUESTS

By RepoJournal · Filed · About Node.js

pacocartones Node.js GitHub Bot edenbuilds mcollina araujogui TrevorBurnham ulofiai
8 people shipped this
pacocartones @pacocartones 4 cited Node.js GitHub Bot @nodejs-github-bot 1 cited edenbuilds @edenbuilds 1 cited mcollina @mcollina 1 cited araujogui @araujogui 1 cited TrevorBurnham @TrevorBurnham 1 cited ulofiai @ulofiai 1 cited Trivikram Kamat @trivikr

Two critical fixes land in undici for abort signals that were silently ignored during retry backoff and request deduplication, leaving callers hanging indefinitely.

Pacocartones shipped two fixes addressing request lifecycle bugs in undici's core retry and deduplication logic. First, a retry backoff timer was not tracking abort signals [1], so when a consumer aborted during the setTimeout window, the request only rejected after the full backoff elapsed instead of immediately. Second, deduplicated requests that joined an in-flight identical request never settled if aborted [2], leaving the caller's promise hanging forever because the synthetic waiting controller never notified the handler of the abort. Both fixes [3] [4] restore the semantics developers expect: abort signals interrupt immediately, not after timers or queues drain. In parallel, pacocartones also skipped cache tests when the submodule is missing [5]. On the Node.js side, Matteo Collina replaced the async generator backing `Readable` async iteration with a hand-rolled iterator, "delivering buffered chunks as an already-resolved promise" [6], eliminating extra promise allocations per chunk. The sqlite module gained a persistent flag for statements [7], added authorizer reentrancy protection [8], and Node absorbed an upstream libuv fix for Windows fs-event watchers on 8.3 short paths [9]. Perfetto also advanced to 57.2 [10]. Across 4 repos, 16 commits and 15 PRs landed.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] fix(retry): honor the abort signal during the retry backoff ↗ nodejs/undici
  2. [2] fix(deduplicate): settle the deduplicated request when it is aborted ↗ nodejs/undici
  3. [3] fix(deduplicate): settle the deduplicated request when it is aborted (#5673) nodejs/undici
  4. [4] fix(retry): honor the abort signal during the retry backoff (#5675) nodejs/undici
  5. [5] fix(test): skip cache-tests when submodule is missing (#5661) nodejs/undici
  6. [6] stream: speed up async iteration of Readable ↗ nodejs/node
  7. [7] sqlite: add stmt persistent flag ↗ nodejs/node
  8. [8] sqlite: reject connection access from authorizer callbacks ↗ nodejs/node
  9. [9] deps: cherry-pick libuv/libuv@e640dc9 ↗ nodejs/node
  10. [10] deps: update perfetto to 57.2 ↗ nodejs/node

Quick answers

What shipped in Node.js on August 15, 2026?
Two critical fixes land in undici for abort signals that were silently ignored during retry backoff and request deduplication, leaving callers hanging indefinitely. In total, 16 commits and 15 pull requests landed.
Who contributed to Node.js on August 15, 2026?
8 developers shipped this update, including Trivikram Kamat, Node.js GitHub Bot, pacocartones, edenbuilds, mcollina, araujogui, TrevorBurnham, and ulofiai.
What were the notable Node.js updates?
fix(retry): honor the abort signal during the retry backoff, fix(deduplicate): settle the deduplicated request when it is aborted, and fix(deduplicate): settle the deduplicated request when it is aborted (#5673).

More from @nodejs

Node.js @nodejs

WEBSTREAMS PROMISE CHURN CRUSHED, SQLITE DIAGNOSTICS LAND

Matteo Collina's twelfth round of pure-JS webstreams optimization cuts promise overhead by redesigning microtask handling on hot paths, while Node adds DatabaseSync diagnostic channels for production visibility.

araujogui mcollina greenhead Marten Richter +3
javascript 29 shipped
Node.js @nodejs

NODE TEST RUNNER GAINS BOOLEAN FILTERS, CRYPTO SPEC COMPLIANCE TIGHTENS

Node's test runner now supports full boolean expression syntax for tag filtering, while the crypto module closes gaps between implementation and WebCrypto spec.

Adrián Estrada atlowChemi geeksilva97 trivikr +3
javascript 42 shipped
Node.js @nodejs

NODE.JS DOCKER AUTOMATION TIGHTENS RELEASE KEY SYNC

Docker-node merged automated release key synchronization today, closing a gap that previously required manual PR creation whenever Node releasers rotated credentials.

Node.js GitHub Bot nschonni dependabot
javascript 5 shipped
Node.js @nodejs

NODE CORE TIGHTENS CRYPTO IN FIPS MODE, FIXES SQLITE STATEMENT LEAKS

WebCrypto's experimental XOF digests are now disabled when FIPS mode is enabled, closing a cryptographic gap, while a critical SQLite fix plugs statement lifetime management bugs that could leak resources.

dependabot Antoine du Hamel araujogui panva +2
javascript 28 shipped

Daily updates, in your inbox

Follow Node.js

Keep up with Node.js in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

OPENHANDS PINS CLIENT DEPENDENCY, ADDS STRUCTURED ERROR HANDLING

OpenHands locked its TypeScript client to exact version 1.37.0 and merged canvas error outcome improvements in a single commit cycle.

neubig
ai-agents 2 shipped
Local LLMs Local LLMs

LLAMA.CPP OVERHAULS INFERENCE FLAGS, VLLM PATCHES DEEPSEEK SPARSE MLA

llama.cpp deprecates mmap flags in favor of unified load-mode, while vllm fixes critical issues blocking DeepSeek-V4-Flash across all decode paths.

github-actions[bot] dhiltgen Fathi Boudra Eric Zhang +11
llms 136 shipped
CachyOS @CachyOS

DASHBOARD SEO OVERHAUL SHIPS AS PACKAGE TRAIN ROLLS FORWARD

CachyOS public-dashboard refactored routes with canonical metadata and improved crawler visibility [ref:18] while 61 commits across five repos kept the AUR pipeline humming.

github-actions witchlliee Jinra azdanov +1
infra 72 shipped
Elixir & Phoenix Elixir & Phoenix

ELIXIR CORE CUTS ALLOCATIONS ACROSS STRING AND AST OPERATIONS

Thomas Cioppettini landed four performance wins overnight that eliminate unnecessary allocations in List.myers_difference, String case conversion, and Macro tree walkers.

Thomas Cioppettini LostKobrakai
elixir 17 shipped
Want every project, not just this one?