Who contributed to Node.js on August 24, 2026?

7 developers shipped this update, including dependabot, Jason Zhang, codebytere, Trivikram Kamat, Antoine du Hamel, mcollina, and Node.js GitHub Bot.

What were the notable Node.js updates?

module: add a read-only mode to the compile cache, fs: fix realpath of namespaced drive paths, and stream: prevent share from eagerly draining source.

@nodejs

The Node.js runtime - every backend team's CVE source of truth

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

Node's compile cache turns read-only

By RepoJournal · Filed 06:56 UTC on August 24, 2026 · About Node.js

7 people shipped this

dependabot @dependabot 2 cited

Jason Zhang @jazelly 1 cited

codebytere @codebytere 1 cited

Trivikram Kamat @trivikr 1 cited

Antoine du Hamel @aduh95 1 cited

mcollina @mcollina 1 cited

Node.js GitHub Bot @nodejs-github-bot 1 cited

Node is about to let you ship a compile cache that the runtime can only ever read, and it's the patch you've been waiting for.

Node's compile cache grows a read-only mode [1], so an ahead-of-time cache baked into an immutable package (an Electron asar, a read-only image) no longer forces a writable cache directory at runtime. The fs layer also fixes realpath on namespaced drive paths on Windows [2], where a probe for a namespaced drive root was dropping the trailing separator and hitting EISDIR. Streams get a fix for share() that prevents one consumer pull from eagerly draining the source while a slower consumer keeps the buffer full [3]. The experimental WebSocket flag is gone [4], so `--no-experimental-websocket` is no longer accepted, and the HTTP ConnectionsList swaps its two std::set instances for intrusive lists, cutting ~2.2% of CPU cycles off the hello-world hot path [5]. Meanwhile, amaro bumps actions/setup-node to v7.0.0, a major that adds cache keys as outputs [6], alongside routine CI hardening updates [7]. Quiet on the reliability desk, just a routine daily report [8].

Action items

→ Test your compile cache with the new read-only mode and switch to it for immutable packages nodejs/node [plan]
→ Verify your Windows fs.realpath calls against namespaced drive paths in your test matrix nodejs/node [plan]
→ Remove any use of --no-experimental-websocket from your scripts and docs nodejs/node [immediate]
→ Review share() paths for streaming behavior changes in your pipeline nodejs/node [monitor]

References

[1] module: add a read-only mode to the compile cache ↗ nodejs/node
[2] fs: fix realpath of namespaced drive paths nodejs/node
[3] stream: prevent share from eagerly draining source nodejs/node
[4] lib,src: remove `--no-experimental-websocket` CLI flag nodejs/node
[5] http: use intrusive lists in ConnectionsList ↗ nodejs/node
[6] chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 ↗ nodejs/amaro
[7] chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 ↗ nodejs/amaro
[8] Add report for 2026-08-24 nodejs/reliability

Quick answers

What shipped in Node.js on August 24, 2026?: Node is about to let you ship a compile cache that the runtime can only ever read, and it's the patch you've been waiting for. In total, 25 commits and 25 pull requests landed.
Who contributed to Node.js on August 24, 2026?: 7 developers shipped this update, including dependabot, Jason Zhang, codebytere, Trivikram Kamat, Antoine du Hamel, mcollina, and Node.js GitHub Bot.
What were the notable Node.js updates?: module: add a read-only mode to the compile cache, fs: fix realpath of namespaced drive paths, and stream: prevent share from eagerly draining source.

Node.js Crypto Overhaul Puts BoringSSL Front and Center

A sweeping crypto refactor lands in Node.js as BoringSSL APIs take over validation and shims disappear.

javascript 52 shipped

@nodejs Aug 22

NODE DROPS --USE-LARGEPAGES AND HARMONY IMPORT ATTRIBUTES

Node.js is cleaning house: two long-standing flags are gone, and the fetch path just got faster.

javascript 46 shipped

@nodejs Aug 21

Undici kills idle-socket latency

Node's HTTP/1.1 keep-alive just got leaner, and native addon authors have a breaking change to plan for.

javascript 51 shipped

@nodejs Aug 20

READFILE 3-6x FASTER: NODE'S SMALL-FILE PATH COLLAPSES FOUR ROUND TRIPS INTO ONE

Node.js just made the most common filesystem call dramatically faster, and a second PR cuts cold require() times for large CommonJS trees.

javascript 31 shipped

Elsewhere on the wire

AI Agents Aug 24

CLINE SHIPS V4.1.15 AS TELEMETRY BUGS SURFACE ACROSS THE AGENT STACK

Cline's long-awaited auto-approve fix landed overnight, but it's the telemetry drop in 4.1.11 that should have you checking your session metrics.

ai-agents 44 shipped

Local LLMs Aug 24

VLLM'S P2P WEIGHT SYNC CUTS RL MOE TRANSFER COSTS

Forget all-gathering experts during RL rollout: vLLM's new sharded_rdt backend lets each worker pull only the slice it needs, turning a total_bytes transfer into a total_bytes divided by num_workers one.