RepoJournal
Node.js @nodejs
179 wires and counting

$ follow Node.js

Keep up with Node.js in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-25
stories 41
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Node's TLS abort becomes a throw

By RepoJournal · Filed · About Node.js · Composed from the cited sources · methodology

Aviv Keller nodejs-github-bot RafaelGSS mcollina sankalpsthakur Jacob Smith github-actions[bot]
10 people shipped this
Aviv Keller @avivkeller 1 cited nodejs-github-bot @nodejs-github-bot 1 cited RafaelGSS @RafaelGSS 1 cited mcollina @mcollina 1 cited sankalpsthakur @sankalpsthakur 1 cited Jacob Smith @JakobJingleheimer 1 cited github-actions[bot] @github-actions[bot] 1 cited semantic-release-bot @semantic-release-bot Antoine du Hamel @aduh95 dependabot @dependabot

Node.js turns a hard crash into a recoverable error, and changelog-maker ships a breaking rework.

Node.js fixed a crash-on-invalid-input in TLS: tls.connect() with malformed ALPNProtocols no longer aborts the process with SIGABRT, instead throwing a recoverable TypeError [1]. Meanwhile, the permission model tightened UDP handle adoption under IPC [2], and root certificates refreshed to NSS 3.126, dropping two CAs and adding four [3]. Over in streams, Matteo Collina's optimizations for WHATWG WebStreams cut encoding and iteration overhead [4]. And changelog-maker released 5.0.0, breaking its CLI flags: "--sha, --plaintext, -p, --markdown, --md, --messageonly and --mo are no longer supported, use --format instead" [5]. Doc-kit cleaned up peer deps in changesets [6], and next-10 documents vlt and Node version manager options [7].

Action items

References

  1. [1] tls: throw on invalid ALPNProtocols instead of aborting ↗ nodejs/node
  2. [2] permission: guard UDP handle adoption ↗ nodejs/node
  3. [3] crypto: update root certificates to NSS 3.126 ↗ nodejs/node
  4. [4] stream: reduce webstreams encoding and iteration overhead ↗ nodejs/node
  5. [5] v5.0.0 ↗ nodejs/changelog-maker
  6. [6] fix(changesets): remove peer deps (#1050) ↗ nodejs/doc-kit
  7. [7] doc: add `vlt` to package manager list & enumerate node version manager opts (#396) ↗ nodejs/next-10

$ ls nodejs/reviews/ # the step-back reads

the week in review commit-stream 3.0.0 restricts imports to package root the month in review Node 26 enters LTS as five undici advisories land
Full archive → Weekly reviews →

Quick answers

What shipped in Node.js on August 25, 2026?
Node.js turns a hard crash into a recoverable error, and changelog-maker ships a breaking rework. In total, 20 commits, 18 pull requests, and 3 releases landed.
Who contributed to Node.js on August 25, 2026?
10 developers shipped this update, including Aviv Keller, nodejs-github-bot, RafaelGSS, mcollina, sankalpsthakur, Jacob Smith, github-actions[bot], and semantic-release-bot, and 2 more.
What were the notable Node.js updates?
tls: throw on invalid ALPNProtocols instead of aborting, permission: guard UDP handle adoption, and crypto: update root certificates to NSS 3.126.
♥

$ log @nodejs --recent

Workers preload streams into the startup snapshot; http2 accepts repeated content-encoding 18 shipped HTTP drain stalls after coalesced chunks, undici restores h2 error codes 20 shipped Stale OpenSSL errors cleared, npm 12.2.2 lands in node 26 shipped Node coalesces duplicate DNS lookups, batches HTTP body spans 37 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.