129 wires and counting

$ follow Node.js

Keep up with Node.js in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-18
stories 39

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

cpSync dereference regression fixed, trace union punning removed

By RepoJournal · Filed · About Node.js · Composed from the cited sources · methodology

Node's fs.cpSync stops silently copying nested symlinks as links when dereference is set, and the trace value handling drops its union type punning following an equivalent V8 fix.

fs: honor dereference for symlinks nested in cpSync trees nodejs/node

by christianaurichzm

With no filter supplied, cpSync copies directory contents in C++, and that loop recreated every symlink it found while consulting dereference only for the subdirectory-of-self guards, so only a symlink passed directly as src was ever dereferenced. Reported in #59168 as a regression in 22.17 and still reproducing on main: `fs.cpSync('./src', './out', { dereference: true, recursive: true })` leav...

src: avoid union type-punning in trace values nodejs/node

by XadillaX

TraceValueUnion is replaced with memcpy-based object representation copying so inactive union members are no longer read, and integral values are generalized to cover all integral and enum types. It mirrors the equivalent V8 fix in CL 1886918 and closes issue #57033. Mainly relevant if you build Node with undefined-behavior sanitizers in your toolchain.

fs: honor dereference for symlinks nested in cpSync trees nodejs/node

by Christian Aurich

The commit message spells out the mechanism the PR described: the directory and regular file branches already followed symlink semantics correctly, and only the symlink branch did not. This is the fix landing rather than new scope.

tools: bump the eslint group in /tools/eslint with 6 updates nodejs/node

by dependabot

Dependabot's grouped bump moves @babel/core and @babel/eslint-parser to 8.0.5, eslint to 10.10.0, and eslint-plugin-jsdoc to 64.3.9 inside /tools/eslint. Contributor-facing only; nothing in the published tarball changes.

doc: remove obsolete mentioning of cl.exe on windows nodejs/node

by Chengzhong Wu

The Windows build docs stop telling contributors to invoke cl.exe, which has not been the toolchain the build instructions actually require.

fix(ui): fix sidebar height (#9148) nodejs/nodejs.org

by Tomás Bottari

A styles-only fix for sidebar height on nodejs.org, plus the changeset file; id 8 in the reliability repo is the bot filing the 2026-09-18 report.

Quick answers

What shipped in Node.js on September 18, 2026?
Node's fs.cpSync stops silently copying nested symlinks as links when dereference is set, and the trace value handling drops its union type punning following an equivalent V8 fix. In total, 18 commits and 21 pull requests landed.
Who contributed to Node.js on September 18, 2026?
6 developers shipped this update, including Chengzhong Wu, XadillaX, christianaurichzm, dependabot, Tomás Bottari, and Node.js GitHub Bot.
What were the notable Node.js updates?
fs: honor dereference for symlinks nested in cpSync trees, src: avoid union type-punning in trace values, and fs: honor dereference for symlinks nested in cpSync trees.