179 wires and counting

$ follow Node.js

Keep up with Node.js in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-14
stories 30

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

AsyncLocalStorage store restored in AsyncResource callbacks

By RepoJournal · Filed · About Node.js · Composed from the cited sources · methodology

AsyncLocalStorage context is lost in AsyncResource::MakeCallback callbacks under the v24 default AsyncContextFrame, and the fix for that leak is the day's most consequential land in nodejs/node.

src: keep ALS store in AsyncResource::MakeCallback nodejs/node

by nigrosimone

AsyncResource saves the async context frame at creation, then node::MakeCallback() opened the callback scope with an undefined frame, so callbacks never ran in the saved one; with AsyncContextFrame now the default, AsyncLocalStorage lost its store in those callbacks (behavior differs under --no-async-context-frame). MakeCallback() now passes the saved frame to InternalMakeCallback(), the same a...

Revert "sea: mount vfsArchive at layer 0 and in workers" nodejs/node

by aduh95

aduh95 reverted the commit that mounted vfsArchive at layer 0 and in workers, citing a reported issue. If you build single executable applications against a version carrying that change, the previous mount behavior is what you get now.

tools: restore Python 3.14 for daily WPT nodejs/node

by Filip Skokan

The daily WPT setup moves back to Python 3.14 because 3.15 removed CGIHTTPRequestHandler, which the WPT pywebsocket3 still uses, breaking host configuration in the current undici WPT action.

doc: list openssl-store channel and drop field in permissions nodejs/node

by Rafael Gonzaga

The permissions docs now list the node:permission-model:openssl-store diagnostics channel and the --allow-openssl-store flag, both introduced earlier, in the Audit Mode section where they were missing.

fix: correct text of warning message nodejs/node-core-utils

by Rich Trott

node-core-utils landed a one-word fix to a warning message's text, alongside a documentation tidy-up in nodejs/node. Rich Trott's change touches only the string shown to contributors running the tooling.

Quick answers

What shipped in Node.js on October 14, 2026?
AsyncLocalStorage context is lost in AsyncResource::MakeCallback callbacks under the v24 default AsyncContextFrame, and the fix for that leak is the day's most consequential land in nodejs/node. In total, 16 commits and 14 pull requests landed.
Who contributed to Node.js on October 14, 2026?
5 developers shipped this update, including Rich Trott, nigrosimone, Filip Skokan, Rafael Gonzaga, and aduh95.
What were the notable Node.js updates?
src: keep ALS store in AsyncResource::MakeCallback, Revert "sea: mount vfsArchive at layer 0 and in workers", and tools: restore Python 3.14 for daily WPT.