179 wires and counting

$ follow Node.js

Keep up with Node.js in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-24
stories 37

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

HTTP/2 GOAWAY replay fix, test_runner gains --test-forbid-only

By RepoJournal · Filed · About Node.js · Composed from the cited sources · methodology

undici closes a gap where graceful-shutdown requests were rejected without ever reaching the peer, while Node's bundled test runner gets a CI guard against accidentally committed exclusive tests.

fix(h2): replay requests whose HEADERS raced a GOAWAY nodejs/undici

by mohamed-rdr

When a server sends GOAWAY(NO_ERROR, 2^31-1) and a request's stream is opened but its HEADERS are not yet flushed, nghttp2 refuses the frame and emits a frameError; the request stayed attached to the session because lastStreamID covered the stream, so it failed even though the peer never saw it. The fix replays such requests instead of rejecting them, which matters for anyone relying on gracefu...

test_runner: add option to forbid exclusive tests nodejs/node

by joao-oliveira-softtor

Node's test runner adds --test-forbid-only and run({ forbidOnly: true }) to reject exclusive tests, covering only: true, the test and suite .only() shorthands, and testContext.runOnly(true) in both isolation modes. With test isolation disabled, an accidentally committed test.only() could silently exclude the rest of a suite while the run still succeeded; detected violations now fail the run eve...

build,deps,tools: prepare to update to OpenSSL 4.1 nodejs/node

by panva

panva updated the updater script and everything under deps/openssl/config ahead of bumping deps/openssl to OpenSSL 4.1, with the work held blocked until 4.1.0 ships. Nothing changes in the runtime yet; this is prep only.

build,test: setup perfetto tests on windows build nodejs/node

by legendecas

The trace_processor_shell script is now Python so it runs on Windows, and vcbuild.bat gains a with-perfetto flag for building Node with perfetto support. Windows contributors can now run the perfetto tests and produce traced builds locally.

env CITGM (#1213) nodejs/citgm

by liuxingbaoyu

Elsewhere: CITGM picked up an env change, the reliability desk filed its 2026-10-24 report, and the node repo recorded Rafael and Antoine as last security release stewards in the docs.

Quick answers

What shipped in Node.js on October 24, 2026?
undici closes a gap where graceful-shutdown requests were rejected without ever reaching the peer, while Node's bundled test runner gets a CI guard against accidentally committed exclusive tests. In total, 22 commits and 15 pull requests landed.
Who contributed to Node.js on October 24, 2026?
7 developers shipped this update, including mohamed-rdr, Rafael Gonzaga, panva, legendecas, joao-oliveira-softtor, Node.js GitHub Bot, and liuxingbaoyu.
What were the notable Node.js updates?
fix(h2): replay requests whose HEADERS raced a GOAWAY, test_runner: add option to forbid exclusive tests, and build,deps,tools: prepare to update to OpenSSL 4.1.