Node.js — full archive
179 daily briefings.
- Node 26.8.2 ships OpenSSL 3.5.8 and an HTTP/2 window override
- Node's SQLite binds undefined to NULL, node-gyp reads the documented flag
- Node fixes rmSync on Windows, V8 debugger plugin support
- cjs-module-lexer scans faster, ffi throws on missing args
- Crypto fixes multi-prime RSA JWK handling, adds Hybrid KEMs
- Node.js security patches land, permission audit mode fixes, and stream EOF optimization
- domain runtime-deprecation lands; BlockList round-trip fixed
- Undici fixes cookie parser stack overflow, EventSource header injection risk
- Node.js adds v8.setHeapProfileNearHeapLimit, fixes environment live lock
- Recursive fs.watch fallback now watches directories, not files
- Node.js quic drops dead fin flag, zlib 1.3.2.1-motley lands
- Web Crypto PKCS8 export now rejects public keys with InvalidAccessError
- Weak listener retention fix, core-validate-commit drops tap and c8
- COREPACK SHAKES UP PACKAGE MANAGER RESOLUTION
- NODE 26.8.1 HITS DOCKER IMAGES
- NODE CORE PERF: 10-20% EVENTTARGET SPEEDUP LANDS
- Node's TLS abort becomes a throw
- Node's compile cache turns read-only
- Node.js Crypto Overhaul Puts BoringSSL Front and Center
- NODE DROPS --USE-LARGEPAGES AND HARMONY IMPORT ATTRIBUTES
- Undici kills idle-socket latency
- READFILE 3-6x FASTER: NODE'S SMALL-FILE PATH COLLAPSES FOUR ROUND TRIPS INTO ONE
- Node slams the brakes on module.register
- NODE FFI HARDENS AGAINST CONSTRUCTOR ABUSE
- JS-YAML SECURITY FIX SHIPS IN NODEJS-DIST-INDEXER 1.8.24
- WEBSTREAMS PROMISE CHURN CRUSHED, SQLITE DIAGNOSTICS LAND
- UNDICI FIXES ABORT HANDLING BUGS THAT HANG REQUESTS
- NODE TEST RUNNER GAINS BOOLEAN FILTERS, CRYPTO SPEC COMPLIANCE TIGHTENS
- NODE.JS DOCKER AUTOMATION TIGHTENS RELEASE KEY SYNC
- NODE CORE TIGHTENS CRYPTO IN FIPS MODE, FIXES SQLITE STATEMENT LEAKS
- UNDICI 8.10.0 SHIPS AS NODE CORE DEPS SYNC ACROSS THE STACK
- NODE PATCHES COMMIT QUEUE, FIXES FFI MEMORY LEAK
- NODE COMMITS QUEUE EFFICIENCY FIX, SQLITE AND TLS REFINEMENTS SHIP
- DOCKER-NODE TIGHTENS CONTRIBUTOR TOOLCHAIN WITH JQ REQUIREMENT
- NODE CORE LANDS PERFORMANCE WINS ACROSS NET, FS, AND STREAMS
- NODE 26.7.0 SHIPS WITH CRYPTO UPGRADES AND DNS SECURITY FIX
- STREAMS SHED ALLOCATIONS, HTTP/2 WINDOWS QUADRUPLE
- NODE 26.6.0 AND 24.19.0 LTS LAND WITH FFI EVENT LOOP AND BUFFER STREAMING
- NODE CRYPTO UNLOCKS PRIVATE KEY LOADERS, FFI CRASH FIXED BEFORE IT SPREADS
- UNDICI FIXES SILENT INTERCEPTOR FAILURE; NODE ADDS ZIP SUPPORT AND HTTP DEPRECATION
- NODE CUTS STREAM OVERHEAD, DTLS GAINS STABILITY
- NODE.ORG MONOREPO REFACTOR BREAKS VERCEL BUILD, FFI BUFFER FIX LANDS
- NODE.JS 26.5.1 DOCKER IMAGES LIVE, CHANGELOG TOOLING FIXED ACROSS RELEASE INFRASTRUCTURE
- NET/PROMISES ARRIVES, SECURITY RELEASE DELAYED AGAIN
- NODE CORE TIGHTENS TEST COVERAGE AS UNDICI SHIPS H2 NAMESPACE UPGRADE
- Node DNS Reverse Lookups Fixed, REPL Gets Syntax Highlighting
- NODE CRASHES ON ODD-LENGTH HEX STRINGS VIA WRITEV
- NODE CORE TIGHTENS DNS BEHAVIOR, DOCS TOOLING SHIFTS AWAY FROM OXC
- SQLITE GARBAGE COLLECTION BUG AND FFI REENTRANCY HAZARDS DEMAND IMMEDIATE PATCHES
- NODE.JS STRIPS DEPRECATED API CALLS, FIXES FFI BOOL REGRESSION
- NODE CORE HARDENS CRYPTO AND FFI, UNDICI PATCHES HEADER INJECTION
- NODE FIXES STACK OVERFLOW IN RECURSIVE READDIR, PATCHES PERMISSION AUDIT MODE
- NODE PLUGS TIMER MEMORY LEAK, FIXES FFI SIGNATURE DOUBLE-EVALUATION
- NODE FIXES CRITICAL STREAM PIPE BUG BLOCKING HEALTHY DESTINATIONS
- HTTP2 HEAP-USE-AFTER-FREE FIX LANDS IN NODE CORE
- NODE SITE BANNERS NOW DISMISSIBLE
- NODE STREAM VALIDATION FIX LANDS, NIGHTLY BUILDS ROLL
- NODE.JS RELIABILITY REPORT LOGGED FOR MID-2026
- UNDICI FIXES H2 MULTIPLEXING BOTTLENECK, NODE EVENTS LAYER CUTS MEMORY BLOAT
- NODE ADDS WORKER THREAD SOCKET TRANSFER AND LIVE TEST LOGGING
Never miss a Node.js briefing.
Get Node.js's week in review every Monday - and security advisories the day they land. Free, unsubscribe in one click.
One click. Every Monday: what mattered across the projects you've been reading (or our AI picks) — security news same-day. You refine anytime. Choose specific journals · Read a sample issue →