July 31st, 2026 · 9 commits
+1
Notable fixes and features: test coverage expansion, a QUIC crash fix, sqlite state checks, and a streams BYOB speedup.
Read the issue →
July 30th, 2026 · 8 commits
+1
Node.js tightens Fast API validation, preserves FFI buffer fast paths, fixes glob cache cross-platform bugs, and hardens HTTP timeouts.
Read the issue →
July 29th, 2026 · 30 commits
+13
Node ships multiple CVE fixes plus several runtime and docs improvements, including HTTP, HTTPS, SQLite, zlib, permissions, and FFI fixes.
Read the issue →
July 28th, 2026 · 6 commits
+1
New experimental net/promises API, a VFS lchown fix, WebIDL-order URLPattern results, and an SQLite 3.53.4 bump.
Read the issue →
July 27th, 2026 · 8 commits
+2
Node updates its Rust toolchain and vendored crates, plus a QUIC stream state tweak and broad test assertion cleanup.
Read the issue →
July 26th, 2026 · 9 commits
+1
Security and correctness fixes land across DNS reverse lookups, sqlite session lifetimes, REPL highlighting, and web streams.
Read the issue →
July 25th, 2026 · 7 commits
+1
Key fixes: safer crypto encoding errors, Windows TCP handle transfer support, odd-hex write crash fix, and GC profiling gets minor mark-sweep naming.
Read the issue →
July 24th, 2026 · 19 commits
+6
Node adds Perfetto-backed tracing support and expands net.BoundSocket to Unix domain/pipe paths, alongside readline and stream fixes.
Read the issue →
July 23rd, 2026 · 15 commits
+4
QUIC session timing, iterable-stream backpressure, FFI string safety, SQLite UAFs, and several API validations were tightened.
Read the issue →
July 22nd, 2026 · 7 commits
A process-crashing diagnostics_channel bug was fixed, alongside FFI integer validation, DNS cleanup, and several docs/internal changes.
Read the issue →
July 21st, 2026 · 18 commits
+7
Node.js tightened crypto key handling, fixed zstd edge cases, and corrected permission-audit behavior; plus a VFS stack-safety refactor.
Read the issue →
July 20th, 2026 · 4 commits
Node.js tightens FFI signature handling, refreshes key crypto/net docs, and reduces the stale issue window from 7 months to 3.
Read the issue →
July 19th, 2026 · 4 commits
Help output is now colorized when appropriate, timers stop retaining async stores, and WebCrypto adds a KT customization limit.
Read the issue →
July 18th, 2026 · 6 commits
+1
Node switches REPL internals to inspector, fixes a stream stall and Map comparison bug, and adjusts http2 socket proxy behavior.
Read the issue →
July 17th, 2026 · 10 commits
+3
A security-relevant HTTP/2 fix lands alongside glob pattern caching, VFS lchmod behavior, and new TLS socket docs.
Read the issue →
July 16th, 2026 · 9 commits
+3
Node.js adds TLS certificate compression for QUIC, tightens stream iterator validation, and fixes several stream/fs edge cases.
Read the issue →
July 15th, 2026 · 5 commits
A revert restores client socket error behavior, while streams and crypto docs get refinements and tests/docs are cleaned up.
Read the issue →
July 14th, 2026 · 11 commits
+2
Node drops the legacy _tls_* public shims, widens fsPromises append/ write docs and tests, and picks up a V8 wasm fix plus toolchain deps.
Read the issue →
July 13th, 2026 · 11 commits
+4
Inspector probes can now be conditional, while EventEmitter and streams got performance and memory fixes; docs and tests were updated too.
Read the issue →
July 12th, 2026 · 13 commits
+3
Node.js adds transferable TCP sockets and servers for worker threads, plus fixes for HTTP perf_hooks, Blob line endings, MIME params, and streams.
Read the issue →
July 11th, 2026 · 5 commits
A QUIC dependency update, stream performance and correctness fixes, plus clearer test event docs landed today.
Read the issue →
July 10th, 2026 · 5 commits
Node strengthens riscv64 OpenSSL builds, tightens stream iterable handling, and clarifies built-in proxy security guidance.
Read the issue →
July 9th, 2026 · 4 commits
A Blob.stream() GC leak was fixed, and Windows-specific test normalizations/flaky markers were updated for debugger, HTTP/2, and SEA.
Read the issue →
July 8th, 2026 · 17 commits
+6
Major crypto backend cleanup plus QUIC correctness fixes, stream iterator behavior tweaks, and a TLS IPv6 SAN bug fix.
Read the issue →
July 7th, 2026 · 21 commits
+5
Big HTTP/2 hot-path optimizations land alongside a V8 backport, a QUIC crash fix, and several API and bugfix updates.
Read the issue →
July 6th, 2026 · 19 commits
+12
Security fixes, a QUIC crash fix, a zlib hang fix, and buffer/timer performance improvements headline the day.
Read the issue →
July 5th, 2026 · 3 commits
Node exposes ReadableStreamTee, updates Temporal Rust requirements, and adds flaky-test guidance.
Read the issue →
July 4th, 2026 · 9 commits
Abort-aware stream consumers and merge got prompt cancellation, ERR_REQUIRE_ASYNC_MODULE got richer metadata, and VFS now honors current-position sentinels.
Read the issue →
July 3rd, 2026 · 14 commits
A CONNECT host-header fix lands alongside a security-note update and several workflow/dependency bumps.
Read the issue →
July 2nd, 2026 · 12 commits
+3
Node.js gains default addon import support, fixes permission propagation and TLA errors, plus HTTP, VFS, and QUIC bug fixes.
Read the issue →
July 1st, 2026 · 8 commits
+2
Notable HTTP authority validation and TLS reporting updates, plus build and docs work including Maglev on riscv64.
Read the issue →