October 31st, 2026 · 6 commits
+1
Shutdown crash fix for TSFN, safer FFI callback lifetimes, and an HTTP/2 memory accounting bugfix; plus a few doc and test updates.
Read the issue →
October 30th, 2026 · 13 commits
+4
QUIC error handling, crypto safety, and FFI validation saw the biggest changes, plus a few build and test cleanups.
Read the issue →
October 29th, 2026 · 15 commits
+3
Major crypto hardening, a readFileSync overflow fix, stream context preservation, and new child_process timeout reporting headline the day.
Read the issue →
October 28th, 2026 · 21 commits
+3
Big zlib throughput gains, safer X.509 handling, HTTP/2 timeout cleanup, TLS session fix, and WASM compile cache support.
Read the issue →
October 27th, 2026 · 13 commits
+2
Node adds raw-content zip entry APIs, fixes once-listener removal reporting, and plugs an ffi dlopen leak amid several dependency updates.
Read the issue →
October 26th, 2026 · 13 commits
+1
V8 and OpenSSL were bumped, sqlite got a performance fix, and release/docs were updated for the new alpha flow.
Read the issue →
October 25th, 2026 · 19 commits
+4
Node drops legacy OpenSSL 1.x/engine support, tightens FIPS/build rules, and ships notable sqlite, stream, and VFS fixes.
Read the issue →
October 24th, 2026 · 9 commits
SHA-3, TLS 1.3 ciphers, and several BoringSSL compatibility fixes landed alongside an AbortSignal speedup, HTTP/2 cleanup, and FFI callback draining.
Read the issue →
October 23rd, 2026 · 18 commits
+4
A sizable day with OpenSSL 4.1 plumbing, a new `--test-forbid-only` safeguard, and several build/test fixes.
Read the issue →
October 22nd, 2026 · 13 commits
+3
Several high-impact bug fixes: sqlite error propagation, blob size correctness, VFS live views/watch aborts, and an FFI handle leak fix.
Read the issue →
October 21st, 2026 · 24 commits
+6
Node.js shipped multiple CVE fixes across crypto, TLS, DNS, permissions, zlib, plus a few build and test improvements.
Read the issue →
October 20th, 2026 · 18 commits
+5
Node ships a new crc32c API, blocks revoked TLS intermediates, and pulls in multiple security-dependent updates.
Read the issue →
October 19th, 2026 · 16 commits
+8
Major API additions land for fs, modules, TLS, QUIC, and WASI, alongside a few targeted fixes and tooling updates.
Read the issue →
October 18th, 2026 · 5 commits
A new unregister function lands for process finalization, alongside CI and tooling fixes for Windows, UTF-8 handling, and safer dependency updates.
Read the issue →
October 17th, 2026 · 9 commits
Security and correctness fixes land alongside a TransformStream allocation trim and a small VFS permission update.
Read the issue →
October 16th, 2026 · 17 commits
+6
Test runner mock conveniences, a SEA vfsArchive fix, and several reliability test hardenings landed today.
Read the issue →
October 15th, 2026 · 29 commits
+4
Major V8 uplift, VFS unflagged, stream/iter gets a performance sweep, plus crypto fixes and API cleanup.
Read the issue →
October 14th, 2026 · 9 commits
+2
A new 26.12.0 release plus sqlite, URLSearchParams, AsyncLocalStorage, and WebCrypto updates highlight the day.
Read the issue →
October 13th, 2026 · 14 commits
+4
Node fixes a querystring decoding bug, improves permission model behavior, and trims WebStreams pipeTo/tee overhead.
Read the issue →
October 12th, 2026 · 7 commits
+1
SQLite is updated, AbortSignal.any() leak is fixed, and HTTP raw header name lookup is faster.
Read the issue →
October 11th, 2026 · 10 commits
+2
Major simdjson integration, a diagnostics_channel context fix, and several build/runtime correctness updates landed.
Read the issue →
October 10th, 2026 · 31 commits
+2
Major stream/iter correctness, fs writer ordering, and FFI/WebAssembly support changes land alongside docs and benchmarks.
Read the issue →
October 9th, 2026 · 3 commits
Node.js switches ICU updates to PGP/SHA-256, tightens sqlite argument validation, and documents the new release schedule.
Read the issue →
October 8th, 2026 · 8 commits
Child process permission flags now propagate from config files, with docs and regressions across HTTP, test runner, and benchmarks.
Read the issue →
October 7th, 2026 · 47 commits
+13
Big V8 upgrade, new stream dump APIs, and several crypto/sqlite fixes and refactors highlight the day.
Read the issue →
October 6th, 2026 · 10 commits
+1
Major runtime additions land: synchronous ESM entry loading, built-in WebSocket masking helpers, and new test-runner mock assertions.
Read the issue →
October 5th, 2026 · 19 commits
+3
Major net autoselection changes, stable config files, new layered VFS mounts, plus stream and MIME performance work.
Read the issue →
October 4th, 2026 · 49 commits
+13
Major V8 uplift plus Node API migrations, build fixes, and one security-relevant FFI validation hardening.
Read the issue →
October 3rd, 2026 · 23 commits
+4
A busy day: FFI now accepts safe numbers for 64-bit args, HTTP responses got faster, and AsyncLocalStorage’s legacy path was removed.
Read the issue →
October 2nd, 2026 · 9 commits
+2
A mixed day of real bug fixes: cpSync timestamp handling, FFI allocation and pointer validation, plus a V8 spec fix.
Read the issue →
October 1st, 2026 · 8 commits
OpenSSL is bumped to 3.5.9, and Node patches several crash/termination bugs in test runner, FFI, and SQLite.
Read the issue →