build, doc: move to redesign by avivkeller · Pull Request #62045 · nodejs/node

avivkeller · 2026-02-28T23:20:11Z

This PR shouldn't change much from it's current form. Most changes will go in doc-kit. test-make-doc was removed, since our new generator minifies the output HTML (so it's format is structurally inconsistent) and can't be easily parsed with the existing regular expressions.

Furthermore, such tests are not needed due to our tests in doc-kit.

Preview: https://beta.docs.nodejs.org

On behalf of the Node.js Web Team, we are so please to merge our work on the redesign. This has been the culmination of multiple years of effort, and we are so excited to hear what you all have to say!

Notable Change:

Node.js is thrilled to announce a brand new redesign of our documentation experience! The updated documentation now features HTML structure and styling that are much more closely aligned with the main Node.js website UI, creating a more consistent experience across the brand. You can check out the redesigned documentation today at ~~https://nodejs.org/api~~ (Striked out since this isn't correct until this PR lands).

Copilot

Pull request overview

Updates Node.js doc build configuration to experiment with the redesigned documentation output by switching doc-kit templates away from the legacy “all-in-one HTML” generation.

Changes:

Switch doc-kit HTML generation template from legacy-html-all to web (Makefile + Windows build).
Stop declaring out/doc/api/all.html as a required/produced doc artifact in the doc-only Makefile target.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
`Makefile`	Uses the `web` doc-kit template and removes `all.html` from declared doc build outputs.
`vcbuild.bat`	Uses the `web` doc-kit template during Windows doc generation.

Comments suppressed due to low confidence (1)

Makefile:838

The comment above this doc generation rule still says it generates all.html/all.json, but all.html is no longer a target/output in this rule. Please update the comment to match the new set of generated artifacts to avoid confusion for future maintainers.

# Generate all doc files (individual and all.html/all.json) in a single doc-kit call
# Using grouped targets (&:) so Make knows one command produces all outputs

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

codecov · 2026-03-01T02:02:29Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.21%. Comparing base (b805fb5) to head (b508cc8).
⚠️ Report is 94 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #62045      +/-   ##
==========================================
+ Coverage   90.17%   90.21%   +0.03%     
==========================================
  Files         771      785      +14     
  Lines      265489   269368    +3879     
  Branches    50471    51512    +1041     
==========================================
+ Hits       239405   243006    +3601     
+ Misses      17042    16894     -148     
- Partials     9042     9468     +426

see 135 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions · 2026-05-17T13:22:38Z

The notable-change PRs with changes that should be highlighted in changelogs. label has been added by @avivkeller.

Please suggest a text for the release notes if you'd like to include a more detailed summary, then proceed to update the PR description with the text or a link to the notable change suggested text comment. Otherwise, the commit will be placed in the Other Notable Changes section.

avivkeller · 2026-05-17T13:37:41Z

cc @nodejs/build @nodejs/web-infra @nodejs/TSC for reviews

panva · 2026-05-17T13:53:18Z

Can't quite verify.

➜  node git:(main) gh pr checkout 62045
Switched to branch 'doc/redesign'
➜  node git:(doc/redesign) make doc-only
mkdir -p out/doc/api
cp -r doc/api out/doc

added 374 packages in 2s
error: too many arguments for 'generate'. Expected 0 arguments but got 1.
make: *** [out/doc/api/addons.html] Error 1

avivkeller · 2026-05-17T13:55:52Z

@panva Sorry! I'm still trying to get the thread count to work on all CI machines, but the output from https://github.com/nodejs/node/actions/runs/25992332792?pr=62045 's artifacts have the generated docs.

A lot of the runners use slim machines, which it appears interfere with the generation, so I need to see which CI checks fail.

panva · 2026-05-17T14:31:03Z

@avivkeller footnotes don't seem to work, I don't know if it's being tracked or not but leaving that here, also don't know if they don't work generally or as a side effect of the bundle here.

There are 100% docs where this is an improvement and it will take some getting used to. Very subjective.

Some oddities I notice upon first (well, first this time around) look, take it with a grain of salt, I'm very used to the old docs and it's easy to focus on what stands out really quickly. In that way I hope this might be valuable (non-blocking) feedback.

method parameters/arguments are "attributes"? seems odd
toc for method lists is barely parseable, consider having toc entries for methods only have the module.method(), i.e. don't list the potentially very long list of parameters
non-heading main content switching between 14px and 16px font sizes - my poor brain can't grok this, i know there's just two sizes but because it's jumping around the two all over the place it feels inconsistent, eventho it is.
what do you suggest to use in place of tables? the content width is just too tiny to fit any meaningful table.
because the old class/property lists used a mix if no-background: Class: Name and class.property it was easy to see you're moving on. Now with just [C] and [P] but otherwise same style (and a 2px font size diff, ...) not so much, it sort of blends all together.

what	old	new
toc
table
interface list

AugustinMauroy

what about the documentation.md file ? we should remove it but there are a blocker with that the explaining of the stability level will be lost

avivkeller · 2026-05-19T20:19:44Z

@panva we've done rounds of feedback, and based on our current iteration, note:

method parameters/arguments are "attributes"? seems odd

The word "Attributes" allows us to use the same word consistently for these "typed lists", as they appear in several places where it's not easy to identify what they are describing.

toc for method lists is barely parseable, consider having toc entries for methods only have the module.method(), i.e. don't list the potentially very long list of parameters

We attempted this in the past, and unfortunately, the general consensus was that having the full parameter list is much more 'exact', as in, no two entries will be identical.

non-heading main content switching between 14px and 16px font sizes - my poor brain can't grok this, i know there's just two sizes but because it's jumping around the two all over the place it feels inconsistent, eventho it is.

The main prose is 16px. Inside of "typed lists", the font size is 14px.

what do you suggest to use in place of tables? the content width is just too tiny to fit any meaningful table.

The photo you shared is displaying a very large table. Smaller tables render fine. Such tables should be broken down, most likely.

because the old class/property lists used a mix if no-background: Class: Name and class.property it was easy to see you're moving on. Now with just [C] and [P] but otherwise same style (and a 2px font size diff, ...) not so much, it sort of blends all together.

I'm afraid I don't understand the concern. The "tags" refer to the type of the entry, similar to the text prefix.

@AugustinMauroy I have no idea what you are saying. That file should not be removed.

AugustinMauroy · 2026-05-19T20:28:50Z

@avivkeller i was referencing to this discussion about this file nodejs/doc-kit#780 (comment)

avivkeller · 2026-05-19T20:31:19Z

At this point in time, we still need the /about page, since we don't put the overview on the index. But yes, a follow-up to move that would be worth a discussion.

I'm aware I said previously that we'd need to remove it when we land this generator, but we actually first need to generate a new home for the overview, or just leave it as is.

AugustinMauroy · 2026-05-19T20:35:49Z

okay right !

avivkeller · 2026-05-22T22:31:30Z

In the meantime, @nodejs/build any suggestions for the memory issues on CI? We don't have any issues running on most machines, should we skip the docs build on these ones?

nodejs-github-bot · 2026-09-14T14:01:03Z

CI: https://ci.nodejs.org/job/node-test-pull-request/77472/

nodejs-github-bot · 2026-09-15T03:25:24Z

CI: https://ci.nodejs.org/job/node-test-pull-request/77494/

nodejs-github-bot · 2026-09-15T13:25:13Z

CI: https://ci.nodejs.org/job/node-test-pull-request/77514/

Signed-off-by: Aviv Keller <me@aviv.sh> PR-URL: #62045 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Tim Perry <pimterry@gmail.com>

avivkeller · 2026-09-15T23:51:03Z

Landed in 18a9ba5

Signed-off-by: Aviv Keller <me@aviv.sh> PR-URL: #62045 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Filip Skokan <panva.ip@gmail.com> Reviewed-By: Tim Perry <pimterry@gmail.com>

Notable changes: benchmark: * (SEMVER-MINOR) add http header validator benchmark (James M Snell) #66334 buffer: * (SEMVER-MINOR) add isLatin1 (James M Snell) #66298 * (SEMVER-MINOR) add isLatin1 (James M Snell) #66298 * (SEMVER-MINOR) add Buffer.stringLength() (Matteo Collina) #66064 build, doc: * move to redesign (Aviv Keller) #62045 http: * (SEMVER-MINOR) add isValidHeaderName() and isValidHeaderValue() (James M Snell) #66334 http2: * (SEMVER-MINOR) add new connectionWindowSize option (Tim Perry) #65619 lib: * (SEMVER-MINOR) fix stream loading bug in node:bench (James M Snell) #66114 perf_hooks: * (SEMVER-MINOR) fix truncation of monitorEventLoopDelay() resolution (James M Snell) #66115 * (SEMVER-MINOR) allow RecordableHistogram to record 0 (James M Snell) #66114 * (SEMVER-MINOR) add histogram.diff() (James M Snell) #66099 * (SEMVER-MINOR) report histogram memory to V8 (James M Snell) #66099 * (SEMVER-MINOR) add histogram.snapshot() (James M Snell) #66099 * (SEMVER-MINOR) add histogram export format version 2 (James M Snell) #66098 * (SEMVER-MINOR) harden histogram CBOR import validation (James M Snell) #66098 process: * (SEMVER-MINOR) graduate process.ref/unref from experimental (James M Snell) #66213 sqlite: * (SEMVER-MINOR) rename DatabaseSync and StatementSync (Guilherme Araújo) #65988 src: * (SEMVER-MINOR) add --process-timeout=N (James M Snell) #66138 * (SEMVER-MINOR) expose size and count in heap profile output (Ilyas Shabi) #65737 * (SEMVER-MINOR) let embedders exempt linked bindings from the addon permission (Shelley Vohr) #66067 test: * deflake sliding window histogram test (James M Snell) #66132 PR-URL: #66546

Notable changes: buffer: * (SEMVER-MINOR) add isLatin1 (James M Snell) #66298 * (SEMVER-MINOR) add Buffer.stringLength() (Matteo Collina) #66064 build, doc: * move to redesign (Aviv Keller) #62045 http: * (SEMVER-MINOR) add isValidHeaderName() and isValidHeaderValue() (James M Snell) #66334 http2: * (SEMVER-MINOR) add new connectionWindowSize option (Tim Perry) #65619 perf_hooks: * (SEMVER-MINOR) fix truncation of monitorEventLoopDelay() resolution (James M Snell) #66115 * (SEMVER-MINOR) allow RecordableHistogram to record 0 (James M Snell) #66114 * (SEMVER-MINOR) add histogram.diff() (James M Snell) #66099 * (SEMVER-MINOR) report histogram memory to V8 (James M Snell) #66099 * (SEMVER-MINOR) add histogram.snapshot() (James M Snell) #66099 * (SEMVER-MINOR) add histogram export format version 2 (James M Snell) #66098 * (SEMVER-MINOR) harden histogram CBOR import validation (James M Snell) #66098 process: * (SEMVER-MINOR) graduate process.ref/unref from experimental (James M Snell) #66213 sqlite: * (SEMVER-MINOR) rename DatabaseSync and StatementSync (Guilherme Araújo) #65988 src: * (SEMVER-MINOR) add --process-timeout=N (James M Snell) #66138 * (SEMVER-MINOR) expose size and count in heap profile output (Ilyas Shabi) #65737 * (SEMVER-MINOR) let embedders exempt linked bindings from the addon permission (Shelley Vohr) #66067 PR-URL: #66546

Notable changes: buffer: * (SEMVER-MINOR) add isLatin1 (James M Snell) #66298 * (SEMVER-MINOR) add Buffer.stringLength() (Matteo Collina) #66064 build, doc: * move to redesign (Aviv Keller) #62045 doc: * promote Alpine Linux to tier 2 support (Stewart X Addison) #63737 http: * (SEMVER-MINOR) add isValidHeaderName() and isValidHeaderValue() (James M Snell) #66334 http2: * (SEMVER-MINOR) add new connectionWindowSize option (Tim Perry) #65619 perf_hooks: * (SEMVER-MINOR) fix truncation of monitorEventLoopDelay() resolution (James M Snell) #66115 * (SEMVER-MINOR) allow RecordableHistogram to record 0 (James M Snell) #66114 * (SEMVER-MINOR) add histogram.diff() (James M Snell) #66099 * (SEMVER-MINOR) add histogram.snapshot() (James M Snell) #66099 * (SEMVER-MINOR) harden histogram CBOR import validation (James M Snell) #66098 process: * (SEMVER-MINOR) graduate process.ref/unref from experimental (James M Snell) #66213 sqlite: * (SEMVER-MINOR) rename DatabaseSync and StatementSync (Guilherme Araújo) #65988 src: * (SEMVER-MINOR) add --process-timeout=N (James M Snell) #66138 * (SEMVER-MINOR) expose size and count in heap profile output (Ilyas Shabi) #65737 * (SEMVER-MINOR) let embedders exempt linked bindings from the addon permission (Shelley Vohr) #66067 PR-URL: #66546

Node.js builds its API docs with the redesigned `html` generator since nodejs/node#62045, so nothing uses the legacy HTML generators anymore. This also removes what only they used in `@doc-kit/core`: the `shiki.config.mjs` and `utils/remark-shiki.mjs` exports, the default export of `utils/highlighter.mjs`, and the `hastscript` and `shiki` dependencies. Assisted-by: Claude Opus 5.5 <noreply@anthropic.com>

Notable changes: buffer: * (SEMVER-MINOR) add isLatin1 (James M Snell) #66298 * (SEMVER-MINOR) add Buffer.stringLength() (Matteo Collina) #66064 build, doc: * move to redesign (Aviv Keller) #62045 doc: * promote Alpine Linux to tier 2 support (Stewart X Addison) #63737 http: * (SEMVER-MINOR) add isValidHeaderName() and isValidHeaderValue() (James M Snell) #66334 http2: * (SEMVER-MINOR) add new connectionWindowSize option (Tim Perry) #65619 perf_hooks: * (SEMVER-MINOR) fix truncation of monitorEventLoopDelay() resolution (James M Snell) #66115 * (SEMVER-MINOR) allow RecordableHistogram to record 0 (James M Snell) #66114 * (SEMVER-MINOR) add histogram.diff() (James M Snell) #66099 * (SEMVER-MINOR) add histogram.snapshot() (James M Snell) #66099 * (SEMVER-MINOR) harden histogram CBOR import validation (James M Snell) #66098 process: * (SEMVER-MINOR) graduate process.ref/unref from experimental (James M Snell) #66213 sqlite: * (SEMVER-MINOR) rename DatabaseSync and StatementSync (Guilherme Araújo) #65988 src: * (SEMVER-MINOR) add --process-timeout=N (James M Snell) #66138 * (SEMVER-MINOR) expose size and count in heap profile output (Ilyas Shabi) #65737 * (SEMVER-MINOR) let embedders exempt linked bindings from the addon permission (Shelley Vohr) #66067 PR-URL: #66546

Notable changes: buffer: * (SEMVER-MINOR) add isLatin1 (James M Snell) nodejs#66298 * (SEMVER-MINOR) add Buffer.stringLength() (Matteo Collina) nodejs#66064 build, doc: * move to redesign (Aviv Keller) nodejs#62045 doc: * promote Alpine Linux to tier 2 support (Stewart X Addison) nodejs#63737 http: * (SEMVER-MINOR) add isValidHeaderName() and isValidHeaderValue() (James M Snell) nodejs#66334 http2: * (SEMVER-MINOR) add new connectionWindowSize option (Tim Perry) nodejs#65619 perf_hooks: * (SEMVER-MINOR) fix truncation of monitorEventLoopDelay() resolution (James M Snell) nodejs#66115 * (SEMVER-MINOR) allow RecordableHistogram to record 0 (James M Snell) nodejs#66114 * (SEMVER-MINOR) add histogram.diff() (James M Snell) nodejs#66099 * (SEMVER-MINOR) add histogram.snapshot() (James M Snell) nodejs#66099 * (SEMVER-MINOR) harden histogram CBOR import validation (James M Snell) nodejs#66098 process: * (SEMVER-MINOR) graduate process.ref/unref from experimental (James M Snell) nodejs#66213 sqlite: * (SEMVER-MINOR) rename DatabaseSync and StatementSync (Guilherme Araújo) nodejs#65988 src: * (SEMVER-MINOR) add --process-timeout=N (James M Snell) nodejs#66138 * (SEMVER-MINOR) expose size and count in heap profile output (Ilyas Shabi) nodejs#65737 * (SEMVER-MINOR) let embedders exempt linked bindings from the addon permission (Shelley Vohr) nodejs#66067 PR-URL: nodejs#66546

Node.js builds its API docs with the redesigned `html` generator since nodejs/node#62045, so nothing uses the legacy HTML generators anymore. This also removes what only they used: the `shiki.config.mjs` export of `@doc-kit/core`, and the `hastscript`, `remark-parse`, `unist-builder`, and `unist-util-visit` dependencies of `@node-core/doc-kit-legacy`. Assisted-by: Claude Opus 5.5 <noreply@anthropic.com> Assisted-by: Claude Sonnet 5.5 <noreply@anthropic.com>

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [node](https://nodejs.org) ([source](https://github.com/nodejs/node)) | major | `24.22.2` → `26.13.0` | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v26.13.0`](https://github.com/nodejs/node/releases/tag/v26.13.0): 2026-10-28, Version 26.13.0 'Lithium' (LTS), @richardlau [Compare Source](https://github.com/nodejs/node/compare/v26.12.1...v26.13.0) ##### Notable Changes This release marks the transition of Node.js 26.x into Long Term Support (LTS) with the codename 'Lithium'. It will continue to receive updates through to the end of April 2029. Other than updating metadata, such as the `process.release` object, to reflect that the release is LTS, no further changes from Node.js 26.12.1 are included. If you are updating from an earlier Long Term Support release (e.g. Node.js 24 or 22 or earlier) please note that since Node.js 25 the official binaries for Linux are linked against libatomic, which may need to be installed separately depending on your Linux distribution. ### [`v26.12.1`](https://github.com/nodejs/node/releases/tag/v26.12.1): 2026-10-21, Version 26.12.1 (Current), @aduh95 prepared by @RafaelGSS [Compare Source](https://github.com/nodejs/node/compare/v26.12.0...v26.12.1) This is a security release. ##### Notable Changes - (CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina) – High - (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) – High - (CVE-2026-105483) tls: fix ip normalization regression (James M Snell) – High - (CVE-2026-111497) src: expose `BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH` (Antoine du Hamel) – High - (CVE-2026-111497) deps: brotli: cherry-pick [`0ed4268`](https://github.com/nodejs/node/commit/0ed4268a4401abcb44720963) (Evgenii Kliuchnikov) – High - (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) – Medium - (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan) – Medium - (CVE-2026-106070) zlib: avoid caching invalid ZIP local headers (Matteo Collina) – Low - (CVE-2026-106071) src: fix the fs permission tree node on wildcard nodes (James M Snell) – Low - (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS) – Low - deps: V8: backport [`93cd21e`](https://github.com/nodejs/node/commit/93cd21e8254b) (Joyee Cheung) - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) - tls: reject chains containing blocked public keys (Ulises Gascon) - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) - tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett) - crypto: harden X.509 conversion and formatting (Filip Skokan) ##### Commits - \[[`818e4ca061`](https://github.com/nodejs/node/commit/818e4ca061)] - **crypto**: update root certificates to NSS 3.131.1 (Antoine du Hamel) [#66877](https://github.com/nodejs/node/pull/66877) - \[[`fd3c87ed43`](https://github.com/nodejs/node/commit/fd3c87ed43)] - **crypto**: harden X.509 conversion and formatting (Filip Skokan) [nodejs-private/node-private#966](https://github.com/nodejs-private/node-private/pull/966) - \[[`acffa610db`](https://github.com/nodejs/node/commit/acffa610db)] - **crypto**: reset random caches across snapshots (Filip Skokan) [nodejs-private/node-private#987](https://github.com/nodejs-private/node-private/pull/987) - \[[`7895a5cd2d`](https://github.com/nodejs/node/commit/7895a5cd2d)] - **deps**: update undici to 8.12.2 (Node.js GitHub Bot) [#66721](https://github.com/nodejs/node/pull/66721) - \[[`12daa54d2e`](https://github.com/nodejs/node/commit/12daa54d2e)] - **deps**: V8: backport [`93cd21e`](https://github.com/nodejs/node/commit/93cd21e8254b) (Joyee Cheung) [nodejs-private/node-private#999](https://github.com/nodejs-private/node-private/pull/999) - \[[`6a8b3db7e2`](https://github.com/nodejs/node/commit/6a8b3db7e2)] - **deps**: update c-ares to 1.34.9 (Node.js GitHub Bot) [#66868](https://github.com/nodejs/node/pull/66868) - \[[`a6040b50d9`](https://github.com/nodejs/node/commit/a6040b50d9)] - **deps**: brotli: cherry-pick [`0ed4268`](https://github.com/nodejs/node/commit/0ed4268a4401abcb44720963) (Evgenii Kliuchnikov) [nodejs-private/node-private#1002](https://github.com/nodejs-private/node-private/pull/1002) - \[[`6b78ea171d`](https://github.com/nodejs/node/commit/6b78ea171d)] - **dns**: validate resolve inputs for null bytes (James M Snell) [nodejs-private/node-private#984](https://github.com/nodejs-private/node-private/pull/984) - \[[`0683ee5f7d`](https://github.com/nodejs/node/commit/0683ee5f7d)] - **http**: ensure agent data guard works without I/O (James M Snell) [nodejs-private/node-private#983](https://github.com/nodejs-private/node-private/pull/983) - \[[`e5cae10148`](https://github.com/nodejs/node/commit/e5cae10148)] - ***Revert*** "**module**: synchronously load most ES modules" (Antoine du Hamel) [#66786](https://github.com/nodejs/node/pull/66786) - \[[`cc244131aa`](https://github.com/nodejs/node/commit/cc244131aa)] - **permission**: check permission model in realpathSync (RafaelGSS) [nodejs-private/node-private#973](https://github.com/nodejs-private/node-private/pull/973) - \[[`0392385841`](https://github.com/nodejs/node/commit/0392385841)] - **src**: expose `BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH` (Antoine du Hamel) [nodejs-private/node-private#1002](https://github.com/nodejs-private/node-private/pull/1002) - \[[`c273a408c9`](https://github.com/nodejs/node/commit/c273a408c9)] - **src**: fix the fs permission tree node on wildcard nodes (James M Snell) [nodejs-private/node-private#986](https://github.com/nodejs-private/node-private/pull/986) - \[[`a2caddd20e`](https://github.com/nodejs/node/commit/a2caddd20e)] - **tls**: reject chains containing blocked public keys (Ulises Gascon) [#66871](https://github.com/nodejs/node/pull/66871) - \[[`ad788ccd07`](https://github.com/nodejs/node/commit/ad788ccd07)] - **tls**: reject non-canonical IP addresses (Matteo Collina) [nodejs-private/node-private#982](https://github.com/nodejs-private/node-private/pull/982) - \[[`cd4b05469c`](https://github.com/nodejs/node/commit/cd4b05469c)] - **tls**: fix ip normalization regression (James M Snell) [nodejs-private/node-private#985](https://github.com/nodejs-private/node-private/pull/985) - \[[`5fa440e0d7`](https://github.com/nodejs/node/commit/5fa440e0d7)] - **tools**: retry Gatekeeper check and stapling after notarization (Ryan Aslett) [#66855](https://github.com/nodejs/node/pull/66855) - \[[`745ad77156`](https://github.com/nodejs/node/commit/745ad77156)] - **zlib**: avoid caching invalid ZIP local headers (Matteo Collina) [nodejs-private/node-private#981](https://github.com/nodejs-private/node-private/pull/981) ### [`v26.12.0`](https://github.com/nodejs/node/releases/tag/v26.12.0): 2026-10-14, Version 26.12.0 (Current), @richardlau [Compare Source](https://github.com/nodejs/node/compare/v26.11.1...v26.12.0) ##### Notable Changes - \[[`1ebd6d3677`](https://github.com/nodejs/node/commit/1ebd6d3677)] - **(SEMVER-MINOR)** **doc,lib,src**: throw on missing WebAssembly or RX support (Paolo Insogna) [#66533](https://github.com/nodejs/node/pull/66533) - \[[`7f1937d2b9`](https://github.com/nodejs/node/commit/7f1937d2b9)] - **(SEMVER-MINOR)** **http**: add websocketMask() and websocketUnmask() (James M Snell) [#66335](https://github.com/nodejs/node/pull/66335) ##### Commits - \[[`30e76bb16a`](https://github.com/nodejs/node/commit/30e76bb16a)] - **benchmark**: fix input passed to subtle.digest in webcrypto-digest (Rafael Gonzaga) [#66608](https://github.com/nodejs/node/pull/66608) - \[[`adef72223a`](https://github.com/nodejs/node/commit/adef72223a)] - **benchmark**: fix buffer option in buffer read/write benchmarks (Rafael Gonzaga) [#66604](https://github.com/nodejs/node/pull/66604) - \[[`2f498f08fe`](https://github.com/nodejs/node/commit/2f498f08fe)] - **benchmark**: add util.parseArgs benchmark (Rafael Gonzaga) [#66599](https://github.com/nodejs/node/pull/66599) - \[[`4ce8412e18`](https://github.com/nodejs/node/commit/4ce8412e18)] - **benchmark**: fix url-searchparams-sort to sort a fresh list (RafaelGSS) [#66535](https://github.com/nodejs/node/pull/66535) - \[[`493bd6c66e`](https://github.com/nodejs/node/commit/493bd6c66e)] - **benchmark,tools**: fix napi benchmarks on GHA (Nigro Simone) [#66423](https://github.com/nodejs/node/pull/66423) - \[[`e4515552d6`](https://github.com/nodejs/node/commit/e4515552d6)] - **build**: run QUIC CI for V8 changes (Yuya Inoue) [#66602](https://github.com/nodejs/node/pull/66602) - \[[`a888e51062`](https://github.com/nodejs/node/commit/a888e51062)] - **build**: support Python 3.15 (Mike McCready) [#65750](https://github.com/nodejs/node/pull/65750) - \[[`2afab9a63b`](https://github.com/nodejs/node/commit/2afab9a63b)] - **build**: do not include shared gtest in `node` link path (Antoine du Hamel) [#66626](https://github.com/nodejs/node/pull/66626) - \[[`f88c2f8ec6`](https://github.com/nodejs/node/commit/f88c2f8ec6)] - **build,test**: enable temporal support on no-ICU and system-ICU builds (Antoine du Hamel) [#66697](https://github.com/nodejs/node/pull/66697) - \[[`5fd03e6fdf`](https://github.com/nodejs/node/commit/5fd03e6fdf)] - **child_process**: propagate config-file permission flags to children (Rafael Gonzaga) [#66559](https://github.com/nodejs/node/pull/66559) - \[[`f771134b07`](https://github.com/nodejs/node/commit/f771134b07)] - **crypto**: isolate provider EC PKCS8 encoding (Filip Skokan) [#66413](https://github.com/nodejs/node/pull/66413) - \[[`4e00a293db`](https://github.com/nodejs/node/commit/4e00a293db)] - **crypto**: remove key export and metadata locks (Filip Skokan) [#66413](https://github.com/nodejs/node/pull/66413) - \[[`bcd8018775`](https://github.com/nodejs/node/commit/bcd8018775)] - **crypto**: remove verify setup key locking (Filip Skokan) [#66413](https://github.com/nodejs/node/pull/66413) - \[[`883250fee2`](https://github.com/nodejs/node/commit/883250fee2)] - **crypto**: remove KEM key locking (Filip Skokan) [#66413](https://github.com/nodejs/node/pull/66413) - \[[`9d98805071`](https://github.com/nodejs/node/commit/9d98805071)] - **crypto**: remove RSA-OAEP key locking (Filip Skokan) [#66413](https://github.com/nodejs/node/pull/66413) - \[[`d6293e7bb1`](https://github.com/nodejs/node/commit/d6293e7bb1)] - **crypto**: skip secret key mutex allocation (Filip Skokan) [#66413](https://github.com/nodejs/node/pull/66413) - \[[`8d8af8003e`](https://github.com/nodejs/node/commit/8d8af8003e)] - **crypto**: keep the root cert store per Environment (Shelley Vohr) [#66411](https://github.com/nodejs/node/pull/66411) - \[[`c6f0614785`](https://github.com/nodejs/node/commit/c6f0614785)] - **crypto**: remove select Web Crypto warnings (Filip Skokan) [#66312](https://github.com/nodejs/node/pull/66312) - \[[`e5360b5a08`](https://github.com/nodejs/node/commit/e5360b5a08)] - **deps**: update googletest to [`988ea2c`](https://github.com/nodejs/node/commit/988ea2c1798de7779f656df2281dd36d6039a17a) (Node.js GitHub Bot) [#66652](https://github.com/nodejs/node/pull/66652) - \[[`7eb230a2c1`](https://github.com/nodejs/node/commit/7eb230a2c1)] - **deps**: update acorn to 8.19.0 (Node.js GitHub Bot) [#66655](https://github.com/nodejs/node/pull/66655) - \[[`af946ba8f3`](https://github.com/nodejs/node/commit/af946ba8f3)] - **deps**: update sqlite to 3.54.0 (Node.js GitHub Bot) [#66663](https://github.com/nodejs/node/pull/66663) - \[[`007872a85d`](https://github.com/nodejs/node/commit/007872a85d)] - **deps**: V8: cherry-pick [`8d14d49`](https://github.com/nodejs/node/commit/8d14d49c4040) (Antoine du Hamel) [#66627](https://github.com/nodejs/node/pull/66627) - \[[`f44aec4966`](https://github.com/nodejs/node/commit/f44aec4966)] - **deps**: update simdjson to 5.0.3 (Daniel Lemire) [#66620](https://github.com/nodejs/node/pull/66620) - \[[`1a33e914e8`](https://github.com/nodejs/node/commit/1a33e914e8)] - **deps**: V8: cherry-pick [`7d5eb1d`](https://github.com/nodejs/node/commit/7d5eb1df2a72) (inoway46) [#66566](https://github.com/nodejs/node/pull/66566) - \[[`3294d51e5a`](https://github.com/nodejs/node/commit/3294d51e5a)] - **diagnostics_channel**: fix default callback context (Matteo Collina) [#66481](https://github.com/nodejs/node/pull/66481) - \[[`5c602a5824`](https://github.com/nodejs/node/commit/5c602a5824)] - **doc**: list futimes among fd APIs disabled by the permission model (Rafael Gonzaga) [#66649](https://github.com/nodejs/node/pull/66649) - \[[`eaeb4736c8`](https://github.com/nodejs/node/commit/eaeb4736c8)] - **doc**: add Test Runner to list of built-in diagnostic channels (Vas Sudanagunta) [#66563](https://github.com/nodejs/node/pull/66563) - \[[`0e1c99afae`](https://github.com/nodejs/node/commit/0e1c99afae)] - **doc**: document stream/iter behaviors and Node.js extensions (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`846236367d`](https://github.com/nodejs/node/commit/846236367d)] - **doc**: document URL and Uint8Array references in process.permission (Rafael Gonzaga) [#66557](https://github.com/nodejs/node/pull/66557) - \[[`fc3b067be7`](https://github.com/nodejs/node/commit/fc3b067be7)] - **doc**: clarify http Agent keepSocketAlive behavior (Efe Karasakal) [#66252](https://github.com/nodejs/node/pull/66252) - \[[`73a4e90ce2`](https://github.com/nodejs/node/commit/73a4e90ce2)] - **doc**: document keepAliveTimeoutBuffer server option (Efe Karasakal) [#66286](https://github.com/nodejs/node/pull/66286) - \[[`bb816582af`](https://github.com/nodejs/node/commit/bb816582af)] - **doc**: fix request.reusedSocket timeout example (Efe Karasakal) [#66286](https://github.com/nodejs/node/pull/66286) - \[[`82223ab4d9`](https://github.com/nodejs/node/commit/82223ab4d9)] - **doc**: clarify revert PR label policy (Antoine du Hamel) [#66529](https://github.com/nodejs/node/pull/66529) - \[[`c6f59d4e8e`](https://github.com/nodejs/node/commit/c6f59d4e8e)] - **doc**: clarify node binary misuse after compromise (Rafael Gonzaga) [#66530](https://github.com/nodejs/node/pull/66530) - \[[`8904178498`](https://github.com/nodejs/node/commit/8904178498)] - **doc**: document linux-x64-musl build toolchain (Issac) [#66523](https://github.com/nodejs/node/pull/66523) - \[[`1e8247a74e`](https://github.com/nodejs/node/commit/1e8247a74e)] - **doc**: run license-builder (github-actions\[bot]) [#66517](https://github.com/nodejs/node/pull/66517) - \[[`b2773d5e4c`](https://github.com/nodejs/node/commit/b2773d5e4c)] - **doc**: add missing return types in cluster.md (Daniel Pinto) [#66453](https://github.com/nodejs/node/pull/66453) - \[[`1ebd6d3677`](https://github.com/nodejs/node/commit/1ebd6d3677)] - **(SEMVER-MINOR)** **doc,lib,src**: throw on missing WebAssembly or RX support (Paolo Insogna) [#66533](https://github.com/nodejs/node/pull/66533) - \[[`c1073f31de`](https://github.com/nodejs/node/commit/c1073f31de)] - **ffi**: fix exportArrayBuffer type check (Trivikram Kamat) [#66455](https://github.com/nodejs/node/pull/66455) - \[[`69148ee0ff`](https://github.com/nodejs/node/commit/69148ee0ff)] - **fs**: lock FileHandle on first read in pull() and pullSync() (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`700c60a1cd`](https://github.com/nodejs/node/commit/700c60a1cd)] - **fs**: serialize FileHandle writer() async writes (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`32833def1c`](https://github.com/nodejs/node/commit/32833def1c)] - **http**: reduce raw header name allocations (Roberto Bianchi) [#66488](https://github.com/nodejs/node/pull/66488) - \[[`7f1937d2b9`](https://github.com/nodejs/node/commit/7f1937d2b9)] - **(SEMVER-MINOR)** **http**: add websocketMask() and websocketUnmask() (James M Snell) [#66335](https://github.com/nodejs/node/pull/66335) - \[[`115731dda7`](https://github.com/nodejs/node/commit/115731dda7)] - **http2**: speed up response getHeaders (Roberto Bianchi) [#66592](https://github.com/nodejs/node/pull/66592) - \[[`447c36cb45`](https://github.com/nodejs/node/commit/447c36cb45)] - **lib**: fix AbortSignal.any() nested composite leak (Darius) [#66617](https://github.com/nodejs/node/pull/66617) - \[[`1722ced4b4`](https://github.com/nodejs/node/commit/1722ced4b4)] - **lib**: add --allow-fs-vfs to permission available flags (Rafael Gonzaga) [#66554](https://github.com/nodejs/node/pull/66554) - \[[`062ece77fc`](https://github.com/nodejs/node/commit/062ece77fc)] - **lib**: fix benchmark record acknowledgement race (Filip Skokan) [#66430](https://github.com/nodejs/node/pull/66430) - \[[`05d0b14438`](https://github.com/nodejs/node/commit/05d0b14438)] - **lib**: set exit code on failed node:bench run() (RafaelGSS) [#66534](https://github.com/nodejs/node/pull/66534) - \[[`2cab299471`](https://github.com/nodejs/node/commit/2cab299471)] - **lib**: default node:bench warmup to 10 invocations (RafaelGSS) [#66536](https://github.com/nodejs/node/pull/66536) - \[[`83f507845d`](https://github.com/nodejs/node/commit/83f507845d)] - **meta**: bump nodejs/node-pr-labeler to [`dfe5eb3`](https://github.com/nodejs/node/commit/dfe5eb3) (Soul Lee) [#66606](https://github.com/nodejs/node/pull/66606) - \[[`6fbffd5ee5`](https://github.com/nodejs/node/commit/6fbffd5ee5)] - **meta**: bump codecov/codecov-action from 7.1.0 to 7.1.1 (dependabot\[bot]) [#66448](https://github.com/nodejs/node/pull/66448) - \[[`bd567f8bd6`](https://github.com/nodejs/node/commit/bd567f8bd6)] - **module**: fix require of imports with package map (Lazizbek Ergashev) [#66565](https://github.com/nodejs/node/pull/66565) - \[[`c442f471a5`](https://github.com/nodejs/node/commit/c442f471a5)] - **module**: synchronously load most ES modules (Geoffrey Booth) [#62530](https://github.com/nodejs/node/pull/62530) - \[[`51f66f0134`](https://github.com/nodejs/node/commit/51f66f0134)] - **permission**: keep explicit fs grants when dropping a covering directory (Rafael Gonzaga) [#66556](https://github.com/nodejs/node/pull/66556) - \[[`1aa10d80e2`](https://github.com/nodejs/node/commit/1aa10d80e2)] - **process**: mark process.finalization as release candidate (Matteo Collina) [#66436](https://github.com/nodejs/node/pull/66436) - \[[`dd4715a6ba`](https://github.com/nodejs/node/commit/dd4715a6ba)] - **querystring**: fix value decoding after encoded keys (Ved Chaudhari) [#66553](https://github.com/nodejs/node/pull/66553) - \[[`9648a6ba8e`](https://github.com/nodejs/node/commit/9648a6ba8e)] - **quic**: reject closed stream writer writes with a TypeError (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`d6f566baf8`](https://github.com/nodejs/node/commit/d6f566baf8)] - **quic**: give each BindingData its own allocator state (Shelley Vohr) [#66411](https://github.com/nodejs/node/pull/66411) - \[[`c3204c15bd`](https://github.com/nodejs/node/commit/c3204c15bd)] - **quic**: validate session close error codes (Christian Aurich Zanettini Martins) [#66302](https://github.com/nodejs/node/pull/66302) - \[[`5b87354f5a`](https://github.com/nodejs/node/commit/5b87354f5a)] - **quic**: destroy stream on invalid promise body (Christian Aurich Zanettini Martins) [#66260](https://github.com/nodejs/node/pull/66260) - \[[`9ef698c781`](https://github.com/nodejs/node/commit/9ef698c781)] - **sqlite**: validate aggregate() name and options (Guilherme Araújo) [#66463](https://github.com/nodejs/node/pull/66463) - \[[`bbf41f8cfb`](https://github.com/nodejs/node/commit/bbf41f8cfb)] - **sqlite**: persist enableDefensive() across reopen (Trivikram Kamat) [#66404](https://github.com/nodejs/node/pull/66404) - \[[`54867cd25e`](https://github.com/nodejs/node/commit/54867cd25e)] - **sqlite**: throw on oversized strings instead of aborting (Trivikram Kamat) [#66521](https://github.com/nodejs/node/pull/66521) - \[[`4314cde48b`](https://github.com/nodejs/node/commit/4314cde48b)] - **src**: release uv_fs_t in permission WildcardIfDir (Rafael Gonzaga) [#66555](https://github.com/nodejs/node/pull/66555) - \[[`0e58916f08`](https://github.com/nodejs/node/commit/0e58916f08)] - **src**: stop including simdjson.h from env.h (Daniel Lemire) [#66620](https://github.com/nodejs/node/pull/66620) - \[[`06f56a55bb`](https://github.com/nodejs/node/commit/06f56a55bb)] - **src**: use native CopyArrayBufferBytes for webstream buffer copy (René) [#66400](https://github.com/nodejs/node/pull/66400) - \[[`2e3dd5bb63`](https://github.com/nodejs/node/commit/2e3dd5bb63)] - **src**: fix config file handling (Marco Ippolito) [#66431](https://github.com/nodejs/node/pull/66431) - \[[`cd86506bc2`](https://github.com/nodejs/node/commit/cd86506bc2)] - **src**: mark config file as stable (Marco Ippolito) [#66431](https://github.com/nodejs/node/pull/66431) - \[[`15ff9884e4`](https://github.com/nodejs/node/commit/15ff9884e4)] - **stream**: skip idle webstreams start and watchers (Matteo Collina) [#66424](https://github.com/nodejs/node/pull/66424) - \[[`3f75c89fb8`](https://github.com/nodejs/node/commit/3f75c89fb8)] - **stream**: add pipeToSync() failOnIncompleteClose option (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`6cecf140e7`](https://github.com/nodejs/node/commit/6cecf140e7)] - **stream**: do not fail the writer when pipeToSync() cannot close (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`16833534b6`](https://github.com/nodejs/node/commit/16833534b6)] - **stream**: fix fromSync() async input error messages (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`af41622ad8`](https://github.com/nodejs/node/commit/af41622ad8)] - **stream**: reject closed fromWritable() writes with a TypeError (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`4b83c6c38e`](https://github.com/nodejs/node/commit/4b83c6c38e)] - **stream**: accept explicit stream/iter budgets below 16384 (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`f302fbd04a`](https://github.com/nodejs/node/commit/f302fbd04a)] - **stream**: reduce per-chunk overhead in stream/iter consumers (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`7ba60dcdbe`](https://github.com/nodejs/node/commit/7ba60dcdbe)] - **stream**: keep the original error when writer.fail() throws (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`dcac51a7db`](https://github.com/nodejs/node/commit/dcac51a7db)] - **stream**: align pull() abort handling with the spec (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`995dee6b6b`](https://github.com/nodejs/node/commit/995dee6b6b)] - **stream**: honor stream/iter protocols on function objects (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`6eaf91353a`](https://github.com/nodejs/node/commit/6eaf91353a)] - **stream**: do not hold back nested async data in from() (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`69d44aedb4`](https://github.com/nodejs/node/commit/69d44aedb4)] - **stream**: bound pre-batched async values in from() (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`6b1e7c4cf1`](https://github.com/nodejs/node/commit/6b1e7c4cf1)] - **stream**: guard shareSync() against re-entrant source reads (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`8a47365425`](https://github.com/nodejs/node/commit/8a47365425)] - **stream**: split oversized share batches under drop-oldest (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`30cbc4e643`](https://github.com/nodejs/node/commit/30cbc4e643)] - **stream**: reject drop-newest backpressure in shareSync() (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`42ae08594e`](https://github.com/nodejs/node/commit/42ae08594e)] - **stream**: detach shareSync consumers on strict budget errors (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`fa49de9ba6`](https://github.com/nodejs/node/commit/fa49de9ba6)] - **stream**: keep share buffer when all consumers detach (James M Snell) [#66483](https://github.com/nodejs/node/pull/66483) - \[[`e6662cb904`](https://github.com/nodejs/node/commit/e6662cb904)] - **stream**: fix Utf8Stream flush handling (James M Snell) [#66473](https://github.com/nodejs/node/pull/66473) - \[[`93596b1a9e`](https://github.com/nodejs/node/commit/93596b1a9e)] - **stream**: add dump()/dumpSync() for stream/iter (Ethan Arrowood) [#65598](https://github.com/nodejs/node/pull/65598) - \[[`4ba6ce1b0c`](https://github.com/nodejs/node/commit/4ba6ce1b0c)] - **stream**: port remaining SonicBoom tests for Utf8Stream (Matteo Collina) [#66275](https://github.com/nodejs/node/pull/66275) - \[[`cd8b5fa5b0`](https://github.com/nodejs/node/commit/cd8b5fa5b0)] - **test**: tolerate async block count updates in test-fs-stat-bigint (Rafael Gonzaga) [#66576](https://github.com/nodejs/node/pull/66576) - \[[`30814ce991`](https://github.com/nodejs/node/commit/30814ce991)] - **test**: replace discard loops with dump() (Ethan Arrowood) [#65598](https://github.com/nodejs/node/pull/65598) - \[[`20441b8fc0`](https://github.com/nodejs/node/commit/20441b8fc0)] - **test**: run node-bench tools test sequentially (Filip Skokan) [#66338](https://github.com/nodejs/node/pull/66338) - \[[`9618da6fe3`](https://github.com/nodejs/node/commit/9618da6fe3)] - **test**: remove duplicated cases in permission fs-read fixture (Rafael Gonzaga) [#66450](https://github.com/nodejs/node/pull/66450) - \[[`c348a4cb46`](https://github.com/nodejs/node/commit/c348a4cb46)] - **test**: run instantiateStreaming-bad-imports WPT (Filip Skokan) [#66322](https://github.com/nodejs/node/pull/66322) - \[[`7d4fda6ba7`](https://github.com/nodejs/node/commit/7d4fda6ba7)] - **test**: honor allowed WPT promise rejections (Filip Skokan) [#66322](https://github.com/nodejs/node/pull/66322) - \[[`d4c87eb086`](https://github.com/nodejs/node/commit/d4c87eb086)] - **test**: scope Blob WPT failures to big-endian (Filip Skokan) [#66322](https://github.com/nodejs/node/pull/66322) - \[[`7309ddf204`](https://github.com/nodejs/node/commit/7309ddf204)] - **test_runner**: rerun failing todo tests in suites (Barak) [#66605](https://github.com/nodejs/node/pull/66605) - \[[`da908b3072`](https://github.com/nodejs/node/commit/da908b3072)] - **test_runner**: report load errors with --test-isolation=none (Lazizbek Ergashev) [#66550](https://github.com/nodejs/node/pull/66550) - \[[`b18e121625`](https://github.com/nodejs/node/commit/b18e121625)] - **test_runner**: add mock call assertions to t.assert (Guilherme Araújo) [#66476](https://github.com/nodejs/node/pull/66476) - \[[`3d691ab75e`](https://github.com/nodejs/node/commit/3d691ab75e)] - **tools**: restore Python 3.14 for daily WPT (Filip Skokan) [#66699](https://github.com/nodejs/node/pull/66699) - \[[`714aca1ef6`](https://github.com/nodejs/node/commit/714aca1ef6)] - **tools**: switch to PGP and SHA256 in ICU updater (Antoine du Hamel) [#66469](https://github.com/nodejs/node/pull/66469) - \[[`fa9fca45e4`](https://github.com/nodejs/node/commit/fa9fca45e4)] - **tools**: lint thread_local in src (Shelley Vohr) [#66411](https://github.com/nodejs/node/pull/66411) - \[[`dbc3e97847`](https://github.com/nodejs/node/commit/dbc3e97847)] - **tools**: copy hdr_histogram_internal.h in update-histogram.sh (Filipe Oliveira (Redis)) [#66528](https://github.com/nodejs/node/pull/66528) - \[[`4760c27904`](https://github.com/nodejs/node/commit/4760c27904)] - **tools**: bump the eslint group in /tools/eslint with 5 updates (dependabot\[bot]) [#66445](https://github.com/nodejs/node/pull/66445) - \[[`63c20ee58e`](https://github.com/nodejs/node/commit/63c20ee58e)] - **vfs**: add ComposableProvider for layered mounts (Matteo Collina) [#66235](https://github.com/nodejs/node/pull/66235) - \[[`ab057989af`](https://github.com/nodejs/node/commit/ab057989af)] - **watch**: strip underscore aliases of watch flags (Trivikram Kamat) [#66365](https://github.com/nodejs/node/pull/66365) ### [`v26.11.1`](https://github.com/nodejs/node/releases/tag/v26.11.1): 2026-10-07, Version 26.11.1 (Current), @aduh95 [Compare Source](https://github.com/nodejs/node/compare/v26.11.0...v26.11.1) ##### Commits - \[[`2dc4638e85`](https://github.com/nodejs/node/commit/2dc4638e85)] - ***Revert*** "**build**: toggle doc-kit verbosity based on V" (Antoine du Hamel) - \[[`3febbc54ec`](https://github.com/nodejs/node/commit/3febbc54ec)] - ***Revert*** "**build, doc**: move to redesign" (Antoine du Hamel) - \[[`173250e2e7`](https://github.com/nodejs/node/commit/173250e2e7)] - ***Revert*** "**tools**: bump the doc group in /tools/doc with 4 updates" (Antoine du Hamel) ### [`v26.11.0`](https://github.com/nodejs/node/releases/tag/v26.11.0): 2026-10-07, Version 26.11.0 (Current), @aduh95 [Compare Source](https://github.com/nodejs/node/compare/v26.10.0...v26.11.0) ##### Notable Changes - \[[`232f178825`](https://github.com/nodejs/node/commit/232f178825)] - **(SEMVER-MINOR)** **buffer**: add `isLatin1` (James M Snell) [#66298](https://github.com/nodejs/node/pull/66298) - \[[`27778036de`](https://github.com/nodejs/node/commit/27778036de)] - **(SEMVER-MINOR)** **buffer**: add `Buffer.stringLength()` (Matteo Collina) [#66064](https://github.com/nodejs/node/pull/66064) - \[[`4f84c4bda2`](https://github.com/nodejs/node/commit/4f84c4bda2)] - **build, doc**: move to redesign (Aviv Keller) [#62045](https://github.com/nodejs/node/pull/62045) - \[[`6f6296fef9`](https://github.com/nodejs/node/commit/6f6296fef9)] - **(SEMVER-MINOR)** **doc**: promote Alpine Linux to tier 2 support (Stewart X Addison) [#63737](https://github.com/nodejs/node/pull/63737) - \[[`e998d260d0`](https://github.com/nodejs/node/commit/e998d260d0)] - **(SEMVER-MINOR)** **http**: add `isValidHeaderName()` and isValidHeaderValue() (James M Snell) [#66334](https://github.com/nodejs/node/pull/66334) - \[[`7702a50e08`](https://github.com/nodejs/node/commit/7702a50e08)] - **(SEMVER-MINOR)** **http2**: add `connectionWindowSize` option (Tim Perry) [#65619](https://github.com/nodejs/node/pull/65619) - \[[`e06aa62cec`](https://github.com/nodejs/node/commit/e06aa62cec)] - **(SEMVER-MINOR)** **perf_hooks**: fix truncation of `monitorEventLoopDelay()` resolution (James M Snell) [#66115](https://github.com/nodejs/node/pull/66115) - \[[`ee126e37e8`](https://github.com/nodejs/node/commit/ee126e37e8)] - **(SEMVER-MINOR)** **perf_hooks**: allow `RecordableHistogram` to record 0 (James M Snell) [#66114](https://github.com/nodejs/node/pull/66114) - \[[`1fef8f54db`](https://github.com/nodejs/node/commit/1fef8f54db)] - **(SEMVER-MINOR)** **perf_hooks**: add `histogram.diff()` (James M Snell) [#66099](https://github.com/nodejs/node/pull/66099) - \[[`f1b9758c4e`](https://github.com/nodejs/node/commit/f1b9758c4e)] - **(SEMVER-MINOR)** **perf_hooks**: add `histogram.snapshot()` (James M Snell) [#66099](https://github.com/nodejs/node/pull/66099) - \[[`291d56ea3e`](https://github.com/nodejs/node/commit/291d56ea3e)] - **(SEMVER-MINOR)** **perf_hooks**: harden histogram CBOR import validation (James M Snell) [#66098](https://github.com/nodejs/node/pull/66098) - \[[`6299b09d5c`](https://github.com/nodejs/node/commit/6299b09d5c)] - **(SEMVER-MINOR)** **process**: graduate `process.ref`/`unref` to stable (James M Snell) [#66213](https://github.com/nodejs/node/pull/66213) - \[[`41d6707b63`](https://github.com/nodejs/node/commit/41d6707b63)] - **(SEMVER-MINOR)** **sqlite**: rename `DatabaseSync` and `StatementSync` (Guilherme Araújo) [#65988](https://github.com/nodejs/node/pull/65988) - \[[`60d0aa0cd4`](https://github.com/nodejs/node/commit/60d0aa0cd4)] - **(SEMVER-MINOR)** **src**: add `--process-timeout=N` (James M Snell) [#66138](https://github.com/nodejs/node/pull/66138) - \[[`f39916a7e3`](https://github.com/nodejs/node/commit/f39916a7e3)] - **(SEMVER-MINOR)** **src**: expose size and count in heap profile output (Ilyas Shabi) [#65737](https://github.com/nodejs/node/pull/65737) - \[[`0b00d5ea59`](https://github.com/nodejs/node/commit/0b00d5ea59)] - **(SEMVER-MINOR)** **src**: let embedders exempt linked bindings from the addon permission (Shelley Vohr) [#66067](https://github.com/nodejs/node/pull/66067) ##### Commits - \[[`11c3d7115d`](https://github.com/nodejs/node/commit/11c3d7115d)] - **benchmark**: add implicit-framing case to http/set-header (Matteo Collina) [#66420](https://github.com/nodejs/node/pull/66420) - \[[`168b764fec`](https://github.com/nodejs/node/commit/168b764fec)] - **benchmark**: add zstdCompress benchmark (James Ross) [#66358](https://github.com/nodejs/node/pull/66358) - \[[`69182564a7`](https://github.com/nodejs/node/commit/69182564a7)] - **benchmark**: add a node::MakeCallback benchmark (Nigro Simone) [#66316](https://github.com/nodejs/node/pull/66316) - \[[`12e540582f`](https://github.com/nodejs/node/commit/12e540582f)] - **(SEMVER-MINOR)** **benchmark**: add http header validator benchmark (James M Snell) [#66334](https://github.com/nodejs/node/pull/66334) - \[[`e6abdf6b01`](https://github.com/nodejs/node/commit/e6abdf6b01)] - **benchmark**: remove duplicate ffi string length direct (Donghoon Kang) [#66278](https://github.com/nodejs/node/pull/66278) - \[[`480ca7cc55`](https://github.com/nodejs/node/commit/480ca7cc55)] - **benchmark**: fix shadowing that broke h=20 on incoming_headers benchmark (Tim Perry) [#66257](https://github.com/nodejs/node/pull/66257) - \[[`c6bbc1b128`](https://github.com/nodejs/node/commit/c6bbc1b128)] - **benchmark**: cover Web Crypto conversion costs (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`85a2e4e270`](https://github.com/nodejs/node/commit/85a2e4e270)] - **benchmark**: remove duplicate ffi add-64 benchmark (Soul Lee) [#66121](https://github.com/nodejs/node/pull/66121) - \[[`d0a72f2c12`](https://github.com/nodejs/node/commit/d0a72f2c12)] - **buffer**: fix negative index for large buffers (Hilary Asogwa) [#66325](https://github.com/nodejs/node/pull/66325) - \[[`b7f6a66a9f`](https://github.com/nodejs/node/commit/b7f6a66a9f)] - **(SEMVER-MINOR)** **buffer**: add isLatin1 (James M Snell) [#66298](https://github.com/nodejs/node/pull/66298) - \[[`232f178825`](https://github.com/nodejs/node/commit/232f178825)] - **(SEMVER-MINOR)** **buffer**: add isLatin1 (James M Snell) [#66298](https://github.com/nodejs/node/pull/66298) - \[[`f7d3d11c11`](https://github.com/nodejs/node/commit/f7d3d11c11)] - **buffer**: fix odd UTF-16LE indexOf start (Yuya Inoue) [#65960](https://github.com/nodejs/node/pull/65960) - \[[`27778036de`](https://github.com/nodejs/node/commit/27778036de)] - **(SEMVER-MINOR)** **buffer**: add Buffer.stringLength() (Matteo Collina) [#66064](https://github.com/nodejs/node/pull/66064) - \[[`9f1db461d2`](https://github.com/nodejs/node/commit/9f1db461d2)] - **build**: update common.gypi for z/OS (Gaby Baghdadi) [#66449](https://github.com/nodejs/node/pull/66449) - \[[`0002037b3f`](https://github.com/nodejs/node/commit/0002037b3f)] - **build**: update configure.py for z/OS (Gaby Baghdadi) [#66449](https://github.com/nodejs/node/pull/66449) - \[[`a341ac460a`](https://github.com/nodejs/node/commit/a341ac460a)] - **build**: fix vcbuild format-md install and exit (Ved Chaudhari) [#66475](https://github.com/nodejs/node/pull/66475) - \[[`bec52d9103`](https://github.com/nodejs/node/commit/bec52d9103)] - **build**: fix vcbuild lint skipping lint-md-build (Ved Chaudhari) [#66467](https://github.com/nodejs/node/pull/66467) - \[[`9acdb5910c`](https://github.com/nodejs/node/commit/9acdb5910c)] - **build**: toggle doc-kit verbosity based on V (Brian Muenzenmeyer) [#66293](https://github.com/nodejs/node/pull/66293) - \[[`6ee32f857a`](https://github.com/nodejs/node/commit/6ee32f857a)] - **build**: support LIEF 0.17.x and 1.x (Yuya Inoue) [#66240](https://github.com/nodejs/node/pull/66240) - \[[`2248869955`](https://github.com/nodejs/node/commit/2248869955)] - **build**: add clang support for pgo on macOS/Linux (Chengzhong Wu) [#66136](https://github.com/nodejs/node/pull/66136) - \[[`49069529eb`](https://github.com/nodejs/node/commit/49069529eb)] - **build**: add GZIP_COMPRESSION Make variable (inoway46) [#66228](https://github.com/nodejs/node/pull/66228) - \[[`9066d33aa2`](https://github.com/nodejs/node/commit/9066d33aa2)] - **build**: port `make_temporal_zoneinfo_cpp` to GYP (Antoine du Hamel) [#66183](https://github.com/nodejs/node/pull/66183) - \[[`1f4a8fb1cb`](https://github.com/nodejs/node/commit/1f4a8fb1cb)] - **build**: add `v8_enable_temporal_systemicu` (Steven R. Loomis) [#65992](https://github.com/nodejs/node/pull/65992) - \[[`4f84c4bda2`](https://github.com/nodejs/node/commit/4f84c4bda2)] - **build, doc**: move to redesign (Aviv Keller) [#62045](https://github.com/nodejs/node/pull/62045) - \[[`a0e7141ffc`](https://github.com/nodejs/node/commit/a0e7141ffc)] - **child_process**: build the default env block in one native pass (Shelley Vohr) [#65325](https://github.com/nodejs/node/pull/65325) - \[[`9fa31096d4`](https://github.com/nodejs/node/commit/9fa31096d4)] - **crypto**: improve random synchronous number generation performance (Mert Can Altin) [#66348](https://github.com/nodejs/node/pull/66348) - \[[`53cde9d1f8`](https://github.com/nodejs/node/commit/53cde9d1f8)] - **crypto**: fix raw key export error for wrong key type (한국) [#66217](https://github.com/nodejs/node/pull/66217) - \[[`32ba6d5ada`](https://github.com/nodejs/node/commit/32ba6d5ada)] - **crypto**: use backend cSHAKE and KMAC (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`67ccff6434`](https://github.com/nodejs/node/commit/67ccff6434)] - **crypto**: separate conversion from validation (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`ceeb37173d`](https://github.com/nodejs/node/commit/ceeb37173d)] - **crypto**: verify empty KMAC outputs (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`359b07a641`](https://github.com/nodejs/node/commit/359b07a641)] - **crypto**: check EC coordinate conversion results (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`e4d746c4a5`](https://github.com/nodejs/node/commit/e4d746c4a5)] - **crypto**: map JWK export failures to OperationError (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`a851dda86a`](https://github.com/nodejs/node/commit/a851dda86a)] - **crypto**: include EC public keys in PKCS8 exports (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`7f58476ed1`](https://github.com/nodejs/node/commit/7f58476ed1)] - **crypto**: use the public CryptoKey prototype (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`75870623ad`](https://github.com/nodejs/node/commit/75870623ad)] - **crypto**: split hybrid keys without species (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`a1bea87c6a`](https://github.com/nodejs/node/commit/a1bea87c6a)] - **crypto**: report actual RSA modulus lengths (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`5e04680036`](https://github.com/nodejs/node/commit/5e04680036)] - **crypto**: derive Argon2 without worker threads (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`fe09120a0e`](https://github.com/nodejs/node/commit/fe09120a0e)] - **crypto**: create key usage arrays without species (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`44a2965f5f`](https://github.com/nodejs/node/commit/44a2965f5f)] - **crypto**: minimize RSA public exponent metadata (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`2f3e6dff9d`](https://github.com/nodejs/node/commit/2f3e6dff9d)] - **crypto**: copy derived bits without species (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`d54a2b2049`](https://github.com/nodejs/node/commit/d54a2b2049)] - **crypto**: handle PBKDF2 iteration limits (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`2ef6046f11`](https://github.com/nodejs/node/commit/2ef6046f11)] - **crypto**: reject duplicate unknown key usages (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`2e25ae4a7a`](https://github.com/nodejs/node/commit/2e25ae4a7a)] - **crypto**: check RSA JWK alg with SHA-3 hashes (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`0370e02e2a`](https://github.com/nodejs/node/commit/0370e02e2a)] - **crypto**: copy parameters without array species (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`e042d35ca5`](https://github.com/nodejs/node/commit/e042d35ca5)] - **crypto**: convert importKey data as a union (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`ff86606768`](https://github.com/nodejs/node/commit/ff86606768)] - **crypto**: copy detached parameters as empty (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`1314d277b2`](https://github.com/nodejs/node/commit/1314d277b2)] - **crypto**: resolve supports overloads by type (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`a855a46aeb`](https://github.com/nodejs/node/commit/a855a46aeb)] - **crypto**: allow unbound SubtleCrypto.supports (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`4a72c1d690`](https://github.com/nodejs/node/commit/4a72c1d690)] - **crypto**: allow short AES-GCM IVs (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`2d84b7ed49`](https://github.com/nodejs/node/commit/2d84b7ed49)] - **crypto**: validate normalized hash names (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`6bfd3924ff`](https://github.com/nodejs/node/commit/6bfd3924ff)] - **crypto**: convert getRandomValues views (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`529bd18c1a`](https://github.com/nodejs/node/commit/529bd18c1a)] - **crypto**: isolate cipher job errors (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`d4af11e171`](https://github.com/nodejs/node/commit/d4af11e171)] - **crypto**: reject short AES-KW inputs (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`78374c8af0`](https://github.com/nodejs/node/commit/78374c8af0)] - **crypto**: match algorithm names as ASCII (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`ab9a3f2b01`](https://github.com/nodejs/node/commit/ab9a3f2b01)] - **crypto**: use internal random buffer bounds (Filip Skokan) [#66237](https://github.com/nodejs/node/pull/66237) - \[[`7c9b2df87a`](https://github.com/nodejs/node/commit/7c9b2df87a)] - **crypto**: use current FIPS state for availability (Filip Skokan) [#66160](https://github.com/nodejs/node/pull/66160) - \[[`55af1dcded`](https://github.com/nodejs/node/commit/55af1dcded)] - **crypto**: update root certificates to NSS 3.129 (Node.js GitHub Bot) [#66496](https://github.com/nodejs/node/pull/66496) - \[[`4387cb46d2`](https://github.com/nodejs/node/commit/4387cb46d2)] - **deps**: update timezone to 2026e (Node.js GitHub Bot) [#66419](https://github.com/nodejs/node/pull/66419) - \[[`150c96ef3f`](https://github.com/nodejs/node/commit/150c96ef3f)] - **deps**: V8: cherry-pick [`c795f59`](https://github.com/nodejs/node/commit/c795f5948568) (Aviv Keller) [#66380](https://github.com/nodejs/node/pull/66380) - \[[`6b5ac2ab5d`](https://github.com/nodejs/node/commit/6b5ac2ab5d)] - **deps**: update archs files for openssl-3.5.9 (Node.js GitHub Bot) [#66396](https://github.com/nodejs/node/pull/66396) - \[[`bee7e2403c`](https://github.com/nodejs/node/commit/bee7e2403c)] - **deps**: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) [#66396](https://github.com/nodejs/node/pull/66396) - \[[`7a715495f2`](https://github.com/nodejs/node/commit/7a715495f2)] - **deps**: update lief to 1.0.0 (Node.js GitHub Bot) [#66345](https://github.com/nodejs/node/pull/66345) - \[[`f9da04958a`](https://github.com/nodejs/node/commit/f9da04958a)] - **deps**: update zlib to 1.3.2.1-motley-456ae73 (Node.js GitHub Bot) [#66330](https://github.com/nodejs/node/pull/66330) - \[[`5c34dd970d`](https://github.com/nodejs/node/commit/5c34dd970d)] - **deps**: update undici to 8.11.2 (Node.js GitHub Bot) [#66332](https://github.com/nodejs/node/pull/66332) - \[[`fdf0572cd1`](https://github.com/nodejs/node/commit/fdf0572cd1)] - **deps**: update timezone to 2026d (Node.js GitHub Bot) [#66333](https://github.com/nodejs/node/pull/66333) - \[[`6c924ee1b0`](https://github.com/nodejs/node/commit/6c924ee1b0)] - **deps**: upgrade npm to 11.20.0 (npm team) [#66259](https://github.com/nodejs/node/pull/66259) - \[[`2653b2617d`](https://github.com/nodejs/node/commit/2653b2617d)] - **deps**: V8: backport [`786c1c2`](https://github.com/nodejs/node/commit/786c1c2d88d4) (Eliau Elkouby) [#66249](https://github.com/nodejs/node/pull/66249) - \[[`1d68f23e08`](https://github.com/nodejs/node/commit/1d68f23e08)] - **deps**: update googletest to [`4267679`](https://github.com/nodejs/node/commit/4267679b6887f349f17b01ccd70c9e3483689b25) (Node.js GitHub Bot) [#66145](https://github.com/nodejs/node/pull/66145) - \[[`c507c5ad12`](https://github.com/nodejs/node/commit/c507c5ad12)] - **deps**: V8: backport [`9fb4444`](https://github.com/nodejs/node/commit/9fb4444bfc46) (Steven R. Loomis) [#65992](https://github.com/nodejs/node/pull/65992) - \[[`8c556ab2b6`](https://github.com/nodejs/node/commit/8c556ab2b6)] - **deps**: update histogram to 0.12.0 (Node.js GitHub Bot) [#66494](https://github.com/nodejs/node/pull/66494) - \[[`d3f55c7487`](https://github.com/nodejs/node/commit/d3f55c7487)] - **diagnostics_channel**: replace using with try-finally (Ayush Chaudhary) [#64251](https://github.com/nodejs/node/pull/64251) - \[[`510dfd899e`](https://github.com/nodejs/node/commit/510dfd899e)] - **doc**: update FreeEnvironment() notes for sibling Environments (Shelley Vohr) [#66239](https://github.com/nodejs/node/pull/66239) - \[[`db2665ba17`](https://github.com/nodejs/node/commit/db2665ba17)] - **doc**: add indexed `Array.prototype` properties to primordial exclusions (René) [#66234](https://github.com/nodejs/node/pull/66234) - \[[`b692079e3a`](https://github.com/nodejs/node/commit/b692079e3a)] - **doc**: fixup and cleanup stream/iter docs (James M Snell) [#66079](https://github.com/nodejs/node/pull/66079) - \[[`9b191141a2`](https://github.com/nodejs/node/commit/9b191141a2)] - **doc**: fix casing in `util.markPromiseAsHandled` section (Antoine du Hamel) [#66206](https://github.com/nodejs/node/pull/66206) - \[[`8e8c9762a8`](https://github.com/nodejs/node/commit/8e8c9762a8)] - **doc**: add return type to Blocklist.isBlocklist (yuki motokane) [#66181](https://github.com/nodejs/node/pull/66181) - \[[`6c7fc98d7f`](https://github.com/nodejs/node/commit/6c7fc98d7f)] - **doc**: clarify Worker execArgv vs Permission Model grants (yunshingng) [#66124](https://github.com/nodejs/node/pull/66124) - \[[`9fd0a10b1e`](https://github.com/nodejs/node/commit/9fd0a10b1e)] - **doc**: document iterable input for AbortSignal.any (Haram Jeong) [#66123](https://github.com/nodejs/node/pull/66123) - \[[`c4508fd4c7`](https://github.com/nodejs/node/commit/c4508fd4c7)] - **doc**: restore XadillaX to collaborators (Khaidi Chu) [#66063](https://github.com/nodejs/node/pull/66063) - \[[`b4ad8354f0`](https://github.com/nodejs/node/commit/b4ad8354f0)] - **doc**: use Type for performanceNodeTiming.uvMetricsInfo (James M Snell) [#66094](https://github.com/nodejs/node/pull/66094) - \[[`50bc27f3c3`](https://github.com/nodejs/node/commit/50bc27f3c3)] - **doc**: document the node:ffi call paths (Soul Lee) [#66086](https://github.com/nodejs/node/pull/66086) - \[[`a74a0ee748`](https://github.com/nodejs/node/commit/a74a0ee748)] - **doc,src,test**: fix typos in code comments (Noah) [#66218](https://github.com/nodejs/node/pull/66218) - \[[`6f6296fef9`](https://github.com/nodejs/node/commit/6f6296fef9)] - **(SEMVER-MINOR)** **doc**: promote Alpine Linux to tier 2 support (Stewart X Addison) [#63737](https://github.com/nodejs/node/pull/63737) - \[[`215639d6ce`](https://github.com/nodejs/node/commit/215639d6ce)] - **events**: fix addAbortListener for aborted signals (Lazizbek Ergashev) [#65640](https://github.com/nodejs/node/pull/65640) - \[[`021f7d8d98`](https://github.com/nodejs/node/commit/021f7d8d98)] - **ffi**: accept safe integer numbers for 64-bit arguments (Donghoon Kang) [#66197](https://github.com/nodejs/node/pull/66197) - \[[`53fd8e7ebb`](https://github.com/nodejs/node/commit/53fd8e7ebb)] - **ffi**: remove permission checks from dlclose and dlsym (Trivikram Kamat) [#66426](https://github.com/nodejs/node/pull/66426) - \[[`fa7efaf782`](https://github.com/nodejs/node/commit/fa7efaf782)] - **ffi**: validate pointer ranges in optimized calls (Trivikram Kamat) [#66371](https://github.com/nodejs/node/pull/66371) - \[[`11f80798ba`](https://github.com/nodejs/node/commit/11f80798ba)] - **ffi**: throw on allocation failure in toArrayBuffer() (Trivikram Kamat) [#66406](https://github.com/nodejs/node/pull/66406) - \[[`c65a333648`](https://github.com/nodejs/node/commit/c65a333648)] - **ffi**: do not abort when a Worker stops in a callback (Trivikram Kamat) [#66389](https://github.com/nodejs/node/pull/66389) - \[[`9bdab1eca0`](https://github.com/nodejs/node/commit/9bdab1eca0)] - **ffi**: reject unsafe integers as length or offset (Christian Aurich Zanettini Martins) [#66216](https://github.com/nodejs/node/pull/66216) - \[[`343a5c2915`](https://github.com/nodejs/node/commit/343a5c2915)] - **ffi**: fix use-after-free in PrepareFunction (Trivikram Kamat) [#66368](https://github.com/nodejs/node/pull/66368) - \[[`51daf16244`](https://github.com/nodejs/node/commit/51daf16244)] - **ffi**: reject non-boolean copy arguments (Christian Aurich Zanettini Martins) [#66219](https://github.com/nodejs/node/pull/66219) - \[[`b901b97cbf`](https://github.com/nodejs/node/commit/b901b97cbf)] - **ffi**: use type errors for invalid signatures (Donghoon Kang) [#66222](https://github.com/nodejs/node/pull/66222) - \[[`0f6cdce998`](https://github.com/nodejs/node/commit/0f6cdce998)] - **ffi**: allocate string argument storage lazily (Soul Lee) [#66178](https://github.com/nodejs/node/pull/66178) - \[[`ee84a36f12`](https://github.com/nodejs/node/commit/ee84a36f12)] - **ffi**: avoid memcpy() with a null pointer (Christian Aurich Zanettini Martins) [#66200](https://github.com/nodejs/node/pull/66200) - \[[`da32c79034`](https://github.com/nodejs/node/commit/da32c79034)] - **fs**: keep timestamps of files skipped by cpSync (Christian Aurich Zanettini Martins) [#66305](https://github.com/nodejs/node/pull/66305) - \[[`e7121be408`](https://github.com/nodejs/node/commit/e7121be408)] - **fs**: stop recursive mkdir from retrying ENOENT forever (Marco) [#66340](https://github.com/nodejs/node/pull/66340) - \[[`99a78b0d83`](https://github.com/nodejs/node/commit/99a78b0d83)] - **fs**: fix crash on negative zero file descriptor (Christian Aurich Zanettini Martins) [#65888](https://github.com/nodejs/node/pull/65888) - \[[`8b24247be1`](https://github.com/nodejs/node/commit/8b24247be1)] - **fs**: validate falsy openAsBlob type option (Christian Aurich Zanettini Martins) [#66125](https://github.com/nodejs/node/pull/66125) - \[[`e7d5352fa6`](https://github.com/nodejs/node/commit/e7d5352fa6)] - **fs**: close file streams with fd 0 (greenhead) [#66131](https://github.com/nodejs/node/pull/66131) - \[[`f38768f0fa`](https://github.com/nodejs/node/commit/f38768f0fa)] - **fs**: close fd 0 on discarded FileHandle transfer (Christian Aurich Zanettini Martins) [#66095](https://github.com/nodejs/node/pull/66095) - \[[`6487d36873`](https://github.com/nodejs/node/commit/6487d36873)] - **http**: avoid dictionary-mode objects in responses (Matteo Collina) [#66420](https://github.com/nodejs/node/pull/66420) - \[[`f8d30110b6`](https://github.com/nodejs/node/commit/f8d30110b6)] - **http**: cache parser callbacks (Matteo Collina) [#66152](https://github.com/nodejs/node/pull/66152) - \[[`e998d260d0`](https://github.com/nodejs/node/commit/e998d260d0)] - **(SEMVER-MINOR)** **http**: add isValidHeaderName() and isValidHeaderValue() (James M Snell) [#66334](https://github.com/nodejs/node/pull/66334) - \[[`0bb98027e5`](https://github.com/nodejs/node/commit/0bb98027e5)] - **http**: avoid toLowerCase on the server hot path (Yagiz Nizipli) [#66120](https://github.com/nodejs/node/pull/66120) - \[[`9819b0c432`](https://github.com/nodejs/node/commit/9819b0c432)] - **http**: normalize CONNECT request paths (Efe Karasakal) [#64876](https://github.com/nodejs/node/pull/64876) - \[[`ab93a3d51b`](https://github.com/nodejs/node/commit/ab93a3d51b)] - **http**: preserve socket errors as response error causes (Khaidi Chu) [#66061](https://github.com/nodejs/node/pull/66061) - \[[`15184e8212`](https://github.com/nodejs/node/commit/15184e8212)] - **http**: reduce per-request allocations in the server (Matteo Collina) [#65802](https://github.com/nodejs/node/pull/65802) - \[[`7702a50e08`](https://github.com/nodejs/node/commit/7702a50e08)] - **(SEMVER-MINOR)** **http2**: add new connectionWindowSize option (Tim Perry) [#65619](https://github.com/nodejs/node/pull/65619) - \[[`33e4ba358b`](https://github.com/nodejs/node/commit/33e4ba358b)] - **https**: handle invalid TLS options in proxied requests (Christian Aurich Zanettini Martins) [#66096](https://github.com/nodejs/node/pull/66096) - \[[`6f610a836b`](https://github.com/nodejs/node/commit/6f610a836b)] - **inspector**: throw ERR_INSPECTOR_NOT_AVAILABLE without an agent (Shelley Vohr) [#66239](https://github.com/nodejs/node/pull/66239) - \[[`697980b6fc`](https://github.com/nodejs/node/commit/697980b6fc)] - **inspector**: fix connectToMainThread() abort without parent inspector (Shelley Vohr) [#65976](https://github.com/nodejs/node/pull/65976) - \[[`37b3db91eb`](https://github.com/nodejs/node/commit/37b3db91eb)] - **(SEMVER-MINOR)** **lib**: fix stream loading bug in node:bench (James M Snell) [#66114](https://github.com/nodejs/node/pull/66114) - \[[`46a8a5dd65`](https://github.com/nodejs/node/commit/46a8a5dd65)] - **lib**: add primitive fast path to structuredClone (Guilherme Araújo) [#64190](https://github.com/nodejs/node/pull/64190) - \[[`bec7c53400`](https://github.com/nodejs/node/commit/bec7c53400)] - **meta**: bump github/codeql-action/analyze from 4.38.0 to 4.38.2 (dependabot\[bot]) [#66443](https://github.com/nodejs/node/pull/66443) - \[[`39d721abed`](https://github.com/nodejs/node/commit/39d721abed)] - **meta**: bump github/codeql-action/autobuild from 4.38.0 to 4.38.2 (dependabot\[bot]) [#66444](https://github.com/nodejs/node/pull/66444) - \[[`963804db4d`](https://github.com/nodejs/node/commit/963804db4d)] - **meta**: bump github/codeql-action/init from 4.38.0 to 4.38.2 (dependabot\[bot]) [#66446](https://github.com/nodejs/node/pull/66446) - \[[`5837ef8608`](https://github.com/nodejs/node/commit/5837ef8608)] - **meta**: bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.2 (dependabot\[bot]) [#66447](https://github.com/nodejs/node/pull/66447) - \[[`d8109f9831`](https://github.com/nodejs/node/commit/d8109f9831)] - **meta**: label permission model changes correctly (Rafael Gonzaga) [#66208](https://github.com/nodejs/node/pull/66208) - \[[`27f20dcaea`](https://github.com/nodejs/node/commit/27f20dcaea)] - **meta**: bump codecov/codecov-action from 7.0.0 to 7.1.0 (dependabot\[bot]) [#66103](https://github.com/nodejs/node/pull/66103) - \[[`dc6ef03ab6`](https://github.com/nodejs/node/commit/dc6ef03ab6)] - **module**: centralize builtin exposure policies (Jungwon Sohn) [#66292](https://github.com/nodejs/node/pull/66292) - \[[`f36efeb350`](https://github.com/nodejs/node/commit/f36efeb350)] - **module**: avoid allocating a cache key string for every require() (Samuel Attard) [#63884](https://github.com/nodejs/node/pull/63884) - \[[`9baea33509`](https://github.com/nodejs/node/commit/9baea33509)] - **module**: normalize package map paths (Hilary Asogwa) [#66054](https://github.com/nodejs/node/pull/66054) - \[[`354c2cc867`](https://github.com/nodejs/node/commit/354c2cc867)] - **net**: speed up BlockList.check for strings (Yagiz Nizipli) [#66166](https://github.com/nodejs/node/pull/66166) - \[[`995a67a5ff`](https://github.com/nodejs/node/commit/995a67a5ff)] - **net**: skip IPv6 regex when the string has no colon (Yagiz Nizipli) [#66165](https://github.com/nodejs/node/pull/66165) - \[[`1c7b4feebb`](https://github.com/nodejs/node/commit/1c7b4feebb)] - **node-api**: do not crash on module version mismatch (Alexey Karimov) [#66019](https://github.com/nodejs/node/pull/66019) - \[[`e06aa62cec`](https://github.com/nodejs/node/commit/e06aa62cec)] - **(SEMVER-MINOR)** **perf_hooks**: fix truncation of monitorEventLoopDelay() resolution (James M Snell) [#66115](https://github.com/nodejs/node/pull/66115) - \[[`ee126e37e8`](https://github.com/nodejs/node/commit/ee126e37e8)] - **(SEMVER-MINOR)** **perf_hooks**: allow RecordableHistogram to record 0 (James M Snell) [#66114](https://github.com/nodejs/node/pull/66114) - \[[`1fef8f54db`](https://github.com/nodejs/node/commit/1fef8f54db)] - **(SEMVER-MINOR)** **perf_hooks**: add histogram.diff() (James M Snell) [#66099](https://github.com/nodejs/node/pull/66099) - \[[`a6dfb3bcfd`](https://github.com/nodejs/node/commit/a6dfb3bcfd)] - **(SEMVER-MINOR)** **perf_hooks**: report histogram memory to V8 (James M Snell) [#66099](https://github.com/nodejs/node/pull/66099) - \[[`f1b9758c4e`](https://github.com/nodejs/node/commit/f1b9758c4e)] - **(SEMVER-MINOR)** **perf_hooks**: add histogram.snapshot() (James M Snell) [#66099](https://github.com/nodejs/node/pull/66099) - \[[`e2ae016df8`](https://github.com/nodejs/node/commit/e2ae016df8)] - **(SEMVER-MINOR)** **perf_hooks**: add histogram export format version 2 (James M Snell) [#66098](https://github.com/nodejs/node/pull/66098) - \[[`291d56ea3e`](https://github.com/nodejs/node/commit/291d56ea3e)] - **(SEMVER-MINOR)** **perf_hooks**: harden histogram CBOR import validation (James M Snell) [#66098](https://github.com/nodejs/node/pull/66098) - \[[`70c269aadc`](https://github.com/nodejs/node/commit/70c269aadc)] - **perf_hooks**: restore GC tracking after snapshot deserialization (James M Snell) [#66097](https://github.com/nodejs/node/pull/66097) - \[[`c545d044ee`](https://github.com/nodejs/node/commit/c545d044ee)] - **perf_hooks**: track GC callback installation natively (James M Snell) [#66097](https://github.com/nodejs/node/pull/66097) - \[[`0bd9905959`](https://github.com/nodejs/node/commit/0bd9905959)] - **perf_hooks**: fix PerformanceObserver observer count leaks (James M Snell) [#66097](https://github.com/nodejs/node/pull/66097) - \[[`8ec2a940c5`](https://github.com/nodejs/node/commit/8ec2a940c5)] - **perf_hooks**: add performanceNodeTiming.uvMetricsInfoBigInt (James M Snell) [#66094](https://github.com/nodejs/node/pull/66094) - \[[`829891da14`](https://github.com/nodejs/node/commit/829891da14)] - **perf_hooks**: fix truncation of uvMetricsInfo counters (James M Snell) [#66094](https://github.com/nodejs/node/pull/66094) - \[[`afa02fb69c`](https://github.com/nodejs/node/commit/afa02fb69c)] - **process**: use a class for nextTick resources (Matteo Collina) [#66415](https://github.com/nodejs/node/pull/66415) - \[[`6299b09d5c`](https://github.com/nodejs/node/commit/6299b09d5c)] - **(SEMVER-MINOR)** **process**: graduate process.ref/unref from experimental (James M Snell) [#66213](https://github.com/nodejs/node/pull/66213) - \[[`0965b28252`](https://github.com/nodejs/node/commit/0965b28252)] - **querystring**: speed up default parse and unescape (Yagiz Nizipli) [#66175](https://github.com/nodejs/node/pull/66175) - \[[`bd547c1176`](https://github.com/nodejs/node/commit/bd547c1176)] - **quic**: cleanly tear down QUIC after worker.terminate() (Tim Perry) [#66093](https://github.com/nodejs/node/pull/66093) - \[[`52bbf8cb15`](https://github.com/nodejs/node/commit/52bbf8cb15)] - **report**: skip unresponsive workers on process timeout (Trivikram Kamat) [#66304](https://github.com/nodejs/node/pull/66304) - \[[`702c744643`](https://github.com/nodejs/node/commit/702c744643)] - **sea**: add test and update docs for import() with code cache (Ali Hassan) [#62678](https://github.com/nodejs/node/pull/62678) - \[[`a1bfb6fcda`](https://github.com/nodejs/node/commit/a1bfb6fcda)] - **sea**: add vfsArchive to serve the assets from a ZIP archive (Matteo Collina) [#65810](https://github.com/nodejs/node/pull/65810) - \[[`fe76deb537`](https://github.com/nodejs/node/commit/fe76deb537)] - **sqlite**: restore connection state on reopen (Guilherme Araújo) [#66042](https://github.com/nodejs/node/pull/66042) - \[[`4977e51ff3`](https://github.com/nodejs/node/commit/4977e51ff3)] - **sqlite**: use cached strings for property keys (Kyungrae Kang) [#65902](https://github.com/nodejs/node/pull/65902) - \[[`cd16dcb82b`](https://github.com/nodejs/node/commit/cd16dcb82b)] - **sqlite**: reject plans with unusable virtual table parameters (Trivikram Kamat) [#66215](https://github.com/nodejs/node/pull/66215) - \[[`33caead942`](https://github.com/nodejs/node/commit/33caead942)] - **sqlite**: throw on oversized string values (Guilherme Araújo) [#66209](https://github.com/nodejs/node/pull/66209) - \[[`41d6707b63`](https://github.com/nodejs/node/commit/41d6707b63)] - **(SEMVER-MINOR)** **sqlite**: rename DatabaseSync and StatementSync (Guilherme Araújo) [#65988](https://github.com/nodejs/node/pull/65988) - \[[`583ee1ce64`](https://github.com/nodejs/node/commit/583ee1ce64)] - **sqlite**: run generator return() on cursor refilter (Trivikram Kamat) [#66195](https://github.com/nodejs/node/pull/66195) - \[[`b46b6996e2`](https://github.com/nodejs/node/commit/b46b6996e2)] - **sqlite**: add virtual table support via createModule() (Trevor Burnham) [#65787](https://github.com/nodejs/node/pull/65787) - \[[`edbff8caf1`](https://github.com/nodejs/node/commit/edbff8caf1)] - **src**: fix --process-timeout message when exit waits (Trivikram Kamat) [#66361](https://github.com/nodejs/node/pull/66361) - \[[`cd814e7f23`](https://github.com/nodejs/node/commit/cd814e7f23)] - **src**: remove orphaned js_udp_wrap test binding (René) [#66399](https://github.com/nodejs/node/pull/66399) - \[[`1e9c10b8ea`](https://github.com/nodejs/node/commit/1e9c10b8ea)] - **src**: assert that an IsolateData outlives its Environments (Shelley Vohr) [#66239](https://github.com/nodejs/node/pull/66239) - \[[`286bffc0a1`](https://github.com/nodejs/node/commit/286bffc0a1)] - **src**: track handle cleanup per thread, not per IsolateData (Shelley Vohr) [#66239](https://github.com/nodejs/node/pull/66239) - \[[`25c08fcd0d`](https://github.com/nodejs/node/commit/25c08fcd0d)] - **src**: remove `HAVE_QUIC` macro in favor of `OPENSSL_NO_QUIC` (Antoine du Hamel) [#66373](https://github.com/nodejs/node/pull/66373) - \[[`5eea87c561`](https://github.com/nodejs/node/commit/5eea87c561)] - **src**: fix builds without SSL and SQLite (Filip Skokan) [#66372](https://github.com/nodejs/node/pull/66372) - \[[`9696e47c32`](https://github.com/nodejs/node/commit/9696e47c32)] - **src**: reduce InternalCallbackScope overhead (Nigro Simone) [#66316](https://github.com/nodejs/node/pull/66316) - \[[`60d0aa0cd4`](https://github.com/nodejs/node/commit/60d0aa0cd4)] - **(SEMVER-MINOR)** **src**: add --process-timeout=N (James M Snell) [#66138](https://github.com/nodejs/node…

nodejs-github-bot added build Issues and PRs related to Node.js builds or CI infrastructure. needs-ci PRs that need a full CI run. windows Issues and PRs related to the Windows platform. labels Feb 28, 2026

avivkeller added wip Issues and PRs that are still a work in progress. blocked PRs that are blocked by other issues or PRs. labels Mar 1, 2026

avivkeller marked this pull request as ready for review March 1, 2026 00:41

Copilot AI review requested due to automatic review settings March 1, 2026 00:41

This comment was marked as outdated.

Sign in to view

Copilot started reviewing on behalf of avivkeller March 1, 2026 00:41

View session

Copilot AI reviewed Mar 1, 2026

View reviewed changes

Comment thread Makefile Resolved

Comment thread vcbuild.bat Resolved

This was referenced Mar 1, 2026

fix(web): use proper node_modules directory nodejs/doc-kit#623

Merged

doc: add title to index #62046

Merged

avivkeller removed the wip Issues and PRs that are still a work in progress. label Mar 3, 2026

avivkeller force-pushed the doc/redesign branch from 0d11e9a to c0278ed Compare May 17, 2026 13:18

avivkeller removed the blocked PRs that are blocked by other issues or PRs. label May 17, 2026

avivkeller force-pushed the doc/redesign branch 2 times, most recently from 465c6c6 to fdf6b97 Compare May 17, 2026 13:21

avivkeller added the notable-change PRs with changes that should be highlighted in changelogs. label May 17, 2026

AugustinMauroy suggested changes May 18, 2026

View reviewed changes

fixup!

b508cc8

aymen94 approved these changes Sep 15, 2026

View reviewed changes

araujogui reviewed Sep 15, 2026

View reviewed changes

Comment thread tools/doc/web.doc-kit.config.mjs Resolved

jasnell approved these changes Sep 15, 2026

View reviewed changes

bmuenzenmeyer approved these changes Sep 15, 2026

View reviewed changes

pimterry approved these changes Sep 15, 2026

View reviewed changes

avivkeller closed this Sep 15, 2026

github-actions Bot mentioned this pull request Oct 5, 2026

2026-10-07, Version 26.11.0 (Current) #66546

Merged

This was referenced Oct 7, 2026

chore: remove the legacy-html and legacy-html-all generators nodejs/doc-kit#1152

Open

chore: remove the legacy-json and legacy-json-all generators nodejs/doc-kit#1153

Draft

richardlau mentioned this pull request Oct 7, 2026

Missing html docs #66571

Closed

ovflowd mentioned this pull request Oct 7, 2026

perf: reduce build memory and time nodejs/doc-kit#1156

Merged

4 tasks done

sxa mentioned this pull request Oct 27, 2026

rhel8-x64 executors in the CI frequently to have an unexpected 25 minute "pause" around the doc gen execution pase nodejs/doc-kit#1174

Closed

leapmux-renovate Bot mentioned this pull request Nov 1, 2026

chore(deps): Update Node.js to v26 leapmux/leapmux#578

Merged

github-actions Bot mentioned this pull request Nov 2, 2026

Stack updates: 1 to look at Gooseankles/cirrus-watch#11

Open

Conversation

avivkeller commented Feb 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

codecov Bot commented Mar 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions Bot commented May 17, 2026

Uh oh!

avivkeller commented May 17, 2026

Uh oh!

panva commented May 17, 2026

Uh oh!

avivkeller commented May 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

panva commented May 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

AugustinMauroy left a comment

Choose a reason for hiding this comment

Uh oh!

avivkeller commented May 19, 2026

Uh oh!

AugustinMauroy commented May 19, 2026

Uh oh!

avivkeller commented May 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

AugustinMauroy commented May 19, 2026

Uh oh!

avivkeller commented May 22, 2026

Uh oh!

nodejs-github-bot commented Sep 14, 2026

Uh oh!

nodejs-github-bot commented Sep 15, 2026

Uh oh!

Uh oh!

nodejs-github-bot commented Sep 15, 2026

Uh oh!

avivkeller commented Sep 15, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

19 participants

avivkeller commented Feb 28, 2026 •

edited

Loading

codecov Bot commented Mar 1, 2026 •

edited

Loading

avivkeller commented May 17, 2026 •

edited

Loading

panva commented May 17, 2026 •

edited

Loading

avivkeller commented May 19, 2026 •

edited

Loading