what stackpulse tracks
Node.js releases from GitHub
StackPulse watches Node.js release notes and keeps the original source link close to every summary.
#stacks/
loading releases…
releases
breaking
security
deprecated
migrations
JavaScript runtime built on Chrome’s V8 engine StackPulse turns upstream changelogs into scannable summaries with risky changes, deprecations, migration notes, and source links.
what stackpulse tracks
StackPulse watches Node.js release notes and keeps the original source link close to every summary.
upgrade risk
Risky changes are separated from normal feature notes so you can scan upgrade impact before changing production dependencies.
migration notes
Migration steps and recommended actions are only shown when the upstream release notes support them.
This release introduces several notable changes, including support for loading private keys through STORE loaders in the crypto module, the addition of Perfetto support for tracing, and updates to root certificates. It also includes minor improvements and bug fixes across various modules.
Developers using the crypto module, tracing, or the test runner may be affected by the new features and updates.
Review the release notes and update your code to leverage new features and improvements.
This release introduces minor enhancements to the FFI and test runner modules, along with various bug fixes and documentation updates.
Developers using the FFI and test runner modules may benefit from the new features.
Update to version 26.6.0 to utilize the new features and improvements.
Node.js v24.19.0 introduces several new features including `blob.textStream()` for buffers, experimental ESM import text flag, and enhanced TCP keep-alive options. The release also includes stability updates for various modules and performance improvements.
Developers using Node.js may benefit from new features like `blob.textStream()` and improved TLS support, but no breaking changes are introduced.
Consider updating to take advantage of new features and improvements.
This is a critical security release addressing multiple vulnerabilities in HTTP/2, HTTPS, DNS, SQLite, and permission systems. The update includes 12 security fixes with varying severity levels.
Users of Node.js HTTP/2, HTTPS, DNS, SQLite, and permission systems are affected by security vulnerabilities.
Upgrade to Node.js v24.18.1 immediately to patch multiple security vulnerabilities.
This is a critical security release addressing multiple vulnerabilities in HTTP/2, HTTPS, permissions, DNS, SQLite and zlib components. The update includes 11 security fixes with varying severity levels.
All users of Node.js v26.x are affected by multiple security vulnerabilities across HTTP/2, HTTPS, DNS, permissions, SQLite, and zlib modules.
Upgrade to Node.js v26.5.1 immediately to patch multiple security vulnerabilities.
This is a security-focused release addressing multiple vulnerabilities across HTTP/2, HTTPS, DNS, permissions, and zlib modules. The update includes critical fixes for memory handling, session reuse, and permission enforcement.
Users relying on HTTP/2, HTTPS, DNS, permissions, or zlib functionality are affected by these security vulnerabilities.
Upgrade to version 22.23.2 immediately to mitigate security risks.
This release introduces new experimental features including blob.textStream() and ReadableStreamTee, along with performance improvements for buffer operations and TLS group reporting.
Developers using buffer, ESM, stream, perf_hooks, or tls modules may benefit from the new features and improvements.
Update to Node.js v26.5.0 to leverage new features and performance improvements.
This release introduces several enhancements including support for caller-supplied buffers in fs.readFile(), package maps in the loader, and new TCP keepalive options. It also adds a minimal node:vfs subsystem and dispatches node:fs/promises to mounted VFS instances.
Developers using fs, net, tls, or loader modules may benefit from the new features.
Consider updating to take advantage of new features and improvements.
This release introduces several notable changes, including updates to root certificates, enhancements to the HTTP and crypto modules, and improvements to buffer handling. It also adds new Web Cryptography algorithms and increases the default Buffer.poolSize.
Developers using the crypto, buffer, and HTTP modules may be affected by the changes.
Review the changes and update your code as necessary to leverage new features and ensure compatibility.
This release addresses an unexpected behavior introduced by the recent security release (22.23.0), focusing on build and HTTP improvements.
Users affected by the unexpected behavior in the previous security release (22.23.0) should update.
Upgrade to version 22.23.1 to resolve the unexpected behavior.
Security release addressing multiple CVEs affecting TLS, crypto, http2, dns, and permission systems.
All users using Node.js's TLS, crypto, http2, dns, or permission features are affected and should upgrade immediately.
Upgrade to Node.js v26.3.1 immediately to mitigate security vulnerabilities.
This release primarily focuses on addressing multiple security vulnerabilities across various modules, including TLS, crypto, HTTP/2, and DNS. It includes fixes for issues such as hostname normalization, WebCrypto cipher output length, and memory growth prevention in HTTP/2.
Users relying on TLS, crypto, HTTP/2, DNS, and permission modules are affected by these security fixes.
Upgrade to Node.js v24.17.0 to mitigate the identified security vulnerabilities.
This release focuses on addressing multiple security vulnerabilities across various modules, including TLS, crypto, DNS, HTTP/2, and permissions. Several high and medium severity CVEs have been patched to improve security and stability.
Users relying on HTTP/2 priority signaling or affected by the listed CVEs should upgrade immediately.
Upgrade to version 22.23.0 to address security vulnerabilities and breaking changes.
This release includes updates to macOS Universal Binary availability, increases the default `Buffer.poolSize` to 64 KiB, and introduces new features like `permission.drop` and `httpValidation` options. Security updates include hardening WebCrypto against prototype pollution and updating root certificates.
Users on macOS may need to prepare for potential changes in Universal Binary availability, and developers using `Buffer` or `http` modules may benefit from the new defaults and options.
Update to Node.js v26.3.0 to benefit from the latest features and security improvements.
This release introduces several new features and improvements, including a new `randomUUIDv7()` method in the crypto module, enhanced debugging capabilities with edit-free runtime expression probes, and additional options for `fs.stat()` and `http.ClientRequest`. The release also includes various internal optimizations and dependency updates.
Developers using the crypto, debugger, fs, and http modules may benefit from the new features and improvements.
This release introduces support for `Temporal.Instant` in `fs` module, adds a new `writeInformation` method to `http` for sending arbitrary 1xx status codes, and marks `stream.compose` as stable. Additionally, several crypto improvements and updates to dependencies are included.
Developers using `fs`, `http`, and `crypto` modules may benefit from new features and improvements.
This release focuses on dependency updates, including OpenSSL, npm, and V8, alongside minor fixes and documentation improvements.
Users relying on updated dependencies or needing security fixes in crypto will be affected.
Upgrade to version 22.22.3 to benefit from the latest dependency updates and security fixes.
This release introduces an experimental `node:ffi` module for interacting with native libraries, alongside several minor improvements across the `buffer`, `crypto`, `fs`, `http`, and `test_runner` modules.
Developers interested in native library integration or those using `buffer`, `crypto`, `fs`, `http`, and `test_runner` modules may be affected.
Review the new features and updates to determine if any changes are needed in your codebase.