NODEJS-26.10.0 release notes and known issues

Summary

Notable Changes [ c0a42d23e5 ] - (SEMVER-MINOR) crypto : add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627 [ eb4fabe81e ] - doc : add araujogui to collaborators (Guilherme Araújo) #66090 [ 64fb33d791 ] - (SEMVER-MINOR) ffi : load libraries from a mounted VFS (Matteo Collina) #65909 [ 2b1701f810 ] - (SEMVER-MINOR) fs : add openAsBlobSync (greenhead) #65644 [ 080e76b3d7 ] - (SEMVER-MINOR) net : support sending net.BoundSocket to threads and child processes (Guy Bedford) #64725 [ 13e61f6ae6 ] - (SEMVER-MINOR) perf_hooks : implement SlidingWindowHistogram (James M Snell) #65825 [ a326546094 ] - (SEMVER-MINOR) perf_hooks : implement qrde analysis support in Histogram (James M Snell) #65806 [ 0306b0a71e ] - (SEMVER-MINOR) sqlite : bind undefined to NULL (Trevor Burnham) #65709 [ 3c999edef7 ] - (SEMVER-MINOR) src,lib : add util.markPromiseAsHandled (James M Snell) #65805 [ f7d18ec360 ] - (SEMVER-MINOR) test : expand histogram test coverage (James M Snell) #65825 [ 3ce4d23bbb ] - (SEMVER-MINOR) util : implement util.throttle (James M Snell) #65899 [ 336f33ccc1 ] - (SEMVER-MINOR) util : implement debounce (James M Snell) #65899 Commits [ 2bf082453b ] - assert : fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) #64449 [ c518831d00 ] - benchmark : add --csv option to compare.js with --analyze (James M Snell) #65922 [ 89bae46e68 ] - buffer : fix unaligned UTF-16LE decoding (Matteo Collina) #65905 [ 01cee9dcef ] - build : do not use bundled simdutf when built with --shared-simdutf (Antoine du Hamel) #65891 [ 20606a4d19 ] - build : suppress OpenSSL asm warnings with clang (Richard Lau) #66023 [ a76e97b5c5 ] - build : derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) #65744 [ ac7fcf0cef ] - build : sync cargo/rustc version warnings (Richard Lau) #65912 [ f24a495b36 ] - build : fix quiet default for make builds (Shelley Vohr) #65826 [ c4381765fe ] - child_process : clear timeout timer on spawn-time error too (kishore280) #65506 [ 8955781eeb ] - crypto : remove redundent std::move call (Antoine du Hamel) #66111 [ 0b88aa5a15 ] - crypto : read RSA-PSS restrictions from provider (Filip Skokan) #66108 [ f90d3d3cb0 ] - crypto : skip private RSA parameters in key details (Filip Skokan) #66108 [ 97828d91db ] - crypto : use provider EC group names (Filip Skokan) #66108 [ 3de05da569 ] - crypto : fetch ciphers for private-key encoding (Filip Skokan) #66108 [ ca8ee04594 ] - crypto : decode PKCS#1 keys through providers (Filip Skokan) #66108 [ 54a625e953 ] - crypto : derive keys through EVP_KDF (Filip Skokan) #66108 [ 971adece6a ] - crypto : use names for asymmetric key algorithms (Filip Skokan) #65966 [ bfb544eb00 ] - crypto : optimize and benchmark key preparation (Filip Skokan) #65892 [ c0a42d23e5 ] - (SEMVER-MINOR) crypto : add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627 [ c58a4e0ba7 ] - crypto : add Hybrid KEMs to Web Cryptography (Filip Skokan) #65759 [ 70edf90851 ] - crypto : avoid EC reconstruction for signature sizing (Filip Skokan) #65908 [ fab5dddd77 ] - crypto : avoid EC raw export reconstruction (Filip Skokan) #65908 [ 220a499614 ] - crypto : export EC JWK coordinates directly (Filip Skokan) #65908 [ f1295e11db ] - crypto : read EC curve metadata directly (Filip Skokan) #65908 [ 775173a5db ] - crypto : optimize private EC JWK import (Filip Skokan) #65908 [ e44669bb7d ] - crypto : validate the limit of PBKDF2 iterations (Filip Skokan) #65704 [ cd5a7611e9 ] - crypto : use primordials in HKDF info validation (Filip Skokan) #65704 [ 94affce749 ] - Revert " deps : V8: override depot_tools version" (Richard Lau) #66110 [ 870a366c49 ] - deps : V8: cherry-pick 95efbaf92a0d (Igor Sheludko) #66020 [ d62a452738 ] - deps : V8: backport a0607c5006b8 (Antoine du Hamel) #65891 [ e8edeffe2d ] - deps : update googletest to 8eff9e336692fc95961e096564f1044c600b881d (Node.js GitHub Bot) #66009 [ eb4fabe81e ] - doc : add araujogui to collaborators (Guilherme Araújo) #66090 [ 2fffb3872d ] - doc : fix duplicate 't

Improvements and security content

• Notable Changes [ c0a42d23e5 ] - (SEMVER-MINOR) crypto : add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627 [ eb4fabe81e ] - doc : add araujogui to collaborators (Guilherme Araújo) #66090 [ 64fb33d791 ] - (SEMVER-MINOR) ffi : load libraries from a mounted VFS (Matteo Collina) #65909 [ 2b1701f810 ] - (SEMVER-MINOR) fs : add openAsBlobSync (greenhead) #65644 [ 080e76b3d7 ] - (SEMVER-MINOR) net : support sending net.BoundSocket to threads and child processes (Guy Bedford) #64725 [ 13e61f6ae6 ] - (SEMVER-MINOR) perf_hooks : implement SlidingWindowHistogram (James M Snell) #65825 [ a326546094 ] - (SEMVER-MINOR) perf_hooks : implement qrde analysis support in Histogram (James M Snell) #65806 [ 0306b0a71e ] - (SEMVER-MINOR) sqlite : bind undefined to NULL (Trevor Burnham) #65709 [ 3c999edef7 ] - (SEMVER-MINOR) src,lib : add util.markPromiseAsHandled (James M Snell) #65805 [ f7d18ec360 ] - (SEMVER-MINOR) test : expand histogram test coverage (James M Snell) #65825 [ 3ce4d23bbb ] - (SEMVER-MINOR) util : implement util.throttle (James M Snell) #65899 [ 336f33ccc1 ] - (SEMVER-MINOR) util : implement debounce (James M Snell) #65899 Commits [ 2bf082453b ] - assert : fix TypeError on deepStrictEqual with null Map key or Set member (Sergey Sannikov) #64449 [ c518831d00 ] - benchmark : add --csv option to compare.js with --analyze (James M Snell) #65922 [ 89bae46e68 ] - buffer : fix unaligned UTF-16LE decoding (Matteo Collina) #65905 [ 01cee9dcef ] - build : do not use bundled simdutf when built with --shared-simdutf (Antoine du Hamel) #65891 [ 20606a4d19 ] - build : suppress OpenSSL asm warnings with clang (Richard Lau) #66023 [ a76e97b5c5 ] - build : derive V8_LOGGING_LEVEL from dcheck_always_on (Joyee Cheung) #65744 [ ac7fcf0cef ] - build : sync cargo/rustc version warnings (Richard Lau) #65912 [ f24a495b36 ] - build : fix quiet default for make builds (Shelley Vohr) #65826 [ c4381765fe ] - child_process : clear timeout timer on spawn-time error too (kishore280) #65506 [ 8955781eeb ] - crypto : remove redundent std::move call (Antoine du Hamel) #66111 [ 0b88aa5a15 ] - crypto : read RSA-PSS restrictions from provider (Filip Skokan) #66108 [ f90d3d3cb0 ] - crypto : skip private RSA parameters in key details (Filip Skokan) #66108 [ 97828d91db ] - crypto : use provider EC group names (Filip Skokan) #66108 [ 3de05da569 ] - crypto : fetch ciphers for private-key encoding (Filip Skokan) #66108 [ ca8ee04594 ] - crypto : decode PKCS#1 keys through providers (Filip Skokan) #66108 [ 54a625e953 ] - crypto : derive keys through EVP_KDF (Filip Skokan) #66108 [ 971adece6a ] - crypto : use names for asymmetric key algorithms (Filip Skokan) #65966 [ bfb544eb00 ] - crypto : optimize and benchmark key preparation (Filip Skokan) #65892 [ c0a42d23e5 ] - (SEMVER-MINOR) crypto : add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627 [ c58a4e0ba7 ] - crypto : add Hybrid KEMs to Web Cryptography (Filip Skokan) #65759 [ 70edf90851 ] - crypto : avoid EC reconstruction for signature sizing (Filip Skokan) #65908 [ fab5dddd77 ] - crypto : avoid EC raw export reconstruction (Filip Skokan) #65908 [ 220a499614 ] - crypto : export EC JWK coordinates directly (Filip Skokan) #65908 [ f1295e11db ] - crypto : read EC curve metadata directly (Filip Skokan) #65908 [ 775173a5db ] - crypto : optimize private EC JWK import (Filip Skokan) #65908 [ e44669bb7d ] - crypto : validate the limit of PBKDF2 iterations (Filip Skokan) #65704 [ cd5a7611e9 ] - crypto : use primordials in HKDF info validation (Filip Skokan) #65704 [ 94affce749 ] - Revert " deps : V8: override depot_tools version" (Richard Lau) #66110 [ 870a366c49 ] - deps : V8: cherry-pick 95efbaf92a0d (Igor Sheludko) #66020 [ d62a452738 ] - deps : V8: backport a0607c5006b8 (Antoine du Hamel) #65891 [ e8edeffe2d ] - deps : update googletest to 8eff9e336692fc95961e096564f1044c600b881d (Node.js GitHub Bot) #66009 [ eb4fabe81e ] - doc : add araujogui to collaborators (Guilherme Araújo) #66090 [ 2fffb3872d ] - doc : fix duplicate 't

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Lifecycle connections

These links connect the publisher update to related Lifecycle records without treating the update publication date as an end-of-support date.

Official publisher evidence