NODEJS-26.12.0 release notes and known issues

Summary

Notable Changes [ 1ebd6d3677 ] - (SEMVER-MINOR) doc,lib,src : throw on missing WebAssembly or RX support (Paolo Insogna) #66533 [ 7f1937d2b9 ] - (SEMVER-MINOR) http : add websocketMask() and websocketUnmask() (James M Snell) #66335 Commits [ 30e76bb16a ] - benchmark : fix input passed to subtle.digest in webcrypto-digest (Rafael Gonzaga) #66608 [ adef72223a ] - benchmark : fix buffer option in buffer read/write benchmarks (Rafael Gonzaga) #66604 [ 2f498f08fe ] - benchmark : add util.parseArgs benchmark (Rafael Gonzaga) #66599 [ 4ce8412e18 ] - benchmark : fix url-searchparams-sort to sort a fresh list (RafaelGSS) #66535 [ 493bd6c66e ] - benchmark,tools : fix napi benchmarks on GHA (Nigro Simone) #66423 [ e4515552d6 ] - build : run QUIC CI for V8 changes (Yuya Inoue) #66602 [ a888e51062 ] - build : support Python 3.15 (Mike McCready) #65750 [ 2afab9a63b ] - build : do not include shared gtest in node link path (Antoine du Hamel) #66626 [ f88c2f8ec6 ] - build,test : enable temporal support on no-ICU and system-ICU builds (Antoine du Hamel) #66697 [ 5fd03e6fdf ] - child_process : propagate config-file permission flags to children (Rafael Gonzaga) #66559 [ f771134b07 ] - crypto : isolate provider EC PKCS8 encoding (Filip Skokan) #66413 [ 4e00a293db ] - crypto : remove key export and metadata locks (Filip Skokan) #66413 [ bcd8018775 ] - crypto : remove verify setup key locking (Filip Skokan) #66413 [ 883250fee2 ] - crypto : remove KEM key locking (Filip Skokan) #66413 [ 9d98805071 ] - crypto : remove RSA-OAEP key locking (Filip Skokan) #66413 [ d6293e7bb1 ] - crypto : skip secret key mutex allocation (Filip Skokan) #66413 [ 8d8af8003e ] - crypto : keep the root cert store per Environment (Shelley Vohr) #66411 [ c6f0614785 ] - crypto : remove select Web Crypto warnings (Filip Skokan) #66312 [ e5360b5a08 ] - deps : update googletest to 988ea2c1798de7779f656df2281dd36d6039a17a (Node.js GitHub Bot) #66652 [ 7eb230a2c1 ] - deps : update acorn to 8.19.0 (Node.js GitHub Bot) #66655 [ af946ba8f3 ] - deps : update sqlite to 3.54.0 (Node.js GitHub Bot) #66663 [ 007872a85d ] - deps : V8: cherry-pick 8d14d49c4040 (Antoine du Hamel) #66627 [ f44aec4966 ] - deps : update simdjson to 5.0.3 (Daniel Lemire) #66620 [ 1a33e914e8 ] - deps : V8: cherry-pick 7d5eb1df2a72 (inoway46) #66566 [ 3294d51e5a ] - diagnostics_channel : fix default callback context (Matteo Collina) #66481 [ 5c602a5824 ] - doc : list futimes among fd APIs disabled by the permission model (Rafael Gonzaga) #66649 [ eaeb4736c8 ] - doc : add Test Runner to list of built-in diagnostic channels (Vas Sudanagunta) #66563 [ 0e1c99afae ] - doc : document stream/iter behaviors and Node.js extensions (James M Snell) #66483 [ 846236367d ] - doc : document URL and Uint8Array references in process.permission (Rafael Gonzaga) #66557 [ fc3b067be7 ] - doc : clarify http Agent keepSocketAlive behavior (Efe Karasakal) #66252 [ 73a4e90ce2 ] - doc : document keepAliveTimeoutBuffer server option (Efe Karasakal) #66286 [ bb816582af ] - doc : fix request.reusedSocket timeout example (Efe Karasakal) #66286 [ 82223ab4d9 ] - doc : clarify revert PR label policy (Antoine du Hamel) #66529 [ c6f59d4e8e ] - doc : clarify node binary misuse after compromise (Rafael Gonzaga) #66530 [ 8904178498 ] - doc : document linux-x64-musl build toolchain (Issac) #66523 [ 1e8247a74e ] - doc : run license-builder (github-actions[bot]) #66517 [ b2773d5e4c ] - doc : add missing return types in cluster.md (Daniel Pinto) #66453 [ 1ebd6d3677 ] - (SEMVER-MINOR) doc,lib,src : throw on missing WebAssembly or RX support (Paolo Insogna) #66533 [ c1073f31de ] - ffi : fix exportArrayBuffer type check (Trivikram Kamat) #66455 [ 69148ee0ff ] - fs : lock FileHandle on first read in pull() and pullSync() (James M Snell) #66483 [ 700c60a1cd ] - fs : serialize FileHandle writer() async writes (James M Snell) #66483 [ 32833def1c ] - http : reduce raw header name allocations (Roberto Bianchi) #66488 [ 7f1937d2b9 ] - (SEMVER-MINOR) http : add webso

Improvements and security content

• Notable Changes [ 1ebd6d3677 ] - (SEMVER-MINOR) doc,lib,src : throw on missing WebAssembly or RX support (Paolo Insogna) #66533 [ 7f1937d2b9 ] - (SEMVER-MINOR) http : add websocketMask() and websocketUnmask() (James M Snell) #66335 Commits [ 30e76bb16a ] - benchmark : fix input passed to subtle.digest in webcrypto-digest (Rafael Gonzaga) #66608 [ adef72223a ] - benchmark : fix buffer option in buffer read/write benchmarks (Rafael Gonzaga) #66604 [ 2f498f08fe ] - benchmark : add util.parseArgs benchmark (Rafael Gonzaga) #66599 [ 4ce8412e18 ] - benchmark : fix url-searchparams-sort to sort a fresh list (RafaelGSS) #66535 [ 493bd6c66e ] - benchmark,tools : fix napi benchmarks on GHA (Nigro Simone) #66423 [ e4515552d6 ] - build : run QUIC CI for V8 changes (Yuya Inoue) #66602 [ a888e51062 ] - build : support Python 3.15 (Mike McCready) #65750 [ 2afab9a63b ] - build : do not include shared gtest in node link path (Antoine du Hamel) #66626 [ f88c2f8ec6 ] - build,test : enable temporal support on no-ICU and system-ICU builds (Antoine du Hamel) #66697 [ 5fd03e6fdf ] - child_process : propagate config-file permission flags to children (Rafael Gonzaga) #66559 [ f771134b07 ] - crypto : isolate provider EC PKCS8 encoding (Filip Skokan) #66413 [ 4e00a293db ] - crypto : remove key export and metadata locks (Filip Skokan) #66413 [ bcd8018775 ] - crypto : remove verify setup key locking (Filip Skokan) #66413 [ 883250fee2 ] - crypto : remove KEM key locking (Filip Skokan) #66413 [ 9d98805071 ] - crypto : remove RSA-OAEP key locking (Filip Skokan) #66413 [ d6293e7bb1 ] - crypto : skip secret key mutex allocation (Filip Skokan) #66413 [ 8d8af8003e ] - crypto : keep the root cert store per Environment (Shelley Vohr) #66411 [ c6f0614785 ] - crypto : remove select Web Crypto warnings (Filip Skokan) #66312 [ e5360b5a08 ] - deps : update googletest to 988ea2c1798de7779f656df2281dd36d6039a17a (Node.js GitHub Bot) #66652 [ 7eb230a2c1 ] - deps : update acorn to 8.19.0 (Node.js GitHub Bot) #66655 [ af946ba8f3 ] - deps : update sqlite to 3.54.0 (Node.js GitHub Bot) #66663 [ 007872a85d ] - deps : V8: cherry-pick 8d14d49c4040 (Antoine du Hamel) #66627 [ f44aec4966 ] - deps : update simdjson to 5.0.3 (Daniel Lemire) #66620 [ 1a33e914e8 ] - deps : V8: cherry-pick 7d5eb1df2a72 (inoway46) #66566 [ 3294d51e5a ] - diagnostics_channel : fix default callback context (Matteo Collina) #66481 [ 5c602a5824 ] - doc : list futimes among fd APIs disabled by the permission model (Rafael Gonzaga) #66649 [ eaeb4736c8 ] - doc : add Test Runner to list of built-in diagnostic channels (Vas Sudanagunta) #66563 [ 0e1c99afae ] - doc : document stream/iter behaviors and Node.js extensions (James M Snell) #66483 [ 846236367d ] - doc : document URL and Uint8Array references in process.permission (Rafael Gonzaga) #66557 [ fc3b067be7 ] - doc : clarify http Agent keepSocketAlive behavior (Efe Karasakal) #66252 [ 73a4e90ce2 ] - doc : document keepAliveTimeoutBuffer server option (Efe Karasakal) #66286 [ bb816582af ] - doc : fix request.reusedSocket timeout example (Efe Karasakal) #66286 [ 82223ab4d9 ] - doc : clarify revert PR label policy (Antoine du Hamel) #66529 [ c6f59d4e8e ] - doc : clarify node binary misuse after compromise (Rafael Gonzaga) #66530 [ 8904178498 ] - doc : document linux-x64-musl build toolchain (Issac) #66523 [ 1e8247a74e ] - doc : run license-builder (github-actions[bot]) #66517 [ b2773d5e4c ] - doc : add missing return types in cluster.md (Daniel Pinto) #66453 [ 1ebd6d3677 ] - (SEMVER-MINOR) doc,lib,src : throw on missing WebAssembly or RX support (Paolo Insogna) #66533 [ c1073f31de ] - ffi : fix exportArrayBuffer type check (Trivikram Kamat) #66455 [ 69148ee0ff ] - fs : lock FileHandle on first read in pull() and pullSync() (James M Snell) #66483 [ 700c60a1cd ] - fs : serialize FileHandle writer() async writes (James M Snell) #66483 [ 32833def1c ] - http : reduce raw header name allocations (Roberto Bianchi) #66488 [ 7f1937d2b9 ] - (SEMVER-MINOR) http : add webso

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Lifecycle connections

These links connect the publisher update to related Lifecycle records without treating the update publication date as an end-of-support date.

Official publisher evidence