NODEJS-26.7.0 release notes and known issues

Summary

Notable Changes [ 58717685a1 ] - (SEMVER-MINOR) crypto : support loading private keys through STORE loaders (Filip Skokan) #63949 [ 44b940ee8c ] - crypto : update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746 [ c1e4f7365e ] - (SEMVER-MINOR) lib : add perfetto support (Chengzhong Wu) #64565 [ 11c2f9c642 ] - (SEMVER-MINOR) module : implement Symbol.dispose in ModuleHooks (Remco Haszing) #63928 [ a646319f61 ] - (SEMVER-MINOR) test_runner : add support for --test-coverage-include-all (avivkeller) #64830 Commits [ a2d3f891d3 ] - async_hooks : use validateBoolean for trackPromises (Soul Lee) #64731 [ d7266cdd99 ] - benchmark : fix calibrate-n option handling (Luan Muniz) #64146 [ 2e64293e3f ] - buffer : use Clamp conversion in Blob slice (Donghoon Kang) #64739 [ 5fda0958bd ] - buffer : validate copyArrayBuffer offsets against buffer length (Ilia Alshanetsky) #63904 [ 5298db40f9 ] - build : run perfetto build and test on GHA (Chengzhong Wu) #64721 [ e3eac7cef9 ] - build : fix v8_use_perfetto source scraping (Chengzhong Wu) #64721 [ ab5f076d7f ] - build : bump rustc requirement to >=1.86 (Renegade334) #64543 [ df608e061f ] - (SEMVER-MINOR) build : perfetto-sdk (Chengzhong Wu) #64565 [ 74928adc46 ] - build,tools : fix shared library cross-compile (Kirill Saied) #63963 [ 58717685a1 ] - (SEMVER-MINOR) crypto : support loading private keys through STORE loaders (Filip Skokan) #63949 [ 58d13b6f3d ] - crypto : preserve OpenSSL errors from KDF failures (Filip Skokan) #64776 [ 478a719cb5 ] - crypto : fix Argon2 bypassing FIPS mode (Filip Skokan) #64776 [ 44b940ee8c ] - crypto : update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746 [ fde85237c7 ] - crypto : clarify missing cipher error (Filip Skokan) #64852 [ c604d8846d ] - crypto : reuse X509 issuer result (Filip Skokan) #64852 [ c68c7d0112 ] - crypto : validate key generation options (Filip Skokan) #64852 [ c36bb1d017 ] - crypto : fix Argon2 validation errors (Filip Skokan) #64852 [ f61408bb27 ] - crypto : handle XOF output allocation failure (Filip Skokan) #64851 [ 2b4053d046 ] - crypto : initialize KeyObjectData mutex eagerly (Filip Skokan) #64851 [ 4b7b2adf44 ] - crypto : handle DH operation failures (Filip Skokan) #64851 [ 12170c3753 ] - crypto : use user-facing error for output encoding changes (Archkon) #64692 [ 474f06d550 ] - debugger : preserve overlapping CDP request state (Trivikram Kamat) #64467 [ 718cbe9497 ] - deps : upgrade npm to 11.19.0 (npm team) #64883 [ 657c6154b3 ] - deps : update ngtcp2 to 1.25.0 (Node.js GitHub Bot) #64944 [ 75a1fbeff9 ] - deps : update nghttp3 to 1.18.0 (Node.js GitHub Bot) #64943 [ 07d7cb7cd8 ] - deps : update minimatch to 10.2.6 (Node.js GitHub Bot) #64945 [ f7d56359f1 ] - deps : update simdjson to 4.6.6 (Node.js GitHub Bot) #64942 [ 8b06457cfb ] - deps : update acorn to 8.18.0 (Node.js GitHub Bot) #64941 [ 5919d01525 ] - deps : update googletest to 1b6f64d659944658a4c685b7bd9f04c1c3b8a39b (Node.js GitHub Bot) #64940 [ 4a87ad6cff ] - deps : update nghttp2 to 1.70.0 (Node.js GitHub Bot) #64939 [ c96d76a7c8 ] - deps : update zlib to 1.3.2.1-motley-42c2f19 (Node.js GitHub Bot) #64744 [ 2b59984c0f ] - deps : V8: backport 5177b10891e6 (avivkeller) #64631 [ b839af91da ] - deps : update ada to 4.0.0 (Node.js GitHub Bot) #64790 [ 70dedef942 ] - deps : update sqlite to 3.53.4 (Node.js GitHub Bot) #64745 [ 7bc4c171f5 ] - deps : update Rust crates for V8 14.6.202.34-node.26 (Renegade334) #64543 [ 308c6b2ac3 ] - deps : V8: backport 7d9b7e03141d (Manish Goregaokar) #64543 [ 8eeae28e88 ] - deps : V8: backport c4d06ba586f3 (liujiahui) #63731 [ bbd6fc58c4 ] - diagnostics_channel : grow native channel storage (Stephen Belanger) #64497 [ ce8b292955 ] - doc : fix grammar and punctuation in dgram documentation (Kamal Rawal) #64957 [ 1a413a60cf ] - doc : fix grammar and editorial issues in addons documentation (Kamal Rawal) #64952 [ 63fbd59e64 ] - doc : formalize fn/name as part of TestOptions API (Christopher Hiller) #64946 [ b263b0bca1 ] - doc

Improvements and security content

• Notable Changes [ 58717685a1 ] - (SEMVER-MINOR) crypto : support loading private keys through STORE loaders (Filip Skokan) #63949 [ 44b940ee8c ] - crypto : update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746 [ c1e4f7365e ] - (SEMVER-MINOR) lib : add perfetto support (Chengzhong Wu) #64565 [ 11c2f9c642 ] - (SEMVER-MINOR) module : implement Symbol.dispose in ModuleHooks (Remco Haszing) #63928 [ a646319f61 ] - (SEMVER-MINOR) test_runner : add support for --test-coverage-include-all (avivkeller) #64830 Commits [ a2d3f891d3 ] - async_hooks : use validateBoolean for trackPromises (Soul Lee) #64731 [ d7266cdd99 ] - benchmark : fix calibrate-n option handling (Luan Muniz) #64146 [ 2e64293e3f ] - buffer : use Clamp conversion in Blob slice (Donghoon Kang) #64739 [ 5fda0958bd ] - buffer : validate copyArrayBuffer offsets against buffer length (Ilia Alshanetsky) #63904 [ 5298db40f9 ] - build : run perfetto build and test on GHA (Chengzhong Wu) #64721 [ e3eac7cef9 ] - build : fix v8_use_perfetto source scraping (Chengzhong Wu) #64721 [ ab5f076d7f ] - build : bump rustc requirement to >=1.86 (Renegade334) #64543 [ df608e061f ] - (SEMVER-MINOR) build : perfetto-sdk (Chengzhong Wu) #64565 [ 74928adc46 ] - build,tools : fix shared library cross-compile (Kirill Saied) #63963 [ 58717685a1 ] - (SEMVER-MINOR) crypto : support loading private keys through STORE loaders (Filip Skokan) #63949 [ 58d13b6f3d ] - crypto : preserve OpenSSL errors from KDF failures (Filip Skokan) #64776 [ 478a719cb5 ] - crypto : fix Argon2 bypassing FIPS mode (Filip Skokan) #64776 [ 44b940ee8c ] - crypto : update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746 [ fde85237c7 ] - crypto : clarify missing cipher error (Filip Skokan) #64852 [ c604d8846d ] - crypto : reuse X509 issuer result (Filip Skokan) #64852 [ c68c7d0112 ] - crypto : validate key generation options (Filip Skokan) #64852 [ c36bb1d017 ] - crypto : fix Argon2 validation errors (Filip Skokan) #64852 [ f61408bb27 ] - crypto : handle XOF output allocation failure (Filip Skokan) #64851 [ 2b4053d046 ] - crypto : initialize KeyObjectData mutex eagerly (Filip Skokan) #64851 [ 4b7b2adf44 ] - crypto : handle DH operation failures (Filip Skokan) #64851 [ 12170c3753 ] - crypto : use user-facing error for output encoding changes (Archkon) #64692 [ 474f06d550 ] - debugger : preserve overlapping CDP request state (Trivikram Kamat) #64467 [ 718cbe9497 ] - deps : upgrade npm to 11.19.0 (npm team) #64883 [ 657c6154b3 ] - deps : update ngtcp2 to 1.25.0 (Node.js GitHub Bot) #64944 [ 75a1fbeff9 ] - deps : update nghttp3 to 1.18.0 (Node.js GitHub Bot) #64943 [ 07d7cb7cd8 ] - deps : update minimatch to 10.2.6 (Node.js GitHub Bot) #64945 [ f7d56359f1 ] - deps : update simdjson to 4.6.6 (Node.js GitHub Bot) #64942 [ 8b06457cfb ] - deps : update acorn to 8.18.0 (Node.js GitHub Bot) #64941 [ 5919d01525 ] - deps : update googletest to 1b6f64d659944658a4c685b7bd9f04c1c3b8a39b (Node.js GitHub Bot) #64940 [ 4a87ad6cff ] - deps : update nghttp2 to 1.70.0 (Node.js GitHub Bot) #64939 [ c96d76a7c8 ] - deps : update zlib to 1.3.2.1-motley-42c2f19 (Node.js GitHub Bot) #64744 [ 2b59984c0f ] - deps : V8: backport 5177b10891e6 (avivkeller) #64631 [ b839af91da ] - deps : update ada to 4.0.0 (Node.js GitHub Bot) #64790 [ 70dedef942 ] - deps : update sqlite to 3.53.4 (Node.js GitHub Bot) #64745 [ 7bc4c171f5 ] - deps : update Rust crates for V8 14.6.202.34-node.26 (Renegade334) #64543 [ 308c6b2ac3 ] - deps : V8: backport 7d9b7e03141d (Manish Goregaokar) #64543 [ 8eeae28e88 ] - deps : V8: backport c4d06ba586f3 (liujiahui) #63731 [ bbd6fc58c4 ] - diagnostics_channel : grow native channel storage (Stephen Belanger) #64497 [ ce8b292955 ] - doc : fix grammar and punctuation in dgram documentation (Kamal Rawal) #64957 [ 1a413a60cf ] - doc : fix grammar and editorial issues in addons documentation (Kamal Rawal) #64952 [ 63fbd59e64 ] - doc : formalize fn/name as part of TestOptions API (Christopher Hiller) #64946 [ b263b0bca1 ] - doc

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Lifecycle connections

These links connect the publisher update to related Lifecycle records without treating the update publication date as an end-of-support date.

Official publisher evidence