NODEJS-26.8.0 release notes and known issues

Summary

Notable Changes [ 74234ee30e ] - (SEMVER-MINOR) benchmark : add --analyze mode to compare.js (James M Snell) #65416 [ 4232997fa2 ] - crypto : update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 [ f0531f1c87 ] - (SEMVER-MINOR) crypto : enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 [ 3f4b80ebb5 ] - diagnostics_channel : mark TracingChannel as stable (Abdelrahman Awad) #64525 [ 753033c110 ] - (SEMVER-MINOR) lib,src : improve histogram implementation (James M Snell) #65024 [ 3d7d277493 ] - (SEMVER-MINOR) net : improve performance of net.BlockList (James M Snell) #64974 [ 9e8e9080fd ] - (SEMVER-MINOR) perf_hooks : add statistical hypothesis testing to histogram (James M Snell) #65416 [ c18b0aa54e ] - repl : add basic syntax highlighting (Aviv Keller) #64591 [ 58ea88e1d3 ] - (SEMVER-MINOR) sqlite : add StatementSync.prototype.close() (Guilherme Araújo) #64232 [ 7c61b08aed ] - (SEMVER-MINOR) sqlite : add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 [ 4299cd5897 ] - (SEMVER-MINOR) util : add non-throwing MIMEType.parse (James M Snell) #64965 [ df48191061 ] - (SEMVER-MINOR) zlib : add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 Commits [ 162257b403 ] - assert : improve documentation wording (Kamal Rawal) #64953 [ 74234ee30e ] - (SEMVER-MINOR) benchmark : add --analyze mode to compare.js (James M Snell) #65416 [ 2cb96dd462 ] - benchmark : add test-only and mock timers cases (Luan Muniz) #64097 [ 562168f93f ] - benchmark : apply highWaterMark in webstreams pipe-to (Matteo Collina) #65138 [ fbec4eb386 ] - benchmark : complete the sqlite is-transaction fix (Edy Silva) #65218 [ d8acfc45f1 ] - benchmark : add test runner hooks and options (Luan Muniz) #63754 [ 13e7d54f67 ] - buffer : prevent string write offset overflow (Matteo Collina) #65043 [ 615273deac ] - buffer : support aligned allocations (Robert Nagy) #65003 [ bc6b630e21 ] - buffer : treat detached ArrayBuffers as empty (Archkon) #64504 [ ddf9f9d265 ] - build : target Power 9 and z14 (Richard Lau) #65439 [ fda8ee894e ] - build : use build-ci for benchmark merge-commit rebuild (Yagiz Nizipli) #65362 [ 03692786ef ] - build : add simdutf dir to include path in GN build (Shelley Vohr) #65382 [ 3da555a3ed ] - build : pass target architecture to small-icu genccode (ulofiai) #65095 [ ffe1e7cbea ] - build : update binary-upload to use correct tarball name (Stewart X Addison) #65282 [ 50174cb94a ] - build : deprecate always enabled --enable-static (Chengzhong Wu) #65103 [ 28f662b424 ] - build : check FIPS option value in node.gyp (Filip Skokan) #64982 [ 29a2ecefeb ] - build : handle malformed OpenSSL macros (Filip Skokan) #64982 [ 6deeef1801 ] - build : enable perfetto updater (Chengzhong Wu) #64966 [ 312f0c6a7e ] - build : add host toolset to perfetto_sdk (Ryuhei Shima) #64751 [ 1a4f5e537b ] - build,win : add PGO workload scripts (Stefan Stojanovic) #63696 [ 21655dccbc ] - child_process : keep SIGWINCH from killing on Win (Kirill Saied) #64510 [ 4232997fa2 ] - crypto : update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 [ f0531f1c87 ] - (SEMVER-MINOR) crypto : enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 [ 109566a2f7 ] - crypto : fix missing error checks on ASN1_STRING_to_UTF8() (Nora Dossche) #65200 [ 501f81612d ] - crypto : improve SubtleCrypto.supports() accuracy (Filip Skokan) #65222 [ 137ff67fd3 ] - crypto : use available BoringSSL APIs (Filip Skokan) #65423 [ 0e87576ed4 ] - crypto : remove obsolete BoringSSL shims (Filip Skokan) #65423 [ af867ce3e4 ] - crypto : add mgf1Hash for RSA-OAEP (Adam Mcgrath) #65073 [ 66ee4792bf ] - crypto : disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) #65172 [ 6a142c03e9 ] - crypto : read WebCrypto inputs through primordials (Filip Skokan) #65115 [ 92e3110462 ] - crypto : fix disabling FIPS mode (Filip Skokan) #64982 [ d69bed2f49 ] - debugger : wait for target startup (Filip Skokan) #65194 [ 5c7c0b8b15 ] - deps : update z

Improvements and security content

• Notable Changes [ 74234ee30e ] - (SEMVER-MINOR) benchmark : add --analyze mode to compare.js (James M Snell) #65416 [ 4232997fa2 ] - crypto : update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 [ f0531f1c87 ] - (SEMVER-MINOR) crypto : enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 [ 3f4b80ebb5 ] - diagnostics_channel : mark TracingChannel as stable (Abdelrahman Awad) #64525 [ 753033c110 ] - (SEMVER-MINOR) lib,src : improve histogram implementation (James M Snell) #65024 [ 3d7d277493 ] - (SEMVER-MINOR) net : improve performance of net.BlockList (James M Snell) #64974 [ 9e8e9080fd ] - (SEMVER-MINOR) perf_hooks : add statistical hypothesis testing to histogram (James M Snell) #65416 [ c18b0aa54e ] - repl : add basic syntax highlighting (Aviv Keller) #64591 [ 58ea88e1d3 ] - (SEMVER-MINOR) sqlite : add StatementSync.prototype.close() (Guilherme Araújo) #64232 [ 7c61b08aed ] - (SEMVER-MINOR) sqlite : add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #64232 [ 4299cd5897 ] - (SEMVER-MINOR) util : add non-throwing MIMEType.parse (James M Snell) #64965 [ df48191061 ] - (SEMVER-MINOR) zlib : add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339 Commits [ 162257b403 ] - assert : improve documentation wording (Kamal Rawal) #64953 [ 74234ee30e ] - (SEMVER-MINOR) benchmark : add --analyze mode to compare.js (James M Snell) #65416 [ 2cb96dd462 ] - benchmark : add test-only and mock timers cases (Luan Muniz) #64097 [ 562168f93f ] - benchmark : apply highWaterMark in webstreams pipe-to (Matteo Collina) #65138 [ fbec4eb386 ] - benchmark : complete the sqlite is-transaction fix (Edy Silva) #65218 [ d8acfc45f1 ] - benchmark : add test runner hooks and options (Luan Muniz) #63754 [ 13e7d54f67 ] - buffer : prevent string write offset overflow (Matteo Collina) #65043 [ 615273deac ] - buffer : support aligned allocations (Robert Nagy) #65003 [ bc6b630e21 ] - buffer : treat detached ArrayBuffers as empty (Archkon) #64504 [ ddf9f9d265 ] - build : target Power 9 and z14 (Richard Lau) #65439 [ fda8ee894e ] - build : use build-ci for benchmark merge-commit rebuild (Yagiz Nizipli) #65362 [ 03692786ef ] - build : add simdutf dir to include path in GN build (Shelley Vohr) #65382 [ 3da555a3ed ] - build : pass target architecture to small-icu genccode (ulofiai) #65095 [ ffe1e7cbea ] - build : update binary-upload to use correct tarball name (Stewart X Addison) #65282 [ 50174cb94a ] - build : deprecate always enabled --enable-static (Chengzhong Wu) #65103 [ 28f662b424 ] - build : check FIPS option value in node.gyp (Filip Skokan) #64982 [ 29a2ecefeb ] - build : handle malformed OpenSSL macros (Filip Skokan) #64982 [ 6deeef1801 ] - build : enable perfetto updater (Chengzhong Wu) #64966 [ 312f0c6a7e ] - build : add host toolset to perfetto_sdk (Ryuhei Shima) #64751 [ 1a4f5e537b ] - build,win : add PGO workload scripts (Stefan Stojanovic) #63696 [ 21655dccbc ] - child_process : keep SIGWINCH from killing on Win (Kirill Saied) #64510 [ 4232997fa2 ] - crypto : update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495 [ f0531f1c87 ] - (SEMVER-MINOR) crypto : enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411 [ 109566a2f7 ] - crypto : fix missing error checks on ASN1_STRING_to_UTF8() (Nora Dossche) #65200 [ 501f81612d ] - crypto : improve SubtleCrypto.supports() accuracy (Filip Skokan) #65222 [ 137ff67fd3 ] - crypto : use available BoringSSL APIs (Filip Skokan) #65423 [ 0e87576ed4 ] - crypto : remove obsolete BoringSSL shims (Filip Skokan) #65423 [ af867ce3e4 ] - crypto : add mgf1Hash for RSA-OAEP (Adam Mcgrath) #65073 [ 66ee4792bf ] - crypto : disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) #65172 [ 6a142c03e9 ] - crypto : read WebCrypto inputs through primordials (Filip Skokan) #65115 [ 92e3110462 ] - crypto : fix disabling FIPS mode (Filip Skokan) #64982 [ d69bed2f49 ] - debugger : wait for target startup (Filip Skokan) #65194 [ 5c7c0b8b15 ] - deps : update z

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Lifecycle connections

These links connect the publisher update to related Lifecycle records without treating the update publication date as an end-of-support date.

Official publisher evidence