NODEJS-26.9.0 release notes and known issues

Summary

Notable Changes [ d414624dce ] - (SEMVER-MINOR) crypto : add a generic MAC API (Filip Skokan) #65553 [ 7ac458f802 ] - (SEMVER-MINOR) crypto : discover ciphers from OpenSSL providers (Filip Skokan) #65484 [ 7c7e95a3bd ] - (SEMVER-MINOR) crypto : discover hashes from OpenSSL providers (Filip Skokan) #65484 [ 2d2f4f6d1a ] - (SEMVER-MINOR) ffi : enable module by default (Matteo Collina) #65475 [ 657415c6df ] - (SEMVER-MINOR) lib : implement node:bench (James M Snell) #65606 [ ebcfec2f0c ] - (SEMVER-MINOR) perf_hooks : implement Histogram meanCI API (James M Snell) #65606 [ e1913630c3 ] - (SEMVER-MINOR) perf_hooks : add CBOR export/import for histogram exchange (James M Snell) #65434 [ 8e9151c9f2 ] - (SEMVER-MINOR) src : let embedders supply a builtin code cache without a snapshot (Shelley Vohr) #65352 [ 889854f18b ] - (SEMVER-MINOR) src,lib : implement experimental DTLS API (James M Snell) #63182 [ 5198142c59 ] - (SEMVER-MINOR) vfs : integrate with CJS and ESM module loaders (Matteo Collina) #63653 [ 5af9d72e7f ] - (SEMVER-MINOR) worker : add support for Web Workers (Aviv Keller) #64894 Commits [ 59dcad3f44 ] - (SEMVER-MINOR) benchmark : implement node:bench version of bench tools (James M Snell) #65606 [ 6bdb6dd8fa ] - benchmark : fix max-regressions detection in compare.js (James M Snell) #65587 [ 49d40091ba ] - benchmark : add --analyze option to benchmark/scatter.js (James M Snell) #65594 [ bd40a9a19a ] - benchmark : add crypto class benchmarks (Filip Skokan) #65518 [ 6bff2238f5 ] - buffer : pad aligned allocations by a multiple of 8 (Lazizbek Ergashev) #65605 [ 37d12946dd ] - buffer : prevent abort on indexOf with lone surrogate needle (Rafael Gonzaga) #65430 [ 02f8eb3b2d ] - build : add --shared-perfetto flag (Antoine du Hamel) #65614 [ fe7032ec41 ] - build : enable V8 gdb/lldb plugin support (Chengzhong Wu) #65786 [ 109f2caf80 ] - build : allow linking shared dependencies in the GN build (Shelley Vohr) #65797 [ 55213fd8a8 ] - build : enable the V8 sandbox in shared-cage builds (Shelley Vohr) #62237 [ 120929a1b3 ] - build : add --shared-highway configure flag (Antoine du Hamel) #65686 [ c99af0942b ] - build : add --shared-abseil configure flag (Antoine du Hamel) #65682 [ 431c2bf0eb ] - build : define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #65464 [ b6b5764c6e ] - build : remove obsolete configure flags (Chengzhong Wu) #65456 [ a623ee29d9 ] - build,src : make --use-largepages a no-op (Joyee Cheung) #65389 [ 2f494cb7aa ] - crypto : fix multi-prime RSA JWKs (Filip Skokan) #65649 [ 501d8ac815 ] - crypto : cache valid ECDH key pairs (Filip Skokan) #65615 [ 3fd905ea8f ] - crypto : add strict mode to --force-fips (Filip Skokan) #65645 [ 54b3cdb805 ] - crypto : add FIPS indicator diagnostics channel (Filip Skokan) #65645 [ 3e6e931fc9 ] - crypto : fix public PKCS8 export error (한국) #65609 [ d414624dce ] - (SEMVER-MINOR) crypto : add a generic MAC API (Filip Skokan) #65553 [ eef579047c ] - crypto : validate JWK usages before key_ops (Filip Skokan) #65550 [ 9a9b137a24 ] - crypto : fix private SPKI export error (Filip Skokan) #65550 [ 9941fb5dab ] - crypto : fix RSA-PSS oversized salt handling (Filip Skokan) #65550 [ 09b431596a ] - crypto : correct CCM decryption FIPS error message (kyungrae) #65450 [ e6b34e6f7a ] - crypto : harden X509Certificate state (Filip Skokan) #65518 [ a884b6ccbc ] - crypto : optimize key slot caching (Filip Skokan) #65518 [ fb512086d3 ] - crypto : add null checks for OPENSSL_INIT_new() (Nora Dossche) #63457 [ 656504ffc0 ] - crypto : prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) #65112 [ 15e7884732 ] - crypto : avoid throwing CryptoKey brand checks (Filip Skokan) #65503 [ 3302bec74a ] - crypto : avoid throwing KeyObject brand checks (Filip Skokan) #65503 [ 7ac458f802 ] - (SEMVER-MINOR) crypto : discover ciphers from OpenSSL providers (Filip Skokan) #65484 [ 7c7e95a3bd ] - (SEMVER-MINOR) crypto : discover hashes from OpenSSL providers (Filip Skokan) #65484 [ 0

Improvements and security content

• Notable Changes [ d414624dce ] - (SEMVER-MINOR) crypto : add a generic MAC API (Filip Skokan) #65553 [ 7ac458f802 ] - (SEMVER-MINOR) crypto : discover ciphers from OpenSSL providers (Filip Skokan) #65484 [ 7c7e95a3bd ] - (SEMVER-MINOR) crypto : discover hashes from OpenSSL providers (Filip Skokan) #65484 [ 2d2f4f6d1a ] - (SEMVER-MINOR) ffi : enable module by default (Matteo Collina) #65475 [ 657415c6df ] - (SEMVER-MINOR) lib : implement node:bench (James M Snell) #65606 [ ebcfec2f0c ] - (SEMVER-MINOR) perf_hooks : implement Histogram meanCI API (James M Snell) #65606 [ e1913630c3 ] - (SEMVER-MINOR) perf_hooks : add CBOR export/import for histogram exchange (James M Snell) #65434 [ 8e9151c9f2 ] - (SEMVER-MINOR) src : let embedders supply a builtin code cache without a snapshot (Shelley Vohr) #65352 [ 889854f18b ] - (SEMVER-MINOR) src,lib : implement experimental DTLS API (James M Snell) #63182 [ 5198142c59 ] - (SEMVER-MINOR) vfs : integrate with CJS and ESM module loaders (Matteo Collina) #63653 [ 5af9d72e7f ] - (SEMVER-MINOR) worker : add support for Web Workers (Aviv Keller) #64894 Commits [ 59dcad3f44 ] - (SEMVER-MINOR) benchmark : implement node:bench version of bench tools (James M Snell) #65606 [ 6bdb6dd8fa ] - benchmark : fix max-regressions detection in compare.js (James M Snell) #65587 [ 49d40091ba ] - benchmark : add --analyze option to benchmark/scatter.js (James M Snell) #65594 [ bd40a9a19a ] - benchmark : add crypto class benchmarks (Filip Skokan) #65518 [ 6bff2238f5 ] - buffer : pad aligned allocations by a multiple of 8 (Lazizbek Ergashev) #65605 [ 37d12946dd ] - buffer : prevent abort on indexOf with lone surrogate needle (Rafael Gonzaga) #65430 [ 02f8eb3b2d ] - build : add --shared-perfetto flag (Antoine du Hamel) #65614 [ fe7032ec41 ] - build : enable V8 gdb/lldb plugin support (Chengzhong Wu) #65786 [ 109f2caf80 ] - build : allow linking shared dependencies in the GN build (Shelley Vohr) #65797 [ 55213fd8a8 ] - build : enable the V8 sandbox in shared-cage builds (Shelley Vohr) #62237 [ 120929a1b3 ] - build : add --shared-highway configure flag (Antoine du Hamel) #65686 [ c99af0942b ] - build : add --shared-abseil configure flag (Antoine du Hamel) #65682 [ 431c2bf0eb ] - build : define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #65464 [ b6b5764c6e ] - build : remove obsolete configure flags (Chengzhong Wu) #65456 [ a623ee29d9 ] - build,src : make --use-largepages a no-op (Joyee Cheung) #65389 [ 2f494cb7aa ] - crypto : fix multi-prime RSA JWKs (Filip Skokan) #65649 [ 501d8ac815 ] - crypto : cache valid ECDH key pairs (Filip Skokan) #65615 [ 3fd905ea8f ] - crypto : add strict mode to --force-fips (Filip Skokan) #65645 [ 54b3cdb805 ] - crypto : add FIPS indicator diagnostics channel (Filip Skokan) #65645 [ 3e6e931fc9 ] - crypto : fix public PKCS8 export error (한국) #65609 [ d414624dce ] - (SEMVER-MINOR) crypto : add a generic MAC API (Filip Skokan) #65553 [ eef579047c ] - crypto : validate JWK usages before key_ops (Filip Skokan) #65550 [ 9a9b137a24 ] - crypto : fix private SPKI export error (Filip Skokan) #65550 [ 9941fb5dab ] - crypto : fix RSA-PSS oversized salt handling (Filip Skokan) #65550 [ 09b431596a ] - crypto : correct CCM decryption FIPS error message (kyungrae) #65450 [ e6b34e6f7a ] - crypto : harden X509Certificate state (Filip Skokan) #65518 [ a884b6ccbc ] - crypto : optimize key slot caching (Filip Skokan) #65518 [ fb512086d3 ] - crypto : add null checks for OPENSSL_INIT_new() (Nora Dossche) #63457 [ 656504ffc0 ] - crypto : prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) #65112 [ 15e7884732 ] - crypto : avoid throwing CryptoKey brand checks (Filip Skokan) #65503 [ 3302bec74a ] - crypto : avoid throwing KeyObject brand checks (Filip Skokan) #65503 [ 7ac458f802 ] - (SEMVER-MINOR) crypto : discover ciphers from OpenSSL providers (Filip Skokan) #65484 [ 7c7e95a3bd ] - (SEMVER-MINOR) crypto : discover hashes from OpenSSL providers (Filip Skokan) #65484 [ 0

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Lifecycle connections

These links connect the publisher update to related Lifecycle records without treating the update publication date as an end-of-support date.

Official publisher evidence