NODEJS-27.0.0-ALPHA.0.1.0 release notes and known issues

Summary

Notable Changes [ 33d4e6c73a ] - (SEMVER-MINOR) child_process : add subprocess.timedOut (Marco) #66639 [ edc7ec4a77 ] - (SEMVER-MINOR) crypto : make X.509 inspection guards explicit (Filip Skokan) #67245 [ 0882e9729b ] - (SEMVER-MINOR) crypto : add X.509 generation with CSR support (Filip Skokan) #67245 [ 2360d3860e ] - (SEMVER-MINOR) dns : coalesce identical concurrent lookup() requests (Orgad Shaneh) #62599 [ dc4aa75983 ] - doc : add efekrskl to collaborators (Efe Karasakal) #67376 [ 9695304ab8 ] - doc : add Philipp Dunkel to contributors (Philipp Dunkel) #67378 [ 41db1f7b6b ] - doc : add christianaurichzm to collaborators (Christian Aurich Zanettini Martins) #67377 [ 6b8a90d41d ] - (SEMVER-MINOR) http : batch body spans per parser execute (Guilherme Araújo) #67187 [ 8ffcb3ee55 ] - (SEMVER-MINOR) sea : generate a compile cache for the VFS modules (Matteo Collina) #66768 [ 2bbcfa0718 ] - (SEMVER-MINOR) worker : preload streams into startup snapshot (Matteo Collina) #66311 Commits [ 81d2321054 ] - benchmark : add URLSearchParams iterator consumers benchmark (Kevin Gibbons) #66837 [ 04b4552a77 ] - Revert " benchmark : add URLSearchParams iterator consumers benchmark" (Antoine du Hamel) #66837 [ 3ac0b42fb6 ] - benchmark : add URLSearchParams iterator consumers benchmark (Kevin Gibbons) #66837 [ cdef4ac92b ] - benchmark : merge crc32c into crc32 zlib benchmark (Trivikram Kamat) #67004 [ faf48bfc07 ] - buffer : limit UTF-8 fast calls to safe one-byte strings (Robert Nagy) #67136 [ b7aab20d60 ] - build : separate host and target Rust artifacts in cross builds (Yuya Inoue) #66823 [ 829afea634 ] - build : refresh markdown lint dependencies on lockfile changes (Yuya Inoue) #67185 [ d9292c4a93 ] - build : sync Torque outputs with V8 (Filip Skokan) #67238 [ 9fca7e78bd ] - build : use a single producer for shared generated files (Yuya Inoue) #66804 [ 5848a08450 ] - build : sort the ICU source lists (Shelley Vohr) #67206 [ 0e1891a0e2 ] - build : set V8_DISABLE_PRESERVE_MOST (Joyee Cheung) #67093 [ 9c57966fb6 ] - build : error on incompatible dtls configure flags (Antoine du Hamel) #66947 [ 0487449970 ] - build : fix overriding node_path in GN build (David Babenko-Sanders) #66805 [ c617a93aa9 ] - build : remove unused FIPS export condition (Filip Skokan) #67005 [ 823549f0da ] - build,win : minify pgo training build (Stefan Stojanovic) #67214 [ 2f89ed5fde ] - child_process : inherit a reassigned process.env (Caleb Everett) #66883 [ 33d4e6c73a ] - (SEMVER-MINOR) child_process : add subprocess.timedOut (Marco) #66639 [ 42933d1749 ] - crypto : remove the FIPS provider name check (Filip Skokan) #67358 [ edc7ec4a77 ] - (SEMVER-MINOR) crypto : make X.509 inspection guards explicit (Filip Skokan) #67245 [ 0882e9729b ] - (SEMVER-MINOR) crypto : add X.509 generation with CSR support (Filip Skokan) #67245 [ d02681572b ] - crypto : fix ncrypto provider behavior (Brad Anderson) #67039 [ 0c4d131adf ] - crypto : prevent stale OpenSSL errors (Matteo Collina) #67225 [ 33d28a1fed ] - crypto : reuse HMAC contexts in createHmac() (Yagiz Nizipli) #67109 [ b9248dc829 ] - crypto : skip clearing empty OpenSSL error queues (Yagiz Nizipli) #67109 [ 216f1238cd ] - crypto : cache digests for synchronous operations (Yagiz Nizipli) #67109 [ 5991efaf17 ] - crypto : skip DH checks for recognized groups (Filip Skokan) #67071 [ 7b8589b5b0 ] - crypto : add X509Certificate inspection getters (Filip Skokan) #67082 [ ab5da00e5d ] - crypto : reject immutable random fill buffers (Filip Skokan) #66944 [ 1d297add9e ] - crypto : preserve errors during X.509 issuer checks (Filip Skokan) #66898 [ 5409ed48c9 ] - crypto,tls : clone X.509 chains across isolates (Filip Skokan) #66898 [ 988d73f171 ] - deps : update llhttp to 9.4.4 (Antoine du Hamel) nodejs-private/node-private#1038 [ cb3be3e9b5 ] - deps : update nghttp2 to 1.71.0 (Node.js GitHub Bot) #67331 [ 2539d1cb3f ] - deps : update ngtcp2 to 1.26.0 (Node.js GitHub Bot) #67257 [ 64cdd369d3 ] - deps : patch V8 to 15.6.75.50 (Node.js G

Improvements and security content

• Notable Changes [ 33d4e6c73a ] - (SEMVER-MINOR) child_process : add subprocess.timedOut (Marco) #66639 [ edc7ec4a77 ] - (SEMVER-MINOR) crypto : make X.509 inspection guards explicit (Filip Skokan) #67245 [ 0882e9729b ] - (SEMVER-MINOR) crypto : add X.509 generation with CSR support (Filip Skokan) #67245 [ 2360d3860e ] - (SEMVER-MINOR) dns : coalesce identical concurrent lookup() requests (Orgad Shaneh) #62599 [ dc4aa75983 ] - doc : add efekrskl to collaborators (Efe Karasakal) #67376 [ 9695304ab8 ] - doc : add Philipp Dunkel to contributors (Philipp Dunkel) #67378 [ 41db1f7b6b ] - doc : add christianaurichzm to collaborators (Christian Aurich Zanettini Martins) #67377 [ 6b8a90d41d ] - (SEMVER-MINOR) http : batch body spans per parser execute (Guilherme Araújo) #67187 [ 8ffcb3ee55 ] - (SEMVER-MINOR) sea : generate a compile cache for the VFS modules (Matteo Collina) #66768 [ 2bbcfa0718 ] - (SEMVER-MINOR) worker : preload streams into startup snapshot (Matteo Collina) #66311 Commits [ 81d2321054 ] - benchmark : add URLSearchParams iterator consumers benchmark (Kevin Gibbons) #66837 [ 04b4552a77 ] - Revert " benchmark : add URLSearchParams iterator consumers benchmark" (Antoine du Hamel) #66837 [ 3ac0b42fb6 ] - benchmark : add URLSearchParams iterator consumers benchmark (Kevin Gibbons) #66837 [ cdef4ac92b ] - benchmark : merge crc32c into crc32 zlib benchmark (Trivikram Kamat) #67004 [ faf48bfc07 ] - buffer : limit UTF-8 fast calls to safe one-byte strings (Robert Nagy) #67136 [ b7aab20d60 ] - build : separate host and target Rust artifacts in cross builds (Yuya Inoue) #66823 [ 829afea634 ] - build : refresh markdown lint dependencies on lockfile changes (Yuya Inoue) #67185 [ d9292c4a93 ] - build : sync Torque outputs with V8 (Filip Skokan) #67238 [ 9fca7e78bd ] - build : use a single producer for shared generated files (Yuya Inoue) #66804 [ 5848a08450 ] - build : sort the ICU source lists (Shelley Vohr) #67206 [ 0e1891a0e2 ] - build : set V8_DISABLE_PRESERVE_MOST (Joyee Cheung) #67093 [ 9c57966fb6 ] - build : error on incompatible dtls configure flags (Antoine du Hamel) #66947 [ 0487449970 ] - build : fix overriding node_path in GN build (David Babenko-Sanders) #66805 [ c617a93aa9 ] - build : remove unused FIPS export condition (Filip Skokan) #67005 [ 823549f0da ] - build,win : minify pgo training build (Stefan Stojanovic) #67214 [ 2f89ed5fde ] - child_process : inherit a reassigned process.env (Caleb Everett) #66883 [ 33d4e6c73a ] - (SEMVER-MINOR) child_process : add subprocess.timedOut (Marco) #66639 [ 42933d1749 ] - crypto : remove the FIPS provider name check (Filip Skokan) #67358 [ edc7ec4a77 ] - (SEMVER-MINOR) crypto : make X.509 inspection guards explicit (Filip Skokan) #67245 [ 0882e9729b ] - (SEMVER-MINOR) crypto : add X.509 generation with CSR support (Filip Skokan) #67245 [ d02681572b ] - crypto : fix ncrypto provider behavior (Brad Anderson) #67039 [ 0c4d131adf ] - crypto : prevent stale OpenSSL errors (Matteo Collina) #67225 [ 33d28a1fed ] - crypto : reuse HMAC contexts in createHmac() (Yagiz Nizipli) #67109 [ b9248dc829 ] - crypto : skip clearing empty OpenSSL error queues (Yagiz Nizipli) #67109 [ 216f1238cd ] - crypto : cache digests for synchronous operations (Yagiz Nizipli) #67109 [ 5991efaf17 ] - crypto : skip DH checks for recognized groups (Filip Skokan) #67071 [ 7b8589b5b0 ] - crypto : add X509Certificate inspection getters (Filip Skokan) #67082 [ ab5da00e5d ] - crypto : reject immutable random fill buffers (Filip Skokan) #66944 [ 1d297add9e ] - crypto : preserve errors during X.509 issuer checks (Filip Skokan) #66898 [ 5409ed48c9 ] - crypto,tls : clone X.509 chains across isolates (Filip Skokan) #66898 [ 988d73f171 ] - deps : update llhttp to 9.4.4 (Antoine du Hamel) nodejs-private/node-private#1038 [ cb3be3e9b5 ] - deps : update nghttp2 to 1.71.0 (Node.js GitHub Bot) #67331 [ 2539d1cb3f ] - deps : update ngtcp2 to 1.26.0 (Node.js GitHub Bot) #67257 [ 64cdd369d3 ] - deps : patch V8 to 15.6.75.50 (Node.js G

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Lifecycle connections

These links connect the publisher update to related Lifecycle records without treating the update publication date as an end-of-support date.

Official publisher evidence