● Covered by 1 source · 7 reportsMedium impact7 neutral
Node.js 26.11.0 Released with New Buffer, HTTP, and Performance Hooks Features
Key points
- Added `isLatin1` and `stringLength()` to buffer module.
- Introduced `isValidHeaderName()` and `isValidHeaderValue()` for HTTP.
- Promoted Alpine Linux to Tier 2 support.
- Graduated `process.ref`/`unref` to stable.
- Node.js 26.12.0 throws errors for missing WebAssembly or RX support.
- Node.js 26.12.0 adds `websocketMask()` and `websocketUnmask()` to the HTTP module.
- Node.js 24.22.0 adds `crypto.parsePKCS12()`.
- Node.js 24.22.0 adds a generic MAC API to crypto.
- Node.js 24.22.0 enables SIV and GCM-SIV modes in Cipher/Decipher APIs.
- Node.js 24.22.0 adds `SlidingWindowHistogram` to `perf_hooks`.
- Node.js 24.22.0 adds QRDE analysis support to `Histogram` in `perf_hooks`.
- Node.js 24.22.0 adds `Histogram.meanCI` API to `perf_hooks`.
- Node.js 24.22.2 is an LTS release.
- Node.js 24.22.2 includes several V8 backports.
- Node.js 24.22.2 fixes stream async context.
Core Module Enhancements
Node.js 26.11.0 brings several new features to core modules. The buffer module now includes `isLatin1` and `Buffer.stringLength()` for more precise string length calculations. The HTTP module gains `isValidHeaderName()` and `isValidHeaderValue()` functions, allowing for better validation of HTTP headers.
Performance Monitoring Improvements
The `perf_hooks` module received multiple updates. These include fixing truncation for `monitorEventLoopDelay()` resolution, allowing `RecordableHistogram` to record zero values, and adding `histogram.diff()` and `histogram.snapshot()` methods. These changes provide more granular control and better insights into application performance.
Stability and Platform Support
Key features like `process.ref` and `process.unref` have been graduated to stable status, indicating their readiness for production use. Additionally, Alpine Linux has been promoted to Tier 2 support, signifying improved compatibility and support for this environment.
Other Notable Changes
Other updates include the addition of a `connectionWindowSize` option for HTTP2, renaming `DatabaseSync` and `StatementSync` in the SQLite module, and exposing size and count in heap profile output. These changes contribute to the overall stability, performance, and developer experience within the Node.js ecosystem.
Updates
- Node.js 24.22.2 is an LTS release.
- Node.js 24.22.2 includes several V8 backports.
- Node.js 24.22.2 fixes stream async context.
- Node.js 26.12.0 throws errors for missing WebAssembly or RX support.
- Node.js 26.12.0 adds `websocketMask()` and `websocketUnmask()` to the HTTP module.
- Node.js 24.22.0 adds `crypto.parsePKCS12()`.
- Node.js 24.22.0 adds a generic MAC API to crypto.
- Node.js 24.22.0 enables SIV and GCM-SIV modes in Cipher/Decipher APIs.
- Node.js 24.22.0 adds `SlidingWindowHistogram` to `perf_hooks`.
- Node.js 24.22.0 adds QRDE analysis support to `Histogram` in `perf_hooks`.
- Node.js 24.22.0 adds `Histogram.meanCI` API to `perf_hooks`.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub nodejs/node GitHub nodejs/nodejs.org GitHub nodejs-private/node-private CVE CVE-2026-1060697.4 HIGH CVE CVE-2026-1060726.7 MEDIUM CVE CVE-2026-1054827.4 HIGHHow outlets covered it
Node.js 24.22.2, an LTS release, has been published, incorporating several V8 backports and a fix for stream async context. This update provides maintenance and stability improvements for the Node.js 24.x long-term support branch.
Node.js 26.12.1, a current release, addresses several security vulnerabilities, including high-severity issues related to TLS, DNS, and Brotli. This update provides critical patches to maintain the security and stability of Node.js applications.
Node.js 24.22.1, a Long Term Support (LTS) release, addresses several security vulnerabilities, including high-severity issues related to TLS and DNS. This update is critical for maintaining the security and stability of applications built on Node.js.
Node.js 22.23.4, an LTS release, has been published to address several security vulnerabilities, including high-severity issues in TLS, DNS, and Brotli dependencies. This update is critical for maintaining the security and stability of applications built on Node.js.
Node.js 24.22.0, a Long Term Support (LTS) release, introduces several new APIs across crypto, net, perf_hooks, sqlite, and util modules. These updates provide developers with enhanced cryptographic capabilities, improved networking features, and more granular performance monitoring tools.
Node.js 26.12.0, the current release, introduces new features including throwing errors for missing WebAssembly or RX support and adding `websocketMask()` and `websocketUnmask()` to the HTTP module. This update also includes various dependency updates and bug fixes across different modules.
Node.js version 26.11.0 has been released, introducing new functionalities across buffer handling, HTTP validation, and performance monitoring. This update includes additions like `isLatin1` to buffer, `isValidHeaderName()` for HTTP, and new histogram methods for performance hooks, providing developers with more tools and improved diagnostics.