Skip to content

src: avoid env lookups and a global handle in InternalCallbackScope - #66316

Closed
nigrosimone wants to merge 3 commits into
nodejs:mainfrom
nigrosimone:callback-scope-cost
Closed

nigrosimone wants to merge 3 commits into
nodejs:mainfrom
nigrosimone:callback-scope-cost

Conversation

@nigrosimone

@nigrosimone nigrosimone commented Sep 26, 2026 •

Copy link
Copy Markdown
Contributor

InternalCallbackScope looks up the Environment from the isolate two times per call, inside async_context_frame::exchange, and it keeps the prior async context frame in a v8::Global also when there is no frame, that is the common case. Every call from native code into JS pays this: MakeCallback, CallbackScope, AsyncWrap, Node-API.

Now the scope passes the Environment it already has, the option is read with an inline accessor instead of copying the shared_ptr, and the global handle is created only when the prior frame is not undefined.

Benchmark: benchmark/napi/make_callback (added here) with benchmark/compare.js, Node 26.3.0 built from source with and without this change, Linux x64, 30 runs per binary. From 202-208 ns to 155-159 ns per call:

                                confidence improvement accuracy (*)   (**)  (***)
napi/make_callback n=1000000           ***     27.55 %      ±5.39% ±7.21%  ±9.45%
napi/make_callback n=10000000          ***     33.68 %      ±2.70% ±3.60%  ±4.70%

Side note: async_context_frame::Scope, used by AsyncResource::MakeCallback, still looks up the Environment twice and always creates a global handle. I would leave it for a separate PR.

Refs: nodejs/performance#24

Disclosure: I used Fable 5.1 (Max) as coding assistant. I built Node with and without the change, ran the benchmark and the tests myself.

@nodejs-github-bot nodejs-github-bot added c++ Issues and PRs that require attention from people who are familiar with C++. lib / src Issues and PRs involving general changes in the lib/ or src/ directories. needs-ci PRs that need a full CI run. labels Sep 26, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Welcome to Node.js, and thank you for your first contribution!

Before review, please take a moment to read:

Please make sure every commit is signed off. For a first pull request, GitHub Actions require collaborator approval and Jenkins CI must be started by a collaborator or triager, so an initial wait is normal.

@nigrosimone
nigrosimone force-pushed the callback-scope-cost branch 2 times, most recently from b4d12f6 to e83b5b2 Compare September 26, 2026 12:27
InternalCallbackScope looks up the Environment from the isolate two
times per call, inside async_context_frame::exchange, and it keeps the
prior async context frame in a v8::Global also when there is no frame,
that is the common case. Every call from native code into JS pays this:
MakeCallback, CallbackScope, AsyncWrap, Node-API.

Now the scope passes the Environment it already has, the option is read
with an inline accessor instead of copying the shared_ptr, and the
global handle is created only when the prior frame is not undefined.

benchmark/napi/make_callback, Node 26.3.0 built with and without this
change, Linux x64, 30 runs: from 202-208 ns to 155-159 ns per call.

Refs: nodejs/performance#24
Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
@mcollina mcollina added the request-ci Add this label to start a Jenkins CI on a PR. Only starts once the PR has an approving review. label Sep 26, 2026
@mcollina
mcollina requested a review from Qard September 26, 2026 14:37
The addon calls into JS with node::MakeCallback from a libuv timer, so
every call opens a top-level callback scope, like an I/O callback does.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
A CallbackScope must restore the async context frame that was active
before it, when there was none and when there was one.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
@codecov

codecov Bot commented Sep 26, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.36%. Comparing base (66f26d3) to head (1221198).
⚠️ Report is 52 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #66316      +/-   ##
==========================================
- Coverage   90.38%   90.36%   -0.02%     
==========================================
  Files         790      790              
  Lines      274497   274522      +25     
  Branches    52557    52567      +10     
==========================================
- Hits       248100   248076      -24     
- Misses      16879    16927      +48     
- Partials     9518     9519       +1     
Files with missing lines Coverage Δ
src/api/callback.cc 82.93% <100.00%> (-0.32%) ⬇️
src/async_context_frame.cc 100.00% <100.00%> (ø)
src/env-inl.h 93.99% <100.00%> (+0.02%) ⬆️
src/env.h 97.33% <ø> (ø)

... and 28 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@uNetworkingAB

uNetworkingAB commented Sep 26, 2026 •

Copy link
Copy Markdown

If the benchmark would (also) compare against a vanilla v8::Function::Call it would show the Node.js mandated (relative) overhead compared to core V8 that is added to all V8 addons that touch Node.js for event delivery. In my own tests, Node.js tend to add 100-200% overhead.

nigrosimone added a commit to nigrosimone/node that referenced this pull request Sep 26, 2026
AsyncResource saves the async context frame when it is created, and
MakeCallback() enters it with async_context_frame::Scope. Then
node::MakeCallback() opens the callback scope with an undefined frame,
so the callback never runs in the saved one. Since AsyncContextFrame is
the default, AsyncLocalStorage loses its store in these callbacks.

Pass the saved frame to InternalMakeCallback(), as the Node-API
AsyncContext already does. This also removes the Scope from every call,
with its two Environment lookups and its global handle.

Refs: nodejs#66316
Refs: nodejs#43038
Refs: nodejs/performance#24
Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
@panva panva added author ready PRs with CI started, the required approvals, and no outstanding review comments. and removed request-ci Add this label to start a Jenkins CI on a PR. Only starts once the PR has an approving review. labels Sep 26, 2026
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

@nigrosimone

This comment was marked as outdated.

@nigrosimone

Copy link
Copy Markdown
Contributor Author

If the benchmark would (also) compare against a vanilla v8::Function::Call it would show the Node.js mandated (relative) overhead compared to core V8 that is added to all V8 addons that touch Node.js for event delivery. In my own tests, Node.js tend to add 100-200% overhead.

In my own addon (empty function called from a libuv timer, Linux x64, median of alternated runs):

v8::Function::Call node::MakeCallback Node overhead
Node 22.6 (before AsyncContextFrame) 51 ns 131 ns +160%
Node 26.3.0 50 ns 199-213 ns +300%
Node 26.3.0 + this PR 50 ns 150-155 ns +200%

With an empty callback the relative overhead is even higher than 100-200%. I will add a v8::Function::Call case to the benchmark in #66326, where I'm already extending it, so this PR keeps its approvals and CI.

@nodejs-github-bot nodejs-github-bot added the commit-queue-failed PRs whose Commit Queue landing failed and need manual intervention before retrying. label Sep 28, 2026
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Commit Queue failed

This pull request has multiple commits, but no landing policy was selected.

Add commit-queue-squash PRs the Commit Queue should land as one squashed commit. to land it as one commit, or commit-queue-rebase PRs the Commit Queue should land as multiple self-contained commits. to land the commits separately.

The pull request was removed from the Commit Queue and labeled commit-queue-failed PRs whose Commit Queue landing failed and need manual intervention before retrying. . After resolving the failure, remove that label and add commit-queue PRs queued for automated landing through the Commit Queue. to retry.

Full Commit Queue output
�[36m⠋�[39m Loading data for nodejs/node/pull/66316
�[36m⠋�[39m Loading data for nodejs/node/pull/66316
�[36m⠋�[39m Getting collaborator contacts from README of nodejs/node
�[36m⠋�[39m Getting PR from nodejs/node/pull/66316
�[36m⠋�[39m Getting reviews from nodejs/node/pull/66316
�[36m⠋�[39m Getting comments from nodejs/node/pull/66316
�[36m⠋�[39m Getting commits from nodejs/node/pull/66316
✔  Done loading data for nodejs/node/pull/66316
----------------------------------- PR info ------------------------------------
Title      src: avoid env lookups and a global handle in InternalCallbackScope (#66316)
Author     Nigro Simone <nigro.simone@gmail.com> (@nigrosimone, first-time contributor)
Branch     nigrosimone:callback-scope-cost -> nodejs:main
Labels     c++, lib / src, author ready, needs-ci, commit-queue
Commits    3
 - src: reduce InternalCallbackScope overhead
 - benchmark: add a node::MakeCallback benchmark
 - test: check frame restore in CallbackScope
Committers 1
 - Nigro Simone <nigro.simone@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/66316
Refs: https://github.com/nodejs/performance/issues/24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
------------------------------ Generated metadata ------------------------------
PR-URL: https://github.com/nodejs/node/pull/66316
Refs: https://github.com/nodejs/performance/issues/24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
--------------------------------------------------------------------------------
   ℹ  This PR was created on Sat, 26 Sep 2026 11:54:53 GMT
   ✔  Approvals: 3
   ✔  - Yagiz Nizipli (@anonrig) (TSC): https://github.com/nodejs/node/pull/66316#pullrequestreview-5326168568
   ✔  - Stephen Belanger (@Qard): https://github.com/nodejs/node/pull/66316#pullrequestreview-5326655376
   ✔  - James M Snell (@jasnell) (TSC): https://github.com/nodejs/node/pull/66316#pullrequestreview-5328346468
   ✔  Last GitHub CI successful
   ℹ  Last Full PR CI on 2026-09-26T22:26:19Z: https://ci.nodejs.org/job/node-test-pull-request/77982/
�[36m⠙�[39m Querying data for job/node-test-pull-request/77982/
�[36m⠙�[39m Querying data for job/node-test-pull-request/77982/
�[36m⠙�[39m Querying API for job/node-test-pull-request/77982/
   ✔  Last Jenkins CI successful
--------------------------------------------------------------------------------
�[36m⠹�[39m Querying API for job/node-test-pull-request/77982/
   ✔  No git cherry-pick in progress
   ✔  No git am in progress
   ✔  No git rebase in progress
--------------------------------------------------------------------------------
�[36m⠹�[39m Querying API for job/node-test-pull-request/77982/
�[36m⠹�[39m Bringing origin/main up to date...
From https://github.com/nodejs/node
 * branch                  main       -> FETCH_HEAD
✔  origin/main is now up-to-date
�[36m⠸�[39m Downloading patch for 66316
�[36m⠸�[39m Downloading patch for 66316
From https://github.com/nodejs/node
 * branch                  refs/pull/66316/merge -> FETCH_HEAD
✔  Fetched commits as b59840b59306..12211986ec24
--------------------------------------------------------------------------------
[main 3fdbc95f0e] src: reduce InternalCallbackScope overhead
 Author: Nigro Simone <nigro.simone@gmail.com>
 Date: Sat Sep 26 14:59:55 2026 +0200
 5 files changed, 28 insertions(+), 10 deletions(-)
[main 997a05e65d] benchmark: add a node::MakeCallback benchmark
 Author: Nigro Simone <nigro.simone@gmail.com>
 Date: Sat Sep 26 14:59:55 2026 +0200
 4 files changed, 90 insertions(+)
 create mode 100644 benchmark/napi/make_callback/.gitignore
 create mode 100644 benchmark/napi/make_callback/binding.cc
 create mode 100644 benchmark/napi/make_callback/binding.gyp
 create mode 100644 benchmark/napi/make_callback/index.js
[main a92808b9f1] test: check frame restore in CallbackScope
 Author: Nigro Simone <nigro.simone@gmail.com>
 Date: Sat Sep 26 14:59:55 2026 +0200
 1 file changed, 23 insertions(+)
 create mode 100644 test/addons/callback-scope/test-async-local-storage.js
   ✔  Patches applied
There are 3 commits in the PR. Attempting autorebase.
(node:385) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
(Use `node --trace-deprecation ...` to show where the warning was created)
Rebasing (2/6)
Executing: git node land --amend --yes
   ⚠  Found Refs: https://github.com/nodejs/performance/issues/24, skipping..
--------------------------------- New Message ----------------------------------
src: reduce InternalCallbackScope overhead

InternalCallbackScope looks up the Environment from the isolate two
times per call, inside async_context_frame::exchange, and it keeps the
prior async context frame in a v8::Global also when there is no frame,
that is the common case. Every call from native code into JS pays this:
MakeCallback, CallbackScope, AsyncWrap, Node-API.

Now the scope passes the Environment it already has, the option is read
with an inline accessor instead of copying the shared_ptr, and the
global handle is created only when the prior frame is not undefined.

benchmark/napi/make_callback, Node 26.3.0 built with and without this
change, Linux x64, 30 runs: from 202-208 ns to 155-159 ns per call.

Refs: https://github.com/nodejs/performance/issues/24
Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/66316
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
--------------------------------------------------------------------------------
[detached HEAD 18017b616e] src: reduce InternalCallbackScope overhead
 Author: Nigro Simone <nigro.simone@gmail.com>
 Date: Sat Sep 26 14:59:55 2026 +0200
 5 files changed, 28 insertions(+), 10 deletions(-)
Rebasing (3/6)
Rebasing (4/6)
Executing: git node land --amend --yes
--------------------------------- New Message ----------------------------------
benchmark: add a node::MakeCallback benchmark

The addon calls into JS with node::MakeCallback from a libuv timer, so
every call opens a top-level callback scope, like an I/O callback does.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/66316
Refs: https://github.com/nodejs/performance/issues/24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
--------------------------------------------------------------------------------
[detached HEAD 845673a44c] benchmark: add a node::MakeCallback benchmark
 Author: Nigro Simone <nigro.simone@gmail.com>
 Date: Sat Sep 26 14:59:55 2026 +0200
 4 files changed, 90 insertions(+)
 create mode 100644 benchmark/napi/make_callback/.gitignore
 create mode 100644 benchmark/napi/make_callback/binding.cc
 create mode 100644 benchmark/napi/make_callback/binding.gyp
 create mode 100644 benchmark/napi/make_callback/index.js
Rebasing (5/6)
Rebasing (6/6)
Executing: git node land --amend --yes
--------------------------------- New Message ----------------------------------
test: check frame restore in CallbackScope

A CallbackScope must restore the async context frame that was active
before it, when there was none and when there was one.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/66316
Refs: https://github.com/nodejs/performance/issues/24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
--------------------------------------------------------------------------------
[detached HEAD 03c0a5ebf6] test: check frame restore in CallbackScope
 Author: Nigro Simone <nigro.simone@gmail.com>
 Date: Sat Sep 26 14:59:55 2026 +0200
 1 file changed, 23 insertions(+)
 create mode 100644 test/addons/callback-scope/test-async-local-storage.js
Successfully rebased and updated refs/heads/main.
--------------------------------------------------------------------------------
   ℹ  Add `commit-queue-squash` label to land the PR as one commit, or `commit-queue-rebase` to land as separate commits.

View workflow run

@nigrosimone

Copy link
Copy Markdown
Contributor Author

Commit Queue failed

This pull request has multiple commits, but no landing policy was selected.

Add commit-queue-squash PRs the Commit Queue should land as one squashed commit. to land it as one commit, or commit-queue-rebase PRs the Commit Queue should land as multiple self-contained commits. to land the commits separately.

The pull request was removed from the Commit Queue and labeled commit-queue-failed PRs whose Commit Queue landing failed and need manual intervention before retrying. . After resolving the failure, remove that label and add commit-queue PRs queued for automated landing through the Commit Queue. to retry.

Full Commit Queue output
View workflow run

The three commits are self-contained (src / benchmark / test), so commit-queue-rebase should work. Happy to squash if you prefer.

@nigrosimone

Copy link
Copy Markdown
Contributor Author

@panva could you add commit-queue-rebase and commit-queue again? The three commits are self-contained.

@panva panva added commit-queue-rebase PRs the Commit Queue should land as multiple self-contained commits. commit-queue PRs queued for automated landing through the Commit Queue. and removed commit-queue-failed PRs whose Commit Queue landing failed and need manual intervention before retrying. labels Sep 29, 2026
nodejs-github-bot pushed a commit that referenced this pull request Sep 29, 2026
InternalCallbackScope looks up the Environment from the isolate two
times per call, inside async_context_frame::exchange, and it keeps the
prior async context frame in a v8::Global also when there is no frame,
that is the common case. Every call from native code into JS pays this:
MakeCallback, CallbackScope, AsyncWrap, Node-API.

Now the scope passes the Environment it already has, the option is read
with an inline accessor instead of copying the shared_ptr, and the
global handle is created only when the prior frame is not undefined.

benchmark/napi/make_callback, Node 26.3.0 built with and without this
change, Linux x64, 30 runs: from 202-208 ns to 155-159 ns per call.

Refs: nodejs/performance#24
Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
nodejs-github-bot pushed a commit that referenced this pull request Sep 29, 2026
The addon calls into JS with node::MakeCallback from a libuv timer, so
every call opens a top-level callback scope, like an I/O callback does.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
nodejs-github-bot pushed a commit that referenced this pull request Sep 29, 2026
A CallbackScope must restore the async context frame that was active
before it, when there was none and when there was one.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Landed in 296584b...6866129

@nodejs-github-bot nodejs-github-bot removed the commit-queue PRs queued for automated landing through the Commit Queue. label Sep 29, 2026
nigrosimone added a commit to nigrosimone/node that referenced this pull request Sep 29, 2026
AsyncResource saves the async context frame when it is created, and
MakeCallback() enters it with async_context_frame::Scope. Then
node::MakeCallback() opens the callback scope with an undefined frame,
so the callback never runs in the saved one. Since AsyncContextFrame is
the default, AsyncLocalStorage loses its store in these callbacks.

Pass the saved frame to InternalMakeCallback(), as the Node-API
AsyncContext already does. This also removes the Scope from every call,
with its two Environment lookups and its global handle.

Refs: nodejs#66316
Refs: nodejs#43038
Refs: nodejs/performance#24
Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 3, 2026
InternalCallbackScope looks up the Environment from the isolate two
times per call, inside async_context_frame::exchange, and it keeps the
prior async context frame in a v8::Global also when there is no frame,
that is the common case. Every call from native code into JS pays this:
MakeCallback, CallbackScope, AsyncWrap, Node-API.

Now the scope passes the Environment it already has, the option is read
with an inline accessor instead of copying the shared_ptr, and the
global handle is created only when the prior frame is not undefined.

benchmark/napi/make_callback, Node 26.3.0 built with and without this
change, Linux x64, 30 runs: from 202-208 ns to 155-159 ns per call.

Refs: nodejs/performance#24
Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 3, 2026
The addon calls into JS with node::MakeCallback from a libuv timer, so
every call opens a top-level callback scope, like an I/O callback does.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 3, 2026
A CallbackScope must restore the async context frame that was active
before it, when there was none and when there was one.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 3, 2026
InternalCallbackScope looks up the Environment from the isolate two
times per call, inside async_context_frame::exchange, and it keeps the
prior async context frame in a v8::Global also when there is no frame,
that is the common case. Every call from native code into JS pays this:
MakeCallback, CallbackScope, AsyncWrap, Node-API.

Now the scope passes the Environment it already has, the option is read
with an inline accessor instead of copying the shared_ptr, and the
global handle is created only when the prior frame is not undefined.

benchmark/napi/make_callback, Node 26.3.0 built with and without this
change, Linux x64, 30 runs: from 202-208 ns to 155-159 ns per call.

Refs: nodejs/performance#24
Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 3, 2026
The addon calls into JS with node::MakeCallback from a libuv timer, so
every call opens a top-level callback scope, like an I/O callback does.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 3, 2026
A CallbackScope must restore the async context frame that was active
before it, when there was none and when there was one.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
nodejs-github-bot pushed a commit that referenced this pull request Oct 14, 2026
AsyncResource saves the async context frame when it is created, and
MakeCallback() enters it with async_context_frame::Scope. Then
node::MakeCallback() opens the callback scope with an undefined frame,
so the callback never runs in the saved one. Since AsyncContextFrame is
the default, AsyncLocalStorage loses its store in these callbacks.

Pass the saved frame to InternalMakeCallback(), as the Node-API
AsyncContext already does. This also removes the Scope from every call,
with its two Environment lookups and its global handle.

Refs: #66316
Refs: #43038
Refs: nodejs/performance#24
Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66326
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 23, 2026
The addon calls into JS with node::MakeCallback from a libuv timer, so
every call opens a top-level callback scope, like an I/O callback does.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 23, 2026
A CallbackScope must restore the async context frame that was active
before it, when there was none and when there was one.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 28, 2026
The addon calls into JS with node::MakeCallback from a libuv timer, so
every call opens a top-level callback scope, like an I/O callback does.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
aduh95 pushed a commit that referenced this pull request Oct 28, 2026
A CallbackScope must restore the async context frame that was active
before it, when there was none and when there was one.

Signed-off-by: Nigro Simone <nigro.simone@gmail.com>
PR-URL: #66316
Refs: nodejs/performance#24
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Stephen Belanger <admin@stephenbelanger.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
markharding pushed a commit to futo-org/Harbor that referenced this pull request Nov 5, 2026
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [node](https://nodejs.org) ([source](https://github.com/nodejs/node)) | major | `24.22.2` → `26.13.0` |

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

### [`v26.13.0`](https://github.com/nodejs/node/releases/tag/v26.13.0): 2026-10-28, Version 26.13.0 'Lithium' (LTS), @&#8203;richardlau

[Compare Source](https://github.com/nodejs/node/compare/v26.12.1...v26.13.0)

##### Notable Changes

This release marks the transition of Node.js 26.x into Long Term Support (LTS)
with the codename 'Lithium'. It will continue to receive updates through to
the end of April 2029.

Other than updating metadata, such as the `process.release` object, to reflect
that the release is LTS, no further changes from Node.js 26.12.1 are included.

If you are updating from an earlier Long Term Support release (e.g. Node.js 24
or 22 or earlier) please note that since Node.js 25 the official binaries for
Linux are linked against libatomic, which may need to be installed separately
depending on your Linux distribution.

### [`v26.12.1`](https://github.com/nodejs/node/releases/tag/v26.12.1): 2026-10-21, Version 26.12.1 (Current), @&#8203;aduh95 prepared by @&#8203;RafaelGSS

[Compare Source](https://github.com/nodejs/node/compare/v26.12.0...v26.12.1)

This is a security release.

##### Notable Changes

- (CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina) – High
- (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) – High
- (CVE-2026-105483) tls: fix ip normalization regression (James M Snell) – High
- (CVE-2026-111497) src: expose `BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH` (Antoine du Hamel) – High
- (CVE-2026-111497) deps: brotli: cherry-pick [`0ed4268`](https://github.com/nodejs/node/commit/0ed4268a4401abcb44720963) (Evgenii Kliuchnikov) – High
- (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) – Medium
- (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan) – Medium
- (CVE-2026-106070) zlib: avoid caching invalid ZIP local headers (Matteo Collina) – Low
- (CVE-2026-106071) src: fix the fs permission tree node on wildcard nodes (James M Snell) – Low
- (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS) – Low
- deps: V8: backport [`93cd21e`](https://github.com/nodejs/node/commit/93cd21e8254b) (Joyee Cheung)
- crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
- tls: reject chains containing blocked public keys (Ulises Gascon)
- deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
- tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett)
- crypto: harden X.509 conversion and formatting (Filip Skokan)

##### Commits

- \[[`818e4ca061`](https://github.com/nodejs/node/commit/818e4ca061)] - **crypto**: update root certificates to NSS 3.131.1 (Antoine du Hamel) [#&#8203;66877](https://github.com/nodejs/node/pull/66877)
- \[[`fd3c87ed43`](https://github.com/nodejs/node/commit/fd3c87ed43)] - **crypto**: harden X.509 conversion and formatting (Filip Skokan) [nodejs-private/node-private#966](https://github.com/nodejs-private/node-private/pull/966)
- \[[`acffa610db`](https://github.com/nodejs/node/commit/acffa610db)] - **crypto**: reset random caches across snapshots (Filip Skokan) [nodejs-private/node-private#987](https://github.com/nodejs-private/node-private/pull/987)
- \[[`7895a5cd2d`](https://github.com/nodejs/node/commit/7895a5cd2d)] - **deps**: update undici to 8.12.2 (Node.js GitHub Bot) [#&#8203;66721](https://github.com/nodejs/node/pull/66721)
- \[[`12daa54d2e`](https://github.com/nodejs/node/commit/12daa54d2e)] - **deps**: V8: backport [`93cd21e`](https://github.com/nodejs/node/commit/93cd21e8254b) (Joyee Cheung) [nodejs-private/node-private#999](https://github.com/nodejs-private/node-private/pull/999)
- \[[`6a8b3db7e2`](https://github.com/nodejs/node/commit/6a8b3db7e2)] - **deps**: update c-ares to 1.34.9 (Node.js GitHub Bot) [#&#8203;66868](https://github.com/nodejs/node/pull/66868)
- \[[`a6040b50d9`](https://github.com/nodejs/node/commit/a6040b50d9)] - **deps**: brotli: cherry-pick [`0ed4268`](https://github.com/nodejs/node/commit/0ed4268a4401abcb44720963) (Evgenii Kliuchnikov) [nodejs-private/node-private#1002](https://github.com/nodejs-private/node-private/pull/1002)
- \[[`6b78ea171d`](https://github.com/nodejs/node/commit/6b78ea171d)] - **dns**: validate resolve inputs for null bytes (James M Snell) [nodejs-private/node-private#984](https://github.com/nodejs-private/node-private/pull/984)
- \[[`0683ee5f7d`](https://github.com/nodejs/node/commit/0683ee5f7d)] - **http**: ensure agent data guard works without I/O (James M Snell) [nodejs-private/node-private#983](https://github.com/nodejs-private/node-private/pull/983)
- \[[`e5cae10148`](https://github.com/nodejs/node/commit/e5cae10148)] - ***Revert*** "**module**: synchronously load most ES modules" (Antoine du Hamel) [#&#8203;66786](https://github.com/nodejs/node/pull/66786)
- \[[`cc244131aa`](https://github.com/nodejs/node/commit/cc244131aa)] - **permission**: check permission model in realpathSync (RafaelGSS) [nodejs-private/node-private#973](https://github.com/nodejs-private/node-private/pull/973)
- \[[`0392385841`](https://github.com/nodejs/node/commit/0392385841)] - **src**: expose `BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH` (Antoine du Hamel) [nodejs-private/node-private#1002](https://github.com/nodejs-private/node-private/pull/1002)
- \[[`c273a408c9`](https://github.com/nodejs/node/commit/c273a408c9)] - **src**: fix the fs permission tree node on wildcard nodes (James M Snell) [nodejs-private/node-private#986](https://github.com/nodejs-private/node-private/pull/986)
- \[[`a2caddd20e`](https://github.com/nodejs/node/commit/a2caddd20e)] - **tls**: reject chains containing blocked public keys (Ulises Gascon) [#&#8203;66871](https://github.com/nodejs/node/pull/66871)
- \[[`ad788ccd07`](https://github.com/nodejs/node/commit/ad788ccd07)] - **tls**: reject non-canonical IP addresses (Matteo Collina) [nodejs-private/node-private#982](https://github.com/nodejs-private/node-private/pull/982)
- \[[`cd4b05469c`](https://github.com/nodejs/node/commit/cd4b05469c)] - **tls**: fix ip normalization regression (James M Snell) [nodejs-private/node-private#985](https://github.com/nodejs-private/node-private/pull/985)
- \[[`5fa440e0d7`](https://github.com/nodejs/node/commit/5fa440e0d7)] - **tools**: retry Gatekeeper check and stapling after notarization (Ryan Aslett) [#&#8203;66855](https://github.com/nodejs/node/pull/66855)
- \[[`745ad77156`](https://github.com/nodejs/node/commit/745ad77156)] - **zlib**: avoid caching invalid ZIP local headers (Matteo Collina) [nodejs-private/node-private#981](https://github.com/nodejs-private/node-private/pull/981)

### [`v26.12.0`](https://github.com/nodejs/node/releases/tag/v26.12.0): 2026-10-14, Version 26.12.0 (Current), @&#8203;richardlau

[Compare Source](https://github.com/nodejs/node/compare/v26.11.1...v26.12.0)

##### Notable Changes

- \[[`1ebd6d3677`](https://github.com/nodejs/node/commit/1ebd6d3677)] - **(SEMVER-MINOR)** **doc,lib,src**: throw on missing WebAssembly or RX support (Paolo Insogna) [#&#8203;66533](https://github.com/nodejs/node/pull/66533)
- \[[`7f1937d2b9`](https://github.com/nodejs/node/commit/7f1937d2b9)] - **(SEMVER-MINOR)** **http**: add websocketMask() and websocketUnmask() (James M Snell) [#&#8203;66335](https://github.com/nodejs/node/pull/66335)

##### Commits

- \[[`30e76bb16a`](https://github.com/nodejs/node/commit/30e76bb16a)] - **benchmark**: fix input passed to subtle.digest in webcrypto-digest (Rafael Gonzaga) [#&#8203;66608](https://github.com/nodejs/node/pull/66608)
- \[[`adef72223a`](https://github.com/nodejs/node/commit/adef72223a)] - **benchmark**: fix buffer option in buffer read/write benchmarks (Rafael Gonzaga) [#&#8203;66604](https://github.com/nodejs/node/pull/66604)
- \[[`2f498f08fe`](https://github.com/nodejs/node/commit/2f498f08fe)] - **benchmark**: add util.parseArgs benchmark (Rafael Gonzaga) [#&#8203;66599](https://github.com/nodejs/node/pull/66599)
- \[[`4ce8412e18`](https://github.com/nodejs/node/commit/4ce8412e18)] - **benchmark**: fix url-searchparams-sort to sort a fresh list (RafaelGSS) [#&#8203;66535](https://github.com/nodejs/node/pull/66535)
- \[[`493bd6c66e`](https://github.com/nodejs/node/commit/493bd6c66e)] - **benchmark,tools**: fix napi benchmarks on GHA (Nigro Simone) [#&#8203;66423](https://github.com/nodejs/node/pull/66423)
- \[[`e4515552d6`](https://github.com/nodejs/node/commit/e4515552d6)] - **build**: run QUIC CI for V8 changes (Yuya Inoue) [#&#8203;66602](https://github.com/nodejs/node/pull/66602)
- \[[`a888e51062`](https://github.com/nodejs/node/commit/a888e51062)] - **build**: support Python 3.15 (Mike McCready) [#&#8203;65750](https://github.com/nodejs/node/pull/65750)
- \[[`2afab9a63b`](https://github.com/nodejs/node/commit/2afab9a63b)] - **build**: do not include shared gtest in `node` link path (Antoine du Hamel) [#&#8203;66626](https://github.com/nodejs/node/pull/66626)
- \[[`f88c2f8ec6`](https://github.com/nodejs/node/commit/f88c2f8ec6)] - **build,test**: enable temporal support on no-ICU and system-ICU builds (Antoine du Hamel) [#&#8203;66697](https://github.com/nodejs/node/pull/66697)
- \[[`5fd03e6fdf`](https://github.com/nodejs/node/commit/5fd03e6fdf)] - **child_process**: propagate config-file permission flags to children (Rafael Gonzaga) [#&#8203;66559](https://github.com/nodejs/node/pull/66559)
- \[[`f771134b07`](https://github.com/nodejs/node/commit/f771134b07)] - **crypto**: isolate provider EC PKCS8 encoding (Filip Skokan) [#&#8203;66413](https://github.com/nodejs/node/pull/66413)
- \[[`4e00a293db`](https://github.com/nodejs/node/commit/4e00a293db)] - **crypto**: remove key export and metadata locks (Filip Skokan) [#&#8203;66413](https://github.com/nodejs/node/pull/66413)
- \[[`bcd8018775`](https://github.com/nodejs/node/commit/bcd8018775)] - **crypto**: remove verify setup key locking (Filip Skokan) [#&#8203;66413](https://github.com/nodejs/node/pull/66413)
- \[[`883250fee2`](https://github.com/nodejs/node/commit/883250fee2)] - **crypto**: remove KEM key locking (Filip Skokan) [#&#8203;66413](https://github.com/nodejs/node/pull/66413)
- \[[`9d98805071`](https://github.com/nodejs/node/commit/9d98805071)] - **crypto**: remove RSA-OAEP key locking (Filip Skokan) [#&#8203;66413](https://github.com/nodejs/node/pull/66413)
- \[[`d6293e7bb1`](https://github.com/nodejs/node/commit/d6293e7bb1)] - **crypto**: skip secret key mutex allocation (Filip Skokan) [#&#8203;66413](https://github.com/nodejs/node/pull/66413)
- \[[`8d8af8003e`](https://github.com/nodejs/node/commit/8d8af8003e)] - **crypto**: keep the root cert store per Environment (Shelley Vohr) [#&#8203;66411](https://github.com/nodejs/node/pull/66411)
- \[[`c6f0614785`](https://github.com/nodejs/node/commit/c6f0614785)] - **crypto**: remove select Web Crypto warnings (Filip Skokan) [#&#8203;66312](https://github.com/nodejs/node/pull/66312)
- \[[`e5360b5a08`](https://github.com/nodejs/node/commit/e5360b5a08)] - **deps**: update googletest to [`988ea2c`](https://github.com/nodejs/node/commit/988ea2c1798de7779f656df2281dd36d6039a17a) (Node.js GitHub Bot) [#&#8203;66652](https://github.com/nodejs/node/pull/66652)
- \[[`7eb230a2c1`](https://github.com/nodejs/node/commit/7eb230a2c1)] - **deps**: update acorn to 8.19.0 (Node.js GitHub Bot) [#&#8203;66655](https://github.com/nodejs/node/pull/66655)
- \[[`af946ba8f3`](https://github.com/nodejs/node/commit/af946ba8f3)] - **deps**: update sqlite to 3.54.0 (Node.js GitHub Bot) [#&#8203;66663](https://github.com/nodejs/node/pull/66663)
- \[[`007872a85d`](https://github.com/nodejs/node/commit/007872a85d)] - **deps**: V8: cherry-pick [`8d14d49`](https://github.com/nodejs/node/commit/8d14d49c4040) (Antoine du Hamel) [#&#8203;66627](https://github.com/nodejs/node/pull/66627)
- \[[`f44aec4966`](https://github.com/nodejs/node/commit/f44aec4966)] - **deps**: update simdjson to 5.0.3 (Daniel Lemire) [#&#8203;66620](https://github.com/nodejs/node/pull/66620)
- \[[`1a33e914e8`](https://github.com/nodejs/node/commit/1a33e914e8)] - **deps**: V8: cherry-pick [`7d5eb1d`](https://github.com/nodejs/node/commit/7d5eb1df2a72) (inoway46) [#&#8203;66566](https://github.com/nodejs/node/pull/66566)
- \[[`3294d51e5a`](https://github.com/nodejs/node/commit/3294d51e5a)] - **diagnostics_channel**: fix default callback context (Matteo Collina) [#&#8203;66481](https://github.com/nodejs/node/pull/66481)
- \[[`5c602a5824`](https://github.com/nodejs/node/commit/5c602a5824)] - **doc**: list futimes among fd APIs disabled by the permission model (Rafael Gonzaga) [#&#8203;66649](https://github.com/nodejs/node/pull/66649)
- \[[`eaeb4736c8`](https://github.com/nodejs/node/commit/eaeb4736c8)] - **doc**: add Test Runner to list of built-in diagnostic channels (Vas Sudanagunta) [#&#8203;66563](https://github.com/nodejs/node/pull/66563)
- \[[`0e1c99afae`](https://github.com/nodejs/node/commit/0e1c99afae)] - **doc**: document stream/iter behaviors and Node.js extensions (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`846236367d`](https://github.com/nodejs/node/commit/846236367d)] - **doc**: document URL and Uint8Array references in process.permission (Rafael Gonzaga) [#&#8203;66557](https://github.com/nodejs/node/pull/66557)
- \[[`fc3b067be7`](https://github.com/nodejs/node/commit/fc3b067be7)] - **doc**: clarify http Agent keepSocketAlive behavior (Efe Karasakal) [#&#8203;66252](https://github.com/nodejs/node/pull/66252)
- \[[`73a4e90ce2`](https://github.com/nodejs/node/commit/73a4e90ce2)] - **doc**: document keepAliveTimeoutBuffer server option (Efe Karasakal) [#&#8203;66286](https://github.com/nodejs/node/pull/66286)
- \[[`bb816582af`](https://github.com/nodejs/node/commit/bb816582af)] - **doc**: fix request.reusedSocket timeout example (Efe Karasakal) [#&#8203;66286](https://github.com/nodejs/node/pull/66286)
- \[[`82223ab4d9`](https://github.com/nodejs/node/commit/82223ab4d9)] - **doc**: clarify revert PR label policy (Antoine du Hamel) [#&#8203;66529](https://github.com/nodejs/node/pull/66529)
- \[[`c6f59d4e8e`](https://github.com/nodejs/node/commit/c6f59d4e8e)] - **doc**: clarify node binary misuse after compromise (Rafael Gonzaga) [#&#8203;66530](https://github.com/nodejs/node/pull/66530)
- \[[`8904178498`](https://github.com/nodejs/node/commit/8904178498)] - **doc**: document linux-x64-musl build toolchain (Issac) [#&#8203;66523](https://github.com/nodejs/node/pull/66523)
- \[[`1e8247a74e`](https://github.com/nodejs/node/commit/1e8247a74e)] - **doc**: run license-builder (github-actions\[bot]) [#&#8203;66517](https://github.com/nodejs/node/pull/66517)
- \[[`b2773d5e4c`](https://github.com/nodejs/node/commit/b2773d5e4c)] - **doc**: add missing return types in cluster.md (Daniel Pinto) [#&#8203;66453](https://github.com/nodejs/node/pull/66453)
- \[[`1ebd6d3677`](https://github.com/nodejs/node/commit/1ebd6d3677)] - **(SEMVER-MINOR)** **doc,lib,src**: throw on missing WebAssembly or RX support (Paolo Insogna) [#&#8203;66533](https://github.com/nodejs/node/pull/66533)
- \[[`c1073f31de`](https://github.com/nodejs/node/commit/c1073f31de)] - **ffi**: fix exportArrayBuffer type check (Trivikram Kamat) [#&#8203;66455](https://github.com/nodejs/node/pull/66455)
- \[[`69148ee0ff`](https://github.com/nodejs/node/commit/69148ee0ff)] - **fs**: lock FileHandle on first read in pull() and pullSync() (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`700c60a1cd`](https://github.com/nodejs/node/commit/700c60a1cd)] - **fs**: serialize FileHandle writer() async writes (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`32833def1c`](https://github.com/nodejs/node/commit/32833def1c)] - **http**: reduce raw header name allocations (Roberto Bianchi) [#&#8203;66488](https://github.com/nodejs/node/pull/66488)
- \[[`7f1937d2b9`](https://github.com/nodejs/node/commit/7f1937d2b9)] - **(SEMVER-MINOR)** **http**: add websocketMask() and websocketUnmask() (James M Snell) [#&#8203;66335](https://github.com/nodejs/node/pull/66335)
- \[[`115731dda7`](https://github.com/nodejs/node/commit/115731dda7)] - **http2**: speed up response getHeaders (Roberto Bianchi) [#&#8203;66592](https://github.com/nodejs/node/pull/66592)
- \[[`447c36cb45`](https://github.com/nodejs/node/commit/447c36cb45)] - **lib**: fix AbortSignal.any() nested composite leak (Darius) [#&#8203;66617](https://github.com/nodejs/node/pull/66617)
- \[[`1722ced4b4`](https://github.com/nodejs/node/commit/1722ced4b4)] - **lib**: add --allow-fs-vfs to permission available flags (Rafael Gonzaga) [#&#8203;66554](https://github.com/nodejs/node/pull/66554)
- \[[`062ece77fc`](https://github.com/nodejs/node/commit/062ece77fc)] - **lib**: fix benchmark record acknowledgement race (Filip Skokan) [#&#8203;66430](https://github.com/nodejs/node/pull/66430)
- \[[`05d0b14438`](https://github.com/nodejs/node/commit/05d0b14438)] - **lib**: set exit code on failed node:bench run() (RafaelGSS) [#&#8203;66534](https://github.com/nodejs/node/pull/66534)
- \[[`2cab299471`](https://github.com/nodejs/node/commit/2cab299471)] - **lib**: default node:bench warmup to 10 invocations (RafaelGSS) [#&#8203;66536](https://github.com/nodejs/node/pull/66536)
- \[[`83f507845d`](https://github.com/nodejs/node/commit/83f507845d)] - **meta**: bump nodejs/node-pr-labeler to [`dfe5eb3`](https://github.com/nodejs/node/commit/dfe5eb3) (Soul Lee) [#&#8203;66606](https://github.com/nodejs/node/pull/66606)
- \[[`6fbffd5ee5`](https://github.com/nodejs/node/commit/6fbffd5ee5)] - **meta**: bump codecov/codecov-action from 7.1.0 to 7.1.1 (dependabot\[bot]) [#&#8203;66448](https://github.com/nodejs/node/pull/66448)
- \[[`bd567f8bd6`](https://github.com/nodejs/node/commit/bd567f8bd6)] - **module**: fix require of imports with package map (Lazizbek Ergashev) [#&#8203;66565](https://github.com/nodejs/node/pull/66565)
- \[[`c442f471a5`](https://github.com/nodejs/node/commit/c442f471a5)] - **module**: synchronously load most ES modules (Geoffrey Booth) [#&#8203;62530](https://github.com/nodejs/node/pull/62530)
- \[[`51f66f0134`](https://github.com/nodejs/node/commit/51f66f0134)] - **permission**: keep explicit fs grants when dropping a covering directory (Rafael Gonzaga) [#&#8203;66556](https://github.com/nodejs/node/pull/66556)
- \[[`1aa10d80e2`](https://github.com/nodejs/node/commit/1aa10d80e2)] - **process**: mark process.finalization as release candidate (Matteo Collina) [#&#8203;66436](https://github.com/nodejs/node/pull/66436)
- \[[`dd4715a6ba`](https://github.com/nodejs/node/commit/dd4715a6ba)] - **querystring**: fix value decoding after encoded keys (Ved Chaudhari) [#&#8203;66553](https://github.com/nodejs/node/pull/66553)
- \[[`9648a6ba8e`](https://github.com/nodejs/node/commit/9648a6ba8e)] - **quic**: reject closed stream writer writes with a TypeError (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`d6f566baf8`](https://github.com/nodejs/node/commit/d6f566baf8)] - **quic**: give each BindingData its own allocator state (Shelley Vohr) [#&#8203;66411](https://github.com/nodejs/node/pull/66411)
- \[[`c3204c15bd`](https://github.com/nodejs/node/commit/c3204c15bd)] - **quic**: validate session close error codes (Christian Aurich Zanettini Martins) [#&#8203;66302](https://github.com/nodejs/node/pull/66302)
- \[[`5b87354f5a`](https://github.com/nodejs/node/commit/5b87354f5a)] - **quic**: destroy stream on invalid promise body (Christian Aurich Zanettini Martins) [#&#8203;66260](https://github.com/nodejs/node/pull/66260)
- \[[`9ef698c781`](https://github.com/nodejs/node/commit/9ef698c781)] - **sqlite**: validate aggregate() name and options (Guilherme Araújo) [#&#8203;66463](https://github.com/nodejs/node/pull/66463)
- \[[`bbf41f8cfb`](https://github.com/nodejs/node/commit/bbf41f8cfb)] - **sqlite**: persist enableDefensive() across reopen (Trivikram Kamat) [#&#8203;66404](https://github.com/nodejs/node/pull/66404)
- \[[`54867cd25e`](https://github.com/nodejs/node/commit/54867cd25e)] - **sqlite**: throw on oversized strings instead of aborting (Trivikram Kamat) [#&#8203;66521](https://github.com/nodejs/node/pull/66521)
- \[[`4314cde48b`](https://github.com/nodejs/node/commit/4314cde48b)] - **src**: release uv_fs_t in permission WildcardIfDir (Rafael Gonzaga) [#&#8203;66555](https://github.com/nodejs/node/pull/66555)
- \[[`0e58916f08`](https://github.com/nodejs/node/commit/0e58916f08)] - **src**: stop including simdjson.h from env.h (Daniel Lemire) [#&#8203;66620](https://github.com/nodejs/node/pull/66620)
- \[[`06f56a55bb`](https://github.com/nodejs/node/commit/06f56a55bb)] - **src**: use native CopyArrayBufferBytes for webstream buffer copy (René) [#&#8203;66400](https://github.com/nodejs/node/pull/66400)
- \[[`2e3dd5bb63`](https://github.com/nodejs/node/commit/2e3dd5bb63)] - **src**: fix config file handling (Marco Ippolito) [#&#8203;66431](https://github.com/nodejs/node/pull/66431)
- \[[`cd86506bc2`](https://github.com/nodejs/node/commit/cd86506bc2)] - **src**: mark config file as stable (Marco Ippolito) [#&#8203;66431](https://github.com/nodejs/node/pull/66431)
- \[[`15ff9884e4`](https://github.com/nodejs/node/commit/15ff9884e4)] - **stream**: skip idle webstreams start and watchers (Matteo Collina) [#&#8203;66424](https://github.com/nodejs/node/pull/66424)
- \[[`3f75c89fb8`](https://github.com/nodejs/node/commit/3f75c89fb8)] - **stream**: add pipeToSync() failOnIncompleteClose option (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`6cecf140e7`](https://github.com/nodejs/node/commit/6cecf140e7)] - **stream**: do not fail the writer when pipeToSync() cannot close (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`16833534b6`](https://github.com/nodejs/node/commit/16833534b6)] - **stream**: fix fromSync() async input error messages (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`af41622ad8`](https://github.com/nodejs/node/commit/af41622ad8)] - **stream**: reject closed fromWritable() writes with a TypeError (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`4b83c6c38e`](https://github.com/nodejs/node/commit/4b83c6c38e)] - **stream**: accept explicit stream/iter budgets below 16384 (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`f302fbd04a`](https://github.com/nodejs/node/commit/f302fbd04a)] - **stream**: reduce per-chunk overhead in stream/iter consumers (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`7ba60dcdbe`](https://github.com/nodejs/node/commit/7ba60dcdbe)] - **stream**: keep the original error when writer.fail() throws (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`dcac51a7db`](https://github.com/nodejs/node/commit/dcac51a7db)] - **stream**: align pull() abort handling with the spec (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`995dee6b6b`](https://github.com/nodejs/node/commit/995dee6b6b)] - **stream**: honor stream/iter protocols on function objects (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`6eaf91353a`](https://github.com/nodejs/node/commit/6eaf91353a)] - **stream**: do not hold back nested async data in from() (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`69d44aedb4`](https://github.com/nodejs/node/commit/69d44aedb4)] - **stream**: bound pre-batched async values in from() (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`6b1e7c4cf1`](https://github.com/nodejs/node/commit/6b1e7c4cf1)] - **stream**: guard shareSync() against re-entrant source reads (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`8a47365425`](https://github.com/nodejs/node/commit/8a47365425)] - **stream**: split oversized share batches under drop-oldest (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`30cbc4e643`](https://github.com/nodejs/node/commit/30cbc4e643)] - **stream**: reject drop-newest backpressure in shareSync() (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`42ae08594e`](https://github.com/nodejs/node/commit/42ae08594e)] - **stream**: detach shareSync consumers on strict budget errors (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`fa49de9ba6`](https://github.com/nodejs/node/commit/fa49de9ba6)] - **stream**: keep share buffer when all consumers detach (James M Snell) [#&#8203;66483](https://github.com/nodejs/node/pull/66483)
- \[[`e6662cb904`](https://github.com/nodejs/node/commit/e6662cb904)] - **stream**: fix Utf8Stream flush handling (James M Snell) [#&#8203;66473](https://github.com/nodejs/node/pull/66473)
- \[[`93596b1a9e`](https://github.com/nodejs/node/commit/93596b1a9e)] - **stream**: add dump()/dumpSync() for stream/iter (Ethan Arrowood) [#&#8203;65598](https://github.com/nodejs/node/pull/65598)
- \[[`4ba6ce1b0c`](https://github.com/nodejs/node/commit/4ba6ce1b0c)] - **stream**: port remaining SonicBoom tests for Utf8Stream (Matteo Collina) [#&#8203;66275](https://github.com/nodejs/node/pull/66275)
- \[[`cd8b5fa5b0`](https://github.com/nodejs/node/commit/cd8b5fa5b0)] - **test**: tolerate async block count updates in test-fs-stat-bigint (Rafael Gonzaga) [#&#8203;66576](https://github.com/nodejs/node/pull/66576)
- \[[`30814ce991`](https://github.com/nodejs/node/commit/30814ce991)] - **test**: replace discard loops with dump() (Ethan Arrowood) [#&#8203;65598](https://github.com/nodejs/node/pull/65598)
- \[[`20441b8fc0`](https://github.com/nodejs/node/commit/20441b8fc0)] - **test**: run node-bench tools test sequentially (Filip Skokan) [#&#8203;66338](https://github.com/nodejs/node/pull/66338)
- \[[`9618da6fe3`](https://github.com/nodejs/node/commit/9618da6fe3)] - **test**: remove duplicated cases in permission fs-read fixture (Rafael Gonzaga) [#&#8203;66450](https://github.com/nodejs/node/pull/66450)
- \[[`c348a4cb46`](https://github.com/nodejs/node/commit/c348a4cb46)] - **test**: run instantiateStreaming-bad-imports WPT (Filip Skokan) [#&#8203;66322](https://github.com/nodejs/node/pull/66322)
- \[[`7d4fda6ba7`](https://github.com/nodejs/node/commit/7d4fda6ba7)] - **test**: honor allowed WPT promise rejections (Filip Skokan) [#&#8203;66322](https://github.com/nodejs/node/pull/66322)
- \[[`d4c87eb086`](https://github.com/nodejs/node/commit/d4c87eb086)] - **test**: scope Blob WPT failures to big-endian (Filip Skokan) [#&#8203;66322](https://github.com/nodejs/node/pull/66322)
- \[[`7309ddf204`](https://github.com/nodejs/node/commit/7309ddf204)] - **test_runner**: rerun failing todo tests in suites (Barak) [#&#8203;66605](https://github.com/nodejs/node/pull/66605)
- \[[`da908b3072`](https://github.com/nodejs/node/commit/da908b3072)] - **test_runner**: report load errors with --test-isolation=none (Lazizbek Ergashev) [#&#8203;66550](https://github.com/nodejs/node/pull/66550)
- \[[`b18e121625`](https://github.com/nodejs/node/commit/b18e121625)] - **test_runner**: add mock call assertions to t.assert (Guilherme Araújo) [#&#8203;66476](https://github.com/nodejs/node/pull/66476)
- \[[`3d691ab75e`](https://github.com/nodejs/node/commit/3d691ab75e)] - **tools**: restore Python 3.14 for daily WPT (Filip Skokan) [#&#8203;66699](https://github.com/nodejs/node/pull/66699)
- \[[`714aca1ef6`](https://github.com/nodejs/node/commit/714aca1ef6)] - **tools**: switch to PGP and SHA256 in ICU updater (Antoine du Hamel) [#&#8203;66469](https://github.com/nodejs/node/pull/66469)
- \[[`fa9fca45e4`](https://github.com/nodejs/node/commit/fa9fca45e4)] - **tools**: lint thread_local in src (Shelley Vohr) [#&#8203;66411](https://github.com/nodejs/node/pull/66411)
- \[[`dbc3e97847`](https://github.com/nodejs/node/commit/dbc3e97847)] - **tools**: copy hdr_histogram_internal.h in update-histogram.sh (Filipe Oliveira (Redis)) [#&#8203;66528](https://github.com/nodejs/node/pull/66528)
- \[[`4760c27904`](https://github.com/nodejs/node/commit/4760c27904)] - **tools**: bump the eslint group in /tools/eslint with 5 updates (dependabot\[bot]) [#&#8203;66445](https://github.com/nodejs/node/pull/66445)
- \[[`63c20ee58e`](https://github.com/nodejs/node/commit/63c20ee58e)] - **vfs**: add ComposableProvider for layered mounts (Matteo Collina) [#&#8203;66235](https://github.com/nodejs/node/pull/66235)
- \[[`ab057989af`](https://github.com/nodejs/node/commit/ab057989af)] - **watch**: strip underscore aliases of watch flags (Trivikram Kamat) [#&#8203;66365](https://github.com/nodejs/node/pull/66365)

### [`v26.11.1`](https://github.com/nodejs/node/releases/tag/v26.11.1): 2026-10-07, Version 26.11.1 (Current), @&#8203;aduh95

[Compare Source](https://github.com/nodejs/node/compare/v26.11.0...v26.11.1)

##### Commits

- \[[`2dc4638e85`](https://github.com/nodejs/node/commit/2dc4638e85)] - ***Revert*** "**build**: toggle doc-kit verbosity based on V" (Antoine du Hamel)
- \[[`3febbc54ec`](https://github.com/nodejs/node/commit/3febbc54ec)] - ***Revert*** "**build, doc**: move to redesign" (Antoine du Hamel)
- \[[`173250e2e7`](https://github.com/nodejs/node/commit/173250e2e7)] - ***Revert*** "**tools**: bump the doc group in /tools/doc with 4 updates" (Antoine du Hamel)

### [`v26.11.0`](https://github.com/nodejs/node/releases/tag/v26.11.0): 2026-10-07, Version 26.11.0 (Current), @&#8203;aduh95

[Compare Source](https://github.com/nodejs/node/compare/v26.10.0...v26.11.0)

##### Notable Changes

- \[[`232f178825`](https://github.com/nodejs/node/commit/232f178825)] - **(SEMVER-MINOR)** **buffer**: add `isLatin1` (James M Snell) [#&#8203;66298](https://github.com/nodejs/node/pull/66298)
- \[[`27778036de`](https://github.com/nodejs/node/commit/27778036de)] - **(SEMVER-MINOR)** **buffer**: add `Buffer.stringLength()` (Matteo Collina) [#&#8203;66064](https://github.com/nodejs/node/pull/66064)
- \[[`4f84c4bda2`](https://github.com/nodejs/node/commit/4f84c4bda2)] - **build, doc**: move to redesign (Aviv Keller) [#&#8203;62045](https://github.com/nodejs/node/pull/62045)
- \[[`6f6296fef9`](https://github.com/nodejs/node/commit/6f6296fef9)] - **(SEMVER-MINOR)** **doc**: promote Alpine Linux to tier 2 support (Stewart X Addison) [#&#8203;63737](https://github.com/nodejs/node/pull/63737)
- \[[`e998d260d0`](https://github.com/nodejs/node/commit/e998d260d0)] - **(SEMVER-MINOR)** **http**: add `isValidHeaderName()` and isValidHeaderValue() (James M Snell) [#&#8203;66334](https://github.com/nodejs/node/pull/66334)
- \[[`7702a50e08`](https://github.com/nodejs/node/commit/7702a50e08)] - **(SEMVER-MINOR)** **http2**: add `connectionWindowSize` option (Tim Perry) [#&#8203;65619](https://github.com/nodejs/node/pull/65619)
- \[[`e06aa62cec`](https://github.com/nodejs/node/commit/e06aa62cec)] - **(SEMVER-MINOR)** **perf_hooks**: fix truncation of `monitorEventLoopDelay()` resolution (James M Snell) [#&#8203;66115](https://github.com/nodejs/node/pull/66115)
- \[[`ee126e37e8`](https://github.com/nodejs/node/commit/ee126e37e8)] - **(SEMVER-MINOR)** **perf_hooks**: allow `RecordableHistogram` to record 0 (James M Snell) [#&#8203;66114](https://github.com/nodejs/node/pull/66114)
- \[[`1fef8f54db`](https://github.com/nodejs/node/commit/1fef8f54db)] - **(SEMVER-MINOR)** **perf_hooks**: add `histogram.diff()` (James M Snell) [#&#8203;66099](https://github.com/nodejs/node/pull/66099)
- \[[`f1b9758c4e`](https://github.com/nodejs/node/commit/f1b9758c4e)] - **(SEMVER-MINOR)** **perf_hooks**: add `histogram.snapshot()` (James M Snell) [#&#8203;66099](https://github.com/nodejs/node/pull/66099)
- \[[`291d56ea3e`](https://github.com/nodejs/node/commit/291d56ea3e)] - **(SEMVER-MINOR)** **perf_hooks**: harden histogram CBOR import validation (James M Snell) [#&#8203;66098](https://github.com/nodejs/node/pull/66098)
- \[[`6299b09d5c`](https://github.com/nodejs/node/commit/6299b09d5c)] - **(SEMVER-MINOR)** **process**: graduate `process.ref`/`unref` to stable (James M Snell) [#&#8203;66213](https://github.com/nodejs/node/pull/66213)
- \[[`41d6707b63`](https://github.com/nodejs/node/commit/41d6707b63)] - **(SEMVER-MINOR)** **sqlite**: rename `DatabaseSync` and `StatementSync` (Guilherme Araújo) [#&#8203;65988](https://github.com/nodejs/node/pull/65988)
- \[[`60d0aa0cd4`](https://github.com/nodejs/node/commit/60d0aa0cd4)] - **(SEMVER-MINOR)** **src**: add `--process-timeout=N` (James M Snell) [#&#8203;66138](https://github.com/nodejs/node/pull/66138)
- \[[`f39916a7e3`](https://github.com/nodejs/node/commit/f39916a7e3)] - **(SEMVER-MINOR)** **src**: expose size and count in heap profile output (Ilyas Shabi) [#&#8203;65737](https://github.com/nodejs/node/pull/65737)
- \[[`0b00d5ea59`](https://github.com/nodejs/node/commit/0b00d5ea59)] - **(SEMVER-MINOR)** **src**: let embedders exempt linked bindings from the addon permission (Shelley Vohr) [#&#8203;66067](https://github.com/nodejs/node/pull/66067)

##### Commits

- \[[`11c3d7115d`](https://github.com/nodejs/node/commit/11c3d7115d)] - **benchmark**: add implicit-framing case to http/set-header (Matteo Collina) [#&#8203;66420](https://github.com/nodejs/node/pull/66420)
- \[[`168b764fec`](https://github.com/nodejs/node/commit/168b764fec)] - **benchmark**: add zstdCompress benchmark (James Ross) [#&#8203;66358](https://github.com/nodejs/node/pull/66358)
- \[[`69182564a7`](https://github.com/nodejs/node/commit/69182564a7)] - **benchmark**: add a node::MakeCallback benchmark (Nigro Simone) [#&#8203;66316](https://github.com/nodejs/node/pull/66316)
- \[[`12e540582f`](https://github.com/nodejs/node/commit/12e540582f)] - **(SEMVER-MINOR)** **benchmark**: add http header validator benchmark (James M Snell) [#&#8203;66334](https://github.com/nodejs/node/pull/66334)
- \[[`e6abdf6b01`](https://github.com/nodejs/node/commit/e6abdf6b01)] - **benchmark**: remove duplicate ffi string length direct (Donghoon Kang) [#&#8203;66278](https://github.com/nodejs/node/pull/66278)
- \[[`480ca7cc55`](https://github.com/nodejs/node/commit/480ca7cc55)] - **benchmark**: fix shadowing that broke h=20 on incoming_headers benchmark (Tim Perry) [#&#8203;66257](https://github.com/nodejs/node/pull/66257)
- \[[`c6bbc1b128`](https://github.com/nodejs/node/commit/c6bbc1b128)] - **benchmark**: cover Web Crypto conversion costs (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`85a2e4e270`](https://github.com/nodejs/node/commit/85a2e4e270)] - **benchmark**: remove duplicate ffi add-64 benchmark (Soul Lee) [#&#8203;66121](https://github.com/nodejs/node/pull/66121)
- \[[`d0a72f2c12`](https://github.com/nodejs/node/commit/d0a72f2c12)] - **buffer**: fix negative index for large buffers (Hilary Asogwa) [#&#8203;66325](https://github.com/nodejs/node/pull/66325)
- \[[`b7f6a66a9f`](https://github.com/nodejs/node/commit/b7f6a66a9f)] - **(SEMVER-MINOR)** **buffer**: add isLatin1 (James M Snell) [#&#8203;66298](https://github.com/nodejs/node/pull/66298)
- \[[`232f178825`](https://github.com/nodejs/node/commit/232f178825)] - **(SEMVER-MINOR)** **buffer**: add isLatin1 (James M Snell) [#&#8203;66298](https://github.com/nodejs/node/pull/66298)
- \[[`f7d3d11c11`](https://github.com/nodejs/node/commit/f7d3d11c11)] - **buffer**: fix odd UTF-16LE indexOf start (Yuya Inoue) [#&#8203;65960](https://github.com/nodejs/node/pull/65960)
- \[[`27778036de`](https://github.com/nodejs/node/commit/27778036de)] - **(SEMVER-MINOR)** **buffer**: add Buffer.stringLength() (Matteo Collina) [#&#8203;66064](https://github.com/nodejs/node/pull/66064)
- \[[`9f1db461d2`](https://github.com/nodejs/node/commit/9f1db461d2)] - **build**: update common.gypi for z/OS (Gaby Baghdadi) [#&#8203;66449](https://github.com/nodejs/node/pull/66449)
- \[[`0002037b3f`](https://github.com/nodejs/node/commit/0002037b3f)] - **build**: update configure.py for z/OS (Gaby Baghdadi) [#&#8203;66449](https://github.com/nodejs/node/pull/66449)
- \[[`a341ac460a`](https://github.com/nodejs/node/commit/a341ac460a)] - **build**: fix vcbuild format-md install and exit (Ved Chaudhari) [#&#8203;66475](https://github.com/nodejs/node/pull/66475)
- \[[`bec52d9103`](https://github.com/nodejs/node/commit/bec52d9103)] - **build**: fix vcbuild lint skipping lint-md-build (Ved Chaudhari) [#&#8203;66467](https://github.com/nodejs/node/pull/66467)
- \[[`9acdb5910c`](https://github.com/nodejs/node/commit/9acdb5910c)] - **build**: toggle doc-kit verbosity based on V (Brian Muenzenmeyer) [#&#8203;66293](https://github.com/nodejs/node/pull/66293)
- \[[`6ee32f857a`](https://github.com/nodejs/node/commit/6ee32f857a)] - **build**: support LIEF 0.17.x and 1.x (Yuya Inoue) [#&#8203;66240](https://github.com/nodejs/node/pull/66240)
- \[[`2248869955`](https://github.com/nodejs/node/commit/2248869955)] - **build**: add clang support for pgo on macOS/Linux (Chengzhong Wu) [#&#8203;66136](https://github.com/nodejs/node/pull/66136)
- \[[`49069529eb`](https://github.com/nodejs/node/commit/49069529eb)] - **build**: add GZIP_COMPRESSION Make variable (inoway46) [#&#8203;66228](https://github.com/nodejs/node/pull/66228)
- \[[`9066d33aa2`](https://github.com/nodejs/node/commit/9066d33aa2)] - **build**: port `make_temporal_zoneinfo_cpp` to GYP (Antoine du Hamel) [#&#8203;66183](https://github.com/nodejs/node/pull/66183)
- \[[`1f4a8fb1cb`](https://github.com/nodejs/node/commit/1f4a8fb1cb)] - **build**: add `v8_enable_temporal_systemicu` (Steven R. Loomis) [#&#8203;65992](https://github.com/nodejs/node/pull/65992)
- \[[`4f84c4bda2`](https://github.com/nodejs/node/commit/4f84c4bda2)] - **build, doc**: move to redesign (Aviv Keller) [#&#8203;62045](https://github.com/nodejs/node/pull/62045)
- \[[`a0e7141ffc`](https://github.com/nodejs/node/commit/a0e7141ffc)] - **child_process**: build the default env block in one native pass (Shelley Vohr) [#&#8203;65325](https://github.com/nodejs/node/pull/65325)
- \[[`9fa31096d4`](https://github.com/nodejs/node/commit/9fa31096d4)] - **crypto**: improve random synchronous number generation performance (Mert Can Altin) [#&#8203;66348](https://github.com/nodejs/node/pull/66348)
- \[[`53cde9d1f8`](https://github.com/nodejs/node/commit/53cde9d1f8)] - **crypto**: fix raw key export error for wrong key type (한국) [#&#8203;66217](https://github.com/nodejs/node/pull/66217)
- \[[`32ba6d5ada`](https://github.com/nodejs/node/commit/32ba6d5ada)] - **crypto**: use backend cSHAKE and KMAC (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`67ccff6434`](https://github.com/nodejs/node/commit/67ccff6434)] - **crypto**: separate conversion from validation (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`ceeb37173d`](https://github.com/nodejs/node/commit/ceeb37173d)] - **crypto**: verify empty KMAC outputs (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`359b07a641`](https://github.com/nodejs/node/commit/359b07a641)] - **crypto**: check EC coordinate conversion results (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`e4d746c4a5`](https://github.com/nodejs/node/commit/e4d746c4a5)] - **crypto**: map JWK export failures to OperationError (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`a851dda86a`](https://github.com/nodejs/node/commit/a851dda86a)] - **crypto**: include EC public keys in PKCS8 exports (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`7f58476ed1`](https://github.com/nodejs/node/commit/7f58476ed1)] - **crypto**: use the public CryptoKey prototype (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`75870623ad`](https://github.com/nodejs/node/commit/75870623ad)] - **crypto**: split hybrid keys without species (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`a1bea87c6a`](https://github.com/nodejs/node/commit/a1bea87c6a)] - **crypto**: report actual RSA modulus lengths (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`5e04680036`](https://github.com/nodejs/node/commit/5e04680036)] - **crypto**: derive Argon2 without worker threads (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`fe09120a0e`](https://github.com/nodejs/node/commit/fe09120a0e)] - **crypto**: create key usage arrays without species (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`44a2965f5f`](https://github.com/nodejs/node/commit/44a2965f5f)] - **crypto**: minimize RSA public exponent metadata (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`2f3e6dff9d`](https://github.com/nodejs/node/commit/2f3e6dff9d)] - **crypto**: copy derived bits without species (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`d54a2b2049`](https://github.com/nodejs/node/commit/d54a2b2049)] - **crypto**: handle PBKDF2 iteration limits (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`2ef6046f11`](https://github.com/nodejs/node/commit/2ef6046f11)] - **crypto**: reject duplicate unknown key usages (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`2e25ae4a7a`](https://github.com/nodejs/node/commit/2e25ae4a7a)] - **crypto**: check RSA JWK alg with SHA-3 hashes (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`0370e02e2a`](https://github.com/nodejs/node/commit/0370e02e2a)] - **crypto**: copy parameters without array species (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`e042d35ca5`](https://github.com/nodejs/node/commit/e042d35ca5)] - **crypto**: convert importKey data as a union (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`ff86606768`](https://github.com/nodejs/node/commit/ff86606768)] - **crypto**: copy detached parameters as empty (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`1314d277b2`](https://github.com/nodejs/node/commit/1314d277b2)] - **crypto**: resolve supports overloads by type (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`a855a46aeb`](https://github.com/nodejs/node/commit/a855a46aeb)] - **crypto**: allow unbound SubtleCrypto.supports (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`4a72c1d690`](https://github.com/nodejs/node/commit/4a72c1d690)] - **crypto**: allow short AES-GCM IVs (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`2d84b7ed49`](https://github.com/nodejs/node/commit/2d84b7ed49)] - **crypto**: validate normalized hash names (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`6bfd3924ff`](https://github.com/nodejs/node/commit/6bfd3924ff)] - **crypto**: convert getRandomValues views (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`529bd18c1a`](https://github.com/nodejs/node/commit/529bd18c1a)] - **crypto**: isolate cipher job errors (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`d4af11e171`](https://github.com/nodejs/node/commit/d4af11e171)] - **crypto**: reject short AES-KW inputs (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`78374c8af0`](https://github.com/nodejs/node/commit/78374c8af0)] - **crypto**: match algorithm names as ASCII (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`ab9a3f2b01`](https://github.com/nodejs/node/commit/ab9a3f2b01)] - **crypto**: use internal random buffer bounds (Filip Skokan) [#&#8203;66237](https://github.com/nodejs/node/pull/66237)
- \[[`7c9b2df87a`](https://github.com/nodejs/node/commit/7c9b2df87a)] - **crypto**: use current FIPS state for availability (Filip Skokan) [#&#8203;66160](https://github.com/nodejs/node/pull/66160)
- \[[`55af1dcded`](https://github.com/nodejs/node/commit/55af1dcded)] - **crypto**: update root certificates to NSS 3.129 (Node.js GitHub Bot) [#&#8203;66496](https://github.com/nodejs/node/pull/66496)
- \[[`4387cb46d2`](https://github.com/nodejs/node/commit/4387cb46d2)] - **deps**: update timezone to 2026e (Node.js GitHub Bot) [#&#8203;66419](https://github.com/nodejs/node/pull/66419)
- \[[`150c96ef3f`](https://github.com/nodejs/node/commit/150c96ef3f)] - **deps**: V8: cherry-pick [`c795f59`](https://github.com/nodejs/node/commit/c795f5948568) (Aviv Keller) [#&#8203;66380](https://github.com/nodejs/node/pull/66380)
- \[[`6b5ac2ab5d`](https://github.com/nodejs/node/commit/6b5ac2ab5d)] - **deps**: update archs files for openssl-3.5.9 (Node.js GitHub Bot) [#&#8203;66396](https://github.com/nodejs/node/pull/66396)
- \[[`bee7e2403c`](https://github.com/nodejs/node/commit/bee7e2403c)] - **deps**: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) [#&#8203;66396](https://github.com/nodejs/node/pull/66396)
- \[[`7a715495f2`](https://github.com/nodejs/node/commit/7a715495f2)] - **deps**: update lief to 1.0.0 (Node.js GitHub Bot) [#&#8203;66345](https://github.com/nodejs/node/pull/66345)
- \[[`f9da04958a`](https://github.com/nodejs/node/commit/f9da04958a)] - **deps**: update zlib to 1.3.2.1-motley-456ae73 (Node.js GitHub Bot) [#&#8203;66330](https://github.com/nodejs/node/pull/66330)
- \[[`5c34dd970d`](https://github.com/nodejs/node/commit/5c34dd970d)] - **deps**: update undici to 8.11.2 (Node.js GitHub Bot) [#&#8203;66332](https://github.com/nodejs/node/pull/66332)
- \[[`fdf0572cd1`](https://github.com/nodejs/node/commit/fdf0572cd1)] - **deps**: update timezone to 2026d (Node.js GitHub Bot) [#&#8203;66333](https://github.com/nodejs/node/pull/66333)
- \[[`6c924ee1b0`](https://github.com/nodejs/node/commit/6c924ee1b0)] - **deps**: upgrade npm to 11.20.0 (npm team) [#&#8203;66259](https://github.com/nodejs/node/pull/66259)
- \[[`2653b2617d`](https://github.com/nodejs/node/commit/2653b2617d)] - **deps**: V8: backport [`786c1c2`](https://github.com/nodejs/node/commit/786c1c2d88d4) (Eliau Elkouby) [#&#8203;66249](https://github.com/nodejs/node/pull/66249)
- \[[`1d68f23e08`](https://github.com/nodejs/node/commit/1d68f23e08)] - **deps**: update googletest to [`4267679`](https://github.com/nodejs/node/commit/4267679b6887f349f17b01ccd70c9e3483689b25) (Node.js GitHub Bot) [#&#8203;66145](https://github.com/nodejs/node/pull/66145)
- \[[`c507c5ad12`](https://github.com/nodejs/node/commit/c507c5ad12)] - **deps**: V8: backport [`9fb4444`](https://github.com/nodejs/node/commit/9fb4444bfc46) (Steven R. Loomis) [#&#8203;65992](https://github.com/nodejs/node/pull/65992)
- \[[`8c556ab2b6`](https://github.com/nodejs/node/commit/8c556ab2b6)] - **deps**: update histogram to 0.12.0 (Node.js GitHub Bot) [#&#8203;66494](https://github.com/nodejs/node/pull/66494)
- \[[`d3f55c7487`](https://github.com/nodejs/node/commit/d3f55c7487)] - **diagnostics_channel**: replace using with try-finally (Ayush Chaudhary) [#&#8203;64251](https://github.com/nodejs/node/pull/64251)
- \[[`510dfd899e`](https://github.com/nodejs/node/commit/510dfd899e)] - **doc**: update FreeEnvironment() notes for sibling Environments (Shelley Vohr) [#&#8203;66239](https://github.com/nodejs/node/pull/66239)
- \[[`db2665ba17`](https://github.com/nodejs/node/commit/db2665ba17)] - **doc**: add indexed `Array.prototype` properties to primordial exclusions (René) [#&#8203;66234](https://github.com/nodejs/node/pull/66234)
- \[[`b692079e3a`](https://github.com/nodejs/node/commit/b692079e3a)] - **doc**: fixup and cleanup stream/iter docs (James M Snell) [#&#8203;66079](https://github.com/nodejs/node/pull/66079)
- \[[`9b191141a2`](https://github.com/nodejs/node/commit/9b191141a2)] - **doc**: fix casing in `util.markPromiseAsHandled` section (Antoine du Hamel) [#&#8203;66206](https://github.com/nodejs/node/pull/66206)
- \[[`8e8c9762a8`](https://github.com/nodejs/node/commit/8e8c9762a8)] - **doc**: add return type to Blocklist.isBlocklist (yuki motokane) [#&#8203;66181](https://github.com/nodejs/node/pull/66181)
- \[[`6c7fc98d7f`](https://github.com/nodejs/node/commit/6c7fc98d7f)] - **doc**: clarify Worker execArgv vs Permission Model grants (yunshingng) [#&#8203;66124](https://github.com/nodejs/node/pull/66124)
- \[[`9fd0a10b1e`](https://github.com/nodejs/node/commit/9fd0a10b1e)] - **doc**: document iterable input for AbortSignal.any (Haram Jeong) [#&#8203;66123](https://github.com/nodejs/node/pull/66123)
- \[[`c4508fd4c7`](https://github.com/nodejs/node/commit/c4508fd4c7)] - **doc**: restore XadillaX to collaborators (Khaidi Chu) [#&#8203;66063](https://github.com/nodejs/node/pull/66063)
- \[[`b4ad8354f0`](https://github.com/nodejs/node/commit/b4ad8354f0)] - **doc**: use Type for performanceNodeTiming.uvMetricsInfo (James M Snell) [#&#8203;66094](https://github.com/nodejs/node/pull/66094)
- \[[`50bc27f3c3`](https://github.com/nodejs/node/commit/50bc27f3c3)] - **doc**: document the node:ffi call paths (Soul Lee) [#&#8203;66086](https://github.com/nodejs/node/pull/66086)
- \[[`a74a0ee748`](https://github.com/nodejs/node/commit/a74a0ee748)] - **doc,src,test**: fix typos in code comments (Noah) [#&#8203;66218](https://github.com/nodejs/node/pull/66218)
- \[[`6f6296fef9`](https://github.com/nodejs/node/commit/6f6296fef9)] - **(SEMVER-MINOR)** **doc**: promote Alpine Linux to tier 2 support (Stewart X Addison) [#&#8203;63737](https://github.com/nodejs/node/pull/63737)
- \[[`215639d6ce`](https://github.com/nodejs/node/commit/215639d6ce)] - **events**: fix addAbortListener for aborted signals (Lazizbek Ergashev) [#&#8203;65640](https://github.com/nodejs/node/pull/65640)
- \[[`021f7d8d98`](https://github.com/nodejs/node/commit/021f7d8d98)] - **ffi**: accept safe integer numbers for 64-bit arguments (Donghoon Kang) [#&#8203;66197](https://github.com/nodejs/node/pull/66197)
- \[[`53fd8e7ebb`](https://github.com/nodejs/node/commit/53fd8e7ebb)] - **ffi**: remove permission checks from dlclose and dlsym (Trivikram Kamat) [#&#8203;66426](https://github.com/nodejs/node/pull/66426)
- \[[`fa7efaf782`](https://github.com/nodejs/node/commit/fa7efaf782)] - **ffi**: validate pointer ranges in optimized calls (Trivikram Kamat) [#&#8203;66371](https://github.com/nodejs/node/pull/66371)
- \[[`11f80798ba`](https://github.com/nodejs/node/commit/11f80798ba)] - **ffi**: throw on allocation failure in toArrayBuffer() (Trivikram Kamat) [#&#8203;66406](https://github.com/nodejs/node/pull/66406)
- \[[`c65a333648`](https://github.com/nodejs/node/commit/c65a333648)] - **ffi**: do not abort when a Worker stops in a callback (Trivikram Kamat) [#&#8203;66389](https://github.com/nodejs/node/pull/66389)
- \[[`9bdab1eca0`](https://github.com/nodejs/node/commit/9bdab1eca0)] - **ffi**: reject unsafe integers as length or offset (Christian Aurich Zanettini Martins) [#&#8203;66216](https://github.com/nodejs/node/pull/66216)
- \[[`343a5c2915`](https://github.com/nodejs/node/commit/343a5c2915)] - **ffi**: fix use-after-free in PrepareFunction (Trivikram Kamat) [#&#8203;66368](https://github.com/nodejs/node/pull/66368)
- \[[`51daf16244`](https://github.com/nodejs/node/commit/51daf16244)] - **ffi**: reject non-boolean copy arguments (Christian Aurich Zanettini Martins) [#&#8203;66219](https://github.com/nodejs/node/pull/66219)
- \[[`b901b97cbf`](https://github.com/nodejs/node/commit/b901b97cbf)] - **ffi**: use type errors for invalid signatures (Donghoon Kang) [#&#8203;66222](https://github.com/nodejs/node/pull/66222)
- \[[`0f6cdce998`](https://github.com/nodejs/node/commit/0f6cdce998)] - **ffi**: allocate string argument storage lazily (Soul Lee) [#&#8203;66178](https://github.com/nodejs/node/pull/66178)
- \[[`ee84a36f12`](https://github.com/nodejs/node/commit/ee84a36f12)] - **ffi**: avoid memcpy() with a null pointer (Christian Aurich Zanettini Martins) [#&#8203;66200](https://github.com/nodejs/node/pull/66200)
- \[[`da32c79034`](https://github.com/nodejs/node/commit/da32c79034)] - **fs**: keep timestamps of files skipped by cpSync (Christian Aurich Zanettini Martins) [#&#8203;66305](https://github.com/nodejs/node/pull/66305)
- \[[`e7121be408`](https://github.com/nodejs/node/commit/e7121be408)] - **fs**: stop recursive mkdir from retrying ENOENT forever (Marco) [#&#8203;66340](https://github.com/nodejs/node/pull/66340)
- \[[`99a78b0d83`](https://github.com/nodejs/node/commit/99a78b0d83)] - **fs**: fix crash on negative zero file descriptor (Christian Aurich Zanettini Martins) [#&#8203;65888](https://github.com/nodejs/node/pull/65888)
- \[[`8b24247be1`](https://github.com/nodejs/node/commit/8b24247be1)] - **fs**: validate falsy openAsBlob type option (Christian Aurich Zanettini Martins) [#&#8203;66125](https://github.com/nodejs/node/pull/66125)
- \[[`e7d5352fa6`](https://github.com/nodejs/node/commit/e7d5352fa6)] - **fs**: close file streams with fd 0 (greenhead) [#&#8203;66131](https://github.com/nodejs/node/pull/66131)
- \[[`f38768f0fa`](https://github.com/nodejs/node/commit/f38768f0fa)] - **fs**: close fd 0 on discarded FileHandle transfer (Christian Aurich Zanettini Martins) [#&#8203;66095](https://github.com/nodejs/node/pull/66095)
- \[[`6487d36873`](https://github.com/nodejs/node/commit/6487d36873)] - **http**: avoid dictionary-mode objects in responses (Matteo Collina) [#&#8203;66420](https://github.com/nodejs/node/pull/66420)
- \[[`f8d30110b6`](https://github.com/nodejs/node/commit/f8d30110b6)] - **http**: cache parser callbacks (Matteo Collina) [#&#8203;66152](https://github.com/nodejs/node/pull/66152)
- \[[`e998d260d0`](https://github.com/nodejs/node/commit/e998d260d0)] - **(SEMVER-MINOR)** **http**: add isValidHeaderName() and isValidHeaderValue() (James M Snell) [#&#8203;66334](https://github.com/nodejs/node/pull/66334)
- \[[`0bb98027e5`](https://github.com/nodejs/node/commit/0bb98027e5)] - **http**: avoid toLowerCase on the server hot path (Yagiz Nizipli) [#&#8203;66120](https://github.com/nodejs/node/pull/66120)
- \[[`9819b0c432`](https://github.com/nodejs/node/commit/9819b0c432)] - **http**: normalize CONNECT request paths (Efe Karasakal) [#&#8203;64876](https://github.com/nodejs/node/pull/64876)
- \[[`ab93a3d51b`](https://github.com/nodejs/node/commit/ab93a3d51b)] - **http**: preserve socket errors as response error causes (Khaidi Chu) [#&#8203;66061](https://github.com/nodejs/node/pull/66061)
- \[[`15184e8212`](https://github.com/nodejs/node/commit/15184e8212)] - **http**: reduce per-request allocations in the server (Matteo Collina) [#&#8203;65802](https://github.com/nodejs/node/pull/65802)
- \[[`7702a50e08`](https://github.com/nodejs/node/commit/7702a50e08)] - **(SEMVER-MINOR)** **http2**: add new connectionWindowSize option (Tim Perry) [#&#8203;65619](https://github.com/nodejs/node/pull/65619)
- \[[`33e4ba358b`](https://github.com/nodejs/node/commit/33e4ba358b)] - **https**: handle invalid TLS options in proxied requests (Christian Aurich Zanettini Martins) [#&#8203;66096](https://github.com/nodejs/node/pull/66096)
- \[[`6f610a836b`](https://github.com/nodejs/node/commit/6f610a836b)] - **inspector**: throw ERR_INSPECTOR_NOT_AVAILABLE without an agent (Shelley Vohr) [#&#8203;66239](https://github.com/nodejs/node/pull/66239)
- \[[`697980b6fc`](https://github.com/nodejs/node/commit/697980b6fc)] - **inspector**: fix connectToMainThread() abort without parent inspector (Shelley Vohr) [#&#8203;65976](https://github.com/nodejs/node/pull/65976)
- \[[`37b3db91eb`](https://github.com/nodejs/node/commit/37b3db91eb)] - **(SEMVER-MINOR)** **lib**: fix stream loading bug in node:bench (James M Snell) [#&#8203;66114](https://github.com/nodejs/node/pull/66114)
- \[[`46a8a5dd65`](https://github.com/nodejs/node/commit/46a8a5dd65)] - **lib**: add primitive fast path to structuredClone (Guilherme Araújo) [#&#8203;64190](https://github.com/nodejs/node/pull/64190)
- \[[`bec7c53400`](https://github.com/nodejs/node/commit/bec7c53400)] - **meta**: bump github/codeql-action/analyze from 4.38.0 to 4.38.2 (dependabot\[bot]) [#&#8203;66443](https://github.com/nodejs/node/pull/66443)
- \[[`39d721abed`](https://github.com/nodejs/node/commit/39d721abed)] - **meta**: bump github/codeql-action/autobuild from 4.38.0 to 4.38.2 (dependabot\[bot]) [#&#8203;66444](https://github.com/nodejs/node/pull/66444)
- \[[`963804db4d`](https://github.com/nodejs/node/commit/963804db4d)] - **meta**: bump github/codeql-action/init from 4.38.0 to 4.38.2 (dependabot\[bot]) [#&#8203;66446](https://github.com/nodejs/node/pull/66446)
- \[[`5837ef8608`](https://github.com/nodejs/node/commit/5837ef8608)] - **meta**: bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.2 (dependabot\[bot]) [#&#8203;66447](https://github.com/nodejs/node/pull/66447)
- \[[`d8109f9831`](https://github.com/nodejs/node/commit/d8109f9831)] - **meta**: label permission model changes correctly (Rafael Gonzaga) [#&#8203;66208](https://github.com/nodejs/node/pull/66208)
- \[[`27f20dcaea`](https://github.com/nodejs/node/commit/27f20dcaea)] - **meta**: bump codecov/codecov-action from 7.0.0 to 7.1.0 (dependabot\[bot]) [#&#8203;66103](https://github.com/nodejs/node/pull/66103)
- \[[`dc6ef03ab6`](https://github.com/nodejs/node/commit/dc6ef03ab6)] - **module**: centralize builtin exposure policies (Jungwon Sohn) [#&#8203;66292](https://github.com/nodejs/node/pull/66292)
- \[[`f36efeb350`](https://github.com/nodejs/node/commit/f36efeb350)] - **module**: avoid allocating a cache key string for every require() (Samuel Attard) [#&#8203;63884](https://github.com/nodejs/node/pull/63884)
- \[[`9baea33509`](https://github.com/nodejs/node/commit/9baea33509)] - **module**: normalize package map paths (Hilary Asogwa) [#&#8203;66054](https://github.com/nodejs/node/pull/66054)
- \[[`354c2cc867`](https://github.com/nodejs/node/commit/354c2cc867)] - **net**: speed up BlockList.check for strings (Yagiz Nizipli) [#&#8203;66166](https://github.com/nodejs/node/pull/66166)
- \[[`995a67a5ff`](https://github.com/nodejs/node/commit/995a67a5ff)] - **net**: skip IPv6 regex when the string has no colon (Yagiz Nizipli) [#&#8203;66165](https://github.com/nodejs/node/pull/66165)
- \[[`1c7b4feebb`](https://github.com/nodejs/node/commit/1c7b4feebb)] - **node-api**: do not crash on module version mismatch (Alexey Karimov) [#&#8203;66019](https://github.com/nodejs/node/pull/66019)
- \[[`e06aa62cec`](https://github.com/nodejs/node/commit/e06aa62cec)] - **(SEMVER-MINOR)** **perf_hooks**: fix truncation of monitorEventLoopDelay() resolution (James M Snell) [#&#8203;66115](https://github.com/nodejs/node/pull/66115)
- \[[`ee126e37e8`](https://github.com/nodejs/node/commit/ee126e37e8)] - **(SEMVER-MINOR)** **perf_hooks**: allow RecordableHistogram to record 0 (James M Snell) [#&#8203;66114](https://github.com/nodejs/node/pull/66114)
- \[[`1fef8f54db`](https://github.com/nodejs/node/commit/1fef8f54db)] - **(SEMVER-MINOR)** **perf_hooks**: add histogram.diff() (James M Snell) [#&#8203;66099](https://github.com/nodejs/node/pull/66099)
- \[[`a6dfb3bcfd`](https://github.com/nodejs/node/commit/a6dfb3bcfd)] - **(SEMVER-MINOR)** **perf_hooks**: report histogram memory to V8 (James M Snell) [#&#8203;66099](https://github.com/nodejs/node/pull/66099)
- \[[`f1b9758c4e`](https://github.com/nodejs/node/commit/f1b9758c4e)] - **(SEMVER-MINOR)** **perf_hooks**: add histogram.snapshot() (James M Snell) [#&#8203;66099](https://github.com/nodejs/node/pull/66099)
- \[[`e2ae016df8`](https://github.com/nodejs/node/commit/e2ae016df8)] - **(SEMVER-MINOR)** **perf_hooks**: add histogram export format version 2 (James M Snell) [#&#8203;66098](https://github.com/nodejs/node/pull/66098)
- \[[`291d56ea3e`](https://github.com/nodejs/node/commit/291d56ea3e)] - **(SEMVER-MINOR)** **perf_hooks**: harden histogram CBOR import validation (James M Snell) [#&#8203;66098](https://github.com/nodejs/node/pull/66098)
- \[[`70c269aadc`](https://github.com/nodejs/node/commit/70c269aadc)] - **perf_hooks**: restore GC tracking after snapshot deserialization (James M Snell) [#&#8203;66097](https://github.com/nodejs/node/pull/66097)
- \[[`c545d044ee`](https://github.com/nodejs/node/commit/c545d044ee)] - **perf_hooks**: track GC callback installation natively (James M Snell) [#&#8203;66097](https://github.com/nodejs/node/pull/66097)
- \[[`0bd9905959`](https://github.com/nodejs/node/commit/0bd9905959)] - **perf_hooks**: fix PerformanceObserver observer count leaks (James M Snell) [#&#8203;66097](https://github.com/nodejs/node/pull/66097)
- \[[`8ec2a940c5`](https://github.com/nodejs/node/commit/8ec2a940c5)] - **perf_hooks**: add performanceNodeTiming.uvMetricsInfoBigInt (James M Snell) [#&#8203;66094](https://github.com/nodejs/node/pull/66094)
- \[[`829891da14`](https://github.com/nodejs/node/commit/829891da14)] - **perf_hooks**: fix truncation of uvMetricsInfo counters (James M Snell) [#&#8203;66094](https://github.com/nodejs/node/pull/66094)
- \[[`afa02fb69c`](https://github.com/nodejs/node/commit/afa02fb69c)] - **process**: use a class for nextTick resources (Matteo Collina) [#&#8203;66415](https://github.com/nodejs/node/pull/66415)
- \[[`6299b09d5c`](https://github.com/nodejs/node/commit/6299b09d5c)] - **(SEMVER-MINOR)** **process**: graduate process.ref/unref from experimental (James M Snell) [#&#8203;66213](https://github.com/nodejs/node/pull/66213)
- \[[`0965b28252`](https://github.com/nodejs/node/commit/0965b28252)] - **querystring**: speed up default parse and unescape (Yagiz Nizipli) [#&#8203;66175](https://github.com/nodejs/node/pull/66175)
- \[[`bd547c1176`](https://github.com/nodejs/node/commit/bd547c1176)] - **quic**: cleanly tear down QUIC after worker.terminate() (Tim Perry) [#&#8203;66093](https://github.com/nodejs/node/pull/66093)
- \[[`52bbf8cb15`](https://github.com/nodejs/node/commit/52bbf8cb15)] - **report**: skip unresponsive workers on process timeout (Trivikram Kamat) [#&#8203;66304](https://github.com/nodejs/node/pull/66304)
- \[[`702c744643`](https://github.com/nodejs/node/commit/702c744643)] - **sea**: add test and update docs for import() with code cache (Ali Hassan) [#&#8203;62678](https://github.com/nodejs/node/pull/62678)
- \[[`a1bfb6fcda`](https://github.com/nodejs/node/commit/a1bfb6fcda)] - **sea**: add vfsArchive to serve the assets from a ZIP archive (Matteo Collina) [#&#8203;65810](https://github.com/nodejs/node/pull/65810)
- \[[`fe76deb537`](https://github.com/nodejs/node/commit/fe76deb537)] - **sqlite**: restore connection state on reopen (Guilherme Araújo) [#&#8203;66042](https://github.com/nodejs/node/pull/66042)
- \[[`4977e51ff3`](https://github.com/nodejs/node/commit/4977e51ff3)] - **sqlite**: use cached strings for property keys (Kyungrae Kang) [#&#8203;65902](https://github.com/nodejs/node/pull/65902)
- \[[`cd16dcb82b`](https://github.com/nodejs/node/commit/cd16dcb82b)] - **sqlite**: reject plans with unusable virtual table parameters (Trivikram Kamat) [#&#8203;66215](https://github.com/nodejs/node/pull/66215)
- \[[`33caead942`](https://github.com/nodejs/node/commit/33caead942)] - **sqlite**: throw on oversized string values (Guilherme Araújo) [#&#8203;66209](https://github.com/nodejs/node/pull/66209)
- \[[`41d6707b63`](https://github.com/nodejs/node/commit/41d6707b63)] - **(SEMVER-MINOR)** **sqlite**: rename DatabaseSync and StatementSync (Guilherme Araújo) [#&#8203;65988](https://github.com/nodejs/node/pull/65988)
- \[[`583ee1ce64`](https://github.com/nodejs/node/commit/583ee1ce64)] - **sqlite**: run generator return() on cursor refilter (Trivikram Kamat) [#&#8203;66195](https://github.com/nodejs/node/pull/66195)
- \[[`b46b6996e2`](https://github.com/nodejs/node/commit/b46b6996e2)] - **sqlite**: add virtual table support via createModule() (Trevor Burnham) [#&#8203;65787](https://github.com/nodejs/node/pull/65787)
- \[[`edbff8caf1`](https://github.com/nodejs/node/commit/edbff8caf1)] - **src**: fix --process-timeout message when exit waits (Trivikram Kamat) [#&#8203;66361](https://github.com/nodejs/node/pull/66361)
- \[[`cd814e7f23`](https://github.com/nodejs/node/commit/cd814e7f23)] - **src**: remove orphaned js_udp_wrap test binding (René) [#&#8203;66399](https://github.com/nodejs/node/pull/66399)
- \[[`1e9c10b8ea`](https://github.com/nodejs/node/commit/1e9c10b8ea)] - **src**: assert that an IsolateData outlives its Environments (Shelley Vohr) [#&#8203;66239](https://github.com/nodejs/node/pull/66239)
- \[[`286bffc0a1`](https://github.com/nodejs/node/commit/286bffc0a1)] - **src**: track handle cleanup per thread, not per IsolateData (Shelley Vohr) [#&#8203;66239](https://github.com/nodejs/node/pull/66239)
- \[[`25c08fcd0d`](https://github.com/nodejs/node/commit/25c08fcd0d)] - **src**: remove `HAVE_QUIC` macro in favor of `OPENSSL_NO_QUIC` (Antoine du Hamel) [#&#8203;66373](https://github.com/nodejs/node/pull/66373)
- \[[`5eea87c561`](https://github.com/nodejs/node/commit/5eea87c561)] - **src**: fix builds without SSL and SQLite (Filip Skokan) [#&#8203;66372](https://github.com/nodejs/node/pull/66372)
- \[[`9696e47c32`](https://github.com/nodejs/node/commit/9696e47c32)] - **src**: reduce InternalCallbackScope overhead (Nigro Simone) [#&#8203;66316](https://github.com/nodejs/node/pull/66316)
- \[[`60d0aa0cd4`](https://github.com/nodejs/node/commit/60d0aa0cd4)] - **(SEMVER-MINOR)** **src**: add --process-timeout=N (James M Snell) [#&#8203;66138](https://github.com/nodejs/node…
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

author ready PRs with CI started, the required approvals, and no outstanding review comments. c++ Issues and PRs that require attention from people who are familiar with C++. commit-queue-rebase PRs the Commit Queue should land as multiple self-contained commits. lib / src Issues and PRs involving general changes in the lib/ or src/ directories. needs-ci PRs that need a full CI run.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants