Radar — Node.js

v26.7.0 — Aug 5, 2026

• Perfetto tracing support; private keys loadable through OpenSSL STORE loaders; Symbol.dispose implemented in ModuleHooks; new --test-coverage-include-all.

v26.6.0 — Aug 3, 2026

• The test runner gains context.log and a test:log event; ffi gets getCurrentEventLoop.

v24.19.0 — Aug 3, 2026

• LTS backports: blob.textStream, --experimental-import-text, TCP_KEEPINTVL/TCP_KEEPCNT, and the httpValidation option.

v26.5.1 — Jul 29, 2026

• ⚠ Security release (10 CVEs, two High: HTTP/2 RST-stream deferral, permission-model radix nodes) — same patches in 24.18.1 and 22.23.2.

v26.5.0 — Jul 8, 2026

• blob.textStream and an exposed ReadableStreamTee; new --experimental-import-text flag; TLS reports negotiated groups.

v26.4.0 — Jun 24, 2026

• Package maps land in the loader, and a minimal node:vfs subsystem appears (with node:fs/promises dispatching to mounted VFS instances).
• setKeepAlive supports TCP_KEEPINTVL/TCP_KEEPCNT; TLS gets a certificateCompression option; readFile accepts caller-supplied buffers.

v26.3.1 — Jun 18, 2026

• ⚠ Security release (10 CVEs, two High: TLS hostname normalization for server identity checks, WebCrypto cipher output-length guard) — same patches in 24.17.0 and 22.23.0.

v26.3.0 — Jun 1, 2026

• New permission.drop to shed permissions at runtime; httpValidation option configures header-value validation; Buffer.poolSize default grows to 64 KiB.