AI-generated editorial illustration; not a documentary photograph.
Node.js 26.10.0 was published on September 22, 2026, as a Current release with new capabilities across cryptography, filesystem access, networking, performance measurement and utilities. The update also includes fixes spanning streams, HTTP/2, QUIC, SQLite, process management and the runtime’s build tooling.
Cryptography And Native Libraries
The release adds crypto.parsePKCS12(), giving applications a Node.js API for parsing PKCS#12 data. Its cryptography work also updates provider-based handling for RSA, elliptic-curve keys, ciphers and key derivation, while Web Cryptography gains Hybrid KEM support. Separately, ffi can load libraries from a mounted virtual file system.
Filesystem, Networking And SQLite
Node.js 26.10.0 introduces openAsBlobSync and allows net.BoundSocket objects to be sent to threads and child processes. SQLite behavior also changes so undefined values are bound to NULL, while invalid URL paths now produce an exception instead of aborting. The release notes include additional fixes for file copying, read-only file removal on Windows and socket lifecycle behavior.
New Measurement And Utility APIs
The perf_hooks module gains SlidingWindowHistogram and qrde analysis support in Histogram. The util module adds throttle and debounce, and util.markPromiseAsHandled is introduced in the runtime and library layers. The project also expanded histogram test coverage and added tests around the new utility behavior.
Broad Fix Set
Beyond the feature additions, the release contains corrections for stream iteration, Web Streams cancellation, HTTP/2 callbacks, QUIC cleanup and timeout handling, inspector crashes, AbortSignal.any() propagation and snapshot-blob edge cases. Build and tooling changes include OpenSSL warning handling, Python 3.13 updates and several dependency and CodeQL workflow updates.
Source: Node.js 26.10.0 (Current)

Leave a Reply