Skip to content

2026-05-20, Version 26.2.0 (Current) - #63440

Merged
aduh95 merged 115 commits into
v26.xfrom
v26.2.0-proposal
May 20, 2026
Merged

2026-05-20, Version 26.2.0 (Current)#63440
aduh95 merged 115 commits into
v26.xfrom
v26.2.0-proposal

Conversation

@github-actions

@github-actions github-actions Bot commented May 19, 2026 •
edited by aduh95
Loading

Copy link
jasnell and others added 30 commits May 19, 2026 14:08
@jasnell @aduh95
quic: complete the internal implementation of QUIC
7e6b77b 
Signed-off-by: James M Snell <jasnell@gmail.com>
Assisted-by: Opencode:Opus 4.6
PR-URL: #62876
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Paolo Insogna <paolo@cowtech.it>
Reviewed-By: Robert Nagy <ronagy@icloud.com>
@Felipeness @aduh95
src: skip JS callback for settled Promise.race losers
7703f11 
When Promise.race() or Promise.any() settles, V8 fires
kPromiseResolveAfterResolved / kPromiseRejectAfterResolved for each
"losing" promise. The PromiseRejectCallback in node_task_queue.cc was
crossing into JS for these events, but since the multipleResolves
event reached EOL in v25 (PR #58707), the JS handler does nothing.

The unnecessary C++-to-JS boundary crossings accumulate references in
a tight loop, causing OOM when using Promise.race() with
immediately-resolving promises.

Return early in PromiseRejectCallback() for these two events, skipping
the JS callback entirely. Also remove the dead case branches and
unused constant imports from the JS side.

Move early returns for kPromiseResolveAfterResolved and
kPromiseRejectAfterResolved before Number::New and CHECK(!callback),
avoiding unnecessary work. Remove dead NODE_DEFINE_CONSTANT exports
and fix comment placement in the JS switch statement. Bump test
--max-old-space-size from 20 to 64 for safety on instrumented builds.

Fixes: #51452
Refs: #60184
Refs: #61960
PR-URL: #62336
Refs: #51452
Reviewed-By: Jordan Harband <ljharb@gmail.com>
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
@mertcanaltin @aduh95
src: remove unused using declarations in node_task_queue
296f907 
Signed-off-by: Mert Can Altin <mertgold60@gmail.com>
PR-URL: #63144
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
@panva @aduh95
crypto: optimize normalizeAlgorithm dispatch hot path
288065c 
Replace the O(n) case-insensitive algorithm-name scan
with an O(1) SafeMap lookup. The map is pre-built at
module init alongside kSupportedAlgorithms.

Hoist the opts object literal used in normalizeAlgorithm
to module level to avoid allocating identical
{ prefix, context } objects on every call.

Pre-compute ObjectKeys() for simpleAlgorithmDictionaries
entries at module init to avoid allocating a new keys
array on every normalizeAlgorithm call.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #62756
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
@panva @aduh95
lib: optimize webidl conversion options
9f19915 
Replace object spread in nested WebIDL conversion
options with stable-shape ordinary objects. This keeps
hot dictionary and sequence conversion paths from
allocating null-prototype spread results.

Apply the same pattern to Web Crypto converter wrappers
that override allowResizable or enable [EnforceRange].

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #62756
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
@aduh95
doc: remove list of versions in BUILDING.md
c02413d 
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: #63113
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Paolo Insogna <paolo@cowtech.it>
@panva @aduh95
crypto: improve accuracy of SubtleCrypto.supports
8fc9cb9 
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #63104
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
@marco-ippolito @aduh95
src: support multiple versions in node.config.json
12be49a 
Signed-off-by: Marco Ippolito <marcoippolito54@gmail.com>
PR-URL: #63033
Reviewed-By: Pietro Marchini <pietro.marchini94@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
@marco-ippolito @aduh95
doc: document the latest-vX.x schema
3494eae 
Signed-off-by: Marco Ippolito <marcoippolito54@gmail.com>
PR-URL: #63033
Reviewed-By: Pietro Marchini <pietro.marchini94@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
@jasnell @aduh95
quic: ignore coverage for quic files
83f0d37 
Since they aren't built by default

Signed-off-by: James M Snell <jasnell@gmail.com>
PR-URL: #63149
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
Reviewed-By: Tim Perry <pimterry@gmail.com>
@Anshikakalpana @aduh95
doc: add Hmac.digest() documentation-only deprecation (DEP0206)
20c553e 
Signed-off-by: anshikakalpana <anshikajain196872@gmail.com>
PR-URL: #63121
Refs: #62838
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
@RafaelGSS @aduh95
lib: handle --permission-audit when propagating flags
c7d27c8 
Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
PR-URL: #63047
Reviewed-By: Paolo Insogna <paolo@cowtech.it>
Reviewed-By: James M Snell <jasnell@gmail.com>
@mcollina @aduh95
sqlite: keep source database alive during backup
20f40c2 
Signed-off-by: Matteo Collina <hello@matteocollina.com>
PR-URL: #62673
Reviewed-By: Daniel Lemire <daniel@lemire.me>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Edy Silva <edigleyssonsilva@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
@joyeecheung @aduh95
module: fix sync hook short-circuit in require() in imported CJS
96f19a1 
- For imported CJS, if it's not customized by asynchronous hooks,
  make sure it won't use the quirky re-invented require in all
  cases.
- When the imported CJS module is customized by synchronous hooks,
  in the synthetic module evalutation step, avoid calling the
  respective default step again.
- Make the branching of loadCJSModuleWithModuleLoad() and
  loadCJSModuleWithSpecialRequire() more explicit, and fold
  the tentative fs read in the 'commonjs' translator into the
  share createCJSModuleWrap() helper instead of checking it
  twice in the same path.

Signed-off-by: Joyee Cheung <joyeec9h3@gmail.com>
PR-URL: #62920
Fixes: #63060
Reviewed-By: Paolo Insogna <paolo@cowtech.it>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
@panva @aduh95
crypto: reject invalid raw key imports
729274e 
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #63134
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
@panva @aduh95
crypto: harden KeyObject internal slots
8657df3 
Move KeyObject type and handle storage behind NativeKeyObject and
expose it to JS through a module-private slot reader, mirroring the
CryptoKey hardening. Cache the native slot tuple in a private field
and lazily derive secret and asymmetric metadata from the cached
KeyObjectHandle.

Update internal crypto, QUIC, and comparison callers to use private
helpers instead of public KeyObject accessors. Keep getKeyObjectSlots
restricted to internal/crypto/keys with an ESLint guard.

Add regression coverage for brand checks, hidden slots, clone and
transfer behavior, own-property reflection, and post-clone crypto
operations. Extend the CryptoKey brand test to assert getSlots is not
reachable through the public constructor or prototype chain.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #63111
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
@panva @aduh95
crypto: harden CryptoKey algorithm slots
fd509a7 
Clone CryptoKey algorithm dictionaries into null-prototype objects
before storing or caching them internally. Copy nested hash dictionaries
and publicExponent bytes so internal consumers and transferred keys do
not observe user-mutable input objects or polluted Object.prototype
fields.

Keep public algorithm and inspect output as ordinary objects. Make the
clone path check only own hash and publicExponent properties.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #63111
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
@panva @aduh95
tools: prevent lib code from reading KeyObject and CryptoKey accessors
4a32ed8 
Add ESLint rules that reject public KeyObject and CryptoKey accessor
reads after internal brand checks. Internal code must use the private
key helpers so it reads native-backed slots instead of user-replaceable
properties.

Add a separate rule that rejects instanceof checks against KeyObject
and CryptoKey constructors, including the global CryptoKey constructor.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #63111
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
@aduh95
doc: fix deprecation list in 26.0.0 changelog
9de954e 
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: #63147
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com>
@Renegade334 @aduh95
test: use ERM to destroy sqlite database handles after tests
c0175a9 
Signed-off-by: Renegade334 <contact.9a5d6388@renegade334.me.uk>
PR-URL: #63076
Refs: #63052
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Edy Silva <edigleyssonsilva@gmail.com>
@geeksilva97 @aduh95
doc,sqlite: document entryPoint argument for loadExtension
53f9a90 
Signed-off-by: geeksilva97 <edigleyssonsilva@gmail.com>
PR-URL: #63152
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
@Renegade334 @aduh95
stream: minor stream/iter implementation edits
ba7000e 
Signed-off-by: Renegade334 <contact.9a5d6388@renegade334.me.uk>
PR-URL: #63132
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
@RafaelGSS @aduh95
doc: update release steps when post-release fails
3c784ed 
Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
PR-URL: #63131
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
@jasnell @aduh95
doc: improve quic documentation
cafd766 
Signed-off-by: James M Snell <jasnell@gmail.com>
Assisted-by: Opencode:Opus 4.6
PR-URL: #63157
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com>
Reviewed-By: Tim Perry <pimterry@gmail.com>
@nodejs-github-bot @aduh95
deps: update ngtcp2 to 1.22.1
c1f6ba2 
PR-URL: #62812
Reviewed-By: James M Snell <jasnell@gmail.com>
@panva @aduh95
tls: add unsupported renegotiation error
2ba124f 
Map BoringSSL's native renegotiation failure to
ERR_TLS_RENEGOTIATION_UNSUPPORTED when TLSSocket#renegotiate() is
called. This avoids exposing an implementation-specific OpenSSL error
when the TLS backend does not support caller-initiated renegotiation.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #63161
Reviewed-By: Tim Perry <pimterry@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
@jasnell @aduh95
quic: remove unused binding variable in session.cc
2b55656 
Signed-off-by: James M Snell <jasnell@gmail.com>
PR-URL: #63177
Reviewed-By: Tim Perry <pimterry@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
@jasnell @aduh95
quic: remove unused env_ variable in session_manager.h/cc
72ab744 
Signed-off-by: James M Snell <jasnell@gmail.com>
PR-URL: #63177
Reviewed-By: Tim Perry <pimterry@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
@mokashang @aduh95
doc: clarify SEA platform support excludes darwin-x64
a3feb15 
The Platform support section of the single-executable-applications doc
listed `macOS` without qualifying which architecture is supported.
SEA on x64 macOS is not supported and is skipped in CI; only arm64
macOS is exercised.

Refs: #62893
Signed-off-by: mokashang <64570909+mokashang@users.noreply.github.com>
PR-URL: #63181
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
@aduh95
doc: fix inconsistencies in CJS code snippets
e0b1f09 
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: #63199
Reviewed-By: Jacob Smith <jacob@frende.me>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com>
trivikr added 2 commits May 19, 2026 21:55
@trivikr @aduh95
test: deflake watch mode worker test
6f3587c 
Trigger watch restarts by appending whitespace instead of rewriting
watched modules. This avoids transient empty or partial ESM dependency
contents while the restarted worker is loading.

Use a separate temporary directory for each subtest so concurrent
subtests do not share worker and dependency file names.

Signed-off-by: Kamat, Trivikram <16024985+trivikr@users.noreply.github.com>
Assisted-by: openai:gpt-5.5
PR-URL: #63384
Refs: https://github.com/nodejs/reliability/blob/main/reports/2026-05-17.md#jstest-failure
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
@trivikr @aduh95
test: avoid repeated writes in watch helper
31d89c4 
Use performFileOperation() for test runner watch updates so the
run() API path schedules a single delayed write instead of rewriting
the file until the second run completes.

Repeated writes can trigger another watch restart while the previous
rerun is still active. The runner then terminates the in-flight child
process with SIGTERM, which can make the captured output include both
a failed file-level subtest and the next successful run.

Also count only root summary duration lines when detecting completed
runs.

Signed-off-by: Kamat, Trivikram <16024985+trivikr@users.noreply.github.com>
Assisted-by: openai:gpt-5.5
PR-URL: #63386
Refs: https://github.com/nodejs/reliability/blob/main/reports/2026-05-17.md#jstest-failure
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
@nodejs-github-bot

nodejs-github-bot commented May 19, 2026

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/actions
  • @nodejs/build
  • @nodejs/crypto
  • @nodejs/ffi
  • @nodejs/gyp
  • @nodejs/performance
  • @nodejs/quic
  • @nodejs/security-wg
  • @nodejs/tsc
nodejs-github-bot added a commit that referenced this pull request May 19, 2026
@nodejs-github-bot
2026-05-20, Version 26.2.0 (Current)
f0d8c12 
Notable changes:

doc:
  * mark stream.compose stable (Matteo Collina) #62562
fs:
  * (SEMVER-MINOR) add `Temporal.Instant` support to `Stats` and `BigIntStats` (Livia Medeiros) #60789
http:
  * (SEMVER-MINOR) add writeInformation to send arbitrary 1xx status codes (Tim Perry) #63155

PR-URL: #63440
@github-actions github-actions Bot added release Issues and PRs related to Node.js releases. v26.x Issues that can be reproduced on v26.x or PRs targeting the v26.x-staging branch. labels May 19, 2026
@aduh95
aduh95 marked this pull request as ready for review May 19, 2026 22:23
@aduh95 aduh95 added the request-ci Add this label to start a Jenkins CI on a PR. label May 19, 2026
@github-actions github-actions Bot removed the request-ci Add this label to start a Jenkins CI on a PR. label May 19, 2026
@nodejs-github-bot

nodejs-github-bot commented May 19, 2026 •
edited by aduh95
Loading

Copy link
Copy Markdown
Collaborator

CI: https://ci.nodejs.org/job/node-test-pull-request/73565/
CITGM (v26.x): https://ci.nodejs.org/view/Node.js-citgm/job/citgm-smoker/3723/
CITGM (v26.2.0-proposal): https://ci.nodejs.org/view/Node.js-citgm/job/citgm-smoker/3724/
📦: https://ci-release.nodejs.org/job/iojs+release/11787/
@codecov

codecov Bot commented May 20, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 90.48843% with 111 lines in your changes missing coverage. Please review.
✅ Project coverage is 90.05%. Comparing base (e7da6f0) to head (cfd7920).
⚠️ Report is 1 commits behind head on v26.x.

Files with missing lines Patch % Lines
lib/internal/blob.js 11.26% 63 Missing ⚠️
lib/internal/fs/utils.js 90.78% 14 Missing ⚠️
lib/_http_server.js 85.45% 8 Missing ⚠️
lib/internal/crypto/util.js 87.93% 6 Missing and 1 partial ⚠️
lib/internal/crypto/keys.js 98.12% 5 Missing ⚠️
lib/internal/crypto/webidl.js 90.19% 5 Missing ⚠️
lib/internal/debugger/inspect_probe.js 97.36% 3 Missing ⚠️
lib/child_process.js 0.00% 2 Missing ⚠️
lib/ffi.js 60.00% 2 Missing ⚠️
lib/internal/debugger/inspect_helpers.js 98.46% 0 Missing and 1 partial ⚠️
... and 1 more
Additional details and impacted files 
@@            Coverage Diff             @@
##            v26.x   #63440      +/-   ##
==========================================
+ Coverage   89.68%   90.05%   +0.36%     
==========================================
  Files         712      714       +2     
  Lines      221287   225899    +4612     
  Branches    42397    42739     +342     
==========================================
+ Hits       198468   203427    +4959     
+ Misses      14648    14246     -402     
- Partials     8171     8226      +55
Files with missing lines Coverage Δ
lib/internal/crypto/aes.js 92.50% <100.00%> (+0.02%) ⬆️
lib/internal/crypto/cfrg.js 94.90% <100.00%> (+0.03%) ⬆️
lib/internal/crypto/chacha20_poly1305.js 98.42% <100.00%> (ø)
lib/internal/crypto/diffiehellman.js 97.94% <100.00%> (+0.01%) ⬆️
lib/internal/crypto/ec.js 95.63% <100.00%> (+0.02%) ⬆️
lib/internal/crypto/hkdf.js 96.06% <100.00%> (+0.02%) ⬆️
lib/internal/crypto/mac.js 98.98% <100.00%> (+<0.01%) ⬆️
lib/internal/crypto/ml_dsa.js 97.56% <100.00%> (+0.01%) ⬆️
lib/internal/crypto/ml_kem.js 94.69% <100.00%> (+0.03%) ⬆️
lib/internal/crypto/rsa.js 94.39% <100.00%> (+0.03%) ⬆️
... and 89 more

... and 28 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
samuel871211 and others added 9 commits May 20, 2026 10:00
@samuel871211 @aduh95
doc: update http2's push and trailers events with rawHeaders param
c31f320 
Signed-off-by: Yu-Sheng Chen <samuel871211@gmail.com>
PR-URL: #63259
Reviewed-By: Tim Perry <pimterry@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
@ovflowd @aduh95
doc: remove the bi-monthly contributor spotlight section
da05065 
PR-URL: #62734
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
@joao-oliveira-softtor @aduh95
doc: fix article usage before vowel-sound acronyms
cf6cbbd 
Several prose references to HTTP, HTTPS, SSL, HPE_HEADER_OVERFLOW
and ECMAScript used the article "a" where the acronym starts with
a vowel sound and should take "an". The rule is based on
pronunciation, not spelling: HTTP is read "aitch-tee-tee-pee",
SSL is read "ess-es-el", ECMAScript is read "ek-mah-script",
and HPE is read "aitch-pee-ee" — all starting with a vowel sound.

Affected files:

* doc/api/crypto.md — "disable a SSL 3.0/TLS 1.0 vulnerability"
* doc/api/http.md — five occurrences ("a HTTP '400 Bad Request'",
  "a HTTP '431 Request Header Fields Too Large'", "a HTTP/1.1 102
  Processing message", two copies of "use a HTTP parser") plus
  two references to "a HPE_HEADER_OVERFLOW"
* doc/api/http2.md — two code-sample comments reading
  "// Detects if it is a HTTPS request or HTTP/2"
* doc/api/module.md — "compiles a CommonJS, a ECMAScript Module,
  or a TypeScript module" (only the middle article changes; the
  adjacent "a CommonJS" and "a TypeScript" are both correct)
* doc/api/tls.md — two references to "part of a SSL/TLS handshake"
  in tlsSocket.getFinished() and tlsSocket.getPeerFinished()

No behavior changes, documentation only.

Signed-off-by: João Victor Oliveira <joao.oliveira@softtor.com.br>
PR-URL: #62696
Reviewed-By: Aviv Keller <me@aviv.sh>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Akhil Marsonya <akhil.marsonya27@gmail.com>
Reviewed-By: Jacob Smith <jacob@frende.me>
@trivikr @aduh95
test: deflake connection refused proxy tests
a6d6d51 
Use 127.0.0.1:10, matching existing refused-connection tests, instead
of binding and releasing an ephemeral port that can be reused before
the child process connects.

Clear NO_PROXY and no_proxy so local proxy bypass settings do not skip
the proxy connection attempt.

Signed-off-by: Kamat, Trivikram <16024985+trivikr@users.noreply.github.com>
Assisted-by: openai:gpt-5.5
PR-URL: #63395
Refs: https://github.com/nodejs/reliability/blob/main/reports/2026-05-15.md#jstest-failure
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
@trivikr @aduh95
test: disable Maglev in near-heap-limit worker test
c694999 
The test expects the worker to run out of memory during startup while
creating the message port. With Maglev enabled, the tiny worker heap
can be exhausted earlier while generating deoptimization data, which
changes the failure mode.

Disable Maglev so the induced OOM reaches the path covered by the test.

Signed-off-by: Kamat, Trivikram <16024985+trivikr@users.noreply.github.com>
Assisted-by: openai:gpt-5.5
PR-URL: #63398
Refs: https://github.com/nodejs/reliability/blob/main/reports/2026-05-18.md#jstest-failure
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Richard Lau <richard.lau@ibm.com>
@nodejs-github-bot @aduh95
meta: move one or more collaborators to emeritus
771afd6 
PR-URL: #63402
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
Reviewed-By: Debadree Chatterjee <debadree333@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
@aduh95
doc: fix promise nomenclature in stream_iter.md
b2ec188 
Signed-off-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
PR-URL: #63406
Reviewed-By: René <contact.9a5d6388@renegade334.me.uk>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
@Renegade334 @aduh95
doc: remove unsupported template type from v8.md
7b8767e 
Signed-off-by: Renegade334 <contact.9a5d6388@renegade334.me.uk>
PR-URL: #63410
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
@aduh95
2026-05-20, Version 26.2.0 (Current)
cfd7920 
Notable changes:

doc:
  * mark `stream.compose` stable (Matteo Collina) #62562
fs:
  * (SEMVER-MINOR) add `Temporal.Instant` support to `Stats` and `BigIntStats` (Livia Medeiros) #60789
http:
  * (SEMVER-MINOR) add `writeInformation` to send arbitrary 1xx status codes (Tim Perry) #63155

PR-URL: #63440
@aduh95
aduh95 force-pushed the v26.2.0-proposal branch from f0d8c12 to cfd7920 Compare May 20, 2026 08:01
@nodejs-github-bot

nodejs-github-bot commented May 20, 2026 •
edited by aduh95
Loading

Copy link
Copy Markdown
Collaborator

CI: https://ci.nodejs.org/job/node-test-pull-request/73572/
📦: https://ci-release.nodejs.org/job/iojs+release/11790/
@nodejs-github-bot

nodejs-github-bot commented May 20, 2026

Copy link
Copy Markdown
Collaborator

CI: https://ci.nodejs.org/job/node-test-pull-request/73575/
aduh95 added a commit that referenced this pull request May 20, 2026
@aduh95
2026-05-20, Version 26.2.0 (Current)
d955896 
Notable changes:

doc:
  * mark `stream.compose` stable (Matteo Collina) #62562
fs:
  * (SEMVER-MINOR) add `Temporal.Instant` support to `Stats` and `BigIntStats` (Livia Medeiros) #60789
http:
  * (SEMVER-MINOR) add `writeInformation` to send arbitrary 1xx status codes (Tim Perry) #63155

PR-URL: #63440
@aduh95
aduh95 merged commit cfd7920 into v26.x May 20, 2026
65 of 66 checks passed
@aduh95
aduh95 deleted the v26.2.0-proposal branch May 20, 2026 13:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release Issues and PRs related to Node.js releases. v26.x Issues that can be reproduced on v26.x or PRs targeting the v26.x-staging branch.