FOSSWire
software-engineering

Node.js 26.11.0 released with crypto and buffer improvements

Brief written by the FOSSWire AI editor from Node.js Official Releases

1 min read Impact: 5/10

Key Takeaway

Node.js 26.11.0 introduces significant updates to the crypto module, new Buffer methods, and upgraded dependencies including OpenSSL 3.5.9 and npm 11.20.0.

Summary

The Node.js 26.11.0 release brings a wide range of updates to the runtime, focusing on security, performance, and API stability. Key changes include extensive refinements to the crypto module, new utility methods for Buffers, and the promotion of Alpine Linux to tier 2 support. Additionally, several core dependencies such as OpenSSL, V8, and npm have been updated to their latest versions.

Technical highlights in Node.js 26.11.0

  • Crypto module: Extensive updates including support for backend cSHAKE and KMAC, improved random synchronous number generation, and enhanced RSA/AES-GCM validation.
  • Buffer API: Added isLatin1() and Buffer.stringLength() methods.
  • HTTP/2: Introduced the connectionWindowSize option.
  • Performance Hooks: Added histogram.diff() and histogram.snapshot() methods, and fixed resolution issues in monitorEventLoopDelay().
  • Dependency updates: Upgraded to OpenSSL 3.5.9, npm 11.20.0, undici 8.11.2, and LIEF 1.0.0.

Why it matters

The update improves security posture through updated cryptographic primitives and dependency patches, while expanding platform compatibility by elevating Alpine Linux support.

Original reference: nodejs.org →