Node.js✓

🔐 Node.js security updates are now available! New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues. Review the details and update your systems to stay secure. 🔗 #NodeJS #Security

RT @openjsf: Finding vulnerabilities is only part of open source security. Maintainers still need resources to triage, patch, and ship secure releases. The new OpenJS Security Stewardship Program will fund researchers and maintainers, starting with Node.js.

Node.js 24.20.0 and Node.js 26.8.1 are out now. 💚 - -

Are you a Node.js user? We want your feedback. Tell us all about how you're using Node.js in our annual user survey. Your response helps shape our future priorities!

Node.js Interactive 2026 brought together the developers and maintainers shaping the future of Node.js. ⚡️ The event covered practical work happening across the project, including built in TypeScript support, node:test, QUIC and HTTP/3, documentation tooling, integration testing, and AI assisted development. The conversations also highlighted an important part of building Node.js: strong testing, security, documentation, and maintainer support remain essential as the ecosystem evolves. Read the full Node.js Interactive 2026 recap 👇 Huge thanks to @aviv_keller for the recap.

RT @aviv_keller: Missed Node.js Interactive @RenderATL? We've got you covered will a full recap at

RT @openjsf: We're excited for this one. The @nodejs Interactive Code and Learn workshop is happening at RenderATL this Thursday, August 13, led by our friends at Harper. Attending @RenderATL? Join the nodejs-interactive-code-and-learn channel in Render's Discord ahead of time: There's still time to register:

RT @matteocollina: The @nodejs platform track is stacked at @nodeconfeu. @_rafaelgss on why Node 27 changes the release model, @jasnell on a common minimum Node.js subset for all runtimes, FFI crossing the native boundary, and @qard asking what if everything was JavaScript. Bologna, Sep 29-30.

RT @openjsf: Hi from @nodejs Interactive at @RenderATL 👋 we've got talks this afternoon and tomorrow, plus a code and learn from 2-4pm on Thursday. Schedule here:

RT @openjsf: Want to contribute to @nodejs but don't know where to start? The Node.js Interactive Code and Learn workshop at @RenderATL is this Thursday, August 13 — a hands-on session to make your first real contribution to the project, led by @harper_fast. Join us in the nodejs-interactive-code-and-learn channel in Render's Discord:

📣 New Node.js release 📣 Node.js 26.7.0 is out with Perfetto tracing support, STORE loaders for private keys, and `module.register()` hooks are now disposable, plus many patches. Full changelog and download links:

Node.js 26.6.0 and 24.19.0 are out 💚 - -

⚠️ Node.js Security Update: Updates are now available for the 26.x, 24.x, 22.x release lines. Details:

⚠️ The Node.js project will release new versions of the 26.x, 24.x, 22.x releases lines on or shortly after, Monday, July 27, 2026. Details:

The Node.js Interactive speaker lineup at RenderATL is here. This is the program we've been building — technical talks from the people actively working on Node.js core, its ecosystem, and the tools developers ship with every day. What's on the schedule: → QUIC and HTTP/3 landing in Node.js core → Built-in TypeScript, node:test, node:sqlite, and the Permission System in Node 26 → Event loop diagnostics under real production load → MCP and spec-driven development for Node.js backends → The npm supply chain economy after Shai-Hulud and Axios → doc-kit replacing 14 years of documentation infrastructure → Integration testing patterns for complex Node.js systems → Platform engineering fundamentals for the AI era → SemVer build metadata as an extension point for package management → JavaScript governance, WinterCG, and cross-runtime interoperability → Open sourcing production systems sustainably Every talk connects back to what Node.js developers are building, maintaining, and protecting right now. Full speaker list: Join us in Atlanta:

RT @openjsf: OpenJS Security Update ⚠️ This quarter brought: - Node.js 26 release - major security release addressing 18 vulnerabilities - Removal of the security embargo requirement, - new LLM-assisted report classifier and web viewer for release management. - OpenJS CNA passed its one-year milestone - Ulises Gascón joined Alpha-Omega as an AI Security Engineer in Residence And more in our update blog: As always, thank you to our friends at @AlphaOmegaOSS

RT @_richard_lau_: New @nodejs 26.5.0 release

New to open source, or wondering how to get your first Node.js contribution landed and released? Check out our new first-time contributors guide, with practical tips and answers to FAQs about working with our volunteer-driven model. Welcome aboard! 🤝

Node.js 26.4.0 is out with a new `node:vfs` built-in module (behind `--experimental-vfs` flag). It also adds support for package maps, and many bug fixes, including a fix for a regression shipped with last week security release. Full changelog and download links:

RT @openjsf: 🔄 Node.js is changing how it approaches major releases. Node.js 26 will be the final release under the project’s twice-yearly…