mirrors/node
0
0 Fork 0
mirror of https://github.com/nodejs/node.git synced 2026-10-28 10:15:07 +08:00
Code Activity
49,260 Commits 74 Branches 969 Tags
v27.0.0-alpha.0.0.0-proposal
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
RafaelGSS cdf632ede5 2026-10-28, Version 27.0.0-alpha.0.0.0 (Alpha) 
Notable changes:

async_hooks:
  * (SEMVER-MAJOR) remove legacy AsyncLocalStorage implementation (Matteo Collina) https://github.com/nodejs/node/pull/63641
benchmark:
  * (SEMVER-MAJOR) protect against accidental fork bomb (James M Snell) https://github.com/nodejs/node/pull/66132
build:
  * (SEMVER-MAJOR) remove the bundled FIPS provider build (Filip Skokan) https://github.com/nodejs/node/pull/64777
  * (SEMVER-MAJOR) require OpenSSL 3 or later (Filip Skokan) https://github.com/nodejs/node/pull/64777
  * (SEMVER-MAJOR) downgrade Intel macOS support to experimental (Antoine du Hamel) https://github.com/nodejs/node/pull/65427
crypto:
  * (SEMVER-MAJOR) move DEP0093 to End-of-Life (Filip Skokan) https://github.com/nodejs/node/pull/64777
  * (SEMVER-MAJOR) remove legacy OpenSSL code paths (Filip Skokan) https://github.com/nodejs/node/pull/64777
  * (SEMVER-MAJOR) validate digest output encodings (Filip Skokan) https://github.com/nodejs/node/pull/66247
  * (SEMVER-MAJOR) validate update input encodings (Filip Skokan) https://github.com/nodejs/node/pull/66247
  * (SEMVER-MAJOR) validate inputEncoding in Cipher/Decipher update (Maruthan G) https://github.com/nodejs/node/pull/66247
  * (SEMVER-MAJOR) move DEP0198 to End-of-Life (Filip Skokan) https://github.com/nodejs/node/pull/64000
  * (SEMVER-MAJOR) move DEP0203 and DEP0204 to End-of-Life (Filip Skokan) https://github.com/nodejs/node/pull/63188
  * (SEMVER-MAJOR) reject resizable backing stores in Web Crypto buffer parameters (Filip Skokan) https://github.com/nodejs/node/pull/63925
  * (SEMVER-MAJOR) throw on uninitialized DH computeSecret (Filip Skokan) https://github.com/nodejs/node/pull/63922
  * (SEMVER-MAJOR) runtime-deprecate calling Hmac.digest() more than once (Madelyn) https://github.com/nodejs/node/pull/63624
crypto,https,tls:
  * (SEMVER-MAJOR) end OpenSSL engine support (Filip Skokan) https://github.com/nodejs/node/pull/64777
deps:
  * (SEMVER-MAJOR) update archs files for openssl-4.1.0 (Node.js GitHub Bot) https://github.com/nodejs/node/pull/66971
  * (SEMVER-MAJOR) upgrade openssl sources to openssl-4.1.0 (Node.js GitHub Bot) https://github.com/nodejs/node/pull/66971
  * (SEMVER-MAJOR) remove ncrypto legacy OpenSSL backend (Filip Skokan) https://github.com/nodejs/node/pull/64777
  * (SEMVER-MAJOR) update V8 to 15.6.75.13 (Joyee Cheung) https://github.com/nodejs/node/pull/66601
  * (SEMVER-MAJOR) update V8 to 15.5.35.20 (Joyee Cheung) https://github.com/nodejs/node/pull/66537
  * (SEMVER-MAJOR) update V8 to 15.2.124.38 (Joyee Cheung) https://github.com/nodejs/node/pull/65161
  * (SEMVER-MAJOR) upgrade npm to 12.1.0 (npm team) https://github.com/nodejs/node/pull/66212
dgram:
  * (SEMVER-MAJOR) skip the custom lookup for literal IP addresses (Ruben Bridgewater) https://github.com/nodejs/node/pull/64131
dns:
  * (SEMVER-MAJOR) do not consult hosts file in reverse lookups (Archkon) https://github.com/nodejs/node/pull/64268
  * (SEMVER-MAJOR) stop using deprecated functions in `SetServers` (Antoine du Hamel) https://github.com/nodejs/node/pull/64356
doc:
  * (SEMVER-MAJOR) remove OpenSSL 1.x references (Filip Skokan) https://github.com/nodejs/node/pull/64777
  * (SEMVER-MAJOR) update Node.js 27 official binary toolchains (Richard Lau) https://github.com/nodejs/node/pull/66377
domain:
  * (SEMVER-MAJOR) runtime-deprecate the module (Matteo Collina) https://github.com/nodejs/node/pull/65074
  * (SEMVER-MAJOR) port to AsyncLocalStorage (Matteo Collina) https://github.com/nodejs/node/pull/61095
fs:
  * (SEMVER-MAJOR) implement glob natively (Aviv Keller) https://github.com/nodejs/node/pull/65392
  * (SEMVER-MAJOR) return Buffer from mkdtemp when prefix is a Buffer (Hamid Reza Ghavami) https://github.com/nodejs/node/pull/64397
http:
  * (SEMVER-MAJOR) reject responses exceeding header limit (Matteo Collina) https://github.com/nodejs/node/pull/65010
  * (SEMVER-MAJOR) runtime deprecate instantiating without new (Yagiz Nizipli) https://github.com/nodejs/node/pull/64853
  * (SEMVER-MAJOR) increase keepAliveTimeout default to 65 seconds (Tim Perry) https://github.com/nodejs/node/pull/62782
  * (SEMVER-MAJOR) make req.headers have a null prototype (Matteo Collina) https://github.com/nodejs/node/pull/62900
  * (SEMVER-MAJOR) reject addTrailers after finish (Ryuhei Shima) https://github.com/nodejs/node/pull/62832
http2:
  * (SEMVER-MAJOR) increase default window sizes (Matteo Collina) https://github.com/nodejs/node/pull/64623
lib:
  * (SEMVER-MAJOR) deprecate _http_* (Sebastian Beltran) https://github.com/nodejs/node/pull/58535
  * (SEMVER-MAJOR) insert argv[0] at argv[1] in setDeserializeMainFunction (Daijiro Wachi) https://github.com/nodejs/node/pull/62928
  * (SEMVER-MAJOR) use `Object.freeze` to avoid defensive cloning in `SourceMap` (Daijiro Wachi) https://github.com/nodejs/node/pull/62830
  * (SEMVER-MAJOR) reject SharedArrayBuffer in Blob constructor per spec (Ali Hassan) https://github.com/nodejs/node/pull/63046
lib,src:
  * (SEMVER-MAJOR) remove `--no-experimental-websocket` CLI flag (Antoine du Hamel) https://github.com/nodejs/node/pull/65284
net:
  * (SEMVER-MAJOR) race family autoselection attempts (Matteo Collina) https://github.com/nodejs/node/pull/66229
  * (SEMVER-MAJOR) throw on multiple listen calls (Matteo Collina) https://github.com/nodejs/node/pull/64871
  * (SEMVER-MAJOR) runtime-deprecate Server.prototype._listen2 (Guilherme Araújo) https://github.com/nodejs/node/pull/64794
  * (SEMVER-MAJOR) add experimental net/promises API (Ethan Arrowood) https://github.com/nodejs/node/pull/63965
repl:
  * (SEMVER-MAJOR) use inspector over vm (Aviv Keller) https://github.com/nodejs/node/pull/64034
src:
  * (SEMVER-MAJOR) officially deprecate `node::ObjectWrap` (Anna Henningsen) https://github.com/nodejs/node/pull/63756
  * (SEMVER-MAJOR) merge `CreateEnvironment()` overloads (Anna Henningsen) https://github.com/nodejs/node/pull/63596
src, test:
src,lib:
  * (SEMVER-MAJOR) add --allow-env permission (James M Snell) https://github.com/nodejs/node/pull/66132
stream:
  * (SEMVER-MAJOR) destroy source when map iterator closes early (Y1D7NG) https://github.com/nodejs/node/pull/64264
test:
  * (SEMVER-MAJOR) fix fs write encoding coverage (Filip Skokan) https://github.com/nodejs/node/pull/66247
test,benchmark:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-only coverage (Filip Skokan) https://github.com/nodejs/node/pull/64777
test,tools:
  * (SEMVER-MAJOR) drop OpenSSL 1.x-era FIPS leftovers (Filip Skokan) https://github.com/nodejs/node/pull/64777
test_runner:
  * use AsyncLocalStorage instead of async_hooks (Matteo Collina) https://github.com/nodejs/node/pull/66795
tls:
  * (SEMVER-MAJOR) move _tls_* to end-of-life (Sebastian Beltran) https://github.com/nodejs/node/pull/60658
zlib:
  * (SEMVER-MAJOR) convert classes to modern syntax and eol DEP0184 (Yagiz Nizipli) https://github.com/nodejs/node/pull/64849

PR-URL: https://github.com/nodejs/node/pull/67062
2026-10-27 17:41:34 -03:00
.configurations
build,win: add Rust toolchain automated configuration Windows
2026-05-19 20:00:55 +00:00
.devcontainer/base
build: update devcontainer.json to use paired nix env
2026-01-19 22:34:55 +00:00
.github
doc: document the alpha release process
2026-10-26 16:32:08 +00:00
android-patches
build: update android-patches/trap-handler.h.patch
2026-01-21 11:14:23 +00:00
benchmark
test,benchmark: drop OpenSSL 1.x-only coverage
2026-10-25 22:36:32 +01:00
deps
deps: patch npm engines to accept alpha versions
2026-10-27 19:01:42 +01:00
doc
2026-10-28, Version 27.0.0-alpha.0.0.0 (Alpha)
2026-10-27 17:41:34 -03:00
lib
zlib: add raw content read methods to ZipEntry
2026-10-27 17:45:32 +00:00
src
2026-10-28, Version 27.0.0-alpha.0.0.0 (Alpha)
2026-10-27 17:41:34 -03:00
test
zlib: add raw content read methods to ZipEntry
2026-10-27 17:45:32 +00:00
tools
tools: bump remark-preset-lint-node
2026-10-27 17:31:29 +00:00
typings
crypto,https,tls: end OpenSSL engine support
2026-10-25 22:36:38 +01:00
.clang-format
Revert "build: upgrade clang-format to v18"
2024-09-18 15:58:34 +00:00
.cpplint
tools: disable some new cpplint rules before update
2025-12-02 08:03:24 +00:00
.editorconfig
tools: consolidate and simplify .editorconfig deps section
2026-04-26 19:00:37 +09:00
.gitattributes
build: fix crate vendor file checksums on windows
2026-01-11 17:39:07 +00:00
.gitignore
build,test: setup perfetto tests on windows build
2026-10-23 22:01:33 +00:00
.gitpod.yml
doc,tools: switch to @node-core/utils
2023-09-25 11:48:03 +00:00
.mailmap
meta: add Aviv Keller to .mailmap
2026-08-07 14:01:19 +00:00
.npmrc
meta: add .npmrc with ignore-scripts=true
2025-09-17 21:46:20 +00:00
.nycrc
build: fix not valid json in coverage
2024-09-30 20:27:55 +00:00
.yamllint.yaml
build: extend yamllint configuration
2022-02-14 19:09:26 +01:00
AGENTS.md
doc: fix sign-off format in AGENTS.md
2026-09-12 11:51:58 +00:00
android_configure.py
build: exit on unsupported host OS for Android
2024-05-25 07:39:56 +00:00
android-configure
build: support Python 3.15
2026-10-11 15:56:06 +00:00
BSDmakefile
build: replace which with command -v
2020-11-19 19:33:28 +01:00
BUILD.gn
build: add GN build files
2023-11-11 09:51:05 +00:00
BUILDING.md
build: remove the bundled FIPS provider build
2026-10-25 22:36:35 +01:00
CHANGELOG.md
2026-10-28, Version 27.0.0-alpha.0.0.0 (Alpha)
2026-10-27 17:41:34 -03:00
CODE_OF_CONDUCT.md
tools: avoid unnecessary escaping in markdown formatter
2021-10-31 09:36:05 -07:00
codecov.yml
build: update gcovr to 7.2 and codecov config
2024-07-27 21:52:23 +00:00
common.gypi
deps: V8: cherry-pick 785a2ea88a90
2026-10-23 10:06:18 +02:00
configure
build: support Python 3.15
2026-10-11 15:56:06 +00:00
configure.py
build: remove the bundled FIPS provider build
2026-10-25 22:36:35 +01:00
CONTRIBUTING.md
doc: document open pull request limit
2026-08-14 20:50:00 +00:00
eslint.config.mjs
meta: add a root-level AGENTS.md
2026-08-25 02:43:36 +00:00
glossary.md
doc: fix linter issues
2025-11-08 17:09:29 +00:00
GOVERNANCE.md
meta: expand on collaborator restoration process
2026-09-12 14:01:47 +00:00
LICENSE
doc: run license-builder
2026-10-07 00:21:41 +00:00
Makefile
doc: document the alpha release process
2026-10-26 16:32:08 +00:00
node.gni
build: allow linking shared dependencies in the GN build
2026-09-07 07:19:20 +00:00
node.gyp
build: remove the bundled FIPS provider build
2026-10-25 22:36:35 +01:00
node.gypi
build: require OpenSSL 3 or later
2026-10-25 22:36:29 +01:00
onboarding.md
doc: fix typo in onboarding.md
2026-08-17 01:59:52 +00:00
pyproject.toml
build: drop support for Python 3.9
2026-01-15 23:14:19 +01:00
README.md
doc: add hoondongkang as triager
2026-10-16 14:00:45 +00:00
SECURITY.md
doc: clarify node binary misuse after compromise
2026-10-07 13:36:17 +00:00
shell.nix
build: do not pass vendored headers when building against shared libs
2026-10-21 09:59:53 +02:00
tsconfig.json
tls: move _tls_* to end-of-life
2026-07-14 21:40:40 +00:00
unofficial.gni
build: derive NODE_ARCH from target_cpu in the GN build
2026-08-31 13:07:22 +00:00
vcbuild.bat
doc: document the alpha release process
2026-10-26 16:32:08 +00:00

README.md

Node.js

Node.js is an open-source, cross-platform JavaScript runtime environment.

For information on using Node.js, see the Node.js website.

The Node.js project uses an open governance model. The OpenJS Foundation provides support for the project.

Contributors are expected to act in a collaborative manner to move the project forward. We encourage the constructive exchange of contrary opinions and compromise. The TSC reserves the right to limit or block contributors who repeatedly act in ways that discourage, exhaust, or otherwise negatively affect other participants.

This project has a Code of Conduct.

Table of contents

Support

Looking for help? Check out the instructions for getting support.

Release types

Node.js follows semantic versioning.

  • Alpha: Under active development where semver-major changes are allowed. Each October, a new release line (for example, Node.js 27) branches off main and receives Alpha releases (for example, 27.0.0-alpha.0.0.0) for 6 months, then are promoted to Current (see below) each April. Alpha releases are signed, tagged, and tested through CITGM, but their API and ABI may change between releases. They are intended for library authors and CI pipelines, not for production use.
  • Current: Under active development, no semver-major changes allowed. Node.js releases a new major version once a year, in April. Releases stay Current for 6 months, then convert to LTS (see below) each October. Their ABI may change between releases. They are intended for library authors and CI pipelines, not for production use.
  • LTS: Releases under Long Term Support, with a focus on stability and security. Only changes that have been on Alpha or Current release for two weeks can be backported to a typical LTS release. Every major version becomes an LTS release, and receives 30 months of LTS support, for a total of 36 months from its first Current release to End-of-Life. LTS release lines have alphabetically-ordered code names, beginning with Node.js 4 Argon.
  • Nightly: Code from the main branch built every 24-hours when there are changes. Unlike Alpha releases, nightly builds are automated and untested. Use with caution.

Release lines up to and including Node.js 26 follow the previous schedule, where a new major version was released every 6 months and only even-numbered major versions became LTS. See the Node.js release schedule announcement for details.

For more information, see the Release README.

Download

Binaries, installers, and source tarballs are available at https://nodejs.org/en/download/.

Current and LTS releases

https://nodejs.org/download/release/

The latest directory is an alias for the latest Current release. The latest-codename directory is an alias for the latest release from an LTS line. For example, the latest-hydrogen directory contains the latest Hydrogen (Node.js 18) release.

Nightly releases

https://nodejs.org/download/nightly/

Each directory and filename includes the version (e.g., v22.0.0), followed by the UTC date (e.g., 20240424 for April 24, 2024), and the short commit SHA of the HEAD of the release (e.g., ddd0a9e494). For instance, a full directory name might look like v22.0.0-nightly20240424ddd0a9e494.

API documentation

Documentation for the latest Current release is at https://nodejs.org/api/. Version-specific documentation is available in each release directory in the docs subdirectory. Version-specific documentation is also at https://nodejs.org/download/docs/.

Verifying binaries

Download directories contain a SHASUMS256.txt.asc file with SHA checksums for the files and the releaser PGP signature.

You can get a trusted keyring from nodejs/release-keys, e.g. using curl:

curl -fsLo "/path/to/nodejs-keyring.kbx" "https://github.com/nodejs/release-keys/raw/HEAD/gpg/pubring.kbx"

Alternatively, you can import the releaser keys in your default keyring, see Release keys for commands on how to do that.

Then, you can verify the files you've downloaded locally (if you're using your default keyring, pass --keyring="${GNUPGHOME:-~/.gnupg}/pubring.kbx"):

curl -fsO "https://nodejs.org/dist/${VERSION}/SHASUMS256.txt.asc" \
&& gpgv --keyring="/path/to/nodejs-keyring.kbx" --output SHASUMS256.txt < SHASUMS256.txt.asc \
&& shasum --check SHASUMS256.txt --ignore-missing

Building Node.js

See BUILDING.md for instructions on how to build Node.js from source and a list of supported platforms.

Security

For information on reporting security vulnerabilities in Node.js, see SECURITY.md.

Contributing to Node.js

Current project team members

For information about the governance of the Node.js project, see GOVERNANCE.md.

TSC (Technical Steering Committee)

TSC voting members

TSC regular members

TSC emeriti members

TSC emeriti members

Collaborators

Emeriti

Collaborator emeriti

Collaborators follow the Collaborator Guide in maintaining the Node.js project.

Triagers

Triagers follow the Triage Guide when responding to new issues.

Release keys

Primary GPG keys for Node.js Releasers (some Releasers sign with subkeys):

You can use the keyring the project maintains at https://github.com/nodejs/release-keys/raw/refs/heads/main/gpg-only-active-keys/pubring.kbx. Alternatively, you can import them from a public key server. Have in mind that the project cannot guarantee the availability of the server nor the keys on that server.

gpg --keyserver hkps://keys.openpgp.org --recv-keys 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 # Antoine du Hamel
gpg --keyserver hkps://keys.openpgp.org --recv-keys DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 # Juan José Arboleda
gpg --keyserver hkps://keys.openpgp.org --recv-keys CC68F5A3106FF448322E48ED27F5E38D5B0A215F # Marco Ippolito
gpg --keyserver hkps://keys.openpgp.org --recv-keys 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 # Rafael Gonzaga
gpg --keyserver hkps://keys.openpgp.org --recv-keys C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C # Richard Lau
gpg --keyserver hkps://keys.openpgp.org --recv-keys 108F52B48DB57BB0CC439B2997B01419BD92F80A # Ruy Adorno
gpg --keyserver hkps://keys.openpgp.org --recv-keys 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD # Stewart X Addison
gpg --keyserver hkps://keys.openpgp.org --recv-keys A363A499291CBBC940DD62E41F10027AF002F8B0 # Ulises Gascón

See Verifying binaries for how to use these keys to verify a downloaded file.

Other keys used to sign some previous releases

The project maintains a keyring able to verify all past releases of Node.js at https://github.com/nodejs/release-keys/raw/refs/heads/main/gpg/pubring.kbx.

Security release stewards

When possible, the commitment to take slots in the security release steward rotation is made by companies in order to ensure individuals who act as security stewards have the support and recognition from their employer to be able to prioritize security releases. Security release stewards manage security releases on a rotation basis as outlined in the security release process.

License

Node.js is licensed under the MIT License.

This project also depends on external libraries that may use different open-source licenses. For a complete list of included licenses, please see the LICENSE file.

If you are contributing documentation or source changes, please ensure your additions comply with the project’s license guidelines.

View Git Blame Copy Permalink
S
Description
https://github.com/nodejs/node.git
Readme MIT, BSD-2-Clause, Apache-2.0, MIT-0, Zlib, ISC, BSD-3-Clause
2 GiB
0 Stars 0 Watchers 0 Forks
Languages
JavaScript 66.5%
C++ 22.6%
Python 7.6%
C 1.9%
HTML 0.5%
Other 0.7%