Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

The Node.js Blog offers developers insights into Node.js runtime, JavaScript ecosystem, and server-side development. Developers can learn about asynchronous programming, event-driven architecture, and building scalable web applications with Node.js, as well as explore updates, releases, and best practices from the Node.js community.

Node.js

Node.js 26.5.0 (Current) has been released with several semver-minor additions: blob.textStream() on the buffer API, a new --experimental-import-text flag for ESM, per-event-loop-iteration delay sampling in perf_hooks, ReadableStreamTee exposure on streams, and TLS negotiated group reporting. The release also includes numerous bug fixes across HTTP, crypto (rejecting small-order EdDSA points, large DH generator validation), streams (abort signal handling, WHATWG stream overhead reduction), VFS improvements, and dependency updates (undici 8.7.0, SQLite 3.53.3, V8 backports). A new releaser, Stewart X Addison, has been added with his GPG release key.

Node.js — Node.js 26.5.0 (Current)

The quietly useful one here is the text-import flag — pulling .txt/.sql/HTML template files in as first-class ESM modules instead of the <code>fs.readFileSync(new URL('./tpl.html', import.meta.url))</code> dance every ESM codebase reinvents. Because it’s a static import, bundlers can actually trace it, which kills a whole class of ‘file not found once bundled’ bugs for anyone shipping SQL or templates next to their code. Good to see it land even behind a flag.

The stream and <code>perf_hooks</code> enhancements look particularly useful for production applications.

The EdDSA small-order point rejection fix is the real headline here IMO — quietly important for crypto security. <code>--experimental-import-text</code> is one to watch too. Solid release.