惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

J
Java Code Geeks
腾讯CDC
博客园 - 聂微东
爱范儿
爱范儿
罗磊的独立博客
P
Proofpoint News Feed
博客园 - Franky
博客园 - 三生石上(FineUI控件)
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
酷 壳 – CoolShell
酷 壳 – CoolShell
Jina AI
Jina AI
Blog — PlanetScale
Blog — PlanetScale
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
博客园 - 司徒正美
美团技术团队
MongoDB | Blog
MongoDB | Blog
WordPress大学
WordPress大学
A
About on SuperTechFans
I
InfoQ
博客园_首页
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
H
Help Net Security
Microsoft Azure Blog
Microsoft Azure Blog
G
Google Developers Blog

Help Net Security

Police arrest 10 suspected members of Black Axe cybercrime gang ShinyHunters claims it stole 1.4 million records from Udemy Sevii unveils Cyber Swarm Defense Mode to stop AI-driven attacks at scale Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research Cequence Agent Personas bring granular control and governance to enterprise AI agents NowSecure MARI gives enterprises evidence-based visibility into third-party mobile app risk The metrics killing your SOC, and what to use instead US state privacy fines reached $3.425 billion in 2025 Canada’s first SMS blaster case leads to three arrests Linux storage management tool Stratis 3.9.0 adds online encryption and cache-less pool startup TLS Connect gives SMBs a right-sized automated tool to manage TLS certificates Aptori expands its platform with autonomous offensive testing to reduce security bottlenecks Your IAM was built for humans, AI agents don’t care The AI criminal mastermind is already hiring on gig platforms 25 open-source cybersecurity tools that don’t care about your budget Product showcase: LuLu reveals unauthorized outbound connections from Mac apps Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach Users advised to drop passwords and make room for passkeys - Help Net Security Indirect prompt injection is taking hold in the wild - Help Net Security Compromised everyday devices power Chinese cyber espionage operations - Help Net Security New Cisco firewall malware can only be killed by pulling the plug - Help Net Security Meta is overhauling how you sign in, manage settings, and protect your accounts - Help Net Security Ubuntu 26.04 LTS delivers memory-safe system tools and live patching for Arm servers - Help Net Security OpenAI’s GPT-5.5 is out with expanded cybersecurity safeguards - Help Net Security AI is speeding up nation-state cyber programs - Help Net Security A study of 1,000 Android apps finds a privacy policy logging gap - Help Net Security IT spending to hit $6.31 trillion record, thanks to AI - Help Net Security Where AI in CI/CD is working for engineering teams - Help Net Security With AI's help, North Korean hackers stumbled into a near-undetectable attack - Help Net Security Hacker with a special interest in breaching sports institutions ends behind bars - Help Net Security
Node.js 26 ships with Temporal API enabled by default
Anamarija Po · 2026-05-07 · via Help Net Security

Developers managing JavaScript runtimes have a new major version to evaluate. Node.js 26.0.0 brings the long-awaited Temporal API to the platform alongside an updated V8 engine, a refreshed HTTP client, and several long-flagged removals that will require code changes in some applications.

Node.js 26

Temporal API ready for production code

Temporal, a date and time API designed to replace the aging Date object, is now available in Node.js without an experimental flag. The API offers richer handling of time zones, calendars, durations, and instants, and addresses long-standing complaints about JavaScript’s built-in date handling.

V8 jumps to 14.6, adds new language features

The bundled V8 JavaScript engine moves to version 14.6.202.33, the version shipping with Chromium 146. The upgrade introduces two TC39 proposals at the language level. The Upsert proposal adds getOrInsert() and getOrInsertComputed() methods to Map and WeakMap, simplifying the common pattern of reading a value or initializing it on first access. Iterator sequencing introduces Iterator.concat(), which joins multiple iterators into a single sequence.

NODE_MODULE_VERSION has been bumped to 147, meaning native add-ons compiled against earlier versions will need to be rebuilt.

Undici 8 powers HTTP requests

The built-in HTTP client based on Undici has been updated to version 8.0.2. The package underpins the global fetch() implementation in Node.js and handles HTTP/1.1 and HTTP/2 traffic for many applications.

Removals require code review

Several APIs that have been deprecated for multiple release cycles are now gone. http.Server.prototype.writeHeader() has been removed; applications must use writeHead(). The legacy _stream_wrap, _stream_readable, _stream_writable, _stream_duplex, _stream_transform, and _stream_passthrough modules are also removed, along with the --experimental-transform-types flag for TypeScript transformation. The crypto deprecation DEP0182 reaches end-of-life status.

Additional APIs have been promoted to runtime deprecation, including module.register(), the stream-related DEP0201, and the crypto-related DEP0203 and DEP0204. Code paths using these will now emit warnings.

Build and platform changes

Compiling Node.js from source now requires GCC 13.2 or later, and Python 3.9 is not supported in the build toolchain. Builds for AIX and IBM i now target Power 9 hardware, dropping support for older Power processors. The supported Windows SDK version moves to 11. Maglev, a V8 mid-tier optimizing compiler, is now enabled for Linux on s390x.

Other changes

The KeyObject APIs gain support for raw key formats. The bundled SQLite integration enables the Percentile extension. ICU has been updated to version 78.3, and libuv to 1.52.1. The release also includes a fix for a V8 array index hash collision tracked as CVE-2026-21717.

Binaries for Windows, macOS, Linux, AIX, and several other platforms are available from the Node.js download page.

Download: Secure Foundations for AI Workloads on AWS