Node.js 26.8.2 updates Undici, OpenSSL and npm

Node.js 26.8.2 (Current) was published on 9 September 2026, prepared by release manager Antoine du Hamel.

The release refreshes several bundled dependencies. Undici moves to 8.10.2, OpenSSL to 3.5.8, npm to 11.19.1, corepack to 0.36.0, simdjson to 4.6.9, perfetto to 58.2 and zlib to 1.3.2.1-motley-5eb4d7e. A corresponding test change accounts for varied OpenSSL CCM final behaviours introduced by the OpenSSL upgrade.

On the API side, the internal Server.prototype._listen2 method in node:net is now documentation-deprecated. A meta change by James M Snell refines the project's security vulnerability posture for experimental features.

Build work includes riscv64 fixes by Stewart X Addison, correct default flags and skipping dockit on that architecture. NODE_ARCH is now derived from target_cpu in the GN build. On Windows, the LTO parallelisation limit was removed.

The remaining commits are maintenance: documentation fixes and clarifications, internal binding typings, test deflaking across platforms, and CI tooling updates. Installers and binaries for Windows, macOS, Linux, AIX and source are available from nodejs.org.