Dev · Releases
Node.js 26.8.2 updates Undici, OpenSSL and npm
Node.js 26.8.2 (Current), released 9 September 2026 by Antoine du Hamel, updates Undici to 8.10.2, OpenSSL to 3.5.8, npm to 11.19.1 and corepack to 0.36.0.
The release also deprecates the internal Server.prototype._listen2 API in node:net and refines the security posture for experimental features.
Node.js 26.8.2 (Current) was published on 9 September 2026, prepared by release manager Antoine du Hamel.
The release refreshes several bundled dependencies. Undici moves to 8.10.2, OpenSSL to 3.5.8, npm to 11.19.1, corepack to 0.36.0, simdjson to 4.6.9, perfetto to 58.2 and zlib to 1.3.2.1-motley-5eb4d7e. A corresponding test change accounts for varied OpenSSL CCM final behaviours introduced by the OpenSSL upgrade.
On the API side, the internal Server.prototype._listen2 method in node:net is now documentation-deprecated. A meta change by James M Snell refines the project's security vulnerability posture for experimental features.
Build work includes riscv64 fixes by Stewart X Addison, correct default flags and skipping dockit on that architecture. NODE_ARCH is now derived from target_cpu in the GN build. On Windows, the LTO parallelisation limit was removed.
The remaining commits are maintenance: documentation fixes and clarifications, internal binding typings, test deflaking across platforms, and CI tooling updates. Installers and binaries for Windows, macOS, Linux, AIX and source are available from nodejs.org.
Readers’ Forum
No contributions yet — open the debate.
Open the discussion
No account or password needed — just enter your e-mail and we’ll send you a one-time sign-in link. First time here? You’re set up automatically.
Your rating will be applied automatically after you sign in.
Check your inbox
We’ve sent a sign-in link to …. Open it on this device — this tab will sign you in automatically.
Nothing arrived? Check your spam folder — and mark the mail as "Not spam" so it lands in your inbox next time.