Node.js retweeted
AI is finding open source bugs faster than people can fix them.
Node.js fixed a record 50 vulnerabilities this year. The bots find them, but maintainers triage, patch, and coordinate disclosure.
If your company runs on open source, fund the people keeping it secure.
nytimes.com/2026/10/28/techn…
Node.js retweeted
First @nodejs 26 'Lithium' Long Term Support release, v26.13.0, is now out. nodejs.org/en/blog/release/v…
Node.js 26 “Lithium” is now Long Term Support 🎉
v26.13.0 is out, with updates through April 2029.
Heads-up for Linux users coming from an earlier LTS: libatomic may need to be installed separately.
nodejs.org/en/blog/release/v…
Node.js retweeted
Do all security vulnerabilities need to be fixed in private?
With support from @SovereignTechFund, OpenJS is using @nodejs to test whether some vulnerabilities can be remediated faster in the open without increasing security risk.
Read more: openjsf.org/blog/sovereign-t…
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Node.js retweeted
Finding vulnerabilities is only part of open source security. Maintainers still need resources to triage, patch, and ship secure releases.
The new OpenJS Security Stewardship Program will fund researchers and maintainers, starting with Node.js.
hubs.la/Q04ykc4R0
Node.js 24.20.0 and Node.js 26.8.1 are out now. 💚
- nodejs.org/en/blog/release/v…
- nodejs.org/en/blog/release/v…
Are you a Node.js user? We want your feedback.
Tell us all about how you're using Node.js in our annual user survey. Your response helps shape our future priorities!
linuxfoundation.surveymonkey…
Node.js Interactive 2026 brought together the developers and maintainers shaping the future of Node.js. ⚡️
The event covered practical work happening across the project, including built in TypeScript support, node:test, QUIC and HTTP/3, documentation tooling, integration testing, and AI assisted development.
The conversations also highlighted an important part of building Node.js: strong testing, security, documentation, and maintainer support remain essential as the ecosystem evolves.
Read the full Node.js Interactive 2026 recap 👇
bit.ly/4gix0zB
Huge thanks to @aviv_keller for the recap.
Node.js retweeted
Missed Node.js Interactive @RenderATL?
We've got you covered will a full recap at nodejs.org/en/blog/events/no….
Node.js retweeted
We're excited for this one. The @nodejs Interactive Code and Learn workshop is happening at RenderATL this Thursday, August 13, led by our friends at Harper.
Attending @RenderATL? Join the nodejs-interactive-code-and-learn channel in Render's Discord ahead of time: discord.com/invite/cnCVB3Tgd…
There's still time to register: renderatl.com/node
Node.js retweeted
The @nodejs platform track is stacked at @nodeconfeu. @_rafaelgss on why Node 27 changes the release model, @jasnell on a common minimum Node.js subset for all runtimes, FFI crossing the native boundary, and @qard asking what if everything was JavaScript. Bologna, Sep 29-30.
Node.js retweeted
Hi from @nodejs Interactive at @RenderATL 👋 we've got talks this afternoon and tomorrow, plus a code and learn from 2-4pm on Thursday.
Schedule here: renderatl.com/schedule
Node.js retweeted
Want to contribute to @nodejs but don't know where to start?
The Node.js Interactive Code and Learn workshop at @RenderATL is this Thursday, August 13 — a hands-on session to make your first real contribution to the project, led by @harper_fast.
Join us in the nodejs-interactive-code-and-learn channel in Render's Discord: renderatl.com/discord
📣 New Node.js release 📣
Node.js 26.7.0 is out with Perfetto tracing support, STORE loaders for private keys, and `module.register()` hooks are now disposable, plus many patches.
Full changelog and download links: nodejs.org/en/blog/release/v…
Node.js 26.6.0 and 24.19.0 are out 💚
- nodejs.org/blog/release/v24.…
- nodejs.org/blog/release/v26.…
⚠️ Node.js Security Update: Updates are now available for the 26.x, 24.x, 22.x release lines.
Details: nodejs.org/en/blog/vulnerabi…
⚠️ The Node.js project will release new versions of the 26.x, 24.x, 22.x releases lines on or shortly after, Monday, July 27, 2026.
Details: nodejs.org/en/blog/vulnerabi…
The Node.js Interactive speaker lineup at RenderATL is here.
This is the program we've been building — technical talks from the people actively working on Node.js core, its ecosystem, and the tools developers ship with every day.
What's on the schedule:
→ QUIC and HTTP/3 landing in Node.js core
→ Built-in TypeScript, node:test, node:sqlite, and the Permission System in Node 26
→ Event loop diagnostics under real production load
→ MCP and spec-driven development for Node.js backends
→ The npm supply chain economy after Shai-Hulud and Axios
→ doc-kit replacing 14 years of documentation infrastructure
→ Integration testing patterns for complex Node.js systems
→ Platform engineering fundamentals for the AI era
→ SemVer build metadata as an extension point for package management
→ JavaScript governance, WinterCG, and cross-runtime interoperability
→ Open sourcing production systems sustainably
Every talk connects back to what Node.js developers are building, maintaining, and protecting right now.
Full speaker list: openjsf.org/blog/node-intera…
Join us in Atlanta: renderatl.com/node
















