• [232f178825] - (SEMVER-MINOR) buffer: add isLatin1 (James M Snell) #66298
• [27778036de] - (SEMVER-MINOR) buffer: add Buffer.stringLength() (Matteo Collina) #66064
• [4f84c4bda2] - build, doc: move to redesign (Aviv Keller) #62045
• [6f6296fef9] - (SEMVER-MINOR) doc: promote Alpine Linux to tier 2 support (Stewart X Addison) #63737
• [e998d260d0] - (SEMVER-MINOR) http: add isValidHeaderName() and isValidHeaderValue() (James M Snell) #66334
• [7702a50e08] - (SEMVER-MINOR) http2: add connectionWindowSize option (Tim Perry) #65619
• [e06aa62cec] - (SEMVER-MINOR) perf_hooks: fix truncation of monitorEventLoopDelay() resolution (James M Snell) #66115
• [ee126e37e8] - (SEMVER-MINOR) perf_hooks: allow RecordableHistogram to record 0 (James M Snell) #66114
• [1fef8f54db] - (SEMVER-MINOR) perf_hooks: add histogram.diff() (James M Snell) #66099
• [f1b9758c4e] - (SEMVER-MINOR) perf_hooks: add histogram.snapshot() (James M Snell) #66099
• [291d56ea3e] - (SEMVER-MINOR) perf_hooks: harden histogram CBOR import validation (James M Snell) #66098
• [6299b09d5c] - (SEMVER-MINOR) process: graduate process.ref/unref to stable (James M Snell) #66213
• [41d6707b63] - (SEMVER-MINOR) sqlite: rename DatabaseSync and StatementSync (Guilherme Araújo) #65988
• [60d0aa0cd4] - (SEMVER-MINOR) src: add --process-timeout=N (James M Snell) #66138
• [f39916a7e3] - (SEMVER-MINOR) src: expose size and count in heap profile output (Ilyas Shabi) #65737
• [0b00d5ea59] - (SEMVER-MINOR) src: let embedders exempt linked bindings from the addon permission (Shelley Vohr) #66067

• [11c3d7115d] - benchmark: add implicit-framing case to http/set-header (Matteo Collina) #66420
• [168b764fec] - benchmark: add zstdCompress benchmark (James Ross) #66358
• [69182564a7] - benchmark: add a node::MakeCallback benchmark (Nigro Simone) #66316
• [12e540582f] - (SEMVER-MINOR) benchmark: add http header validator benchmark (James M Snell) #66334
• [e6abdf6b01] - benchmark: remove duplicate ffi string length direct (Donghoon Kang) #66278
• [480ca7cc55] - benchmark: fix shadowing that broke h=20 on incoming_headers benchmark (Tim Perry) #66257
• [c6bbc1b128] - benchmark: cover Web Crypto conversion costs (Filip Skokan) #66237
• [85a2e4e270] - benchmark: remove duplicate ffi add-64 benchmark (Soul Lee) #66121
• [d0a72f2c12] - buffer: fix negative index for large buffers (Hilary Asogwa) #66325
• [b7f6a66a9f] - (SEMVER-MINOR) buffer: add isLatin1 (James M Snell) #66298
• [232f178825] - (SEMVER-MINOR) buffer: add isLatin1 (James M Snell) #66298
• [f7d3d11c11] - buffer: fix odd UTF-16LE indexOf start (Yuya Inoue) #65960
• [27778036de] - (SEMVER-MINOR) buffer: add Buffer.stringLength() (Matteo Collina) #66064
• [9f1db461d2] - build: update common.gypi for z/OS (Gaby Baghdadi) #66449
• [0002037b3f] - build: update configure.py for z/OS (Gaby Baghdadi) #66449
• [a341ac460a] - build: fix vcbuild format-md install and exit (Ved Chaudhari) #66475
• [bec52d9103] - build: fix vcbuild lint skipping lint-md-build (Ved Chaudhari) #66467
• [9acdb5910c] - build: toggle doc-kit verbosity based on V (Brian Muenzenmeyer) #66293
• [6ee32f857a] - build: support LIEF 0.17.x and 1.x (Yuya Inoue) #66240
• [2248869955] - build: add clang support for pgo on macOS/Linux (Chengzhong Wu) #66136
• [49069529eb] - build: add GZIP_COMPRESSION Make variable (inoway46) #66228
• [9066d33aa2] - build: port make_temporal_zoneinfo_cpp to GYP (Antoine du Hamel) #66183
• [1f4a8fb1cb] - build: add v8_enable_temporal_systemicu (Steven R. Loomis) #65992
• [4f84c4bda2] - build, doc: move to redesign (Aviv Keller) #62045
• [a0e7141ffc] - child_process: build the default env block in one native pass (Shelley Vohr) #65325
• [9fa31096d4] - crypto: improve random synchronous number generation performance (Mert Can Altin) #66348
• [53cde9d1f8] - crypto: fix raw key export error for wrong key type (한국) #66217
• [32ba6d5ada] - crypto: use backend cSHAKE and KMAC (Filip Skokan) #66237
• [67ccff6434] - crypto: separate conversion from validation (Filip Skokan) #66237
• [ceeb37173d] - crypto: verify empty KMAC outputs (Filip Skokan) #66237
• [359b07a641] - crypto: check EC coordinate conversion results (Filip Skokan) #66237
• [e4d746c4a5] - crypto: map JWK export failures to OperationError (Filip Skokan) #66237
• [a851dda86a] - crypto: include EC public keys in PKCS8 exports (Filip Skokan) #66237
• [7f58476ed1] - crypto: use the public CryptoKey prototype (Filip Skokan) #66237
• [75870623ad] - crypto: split hybrid keys without species (Filip Skokan) #66237
• [a1bea87c6a] - crypto: report actual RSA modulus lengths (Filip Skokan) #66237
• [5e04680036] - crypto: derive Argon2 without worker threads (Filip Skokan) #66237
• [fe09120a0e] - crypto: create key usage arrays without species (Filip Skokan) #66237
• [44a2965f5f] - crypto: minimize RSA public exponent metadata (Filip Skokan) #66237
• [2f3e6dff9d] - crypto: copy derived bits without species (Filip Skokan) #66237
• [d54a2b2049] - crypto: handle PBKDF2 iteration limits (Filip Skokan) #66237
• [2ef6046f11] - crypto: reject duplicate unknown key usages (Filip Skokan) #66237
• [2e25ae4a7a] - crypto: check RSA JWK alg with SHA-3 hashes (Filip Skokan) #66237
• [0370e02e2a] - crypto: copy parameters without array species (Filip Skokan) #66237
• [e042d35ca5] - crypto: convert importKey data as a union (Filip Skokan) #66237
• [ff86606768] - crypto: copy detached parameters as empty (Filip Skokan) #66237
• [1314d277b2] - crypto: resolve supports overloads by type (Filip Skokan) #66237
• [a855a46aeb] - crypto: allow unbound SubtleCrypto.supports (Filip Skokan) #66237
• [4a72c1d690] - crypto: allow short AES-GCM IVs (Filip Skokan) #66237
• [2d84b7ed49] - crypto: validate normalized hash names (Filip Skokan) #66237
• [6bfd3924ff] - crypto: convert getRandomValues views (Filip Skokan) #66237
• [529bd18c1a] - crypto: isolate cipher job errors (Filip Skokan) #66237
• [d4af11e171] - crypto: reject short AES-KW inputs (Filip Skokan) #66237
• [78374c8af0] - crypto: match algorithm names as ASCII (Filip Skokan) #66237
• [ab9a3f2b01] - crypto: use internal random buffer bounds (Filip Skokan) #66237
• [7c9b2df87a] - crypto: use current FIPS state for availability (Filip Skokan) #66160
• [55af1dcded] - crypto: update root certificates to NSS 3.129 (Node.js GitHub Bot) #66496
• [4387cb46d2] - deps: update timezone to 2026e (Node.js GitHub Bot) #66419
• [150c96ef3f] - deps: V8: cherry-pick c795f5948568 (Aviv Keller) #66380
• [6b5ac2ab5d] - deps: update archs files for openssl-3.5.9 (Node.js GitHub Bot) #66396
• [bee7e2403c] - deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) #66396
• [7a715495f2] - deps: update lief to 1.0.0 (Node.js GitHub Bot) #66345
• [f9da04958a] - deps: update zlib to 1.3.2.1-motley-456ae73 (Node.js GitHub Bot) #66330
• [5c34dd970d] - deps: update undici to 8.11.2 (Node.js GitHub Bot) #66332
• [fdf0572cd1] - deps: update timezone to 2026d (Node.js GitHub Bot) #66333
• [6c924ee1b0] - deps: upgrade npm to 11.20.0 (npm team) #66259
• [2653b2617d] - deps: V8: backport 786c1c2d88d4 (Eliau Elkouby) #66249
• [1d68f23e08] - deps: update googletest to 4267679b6887f349f17b01ccd70c9e3483689b25 (Node.js GitHub Bot) #66145
• [c507c5ad12] - deps: V8: backport 9fb4444bfc46 (Steven R. Loomis) #65992
• [8c556ab2b6] - deps: update histogram to 0.12.0 (Node.js GitHub Bot) #66494
• [d3f55c7487] - diagnostics_channel: replace using with try-finally (Ayush Chaudhary) #64251
• [510dfd899e] - doc: update FreeEnvironment() notes for sibling Environments (Shelley Vohr) #66239
• [db2665ba17] - doc: add indexed Array.prototype properties to primordial exclusions (René) #66234
• [b692079e3a] - doc: fixup and cleanup stream/iter docs (James M Snell) #66079
• [9b191141a2] - doc: fix casing in util.markPromiseAsHandled section (Antoine du Hamel) #66206
• [8e8c9762a8] - doc: add return type to Blocklist.isBlocklist (yuki motokane) #66181
• [6c7fc98d7f] - doc: clarify Worker execArgv vs Permission Model grants (yunshingng) #66124
• [9fd0a10b1e] - doc: document iterable input for AbortSignal.any (Haram Jeong) #66123
• [c4508fd4c7] - doc: restore XadillaX to collaborators (Khaidi Chu) #66063
• [b4ad8354f0] - doc: use Type for performanceNodeTiming.uvMetricsInfo (James M Snell) #66094
• [50bc27f3c3] - doc: document the node:ffi call paths (Soul Lee) #66086
• [a74a0ee748] - doc,src,test: fix typos in code comments (Noah) #66218
• [6f6296fef9] - (SEMVER-MINOR) doc: promote Alpine Linux to tier 2 support (Stewart X Addison) #63737
• [215639d6ce] - events: fix addAbortListener for aborted signals (Lazizbek Ergashev) #65640
• [021f7d8d98] - ffi: accept safe integer numbers for 64-bit arguments (Donghoon Kang) #66197
• [53fd8e7ebb] - ffi: remove permission checks from dlclose and dlsym (Trivikram Kamat) #66426
• [fa7efaf782] - ffi: validate pointer ranges in optimized calls (Trivikram Kamat) #66371
• [11f80798ba] - ffi: throw on allocation failure in toArrayBuffer() (Trivikram Kamat) #66406
• [c65a333648] - ffi: do not abort when a Worker stops in a callback (Trivikram Kamat) #66389
• [9bdab1eca0] - ffi: reject unsafe integers as length or offset (Christian Aurich Zanettini Martins) #66216
• [343a5c2915] - ffi: fix use-after-free in PrepareFunction (Trivikram Kamat) #66368
• [51daf16244] - ffi: reject non-boolean copy arguments (Christian Aurich Zanettini Martins) #66219
• [b901b97cbf] - ffi: use type errors for invalid signatures (Donghoon Kang) #66222
• [0f6cdce998] - ffi: allocate string argument storage lazily (Soul Lee) #66178
• [ee84a36f12] - ffi: avoid memcpy() with a null pointer (Christian Aurich Zanettini Martins) #66200
• [da32c79034] - fs: keep timestamps of files skipped by cpSync (Christian Aurich Zanettini Martins) #66305
• [e7121be408] - fs: stop recursive mkdir from retrying ENOENT forever (Marco) #66340
• [99a78b0d83] - fs: fix crash on negative zero file descriptor (Christian Aurich Zanettini Martins) #65888
• [8b24247be1] - fs: validate falsy openAsBlob type option (Christian Aurich Zanettini Martins) #66125
• [e7d5352fa6] - fs: close file streams with fd 0 (greenhead) #66131
• [f38768f0fa] - fs: close fd 0 on discarded FileHandle transfer (Christian Aurich Zanettini Martins) #66095
• [6487d36873] - http: avoid dictionary-mode objects in responses (Matteo Collina) #66420
• [f8d30110b6] - http: cache parser callbacks (Matteo Collina) #66152
• [e998d260d0] - (SEMVER-MINOR) http: add isValidHeaderName() and isValidHeaderValue() (James M Snell) #66334
• [0bb98027e5] - http: avoid toLowerCase on the server hot path (Yagiz Nizipli) #66120
• [9819b0c432] - http: normalize CONNECT request paths (Efe Karasakal) #64876
• [ab93a3d51b] - http: preserve socket errors as response error causes (Khaidi Chu) #66061
• [15184e8212] - http: reduce per-request allocations in the server (Matteo Collina) #65802
• [7702a50e08] - (SEMVER-MINOR) http2: add new connectionWindowSize option (Tim Perry) #65619
• [33e4ba358b] - https: handle invalid TLS options in proxied requests (Christian Aurich Zanettini Martins) #66096
• [6f610a836b] - inspector: throw ERR_INSPECTOR_NOT_AVAILABLE without an agent (Shelley Vohr) #66239
• [697980b6fc] - inspector: fix connectToMainThread() abort without parent inspector (Shelley Vohr) #65976
• [37b3db91eb] - (SEMVER-MINOR) lib: fix stream loading bug in node:bench (James M Snell) #66114
• [46a8a5dd65] - lib: add primitive fast path to structuredClone (Guilherme Araújo) #64190
• [bec7c53400] - meta: bump github/codeql-action/analyze from 4.38.0 to 4.38.2 (dependabot[bot]) #66443
• [39d721abed] - meta: bump github/codeql-action/autobuild from 4.38.0 to 4.38.2 (dependabot[bot]) #66444
• [963804db4d] - meta: bump github/codeql-action/init from 4.38.0 to 4.38.2 (dependabot[bot]) #66446
• [5837ef8608] - meta: bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.2 (dependabot[bot]) #66447
• [d8109f9831] - meta: label permission model changes correctly (Rafael Gonzaga) #66208
• [27f20dcaea] - meta: bump codecov/codecov-action from 7.0.0 to 7.1.0 (dependabot[bot]) #66103
• [dc6ef03ab6] - module: centralize builtin exposure policies (Jungwon Sohn) #66292
• [f36efeb350] - module: avoid allocating a cache key string for every require() (Samuel Attard) #63884
• [9baea33509] - module: normalize package map paths (Hilary Asogwa) #66054
• [354c2cc867] - net: speed up BlockList.check for strings (Yagiz Nizipli) #66166
• [995a67a5ff] - net: skip IPv6 regex when the string has no colon (Yagiz Nizipli) #66165
• [1c7b4feebb] - node-api: do not crash on module version mismatch (Alexey Karimov) #66019
• [e06aa62cec] - (SEMVER-MINOR) perf_hooks: fix truncation of monitorEventLoopDelay() resolution (James M Snell) #66115
• [ee126e37e8] - (SEMVER-MINOR) perf_hooks: allow RecordableHistogram to record 0 (James M Snell) #66114
• [1fef8f54db] - (SEMVER-MINOR) perf_hooks: add histogram.diff() (James M Snell) #66099
• [a6dfb3bcfd] - (SEMVER-MINOR) perf_hooks: report histogram memory to V8 (James M Snell) #66099
• [f1b9758c4e] - (SEMVER-MINOR) perf_hooks: add histogram.snapshot() (James M Snell) #66099
• [e2ae016df8] - (SEMVER-MINOR) perf_hooks: add histogram export format version 2 (James M Snell) #66098
• [291d56ea3e] - (SEMVER-MINOR) perf_hooks: harden histogram CBOR import validation (James M Snell) #66098
• [70c269aadc] - perf_hooks: restore GC tracking after snapshot deserialization (James M Snell) #66097
• [c545d044ee] - perf_hooks: track GC callback installation natively (James M Snell) #66097
• [0bd9905959] - perf_hooks: fix PerformanceObserver observer count leaks (James M Snell) #66097
• [8ec2a940c5] - perf_hooks: add performanceNodeTiming.uvMetricsInfoBigInt (James M Snell) #66094
• [829891da14] - perf_hooks: fix truncation of uvMetricsInfo counters (James M Snell) #66094
• [afa02fb69c] - process: use a class for nextTick resources (Matteo Collina) #66415
• [6299b09d5c] - (SEMVER-MINOR) process: graduate process.ref/unref from experimental (James M Snell) #66213
• [0965b28252] - querystring: speed up default parse and unescape (Yagiz Nizipli) #66175
• [bd547c1176] - quic: cleanly tear down QUIC after worker.terminate() (Tim Perry) #66093
• [52bbf8cb15] - report: skip unresponsive workers on process timeout (Trivikram Kamat) #66304
• [702c744643] - sea: add test and update docs for import() with code cache (Ali Hassan) #62678
• [a1bfb6fcda] - sea: add vfsArchive to serve the assets from a ZIP archive (Matteo Collina) #65810
• [fe76deb537] - sqlite: restore connection state on reopen (Guilherme Araújo) #66042
• [4977e51ff3] - sqlite: use cached strings for property keys (Kyungrae Kang) #65902
• [cd16dcb82b] - sqlite: reject plans with unusable virtual table parameters (Trivikram Kamat) #66215
• [33caead942] - sqlite: throw on oversized string values (Guilherme Araújo) #66209
• [41d6707b63] - (SEMVER-MINOR) sqlite: rename DatabaseSync and StatementSync (Guilherme Araújo) #65988
• [583ee1ce64] - sqlite: run generator return() on cursor refilter (Trivikram Kamat) #66195
• [b46b6996e2] - sqlite: add virtual table support via createModule() (Trevor Burnham) #65787
• [edbff8caf1] - src: fix --process-timeout message when exit waits (Trivikram Kamat) #66361
• [cd814e7f23] - src: remove orphaned js_udp_wrap test binding (René) #66399
• [1e9c10b8ea] - src: assert that an IsolateData outlives its Environments (Shelley Vohr) #66239
• [286bffc0a1] - src: track handle cleanup per thread, not per IsolateData (Shelley Vohr) #66239
• [25c08fcd0d] - src: remove HAVE_QUIC macro in favor of OPENSSL_NO_QUIC (Antoine du Hamel) #66373
• [5eea87c561] - src: fix builds without SSL and SQLite (Filip Skokan) #66372
• [9696e47c32] - src: reduce InternalCallbackScope overhead (Nigro Simone) #66316
• [60d0aa0cd4] - (SEMVER-MINOR) src: add --process-timeout=N (James M Snell) #66138
• [12962d8eb5] - src: fix FreeEnvironment() breaking JS in sibling Environments (Shelley Vohr) #65977
• [abccf93d9f] - src: let Environments on one isolate share a cleanup hook (Shelley Vohr) #65777
• [caa7858e4c] - src: fix abort when two Environments share an IsolateData (Shelley Vohr) #65978
• [f39916a7e3] - (SEMVER-MINOR) src: expose size and count in heap profile output (Ilyas Shabi) #65737
• [de34ddcf95] - src: throw on a malformed localStorage file (Trevor Burnham) #65879
• [6651596663] - src: reserve shared_array_buffers capacity in Message::Deserialize (agape1225) #65304
• [74835eef19] - src: ensure Socket(fd) cannot bypass allow-net permission (James M Snell) #66117
• [d7c720f283] - src: add a flag to keep the embedder's wasm streaming callback (Shelley Vohr) #65690
• [68931f70d9] - src: free placeholder nodes for cppgc wrappers in MemoryTracker (Shelley Vohr) #65793
• [13dbf1923a] - src: fix task queue deadlock when built as C++23 (Shelley Vohr) #66066
• [0b00d5ea59] - (SEMVER-MINOR) src: let embedders exempt linked bindings from the addon permission (Shelley Vohr) #66067
• [158f6f78d4] - stream: share webstreams async iterator methods (Matteo Collina) #66392
• [e241cb80da] - stream: keep webstreams nil requests in fast mode (Matteo Collina) #66230
• [62187ab707] - stream: keep consumer state in fast mode (Matteo Collina) #66266
• [dcc8665f7e] - stream: fix pipeline function tail deadlock (Dayun) #65559
• [247c0274c1] - stream: skip write() checks in flowing pipe (Yagiz Nizipli) #66182
• [26102c22f2] - stream: speed up flowing pipe of buffers (Yagiz Nizipli) #66182
• [81e4ac47a3] - stream: support ArrayBufferView in Utf8Stream write() buffer mode (agape1225) #65301
• [f7f1116fc9] - stream: fill out stream/iter test coverage (James M Snell) #66079
• [dca736ba05] - stream: cleanup promise uses in stream/iter (James M Snell) #66079
• [55ef82ac0c] - stream: make classic reads wake on return/throw/abort (James M Snell) #66079
• [4e8df7ceee] - stream: correct strict pending-write behavior & cancellation (James M Snell) #66079
• [b44b8658d3] - stream: make stream/iter toWritable apply backpressure (James M Snell) #66079
• [3c9f8789c4] - stream: trim per-pipe and per-tee costs in webstreams (Matteo Collina) #66154
• [d96a80930e] - stream: update ShareImpl to retain factory abort listener (James M Snell) #66030
• [500b56774f] - stream: make Broadcast.from() only return the Broadcast (James M Snell) #66030
• [d40236c98e] - stream: ensure streamable protocols precede fast paths (James M Snell) #66030
• [cdeb53e807] - stream: have broadcast clean factory listeners on cancel (James M Snell) #66030
• [84f9031add] - stream: ensure protocol and transform accessors are called once (James M Snell) #66030
• [1c7c0f5267] - stream: make broadcast waiters use SafeSet (James M Snell) #66030
• [9b50b629a2] - stream: ensure nested async iterators are cancellation aware (James M Snell) #66030
• [a16320eb15] - stream: trim per-stream costs in webstreams (Matteo Collina) #66052
• [3a77852e34] - stream,quic: correct stream/iter writer implementations (James M Snell) #66079
• [6c5806b53c] - test: wait for ZIP source streams to close (Filip Skokan) #66429
• [4706cafc59] - test: mark worker init failure flaky on SmartOS (Filip Skokan) #66428
• [c19e2cedd2] - test: deflake process timeout report cleanup (Filip Skokan) #66428
• [1047188452] - test: split process timeout report coverage (Filip Skokan) #66428
• [430262ecb0] - test: do not hardcode V8 serialization header (Joyee Cheung) #66442
• [7b25cb811a] - test: make histogram external memory test less overfitting (Joyee Cheung) #66416
• [aead8a9019] - test: cover Environments sharing an embedder-owned isolate (Shelley Vohr) #66239
• [f63ddfafdc] - test: isolate styleText tests from the environment (Filip Skokan) #66320
• [a3ffd40d40] - test: probe cluster workers with signal 0 (Filip Skokan) #66320
• [f59117e5fd] - test: deflake watch cwd with isolation none (Filip Skokan) #66320
• [f23010d837] - test: deflake esm loader http imports (Filip Skokan) #66320
• [3f51c49ff9] - test: deflake http headers timeout keepalive (Filip Skokan) #66320
• [a5ee59cb00] - test: deflake http server mixed request timeouts (Filip Skokan) #66320
• [7c3463901f] - test: deflake inspector close connection test (Filip Skokan) #66320
• [fbdca3a120] - test: deflake debugger PID attachment and cleanup (Filip Skokan) #66320
• [534561358e] - test: deflake inspector network fetch (Filip Skokan) #66320
• [1ff8d5c2c9] - test: use correct constructor in test-sqlite-virtual-table (René) #66401
• [de797aa4b4] - test: check frame restore in CallbackScope (Nigro Simone) #66316
• [886fd32693] - test: use common.PIPE in fs.cp socket tests (Maksim Romanov) #66329
• [3c50781d10] - test: deflake fast FFI buffer tests (Filip Skokan) #66327
• [1d8f9a2bfb] - test: use Database in sqlite virtual table test (Trivikram Kamat) #66307
• [61a87a246f] - test: deflake sliding window histogram test (James M Snell) #66132
• [017ff85b82] - test: split FFI call and callback coverage (Filip Skokan) #66287
• [19d8d1992c] - test: add smoke tests for defer importing synthetic modules (Maya Lekova) #65537
• [fb3d90a986] - test: deflake test runner timeout coverage (Filip Skokan) #66255
• [cee8eb9c74] - test: deflake inspector async hook setup (Filip Skokan) #66255
• [37e9397bfe] - test: deflake debugger function name extraction (Filip Skokan) #66231
• [7b1c74eec3] - test: use spawnSync helpers in cpu-prof tests (Junhwan Choi) #65694
• [2fd51fd5d8] - test: reduce expensive crypto test variants (Filip Skokan) #66244
• [c155248f1b] - test: ensure fsPromises.watch rejects on abort (Jihwan) #65768
• [42255ab9b1] - test: avoid using promise wrapped timers (James M Snell) #66079
• [62f92a5d3d] - test: enable trace_events tests with perfetto (Chengzhong Wu) #66068
• [f2972bf10a] - test: accept ENOTEMPTY from libc++ in test-fs-rm (Shelley Vohr) #66065
• [e0d0c5d0e2] - test: use heapdump test for SecureContext memory tracking (Mert Can Altin) #64344
• [953e46789d] - test: update WPT for url to c48d58747e (Node.js GitHub Bot) #66141
• [aaa7a7aebe] - test: deflake watch mode tests (Filip Skokan) #66232
• [ee457cd306] - test: mark some tests flaky for now on riscv64 (Stewart X Addison) #65781
• [9b432e97ca] - test: deflake pummel/test-timers (Filip Skokan) #66135
• [63d32369b1] - test: update WPT for WebCryptoAPI to a6a0a0292a (Node.js GitHub Bot) #66142
• [658951021a] - test: deflake test-bench-errors (Filip Skokan) #66153
• [1be62ae8d5] - test: deflake test-http2-debug (Filip Skokan) #66151
• [b9f61ea9ab] - test: deflake test-benchmark-crypto (Filip Skokan) #66151
• [fb9aba67dd] - test: deflake long timer WPTs (Marco) #63106
• [53b3a053a2] - test: update test426-fixtures to 9ea66b466fd37e8a4050033d23b3e1480973c3d (Node.js GitHub Bot) #66493
• [ef1a602283] - test: update WPT for WebCryptoAPI to 3127c3a492 (Node.js GitHub Bot) #66492
• [d573726238] - test_runner: do not crash on stdout that mimics a v8 frame (Muhammad Faizan Uddin) #66273
• [ea2c1bbe8b] - test_runner: do not reuse a worker ID held by a running file (Vasiliy Serpokryl) #65739
• [0f0892e59c] - tls: initialize session and SNI before connecting (Steven) #65624
• [684cae7909] - tls: preserve CN name constraints with OpenSSL 4.1 (Filip Skokan) #65957
• [df96c928a2] - tools: limit checkout for lint-cpp (Yuya Inoue) #66474
• [593c96446c] - tools: limit format-cpp checkout history (Yuya Inoue) #66479
• [4251b8b1f9] - tools: share CI and benchmark build configuration (Filip Skokan) #66351
• [6948dd1232] - tools: fix nixpkgs updater script (Antoine du Hamel) #66337
• [e3f861b23e] - tools: wait for test processes instead of polling (Matteo Collina) #66432
• [14cc5877d7] - tools: avoid repeated subtree scans in must-call-assert (Yuya Inoue) #66408
• [7fb76f9554] - tools: add cache to lint-js-and-md (Antoine du Hamel) #66412
• [9015b992d0] - tools: bump brace-expansion in /tools/clang-format (dependabot[bot]) #66418
• [84db29179a] - tools: bump brace-expansion from 5.0.9 to 5.0.12 in /tools/eslint (dependabot[bot]) #66417
• [a952647d86] - tools: keep OpenSSL update PRs in draft until arch configs committed (René) #66398
• [2d3be6adf2] - tools: update gyp-next to 0.22.3 (Node.js GitHub Bot) #66397
• [5f54bc7763] - tools: fix Nix diff tools when pushing more than 1 commit (Antoine du Hamel) #66383
• [2c06236669] - tools: reduce bundle size of benchmarkTools.nix (#65388) (Antoine du Hamel) #65388
• [b10949cdca] - tools: add deps/LIEF to the ignore list of test-shared.yml (Antoine du Hamel) #66342
• [80cd5d8143] - tools: bump the doc group in /tools/doc with 4 updates (dependabot[bot]) #66295
• [aaaca48ce8] - tools: check CI availability and workload (Filip Skokan) #66280
• [0607f14c3a] - tools: enable temporal by default in Nix integration (Antoine du Hamel) #66267
• [605938efb3] - tools: reduce source tarball compression in CI (inoway46) #66228
• [0913452391] - tools: add lief to automated dependency updates (René) #66242
• [63469ca078] - tools: add resume-ci label handling (Filip Skokan) #65945
• [8e79b1fa36] - typings: wire up spawn_sync internal binding types (agape1225) #65996
• [0845991255] - typings: share AsyncWrap and HandleWrap types (Seongeun Lee) #66150
• [e90ba99def] - typings: add mksnapshot internal binding types (Seongeun Lee) #65901
• [8623a13d97] - typings: wire up quic internal binding types (agape1225) #65556
• [7202aa55a7] - url: create URLSearchParams collision map lazily (Romain Lanz) #65801
• [aff60171cd] - util: make mime parsing faster (James M Snell) #66369
• [83a1697f1c] - util: fix inspect indentation of detached DataView (Miodrag Obradovic) #66421
• [33ef1780fd] - util: show SuppressedError's error/suppressed properties on inspect (agape1225) #66159
• [dbb0e6e164] - util,assert: expose util.isPartialDeepStrictEqual() (Thomas Hunter II) #66118
• [afb61d6ca4] - vfs: make the reserved root readable through fs (Philipp Dunkel) #66140
• [83c0e30cd7] - vfs: drop --vfs-mount, pin the load mount point (Philipp Dunkel) #66162
• [9656992aff] - vfs: support recursive readdir in ZipProvider (Philipp Dunkel) #66127
• [d5b65c3b94] - vfs: validate ZipProvider parent directories (Trivikram Kamat) #65829
• [41e9ab96cd] - watch: escape quotes and backslashes in NODE_OPTIONS (Trivikram Kamat) #66363
• [17964bb699] - watch: detect files replaced via unlink and create (Marco) #63888
• [be7f637d0e] - watch: strip watch flags from NODE_OPTIONS in child process (Marco) #62143
• [6c23e21c00] - worker: discard queued messages on termination (Filip Skokan) #66354
• [ee51b0412f] - worker: serialize messages after exit (Filip Skokan) #66354
• [c2c5f4ccbe] - worker: preserve blob module URLs (Filip Skokan) #66354
• [05d533ede5] - worker: convert importScripts arguments first (Filip Skokan) #66354
• [230cd0ce43] - worker: fix postMessage overload resolution (Filip Skokan) #66354
• [78b502a565] - worker: add Symbol.toStringTag to BroadcastChannel (Lazizbek Ergashev) #65532
• [56e6a5c8d8] - worker: add Symbol.toStringTag to MessageChannel and MessagePort (Lazizbek Ergashev) #65532
• [b896580c47] - worker: remove messageerror listeners on exit (Dayun) #66075
• [19732fc576] - worker: strip types in Web Worker module entries (Hubert Walczak) #66085
• [bb3d33e610] - zlib: fix abort with decodeStrings: false (James Ross) #66359
• [9b350d80ff] - zlib: pledge input size in async zstdCompress() (James Ross) #66358
• [6c927c0009] - zlib: preserve brotli params and dictionary on reset (Xia Chao) #66157
• [54e93301a1] - zlib: reject reset after gzip/deflate emitted incomplete output (Xia Chao) #66179
• [d84b4550e5] - zlib: reject reset while a zstd frame is incomplete (Xia Chao) #66088

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.8.2/turso_cli-installer.sh | sh

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.8.2/turso_cli-installer.ps1 | iex"

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

• [improve][broker][branch-4.2] Upgrade bookkeeper to 4.17.4 (#26219)
• [fix][sec] Bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /pulsar-function-go/examples (#26231)
• [fix][sec] Bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /pulsar-function-go (#26446)
• [fix][sec] Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /pulsar-function-go (#26541)
• [fix][sec] Bump log4j2 from 2.26.0 to 2.26.1 (#26329)
• [fix][sec] Upgrade at.yawk.lz4:lz4-java to 1.11.4 (#26758)
• [fix][sec] Upgrade grpc in pulsar-function-go to 1.82.1 to fix GHSA-hrxh-6v49-42gf (#26235)
• [fix][sec] Upgrade Jackson to 2.18.10 (#26339)
• [fix][sec] Upgrade lz4-java to 1.11.1 to address CVE-2026-59949 (#26250)
• [fix][sec][branch-4.2] Upgrade BouncyCastle to 1.85 and BouncyCastle FIPS to 2.0.2 to address CVEs (#26370)
• [fix][sec][branch-4.2] Upgrade Netty to 4.1.137 to address several CVEs and bugs (#26301)
• [fix][sec][branch-4.2] Upgrade Spring to 7.0.8 (#26270)
• [fix][sec][branch-4.x] Upgrade async-http-client to 2.16.1 (#26436)
• [fix][sec][branch-4.x] Upgrade lz4-java to 1.11.2 (#26439)
• [fix][sec][branch-4.x] Upgrade Netty to 4.1.138 to address several CVEs and bugs (#26515)
• [fix][sec][branch-4.x] Upgrade Thrift to 0.24.0 (#26438)
• [fix][sec][branch-4.x] Upgrade vertx to 4.5.32 (#26437)
• [fix][build] Upgrade Conscrypt to 2.6.3 (#26660)
• [improve][zk] Upgrade ZooKeeper to 3.9.6 (#26750)
• [improve][build] Upgrade Apache Commons libraries (#26348)
• [improve][build] Upgrade Bouncy Castle libraries (#26753)
• [improve][build] Upgrade Oxia Java client to 0.9.5 (#26538)
• [improve][misc] Upgrade Conscrypt to 2.6.1 to add aarch64 native support (#26314)
• [improve][misc] Upgrade Conscrypt to 2.6.2 to restore the native library glibc baseline (#26315)
• [improve][misc] Upgrade Jetty to 12.1.12 (#26302)
• [improve][misc] Upgrade Jetty to 12.1.13 (#26738)
• [improve][misc] Upgrade log4j to 2.26.0 and slf4j to 2.0.18 (#25973)
• [improve][misc][branch-4.x] Upgrade Jackson to 2.18.11 (#26759)

• [fix][broker] Add missing bundle Prometheus metrics for extensible load manager (#26192)
• [fix][broker] Align entry filter policy checks for non-persistent topics (#26774)
• [fix][broker] Align partitioned topic truncate checks with non-partitioned topics (#26776)
• [fix][broker] Apply subscription policies to namespace and topic subscription operations (#26767)
• [fix][broker] Avoid load shedding and metadata writes from a former leader (#26253)
• [fix][broker] Avoid misleading ownership lock expiry logs during shutdown (#26633)
• [fix][broker] Bound classic Key_Shared dispatcher replay queue look-ahead (#26677)
• [fix][broker] Bound the topic deletion retries triggered by a replication cluster removal (#26432)
• [fix][broker] Cancel queued transaction snapshot recovery on topic close (#26335)
• [fix][broker] Check the original principal of proxied HTTP requests with its own authentication data (#26748)
• [fix][broker] Check topic permissions for binary GetSchema and GetOrCreateSchema (#26643)
• [fix][broker] Check topic permissions for partitions and subscriptions added to a transaction (#26644)
• [fix][broker] Debit un-acked messages only when the consumer is actually removed (#26422)
• [fix][broker] Do not log an error when the tenant does not exist (#26361)
• [fix][broker] Don't serve topic policies from a cache whose init future has not completed (#26513)
• [fix][broker] Fix assignment and ownership cleanup races in the extensible load manager (#26520)
• [fix][broker] Fix AvgShedder assignment cache keying with stable bundle names (#26246)
• [fix][broker] Fix delayed-delivery bucket merge failures when delayedDeliveryMaxNumBuckets is 1-3 (#26242)
• [fix][broker] Fix dispatcherPauseOnAckStatePersistentEnabled and schemaValidationEnforced returning wrong values when applied=true (#26472)
• [fix][broker] Fix early completion and false timeouts in SplitManager and UnloadManager (#26363)
• [fix][broker] Fix lookup permit leak when namespace policy reads fail (#26606)
• [fix][broker] Fix multi-role authorization regressions and optimize nested checks (#26551)
• [fix][broker] Fix NPE in ManagedLedgerInterceptorImpl when AppendIndexMetadataInterceptor isn't configured (#26497)
• [fix][broker] Fix ownership-generation races in OwnershipCache removeOwnership and lock-expiry cleanup (#26197)
• [fix][broker] Fix persistent throughput degradation caused by permit loss during frequent reconnects on Shared subscriptions (#26289)
• [fix][broker] Log exception in PulsarMetadataEventSynchronizer failure path (#26203)
• [fix][broker] Preserve compaction state on ledger close failure (#26665)
• [fix][broker] Preserve replicated subscription activity on activation (#26780)
• [fix][broker] Preserve topic initialization failures (#26775)
• [fix][broker] Prevent automatic TTL expiry from skipping reader messages (#26505)
• [fix][broker] Prevent Key_Shared out-of-order replay starvation at the end of topic (#26268)
• [fix][broker] Prevent NPE when the last ACK races with sticky hash reassignment (#26471)
• [fix][broker] Propagate bundle split failures to the completion future (#26735)
• [fix][broker] Release the compaction buffers and permits on flush failures (#26576)
• [fix][broker] Resolve replicator remote cluster by prefix so cluster names containing a dot work (#26451)
• [fix][broker] Send ActiveConsumerChange for non-persistent Failover subscriptions (#26482)
• [fix][broker] Spurious ERROR log for 307 redirect in getReplicatedSubscriptionStatus (#26706)
• [fix][broker] Stop reporting a deliberate ownership release as an expired resource lock (#26533)
• [fix][admin] Allow defaultNumPartitions for non-partitioned autoTopicCreation override (#25163)
• [fix][admin] Avoid creating subscriptions when peeking messages if auto-creation is disabled (#26279)
• [fix][admin] Reject empty cluster migration URL: fix inverted ClusterUrl.isEmpty() (#26473)
• [fix][ml] Close abandoned write ledger handle to prevent leak (#26585)
• [fix][ml] Fail in-flight adds when a managed ledger is terminated (#26678)
• [fix][ml] Fail queued adds when a managed ledger is terminated during a ledger rollover (#26680)
• [fix][ml] Fix batch ACK index loss when recovering cursor from MetadataStore (#26474)
• [fix][ml] Preserve cursor properties when recovering from an unreadable cursor ledger (#26512)
• [fix][ml] Preserve ledger properties when closing ledger (#26227)
• [fix][ml] Preserve ledger properties when recovering the last ledger on open (#26509)
• [fix][ml] Propagate cursor ledger deletion failures (#26734)
• [fix][ml] Reset the lazily-cached position when reusing a recycled EntryImpl (#26707)
• [fix][ml] Skip contiguous deleted ranges during reads (#26299)
• [fix][ml] Tolerate concurrent creation of the managed ledger z-node (#26247)
• [fix][ml][broker] Keep source ledger data on every shadow managed ledger trim, delete and offload path (#26746)
• [fix][offload] Cache and reuse entry offsets discovered while skipping in BlobStoreBackedReadHandleImpl (#26424)
• [fix][offload] Normalize offloader cache directory path (#26372)
• [fix][meta] Close resources when ZKMetadataStore construction fails (#26673)
• [fix][meta] Track explicitly acquired underreplicated ledger locks (#26670)
• [fix][meta][branch-4.0] Tolerate concurrent creation of the underreplication LAYOUT node (#26248)
• [improve][broker] Add configuration to enable shadow topics (#26739)
• [improve][broker] Add pulsar_subscription_storage_backlog_age_seconds metric (#26313)
• [improve][broker] Allow dynamically updating topic load timeout (#26781)
• [improve][broker] Avoid iterator allocation in BrokerInterceptors hot paths and restore configured ordering (#26462)
• [improve][broker] Change partition metadata not-found log to warn (#26381)
• [improve][broker] Conflate concurrent readMoreEntries calls (#26539)
• [improve][broker] Copy small entries into a flat buffer when prepending broker entry metadata (#26464)
• [improve][broker] Disable subscription-thread dispatch by default (#26578)
• [improve][broker] Expose interface for the replicator in ManagedLedger instead of cast the class (#26298)
• [improve][broker] Make exposing topic level metric dynamic (#21006)
• [improve][broker] Skip unused replicated subscription timestamp updates (#26655)
• [improve][broker] Support OpenID multi-role authorization and improve proxy authentication defaults (#26549)
• [fix][txn] Do not fail topic deletion when the aborted txn snapshot cannot be cleared (#26431)
• [fix][txn] Fix X-Pulsar-txn-uncommitted header semantics and add X-Pulsar-txn-consumable for peek messages (#26073)
• [fix][txn] Improve transaction admin checks (#26773)
• [fix][txn] Prevent queued snapshot writes from stalling (#26565)
• [fix][txn] Stop the pending ack replay loop from spinning forever (#26369)
• [Fix][broker]Get a fenced error when loading a topic that does not allowed the cluster to access (#26276)

• [fix][client] Apply no-memory-limit producer queue defaults at producer creation (#26342)
• [fix][client] Avoid exception in ConsumerImpl hasMessageAvailable before first receive (#25857)
• [fix][client] Complete table view refresh after applying messages (#26566)
• [fix][client] Defer op cmd release to the write event loop on send timeout (#26456)
• [fix][client] Divide the across-partitions budget only when it was set explicitly (#26384)
• [fix][client] Drop a send receipt for a removed producer, not the connection (#26618)
• [fix][client] Enable TableView compacted reads for short topic names (#26626)
• [fix][client] Fix buffer ownership on the send failure paths (#26455)
• [fix][client] Flush acknowledgment groups at the combined size limit (#26594)
• [fix][client] Keep transactional and non-transactional messages in separate batches (#26547)
• [fix][client] Prevent duplicate cleanup and leaks on producer send failures (#26641)
• [fix][client] Release connections opened after close (#26733)
• [fix][client] Release the command header when send serialization fails (#26492)
• [fix][client] Release the reserved memory only once when failing a send in a terminal state (#26476)
• [fix][client] Restore OAuth2 HTTP client after deserialization (#26325)
• [fix][client] Stop tracking ack timeouts on non-persistent topics (#26548)
• [improve][client] Avoid eager broker metadata allocation for outgoing messages (#26521)
• [improve][client] Avoid unused send-stat snapshots for default callbacks (#26519)
• [improve][client] Coalesce message listener drain scheduling (#26531)
• [fix][client] Remove the dead letter candidate entry using the entry-level message id

• [fix][fn] Allow retainKeyOrdering on Go functions (#26421)
• [fix][fn] Apply the worker connectors list checks to the deprecated functions connectors endpoint (#26745)
• [fix][fn] Bound function package downloads from BookKeeper and stop SchedulerManager.close() from hanging on a stuck scheduling round (#26556)
• [fix][fn] Check packages permission for function, source and sink package URLs (#26771)
• [fix][fn] Check produce permission on the input topic when triggering functions (#26777)
• [fix][fn] Honour negativeAckRedeliveryDelayMs in the Go function runtime (#26415)
• [fix][fn] Honour negativeAckRedeliveryDelayMs in the Python function runtime (#26413)
• [fix][fn] Honour retainOrdering and retainKeyOrdering in the Go function runtime (#26414)
• [fix][fn] Remove deprecated github.com/golang/protobuf dependency from pulsar-function-go (#26587)
• [fix][fn] Return descriptive errors for unknown JSON properties (#26441)
• [fix][fn] Validate package name components and storage paths consistently (#26768)
• [improve][fn] Standardize log4j2 Root logger configuration to use system property (#26121)

• [fix][ws] Check dead letter topic permission for WebSocket consumers (#26772)
• [fix][cli] Apply PULSAR_MEM and PULSAR_GC in bin/pulsar-perf (#26465)
• [fix][cli] Avoid inheriting broker initial heap settings in tools (#26736)
• [fix][cli] Correct admin command documentation generation (#26649)
• [fix][cli] pulsar-perf: register subcommand classes with picocli instead of instances (#26467)
• [fix][cli] Set --enable-native-access=ALL-UNNAMED for the CLI tools on Java 24+ (#26365)
• [fix][cli][branch-4.0] Don't pass unset pulsar-perf pending-message options to the producer (#26371)
• [fix][misc] Remove unnecessary " {}" suffix from log lines when there are no context attributes (#26285)
• [improve][cli] Default the pulsar-perf client memory limit to half of the JVM max direct memory (#26491)
• [improve][cli] pulsar-perf: cut latency histogram memory ~100x, fix range units and static stats state (#26466)
• [fix][Client] permit leak in chunked message discard path (#26661)
• [fix][common] Handle synchronous failures from future suppliers (#25939)
• [fix] Fix cursor deadlock when skipping non-recoverable entries during mark-delete persistence (#26570)
• [fix] Fix ManagedLedgerImpl's pendingAddEntries leak. (#25240)

• [improve][ci][branch-4.0] Upgrade GitHub Actions built-in action versions
• [fix][test] Allow for CLI startup in function integration tests (#26564)
• [fix][test] Avoid blocking common-pool workers in ledger shutdown test (#26560)
• [fix][test] Await both DLQ producers in multi-consumer test (#26561)
• [fix][test] Cover scheduler shutdown membership-lock deadlock (#26557)
• [fix][test] Fix flaky AdminApiTest caused by leaked brokerShutdownTimeoutMs (#26249)
• [fix][test] Fix flaky IsolatedBookieEnsemblePlacementPolicyTest by awaiting the initial rack config load (#26429)
• [fix][test] Fix flaky NonDurableCursorTest.subscribeToEarliestPositionWithDeferredDeletion (#26747)
• [fix][test] Fix flaky OneWayReplicatorDeduplicationTest.testDeduplication (#26737)
• [fix][test] Fix flaky RawReaderTest.testPauseAndResumeWithUnloading (#26690)
• [fix][test] Fix OneWayReplicatorSchemaValidationEnforcedTest racing the replicator's remote topic creation (#26382)
• [fix][test] Isolate mutable broker fixtures between test methods (#26563)
• [fix][test] Join assignment tailer before asserting its last message ID (#26536)
• [fix][test] Make consistent hashing consumer selection test deterministic (#26534)
• [fix][test] Preserve class loading in broker interceptor fixtures (#26567)
• [improve][ci] Configure SSH access action default and update Upterm (#26575)
• [improve][ci] Run the Python function instance tests in CI (#26399)
• [fix][build][branch-4.0] Fix Java 8 compile error in backported TableViewImplTest
• [fix][ci][branch-4.0] Use an ASF-approved docker/setup-qemu-action version
• [fix][test] Fix import order in authorization test
• [fix][test][branch-4.0] Correct transaction replay marker fixture and release assertion
• [fix][test][branch-4.0] Use branch-4.0 role claim in nested authorization checks
• [fix][test][branch-4.0] Use initialized namespace in dynamic metrics configuration test
• [fix][test][branch-4.0] Use initialized namespace in extensible load manager metrics test
• [fix][test][branch-4.2] Create the CLI test producer only once CmdProduce asks for it
• [fix][test][branch-4.x] Explicitly disable memory limit when testing pending-message defaults

For the complete list, check the full changelog.