Node.js 26.8.2

Node.js 26.8.2 (Current) was released on September 9, 2026, as a maintenance update to the 26 release line. The release focuses on dependency refreshes, a documentation cleanup, and one deprecation in the core networking module.

Overview

This patch ships updated OpenSSL 3.5.8, Undici 8.10.2, npm 11.19.1, and Corepack 0.36.0. The Node project also refined its security posture for experimental features, describing how vulnerabilities there are handled.

Deprecations

• node:net has deprecated Server.prototype._listen2, signalling that internal implementation details are being folded into the public listen path.

Dependency Updates

• OpenSSL upgraded to 3.5.8
• Undici upgraded to 8.10.2
• npm upgraded to 11.19.1
• Corepack updated to 0.36.0
• simdjson updated to 4.6.9, zlib refreshed, and the V8/Build toolchain received architecture fixes (notably riscv64 flag defaults)

Fixes

The release removes an outdated TLS authorization warning and corrects several documentation examples, including the fs.mkdtemp return type and async_hooks triggerAsyncId reference.

Node.js 26.8.2 is available on the official download page and via the nvm and Volta version managers.