nvm 0.40.7

Breaking: nvm 0.40.7 is here. The Node Version Manager shipped its latest patch release on August 18, 2026 — a robustness-focused update for anyone who installs Node through nvm.

What Changed

• Concurrent installs serialized — nvm install now serializes simultaneous installs of the same version, so parallel shells no longer fight over the same download.
• New escape hatch — the NVM_NO_SOURCE_FALLBACK environment variable disables the source-fallback path in nvm install when you want binary-only installs.
• Broken installs rejected — nvm now rejects structurally broken installed versions instead of half-using them.
• Atomic extraction — nvm_install_binary_extract replaces a broken version directory atomically, eliminating partial-state corruption.

Hardening

The biggest under-the-hood win: install.sh no longer uses eval in nvm_download, so arguments aren't re-parsed by the shell. Fewer quoting footguns, cleaner installs.

Docs & Tests

Docs link every referenced person and project to its canonical page, the markdown-link-check dev dependency is updated, and the install_nvm_from_git test no longer fails when master sits at the latest release tag.

Upgrade with curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.7/install.sh | bash.