Node.js: Cryptography Updates and Stream Fixes

Node.js receives significant cryptographic enhancements including JWK support for post-quantum key types ML-KEM and SLH-DSA, alongside stream handling improvements and HTTP trailer validation fixes.

Duration: PT1M58S

Episode overview

This episode is a short developer briefing from Node.js.

It explains recent repository work in plain language.

  • Show: Node.js
  • Published: 2026-04-21T00:00:00Z
  • Audio duration: PT1M58S

Transcript excerpt

This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.

Good morning, this is your Node.js development briefing for April 21st, 2026.

The nodejs-github-bot merged an automated update to nixpkgs-unstable, bringing the Nix package definitions up to date with minimal changes to the tooling configuration.

In additional commits, Filip Skokan delivered a major cryptographic enhancement, adding JWK support for ML-KEM and SLH-DSA key types. This post-quantum cryptography update touches 39 files across benchmarks, documentation, and core crypto modules, consolidating ML-DSA functionality into a new crypto_pqc module.

Stream handling received attention from two contributors. Daeyeon Jeong fixed a security issue by rejecting duplicate nested transferables in streams, resolving failing Web Platform Tests. Daijiro Wachi addressed memory leaks by ensuring cross-destruction in the duplexify implementation.

Ryuhei Shima improved HTTP reliability by adding validation that prevents calling addTrailers after response finish, fixing issue 62809. This prevents potential runtime errors in HTTP response handling.

Documentation improvements came from multiple sources. Filip Skokan corrected typos and inconsistencies in crypto and webcrypto documentation, while…

Nearby episodes from Node.js

  1. Weekly Recap - Security Hardening & HTTP Improvements
  2. HTTP Performance Updates and V8 Profiling Features
  3. Security Fixes and Crypto Improvements
  4. Inspector Stability and Test Runner Improvements
  5. Weekly Recap - Web Standards & Developer Tools
  6. API Enhancements and Infrastructure Updates
  7. Web API Standards Compliance and AIX Clang Support
  8. Weekly Recap - SQLite Integration & Test Infrastructure