--- title: "Let's go deep into Node's internals" publication: "Node Weekly" issue: 624 published_at: "2026-05-14" canonical_url: "https://nodeweekly.com/issues/624" --- Plus a practical look at Node 26, replacing monkey-patching with TracingChannel for APMs, and Bun adds image manipulation features. #​624 — May 14, 2026 [Read on the Web](https://nodeweekly.com/issues/624) Together with [![AppSignal logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,e_trim,w_700,h_120/e_make_transparent/co_white,e_outline:7/lme8p344dw1aodshz9px.png)](https://www.appsignal.com/?variant=treatment&utm_source=newsletter&utm_medium=paid&utm_campaign=nodeweekly&utm_term=5-14&utm_content=primary) ![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/lpxoo7odk9dmyhontiqg.jpg)](https://www.thenodebook.com/) 📗 [NodeBook: An Advanced Guide to Node.js Internals](https://www.thenodebook.com/) — Volume I of this in-depth guide is now complete with eight chapters of advanced material covering topics like [event loop internals](https://www.thenodebook.com/node-arch/event-loop-intro#what-the-nodejs-event-loop-does), [what V8 does](https://www.thenodebook.com/node-arch/v8-engine-intro), [buffer allocation](https://www.thenodebook.com/buffers/allocation-patterns), [streams](https://www.thenodebook.com/streams/foundation-of-streams), [module resolution](https://www.thenodebook.com/modules/resolution-algorithm), [async/await](https://www.thenodebook.com/async-patterns/async-await), and [the process lifecycle](https://www.thenodebook.com/node-arch/node-process-lifecycle). Ishtmeet Singh 💡 Ishtmeet is now working on Volume II focusing on network I/O and APIs. [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/e487e54d.png)](https://www.appsignal.com/?variant=treatment&utm_source=newsletter&utm_medium=paid&utm_campaign=nodeweekly&utm_term=5-14&utm_content=primary) [Plug Claude or Cursor into Your Node App's Production Errors](https://www.appsignal.com/?variant=treatment&utm_source=newsletter&utm_medium=paid&utm_campaign=nodeweekly&utm_term=5-14&utm_content=primary) — AppSignal's MCP server feeds your AI editor the error, stack trace, and deploy context. AI drafts the fix. You review and ship. [Free 30-day trial](https://www.appsignal.com/?variant=treatment&utm_source=newsletter&utm_medium=paid&utm_campaign=nodeweekly&utm_term=5-14&utm_content=primary). AppSignal sponsor [What's New in Node.js 26](https://nodejsdesignpatterns.com/blog/whats-new-in-nodejs-26/) — We featured Node 26’s release last week, but this is a practical tour of the goodies you could easily overlook in a release that _“doesn’t look like it’s adding a ton”_. v26 goes LTS this October, so everything here is something you could be using in production by the end of the year. Luciano Mammino **IN BRIEF:** - [Node v22.22.3 (LTS)](https://nodejs.org/en/blog/release/v22.22.3) lands a _lot_ of dependency updates, `npm` v10.9.8, and backports numerous V8 fixes. - [Jest 30.4.0](https://github.com/jestjs/jest/releases/tag/v30.4.0) is a noteworthy release for the popular testing framework as it improves ESM, Temporal and React 19 support (`require(esm)` is supported on Node 24.9+ behind a flag). - Socket has [released certified patches for `vm2`](https://socket.dev/blog/free-certified-patches-for-critical-vm2-sandbox-escape), a JavaScript sandboxing library for Node that has fallen prey to a sandbox escaping vulnerability. - _Vercel Sandbox_ now [supports Node.js 26.x.](https://vercel.com/changelog/node-js-26-x-now-available-on-vercel-sandboxes) [Fixing JavaScript Observability, One Library at a Time](https://blog.sentry.io/fixing-javascript-observability/) — The team at Sentry have been working on an approach to replace the monkey-patching that powers JavaScript APM tools with a runtime-oriented [diagnostics channel](https://nodejs.org/api/diagnostics_channel.html#diagnostics-channel)-based approach. The hard part? Getting popular packages to join in, but [it’s happening.](https://blog.sentry.io/fixing-javascript-observability/#10-merged-34-to-go-4) Abdelrahman Awad (Sentry) [Your Recursion is Lying to You](https://blog.gaborkoos.com/posts/2026-05-09-Your-Recursion-Is-Lying-to-You/) — ES2015 (a.k.a. ES6) specified [tail call optimization](https://2ality.com/2015/06/tail-call-optimization.html), though V8 never shipped it. _“Tail-recursive shape does not automatically make JavaScript stack-safe.”_ Koos walks through the gap between recursive form and runtime behavior, showing off a ‘trampoline’ pattern for keeping the recursive style without the stack overflow. Gabor Koos 📄 [Using HTTP/3 Over QUIC in Node.js](https://www.jasnell.me/posts/quic-part-4) – `node:quic` is experimental, but if you want to build an HTTP/3 client or server in Node, this is a useful introduction. James M Snell 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/wbyrkh7emle4pakaf988.jpg)](https://bun.com/blog/bun-v1.3.14) [Bun v1.3.14 Adds Image Processing, HTTP/3, HTTP/2 Fetch and More](https://bun.com/blog/bun-v1.3.14) — Another mammoth Bun release. `Bun.Image` is a new built-in image processing API which can replace [Sharp](https://sharp.pixelplumbing.com/) in many cases. Bun’s package manager has added a global virtual store (akin to [pnpm’s](https://pnpm.io/global-virtual-store)), `Bun.serve` has experimental HTTP/3 over QUIC support, and `fetch` gets HTTP/2 and HTTP/3 support. Plus the usual raft of [Node.js compatibility improvements.](https://bun.com/blog/bun-v1.3.14#node-js-compatibility-improvements) Jarred Sumner [How to Send and Receive SMS Messages with Node.js and Google Cloud Run](https://developer.vonage.com/en/blog/how-to-send-and-receive-sms-messages-with-node-js-and-google-cloud-run?cmp=eml-api-api-gbl-cooperpress-prosp-news) — Deploy a containerized Node.js app to Google Cloud Run to send SMS and process inbound webhooks via Vonage Messages API. Vonage sponsor [Syncpack 15.0: Consistent Dependency Versions in JS Monorepos](https://syncpack.dev/) — A CLI tool (used by Electron, Cloudflare, Vercel, and others) that finds and fixes version mismatches across your entire monorepo, and enforces version policies to avoid drift. [v15.0](https://github.com/JamieMason/syncpack/releases/tag/15.0.0) adds support for pnpm and Bun catalogs and introduces a default 1 day minimum release age cooldown. Jamie Mason [Counterfact: An OpenAPI-Driven API Simulator](https://counterfact.dev/) — Point it at an OpenAPI spec and get a live, stateful Node server with typed handlers, hot reload, and a REPL to control behavior at runtime. You can try it out in seconds with `npx`. [GitHub repo.](https://github.com/counterfact/api-simulator) Patrick McElhaney [pnpm 11.1 Adds More New Commands](https://pnpm.io/blog/releases/11.1) — `pnpm bugs` opens a package’s bug tracker in the browser, `pnpm audit signatures` verifies ECDSA registry signatures against keys, and there’s a new `gh:` prefix for installing packages from the GitHub Packages registry. Zoltan Kochan [wf: A CLI for Looking Up Web Platform Features](https://www.npmjs.com/package/web-features-cli) — A CLI tool for looking up web platform feature support, bugs, and docs, from Microsoft's [Patrick Brosset](https://patrickbrosset.com/). You can install and run it as `wf` _or_ use `npx` for ad hoc use, e.g.: `npx web-features-cli "fetch api" -a` Patrick Brosset (Microsoft) 📰 Classifieds ⚡[Clerk API Keys are now GA](https://go.clerk.com/0aQAcGu). Let your users create credentials that delegate access to your app's API — verify server-side, revoke instantly. 1K creations and 100K verifications free per month. --- ⚙️ [Middleware, but for AI agents](https://agentfield.ai/github/?utm_source=node&utm_medium=newsletter&utm_campaign=node-260514&utm_id=node-260514-github-cta&utm_content=github-cta). Compose Claude Code, Codex & Gemini as one TypeScript harness — 100+ agent recipes:[agentfield.ai/github](http://agentfield.ai/github) 📢 Elsewhere in the ecosystem - [zero-native](https://zero-native.dev/) is Vercel's entry into the ecosystem of frameworks for building native JS desktop apps. It sits atop a Zig core and lets you pick between the system WebView or Chromium. It works well, but it's still early days. - [Wakaru](https://github.com/pionxzh/wakaru) is a Rust-powered tool for pulling apart minified JavaScript bundles – give it minified bundled code and get readable modules back. - A developer of an HTTPS debugging tool [reflects on switching from Electron to the Rust-based Tauri.](https://fluxzy.io/resources/blogs/electron-to-tauri-migration-fluxzy-desktop) **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ --- **Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).