An Experimental 'Green Threads' Implementation for Node — James has opened a PR that adds a new, lightweight kind of worker that shares a small pool of OS threads, with each worker getting its own V8 isolate (but no Node APIs). His numbers show a thousand of them using about 1GB of memory vs 6.7GB for regular worker threads. Early days, but a promising idea that deserves feedback.

James M Snell

Debug Errors and Agents Faster: Sentry Changelog Live — A walkthrough of what’s new for debugging errors and performance issues, including fixing production bugs with Seer and tracing the agents you build. Live Q&A. Nov 18, 10am PT. Save your spot.

Sentry sponsor

🔒 This Week's Node.js Security Releases — Node v26.13.1, v24.22.3 and v22.23.5 patch a lot of HTTP/2 and TLS flaws, plus others in zlib and the permission model (seven are rated 'high' in severity). The worst bug can allow a remote client to read memory belonging to other connections. v26 and v24 also get last week's Undici fixes.

The Node.js Project

What's New in Node.js 27 — The co-author of Node.js Design Patterns has put together an example-led tour of the latest (alpha) Node release, going from the new iterator helpers and promise-based node:net/promises API to the now-unflagged virtual file system, plus the v27 breaking changes to get prepared for.

Luciano Mammino

How X is Rebuilding Its Web App on Fastify and Node 26 — X is replacing three servers with one built on Fastify and Platformatic Watt, running worker threads on Node 26. Yagiz covers the streaming architecture, the event loop stalls they had to fix, and how it's making X faster on the Web.

Yagiz Nizipli (X Engineering)

Keep Your CI Workflow While Upgrading the Runner at Half the Cost — Switch to a WarpBuild runner in your Node job and see faster builds. Try it with $50 in free credits using START50.

WarpBuild sponsor

A Malicious npm Release, Published via Trusted Publishing — A tour of the process and code behind the recent hijacking of Ethersphere's bee-js release process and how a backdoored version was published with valid provenance.

Socket Research Team

Your JS Error Is Lying to You — If you've ever seen "err":{} logged for an error that definitely had a message, Gábor's look into what an Error loses between creation and the log line could be helpful.

Gábor Koós

forges: One Client for GitHub, GitLab and Other Git Forges — From Nuxt's lead maintainer, this is a single typed client for working with issues, PRs, notifications, checks and webhooks across GitHub, GitLab, Bitbucket, Codeberg, Gitea, Azure DevOps and more.

Daniel Roe

AWS Emulator: An Official Local Emulator for AWS APIs — It's built in Rust, but there's now an officially supported way to point your AWS SDK or CLI at a local endpoint covering hundreds of its service interfaces. In the release post, Amazon suggests it's largely aimed at agents, while also revealing the emulator itself was built with agents (and how).

Amazon Web Services

chrome-capture: Record a Chrome Tab at 60 FPS to MP4 — A neat, compact tool you can run with npx to record a Chrome 153+ tab at high quality to an MP4 file with no ffmpeg needed.

Paul Irish

▶ I Tested Every JavaScript Runtime — A fun benchmark of the same Postgres-backed API app running on Node, Bun and Deno using each of their popular frameworks. In his tests, runtime choice made a bigger difference than framework choice. The code and full results are on GitHub too.

Arjay McCandless