Node Weekly
Plus a new process timeout flag, 1980s vocal synthesis and a potential future .node TLD.

#​643 — October 8, 2026

Read on the Web

📝 We're back after taking last week off – you didn't miss an issue :-) If you want one neat thing to check out today, look for the voice synth package below, it's a fun way to relive a bit of 80s nostalgia!
__
Peter Cooper, your editor

Together with  Serp API
Node.js Weekly

How Booking.com Cut the Cost of Its Biggest Node.js Service by 38% — The online travel company moved its biggest React SSR service from pm2’s process-based cluster approach to Platformatic’s Watt and worker threads, then tuned load balancing and V8’s GC to get noteworthy gains.

Ilya Malyavin (Booking.com)

100+ Search Engines. One Simple API — Build with real-time search data from Google, YouTube, Amazon, and more. SerpApi delivers structured results in JSON and Markdown for AI agents and your next app. Skip scraping headaches. Start building with a simple API.

SerpApi sponsor

Node.js 26.11.0 (Current) Released — A more substantial minor release than usual with a new --process-timeout flag that ends a process after a set time (even mid-busy-loop), node:sqlite gets virtual table support, Buffer.stringLength(), and Alpine (x64) is promoted to tier 2 support.

Antoine du Hamel

⚠️ 26.11 also rolled out the new docs design, but a bug was found that caused the docs to not render to HTML, so v26.11.1 reverts back to the old docs design for now.

IN BRIEF:

  • While we were away last week, VoidZero dropped Vite+ 1.0, its single command (vp) Node.js version, package, and frontend toolchain manager. Node's download page has already updated to offering Vite+ as an option.

  • With this commit, future releases of Node should load most ES modules synchronously, only taking the async path for top-level await, loader hooks and the like.

  • V8 15.5 has landed on Node's main branch, ahead of Node 27. A big jump from Node 26's V8 14.6.

Optimizing Objects with null Prototypes — In V8, objects created with { __proto__: null } or Object.create(null) start off in a slower ‘dictionary mode’. Creating a plain object and nulling the prototype afterwards keeps it fast, as Matteo shows.

Matteo Collina

I Tested 11 HTTP Resilience Libraries — ffetch's creator tests how a variety of fetch wrappers (like Ky, ofetch, and Wretch) handle retries, timeouts and cancellation, and where those policies interact badly.

Gabor Koos

Find Auth Gaps in Your Node APIs Before Hackers Do — SonarQube Hunter Agent hunts intent-based vulnerabilities and drops verified findings right into your issue list.

SonarSource sponsor

📄 Node.js Thread Pools on Busy Machines – Why sizing the thread pool from the CPU count backfires when other processes share the machine. Matteo Collina (Platformatic)

📄 Maintaining wait-on at Agent Speed – wait-on's new co-maintainer reflects on his first week managing things agent-style. Kevin Old

📄 How to Compile JavaScript into a Single Executable – A comparison of the Node, Bun and Deno approaches. Flavio Copes

🛠 Code & Tools

DOCX 9.9: Generate Word .docx Files from JavaScript — A comprehensive library for generating docx files. 9.8 recently added support for charts, shapes and watermarks, and 9.9 adds a way to lay out documents the way Word itself does. Homepage.

Dolan Miu

H3 v2: The UnJS HTTP Framework is Rebuilt on Web Standards — A minimal HTTP framework best known for powering Nitro and Nuxt’s server layer. v2 is a rewrite around standard Request and Response, so one app runs on Node, Bun, Deno and Workers, with URLPattern-style routing and (event, next) middleware. More info here.

Pooya Parsa

🤖 Klattsch: Retro 1980s Vocal Synthesis — 1980s-style phonemes to speech in a single npm package! It's very flexible, you can even make it sing, akin to HAL in 2001. Works in Node but you can also run it in the browser.

Crash United

Feedsmith 3.0: Fast Web Feed Parser and Generator — Parse and generate RSS, Atom, and JSON feeds from JavaScript, in both browsers and Node. v2.x users will find this migration guide useful.

Maciej Lamberski

  • pnpm 12.10 – An experimental loaded linker lets Node load dependencies straight from pnpm's store, skipping node_modules linking.

  • Hono 5.0 RC – The web-standards server framework goes ESM-only, requires Node 22.12+, and moves runtime adapters into separate packages.

  • Execa 10.1 – The process execution library fixes behaviors you may have relied on, like extendEnv: false still inheriting process.env.

  • Effect 4.0 – The TypeScript effect system gets a rewritten dependency-free core and consolidated packages.

  • ⚠️ Handlebars 4.7.10 – Fixes two critical JavaScript injection flaws. Earlier 4.x releases are affected.

  • he 2.0 – Mathias Bynens' HTML entity encoder/decoder gets its first release in 8 years and moves to ESM with named exports.

📰 Classifieds

CodeAF fixed 2x OpenCode's issues and nearly 4x Claude Code's on the same model, at up to 4.8x less per fix. New release, open source.


🚫 Ban the device, not just the account. Fingerprint's visitor ID catches ban evaders — even incognito or behind a proxy.

📢  Elsewhere in the ecosystem

Issue 642 #643