Skip to content

👷 Update Node.js to v26#4698

Open
renovate[bot] wants to merge 7 commits into
mainfrom
renovate/node-26.x
Open

👷 Update Node.js to v26#4698
renovate[bot] wants to merge 7 commits into
mainfrom
renovate/node-26.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 29, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
node stage major 25.9.0-bookworm-slim26.2.0-bookworm-slim 26.3.0-bookworm-slim

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

nodejs/node (node)

v26.2.0: 2026-05-20, Version 26.2.0 (Current), @​aduh95

Compare Source

Notable Changes
  • [189d43a193] - doc: mark stream.compose stable (Matteo Collina) #​62562
  • [f858c6140e] - (SEMVER-MINOR) fs: add Temporal.Instant support to Stats and BigIntStats (Livia Medeiros) #​60789
  • [0cbb3895df] - (SEMVER-MINOR) http: add writeInformation to send arbitrary 1xx status codes (Tim Perry) #​63155
Commits

v26.1.0: 2026-05-07, Version 26.1.0 (Current), @​aduh95

Compare Source

Notable Changes
Experimental node:ffi module

Node.js now includes an experimental node:ffi module for loading dynamic
libraries and calling native symbols from JavaScript.

The API is gated behind the --experimental-ffi flag and, when the Permission
Model is enabled, requires --allow-ffi.

This API is inherently unsafe. Invalid pointers, incorrect signatures, or accessing memory
after it has been freed can crash the process or corrupt memory.

Contributed by Paolo Insogna in #​62072.

Other Notable Changes
  • [34a6454fe3] - (SEMVER-MINOR) buffer: add end parameter (Robert Nagy) #​62390
  • [073e84d7fe] - (SEMVER-MINOR) crypto: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) #​62527
  • [5b9cb10a5f] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [98f9becd16] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [06defaa2ea] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [db66a963bf] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [87adb3472b] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [9047ec12ce] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [ab66de8eaa] - (SEMVER-MINOR) process: throw on execve(2) failure instead of aborting (Bryan English) #​62878
  • [8273682c87] - (SEMVER-MINOR) src: allow empty --experimental-config-file (Marco Ippolito) #​61610
  • [fbff28f7e6] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [a8c773a0c7] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [b883a5eaea] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [a21ae1771e] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [b85c73ff10] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner May 29, 2026 14:30
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label May 29, 2026
@datadog-datadog-prod-us1-2
Copy link
Copy Markdown

datadog-datadog-prod-us1-2 Bot commented May 29, 2026

Pipelines  Tests

Fix all issues with BitsAI

⚠️ Warnings

🚦 1 Pipeline job failed

DataDog/browser-sdk | check-node-version   View in Datadog   GitLab

See error Command 'yarn' not found during script execution.

ℹ️ Info

No other issues found (see more)

🧪 All tests passed
❄️ No new flaky tests detected

🎯 Code Coverage (details)
Patch Coverage: 100.00%
Overall Coverage: 76.70% (+0.00%)

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: aaa23c0 | Docs | Datadog PR Page | Give us feedback!

@cit-pr-commenter-54b7da
Copy link
Copy Markdown

cit-pr-commenter-54b7da Bot commented May 29, 2026

Bundles Sizes Evolution

📦 Bundle Name Base Size Local Size 𝚫 𝚫% Status
Rum 171.78 KiB 171.78 KiB 0 B 0.00%
Rum Profiler 7.88 KiB 7.88 KiB 0 B 0.00%
Rum Recorder 21.21 KiB 21.21 KiB 0 B 0.00%
Logs 54.30 KiB 54.30 KiB 0 B 0.00%
Rum Slim 129.68 KiB 129.68 KiB 0 B 0.00%
Worker 22.96 KiB 22.96 KiB 0 B 0.00%

@bdibon
Copy link
Copy Markdown
Contributor

bdibon commented Jun 1, 2026

The ci-image job fails, it seems like the installation of playwright hangs forever after downloading Chrome. Will try again with a higher version of playwright.

@renovate renovate Bot force-pushed the renovate/node-26.x branch 2 times, most recently from 29508da to 7140af0 Compare June 3, 2026 10:14
@thomas-lebeau
Copy link
Copy Markdown
Collaborator

Blocked: ci-image rebuild hangs on Node 26 due to a Playwright bug

The CI image rebuild for this PR hangs indefinitely. The ci-image job reaches the Playwright browser install step (npx playwright@1.59.1 install --with-deps chromium firefox webkit), downloads Chromium to 100%, then deadlocks during extraction and never finishes.

Root cause: microsoft/playwright#40724 — a yauzl stream regression that deadlocks browser extraction on Node ≥ 24.16.0 / Node 26.x in Playwright < 1.60.0. Fixed in Playwright 1.60.0.

This PR can't go green on a CI-image rebuild alone — the rebuild itself is what's broken. It needs @playwright/test bumped to ≥ 1.60.0 first. Holding this PR until Renovate bumps Playwright on the branch (or a separate Playwright bump lands on main), then re-running the ci-image rebuild.

@renovate renovate Bot force-pushed the renovate/node-26.x branch from 9d1a5b4 to 9e4bde9 Compare June 3, 2026 14:40
@thomas-lebeau
Copy link
Copy Markdown
Collaborator

/trigger-ci

@gh-worker-devflow-routing-ef8351
Copy link
Copy Markdown

gh-worker-devflow-routing-ef8351 Bot commented Jun 4, 2026

View all feedbacks in Devflow UI.

2026-06-04 05:37:22 UTC ℹ️ Start processing command /trigger-ci


2026-06-04 05:37:27 UTC ℹ️ Gitlab pipeline started

Started pipeline #116961149

@renovate renovate Bot force-pushed the renovate/node-26.x branch from 287cd30 to 8999929 Compare June 4, 2026 05:47
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Jun 5, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

…ode 20 helper stage

Node 26 has a yauzl extraction deadlock bug (playwright/playwright#40724) that
affects Playwright < 1.60.0. Use a Node 20 build stage to install the 1.40.1
browsers and COPY the binaries into the Node 26 image to avoid the deadlock.
Node 26 no longer bundles yarn — corepack enable makes it available.
Node 26 slim images don't bundle yarn or corepack.
Node 26 slim doesn't bundle yarn; CI jobs all need it.
The multi-stage Dockerfile now starts with a helper FROM that contains
"1.40.1" in a comment, confusing the version extractor. Iterate lines
to find the main stage FROM (no AS clause) instead of assuming line 1.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants