This release adds 2 notable features for engineering teams evaluating rollout.
Published 2mo
Network Security
✓ No known CVEs patched
✓ No known CVEs patched in this version
Affected surfaces
deps
breaking_upgrade
Summary
AI summaryAdded support for Node.js 24, 25, and 26.
Full changelog
Node runtime support
- Added release validation for the same N-API prebuilds on Node.js 24, 25, and 26.
- Kept prebuild output split by supported OS/arch/libc instead of Node major ABI.
- Added a Node-API boundary guard so release checks fail if direct Node, V8, NAN, or libuv addon APIs are introduced.
Release automation
- Bumped the package line to
0.8.3, including Cargo metadata, native sidecar package manifests, and root optional sidecar pins. - Updated the release workflow so npm publishing runs only after prebuild creation and Node 24/25/26 validation complete.
- Preserved the publish order of native sidecar packages first and the root
@currentspace/http3package last.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Http3
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]