Node.js v26.8.2:弃用 net 内部接口,升级 OpenSSL 至 3.5.8
2026-09-09, Version 26.8.2 (Current), @aduh95
推荐理由
net 模块内部接口 _listen2 已被弃用,虽然目前仍可用,但建议相关使用者尽早排查代码并准备迁移方案,避免未来版本升级时遭遇破坏性变更。
Notable Changes
重要变更
- [616bd3fa26] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #65593
- [ae1801eb55] - meta: refine the security vuln posture for experimental features (James M Snell) #65438
- [09feba74c8] - deps: update Undici to 8.10.2 (Node.js GitHub Bot) #65788
- [7efdbe3eb9] - deps: update OpenSSL to 3.5.8 (Node.js GitHub Bot) #65542
- [616bd3fa26] - doc: 弃用 node:net 中的 Server.prototype._listen2 (Antoine du Hamel) #65593
- [ae1801eb55] - meta: 完善实验性功能的安全漏洞态势 (James M Snell) #65438
- [09feba74c8] - deps: 更新 Undici 至 8.10.2 (Node.js GitHub Bot) #65788
- [7efdbe3eb9] - deps: 更新 OpenSSL 至 3.5.8 (Node.js GitHub Bot) #65542
Commits
提交记录
- [d8aedd6584] - build: skip dockit on riscv64 (Stewart X Addison) #62251
- [1899c274eb] - build: activate correct default flags for riscv64 (Stewart X Addison) #65708
- [ec8a3be996] - build: derive NODE_ARCH from target_cpu in the GN build (Shelley Vohr) #65491
- [b73118a507] - build,win: remove LTO parallelisation limit (Stefan Stojanovic) #65535
- [09feba74c8] - deps: update undici to 8.10.2 (Node.js GitHub Bot) #65788
- [e47c432dd6] - deps: upgrade npm to 11.19.1 (npm team) #65573
- [2fd6ce36a9] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
- [49dec2767a] - deps: update googletest to 36ba75f0ad5383a9759f17f3f72fd4661c72cb6d (Node.js GitHub Bot) #65654
- [676174a071] - deps: update simdjson to 4.6.9 (Node.js GitHub Bot) #65655
- [2f1b7fa0bb] - deps: update perfetto to 58.2 (Node.js GitHub Bot) #65656
- [12acd0ad15] - deps: update zlib to 1.3.2.1-motley-5eb4d7e (Node.js GitHub Bot) #65494
- [48631c80fb] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542
- [7efdbe3eb9] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542
- [bdc75900ee] - doc: replace node:modules documentation header (René) #65800
- [44c8a499ba] - doc: clarify return type of fs.mkdtemp* (Antoine du Hamel) #65743
- [025fb5eeb0] - doc: update changelog-maker instructions for releasing (Juan José) #65707
- [5f64847afa] - doc: add stability status to crypto.setEngine (Antoine du Hamel) #65746
- [299dee0cb9] - doc: remove outdated TLS authorized warning (Tim Perry) #65597
- [e97dcc0278] - doc: fix broken using link in ffi.md (Soul Lee) #65632
- [2c9cc7d237] - doc: fix some broken links (Antoine du Hamel) #65583
- [0c330ec329] - doc: fix stale TOC in maintaining-dependencies (greenhead) #65523
- [9c522a3a69] - doc: refactor the AI guidelines (Joyee Cheung) #65269
- [46cbf1bf8c] - doc: fix triggerAsyncId() comment in async_hooks example (soreavis) #64583
- [788904ff78] - doc: fix fsPromises.watch overflow value (Matt Radbourne) #64605
- [3d06ff19e8] - doc: clarify stream direction in options.stdio note (Avocado) #65236
- [d334838379] - doc: clarify signal listener behavior (Som Samantray) #65243
- [d55a2bd56a] - doc: add test reporter event lifecycle diagram (sangwook) #63780
- [c17dfc87de] - doc: discourage AbortSignal cleanup for long-lived resources (Efe Karasakal) #64342
- [616bd3fa26] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #65593
- [4e6d7e0ca6] - meta: cleanup targos emeritus changes (Antoine du Hamel) #65738
- [a70cfe1747] - meta: bump github/codeql-action/init from 4.37.3 to 4.37.9 (dependabot[bot]) #65714
- [e43a0ad4ce] - meta: bump github/codeql-action/autobuild from 4.37.3 to 4.37.9 (dependabot[bot]) #65717
- [99e06288f1] - meta: bump actions/checkout from 7.0.0 to 7.0.1 (dependabot[bot]) #65718
- [89662762b3] - meta: bump cachix/install-nix-action from 31.11.0 to 31.11.1 (dependabot[bot]) #65719
- [6b8f078672] - meta: bump actions/setup-node from 6.4.0 to 7.0.0 (dependabot[bot]) #65720
- [6c6fb18e63] - meta: bump step-security/harden-runner from 2.20.0 to 2.21.0 (dependabot[bot]) #65721
- [0e002e859f] - meta: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.9 (dependabot[bot]) #65722
- [98aaffe4b9] - meta: bump github/codeql-action/analyze from 4.37.3 to 4.37.9 (dependabot[bot]) #65723
- [d247cb2975] - meta: document collaborator automation (Filip Skokan) #65671
- [ae1801eb55] - meta: refine the security vuln posture for experimental features (James M Snell) #65438
- [fab81d15c3] - test: widen the gap in the resolver maxTimeout comparison (Shelley Vohr) #65780
- [62e2a6265c] - test: fix the thread-spawn handshake in the WASI threads fixture (Shelley Vohr) #65780
- [7eb20b1810] - test: only count restarts after the write in watch emit-restarted test (Shelley Vohr) #65780
- [14c3a77bc5] - test: ignore tunnel resets in proxy invalid-char-in-url test (Shelley Vohr) #65780
- [ebc99e0560] - test: handle EPIPE in closed channel test (Christian Aurich) #65770
- [5e73a2ca79] - test: deflake test-permission-net-udp-handle (Christian Aurich) #65767
- [beb669f7de] - test: deflake test-runner-coverage (Christian Aurich) #65728
- [ef4b6bfa62] - test: set type=none on IBM i for empty source (Abdirahim Musse) #65545
- [027eef0691] - test: deflake WASI poll timing checks (Filip Skokan) #65672
- [a352b0e2fe] - test: skip fs-watch-recursive-delete-race on AIX (Antoine du Hamel) #65698
- [f9ce35aa43] - test: deflake test-inspect-async-hook-setup-at-inspect (Christian Aurich) #65584
- [32281cec7b] - test: deflake test-watch-mode-restart-esm-loading-error (Christian Aurich) #65623
- [79be5d61be] - test: avoid orphaned child on Windows abort test (Kirill Saied) #65451
- [8972b8540b] - test: fix link-local dgram scope assertion (Filip Skokan) #65629
- [b7cd1d96de] - test: riscv64: skip node-api sea test (Stewart X Addison) #65569
- [7eeb9d0e57] - test: mark platform-specific tests as flaky (Filip Skokan) #65562
- [649ac82bda] - test: account for varied OpenSSL CCM final behaviours (Filip Skokan) #65542
- [050fb1a15d] - tools: bump @humanfs/node from 0.16.7 to 0.16.8 in /tools/eslint (dependabot[bot]) #65757
- [5314dda396] - tools: bump browserslist from 4.28.4 to 4.28.8 in /tools/eslint (dependabot[bot]) #65758
- [5938a08929] - tools: do not hardcode yamllint path (Antoine du Hamel) #65747
- [d8408f7415] - tools: refine contributor guidance workflow (Filip Skokan) #65745
- [196e372b69] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #65716
- [7e986b09f6] - tools: do not flag force push as invalid message (Antoine du Hamel) #65700
- [837ce2ccef] - tools: do not hardcode path to Ruff (Antoine du Hamel) #65681
- [1c7149a96a] - tools: retry first-time contributor query (Filip Skokan) #65648
- [bd310a2bea] - tools: query first-time contributor status (Filip Skokan) #65592
- [ab7b57e547] - tools: offset GitHub crons by 3 minutes (Michaël Zasso) #65612
- [62ece28eae] - tools: label PRs lacking second approval (Filip Skokan) #65538
- [68227b4029] - tools: welcome first-time contributors (Filip Skokan) #65533
- [490dc93e37] - tools: enable concurrency for eslint (Huáng Jùnliàng) #62352
- [d794676217] - typings: fix fs_event_wrap start filename type (leah-1ee) #65661
- [29e2b5a325] - typings: add fs_event_wrap internal binding types (leah-1ee) #65661
- [6357c8f56e] - typings: add stream_pipe internal binding types (Seongeun Lee) #65664
- [569720ac7f] - typings: add profiler internal binding types (Seongeun Lee) #65660
- [52ae89c69d] - typings: add ffi internal binding types (Donghoon Kang) #65734
- [22c7469062] - typings: update zlib binding declarations (이혜미) #65639
- [d8aedd6584] - build: 在 riscv64 上跳过 dockit (Stewart X Addison) #62251
- [1899c274eb] - build: 为 riscv64 激活正确的默认标志 (Stewart X Addison) #65708
- [ec8a3be996] - build: 从 GN 构建中的 target_cpu 派生 NODE_ARCH (Shelley Vohr) #65491
- [b73118a507] - build,win: 移除 LTO 并行化限制 (Stefan Stojanovic) #65535
- [09feba74c8] - deps: 更新 undici 至 8.10.2 (Node.js GitHub Bot) #65788
- [e47c432dd6] - deps: 升级 npm 至 11.19.1 (npm team) #65573
- [2fd6ce36a9] - deps: 更新 corepack 至 0.36.0 (Node.js GitHub Bot) #65653
- [49dec2767a] - deps: 更新 googletest 至 36ba75f0ad5383a9759f17f3f72fd4661c72cb6d (Node.js GitHub Bot) #65654
- [676174a071] - deps: 更新 simdjson 至 4.6.9 (Node.js GitHub Bot) #65655
- [2f1b7fa0bb] - deps: 更新 perfetto 至 58.2 (Node.js GitHub Bot) #65656
- [12acd0ad15] - deps: 更新 zlib 至 1.3.2.1-motley-5eb4d7e (Node.js GitHub Bot) #65494
- [48631c80fb] - deps: 更新 openssl-3.5.8 的 archs 文件 (Node.js GitHub Bot) #65542
- [7efdbe3eb9] - deps: 将 openssl 源码升级至 openssl-3.5.8 (Node.js GitHub Bot) #65542
- [bdc75900ee] - doc: 替换 node:modules 文档头部 (René) #65800
- [44c8a499ba] - doc: 澄清 fs.mkdtemp* 的返回类型 (Antoine du Hamel) #65743
- [025fb5eeb0] - doc: 更新发布用的 changelog-maker 说明 (Juan José) #65707
- [5f64847afa] - doc: 为 crypto.setEngine 添加稳定性状态 (Antoine du Hamel) #65746
- [299dee0cb9] - doc: 移除过时的 TLS authorized 警告 (Tim Perry) #65597
- [e97dcc0278] - doc: 修复 ffi.md 中损坏的 using 链接 (Soul Lee) #65632
- [2c9cc7d237] - doc: 修复一些损坏的链接 (Antoine du Hamel) #65583
- [0c330ec329] - doc: 修复 maintaining-dependencies 中过时的目录结构 (greenhead) #65523
- [9c522a3a69] - doc: 重构 AI 指南 (Joyee Cheung) #65269
- [46cbf1bf8c] - doc: 修复 async_hooks 示例中 triggerAsyncId() 的注释 (soreavis) #64583
- [788904ff78] - doc: 修复 fsPromises.watch 溢出值 (Matt Radbourne) #64605
- [3d06ff19e8] - doc: 澄清 options.stdio 备注中的流方向 (Avocado) #65236
- [d334838379] - doc: 澄清信号监听器行为 (Som Samantray) #65243
- [d55a2bd56a] - doc: 添加测试报告器事件生命周期图 (sangwook) #63780
- [c17dfc87de] - doc: 不建议对长期存在的资源使用 AbortSignal 清理 (Efe Karasakal) #64342
- [616bd3fa26] - doc: 弃用 node:net 中的 Server.prototype._listen2 (Antoine du Hamel) #65593
- [4e6d7e0ca6] - meta: 清理 targos 荣誉成员变更 (Antoine du Hamel) #65738
- [a70cfe1747] - meta: 将 github/codeql-action/init 从 4.37.3 升级到 4.37.9 (dependabot[bot]) #65714
- [e43a0ad4ce] - meta: 将 github/codeql-action/autobuild 从 4.37.3 升级到 4.37.9 (dependabot[bot]) #65717
- [99e06288f1] - meta: 将 actions/checkout 从 7.0.0 升级到 7.0.1 (dependabot[bot]) #65718
- [89662762b3] - meta: 将 cachix/install-nix-action 从 31.11.0 升级到 31.11.1 (dependabot[bot]) #65719
- [6b8f078672] - meta: 将 actions/setup-node 从 6.4.0 升级到 7.0.0 (dependabot[bot]) #65720
- [6c6fb18e63] - meta: 将 step-security/harden-runner 从 2.20.0 升级到 2.21.0 (dependabot[bot]) #65721
- [0e002e859f] - meta: 将 github/codeql-action/upload-sarif 从 4.37.3 升级到 4.37.9 (dependabot[bot]) #65722
- [98aaffe4b9] - meta: 将 github/codeql-action/analyze 从 4.37.3 升级到 4.37.9 (dependabot[bot]) #65723
- [d247cb2975] - meta: 记录协作者自动化流程 (Filip Skokan) #65671
- [ae1801eb55] - meta: 完善实验性功能的安全漏洞态势 (James M Snell) #65438
- [fab81d15c3] - test: 扩大解析器 maxTimeout 比较中的间隔 (Shelley Vohr) #65780
- [62e2a6265c] - test: 修复 WASI threads 夹具中的线程生成握手问题 (Shelley Vohr) #65780
- [7eb20b1810] - test: 在 watch emit-restarted 测试中,仅统计写入后的重启次数 (Shelley Vohr) #65780
- [14c3a77bc5] - test: 在 proxy invalid-char-in-url 测试中忽略隧道重置 (Shelley Vohr) #65780
- [ebc99e0560] - test: 在 closed channel 测试中处理 EPIPE (Christian Aurich) #65770
- [5e73a2ca79] - test: 消除 test-permission-net-udp-handle 测试的不稳定性 (Christian Aurich) #65767
- [beb669f7de] - test: 消除 test-runner-coverage 测试的不稳定性 (Christian Aurich) #65728
- [ef4b6bfa62] - test: 在 IBM i 上为空的源设置 type=none (Abdirahim Musse) #65545
- [027eef0691] - test: 消除 WASI poll 时序检查测试的不稳定性 (Filip Skokan) #65672
- [a352b0e2fe] - test: 在 AIX 上跳过 fs-watch-recursive-delete-race 测试 (Antoine du Hamel) #65698
- [f9ce35aa43] - test: 消除 test-inspect-async-hook-setup-at-inspect 测试的不稳定性 (Christian Aurich) #65584
- [32281cec7b] - test: 消除 test-watch-mode-restart-esm-loading-error 测试的不稳定性 (Christian Aurich) #65623
- [79be5d61be] - test: 在 Windows abort 测试中避免产生孤立子进程 (Kirill Saied) #65451
- [8972b8540b] - test: 修复 link-local dgram 范围断言 (Filip Skokan) #65629
- [b7cd1d96de] - test: riscv64: 跳过 node-api sea 测试 (Stewart X Addison) #65569
- [7eeb9d0e57] - test: 将平台特定测试标记为不稳定 (Filip Skokan) #65562
- [649ac82bda] - test: 考虑 OpenSSL CCM 最终行为的变化 (Filip Skokan) #65542
- [050fb1a15d] - tools: 在 /tools/eslint 中将 @humanfs/node 从 0.16.7 升级到 0.16.8 (dependabot[bot]) #65757
- [5314dda396] - tools: 在 /tools/eslint 中将 browserslist 从 4.28.4 升级到 4.28.8 (dependabot[bot]) #65758
- [5938a08929] - tools: 不要硬编码 yamllint 路径 (Antoine du Hamel) #65747
- [d8408f7415] - tools: 优化贡献者引导工作流 (Filip Skokan) #65745
- [196e372b69] - tools: 使用 4 个更新项升级 /tools/eslint 中的 eslint 组 (dependabot[bot]) #65716
- [7e986b09f6] - tools: 不将强制推送标记为无效消息 (Antoine du Hamel) #65700
- [837ce2ccef] - tools: 不要硬编码 Ruff 的路径 (Antoine du Hamel) #65681
- [1c7149a96a] - tools: 重试首次贡献者查询 (Filip Skokan) #65648
- [bd310a2bea] - tools: 查询首次贡献者状态 (Filip Skokan) #65592
- [ab7b57e547] - tools: 将 GitHub crons 偏移 3 分钟 (Michaël Zasso) #65612
- [62ece28eae] - tools: 为缺少第二次审批的 PR 添加标签 (Filip Skokan) #65538
- [68227b4029] - tools: 欢迎首次贡献者 (Filip Skokan) #65533
- [490dc93e37] - tools: 启用 eslint 的并发处理 (Huáng Jùnliàng) #62352
- [d794676217] - typings: 修复 fs_event_wrap start filename 的类型 (leah-1ee) #65661
- [29e2b5a325] - typings: 添加 fs_event_wrap 内部绑定类型 (leah-1ee) #65661
- [6357c8f56e] - typings: 添加 stream_pipe 内部绑定类型 (Seongeun Lee) #65664
- [569720ac7f] - typings: 添加 profiler 内部绑定类型 (Seongeun Lee) #65660
- [52ae89c69d] - typings: 添加 ffi 内部绑定类型 (Donghoon Kang) #65734
- [22c7469062] - typings: 更新 zlib 绑定声明 (이혜미) #65639
更进一步:量化金融体系
看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力