2026-06-01, Version 26.3.0 (Current)

Notable changes:

buffer:
  * (SEMVER-MINOR) increase `Buffer.poolSize` default to 64 KiB (Matteo Collina) #63597
crypto:
  * update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527
doc:
  * downgrade macOS x64 support to Tier 2 (Antoine du Hamel) #63055
http:
  * (SEMVER-MINOR) add `httpValidation` option to configure header value validation (RajeshKumar11) #61597
inspector:
  * (SEMVER-MINOR) expose precise coverage start to JS runtime (sangwook) #63079
lib,permission:
  * (SEMVER-MINOR) add `permission.drop` (Rafael Gonzaga) #62672

PR-URL: #63664

Author: aduh95

CHANGELOG.md

@@ -42,7 +42,8 @@ release.
 </tr>
 <tr>
   <td valign="top">
-<b><a href="doc/changelogs/CHANGELOG_V26.md#26.2.0">26.2.0</a></b><br/>
+<b><a href="doc/changelogs/CHANGELOG_V26.md#26.3.0">26.3.0</a></b><br/>
+<a href="doc/changelogs/CHANGELOG_V26.md#26.2.0">26.2.0</a><br/>
 <a href="doc/changelogs/CHANGELOG_V26.md#26.1.0">26.1.0</a><br/>
 <a href="doc/changelogs/CHANGELOG_V26.md#26.0.0">26.0.0</a><br/>
   </td>

doc/api/buffer.md

@@ -1514,7 +1514,7 @@ console.log(Buffer.isEncoding(''));
 <!-- YAML
 added: v0.11.3
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/63597
     description: Default raised from 8192 to 65536.
 -->

doc/api/debugger.md

@@ -236,7 +236,7 @@ debug>
 added:
   - v26.1.0
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/63437
     description: Add `probe_failure` terminal `error` event for inspector-side mid-session
         failures, and `error.details` for additional context on per-hit and terminal errors.

doc/api/http.md

@@ -3662,7 +3662,7 @@ Found'`.
 <!-- YAML
 added: v0.1.13
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/61597
     description: The `httpValidation` option is supported now.
   - version:
@@ -3987,7 +3987,7 @@ This can be overridden for servers and client requests by passing the
 <!-- YAML
 added: v0.3.6
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/61597
     description: The `httpValidation` option is supported now.
   - version:

doc/api/process.md

@@ -3170,7 +3170,7 @@ process.permission.has('fs.read');
 ### `process.permission.drop(scope[, reference])`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 > Stability: 1.1 - Active Development

doc/api/quic.md

@@ -909,7 +909,7 @@ A `QuicSession` represents the local side of a QUIC connection.
 ### `session.applicationOptions`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {quic.ApplicationOptions}
@@ -1030,7 +1030,7 @@ True if `session.destroy()` has been called. Read only.
 ### `session.localTransportParams`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {quic.TransportParams|null}
@@ -1334,7 +1334,7 @@ The local and remote socket addresses associated with the session. Read only.
 ### `session.remoteTransportParams`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {quic.TransportParams|null|undefined}
@@ -2302,7 +2302,7 @@ added: v23.8.0
 ### `streamStats.bytesAccumulated`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {bigint}
@@ -2364,7 +2364,7 @@ added: v23.8.0
 ### `streamStats.maxBytesAccumulated`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {bigint}
@@ -2420,7 +2420,7 @@ added: v23.8.0
 ### type: `ApplicationOptions`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {Object}
@@ -2586,7 +2586,7 @@ When `true`, indicates that the endpoint should bind only to IPv6 addresses.
 #### `endpointOptions.reusePort`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {boolean}
@@ -3107,7 +3107,7 @@ to complete before timing out.
 #### `sessionOptions.initialRtt`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {bigint|number}
@@ -3342,7 +3342,7 @@ creating a session. The negotiated values can be observed via the
 #### `transportParams.initialSCID`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {string}
@@ -3355,7 +3355,7 @@ available in the `session.localTransportParams` and
 #### `transportParams.originalDCID`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {string}
@@ -3481,7 +3481,7 @@ a datagram that can be _sent_ is determined by the peer's
 #### `transportParams.retrySCID`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {string}

doc/api/test.md

@@ -3435,7 +3435,7 @@ added:
   - v18.9.0
   - v16.19.0
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/63435
     description: Added `parentId` to test events that carry a `testId`.
   - version:

doc/changelogs/CHANGELOG_V26.md

@@ -23,13 +23,13 @@
 #define SRC_NODE_VERSION_H_
 
 #define NODE_MAJOR_VERSION 26
-#define NODE_MINOR_VERSION 2
-#define NODE_PATCH_VERSION 1
+#define NODE_MINOR_VERSION 3
+#define NODE_PATCH_VERSION 0
 
 #define NODE_VERSION_IS_LTS 0
 #define NODE_VERSION_LTS_CODENAME ""
 
-#define NODE_VERSION_IS_RELEASE 0
+#define NODE_VERSION_IS_RELEASE 1
 
 #ifndef NODE_STRINGIFY
 #define NODE_STRINGIFY(n) NODE_STRINGIFY_HELPER(n)