2026-06-01, Version 26.3.0 (Current)

Notable changes:

buffer:
  * (SEMVER-MINOR) increase `Buffer.poolSize` default to 64 KiB (Matteo Collina) #63597
crypto:
  * update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527
doc:
  * downgrade macOS x64 support to Tier 2 (Antoine du Hamel) #63055
http:
  * (SEMVER-MINOR) add `httpValidation` option to configure header value validation (RajeshKumar11) #61597
inspector:
  * (SEMVER-MINOR) expose precise coverage start to JS runtime (sangwook) #63079
lib,permission:
  * (SEMVER-MINOR) add `permission.drop` (Rafael Gonzaga) #62672

PR-URL: #63664

Author: aduh95

CHANGELOG.md

@@ -42,7 +42,8 @@ release.
 </tr>
 <tr>
   <td valign="top">
-<b><a href="doc/changelogs/CHANGELOG_V26.md#26.2.0">26.2.0</a></b><br/>
+<b><a href="doc/changelogs/CHANGELOG_V26.md#26.3.0">26.3.0</a></b><br/>
+<a href="doc/changelogs/CHANGELOG_V26.md#26.2.0">26.2.0</a><br/>
 <a href="doc/changelogs/CHANGELOG_V26.md#26.1.0">26.1.0</a><br/>
 <a href="doc/changelogs/CHANGELOG_V26.md#26.0.0">26.0.0</a><br/>
   </td>

doc/api/buffer.md

@@ -1514,7 +1514,7 @@ console.log(Buffer.isEncoding(''));
 <!-- YAML
 added: v0.11.3
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/63597
     description: Default raised from 8192 to 65536.
 -->

doc/api/debugger.md

@@ -237,7 +237,7 @@ added:
   - v26.1.0
   - v24.16.0
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/63437
     description: Add `probe_failure` terminal `error` event for inspector-side mid-session
         failures, and `error.details` for additional context on per-hit and terminal errors.

doc/api/http.md

@@ -3680,7 +3680,7 @@ Found'`.
 <!-- YAML
 added: v0.1.13
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/61597
     description: The `httpValidation` option is supported now.
   - version:
@@ -4005,7 +4005,7 @@ This can be overridden for servers and client requests by passing the
 <!-- YAML
 added: v0.3.6
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/61597
     description: The `httpValidation` option is supported now.
   - version:

doc/api/process.md

@@ -3171,7 +3171,7 @@ process.permission.has('fs.read');
 ### `process.permission.drop(scope[, reference])`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 > Stability: 1.1 - Active Development

doc/api/quic.md

@@ -926,7 +926,7 @@ A `QuicSession` represents the local side of a QUIC connection.
 ### `session.applicationOptions`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {quic.ApplicationOptions}
@@ -1047,7 +1047,7 @@ True if `session.destroy()` has been called. Read only.
 ### `session.localTransportParams`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {quic.TransportParams|null}
@@ -1351,7 +1351,7 @@ The local and remote socket addresses associated with the session. Read only.
 ### `session.remoteTransportParams`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {quic.TransportParams|null|undefined}
@@ -2319,7 +2319,7 @@ added: v23.8.0
 ### `streamStats.bytesAccumulated`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {bigint}
@@ -2381,7 +2381,7 @@ added: v23.8.0
 ### `streamStats.maxBytesAccumulated`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {bigint}
@@ -2437,7 +2437,7 @@ added: v23.8.0
 ### type: `ApplicationOptions`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {Object}
@@ -2603,7 +2603,7 @@ When `true`, indicates that the endpoint should bind only to IPv6 addresses.
 #### `endpointOptions.reusePort`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {boolean}
@@ -3128,7 +3128,7 @@ to complete before timing out.
 #### `sessionOptions.initialRtt`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {bigint|number}
@@ -3365,7 +3365,7 @@ creating a session. The negotiated values can be observed via the
 #### `transportParams.initialSCID`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {string}
@@ -3378,7 +3378,7 @@ available in the `session.localTransportParams` and
 #### `transportParams.originalDCID`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {string}
@@ -3504,7 +3504,7 @@ a datagram that can be _sent_ is determined by the peer's
 #### `transportParams.retrySCID`
 
 <!-- YAML
-added: REPLACEME
+added: v26.3.0
 -->
 
 * Type: {string}

doc/api/test.md

@@ -3437,7 +3437,7 @@ added:
   - v18.9.0
   - v16.19.0
 changes:
-  - version: REPLACEME
+  - version: v26.3.0
     pr-url: https://github.com/nodejs/node/pull/63435
     description: Added `parentId` to test events that carry a `testId`.
   - version: