●Change8

Migrating to Node.js v20.20.0

Version v20.20.0 introduces 2 breaking changes. This guide details how to update your code.

Released: 1/13/2026

2
Breaking Changes
2
Migration Steps
6
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

futimesTLSSocketsymlink APIsasync_hooksunsafe buffer creationtls callback exceptions

Breaking Changes

●Issue #1

The refactoring of unsafe buffer creation removed the zero-fill toggle. Code relying on this toggle for buffer initialization behavior may need adjustment.

●Issue #2

Symlink APIs now require full read and write permissions, which might break existing operations that previously succeeded with fewer permissions.

Migration Steps

  1. 1
    Review usage of unsafe buffer creation if relying on the previous zero-fill toggle behavior.
  2. 2
    Ensure applications using symlink APIs have the necessary full read and write permissions if the permission model is enabled.

Release Summary

This is a security release addressing several CVEs by disabling futimes under the permission model, improving TLS error handling, tightening symlink API permissions, and fixing stack overflow and buffer creation issues.

Need More Details?

View the full release notes and all changes for Node.js v20.20.0.

View Full Changelog