●Change8

Migrating to Node.js v22.22.0

Version v22.22.0 introduces 2 breaking changes. This guide details how to update your code.

Released: 1/13/2026

2
Breaking Changes
2
Migration Steps
6
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

TLSSocketfutimessymlink APIsasync_hooksunsafe buffer creationtls callback exceptions

Breaking Changes

●Issue #1

Refactor of unsafe buffer creation removed the zero-fill toggle. Code relying on the previous behavior of zero-filling might now see uninitialized memory if not explicitly handled.

●Issue #2

Symlink APIs now require full read and write permissions, which may break existing code that previously operated with fewer permissions.

Migration Steps

  1. 1
    If using unsafe buffer creation, ensure that explicit zero-filling is performed if required, as the automatic zero-fill toggle has been removed.
  2. 2
    Verify that processes interacting with symlink APIs have full read and write permissions, or update the application logic to handle potential permission errors.

Release Summary

This is a security release addressing several CVEs by improving TLS error handling, updating dependency versions, and tightening permissions around symlink operations and buffer creation.

Need More Details?

View the full release notes and all changes for Node.js v22.22.0.

View Full Changelog