●Change8

Migrating to Node.js v24.7.0

Version v24.7.0 introduces 2 breaking changes. This guide details how to update your code.

Released: 8/27/2025

2
Breaking Changes
3
Migration Steps
16
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

crypto.encapsulatecrypto.decapsulatecrypto.signcrypto.verifycrypto.argon2crypto.argon2Syncsubtle.getPublicKeySubtleCrypto.supportshttp.Agenth2Stream.respondCompressionStreamDecompressionStreamnode:cryptonode:httpnode:http2node:stream

Breaking Changes

●Issue #1

Removal of several root certificates (GlobalSign Root CA, Entrust.net Premium 2048, Baltimore CyberTrust, Comodo AAA, XRamp Global, Go Daddy Class 2, Starfield Class 2) may break TLS connections to servers relying on these CAs.

●Issue #2

Web Cryptography HMAC now requires a key length when using SHA-3 hashes.

Migration Steps

  1. 1
    If using Single Executable Applications, update your configuration JSON to include 'execArgv' and 'execArgvExtension' if you need to control runtime flags.
  2. 2
    Verify TLS connectivity if your infrastructure relies on the removed root certificates from GlobalSign, Entrust, Baltimore, Comodo, XRamp, Go Daddy, or Starfield.
  3. 3
    Update Web Cryptography HMAC implementations using SHA-3 to explicitly provide a key length.

Release Summary

This release introduces Post-Quantum Cryptography support in node:crypto and the Web Cryptography API, adds Argon2 password hashing, and enables execution argument configuration for Single Executable Applications.

Need More Details?

View the full release notes and all changes for Node.js v24.7.0.

View Full Changelog