Node.js 24.21.0 (LTS)

This release is an LTS update for Node.js 24, bringing a mix of security patches, new features, and performance work. The most notable changes are the dependency updates: OpenSSL moves to 3.5.8 and root certificates to NSS 3.126, which directly affect TLS and certificate validation. For engineers running Node.js in production, these updates are the primary reason to upgrade, as they address known vulnerabilities and refresh the trust store.

The new SEMVER-MINOR feature allows loading private keys through STORE loaders, which is useful for environments where keys are stored in hardware security modules or custom stores. This reduces the need for custom code to read key material. However, adopting it requires understanding the STORE loader API and ensuring your key storage is compatible. The non-throwing MIMEType.parse utility also adds a safer way to parse MIME types without exceptions, which can simplify error handling in user-facing code.

Performance improvements target net.BlockList and the histogram implementation. net.BlockList gets a performance boost, which is relevant for applications that do heavy IP filtering. The histogram improvements include statistical hypothesis testing in perf_hooks, allowing more sophisticated analysis of performance data. These changes are incremental but can reduce overhead in high-throughput scenarios.

The cost of adopting this release is the usual: testing your application against the new OpenSSL and Undici versions, and verifying that any custom crypto or network code still behaves as expected. The update to Undici 7.29.1 may introduce subtle changes in HTTP behavior. Also, the build system deprecates always-enabled --enable-static, which could affect custom builds. The release stops working if you rely on older OpenSSL features that were removed or changed, though the changelog does not indicate breaking changes beyond the usual.

Overall, this is a routine LTS release with meaningful security and feature updates. Engineers should prioritize upgrading for the OpenSSL and NSS changes, then evaluate the new STORE loader and performance improvements based on their use cases. As with any Node.js release, running the full test suite against this version is recommended before deployment.