Node.js 26.10.0 Adds util.throttle, util.debounce and PKCS#12 Parsing

What happened

Node.js 26.10.0 was released on 22 September 2026 in the Current release line. The release post, prepared by Antoine du Hamel, lists a dozen SEMVER-MINOR additions along with the usual run of fixes across the code base.

What we know

The notable changes section names these additions:

• crypto.parsePKCS12() for reading PKCS#12 bundles.
• util.throttle and util.debounce, plus util.markPromiseAsHandled.
• fs.openAsBlobSync, a synchronous counterpart to opening a file as a Blob.
• In net, support for sending a net.BoundSocket to worker threads and child processes.
• In perf_hooks, a SlidingWindowHistogram and support for qrde analysis in Histogram.
• In the built-in SQLite module, binding undefined now maps to NULL.
• In the FFI module, loading libraries from a mounted virtual file system.

The longer commit list also includes work on the Web Cryptography implementation, among it hybrid KEM support, and a fix for unaligned UTF-16LE decoding in Buffer.

What is not yet confirmed

The release notes do not state the stability level of each new API, so whether any of them is marked experimental has to be checked in the API documentation for 26.10.0. VoltKit has not run the release.

Why it matters

Throttle and debounce have been copied from utility libraries into countless projects; having them in node:util removes a dependency for server-side code. PKCS#12 parsing in core matters for anyone handling certificate bundles without shelling out to OpenSSL. Because this is a Current release rather than an LTS one, production users on Node.js 24 will see these APIs only when they reach that line.