Node.js 25 released — V8 14.1, Web Storage on by default, new permission flags

Key update

Node.js 25 (Current) was released on October 15, 2025 with V8 14.1 (notable JSON.stringify and JIT/WASM pipeline improvements), Web Storage enabled by default, a permission-model refinement that includes flags like --allow-net, exposure of global ErrorEvent, a portable compile cache, and JSPI additions for WebAssembly. The release also finalizes long-deprecated APIs (for example SlowBuffer removal) and includes quality-of-life and security-forward defaults that can affect both apps and native modules. (nodejs.org)

Why it matters

This is a practical release for production teams: the V8 14.1 upgrade can yield measurable JSON and runtime performance improvements for server workloads that serialize large objects, while portable compile cache can speed up CI/build cycles. The permission-model changes (flags such as --allow-net) and web-standard APIs enabled by default mean Node is continuing to converge on browser-like, security-oriented defaults — teams should audit startup flags, CI scripts, and test suites to ensure no unintended behavior or stricter sandboxing breaks tooling. Native modules and older dependencies that relied on deprecated internals (e.g., SlowBuffer) must be tested and possibly updated; the JSPI/WebAssembly improvements open new room for higher-performance WASM integrations but may require rebuilds or bindings updates. In short: prioritize testing on Node 25, update native addons and CI images, and treat default security/web-API behavior changes as deliberate migration checkpoints rather than a drop-in upgrade. (nodejs.org)

Source

• Source