Node.js 25, a popular open-source JavaScript runtime for building server apps, is officially out, with a main highlight being the upgrade of the V8 JavaScript engine to version 14.1, bringing noticeable speed improvements to JSON.stringify() and adding built-in base64 and hex conversion support for Uint8Array.
On top of that, in this release, the permission model expands with the new --allow-net flag, giving developers more precise control over what network resources an application can access.
At the same time, Web Storage—previously experimental—is now enabled by default, aligning Node.js more closely with standard browser APIs. The global ErrorEvent object is also now available out of the box, improving compatibility with modern JavaScript practices across different environments.
Node.js 25 also finalizes the removal of many long-deprecated APIs. This includes the complete end-of-life of SlowBuffer, deprecated crypto options, and outdated fs and assert methods. These removals help simplify the codebase and reduce potential security risks stemming from legacy features.
On the usability front, this update introduces a portable compile cache option, making it easier to reuse compilation artifacts across environments. Developers working with WebAssembly will also appreciate JSPI, which enables smoother interaction between async JavaScript and WebAssembly code.
Other changes include updated minimum compiler versions, with Clang 19 now required for builds, and continued cleanup across internal modules to modernize the code and remove deprecated functionality.
Node.js 25 binaries and source code are available for all major platforms, including Linux, macOS, and Windows. For developers maintaining older projects, note that several deprecated APIs have now reached end-of-life, so testing before upgrading is highly recommended.
For more information, see the announcement.
