## nodejs/node — v26.3.0…v26.3.1

_19 commits._

### Fixes
- **http: fix response queue poisoning in http.Agent** (bc0b538)
- **tls: fix case-sensitive SNI context matching** (a14c158)

### Backend
- **2026-06-18, Version 26.3.1 (Current)** (c8d3916)
- **crypto: guard WebCrypto cipher output length** (98fbc89)
- **permission: guard pipe open and chmod with net scope** (a67dd46)
- **permission: disable FileHandle utimes with permission model** (7057c3f)
- **tls: bind reusable sessions to authenticated host** (d1be630)
- **dns,net: reject hostnames with embedded NUL bytes** (bd1214a)
- **http2: cap originSet size to prevent unbounded memory growth** (87d847b)
- **deps: update llhttp to 9.4.2** (110840f)
- **tls: normalize hostname for server identity checks** (ebda734)
- **permission: handle process.chdir on writereport** (6bc17a6)
- **lib,test: redact proxy credentials in tunnel errors** (9308084)
- **deps: update undici to 8.5.0** (8d36d52)
- **deps: update undici to 8.4.0** (2e6d039)
- **deps: update archs files for openssl-3.5.7** (5a17d5b)
- **deps: upgrade openssl sources to openssl-3.5.7** (362725d)
- **Working on v26.3.1** (619b38e)

### Tests
- **test: add session reuse host verification regressions** (c8668be)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/nodejs/node?utm_source=github-action)._