## nodejs/node — v26.5.0…v26.5.1

_14 commits._

### Backend
- **2026-07-29, Version 26.5.1 (Current)** (9e6bf8d)
- **deps: update llhttp to 9.4.3** (af0bf96)
- **deps: update undici to 8.9.0** (0354678)
- **zlib: throw on out-of-bounds write buffers** (b3fbb6e)
- **http: reject requests exceeding max header count** (064d339)
- **permission: avoid granting radix split nodes** (ad99d07)
- **dns: handle large resolveAny address replies** (dbeeaee)
- **sqlite: invalidate tag store iterators on statement reset** (d08fde8)
- **https: bind identity checks to session reuse** (c7ec3dc)
- **permission: check final report output path** (6122200)
- **https: distinguish PFX object-array agent keys** (8f66692)
- **http2: defer rst stream while in scope** (23b94c8)
- **permission: enforce fs write permission for trace events** (3cb607d)
- **Working on v26.5.1** (955e669)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/nodejs/node?utm_source=github-action)._