Node.js v24.18.0 adds post-quantum and SHA-3 WebCrypto, updates root certs

Category: Languages
Status: confirmed
Sources: Node.js v24.18.0 release
Summary: Node.js published v24.18.0 on 2026-06-23 on the v24 LTS line. Notable changes include updated root certificates (NSS 3.123.1), a larger default Buffer.poolSize (64 KiB), new TurboSHAKE and KangarooTwelve Web Cryptography algorithms, and ML-DSA and ML-KEM post-quantum algorithms wired up when building against BoringSSL, plus an HTTP method to send arbitrary 1xx informational responses.
Why it matters: The crypto additions bring post-quantum and SHA-3-family primitives into the supported LTS line, and the root-certificate refresh affects TLS trust for deployed services.
Follow-up: Track whether the post-quantum WebCrypto algorithms reach default (non-BoringSSL) builds.