SQLite

Node.js 26.11.0 renames DatabaseSync and StatementSync to Database and Statement with aliases kept, adds --process-timeout, and 26.11.1 reverts three commits.

Turso, which rewrote SQLite from scratch in Rust, is now building a Postgres-speaking frontend on the same engine, aiming to be what its CEO calls 'the LLVM of databases.'

SQLite's own CVE tracker and the National Vulnerability Database both rejected six reports as AI-hallucinated after a JFrog researcher found the underlying code and PoCs didn't exist or didn't work.

SQLite 3.52.0, expected to release around March 11, 2026, will add ALTER TABLE support for NOT NULL and CHECK constraints, a new Query Result Formatter for the CLI, two new JSON array functions, and query planner improvements.

Node.js published versions 25.6.0, 25.6.1, and 25.7.0 across February 2026, advancing built-in SQLite to release-candidate status, extending Single Executable Applications to ESM entry points, and adding SIMD-accelerated text encoding.